Bump the minor-and-patch group with 4 updates

[dependabot]

Updated Microsoft.AspNetCore.Authentication.JwtBearer from 8.0.30 to 8.0.31.

Release notes

Sourced from Microsoft.AspNetCore.Authentication.JwtBearer's releases.

8.0.31

Release

What's Changed

• [release/8.0] Update branding to 8.0.31 by @​dotnet-bot in [release/8.0] Update branding to 8.0.31 dotnet/aspnetcore#68235
• [release/8.0] Backport FormsInputDateTest fixes by @​ilonatommy in [release/8.0] Backport FormsInputDateTest fixes dotnet/aspnetcore#68125
• [release/8.0] (deps): Bump src/submodules/googletest from 3064a60 to 3940de9 by @​dependabot[bot] in [release/8.0] (deps): Bump src/submodules/googletest from 3064a60 to 3940de9 dotnet/aspnetcore#68173
• [release/8.0] Update dependencies from dotnet/source-build-assets by @​dotnet-maestro[bot] in [release/8.0] Update dependencies from dotnet/source-build-assets dotnet/aspnetcore#68189
• [release/8.0] Update dependencies from dotnet/source-build-externals by @​dotnet-maestro[bot] in [release/8.0] Update dependencies from dotnet/source-build-externals dotnet/aspnetcore#67801
• [release/8.0] Quarantine System_UsesProvidedCertificateNotFromStore by @​wtgodbe in [release/8.0] Quarantine System_UsesProvidedCertificateNotFromStore dotnet/aspnetcore#68242
• [8.0] Fix Debian package descriptions by @​wtgodbe in [8.0] Fix Debian package descriptions dotnet/aspnetcore#68255
• Remove Publish-Build-Assets variable group from release/8.0 by @​missymessa in Remove Publish-Build-Assets variable group from release/8.0 dotnet/aspnetcore#68265
• [release/8.0] Drop Microsoft.AspNetCore.Grpc.Swagger by @​Youssef1313 with @​Copilot in [release/8.0] Drop Microsoft.AspNetCore.Grpc.Swagger dotnet/aspnetcore#67955
• Merging internal commits for release/8.0 by @​dotnet-bot in Merging internal commits for release/8.0 dotnet/aspnetcore#68361
• [release/8.0] Update OpenAPI to latest by @​Youssef1313 in [release/8.0] Update OpenAPI to latest dotnet/aspnetcore#68491

Full Changelog: dotnet/aspnetcore@v8.0.30...v8.0.31

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Mvc.Testing from 8.0.30 to 8.0.31.

Release notes

Sourced from Microsoft.AspNetCore.Mvc.Testing's releases.

8.0.31

Release

What's Changed

• [release/8.0] Update branding to 8.0.31 by @​dotnet-bot in [release/8.0] Update branding to 8.0.31 dotnet/aspnetcore#68235
• [release/8.0] Backport FormsInputDateTest fixes by @​ilonatommy in [release/8.0] Backport FormsInputDateTest fixes dotnet/aspnetcore#68125
• [release/8.0] (deps): Bump src/submodules/googletest from 3064a60 to 3940de9 by @​dependabot[bot] in [release/8.0] (deps): Bump src/submodules/googletest from 3064a60 to 3940de9 dotnet/aspnetcore#68173
• [release/8.0] Update dependencies from dotnet/source-build-assets by @​dotnet-maestro[bot] in [release/8.0] Update dependencies from dotnet/source-build-assets dotnet/aspnetcore#68189
• [release/8.0] Update dependencies from dotnet/source-build-externals by @​dotnet-maestro[bot] in [release/8.0] Update dependencies from dotnet/source-build-externals dotnet/aspnetcore#67801
• [release/8.0] Quarantine System_UsesProvidedCertificateNotFromStore by @​wtgodbe in [release/8.0] Quarantine System_UsesProvidedCertificateNotFromStore dotnet/aspnetcore#68242
• [8.0] Fix Debian package descriptions by @​wtgodbe in [8.0] Fix Debian package descriptions dotnet/aspnetcore#68255
• Remove Publish-Build-Assets variable group from release/8.0 by @​missymessa in Remove Publish-Build-Assets variable group from release/8.0 dotnet/aspnetcore#68265
• [release/8.0] Drop Microsoft.AspNetCore.Grpc.Swagger by @​Youssef1313 with @​Copilot in [release/8.0] Drop Microsoft.AspNetCore.Grpc.Swagger dotnet/aspnetcore#67955
• Merging internal commits for release/8.0 by @​dotnet-bot in Merging internal commits for release/8.0 dotnet/aspnetcore#68361
• [release/8.0] Update OpenAPI to latest by @​Youssef1313 in [release/8.0] Update OpenAPI to latest dotnet/aspnetcore#68491

Full Changelog: dotnet/aspnetcore@v8.0.30...v8.0.31

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.9.0 to 18.10.1.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.10.1

What's Changed

• Isolate code coverage files in published output by @​azat-msft in [rel/18.10] Isolate code coverage files in published output microsoft/vstest#16476

Full Changelog: microsoft/vstest@v18.10.0...v18.10.1

18.10.0

What's Changed

• Drop Mono fallback, run .NET Framework tests on Windows only by @​nohwnd in Drop Mono fallback, run .NET Framework tests on Windows only microsoft/vstest#16158
• Run Microsoft.Testing.Platform test apps under vstest.console and datacollector by @​nohwnd in Run Microsoft.Testing.Platform test apps under vstest.console and datacollector microsoft/vstest#16201
• Fix test output eaten by MSBuild terminal logger by @​nohwnd in [fix] Fix test output eaten by MSBuild terminal logger microsoft/vstest#16223
• Remove the experimental test session feature by @​nohwnd in Remove the experimental test session feature microsoft/vstest#16231
• Skip a single bad executor instead of failing all executor loading by @​nohwnd in Skip a single bad executor instead of failing all executor loading microsoft/vstest#16239
• Assert apartment state instead of using Clipboard in UI tests by @​nohwnd in Assert apartment state instead of using Clipboard in UI tests microsoft/vstest#16270
• Surface test host crashes during protocol negotiation by @​nohwnd in Surface test host crashes during protocol negotiation microsoft/vstest#16285
• Pass the inferred target platform to the host in run settings by @​nohwnd in Pass the inferred target platform to the host in run settings microsoft/vstest#16271
• Report raw invalid IsTargetPlatformInferred value, cover host x64 forcing by @​nohwnd in Report raw invalid IsTargetPlatformInferred value, cover host x64 forcing microsoft/vstest#16295
• Disable the MTP testhost by default (#​16337) by @​nohwnd in [rel/18.10] Disable the MTP testhost by default (#16337) microsoft/vstest#16341

Full Changelog: microsoft/vstest@v18.9.0...v18.10.0

Commits viewable in compare view.

Updated System.IdentityModel.Tokens.Jwt from 8.22.0 to 8.23.0.

Release notes

Sourced from System.IdentityModel.Tokens.Jwt's releases.

8.23.0

What's Changed

• Backport configurable SHR p claim path comparison to 8.x by @​debchoudhury-id4s in Backport configurable SHR p claim path comparison to 8.x AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#3577
• Backport SHR p-claim percent-encoding hex case handling to dev8x by @​debchoudhury-id4s in Backport SHR p-claim percent-encoding hex case handling to dev8x AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#3579
• Reinstate Microsoft.IdentityModel.Protocols.WsTrust as a supported 8.x package by @​iNinja in Reinstate Microsoft.IdentityModel.Protocols.WsTrust as a supported 8.x package AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#3547
• Include WS-Trust in build pipelines by @​iNinja in Include WS-Trust in build pipelines AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#3604
• Log IDX10650 decryption-tag failures below Error during multi-key decryption by @​RojaEnnam in Log IDX10650 decryption-tag failures below Error during multi-key decryption AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#3582
• Support ML-DSA AKP keys in JsonWebKeySet by @​iNinja in Support ML-DSA AKP keys in JsonWebKeySet AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#3597
• Add Composite ML-DSA support (internal, gated) by @​iNinja in Add Composite ML-DSA support (internal, gated) AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#3596

Full Changelog: AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet@8.22.0...8.23.0

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
devflow-platform	Ready	Preview	Sep 21, 2026 4:40pm UTC

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: ecb61561-1596-4a00-9ff5-3677ebfdf1c9

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}