Skip to content

chore(deps): Bump Microsoft.AspNetCore.Identity.EntityFrameworkCore from 8.0.4 to 8.0.26#27

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/dotnet/src/Pal.Persistence/identity-378c59ecf0
Closed

chore(deps): Bump Microsoft.AspNetCore.Identity.EntityFrameworkCore from 8.0.4 to 8.0.26#27
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/dotnet/src/Pal.Persistence/identity-378c59ecf0

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github Apr 28, 2026 •
edited
Loading

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

Updated Microsoft.AspNetCore.Identity.EntityFrameworkCore from 8.0.4 to 8.0.26.

Release notes

Sourced from Microsoft.AspNetCore.Identity.EntityFrameworkCore's releases.

8.0.26

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.25...v8.0.26

8.0.25

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.24...v8.0.25

8.0.24

Release

8.0.23

Release

What's Changed

https://devblogs.microsoft.com/dotnet/dotnet-and-dotnet-framework-january-2026-servicing-updates/#release-changelogs

8.0.22

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.21...v8.0.22

8.0.21

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.20...v8.0.21

8.0.20

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.19...v8.0.20

8.0.18

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.17...v8.0.18

8.0.17

Bug Fixes

  • Forwarded Headers Middleware: Ignore X-Forwarded-Headers from Unknown Proxy (#​61623)
    The Forwarded Headers Middleware now ignores X-Forwarded-Headers sent from unknown proxies. This change improves security by ensuring that only trusted proxies can influence the forwarded headers, preventing potential spoofing or misrouting of requests.

Dependency Updates

  • Update dependencies from dotnet/arcade (#​61832)
    This update brings in the latest changes from the dotnet/arcade repository, ensuring that ASP.NET Core benefits from recent improvements, bug fixes, and security patches in the shared build infrastructure.

  • Bump src/submodules/googletest from 52204f7 to 04ee1b4 (#​61761)
    The GoogleTest submodule has been updated to a newer commit, providing the latest testing features, bug fixes, and performance improvements for the project's C++ test components.

Miscellaneous

  • Update branding to 8.0.17 (#​61830)
    The project version branding has been updated to reflect the new 8.0.17 release, ensuring consistency across build outputs and documentation.

  • Merging internal commits for release/8.0 (#​61924)
    This change merges various internal commits into the release/8.0 branch, incorporating minor fixes, documentation updates, and other non-user-facing improvements to keep the release branch up to date.

This summary is generated and may contain inaccuracies. For complete details, please review the linked pull requests.

Full Changelog: dotnet/aspnetcore@v8.0.16...v8.0.17

8.0.16

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.15...v8.0.16

8.0.15

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.14...v8.0.15

8.0.14

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.13...v8.0.14

8.0.13

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.12...v8.0.13

8.0.12

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.11...v8.0.12

8.0.11

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.10...v8.0.11

8.0.10

Release

8.0.8

Release

8.0.7

Release

8.0.6

Release

8.0.5

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.4...v8.0.5

Commits viewable in compare view.

@dependabot dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Apr 28, 2026
@joshuatownsend
Copy link
Copy Markdown
Owner

joshuatownsend commented Apr 29, 2026

@dependabot rebase

@dependabot dependabot Bot changed the title chore(deps): Bump the identity group with 1 update chore(deps): Bump Microsoft.AspNetCore.Identity.EntityFrameworkCore from 8.0.4 to 8.0.26 Apr 29, 2026
@dependabot
chore(deps): Bump Microsoft.AspNetCore.Identity.EntityFrameworkCore f…
52bacf8 
…rom 8.0.4 to 8.0.26

---
updated-dependencies:
- dependency-name: Microsoft.AspNetCore.Identity.EntityFrameworkCore
  dependency-version: 8.0.26
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: identity
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/nuget/dotnet/src/Pal.Persistence/identity-378c59ecf0 branch from b178a0b to 52bacf8 Compare April 29, 2026 01:05
@joshuatownsend
Copy link
Copy Markdown
Owner

joshuatownsend commented Apr 29, 2026

@dependabot rebase

@joshuatownsend
Copy link
Copy Markdown
Owner

joshuatownsend commented Apr 29, 2026

Closing — superseded by #26, which already bumped Microsoft.AspNetCore.Identity.EntityFrameworkCore to 8.0.26 on main. The identity group in .github/dependabot.yml will be removed in a follow-up commit since its pattern Microsoft.AspNetCore.Identity* is already covered by the aspnet-core group's Microsoft.AspNetCore.* pattern.

@dependabot @github
Copy link
Copy Markdown
Author

dependabot Bot commented on behalf of github Apr 29, 2026

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@joshuatownsend joshuatownsend deleted the dependabot/nuget/dotnet/src/Pal.Persistence/identity-378c59ecf0 branch April 29, 2026 01:09
@joshuatownsend joshuatownsend mentioned this pull request Apr 29, 2026
Merged
4 tasks
joshuatownsend added a commit that referenced this pull request Apr 29, 2026
@joshuatownsend @claude
chore(deps): tune dependabot ignore rules from first-run feedback (#33)
3d9ddf5 
After the initial Dependabot reconciliation produced 11 PRs, several lessons
learned justified config tuning:

1. Major-version bumps of Microsoft.* and Npgsql* packages are coupled to the
   .NET runtime version. Bumping EF Core to 9.x or AspNetCore.* to 9.x
   requires a TargetFramework change. Add `ignore: version-update:semver-major`
   for these so we stop receiving them until we explicitly plan a runtime
   upgrade.
2. Same logic for the docker dotnet/sdk and dotnet/aspnet base images.
3. Spectre.Console 0.50+ changed AsyncCommand<T>.ExecuteAsync to require a
   CancellationToken parameter, which breaks our ~25 command class overrides.
   Ignore Spectre.* minor and major updates until we plan the explicit upgrade.
4. Remove the `identity` group — its `Microsoft.AspNetCore.Identity*` pattern
   was already covered by `aspnet-core`'s `Microsoft.AspNetCore.*` pattern,
   and the duplication caused a redundant PR (#27 superseded by #26).

Net result: future weekly batches should be small and routine. Major
bumps will only show up as individual PRs after the corresponding ignore
rule is removed (when we plan a runtime upgrade).

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@joshuatownsend