Skip to content

Bump the dotnet group with 2 updates #4706

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 1 commit into from
Sep 17, 2025
Merged

Bump the dotnet group with 2 updates #4706

merged 1 commit into from
Sep 17, 2025

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 17, 2025

Updated Dapr.AspNetCore from 1.15.4 to 1.16.0.

Release notes

Sourced from Dapr.AspNetCore's releases.

1.16.0

The v1.16 release of the Dapr .NET SDK delivers a set of targeted enhancements focused on developer productivity and runtime efficiency. Most notably, this version debuts Roslyn analyzers and accompanying code fixes that enforce best practices around SDK configuration and usage. This marks the beginning of a more guided and prescriptive development experience, reducing setup complexity and surfacing misconfigurations early.

Framework support has been consolidated with the depreciation of .NET 6 and 7, aligning the SDK with .NET 8 and 9. This shift enabled internal refactoring that improves performance and resource utilization across core components.

On the feature front, the SDK now supports the latest capabilities in the Dapr conversation API with tooling, as well as the overwrite flag for job scheduling. A critical bug affecting encryption and decryption of large files exceeding 4 GB has been resolved.

Dapr Workflows orchestrated using the .NET SDK are now considered stable, supporting both short-lived and long-running processes. Performance has been further improved through targeted optimizations, including new helper methods that enable deterministic parallelization with bounded concurrency.

Maintainer's Note

I wanted to share a special shout-out to everyone that participated in this release. Without your work to find and report issues in Discord or GitHub, spot documentation inconsistencies, request features, submit pull requests, review others' pull requests or even just use the various parts of the Dapr .NET SDK in your projects - I heartily appreciate the effort you've put into this project. The project wouldn't be what it is without your help. Thank you!

What's Changed

Please refer to the release notes here for the most accurate representation of what's changed.

New Contributors

Full Changelog: dapr/dotnet-sdk@v1.15.0...v1.16.0

1.16.0-rc18

What's Changed

Full Changelog: dapr/dotnet-sdk@v1.16.0-rc17...v1.16.0-rc18

1.16.0-rc17

What's Changed

Full Changelog: dapr/dotnet-sdk@v1.16.0-rc16...v1.16.0-rc17

1.16.0-rc16

What's Changed

Full Changelog: dapr/dotnet-sdk@v1.16.0-rc15...v1.16.0-rc16

1.16.0-rc13

What's Changed

Also (need to look up the PRs for in the release notes):

  • Metadata properly attaches to messages during bulk PubSub operations
  • Large files can be successfully encrypted and decrypted now in both Dapr.Client and the new Dapr.Cryptography package
  • Replacing [Obsolete] attributes on preview methods with [Experimental] - read more here since preview documentation isn't refreshed yet
  • Actor timer callbacks can return a Boolean to cancel future invocations automatically
  • Workflows can be started using DateTimeOffset in addition to DateTime
  • Added a helper method demonstrated here to process workflow activities in parallel with controlled concurrency similar to Parallel.ForEachAsync but in a workflow-safe manner
  • Adds initial support for A2A to SDK via Dapr.AI.A2a package
  • Jobs now supports overwrite flag

Finally, this release added analyzers and code fixes across Workflow, Actors and Jobs functionality to help eliminate some common errors seen in Discord. You can read more about this in the not-yet-published documentation here

New Contributors

Full Changelog: dapr/dotnet-sdk@v1.15.4...v1.16.0-rc13

1.16.0-rc03

What's Changed

  • The protos used by durabletask were slight inconsistent with those used by the Dapr runtime (as they used the latest from microsoft/durable-task). These have been updated acordingly.

Full Changelog: dapr/dotnet-sdk@v1.16.0-rc02...v1.16.0-rc03

1.16.0-rc02

This is a follow-up to the v1.16.0-rc01 prerelease build deployed last week and fixes another related set of issues that came to light after the outer timeout issue was discovered.

Like the rest of the 1.16 releases will be, this only supports the .NET 8 and .NET 9 targets and does not support .NET 6 or .NET 7. That said, like the previous 1.16.0-rc01 prerelease, this also excludes all the 1.16 feature releases and is fully compatible with the latest 1.15 Dapr runtime.

Please don't hesitate to reach out for assistance here or via our Dapr Discord channel if you have any questions about this.

What's Changed

Full Changelog: dapr/dotnet-sdk@v1.16.0-rc01...v1.16.0-rc02

1.16.0-rc01

This is an out-of-band patch release to address an issue raised with workflows timing out and reconnecting frequently when they're either idle or activities run for a long period of time.

It is released as a release candidate on the 1.16 series because it only supports .NET 8 and .NET 9 targets (which 1.16 will be limited to as well) and does not also include support for the .NET 6 and .NET 7 targets that 1.15 targets.

That said, none of the functionality currently being built out for the 1.16 release is included in this RC, but it does include all the patches up to the most recent 1.15 release, so if you're targeting .NET 8 or .NET 9, you should be able to safely consume this package without fear of significant changes more common to the main Dapr releases.

Commits viewable in compare view.

Updated Microsoft.Extensions.Http.Resilience from 9.8.0 to 9.9.0.

Release notes

Sourced from Microsoft.Extensions.Http.Resilience's releases.

9.9.0

Highlights

AI

  • Abstractions for remote MCP servers; response/approval flow support via new experimental types
  • Function approvals via new experimental types (e.g., ApprovalRequiredAIFunction, user input/approval request & response content).
  • Reasoning text streaming for OpenAI Responses ChatClient streaming.
  • AIFunction split into a base class to improve extensibility.
  • IChatReducer moved to Microsoft.Extensions.AI.Abstractions.
  • Updated to OpenAI 2.4.0 and genai standard convention 1.37.
  • Coalescing logic now treats ChatMessage.Role changes as new messages.
  • GetResponseAsync<T> now reads only the last message (bug fix).
  • OpenTelemetry ChatClient/EmbeddingGenerator logs raw additional properties (no key mangling).
  • Fixed empty annotated text chunk handling in streaming with OpenAI Assistants.

Telemetry & Diagnostics

  • HTTP diagnostics log query string params with proper redaction (emitted on url.query).
  • server.address telemetry emits host only (per OpenTelemetry semantic conventions).
  • Heuristics added to detect well-known model hosts.
  • Resource monitoring can consider Environment.CpuUsage.

New Contributors

Full Changelog: dotnet/extensions@v9.8.0...v9.9.0

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the dotnet group with 2 updates
71fdc9a 
Bumps Dapr.AspNetCore from 1.15.4 to 1.16.0
Bumps Microsoft.Extensions.Http.Resilience from 9.8.0 to 9.9.0

---
updated-dependencies:
- dependency-name: Dapr.AspNetCore
  dependency-version: 1.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
- dependency-name: Microsoft.Extensions.Http.Resilience
  dependency-version: 9.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added .NET Pull requests that update .net code dependencies Pull requests that update a dependency file labels Sep 17, 2025
@dependabot dependabot bot requested a review from IEvangelist as a code owner September 17, 2025 12:09
@dependabot dependabot bot added dependencies Pull requests that update a dependency file .NET Pull requests that update .net code labels Sep 17, 2025
@dotnet-policy-service dotnet-policy-service bot enabled auto-merge (squash) September 17, 2025 12:09
dotnet-policy-service[bot]
dotnet-policy-service bot approved these changes Sep 17, 2025
View reviewed changes
Copy link

@dotnet-policy-service dotnet-policy-service bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approved; this PR will merge when all status checks pass.

@dotnet-policy-service dotnet-policy-service bot merged commit 615c72a into main Sep 17, 2025
14 checks passed
@dotnet-policy-service dotnet-policy-service bot deleted the dependabot/nuget/docs/community-toolkit/snippets/Dapr/Dapr.ServiceDefaults/dotnet-ff0034ff65 branch September 17, 2025 12:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@dotnet-policy-service dotnet-policy-service[bot] dotnet-policy-service[bot] approved these changes

@IEvangelist IEvangelist Awaiting requested review from IEvangelist IEvangelist is a code owner

Assignees
No one assigned
Labels
community-contribution dependencies Pull requests that update a dependency file .NET Pull requests that update .net code :octocat: auto-merge
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
0 participants