Update nuget packages (major)

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
AWSSDK.S3	3.7.101.46 -> 4.0.7.14
AWSSDK.SecurityToken	3.7.101.36 -> 4.0.2.10
AspNetCore.HealthChecks.MongoDb	6.0.2 -> 9.0.0
Calzolari.Grpc.AspNetCore.Validation	6.2.0 -> 9.0.0
EphemeralMongo5	0.1.3 -> 1.1.3
JetBrains.Annotations (source)	2022.3.1 -> 2025.2.2
LinqKit.Microsoft.EntityFrameworkCore	7.1.3 -> 9.0.8
Microsoft.AspNetCore.TestHost (source)	6.0.9 -> 9.0.10
Microsoft.Bcl.AsyncInterfaces (source)	7.0.0 -> 9.0.10
Microsoft.Extensions.Configuration (source)	7.0.0 -> 9.0.10
Microsoft.Extensions.Configuration.Binder (source)	7.0.0 -> 9.0.10
Microsoft.Extensions.Configuration.EnvironmentVariables (source)	7.0.0 -> 9.0.10
Microsoft.Extensions.Configuration.Json (source)	7.0.0 -> 9.0.10
Microsoft.Extensions.DependencyInjection (source)	7.0.0 -> 9.0.10
Microsoft.Extensions.DependencyInjection.Abstractions (source)	7.0.0 -> 9.0.10
Microsoft.Extensions.Diagnostics.HealthChecks (source)	7.0.4 -> 9.0.10
Microsoft.Extensions.Logging.Abstractions (source)	7.0.0 -> 9.0.10
Microsoft.Extensions.ObjectPool (source)	7.0.4 -> 9.0.10
Microsoft.NET.Test.Sdk	17.4.0 -> 18.0.0
MongoDB.Driver (source)	2.19.1 -> 3.5.0
MongoDB.Driver.Core.Extensions.DiagnosticSources	1.3.0 -> 2.1.0
NUnit (source)	3.13.3 -> 4.4.0
NUnit.Analyzers	3.3.0 -> 4.10.0
NUnit3TestAdapter (source)	4.3.1 -> 5.2.0
RabbitMQ.Client (source)	6.4.0 -> 7.1.2
Serilog.AspNetCore	6.1.0 -> 9.0.0
Serilog.Extensions.Hosting	5.0.1 -> 9.0.0
Serilog.Formatting.Compact	1.1.0 -> 3.0.0
Serilog.Settings.Configuration	3.4.0 -> 9.0.0
Serilog.Sinks.Console	4.1.0 -> 6.0.0
coverlet.collector	3.1.2 -> 6.0.4

---

Release Notes

aws/aws-sdk-net (AWSSDK.S3)

v4.0.7

v4.0.6

v4.0.5

v4.0.4

v4.0.3

v4.0.2

v4.0.1

v4.0.0

v3.7.500

v3.7.420

v3.7.419

v3.7.418.1

Compare Source

v3.7.418

v3.7.417

v3.7.416

v3.7.414

v3.7.413.3

Compare Source

v3.7.413.2

Compare Source

v3.7.413.1

Compare Source

v3.7.413

v3.7.411

v3.7.410

v3.7.408

v3.7.406.1

Compare Source

v3.7.406

v3.7.404

v3.7.403.1

Compare Source

v3.7.403

v3.7.402

v3.7.401

v3.7.400

v3.7.308

v3.7.306

v3.7.305

v3.7.304

v3.7.303

Compare Source

v3.7.302

v3.7.301

v3.7.300

v3.7.204

v3.7.202

v3.7.200

v3.7.108

v3.7.107

v3.7.105

v3.7.104

v3.7.103

v3.7.102

asimmon/ephemeral-mongo (EphemeralMongo5)

v1.1.3

Compare Source

What's Changed

• chore(deps): update nuget dependencies by @​asimmon in #​32
• chore(deps): update dependency dotnet-sdk to v6.0.413 by @​asimmon in #​40
• Added support for MongoDB 7 and Ubuntu 22.04 by @​asimmon in #​43

Full Changelog: asimmon/ephemeral-mongo@1.1.2...1.1.3

v1.1.2

Compare Source

What's Changed

• Preserve unchanged runtime files on build by @​asimmon in #​39

Full Changelog: asimmon/ephemeral-mongo@1.1.1...1.1.2

v1.1.0

Compare Source

What's Changed

• Bump MongoDB.Driver from 2.12.0 to 2.19.0 in /src/EphemeralMongo.Core by @​dependabot in #​23
• Added Semgrep code analysis and Renovate workflows by @​asimmon in #​26
• chore(deps): update pipeline dependencies (major) by @​asimmon in #​29
• chore(deps): update nuget dependencies by @​asimmon in #​27
• chore(deps): update dependency cake.frosting to v3 by @​asimmon in #​28
• Ensure MongoDB child processes are killed when current process is prematurely killed by @​asimmon in #​25
• Updated README by @​asimmon in #​30

New Contributors

• @​dependabot made their first contribution in #​23

Full Changelog: asimmon/ephemeral-mongo@1.0.0...1.1.0

v1.0.0

Compare Source

What's Changed

• Update shields.io badge url in README.md by @​evan-cohen in #​17
• Update MongoDB to latest community versions available by @​asimmon in #​19
  • MongoDB 4.4.17 to 4.4.18
  • MongoDB 5.0.13 to 5.0.14
  • MongoDB 6.0.2 to 6.0.4
• Update README.md by @​asimmon in #​20 and #​21

New Contributors

• @​evan-cohen made their first contribution in #​17

Full Changelog: asimmon/ephemeral-mongo@0.1.3...1.0.0

JetBrains/JetBrains.Annotations (JetBrains.Annotations)

v2025.2.1

Compare Source

v2025.2.0

Compare Source

v2024.3.0

Compare Source

v2024.2.0

Compare Source

dotnet/aspnetcore (Microsoft.AspNetCore.TestHost)

v9.0.10: .NET 9.0.10

Release

What's Changed

• Update branding to 9.0.10 by @​vseanreesermsft in #​63510
• [9.0] Make duplicate deb/rpm packages so we can sign them with the new PMC key by @​jkoritzinsky in #​63249
• [release/9.0] Extend Unofficial 1ES template in IdentityModel nightly tests job by @​github-actions[bot] in #​63465
• [release/9.0] (deps): Bump src/submodules/googletest from 373af2e to eb2d85e by @​dependabot[bot] in #​63501
• [release/9.0] Quarantine ResponseBody_WriteContentLength_PassedThrough by @​wtgodbe in #​63533
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​63304
• [release/9.0] [OpenAPI] Use invariant culture for TextWriter by @​martincostello in #​62239
• [release/9.0] Update dependencies from dotnet/extensions by @​dotnet-maestro[bot] in #​63303
• Unquarantine RadioButtonGetsResetAfterSubmittingEnhancedForm by @​ilonatommy in #​63556
• [release/9.0] Update dependencies from dotnet/extensions by @​dotnet-maestro[bot] in #​63577
• Merging internal commits for release/9.0 by @​vseanreesermsft in #​63604
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​63648
• backport(9.0): Fix runtime architecture detection logic in ANCM. by @​DeagleGross in #​63707

Full Changelog: dotnet/aspnetcore@v9.0.9...v9.0.10

v9.0.9: .NET 9.0.9

Release

What's Changed

• Update branding to 9.0.9 by @​vseanreesermsft in #​63107
• [release/9.0] (deps): Bump src/submodules/googletest from c67de11 to 373af2e by @​dependabot[bot] in #​63035
• [release/9.0] Dispose the certificate chain elements with the chain by @​github-actions[bot] in #​62992
• [release/9.0] Update dependencies from dotnet/extensions by @​dotnet-maestro[bot] in #​62702
• [release/9.0] Update Microsoft.Build versions by @​wtgodbe in #​62505
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​62832
• [release/9.0] Update SignalR Redis tests to use internal Docker Hub mirror by @​github-actions[bot] in #​63116
• [release/9.0] [SignalR] Don't throw for message headers in Java client by @​github-actions[bot] in #​62783
• Merging internal commits for release/9.0 by @​vseanreesermsft in #​63151
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​63190
• [release/9.0] Update dependencies from dotnet/extensions by @​dotnet-maestro[bot] in #​63214

Full Changelog: dotnet/aspnetcore@v9.0.8...v9.0.9

v9.0.8

v9.0.7: .NET 9.0.7

Release

What's Changed

• Update branding to 9.0.7 by @​vseanreesermsft in #​62242
• [release/9.0] (deps): Bump src/submodules/googletest from 04ee1b4 to e9092b1 by @​dependabot in #​62199
• Fix OpenApiJsonSchema array parsing (#​62051) by @​BrennanConroy in #​62118
• [release/9.0] Update dependencies from dotnet/extensions by @​dotnet-maestro in #​61986
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in #​61945
• [release/9.0] Update Alpine helix references by @​wtgodbe in #​62240
• [Backport 9.0] [IIS] Manually parse exe bitness (#​61894) by @​BrennanConroy in #​62038
• [release/9.0] Associate tagged keys with entries so replacements are not evicted by @​github-actions in #​62248
• [release/9.0] Block test that is failing after switching to latest-chrome by @​github-actions in #​62283
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in #​62281
• [release/9.0] Update dependencies from dotnet/extensions by @​dotnet-maestro in #​62282
• Merging internal commits for release/9.0 by @​vseanreesermsft in #​62303

Full Changelog: dotnet/aspnetcore@v9.0.6...v9.0.7

v9.0.6

Bug Fixes

• Forwarded Headers Middleware: Ignore X-Forwarded-Headers from Unknown Proxy (#​61622)
  The Forwarded Headers Middleware now ignores X-Forwarded-Headers sent from unknown proxies. This change improves security by ensuring that only trusted proxies can influence forwarded header values, preventing potential spoofing or misrouting issues.

Dependency Updates

• Bump src/submodules/googletest from 52204f7 to 04ee1b4 (#​61762)
  Updates the GoogleTest submodule to a newer commit, bringing in the latest improvements and bug fixes from the upstream project.
• Update dependencies from dotnet/arcade (#​61714)
  Updates internal build and infrastructure dependencies from the dotnet/arcade repository, ensuring compatibility and access to the latest build tools.
• Update dependencies from dotnet/extensions (#​61571)
  Refreshes dependencies from the dotnet/extensions repository, incorporating the latest features and fixes from the extensions libraries.
• Update dependencies from dotnet/extensions (#​61877)
  Further updates dependencies from dotnet/extensions, ensuring the project benefits from recent improvements and bug fixes.
• Update dependencies from dotnet/arcade (#​61892)
  Additional updates to build and infrastructure dependencies from dotnet/arcade, maintaining up-to-date tooling and build processes.

Miscellaneous

• Update branding to 9.0.6 (#​61831)
  Updates the project version and branding to 9.0.6, reflecting the new release and ensuring version consistency across the codebase.
• Merging internal commits for release/9.0 (#​61925)
  Incorporates various internal commits into the release/9.0 branch, ensuring that all relevant changes are included in this release.

---

This summary is generated and may contain inaccuracies. For complete details, please review the linked pull requests.

Full Changelog: v9.0.5...v9.0.6

v9.0.5: .NET 9.0.5

Release

What's Changed

• Update branding to 9.0.5 by @​vseanreesermsft in #​61284
• [release/9.0] (deps): Bump src/submodules/googletest from 24a9e94 to 52204f7 by @​dependabot in #​61261
• [release/9.0] Upgrade to Ubuntu 22 by @​github-actions in #​61215
• [release/9.0] Update dependencies from dotnet/extensions by @​dotnet-maestro in #​60964
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in #​60902
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in #​61355
• [release/9.0] Caching SERedis critical bugfix; defer HC metadata detection because of DI cycle by @​github-actions in #​60916
• [release/9.0] Update dependencies from dotnet/extensions by @​dotnet-maestro in #​61354
• Merging internal commits for release/9.0 by @​vseanreesermsft in #​61393
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in #​61412
• Revert "Revert "[release/9.0] Update remnants of azureedge.net"" by @​wtgodbe in #​60353
• [release/9.0] Fix preserving messages for stateful reconnect with backplane by @​github-actions in #​61374
• [release/9.0] Update dependencies from dotnet/extensions by @​dotnet-maestro in #​61483
• [Identity] Fix Identity UI asset definitions by @​javiercn in #​59100

Full Changelog: dotnet/aspnetcore@v9.0.4...v9.0.5

v9.0.4: .NET 9.0.4

Release

What's Changed

• Update branding to 9.0.4 by @​vseanreesermsft in #​60785
• [release/9.0] Update dependencies from dotnet/extensions by @​dotnet-maestro in #​60445
• [release/9.0] (deps): Bump src/submodules/googletest from e235eb3 to 24a9e94 by @​dependabot in #​60678
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in #​60356
• Fix OpenAPI server URLs for Aspire scenarios by @​captainsafia in #​60673
• Fix self-referential schema handling in collection schemas by @​captainsafia in #​60410
• [release/9.0] [Blazor] Fix custom elements JS assets not being included in build output by @​MackinnonBuck in #​60858
• Merging internal commits for release/9.0 by @​vseanreesermsft in #​60880

Full Changelog: dotnet/aspnetcore@v9.0.3...v9.0.4

v9.0.3: .NET 9.0.3

Release

What's Changed

• Update branding to 9.0.3 by @​vseanreesermsft in #​60198
• [release/9.0] Fix branding by @​wtgodbe in #​60029
• [release/9.0] Update to MacOS 15 in Helix by @​github-actions in #​60238
• [release/9.0] Revert "Revert "Use the latest available jdk"" by @​github-actions in #​60229
• [release/9.0] Update HtmlAttributePropertyHelper to correctly follow the MetadataUpdateHandlerAttribute contract by @​github-actions in #​59908
• [release/9.0] Fix skip condition for java tests by @​github-actions in #​60242
• [release/9.0] (deps): Bump src/submodules/googletest from 7d76a23 to e235eb3 by @​dependabot in #​60151
• [release/9.0] Readd DiagnosticSource to KestrelServerImpl by @​github-actions in #​60202
• [release/9.0] Redis distributed cache: add HybridCache usage signal by @​github-actions in #​59886
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in #​59952
• [release/9.0] Update dependencies from dotnet/extensions by @​dotnet-maestro in #​59951
• [release/9.0] Update remnants of azureedge.net by @​sebastienros in #​60263
• [release/9.0] Update dependencies from dotnet/extensions by @​dotnet-maestro in #​60291
• [release/9.0] Centralize on one docker container by @​wtgodbe in #​60298
• Revert "[release/9.0] Update remnants of azureedge.net" by @​wtgodbe in #​60323
• Merging internal commits for release/9.0 by @​vseanreesermsft in #​60317

Full Changelog: dotnet/aspnetcore@v9.0.2...v9.0.3

v9.0.2: .NET 9.0.2

Release

What's Changed

• Update branding to 9.0.2 by @​vseanreesermsft in #​59757
• [release/9.0] Update dependencies from dotnet/source-build-externals by @​dotnet-maestro in #​59267
• [release/9.0] Update dependencies from dotnet/extensions by @​dotnet-maestro in #​59266
• [release/9.0] Update OSX helix queue by @​github-actions in #​59743
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in #​59728
• [release/9.0] (deps): Bump src/submodules/googletest from d144031 to 7d76a23 by @​dependabot in #​59679
• [release/9.0] Skip tests on internal queues too by @​github-actions in #​59578
• [release/9.0] Fix loading dotnet user-jwts config by @​github-actions in #​59473
• [release/9.0] Fix MultipartReaderStream synchronous read when using buffer offset by @​github-actions in #​59422
• [release/9.0] Update dependencies from dotnet/xdt by @​dotnet-maestro in #​59419
• [release/9.0] Update dependencies from dotnet/extensions by @​dotnet-maestro in #​59611
• [release/9.0] Fix Kestrel host header mismatch handling when port in Url by @​github-actions in #​59362
• Migrate off of Fedora 38 by @​v-firzha in #​59613
• [release/9.0] [Blazor WASM standalone] Avoid caching index.html during development by @​MackinnonBuck in #​59348
• [release/9.0] Update to Fedora 41 by @​github-actions in #​59816
• [release/9.0] Don't throw exception for parameters with custom binding source by @​github-actions in #​59533
• [release/9.0] Apply schema transformer to AdditionalProperties by @​github-actions in #​59730
• [release/9.0] Harden schema reference transformer for relative references by @​captainsafia in #​59779
• [release/9.0] Update dependencies from dotnet/extensions by @​dotnet-maestro in #​59847
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in #​59848
• [release/9.0] Return 206 Partial Content on Valid Range for Static Assets by @​github-actions in #​59325
• Merging internal commits for release/9.0 by @​vseanreesermsft in #​59871

Full Changelog: dotnet/aspnetcore@v9.0.1...v9.0.2

v9.0.1: .NET 9.0.1

Release

What's Changed

• Merging internal commits for release/9.0 by @​vseanreesermsft in #​58900
• [release/9.0] Prevent unnecessary debugger stops for user-unhandled exceptions in Blazor apps with Just My Code enabled by @​halter73 in #​58573
• Hot Reload agent improvements by @​tmat in #​58333
• [release/9.0] Update dependencies from roslyn by @​wtgodbe in #​59183
• [release/9.0] Add direct reference to System.Drawing.Common in tools by @​wtgodbe in #​59189
• [release/9.0] Harden parsing of [Range] attribute values by @​github-actions in #​59077
• [release/9.0] Update dependencies from dotnet/source-build-externals by @​dotnet-maestro in #​59143
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in #​59024
• [release/9.0] (deps): Bump src/submodules/googletest from 6dae7eb to d144031 by @​dependabot in #​59032
• [release/9.0] Update dependencies from dotnet/xdt by @​dotnet-maestro in #​58589
• [release/9.0] Update dependencies from dotnet/extensions by @​dotnet-maestro in #​58675
• [release/9.0] Fix SignalR Java POM to include description by @​github-actions in #​58896
• [release/9.0] Fix IIS outofprocess to remove WebSocket compression handshake by @​github-actions in #​58931

Full Changelog: dotnet/aspnetcore@v9.0.0...v9.0.1

v9.0.0: .NET 9.0.0

Release

What's Changed

• Update branding to rtm by @​wtgodbe in #​57907
• [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime by @​dotnet-maestro in #​57910
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in #​57922
• [release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime by @​dotnet-maestro in #​57954
• [release/9.0] Fix skip condition for IIS tests by @​wtgodbe in #​57999
• [release/9.0] Update dependencies from dotnet/extensions by @​dotnet-maestro in #​58032
• [release/9.0] Update dependencies from dotnet/runtime by @​dotnet-maestro in #​58015
• [release/9.0] Update dependencies from dotnet/winforms by @​dotnet-maestro in #​58033
• [release/9.0] Update dependencies from dotnet/runtime by @​dotnet-maestro in #​58048
• [automated] Merge branch 'release/9.0-rc2' => 'release/9.0' by @​github-actions in #​57975
• [release/9.0] Update dependencies from dotnet/efcore by @​dotnet-maestro in #​58052
• Fix up OpenAPI schema handling and support concurrent requests by @​captainsafia in #​58024
• [release/9.0] Mark API from 9 as shipped by @​wtgodbe in #​58060
• [release/9.0] Update dependencies from dotnet/source-build-externals by @​dotnet-maestro in #​58034
• [release/9.0] Update dependencies from dotnet/runtime by @​dotnet-maestro in #​58117
• [release/9.0] Enable TSA/Policheck by @​github-actions in #​58123
• [release/9.0] Add explicit conversion for value-type returning handlers with filters by @​github-actions in #​57967
• [release/9.0] Update dependencies from dotnet/xdt by @​dotnet-maestro in #​58116
• [release/9.0] (deps): Bump src/submodules/MessagePack-CSharp from ecc4e18 to 9511905 by @​dependabot in #​58183
• [release/9.0] (deps): Bump src/submodules/googletest from 0953a17 to 6dae7eb by @​dependabot in #​58184
• [release/9.0] Change usage of "Country" to "CountryRe

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.