Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Oct 26, 2025

Updated Microsoft.AspNetCore.Identity.EntityFrameworkCore from 8.0.11 to 8.0.21.

Release notes

Sourced from Microsoft.AspNetCore.Identity.EntityFrameworkCore's releases.

8.0.21

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.20...v8.0.21

8.0.20

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.19...v8.0.20

8.0.18

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.17...v8.0.18

8.0.17

Bug Fixes

  • Forwarded Headers Middleware: Ignore X-Forwarded-Headers from Unknown Proxy (#​61623)
    The Forwarded Headers Middleware now ignores X-Forwarded-Headers sent from unknown proxies. This change improves security by ensuring that only trusted proxies can influence the forwarded headers, preventing potential spoofing or misrouting of requests.

Dependency Updates

  • Update dependencies from dotnet/arcade (#​61832)
    This update brings in the latest changes from the dotnet/arcade repository, ensuring that ASP.NET Core benefits from recent improvements, bug fixes, and security patches in the shared build infrastructure.

  • Bump src/submodules/googletest from 52204f7 to 04ee1b4 (#​61761)
    The GoogleTest submodule has been updated to a newer commit, providing the latest testing features, bug fixes, and performance improvements for the project's C++ test components.

Miscellaneous

  • Update branding to 8.0.17 (#​61830)
    The project version branding has been updated to reflect the new 8.0.17 release, ensuring consistency across build outputs and documentation.

  • Merging internal commits for release/8.0 (#​61924)
    This change merges various internal commits into the release/8.0 branch, incorporating minor fixes, documentation updates, and other non-user-facing improvements to keep the release branch up to date.


This summary is generated and may contain inaccuracies. For complete details, please review the linked pull requests.

Full Changelog: dotnet/aspnetcore@v8.0.16...v8.0.17

8.0.16

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.15...v8.0.16

8.0.15

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.14...v8.0.15

8.0.14

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.13...v8.0.14

8.0.13

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.12...v8.0.13

8.0.12

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.11...v8.0.12

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Mvc.Testing from 8.0.8 to 8.0.21.

Release notes

Sourced from Microsoft.AspNetCore.Mvc.Testing's releases.

8.0.21

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.20...v8.0.21

8.0.20

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.19...v8.0.20

8.0.18

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.17...v8.0.18

8.0.17

Bug Fixes

  • Forwarded Headers Middleware: Ignore X-Forwarded-Headers from Unknown Proxy (#​61623)
    The Forwarded Headers Middleware now ignores X-Forwarded-Headers sent from unknown proxies. This change improves security by ensuring that only trusted proxies can influence the forwarded headers, preventing potential spoofing or misrouting of requests.

Dependency Updates

  • Update dependencies from dotnet/arcade (#​61832)
    This update brings in the latest changes from the dotnet/arcade repository, ensuring that ASP.NET Core benefits from recent improvements, bug fixes, and security patches in the shared build infrastructure.

  • Bump src/submodules/googletest from 52204f7 to 04ee1b4 (#​61761)
    The GoogleTest submodule has been updated to a newer commit, providing the latest testing features, bug fixes, and performance improvements for the project's C++ test components.

Miscellaneous

  • Update branding to 8.0.17 (#​61830)
    The project version branding has been updated to reflect the new 8.0.17 release, ensuring consistency across build outputs and documentation.

  • Merging internal commits for release/8.0 (#​61924)
    This change merges various internal commits into the release/8.0 branch, incorporating minor fixes, documentation updates, and other non-user-facing improvements to keep the release branch up to date.


This summary is generated and may contain inaccuracies. For complete details, please review the linked pull requests.

Full Changelog: dotnet/aspnetcore@v8.0.16...v8.0.17

8.0.16

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.15...v8.0.16

8.0.15

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.14...v8.0.15

8.0.14

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.13...v8.0.14

8.0.13

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.12...v8.0.13

8.0.12

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.11...v8.0.12

8.0.11

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.10...v8.0.11

8.0.10

Release

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore from 8.0.11 to 8.0.21.

Release notes

Sourced from Microsoft.EntityFrameworkCore's releases.

8.0.21

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.20...v8.0.21

8.0.20

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.19...v8.0.20

8.0.17

Dependency Updates

  • Update dependencies from dotnet/arcade (#​36085)
    Updates the project's dependencies using the latest versions from the dotnet/arcade repository. This ensures that the build infrastructure and related tooling are up to date, which can bring in important bug fixes, security patches, and improvements from upstream.

Miscellaneous

  • Update branding to 8.0.17 (#​36043)
    Updates the internal version branding to 8.0.17. This change ensures that the product and its packages correctly reflect the new release version, helping users and developers identify the build.

  • Merging internal commits for release/8.0 (#​36080)
    Integrates various internal commits into the release/8.0 branch. This merge brings together important updates and ensures the release branch is synchronized with recent internal development, maintaining consistency and stability for the release.


This summary is generated and may contain inaccuracies. For complete details, please review the linked pull requests.

Full Changelog: v8.0.16...v8.0.17

8.0.16

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.15...v8.0.16

8.0.15

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.14...v8.0.15

8.0.14

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.13...v8.0.14

8.0.13

[Release](https://github.com/dotnet/core/releases/tag/v8.0.13

What's Changed

Full Changelog: dotnet/efcore@v8.0.12...v8.0.13

8.0.12

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.11...v8.0.12

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.InMemory from 8.0.11 to 8.0.21.

Release notes

Sourced from Microsoft.EntityFrameworkCore.InMemory's releases.

8.0.21

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.20...v8.0.21

8.0.20

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.19...v8.0.20

8.0.17

Dependency Updates

  • Update dependencies from dotnet/arcade (#​36085)
    Updates the project's dependencies using the latest versions from the dotnet/arcade repository. This ensures that the build infrastructure and related tooling are up to date, which can bring in important bug fixes, security patches, and improvements from upstream.

Miscellaneous

  • Update branding to 8.0.17 (#​36043)
    Updates the internal version branding to 8.0.17. This change ensures that the product and its packages correctly reflect the new release version, helping users and developers identify the build.

  • Merging internal commits for release/8.0 (#​36080)
    Integrates various internal commits into the release/8.0 branch. This merge brings together important updates and ensures the release branch is synchronized with recent internal development, maintaining consistency and stability for the release.


This summary is generated and may contain inaccuracies. For complete details, please review the linked pull requests.

Full Changelog: v8.0.16...v8.0.17

8.0.16

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.15...v8.0.16

8.0.15

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.14...v8.0.15

8.0.14

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.13...v8.0.14

8.0.13

[Release](https://github.com/dotnet/core/releases/tag/v8.0.13

What's Changed

Full Changelog: dotnet/efcore@v8.0.12...v8.0.13

8.0.12

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.11...v8.0.12

Commits viewable in compare view.

Pinned Microsoft.Extensions.Logging.Abstractions at 8.0.3.

Release notes

Sourced from Microsoft.Extensions.Logging.Abstractions's releases.

8.0.3

Release

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 17.8.0 to 17.14.1.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

17.14.1

What's Changed

Full Changelog: microsoft/vstest@v17.14.0...v17.14.1

17.14.0

What's Changed

.NET versions updated

This version of VS Test upgraded .NET to net8 and net9. All projects targeting net6.0 (or other end-of-life .NET target frameworks) should pin their version of Microsoft.NET.Test.SDK to 17.13.0, or update the projects to net8 or newer. We remain backwards compatible with previous versions of Microsoft.NET.Test.SDK. This change does NOT prevent you from:

  • Updating to the latest VS, and running tests from net6.0 test projects.
  • Updating to the latest .NET SDK, and running tests from net6.0 test projects.

It also has no impact on .NET Framework projects, where we continue targeting .NET Framework 4.6.2.

Changes

Internal version updates and fixes

New Contributors

17.14.0-preview-25107-01

What's Changed

.NET versions updated

This version of VS Test upgraded .NET to net8 and net9. All projects targeting net6.0 (or other end-of-life .NET target frameworks) should pin their version of Microsoft.NET.Test.SDK to 17.13.0, or update the projects to net8 or newer. We remain backwards compatible with previous versions of Microsoft.NET.Test.SDK. This change does NOT prevent you from:

  • Updating to the latest VS, and running tests from net6.0 test projects.
  • Updating to the latest .NET SDK, and running tests from net6.0 test projects.

It also has no impact on .NET Framework projects, where we continue targeting .NET Framework 4.6.2.

Changes

Internal version updates and fixes

Will probably revert before release:

New Contributors

Full Changelog: microsoft/vstest@v17.13.0...v17.14.0-preview-25107-01

17.13.0

What's Changed

New Contributors

Full Changelog: microsoft/vstest@v17.12.0...v17.13.0

17.12.0

What's Changed

Internal and infrastructure fixes:

Full Changelog: microsoft/vstest@v17.11.1...v17.12.0

17.11.1

What's Changed

Full Changelog: microsoft/vstest@v17.11.0...v17.11.1

17.11.0

What's Changed

New Contributors

Full Changelog: microsoft/vstest@v17.10.0...v17.11.0-release-24352-06

17.11.0-release-24373-02

What's Changed

Full Changelog: microsoft/vstest@v17.11.0-release-24352-06...v17.11.0-release-24373-02

17.11.0-release-24352-06

What's Changed

Description has been truncated

Bumps Microsoft.AspNetCore.Identity.EntityFrameworkCore from 8.0.11 to 8.0.21
Bumps Microsoft.AspNetCore.Mvc.Testing from 8.0.8 to 8.0.21
Bumps Microsoft.EntityFrameworkCore from 8.0.11 to 8.0.21
Bumps Microsoft.EntityFrameworkCore.InMemory from 8.0.11 to 8.0.21
Bumps Microsoft.Extensions.Logging.Abstractions from 8.0.2 to 8.0.3
Bumps Microsoft.NET.Test.Sdk from 17.8.0 to 17.14.1

---
updated-dependencies:
- dependency-name: Microsoft.AspNetCore.Identity.EntityFrameworkCore
  dependency-version: 8.0.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: microsoft-packages
- dependency-name: Microsoft.AspNetCore.Identity.EntityFrameworkCore
  dependency-version: 8.0.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: microsoft-packages
- dependency-name: Microsoft.AspNetCore.Identity.EntityFrameworkCore
  dependency-version: 8.0.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: microsoft-packages
- dependency-name: Microsoft.AspNetCore.Identity.EntityFrameworkCore
  dependency-version: 8.0.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: microsoft-packages
- dependency-name: Microsoft.AspNetCore.Mvc.Testing
  dependency-version: 8.0.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: microsoft-packages
- dependency-name: Microsoft.EntityFrameworkCore
  dependency-version: 8.0.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: microsoft-packages
- dependency-name: Microsoft.EntityFrameworkCore.InMemory
  dependency-version: 8.0.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: microsoft-packages
- dependency-name: Microsoft.EntityFrameworkCore.InMemory
  dependency-version: 8.0.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: microsoft-packages
- dependency-name: Microsoft.EntityFrameworkCore.InMemory
  dependency-version: 8.0.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: microsoft-packages
- dependency-name: Microsoft.Extensions.Logging.Abstractions
  dependency-version: 8.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: microsoft-packages
- dependency-name: Microsoft.Extensions.Logging.Abstractions
  dependency-version: 8.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: microsoft-packages
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 17.14.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: microsoft-packages
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Oct 26, 2025

Labels

The following labels could not be found: dependencies, nuget, security. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@github-actions
Copy link

🧪 Test & Build Summary

🏗️ Build Status

  • ✅ Build completed successfully
  • 📦 NuGet packages restored
  • 🐳 Docker image built and tested

🧪 Test Results

  • ✅ All tests executed
  • 📊 Test artifacts generated
  • 📋 Results available in workflow artifacts

🔒 Security Scanning

  • 🔍 Vulnerability scanning (NuGet packages)
  • 🛡️ CodeQL static analysis
  • 🔐 Secret detection with TruffleHog
  • � Filesystem security scanning with Trivy
  • 📋 OWASP dependency check
  • 🎯 SAST analysis with Semgrep
  • 📊 Security reports available in artifacts

📦 Available Artifacts

  • 📊 Test results (TRX format)
  • 📈 Code coverage reports (Cobertura XML)
  • 🔒 Security scan results (SARIF format)
  • 🛡️ Vulnerability reports (JSON/XML)
  • 📋 Security audit logs

Generated by Setlist Studio CI/CD Pipeline 🎵

@github-actions
Copy link

Code Coverage

Package Line Rate Branch Rate Complexity Health
SetlistStudio.Web 81% 79% 1659
SetlistStudio.Core 93% 91% 752
SetlistStudio.Infrastructure 87% 87% 606
SetlistStudio.Web 81% 79% 1659
SetlistStudio.Core 93% 91% 752
SetlistStudio.Infrastructure 87% 87% 606
Summary 84% (14568 / 17374) 84% (4066 / 4836) 6034

Minimum allowed line rate is 80%

@github-actions
Copy link

🚀 Preview Deployment Ready

Preview URL: https://preview-pr-54.setlist-studio.dev

Branch: dependabot/nuget/src/SetlistStudio.Core/microsoft-packages-e336212f94
Commit: 1f73d9df580eb4dbf8a7a46fafd68081a1f3db5f


Deployment updated automatically on each push

@github-actions
Copy link

🛡️ Security Scan Summary

Scan Date: Sun Oct 26 21:07:21 UTC 2025
Commit: 1f73d9d

🔍 Scan Results

Tool Status Details
TruffleHog ✅ Secure No secrets detected
.NET Vulnerability Scan ✅ Secure No vulnerable packages detected
CodeQL ✅ Secure No vulnerabilities detected in local analysis
Semgrep SAST ✅ Secure No security issues detected
Trivy Filesystem ✅ Secure No filesystem vulnerabilities detected
OWASP Dependency Check ✅ Secure No dependency vulnerabilities detected
OWASP ZAP Dynamic Scan ✅ Secure No critical/high issues detected
Security Configuration ✅ Secure All security configurations validated

⚠️ CRITICAL: CodeQL Security Analysis

IMPORTANT: This summary may show CodeQL as 'secure' even if issues exist.
ALWAYS check the GitHub Security Tab for CodeQL findings.
High/Critical CodeQL issues MUST be resolved before merge, regardless of this summary.

📋 Recommendations

  • PRIORITY: Check GitHub Security tab for CodeQL findings
  • Fix all high/critical CodeQL issues before merge
  • Review all findings in the Security tab
  • Update vulnerable dependencies promptly
  • Follow secure coding practices from copilot-instructions.md
  • Regular security reviews and updates

Security scan generated by Setlist Studio CI/CD Pipeline 🔒

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant