diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 3186e03..74f66e7 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -18,6 +18,16 @@ updates:
update-types:
- "minor"
- "patch"
+ # Quartz 4 no longer provides net8.0 assets and changes the Quartz types exposed by
+ # Healthie.NET.Quartz. Keep Healthie 4.x on the supported Quartz 3 line; migrating the public
+ # surface belongs in a future Healthie major release.
+ ignore:
+ - dependency-name: "Quartz.Extensions.DependencyInjection"
+ update-types:
+ - "version-update:semver-major"
+ - dependency-name: "Quartz.Extensions.Hosting"
+ update-types:
+ - "version-update:semver-major"
- package-ecosystem: "github-actions"
directory: "/"
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index c3af4f7..7afaa4c 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -52,6 +52,6 @@ jobs:
retention-days: 90
- name: Upload to code scanning
- uses: github/codeql-action/upload-sarif@5595ccaf912efad79be6eef63a5619ff05969be3 # v4
+ uses: github/codeql-action/upload-sarif@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2
with:
sarif_file: results.sarif
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 113e0f6..fd95a7e 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,19 @@ and this project adheres to [Semantic Versioning](https://semver.org/).
## [Unreleased]
+## [4.1.3] - 2026-09-29
+
+### Fixed
+
+- Compatible runtime and test dependencies now track their current releases, including the latest
+ Quartz 3 line for the existing `net8.0` and `net10.0` provider. Dependabot now leaves the
+ incompatible Quartz 4 migration for a future Healthie.NET major release.
+- The test projects now run on xUnit 4 through Microsoft Testing Platform, so .NET 10 executes the
+ unit and browser suites instead of rejecting their legacy VSTest target.
+- The Aspire sample now uses the matching 13.5.4 AppHost SDK and its recommended CLI bundle, and the
+ redundant direct SSH.NET test pin was removed after Testcontainers adopted the patched release.
+- The Scorecard upload action is pinned to the current immutable CodeQL Action 4.38.2 commit.
+
## [4.1.2] - 2026-09-12
### Fixed
diff --git a/Directory.Packages.props b/Directory.Packages.props
index a9b6010..a95b904 100644
--- a/Directory.Packages.props
+++ b/Directory.Packages.props
@@ -9,28 +9,28 @@
onto .NET 10 assemblies by referencing this library.
-->
-
-
-
-
-
-
+
+
+
+
+
+
-
-
-
+
+
+
-
+
-
+
@@ -39,7 +39,7 @@
-
+
-
-
-
-
+
+
+
+
@@ -65,26 +65,14 @@
-
-
-
+
+
+
-
-
diff --git a/global.json b/global.json
index c396020..195b536 100644
--- a/global.json
+++ b/global.json
@@ -1,7 +1,10 @@
{
"sdk": {
- "version": "10.0.303",
+ "version": "10.0.401",
"rollForward": "latestPatch",
"allowPrerelease": false
+ },
+ "test": {
+ "runner": "Microsoft.Testing.Platform"
}
}
diff --git a/samples/Healthie.AppHost/Healthie.AppHost.csproj b/samples/Healthie.AppHost/Healthie.AppHost.csproj
index aa4de30..832b576 100644
--- a/samples/Healthie.AppHost/Healthie.AppHost.csproj
+++ b/samples/Healthie.AppHost/Healthie.AppHost.csproj
@@ -1,12 +1,13 @@
-
+
Exe
net10.0
true
+ true
healthie-apphost