Bump the dotnet-dependencies group with 15 updates by dependabot[bot] · Pull Request #16 · krakn-dev/alldebrid-client

dependabot · 2026-09-28T16:01:50Z

Updated coverlet.collector from 10.0.1 to 10.1.0.

Release notes

Sourced from coverlet.collector's releases.

10.1.0

Improvements

Publish Microsoft.Testing.Platform coverage messages from coverlet.MTP #2019
Implement dynamic exclusion filters for assemblies (Coverlet.MTP) #1946
Replace legacy .sln files with modern .slnx format #1966
coverlet.console: add trace diagnostics and actionable warnings for instrumentation/hit/empty-result failures #2005
Relax auto-property skip logic and improve coverage for records #1941

Fixed

Fix coverlet.MTP does not collect coverage on the .NET Framework portion of a large project #1980 #1967
Fix Regression in branch coverage for lambda expressions #1938
Fix When using "is" with "or" in pattern matching, branch coverage is lower than normal #1979
Fix silent zero coverage on .NET Framework since 8.0.0 #1985 by @tobiwae
Fix Race condition between ProcessExit hit-file write and out-of-proc coverage read causes EndOfStreamException #1987 #1988 by @bkoelman
Fix Regression TypeInitializationException when targeting .NET Framework - Could not load type 'System.Collections.Concurrent.ConcurrentBag #2010
Fix use --config-file CLI arg in coverlet.MTP #2030 by alexthornton1
Fix silently empty coverage for shared-framework assemblies missing from compileLibraries #2032 by @Eljees

Diff between 10.0.1 and 10.1.0

Commits viewable in compare view.

Updated Downloader from 5.9.6 to 5.9.8.

Release notes

Sourced from Downloader's releases.

5.9.8 Highlights

A stop no longer leaves a NullReferenceException behind.

🐛 Fixes

A finished download could be reported as "Failed — Object reference not set to an instance of an object." Both dispatch loops start every chunk task eagerly and then await them one at a time, so a CancelAsync() abandons every chunk the loop had not reached yet. Those chunks are still inside their read loops and still raise progress events, while the download has already run its terminal path — which closes the package storage and sets Package.Storage to null. Each progress event writes the auto-resume metadata through that storage, unguarded, so an abandoned chunk threw an NRE; when its cancellation token is no longer the one in force, that NRE becomes the download's error and reaches the consumer through DownloadFileCompleted. The metadata write now reads the storage once and skips it when the download is over — resume metadata for a finished transfer is worthless anyway.
A Dispose() racing a completion could swallow the completion event entirely. Clear() nulls the internal TaskCompletionSource, and an app that releases its engine as soon as a download ends can run that concurrently with the completion signal. Reporting that a download is over no longer depends on that field still being there.
ActiveChunks no longer throws when the semaphore it counts has already been disposed by Clear(); a torn-down download reports no active chunks instead.
DownloadPackage.FlushAsync/CloseAsync read Storage once instead of check-then-use, so a flush that races a close cannot dereference null.

🔧 Under the hood

StopRaisesNoNullReferenceTest covers the race deterministically (it raises 7 NREs against 5.9.7 and none against this release), and an opt-in soak (RetryAfterStopStressTest, enabled with NRE_STRESS_ITERATIONS) walks stop → dispose → retry across cancel point, chunk count, parallel on/off, server variant and throttled/instant.
Fixed a lost-update race in two integration tests that recorded peak progress with a non-atomic Math.Max.

Found from a download manager whose retried-after-stop row was shown as failed even though the file was complete on disk (Downloader.Desktop).

Full Changelog: bezzad/Downloader@v5.9.7...v5.9.8

5.9.7 Highlights

Adds RemoteFileInfo.ContentType: the server's Content-Type header (or null when the server
sends none), exposed alongside file name/size/range-support from the same no-extra-request probe —
useful for callers that need to classify a file whose name carries no usable extension.

Full Changelog: bezzad/Downloader@v5.9.6...v5.9.7

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Identity.EntityFrameworkCore from 10.0.11 to 10.0.12.

Release notes

Sourced from Microsoft.AspNetCore.Identity.EntityFrameworkCore's releases.