Bump the nuget-minor-patch group with 5 updates

[dependabot]

Updated Jint from 4.15.3 to 4.16.0.

Release notes

Sourced from Jint's releases.

4.16.0

Jint 4.16.0 is a correctness- and reliability-focused release: alongside asynchronous module loading, proper tail calls and four new iterator built-ins, a pre-tag review swept the whole engine and fixed what it found — including long-standing defects that predate this cycle. No option defaults changed. Behaviour changes to note up front: JSON.stringify and other machine-readable output now format invariantly under every host culture — under Swedish or Finnish locales on .NET 8+ it used to emit a Unicode minus sign no JSON parser accepts; JSON.parse now rejects trailing commas as the grammar requires; bare identifiers at global scope resolve through the global's prototype chain per spec; IModuleLoader.Resolve is consulted once per (referrer, specifier) pair, so a loader using it as a per-import access-control checkpoint should move the check to LoadModule; and an inconsistent sort comparator now finishes with an implementation-defined order on every target framework instead of hanging (net462/netstandard) or throwing a CLR exception at script (net8+).

Highlights

Proper tail calls (#​2975). Strict-mode calls in tail position reuse their frame, so "use strict" tail recursion runs in constant stack — the first ES2015 PTC implementation among the .NET engines.

Asynchronous module loading (#​2872). IAsyncModuleLoader and the AsyncModuleLoader template let a host fetch module source over I/O without blocking a thread; Engine.Modules.StartImport returns an operation a game loop drives via ProcessTasks(), and ImportAsync awaits without holding a thread. The spec's load phase now exists as written, a warm-cache async loader keeps the blocking Import fully synchronous, and the blocking drain wakes on a work-arrived signal instead of polling. A module served over a transport keeps its whole url as Module.Location so its own relative imports resolve, a deferred namespace evaluates its module instead of exposing uninitialized bindings, and an import abandoned by a global snapshot restore reports itself faulted instead of polling forever.

The process no longer dies for recoverable reasons. Options.LimitRecursion used to kill the host process for most useful limits — the constraint fired, and the unwind itself overflowed the stack; exception filters now let it unwind ~7× deeper. The new opt-in Options.Constraints.StackOverflowGuard converts unbounded recursion — reachable through eighteen distinct routes, new, accessors, coercions and Proxy traps included — from a process kill into a catchable RangeError, exempting strict tail calls, which grow no stack. And a family of CLR exceptions that escaped engine.Evaluate past every script catch are now proper JavaScript errors or correct results: sorting with an inconsistent comparator, destructuring with a function-valued default (const { onChange = () => {} } = opts), toLocaleString outside DateTime's range, typed-array defineProperty without a value, DataView reads at 2³¹, String.replace $' with a lying exec, and the first instant of year 10000.

New built-ins. Iterator.prototype.join, chunks, windows and includes; take/drop now throw RangeError for a finite limit above 2^53−1 per the updated proposals. Intl.Locale.prototype.getCollations reports CLDR-cited collation data that Intl.Collator accepts in full, a malformed collation option is a RangeError, and Intl.supportedValuesOf("collation") derives from the same lists so the three can never drift.

Conformance, from a review that ran what the suite does not. Two of the fixed defects had test262 coverage only under the never-generated staging/ directory, and several had none at all: parseInt strips the sign before testing for a hex prefix, so parseInt("-0x10") is −16; a suspended finally no longer swallows a pending break/continue; a Proxy (or exotic host object) as the global's prototype answers bare identifiers through its get trap; Date.prototype.toISOString emits the spec's six-digit expanded year and round-trips through Date.parse in every spelling including year 0; iterator helpers close their receiver exactly once and only when the spec says so, and carry their own @@​toStringTag; Map/Set size is the prototype accessor the spec defines rather than a phantom own property; a Proxy's defineProperty trap receives the partial descriptor the caller wrote; a string's @@​iterator is read once, with the primitive as receiver; Array.prototype.join re-asks the array when a side effect fills a hole mid-join; a direct eval reaches the enclosing function's arguments in both modes; and Temporal.Now drops the methods the proposal removed.

Embedder surface. OperationDeadlineConstraint bounds a whole multi-entry host operation; ScriptPreparationOptions.StaticAnalysis trades prepare-time analysis for per-engine materialization on shared graphs; ModuleFactory.LocationOf exposes the module-naming rule a host must match; Engine.Advanced.HostDefined carries per-request state on a pooled engine; the CLR exception behind an interop error is reachable through JintException.TryGetClrException with opt-in ChainClrExceptions(), and a host method's own TargetException is no longer mistaken for a receiver mismatch; and a recursion-limit failure propagates out of a module load instead of becoming a catchable rejection.

Performance, gated. Against v4.15.3 on idle hardware, medians of three paired runs: controlflow-recursive −15.6% time and −40.4% allocation (proper tail calls), bitops-3bit-bits-in-byte −8.9%, math-spectral-norm −7.3%, crypto-sha1 −6.9%, 3d-raytrace −5.9%, math-cordic −5.8%, with a broad −1–4% tail across the call- and string-heavy rows; no row moved outside its own measured cross-run envelope in the other direction, and allocation is flat within ±0.2% suite-wide. Warmed parseInt call sites take the frameless fast-call lane (−13% on the parse loop), joined by the Number predicates, String.prototype.indexOf/startsWith/endsWith/includes/at/substr, global isNaN/isFinite and Array.isArray (−3% to −19%) and the Map/Set method family (map.get hit loop −13%); existence questions on a wrapped dictionary answer from ContainsKey, taking in −33% with −98% allocation and Object.keys −37%; resolving an inherited global no longer allocates per miss (−99.99% on the read loop) and a global created through an inherited write keeps the in-place store; JSON replacer/reviver eligibility is decided once per document, built-in callback dispatch once per loop, a call site's arguments reach an interpreted callee in registers, and function-local let/const live in fixed slots.

Breaking changes. Int32Extensions/Int64Extensions/DoubleExtensions — polyfill hosts that leaked into the public API — are now internal; on net462/netstandard2.0, code with using Jint; may have bound span Parse/TryParse members through them. JsonParser rejects trailing commas. Number.parseInt.length/Number.parseFloat.length report their spec values. Post-construction mutation of an Options instance no longer reaches an already-built engine, and Options.Configure callbacks work again. UnwrapIfPromise reports a cancelled engine as ExecutionCanceledException instead of a timeout. Time-zone matching is ASCII-case-insensitive per ECMA-402.

On the engine comparison benchmarks, Jint 4.16.0 is the fastest engine outright on 5 of 12 scripts — leading dromaeo-object-regexp-modern over native V8 by 1.25× — in a statistical tie for first on interop-collection-traversal, the fastest managed engine on 10 of 12, the fastest interpreter on all 12, and 8.6×–11.2× ahead of ClearScript (native V8) on every interop row while allocating 3.9×–12.4× less than the nearest managed competitor.

What's Changed

• Run the repository's own host tests under Release-mode contract verification by @​lahma in Run the repository's own host tests under Release-mode contract verification sebastienros/jint#2866
• Update test262 suite and implement Iterator.prototype.join by @​lahma in Update test262 suite and implement Iterator.prototype.join sebastienros/jint#2867
• Stop a closing iterator from swallowing the error that closed it by @​lahma in Stop a closing iterator from swallowing the error that closed it sebastienros/jint#2868
• Give every benchmark row its own engine by @​lahma in Give every benchmark row its own engine sebastienros/jint#2873
• Hand a call site's arguments to an interpreted callee in registers by @​lahma in Hand a call site's arguments to an interpreted callee in registers sebastienros/jint#2874
• Ask once per loop, not once per element, how to call a built-in's callback by @​lahma in Ask once per loop, not once per element, how to call a built-in's callback sebastienros/jint#2876
• Say which spec document to read for a feature by @​lahma in Say which spec document to read for a feature sebastienros/jint#2882
• Run PR CI on every pull request, not only those targeting main by @​lahma in Run PR CI on every pull request, not only those targeting main sebastienros/jint#2883
• Update test262 suite and adopt the new take/drop RangeError by @​lahma in Update test262 suite and adopt the new take/drop RangeError sebastienros/jint#2877
• Implement Iterator Chunking by @​lahma in Implement Iterator Chunking sebastienros/jint#2878
• Say to write against the modern BCL and polyfill downwards by @​lahma in Say to write against the modern BCL and polyfill downwards sebastienros/jint#2884
• Implement Iterator Includes by @​lahma in Implement Iterator Includes sebastienros/jint#2879
• Ask once per document, not once per key, how to call a JSON replacer or reviver by @​lahma in Ask once per document, not once per key, how to call a JSON replacer or reviver sebastienros/jint#2885
• Use double.IsFinite instead of hand-rolled NaN and infinity pairs by @​lahma in Use double.IsFinite instead of hand-rolled NaN and infinity pairs sebastienros/jint#2880
• Bump the testing group with 1 update by @​dependabot[bot] in Bump the testing group with 1 update sebastienros/jint#2889
• Stop charging closures for per-engine lazy globals by @​lahma in Stop charging closures for per-engine lazy globals sebastienros/jint#2890
• Bump the analyzers group with 1 update by @​dependabot[bot] in Bump the analyzers group with 1 update sebastienros/jint#2888
• Make the lazy-global re-arm on restore a contract instead of an accident by @​lahma in Make the lazy-global re-arm on restore a contract instead of an accident sebastienros/jint#2892
• Let the amortized constraint cadence span top-level entries into the engine by @​lahma in Let the amortized constraint cadence span top-level entries into the engine sebastienros/jint#2886
• Let a function's own let/const live in its fixed slots by @​lahma in Let a function's own let/const live in its fixed slots sebastienros/jint#2887
• Keep a host function in the engine's own realm after a second realm exists by @​lahma in Keep a host function in the engine's own realm after a second realm exists sebastienros/jint#2893
• Make an engine's principal realm [[HostDefined]] reachable by @​lahma in Make an engine's principal realm [[HostDefined]] reachable sebastienros/jint#2891
• Carry a labelled break/continue target on the completion record by @​lahma in Carry a labelled break/continue target on the completion record sebastienros/jint#2894
• Make Array.prototype.sort stable on every target framework by @​lahma in Make Array.prototype.sort stable on every target framework sebastienros/jint#2898
• Stop toSorted and %TypedArray%.sort hanging on an inconsistent comparator by @​lahma in Stop toSorted and %TypedArray%.sort hanging on an inconsistent comparator sebastienros/jint#2899
• Delete the evaluation context's dead completion channel by @​lahma in Delete the evaluation context's dead completion channel sebastienros/jint#2895
• Stop shipping the numeric polyfill hosts as public API by @​lahma in Stop shipping the numeric polyfill hosts as public API sebastienros/jint#2901
  ... (truncated)

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Components.Web from 10.0.10 to 10.0.11.

Release notes

Sourced from Microsoft.AspNetCore.Components.Web's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Logging.Abstractions from 10.0.10 to 10.0.11.

Release notes

Sourced from Microsoft.Extensions.Logging.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.8.1 to 18.9.0.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.9.0

What's Changed

• Fix tilde/exclamation characters corrupted in TerminalLogger test output by @​nohwnd in [fix] Fix tilde/exclamation characters corrupted in TerminalLogger test output microsoft/vstest#16046
• Make TranslationLayer Native AOT-compatible by @​drewnoakes in Make TranslationLayer Native AOT-compatible microsoft/vstest#16045
• Guard GenerateProgramFile target against UseWinUI/UseUwpTools evaluation order by @​nohwnd in [fix] fix: guard GenerateProgramFile target against UseWinUI/UseUwpTools evaluation order microsoft/vstest#16072
• Add RequestingAssembly to AssemblyResolveEventArgs for binary compat by @​nohwnd in [fix] fix: add RequestingAssembly to AssemblyResolveEventArgs for binary compat microsoft/vstest#16076
• Remove stale Microsoft.Extensions.FileSystemGlobbing binding redirect from testhost.x86 and datacollector by @​Evangelink in Remove stale Microsoft.Extensions.FileSystemGlobbing binding redirect from testhost.x86 and datacollector microsoft/vstest#16082
• Fix TRX attachment paths when LogFileName contains a subdirectory by @​nohwnd in [fix] Fix TRX attachment paths when LogFileName contains a subdirectory microsoft/vstest#15791
• Fix missing dumps for .NET Framework child processes in NetClientHangDumper by @​nohwnd in [fix] Fix missing dumps for .NET Framework child processes in NetClientHangDumper microsoft/vstest#16098
• Fix data collection channels to use negotiated protocol version instead of V1 by @​nohwnd in [fix] Fix data collection channels to use negotiated protocol version instead of V1 microsoft/vstest#16096
• Fix race condition in BlameCollector: skip hang dump when testhost hasn't launched yet by @​nohwnd in [fix] Fix race condition in BlameCollector: skip hang dump when testhost hasn't launched yet microsoft/vstest#16065
• Replace TestSDKAutoGeneratedCode with ExcludeFromCodeCoverage in auto-generated Program files by @​nohwnd in [fix] Replace TestSDKAutoGeneratedCode with ExcludeFromCodeCoverage in auto-generated Program files microsoft/vstest#16101
• Include testhost process path in crash error messages by @​nohwnd in [fix] Include testhost process path in crash error messages microsoft/vstest#16108
• Fix DataDriven test results being double-counted in TRX logger totals by @​nohwnd in [fix] Fix DataDriven test results being double-counted in TRX logger totals microsoft/vstest#15766
• Fix datacollector crash visibility: replace Assert with throwable exceptions by @​nohwnd in [fix] Fix datacollector crash visibility: replace Assert with throwable exceptions microsoft/vstest#16048
• Add TreatErrorMessagesAsWarnings parameter to TRX logger by @​nohwnd in [fix] Add TreatErrorMessagesAsWarnings parameter to TRX logger microsoft/vstest#16106
• Wait for testhost stderr to drain before reading its crash output by @​nohwnd in Wait for testhost stderr to drain before reading its crash output microsoft/vstest#16128
• Handle runtimeconfig.dev.json without additionalProbingPaths by @​tmat in Handle runtimeconfig.dev.json without additionalProbingPaths microsoft/vstest#16166
• Suggest Microsoft.NET.Test.Sdk when a managed test project brings no testhost by @​nohwnd in Suggest Microsoft.NET.Test.Sdk when a managed test project brings no testhost microsoft/vstest#16169
• Fix x86 testhost loading mismatched x64 hostfxr (0x800700C1) when run via vstest.console.exe directly (#​16151) by @​azat-msft in Fix x86 testhost loading mismatched x64 hostfxr (0x800700C1) when run via vstest.console.exe directly (#16151) microsoft/vstest#16156
• Preserve the real exception (type + stack trace) when a test run aborts in BaseRunTests by @​nohwnd in [fix] Preserve the real exception (type + stack trace) when a test run aborts in BaseRunTests microsoft/vstest#16167

New Contributors

• @​drewnoakes made their first contribution in Make TranslationLayer Native AOT-compatible microsoft/vstest#16045

Full Changelog: microsoft/vstest@v18.8.0...v18.9.0

Commits viewable in compare view.

Updated System.CommandLine from 2.0.10 to 2.0.11.

Release notes

Sourced from System.CommandLine's releases.

No release notes found for this version range.

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions