[deps]: Bump the minor-and-patch group with 16 updates by dependabot[bot] · Pull Request #176 · netinlet/Parlance

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

10.0.301

You can build .NET 10.0 from the repository by cloning the release tag v10.0.301 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

Commits viewable in compare view.

Updated Microsoft.Extensions.DependencyInjection from 10.0.0 to 10.0.10.

Release notes

Sourced from Microsoft.Extensions.DependencyInjection's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Hosting from 10.0.0 to 10.0.10.

Release notes

Sourced from Microsoft.Extensions.Hosting's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Logging.Abstractions from 10.0.1 to 10.0.10.

Release notes

Sourced from Microsoft.Extensions.Logging.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Logging.Console from 10.0.0 to 10.0.10.

Release notes

Sourced from Microsoft.Extensions.Logging.Console's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.6.0 to 18.8.1.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.8.1 What's Changed

Fix protocol negotiation timeout when STJ reflection is disabled (18.8.1) by @nohwnd in Fix protocol negotiation timeout when STJ reflection is disabled (18.8.1) microsoft/vstest#16281

Full Changelog: microsoft/vstest@v18.8.0...v18.8.1

18.8.0 What's Changed

Migrate from Newtonsoft.Json to System.Text.Json / Jsonite (merge to main) by @nohwnd in feat: migrate from Newtonsoft.Json to System.Text.Json / Jsonite (merge to main) microsoft/vstest#15687
- For more detail refer to https://devblogs.microsoft.com/dotnet/vs-test-is-removing-its-newtonsoft-json-dependency/
Create source-only filter package by @Youssef1313 in Create source-only filter package microsoft/vstest#15638
Add ARM64 msdia140.dll support to test platform packages by @nohwnd in Cherry-pick: Add ARM64 msdia140.dll support to test platform packages microsoft/vstest#15692
Fix mutex cleanup crash on macOS/Linux by @nohwnd in Fix mutex cleanup crash on macOS/Linux microsoft/vstest#15684
Restrict artifact temp directory permissions on Unix by @nohwnd in Restrict artifact temp directory permissions on Unix microsoft/vstest#15729
Add support for filtering uncategorized tests with TestCategory=None by @Evangelink in Add support for filtering uncategorized tests with TestCategory=None microsoft/vstest#15727
Fix SCI binding failure in DTA hosts (main) by @nohwnd in Fix SCI binding failure in DTA hosts (main) microsoft/vstest#15724
Fix HTML logger parallel file collision by @nohwnd in [fix] Fix HTML logger parallel file collision microsoft/vstest#15435
Improve error message when testhost cannot be found by @nohwnd in [fix] Improve error message when testhost cannot be found microsoft/vstest#16053
Fix HTML logger exception on invalid XML chars in test display names by @nohwnd in [fix] Fix HTML logger exception on invalid XML chars in test display names microsoft/vstest#16051

Full Changelog: microsoft/vstest@v18.7.0...v18.8.0

18.7.0 What's Changed

Add ARM64 msdia140.dll support to test platform packages by @jamesmcroft in Add ARM64 msdia140.dll support to test platform packages microsoft/vstest#15689
Update System.Memory from 4.5.5 to 4.6.3 by @nohwnd in Update System.Memory from 4.5.5 to 4.6.3 microsoft/vstest#15706

New Contributors

@jamesmcroft made their first contribution in Add ARM64 msdia140.dll support to test platform packages microsoft/vstest#15689

Full Changelog: microsoft/vstest@v18.6.0...v18.7.0

Commits viewable in compare view.

Updated MinVer from 6.0.0 to 6.1.0.

Release notes

Sourced from MinVer's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated ModelContextProtocol from 1.1.0 to 1.4.1.

Release notes

Sourced from ModelContextProtocol's releases.

1.4.1

This release backports a memory-leak fix for HTTP/SSE-based MCP servers. StreamableHttpServerTransport now releases its Server-Sent Events response stream reference as soon as a GET request ends, instead of holding it until the session is disposed via explicit DELETE or idle timeout. Long-lived SSE clients that disconnect without sending DELETE no longer pin the underlying Kestrel connection and its associated memory-pool buffers (~20 MiB per session), preventing the sustained memory growth that could accumulate under connect/disconnect churn.

What's Changed

Release SSE response stream reference when GET request ends #1628 by @halter73 (co-authored by @joelmforsyth @Copilot)

Acknowledgements

@slomangino123 submitted issue #766 (resolved by #1628)

Full Changelog: modelcontextprotocol/csharp-sdk@v1.4.0...v1.4.1

1.4.0

v1.4.0 introduces support for the Identity Assertion Authorization Grant (ID-JAG) flow via the new IdentityAssertionGrantProvider, enabling enterprise SSO scenarios where users authenticate once via their enterprise Identity Provider and access MCP servers without per-server authorization prompts. The release also adds a new InheritEnvironmentVariables option on StdioClientTransportOptions for controlling the child server's environment, alongside two security hardening fixes: the stdio client transport no longer enumerates child-process environment variables in Trace logs, and DELETE on a Streamable HTTP session now requires the same authenticated user that initiated the session.

What's Changed

Stop logging stdio transport environment variables #1538 by @halter73 (co-authored by @Copilot)
Add InheritEnvironmentVariables to StdioClientTransportOptions #1563 by @halter73 (co-authored by @Copilot)
Validate user on Streamable HTTP session DELETE #1604 by @halter73 (co-authored by @Copilot)
- HandleDeleteRequestAsync now mirrors the HasSameUserId check already enforced on GET and POST. A DELETE with a valid Mcp-Session-Id but a different authenticated user now returns 403 Forbidden instead of terminating the session — defense-in-depth against a leaked session ID being used to DoS the original owner.
Add Enterprise Managed Authorization (SEP-990) support #1305 by @aniket-okta (backported in #1625)
- Adds IdentityAssertionGrantProvider and supporting option/response types in ModelContextProtocol.Authentication implementing the Identity Assertion Authorization Grant flow: RFC 8693 token exchange at the enterprise IdP (ID Token → JWT Authorization Grant) followed by RFC 7523 JWT bearer grant at the MCP authorization server (JAG → access token). See the new Cross-Application Access section in the transport docs for full usage details.

Documentation Updates

Fix broken links to MCP Tasks specification #1594 by @tarekgh

Repository Infrastructure Updates

Update release processes to support release servicing branches #1620 by @jeffhandley (co-authored by @Copilot)

Acknowledgements

@aniket-okta made their first contribution in #1305
@felixweinberger submitted issue #949 (resolved by #1305)
@eiriktsarpalis @ericstj @PranavSenthilnathan reviewed pull requests

Full Changelog: modelcontextprotocol/csharp-sdk@v1.3.0...v1.4.0

1.3.0

v1.3.0 focuses on improved transport diagnostics and security-focused documentation. The new public ClientTransportClosedException gives stdio and HTTP clients structured access to transport closure details (exit codes, process IDs, stderr tails, HTTP status codes) without parsing exception messages. Two reliability fixes harden the stdio process pipeline (preventing host crashes from user StandardErrorLines callbacks) and correct the stateless HTTP transport's capability advertisement. New conceptual documentation covers role/identity propagation in tool execution, allowed-hosts and CORS guidance for HTTP servers, and aligns the docs information architecture with the MCP specification structure.

What's Changed

Make ClientTransportClosedException public and unify transport exception handling #1467 by @stephentoub (co-authored by @halter73 @Copilot)
- As part of this unification, SSE/HTTP client connection failures from McpClient.CreateAsync(...) now surface as IOException (the new ClientTransportClosedException derives from IOException) rather than InvalidOperationException. Caller-triggered OperationCanceledException is also no longer wrapped, matching standard async cancellation semantics.
Fix process crash when testing Stderr #1449 by @ericstj (co-authored by @Copilot)
Fix stateless HTTP transport advertising listChanged capability #1509 by @jayaraman-venkatesan

Documentation Updates

docs: align docs IA with MCP specification structure #1481 by @jeffhandley (co-authored by @mikekistler @Copilot)
Document recommended pattern for role/identity propagation in MCP tool execution #1497 by @jeffhandley (co-authored by @halter73 @mikekistler @Copilot)
Document and demonstrate allowed hosts and CORS policy guidance #1554 by @jeffhandley (co-authored by @halter73 @mikekistler @Copilot)

Test Improvements

Fix flaky OutgoingFilter_MultipleFilters_ExecuteInOrder test #1488 by @ericstj (co-authored by @Copilot)

Repository Infrastructure Updates

Bump the opentelemetry-testing group with 5 updates #1478
Bump actions/deploy-pages from 4.0.5 to 5.0.0 #1477
Bump actions/download-artifact from 8.0.0 to 8.0.1 #1437
Bump actions/setup-dotnet from 5.1.0 to 5.2.0 #1418
Bump actions/setup-node from 6.2.0 to 6.3.0 #1419
Bump the testing-frameworks group with 1 update #1459
Bump the npm_and_yarn group across 1 directory with 2 updates #1410
Switch to custom CodeQL workflow #1489 by @jeffhandley
Block Release Publishing workflow from automatically running on forks #1450 by @jeffhandley (co-authored by @Copilot)
Bump actions/checkout from 4 to 6 #1504
Add testing guidelines, update copilot instructions for tests #1507 by @ericstj
Bump OpenTelemetry and 3 others #1514
Bump the opentelemetry-testing group with 6 updates #1533
Bump actions/setup-node from 6.3.0 to 6.4.0 #1522
Bump actions/upload-pages-artifact from 4.0.0 to 5.0.0 #1511
Bump the npm_and_yarn group across 1 directory with 5 updates #1500
Bump Anthropic from 12.9.0 to 12.11.0 #1506
Bump actions/upload-artifact from 7.0.0 to 7.0.1 #1512
Bump danielpalme/ReportGenerator-GitHub-Action from 5.5.4 to 5.5.5 #1521
Bump the testing-frameworks group with 2 updates #1523
Bump the other-testing group with 2 updates #1534
Bump Microsoft.Extensions.AI from 10.4.1 to 10.5.0 #1525
Remove extraneous labels from dependabot.yml #1535 by @mikekistler
Bump Anthropic from 12.11.0 to 12.17.0 #1544
Fix dev container configuration to work in codespaces #1555 by @mikekistler
Bump Microsoft.NET.Test.Sdk from 18.4.0 to 18.5.1 #1543
Bump the npm_and_yarn group across 1 directory with 3 updates #1565
Bump Microsoft.Extensions.AI.Abstractions from 10.5.0 to 10.5.2 #1561

... (truncated)

1.2.0

This release improves stateless HTTP transport defaults and documentation with a breaking behavioral change that we are considering as a server reliability fix and therefore not bumping the major version with this release. Legacy SSE endpoints are now disabled by default with a new HttpServerTransportOptions.EnableLegacySse property available to opt back into responding to the SSE endpoints; the property is marked as an [Obsolete] warning as we expect to remove this property in a future major version.

A warning-level [Obsolete] attribute is also applied to the RequestContext(McpServer, JsonRpcRequest) constructor, and the RequestContext(McpServer, JsonRpcRequest, TParams) overload should be used instead. This change contributes to fixes including DI scope lifetime in task-augmented tools, meta/progress combination failures, and outgoing message filter routing. We plan to remove the obsolete overload in a future major version.

Breaking Changes

Refer to the C# SDK Versioning documentation for details on versioning and breaking change policies.

1. Disable legacy SSE by default #1468

MapMcp() no longer maps /sse and /message endpoints by default. Servers whose clients connect via SSE will find those endpoints removed.

Migrating from legacy SSE

If your clients connect to a /sse endpoint (e.g., https://my-server.example.com/sse), they were using the legacy SSE transport--if not running in Stateless mode. The /sse and /message endpoints are now disabled by default (EnableLegacySse is false and marked [Obsolete] with diagnostic MCP9004). Upgrading the server SDK without updating clients will break SSE connections.

Client-side migration. Change the client Endpoint from the /sse path to the root MCP endpoint — the same URL your server passes to MapMcp(). For example:

// Before (legacy SSE):
Endpoint = new Uri("https://my-server.example.com/sse")

// After (Streamable HTTP):
Endpoint = new Uri("https://my-server.example.com/")

With the default HttpTransportMode.AutoDetect transport mode, the client automatically tries Streamable HTTP first. You can also set TransportMode = HttpTransportMode.StreamableHttp explicitly if you know the server supports it.

Server-side migration. If you previously relied on /sse being mapped automatically, you now need EnableLegacySse = true (suppressing the MCP9004 warning) to keep serving those endpoints. The recommended path is to migrate all clients to Streamable HTTP and then remove EnableLegacySse.

Transition period. If some clients still need SSE while others have already migrated to Streamable HTTP, set EnableLegacySse = true with Stateless = false. Both transports are served simultaneously by MapMcp() — Streamable HTTP on the root endpoint and SSE on /sse and /message. Once all clients have migrated, remove EnableLegacySse and optionally switch to Stateless = true.

SSE (legacy — opt-in only)

Legacy SSE endpoints are now disabled by default and must be explicitly enabled via HttpServerTransportOptions.EnableLegacySse. This is the primary reason they are disabled — the SSE transport has no built-in HTTP-level backpressure.

The legacy SSE transport separates the request and response channels: clients POST JSON-RPC messages to /message and receive responses through a long-lived GET SSE stream on /sse. The POST endpoint returns 202 Accepted immediately after queuing the message — it does not wait for the handler to complete. This means there is no HTTP-level backpressure on handler concurrency, because each POST frees its connection immediately regardless of how long the handler runs.

Internally, handlers are dispatched with a fire-and-forget pattern. A client can send unlimited POST requests to /message while keeping the GET stream open, and each one spawns a concurrent handler with no built-in limit.

The GET stream does provide session lifetime bounds: handler cancellation tokens are linked to the GET request's HttpContext.RequestAborted, so when the client disconnects the SSE stream, all in-flight handlers are cancelled. This is similar to SignalR's connection-bound lifetime model — but unlike SignalR, there is no per-client concurrency limit like MaximumParallelInvocationsPerClient. The GET stream provides cleanup on disconnect, not rate-limiting during the connection.

2. Obsolete 2-arg RequestContext constructor #1462

The RequestContext(McpServer, JsonRpcRequest) constructor is now [Obsolete] with diagnostic MCP9003, producing build warnings. The Params property is also changed from TParams? to TParams.

Migration: Use the new 3-arg constructor: new RequestContext(server, request, parameters).

What's Changed

Support specifying OutputSchema independently of return type for tools returning CallToolResult #1425 by @stephentoub (co-authored by @Copilot)
Add 3-arg RequestContext constructor and obsolete 2-arg to eliminate null-forgiving operator usage #1462 by @halter73 (co-authored by @Copilot)
... (truncated)

Commits viewable in compare view.

Updated Roslynator.Analyzers from 4.15.0 to 4.16.0.

Release notes

Sourced from Roslynator.Analyzers's releases.

4.16.0

Added

[CLI] Suppress error code from Roslynator when it detects issues in code but runs successfully (PR by @mdrybak)

Fixed

Fix analyzer RCS1118 to not report local variable passed as 'in' argument (PR by @NoahStolk)
Fix analyzer RCS1074 (PR by @cbersch)
Fix enum contained flags check for partial matches in RCS1258 (PR by @ovska)
Fix analyzer RCS1146 (PR)
Fix analyzer RCS1194 (PR)
Fix analyzer RCS1060 to ignore classes marked with file modifier (PR by @cbersch)
Fix analyzer RCS1231 (PR by @cbersch)
Fix analyzer RCS1246 for conditional access expressions ([PR](Fix analyzer RCS1246 for conditional access expressions dotnet/roslynator#1772 by @krajek))
[CLI] Fix fix command ignoring --include / --exclude file filter (PR by @hashiiiii)
[CLI] Fix loading of projects and solutions on .NET 10 SDK (PR)

Commits viewable in compare view.

Updated System.CommandLine from 2.0.3 to 2.0.10.

Release notes

Sourced from System.CommandLine's releases.

No release notes found for this version range.

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps ICSharpCode.Decompiler from 10.1.0.8386 to 10.1.1.8388 Bumps Krafs.Publicizer from 2.3.0 to 2.3.2 Bumps Microsoft.Bcl.AsyncInterfaces from 10.0.8 to 10.0.10 Bumps Microsoft.CodeAnalysis.Analyzers from 3.3.4 to 3.11.0 Bumps Microsoft.CodeAnalysis.CSharp to 4.13.0, 4.14.0, 5.6.0 Bumps Microsoft.CodeAnalysis.CSharp.Workspaces from 5.3.0 to 5.6.0 Bumps Microsoft.CodeAnalysis.NetAnalyzers from 10.0.300 to 10.0.302 Bumps Microsoft.Extensions.DependencyInjection from 10.0.0 to 10.0.10 Bumps Microsoft.Extensions.Hosting from 10.0.0 to 10.0.10 Bumps Microsoft.Extensions.Logging.Abstractions from 10.0.1 to 10.0.10 Bumps Microsoft.Extensions.Logging.Console from 10.0.0 to 10.0.10 Bumps Microsoft.NET.Test.Sdk from 18.6.0 to 18.8.1 Bumps MinVer from 6.0.0 to 6.1.0 Bumps ModelContextProtocol from 1.1.0 to 1.4.1 Bumps Roslynator.Analyzers from 4.15.0 to 4.16.0 Bumps System.CommandLine from 2.0.3 to 2.0.10 --- updated-dependencies: - dependency-name: ICSharpCode.Decompiler dependency-version: 10.1.1.8388 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Krafs.Publicizer dependency-version: 2.3.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Krafs.Publicizer dependency-version: 2.3.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Microsoft.Bcl.AsyncInterfaces dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Microsoft.CodeAnalysis.Analyzers dependency-version: 3.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: Microsoft.CodeAnalysis.CSharp dependency-version: 4.13.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: Microsoft.CodeAnalysis.CSharp dependency-version: 5.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: Microsoft.CodeAnalysis.CSharp.Workspaces dependency-version: 5.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: Microsoft.CodeAnalysis.CSharp dependency-version: 4.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: Microsoft.CodeAnalysis.NetAnalyzers dependency-version: 10.0.302 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Microsoft.CodeAnalysis.NetAnalyzers dependency-version: 10.0.302 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Microsoft.Extensions.DependencyInjection dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Microsoft.Extensions.Hosting dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Microsoft.Extensions.Logging.Console dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Microsoft.Extensions.Logging.Abstractions dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Microsoft.Extensions.Logging.Abstractions dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Microsoft.Extensions.Logging.Abstractions dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Microsoft.Extensions.Logging.Console dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 18.8.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 18.8.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 18.8.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 18.8.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 18.8.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 18.8.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 18.8.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 18.8.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: MinVer dependency-version: 6.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: ModelContextProtocol dependency-version: 1.4.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: ModelContextProtocol dependency-version: 1.4.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: Roslynator.Analyzers dependency-version: 4.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: Roslynator.Analyzers dependency-version: 4.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: System.CommandLine dependency-version: 2.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-08-17T13:28:17Z

Superseded by #179.

dependabot Bot added the dependencies Pull requests that update a dependency file label Aug 10, 2026

This was referenced Aug 10, 2026

[deps]: Bump the minor-and-patch group with 15 updates #172

Closed

[deps]: Bump ICSharpCode.Decompiler and 12 others #175

Closed

dependabot Bot closed this Aug 17, 2026

dependabot Bot deleted the dependabot/nuget/main/minor-and-patch-9f801d2b2e branch August 17, 2026 13:28

Navigation Menu

[deps]: Bump the minor-and-patch group with 16 updates - #176

[deps]: Bump the minor-and-patch group with 16 updates#176
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/main/minor-and-patch-9f801d2b2e

dependabot Bot commented on behalf of github Aug 10, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Aug 17, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Aug 10, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

10.1.1

Bug Fixes

2.3.2

What's Changed

Fixes & Improvements

2.3.1

What's Changed

Fixes & Improvements

10.0.302

10.0.301

18.8.1

What's Changed

18.8.0

What's Changed

18.7.0

What's Changed

New Contributors

1.4.1

What's Changed

Acknowledgements

1.4.0

What's Changed

Documentation Updates

Repository Infrastructure Updates

Acknowledgements

1.3.0

What's Changed

Documentation Updates

Test Improvements

Repository Infrastructure Updates

1.2.0

Breaking Changes

1. Disable legacy SSE by default #​1468

Migrating from legacy SSE

SSE (legacy — opt-in only)

2. Obsolete 2-arg RequestContext constructor #​1462

What's Changed

4.16.0

Added

Fixed

Uh oh!

dependabot Bot commented on behalf of github Aug 17, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Aug 10, 2026 •

edited

Loading

1. Disable legacy SSE by default #1468

2. Obsolete 2-arg RequestContext constructor #1462