Bump dependencies

[renovate]

This PR contains the following updates:

Package	Manager	Type	Update	Change
docker-compose	regex	run	patch	2.40.0 -> 2.40.3
dotnet-sdk	regex	script	patch	9.0.305 -> 9.0.306
dotnet-sdk	regex	task	patch	9.0.305 -> 9.0.306
dotnet-sdk	regex	action	patch	9.0.305 -> 9.0.306
mcr.microsoft.com/dotnet/sdk	dockerfile	final	patch	9.0.305-noble -> 9.0.306-noble

---

Release Notes

docker/compose (docker-compose)

v2.40.3

Compare Source

What's Changed

🐛 Fixes

• Fix OCI compose override support by @​ndeloof #​13311
• Fix help output for "exec --no-tty" option by @​tonyo #​13314
• Prompt default implementation to prevent a panic by @​ndeloof #​13317
• Run hooks on restart by @​ndeloof #​13321
• Fix(run): Ensure images exist only for the target service in run command by @​idsulik #​13325
• Fix(git): Fix path traversal vulnerability in git remote loader by @​idsulik #​13331

🔧 Internal

• Test to check writeComposeFile detects invalid OCI artifact by @​ndeloof #​13309
• Code Cleanup by @​ndeloof #​13315

⚙️ Dependencies

• Bump compose-go to version v2.9.1 by @​glours #​13332

Full Changelog: docker/compose@v2.40.2...v2.40.3

v2.40.2

Compare Source

What's Changed

🐛 Fixes

• Compose can't create a tar with adequate uid:gid ownership by @​ndeloof in #​13299
• Test digest or canonical reference, not only tag, when checking if an image is already present by @​glours in #​13302

🔧 Internal

• Fail build if minimal required version of buildx isn't installed by @​ndeloof in #​13295
• remove unused code to only rely on api.Service by @​ndeloof in #​13300
• Introduce WithPrompt to configure compose backend to use a plugable UI component for user interaction by @​ndeloof in #​13308

Full Changelog: docker/compose@v2.40.1...v2.40.2

v2.40.1

Compare Source

What's Changed

🐛 Fixes

• Write error to watcher error channel if Start() fails by @​Trolldemorted in #​13263
• Fix: set PWD only if not set by @​kianelbo in #​13268
• bake only interpolates ${*} by @​ndeloof in #​13270
• Fix: make "publish" push all compose files addressed in "extends" statements when using "profiles". by @​ogoulpeau-ledger in #​13277
• Support Ctrl+Z to run compose in background by @​ndeloof in #​13289
• Fix race-condition bug in publish command by @​paul-kinexon in #​13291
• Set secret/config uid:gid to match container's USER by @​ndeloof in #​13288
• Fix failure to delegate build with bake by @​ndeloof in #​13275
• Make CTRL+Z a no-op operation on Windows by @​glours in #​13293

🔧 Internal

• pkg/compose: align classic builder implementation with docker/cli by @​thaJeztah in #​13278
• pkg/compose: build with bake: drop support for buildx v0.16 and lower by @​thaJeztah in #​13280
• Use fixed version of compose bridge transformer images by @​glours in #​13284

⚙️ Dependencies

• Build(deps): bump github.com/docker/docker from 28.5.0+incompatible to 28.5.1+incompatible by @​dependabot[bot] in #​13274
• Build(deps): bump github.com/docker/cli from 28.5.0+incompatible to 28.5.1+incompatible by @​dependabot[bot] in #​13273
• Build(deps): bump golang.org/x/sys from 0.36.0 to 0.37.0 by @​dependabot[bot] in #​13272
• Build(deps): bump docker/buildx v0.29.1, moby/buildkit v0.25.1 by @​thaJeztah in #​13279
• Bump golang to version 1.24.9 by @​glours in #​13285

New Contributors

• @​Trolldemorted made their first contribution in #​13263
• @​ogoulpeau-ledger made their first contribution in #​13277
• @​paul-kinexon made their first contribution in #​13291

Full Changelog: docker/compose@v2.40.0...v2.40.1

dotnet/sdk (dotnet-sdk)

v9.0.306: .NET 9.0.10

Compare Source

Release

What's Changed

• [release/8.0.4xx] Update dependencies from dotnet/msbuild by @​dotnet-maestro[bot] in #​50229
• [automated] Merge branch 'release/8.0.4xx' => 'release/9.0.1xx' by @​github-actions[bot] in #​50268
• [release/8.0.3xx] Update dependencies from dotnet/source-build-reference-packages by @​dotnet-maestro[bot] in #​50270
• [release/9.0.1xx] Update dependencies from dotnet/templating by @​dotnet-maestro[bot] in #​50281
• [release/8.0.4xx] Update dependencies from dotnet/source-build-reference-packages by @​dotnet-maestro[bot] in #​50272
• [automated] Merge branch 'release/8.0.3xx' => 'release/8.0.4xx' by @​github-actions[bot] in #​50277
• [release/8.0.4xx] Update dependencies from dotnet/templating by @​dotnet-maestro[bot] in #​50298
• [release/8.0.4xx] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​50301
• [release/9.0.1xx] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​50304
• [release/9.0.1xx] Update dependencies from dotnet/templating by @​dotnet-maestro[bot] in #​50320
• [release/9.0.1xx] Update dependencies from dotnet/templating by @​dotnet-maestro[bot] in #​50326
• Update branding to 9.0.111 by @​vseanreesermsft in #​50586
• Update our container images to ones that are in support by @​marcpopMSFT in #​49942
• Update branding to 8.0.415 by @​vseanreesermsft in #​50585
• [automated] Merge branch 'release/8.0.4xx' => 'release/9.0.1xx' by @​github-actions[bot] in #​50692
• [automated] Merge branch 'release/9.0.1xx' => 'release/9.0.3xx' by @​github-actions[bot] in #​50683
• [release/9.0.1xx] Update dependencies from dotnet/templating by @​dotnet-maestro[bot] in #​50591
• [release/9.0.1xx] Update dependencies from dotnet/roslyn by @​dotnet-maestro[bot] in #​50466
• [release/9.0.1xx] Update dependencies from dotnet/source-build-reference-packages by @​dotnet-maestro[bot] in #​50590
• [release/9.0.1xx] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​50543
• [release/9.0.1xx] Update dependencies from dotnet/msbuild by @​dotnet-maestro[bot] in #​50382
• [release/9.0.1xx] Update dependencies from dotnet/razor by @​dotnet-maestro[bot] in #​50459
• [release/9.0.1xx] Update dependencies from dotnet/msbuild by @​dotnet-maestro[bot] in #​50720
• [release/9.0.3xx] Update dependencies from dotnet/msbuild by @​dotnet-maestro[bot] in #​50383
• [release/9.0.3xx] Update dependencies from dotnet/roslyn by @​dotnet-maestro[bot] in #​50467
• [release/9.0.3xx] Update dependencies from microsoft/vstest by @​dotnet-maestro[bot] in #​50542
• [release/9.0.3xx] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​50544
• Update branding to 9.0.306 by @​vseanreesermsft in #​50724
• [release/9.0.3xx] Update dependencies from dotnet/templating by @​dotnet-maestro[bot] in #​50592
• Merging internal commits for release/9.0.1xx by @​vseanreesermsft in #​50712
• [release/8.0.4xx] Update dependencies from dotnet/source-build-reference-packages by @​dotnet-maestro[bot] in #​50539
• .NET Source-Build 9.0.110 September 2025 Updates by @​dotnet-sb-bot in #​50714
• [release/9.0.3xx] Update dependencies from dotnet/roslyn-analyzers by @​dotnet-maestro[bot] in #​50457
• [release/9.0.3xx] Update dependencies from dotnet/razor by @​dotnet-maestro[bot] in #​50465
• [automated] Merge branch 'release/8.0.4xx' => 'release/9.0.1xx' by @​github-actions[bot] in #​50745
• [automated] Merge branch 'release/9.0.1xx' => 'release/9.0.3xx' by @​github-actions[bot] in #​50699
• [release/8.0.4xx] Update dependencies from dotnet/templating by @​dotnet-maestro[bot] in #​50357
• [release/9.0.1xx] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​50764
• [release/9.0.3xx] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​50765
• Upgrade scancode to 32.4.1 by @​Winniexu01 in #​50777
• Add static to fix IDE0062 by @​marcpopMSFT in #​50771
• [automated] Merge branch 'release/9.0.1xx' => 'release/9.0.3xx' by @​github-actions[bot] in #​50772
• [release/8.0.4xx] Update dependencies from dotnet/msbuild by @​dotnet-maestro[bot] in #​50381
• [release/9.0.3xx] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​50804
• [release/9.0.1xx] Update dependencies from dotnet/source-build-reference-packages by @​dotnet-maestro[bot] in #​50802
• [release/9.0.1xx] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​50803
• [automated] Merge branch 'release/8.0.4xx' => 'release/9.0.1xx' by @​github-actions[bot] in #​50788
• [automated] Merge branch 'release/9.0.1xx' => 'release/9.0.3xx' by @​github-actions[bot] in #​50827
• [9.0.3xx] detect .NET 10 RID-specific tools and provide a more actionable error by @​baronfel in #​50416
• Merging internal commits for release/9.0.3xx by @​vseanreesermsft in #​50711
• [9.0.1xx] detect .NET 10 RID-specific tools and provide a more actionable error by @​baronfel in #​50415
• [automated] Merge branch 'release/9.0.1xx' => 'release/9.0.3xx' by @​github-actions[bot] in #​50845
• [release/9.0.3xx] Update dependencies from dotnet/roslyn by @​dotnet-maestro[bot] in #​50848
• [release/9.0.3xx] Update dependencies from dotnet/templating by @​dotnet-maestro[bot] in #​50853
• [release/9.0.3xx] Make duplicate deb/rpm packages so we can sign them with the new PMC key by @​github-actions[bot] in #​50910

Full Changelog: dotnet/sdk@v9.0.305...v9.0.306

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.