deps: Bump the minor-and-patch group with 16 updates by dependabot[bot] · Pull Request #199 · ivanball/MMCA.Common

Added support for the Web Account Manager (WAM) broker for the supported Microsoft Entra ID authentication modes. A new ActiveDirectoryAuthenticationProviderOptions options bag and a corresponding ActiveDirectoryAuthenticationProvider(ActiveDirectoryAuthenticationProviderOptions options) constructor were introduced, exposing a UseWamBroker property (alongside ApplicationClientId and DeviceCodeFlowCallback).
(#4288, #4387)
Added a cross-platform SetParentActivityOrWindowFunc(Func<object> parentActivityOrWindowFunc) method so callers can supply a parent window handle on Windows or a parent Activity/UIViewController on Android/iOS/MAUI.

Who Benefits:

Applications using ActiveDirectoryInteractive and other supported Entra ID authentication modes on Windows benefit from the WAM broker's improved security (tokens are brokered by the OS), single sign-on with the logged-in Windows account, and support for Conditional Access and Windows Hello.

Impact:

When you supply your ApplicationClientId, WAM is opt-in via ActiveDirectoryAuthenticationProviderOptions.UseWamBroker. Consider enabling it when you want OS-brokered tokens, single sign-on with the signed-in Windows account, Windows Hello, and Conditional Access support.
UseWamBroker is a Windows-only setting and has no effect on non-Windows platforms, where interactive Entra ID flows always use the system browser.
Prefer the new options-bag constructor over the positional-argument overloads in new code.

var options = new ActiveDirectoryAuthenticationProviderOptions
{
    ApplicationClientId = "<your-app-client-id>",
    // Enable WAM (Windows only) for OS-brokered tokens, SSO, Windows Hello, and Conditional Access.
    UseWamBroker = true,
};
var provider = new ActiveDirectoryAuthenticationProvider(options);
// Supply the parent window/activity that owns the interactive sign-in prompt.
provider.SetParentActivityOrWindowFunc(() => parentWindowHandle);
SqlAuthenticationProvider.SetProvider(SqlAuthenticationMethod.ActiveDirectoryInteractive, provider);

Changed

Hardened TDS token parsing with data-length bounds checks

What Changed:

Added bounds checking when parsing TDS token data lengths. The parser now validates the declared length of incoming token data against the available buffer before reading, rejecting malformed or out-of-range length values instead of reading past the intended boundary.
(#4340, #4359)

Who Benefits:

All consumers benefit from improved resilience against malformed or hostile TDS responses. A server (or man-in-the-middle) sending an invalid token length can no longer drive the parser to read beyond the declared payload.

Impact:
... (truncated)

6.1.5

This update brings the following changes since the 6.1.4 release:

Fixed

Fixed a connection performance regression where SPN (Service Principal Name) generation was triggered for non-integrated authentication modes (e.g., SQL authentication) on the native SNI path, causing unnecessary DNS lookups and significantly slower connection times. Only affects .NET on Windows (not .NET Framework). (#3523, #3946)
Fixed ExecuteScalar to properly propagate errors when the server sends data followed by an error token. Previously, errors such as conversion failures during WHERE clause evaluation were silently consumed during SqlDataReader.Close() instead of being thrown to the caller, which could result in transactions being unexpectedly zombied. (#3736, #3947)
Fixed SqlDataReader.GetFieldType and SqlDataReader.GetProviderSpecificFieldType to return the correct type (SqlVector<float>) for vector float32 columns. Previously, these methods did not follow the same type-resolution logic as GetValue, returning an incorrect type for vector columns. (#4104, #4151)

Target Platform Support

.NET Framework 4.6.2+ (Windows x86, Windows x64, Windows ARM64)
.NET 8.0+ (Windows x86, Windows x64, Windows ARM64, Linux, macOS)
.NET Standard 2.0+ (Windows x86, Windows x64, Windows ARM64, Linux, macOS)

Dependencies

.NET Framework 4.6.2

Azure.Core 1.50.0
Azure.Identity 1.17.1
Microsoft.Data.SqlClient.SNI 6.0.2
Microsoft.Extensions.Caching.Memory 8.0.1
Microsoft.Identity.Client 4.80.0
Microsoft.IdentityModel.JsonWebTokens 7.7.1
Microsoft.IdentityModel.Protocols.OpenIdConnect 7.7.1
System.Buffers 4.6.1
System.Data.Common 4.3.0
System.Diagnostics.DiagnosticSource 8.0.1
System.IdentityModel.Tokens.Jwt 7.7.1
System.Memory 4.6.3
System.Security.Cryptography.Pkcs 8.0.1
System.Text.Json 8.0.6
System.Text.RegularExpressions 4.3.1

.NET 8.0

Azure.Core 1.50.0
Azure.Identity 1.17.1
Microsoft.Data.SqlClient.SNI.runtime 6.0.2
Microsoft.Extensions.Caching.Memory 8.0.1
Microsoft.Identity.Client 4.80.0
Microsoft.IdentityModel.JsonWebTokens 7.7.1
Microsoft.IdentityModel.Protocols.OpenIdConnect 7.7.1
Microsoft.SqlServer.Server 1.0.0
System.Configuration.ConfigurationManager 8.0.1
System.Diagnostics.DiagnosticSource 8.0.1
System.IdentityModel.Tokens.Jwt 7.7.1
System.Security.Cryptography.Pkcs 8.0.1

.NET 9.0

... (truncated)

6.1.4

This update brings the following changes since the 6.1.3 release:

Fixed

Fixed NullReferenceException issue with SqlDataAdapter when processing batch scenarios where certain SQL RPC calls may not include system parameters.
(#3877)
Fixed connection pooling issue where extra connection deactivation was causing active connection counts to go negative.
(#3776)

Added

AppContext Switch for enabling MultiSubnetFailover

What Changed:

Added new AppContext switch Switch.Microsoft.Data.SqlClient.EnableMultiSubnetFailoverByDefault to set MultiSubnetFailover=true by default in connection string.
(#3851)

Who Benefits:

Applications that need MultiSubnetFailover enabled globally without modifying connection strings.

Impact:

Applications can now enable MultiSubnetFailover globally using one of the following methods:

// In application code
AppContext.SetSwitch("Switch.Microsoft.Data.SqlClient.EnableMultiSubnetFailoverByDefault", true);

// In runtimeconfig.json
{
  "configProperties": {
    "Switch.Microsoft.Data.SqlClient.EnableMultiSubnetFailoverByDefault": true
  }
}

<!-- In App.Config -->
<runtime>
  <AppContextSwitchOverrides value="Switch.Microsoft.Data.SqlClient.EnableMultiSubnetFailoverByDefault=true" />
</runtime>

Changed

Optimized SqlStatistics execution timing by using Environment.TickCount instead of more expensive timing mechanisms.
... (truncated)

6.1.3

This update includes the following changes since the 6.1.2 release:

Added

App Context Switch for Ignoring Server-Provided Failover Partner

What Changed:

A new app context switch Switch.Microsoft.Data.SqlClient.IgnoreServerProvidedFailoverPartner was introduced to let the client ignore server-provided failover partner info in Basic Availability Groups (BAGs). When the switch is enabled, only the failover partner specified in the connection string is used; server-supplied partner values are skipped. This context switch was introduced in PR #3702.

Who Benefits:

Applications connecting to SQL Server BAGs using TCP and custom ports, especially where the server's provided partner name lacks the protocol, host, or port. This avoids connection failures when the server-provided partner is incompatible or incomplete.
Teams who manage availability groups and rely on client-side control of failover behavior in heterogeneous networking environments.

Impact:

If your environment might be affected (i.e., you operate a BAG with custom ports, or have experienced failures after failover), you can enable the new switch in your application:

AppContext.SetSwitch("Switch.Microsoft.Data.SqlClient.IgnoreServerProvidedFailoverPartner", true);

Then, ensure your connection string includes your preferred failover partner (with correct tcp:host,port) so that the client uses that instead of the server's suggestion.
Without enabling this, by default, the client continues to prefer the server-provided partner, maintaining backwards compatibility.

Fixed

Fixed an issue to ensure reliable metrics initialization during startup, preventing missed telemetry when EventSource is enabled early. (#3718)

Target Platform Support

.NET Framework 4.6.2+ (Windows ARM64, Windows x86, Windows x64)
.NET 8.0+ (Windows x86, Windows x64, Windows ARM64, Windows ARM, Linux, macOS)

Dependencies

.NET Framework 4.6.2+

Azure.Core 1.47.1
Azure.Identity 1.14.2
Microsoft.Bcl.Cryptography 8.0.0
Microsoft.Data.SqlClient.SNI 6.0.2
Microsoft.Extensions.Caching.Memory 8.0.1
Microsoft.IdentityModel.JsonWebTokens 7.7.1
Microsoft.IdentityModel.Protocols.OpenIdConnect 7.7.1
System.Buffers 4.5.1
System.Data.Common 4.3.0
System.Security.Cryptography.Pkcs 8.0.1
System.Text.Encodings.Web 8.0.0
... (truncated)

6.1.2

This update brings the below changes over the previous stable release:

Fixed

Fixed an issue where initializing PerformanceCounters would throw System.InvalidOperationException #3629
Fixed an issue where a Custom SqlClientAuthenticationProvider was being overwritten by default implementation. #3651
Fixed a concurrency issue in connection pooling where the number of active connections could be lower than the configured maximum pool size. #3653

Commits viewable in compare view.

Updated Scalar.AspNetCore from 2.16.16 to 2.16.17.

Release notes

Sourced from Scalar.AspNetCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated SonarAnalyzer.CSharp from 10.30.0.144632 to 10.31.0.145097.

Release notes

Sourced from SonarAnalyzer.CSharp's releases.

10.31.0.145097

Release notes - .NET Analyzers - 10.31

Feature

NET-3865 Implement S8733: Potential Cartesian Explosion
NET-3875 Implement rule S8718: Client-evaluated default values should use database functions
NET-4087 Use shared secret exclusion patterns in hardcoded secrets rules
NET-4211 Update RSPEC before 10.31 release

False Positive

NET-1922 S1144 FP: When registering a service with Microsoft.Extensions.DependencyInjecion framework
NET-3928 Fix S3267 FP: Should not raise on EntityFramework IQueryables
NET-4205 Fix S1244 FP: should not raise on NaN check via x.Equals(double.NaN)

Commits viewable in compare view.

Updated System.IdentityModel.Tokens.Jwt from 8.21.0 to 8.22.0.

Release notes

Sourced from System.IdentityModel.Tokens.Jwt's releases.

8.22.0 What's Changed

Promote exception to property, add test by @westin-m in [cherry-pick] promote exception to property, add test (#3471) AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#3486
Add IgnoreCaseWhenValidatingAudience flag to audience validation by @cpp11nullptr in Backport: Add IgnoreCaseWhenValidatingAudience flag to audience validation (#3558) AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#3563

Full Changelog: AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet@8.21.0...8.22.0

Commits viewable in compare view.

Updated Testcontainers.MsSql from 4.8.0 to 4.13.0.

Release notes

Sourced from Testcontainers.MsSql's releases.

4.13.0

What's Changed

Thank you to everyone who contributed and shared their feedback 🤜🤛.

The NuGet packages for this release have been attested for supply chain security using actions/attest. This confirms the integrity and provenance of the artifacts and helps ensure they can be trusted: #33686956.

🚀 Features

feat: Add Aspire dashboard module (#1194) @NikiforovAll
feat: Add image name substitution hook (#1710) @HofmeisterAn
feat(CosmosDb): Add get method AccountEndpoint (#1707) @srollinet
feat: Improve image build failure messages (#1700) @HofmeisterAn

🐛 Bug Fixes

fix: Restore tar archive write performance regressed by padding trim (#1719) @HofmeisterAn
chore: Bump Docker.DotNet from 4.3.2 to 4.3.3 (#1714) @HofmeisterAn
chore(AspireDashboard): Cover connection string provider (#1713) @HofmeisterAn

📖 Documentation

docs: Add missing TC languages and reorder docs navigation (#1711) @mdelapenya
docs: Add note about unsupported BuildKit Dockerfile features (#1696) @HofmeisterAn
docs: Explain immutable builder behavior (#1693) @HofmeisterAn

🧹 Housekeeping

chore: Enable Dependabot cooldown (#1716) @HofmeisterAn
chore: Add nuget.config (#1715) @Rob-Hague
chore(AspireDashboard): Cover connection string provider (#1713) @HofmeisterAn
chore: Bump Docker.DotNet from 4.2.0 to 4.3.2 (#1712) @HofmeisterAn
chore: Bump sshd-docker image from 1.3.0 to 1.4.0 (#1709) @HofmeisterAn
chore: Rename runtime label and add buildkit and stale labels (#1703) @HofmeisterAn
fix: Guard expensive argument evaluation when logging (#1702) @HofmeisterAn
chore: Defer container ID truncation in logging (#1701) @HofmeisterAn
chore: Migrate to LoggerMessageAttribute (#1697) @HofmeisterAn

📦 Dependency Updates

chore(deps): Bump the actions group with 2 updates (#1721) @dependabot[bot]
chore(deps): Bump the actions group with 7 updates (#1717) @dependabot[bot]
chore: Bump Docker.DotNet from 4.3.2 to 4.3.3 (#1714) @HofmeisterAn
chore: Bump Docker.DotNet from 4.2.0 to 4.3.2 (#1712) @HofmeisterAn
chore(deps): Bump the actions group with 4 updates (#1698) @dependabot[bot]

4.12.0

What's Changed

Thanks to all contributors 👏.

The NuGet packages for this release have been attested for supply chain security using actions/attest. This confirms the integrity and provenance of the artifacts and helps ensure they can be trusted: #28009236.

⚠️ Breaking Changes

chore(deps): Bump Docker.DotNet from 3.131.1 to 4.0.2 (#1665) @HofmeisterAn

🚀 Features

feat: Add Floci module (#1690) @object
feat: Ignore port-forwarding extra host in reuse hash (#1689) @HofmeisterAn
feat: Allow devs to override the reuse hash calculation (#1688) @HofmeisterAn
feat: Add connect to network API (#1672) @HofmeisterAn
feat(LocalStack): Require auth token for 4.15 and onwards (#1667) @HofmeisterAn
chore(deps): Bump Docker.DotNet from 3.131.1 to 4.0.2 (#1665) @HofmeisterAn

🐛 Bug Fixes

fix: Trim tar record padding to avoid broken-pipe failure on Podman (#1684) @artiomchi
fix(Nats): Use healthz API for readiness probe (#1679) @eriblo01
fix: Remove KeepAlive socket option (#1671) @Angelinsky7

📖 Documentation

docs: Extend WithCommand(params string[]) documentation (#1685) @HofmeisterAn

🧹 Housekeeping

feat: Prepare next release cycle (4.12.0) (#1664) @HofmeisterAn

📦 Dependency Updates

chore(deps): Bump the actions group with 5 updates (#1687) @dependabot[bot]
chore(deps): Bump Docker.DotNet from 4.1.0 to 4.2.0 (#1686) @HofmeisterAn
chore(deps): Bump the actions group with 5 updates (#1676) @dependabot[bot]
chore(deps): Bump Docker.DotNet from 4.0.2 to 4.1.0 (#1674) @HofmeisterAn
chore(deps): Bump Docker.DotNet from 3.131.1 to 4.0.2 (#1665) @HofmeisterAn

4.11.0

What's Changed

Thanks to all contributors. Once again, really great contributions from everyone 🤝.

The NuGet packages for this release have been attested for supply chain security using actions/attest. This confirms the integrity and provenance of the artifacts and helps ensure they can be trusted: #21198535.

Please be aware that we have changed the supported and underlying image used for the Cosmos DB module. The latest tag only supports certain environments and provides a limited set of features. Microsoft has introduced a new implementation, vnext-preview, which receives more updates and features. Due to the limitations of the latest tag, we decided to replace it with vnext-preview. You find more information about the image here: https://github.com/Azure/azure-cosmos-db-emulator-docker.

⚠️ Breaking Changes

feat(CosmosDb): Update base image from latest to vnext-preview (#1324) @NelsonBN

🚀 Features

feat(CosmosDb): Update base image from latest to vnext-preview (#1324) @NelsonBN
feat: Add typed WithResourceMapping(...) overloads (#1497) @cimnine
feat: Add Seq module (#1276) @montanehamilton
feat(PostgreSql): Add WithSsl builder API (#1529) @ozkanpakdil
feat: Add Temporal module (#1635) @bgener
feat: Add module connection string provider (#1632) @HofmeisterAn
fead: Add default container connection string provider (#1630) @HofmeisterAn
feat(ServiceBus): Add method to get HTTP connection string (#1622) @NelsonBN

🐛 Bug Fixes

fix(MongoDb): Wait for post-init startup readiness before replica set initiation (#1656) @HofmeisterAn
fix(Seq): Assert connection string provider (#1645) @HofmeisterAn
fix(EventHubs): Ignore runtime property to support reuse (#1644) @franciscosamuel
fix(ServiceBus): Ignore runtime property to support reuse (#1643) @franciscosamuel
fix(ResourceReaper): Set wait strategy (#1634) @HofmeisterAn
fix(ServiceBus): Workaround health API timeout (#1625) @HofmeisterAn
fix: Do not set console buffer width (ConsoleLogger) (#1623) @HofmeisterAn
fix(EventHubs): Workaround health API timeout (#1624) @HofmeisterAn

📖 Documentation

docs(CosmosDb): Replace unsupported tag 'latest' with 'vnext-preview' (#1660) @HofmeisterAn
docs(Redis): Add example (#1641) @HofmeisterAn

🧹 Housekeeping

chore(examples): Enable NuGet restore lock mode (#1659) @HofmeisterAn
chore: Pin image digest (#1658) @HofmeisterAn
fix: Run OpenSSF Scorecard only on default branch (#1657) @HofmeisterAn
chore: Remove Git LFS tracking for .snk (#1655) @HofmeisterAn
feat: Enable Dependabot for NuGet (repo) (#1654) @HofmeisterAn
feat: Enable Dependabot for NuGet (src) (#1653) @HofmeisterAn
fix: Replace branch protection with ruleset (#1652) @HofmeisterAn
fix: Do not enforce policies for admins (#1651) @HofmeisterAn
fix: Remove missing labels from Dependabot (#1650) @HofmeisterAn
... (truncated)

4.10.0

What's Changed

Happy New Year, everyone! 🎉

Please note that going forward, we expect developers to explicitly pin the image version (testcontainers/testcontainers-dotnet#1470). We consider this a best practice and it aligns with other language implementations.

Also, due to the recent Docker Engine v29 release, TC for .NET pins the Docker Engine API version to 1.44 (see the previous release notes). You can override this default and set it to the version you're using, ideally 1.52, which corresponds to v29, if you're already running it.

⚠️ Breaking Changes

feat: Add Docker Engine v29 support (#1609) @HofmeisterAn
chore: Remove EventStoreDb module (#1599) @HofmeisterAn

🚀 Features

feat: Require explicit container image in Testcontainers.Xunit (#1612) @0xced
feat: Add Platform property to IImage interface (#1610) @HofmeisterAn
feat: Add Docker Engine v29 support (#1609) @HofmeisterAn
feat: Require explicit container image when creating container builder (#1584) @digital88
feat: Add connection string provider (#1588) @HofmeisterAn

🐛 Bug Fixes

fix(Kafka): Bump image version to prevent container crash on startup (#1604) @HofmeisterAn
fix(Elasticsearch): Use HTTP wait strategy (#1593) @digital88
fix(Milvus): Use healthcheck wait strategy (#1585) @verdie-g

📖 Documentation

docs: Pin the image version explicitly (#1605) @HofmeisterAn

🧹 Housekeeping

chore: Remove Sonar findings (#1611) @HofmeisterAn
chore: Pin Docker Engine API for GH workflow to 1.47 (#1608) @HofmeisterAn
chore: Set remaining container image explicit (#1606) @digital88
fix(Kafka): Bump image version to prevent container crash on startup (#1604) @HofmeisterAn
chore: Remove EventStoreDb test project from SLNX file (#1603) @0xced
chore: Skip unnecessary work for empty or null sequences (#1601) @HofmeisterAn
chore: Delegate container builder ctor string to IImage (#1600) @HofmeisterAn
chore: Remove EventStoreDb module (#1599) @HofmeisterAn
feat: Prepare next release cycle (4.10.0) (#1586) @HofmeisterAn

4.9.0

What's Changed

This release adds a new configuration (DOCKER_API_VERSION) that lets you pin and downgrade the Docker Engine API version. This was needed because Docker Engine v29 introduced breaking changes that affect Docker.DotNet and Testcontainers for .NET. This release pins the API version to 1.44. So far, no issues or negative side effects have been observed.

I am also working on updating Docker.DotNet to make it fully compatible with Docker Engine v29. There is already a work-in-progress PR.

Thanks to all the contributors who helped with this release 👍.

⚠️ Breaking Changes

feat: Add KurrentDb module (#1583) @diegosasw

🚀 Features

feat: Add KurrentDb module (#1583) @diegosasw
chore: Bump NuGet dependencies (#1578) @HofmeisterAn
feat: Add .NET 10 support (#1572) @HofmeisterAn
feat: Support configuring Docker API version (#1576) @HofmeisterAn
feat: Add Mosquitto module (#1522) @EtherZa
feat: Add Toxiproxy module (#1454) @iltertaha
feat: Add Grafana module (#1509) @thomhurst
feat: Add Playwright module (#1288) @alimahboubi

🐛 Bug Fixes

fix(Milvus): Set DEPLOY_MODE=STANDALONE (necessary for v2.6+) (#1569) @verdie-g
fix: Set Kusto wait strategy encoding to UTF-8 (#1567) @MattKotsenas
fix: Split ALL_CHANGED_FILES on any whitespace (#1566) @HofmeisterAn

📖 Documentation

docs: Use correct comment characters for C# language (#1564) @HofmeisterAn

🧹 Housekeeping

feat: Add SLNX file (#1579) @HofmeisterAn
chore: Update Toxiproxy NuGet dependency to a .NET compatible version (#1568) @HofmeisterAn
chore: Add script to detect which tests to run in CI (#1563) @HofmeisterAn
chore: Make the continuous delivery job fork-friendly (#1559) @0xced
feat: Prepare next release cycle (4.9.0) (#1561) @HofmeisterAn

4.8.1

What's Changed

🐛 Bug Fixes

fix: Compute correct relative Dockerfile file path (#1558) @HofmeisterAn

Commits viewable in compare view.

Updated Testcontainers.RabbitMq from 4.8.0 to 4.13.0.

Release notes

Sourced from Testcontainers.RabbitMq's releases.

4.13.0

What's Changed

Thank you to everyone who contributed and shared their feedback 🤜🤛.

The NuGet packages for this release have been attested for supply chain security using actions/attest. This confirms the integrity and provenance of the artifacts and helps ensure they can be trusted: #33686956.

🚀 Features

feat: Add Aspire dashboard module (#1194) @NikiforovAll
feat: Add image name substitution hook (#1710) @HofmeisterAn
feat(CosmosDb): Add get method AccountEndpoint (#1707) @srollinet
feat: Improve image build failure messages (#1700) @HofmeisterAn

🐛 Bug Fixes

fix: Restore tar archive write performance regressed by padding trim (#1719) @HofmeisterAn
chore: Bump Docker.DotNet from 4.3.2 to 4.3.3 (#1714) @HofmeisterAn
chore(AspireDashboard): Cover connection string provider (#1713) @HofmeisterAn

📖 Documentation

docs: Add missing TC languages and reorder docs navigation (#1711) @mdelapenya
docs: Add note about unsupported BuildKit Dockerfile features (#1696) @HofmeisterAn
docs: Explain immutable builder behavior (#1693) @HofmeisterAn

🧹 Housekeeping

chore: Enable Dependabot cooldown (#1716) @HofmeisterAn
chore: Add nuget.config (#1715) @Rob-Hague
chore(AspireDashboard): Cover connection string provider (#1713) @HofmeisterAn
chore: Bump Docker.DotNet from 4.2.0 to 4.3.2 (#1712) @HofmeisterAn
chore: Bump sshd-docker image from 1.3.0 to 1.4.0 (#1709) @HofmeisterAn
chore: Rename runtime label and add buildkit and stale labels (#1703) @HofmeisterAn
fix: Guard expensive argument evaluation when logging (#1702) @HofmeisterAn
chore: Defer container ID truncation in logging (#1701) @HofmeisterAn
chore: Migrate to LoggerMessageAttribute (#1697) @HofmeisterAn

📦 Dependency Updates

chore(deps): Bump the actions group with 2 updates (#1721) @dependabot[bot]
chore(deps): Bump the actions group with 7 updates (#1717) @dependabot[bot]
chore: Bump Docker.DotNet from 4.3.2 to 4.3.3 (#1714) @HofmeisterAn
chore: Bump Docker.DotNet from 4.2.0 to 4.3.2 (#1712) @HofmeisterAn
chore(deps): Bump the actions group with 4 updates (#1698) @dependabot[bot]

4.12.0

What's Changed

Thanks to all contributors 👏.

The NuGet packages for this release have been attested for supply chain security using actions/attest. This confirms the integrity and provenance of the artifacts and helps ensure they can be trusted: #28009236.

⚠️ Breaking Changes

chore(deps): Bump Docker.DotNet from 3.131.1 to 4.0.2 (#1665) @HofmeisterAn

🚀 Features

feat: Add Floci module (#1690) @object
feat: Ignore port-forwarding extra host in reuse hash (#1689) @HofmeisterAn
feat: Allow devs to override the reuse hash calculation (#1688) @HofmeisterAn
feat: Add connect to network API (#1672) @HofmeisterAn
feat(LocalStack): Require auth token for 4.15 and onwards (#1667) @HofmeisterAn
chore(deps): Bump Docker.DotNet from 3.131.1 to 4.0.2 (#1665) @HofmeisterAn

🐛 Bug Fixes

fix: Trim tar record padding to avoid broken-pipe failure on Podman (#1684) @artiomchi
fix(Nats): Use healthz API for readiness probe (#1679) @eriblo01
fix: Remove KeepAlive socket option (#1671) @Angelinsky7

📖 Documentation

docs: Extend WithCommand(params string[]) documentation (#1685) @HofmeisterAn

🧹 Housekeeping

feat: Prepare next release cycle (4.12.0) (#1664) @HofmeisterAn

📦 Dependency Updates

chore(deps): Bump the actions group with 5 updates (#1687) @dependabot[bot]
chore(deps): Bump Docker.DotNet from 4.1.0 to 4.2.0 (#1686) @HofmeisterAn
chore(deps): Bump the actions group with 5 updates (#1676) @dependabot[bot]
chore(deps): Bump Docker.DotNet from 4.0.2 to 4.1.0 (#1674) @HofmeisterAn
chore(deps): Bump Docker.DotNet from 3.131.1 to 4.0.2 (#1665) @HofmeisterAn

4.11.0

What's Changed

Thanks to all contributors. Once again, really great contributions from everyone 🤝.

The NuGet packages for this release have been attested for supply chain security using actions/attest. This confirms the integrity and provenance of the artifacts and helps ensure they can be trusted: #21198535.

Please be aware that we have changed the supported and underlying image used for the Cosmos DB module. The latest tag only supports certain environments and provides a limited set of features. Microsoft has introduced a new implementation, vnext-preview, which receives more updates and features. Due to the limitations of the latest tag, we decided to replace it with vnext-preview. You find more information about the image here: https://github.com/Azure/azure-cosmos-db-emulator-docker.

⚠️ Breaking Changes

feat(CosmosDb): Update base image from latest to vnext-preview (#1324) @NelsonBN

🚀 Features

feat(CosmosDb): Update base image from latest to vnext-preview (#1324) @NelsonBN
feat: Add typed WithResourceMapping(...) overloads (#1497) @cimnine
feat: Add Seq module (#1276) @montanehamilton
feat(PostgreSql): Add WithSsl builder API (#1529) @ozkanpakdil
feat: Add Temporal module (#1635) @bgener
feat: Add module connection string provider (#1632) @HofmeisterAn
fead: Add default container connection string provider (#1630) @HofmeisterAn
feat(ServiceBus): Add method to get HTTP connection string (#1622) @NelsonBN

🐛 Bug Fixes

fix(MongoDb): Wait for post-init startup readiness before replica set initiation (#1656) @HofmeisterAn
fix(Seq): Assert connection string provider (#1645) @HofmeisterAn
fix(EventHubs): Ignore runtime property to support reuse (#1644) @franciscosamuel
fix(ServiceBus): Ignore runtime property to support reuse (#1643) @franciscosamuel
fix(ResourceReaper): Set wait strategy (#1634) @HofmeisterAn
fix(ServiceBus): Workaround health API timeout (#1625) @HofmeisterAn
fix: Do not set console buffer width (ConsoleLogger) (#1623) @HofmeisterAn
fix(EventHubs): Workaround health API timeout (#1624) @HofmeisterAn

📖 Documentation

docs(CosmosDb): Replace unsupported tag 'latest' with 'vnext-preview' (#1660) @HofmeisterAn
docs(Redis): Add example (#1641) @HofmeisterAn

🧹 Housekeeping

chore(examples): Enable NuGet restore lock mode (#1659) @HofmeisterAn
chore: Pin image digest (#1658) @HofmeisterAn
fix: Run OpenSSF Scorecard only on default branch (#1657) @HofmeisterAn
chore: Remove Git LFS tracking for .snk (#1655) @HofmeisterAn
feat: Enable Dependabot for NuGet (repo) (#1654) @HofmeisterAn
feat: Enable Dependabot for NuGet (src) (#1653) @HofmeisterAn
fix: Replace branch protection with ruleset (#1652) @HofmeisterAn
fix: Do not enforce policies for admins (#1651) @HofmeisterAn
fix: Remove missing labels from Dependabot (#1650) @HofmeisterAn
... (truncated)

4.10.0

What's Changed

Happy New Year, everyone! 🎉

Please note that going forward, we expect developers to explicitly pin the image version (testcontainers/testcontainers-dotnet#1470). We consider this a best practice and it aligns with other language implementations.

Also, due to the recent Docker Engine v29 release, TC for .NET pins the Docker Engine API version to 1.44 (see the previous release notes). You can override this default and set it to the version you're using, ideally 1.52, which corresponds to v29, if you're already running it.

⚠️ Breaking Changes

feat: Add Docker Engine v29 support (#1609) @HofmeisterAn
chore: Remove EventStoreDb module (#1599) @HofmeisterAn

🚀 Features

feat: Require explicit container image in Testcontainers.Xunit (#1612) @0xced
feat: Add Platform property to IImage interface (#1610) @HofmeisterAn
feat: Add Docker Engine v29 support (#1609) @HofmeisterAn
feat: Require explicit container image when creating container builder (#1584) @digital88
feat: Add connection string provider (#1588) @HofmeisterAn

🐛 Bug Fixes

fix(Kafka): Bump image version to prevent container crash on startup (#1604) @HofmeisterAn
fix(Elasticsearch): Use HTTP wait strategy (#1593) @digital88
fix(Milvus): Use healthcheck wait strategy (#1585) @verdie-g

📖 Documentation

docs: Pin the image version explicitly (#1605) @HofmeisterAn

🧹 Housekeeping

chore: Remove Sonar findings (#1611) @HofmeisterAn
chore: Pin Docker Engine API for GH workflow to 1.47 (#1608) @HofmeisterAn
chore: Set remaining container image explicit (#1606) @digital88
fix(Kafka): Bump image version to prevent container crash on startup (#1604) @HofmeisterAn
chore: Remove EventStoreDb test project from SLNX file (#1603) @0xced
chore: Skip unnecessary work for empty or null sequences (#1601) @HofmeisterAn
chore: Delegate container builder ctor string to IImage (#1600) @HofmeisterAn
chore: Remove EventStoreDb module (#1599) @HofmeisterAn
feat: Prepare next release cycle (4.10.0) (#1586) @HofmeisterAn

4.9.0

What's Changed

This release adds a new configuration (DOCKER_API_VERSION) that lets you pin and downgrade the Docker Engine API version. This was needed because Docker Engine v29 introduced breaking changes that affect Docker.DotNet and Testcontainers for .NET. This release pins the API version to 1.44. So far, no issues or negative side effects have been observed.

I am also working on updating Docker.DotNet to make it fully compatible with Docker Engine v29. There is already a work-in-progress PR.

Thanks to all the contributors who helped with this release 👍.

⚠️ Breaking Changes

feat: Add KurrentDb module (#1583) @diegosasw

🚀 Features

feat: Add KurrentDb module (#1583) @diegosasw
chore: Bump NuGet dependencies (#1578) @HofmeisterAn
feat: Add .NET 10 support (#1572) @HofmeisterAn
feat: Support configuring Docker API version (#1576) @HofmeisterAn
feat: Add Mosquitto module (#1522) @EtherZa
feat: Add Toxiproxy module (#1454) @iltertaha
feat: Add Grafana module (#1509) @thomhurst
feat: Add Playwright module (#1288) @alimahboubi

🐛 Bug Fixes

fix(Milvus): Set DEPLOY_MODE=STANDALONE (necessary for v2.6+) (#1569) @verdie-g
fix: Set Kusto wait strategy encoding to UTF-8 (#1567) @MattKotsenas
fix: Split ALL_CHANGED_FILES on any whitespace (#1566) @HofmeisterAn

📖 Documentation

docs: Use correct comment characters for C# language (#1564) @HofmeisterAn

🧹 Housekeeping

feat: Add SLNX file (#1579) @HofmeisterAn
chore: Update Toxiproxy NuGet dependency to a .NET compatible version (#1568) @HofmeisterAn
chore: Add script to detect which tests to run in CI (#1563) @HofmeisterAn
chore: Make the continuous delivery job fork-friendly (#1559) @0xced
feat: Prepare next release cycle (4.9.0) (#1561) @HofmeisterAn

4.8.1

What's Changed

🐛 Bug Fixes

fix: Compute correct relative Dockerfile file path (#1558) @HofmeisterAn

Commits viewable in compare view.

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps AngleSharp from 1.6.0 to 1.7.0 Bumps Asp.Versioning.Mvc from 10.0.0 to 10.0.1 Bumps Asp.Versioning.Mvc.ApiExplorer from 10.0.0 to 10.0.1 Bumps bunit from 2.8.6 to 2.9.0 Bumps Grpc.AspNetCore.Server.Reflection from 2.80.0 to 2.83.0 Bumps Grpc.Net.ClientFactory from 2.80.0 to 2.83.0 Bumps MassTransit from 8.5.5 to 8.5.10 Bumps MassTransit.Azure.ServiceBus.Core from 8.5.5 to 8.5.10 Bumps MassTransit.RabbitMQ from 8.5.5 to 8.5.10 Bumps Meziantou.Analyzer from 3.0.133 to 3.0.138 Bumps Microsoft.Data.SqlClient from 6.1.1 to 6.1.6 Bumps Scalar.AspNetCore from 2.16.16 to 2.16.17 Bumps SonarAnalyzer.CSharp from 10.30.0.144632 to 10.31.0.145097 Bumps System.IdentityModel.Tokens.Jwt from 8.21.0 to 8.22.0 Bumps Testcontainers.MsSql from 4.8.0 to 4.13.0 Bumps Testcontainers.RabbitMq from 4.8.0 to 4.13.0 --- updated-dependencies: - dependency-name: AngleSharp dependency-version: 1.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: Asp.Versioning.Mvc dependency-version: 10.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Asp.Versioning.Mvc.ApiExplorer dependency-version: 10.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: bunit dependency-version: 2.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: Grpc.AspNetCore.Server.Reflection dependency-version: 2.83.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: Grpc.Net.ClientFactory dependency-version: 2.83.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: MassTransit dependency-version: 8.5.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: MassTransit.Azure.ServiceBus.Core dependency-version: 8.5.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: MassTransit.RabbitMQ dependency-version: 8.5.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Meziantou.Analyzer dependency-version: 3.0.138 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Microsoft.Data.SqlClient dependency-version: 6.1.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Scalar.AspNetCore dependency-version: 2.16.17 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: SonarAnalyzer.CSharp dependency-version: 10.31.0.145097 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: System.IdentityModel.Tokens.Jwt dependency-version: 8.22.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: Testcontainers.MsSql dependency-version: 4.13.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: Testcontainers.RabbitMq dependency-version: 4.13.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

Dependabot's #199 lock update missed the purely transitive Microsoft.IdentityModel.* 8.21.0 -> 8.22.0 entries in 13 projects; restore without --locked-mode rewrites them silently instead of failing, so CI stayed green while main's committed locks drifted. This pins the true resolved graph. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_013CktxohyvX7D4ok3xkertX

* chore: regenerate FACTS for v1.140.0 Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_013CktxohyvX7D4ok3xkertX * chore: complete the transitive lock regen for IdentityModel 8.22.0 Dependabot's #199 lock update missed the purely transitive Microsoft.IdentityModel.* 8.21.0 -> 8.22.0 entries in 13 projects; restore without --locked-mode rewrites them silently instead of failing, so CI stayed green while main's committed locks drifted. This pins the true resolved graph. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_013CktxohyvX7D4ok3xkertX --------- Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Aug 4, 2026

dependabot Bot requested a review from ivanball as a code owner August 4, 2026 04:55

dependabot Bot added dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code labels Aug 4, 2026

This was referenced Aug 4, 2026

deps: Bump the analyzers group with 2 updates #197

Closed

deps: Bump the testing group with 4 updates #198

Closed

Merge branch 'main' into dependabot/nuget/minor-and-patch-f9dc4c6746

b43c5de

ivanball merged commit 634b6e1 into main Aug 4, 2026
13 checks passed

dependabot Bot deleted the dependabot/nuget/minor-and-patch-f9dc4c6746 branch August 4, 2026 12:42

ivanball mentioned this pull request Aug 4, 2026

release: v1.140.0 #203

Merged

Navigation Menu

deps: Bump the minor-and-patch group with 16 updates - #199

deps: Bump the minor-and-patch group with 16 updates#199
ivanball merged 2 commits into
mainfrom
dependabot/nuget/minor-and-patch-f9dc4c6746

dependabot Bot commented on behalf of github Aug 4, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Aug 4, 2026

1.7.0

2.9.0

Changed

2.83.0

What's Changed

New Contributors

2.83.0-pre1

What's Changed

New Contributors

2.83.0

What's Changed

New Contributors

2.83.0-pre1

What's Changed

New Contributors

3.0.138

What's Changed

3.0.137

What's Changed

3.0.136

What's Changed

3.0.135

What's Changed

3.0.134

What's Changed

6.1.6

Added

WAM broker support for the supported Entra ID authentication modes (Windows only)

Changed

Hardened TDS token parsing with data-length bounds checks

6.1.5

Fixed

Target Platform Support

Dependencies

.NET Framework 4.6.2

.NET 8.0

.NET 9.0

6.1.4

Fixed

Added

AppContext Switch for enabling MultiSubnetFailover

Changed

6.1.3

Added

App Context Switch for Ignoring Server-Provided Failover Partner

Fixed

Target Platform Support

Dependencies

.NET Framework 4.6.2+

6.1.2

Fixed

10.31.0.145097

Release notes - .NET Analyzers - 10.31

Feature

False Positive

8.22.0

What's Changed

4.13.0

What's Changed

🚀 Features

🐛 Bug Fixes

📖 Documentation

🧹 Housekeeping

📦 Dependency Updates

4.12.0

What's Changed

⚠️ Breaking Changes

🚀 Features

🐛 Bug Fixes

📖 Documentation

🧹 Housekeeping

📦 Dependency Updates

4.11.0

What's Changed

⚠️ Breaking Changes

🚀 Features

🐛 Bug Fixes

📖 Documentation