Skip to content

Bump the nuget group with 35 updates - #20266

Closed
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/nuget/src/nuget-2d8d59e1db
Closed

Bump the nuget group with 35 updates#20266
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/nuget/src/nuget-2d8d59e1db

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 2, 2026

Copy link
Copy Markdown
Contributor

Updated Google.Protobuf from 3.35.1 to 3.36.1.

Release notes

Sourced from Google.Protobuf's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Grpc.AspNetCore.Server.Reflection from 2.80.0 to 2.83.0.

Release notes

Sourced from Grpc.AspNetCore.Server.Reflection's releases.

2.83.0

What's Changed

New Contributors

Full Changelog: grpc/grpc-dotnet@v2.80.0...v2.83.0

2.83.0-pre1

What's Changed

New Contributors

Full Changelog: grpc/grpc-dotnet@v2.80.0...v2.83.0-pre1

Commits viewable in compare view.

Updated Grpc.Net.Client from 2.76.0 to 2.83.0.

Release notes

Sourced from Grpc.Net.Client's releases.

2.83.0

What's Changed

New Contributors

Full Changelog: grpc/grpc-dotnet@v2.80.0...v2.83.0

2.83.0-pre1

What's Changed

New Contributors

Full Changelog: grpc/grpc-dotnet@v2.80.0...v2.83.0-pre1

2.80.0

What's Changed

New Contributors

Full Changelog: grpc/grpc-dotnet@v2.76.0...v2.80.0

2.80.0-pre1

What's Changed

New Contributors

Full Changelog: grpc/grpc-dotnet@v2.76.0...v2.80.0-pre1

Commits viewable in compare view.

Updated JsonDiffPatch.Net from 2.3.0 to 2.5.0.

Release notes

Sourced from JsonDiffPatch.Net's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Build.Framework from 18.8.2 to 18.9.6.

Release notes

Sourced from Microsoft.Build.Framework's releases.

18.9.6

What's Changed

Commits viewable in compare view.

Updated Microsoft.Build.Utilities.Core from 18.8.2 to 18.9.6.

Release notes

Sourced from Microsoft.Build.Utilities.Core's releases.

18.9.6

What's Changed

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration from 10.0.9 to 10.0.11.

Release notes

Sourced from Microsoft.Extensions.Configuration's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.Binder from 10.0.9 to 10.0.11.

Release notes

Sourced from Microsoft.Extensions.Configuration.Binder's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.Json from 10.0.9 to 10.0.11.

Release notes

Sourced from Microsoft.Extensions.Configuration.Json's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.DependencyInjection from 10.0.9 to 10.0.11.

Release notes

Sourced from Microsoft.Extensions.DependencyInjection's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.FileSystemGlobbing from 10.0.9 to 10.0.11.

Release notes

Sourced from Microsoft.Extensions.FileSystemGlobbing's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Hosting from 10.0.7 to 10.0.11.

Release notes

Sourced from Microsoft.Extensions.Hosting's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Http from 10.0.9 to 10.0.11.

Release notes

Sourced from Microsoft.Extensions.Http's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Logging from 10.0.9 to 10.0.11.

Release notes

Sourced from Microsoft.Extensions.Logging's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.NET.Sdk.WebAssembly.Pack from 10.0.8 to 10.0.11.

Release notes

Sourced from Microsoft.NET.Sdk.WebAssembly.Pack's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.7.0 to 18.9.0.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.9.0

What's Changed

New Contributors

Full Changelog: microsoft/vstest@v18.8.0...v18.9.0

18.8.1

What's Changed

Full Changelog: microsoft/vstest@v18.8.0...v18.8.1

18.8.0

What's Changed

Full Changelog: microsoft/vstest@v18.7.0...v18.8.0

Commits viewable in compare view.

Updated Microsoft.SourceLink.GitHub from 10.0.301 to 10.0.400.

Release notes

Sourced from Microsoft.SourceLink.GitHub's releases.

10.0.400

You can build .NET 10.0 from the repository by cloning the release tag v10.0.400 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

10.0.303

You can build .NET 10.0 from the repository by cloning the release tag v10.0.303 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

10.0.302

You can build .NET 10.0 from the repository by cloning the release tag v10.0.302 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

Commits viewable in compare view.

Updated Microsoft.VisualStudio.Threading from 17.12.19 to 18.7.23.

Release notes

Sourced from Microsoft.VisualStudio.Threading's releases.

18.7.23

What's Changed

Fixes

Enhancements

New Contributors

Full Changelog: microsoft/vs-threading@v17.14.15...v18.7.23

17.14.15

What's Changed

Fixes

Enhancements

Dependency updates

Full Changelog: microsoft/vs-threading@v17.13.2...v17.14.15

17.14.2-alpha

What's Changed

Full Changelog: microsoft/vs-threading@v17.13.2...v17.14.2-alpha

17.13.61

What's Changed

Full Changelog: microsoft/vs-threading@v17.13.2...v17.13.61

17.13.2

What's Changed

No functional changes in this version.

Full Changelog: microsoft/vs-threading@v17.12.19...v17.13.2

Commits viewable in compare view.

Updated Microsoft.VisualStudio.Threading.Analyzers from 17.13.2 to 18.7.23.

Release notes

Sourced from Microsoft.VisualStudio.Threading.Analyzers's releases.

18.7.23

What's Changed

Fixes

Enhancements

New Contributors

Full Changelog: microsoft/vs-threading@v17.14.15...v18.7.23

17.14.15

What's Changed

Fixes

Enhancements

Dependency updates

Full Changelog: microsoft/vs-threading@v17.13.2...v17.14.15

17.14.2-alpha

What's Changed

Full Changelog: microsoft/vs-threading@v17.13.2...v17.14.2-alpha

17.13.61

What's Changed

Full Changelog: microsoft/vs-threading@v17.13.2...v17.13.61

Commits viewable in compare view.

Updated ModelContextProtocol from 2.0.0 to 2.2.0.

Release notes

Sourced from ModelContextProtocol's releases.

2.2.0

This release adds hybrid stateful/stateless HTTP serving so clients using the 2025-11-25 and 2026-07-28 protocol revisions can share an endpoint, and fixes a malformed header-decoding edge case.

What's Changed

  • Add HttpServerSessionMode for hybrid stateful/stateless HTTP serving #​1796 by @​saicharanpardhu (co-authored by @​Copilot @​jeffhandley)
  • Fix McpHeaderEncoder.DecodeValue throwing on the degenerate base64 wrapper #​1805 by @​latent-9

Test Improvements

  • Fix duplicated word in test comment #​1809 by @​latent-9

Repository Infrastructure Updates

  • Enable package validation for the MCP extension packages #​1793 by @​jeffhandley (co-authored by @​Copilot)
  • Add a release-manager agent that orchestrates the release skills #​1794 by @​jeffhandley (co-authored by @​Copilot)
  • Bump Anthropic from 12.39.0 to 12.40.0 #​1808
  • Bump @​hono/node-server from 1.19.14 to 2.1.0 in the npm_and_yarn group across 1 directory #​1812
  • Fix dead relative link to versioning docs in bump-version skill #​1807 by @​latent-9

Acknowledgements

  • @​latent-9 made their first contribution in #​1807
  • @​saicharanpardhu made their first contribution in #​1796
  • @​saicharanpardhu submitted issue #​1777 (resolved by #​1796)
  • @​jeffhandley @​tarekgh @​halter73 reviewed pull requests

Full Changelog: modelcontextprotocol/csharp-sdk@v2.1.0...v2.2.0

[!NOTE]
These release notes were drafted with GitHub Copilot and reviewed before publishing.

2.1.0

This release adds an opt-in subscriptions/listen handler for custom server-side notification streams, improves HTTP transport fallback reliability, and expands guidance and samples for telemetry and binary resources.

What's Changed

  • Keep AutoDetect channel open after provisional SSE failure #​1768 by @​PranavSenthilnathan
  • Preserve HTTP status codes across target frameworks #​1767 by @​PranavSenthilnathan
  • Fall back to initialize when server/discover fails at the HTTP layer #​1766 by @​rbstp
  • Add public subscriptions/listen server handler (SEP-2575) #​1775 by @​tarekgh

Documentation...

Description has been truncated

Microsoft Reviewers: Open in CodeFlow

Bumps Google.Protobuf from 3.35.1 to 3.36.1
Bumps Grpc.AspNetCore.Server.Reflection from 2.80.0 to 2.83.0
Bumps Grpc.Net.Client from 2.76.0 to 2.83.0
Bumps JsonDiffPatch.Net from 2.3.0 to 2.5.0
Bumps Microsoft.Build.Framework from 18.8.2 to 18.9.6
Bumps Microsoft.Build.Utilities.Core from 18.8.2 to 18.9.6
Bumps Microsoft.Extensions.Configuration from 10.0.9 to 10.0.11
Bumps Microsoft.Extensions.Configuration.Binder from 10.0.9 to 10.0.11
Bumps Microsoft.Extensions.Configuration.Json from 10.0.9 to 10.0.11
Bumps Microsoft.Extensions.DependencyInjection from 10.0.9 to 10.0.11
Bumps Microsoft.Extensions.FileSystemGlobbing from 10.0.9 to 10.0.11
Bumps Microsoft.Extensions.Hosting from 10.0.7 to 10.0.11
Bumps Microsoft.Extensions.Http from 10.0.9 to 10.0.11
Bumps Microsoft.Extensions.Logging from 10.0.9 to 10.0.11
Bumps Microsoft.NET.Sdk.WebAssembly.Pack from 10.0.8 to 10.0.11
Bumps Microsoft.NET.Test.Sdk from 18.7.0 to 18.9.0
Bumps Microsoft.SourceLink.GitHub from 10.0.301 to 10.0.400
Bumps Microsoft.VisualStudio.Threading from 17.12.19 to 18.7.23
Bumps Microsoft.VisualStudio.Threading.Analyzers from 17.13.2 to 18.7.23
Bumps ModelContextProtocol from 2.0.0 to 2.2.0
Bumps MSTest from 3.9.2 to 4.3.3
Bumps Nerdbank.GitVersioning from 3.10.91 to 3.10.94
Bumps Newtonsoft.Json from 13.0.3 to 13.0.4
Bumps OrasProject.Oras from 0.7.0 to 0.8.0
Bumps RichardSzalay.MockHttp from 7.0.0 to 7.1.0
Bumps Sarif.Sdk from 5.4.3 to 5.7.0
Bumps Scriban from 7.2.6 to 7.2.7
Bumps SharpYaml from 3.12.0 to 3.13.1
Bumps Spectre.Console from 0.57.0 to 0.57.2
Bumps Spectre.Console.Testing from 0.57.0 to 0.57.2
Bumps StreamJsonRpc from 2.20.20 to 2.25.29
Bumps System.Collections.Immutable from 10.0.9 to 10.0.11
Bumps System.Memory.Data from 10.0.9 to 10.0.11
Bumps System.Text.Json from 10.0.9 to 10.0.11
Bumps TestableIO.System.IO.Abstractions.Wrappers from 22.1.1 to 22.2.0

---
updated-dependencies:
- dependency-name: Google.Protobuf
  dependency-version: 3.36.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget
- dependency-name: Grpc.AspNetCore.Server.Reflection
  dependency-version: 2.83.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget
- dependency-name: Grpc.Net.Client
  dependency-version: 2.83.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget
- dependency-name: JsonDiffPatch.Net
  dependency-version: 2.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget
- dependency-name: Microsoft.Build.Framework
  dependency-version: 18.9.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget
- dependency-name: Microsoft.Build.Utilities.Core
  dependency-version: 18.9.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget
- dependency-name: Microsoft.Extensions.Configuration
  dependency-version: 10.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget
- dependency-name: Microsoft.Extensions.Configuration.Binder
  dependency-version: 10.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget
- dependency-name: Microsoft.Extensions.Configuration.Json
  dependency-version: 10.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget
- dependency-name: Microsoft.Extensions.DependencyInjection
  dependency-version: 10.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget
- dependency-name: Microsoft.Extensions.FileSystemGlobbing
  dependency-version: 10.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget
- dependency-name: Microsoft.Extensions.Hosting
  dependency-version: 10.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget
- dependency-name: Microsoft.Extensions.Logging
  dependency-version: 10.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget
- dependency-name: Microsoft.Extensions.Http
  dependency-version: 10.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget
- dependency-name: Microsoft.NET.Sdk.WebAssembly.Pack
  dependency-version: 10.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget
- dependency-name: Microsoft.SourceLink.GitHub
  dependency-version: 10.0.400
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget
- dependency-name: Microsoft.VisualStudio.Threading
  dependency-version: 18.7.23
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget
- dependency-name: Microsoft.VisualStudio.Threading.Analyzers
  dependency-version: 18.7.23
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget
- dependency-name: ModelContextProtocol
  dependency-version: 2.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget
- dependency-name: MSTest
  dependency-version: 4.3.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget
- dependency-name: Nerdbank.GitVersioning
  dependency-version: 3.10.94
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget
- dependency-name: Newtonsoft.Json
  dependency-version: 13.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget
- dependency-name: OrasProject.Oras
  dependency-version: 0.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget
- dependency-name: RichardSzalay.MockHttp
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget
- dependency-name: Sarif.Sdk
  dependency-version: 5.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget
- dependency-name: Scriban
  dependency-version: 7.2.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget
- dependency-name: SharpYaml
  dependency-version: 3.13.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget
- dependency-name: Spectre.Console
  dependency-version: 0.57.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget
- dependency-name: Spectre.Console.Testing
  dependency-version: 0.57.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget
- dependency-name: StreamJsonRpc
  dependency-version: 2.25.29
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget
- dependency-name: System.Collections.Immutable
  dependency-version: 10.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget
- dependency-name: System.Memory.Data
  dependency-version: 10.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget
- dependency-name: System.Text.Json
  dependency-version: 10.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget
- dependency-name: TestableIO.System.IO.Abstractions.Wrappers
  dependency-version: 22.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added .NET Pull requests that update .net code dependencies Pull requests that update a dependency file labels Sep 2, 2026
@microsoft-github-policy-service microsoft-github-policy-service Bot added the auto-merge Automatically merge this PR label Sep 2, 2026

@microsoft-github-policy-service microsoft-github-policy-service Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

:shipit:

@microsoft-github-policy-service microsoft-github-policy-service Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

:shipit:

@microsoft-github-policy-service microsoft-github-policy-service Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

:shipit:

@microsoft-github-policy-service microsoft-github-policy-service Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

:shipit:

@github-actions

github-actions Bot commented Sep 2, 2026

Copy link
Copy Markdown
Contributor

Test this change out locally with the following install scripts (Action run 33683171185)

VSCode
  • Mac/Linux
    bash <(curl -Ls https://aka.ms/bicep/nightly-vsix.sh) --run-id 33683171185
  • Windows
    iex "& { $(irm https://aka.ms/bicep/nightly-vsix.ps1) } -RunId 33683171185"
Azure CLI
  • Mac/Linux
    bash <(curl -Ls https://aka.ms/bicep/nightly-cli.sh) --run-id 33683171185
  • Windows
    iex "& { $(irm https://aka.ms/bicep/nightly-cli.ps1) } -RunId 33683171185"

@brendandburns

Copy link
Copy Markdown
Member

Copilot please investigate and fix CI/CD errors.

Co-authored-by: brendandburns <5751682+brendandburns@users.noreply.github.com>

Copilot AI commented Sep 3, 2026

Copy link
Copy Markdown
Contributor

Copilot please investigate and fix CI/CD errors.

Investigated the failing jobs. Four of the bumps in this group are breaking and caused every dotnet build/test job to fail; I held them back in 80eddcd while keeping the rest of the group update:

  • Newtonsoft.Json 13.0.4 → 13.0.3: 13.0.4 adds RequiresUnreferencedCode annotations, so Bicep.Core fails with IL2026 errors (trim-enabled, warnings-as-errors).
  • StreamJsonRpc 2.25.29 → 2.20.20: adds RequiresUnreferencedCode on JsonMessageFormatter, causing IL2026 in Bicep.Cli/Rpc/CliJsonRpcServer.cs.
  • Microsoft.VisualStudio.Threading + .Analyzers 18.7.23 → 17.12.19 / 17.13.2: new VSTHRD103 analyzer errors in Bicep.Core.
  • MSTest 4.3.3 → 3.9.2: MSTest 4 (Microsoft.Testing.Platform 2.x) drops VSTest support on the .NET 10 SDK, which is what broke dotnet test ("Testing with VSTest target is no longer supported"). Opting in via global.json "test": { "runner": "Microsoft.Testing.Platform" } gets past that, but then MSTEST0044 fails the build because DataTestMethod is obsolete across the whole test suite — that migration deserves its own PR (Bump MSTest from 3.9.2 to 4.3.0 #20051).

Verified locally: dotnet build Bicep.sln -c Release succeeds and the full test suite passes; the only failures are tests requiring network access to mcr.microsoft.com, which is blocked in this sandbox.

@microsoft-github-policy-service microsoft-github-policy-service Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

:shipit:

@dependabot @github

dependabot Bot commented on behalf of github Sep 6, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are no longer updatable, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 6, 2026
auto-merge was automatically disabled September 6, 2026 23:33

Pull request was closed

@dependabot
dependabot Bot deleted the dependabot/nuget/src/nuget-2d8d59e1db branch September 6, 2026 23:33

@microsoft-github-policy-service microsoft-github-policy-service Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

:shipit:

@microsoft-github-policy-service microsoft-github-policy-service Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

:shipit:

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

auto-merge Automatically merge this PR dependencies Pull requests that update a dependency file .NET Pull requests that update .net code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants