Bump the gh-actions-packages group across 4 directories with 8 updates#7888

dependabot · 2025-12-01T18:38:19Z

Bumps the gh-actions-packages group with 6 updates in the / directory:

Package	From	To
actions/checkout	`5.0.0`	`6.0.0`
actions/setup-dotnet	`5.0.0`	`5.0.1`
actions/create-github-app-token	`2.1.4`	`2.2.0`
softprops/action-gh-release	`2.4.1`	`2.5.0`
peter-evans/create-pull-request	`7.0.8`	`7.0.9`
github/codeql-action	`4.31.2`	`4.31.6`

Bumps the gh-actions-packages group with 1 update in the /.github/actions/create-system-test-docker-base-images directory: docker/setup-qemu-action.
Bumps the gh-actions-packages group with 1 update in the /.github/actions/deploy-aas-dev-apps directory: actions/create-github-app-token.
Bumps the gh-actions-packages group with 1 update in the /.github/actions/publish-debug-symbols directory: actions/setup-go.

Updates actions/checkout from 5.0.0 to 6.0.0

Release notes

Sourced from actions/checkout's releases.

v6.0.0

What's Changed

Update README to include Node.js 24 support details and requirements by @salmanmkc in actions/checkout#2248

Persist creds to a separate file by @ericsciple in actions/checkout#2286

v6-beta by @ericsciple in actions/checkout#2298

update readme/changelog for v6 by @ericsciple in actions/checkout#2311

Full Changelog: actions/checkout@v5.0.0...v6.0.0

v6-beta

What's Changed

Updated persist-credentials to store the credentials under $RUNNER_TEMP instead of directly in the local git config.

This requires a minimum Actions Runner version of v2.329.0 to access the persisted credentials for Docker container action scenarios.

v5.0.1

What's Changed

Port v6 cleanup to v5 by @ericsciple in actions/checkout#2301

Full Changelog: actions/checkout@v5...v5.0.1

Changelog

Sourced from actions/checkout's changelog.

Changelog

V6.0.0

Persist creds to a separate file by @ericsciple in actions/checkout#2286

Update README to include Node.js 24 support details and requirements by @salmanmkc in actions/checkout#2248

V5.0.1

Port v6 cleanup to v5 by @ericsciple in actions/checkout#2301

V5.0.0

Update actions checkout to use node 24 by @salmanmkc in actions/checkout#2226

V4.3.1

Port v6 cleanup to v4 by @ericsciple in actions/checkout#2305

V4.3.0

docs: update README.md by @motss in actions/checkout#1971

Add internal repos for checking out multiple repositories by @mouismail in actions/checkout#1977

Documentation update - add recommended permissions to Readme by @benwells in actions/checkout#2043

Adjust positioning of user email note and permissions heading by @joshmgross in actions/checkout#2044

Update README.md by @nebuk89 in actions/checkout#2194

Update CODEOWNERS for actions by @TingluoHuang in actions/checkout#2224

Update package dependencies by @salmanmkc in actions/checkout#2236

v4.2.2

url-helper.ts now leverages well-known environment variables by @jww3 in actions/checkout#1941

Expand unit test coverage for isGhes by @jww3 in actions/checkout#1946

v4.2.1

Check out other refs/* by commit if provided, fall back to ref by @orhantoy in actions/checkout#1924

v4.2.0

Add Ref and Commit outputs by @lucacome in actions/checkout#1180

Dependency updates by @dependabot- actions/checkout#1777, actions/checkout#1872

v4.1.7

Bump the minor-npm-dependencies group across 1 directory with 4 updates by @dependabot in actions/checkout#1739

Bump actions/checkout from 3 to 4 by @dependabot in actions/checkout#1697

Check out other refs/* by commit by @orhantoy in actions/checkout#1774

Pin actions/checkout's own workflows to a known, good, stable version. by @jww3 in actions/checkout#1776

v4.1.6

Check platform to set archive extension appropriately by @cory-miller in actions/checkout#1732

v4.1.5

Update NPM dependencies by @cory-miller in actions/checkout#1703

Bump github/codeql-action from 2 to 3 by @dependabot in actions/checkout#1694

Bump actions/setup-node from 1 to 4 by @dependabot in actions/checkout#1696

Bump actions/upload-artifact from 2 to 4 by @dependabot in actions/checkout#1695

... (truncated)

Commits

1af3b93 update readme/changelog for v6 (#2311)
71cf226 v6-beta (#2298)
069c695 Persist creds to a separate file (#2286)
ff7abcd Update README to include Node.js 24 support details and requirements (#2248)
See full diff in compare view

Updates actions/setup-dotnet from 5.0.0 to 5.0.1

Release notes

Sourced from actions/setup-dotnet's releases.

v5.0.1

What's Changed

Upgrade typescript from 5.4.2 to 5.9.2 and document breaking changes in v5 by @dependabot in actions/setup-dotnet#624

Upgrade eslint-plugin-jest from 27.9.0 to 29.0.1 by @dependabot in actions/setup-dotnet#648

Upgrade actions/publish-action from 0.3.0 to 0.4.0 and update macos-13 to macos-15-intel by @dependabot in actions/setup-dotnet#665

Full Changelog: actions/setup-dotnet@v5...v5.0.1

Commits

2016bd2 Bump actions/publish-action from 0.3.0 to 0.4.0 and update macos-13 to macos-...
21e81f6 Bump eslint-plugin-jest from 27.9.0 to 29.0.1 (#648)
7403103 Bump typescript from 5.4.2 to 5.9.2 (#624)
See full diff in compare view

Updates actions/create-github-app-token from 2.1.4 to 2.2.0

Release notes

Sourced from actions/create-github-app-token's releases.

v2.2.0

2.2.0 (2025-11-21)

Bug Fixes

deps: bump glob from 10.4.5 to 10.5.0 (#305) (5480f43)

deps: bump p-retry from 6.2.1 to 7.1.0 (#294) (dce3be8)

deps: bump the production-dependencies group with 2 updates (#292) (55e2a4b)

Features

update permission inputs (#296) (d90aa53)

Commits

7e473ef build(release): 2.2.0 [skip ci]
dce3be8 fix(deps): bump p-retry from 6.2.1 to 7.1.0 (#294)
5480f43 fix(deps): bump glob from 10.4.5 to 10.5.0 (#305)
d90aa53 feat: update permission inputs (#296)
55e2a4b fix(deps): bump the production-dependencies group with 2 updates (#292)
cc6f999 ci(test): trigger on merge_group (#308)
40fa6b5 build(deps-dev): bump @sinonjs/fake-timers from 14.0.0 to 15.0.0 (#295)
396e502 build(deps): bump actions/checkout from 5 to 6 (#306)
f48f2eb build(deps): bump stefanzweifel/git-auto-commit-action from 6.0.1 to 7.0.0 (#...
b7f83f6 build(deps): bump actions/setup-node from 4 to 6 (#299)
Additional commits viewable in compare view

Updates softprops/action-gh-release from 2.4.1 to 2.5.0

Release notes

Sourced from softprops/action-gh-release's releases.

v2.5.0

What's Changed

Exciting New Features 🎉

feat: mark release as draft until all artifacts are uploaded by @dumbmoron in softprops/action-gh-release#692

Other Changes 🔄

chore(deps): bump the npm group across 1 directory with 5 updates by @dependabot[bot] in softprops/action-gh-release#697

chore(deps): bump actions/checkout from 5.0.0 to 5.0.1 in the github-actions group by @dependabot[bot] in softprops/action-gh-release#689

New Contributors

@dumbmoron made their first contribution in softprops/action-gh-release#692

Full Changelog: softprops/action-gh-release@v2.4.2...v2.5.0

v2.4.2

What's Changed

Exciting New Features 🎉

feat: Ensure generated release notes cannot be over 125000 characters by @BeryJu in softprops/action-gh-release#684

Other Changes 🔄

dependency updates

New Contributors

@BeryJu made their first contribution in softprops/action-gh-release#684

Full Changelog: softprops/action-gh-release@v2.4.1...v2.4.2

Changelog

Sourced from softprops/action-gh-release's changelog.

2.5.0

What's Changed

Exciting New Features 🎉

feat: mark release as draft until all artifacts are uploaded by @dumbmoron in softprops/action-gh-release#692

Other Changes 🔄

dependency updates

2.4.2

What's Changed

Exciting New Features 🎉

feat: Ensure generated release notes cannot be over 125000 characters by @BeryJu in softprops/action-gh-release#684

Other Changes 🔄

dependency updates

2.4.1

What's Changed

Other Changes 🔄

fix(util): support brace expansion globs containing commas in parseInputFiles by @Copilot in softprops/action-gh-release#672

fix: gracefully fallback to body when body_path cannot be read by @Copilot in softprops/action-gh-release#671

2.4.0

What's Changed

Exciting New Features 🎉

feat(action): respect working_directory for files globs by @stephenway in softprops/action-gh-release#667

2.3.4

What's Changed

Bug fixes 🐛

fix(action): handle 422 already_exists race condition by @stephenway in softprops/action-gh-release#665

Other Changes 🔄

... (truncated)

Commits

a06a81a release 2.5.0
7da8983 feat: mark release as draft until all artifacts are uploaded (#692)
8797328 chore(deps): bump actions/checkout in the github-actions group (#689)
1bfc62a chore(deps): bump the npm group across 1 directory with 5 updates (#697)
5be0e66 release 2.4.2
af658b4 feat: Ensure generated release notes cannot be over 125000 characters (#684)
237aacc chore: bump node to 24.11.0
00362be chore(deps): bump the npm group with 5 updates (#687)
0adea5a chore(deps): bump the npm group with 3 updates (#686)
aa05f9d chore(deps): bump actions/setup-node from 5.0.0 to 6.0.0 in the github-action...
Additional commits viewable in compare view

Updates peter-evans/create-pull-request from 7.0.8 to 7.0.9

Release notes

Sourced from peter-evans/create-pull-request's releases.

Create Pull Request v7.0.9

⚙️ Fixes an incompatibility with the recently released actions/checkout@v6.

What's Changed

~70 dependency updates by @dependabot

docs: fix workaround description about ready_for_review by @ybiquitous in peter-evans/create-pull-request#3939

Docs: add-paths default behavior by @joeflack4 in peter-evans/create-pull-request#3928

docs: update to create-github-app-token v2 by @Goooler in peter-evans/create-pull-request#4063

Fix compatibility with actions/checkout@v6 by @ericsciple in peter-evans/create-pull-request#4230

New Contributors

@joeflack4 made their first contribution in peter-evans/create-pull-request#3928

@Goooler made their first contribution in peter-evans/create-pull-request#4063

@ericsciple made their first contribution in peter-evans/create-pull-request#4230

Full Changelog: peter-evans/create-pull-request@v7.0.8...v7.0.9

Commits

84ae59a fix: compatibility with actions/checkout@v6 (#4230)
b4733b9 build(deps-dev): bump js-yaml from 4.1.0 to 4.1.1 (#4222)
0edc001 build(deps-dev): bump the npm group with 2 updates (#4201)
430aea0 build(deps): bump the github-actions group with 3 updates (#4200)
46cdba7 build(deps-dev): bump the npm group with 3 updates (#4185)
b937339 build(deps): bump the github-actions group with 2 updates (#4184)
e9af275 ci: update dependabot config
d3e081a build(deps-dev): bump @types/node from 18.19.127 to 18.19.128 (#4178)
9ec683e build(deps-dev): bump @types/node from 18.19.125 to 18.19.127 (#4165)
65d8d10 build(deps-dev): bump ts-jest from 29.4.2 to 29.4.4 (#4163)
Additional commits viewable in compare view

Updates github/codeql-action from 4.31.2 to 4.31.6

Release notes

Sourced from github/codeql-action's releases.

v4.31.6

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.6 - 01 Dec 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v4.31.5

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.5 - 24 Nov 2025

Update default CodeQL bundle version to 2.23.6. #3321

See the full CHANGELOG.md for more information.

v4.31.4

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.4 - 18 Nov 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v4.31.3

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.3 - 13 Nov 2025

CodeQL Action v3 will be deprecated in December 2026. The Action now logs a warning for customers who are running v3 but could be running v4. For more information, see Upcoming deprecation of CodeQL Action v3.

Update default CodeQL bundle version to 2.23.5. #3288

See the full CHANGELOG.md for more information.

Changelog

Sourced from github/codeql-action's changelog.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

[UNRELEASED]

No user facing changes.

4.31.6 - 01 Dec 2025

No user facing changes.

4.31.5 - 24 Nov 2025

Update default CodeQL bundle version to 2.23.6. #3321

4.31.4 - 18 Nov 2025

No user facing changes.

4.31.3 - 13 Nov 2025

CodeQL Action v3 will be deprecated in December 2026. The Action now logs a warning for customers who are running v3 but could be running v4. For more information, see Upcoming deprecation of CodeQL Action v3.

Update default CodeQL bundle version to 2.23.5. #3288

4.31.2 - 30 Oct 2025

No user facing changes.

4.31.1 - 30 Oct 2025

The add-snippets input has been removed from the analyze action. This input has been deprecated since CodeQL Action 3.26.4 in August 2024 when this removal was announced.

4.31.0 - 24 Oct 2025

Bump minimum CodeQL bundle version to 2.17.6. #3223

When SARIF files are uploaded by the analyze or upload-sarif actions, the CodeQL Action automatically performs post-processing steps to prepare the data for the upload. Previously, these post-processing steps were only performed before an upload took place. We are now changing this so that the post-processing steps will always be performed, even when the SARIF files are not uploaded. This does not change anything for the upload-sarif action. For analyze, this may affect Advanced Setup for CodeQL users who specify a value other than always for the upload input. #3222

4.30.9 - 17 Oct 2025

Update default CodeQL bundle version to 2.23.3. #3205

Experimental: A new setup-codeql action has been added which is similar to init, except it only installs the CodeQL CLI and does not initialize a database. Do not use this in production as it is part of an internal experiment and subject to change at any time. #3204

4.30.8 - 10 Oct 2025

No user facing changes.

4.30.7 - 06 Oct 2025

[v4+ only] The CodeQL Action now runs on Node.js v24. #3169

... (truncated)

Commits

fe4161a Merge pull request #3336 from github/update-v4.31.6-ecec1f887
88c2ab5 Update changelog for v4.31.6
ecec1f8 Merge pull request #3335 from github/mbg/ci/run-codeql-on-all-prs
23da732 Merge pull request #3334 from github/kaspersv/overlay-minor-comments
f7abc74 Remove branch filter for PR event in CodeQL workflow
32ada5e Merge branch 'main' into kaspersv/overlay-minor-comments
75b2f49 Merge pull request #3333 from github/kaspersv/overlay-no-resource-checks-option
f036b1c Merge branch 'main' into kaspersv/overlay-no-resource-checks-option
58c5954 Add comment to runnerSupportsOverlayAnalysis
b02fa13 Order feature flags alphabetically
Additional commits viewable in compare view

Updates docker/setup-qemu-action from 3.6.0 to 3.7.0

Release notes

Sourced from docker/setup-qemu-action's releases.

v3.7.0

Bump @docker/actions-toolkit from 0.56.0 to 0.67.0 in docker/setup-qemu-action#217 docker/setup-qemu-action#230

Bump brace-expansion from 1.1.11 to 1.1.12 in docker/setup-qemu-action#220

Bump form-data from 2.5.1 to 2.5.5 in docker/setup-qemu-action#218

Bump tmp from 0.2.3 to 0.2.4 in docker/setup-qemu-action#221

Bump undici from 5.28.4 to 5.29.0 in docker/setup-qemu-action#219

Full Changelog: docker/setup-qemu-action@v3.6.0...v3.7.0

Commits

c7c5346 Merge pull request #230 from docker/dependabot/npm_and_yarn/docker/actions-to...
3a517a1 chore: update generated content
a5b45ed build(deps): bump @docker/actions-toolkit from 0.62.1 to 0.67.0
3a64278 Merge pull request #220 from docker/dependabot/npm_and_yarn/brace-expansion-1...
94906ba chore: update generated content
4027abf build(deps): bump brace-expansion from 1.1.11 to 1.1.12
bee0aaa Merge pull request #221 from docker/dependabot/npm_and_yarn/tmp-0.2.4
0d7e257 chore: update generated content
b869601 build(deps): bump tmp from 0.2.3 to 0.2.4
3a043ed Merge pull request #219 from docker/dependabot/npm_and_yarn/undici-5.29.0
Additional commits viewable in compare view

Updates actions/create-github-app-token from 2.1.4 to 2.2.0

Release notes

Sourced from actions/create-github-app-token's releases.

v2.2.0

2.2.0 (2025-11-21)

Bug Fixes

deps: bump glob from 10.4.5 to 10.5.0 (#305) (5480f43)

deps: bump p-retry from 6.2.1 to 7.1.0 (#294) (dce3be8)

deps: bump the production-dependencies group with 2 updates (#292) (55e2a4b)

Features

update permission inputs (#296) (d90aa53)

Commits

7e473ef build(release): 2.2.0 [skip ci]
dce3be8 fix(deps): bump p-retry from 6.2.1 to 7.1.0 (#294)
5480f43 fix(deps): bump glob from 10.4.5 to 10.5.0 (#305)
d90aa53 feat: update permission inputs (#296)
55e2a4b fix(deps): bump the production-dependencies group with 2 updates (#292)
cc6f999 ci(test): trigger on merge_group (#308)
40fa6b5 build(deps-dev): bump @sinonjs/fake-timers from 14.0.0 to 15.0.0 (#295)
396e502 build(deps): bump actions/checkout from 5 to 6 (#306)
f48f2eb build(deps): bump stefanzweifel/git-auto-commit-action from 6.0.1 to 7.0.0 (#...
b7f83f6 build(deps): bump actions/setup-node from 4 to 6 (#299)
Additional commits viewable in compare view

Updates actions/setup-go from 6.0.0 to 6.1.0

Release notes

Sourced from actions/setup-go's releases.

v6.1.0

What's Changed

Enhancements

Fall back to downloading from go.dev/dl instead of storage.googleapis.com/golang by @nicholasngai in actions/setup-go#665

Add support for .tool-versions file and update workflow by @priya-kinthali in actions/setup-go#673

Add comprehensive breaking changes documentation for v6 by @mahabaleshwars in actions/setup-go#674

Dependency updates

Upgrade eslint-config-prettier from 10.0.1 to 10.1.8 and document breaking changes in v6 by @dependabot in actions/setup-go#617

Upgrade actions/publish-action from 0.3.0 to 0.4.0 by @dependabot in actions/setup-go#641

Upgrade semver and @types/semver by @dependabot in actions/setup-go#652

New Contributors

@nicholasngai made their first contribution in actions/setup-go#665

@priya-kinthali made their first contribution in actions/setup-go#673

@mahabaleshwars made their first contribution in actions/setup-go#674

Full Changelog: actions/setup-go@v6...v6.1.0

Commits

4dc6199 Bump semver and @types/semver (#652)
f3787be Add comprehensive breaking changes documentation for v6 (#674)
3a0c2c8 Bump actions/publish-action from 0.3.0 to 0.4.0 (#641)
faf5242 Add support for .tool-versions file in setup-go, update workflow (#673)
7bc60db Fall back to downloading from go.dev/dl instead of storage.googleapis.com/gol...
c0137ca Bump eslint-config-prettier from 10.0.1 to 10.1.8 and document breaking chang...
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the gh-actions-packages group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `5.0.0` | `6.0.0` | | [actions/setup-dotnet](https://github.com/actions/setup-dotnet) | `5.0.0` | `5.0.1` | | [actions/create-github-app-token](https://github.com/actions/create-github-app-token) | `2.1.4` | `2.2.0` | | [softprops/action-gh-release](https://github.com/softprops/action-gh-release) | `2.4.1` | `2.5.0` | | [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) | `7.0.8` | `7.0.9` | | [github/codeql-action](https://github.com/github/codeql-action) | `4.31.2` | `4.31.6` | Bumps the gh-actions-packages group with 1 update in the /.github/actions/create-system-test-docker-base-images directory: [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action). Bumps the gh-actions-packages group with 1 update in the /.github/actions/deploy-aas-dev-apps directory: [actions/create-github-app-token](https://github.com/actions/create-github-app-token). Bumps the gh-actions-packages group with 1 update in the /.github/actions/publish-debug-symbols directory: [actions/setup-go](https://github.com/actions/setup-go). Updates `actions/checkout` from 5.0.0 to 6.0.0 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@08c6903...1af3b93) Updates `actions/setup-dotnet` from 5.0.0 to 5.0.1 - [Release notes](https://github.com/actions/setup-dotnet/releases) - [Commits](actions/setup-dotnet@d4c9434...2016bd2) Updates `actions/create-github-app-token` from 2.1.4 to 2.2.0 - [Release notes](https://github.com/actions/create-github-app-token/releases) - [Commits](actions/create-github-app-token@6701853...7e473ef) Updates `softprops/action-gh-release` from 2.4.1 to 2.5.0 - [Release notes](https://github.com/softprops/action-gh-release/releases) - [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md) - [Commits](softprops/action-gh-release@6da8fa9...a06a81a) Updates `peter-evans/create-pull-request` from 7.0.8 to 7.0.9 - [Release notes](https://github.com/peter-evans/create-pull-request/releases) - [Commits](peter-evans/create-pull-request@271a8d0...84ae59a) Updates `github/codeql-action` from 4.31.2 to 4.31.6 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@0499de3...fe4161a) Updates `docker/setup-qemu-action` from 3.6.0 to 3.7.0 - [Release notes](https://github.com/docker/setup-qemu-action/releases) - [Commits](docker/setup-qemu-action@2910929...c7c5346) Updates `actions/create-github-app-token` from 2.1.4 to 2.2.0 - [Release notes](https://github.com/actions/create-github-app-token/releases) - [Commits](actions/create-github-app-token@6701853...7e473ef) Updates `actions/setup-go` from 6.0.0 to 6.1.0 - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](actions/setup-go@4469467...4dc6199) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: gh-actions-packages - dependency-name: actions/setup-dotnet dependency-version: 5.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gh-actions-packages - dependency-name: actions/create-github-app-token dependency-version: 2.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gh-actions-packages - dependency-name: softprops/action-gh-release dependency-version: 2.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gh-actions-packages - dependency-name: peter-evans/create-pull-request dependency-version: 7.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gh-actions-packages - dependency-name: github/codeql-action dependency-version: 4.31.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gh-actions-packages - dependency-name: docker/setup-qemu-action dependency-version: 3.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gh-actions-packages - dependency-name: actions/create-github-app-token dependency-version: 2.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gh-actions-packages - dependency-name: actions/setup-go dependency-version: 6.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gh-actions-packages ... Signed-off-by: dependabot[bot] <support@github.com>

pr-commenter · 2025-12-01T19:32:52Z

Benchmarks

Benchmarks Report for benchmark platform 🐌

Benchmarks for #7888 compared to master:

3 benchmarks are faster, with geometric mean 1.397
1 benchmarks are slower, with geometric mean 1.611
5 benchmarks have fewer allocations
5 benchmarks have more allocations

The following thresholds were used for comparing the benchmark speeds:

Mann–Whitney U test with statistical test for significance of 5%
Only results indicating a difference greater than 10% and 0.3 ns are considered.

Allocation changes below 0.5% are ignored.

Benchmark details

Benchmarks.Trace.ActivityBenchmark - Same speed ✔️ More allocations ⚠️

More allocations ⚠️ in #7888

Benchmark	Base Allocated	Diff Allocated	Change	Change %
Benchmarks.Trace.ActivityBenchmark.StartStopWithChild‑net6.0	5.41 KB	5.53 KB	124 B	2.29%
Benchmarks.Trace.ActivityBenchmark.StartStopWithChild‑netcoreapp3.1	5.67 KB	5.7 KB	30 B	0.53%

Fewer allocations 🎉 in #7888

Benchmark	Base Allocated	Diff Allocated	Change	Change %
Benchmarks.Trace.ActivityBenchmark.StartStopWithChild‑net472	6.09 KB	6.01 KB	-83 B	-1.36%

Raw results

Branch	Method	Toolchain	Mean	StdError	StdDev	Gen 0	Gen 1	Gen 2	Allocated
master	`StartStopWithChild`	net6.0	10.7μs	60.6ns	407ns	0	0	0	5.41 KB
master	`StartStopWithChild`	netcoreapp3.1	14.5μs	75.9ns	364ns	0	0	0	5.67 KB
master	`StartStopWithChild`	net472	21.7μs	82.5ns	330ns	0.983	0.328	0.109	6.09 KB
#7888	`StartStopWithChild`	net6.0	10.3μs	56.5ns	344ns	0	0	0	5.53 KB
#7888	`StartStopWithChild`	netcoreapp3.1	14μs	73.9ns	362ns	0	0	0	5.7 KB
#7888	`StartStopWithChild`	net472	21.7μs	92.8ns	335ns	0.994	0.331	0.11	6.01 KB

Benchmarks.Trace.AgentWriterBenchmark - Same speed ✔️ Same allocations ✔️

Raw results

Branch	Method	Toolchain	Mean	StdError	StdDev	Gen 0	Allocated
master	`WriteAndFlushEnrichedTraces`	net6.0	1.28ms	300ns	1.16μs	0	2.71 KB
master	`WriteAndFlushEnrichedTraces`	netcoreapp3.1	1.37ms	2.49μs	9.65μs	0	2.7 KB
master	`WriteAndFlushEnrichedTraces`	net472	1.8ms	216ns	750ns	17.9	115.64 KB
#7888	`WriteAndFlushEnrichedTraces`	net6.0	1.28ms	329ns	1.14μs	0	2.71 KB
#7888	`WriteAndFlushEnrichedTraces`	netcoreapp3.1	1.36ms	77ns	278ns	0	2.7 KB
#7888	`WriteAndFlushEnrichedTraces`	net472	1.76ms	2.1μs	8.14μs	15.6	115.78 KB

Benchmarks.Trace.Asm.AppSecBodyBenchmark - Same speed ✔️ Same allocations ✔️

Raw results

Branch	Method	Toolchain	Mean	StdError	StdDev	Gen 0	Allocated
master	`AllCycleSimpleBody`	net6.0	1.07μs	4.65ns	17.4ns	0	1.22 KB
master	`AllCycleSimpleBody`	netcoreapp3.1	1.4μs	7.8ns	48.1ns	0	1.2 KB
master	`AllCycleSimpleBody`	net472	1.06μs	0.203ns	0.785ns	0.19	1.23 KB
master	`AllCycleMoreComplexBody`	net6.0	7.1μs	34ns	132ns	0	4.72 KB
master	`AllCycleMoreComplexBody`	netcoreapp3.1	8.97μs	44.8ns	190ns	0	4.62 KB
master	`AllCycleMoreComplexBody`	net472	7.59μs	4.18ns	15.6ns	0.721	4.74 KB
master	`ObjectExtractorSimpleBody`	net6.0	331ns	1.6ns	6.4ns	0	280 B
master	`ObjectExtractorSimpleBody`	netcoreapp3.1	392ns	2.22ns	14.6ns	0	272 B
master	`ObjectExtractorSimpleBody`	net472	304ns	0.454ns	1.76ns	0.0446	281 B
master	`ObjectExtractorMoreComplexBody`	net6.0	6.39μs	29.6ns	118ns	0	3.78 KB
master	`ObjectExtractorMoreComplexBody`	netcoreapp3.1	7.79μs	36.4ns	150ns	0	3.69 KB
master	`ObjectExtractorMoreComplexBody`	net472	6.64μs	3.25ns	12.6ns	0.597	3.8 KB
#7888	`AllCycleSimpleBody`	net6.0	1.1μs	0.983ns	3.81ns	0	1.22 KB
#7888	`AllCycleSimpleBody`	netcoreapp3.1	1.39μs	7.4ns	39.2ns	0	1.2 KB
#7888	`AllCycleSimpleBody`	net472	1.07μs	0.5ns	1.94ns	0.191	1.23 KB
#7888	`AllCycleMoreComplexBody`	net6.0	7.16μs	33.1ns	119ns	0	4.72 KB
#7888	`AllCycleMoreComplexBody`	netcoreapp3.1	9.22μs	47.2ns	211ns	0	4.62 KB
#7888	`AllCycleMoreComplexBody`	net472	7.52μs	1.99ns	7.18ns	0.752	4.74 KB
#7888	`ObjectExtractorSimpleBody`	net6.0	322ns	1.68ns	8.22ns	0	280 B
#7888	`ObjectExtractorSimpleBody`	netcoreapp3.1	396ns	2.16ns	12.8ns	0	272 B
#7888	`ObjectExtractorSimpleBody`	net472	301ns	0.197ns	0.709ns	0.0439	281 B
#7888	`ObjectExtractorMoreComplexBody`	net6.0	6.51μs	27ns	105ns	0	3.78 KB
#7888	`ObjectExtractorMoreComplexBody`	netcoreapp3.1	7.89μs	39.8ns	183ns	0	3.69 KB
#7888	`ObjectExtractorMoreComplexBody`	net472	6.65μs	3.95ns	15.3ns	0.597	3.8 KB

Benchmarks.Trace.Asm.AppSecEncoderBenchmark - Same speed ✔️ Same allocations ✔️

Raw results

Branch	Method	Toolchain	Mean	StdError	StdDev	Gen 0	Allocated
master	`EncodeArgs`	net6.0	76.6μs	249ns	964ns	0	32.4 KB
master	`EncodeArgs`	netcoreapp3.1	96.8μs	201ns	777ns	0	32.4 KB
master	`EncodeArgs`	net472	110μs	6.24ns	21.6ns	4.96	32.51 KB
master	`EncodeLegacyArgs`	net6.0	146μs	64.8ns	234ns	0	2.15 KB
master	`EncodeLegacyArgs`	netcoreapp3.1	199μs	240ns	931ns	0	2.14 KB
master	`EncodeLegacyArgs`	net472	264μs	198ns	713ns	0	2.16 KB
#7888	`EncodeArgs`	net6.0	76.2μs	329ns	1.27μs	0	32.4 KB
#7888	`EncodeArgs`	netcoreapp3.1	96.2μs	358ns	1.39μs	0	32.4 KB
#7888	`EncodeArgs`	net472	110μs	64.6ns	250ns	4.95	32.51 KB
#7888	`EncodeLegacyArgs`	net6.0	145μs	127ns	491ns	0	2.14 KB
#7888	`EncodeLegacyArgs`	netcoreapp3.1	197μs	179ns	695ns	0	2.15 KB
#7888	`EncodeLegacyArgs`	net472	264μs	308ns	1.19μs	0	2.16 KB

Benchmarks.Trace.Asm.AppSecWafBenchmark - Same speed ✔️ More allocations ⚠️

More allocations ⚠️ in #7888

Benchmark	Base Allocated	Diff Allocated	Change	Change %
Benchmarks.Trace.Asm.AppSecWafBenchmark.RunWafRealisticBenchmarkWithAttack‑net6.0	3.17 KB	3.5 KB	336 B	10.61%

Raw results

Branch	Method	Toolchain	Mean	StdError	StdDev	Allocated
master	`RunWafRealisticBenchmark`	net6.0	425μs	648ns	2.34μs	5.82 KB
master	`RunWafRealisticBenchmark`	netcoreapp3.1	473μs	2.91μs	27.6μs	4.58 KB
master	`RunWafRealisticBenchmark`	net472	497μs	732ns	2.83μs	0 b
master	`RunWafRealisticBenchmarkWithAttack`	net6.0	316μs	1.19μs	4.28μs	3.17 KB
master	`RunWafRealisticBenchmarkWithAttack`	netcoreapp3.1	359μs	3.06μs	29μs	2.32 KB
master	`RunWafRealisticBenchmarkWithAttack`	net472	372μs	505ns	1.89μs	0 b
#7888	`RunWafRealisticBenchmark`	net6.0	421μs	676ns	2.53μs	5.82 KB
#7888	`RunWafRealisticBenchmark`	netcoreapp3.1	460μs	2.6μs	17.5μs	4.58 KB
#7888	`RunWafRealisticBenchmark`	net472	497μs	652ns	2.53μs	0 b
#7888	`RunWafRealisticBenchmarkWithAttack`	net6.0	320μs	1.74μs	13.8μs	3.5 KB
#7888	`RunWafRealisticBenchmarkWithAttack`	netcoreapp3.1	345μs	2.92μs	27.7μs	2.32 KB
#7888	`RunWafRealisticBenchmarkWithAttack`	net472	373μs	653ns	2.44μs	0 b

Benchmarks.Trace.AspNetCoreBenchmark - Same speed ✔️ Same allocations ✔️

Raw results

Branch	Method	Toolchain	Mean	StdError	StdDev	Allocated
master	`SendRequest`	net6.0	60.1μs	58.7ns	227ns	14.52 KB
master	`SendRequest`	netcoreapp3.1	72.5μs	118ns	407ns	17.42 KB
master	`SendRequest`	net472	0.158ns	0.00432ns	0.0167ns	0 b
#7888	`SendRequest`	net6.0	61.4μs	60.6ns	235ns	14.52 KB
#7888	`SendRequest`	netcoreapp3.1	72μs	286ns	1.11μs	17.42 KB
#7888	`SendRequest`	net472	0.143ns	0.00321ns	0.0124ns	0 b

Benchmarks.Trace.CharSliceBenchmark - Slower ⚠️ Fewer allocations 🎉

Slower ⚠️ in #7888

Benchmark	diff/base	Base Median (ns)	Diff Median (ns)	Modality
Benchmarks.Trace.CharSliceBenchmark.OptimizedCharSlice‑netcoreapp3.1	1.611	1,705,800.00	2,747,650.00

Faster 🎉 in #7888

Benchmark	base/diff	Base Median (ns)	Diff Median (ns)	Modality
Benchmarks.Trace.CharSliceBenchmark.OriginalCharSlice‑netcoreapp3.1	1.938	4,097,000.00	2,113,850.00
Benchmarks.Trace.CharSliceBenchmark.OptimizedCharSliceWithPool‑net472	1.209	1,368,600.00	1,131,900.00

Fewer allocations 🎉 in #7888

Benchmark	Base Allocated	Diff Allocated	Change	Change %
Benchmarks.Trace.CharSliceBenchmark.OptimizedCharSlice‑net6.0	640 B	304 B	-336 B	-52.50%

Raw results

Branch	Method	Toolchain	Mean	StdError	StdDev	Allocated
master	`OriginalCharSlice`	net6.0	1.94ms	1.22μs	4.57μs	640.64 KB
master	`OriginalCharSlice`	netcoreapp3.1	4.1ms	2.12μs	8.22μs	640.1 KB
master	`OriginalCharSlice`	net472	2.63ms	958ns	3.71μs	647.17 KB
master	`OptimizedCharSlice`	net6.0	1.52ms	376ns	1.41μs	640 B
master	`OptimizedCharSlice`	netcoreapp3.1	1.71ms	5.66μs	35.8μs	104 B
master	`OptimizedCharSlice`	net472	1.94ms	593ns	2.3μs	0 b
master	`OptimizedCharSliceWithPool`	net6.0	1.05ms	588ns	2.2μs	640 B
master	`OptimizedCharSliceWithPool`	netcoreapp3.1	1.86ms	1.95μs	7.56μs	104 B
master	`OptimizedCharSliceWithPool`	net472	1.37ms	1.35μs	5.23μs	0 b
#7888	`OriginalCharSlice`	net6.0	2.01ms	760ns	2.94μs	640.64 KB
#7888	`OriginalCharSlice`	netcoreapp3.1	2.13ms	7.33μs	53.8μs	640.1 KB
#7888	`OriginalCharSlice`	net472	2.62ms	227ns	819ns	647.17 KB
#7888	`OptimizedCharSlice`	net6.0	1.43ms	1.66μs	6.43μs	304 B
#7888	`OptimizedCharSlice`	netcoreapp3.1	2.75ms	1.11μs	4.14μs	104 B
#7888	`OptimizedCharSlice`	net472	1.94ms	582ns	2.25μs	0 b
#7888	`OptimizedCharSliceWithPool`	net6.0	1.09ms	686ns	2.66μs	640 B
#7888	`OptimizedCharSliceWithPool`	netcoreapp3.1	1.91ms	2.24μs	8.69μs	104 B
#7888	`OptimizedCharSliceWithPool`	net472	1.13ms	576ns	2.23μs	0 b

Benchmarks.Trace.CIVisibilityProtocolWriterBenchmark - Same speed ✔️ More allocations ⚠️

More allocations ⚠️ in #7888

Benchmark	Base Allocated	Diff Allocated	Change	Change %
Benchmarks.Trace.CIVisibilityProtocolWriterBenchmark.WriteAndFlushEnrichedTraces‑netcoreapp3.1	41.9 KB	42.19 KB	289 B	0.69%

Raw results

Branch	Method	Toolchain	Mean	StdError	StdDev	Gen 0	Allocated
master	`WriteAndFlushEnrichedTraces`	net6.0	665μs	451ns	1.75μs	0	41.67 KB
master	`WriteAndFlushEnrichedTraces`	netcoreapp3.1	722μs	979ns	3.79μs	0	41.9 KB
master	`WriteAndFlushEnrichedTraces`	net472	958μs	4.64μs	18.6μs	4.81	55.79 KB
#7888	`WriteAndFlushEnrichedTraces`	net6.0	665μs	385ns	1.49μs	0	41.87 KB
#7888	`WriteAndFlushEnrichedTraces`	netcoreapp3.1	708μs	4.13μs	36.5μs	0	42.19 KB
#7888	`WriteAndFlushEnrichedTraces`	net472	1.01ms	5.91μs	57.6μs	8.33	56.01 KB

Benchmarks.Trace.DbCommandBenchmark - Same speed ✔️ Same allocations ✔️

Raw results

Branch	Method	Toolchain	Mean	StdError	StdDev	Gen 0	Allocated
master	`ExecuteNonQuery`	net6.0	1.91μs	8.99ns	35.9ns	0	1.02 KB
master	`ExecuteNonQuery`	netcoreapp3.1	2.63μs	2.44ns	9.44ns	0	1.02 KB
master	`ExecuteNonQuery`	net472	2.72μs	1.02ns	3.69ns	0.152	987 B
#7888	`ExecuteNonQuery`	net6.0	1.95μs	8.05ns	31.2ns	0	1.02 KB
#7888	`ExecuteNonQuery`	netcoreapp3.1	2.57μs	13.8ns	71.9ns	0	1.02 KB
#7888	`ExecuteNonQuery`	net472	2.78μs	2.23ns	8.63ns	0.152	987 B

Benchmarks.Trace.ElasticsearchBenchmark - Same speed ✔️ Same allocations ✔️

Raw results

Branch	Method	Toolchain	Mean	StdError	StdDev	Gen 0	Allocated
master	`CallElasticsearch`	net6.0	1.72μs	8.72ns	40.9ns	0	1.03 KB
master	`CallElasticsearch`	netcoreapp3.1	2.37μs	8.9ns	32.1ns	0	1.03 KB
master	`CallElasticsearch`	net472	3.45μs	3.03ns	11.7ns	0.156	1.04 KB
master	`CallElasticsearchAsync`	net6.0	1.78μs	6.89ns	26.7ns	0	1.01 KB
master	`CallElasticsearchAsync`	netcoreapp3.1	2.48μs	10.5ns	40.8ns	0	1.08 KB
master	`CallElasticsearchAsync`	net472	3.67μs	4.49ns	17.4ns	0.167	1.1 KB
#7888	`CallElasticsearch`	net6.0	1.72μs	1.22ns	4.72ns	0	1.03 KB
#7888	`CallElasticsearch`	netcoreapp3.1	2.23μs	10.5ns	40.8ns	0	1.03 KB
#7888	`CallElasticsearch`	net472	3.35μs	1.68ns	6.28ns	0.152	1.04 KB
#7888	`CallElasticsearchAsync`	net6.0	1.83μs	0.746ns	2.89ns	0	1.01 KB
#7888	`CallElasticsearchAsync`	netcoreapp3.1	2.46μs	11.6ns	46.3ns	0	1.08 KB
#7888	`CallElasticsearchAsync`	net472	3.62μs	3.45ns	13.3ns	0.163	1.1 KB

Benchmarks.Trace.GraphQLBenchmark - Same speed ✔️ Same allocations ✔️

Raw results

Branch	Method	Toolchain	Mean	StdError	StdDev	Gen 0	Allocated
master	`ExecuteAsync`	net6.0	1.92μs	9.55ns	39.4ns	0	952 B
master	`ExecuteAsync`	netcoreapp3.1	2.47μs	6.9ns	26.7ns	0	952 B
master	`ExecuteAsync`	net472	2.59μs	0.737ns	2.66ns	0.143	915 B
#7888	`ExecuteAsync`	net6.0	1.91μs	9.32ns	37.3ns	0	952 B
#7888	`ExecuteAsync`	netcoreapp3.1	2.39μs	7.44ns	28.8ns	0	952 B
#7888	`ExecuteAsync`	net472	2.61μs	4.16ns	16.1ns	0.144	915 B

Benchmarks.Trace.HttpClientBenchmark - Same speed ✔️ Same allocations ✔️

Raw results

Branch	Method	Toolchain	Mean	StdError	StdDev	Gen 0	Allocated
master	`SendAsync`	net6.0	6.9μs	7.53ns	27.1ns	0	2.36 KB
master	`SendAsync`	netcoreapp3.1	8.76μs	29.7ns	115ns	0	2.9 KB
master	`SendAsync`	net472	12.1μs	18.2ns	70.5ns	0.481	3.18 KB
#7888	`SendAsync`	net6.0	6.99μs	9.56ns	35.8ns	0	2.36 KB
#7888	`SendAsync`	netcoreapp3.1	8.4μs	21.2ns	82.2ns	0	2.9 KB
#7888	`SendAsync`	net472	12.3μs	9.3ns	36ns	0.491	3.18 KB

Benchmarks.Trace.Iast.StringAspectsBenchmark - Faster 🎉 More allocations ⚠️

Faster 🎉 in #7888

Benchmark	base/diff	Base Median (ns)	Diff Median (ns)	Modality
Benchmarks.Trace.Iast.StringAspectsBenchmark.StringConcatAspectBenchmark‑netcoreapp3.1	1.162	570,300.00	490,700.00

More allocations ⚠️ in #7888

Benchmark	Base Allocated	Diff Allocated	Change	Change %
Benchmarks.Trace.Iast.StringAspectsBenchmark.StringConcatBenchmark‑netcoreapp3.1	42.68 KB	43.22 KB	536 B	1.26%

Fewer allocations 🎉 in #7888

Benchmark	Base Allocated	Diff Allocated	Change	Change %
Benchmarks.Trace.Iast.StringAspectsBenchmark.StringConcatAspectBenchmark‑net6.0	277.02 KB	275 KB	-2.02 KB	-0.73%
Benchmarks.Trace.Iast.StringAspectsBenchmark.StringConcatBenchmark‑net6.0	44.13 KB	43.78 KB	-352 B	-0.80%
Benchmarks.Trace.Iast.StringAspectsBenchmark.StringConcatAspectBenchmark‑netcoreapp3.1	278.32 KB	260.46 KB	-17.86 KB	-6.42%

Raw results

Branch	Method	Toolchain	Mean	StdError	StdDev	Allocated
master	`StringConcatBenchmark`	net6.0	46.2μs	332ns	3.12μs	44.13 KB
master	`StringConcatBenchmark`	netcoreapp3.1	51.5μs	420ns	4.01μs	42.68 KB
master	`StringConcatBenchmark`	net472	57.8μs	167ns	601ns	57.34 KB
master	`StringConcatAspectBenchmark`	net6.0	483μs	2.07μs	9.27μs	277.02 KB
master	`StringConcatAspectBenchmark`	netcoreapp3.1	572μs	2.12μs	7.65μs	278.32 KB
master	`StringConcatAspectBenchmark`	net472	409μs	2.26μs	16μs	278.53 KB
#7888	`StringConcatBenchmark`	net6.0	44.6μs	245ns	1.37μs	43.78 KB
#7888	`StringConcatBenchmark`	netcoreapp3.1	48.7μs	223ns	1.3μs	43.22 KB
#7888	`StringConcatBenchmark`	net472	56.9μs	307ns	1.74μs	57.34 KB
#7888	`StringConcatAspectBenchmark`	net6.0	470μs	2.39μs	10.9μs	275 KB
#7888	`StringConcatAspectBenchmark`	netcoreapp3.1	493μs	2.27μs	8.17μs	260.46 KB
#7888	`StringConcatAspectBenchmark`	net472	408μs	2.33μs	17.5μs	278.53 KB

Benchmarks.Trace.ILoggerBenchmark - Same speed ✔️ Same allocations ✔️

Raw results

Branch	Method	Toolchain	Mean	StdError	StdDev	Gen 0	Allocated
master	`EnrichedLog`	net6.0	2.65μs	14.5ns	84.8ns	0	1.7 KB
master	`EnrichedLog`	netcoreapp3.1	3.57μs	16.9ns	69.7ns	0	1.7 KB
master	`EnrichedLog`	net472	3.91μs	2.7ns	10.1ns	0.254	1.64 KB
#7888	`EnrichedLog`	net6.0	2.7μs	13.7ns	61.1ns	0	1.7 KB
#7888	`EnrichedLog`	netcoreapp3.1	3.54μs	17.6ns	80.5ns	0	1.7 KB
#7888	`EnrichedLog`	net472	3.9μs	2.2ns	8.23ns	0.254	1.64 KB

Benchmarks.Trace.Log4netBenchmark - Same speed ✔️ Same allocations ✔️

Raw results

Branch	Method	Toolchain	Mean	StdError	StdDev	Allocated
master	`EnrichedLog`	net6.0	125μs	464ns	1.8μs	4.31 KB
master	`EnrichedLog`	netcoreapp3.1	128μs	431ns	1.67μs	4.31 KB
master	`EnrichedLog`	net472	167μs	109ns	409ns	4.52 KB
#7888	`EnrichedLog`	net6.0	123μs	51.6ns	193ns	4.31 KB
#7888	`EnrichedLog`	netcoreapp3.1	126μs	108ns	389ns	4.31 KB
#7888	`EnrichedLog`	net472	168μs	266ns	1.03μs	4.52 KB

Benchmarks.Trace.NLogBenchmark - Same speed ✔️ Same allocations ✔️

Raw results

Branch	Method	Toolchain	Mean	StdError	StdDev	Gen 0	Allocated
master	`EnrichedLog`	net6.0	5.07μs	15.9ns	57.2ns	0	2.26 KB
master	`EnrichedLog`	netcoreapp3.1	6.95μs	19.8ns	76.5ns	0	2.26 KB
master	`EnrichedLog`	net472	7.69μs	10.7ns	41.6ns	0.307	2.08 KB
#7888	`EnrichedLog`	net6.0	5.09μs	5.14ns	19.9ns	0	2.26 KB
#7888	`EnrichedLog`	netcoreapp3.1	6.92μs	27ns	105ns	0	2.26 KB
#7888	`EnrichedLog`	net472	7.67μs	12.7ns	49.1ns	0.305	2.08 KB

Benchmarks.Trace.RedisBenchmark - Same speed ✔️ Same allocations ✔️

Raw results

Branch	Method	Toolchain	Mean	StdError	StdDev	Gen 0	Allocated
master	`SendReceive`	net6.0	2.02μs	10.9ns	58.7ns	0	1.2 KB
master	`SendReceive`	netcoreapp3.1	2.59μs	11.8ns	45.6ns	0	1.2 KB
master	`SendReceive`	net472	3.1μs	0.789ns	3.05ns	0.188	1.2 KB
#7888	`SendReceive`	net6.0	1.97μs	9.2ns	35.6ns	0	1.2 KB
#7888	`SendReceive`	netcoreapp3.1	2.52μs	12.1ns	48.5ns	0	1.2 KB
#7888	`SendReceive`	net472	3.1μs	5.07ns	19.6ns	0.184	1.2 KB

Benchmarks.Trace.SerilogBenchmark - Same speed ✔️ Same allocations ✔️

Raw results

Branch	Method	Toolchain	Mean	StdError	StdDev	Gen 0	Allocated
master	`EnrichedLog`	net6.0	4.32μs	8.14ns	31.5ns	0	1.58 KB
master	`EnrichedLog`	netcoreapp3.1	5.75μs	18.7ns	72.6ns	0	1.63 KB
master	`EnrichedLog`	net472	6.51μs	6.34ns	24.5ns	0.292	2.03 KB
#7888	`EnrichedLog`	net6.0	4.5μs	8.62ns	33.4ns	0	1.58 KB
#7888	`EnrichedLog`	netcoreapp3.1	5.71μs	12.8ns	49.7ns	0	1.63 KB
#7888	`EnrichedLog`	net472	6.43μs	7.14ns	26.7ns	0.321	2.03 KB

Benchmarks.Trace.SpanBenchmark - Same speed ✔️ Same allocations ✔️

Raw results

Branch	Method	Toolchain	Mean	StdError	StdDev	Gen 0	Allocated
master	`StartFinishSpan`	net6.0	805ns	2.44ns	9.44ns	0	576 B
master	`StartFinishSpan`	netcoreapp3.1	966ns	5.11ns	27.5ns	0	576 B
master	`StartFinishSpan`	net472	907ns	0.135ns	0.504ns	0.0906	578 B
master	`StartFinishScope`	net6.0	985ns	0.814ns	3.04ns	0	696 B
master	`StartFinishScope`	netcoreapp3.1	1.14μs	5.96ns	28.6ns	0	696 B
master	`StartFinishScope`	net472	1.12μs	0.0802ns	0.311ns	0.101	658 B
master	`StartFinishTwoScopes`	net6.0	1.78μs	0.275ns	1.06ns	0	1.19 KB
master	`StartFinishTwoScopes`	netcoreapp3.1	2.19μs	11.9ns	64ns	0	1.19 KB
master	`StartFinishTwoScopes`	net472	2.19μs	3.39ns	13.1ns	0.163	1.08 KB
#7888	`StartFinishSpan`	net6.0	798ns	0.23ns	0.891ns	0	576 B
#7888	`StartFinishSpan`	netcoreapp3.1	971ns	4.42ns	17.1ns	0	576 B
#7888	`StartFinishSpan`	net472	904ns	0.0806ns	0.291ns	0.0911	578 B
#7888	`StartFinishScope`	net6.0	968ns	0.675ns	2.53ns	0	696 B
#7888	`StartFinishScope`	netcoreapp3.1	1.18μs	6.34ns	31.7ns	0	696 B
#7888	`StartFinishScope`	net472	1.11μs	0.177ns	0.663ns	0.101	658 B
#7888	`StartFinishTwoScopes`	net6.0	1.76μs	9.22ns	45.2ns	0	1.19 KB
#7888	`StartFinishTwoScopes`	netcoreapp3.1	2.17μs	11.2ns	52.6ns	0	1.19 KB
#7888	`StartFinishTwoScopes`	net472	2.2μs	2.67ns	10.4ns	0.165	1.08 KB

Benchmarks.Trace.TraceAnnotationsBenchmark - Same speed ✔️ Same allocations ✔️

Raw results

Branch	Method	Toolchain	Mean	StdError	StdDev	Gen 0	Allocated
master	`RunOnMethodBegin`	net6.0	1.08μs	0.608ns	2.35ns	0	696 B
master	`RunOnMethodBegin`	netcoreapp3.1	1.5μs	4.56ns	17.1ns	0	696 B
master	`RunOnMethodBegin`	net472	1.43μs	0.324ns	1.21ns	0.101	658 B
#7888	`RunOnMethodBegin`	net6.0	1.09μs	1.82ns	7.03ns	0	696 B
#7888	`RunOnMethodBegin`	netcoreapp3.1	1.44μs	6.74ns	26.9ns	0	696 B
#7888	`RunOnMethodBegin`	net472	1.44μs	1.13ns	4.23ns	0.101	658 B

andrewlock

Who knows, it's probably fine, let's find out 😅

dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Dec 1, 2025

dependabot bot requested a review from a team as a code owner December 1, 2025 18:38

dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Dec 1, 2025

github-actions bot added the area:builds project files, build scripts, pipelines, versioning, releases, packages label Dec 1, 2025

andrewlock approved these changes Dec 2, 2025

View reviewed changes

andrewlock merged commit 502adf7 into master Dec 2, 2025
103 of 106 checks passed

andrewlock deleted the dependabot/github_actions/gh-actions-packages-10e9270b8a branch December 2, 2025 07:37

github-actions bot added this to the vNext-v3 milestone Dec 2, 2025

Conversation

dependabot bot commented on behalf of github Dec 1, 2025

v6.0.0

What's Changed

v6-beta

What's Changed

v5.0.1

What's Changed

Changelog

V6.0.0

V5.0.1

V5.0.0

V4.3.1

V4.3.0

v4.2.2

v4.2.1

v4.2.0

v4.1.7

v4.1.6

v4.1.5

v5.0.1

What's Changed

v2.2.0

2.2.0 (2025-11-21)

Bug Fixes

Features

v2.5.0

What's Changed

Exciting New Features 🎉

Other Changes 🔄

New Contributors

v2.4.2

What's Changed

Exciting New Features 🎉

Other Changes 🔄

New Contributors

2.5.0

What's Changed

Exciting New Features 🎉

Other Changes 🔄

2.4.2

What's Changed

Exciting New Features 🎉

Other Changes 🔄

2.4.1

What's Changed

Other Changes 🔄

2.4.0

What's Changed

Exciting New Features 🎉

2.3.4

What's Changed

Bug fixes 🐛

Other Changes 🔄

Create Pull Request v7.0.9

What's Changed

New Contributors

v4.31.6

CodeQL Action Changelog

4.31.6 - 01 Dec 2025

v4.31.5

CodeQL Action Changelog

4.31.5 - 24 Nov 2025

v4.31.4

CodeQL Action Changelog

4.31.4 - 18 Nov 2025

v4.31.3

CodeQL Action Changelog

4.31.3 - 13 Nov 2025

CodeQL Action Changelog

[UNRELEASED]

4.31.6 - 01 Dec 2025

4.31.5 - 24 Nov 2025

4.31.4 - 18 Nov 2025

4.31.3 - 13 Nov 2025

4.31.2 - 30 Oct 2025

4.31.1 - 30 Oct 2025

4.31.0 - 24 Oct 2025

4.30.9 - 17 Oct 2025

4.30.8 - 10 Oct 2025