[dependabot]

Updated Azure.Security.KeyVault.Secrets from 4.11.1 to 4.11.2.

Release notes

Sourced from Azure.Security.KeyVault.Secrets's releases.

4.11.2

4.11.2 (2026-10-02)

Bugs Fixed

• Fixed handling of claims challenges when the authentication challenge cache is empty or cleared while a request is in flight.
• Fixed an issue in the challenge-based authentication policy where a cached authentication challenge accepted with challenge resource verification disabled could be reused by a separate default-strict client without revalidating the challenge resource.
• Improved authentication challenge resource validation.

Commits viewable in compare view.

Updated Azure.Storage.Blobs from 12.29.2 to 12.30.1.

Release notes

Sourced from Azure.Storage.Blobs's releases.

12.30.1

12.30.1 (2026-10-05)

Bugs Fixed

• Fixed AuthenticatedRegionCryptoStream.Dispose() to be idempotent and thread-safe, so the buffer it rents is no longer returned to the shared ArrayPool<byte> more than once when the stream is disposed repeatedly or concurrently. Returning the same array twice allowed unrelated callers to rent the same array instance and corrupt each other's data.

12.30.0

12.30.0 (2026-09-28)

Features Added

• Includes all features from 12.30.0-beta.1 and 12.30.0-beta.2.

Commits viewable in compare view.

Updated coverlet.collector from 10.0.1 to 10.1.0.

Release notes

Sourced from coverlet.collector's releases.

10.1.0

Improvements

• Publish Microsoft.Testing.Platform coverage messages from coverlet.MTP #​2019
• Implement dynamic exclusion filters for assemblies (Coverlet.MTP) #​1946
• Replace legacy .sln files with modern .slnx format #​1966
• coverlet.console: add trace diagnostics and actionable warnings for instrumentation/hit/empty-result failures #​2005
• Relax auto-property skip logic and improve coverage for records #​1941

Fixed

• Fix coverlet.MTP does not collect coverage on the .NET Framework portion of a large project #​1980 #​1967
• Fix Regression in branch coverage for lambda expressions #​1938
• Fix When using "is" with "or" in pattern matching, branch coverage is lower than normal #​1979
• Fix silent zero coverage on .NET Framework since 8.0.0 #​1985 by @​tobiwae
• Fix Race condition between ProcessExit hit-file write and out-of-proc coverage read causes EndOfStreamException #​1987 #​1988 by @​bkoelman
• Fix Regression TypeInitializationException when targeting .NET Framework - Could not load type 'System.Collections.Concurrent.ConcurrentBag #​2010
• Fix use --config-file CLI arg in coverlet.MTP #​2030 by alexthornton1
• Fix silently empty coverage for shared-framework assemblies missing from compileLibraries #​2032 by @​Eljees

Diff between 10.0.1 and 10.1.0

Commits viewable in compare view.

Updated Microsoft.Azure.Cosmos from 3.63.1 to 3.63.2.

Release notes

Sourced from Microsoft.Azure.Cosmos's releases.

3.63.2

See changelog for details.
NuGet: https://www.nuget.org/packages/Microsoft.Azure.Cosmos/3.63.2

Commits viewable in compare view.

Updated Microsoft.FluentUI.AspNetCore.Components from 4.14.4 to 4.14.5.

Release notes

Sourced from Microsoft.FluentUI.AspNetCore.Components's releases.

4.14.5

What's Changed

• Fix anchored region focus across shadow DOM and inline popups by @​adamint in Fix anchored region focus across shadow DOM and inline popups microsoft/fluentui-blazor#5041
• Fix FluentDataGrid column width popup focus on tab navigation by @​adamint in Fix FluentDataGrid column width popup focus on tab navigation microsoft/fluentui-blazor#5003
• Pin GitHub Actions to full-length commit SHAs by @​danfiedler-msft in Pin GitHub Actions to full-length commit SHAs microsoft/fluentui-blazor#5141
• fix: marshal dialog provider Add/Update onto sync context by @​shanewas in fix: marshal dialog provider Add/Update onto sync context microsoft/fluentui-blazor#5301

New Contributors

• @​danfiedler-msft made their first contribution in Pin GitHub Actions to full-length commit SHAs microsoft/fluentui-blazor#5141
• @​shanewas made their first contribution in fix: marshal dialog provider Add/Update onto sync context microsoft/fluentui-blazor#5301

Full Changelog: microsoft/fluentui-blazor@v4.14.4...v4.14.5

Commits viewable in compare view.

Updated Testcontainers from 4.15.0 to 4.16.0.

Release notes

Sourced from Testcontainers's releases.

4.16.0

What's Changed

Huge thanks to everyone for your contributions and feedback 🧡.

The NuGet packages for this release have been attested for supply chain security using actions/attest. This confirms the integrity and provenance of the artifacts and helps ensure they can be trusted: #​54051351.

🚀 Features

• feat: Add common WithSsl builder API and support it in Azurite (#​1788) @​aleksandarMilev, @​HofmeisterAn
• feat: Add BuildKit support for image builds via sidecar container (#​1761) @​george-petrakis, @​HofmeisterAn
• feat(Elasticsearch): Add OTLP and certificate support (#​1774) @​HofmeisterAn

🐛 Bug Fixes

• fix(PostgreSql): Support SSL with Alpine images and non-root users (#​1790) @​HofmeisterAn
• fix: Do not pull base image with unresolved platform variable (#​1787) @​HofmeisterAn
• fix(Kafka): Default to KRaft for Confluent Platform 8.x images (#​1775) @​arnelirobles, @​HofmeisterAn
• fix(Kafka): Drop the trailing comma from advertised listeners (#​1772) @​arnelirobles, @​HofmeisterAn
• fix: Prevent Docker ignore patterns from matching path prefixes (#​1768) @​Benziza, @​HofmeisterAn

📖 Documentation

• docs: Complete builder API tables and align heading casing (#​1778) @​HofmeisterAn
• docs: Explain how builder configurations combine (#​1770) @​arnelirobles, @​HofmeisterAn

🧹 Housekeeping

• fix: Regenerate expired test certificates (#​1786) @​zcsizmadia
• chore: Resolve Sonar findings (#​1776) @​HofmeisterAn
• chore: Remove Minio module (#​1769) @​HofmeisterAn
• chore: Publish NuGet packages with Trusted Publishing (OIDC) (#​1763) @​HofmeisterAn
• feat: Prepare next release cycle (4.16.0) (#​1762) @​HofmeisterAn

📦 Dependency Updates

• chore(deps): Bump the actions group with 5 updates (#​1781) @​dependabot[bot]

Commits viewable in compare view.

Updated Testcontainers.Azurite from 4.15.0 to 4.16.0.

Release notes

Sourced from Testcontainers.Azurite's releases.

4.16.0

What's Changed

Huge thanks to everyone for your contributions and feedback 🧡.

The NuGet packages for this release have been attested for supply chain security using actions/attest. This confirms the integrity and provenance of the artifacts and helps ensure they can be trusted: #​54051351.

🚀 Features

• feat: Add common WithSsl builder API and support it in Azurite (#​1788) @​aleksandarMilev, @​HofmeisterAn
• feat: Add BuildKit support for image builds via sidecar container (#​1761) @​george-petrakis, @​HofmeisterAn
• feat(Elasticsearch): Add OTLP and certificate support (#​1774) @​HofmeisterAn

🐛 Bug Fixes

• fix(PostgreSql): Support SSL with Alpine images and non-root users (#​1790) @​HofmeisterAn
• fix: Do not pull base image with unresolved platform variable (#​1787) @​HofmeisterAn
• fix(Kafka): Default to KRaft for Confluent Platform 8.x images (#​1775) @​arnelirobles, @​HofmeisterAn
• fix(Kafka): Drop the trailing comma from advertised listeners (#​1772) @​arnelirobles, @​HofmeisterAn
• fix: Prevent Docker ignore patterns from matching path prefixes (#​1768) @​Benziza, @​HofmeisterAn

📖 Documentation

• docs: Complete builder API tables and align heading casing (#​1778) @​HofmeisterAn
• docs: Explain how builder configurations combine (#​1770) @​arnelirobles, @​HofmeisterAn

🧹 Housekeeping

• fix: Regenerate expired test certificates (#​1786) @​zcsizmadia
• chore: Resolve Sonar findings (#​1776) @​HofmeisterAn
• chore: Remove Minio module (#​1769) @​HofmeisterAn
• chore: Publish NuGet packages with Trusted Publishing (OIDC) (#​1763) @​HofmeisterAn
• feat: Prepare next release cycle (4.16.0) (#​1762) @​HofmeisterAn

📦 Dependency Updates

• chore(deps): Bump the actions group with 5 updates (#​1781) @​dependabot[bot]

Commits viewable in compare view.

Updated Testcontainers.CosmosDb from 4.15.0 to 4.16.0.

Release notes

Sourced from Testcontainers.CosmosDb's releases.

4.16.0

What's Changed

Huge thanks to everyone for your contributions and feedback 🧡.

The NuGet packages for this release have been attested for supply chain security using actions/attest. This confirms the integrity and provenance of the artifacts and helps ensure they can be trusted: #​54051351.

🚀 Features

• feat: Add common WithSsl builder API and support it in Azurite (#​1788) @​aleksandarMilev, @​HofmeisterAn
• feat: Add BuildKit support for image builds via sidecar container (#​1761) @​george-petrakis, @​HofmeisterAn
• feat(Elasticsearch): Add OTLP and certificate support (#​1774) @​HofmeisterAn

🐛 Bug Fixes

• fix(PostgreSql): Support SSL with Alpine images and non-root users (#​1790) @​HofmeisterAn
• fix: Do not pull base image with unresolved platform variable (#​1787) @​HofmeisterAn
• fix(Kafka): Default to KRaft for Confluent Platform 8.x images (#​1775) @​arnelirobles, @​HofmeisterAn
• fix(Kafka): Drop the trailing comma from advertised listeners (#​1772) @​arnelirobles, @​HofmeisterAn
• fix: Prevent Docker ignore patterns from matching path prefixes (#​1768) @​Benziza, @​HofmeisterAn

📖 Documentation

• docs: Complete builder API tables and align heading casing (#​1778) @​HofmeisterAn
• docs: Explain how builder configurations combine (#​1770) @​arnelirobles, @​HofmeisterAn

🧹 Housekeeping

• fix: Regenerate expired test certificates (#​1786) @​zcsizmadia
• chore: Resolve Sonar findings (#​1776) @​HofmeisterAn
• chore: Remove Minio module (#​1769) @​HofmeisterAn
• chore: Publish NuGet packages with Trusted Publishing (OIDC) (#​1763) @​HofmeisterAn
• feat: Prepare next release cycle (4.16.0) (#​1762) @​HofmeisterAn

📦 Dependency Updates

• chore(deps): Bump the actions group with 5 updates (#​1781) @​dependabot[bot]

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Superseded by #399.