Bump Testcontainers from 4.12.0 to 4.13.0

[dependabot]

Updated Testcontainers from 4.12.0 to 4.13.0.

Release notes

Sourced from Testcontainers's releases.

4.13.0

What's Changed

Thank you to everyone who contributed and shared their feedback 🤜🤛.

The NuGet packages for this release have been attested for supply chain security using actions/attest. This confirms the integrity and provenance of the artifacts and helps ensure they can be trusted: #​33686956.

🚀 Features

• feat: Add Aspire dashboard module (#​1194) @​NikiforovAll
• feat: Add image name substitution hook (#​1710) @​HofmeisterAn
• feat(CosmosDb): Add get method AccountEndpoint (#​1707) @​srollinet
• feat: Improve image build failure messages (#​1700) @​HofmeisterAn

🐛 Bug Fixes

• fix: Restore tar archive write performance regressed by padding trim (#​1719) @​HofmeisterAn
• chore: Bump Docker.DotNet from 4.3.2 to 4.3.3 (#​1714) @​HofmeisterAn
• chore(AspireDashboard): Cover connection string provider (#​1713) @​HofmeisterAn

📖 Documentation

• docs: Add missing TC languages and reorder docs navigation (#​1711) @​mdelapenya
• docs: Add note about unsupported BuildKit Dockerfile features (#​1696) @​HofmeisterAn
• docs: Explain immutable builder behavior (#​1693) @​HofmeisterAn

🧹 Housekeeping

• chore: Enable Dependabot cooldown (#​1716) @​HofmeisterAn
• chore: Add nuget.config (#​1715) @​Rob-Hague
• chore(AspireDashboard): Cover connection string provider (#​1713) @​HofmeisterAn
• chore: Bump Docker.DotNet from 4.2.0 to 4.3.2 (#​1712) @​HofmeisterAn
• chore: Bump sshd-docker image from 1.3.0 to 1.4.0 (#​1709) @​HofmeisterAn
• chore: Rename runtime label and add buildkit and stale labels (#​1703) @​HofmeisterAn
• fix: Guard expensive argument evaluation when logging (#​1702) @​HofmeisterAn
• chore: Defer container ID truncation in logging (#​1701) @​HofmeisterAn
• chore: Migrate to LoggerMessageAttribute (#​1697) @​HofmeisterAn

📦 Dependency Updates

• chore(deps): Bump the actions group with 2 updates (#​1721) @dependabot[bot]
• chore(deps): Bump the actions group with 7 updates (#​1717) @dependabot[bot]
• chore: Bump Docker.DotNet from 4.3.2 to 4.3.3 (#​1714) @​HofmeisterAn
• chore: Bump Docker.DotNet from 4.2.0 to 4.3.2 (#​1712) @​HofmeisterAn
• chore(deps): Bump the actions group with 4 updates (#​1698) @dependabot[bot]

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Dependency Review

The following issues were found:

• ✅ 0 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ⚠️ 1 package(s) with unknown licenses.

See the Details below.

License Issues

src/Testcontainers.Floci/Testcontainers.Floci.csproj

Package	Version	License	Issue Type
Testcontainers	4.13.0	Null	Unknown License

OpenSSF Scorecard

Package	Version	Score	Details
nuget/Testcontainers	4.13.0	🟢 8.4	Details Check Score Reason Code-Review ⚠️ 2 Found 7/25 approved changesets -- score normalized to 2 Maintained 🟢 10 30 commit(s) and 11 issue activity found in the last 90 days -- score normalized to 10 Security-Policy 🟢 10 security policy file detected Packaging ⚠️ -1 packaging workflow not detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Dependency-Update-Tool 🟢 10 update tool detected Token-Permissions 🟢 10 GitHub workflow tokens follow principle of least privilege Binary-Artifacts 🟢 10 no binaries found in the repo CII-Best-Practices 🟢 5 badge detected: Passing Vulnerabilities 🟢 10 0 existing vulnerabilities detected SAST 🟢 9 SAST tool detected but not run on all commits License 🟢 10 license file detected Signed-Releases ⚠️ -1 no releases found Fuzzing ⚠️ 0 project is not fuzzed Pinned-Dependencies 🟢 8 dependency not pinned by hash detected -- score normalized to 8 Branch-Protection 🟢 8 branch protection is not maximal on development and all release branches CI-Tests 🟢 10 30 out of 30 merged PRs checked by a CI test -- score normalized to 10 Contributors 🟢 10 project has 16 contributing companies or organizations

Scanned Files

• src/Testcontainers.Floci/Testcontainers.Floci.csproj

[dependabot]

Superseded by #94.