Bump the dotnet-packages group with 9 updates - #12
Open
dependabot[bot] wants to merge 1 commit into
Open
Conversation
Bumps Asp.Versioning.Mvc from 10.0.0 to 10.2.1 Bumps Asp.Versioning.Mvc.ApiExplorer from 10.0.0 to 10.2.1 Bumps dotnet-reportgenerator-globaltool from 5.5.10 to 5.5.11 Bumps Microsoft.AspNetCore.OpenApi from 10.0.9 to 10.0.11 Bumps Microsoft.Extensions.Http.Resilience from 10.7.0 to 10.9.0 Bumps Microsoft.NET.Test.Sdk from 18.6.0 to 18.9.0 Bumps Npgsql.EntityFrameworkCore.PostgreSQL from 10.0.2 to 10.0.3 Bumps Swashbuckle.AspNetCore.SwaggerUI from 10.2.1 to 10.2.3 Bumps Testcontainers.PostgreSql from 4.12.0 to 4.14.0 --- updated-dependencies: - dependency-name: Asp.Versioning.Mvc dependency-version: 10.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dotnet-packages - dependency-name: Asp.Versioning.Mvc.ApiExplorer dependency-version: 10.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dotnet-packages - dependency-name: dotnet-reportgenerator-globaltool dependency-version: 5.5.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-packages - dependency-name: Microsoft.AspNetCore.OpenApi dependency-version: 10.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-packages - dependency-name: Microsoft.Extensions.Http.Resilience dependency-version: 10.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dotnet-packages - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 18.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dotnet-packages - dependency-name: Npgsql.EntityFrameworkCore.PostgreSQL dependency-version: 10.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-packages - dependency-name: Swashbuckle.AspNetCore.SwaggerUI dependency-version: 10.2.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dotnet-packages - dependency-name: Testcontainers.PostgreSql dependency-version: 4.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dotnet-packages ... Signed-off-by: dependabot[bot] <support@github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Updated Asp.Versioning.Mvc from 10.0.0 to 10.2.1.
Release notes
Sourced from Asp.Versioning.Mvc's releases.
10.2.0
This release includes some big new features but is fully backward compatible with
10.0.0. The new features include versioned model member filtering, Roslyn analyzers, gRPC preview support, and a number of servicing patches since the previous release.Fixes
All Platforms
'.'no longer succeeds silently'-'ASP.NET Core
IProblemDetailsWriteris preserved byAddApiVersioning()(#1191)ASP.NET Core OpenAPI
Features
All Platforms
ApiVersionRangetype for matching a set of API versions using the same interval notation as a package version1.0→x ≥ 1.0[1.0]→x == 1.0(1.0,)→x > 1.0(,1.0]→x ≤ 1.0[1.0,2.0)→1.0 ≤ x < 2.0ApiVersionRange.AnyandApiVersionRange.Emptyare provided forthe degenerate cases
VisibleInApiVersionAttributeindicates the range of API versions a data member is visible in; for example,[VisibleInApiVersion("2.0")]IAnnotation<TKey, TValue>abstraction for associating out-of-band metadata with a member[StringSyntax]is now applied to API version inputs so the IDE and analyzers understand them; the recognizedsyntaxes are
ApiVersion,ApiVersionRange, andApiVersionFormatAnalyzers
API Versioning now ships Roslyn analyzers. There is no new package to install — the core rules are packed into Asp.Versioning.Abstractions and the API rules are packed into Asp.Versioning.Http, so any application that already references API Versioning picks them up transitively.
There is an initial set of 31 rules. You can find all of the rule information in the new diagnostics wiki topic.
Notes:
... (truncated)
Commits viewable in compare view.
Updated Asp.Versioning.Mvc.ApiExplorer from 10.0.0 to 10.2.1.
Release notes
Sourced from Asp.Versioning.Mvc.ApiExplorer's releases.
10.2.0
This release includes some big new features but is fully backward compatible with
10.0.0. The new features include versioned model member filtering, Roslyn analyzers, gRPC preview support, and a number of servicing patches since the previous release.Fixes
All Platforms
'.'no longer succeeds silently'-'ASP.NET Core
IProblemDetailsWriteris preserved byAddApiVersioning()(#1191)ASP.NET Core OpenAPI
Features
All Platforms
ApiVersionRangetype for matching a set of API versions using the same interval notation as a package version1.0→x ≥ 1.0[1.0]→x == 1.0(1.0,)→x > 1.0(,1.0]→x ≤ 1.0[1.0,2.0)→1.0 ≤ x < 2.0ApiVersionRange.AnyandApiVersionRange.Emptyare provided forthe degenerate cases
VisibleInApiVersionAttributeindicates the range of API versions a data member is visible in; for example,[VisibleInApiVersion("2.0")]IAnnotation<TKey, TValue>abstraction for associating out-of-band metadata with a member[StringSyntax]is now applied to API version inputs so the IDE and analyzers understand them; the recognizedsyntaxes are
ApiVersion,ApiVersionRange, andApiVersionFormatAnalyzers
API Versioning now ships Roslyn analyzers. There is no new package to install — the core rules are packed into Asp.Versioning.Abstractions and the API rules are packed into Asp.Versioning.Http, so any application that already references API Versioning picks them up transitively.
There is an initial set of 31 rules. You can find all of the rule information in the new diagnostics wiki topic.
Notes:
... (truncated)
Commits viewable in compare view.
Updated dotnet-reportgenerator-globaltool from 5.5.10 to 5.5.11.
Release notes
Sourced from dotnet-reportgenerator-globaltool's releases.
5.5.11
Changes:
This release requires .NET Framework 4.7 or .NET 8.0/9.0/10.0
Commits viewable in compare view.
Updated Microsoft.AspNetCore.OpenApi from 10.0.9 to 10.0.11.
Release notes
Sourced from Microsoft.AspNetCore.OpenApi's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated Microsoft.Extensions.Http.Resilience from 10.7.0 to 10.9.0.
Release notes
Sourced from Microsoft.Extensions.Http.Resilience's releases.
10.9.0
Version 10.9.0 is headlined by changes in these areas:
RoutingChatClientbase class, withSemanticRoutingChatClientas a concrete semantic-routing implementation. Separately, the abstractFailoverChatClientspecialization and its concreteOrderedFailoverChatClientimplementation add failover routing.Experimental API Changes
New Experimental APIs
EXTEXP0013) #7602MEAI001) #7662What's Changed
AI (
Microsoft.Extensions.AI,Microsoft.Extensions.AI.Abstractions, andMicrosoft.Extensions.AI.OpenAI)Note: Microsoft.Extensions.AI.OpenAI constrains its dependency for OpenAI to 2.12.x, preventing OpenAI updates to 2.13.0+ due to an incompatibility. We expect to release Microsoft.Extensions.AI.OpenAI version 10.9.1 during the week of August 17 to address this issue.
HTTP Resilience and Diagnostics (
Microsoft.Extensions.Http.ResilienceandMicrosoft.Extensions.Http.Diagnostics)ASP.NET Core Extensions (
Microsoft.AspNetCore.Diagnostics.Middleware)Logging Source Generator (
Microsoft.Gen.Logging)AI Evaluation (
Microsoft.Extensions.AI.Evaluation.Reporting)Project Templates (
Microsoft.McpServer.ProjectTemplates)... (truncated)
10.8.4
This servicing update refreshes the .NET AI project templates ahead of the July 30, 2026 retirement of GitHub Models — removing the GitHub Models provider option and updating template dependencies.
As a result, both the AI Chat Web (
aichatweb) and AI Agent Web API (aiagent-webapi) templates now require the AI service provider to be chosen explicitly via--provider; there is no longer a default. One of the following must be selected:--provider azureopenai— Azure OpenAI--provider ollama— Ollama (for local development)--provider openai— OpenAI PlatformPackages in this release
What's Changed
Project templates
--provideroption is now required with no default (#7667).Aspire.Hosting.AppHostto13.4.6andCommunityToolkit.VectorData.SqliteVecto1.0.0-preview.4(alignedSystem.Linq.AsyncEnumerableto10.0.9), replacing earlier workaround package pins (#7639).Full Changelog
10.8.3
Packages in this release
Experimental API Changes
Experimental API behavior updates
ToolApprovalRequestContent.RequiresConfirmationso it no longer leaks into consumer source-generatedAIContentJSON metadata unless approval APIs are intentionally used (#7659).What's Changed
AI abstractions and serialization
RequiresConfirmationin source-generatedAIContentcontexts by using an internal JSON-included backing member while keeping the public experimental member ignored for source-generation metadata (#7659).Test Improvements
List<AIContent>contexts compile and round-trip without requiring MEAI001 suppression (#7659).Full Changelog
10.8.2
This servicing release updates Microsoft.Extensions.VectorData.ConformanceTests to 10.8.2 and includes targeted test framework migration fixes.
Packages in this release
Update: August 7, 2026
The Microsoft.Extensions.VectorData.Abstractions package was initially excluded from this release by mistake. Because Microsoft.Extensions.VectorData.ConformanceTests has a dependency on Microsoft.Extensions.VectorData.Abstractions, that led to failures when updating to Microsoft.Extensions.VectorData.ConformanceTests 10.8.2.
Microsoft.Extensions.VectorData.Abstractions was published August 7, 2026 to resolve that issue.
What's Changed
AI
Acknowledgements
Full Changelog: dotnet/extensions@v10.8.1...v10.8.2
10.8.1
This servicing release updates the Microsoft.Extensions.AI, Microsoft.Extensions.AI.Abstractions, and Microsoft.Extensions.AI.OpenAI packages to 10.8.1 with two targeted fixes: correct tool-call/tool-result ordering when resuming approval-gated functions with service-managed chat history, and preservation of the OpenAI Responses reasoning item id for stateless (store=false) encrypted reasoning.
Packages in this release
What's Changed
AI
Acknowledgements
Full Changelog: dotnet/extensions@v10.8.0...v10.8.1
10.8.0
This release adds new experimental APIs to Microsoft.Extensions.AI.Abstractions and updates the OpenAI dependency to 2.12.0, alongside documentation, test, and repository maintenance.
Experimental API Changes
New Experimental APIs
AIFunctionNameAttributeandAIParameterNameAttribute#7610 by @jozkee (co-authored by @jeffhandley @Copilot)ToolApprovalRequestContent.RequiresConfirmation(MEAI001) #7549 by @javiercn (co-authored by @Copilot)What's Changed
AI
Vector Data
Documentation Updates
Test Improvements
Repository Infrastructure Updates
... (truncated)
Commits viewable in compare view.
Updated Microsoft.NET.Test.Sdk from 18.6.0 to 18.9.0.
Release notes
Sourced from Microsoft.NET.Test.Sdk's releases.
18.9.0
What's Changed
New Contributors
Full Changelog: microsoft/vstest@v18.8.0...v18.9.0
18.8.1
What's Changed
Full Changelog: microsoft/vstest@v18.8.0...v18.8.1
18.8.0
What's Changed
Full Changelog: microsoft/vstest@v18.7.0...v18.8.0
18.7.0
What's Changed
New Contributors
Full Changelog: microsoft/vstest@v18.6.0...v18.7.0
Commits viewable in compare view.
Updated Npgsql.EntityFrameworkCore.PostgreSQL from 10.0.2 to 10.0.3.
Release notes
Sourced from Npgsql.EntityFrameworkCore.PostgreSQL's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated Swashbuckle.AspNetCore.SwaggerUI from 10.2.1 to 10.2.3.
Release notes
Sourced from Swashbuckle.AspNetCore.SwaggerUI's releases.
10.2.3
What's Changed
Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.2.2...v10.2.3
10.2.2
What's Changed
SOURCE_DATE_EPOCHby @martincostello in Set SOURCE_DATE_EPOCH domaindrivendev/Swashbuckle.AspNetCore#3997InvalidOperationExceptionif no route matches by @martincostello in Fix InvalidOperationException if no route matches domaindrivendev/Swashbuckle.AspNetCore#3999[MinLength]/[MaxLength]on dictionary properties tominProperties/maxPropertiesby @KitKeen in Map [MinLength]/[MaxLength] on dictionary properties to minProperties / maxProperties domaindrivendev/Swashbuckle.AspNetCore#3922ExposeSwaggerDocumentUrlsRoutebehaviour by @martincostello in Fix ExposeSwaggerDocumentUrlsRoute behaviour domaindrivendev/Swashbuckle.AspNetCore#4000NUGET_API_KEYby @martincostello in Use NUGET_API_KEY domaindrivendev/Swashbuckle.AspNetCore#4006New Contributors
Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.2.1...v10.2.2
Commits viewable in compare view.
Updated Testcontainers.PostgreSql from 4.12.0 to 4.14.0.
Release notes
Sourced from Testcontainers.PostgreSql's releases.
4.14.0
What's Changed
I published this version because several developers asked for a release addressing the SSH.NET vulnerability. As an interim fix, you can also bump the transitive dependency, which should work fine.
Unfortunately, I had to run the release CI pipeline twice (1, 2). The change #1725 introduced a regression that caused the pipeline to attempt to publish the Cake build project, which correctly failed (partially published).
The NuGet packages for this release have been attested for supply chain security using
actions/attest. This confirms the integrity and provenance of the artifacts and helps ensure they can be trusted: #40693051.🚀 Features
🐛 Bug Fixes
🧹 Housekeeping
📦 Dependency Updates
4.13.0
What's Changed
Thank you to everyone who contributed and shared their feedback 🤜🤛.
The NuGet packages for this release have been attested for supply chain security using
actions/attest. This confirms the integrity and provenance of the artifacts and helps ensure they can be trusted: #33686956.🚀 Features
🐛 Bug Fixes
📖 Documentation
🧹 Housekeeping
📦 Dependency Updates
Commits viewable in compare view.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions