Bump NServiceBus from 9.2.7 to 9.2.11

[dependabot]

Updated NServiceBus from 9.2.7 to 9.2.11.

Release notes

Sourced from NServiceBus's releases.

9.2.11

As part of this release we had 4 commits which resulted in 2 issues being closed.

Dependency CVEs

• #​7724 GitHub Security Advisory ID (GHSA-37gx-xxp4-5rgx) reported on branch release-9.2
• #​7727 GitHub Security Advisory ID (GHSA-w3x6-4m5h-cxqf) reported on branch release-9.2

Where to get it

You can download this release from NuGet.

🛡 ClamAV virus scan results: No viruses detected

Version: ClamAV 1.4.4
Scan Date: Wed, 29 Apr 2026 21:36:01 GMT

----------- SCAN SUMMARY -----------
Known viruses: 3627837
Engine version: 1.4.4
Scanned directories: 1
Scanned files: 7
Infected files: 0
Data scanned: 16.09 MB
Data read: 3.78 MB (ratio 4.26:1)
Time: 29.221 sec (0 m 29 s)
Start Date: 2026:04:29 21:35:29
End Date:   2026:04:29 21:35:58

9.2.10

As part of this release we had 3 commits which resulted in 1 issue being closed.

Bug

• #​7704 Update dependency System.Security.Cryptography.Xml to 8.0.3

Where to get it

You can download this release from NuGet.

🛡 ClamAV virus scan results: No viruses detected

Version: ClamAV 1.4.3
Scan Date: Wed, 15 Apr 2026 12:14:05 GMT

----------- SCAN SUMMARY -----------
Known viruses: 3627833
Engine version: 1.4.3
Scanned directories: 1
Scanned files: 7
Infected files: 0
Data scanned: 16.07 MB
Data read: 3.77 MB (ratio 4.26:1)
Time: 27.687 sec (0 m 27 s)
Start Date: 2026:04:15 12:13:34
End Date:   2026:04:15 12:14:02

9.2.9

As part of this release we had 3 commits which resulted in 1 issue being closed.

Bug

• #​7621 Assembly scanner can load types more than once from different AssemblyLoadContexts

Where to get it

You can download this release from NuGet.

🛡 ClamAV virus scan results: No viruses detected

Version: ClamAV 1.4.3
Scan Date: Tue, 03 Feb 2026 23:37:50 GMT

----------- SCAN SUMMARY -----------
Known viruses: 3627324
Engine version: 1.4.3
Scanned directories: 1
Scanned files: 7
Infected files: 0
Data scanned: 16.07 MB
Data read: 3.77 MB (ratio 4.26:1)
Time: 27.407 sec (0 m 27 s)
Start Date: 2026:02:03 23:37:18
End Date:   2026:02:03 23:37:45

9.2.8

As part of this release we had 3 commits which resulted in 1 issue being closed.

Bugs

• #​7485 Multiple RegisterOrReplace calls for the same pipeline step identifier throws System.Exception: Step registration with id '' is already registered for ''.

Where to get it

You can download this release from NuGet.

🛡 ClamAV virus scan results: No viruses detected

Version: ClamAV 1.4.3
Scan Date: Wed, 03 Dec 2025 21:04:20 GMT

----------- SCAN SUMMARY -----------
Known viruses: 8708970
Engine version: 1.4.3
Scanned directories: 1
Scanned files: 7
Infected files: 0
Data scanned: 15.85 MB
Data read: 3.98 MB (ratio 3.99:1)
Time: 28.552 sec (0 m 28 s)
Start Date: 2025:12:03 21:03:50
End Date:   2025:12:03 21:04:19

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)