Bump the dotnet group with 16 updates

[dependabot]

Updated Google.Protobuf from 3.35.1 to 3.36.1.

Release notes

Sourced from Google.Protobuf's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Mvc.Testing from 10.0.10 to 10.0.11.

Release notes

Sourced from Microsoft.AspNetCore.Mvc.Testing's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.OpenApi from 10.0.10 to 10.0.11.

Release notes

Sourced from Microsoft.AspNetCore.OpenApi's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore from 10.0.10 to 10.0.11.

Release notes

Sourced from Microsoft.EntityFrameworkCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Design from 10.0.10 to 10.0.11.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Design's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Relational from 10.0.10 to 10.0.11.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Relational's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.DependencyInjection.Abstractions from 10.0.10 to 10.0.11.

Release notes

Sourced from Microsoft.Extensions.DependencyInjection.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Identity.Core from 10.0.10 to 10.0.11.

Release notes

Sourced from Microsoft.Extensions.Identity.Core's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Logging from 10.0.10 to 10.0.11.

Release notes

Sourced from Microsoft.Extensions.Logging's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.8.1 to 18.9.0.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.9.0

What's Changed

• Fix tilde/exclamation characters corrupted in TerminalLogger test output by @​nohwnd in [fix] Fix tilde/exclamation characters corrupted in TerminalLogger test output microsoft/vstest#16046
• Make TranslationLayer Native AOT-compatible by @​drewnoakes in Make TranslationLayer Native AOT-compatible microsoft/vstest#16045
• Guard GenerateProgramFile target against UseWinUI/UseUwpTools evaluation order by @​nohwnd in [fix] fix: guard GenerateProgramFile target against UseWinUI/UseUwpTools evaluation order microsoft/vstest#16072
• Add RequestingAssembly to AssemblyResolveEventArgs for binary compat by @​nohwnd in [fix] fix: add RequestingAssembly to AssemblyResolveEventArgs for binary compat microsoft/vstest#16076
• Remove stale Microsoft.Extensions.FileSystemGlobbing binding redirect from testhost.x86 and datacollector by @​Evangelink in Remove stale Microsoft.Extensions.FileSystemGlobbing binding redirect from testhost.x86 and datacollector microsoft/vstest#16082
• Fix TRX attachment paths when LogFileName contains a subdirectory by @​nohwnd in [fix] Fix TRX attachment paths when LogFileName contains a subdirectory microsoft/vstest#15791
• Fix missing dumps for .NET Framework child processes in NetClientHangDumper by @​nohwnd in [fix] Fix missing dumps for .NET Framework child processes in NetClientHangDumper microsoft/vstest#16098
• Fix data collection channels to use negotiated protocol version instead of V1 by @​nohwnd in [fix] Fix data collection channels to use negotiated protocol version instead of V1 microsoft/vstest#16096
• Fix race condition in BlameCollector: skip hang dump when testhost hasn't launched yet by @​nohwnd in [fix] Fix race condition in BlameCollector: skip hang dump when testhost hasn't launched yet microsoft/vstest#16065
• Replace TestSDKAutoGeneratedCode with ExcludeFromCodeCoverage in auto-generated Program files by @​nohwnd in [fix] Replace TestSDKAutoGeneratedCode with ExcludeFromCodeCoverage in auto-generated Program files microsoft/vstest#16101
• Include testhost process path in crash error messages by @​nohwnd in [fix] Include testhost process path in crash error messages microsoft/vstest#16108
• Fix DataDriven test results being double-counted in TRX logger totals by @​nohwnd in [fix] Fix DataDriven test results being double-counted in TRX logger totals microsoft/vstest#15766
• Fix datacollector crash visibility: replace Assert with throwable exceptions by @​nohwnd in [fix] Fix datacollector crash visibility: replace Assert with throwable exceptions microsoft/vstest#16048
• Add TreatErrorMessagesAsWarnings parameter to TRX logger by @​nohwnd in [fix] Add TreatErrorMessagesAsWarnings parameter to TRX logger microsoft/vstest#16106
• Wait for testhost stderr to drain before reading its crash output by @​nohwnd in Wait for testhost stderr to drain before reading its crash output microsoft/vstest#16128
• Handle runtimeconfig.dev.json without additionalProbingPaths by @​tmat in Handle runtimeconfig.dev.json without additionalProbingPaths microsoft/vstest#16166
• Suggest Microsoft.NET.Test.Sdk when a managed test project brings no testhost by @​nohwnd in Suggest Microsoft.NET.Test.Sdk when a managed test project brings no testhost microsoft/vstest#16169
• Fix x86 testhost loading mismatched x64 hostfxr (0x800700C1) when run via vstest.console.exe directly (#​16151) by @​azat-msft in Fix x86 testhost loading mismatched x64 hostfxr (0x800700C1) when run via vstest.console.exe directly (#16151) microsoft/vstest#16156
• Preserve the real exception (type + stack trace) when a test run aborts in BaseRunTests by @​nohwnd in [fix] Preserve the real exception (type + stack trace) when a test run aborts in BaseRunTests microsoft/vstest#16167

New Contributors

• @​drewnoakes made their first contribution in Make TranslationLayer Native AOT-compatible microsoft/vstest#16045

Full Changelog: microsoft/vstest@v18.8.0...v18.9.0

Commits viewable in compare view.

Updated Microsoft.OpenApi from 2.11.0 to 2.12.2.

Release notes

Sourced from Microsoft.OpenApi's releases.

2.12.2

2.12.2 (2026-08-20)

Bug Fixes

• duplicate schema example when serializing to v2 (#​3046) (a6366be)

2.12.1

2.12.1 (2026-08-19)

Bug Fixes

• circular ref guard (#​3033) (#​3039) (406e6fd)
• harden yaml parsing (#​3034) (fdc5718)

2.12.0

2.12.0 (2026-08-12)

Features

• adds deserialization of the example extension (095ae3b)
• serialize license identifier as extension for earlier versions (d5cdce8)
• serialize license identifier as extension for earlier versions (fde38d8)

Bug Fixes

• better nullability round-tripping (7a25659)
• bound YAML anchor/alias expansion to prevent OOM (billion laughs) (#​3000) (a361360)
• bound YAML anchor/alias expansion to prevent OOM (billion laughs) (#​3000) (4db9af0)
• library: serialize multiple schema types as anyOf/oneOf for OpenAPI 3.0 (6568896)
• marks deprecated properties from the specification as obsolete (26aba69)
• marks deprecated properties from the specification as obsolete (abc5301)
• schema: serialize compatibility examples from examples list (be57a7c)
• serialize examples as extension in v2/v3 (d27141b)

Commits viewable in compare view.

Updated ModelContextProtocol.AspNetCore from 2.1.0 to 2.2.0.

Release notes

Sourced from ModelContextProtocol.AspNetCore's releases.

2.2.0

This release adds hybrid stateful/stateless HTTP serving so clients using the 2025-11-25 and 2026-07-28 protocol revisions can share an endpoint, and fixes a malformed header-decoding edge case.

What's Changed

• Add HttpServerSessionMode for hybrid stateful/stateless HTTP serving #​1796 by @​saicharanpardhu (co-authored by @​Copilot @​jeffhandley)
• Fix McpHeaderEncoder.DecodeValue throwing on the degenerate base64 wrapper #​1805 by @​latent-9

Test Improvements

• Fix duplicated word in test comment #​1809 by @​latent-9

Repository Infrastructure Updates

• Enable package validation for the MCP extension packages #​1793 by @​jeffhandley (co-authored by @​Copilot)
• Add a release-manager agent that orchestrates the release skills #​1794 by @​jeffhandley (co-authored by @​Copilot)
• Bump Anthropic from 12.39.0 to 12.40.0 #​1808
• Bump @​hono/node-server from 1.19.14 to 2.1.0 in the npm_and_yarn group across 1 directory #​1812
• Fix dead relative link to versioning docs in bump-version skill #​1807 by @​latent-9

Acknowledgements

• @​latent-9 made their first contribution in #​1807
• @​saicharanpardhu made their first contribution in #​1796
• @​saicharanpardhu submitted issue #​1777 (resolved by #​1796)
• @​jeffhandley @​tarekgh @​halter73 reviewed pull requests

Full Changelog: modelcontextprotocol/csharp-sdk@v2.1.0...v2.2.0

[!NOTE]
These release notes were drafted with GitHub Copilot and reviewed before publishing.

Commits viewable in compare view.

Updated ModelContextProtocol.Core from 2.1.0 to 2.2.0.

Release notes

Sourced from ModelContextProtocol.Core's releases.

2.2.0

This release adds hybrid stateful/stateless HTTP serving so clients using the 2025-11-25 and 2026-07-28 protocol revisions can share an endpoint, and fixes a malformed header-decoding edge case.

What's Changed

• Add HttpServerSessionMode for hybrid stateful/stateless HTTP serving #​1796 by @​saicharanpardhu (co-authored by @​Copilot @​jeffhandley)
• Fix McpHeaderEncoder.DecodeValue throwing on the degenerate base64 wrapper #​1805 by @​latent-9

Test Improvements

• Fix duplicated word in test comment #​1809 by @​latent-9

Repository Infrastructure Updates

• Enable package validation for the MCP extension packages #​1793 by @​jeffhandley (co-authored by @​Copilot)
• Add a release-manager agent that orchestrates the release skills #​1794 by @​jeffhandley (co-authored by @​Copilot)
• Bump Anthropic from 12.39.0 to 12.40.0 #​1808
• Bump @​hono/node-server from 1.19.14 to 2.1.0 in the npm_and_yarn group across 1 directory #​1812
• Fix dead relative link to versioning docs in bump-version skill #​1807 by @​latent-9

Acknowledgements

• @​latent-9 made their first contribution in #​1807
• @​saicharanpardhu made their first contribution in #​1796
• @​saicharanpardhu submitted issue #​1777 (resolved by #​1796)
• @​jeffhandley @​tarekgh @​halter73 reviewed pull requests

Full Changelog: modelcontextprotocol/csharp-sdk@v2.1.0...v2.2.0

[!NOTE]
These release notes were drafted with GitHub Copilot and reviewed before publishing.

Commits viewable in compare view.

Updated OpenTelemetry.Exporter.OpenTelemetryProtocol from 1.17.0 to 1.18.0.

Release notes

Sourced from OpenTelemetry.Exporter.OpenTelemetryProtocol's releases.

1.18.0

For highlights and announcements pertaining to this release see: Release Notes > 1.18.0.

The following changes are from the previous release 1.17.0.

• NuGet: OpenTelemetry v1.18.0

  • Fixed self-diagnostics log lines being silently dropped when an event message or parameter contained enough 3-byte UTF-8 characters to overflow the internal buffer estimate. Such content is now truncated.
    (#​7543)

  • Fixed activity creation throwing when multiple tracer providers return a sampler attribute with the same key.
    (#​7558)

  • Added the otel.sdk.processor.log.processed SDK self-observability metric.
    (#​7486)

  • Added the otel.sdk.processor.span.processed SDK self-observability metric.
    (#​7598)

  • BatchActivityExportProcessor and SimpleActivityExportProcessor no longer forward spans to the exporter once Shutdown has been called, and BatchActivityExportProcessor.Shutdown now waits for in-flight OnEnd calls to finish enqueueing before flushing.
    (#​7598)

  • Fix logger, meter and tracer providers leaking background threads if an exception is thrown by their constructor after resource creation.
    (#​7615)

  • CircularBufferBuckets.Copy optimized to use bulk array copies.
    (#​7670)

  • Restored configured MaxScale after delta exponential histogram collection.
    (#​7671)

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Api v1.18.0

  • Avoid formatting exceptions and creating exception attributes when RecordException is called on a span that is not recorded.
    (#​7669)

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Api.ProviderBuilderExtensions v1.18.0

  No notable changes.

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Exporter.Console v1.18.0

  • Added support for serializing attribute values that are key/value lists (IEnumerable<KeyValuePair<string, object?>>). These attributes will be serialized as JSON objects.
    (#​7015)

... (truncated)

1.18.0-rc.1

The following changes are from the previous release 1.17.0.

• NuGet: OpenTelemetry v1.18.0-rc.1

  • Fixed self-diagnostics log lines being silently dropped when an event message or parameter contained enough 3-byte UTF-8 characters to overflow the internal buffer estimate. Such content is now truncated.
    (#​7543)

  • Fixed activity creation throwing when multiple tracer providers return a sampler attribute with the same key.
    (#​7558)

  • Added the otel.sdk.processor.log.processed SDK self-observability metric.
    (#​7486)

  • Added the otel.sdk.processor.span.processed SDK self-observability metric.
    (#​7598)

  • BatchActivityExportProcessor and SimpleActivityExportProcessor no longer forward spans to the exporter once Shutdown has been called, and BatchActivityExportProcessor.Shutdown now waits for in-flight OnEnd calls to finish enqueueing before flushing.
    (#​7598)

  • Fix logger, meter and tracer providers leaking background threads if an exception is thrown by their constructor after resource creation.
    (#​7615)

  • CircularBufferBuckets.Copy optimized to use bulk array copies.
    (#​7670)

  • Restored configured MaxScale after delta exponential histogram collection.
    (#​7671)

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Api v1.18.0-rc.1

  • Avoid formatting exceptions and creating exception attributes when RecordException is called on a span that is not recorded.
    (#​7669)

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Api.ProviderBuilderExtensions v1.18.0-rc.1

  No notable changes.

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Exporter.Console v1.18.0-rc.1

  • Added support for serializing attribute values that are key/value lists (IEnumerable<KeyValuePair<string, object?>>). These attributes will be serialized as JSON objects.
    (#​7015)

  See CHANGELOG for details.

... (truncated)

1.18.0-beta.1

The following changes are from the previous release 1.17.0-beta.1.

• NuGet: OpenTelemetry.Exporter.Prometheus.AspNetCore v1.18.0-beta.1

  • Fix concurrent scrapes returning an empty response under contention. Now the exporter will return an HTTP 500 error instead.
    (#​7571)

  • Waiting for concurrent scrapes to finish before collecting no longer blocks, which could stall concurrent scrapes being waited on.
    (#​7571)

  • Fixed the interaction between PrometheusAspNetCoreOptions.TranslationStrategy and content negotiation. The configured strategy is now applied before content negotiation, instead of the negotiated escaping scheme replacing the strategy's, and the Content-Type header now reports the escaping scheme that was applied rather than the one that was negotiated.
    (#​7610)

  • Fixed metric values and histogram bucket bounds being written with 17 significant digits instead of their shortest round-trippable representation.
    (#​7589)

  • Fixed the canonical representation used for histogram le and summary quantile label values falling back to 17 significant digits incorrectly.
    (#​7589)

  • Fixed a race where a slow scrape could return an HTTP 200 instead of 408.
    (#​7615)

  • Updated OpenTelemetry core component version(s) to 1.18.0.
    (#​7674)

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Exporter.Prometheus.HttpListener v1.18.0-beta.1

  • Fix concurrent scrapes returning an empty response under contention. Now the exporter will return an HTTP 500 error instead.
    (#​7571)

  • Waiting for concurrent scrapes to finish before collecting no longer blocks, which could stall concurrent scrapes being waited on.
    (#​7571)

  • A scrape which is still collecting when the listener is disposed now returns an HTTP 503 response.
    (#​7587)

  • Shutting down the listener no longer waits indefinitely for its request processing loop to stop, and no longer throws if the loop faulted.
    (#​7587)

  • Fixed the interaction between PrometheusHttpListenerOptions.TranslationStrategy and content negotiation. The configured strategy is now applied before content negotiation, instead of the negotiated escaping scheme replacing the strategy's, and the Content-Type header now reports the escaping scheme that was applied rather than the one that was negotiated.
    (#​7610)

  • Fixed metric values and histogram bucket bounds being written with 17 significant digits instead of their shortest round-trippable representation.
    (#​7589)

  • Fixed the canonical representation used for histogram le and summary quantile label values falling back to 17 significant digits incorrectly.
    (#​7589)

... (truncated)

Commits viewable in compare view.

Updated Testcontainers.PostgreSql from 4.13.0 to 4.14.0.

Release notes

Sourced from Testcontainers.PostgreSql's releases.

4.14.0

What's Changed

I published this version because several developers asked for a release addressing the SSH.NET vulnerability. As an interim fix, you can also bump the transitive dependency, which should work fine.

Unfortunately, I had to run the release CI pipeline twice (1, 2). The change #​1725 introduced a regression that caused the pipeline to attempt to publish the Cake build project, which correctly failed (partially published).

The NuGet packages for this release have been attested for supply chain security using actions/attest. This confirms the integrity and provenance of the artifacts and helps ensure they can be trusted: #​40693051.

🚀 Features

• feat: Add possibility to select MSSQL database (instead of master) (#​1737) @​0xced, @​HofmeisterAn
• feat: Add Mailpit module (#​1727) @​0xced, @​feslima, @​HofmeisterAn

🐛 Bug Fixes

• fix(MongoDb): Probe the server instead of counting log messages before initiating (#​1735) @​arnelirobles, @​HofmeisterAn
• fix(MongoDb): Treat an already initiated replica set as success (#​1731) @​arnelirobles, @​HofmeisterAn

🧹 Housekeeping

• chore: Cleanup and align tests (#​1740) @​HofmeisterAn
• chore: Set Cake build solution file path to Testcontainers.slnx (#​1728) @​0xced
• chore: Keep Testcontainers.slnx solution file only (#​1725) @​0xced
• feat: Prepare next release cycle (4.14.0) (#​1726) @​HofmeisterAn

📦 Dependency Updates

• chore(deps): Bump SSH.NET to 2026.0.0 and BouncyCastle.Cryptography to 2.7.0 (#​1739) @​markmario
• chore(deps): Bump the actions group with 10 updates (#​1730) @​dependabot[bot]

Commits viewable in compare view.

Updated TngTech.ArchUnitNET.xUnit from 0.13.3 to 0.13.4.

Release notes

Sourced from TngTech.ArchUnitNET.xUnit's releases.

0.13.4

Enhancement

• Allow disabling architecture and rule evaluation cache by @​alexanderlinne in Allow disabling architecture and rule evaluation cache TNG/ArchUnitNET#459
• Rewrite Type Syntax Elements Tests and Refactor Type Syntax Elements by @​alexanderlinne in Rewrite Type Syntax Elements Tests and Refactor Type Syntax Elements TNG/ArchUnitNET#460
• Rewrite Member Syntax Elements Tests and Refactor Member Syntax Elements by @​alexanderlinne in Rewrite Member Syntax Elements Tests and Refactor Member Syntax Elements TNG/ArchUnitNET#464
• Rewrite Method Member Syntax Elements Tests and Refactor Method Member Syntax Elements by @​alexanderlinne in Rewrite Method Member Syntax Elements Tests and Refactor Method Member Syntax Elements TNG/ArchUnitNET#465
• Rewrite Property Member Syntax Elements Tests and Refactor Property Member Syntax Elements by @​alexanderlinne in Rewrite Property Member Syntax Elements Tests and Refactor Property Member Syntax Elements TNG/ArchUnitNET#472
• Rewrite Class Syntax Elements Tests by @​alexanderlinne in Rewrite Class Syntax Elements Tests TNG/ArchUnitNET#473
• Rewrite Attribute Syntax Elements Tests by @​alexanderlinne in Rewrite Attribute Syntax Elements Tests TNG/ArchUnitNET#474
• Add issue templates for bugs and feature requests by @​mak638 in Add issue templates for bugs and feature requests TNG/ArchUnitNET#466

Fixes

• fix: Refine iterator and async method body scanning by @​Optano-Dev in fix: Refine iterator and async method body scanning TNG/ArchUnitNET#469

Dependency Updates

• chore(deps): update actions/checkout action to v7 by @​renovate[bot] in chore(deps): update actions/checkout action to v7 TNG/ArchUnitNET#470
• chore(deps): update codecov/codecov-action action to v7 by @​renovate[bot] in chore(deps): update codecov/codecov-action action to v7 TNG/ArchUnitNET#463
• chore(deps): update dependency dotnet-sdk to v10.0.400 by @​renovate[bot] in chore(deps): update dependency dotnet-sdk to v10.0.400 TNG/ArchUnitNET#436
• chore(deps): update dependency jetbrains.annotations to v2026 by @​renovate[bot] in chore(deps): update dependency jetbrains.annotations to v2026 TNG/ArchUnitNET#467
• chore(deps): update all non-major dependencies by @​renovate[bot] in chore(deps): update all non-major dependencies TNG/ArchUnitNET#419

New Contributors

• @​Optano-Dev made their first contribution in fix: Refine iterator and async method body scanning TNG/ArchUnitNET#469

Full Changelog: TNG/ArchUnitNET@0.13.3...0.13.4

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions