[dependabot]

Updated Azure.Extensions.AspNetCore.DataProtection.Blobs from 1.5.4 to 1.5.5.

Release notes

Sourced from Azure.Extensions.AspNetCore.DataProtection.Blobs's releases.

1.5.5

1.5.5 (2026-10-21)

Other Changes

• Updated Microsoft.AspNetCore.DataProtection dependency to 8.0.32 for net8.0 and 10.0.13 for all other target frameworks.

Commits viewable in compare view.

Updated Azure.Extensions.AspNetCore.DataProtection.Keys from 1.6.4 to 1.6.5.

Release notes

Sourced from Azure.Extensions.AspNetCore.DataProtection.Keys's releases.

1.6.5

1.6.5 (2026-10-21)

Other Changes

• Updated Microsoft.AspNetCore.DataProtection dependency to 8.0.32 for net8.0 and 10.0.13 for all other target frameworks.

Commits viewable in compare view.

Updated Azure.Security.KeyVault.Secrets from 4.11.2 to 4.12.0.

Release notes

Sourced from Azure.Security.KeyVault.Secrets's releases.

4.12.0

4.12.0 (2026-10-27)

Other Changes

• Regenerated the library for stable Key Vault API version 2026-04-01.

4.12.0-beta.3

4.12.0-beta.3 (2026-10-08)

Bugs Fixed

• Fixed an issue in the challenge-based authentication policy where a cached authentication challenge accepted with challenge resource verification disabled could be reused by a separate default-strict client without revalidating the challenge resource.
• Improved authentication challenge resource validation.

Commits viewable in compare view.

Updated bunit from 2.11.3 to 2.13.3.

Release notes

Sourced from bunit's releases.

2.13.3

Fixed

• Find threw TypeLoadException with AngleSharp 1.8.6 because HtmlSelectElementWrapper did not implement the new SelectedIndex setter. Reported by @​poxet in #​1957. Fixed by @​linkdotnet.
• A WaitFor* call whose first check passed left its timeout timer running, which kept the helper, the renderer and everything the renderer holds alive until the timeout elapsed. With a long DefaultWaitTimeout, a test suite could hold every rendered component in memory for its whole run. Fixed by @​xaviergxf.

2.12.5

Fixed

• WrapperBase.WrappedElement could return null and throw NullReferenceException when an element was accessed concurrently with component re-renders. Reported by @​psu-prog in #​1937. Fixed by @​Nacl-HCl.
• DisposeComponentsAsync() could dispose nothing when the renderer's dispatcher was busy, e.g. with a timer calling InvokeAsync. Reported by @​xfunc-tim-schneider in #​1939. Fixed by @​linkdotnet.
• Markup generation and FindComponents could recurse until the test host crashed with a stack overflow when a render threw while instantiating a child component. Reported in #​1935. Fixed by @​linkdotnet.
• Find() could keep returning DOM nodes from the previous render when a render, e.g. from a timer, happened while the nodes were parsed, causing UnknownEventHandlerIdException. Reported by @​xfunc-tim-schneider in #​1938. Fixed by @​linkdotnet.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Components.Authorization from 10.0.13 to 10.0.14.

Release notes

Sourced from Microsoft.AspNetCore.Components.Authorization's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Components.WebAssembly from 10.0.13 to 10.0.14.

Release notes

Sourced from Microsoft.AspNetCore.Components.WebAssembly's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Components.WebAssembly.Authentication from 10.0.13 to 10.0.14.

Release notes

Sourced from Microsoft.AspNetCore.Components.WebAssembly.Authentication's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Components.WebAssembly.DevServer from 10.0.13 to 10.0.14.

Release notes

Sourced from Microsoft.AspNetCore.Components.WebAssembly.DevServer's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.DataProtection from 10.0.13 to 10.0.14.

Release notes

Sourced from Microsoft.AspNetCore.DataProtection's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Azure.Cosmos from 3.63.2 to 3.63.3.

Release notes

Sourced from Microsoft.Azure.Cosmos's releases.

3.63.3

See changelog for details.
NuGet: https://www.nuget.org/packages/Microsoft.Azure.Cosmos/3.63.3

Commits viewable in compare view.

Updated Microsoft.Extensions.Caching.Memory from 10.0.13 to 10.0.14.

Release notes

Sourced from Microsoft.Extensions.Caching.Memory's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Http from 10.0.13 to 10.0.14.

Release notes

Sourced from Microsoft.Extensions.Http's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Localization from 10.0.13 to 10.0.14.

Release notes

Sourced from Microsoft.Extensions.Localization's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Logging.Configuration from 10.0.13 to 10.0.14.

Release notes

Sourced from Microsoft.Extensions.Logging.Configuration's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.OpenApi from 3.10.2 to 3.11.0.

Release notes

Sourced from Microsoft.OpenApi's releases.

3.11.0

3.11.0 (2026-10-19)

Features

• document: add GetOperationById to search operations across path… (#​3025) (1dae1ff)

Bug Fixes

• components-key validation timeouts under load (#​3108) (01d4729)
• openapi: omit null response descriptions (afd4967)
• serialization: potential infinite loop when inlining references (c6ef130)
• serialization: references inlining (#​3124) (c6ef130)

Commits viewable in compare view.

Updated Microsoft.OpenApi.YamlReader from 3.10.2 to 3.11.0.

Release notes

Sourced from Microsoft.OpenApi.YamlReader's releases.

3.11.0

3.11.0 (2026-10-19)

Features

• document: add GetOperationById to search operations across path… (#​3025) (1dae1ff)

Bug Fixes

• components-key validation timeouts under load (#​3108) (01d4729)
• openapi: omit null response descriptions (afd4967)
• serialization: potential infinite loop when inlining references (c6ef130)
• serialization: references inlining (#​3124) (c6ef130)

Commits viewable in compare view.

Updated Microsoft.Playwright from 1.63.0 to 1.64.1.

Release notes

Sourced from Microsoft.Playwright's releases.

1.64.1

Highlights

#​3391 - chore(driver): bump bundled Node.js to 24.22.1

Browser Versions

• Chromium 156.0.8078.4
• Mozilla Firefox 157.0
• WebKit 27.2

This version was also tested against the following stable channels:

• Google Chrome 155
• Microsoft Edge 155

1.64.0

🧰 WebMCP

New page.Webmcp and frame.Webmcp give access to the tools that a page registers through the experimental WebMCP browser API, so you can test them like
any other part of your app:

var browser = await playwright.Chromium.LaunchAsync(new() { Args = new[] { "--enable-features=WebMCP" } });
var page = await browser.NewPageAsync();
await page.GotoAsync("https://example.com");

foreach (var tool in await page.Webmcp.ToolsAsync())
    Console.WriteLine($"{tool.Name}: {tool.Description}");

var result = await page.Webmcp.CallToolAsync("add", new { a = 2, b = 40 });
Console.WriteLine(result?.GetProperty("content")[0].GetProperty("text")); // "42"

Playwright MCP also supports WebMCP by default, with page-defined tools offered to the agent as webmcp_<tool>. Pass --no-webmcp to opt out.

playwright-cli exposes them as well:

playwright-cli webmcp-list
playwright-cli webmcp-call search_catalog --params '{"query":"cats"}'

🎬 Better videos

Videos can now be recorded at a custom frame rate, and the decorations for actions are styled with plain CSS:

await page.Screencast.StartAsync(new()
{
    Path = "video.webm",
    Size = new() { Width = 1920, Height = 1080 },
    Fps = 60,
});
await page.Screencast.ShowActionsAsync(new()
{
    Style = new()
    {
        Point = "width: 20px; height: 20px; border-radius: 50%; background: red",
        Highlight = "outline: 2px solid #​333; background: rgba(0, 128, 255, .15)",
        Title = "font-size: 16px",
    },
});

• New RecordVideoFps option and new Fps option in Screencast.StartAsync(). Firefox and WebKit currently capture up to 25 frames per second.
• New Style option takes CSS declarations for the Point marker, the target Highlight and the action Title. It replaces the FontSize option, which is now deprecated.
  ... (truncated)

Commits viewable in compare view.

Updated System.Security.Cryptography.Xml from 10.0.13 to 10.0.14.

Release notes

Sourced from System.Security.Cryptography.Xml's releases.

No release notes found for this version range.

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Superseded by #405.