[deps] DbOps: Update EntityFrameworkCore to v8 (major)

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
Microsoft.EntityFrameworkCore.Design (source)	7.0.16 -> 8.0.3
Microsoft.EntityFrameworkCore.Relational (source)	7.0.16 -> 8.0.3
Microsoft.EntityFrameworkCore.SqlServer (source)	7.0.16 -> 8.0.3
Microsoft.EntityFrameworkCore.Sqlite (source)	7.0.16 -> 8.0.3
Npgsql.EntityFrameworkCore.PostgreSQL	7.0.11 -> 8.0.2
Pomelo.EntityFrameworkCore.MySql	7.0.0 -> 8.0.2
linq2db.EntityFrameworkCore	7.6.0 -> 8.1.0

---

Release Notes

dotnet/efcore (Microsoft.EntityFrameworkCore.Design)

v8.0.3: EF Core 8.0.3

EF Core 8.0.3 is available on NuGet now. This is a patch release of EF Core 8 (EF8) containing only important bug fixes:

• Constructor calls when using inheritance with owned entities causes exceptions
• Missing package README file
• String properties with indexes are compared case insensitively on SQL Server
• Using SqliteConnection from an ASP.NET MVC (.NET Framework) application results in a few different exceptions
• Exception when using FromSql on entity with ComplexProperty
• IndexOutOfRange for EntityEntry.GetDatabaseValues() with complex type and TPH
• SQL Server Migrations - SqlOperation.Sql is stripped of all empty lines
• NullReferenceException in Get-Migration in EF Core 8
• Owned entity on genericly typed entity generates unwanted steps in new migrations
• Dotnet-ef mismatch causes apply Entity Framework migration fails when publishing an individual web app.
• Query never returns when DB value for column mapped to primitive collection is

v8.0.2: EF Core 8.0.2

EF Core 8.0.2 is available on NuGet now. This is a patch release of EF Core 8 (EF8) containing only important bug fixes:

• Adding EF.Constant to prevent parameterization in query
• Nav expansion visitor does not visit the Contains item argument
• SqliteException "no such column : rX.value" when ordering on subquery value in combination with a "where contains" when upgrading from 7 to 8.0.0-rc.2.23480.1
• DB Context pooling with proxies resulting in memory issues in 8.0 RC2
• Nav expansion visitor does not visit the non-lambda arguments (Skip, Take, ElementAt)
• LINQ "Contains" generates SQL with wrong char length
• Using new[] in select query gives exception .NET 8
• EF Core Cosmos 7.0.13 => 7.0.14 Value cannot be null. (Parameter 'derivedType')
• New OpenJSON expression to SQL translation breaks aggregates on subquery with 'Cannot perform an aggregate function on an expression containing an aggregate or a subquery' exception
• Did Contains stop working on empty list in EF Core 8?
• LINQ "Contains" fails to generate SQL with custom converter
• error on working with explicit many-to-many relations with OnDelete.Restrict
• Lazy loader throwing invalid operation exceptions
• Cosmos provider v7.0.14 and v8.0.0 breaks previous OwnsMany behaviour
• Constructor not found for type 'Microsoft.EntityFrameworkCore.ChangeTracking.Internal.NullableClassCurrentProviderValueComparer
• Inconsistent behavior related to relationship cycle
• Property conversions are lost on base type is subtype is registered to model afterwards after upgrade to EFCore 8
• Incorrect parameter rewriting for string StartsWith/EndsWith/Contains
• Migrations bug when creating stored procedure with GOTO statement
• Unable to Scaffold DBContext if tables in SQL Server have certain names
• Contains translates to correlated query when the item is nullable
• FluentAPI configuration PrimitiveCollection on OwnedNavigationBuilder returns PropertyBuilder instead of PrimitiveCollectionBuilder
• String comparison fails when using const and compiled Models.
• Exception when writing a JSON column with negative enum value
• Getting errors when mixing DbFunction and SqlQueryRaw

v8.0.1: .NET 8.0.1

Release

v8.0.0: EF Core 8 (EF8)

EF Core 8 (EF8) is available from NuGet

EF8 contains many new features and enhancements, including:

• Allow Multi-region or Application Preferred Regions in EF Core Cosmos
• Use C# structs or classes as value objects
• Support primitive collections in the compiled model
• Migrations and model snapshot for primitive collections
• Query: add support for projecting JSON entities that have been composed on
• SQLite: Add EF.Functions.Unhex
• Add type mapping APIs to customize JSON value serialization/deserialization
• SQL Server Index options SortInTempDB and DataCompression
• Analyzer: warn (and code fix) for use of interpolation in SQL methods accepting raw strings
• Translate Contains to IN with subquery instead of EXISTS where relevant
• Allow inline primitive collections with parameters, translating to VALUES
• Translate DateOnly.FromDateTime
• Implement JSON serialization/deserialization via Utf8JsonReader/Utf8JsonWriter
• Update pattern for scaffolding column default constraints
• Use IN instead of EXISTS with ExecuteDelete and entity containment
• Allow ExecuteUpdate to update properties of multiple queries as long as the map to a single table
• Query: add support for projecting primitive collections from JSON entities
• Switch to storing enums as ints in JSON instead of strings
• Translate DegreesToRadians
• Metadata and type mapping support for primitive collections
• JSON type representations and conversions to store types
• Allow stripping away all model building code to reduce application size
• Json: add support for collection of primitive types inside JSON columns
• Support LINQ querying of non-primitive collections within JSON
• SQLite RevEng: Sample data to determine CLR type
• Allow default value check in value generation to be customized
• Update handling of non-nullable store-generated properties
• IN() list queries are not parameterized, causing increased SQL Server CPU usage
• Allow 'unsharing' connection between contexts
• Remove unneeded subquery and projection when using ordering without limit/offset in set operations
• Make SequentialGuidValueGenerator non-allocating
• Support querying over primitive collections
• JSON/Sqlite: use -> and ->> where possible when traversing JSON, rather than json_extract
• Add Generic version of EntityTypeConfiguration Attribute
• NativeAOT/trimming compatibility for Microsoft.Data.Sqlite
• Map collections of primitive types to JSON column in relational database
• Translate DateTimeOffset.ToUnixTime(Seconds|Milliseconds)
• Allow pooling DbContext with singleton services
• Optional RestartSequenceOperation.StartValue
• Generate compiled relational model
• Global query filters produce too many parameters
• Optimize update path for single property JSON element
• JSON columns can be used in compiled models
• Unneeded parentheses removed in SQL queries
• Set operations are supported over non-entity projections with different facets
• Json: add support for Sqlite provider
• SQL Server: Support hierarchyid
• Configuration to opt out of occasionally problematic SaveChanges optimizations
• Add convention types for triggers
• Translate element access of a JSON array
• Raw SQL queries for unmapped types
• Support the new BCL DateOnly and TimeOnly structs for SQL Server
• Translate ElementAt(OrDefault)
• Opt-out of lazy-loading for specific navigations
• Lazy-loading for no-tracking queries
• Reverse engineer Synapse and Dynamics 365 TDS
• Set MaxLength on TPH discriminator property by convention
• Translate ToString() on a string column
• Generic overload of ConventionSetBuilder.Remove
• Lookup tracked entities by primary key, alternate key, or foreign key
• Allow UseSequence and HiLo on non-key properties
• Pass query tracking behavior to materialization interceptor
• Use case-insensitive string key comparisons on SQL Server
• Allow value converters to change the DbType
• Resolve application services in EF services
• Numeric rowersion properties automatically convert to binary
• Allow transfer of ownership of DbConnection from application to DbContext
• Provide more information when 'No DbContext was found' error is generated

See GitHub for all issues resolved in 8.0.0.

v7.0.17: EF Core 7.0.17

EF Core 7.0.17 is available on NuGet now. This is a patch release of EF Core 7 containing only important bug fixes:

• SqlClient - Update 8.0 to 5.1.5

npgsql/efcore.pg (Npgsql.EntityFrameworkCore.PostgreSQL)

v8.0.2

This is the first patch release following 8.0.0, with 15 bug fixes.

The full list of changes is available here.

v8.0.0

See the release notes.

The full list of changes is available here.

PomeloFoundation/Pomelo.EntityFrameworkCore.MySql (Pomelo.EntityFrameworkCore.MySql)

v8.0.2

Compare Source

This release is compatible with .NET 8.0, EF Core 8.0, MySQL 8.0, MariaDB 11.3/11.2/11.1/11.0/10.11/10.10/10.6/10.5/10.4 and MySqlConnector 2.3.5.

For all new features and bugfixes contained in this release, see related issues and pull requests.
The EF Core 8.0 release train is tracked by #​1746.

v8.0.1

Compare Source

This release is compatible with .NET 8.0, EF Core 8.0, MySQL 8.0, MariaDB 11.2/11.1/11.0/10.11/10.10/10.6/10.5/10.4 and MySqlConnector 2.3.5.

For all new features and bugfixes contained in this release, see related issues and pull requests.
The EF Core 8.0 release train is tracked by #​1746.

v8.0.0

Compare Source

This release is compatible with .NET 8.0, EF Core 8.0, MySQL 8.0, MariaDB 11.2/11.1/11.0/10.11/10.10/10.6/10.5/10.4 and MySqlConnector 2.3.5.

For all new features and bugfixes contained in this release, see the related issues and pull requests of the following milestones:

• 8.0.0
• 8.0.0-beta.2
• 8.0.0-beta.1

linq2db/linq2db.EntityFrameworkCore (linq2db.EntityFrameworkCore)

v8.1.0: Release 8.1.0

• #​378: add support for Linq To DB 5.4.0
• fix remaining uses of non-invariant culture in code

v8.0.0: Release 8.0.0

Update to support final release of EF.Core 8

• update dependencies
• fix PgBinaryExpression support for release version of PostgreSQL provider

v7.7.0: Release 7.7.0

• #​378: add support for Linq To DB 5.4.0
• fix remaining uses of non-invariant culture in code

---

Configuration

📅 Schedule: Branch creation - "every 2nd week starting on the 2 week of the year before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[bitwarden-bot]

Checkmarx One – Scan Summary & Details – d8021ce0-8975-44d7-b13a-b86a3229b837

New Issues

Severity	Issue	Source File / Package	Checkmarx Insight
	Client_DOM_Open_Redirect	/src/Admin/Views/Users/Edit.cshtml: 77	Attack Vector
	Client_DOM_Open_Redirect	/src/Admin/Views/Users/Edit.cshtml: 72	Attack Vector
	Client_DOM_Open_Redirect	/src/Admin/Views/Users/Edit.cshtml: 57	Attack Vector
	Client_DOM_Open_Redirect	/src/Admin/Views/Users/Edit.cshtml: 52	Attack Vector
	Heap_Inspection	/util/Setup/CertBuilder.cs: 103	Attack Vector

Fixed Issues

Severity	Issue	Source File / Package
	CSRF	/src/Api/AdminConsole/Controllers/OrganizationUsersController.cs: 315
	CSRF	/src/Api/AdminConsole/Controllers/OrganizationUsersController.cs: 315
	CSRF	/src/Api/Auth/Controllers/AccountsController.cs: 678
	CSRF	/src/Api/Auth/Controllers/AccountsController.cs: 702
	CSRF	/src/Api/AdminConsole/Controllers/OrganizationsController.cs: 871
	CSRF	/src/Api/AdminConsole/Controllers/OrganizationsController.cs: 166
	CSRF	/src/Api/Auth/Controllers/AccountsController.cs: 744
	CSRF	/src/Api/Vault/Controllers/FoldersController.cs: 45
	CSRF	/src/Api/Controllers/SelfHosted/SelfHostedOrganizationLicensesController.cs: 51
	CSRF	/src/Api/Controllers/UsersController.cs: 22
	CSRF	/src/Api/Controllers/DevicesController.cs: 70
	CSRF	/src/Api/Controllers/DevicesController.cs: 57
	CSRF	/src/Api/AdminConsole/Public/Controllers/PoliciesController.cs: 69
	CSRF	/src/Api/AdminConsole/Public/Controllers/PoliciesController.cs: 49
	CSRF	/src/Api/AdminConsole/Public/Controllers/OrganizationController.cs: 42
	CSRF	/src/Api/AdminConsole/Public/Controllers/GroupsController.cs: 92
	CSRF	/src/Api/AdminConsole/Public/Controllers/GroupsController.cs: 49
	CSRF	/src/Api/AdminConsole/Controllers/ProviderUsersController.cs: 142
	CSRF	/src/Api/AdminConsole/Controllers/ProviderOrganizationsController.cs: 52
	CSRF	/src/Api/AdminConsole/Controllers/PoliciesController.cs: 148
	CSRF	/src/Api/AdminConsole/Controllers/PoliciesController.cs: 78
	CSRF	/src/Api/AdminConsole/Controllers/PoliciesController.cs: 61
	CSRF	/src/Api/AdminConsole/Controllers/GroupsController.cs: 104
	CSRF	/src/Api/AdminConsole/Controllers/GroupsController.cs: 67
	CSRF	/bitwarden_license/src/Scim/Controllers/v2/UsersController.cs: 50
	CSRF	/src/Api/AdminConsole/Controllers/GroupsController.cs: 193
	CSRF	/src/Api/AdminConsole/Public/Controllers/GroupsController.cs: 161
	CSRF	/src/Api/Auth/Controllers/EmergencyAccessController.cs: 159
	CSRF	/bitwarden_license/src/Scim/Controllers/v2/GroupsController.cs: 98
	CSRF	/src/Api/AdminConsole/Controllers/GroupsController.cs: 151
	CSRF	/bitwarden_license/src/Scim/Controllers/v2/GroupsController.cs: 88
	CSRF	/src/Api/AdminConsole/Controllers/GroupsController.cs: 176
	CSRF	/src/Api/AdminConsole/Controllers/OrganizationsController.cs: 570
	CSRF	/src/Api/Controllers/CollectionsController.cs: 410
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 191
	CSRF	/src/Api/AdminConsole/Controllers/OrganizationUsersController.cs: 228
	CSRF	/src/Api/AdminConsole/Public/Controllers/OrganizationController.cs: 42
	CSRF	/src/Api/AdminConsole/Public/Controllers/OrganizationController.cs: 42
	CSRF	/src/Api/AdminConsole/Public/Controllers/OrganizationController.cs: 42
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 563
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 563
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 526
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 220
	CSRF	/src/Api/AdminConsole/Public/Controllers/MembersController.cs: 184
	CSRF	/src/Api/AdminConsole/Controllers/OrganizationUsersController.cs: 268
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 754
	CSRF	/src/Api/Controllers/CollectionsController.cs: 374
	CSRF	/src/Api/AdminConsole/Controllers/GroupsController.cs: 118
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 539
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 539
	CSRF	/src/Api/AdminConsole/Public/Controllers/GroupsController.cs: 133
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 1043
	CSRF	/src/Api/Auth/Controllers/AccountsController.cs: 613
	CSRF	/src/Api/AdminConsole/Controllers/OrganizationUsersController.cs: 283
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 144
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 940
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 940
	CSRF	/src/Api/Auth/Controllers/AccountsController.cs: 222
	CSRF	/src/Api/Auth/Controllers/AccountsController.cs: 807
	CSRF	/src/Api/Auth/Controllers/AccountsController.cs: 288
	CSRF	/src/Api/Auth/Controllers/AccountsController.cs: 362
	CSRF	/src/Api/AdminConsole/Public/Controllers/MembersController.cs: 147
	CSRF	/src/Api/AdminConsole/Public/Controllers/MembersController.cs: 147
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 665
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 740
	CSRF	/src/Api/Auth/Controllers/TwoFactorController.cs: 403
	CSRF	/src/Api/Auth/Controllers/AccountsController.cs: 408
	CSRF	/src/Api/Controllers/CollectionsController.cs: 303
	CSRF	/src/Api/Auth/Controllers/AccountsController.cs: 900
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 191
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 854
	CSRF	/src/Api/AdminConsole/Controllers/OrganizationUsersController.cs: 228
	CSRF	/src/Api/Auth/Controllers/AccountsController.cs: 571
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 526
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 174
	CSRF	/src/Api/AdminConsole/Controllers/OrganizationUsersController.cs: 268
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 220
	CSRF	/src/Api/Auth/Controllers/AccountsController.cs: 586
	CSRF	/src/Api/Auth/Controllers/AccountsController.cs: 433
	CSRF	/src/Api/Controllers/CollectionsController.cs: 410
	CSRF	/bitwarden_license/src/Sso/Controllers/AccountController.cs: 97
	CSRF	/bitwarden_license/src/Sso/Controllers/AccountController.cs: 164
	CSRF	/src/Admin/AdminConsole/Controllers/OrganizationsController.cs: 282
	CSRF	/src/Admin/AdminConsole/Controllers/ProvidersController.cs: 180
	CSRF	/src/Identity/Controllers/AccountsController.cs: 72
	CSRF	/src/Identity/Controllers/AccountsController.cs: 50
	CSRF	/src/Api/AdminConsole/Controllers/OrganizationsController.cs: 223
	CSRF	/src/Api/AdminConsole/Controllers/OrganizationsController.cs: 324
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 885
	CSRF	/src/Api/AdminConsole/Controllers/OrganizationsController.cs: 570
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 125
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 111
	CSRF	/src/Api/AdminConsole/Controllers/OrganizationUsersController.cs: 82
	CSRF	/src/Api/AdminConsole/Controllers/OrganizationUsersController.cs: 200
	CSRF	/src/Api/Tools/Controllers/ImportCiphersController.cs: 66
	CSRF	/src/Api/AdminConsole/Controllers/OrganizationUsersController.cs: 282
	CSRF	/src/Api/AdminConsole/Controllers/OrganizationUsersController.cs: 300
	CSRF	/src/Api/Tools/Controllers/ImportCiphersController.cs: 50
	CSRF	/src/Api/Public/Controllers/CollectionsController.cs: 64
	CSRF	/src/Api/AdminConsole/Public/Controllers/MembersController.cs: 56
	CSRF	/src/Api/Controllers/CollectionsController.cs: 323
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 563
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 563
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 966
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 966
	CSRF	/src/Api/AdminConsole/Controllers/ProviderUsersController.cs: 175
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 821
	CSRF	/src/Api/Controllers/CollectionsController.cs: 374
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 989
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 989
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 579
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 579
	CSRF	/src/Api/AdminConsole/Controllers/ProviderUsersController.cs: 188
	CSRF	/src/Api/Auth/Controllers/AccountsController.cs: 313
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 722
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 159
	CSRF	/src/Api/AdminConsole/Controllers/GroupsController.cs: 135
	CSRF	/src/Api/AdminConsole/Controllers/GroupsController.cs: 135
	CSRF	/src/Api/Auth/Controllers/AccountsController.cs: 959
	CSRF	/src/Api/AdminConsole/Controllers/OrganizationUsersController.cs: 366
	CSRF	/src/Api/Controllers/SettingsController.cs: 36
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 1023
	CSRF	/src/Api/Controllers/CollectionsController.cs: 303
	CSRF	/src/Api/AdminConsole/Controllers/OrganizationsController.cs: 570
	CSRF	/src/Api/AdminConsole/Controllers/OrganizationsController.cs: 570
	CSRF	/src/Api/AdminConsole/Controllers/OrganizationsController.cs: 570
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 684
	CSRF	/src/Api/Controllers/CollectionsController.cs: 196
	CSRF	/src/Api/Controllers/CollectionsController.cs: 187
	CSRF	/src/Api/Controllers/CollectionsController.cs: 156
	CSRF	/src/Api/Auth/Controllers/AccountsController.cs: 560
	CSRF	/src/Api/AdminConsole/Public/Controllers/MembersController.cs: 124
	CSRF	/src/Admin/AdminConsole/Controllers/ProviderOrganizationsController.cs: 38
	CSRF	/src/Api/Auth/Controllers/WebAuthnController.cs: 101
	CSRF	/src/Api/Auth/Controllers/WebAuthnController.cs: 130
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 622
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 1043
	CSRF	/src/Api/AdminConsole/Controllers/OrganizationUsersController.cs: 113
	CSRF	/src/Api/AdminConsole/Controllers/GroupsController.cs: 79
	CSRF	/src/Api/Controllers/CollectionsController.cs: 374
	CSRF	/src/Api/AdminConsole/Controllers/OrganizationDomainController.cs: 75
	CSRF	/src/Api/AdminConsole/Controllers/OrganizationUsersController.cs: 315
	CSRF	/src/Api/Auth/Controllers/WebAuthnController.cs: 59
	CSRF

More results are available on AST platform

[trmartin4]

For internal tracking:

https://bitwarden.atlassian.net/browse/PM-6395

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.