Bump the dotnet-dependencies group with 6 updates

[dependabot]

Updated Mapster from 10.0.8 to 10.0.10.

Release notes

Sourced from Mapster's releases.

10.0.9

What's Changed

• test: ensure Compile skips open generic mapping rules (#​925) by @​wyf027 in test: ensure Compile skips open generic mapping rules (#925) MapsterMapper/Mapster#965
• fix: ProjectToType nullable navigation to record DTO ctor (#​898) by @​wyf027 in fix: ProjectToType nullable navigation to record DTO ctor (#898) MapsterMapper/Mapster#971
• fix: support CompileProjection with Include on abstract types (#​801) by @​wyf027 in fix: support CompileProjection with Include on abstract types (#801) MapsterMapper/Mapster#977
• PR #​976 + Update + Fix mapping NonNullable ValueType to NullableValueType by @​wyf027 and @​DocSvartz in PR #976 + Update + Fix mapping NonNullable ValueType to NullableValueType  MapsterMapper/Mapster#986
• fix: cast inherited MapWith results to derived destinations (#​947) by @​wyf027 in fix: cast inherited MapWith results to derived destinations (#947) MapsterMapper/Mapster#976
• fix: drop null check by @​DocSvartz in fix: drop null check MapsterMapper/Mapster#989
• Fix dependency for Mapster.EFCore TFM Net 8.0 by @​DocSvartz in Fix dependency for Mapster.EFCore TFM Net 8.0 MapsterMapper/Mapster#988

Full Changelog: MapsterMapper/Mapster@v10.0.8...v10.0.9

Commits viewable in compare view.

Updated MediatR from 14.1.0 to 14.2.0.

Release notes

Sourced from MediatR's releases.

14.2.0

What's Changed

• Fix license validation deadlock when called from sync context by @​jbogard in Fix license validation deadlock when called from sync context LuckyPennySoftware/MediatR#1165
• Reporting test results by @​jbogard in Reporting test results LuckyPennySoftware/MediatR#1166
• Attach NuGet packages and SBOM to GitHub Release by @​jbogard in Attach NuGet packages and SBOM to GitHub Release LuckyPennySoftware/MediatR#1169
• Treat blank license key as unconfigured (#​1170) by @​jbogard in Treat blank license key as unconfigured (#1170) LuckyPennySoftware/MediatR#1171
• ci: publish fork-PR test reports via workflow_run by @​jbogard in ci: publish fork-PR test reports via workflow_run LuckyPennySoftware/MediatR#1173
• Run license validation off the Mediator construction path by @​jbogard in Run license validation off the Mediator construction path LuckyPennySoftware/MediatR#1174
• Support license key via environment variable fallback by @​jbogard in Support license key via environment variable fallback LuckyPennySoftware/MediatR#1175

Full Changelog: LuckyPennySoftware/MediatR@v14.1.0...v14.2.0

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.6.0 to 18.7.0.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.7.0

What's Changed

• Add ARM64 msdia140.dll support to test platform packages by @​jamesmcroft in Add ARM64 msdia140.dll support to test platform packages microsoft/vstest#15689
• Update System.Memory from 4.5.5 to 4.6.3 by @​nohwnd in Update System.Memory from 4.5.5 to 4.6.3 microsoft/vstest#15706

New Contributors

• @​jamesmcroft made their first contribution in Add ARM64 msdia140.dll support to test platform packages microsoft/vstest#15689

Full Changelog: microsoft/vstest@v18.6.0...v18.7.0

Commits viewable in compare view.

Updated Microsoft.Playwright.Xunit from 1.60.0 to 1.61.0.

Release notes

Sourced from Microsoft.Playwright.Xunit's releases.

1.61.0

🔑 WebAuthn passkeys

New Credentials virtual authenticator, available via BrowserContext.Credentials, lets tests register passkeys and answer navigator.credentials.create() / navigator.credentials.get() ceremonies in the page — no real hardware key required, works in all browsers:

var context = await browser.NewContextAsync();

// Seed a passkey your backend provisioned for a test user.
await context.Credentials.CreateAsync("example.com", new()
{
    Id = credentialId,
    UserHandle = userHandle,
    PrivateKey = privateKey,
    PublicKey = publicKey,
});
await context.Credentials.InstallAsync();

var page = await context.NewPageAsync();
await page.GotoAsync("https://example.com/login");
// The page's navigator.credentials.get() is answered with the seeded passkey.

You can also let the app register a passkey once in a setup test, read it back with Credentials.GetAsync(), and seed it into later tests — see Credentials for details.

🗃️ Web Storage

New WebStorage API, available via Page.LocalStorage and Page.SessionStorage, reads and writes the page's storage for the current origin:

await page.LocalStorage.SetItemAsync("token", "abc");
var token = await page.LocalStorage.GetItemAsync("token");
var items = await page.SessionStorage.ItemsAsync();

New APIs

• APIResponse.SecurityDetailsAsync() and APIResponse.ServerAddrAsync() mirror the browser-side Response.SecurityDetailsAsync() and Response.ServerAddrAsync().
• New option ArtifactsDir in BrowserType.ConnectOverCDPAsync() controls where artifacts such as traces and downloads are stored when attached to an existing browser.
• New option Cursor in Screencast.ShowActionsAsync() controls the cursor decoration rendered for pointer actions.
• The OnFrame callback in Screencast.StartAsync() now receives a Timestamp of when the frame was presented by the browser.

🛠️ Other improvements

• Playwright now supports Ubuntu 26.04.
• HAR and trace recordings now include WebSocket requests.

Browser Versions

• Chromium 149.0.7827.55
• Mozilla Firefox 151.0
• WebKit 26.5

This version was also tested against the following stable channels:
... (truncated)

Commits viewable in compare view.

Updated Scalar.AspNetCore from 2.16.3 to 2.16.9.

Release notes

Sourced from Scalar.AspNetCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated SonarAnalyzer.CSharp from 10.27.0.140913 to 10.28.0.143324.

Release notes

Sourced from SonarAnalyzer.CSharp's releases.

10.28.0.143324

Release notes - .NET Analyzers - 10.28

Feature

NET-1990 S100/S101: Configuration for custom acronyms
NET-2280 New Rule T0048: Avoid is not { } value
NET-3802 Update RSPEC before 10.28 release
NET-3818 Change Protobuf Info message to Debug
NET-3820 Coverage warnings should surface as Analysis Warnings
NET-3827 Create RSPEC for S8717: Multiple "[Key]" attributes should not be used to define a composite key
NET-3843 Implement rule S8717: Multiple "[Key]" attributes should not be used to define a composite key
NET-3949 Modify rule S2696: add fix guidance, compliant example, and exceptions
NET-3950 Modify rule S1135: add compliant example and fix guidance
NET-3951 Modify rule S108: give the C# page its own code examples
NET-3952 Modify rule S1133: add rationale, fix guidance, code examples
NET-3953 Modify rule S3251: add compliant example, fix guidance, and exceptions
NET-3967 Move S1313 out of hotspot
NET-3969 Move S2077 out of hotspot
NET-3972 Move S2092 and S3330 out of hotspot
NET-3973 Move S2245 out of hotspot
NET-3975 Move S2257 out of hotspot
NET-3976 Move S4036 out of hotspot
NET-3978 Move S4502 out of hotspot
NET-3980 Move S4507 out of hotspot
NET-3982 Move S5122 out of hotspot
NET-3983 Move S5332 out of hotspot
NET-3993 Move S5443 out of hotspot
NET-3995 Move S5753 out of hotspot
NET-3996 Move S5766 out of hotspot
NET-3998 Move S6640 out of hotspot
NET-4000 Move S4790 out of hotspot
NET-4001 Move S5693 out of hotspot
NET-4008 Change S1313 message
NET-4009 Change S2257 message
NET-4010 Change S4036 message
NET-4011 Change S2077 message

False Positive

NET-3564 Fix FP S6966: Do not raise for methods for SqlDataReader.IsDBNull/GetFieldValue
NET-3808 Fix S4260 FP: Don't raise on extension properties
NET-3821 Fix S1244 FP: Should not raise on comparison to 0
NET-3825 Fix S2221 FP: Do not raise on async void
NET-3878 Fix S3358 FP: Suggesting to extract ternary from EF Core select
NET-3914 Fix T0044 FP: Should not raise on locator annotaitons
NET-3926 Fix S6608 FP: Should not raise inside expression tree
NET-3927 Fix S6603 FP: Should not raise inside expression tree
NET-3932 S2068: Do not raise on @​paramName and $paramName

False Negative

NET-1673 Fix S4790 FN: default parameters
NET-2846 Fix S1117 FN: Extensions, Partial Events
... (truncated)

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud