Released: Mar 9, 2026

Updates in v16.1.1

Features

• Added two new artifact capabilities to both the CI and Release workflows: publishing .trx test results as GitHub Check annotations using dorny/test-reporter, and (release workflow only) generating a Software Bill of Materials (SBOM) using Microsoft's sbom-tool. The checks: write permission is added to both workflows to support the test reporter.
• Changes:
  • Add checks: write permission to both ci.yml and release.yml to allow the test reporter to post Check annotations.
  • Add a "Report Test Results" step (using dorny/test-reporter@v1) after the build-and-test step in all four jobs (Linux and Windows, CI and Release).
  • Add a "Generate SBOM" step in the release.yml Windows job, using Microsoft's sbom-tool.

Fixes

• Better async handling of license validation.
• Updated Microsoft.Sbom.DotNetTool from 1.2.0 to 4.1.5 in the release workflow. The old version was causing build failures.
• Security Fix - Fixed an issue where certain cyclic or self-referential object graphs could trigger uncontrolled recursion during mapping, potentially resulting in stack exhaustion and denial of service.
  Applications that process untrusted or attacker-controlled object graphs through affected mapping paths may be impacted.