Skip to content

Bump the dotnet group with 7 updates #5707

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
wants to merge 1 commit into from
Closed

Bump the dotnet group with 7 updates #5707

wants to merge 1 commit into from

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 13, 2025

Updated Microsoft.Extensions.Http.Resilience from 9.9.0 to 10.0.0.

Release notes

Sourced from Microsoft.Extensions.Http.Resilience's releases.

10.0.0

What's Changed

9.10.0

What's Changed

New Contributors

Commits viewable in compare view.

Updated Microsoft.Extensions.ServiceDiscovery from 9.5.2 to 10.0.0.

Release notes

Sourced from Microsoft.Extensions.ServiceDiscovery's releases.

10.0.0

What's Changed

9.10.0

What's Changed

New Contributors

9.9.0

Highlights

AI

  • Abstractions for remote MCP servers; response/approval flow support via new experimental types
  • Function approvals via new experimental types (e.g., ApprovalRequiredAIFunction, user input/approval request & response content).
  • Reasoning text streaming for OpenAI Responses ChatClient streaming.
  • AIFunction split into a base class to improve extensibility.
  • IChatReducer moved to Microsoft.Extensions.AI.Abstractions.
  • Updated to OpenAI 2.4.0 and genai standard convention 1.37.
  • Coalescing logic now treats ChatMessage.Role changes as new messages.
  • GetResponseAsync<T> now reads only the last message (bug fix).
  • OpenTelemetry ChatClient/EmbeddingGenerator logs raw additional properties (no key mangling).
  • Fixed empty annotated text chunk handling in streaming with OpenAI Assistants.

Telemetry & Diagnostics

  • HTTP diagnostics log query string params with proper redaction (emitted on url.query).
  • server.address telemetry emits host only (per OpenTelemetry semantic conventions).
  • Heuristics added to detect well-known model hosts.
  • Resource monitoring can consider Environment.CpuUsage.

New Contributors

Full Changelog: dotnet/extensions@v9.8.0...v9.9.0

9.8.0

What's Changed

9.7.2

Packages Released

What's Changed

  • Target .NET 8 for more stable runtime requirement by @​joelverhagen in #​6617

Full Changelog: dotnet/extensions@v9.7.1...v9.7.2

9.7.1

Packages Released

What's Changed

Full Changelog: dotnet/extensions@v9.7.0...v9.7.1

9.7.0

What's Changed

New Contributors

Full Changelog: dotnet/extensions@v9.6.0...v9.7.0

9.6.0

What's Changed

New Contributors

Full Changelog: dotnet/extensions@v9.5.0...v9.6.0

Commits viewable in compare view.

Updated OpenTelemetry.Exporter.OpenTelemetryProtocol from 1.12.0 to 1.14.0.

Release notes

Sourced from OpenTelemetry.Exporter.OpenTelemetryProtocol's releases.

1.14.0

For highlights and announcements pertaining to this release see: Release Notes > 1.14.0.

The following changes are from the previous release 1.14.0-rc.1.

  • NuGet: OpenTelemetry v1.14.0

    • Breaking Change NuGet packages now use the Sigstore bundle format
      (.sigstore.json) for digital signatures instead of separate signature
      (.sig) and certificate (.pem) files. This requires cosign 3.0 or later
      for verification. See the Digital signing
      section       for updated verification instructions.
      (#​6623)

    • Update to stable versions for .NET 10.0 NuGet packages.
      (#​6667)

    • Update Microsoft.Extensions.* dependencies to 10.0.0 for .NET Framework
      and .NET Standard.
      (#​6667)

    See CHANGELOG for details.

  • NuGet: OpenTelemetry.Api v1.14.0

    • Breaking Change NuGet packages now use the Sigstore bundle format
      (.sigstore.json) for digital signatures instead of separate signature
      (.sig) and certificate (.pem) files. This requires cosign 3.0 or later
      for verification. See the Digital signing
      section       for updated verification instructions.
      (#​6623)

    • Update System.Diagnostics.DiagnosticSource dependency to 10.0.0
      for all target frameworks.
      (#​6667)

    See CHANGELOG for details.

  • NuGet: OpenTelemetry.Api.ProviderBuilderExtensions v1.14.0

    • Breaking Change NuGet packages now use the Sigstore bundle format
      (.sigstore.json) for digital signatures instead of separate signature
      (.sig) and certificate (.pem) files. This requires cosign 3.0 or later
      for verification. See the Digital signing
      section       for updated verification instructions.
      (#​6623)

    • Update to stable versions for .NET 10.0 NuGet packages.
      (#​6667)

    • Update Microsoft.Extensions.* dependencies to 10.0.0 for .NET Framework
      ... (truncated)

1.14.0-rc.1

The following changes are from the previous release 1.13.1.

... (truncated)

1.14.0-beta.1

The following changes are from the previous release 1.13.1-beta.1.

  • NuGet: OpenTelemetry.Exporter.Prometheus.AspNetCore v1.14.0-beta.1

    • Breaking Change When targeting net8.0, the package now depends on version
      8.0.0 of the Microsoft.Extensions.DependencyInjection.Abstractions,
      Microsoft.Extensions.Diagnostics.Abstractions and
      Microsoft.Extensions.Logging.Configuration NuGet packages.
      (#​6327)

    • Add support for .NET 10.0.
      (#​6307)

    • Added the possibility to disable timestamps via the PrometheusAspNetCoreOptions.
      (#​6600)

    • Breaking Change NuGet packages now use the Sigstore bundle format
      (.sigstore.json) for digital signatures instead of separate signature
      (.sig) and certificate (.pem) files. This requires cosign 3.0 or later
      for verification. See the Digital signing
      section       for updated verification instructions.
      (#​6623)

    • Updated OpenTelemetry core component version(s) to 1.14.0.
      (#​6689)

    See CHANGELOG for details.

  • NuGet: OpenTelemetry.Exporter.Prometheus.HttpListener v1.14.0-beta.1

    • Breaking Change When targeting net8.0, the package now depends on version
      8.0.0 of the Microsoft.Extensions.DependencyInjection.Abstractions,
      Microsoft.Extensions.Diagnostics.Abstractions and
      Microsoft.Extensions.Logging.Configuration NuGet packages.
      (#​6327)

    • Add support for .NET 10.0.
      (#​6307)

    • Added the possibility to disable timestamps via the PrometheusHttpListenerOptions.
      (#​6600)

    • Breaking Change NuGet packages now use the Sigstore bundle format
      (.sigstore.json) for digital signatures instead of separate signature
      (.sig) and certificate (.pem) files. This requires cosign 3.0 or later
      for verification. See the Digital signing
      section       for updated verification instructions.
      (#​6623)

    • Updated OpenTelemetry core component version(s) to 1.14.0.
      ... (truncated)

1.13.1

For highlights and announcements pertaining to this release see: Release Notes > 1.13.1.

The following changes are from the previous release 1.13.0.

... (truncated)

1.13.1-beta.1

The following changes are from the previous release 1.13.0-beta.1.

1.13.0

For highlights and announcements pertaining to this release see: Release Notes > 1.13.0.

The following changes are from the previous release 1.12.0.

  • NuGet: OpenTelemetry v1.13.0

    • Added a verification to ensure that a MetricReader can only be registered
      to a single MeterProvider, as required by the OpenTelemetry specification.
      (#​6458)

    • Added FormatMessage configuration option to self-diagnostics feature. When
      set to true (default is false), log messages will be formatted by replacing
      placeholders with actual parameter values for improved readability.

      Example OTEL_DIAGNOSTICS.json:

      {
    "LogDirectory": ".",
    "FileSize": 32768,
    "LogLevel": "Warning",
    "FormatMessage": true
}

    • Fixed parsing of OTEL_TRACES_SAMPLER_ARG decimal values to always use .
      as the delimiter when using the traceidratio sampler, preventing
      locale-specific parsing issues.
      (#​6444)

    See CHANGELOG for details.

  • NuGet: OpenTelemetry.Api v1.13.0

    • Added AddLink(SpanContext, SpanAttributes?) to TelemetrySpan to support
      linking spans and associating optional attributes for advanced trace relationships.
      (#​6305)

    • Experimental (only in pre-release versions): Added the EventName property
      to LogRecordData
      (#​6306)

    See CHANGELOG for details.

  • NuGet: OpenTelemetry.Api.ProviderBuilderExtensions v1.13.0

    No notable changes.

    See CHANGELOG for details.

... (truncated)

1.13.0-beta.1

The following changes are from the previous release 1.12.0-beta.1.

Commits viewable in compare view.

Updated OpenTelemetry.Extensions.Hosting from 1.12.0 to 1.14.0.

Release notes

Sourced from OpenTelemetry.Extensions.Hosting's releases.

1.14.0

For highlights and announcements pertaining to this release see: Release Notes > 1.14.0.

The following changes are from the previous release 1.14.0-rc.1.

  • NuGet: OpenTelemetry v1.14.0

    • Breaking Change NuGet packages now use the Sigstore bundle format
      (.sigstore.json) for digital signatures instead of separate signature
      (.sig) and certificate (.pem) files. This requires cosign 3.0 or later
      for verification. See the Digital signing
      section       for updated verification instructions.
      (#​6623)

    • Update to stable versions for .NET 10.0 NuGet packages.
      (#​6667)

    • Update Microsoft.Extensions.* dependencies to 10.0.0 for .NET Framework
      and .NET Standard.
      (#​6667)

    See CHANGELOG for details.

  • NuGet: OpenTelemetry.Api v1.14.0

    • Breaking Change NuGet packages now use the Sigstore bundle format
      (.sigstore.json) for digital signatures instead of separate signature
      (.sig) and certificate (.pem) files. This requires cosign 3.0 or later
      for verification. See the Digital signing
      section       for updated verification instructions.
      (#​6623)

    • Update System.Diagnostics.DiagnosticSource dependency to 10.0.0
      for all target frameworks.
      (#​6667)

    See CHANGELOG for details.

  • NuGet: OpenTelemetry.Api.ProviderBuilderExtensions v1.14.0

    • Breaking Change NuGet packages now use the Sigstore bundle format
      (.sigstore.json) for digital signatures instead of separate signature
      (.sig) and certificate (.pem) files. This requires cosign 3.0 or later
      for verification. See the Digital signing
      section       for updated verification instructions.
      (#​6623)

    • Update to stable versions for .NET 10.0 NuGet packages.
      (#​6667)

    • Update Microsoft.Extensions.* dependencies to 10.0.0 for .NET Framework
      ... (truncated)

1.14.0-rc.1

The following changes are from the previous release 1.13.1.

Description has been truncated

@dependabot
Bump the dotnet group with 7 updates
132b153 
Bumps Microsoft.Extensions.Http.Resilience from 9.9.0 to 10.0.0
Bumps Microsoft.Extensions.ServiceDiscovery from 9.5.2 to 10.0.0
Bumps OpenTelemetry.Exporter.OpenTelemetryProtocol from 1.12.0 to 1.14.0
Bumps OpenTelemetry.Extensions.Hosting from 1.12.0 to 1.14.0
Bumps OpenTelemetry.Instrumentation.AspNetCore from 1.12.0 to 1.14.0
Bumps OpenTelemetry.Instrumentation.Http from 1.12.0 to 1.14.0
Bumps OpenTelemetry.Instrumentation.Runtime from 1.12.0 to 1.14.0

---
updated-dependencies:
- dependency-name: Microsoft.Extensions.Http.Resilience
  dependency-version: 10.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dotnet
- dependency-name: Microsoft.Extensions.ServiceDiscovery
  dependency-version: 10.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dotnet
- dependency-name: OpenTelemetry.Exporter.OpenTelemetryProtocol
  dependency-version: 1.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
- dependency-name: OpenTelemetry.Extensions.Hosting
  dependency-version: 1.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
- dependency-name: OpenTelemetry.Instrumentation.AspNetCore
  dependency-version: 1.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
- dependency-name: OpenTelemetry.Instrumentation.Http
  dependency-version: 1.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
- dependency-name: OpenTelemetry.Instrumentation.Runtime
  dependency-version: 1.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added .NET Pull requests that update .net code dependencies Pull requests that update a dependency file labels Nov 13, 2025
@dependabot dependabot bot requested a review from IEvangelist as a code owner November 13, 2025 21:40
@dependabot dependabot bot added dependencies Pull requests that update a dependency file .NET Pull requests that update .net code labels Nov 13, 2025
This was referenced Nov 13, 2025
Closed
Closed
Closed
@dotnet-policy-service dotnet-policy-service bot enabled auto-merge (squash) November 13, 2025 21:41
dotnet-policy-service[bot]
dotnet-policy-service bot approved these changes Nov 13, 2025
View reviewed changes
Copy link

@dotnet-policy-service dotnet-policy-service bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approved; this PR will merge when all status checks pass.

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Nov 13, 2025

Superseded by #5716.

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Nov 13, 2025

Superseded by #5720.

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Nov 13, 2025

Superseded by #5715.

@dependabot dependabot bot closed this Nov 13, 2025
auto-merge was automatically disabled November 13, 2025 21:42

Pull request was closed

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Nov 13, 2025

Superseded by #5714.

@dependabot dependabot bot deleted the dependabot/nuget/docs/fundamentals/snippets/lifecycles/AspireApp/AspireApp.ServiceDefaults/dotnet-edb18b5935 branch November 13, 2025 21:42
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Nov 13, 2025

Superseded by #5719.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@dotnet-policy-service dotnet-policy-service[bot] dotnet-policy-service[bot] approved these changes

@IEvangelist IEvangelist Awaiting requested review from IEvangelist IEvangelist is a code owner

Assignees

No one assigned

Labels

community-contribution dependencies Pull requests that update a dependency file .NET Pull requests that update .net code :octocat: auto-merge

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant