Bump the dependencies group with 21 updates#62
Open
dependabot[bot] wants to merge 1 commit intomainfrom
Open
Conversation
Bumps coverlet.collector from 8.0.0 to 8.0.1 Bumps Microsoft.AspNetCore.OpenApi from 10.0.3 to 10.0.5 Bumps Microsoft.Extensions.AI.Abstractions from 10.3.0 to 10.4.1 Bumps Microsoft.Extensions.Caching.Memory from 10.0.3 to 10.0.5 Bumps Microsoft.Extensions.Caching.StackExchangeRedis from 10.0.3 to 10.0.5 Bumps Microsoft.Extensions.Configuration from 10.0.3 to 10.0.5 Bumps Microsoft.Extensions.Configuration.Binder from 10.0.3 to 10.0.5 Bumps Microsoft.Extensions.Configuration.EnvironmentVariables from 10.0.3 to 10.0.5 Bumps Microsoft.Extensions.Http from 10.0.3 to 10.0.5 Bumps OllamaSharp from 5.4.23 to 5.4.25 Bumps OpenTelemetry.Exporter.OpenTelemetryProtocol from 1.15.0 to 1.15.1 Bumps OpenTelemetry.Extensions.Hosting from 1.15.0 to 1.15.1 Bumps OpenTelemetry.Instrumentation.AspNetCore from 1.15.0 to 1.15.1 Bumps Swashbuckle.AspNetCore from 10.1.4 to 10.1.7 Bumps System.Memory.Data from 10.0.3 to 10.0.5 Bumps System.ServiceModel.Syndication from 10.0.3 to 10.0.5 Bumps Testcontainers from 4.10.0 to 4.11.0 Bumps Testcontainers.Redis from 4.10.0 to 4.11.0 Bumps Testcontainers.Xunit from 4.10.0 to 4.11.0 Bumps ZiggyCreatures.FusionCache from 2.5.0 to 2.6.0 Bumps ZiggyCreatures.FusionCache.Serialization.SystemTextJson from 2.5.0 to 2.6.0 --- updated-dependencies: - dependency-name: coverlet.collector dependency-version: 8.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: Microsoft.AspNetCore.OpenApi dependency-version: 10.0.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: Microsoft.Extensions.AI.Abstractions dependency-version: 10.4.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: Microsoft.Extensions.Caching.Memory dependency-version: 10.0.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: Microsoft.Extensions.Caching.StackExchangeRedis dependency-version: 10.0.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: Microsoft.Extensions.Configuration dependency-version: 10.0.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: Microsoft.Extensions.Configuration.Binder dependency-version: 10.0.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: Microsoft.Extensions.Configuration.EnvironmentVariables dependency-version: 10.0.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: Microsoft.Extensions.Http dependency-version: 10.0.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: OllamaSharp dependency-version: 5.4.25 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: OpenTelemetry.Exporter.OpenTelemetryProtocol dependency-version: 1.15.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: OpenTelemetry.Extensions.Hosting dependency-version: 1.15.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: OpenTelemetry.Instrumentation.AspNetCore dependency-version: 1.15.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: Swashbuckle.AspNetCore dependency-version: 10.1.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: System.Memory.Data dependency-version: 10.0.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: System.ServiceModel.Syndication dependency-version: 10.0.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: Testcontainers dependency-version: 4.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: Testcontainers.Redis dependency-version: 4.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: Testcontainers.Xunit dependency-version: 4.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: ZiggyCreatures.FusionCache dependency-version: 2.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: ZiggyCreatures.FusionCache.Serialization.SystemTextJson dependency-version: 2.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Updated coverlet.collector from 8.0.0 to 8.0.1.
Release notes
Sourced from coverlet.collector's releases.
8.0.1
Fixed
Improvements
Diff between 8.0.0 and 8.0.1
Commits viewable in compare view.
Updated Microsoft.AspNetCore.OpenApi from 10.0.3 to 10.0.5.
Release notes
Sourced from Microsoft.AspNetCore.OpenApi's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated Microsoft.Extensions.AI.Abstractions from 10.3.0 to 10.4.1.
Release notes
Sourced from Microsoft.Extensions.AI.Abstractions's releases.
10.4.1
This release of the Microsoft.Extensions.AI packages adds new experimental APIs for Realtime client sessions and Text-to-Speech, along with OpenTelemetry and middleware improvements.
Packages in this release
Experimental API Changes
New Experimental APIs
Changes to Experimental APIs
NotSupportedException#7394What's Changed
AI
ITextToSpeechClientabstraction, middleware, and OpenAI implementation #7381 by @stephentoubVoiceActivityDetectionoptions to realtime session abstractions #7399 by @tarekghUriContentmediaTypeparameter optional with inference from URI file extension #7398 by @stephentoub (co-authored by @Copilot)gen_ai.client.operation.exceptionviaILogger LoggerMessageon OpenTelemetry instrumentation classes #7379 by @stephentoub (co-authored by @Copilot)invoke_workflowas an equivalent parent span toinvoke_agentinFunctionInvokingChatClient#7382 by @stephentoub (co-authored by @Copilot)HostedFileDownloadStreamexplicitly read-only #7394 by @stephentoub (co-authored by @Copilot)Documentation Updates
Test Improvements
Repository Infrastructure Updates
Acknowledgements
... (truncated)
10.4.0
This release advances the AI abstractions with new hosted file, web search, and reasoning content types, stabilizes MCP and tool approval APIs, adds streaming latency metrics to OpenTelemetry instrumentation, and delivers bug fixes across caching, data ingestion, and resource monitoring.
Experimental API Changes
Now Stable
MEAI001) #7299FakeLogCollector.GetLogsAsync(CancellationToken)is now stable (previouslyEXTEXP0003) #7332New Experimental APIs
AddExtendedHttpClientLoggingoverloads withwrapHandlersPipelineparameter (EXTEXP0013) #7231Removed Experimental APIs
MEAI001) #7353What's Changed
AI
Telemetry and Observability
HTTP Resilience and Diagnostics
... (truncated)
Commits viewable in compare view.
Updated Microsoft.Extensions.Caching.Memory from 10.0.3 to 10.0.5.
Release notes
Sourced from Microsoft.Extensions.Caching.Memory's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated Microsoft.Extensions.Caching.StackExchangeRedis from 10.0.3 to 10.0.5.
Release notes
Sourced from Microsoft.Extensions.Caching.StackExchangeRedis's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated Microsoft.Extensions.Configuration from 10.0.3 to 10.0.5.
Release notes
Sourced from Microsoft.Extensions.Configuration's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated Microsoft.Extensions.Configuration.Binder from 10.0.3 to 10.0.5.
Release notes
Sourced from Microsoft.Extensions.Configuration.Binder's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated Microsoft.Extensions.Configuration.EnvironmentVariables from 10.0.3 to 10.0.5.
Release notes
Sourced from Microsoft.Extensions.Configuration.EnvironmentVariables's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated Microsoft.Extensions.Http from 10.0.3 to 10.0.5.
Release notes
Sourced from Microsoft.Extensions.Http's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated OllamaSharp from 5.4.23 to 5.4.25.
Release notes
Sourced from OllamaSharp's releases.
5.4.25
What's Changed
What's Changed
Full Changelog: awaescher/OllamaSharp@5.4.24...5.4.25
5.4.24
What's Changed
What's Changed
Full Changelog: awaescher/OllamaSharp@5.4.23...5.4.24
Commits viewable in compare view.
Updated OpenTelemetry.Exporter.OpenTelemetryProtocol from 1.15.0 to 1.15.1.
Release notes
Sourced from OpenTelemetry.Exporter.OpenTelemetryProtocol's releases.
1.15.1
For highlights and announcements pertaining to this release see: Release Notes > 1.15.1.
The following changes are from the previous release 1.15.0.
NuGet: OpenTelemetry v1.15.1
Fixed
Tracer.StartSpan()leaving the new span asActivity.Currentwhenthe previous activity was stopped by another thread during span creation.
(#6257)
Fixed
OverflowExceptioninTraceIdRatioBasedSamplerwhen trace ID bytesproduced
long.MinValue.([#6928])
Fixed precision issues when using
Histogram<float>with customHistogramBucketBoundaries.(#6866)
Fixed a thread-safety issue in
LogRecordSharedPool.Rent().(#6833)
Fixed observable instruments (ObservableCounter, ObservableUpDownCounter,
ObservableGauge) continuing to export stale data points after a callback
stops reporting a series.
(#5950)
See CHANGELOG for details.
NuGet: OpenTelemetry.Api v1.15.1
specification,
which disallows empty baggage names and treats baggage names and values as case
sensitive.
(#6931)
See CHANGELOG for details.
NuGet: OpenTelemetry.Api.ProviderBuilderExtensions v1.15.1
No notable changes.
See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.Console v1.15.1
No notable changes.
See CHANGELOG for details.
... (truncated)
1.15.1-beta.1
The following changes are from the previous release 1.15.0-beta.1.
NuGet: OpenTelemetry.Exporter.Prometheus.AspNetCore v1.15.1-beta.1
1.15.1.(#7010)
See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.Prometheus.HttpListener v1.15.1-beta.1
1.15.1.(#7010)
See CHANGELOG for details.
NuGet: OpenTelemetry.Shims.OpenTracing v1.15.1-beta.1
This package is deprecated and it will stop receiving any updates in
March 2027. Use the OpenTelemetry API and SDK directly instead of the OpenTracing
shims.
(#6976)
Updated OpenTelemetry core component version(s) to
1.15.1.(#7010)
See CHANGELOG for details.
Commits viewable in compare view.
Updated OpenTelemetry.Extensions.Hosting from 1.15.0 to 1.15.1.
Release notes
Sourced from OpenTelemetry.Extensions.Hosting's releases.
1.15.1
For highlights and announcements pertaining to this release see: Release Notes > 1.15.1.
The following changes are from the previous release 1.15.0.
NuGet: OpenTelemetry v1.15.1
Fixed
Tracer.StartSpan()leaving the new span asActivity.Currentwhenthe previous activity was stopped by another thread during span creation.
(#6257)
Fixed
OverflowExceptioninTraceIdRatioBasedSamplerwhen trace ID bytesproduced
long.MinValue.([#6928])
Fixed precision issues when using
Histogram<float>with customHistogramBucketBoundaries.(#6866)
Fixed a thread-safety issue in
LogRecordSharedPool.Rent().(#6833)
Fixed observable instruments (ObservableCounter, ObservableUpDownCounter,
ObservableGauge) continuing to export stale data points after a callback
stops reporting a series.
(#5950)
See CHANGELOG for details.
NuGet: OpenTelemetry.Api v1.15.1
specification,
which disallows empty baggage names and treats baggage names and values as case
sensitive.
(#6931)
See CHANGELOG for details.
NuGet: OpenTelemetry.Api.ProviderBuilderExtensions v1.15.1
No notable changes.
See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.Console v1.15.1
No notable changes.
See CHANGELOG for details.
... (truncated)
1.15.1-beta.1
The following changes are from the previous release 1.15.0-beta.1.
NuGet: OpenTelemetry.Exporter.Prometheus.AspNetCore v1.15.1-beta.1
1.15.1.(#7010)
See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.Prometheus.HttpListener v1.15.1-beta.1
1.15.1.(#7010)
See CHANGELOG for details.
NuGet: OpenTelemetry.Shims.OpenTracing v1.15.1-beta.1
This package is deprecated and it will stop receiving any updates in
March 2027. Use the OpenTelemetry API and SDK directly instead of the OpenTracing
shims.
(#6976)
Updated OpenTelemetry core component version(s) to
1.15.1.(#7010)
See CHANGELOG for details.
Commits viewable in compare view.
Updated OpenTelemetry.Instrumentation.AspNetCore from 1.15.0 to 1.15.1.
Release notes
Sourced from OpenTelemetry.Instrumentation.AspNetCore's releases.
1.15.1
NuGet: OpenTelemetry.Instrumentation.AspNet v1.15.1
No notable changes.
See CHANGELOG for details.
NuGet: OpenTelemetry.Instrumentation.AspNet.TelemetryHttpModule v1.15.1
Activityis created.(#3820)
See CHANGELOG for details.
Commits viewable in compare view.
Updated Swashbuckle.AspNetCore from 10.1.4 to 10.1.7.
Release notes
Sourced from Swashbuckle.AspNetCore's releases.
10.1.7
What's Changed
New Contributors
Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.6...v10.1.7
10.1.6
What's Changed
New Contributors
Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.5...v10.1.6
10.1.5
What's Changed
Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.4...v10.1.5
Commits viewable in compare view.
Updated System.Memory.Data from 10.0.3 to 10.0.5.
Release notes
Sourced from System.Memory.Data's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated System.ServiceModel.Syndication from 10.0.3 to 10.0.5.
Release notes
Sourced from System.ServiceModel.Syndication's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated Testcontainers from 4.10.0 to 4.11.0.
Release notes
Sourced from Testcontainers's releases.
4.11.0
What's Changed
Thanks to all contributors. Once again, really great contributions from everyone 🤝.
The NuGet packages for this release have been attested for supply chain security using
actions/attest. This confirms the integrity and provenance of the artifacts and helps ensure they can be trusted: #21198535.Please be aware that we have changed the supported and underlying image used for the Cosmos DB module. The
latesttag only supports certain environments and provides a limited set of features. Microsoft has introduced a new implementation,vnext-preview, which receives more updates and features. Due to the limitations of thelatesttag, we decided to replace it withvnext-preview. You find more information about the image here: https://github.com/Azure/azure-cosmos-db-emulator-docker.🚀 Features
🐛 Bug Fixes
📖 Documentation
🧹 Housekeeping
... (truncated)
Commits viewable in compare view.
Updated Testcontainers.Redis from 4.10.0 to 4.11.0.
Release notes
Sourced from Testcontainers.Redis's releases.
4.11.0
What's Changed
Thanks to all contributors. Once again, really great contributions from everyone 🤝.
The NuGet packages for this release have been attested for supply chain security using
actions/attest. This confirms the integrity and provenance of the artifacts and helps ensure they can be trusted: #21198535.Please be aware that we have changed the supported and underlying image used for the Cosmos DB module. The
latesttag only supports certain environments and provides a limited set of features. Microsoft has introduced a new implementation,vnext-preview, which receives more updates and features. Due to the limitations of thelatesttag, we decided to replace it withvnext-preview. You find more information about the image here: https://github.com/Azure/azure-cosmos-db-emulator-docker.🚀 Features
🐛 Bug Fixes
📖 Documentation
🧹 Housekeeping
... (truncated)
Commits viewable in compare view.
Updated Testcontainers.Xunit from 4.10.0 to 4.11.0.
Release notes
Sourced from Testcontainers.Xunit's releases.
4.11.0
What's Changed
Thanks to all contributors. Once again, really great contributions from everyone 🤝.
The NuGet packages for this release have been attested for supply chain security using
actions/attest. This confirms the integrity and provenance of the artifacts and helps ensure they can be trusted: #21198535.Please be aware that we have changed the supported and underlying image used for the Cosmos DB module. The
latesttag only supports certain environments and provides a limited set of features. Microsoft has introduced a new implementation,vnext-preview, which receives more updates and features. Due to the limitations of thelatesttag, we decided to replace it withvnext-preview. You find more information about the image here: https://github.com/Azure/azure-cosmos-db-emulator-docker.🚀 Features
🐛 Bug Fixes
📖 Documentation
🧹 Housekeeping
... (truncated)
Commits viewable in compare view.
Updated ZiggyCreatures.FusionCache from 2.5.0 to 2.6.0.
Release notes
Sourced from ZiggyCreatures.FusionCache's releases.
2.6.0
🏷️ Configurable cleanup behavior for
RemoveByTag()Normally, when calling
RemoveByTag("my-tag"), the entries with such a tag will be gradually expired on a subsequent access.Community member @charlesvigneault asked for the ability to instead properly remove them.
So I added a new option to allow configuring this behavior:
See here for the original issue.
RemoveByTag("*")in HybridCache adapterAfter the initial release of HybridCache in 2025, the team added support for a special case: using
RemoveByTag("*")to clear the entire cache.I didn't notice untile recently, and thanks to community user @vrbyjimmy I did that.
Or, to better say it, he did that!
He acted so quickly that a PR immediately landed with the implementation, so thanks Jakub for that!
What happens underneath is that a
RemoveByTag("*")call on the adapter is detected and re-routed to a Clear() call on the underlying FusionCache instance: very simple and elegant, and I like that a lot.See here for the original issue.
🔒 Better Distributed Locker + Eager Refresh
Community user @jgshowpad noticed that when using the new distributed stampede protection introduced in v2.5.0 with Eager Refresh some errors were being logged.
That was caused by the Redis-based distributed locker not handling correctly a timeout of zero (which btw is a pretty common approach to basically check for a lock already being acquired by someone else, without having to wait).
This has now been fixed.
See here for the original issue.
⚡ Perf boost for
GenerateOperationId()Community user @Inok contributed with a nice set of low-level perf optimizations for the
GenerateOperationId()internal method, which may be called quite a lot when doing observability (logging, OTEL, etc).That's a very nice and welcome contribution, thanks Pavel!
See here for the original issue.
... (truncated)
Commits viewable in compare view.
Updated ZiggyCreatures.FusionCache.Serialization.SystemTextJson from 2.5.0 to 2.6.0.
Release notes
Sourced from ZiggyCreatures.FusionCache.Serialization.SystemTextJson's releases.
2.6.0
🏷️ Configurable cleanup behavior for
RemoveByTag()Normally, when calling
RemoveByTag("my-tag"), the entries with such a tag will be gradually expired on a subsequent access.Community member @charlesvigneault asked for the ability to instead properly remove them.
So I added a new option to allow configuring this behavior:
See here for the original issue.
RemoveByTag("*")in HybridCache adapterAfter the initial release of HybridCache in 2025, the team added support for a special case: using
RemoveByTag("*")to clear the entire cache.I didn't notice untile recently, and thanks to community user @vrbyjimmy I did that.
Or, to better say it, he did that!
He acted so quickly that a PR immediately landed with the implementation, so thanks Jakub for that!
What happens underneath is that a
RemoveByTag("*")call on the adapter is detected and re-routed to a Clear() call on the underlying FusionCache instance: very simple and elegant, and I like that a lot.See here for the original issue.
🔒 Better Distributed Locker + Eager Refresh
Community user @jgshowpad noticed that when using the new distributed stampede protection introduced in v2.5.0 with Eager Refresh some errors were being logged.
That was caused by the Redis-based distributed locker not handling correctly a timeout of zero (which btw is a pretty common approach to basically check for a lock already being acquired by someone else, without having to wait).
This has now been fixed.
See here for the original issue.
⚡ Perf boost for
GenerateOperationId()Community user @Inok contributed with a nice set of low-level perf optimizations for the
GenerateOperationId()internal method, which may be called quite a lot when doing observability (logging, OTEL, etc).That's a very nice and welcome contribution, thanks Pavel!
See here for the original issue.
... (truncated)
Commits viewable in compare view.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions