Skip to content

✅ Merge main into live #4635

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
dotnet-policy-service merged 16 commits into from
Sep 11, 2025
Merged

✅ Merge main into live #4635

dotnet-policy-service merged 16 commits into from
Sep 11, 2025

Conversation

@dotnet-policy-service
Copy link

@dotnet-policy-service dotnet-policy-service bot commented Sep 11, 2025 •
edited by github-actions bot
Loading

🤖 Queue merge when ready...

Internal previews

Toggle expand/collapse
📄 File 🔗 Preview link
.github/workflows/check-for-build-warnings.yml .github/workflows/check-for-build-warnings
.github/workflows/clean-repo.yml .github/workflows/clean-repo
.github/workflows/dependabot-bot.yml The name used in the GitHub UI for the workflow
.github/workflows/dependency-review.yml surfacing known-vulnerable versions of the packages declared or updated in the PR.
.github/workflows/dispatch-merge-main-to-live.yml .github/workflows/dispatch-merge-main-to-live
.github/workflows/do-not-merge-label-check.yml This GitHub Action workflow is triggered on label changes for pull requests.
.github/workflows/live-protection.yml .github/workflows/live-protection
.github/workflows/markdownlint.yml .github/workflows/markdownlint
.github/workflows/profanity-filter.yml .github/workflows/profanity-filter
.github/workflows/quest-bulk.yml .github/workflows/quest-bulk
.github/workflows/quest.yml .github/workflows/quest
.github/workflows/scorecards.yml This workflow uses actions that are not certified by GitHub. They are provided
.github/workflows/snippets5000.yml Controls when the action will run. Triggers the workflow on push or pull request
.github/workflows/stale.yml .github/workflows/stale
.github/workflows/version-sweep.yml A workflow run is made up of one or more jobs that can run sequentially or in parallel
.github/workflows/whats-new-automation.yml .github/workflows/whats-new-automation
docs/get-started/upgrade-to-aspire-9.md Upgrade to .NET Aspire 9.4.2

dependabot bot and others added 15 commits September 10, 2025 12:14
@dependabot
Bump the dotnet group with 2 updates (#4556)
0d92683 
Bumps Microsoft.AspNetCore.SignalR.Client from 9.0.8 to 9.0.9
Bumps Microsoft.Extensions.Http.Resilience from 9.8.0 to 9.9.0

---
updated-dependencies:
- dependency-name: Microsoft.AspNetCore.SignalR.Client
  dependency-version: 9.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: Microsoft.Extensions.Http.Resilience
  dependency-version: 9.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump the dotnet group with 6 updates (#4568)
4efe2e8 
Bumps Microsoft.AspNetCore.OpenApi from 9.0.8 to 9.0.9
Bumps Microsoft.Extensions.Configuration.Binder from 9.0.8 to 9.0.9
Bumps Microsoft.Extensions.Diagnostics.HealthChecks from 9.0.8 to 9.0.9
Bumps Microsoft.Extensions.Hosting.Abstractions from 9.0.8 to 9.0.9
Bumps Microsoft.Extensions.Http.Resilience from 9.8.0 to 9.9.0
Bumps Microsoft.Extensions.Resilience from 9.8.0 to 9.9.0

---
updated-dependencies:
- dependency-name: Microsoft.AspNetCore.OpenApi
  dependency-version: 9.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: Microsoft.Extensions.Configuration.Binder
  dependency-version: 9.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: Microsoft.Extensions.Diagnostics.HealthChecks
  dependency-version: 9.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: Microsoft.Extensions.Hosting.Abstractions
  dependency-version: 9.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: Microsoft.Extensions.Http.Resilience
  dependency-version: 9.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
- dependency-name: Microsoft.Extensions.Resilience
  dependency-version: 9.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump the dotnet group with 1 update (#4574)
e580ac4 
Bumps Microsoft.EntityFrameworkCore from 9.0.8 to 9.0.9

---
updated-dependencies:
- dependency-name: Microsoft.EntityFrameworkCore
  dependency-version: 9.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump the dotnet group with 6 updates (#4576)
4a23aa1 
Bumps Microsoft.AspNetCore.OpenApi from 9.0.8 to 9.0.9
Bumps Microsoft.AspNetCore.SignalR.Client from 9.0.8 to 9.0.9
Bumps Microsoft.Azure.SignalR from 1.31.0 to 1.32.0
Bumps Microsoft.Azure.SignalR.Management from 1.31.0 to 1.32.0
Bumps Microsoft.Extensions.Http.Resilience from 9.8.0 to 9.9.0
Bumps Scalar.AspNetCore from 2.7.2 to 2.8.0

---
updated-dependencies:
- dependency-name: Microsoft.AspNetCore.OpenApi
  dependency-version: 9.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: Microsoft.AspNetCore.SignalR.Client
  dependency-version: 9.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: Microsoft.Azure.SignalR
  dependency-version: 1.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
- dependency-name: Microsoft.Azure.SignalR.Management
  dependency-version: 1.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
- dependency-name: Microsoft.Extensions.Http.Resilience
  dependency-version: 9.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
- dependency-name: Scalar.AspNetCore
  dependency-version: 2.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump the dotnet group with 3 updates (#4578)
8ab9871 
Bumps Aspire.Hosting.AppHost from 9.4.1 to 9.4.2
Bumps Microsoft.AspNetCore.OpenApi from 9.0.8 to 9.0.9
Bumps Scalar.AspNetCore from 2.7.2 to 2.8.0

---
updated-dependencies:
- dependency-name: Aspire.Hosting.AppHost
  dependency-version: 9.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: Microsoft.AspNetCore.OpenApi
  dependency-version: 9.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: Scalar.AspNetCore
  dependency-version: 2.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump the dotnet group with 4 updates (#4601)
fe06073 
Bumps Microsoft.AspNetCore.OpenApi from 9.0.8 to 9.0.9
Bumps Microsoft.AspNetCore.TestHost from 9.0.8 to 9.0.9
Bumps Microsoft.Extensions.Http.Resilience from 9.8.0 to 9.9.0
Bumps Microsoft.Playwright from 1.54.0 to 1.55.0

---
updated-dependencies:
- dependency-name: Microsoft.AspNetCore.OpenApi
  dependency-version: 9.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: Microsoft.AspNetCore.TestHost
  dependency-version: 9.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: Microsoft.Extensions.Http.Resilience
  dependency-version: 9.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
- dependency-name: Microsoft.Playwright
  dependency-version: 1.55.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump the dotnet group with 2 updates (#4608)
0428865 
Bumps Microsoft.Extensions.Hosting from 9.0.8 to 9.0.9
Bumps Microsoft.Extensions.Http.Resilience from 9.8.0 to 9.9.0

---
updated-dependencies:
- dependency-name: Microsoft.Extensions.Hosting
  dependency-version: 9.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: Microsoft.Extensions.Http.Resilience
  dependency-version: 9.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump the dotnet group with 2 updates (#4618)
1080528 
Bumps Microsoft.Extensions.Http.Resilience from 9.8.0 to 9.9.0
Bumps Microsoft.Extensions.Logging.Console from 9.0.8 to 9.0.9

---
updated-dependencies:
- dependency-name: Microsoft.Extensions.Http.Resilience
  dependency-version: 9.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
- dependency-name: Microsoft.Extensions.Logging.Console
  dependency-version: 9.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump the dotnet group with 4 updates (#4619)
e52c680 
Bumps Aspire.Hosting.AppHost from 9.4.0 to 9.4.2
Bumps Aspire.Hosting.SqlServer from 9.4.0 to 9.4.2
Bumps Microsoft.Extensions.Http.Resilience from 9.7.0 to 9.9.0
Bumps Microsoft.Extensions.ServiceDiscovery from 9.4.0 to 9.4.2

---
updated-dependencies:
- dependency-name: Aspire.Hosting.AppHost
  dependency-version: 9.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: Aspire.Hosting.SqlServer
  dependency-version: 9.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: Microsoft.Extensions.Http.Resilience
  dependency-version: 9.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
- dependency-name: Microsoft.Extensions.ServiceDiscovery
  dependency-version: 9.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump the dotnet group with 2 updates (#4623)
ede6cd8 
Bumps Microsoft.AspNetCore.OpenApi from 9.0.8 to 9.0.9
Bumps Microsoft.Extensions.Http.Resilience from 9.8.0 to 9.9.0

---
updated-dependencies:
- dependency-name: Microsoft.AspNetCore.OpenApi
  dependency-version: 9.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: Microsoft.Extensions.Http.Resilience
  dependency-version: 9.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump the dotnet group with 4 updates (#4630)
bbaea8b 
Bumps Microsoft.Extensions.Configuration.Binder from 9.0.8 to 9.0.9
Bumps Microsoft.Extensions.Diagnostics.HealthChecks from 9.0.8 to 9.0.9
Bumps Microsoft.Extensions.Hosting.Abstractions from 9.0.8 to 9.0.9
Bumps Microsoft.Extensions.Resilience from 9.8.0 to 9.9.0

---
updated-dependencies:
- dependency-name: Microsoft.Extensions.Configuration.Binder
  dependency-version: 9.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: Microsoft.Extensions.Diagnostics.HealthChecks
  dependency-version: 9.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: Microsoft.Extensions.Hosting.Abstractions
  dependency-version: 9.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: Microsoft.Extensions.Resilience
  dependency-version: 9.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump the dotnet group with 1 update (#4631)
adadb8f 
Bumps Microsoft.Extensions.Http.Resilience from 9.8.0 to 9.9.0

---
updated-dependencies:
- dependency-name: Microsoft.Extensions.Http.Resilience
  dependency-version: 9.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump Microsoft.AspNetCore.OpenApi and 3 others (#4633)
40b6192 
Bumps Microsoft.AspNetCore.OpenApi from 9.0.8 to 9.0.9
Bumps Microsoft.Azure.SignalR from 1.31.0 to 1.32.0
Bumps Microsoft.Azure.SignalR.Management from 1.31.0 to 1.32.0
Bumps Scalar.AspNetCore from 2.7.2 to 2.8.0

---
updated-dependencies:
- dependency-name: Microsoft.AspNetCore.OpenApi
  dependency-version: 9.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: Microsoft.Azure.SignalR
  dependency-version: 1.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
- dependency-name: Microsoft.Azure.SignalR.Management
  dependency-version: 1.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
- dependency-name: Scalar.AspNetCore
  dependency-version: 2.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump the dotnet group with 1 update (#4629)
c6c57ba 
Bumps Microsoft.Extensions.Hosting from 9.0.8 to 9.0.9

---
updated-dependencies:
- dependency-name: Microsoft.Extensions.Hosting
  dependency-version: 9.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@JamesNK
Upgrade Aspire doc improvements (#4634)
a1bb3e5
@dependabot
Bump step-security/harden-runner from 2.13.0 to 2.13.1 (#4526)
b4516ad 
Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.13.0 to 2.13.1.
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](step-security/harden-runner@ec9f2d5...f4a75cf)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-version: 2.13.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dotnet-policy-service dotnet-policy-service bot added this pull request to the merge queue Sep 11, 2025
@github-advanced-security
Copy link

github-advanced-security bot commented Sep 11, 2025

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.

Merged via the queue into live with commit 2eff6dd Sep 11, 2025
12 of 13 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@IEvangelist IEvangelist Awaiting requested review from IEvangelist IEvangelist is a code owner

Assignees

No one assigned

Labels

:octocat: auto-merge

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@JamesNK