Skip to content

chore(deps): Bump Hangfire.AspNetCore from 1.8.14 to 1.8.24 - #246

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/nuget/build/Hangfire.AspNetCore-1.8.24
Closed

chore(deps): Bump Hangfire.AspNetCore from 1.8.14 to 1.8.24#246
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/nuget/build/Hangfire.AspNetCore-1.8.24

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 1, 2026

Copy link
Copy Markdown
Contributor

Updated Hangfire.AspNetCore from 1.8.14 to 1.8.24.

Release notes

Sourced from Hangfire.AspNetCore's releases.

1.8.24

Release Notes

Hangfire.Core

  • Added – Russian translation for Dashboard UI (by @​akortunov).
  • Changed – Slow log can now detect blocked extension filter executions.

1.8.23

Release Notes

Hangfire.Core

  • Changed – Use stable sorting algorithm for background job filters again (by @​jirikanda).
  • Fixed – Custom AutomaticRetryAttribute is ignored under certain conditions regression from 1.8.14 (by @​jirikanda).
  • Fixed – Add missing keys for Swedish translation (by @​karl-sjogren).
  • Project – Use TypeNameAssemblyFormatHandling in tests with .NET 6 (by @​viktor-vintertass).

Hangfire.AspNetCore

  • FixedInvalidOperationException: The request reached the end of the pipeline without executing the endpoint.

1.8.22

Release Notes

Hangfire.Core

  • AddedIGlobalConfiguration.UseNoOpLogProvider method to disable logging.
  • Changed – Un-deprecate interval methods in the Cron class, add remarks in docs instead.
  • Changed – Bump internalized version of Cronos to 0.11.1.
  • Changed – Bump internalized version of Microsoft.Owin to 4.2.3.
  • Fixed – Serialization of arrays of nested types SimpleAssemblyTypeSerializer.
  • Fixed – Remove wrong escaping characters in Portuguese translations on the "Servers" page.
  • Fixed – Properly remove registered IBackgroundProcessingServer instances on OWIN app shutdown.
  • FixedAspNetShutdownDetector for early ASP.NET shutdown detection is not working (regression from 1.7.30).
  • Project – Replace the netcoreapp3.1 target with the net8.0 one in tests.

Hangfire.SqlServer

  • FixedInvalidCastException when creating a background job with Schema 5 (regression from 1.8.15).
  • Project – Replace the netcoreapp3.1 target with the net8.0 one in tests.

Hangfire.AspNetCore

  • AddedMapHangfireDashboardWithNoAuthorizationFilters method, which does not include local-only filters.
  • Changed – Set 404 status code when MapHangfireDashboard is used and no dispatcher is found.
  • FixedInvalidOperationException upon receiving a request for 'hangfire/bootstrap.min.css.map'.

1.8.21

Release Notes

Hangfire.Core

  • AddedFailedState.IncludeFileInfo to optionally show/hide line numbers in exceptions in Failed state.
  • Changed – Include line numbers for exceptions by default when available.
  • Fixed – Portuguese (Brazil) translations in Strings.pt-BR.resx (by @​pedro-cons).
  • Fixed – Static BackgroundJob class always acquires the most current JobStorage.Current instance.
  • Fixed – Static RecurringJob class always acquires the most current JobStorage.Current instance.

Hangfire.SqlServer

  • AddedSqlServerStorageOptions.DisableTransactionScope option for .NET Framework targets.
  • Project – Port Monitoring API tests from the Hangfire.InMemory storage for better coverage.
  • Project – Run tests for different targets in parallel with different databases.

1.8.20

Release Notes

Hangfire.Core

  • Fixed – Glyphicons from Bootstrap are not displaying after upgrading to version 1.8.19.

1.8.19

Release Notes

Hangfire.Core

  • Changed – Update Bootstrap to the custom version of 3.4.2 to avoid false alerts on unused features.
  • Fixed – Typos in Portuguese translation (by @​VianaArthur).
  • Fixed – Unnecessary recurring job update transaction when nothing is changed after an error.

Hangfire.SqlServer

  • Fixed – Sliding invisibility timeout isn't prolonged in lightweight servers, causing jobs to be restarted.

1.8.18

Release Notes

Hangfire.Core

  • AddedDashboardOptions.ServerPossiblyAbortedThreshold to configure a custom threshold for "possibly aborted" warnings.
  • Fixed – Expired jobs are still shown on the "Retries" page in some cases.
  • Fixed – Issues with CultureInfo-related differences after upgrading to 1.8.15–1.8.17.
  • Fixed – Don't leak AsyncLocal values from synchronous background job methods.
  • Fixed – Don't throw an exception when passing the Job.Args property to the Job class' constructor.
  • Project – Make the lock file usable for both .NET 8.0 and .NET 9.0 builds.
  • Project – Make code generation for cshtml files working on newer platforms.

Hangfire.AspNetCore

  • Fixed – Swallow possible ObjectDisposedException in the StopAsync method.
  • Fixed – Avoid NullReferenceException when LocalIpAddress or RemoteIpAddress is null.

1.8.17

Release Notes

Hangfire.SqlServer

  • FixedInvalidCastException while fetching a job with older schemas regression from 1.8.16.

1.8.16

Release Notes

Hangfire.Core

  • Changed – Include fewer stack frames in exceptions come from IServerFilter implementations.
  • Changed – Don't include file information in the ExceptionDetails property of a FailedState instance.
  • Changed – Switch back to CancellationEvent usage instead of CancellationToken.WaitHandle.
  • Fixed – Don't commit external transaction in the BackgroundJobStateChanger implementation.
  • Fixed – Use safe default serializer settings for Newtonsoft.Json 12.X and below.
  • Project – Fix builds for the net451 platform when using .NET 9.0.
  • Project – Significantly reduce execution time of unit tests in the RecurringJobSchedulerFacts class.
  • Project – Bump Microsoft.CodeAnalysis.NetAnalyzers package to version 9.0.0.

Hangfire.SqlServer

  • Changed – Use vanilla ADO.NET when fetching a job in the SqlServerJobQueue implementation.
  • Changed – Decrease the LockTimeout time when calling the sp_getapplock procedure to 1 second for less blocking.
  • Fixed – SqlException: Must declare the scalar variable "key" in delayed and recurring job schedulers.
  • Project – Disable parallel tests execution when building under .NET 9.0.
  • Project – Run tests over the latest Microsoft.Data.SqlClient package and the net6.0 platform.
  • Project – Reduce execution time of integration tests.
  • Project – Disable PoolBlockingPeriod setting on AppVeyor to handle transient test failures.

1.8.15

Release Notes

Hangfire.Core

  • Added – New AutomaticRetryAttribute.ExceptOn property to skip retries for specific exceptions.
  • Changed – Refactor filters pipeline to use less LINQ magic and fewer allocations.
  • Changed – Use GetCultureInfo instead of creating an instance in the CaptureCultureAttribute filter.
  • Changed – Cache some immutable data to avoid extra allocations.
  • Fixed – Improve loopback address detection (by @​meziantou).
  • Fixed – Reformulate misleading error messages regarding retry timings (by @​RGFuaWVs).
  • Fixed – Problem with missing localizations in the previous version.
  • Fixed – Don't hide exception details on Failed Jobs page when the exception message is empty.
  • Fixed – Problems with the first restore when using the build.bat command.
  • Fixed – Better display of canceled recurring jobs in dashboard.
  • Fixed – Less overall allocations with using static delegates and struct-based iterators.
  • Fixed – Improve precision of some diagnostic messages in the wait protection logic.
  • Fixed – Make all private and internal classes sealed to improve code consistency.
  • Fixed – Less overall pressure on garbage collector.

Hangfire.SqlServer

  • Changed – Use query template caching based on schema name to avoid excessive string allocations.
  • Changed – Use static callbacks almost anywhere to avoid unnecessary delegate allocations.
  • Changed – Use QuerySingle* or ReadSingle* where possible to avoid allocating lists.
  • Changed – Unify DbCommand and DbParameter creation logic to improve code consistency.

Commits viewable in compare view.

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---
updated-dependencies:
- dependency-name: Hangfire.AspNetCore
  dependency-version: 1.8.24
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Aug 1, 2026
@dependabot
dependabot Bot requested a review from thiagoluga as a code owner August 1, 2026 05:27
@sonarqubecloud

sonarqubecloud Bot commented Aug 1, 2026

Copy link
Copy Markdown

@thiagoluga

Copy link
Copy Markdown
Owner

This fails restore with NU1608 (warning-as-error), and the same root cause blocks its sibling PR:

Hangfire.NetCore 1.8.14 requires Hangfire.Core (= 1.8.14)
but version Hangfire.Core 1.8.24 was resolved

Why: Hangfire.NetCore isn't pinned in build/Directory.Packages.props — it arrives transitively from Hangfire.AspNetCore 1.8.14, and that version requires Hangfire.Core at the exact version 1.8.14. So bumping any single member of the Hangfire family breaks the constraint; they have to move together.

Fix: bump all three CPM entries in one change:

<PackageVersion Include="Hangfire.Core" Version="1.8.24" />
<PackageVersion Include="Hangfire.SqlServer" Version="1.8.24" />
<PackageVersion Include="Hangfire.AspNetCore" Version="1.8.24" />

(Hangfire.InMemory is independent and stays put.) Leaving this to the maintainer, since dependency-version changes to a shipped package are their call — flagging the diagnosis so it isn't re-investigated.

@dependabot @github

dependabot Bot commented on behalf of github Aug 4, 2026

Copy link
Copy Markdown
Contributor Author

Looks like Hangfire.AspNetCore is no longer a dependency, so this is no longer needed.

@dependabot dependabot Bot closed this Aug 4, 2026
@dependabot
dependabot Bot deleted the dependabot/nuget/build/Hangfire.AspNetCore-1.8.24 branch August 4, 2026 18:57
thiagoluga added a commit that referenced this pull request Aug 5, 2026
…n lockstep (#266)

* chore(deps): bump the safe dependency lot, with the Hangfire family in lockstep

All eleven Dependabot PRs (#241-#251) were closed unmerged, so the bumps are redone here
as one verified change. This is the lot where the new version is a patch or minor within
the same major; the major jumps (Npgsql 9->10, Microsoft.Data.Sqlite 9->10,
Microsoft.Data.SqlClient 5->7, TestHost 8->10, Aspire 9.5->13.4) are deliberately left
out and assessed separately.

Hangfire.Core, Hangfire.SqlServer and Hangfire.AspNetCore move together to 1.8.24.
Hangfire.NetCore arrives transitively and pins Hangfire.Core to an exact version, so
bumping any one member alone fails restore with NU1608 — which is why #246 and #247 were
red and could never have gone green on their own. dependabot.yml now groups Hangfire* so
the family only ever travels as a unit.

Microsoft.AspNetCore.TestHost goes to 8.0.29 rather than the available 10.0.10: the test
projects target net8.0, so staying in the 8.x servicing line is the bump that belongs
here.

DocumentFormat.OpenXml 3.1.1 -> 3.5.1 made WorkbookPart.Workbook nullable, which
TreatWarningsAsErrors turned into a build failure in XlsxRowReader. It is now checked
rather than assumed; the existing "contains no worksheets" error covers that case.

Verified after a --no-incremental rebuild: Core 303, AspNetCore 159, UI (bUnit 2.9) 245,
WebUi E2E (Playwright 1.61) 24 passed / 0 skipped with NEOREPORTS_REQUIRE_BROWSER=1,
Jobs 34, Sources.Xlsx 32, Formats.Xlsx 7, Formats.Csv 5, Destinations.S3 3,
Destinations.Local 14 — 0 failures.

* chore(deps): use an explicit type on the OpenXml nullability guard

Sonar's new-code maintainability gate is a debt ratio, and this PR changes exactly three
lines of C#, so a single 'use explicit type instead of var' on one of them was enough to
take the rating to 3. Sheet[]? is also the clearer read next to the null-conditional
chain that produces it.

* fix(sources): validate XlsxRowReader's arguments before the iterator starts

`ReadRows` contains `yield`, so none of its body — including
`ArgumentNullException.ThrowIfNull(stream)` — executed until the caller's first
MoveNext. A null stream therefore surfaced from inside the enumeration, with a stack that
no longer pointed at the call that passed it. Splitting the eager wrapper from the
iterator makes the check fire where the mistake was made.

This is what SonarCloud's new-code maintainability gate flagged on the dependency-bump
PR. The line is pre-existing (63deea1, 2026-07-17) and Sonar counts it as new because
the master baseline has been broken since the 50k-LOC free-tier cap hit on 2026-07-12 —
but the finding itself is real, and the file already had to change here for the OpenXml
nullability guard, so it is fixed rather than worked around.

No test: XlsxRowReader is internal with no InternalsVisibleTo, and the public surface
takes a file path or S3 config rather than a Stream, so the null path is not reachable
from outside. The existing 32 tests pass unchanged, which is what confirms the split did
not alter enumeration semantics.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant