Skip to content

⬆️ Bump Microsoft.EntityFrameworkCore and 3 others #13

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
dependabot wants to merge 1 commit into
base: main
Choose a base branch
from
Open

⬆️ Bump Microsoft.EntityFrameworkCore and 3 others #13

dependabot wants to merge 1 commit into from

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 22, 2025

Updated Microsoft.EntityFrameworkCore from 8.0.22 to 9.0.1.

Release notes

Sourced from Microsoft.EntityFrameworkCore's releases.

9.0.1

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.0...v9.0.1

9.0.0

Release

What's Changed

9.0.0-rc.2.24474.1

Release

9.0.0-rc.1.24451.1

Release

9.0.0-preview.7.24405.3

Release

9.0.0-preview.6.24327.4

Release

9.0.0-preview.5.24306.3

The team has been working primarily on EF Core internals, so there are no new big features in EF Core 9 (EF9) Preview 5. However, this means we really need people like you to run your code on these new internals and report back what you find. We want to fix bugs in the new internals as soon as possible in order to have a strong GA release later in the year.

That being said, there are several smaller enhancements included in preview 5. For full details, see What's new in EF Core 9. To discuss the EF9 release, go to Try EF Core 9 now! on GitHub.

Enhanced database provider for Azure Cosmos DB for NoSQL

We are working on significant updates in EF9 to the EF Core database provider for Azure Cosmos DB for NoSQL. For preview 5, these include:

  • Support for hierarchical partition keys
  • Use of any numeric, bool, string, or value-converted type as a partition key

See Azure Cosmos DB for NoSQL in the What's New docs for more information.

Query translation improvements

EF9 preview 5 contains three small enhancements to query translation:

  • Optimization of queries using Count != 0 or Count > 0
  • Translations for TimeOnly.FromDateTime and TimeOnly.FromTimeSpan

See LINQ and SQL translation in the What's New docs for more information.

Everything else in preview 5

Preview 5 contains:

EF Core 9 preview 5 and Microsoft.Data.Sqlite contain work from the EF Team at Microsoft (@​roji @​AndriySvyryd @​maumar @​ajcvickers @​cincuranet @​SamMonoRT @​luisquintanilla).

9.0.0-preview.4.24267.1

The team has been working primarily on EF Core internals, so there are no new big features in EF Core 9 (EF9) Preview 4. However, this means we really need people like you to run your code on these new internals and report back what you find. We want to fix bugs in the new internals as soon as possible in order to have a strong GA release later in the year.

That being said, there are several smaller enhancements included in preview 4. For full details, see What's new in EF Core 9. To discuss the EF9 release, go to Try EF Core 9 now! on GitHub.

Enhanced database provider for Azure Cosmos DB for NoSQL

We are working on significant updates in EF9 to the EF Core database provider for Azure Cosmos DB for NoSQL. For preview 4, these include:

  • Role-based access control (RBAC) is supported by EF9 for both management and use of containers.
  • Azure Cosmos DB for NoSQL does not support synchronous (blocking) access from application code. EF Core now blocks synchronous access by default, helping people fall into the pit-of-success of using async I/O.
  • Cosmos primitive collection support has been updated to use the metadata and model building APIs from EF8

See Azure Cosmos DB for NoSQL in the What's New docs for more information.

GroupBy complex types

In preview 4, EF9 now supports grouping (GroupBy queries) that group by a complex type instance. The resulting SQL uses groups by all members, reflecting the value object semantics of complex types.

See GroupBy complex types in the What's New docs for more information.

Read-only primitive collections

EF8 introduced support for mapping arrays and mutable lists of primitive types. This has been expanded in EF9 to include read-only collections declared as IReadOnlyList, IReadOnlyCollection, or ReadOnlyCollection.

See Read-only primitive collections in the What's New docs for more information.

Everything else in preview 4

Preview 4 contains:

EF Core 9 preview 4 (and Microsoft.Data.Sqlite) contains work from the EF Team at Microsoft (@​roji @​AndriySvyryd @​maumar @​ajcvickers @​cincuranet @​SamMonoRT @​luisquintanilla) as well as contributions from the EF Core community. The community PRs in EF9 Preview 4 are:

9.0.0-preview.3.24172.4

The team has been working primarily on EF Core internals, so there are no new big features in EF Core 9 (EF9) Preview 3. However, this means we really need people like you to run your code on these new internals and report back what you find. We want to fix bugs in the new internals as soon as possible in order to have a strong GA release later in the year.

That being said, there are several smaller enhancements included in preview 3. For full details, see What's new in EF Core 9. To discuss the EF9 release, go to Try EF Core 9 now! on GitHub.

Auto-compiled models

Auto-compiled models allow the EF Core compiled model to be automatically regenerated when the model project is built. This means you no longer need to remember to re-run the dotnet ef dbcontext optimize command after your EF model changes. See Auto-compiled models in the What's New docs for more information.

Sugar for HierarchyId path generation

First class support for the SQL Server HierarchyId type was added in EF8. In EF9, a sugar method has been added to make it easier to create new child nodes in the tree structure. See Sugar for HierarchyId path generation in the What's New docs for more information.

Everything else in preview 3

Preview 3 contains:

EF Core 9 preview 3 (and Microsoft.Data.Sqlite) contains work from the EF Team at Microsoft (@​roji @​AndriySvyryd @​maumar @​ajcvickers @​cincuranet @​SamMonoRT @​luisquintanilla) as well as contributions from the EF Core community. The community PRs in EF9 Preview 3 are:

9.0.0-preview.2.24128.4

The team has been working primarily on EF Core internals, so there are no new big features in EF Core 9 (EF9) Preview 2. However, this means we really need people like you to run your code on these new internals and report back what you find. We want to fix bugs in the new internals as soon as possible in order to have a strong GA release later in the year.

That being said, there are several smaller enhancements included in preview 2, many contributed by our community. For full details, see What's new in EF Core 9. To discuss the EF9 release, go to Try EF Core 9 now! on GitHub.

Improved queries

  • Inlined uncorrelated subqueries
    • In EF8, an IQueryable referenced in another query may be executed as a separate database roundtrip.
    • See Inlined uncorrelated subqueries for full details.
  • New ToHashSetAsync methods
    • The ToHashSet methods have existed since .NET Core 2.0. In EF9, the equivalent async methods have been added.
    • See New ToHashSetAsync<T> methods for full details.

Improved model building

  • Specify caching for sequences
    • EF9 allows setting the caching options for database sequences for any relational database provider that supports this.
    • See Specify caching for sequences for full details.
  • Specify fill-factor for keys and indexes

Improved tooling

  • Fewer rebuilds when using dotnet ef tools
    • EF9 invalidates build caches less often, resulting in faster re-builds.
    • See Fewer rebuilds for full details.

Everything else in preview 2

Preview 2 contains:

EF Core 9 preview 2 (and Microsoft.Data.Sqlite) contains work from the EF Team at Microsoft (@​roji @​AndriySvyryd @​maumar @​ajcvickers) as well as contributions from the EF Core community. The community PRs in EF9 Preview 1 are:

9.0.0-preview.1.24081.2

The team has been working primarily on EF Core internals, so there are no new big features in EF Core 9 (EF9) Preview 1. However, this means we really need people like you to run your code on these new internals and report back what you find. We want to fix bugs in the new internals as soon as possible in order to have a strong GA release later in the year.

That being said, there are also several smaller enhancements included in preview 1. One of these might be just the thing you have been waiting for, so read on!

Improved queries

  • Prune columns passed to OPENJSON's WITH clause
    • EF9 removes unnecessary columns when calling OPENJSON WITH.
    • See Prune columns from JSON in the What's New docs for full details including runnable samples.
  • Translations involving GREATEST/LEAST
    • Several new translations have been introduced that use the GREATEST and LEAST SQL functions.
    • This includes translations of Math.Min and Math.Max in non-aggregate queries, as well as directly exposing the GREATEST and LEAST SQL functions in relational providers.
    • See GREATEST/LEAST translations in the What's New docs for full details including runnable samples.
  • Force or prevent query parameterization
    • Except in some special cases, EF Core parameterizes variables used in a LINQ query, but includes constants in the generated SQL. EF9 allows constants to be translated to parameters and variables to be translated to constants on a case to case basis.
    • See Force or prevent query parameterization in the What's New docs for full details including runnable samples.

ExecuteUpdate

  • Allow passing complex type instances to ExecuteUpdate
    • EF9 supports directly passing complex type instances to ExecuteUpdate as sugar for updating all member values.
    • See ExecuteUpdate for complex types in the What's New docs for full details including runnable samples.

Temporal tables

  • Small migrations for temporal tables
    • The migration created when changing an existing table into a temporal table has been reduced in size for EF9.
    • See Improved temporal table migrations in the What's New docs for full details including runnable samples.

Model building

  • Make existing model building conventions more extensible
    • In EF9, we have made it easier to extend some of the existing conventions, such as those for property and key discovery.
    • See Extensible model building conventions in the What's New docs for full details including runnable samples.
  • ApplyConfigurationsFromAssembly calls non-public constructors

Everything else in Preview 1

Preview 1 contains:

Commits viewable in compare view.

Updated Microsoft.Extensions.Caching.Memory from 8.0.1 to 9.0.1.

Release notes

Sourced from Microsoft.Extensions.Caching.Memory's releases.

9.0.1

Release

What's Changed

Full Changelog: dotnet/runtime@v9.0.0...v9.0.1

9.0.0

Release

What's Changed

9.0.0-rc.2.24473.5

Release

9.0.0-rc.1.24431.7

Release

9.0.0-preview.7.24405.7

Release

9.0.0-preview.5.24306.7

Release

9.0.0-preview.4.24266.19

Release

9.0.0-preview.3.24172.9

Release

9.0.0-preview.2.24128.5

[Release[(https://github.com/dotnet/core/releases/tag/v9.0.0-preview.2)

9.0.0-preview.1.24080.9

Release

8.0.22

Release

What's Changed

Full Changelog: dotnet/runtime@v8.0.21...v8.0.22

8.0.21

Release

What's Changed

Full Changelog: dotnet/runtime@v8.0.20...v8.0.21

8.0.20

Release

What's Changed

Full Changelog: dotnet/runtime@v8.0.19...v8.0.20

8.0.19

Release

What's Changed

Full Changelog: dotnet/runtime@v8.0.18...v8.0.19

8.0.18

Release

What's Changed

Full Changelog: dotnet/runtime@v8.0.17...v8.0.18

8.0.17

Bug Fixes

  • Work around MSVC miscompiling sgen_clz (#​114904)
    Addresses an issue where the Microsoft Visual C++ (MSVC) compiler was miscompiling the sgen_clz function in Mono. This workaround ensures correct behavior and stability for affected builds.

  • Fix Idn tests (#​115030)
    Resolves issues in the Internationalized Domain Name (Idn) tests, improving test reliability and ensuring accurate validation of related functionality.

  • Handle OSSL 3.4 change to SAN:othername formatting (#​115367)
    Updates the handling of Subject Alternative Name (SAN) formatting to accommodate changes introduced in OpenSSL 3.4. This ensures compatibility and correct certificate processing.

  • Don't expose TrustedCertificatesDirectory() and StartNewTlsSessionContext() to NetFx (#​115008)
    Prevents certain internal APIs from being exposed to .NET Framework (NetFx), reducing the risk of unintended usage and improving API surface consistency.

  • Fix line endings (#​115414)
    Corrects line ending inconsistencies in the codebase, which helps prevent cross-platform issues and improves code readability.

Performance Improvements

  • Improve distribute_free_regions (#​115023)
    Optimizes the algorithm for distributing free memory regions, leading to better memory management and potentially improved application performance.

Technical Improvements

  • Strip trailing slash from source dir for cmake4 (#​114906)
    Refines the build process by removing unnecessary trailing slashes from source directory paths when using CMake 4, reducing potential build errors and improving consistency.

  • Add support for more libicu versions (#​115378)
    Expands compatibility by supporting additional versions of the International Components for Unicode (ICU) library, enhancing globalization features across more environments.

Infrastructure

  • Update dependencies from dotnet/arcade (#​114441)
    Refreshes build and engineering dependencies from the Arcade repository, ensuring the latest tooling and infrastructure improvements are incorporated.

  • Migrate MacCatalyst and iOS/tvOS simulator jobs to new queues (#​114633)
    Moves MacCatalyst and iOS/tvOS simulator jobs to updated build queues (osx.14.arm64.open and osx.15.amd64.open), improving build reliability and aligning with current infrastructure standards.

  • Run outerloop pipeline only for release branches (#​115012)
    Adjusts CI pipeline triggers so that the outerloop pipeline runs only for release branches, reducing unnecessary builds and streamlining the development workflow.

  • Update OpenSUSE (#​115028)
    Updates support for the OpenSUSE Linux distribution, ensuring compatibility and up-to-date platform support.

  • Update dependencies from dotnet/emsdk (#​114830)
    Updates the Emscripten SDK dependencies, improving WebAssembly build support and incorporating the latest fixes and features.

  • Update MacOS signing to use PME (#​115633)
    Switches MacOS code signing to use PME (Public Managed Environment), enhancing security and compliance for MacOS builds.

... (truncated)

8.0.16

Release

What's Changed

Full Changelog: dotnet/runtime@v8.0.15...v8.0.16

8.0.15

Release

What's Changed

Description has been truncated

@dependabot
⬆️ Bump Microsoft.EntityFrameworkCore and 3 others
488d77c 
Bumps Microsoft.EntityFrameworkCore from 8.0.22 to 9.0.1
Bumps Microsoft.Extensions.Caching.Memory from 8.0.1 to 9.0.1
Bumps Microsoft.Extensions.Logging.Abstractions from 8.0.2 to 9.0.1
Bumps Npgsql.EntityFrameworkCore.PostgreSQL from 8.0.11 to 9.0.4

---
updated-dependencies:
- dependency-name: Microsoft.EntityFrameworkCore
  dependency-version: 9.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: Microsoft.Extensions.Caching.Memory
  dependency-version: 9.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: Microsoft.Extensions.Logging.Abstractions
  dependency-version: 9.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: Npgsql.EntityFrameworkCore.PostgreSQL
  dependency-version: 9.0.4
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: Npgsql.EntityFrameworkCore.PostgreSQL
  dependency-version: 9.0.4
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: Npgsql.EntityFrameworkCore.PostgreSQL
  dependency-version: 9.0.4
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Dec 22, 2025

Assignees

The following users could not be added as assignees: eugenecp. Either the username does not exist or it does not have the correct permissions to be added as an assignee.

Labels

The following labels could not be found: dependencies, nuget, security. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@github-actions
Copy link

github-actions bot commented Dec 22, 2025

🛡️ Security Scan Summary

Scan Date: Mon Dec 22 06:39:34 UTC 2025
Commit: a183e8c

🔍 Scan Results

Tool Status Details
TruffleHog ✅ Secure No secrets detected
.NET Vulnerability Scan ℹ️ Skipped Scan not executed
CodeQL 📊 Uploaded Results uploaded to GitHub Security tab - manual review required
Semgrep SAST ✅ Secure No security issues detected
Trivy Filesystem ℹ️ Skipped Scan not executed
OWASP Dependency Check ℹ️ Skipped Scan not executed
OWASP ZAP Dynamic Scan ℹ️ Skipped Scan not executed
Security Configuration ℹ️ Skipped Audit not executed

⚠️ CRITICAL: CodeQL Security Analysis

IMPORTANT: This summary may show CodeQL as 'secure' even if issues exist.
ALWAYS check the GitHub Security Tab for CodeQL findings.
High/Critical CodeQL issues MUST be resolved before merge, regardless of this summary.

📋 Recommendations

  • PRIORITY: Check GitHub Security tab for CodeQL findings
  • Fix all high/critical CodeQL issues before merge
  • Review all findings in the Security tab
  • Update vulnerable dependencies promptly
  • Follow secure coding practices from copilot-instructions.md
  • Regular security reviews and updates

Security scan generated by Setlist Studio CI/CD Pipeline 🔒

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant