chore(deps): update nuget non-major dependencies (patch)

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
Azure.Extensions.AspNetCore.Configuration.Secrets (source)	1.5.1 → 1.5.2
Azure.Monitor.OpenTelemetry.Exporter (source)	1.8.1 → 1.8.3
Humanizer	3.0.1 → 3.0.10
Microsoft.AspNetCore.Mvc.Testing (source)	8.0.28 → 8.0.31
Microsoft.AspNetCore.TestHost (source)	8.0.28 → 8.0.31
Microsoft.OpenApi	1.6.29 → 1.6.31
Microsoft.OpenApi.Readers	1.6.29 → 1.6.31
System.Formats.Asn1 (source)	10.0.9 → 10.0.12
System.IO.Hashing (source)	10.0.9 → 10.0.12

---

Release Notes

Azure/azure-sdk-for-net (Azure.Extensions.AspNetCore.Configuration.Secrets)

v1.5.2

Compare Source

1.5.2 (2026-04-28)

Other Changes

• Updated Microsoft.AspNetCore.DataProtection dependency to 10.0.7 to mitigate GHSA-37gx-xxp4-5rgx and GHSA-w3x6-4m5h-cxqf.

Humanizr/Humanizer (Humanizer)

v3.0.10

Changes:

• #​1682: fix: cover analyzer package regressions across frameworks
• #​1677: docs: finalize migration guide for 2.14.1 -> 3.0.8

This list of changes was auto generated.

v3.0.8

Changes:

Localization:

• #​1667: Fix #​1585: Add missing DataUnit and TimeUnit translations for Portuguese (pt) and Brazilian Portuguese (pt-BR)

Others:

• #​1680: Backport #​1658 and #​1652 fixes to rel/v3.0 with v3.0.6 migration docs
• #​1679: fix: restore ToQuantity(int) overloads for F# callers
• #​1678: Fix title case when first word is an article
• #​1676: Fix analyzer loading across Roslyn/SDK versions
• #​1660: Optimize FromUnderscoreDashSeparatedWords to reduce allocations
• #​1585: Fill in missing translations for all languages in resource files

This list of changes was auto generated.

Microsoft/OpenAPI.NET (Microsoft.OpenApi)

v1.6.31

Bug Fixes

• circular ref guard (#​3042) (02369d0)
• harden yaml parsing (v1 port) (#​3040) (838c847)

v1.6.30

Bug Fixes

• readers: bound YAML anchor/alias expansion to prevent OOM (billion laughs) (1f9aea9)

dotnet/dotnet (System.Formats.Asn1)

v10.0.12

v10.0.11

v10.0.10

---

Configuration

📅 Schedule: (in timezone Europe/Oslo)

• Branch creation
  • "before 07:00 on Thursday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: d382269e-be01-4863-b5cd-24752f6b75b1

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud