[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update	Pending
AngleSharp (source)	1.8.5 → 1.8.6			nuget	patch	1.9.0
Markdig (source)	1.4.2 → 1.5.0			nuget	minor	1.5.1
Microsoft.AspNetCore.Components.Web (source)	8.0.32 → 8.0.33			nuget	patch
Microsoft.AspNetCore.Components.Web (source)	10.0.13 → 10.0.14			nuget	patch
Microsoft.AspNetCore.Components.WebAssembly (source)	8.0.32 → 8.0.33			nuget	patch
Microsoft.AspNetCore.Components.WebAssembly (source)	10.0.13 → 10.0.14			nuget	patch
Microsoft.AspNetCore.Components.WebAssembly.DevServer (source)	8.0.32 → 8.0.33			nuget	patch
Microsoft.AspNetCore.Components.WebAssembly.DevServer (source)	10.0.13 → 10.0.14			nuget	patch
Microsoft.Extensions.Configuration.Abstractions (source)	10.0.13 → 10.0.14			nuget	patch
Microsoft.Extensions.DependencyInjection (source)	10.0.13 → 10.0.14			nuget	patch
Microsoft.Extensions.DependencyInjection.Abstractions (source)	10.0.13 → 10.0.14			nuget	patch
Microsoft.Extensions.Http (source)	10.0.13 → 10.0.14			nuget	patch
Microsoft.SourceLink.GitHub	10.0.402 → 10.0.403			nuget	patch
System.Security.Cryptography.Xml (source)	10.0.13 → 10.0.14			nuget	patch
bunit (source)	2.12.5 → 2.13.3			nuget	minor
dotnet-sdk	10.0.402 → 10.0.403			dotnet-sdk	patch

---

Release Notes

AngleSharp/AngleSharp (AngleSharp)

v1.8.6

Released on Sunday, October 25 2026.

• Removed temporary copies when serializing text that needs no HTML escaping
• Fixed INode.Equals (isEqualNode) to compare what the DOM spec compares: character data, doctype identifiers, processing instructions, element prefixes and attribute local names, no longer base URLs, without overflowing the stack on deep trees
• Fixed IAttr.Equals comparing the prefix instead of the local name
• Fixed IDocument.Import (importNode) returning nodes owned by the source document instead of the importing one
• Fixed IDocument.Import accepting a shadow root instead of throwing NotSupported
• Fixed INode.Clone and Import overflowing the stack on deeply nested trees and templates
• Fixed a shallow clone of a <template> copying its contents
• Fixed serializing < and > in attribute values unescaped, which let markup break out when reparsed under different rules (mutation XSS); they are now written as < and > like browsers do since the HTML spec change of May 2025
• Fixed IRange.CopyContent and ExtractContent overflowing the stack on deeply nested ranges
• Fixed Dispatch (dispatchEvent) returning true for a canceled event
• Fixed MutationObserver not observing a document itself and throwing for one without a root element
• Fixed MutationObserver.Disconnect keeping the previous targets for a later Connect
• Fixed a failing navigation or submission from DoClick crashing the process; it is reported as a context error
• Fixed URLSearchParams treating non-ASCII values as single bytes and leaving + undecoded @​NotAFlightRisk
• Added the IHtmlSelectElement.SelectedIndex setter
• Added HtmlParserOptions.MaximumDepth (default 512) to stop deeply nested markup from building trees that overflow the stack
• Added focusing of elements with a tabindex and blurring of any focused element
• Added DoClickAsync to await a click's navigation or form submission
• Added toggling the parent <details> when clicking its <summary>
• Added declarative shadow DOM: the parser attaches <template shadowrootmode="open"> (or closed) as the shadow root of its parent
• Added :host(<compound>), and selectors in a shadow tree reaching its host (only through :host)

xoofx/markdig (Markdig)

v1.5.0

Compare Source

Changes

🐛 Bug Fixes

• Keep Unicode whitespace other than spaces and tabs when trimming paragraphs, headings and info strings (PR #​966) by @​HuzaifaChaudary
• Add relative file links extension (#​897) (PR #​968) by @​StefanGreve
• Don't treat an escaped backslash as the start of another escape in HtmlHelper.Unescape (PR #​967) by @​HuzaifaChaudary
• Fix unescaped source URL in media links (PR #​969) by @​StefanGreve

Full Changelog: 1.4.2...1.5.0

_{Published with dotnet-releaser}

dotnet/dotnet (Microsoft.AspNetCore.Components.Web)

v10.0.14

bUnit-dev/bUnit (bunit)

v2.13.3

Fixed

• Find threw TypeLoadException with AngleSharp 1.8.6 because HtmlSelectElementWrapper did not implement the new SelectedIndex setter. Reported by @​poxet in #​1957. Fixed by @​linkdotnet.
• A WaitFor* call whose first check passed left its timeout timer running, which kept the helper, the renderer and everything the renderer holds alive until the timeout elapsed. With a long DefaultWaitTimeout, a test suite could hold every rendered component in memory for its whole run. Fixed by @​xaviergxf.

dotnet/sdk (dotnet-sdk)

v10.0.403

Compare Source

---

Configuration

📅 Schedule: (in timezone Europe/Brussels)

• Branch creation
  • "before 9am on Saturday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.