Bump @microsoft/signalr from 8.0.17 to 9.0.6 in /yafsrc/YetAnotherForum.NET
Closed
Number: #1483
Type: Pull Request
State: Closed
Type: Pull Request
State: Closed
Author:
dependabot[bot]
Association: Contributor
Comments: 1
Association: Contributor
Comments: 1
Created:
August 01, 2025 at 12:57 PM UTC
(11 months ago)
(11 months ago)
Updated:
August 02, 2025 at 03:51 AM UTC
(11 months ago)
(11 months ago)
Closed:
August 02, 2025 at 03:51 AM UTC
(11 months ago)
(11 months ago)
Time to Close:
about 15 hours
Labels:
dependencies javascript
dependencies javascript
Description:
Bumps @microsoft/signalr from 8.0.17 to 9.0.6.
Release notes
Sourced from @microsoft/signalr's releases.
v9.0.6
Bug Fixes
- Forwarded Headers Middleware: Ignore X-Forwarded-Headers from Unknown Proxy (#61622)
The Forwarded Headers Middleware now ignoresX-Forwarded-Headerssent from unknown proxies. This change improves security by ensuring that only trusted proxies can influence forwarded header values, preventing potential spoofing or misrouting issues.Dependency Updates
- Bump src/submodules/googletest from
52204f7to04ee1b4(#61762)
Updates the GoogleTest submodule to a newer commit, bringing in the latest improvements and bug fixes from the upstream project.- Update dependencies from dotnet/arcade (#61714)
Updates internal build and infrastructure dependencies from the dotnet/arcade repository, ensuring compatibility and access to the latest build tools.- Update dependencies from dotnet/extensions (#61571)
Refreshes dependencies from the dotnet/extensions repository, incorporating the latest features and fixes from the extensions libraries.- Update dependencies from dotnet/extensions (#61877)
Further updates dependencies from dotnet/extensions, ensuring the project benefits from recent improvements and bug fixes.- Update dependencies from dotnet/arcade (#61892)
Additional updates to build and infrastructure dependencies from dotnet/arcade, maintaining up-to-date tooling and build processes.Miscellaneous
- Update branding to 9.0.6 (#61831)
Updates the project version and branding to 9.0.6, reflecting the new release and ensuring version consistency across the codebase.- Merging internal commits for release/9.0 (#61925)
Incorporates various internal commits into the release/9.0 branch, ensuring that all relevant changes are included in this release.
This summary is generated and may contain inaccuracies. For complete details, please review the linked pull requests.
Full Changelog: v9.0.5...v9.0.6
.NET 9.0.5
What's Changed
- Update branding to 9.0.5 by
@vseanreesermsftin dotnet/aspnetcore#61284- [release/9.0] (deps): Bump src/submodules/googletest from
24a9e94to52204f7by@dependabotin dotnet/aspnetcore#61261- [release/9.0] Upgrade to Ubuntu 22 by
@github-actionsin dotnet/aspnetcore#61215- [release/9.0] Update dependencies from dotnet/extensions by
@dotnet-maestroin dotnet/aspnetcore#60964- [release/9.0] Update dependencies from dotnet/arcade by
@dotnet-maestroin dotnet/aspnetcore#60902- [release/9.0] Update dependencies from dotnet/arcade by
@dotnet-maestroin dotnet/aspnetcore#61355- [release/9.0] Caching SERedis critical bugfix; defer HC metadata detection because of DI cycle by
@github-actionsin dotnet/aspnetcore#60916- [release/9.0] Update dependencies from dotnet/extensions by
@dotnet-maestroin dotnet/aspnetcore#61354- Merging internal commits for release/9.0 by
@vseanreesermsftin dotnet/aspnetcore#61393- [release/9.0] Update dependencies from dotnet/arcade by
@dotnet-maestroin dotnet/aspnetcore#61412- Revert "Revert "[release/9.0] Update remnants of azureedge.net"" by
@wtgodbein dotnet/aspnetcore#60353- [release/9.0] Fix preserving messages for stateful reconnect with backplane by
@github-actionsin dotnet/aspnetcore#61374- [release/9.0] Update dependencies from dotnet/extensions by
@dotnet-maestroin dotnet/aspnetcore#61483- [Identity] Fix Identity UI asset definitions by
@javiercnin dotnet/aspnetcore#59100
... (truncated)
Commits
379bfc7Merged PR 50163: [internal/release/9.0] Update dependencies from dnceng/inter...c9825f1Update dependencies from https://dev.azure.com/dnceng/internal/_git/dotnet-ef...a5a2249Merged PR 50155: [internal/release/9.0] Update dependencies from dnceng/inter...6d041d4Update dependencies from https://dev.azure.com/dnceng/internal/_git/dotnet-ru...90e3638Merged PR 49626: [internal/release/9.0] Update dependencies from dnceng/inter...207bcfbUpdate dependencies from https://dev.azure.com/dnceng/internal/_git/dotnet-ru...9654afeUpdate dependencies from https://dev.azure.com/dnceng/internal/_git/dotnet-ef...f127672Update dependencies from https://dev.azure.com/dnceng/internal/_git/dotnet-ef...3e30f81Update dependencies from https://dev.azure.com/dnceng/internal/_git/dotnet-ef...df2a28cUpdate dependencies from https://dev.azure.com/dnceng/internal/_git/dotnet-ef...- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Pull Request Statistics
Commits:
0
0
Files Changed:
0
0
Additions:
+0
+0
Deletions:
-0
-0
Package Dependencies
Package:
@microsoft/signalr
Ecosystem:
npm
npm
Version Change:
8.0.17 → 9.0.6
Update Type:
Major
Major
Path:
/yafsrc/YetAnotherForum.NET
Technical Details
| ID: | 4472224 |
| UUID: | 3283847626 |
| Node ID: | PR_kwDOALj_SM6ht3nJ |
| Host: | GitHub |
| Repository: | YAFNET/YAFNET |