[dependabot]

Updated Acornima from 1.8.0 to 1.9.0.

Release notes

Sourced from Acornima's releases.

1.9.0

New features:

• Introduce Tokenizer.TryParse... static helper methods to enable standalone parsing of ECMAScript literals.

Improvements:

• Upgrade to Unicode 18.0.
• Revise implementation of Annex B.3 features, resulting in minor changes to ES5-compatible parsing:
  • for (var x = 1 in {}) {} is now accepted in sloppy mode,
  • f() = 1 is now accepted in strict mode as well,
  • function declarations as the single-statement body of another statement are now rejected in strict mode.

Bug fixes:

• Fix edge cases where numeric literals are not scanned according to IEEE 754 (see #​54).
• Fix additional subscripts being allowed before the arrow operator in async arrow functions (see An arrow after a later call in an async call chain makes the chain an async arrow function acornjs/acorn#1460).
• Fix HTML comments not being handled correctly in ASI positions, e.g. after let, using, etc. (see Handle html-like comments in lookahead based on skipWhiteSpace acornjs/acorn#1464).
• Fix reserved words not being rejected as the class name in class expressions (see The id of a class expression should not be eval or arguments acornjs/acorn#1463).
• Fix const/using/await using being incorrectly allowed before in/of outside for statements (see Acorn should reject const declaration without init followed by newline and of. acornjs/acorn#1470).
• Fix name of function in labeled statement (Annex B.3.1) not declared in the enclosing scope (Register function id for Annex B.3.1 labeled function declaration acornjs/acorn#1468).

Commits viewable in compare view.

Updated Azure.Storage.Blobs from 12.30.0 to 12.30.1.

Release notes

Sourced from Azure.Storage.Blobs's releases.

12.30.1

12.30.1 (2026-10-05)

Bugs Fixed

• Fixed AuthenticatedRegionCryptoStream.Dispose() to be idempotent and thread-safe, so the buffer it rents is no longer returned to the shared ArrayPool<byte> more than once when the stream is disposed repeatedly or concurrently. Returning the same array twice allowed unrelated callers to rent the same array instance and corrupt each other's data.

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.10.1 to 18.11.0.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.11.0

What's Changed

• Fix TRX logger mangling astral-plane (non-BMP) characters by @​azat-msft in Fix TRX logger mangling astral-plane (non-BMP) characters microsoft/vstest#16318
• Disable the MTP testhost by default by @​nohwnd in Disable the MTP testhost by default microsoft/vstest#16337
• Fix OS-blind apphost probe in MTP bridge on Unix (regression from #​16201) by @​azat-msft in Fix OS-blind apphost probe in MTP bridge on Unix (regression from #16201) microsoft/vstest#16336
• Retarget the MTP client onto Microsoft.Testing.Platform.ServerMode.Client.Sources by @​nohwnd in Retarget the MTP client onto Microsoft.Testing.Platform.ServerMode.Client.Sources microsoft/vstest#16300
• Pass arguments to PowerShell with -File instead of -command by @​nohwnd in Pass arguments to PowerShell with -File instead of -command microsoft/vstest#16363
• Respect console logger verbosity from a settings file by @​nohwnd in Respect console logger verbosity from a settings file microsoft/vstest#16044
• Fix backslash normalization in VSTestCLIRunSettings on Unix by @​nohwnd in [fix] Fix backslash normalization in VSTestCLIRunSettings on Unix microsoft/vstest#15795
• Docs: fix typo explicitely -> explicitly by @​vaibhav8a in docs: fix typo explicitely -> explicitly microsoft/vstest#16397
• Copy acceptance test diagnostic logs into the test results directory by @​nohwnd in Copy acceptance test diagnostic logs into the test results directory microsoft/vstest#16403

New Contributors

• @​vaibhav8a made their first contribution in docs: fix typo explicitely -> explicitly microsoft/vstest#16397

Full Changelog: microsoft/vstest@v18.10.1...v18.11.0

Commits viewable in compare view.

Updated QRCoder from 1.8.0 to 1.8.1.

Release notes

Sourced from QRCoder's releases.

1.8.1

What's Changed

• a couple places where ArtQRCode creates a short lived Bitmap but neve… by @​danFbach in a couple places where ArtQRCode creates a short lived Bitmap but neve… Shane32/QRCoder#695
• Minor performance improvement in BitmapByteQRCode + clarify padding calculation by @​KrisVandermotten in Minor performance improvement in BitmapByteQRCode + clarify padding calculation Shane32/QRCoder#698
• Cleanup and optimize CalculateGeneratorPolynom by @​KrisVandermotten in Cleanup and optimize CalculateGeneratorPolynom Shane32/QRCoder#702
• Optimize AlignmentPatterns by @​KrisVandermotten in Optimize AlignmentPatterns Shane32/QRCoder#699
• Some cleanup (and minor optimizations) in BitmapByteQRCode by @​KrisVandermotten in Some cleanup (and minor optimizations) in BitmapByteQRCode Shane32/QRCoder#703
• Optimizations in mask patterns by @​KrisVandermotten in Optimizations in mask patterns Shane32/QRCoder#706

New Contributors

• @​danFbach made their first contribution in a couple places where ArtQRCode creates a short lived Bitmap but neve… Shane32/QRCoder#695
• @​KrisVandermotten made their first contribution in Minor performance improvement in BitmapByteQRCode + clarify padding calculation Shane32/QRCoder#698

Full Changelog: Shane32/QRCoder@v1.8.0...v1.8.1

Commits viewable in compare view.

Updated xunit.runner.visualstudio from 4.0.0 to 4.0.1.

Release notes

Sourced from xunit.runner.visualstudio's releases.

4.0.1

Release notes: https://xunit.net/releases/visualstudio/4.0.1

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions