Repository navigation
Bump Asp.Versioning.Mvc and 11 others - #30
Closed
dependabot[bot] wants to merge 1 commit into
Closed
dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
dependabot
Bot
force-pushed
the
dependabot/nuget/Linky/everything-f3d02471c5
branch
from
September 19, 2026 15:40
4931b02 to
1a8337d
Compare
Bumps Asp.Versioning.Mvc from 10.0.0 to 10.2.1 Bumps Dapper from 2.1.79 to 2.1.86 Bumps Microsoft.AspNetCore.OpenApi from 10.0.10 to 10.0.12 Bumps Microsoft.EntityFrameworkCore from 10.0.10 to 10.0.12 Bumps Microsoft.EntityFrameworkCore.Design from 10.0.10 to 10.0.12 Bumps Microsoft.EntityFrameworkCore.Tools from 10.0.10 to 10.0.12 Bumps Microsoft.Extensions.Caching.StackExchangeRedis from 10.0.10 to 10.0.12 Bumps Microsoft.Extensions.Http.Resilience from 10.8.0 to 10.10.0 Bumps Microsoft.OpenApi to 2.12.0, 3.10.2 Bumps NATS.Net from 3.0.1 to 3.2.0 Bumps SkiaSharp from 4.150.1 to 4.152.1 Bumps SkiaSharp.NativeAssets.Linux from 4.150.1 to 4.152.1 --- updated-dependencies: - dependency-name: Asp.Versioning.Mvc dependency-version: 10.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: everything - dependency-name: Dapper dependency-version: 2.1.86 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: everything - dependency-name: Microsoft.AspNetCore.OpenApi dependency-version: 10.0.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: everything - dependency-name: Microsoft.EntityFrameworkCore dependency-version: 10.0.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: everything - dependency-name: Microsoft.EntityFrameworkCore.Design dependency-version: 10.0.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: everything - dependency-name: Microsoft.EntityFrameworkCore.Tools dependency-version: 10.0.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: everything - dependency-name: Microsoft.Extensions.Caching.StackExchangeRedis dependency-version: 10.0.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: everything - dependency-name: Microsoft.Extensions.Http.Resilience dependency-version: 10.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: everything - dependency-name: Microsoft.OpenApi dependency-version: 2.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: everything - dependency-name: Microsoft.OpenApi dependency-version: 3.10.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: everything - dependency-name: NATS.Net dependency-version: 3.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: everything - dependency-name: SkiaSharp dependency-version: 4.152.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: everything - dependency-name: SkiaSharp.NativeAssets.Linux dependency-version: 4.152.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: everything ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/nuget/Linky/everything-f3d02471c5
branch
from
September 20, 2026 21:16
1a8337d to
916c70b
Compare
Author
|
Superseded by #33. |
dependabot
Bot
deleted the
dependabot/nuget/Linky/everything-f3d02471c5
branch
September 20, 2026 21:17
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Updated Asp.Versioning.Mvc from 10.0.0 to 10.2.1.
Release notes
Sourced from Asp.Versioning.Mvc's releases.
10.2.0
This release includes some big new features but is fully backward compatible with
10.0.0. The new features include versioned model member filtering, Roslyn analyzers, gRPC preview support, and a number of servicing patches since the previous release.Fixes
All Platforms
'.'no longer succeeds silently'-'ASP.NET Core
IProblemDetailsWriteris preserved byAddApiVersioning()(#1191)ASP.NET Core OpenAPI
Features
All Platforms
ApiVersionRangetype for matching a set of API versions using the same interval notation as a package version1.0→x ≥ 1.0[1.0]→x == 1.0(1.0,)→x > 1.0(,1.0]→x ≤ 1.0[1.0,2.0)→1.0 ≤ x < 2.0ApiVersionRange.AnyandApiVersionRange.Emptyare provided forthe degenerate cases
VisibleInApiVersionAttributeindicates the range of API versions a data member is visible in; for example,[VisibleInApiVersion("2.0")]IAnnotation<TKey, TValue>abstraction for associating out-of-band metadata with a member[StringSyntax]is now applied to API version inputs so the IDE and analyzers understand them; the recognizedsyntaxes are
ApiVersion,ApiVersionRange, andApiVersionFormatAnalyzers
API Versioning now ships Roslyn analyzers. There is no new package to install — the core rules are packed into Asp.Versioning.Abstractions and the API rules are packed into Asp.Versioning.Http, so any application that already references API Versioning picks them up transitively.
There is an initial set of 31 rules. You can find all of the rule information in the new diagnostics wiki topic.
Notes:
... (truncated)
Commits viewable in compare view.
Updated Dapper from 2.1.79 to 2.1.86.
Release notes
Sourced from Dapper's releases.
2.1.86
What's Changed
Full Changelog: DapperLib/Dapper@2.1.79...2.1.86
Commits viewable in compare view.
Updated Microsoft.AspNetCore.OpenApi from 10.0.10 to 10.0.12.
Release notes
Sourced from Microsoft.AspNetCore.OpenApi's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated Microsoft.EntityFrameworkCore from 10.0.10 to 10.0.12.
Release notes
Sourced from Microsoft.EntityFrameworkCore's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated Microsoft.EntityFrameworkCore.Design from 10.0.10 to 10.0.12.
Release notes
Sourced from Microsoft.EntityFrameworkCore.Design's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated Microsoft.EntityFrameworkCore.Tools from 10.0.10 to 10.0.12.
Release notes
Sourced from Microsoft.EntityFrameworkCore.Tools's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated Microsoft.Extensions.Caching.StackExchangeRedis from 10.0.10 to 10.0.12.
Release notes
Sourced from Microsoft.Extensions.Caching.StackExchangeRedis's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated Microsoft.Extensions.Http.Resilience from 10.8.0 to 10.10.0.
Release notes
Sourced from Microsoft.Extensions.Http.Resilience's releases.
10.10.0
This month's release focuses on AI package reliability: closing gaps in evaluation scoring, hardening OpenAI image-option handling, and removing the deprecated OpenAI Assistants API support.
Experimental API Changes
Removed Experimental APIs
OPENAI001) #7724What's Changed
AI
AI Evaluation
Repository Infrastructure Updates
Acknowledgements
Full Changelog: dotnet/extensions@v10.9.0...v10.10.0
10.9.0
Version 10.9.0 is headlined by changes in these areas:
RoutingChatClientbase class, withSemanticRoutingChatClientas a concrete semantic-routing implementation. Separately, the abstractFailoverChatClientspecialization and its concreteOrderedFailoverChatClientimplementation add failover routing.Experimental API Changes
New Experimental APIs
EXTEXP0013) #7602MEAI001) #7662What's Changed
AI (
Microsoft.Extensions.AI,Microsoft.Extensions.AI.Abstractions, andMicrosoft.Extensions.AI.OpenAI)Note: Microsoft.Extensions.AI.OpenAI constrains its dependency for OpenAI to 2.12.x, preventing OpenAI updates to 2.13.0+ due to an incompatibility. We expect to release Microsoft.Extensions.AI.OpenAI version 10.9.1 during the week of August 17 to address this issue.
HTTP Resilience and Diagnostics (
Microsoft.Extensions.Http.ResilienceandMicrosoft.Extensions.Http.Diagnostics)ASP.NET Core Extensions (
Microsoft.AspNetCore.Diagnostics.Middleware)Logging Source Generator (
Microsoft.Gen.Logging)AI Evaluation (
Microsoft.Extensions.AI.Evaluation.Reporting)Project Templates (
Microsoft.McpServer.ProjectTemplates)... (truncated)
10.8.4
This servicing update refreshes the .NET AI project templates ahead of the July 30, 2026 retirement of GitHub Models — removing the GitHub Models provider option and updating template dependencies.
As a result, both the AI Chat Web (
aichatweb) and AI Agent Web API (aiagent-webapi) templates now require the AI service provider to be chosen explicitly via--provider; there is no longer a default. One of the following must be selected:--provider azureopenai— Azure OpenAI--provider ollama— Ollama (for local development)--provider openai— OpenAI PlatformPackages in this release
What's Changed
Project templates
--provideroption is now required with no default (#7667).Aspire.Hosting.AppHostto13.4.6andCommunityToolkit.VectorData.SqliteVecto1.0.0-preview.4(alignedSystem.Linq.AsyncEnumerableto10.0.9), replacing earlier workaround package pins (#7639).Full Changelog
10.8.3
Packages in this release
Experimental API Changes
Experimental API behavior updates
ToolApprovalRequestContent.RequiresConfirmationso it no longer leaks into consumer source-generatedAIContentJSON metadata unless approval APIs are intentionally used (#7659).What's Changed
AI abstractions and serialization
RequiresConfirmationin source-generatedAIContentcontexts by using an internal JSON-included backing member while keeping the public experimental member ignored for source-generation metadata (#7659).Test Improvements
List<AIContent>contexts compile and round-trip without requiring MEAI001 suppression (#7659).Full Changelog
10.8.2
This servicing release updates Microsoft.Extensions.VectorData.ConformanceTests to 10.8.2 and includes targeted test framework migration fixes.
Packages in this release
Update: August 7, 2026
The Microsoft.Extensions.VectorData.Abstractions package was initially excluded from this release by mistake. Because Microsoft.Extensions.VectorData.ConformanceTests has a dependency on Microsoft.Extensions.VectorData.Abstractions, that led to failures when updating to Microsoft.Extensions.VectorData.ConformanceTests 10.8.2.
Microsoft.Extensions.VectorData.Abstractions was published August 7, 2026 to resolve that issue.
What's Changed
AI
Acknowledgements
Full Changelog: dotnet/extensions@v10.8.1...v10.8.2
10.8.1
This servicing release updates the Microsoft.Extensions.AI, Microsoft.Extensions.AI.Abstractions, and Microsoft.Extensions.AI.OpenAI packages to 10.8.1 with two targeted fixes: correct tool-call/tool-result ordering when resuming approval-gated functions with service-managed chat history, and preservation of the OpenAI Responses reasoning item id for stateless (store=false) encrypted reasoning.
Packages in this release
What's Changed
AI
Acknowledgements
Full Changelog: dotnet/extensions@v10.8.0...v10.8.1
Commits viewable in compare view.
Updated Microsoft.OpenApi from 2.7.5 to 2.12.0.
Release notes
Sourced from Microsoft.OpenApi's releases.
2.12.0
2.12.0 (2026-08-12)
Features
Bug Fixes
2.11.0
2.11.0 (2026-07-15)
Features
Bug Fixes
2.10.0
2.10.0 (2026-07-03)
Features
Bug Fixes
2.9.0
2.9.0 (2026-06-10)
Features
Bug Fixes
2.8.0
2.8.0 (2026-06-01)
Features
2.7.6
2.7.6 (2026-05-28)
Bug Fixes
Commits viewable in compare view.
Updated Microsoft.OpenApi from 2.7.5 to 3.10.2.
Release notes
Sourced from Microsoft.OpenApi's releases.
3.10.2
3.10.2 (2026-08-20)
Bug Fixes
3.10.1
3.10.1 (2026-08-19)
Bug Fixes
3.10.0
3.10.0 (2026-08-11)
Features
Bug Fixes
3.9.0
3.9.0 (2026-07-15)
Features
Bug Fixes
3.8.0
3.8.0 (2026-07-03)
Features
Bug Fixes
3.7.0
3.7.0 (2026-06-10)
Features
Bug Fixes
3.6.0
3.6.0 (2026-06-01)
Features
3.5.5
3.5.5 (2026-05-28)
Bug Fixes
3.5.4
3.5.4 (2026-05-26)
Bug Fixes
3.5.3
3.5.3 (2026-04-27)
Bug Fixes
Performance Improvements
3.5.2
3.5.2 (2026-04-14)
Bug Fixes
3.5.1
3.5.1 (2026-03-31)
Bug Fixes
3.5.0
3.5.0 (2026-03-20)
Features
Bug Fixes
3.4.0
3.4.0 (2026-03-04)
Features
Bug Fixes
3.3.1
3.3.1 (2026-01-22)
Features
Bug Fixes
3.3.0
3.3.0 (2026-01-21)
Features
3.2.0
3.2.0 (2026-01-19)
Features
Bug Fixes
3.1.3
3.1.3 (2026-01-16)
Bug Fixes
3.1.2
3.1.2 (2026-01-06)
Bug Fixes
3.1.1
3.1.1 (2025-12-18)
Bug Fixes
additionalProperties: false(6651c36)additionalProperties: false(e36fc95)3.1.0
3.1.0 (2025-12-17)
Features
type: "null"downcasting when in oneOf and anyOf for OpenAPI v3 (782cf8d)3.0.3
3.0.3 (2025-12-16)
Bug Fixes
3.0.2
3.0.2 (2025-12-08)
Bug Fixes
3.0.1
3.0.1 (2025-11-17)
Bug Fixes
3.0.0
3.0.0 (2025-11-11)
⚠ BREAKING CHANGES
Features
Special thanks
2.12.2
2.12.2 (2026-08-20)
Bug Fixes
2.12.1
2.12.1 (2026-08-19)
Bug Fixes
2.12.0
2.12.0 (2026-08-12)
Features
Bug Fixes
2.11.0
2.11.0 (2026-07-15)
Features
Bug Fixes
2.10.0
2.10.0 (2026-07-03)
Features
Bug Fixes
2.9.0
2.9.0 (2026-06-10)
Features
Bug Fixes
2.8.0
2.8.0 (2026-06-01)
Features
2.7.6
2.7.6 (2026-05-28)
Bug Fixes
Commits viewable in compare view.
Updated NATS.Net from 3.0.1 to 3.2.0.
Release notes
Sourced from NATS.Net's releases.
3.2.0
Breaking for implementers:
INatsJSStreamandINatsJSConsumergained members (ResetConsumerAsync,ResetAsync). Anything implementing these interfaces directly, such as a test double, needs updating. Callers are unaffected. Default implementations are not possible while the client targets netstandard2.0.JetStream parity with server 2.14:
missinglist (#1248)ConsumerConfig.Sourcingexposes the flag the server sets on consumers it creates for interest and work queue stream sourcing (#1249)3.1.1
Patch release on top of 3.1.0, promoting 3.1.1-preview.1 to stable. Most of it is the OpenTelemetry receive path. Receive spans for messages consumed internally by the Key/Value watcher, the ordered push consumer behind the Object Store and service endpoints were never ended, so they never reached a backend; shared-inbox request-reply produced disconnected traces with no request span; a JetStream direct get was traced under the write that stored the value rather than the read; and several span tags were wrong. Also fixes a null array passed on the netstandard2.0 object store put path, and a stall when TCP splits the trailing CRLF of an empty payload message.
Three changes in #1236 are visible in a tracing backend, so queries and dashboards built on the client's spans may need updating:
messaging.operationon subscribe and request spans now readssubscribeandrequestrather thanpublish, the subscribe span isActivityKind.Clientrather thanProducer, and a reply whose trace id differs from its request is linked rather than parented.Thanks
Full Changelog: nats-io/nats.net@v3.1.0...v3.1.1
3.1.1-preview.1
Preview on the 3.1 patch line with one fix. Receive activities were created on the connection's read loop and left in
Activity.Current, so a message without its own trace context took the previous message's activity as a parent; unrelated messages chained together and the chain stayed reachable for the life of the connection. Receive activities are now parented only by trace context carried in the message, and activities that were never ended before (messages evicted from a full subscription channel, messages that never reach a consumer) are ended. Worth testing if you run with OpenTelemetry tracing enabled.Adjacent issues in the same receive path are not covered here: the remainder of #1227, plus #1228, #1230, #1232 and #1233.
Thanks to @ani-philips for reporting the leak (#1225).
Full Changelog: nats-io/nats.net@v3.1.0...v3.1.1-preview.1
3.1.0
Minor release on top of 3.0.1. Adds subscription events with an OnSubscribed callback, enables full-graph NuGet dependency auditing, and adds documentation examples.
The async enumerable returned by SubscribeAsync does not establish the subscription until it is iterated. When the enumerable is handed off to another task, the new OnSubscribed callback signals when it is safe to publish messages the subscription must observe:
OnSubscribed fires once the SUB protocol message has been queued on the subscribing connection, which is enough when publishing on the same connection. If the publisher uses a different connection, add a PingAsync round-trip on the subscribing connection after the callback to be sure the server has processed the subscription:
Thanks
Commits viewable in compare view.
Updated SkiaSharp from 4.150.1 to 4.152.1.
Updated SkiaSharp.NativeAssets.Linux from 4.150.1 to 4.152.1.