Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 22, 2025

Updated bunit from 1.40.0 to 2.4.2.

Release notes

Sourced from bunit's releases.

2.4.2

Fixed

  • Use proper return typed for InputAsync and ChangeAsync methods.

2.3.4

Added

  • Added generic overloads Find{TComponent, TElement} and FindAll{TComponent, TElement} to query for specific element types (e.g., IHtmlInputElement). By @​linkdotnet.
  • Added generic overloads WaitForElement{TComponent, TElement} and WaitForElements{TComponent, TElement} to wait for specific element types. By @​linkdotnet.

Fixed

  • Adding convenient overloads for InputAsync and ChangeAsync to have feature parity with the sync version. Reported by @​ScarletKuro. Fixed by @​linkdotnet.

2.2.2

Added

  • Added FindByAllByLabel to bunit.web.query package. By @​linkdotnet.

Fixed

  • Updated AngleSharp.Diffing to fix a bug related to unknown HTML elements. Reported by @​md-at-slashwhy.

2.1.1

Changed

  • Registering AuthenticationState in the services container rather than as part of the RenderTree. Fixes #​1774 reported by @​aayjaychan.

2.0.66

This major release focuses on platform updates and API simplifications.

For a migration guide, see Upgrading bUnit.

Changed

  • Target framework support updated: added support for .NET 10 (net10.0) and dropped all versions prior to .NET 8 (net8.0).
  • Cleanup of the API with simplifications of many API calls and methods. This also includes renaming of some objects to better reflect their purpose.

Added

  • Support for form submission from submit buttons and inputs that are outside the form element but associated via the HTML5 form attribute. Reported and fixed in #​1766.
  • Improved renderer logic that catches more edge cases.
  • Improved developer experience in relation to JSInterop.

Commits viewable in compare view.

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---
updated-dependencies:
- dependency-name: bunit
  dependency-version: 2.4.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Dec 22, 2025

Labels

The following labels could not be found: dependencies, nuget, security. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@github-actions
Copy link

🛡️ Security Scan Summary

Scan Date: Mon Dec 22 06:31:34 UTC 2025
Commit: f66f158

🔍 Scan Results

Tool Status Details
TruffleHog ✅ Secure No secrets detected
.NET Vulnerability Scan ℹ️ Skipped Scan not executed
CodeQL 📊 Uploaded Results uploaded to GitHub Security tab - manual review required
Semgrep SAST ✅ Secure No security issues detected
Trivy Filesystem ℹ️ Skipped Scan not executed
OWASP Dependency Check ℹ️ Skipped Scan not executed
OWASP ZAP Dynamic Scan ℹ️ Skipped Scan not executed
Security Configuration ℹ️ Skipped Audit not executed

⚠️ CRITICAL: CodeQL Security Analysis

IMPORTANT: This summary may show CodeQL as 'secure' even if issues exist.
ALWAYS check the GitHub Security Tab for CodeQL findings.
High/Critical CodeQL issues MUST be resolved before merge, regardless of this summary.

📋 Recommendations

  • PRIORITY: Check GitHub Security tab for CodeQL findings
  • Fix all high/critical CodeQL issues before merge
  • Review all findings in the Security tab
  • Update vulnerable dependencies promptly
  • Follow secure coding practices from copilot-instructions.md
  • Regular security reviews and updates

Security scan generated by Setlist Studio CI/CD Pipeline 🔒

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

AddAuthorization() / AddTestAuthorization() doesn't work with shallow rendering

2 participants