deps(nuget): Bump the dotnet-minor-patch group with 5 updates

[dependabot]

Updated FsCheck from 3.3.3 to 3.3.4.

Release notes

Sourced from FsCheck's releases.

3.3.4

Fixed a bug in C# record type generation.

Commits viewable in compare view.

Updated FsCheck.Xunit from 3.3.3 to 3.3.4.

Updated Microsoft.IdentityModel.Tokens from 8.19.2 to 8.21.0.

Release notes

Sourced from Microsoft.IdentityModel.Tokens's releases.

8.20.0

Performance Improvements

• Add JsonWebToken header-replacement path to avoid re-parsing payload. See PR #​3552.
• Add claims dictionary preallocation. See PR #​3542.

Bug Fixes

• Fix CI build failures: remove unused log message and add missing DPoP API entries. See PR #​3551.

Full Changelog: AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet@8.19.2...8.20.0

Commits viewable in compare view.

Updated Sentry.AspNetCore from 6.7.0 to 6.8.0.

Release notes

Sourced from Sentry.AspNetCore's releases.

6.8.0

Features ✨

Logs

• feat(logs): add log4net integration by @​Flash0ver in #​5172
• feat(logs): add NLog integration by @​Flash0ver in #​5176

Other

• feat(serilog): support restrictedToMinimumLevel when configuring Serilog in code by @​jamescrosswell in #​5181
• Attachments can now be sent with transactions by setting AddToTransactions on SentryAttachment #​5182 by @​jamescrosswell in #​5182
• Added SentrySdk.RecordTransaction to record already-completed transactions and spans (e.g. replayed through a proxy) #​5333 by @​jamescrosswell in #​5333
• The Environment set on the Scope now gets synchronized to the native layers (sentry-cocoa and sentry-native) by @​bitsandfoxes in #​5365

Fixes 🐛

• fix: SentrySpanProcessor no longer leaks spans whose Activity never ends (e.g. aborted requests); the Activity is now held via a WeakReference so orphaned spans are pruned once it is garbage-collected. by @​Ermabo in #​5393
• The SDK was incorrectly ignoring server rate limits for errors, check-ins, and logs by @​jamescrosswell in #​5412
• fix: BackpressureMonitor.Dispose() no longer deadlocks on single-threaded targets by @​jamescrosswell in #​5330
• fix: Create a single TaskBlockingListener per process for CaptureBlockingCalls by @​jamescrosswell in #​5381

Dependencies ⬆️

Deps

• chore(deps): update CLI to v3.6.1 by @​github-actions in #​5417
• chore(deps): update Native SDK to v0.15.4 by @​github-actions in #​5416
• chore(deps): update Cocoa SDK to v9.22.0 by @​github-actions in #​5395
• chore(deps): update Java SDK to v8.49.0 by @​github-actions in #​5398

Other

• ci: drop install-zstd workaround by @​jpnurmi in #​5391
• docs: add Sentry.OpenTelemetry.Exporter to README.md by @​Flash0ver in #​5194
• meta: Update CODEOWNERS by @​Flash0ver in #​5386

Commits viewable in compare view.

Updated System.IdentityModel.Tokens.Jwt from 8.19.2 to 8.21.0.

Release notes

Sourced from System.IdentityModel.Tokens.Jwt's releases.

8.20.0

Performance Improvements

• Add JsonWebToken header-replacement path to avoid re-parsing payload. See PR #​3552.
• Add claims dictionary preallocation. See PR #​3542.

Bug Fixes

• Fix CI build failures: remove unused log message and add missing DPoP API entries. See PR #​3551.

Full Changelog: AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet@8.19.2...8.20.0

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[Chris0Jeky]

Fresh adversarial review — current head eb4a6708d16478cead3a68e5a8768b6710c09938.

Findings

No code, dependency-compatibility, DCO, or release/security finding. The central-package diff keeps the IdentityModel pair aligned at 8.21.0 and the FsCheck pair aligned at 3.3.4; hosted backend/API/unit, dependency-security, DCO, and CodeQL checks are green/neutral as expected. I read all existing PR-conversation comments, reviews, and review threads: all were empty.

Residual merge gates

• The successful checks exercised merge ref ff1ee066 + this head; main is now 397ba9d2368a7c5e7eb2daf31e1e43640b3ca144. Refresh the branch/merge ref, then re-prove checks and this review against that base before merge.
• The Taskdeck Execution project item is Pending with no Priority; with no linked Taskdeck issue it must be set to Priority V before handoff.

Recommendation: merge-ready only after those two current-base/governance gates are satisfied.

[Chris0Jeky]

Superseded by #1545, which carries the same five-line package update on current main as one signed commit. The replacement avoids rewriting this shared Dependabot branch after a literal range audit found its old merge commit lacked a Signed-off-by trailer despite the advisory DCO check being green.

Keep this PR open until #1545 lands; then close it as superseded if Dependabot does not do so automatically.

[dependabot]

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml