Bump the nuget-dependencies group with 17 updates by dependabot[bot] · Pull Request #67 · violetweather/Certael

Minor release on top of 3.0.1. Adds subscription events with an OnSubscribed callback, enables full-graph NuGet dependency auditing, and adds documentation examples.

Add subscription events with OnSubscribed callback (#1217)
Audit transitive dependencies (#1220)
Add subject-dispatch serialization example (#1218)
Add docs.nats.io examples to main (#1216)

The async enumerable returned by SubscribeAsync does not establish the subscription until it is iterated. When the enumerable is handed off to another task, the new OnSubscribed callback signals when it is safe to publish messages the subscription must observe:

var subscribed = new TaskCompletionSource(TaskCreationOptions.RunContinuationsAsynchronously);

var opts = new NatsSubOpts
{
    Events = new NatsSubEvents
    {
        OnSubscribed = _ =>
        {
            subscribed.TrySetResult();
            return default;
        },
    },
};

var consumer = Task.Run(async () =>
{
    await foreach (var msg in nats.SubscribeAsync<string>("greet", opts: opts))
    {
        // process messages
    }
});

await subscribed.Task;
await nats.PublishAsync("greet", "hello"); // subscription is established

OnSubscribed fires once the SUB protocol message has been queued on the subscribing connection, which is enough when publishing on the same connection. If the publisher uses a different connection, add a PingAsync round-trip on the subscribing connection after the callback to be sure the server has processed the subscription:

await subscribed.Task;
await nats.PingAsync(); // server has processed the SUB
await otherConnection.PublishAsync("greet", "hello");

Thanks

@btzdnl for reporting the SubscribeAsync early-return issue and helping with the design (#1178)

3.0.1

Patch release on top of 3.0.0. Fixes a JetStream list enumeration cancellation bug and adds opt-in W3C Baggage propagation to the OpenTelemetry integration.

Fix silent completion when JetStream list enumeration is cancelled (#1214)
OpenTelemetry: opt-in W3C Baggage propagation (#1208)
Add explicit permissions to CI workflows (#1213)
Update README for 3.0 release (#1212)

Thanks

@paagamelo2 for reporting the JetStream list cancellation issue (#1193)
@iamadamreed for the opt-in W3C Baggage propagation support (#1208)

3.0.0

NATS .NET 3.0 is now stable. This release has been in the works since early this year and brings OpenTelemetry tracing and metrics, .NET 10 target, and a number of API and behavior changes refined over the preview series. Thanks to everyone who tried the previews and reported issues along the way. There are no changes since 3.0.0-preview.11.

.NET 10 Target

3.0 targets netstandard2.0, netstandard2.1, net8.0, and net10.0. net6.0 has been dropped.

OpenTelemetry

Add OTel metrics support Add OTel metrics support nats-io/nats.net#1154
Add OpenTelemetry package (tracing) Add OpenTelemetry Package nats-io/nats.net#1172
Add custom span destination name formatter Add custom span destination name formatter nats-io/nats.net#1201
Add OTel ack/dropped metrics and collapse inbox trace tags Add OTel ack/dropped metrics and collapse inbox trace tags nats-io/nats.net#1194
Exclude NATS status frames from consumed metrics Exclude NATS status frames from consumed metrics nats-io/nats.net#1195
Fix server.port type and trace tag source Fix server.port type and trace tag source nats-io/nats.net#1175
Fix null-key tag in OpenTelemetry receive fallback Fix null-key tag in OpenTelemetry receive fallback nats-io/nats.net#1205
Match OpenTelemetry subject filters without per-message allocation Match OpenTelemetry subject filters without per-message allocation nats-io/nats.net#1206
Make shared OpenTelemetry instrumentation options thread-visible Make shared OpenTelemetry instrumentation options thread-visible nats-io/nats.net#1207

API and behavior changes

Add message context to serialization interfaces Add message context to serialization interfaces nats-io/nats.net#1082
Move socket connection interfaces to NATS.Client.Abstractions Move socket connection interfaces to NATS.Client.Abstractions nats-io/nats.net#1192
Default request-reply to Direct mode Default request-reply to Direct mode nats-io/nats.net#1182
Add explicit subscription and consumer drain Add explicit subscription and consumer drain nats-io/nats.net#1177
Deprecate SkipSubjectValidation Deprecate SkipSubjectValidation nats-io/nats.net#1180
Unify subscription channel overflow defaults Unify subscription channel overflow defaults nats-io/nats.net#1181
Use System.Threading.Lock on NET9_0_OR_GREATER Use System.Threading.Lock on NET9_0_OR_GREATER nats-io/nats.net#1118
Clean up NET6 and optimize NETSTANDARD Clean up NET6 and optimize NETSTANDARD nats-io/nats.net#1072
Update DI package dependencies and documentation Update DI package dependencies and documentation nats-io/nats.net#1075

Performance and internals

Optimize header handling with SearchValues Optimize header handling with SearchValues nats-io/nats.net#1203
Simplify object store base64url encoder Simplify object store base64url encoder nats-io/nats.net#1199

Tests and docs

Add abstractions package boundary test Add abstractions package boundary test nats-io/nats.net#1197
Gate positive-path test connections with ConnectRetryAsync Gate positive-path test connections with ConnectRetryAsync nats-io/nats.net#1198
Fix flaky CI tests Fix flaky CI tests nats-io/nats.net#1179
Remove stale net6.0 references Remove stale net6.0 references nats-io/nats.net#1196
Clarify AddNats vs AddNatsClient Clarify AddNats vs AddNatsClient nats-io/nats.net#1210

Thanks

Thanks to the community for the contributions and issue reports behind this release:

@colprog for the header handling optimization (#1203), the custom span destination name formatter (#1201), and requesting the explicit drain API (#1176)
... (truncated)

3.0.0-preview.11

Last planned preview on the 3.0 line centered on OpenTelemetry: a new NATS.Client.OpenTelemetry package, richer metrics, and lower-overhead tracing. Also moves the socket connection interfaces into NATS.Client.Abstractions and tightens the header-parsing hot path.

OpenTelemetry:

Add OpenTelemetry package (#1172)
Add custom span destination name formatter (#1201)
Add ack/dropped metrics and collapse inbox trace tags (#1194)
Exclude NATS status frames from consumed metrics (#1195)
Make shared instrumentation options thread-visible (#1207)
Match subject filters without per-message allocation (#1206)
Fix null-key tag in receive fallback (#1205)

Core & packaging:

Move socket connection interfaces to NATS.Client.Abstractions (#1192)
Add abstractions package boundary test (#1197)
Optimize header handling with SearchValues (#1203)
Simplify object store base64url encoder (#1199)
Gate positive-path test connections with ConnectRetryAsync (#1198)
Remove stale net6.0 references (#1196)

Thanks to @colprog for the custom span destination name formatter (#1201) and the SearchValues header optimization (#1203).

Thanks to everyone testing the previews so far. This should be the last one; please give it one more round of testing, and if no bugs turn up we'll cut the stable 3.0 release in about a week.

Full Changelog: nats-io/nats.net@v3.0.0-preview.10...v3.0.0-preview.11

3.0.0-preview.10

Bug-fix preview on the 3.0 line. Carries the ordered push consumer subscription teardown fixes from the 2.x line; no 3.0-only changes this round.

From the 2.x line:

jetstream: simplify ordered push consumer sub teardown (#1191)
jetstream: dispose ordered push consumer sub on teardown (#1188)

Full Changelog: nats-io/nats.net@v3.0.0-preview.9...v3.0.0-preview.10

3.0.0-preview.9

Ninth preview of NATS .NET 3.0. Request-reply now defaults to Direct mode, and subscriptions and consumers can be drained explicitly.

Heads-up: the default request-reply mode is now NatsRequestReplyMode.Direct (previously SharedInbox). Direct uses the same inbox prefix but skips per-reply muxer processing, making RequestAsync more resource-efficient. At the default it still throws NatsNoRespondersException on a no-responders reply, so existing RequestAsync behavior is preserved. If you already set RequestReplyMode explicitly to either mode, nothing changes for you. To keep the old default mechanism, set NatsOpts.RequestReplyMode = NatsRequestReplyMode.SharedInbox.

3.0-only changes:

Default request-reply to Direct mode (#1182)
Add explicit subscription and consumer drain (#1177)
Unify subscription channel overflow defaults (#1181)
Deprecate SkipSubjectValidation (#1180)
Fix OTel server.port tag type and source (#1175)

Also from the 2.x line:

Bump MessagePack 3.1.1 -> 3.1.7 (#1183)

Full Changelog: nats-io/nats.net@v3.0.0-preview.8...v3.0.0-preview.9

3.0.0-preview.8

Eighth preview of NATS .NET 3.0. Adds OpenTelemetry metrics support.

3.0-only changes:

Add OTel metrics support (#1154)

Thanks to @divyeshio (#629) and @thompson-tomo (#871) for earlier work toward OTel metrics, and @aradalvand for the OpenTelemetry tracing groundwork (#859, #907, #911) this builds on. Long-requested feature (#316); thanks also to @Cooksauce and @iby-dev for weighing in along the way.

Full Changelog: nats-io/nats.net@v3.0.0-preview.7...v3.0.0-preview.8

3.0.0-preview.7

Seventh preview of NATS .NET 3.0. Brings in everything released in 2.8.1: a Services helper for detecting error responses on the requester side, plus bug fixes across JetStream, KV, subscriptions, and connection logging. No 3.0-only changes.

From main (via 2.8.1):

Add helpers to detect Nats-Service-Error on responses (#1152)
Fix durable consumer create when only DurableName is set (#1150)
kv: cap duplicate_window at max_age (#1149)
Quiet recoverable server-error logs (#1148) (thanks @garrett-sutton)
Fix subscription timeout overflow (#1134) (thanks @Prochy)
test: fix Windows CI flaps (#1147)
docs: add JetStream basic example (#1138)

Full Changelog: nats-io/nats.net@v3.0.0-preview.6...v3.0.0-preview.7

3.0.0-preview.6

Sixth preview of NATS .NET 3.0. Brings in everything merged to main since preview.5: a new server error event on NatsConnection, slnx solution-format migration, README and example docs additions, and a CI matrix bump to nats-server v2.12. No 3.0-only changes.

From main:

Add server error event (#745)
Migrate solution to slnx format (#1131)
Add Client and Orbit section to README (#1133)
Add Example Docs (#1119)
ci: test against v2.12, drop v2.10 (#1136)

Full Changelog: nats-io/nats.net@v3.0.0-preview.5...v3.0.0-preview.6

3.0.0-preview.5

Fifth preview of NATS .NET 3.0. Brings in everything from 2.8.0-preview.3 via a main sync (nats-server 2.14 features and a fix for in-flight message loss on consumer dispose). No 3.0-only changes since preview.4.

From main (also in 2.8.0-preview.3):

Add consumer reset API (#1126, server 2.14)
Add $JS.FC support to JS metadata parser (#1127, server 2.14)
Add consumer field on stream source/mirror (#1128, server 2.14)
Fix message loss on consumer dispose (#1085)

Full Changelog: nats-io/nats.net@v3.0.0-preview.4...v3.0.0-preview.5

3.0.0-preview.4

Fourth preview of NATS .NET 3.0 ships nats-server v2.14 support: streams that opt into fast-ingest batch publishing per ADR-50 can now set the new AllowBatchPublish field on StreamConfig (the fast-ingest publisher itself will live in orbit.net alongside the existing atomic batch publisher). Also brings in everything from 2.8.0-preview.2 via the main sync, and switches to System.Threading.Lock on net9.0+ on the 3.0 line.

3.0-only since preview.3:

Use System.Threading.Lock on NET9_0_OR_GREATER (#1118)

From main (also in 2.8.0-preview.2):

Add AllowBatchPublish stream config field (#1120)
Bump OpenTelemetry and OpenTelemetry.Exporter.OpenTelemetryProtocol (#1121)
Fix setting wrong pin id from status header (#1116) (thanks @colprog)
Fix slow-consumer test first-ping RTT flap (#1115)
Fix net481 TLS test flakes (#1111)
Rewrite README intro (#1114)

Full Changelog: nats-io/nats.net@v3.0.0-preview.3...v3.0.0-preview.4

3.0.0-preview.3

Preview release on the 3.0 line. Brings in everything from 2.8.0-preview.1 via the main syncs, plus context-aware serialization. Three breaking changes in total, all intentional on the preview channel before stable 3.0. Please try it and report anything odd.

Package on NuGet: https://www.nuget.org/packages/NATS.Net

Breaking changes:

Subject validation is on by default. Subjects containing whitespace (space, tab, CR, LF) now throw. Opt out with SkipSubjectValidation = true on NatsOpts. Closes a class of CRLF injection issues from malformed subjects.
NATS.Client.Core.NKeys and NKeyPair are removed. Signing now goes through the NATS.NKeys package (https://www.nuget.org/packages/NATS.NKeys), which lets the nkey/Ed25519 code be versioned independently of the client.
Serializers that want access to message context during (de)serialization opt in via the new INatsSerializeWithContext<T> / INatsDeserializeWithContext<T> interfaces (or the combined INatsSerializerWithContext<T>). Existing serializers keep working unchanged; the library dispatches via runtime type check and falls back to the standard interface. Built-in serializers propagate the context through chains. The read-only flag on NatsHeaders is removed so context-aware serializers can mutate headers; a single NatsHeaders instance is no longer safe to share across concurrent publishes.

Also includes protocol size checks (64MB incoming payload cap, in line with nats.js), KV watcher cancellation fix, credential loading state reset on failure, and Pin ID handling improvements.

Thanks to the NATS community who contributed PRs, reviews, bug reports on this one ❤️

3.0-only since preview.2:

Add message context to serialization interfaces (#1082) [breaking] (thanks @adminnz)

From main (also in 2.8.0-preview.1):

auth: sign nonce regardless of auth_required (#1109) (thanks @Lionel-Zieminski)
auth: use NATS.NKeys package for nkey signing (#1101) [breaking]
conn: reset state on credential loading failure (#1107) (thanks @Prochy)
Improve package metadata and README (#1103)
tests: fix TlsPreferTest flap on net481 (#1108)
Fix release workflow (#1106)
Fix test flaps (#1083)
ci: add contents and actions read permissions to Claude workflow (#1102)
tls: document Prefer mode plaintext behavior (#1094)
tests: increase NuidTests thread join timeouts (#1100)
Improve Pin ID handling (#1099) (thanks @colprog)
Fix KV watcher cancellation behavior (#1084)
Clear ArrayPool buffers before returning to pool (#1097)
Enable subject validation by default (#1093) [breaking]
Add protocol size checks (#1095)
Fix Range attribute for MaxBytes property (#1096) (thanks @partnerRuiSilva)
Add CC reviews (#1092)

Full Changelog: nats-io/nats.net@v3.0.0-preview.2...v3.0.0-preview.3

3.0.0-preview.2

This is a main branch sync release.

Please see 2.7.3 release for details.

What's Changed

Fix error logs URI rewritten by OnConnectingAsync by @mtmk in Fix error logs URI rewritten by OnConnectingAsync nats-io/nats.net#1067
Add slow consumer docs by @mtmk in Add slow consumer docs nats-io/nats.net#1073
Add Synadia.Orbit.Testing.NatsServerProcessManager by @mtmk in Add Synadia.Orbit.Testing.NatsServerProcessManager nats-io/nats.net#1065
Add see-also references to Orbit packages by @mtmk in Add see-also references to Orbit packages nats-io/nats.net#1077
Add validation for unsupported PinnedClient calls by @mtmk in Add validation for unsupported PinnedClient calls nats-io/nats.net#1063
Add cancelled token handling for consumers by @mtmk in Add cancelled token handling for consumers nats-io/nats.net#1068
Fix code analyzer warning by @mtmk in Fix code analyzer warning nats-io/nats.net#1076
Add TermWithReason support to AckTerminateAsync by @mtmk in Add TermWithReason support to AckTerminateAsync nats-io/nats.net#1048
Add consumer info usage warnings by @mtmk in Add consumer info usage warnings nats-io/nats.net#1079
Clean up NET6 and optimize NETSTANDARD by @mtmk in Clean up NET6 and optimize NETSTANDARD nats-io/nats.net#1072
Update DI package dependencies and documentation by @mtmk in Update DI package dependencies and documentation nats-io/nats.net#1075
Fix OTel network telemetry tags by @mtmk in Fix OTel network telemetry tags nats-io/nats.net#1078
Rework TermWithReason by @rickdotnet in Rework TermWithReason nats-io/nats.net#1081
Fix PingCommand cancellation by @mtmk in Fix PingCommand cancellation nats-io/nats.net#1086
Bump Microsoft.Bcl.Memory from 9.0.0 to 9.0.14 by @dependabot[bot] in Bump Microsoft.Bcl.Memory from 9.0.0 to 9.0.14 nats-io/nats.net#1089
Add optional window_size parameter to StreamSnapshotRequest by @darkwatchuk in Add optional window_size parameter to StreamSnapshotRequest nats-io/nats.net#1088
Release 2.7.3 by @mtmk in Release 2.7.3 nats-io/nats.net#1090
Release 3.0.0-preview.2 by @mtmk in Release 3.0.0-preview.2 nats-io/nats.net#1091

Full Changelog: nats-io/nats.net@v3.0.0-preview.1...v3.0.0-preview.2

2.8.2

Patch release on the 2.8 line. Fixes ordered push consumer subscription teardown. Thanks to @haoguanjun for the fix.

What's Changed

Bump MessagePack from 3.1.1 to 3.1.7 Bump MessagePack from 3.1.1 to 3.1.7 nats-io/nats.net#1183
Clarify DI package descriptions Clarify DI package descriptions nats-io/nats.net#1163
Fix ordered push consumer subscription leak on teardown Fix ordered push consumer subscription leak on teardown nats-io/nats.net#1188
Simplify ordered push consumer sub teardown Simplify ordered push consumer sub teardown nats-io/nats.net#1191
Release 2.8.2 Release 2.8.2 nats-io/nats.net#1189

Full Changelog: nats-io/nats.net@v2.8.1...v2.8.2

2.8.1

Patch release on the 2.8 line. Bug fixes across JetStream, KV, subscriptions, and connection logging, plus a small Services helper for handling error responses on the requester side.

What's Changed

Add helpers to detect Nats-Service-Error on responses (#1152)
Fix durable consumer create when only DurableName is set (#1150)
kv: cap duplicate_window at max_age (#1149)
Quiet recoverable server-error logs (#1148) (thanks @garrett-sutton)
Fix subscription timeout overflow (#1134) (thanks @Prochy)
test: fix Windows CI flaps (#1147)
docs: add JetStream basic example (#1138)

New Services Extensions

Detect service errors on responses (#1152)

Services signal failures using Nats-Service-Error / Nats-Service-Error-Code response headers. The requester side previously had to read those headers by hand. New extensions on NatsMsg<T> (in the NATS.Net namespace) cover the common patterns:

var reply = await nats.RequestAsync<MyReq, MyResp>("svc.echo", req);

if (reply.IsServiceSuccess())
{
    // use reply.Data
}

// or throw on error
reply.EnsureServiceSuccess();

// or inspect the status
var status = reply.GetServiceStatus();
// status.IsSuccess, status.Code, status.Message, status.HasNoResponders

Full Changelog: nats-io/nats.net@v2.8.0...v2.8.1

Download from NuGet at https://www.nuget.org/packages/NATS.Net/2.8.1

2.8.0

Happy to announce the NATS .NET 2.8.0 stable release of the 2.8 line. It picks up the NATS Server v2.14 client surface (consumer reset, $JS.FC.* flow-control replies, Consumer field on stream source/mirror, AllowBatchPublish on stream config), ships two breaking changes that landed in the preview cycle, and fixes in-flight message loss on consumer/connection dispose behind an opt-in drain.

A big thank you to all NATS contributors and community members who helped make this release possible. <3

NATS Server v2.14 Features

ResetConsumerAsync on INatsJSContext and INatsJSConsumer (ADR-60), to reset a pinned consumer's state (#1126).
$JS.FC.* flow-control replies are parsed by the JS metadata layer, for streams that publish with the js_ack_fc_v2 flag (#1127).
Consumer field on StreamSource and stream mirror config, for pre-created mirror/source consumers (#1128).
AllowBatchPublish on StreamConfig (JSON allow_batched), required by streams that opt into fast-ingest batch publishing per ADR-50 (#1120). The fast-ingest publisher itself lives in orbit.net alongside the existing atomic batch publisher.

Breaking Changes

Subject Validation On By Default (#1093)

Subjects containing whitespace (space, tab, CR, LF) now throw NatsException. This closes a class of CRLF injection issues from malformed subjects.

Opt out if you rely on legacy subjects that contain whitespace:

var opts = NatsOpts.Default with { SkipSubjectValidation = true };

NKeyPair Removed From NATS.Client.Core (#1101)

NATS.Client.Core.NKeys and NKeyPair are removed. Signing now goes through the NATS.NKeys package, which lets the nkey/Ed25519 code be versioned independently of the client.

For typical users this is transparent: keep using NatsAuthOpts.NKeyFile, CredsFile, Jwt + Seed, or AuthCredCallback and the client wires up the new signer automatically.

Only direct callers of NATS.Client.Core.NKeyPair need to switch:

// Before
using NATS.Client.Core;
var kp = NKeyPair.FromSeed(seed);
var sig = kp.Sign(nonce);

// After
using NATS.NKeys;
var kp = KeyPair.FromSeed(seed);
var sig = kp.Sign(nonce);

Other Notable Changes

Server error event (#745): a new event on NatsConnection surfaces server-side errors to client code.
Message loss on consumer dispose (#1085): opt-in drain keeps in-flight messages from being dropped when a consumer or connection is disposed. Enable with:

... (truncated)

2.8.0-preview.3

Third preview of NATS .NET 2.8 completes the nats-server v2.14 feature set for the client. See PRs below for specifics.

This release also includes a fix for in-flight message loss on consumer/connection dispose. The new drain path is opt-in, so defaults preserve current behavior. The dispose ordering refactor touches a hot path though, so please give your workloads a once-over and report anything that looks off.

Opt in:

var opts = NatsOpts.Default with
{
    DrainSubscriptionsOnDispose = true,
    ConsumerDrainOnDisposeTimeout = TimeSpan.FromSeconds(10),
};

Changes:

Add consumer reset API (#1126)
Add $JS.FC support to JS metadata parser (#1127)
Add consumer field on stream source/mirror (#1128)
Fix message loss on consumer dispose (#1085)

Full Changelog: nats-io/nats.net@v2.8.0-preview.2...v2.8.0-preview.3

2.8.0-preview.2

Second preview of NATS .NET 2.8 ships nats-server v2.14 support: streams that opt into fast-ingest batch publishing per ADR-50 can now set the new AllowBatchPublish field on StreamConfig (the fast-ingest publisher itself will live in orbit.net alongside the existing atomic batch publisher). Also picks up a Pin ID handling fix for duplicate status headers, the new flat README intro, and assorted CI and test flake fixes.

Changes:

Add AllowBatchPublish stream config field (#1120)
Bump OpenTelemetry and OpenTelemetry.Exporter.OpenTelemetryProtocol (#1121)
Fix setting wrong pin id from status header (#1116) (thanks @colprog)
Fix slow-consumer test first-ping RTT flap (#1115)
Fix net481 TLS test flakes (#1111)
Rewrite README intro (#1114)

Full Changelog: nats-io/nats.net@v2.8.0-preview.1...v2.8.0-preview.2

2.8.0-preview.1

Happy to ship the first preview of NATS .NET 2.8. The theme of this release is tightening the protocol layer and shrinking the core API surface, so this preview carries two breaking changes. Please try it and report anything odd before we cut the stable.

Package on NuGet: https://www.nuget.org/packages/NATS.Net

Breaking changes:

Subject validation is on by default. Subjects containing whitespace (space, tab, CR, LF) now throw. This closes a class of CRLF injection issues from malformed subjects. Opt out with SkipSubjectValidation = true on NatsOpts.
NATS.Client.Core.NKeys and NKeyPair are removed. Signing now goes through the NATS.NKeys package (https://www.nuget.org/packages/NATS.NKeys), which lets the nkey/Ed25519 code be versioned independently of the client.

Also includes protocol size checks (64MB incoming payload cap, in line with nats.js), KV watcher cancellation fix, credential loading state reset on failure, and Pin ID handling improvements.

Thanks to the NATS community who contributed PRs, reviews, and bug reports on this one ❤️

auth: sign nonce regardless of auth_required (#1109) (thanks @Lionel-Zieminski)
auth: use NATS.NKeys package for nkey signing (#1101) [breaking]
conn: reset state on credential loading failure (#1107) (thanks @Prochy)
Improve package metadata and README (#1103)
tests: fix TlsPreferTest flap on net481 (#1108)
Fix release workflow (#1106)
Fix test flaps (#1083)
ci: add contents and actions read permissions to Claude workflow (#1102)
tls: document Prefer mode plaintext behavior (#1094)
tests: increase NuidTests thread join timeouts (#1100)
Improve Pin ID handling (#1099) (thanks @colprog)
Fix KV watcher cancellation behavior (#1084)
Clear ArrayPool buffers before returning to pool (#1097)
Enable subject validation by default (#1093) [breaking]
Add protocol size checks (#1095)
Fix Range attribute for MaxBytes property (#1096) (thanks @partnerRuiSilva)
Add CC reviews (#1092)

Full Changelog: nats-io/nats.net@v2.7.3...v2.8.0-preview.1

Commits viewable in compare view.

Updated OpenTelemetry.Exporter.OpenTelemetryProtocol from 1.16.0 to 1.18.0.

Release notes

Sourced from OpenTelemetry.Exporter.OpenTelemetryProtocol's releases.

1.18.0

For highlights and announcements pertaining to this release see: Release Notes > 1.18.0.

The following changes are from the previous release 1.17.0.

NuGet: OpenTelemetry v1.18.0
- Fixed self-diagnostics log lines being silently dropped when an event message or parameter contained enough 3-byte UTF-8 characters to overflow the internal buffer estimate. Such content is now truncated.
  (#7543)
- Fixed activity creation throwing when multiple tracer providers return a sampler attribute with the same key.
  (#7558)
- Added the otel.sdk.processor.log.processed SDK self-observability metric.
  (#7486)
- Added the otel.sdk.processor.span.processed SDK self-observability metric.
  (#7598)
- BatchActivityExportProcessor and SimpleActivityExportProcessor no longer forward spans to the exporter once Shutdown has been called, and BatchActivityExportProcessor.Shutdown now waits for in-flight OnEnd calls to finish enqueueing before flushing.
  (#7598)
- Fix logger, meter and tracer providers leaking background threads if an exception is thrown by their constructor after resource creation.
  (#7615)
- CircularBufferBuckets.Copy optimized to use bulk array copies.
  (#7670)
- Restored configured MaxScale after delta exponential histogram collection.
  (#7671)
See CHANGELOG for details.
NuGet: OpenTelemetry.Api v1.18.0
- Avoid formatting exceptions and creating exception attributes when RecordException is called on a span that is not recorded.
  (#7669)
See CHANGELOG for details.
NuGet: OpenTelemetry.Api.ProviderBuilderExtensions v1.18.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.Console v1.18.0
- Added support for serializing attribute values that are key/value lists (IEnumerable<KeyValuePair<string, object?>>). These attributes will be serialized as JSON objects.
  (#7015)

... (truncated)

1.18.0-rc.1

The following changes are from the previous release 1.17.0.

NuGet: OpenTelemetry v1.18.0-rc.1
- Fixed self-diagnostics log lines being silently dropped when an event message or parameter contained enough 3-byte UTF-8 characters to overflow the internal buffer estimate. Such content is now truncated.
  (#7543)
- Fixed activity creation throwing when multiple tracer providers return a sampler attribute with the same key.
  (#7558)
- Added the otel.sdk.processor.log.processed SDK self-observability metric.
  (#7486)
- Added the otel.sdk.processor.span.processed SDK self-observability metric.
  (#7598)
- BatchActivityExportProcessor and SimpleActivityExportProcessor no longer forward spans to the exporter once Shutdown has been called, and BatchActivityExportProcessor.Shutdown now waits for in-flight OnEnd calls to finish enqueueing before flushing.
  (#7598)
- Fix logger, meter and tracer providers leaking background threads if an exception is thrown by their constructor after resource creation.
  (#7615)
- CircularBufferBuckets.Copy optimized to use bulk array copies.
  (#7670)
- Restored configured MaxScale after delta exponential histogram collection.
  (#7671)
See CHANGELOG for details.
NuGet: OpenTelemetry.Api v1.18.0-rc.1
- Avoid formatting exceptions and creating exception attributes when RecordException is called on a span that is not recorded.
  (#7669)
See CHANGELOG for details.
NuGet: OpenTelemetry.Api.ProviderBuilderExtensions v1.18.0-rc.1

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.Console v1.18.0-rc.1
- Added support for serializing attribute values that are key/value lists (IEnumerable<KeyValuePair<string, object?>>). These attributes will be serialized as JSON objects.
  (#7015)
See CHANGELOG for details.

... (truncated)

1.18.0-beta.1

The following changes are from the previous release 1.17.0-beta.1.

NuGet: OpenTelemetry.Exporter.Prometheus.AspNetCore v1.18.0-beta.1
- Fix concurrent scrapes returning an empty response under contention. Now the exporter will return an HTTP 500 error instead.
  (#7571)
- Waiting for concurrent scrapes to finish before collecting no longer blocks, which could stall concurrent scrapes being waited on.
  (#7571)
- Fixed the interaction between PrometheusAspNetCoreOptions.TranslationStrategy and content negotiation. The configured strategy is now applied before content negotiation, instead of the negotiated escaping scheme replacing the strategy's, and the Content-Type header now reports the escaping scheme that was applied rather than the one that was negotiated.
  (#7610)
- Fixed metric values and histogram bucket bounds being written with 17 significant digits instead of their shortest round-trippable representation.
  (#7589)
- Fixed the canonical representation used for histogram le and summary quantile label values falling back to 17 significant digits incorrectly.
  (#7589)
- Fixed a race where a slow scrape could return an HTTP 200 instead of 408.
  (#7615)
- Updated OpenTelemetry core component version(s) to 1.18.0.
  (#7674)
See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.Prometheus.HttpListener v1.18.0-beta.1
- Fix concurrent scrapes returning an empty response under contention. Now the exporter will return an HTTP 500 error instead.
  (#7571)
- Waiting for concurrent scrapes to finish before collecting no longer blocks, which could stall concurrent scrapes being waited on.
  (#7571)
- A scrape which is still collecting when the listener is disposed now returns an HTTP 503 response.
  (#7587)
- Shutting down the listener no longer waits indefinitely for its request processing loop to stop, and no longer throws if the loop faulted.
  (#7587)
- Fixed the interaction between PrometheusHttpListenerOptions.TranslationStrategy and content negotiation. The configured strategy is now applied before content negotiation, instead of the negotiated escaping scheme replacing the strategy's, and the Content-Type header now reports the escaping scheme that was applied rather than the one that was negotiated.
  (#7610)
- Fixed metric values and histogram bucket bounds being written with 17 significant digits instead of their shortest round-trippable representation.
  (#7589)
- Fixed the canonical representation used for histogram le and summary quantile label values falling back to 17 significant digits incorrectly.
  (#7589)

... (truncated)

1.17.0

For highlights and announcements pertaining to this release see: Release Notes > 1.17.0.

The following changes are from the previous release 1.17.0-rc.1.

NuGet: OpenTelemetry v1.17.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Api v1.17.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Api.ProviderBuilderExtensions v1.17.0

No notable changes.

See [CHANGELOG](https://github.com/open-telemetry/...

Description has been truncated

Bumps Avalonia.Desktop from 11.3.18 to 12.1.1 Bumps Avalonia.Fonts.Inter from 11.3.18 to 12.1.1 Bumps Avalonia.Themes.Fluent from 11.3.18 to 12.1.1 Bumps Microsoft.AspNetCore.Authentication.JwtBearer from 10.0.1 to 10.0.11 Bumps Microsoft.AspNetCore.Authentication.OpenIdConnect from 10.0.3 to 10.0.11 Bumps Microsoft.AspNetCore.Mvc.Testing from 10.0.1 to 10.0.11 Bumps Microsoft.Extensions.Hosting from 10.0.3 to 10.0.11 Bumps Microsoft.Extensions.Http from 10.0.3 to 10.0.11 Bumps Microsoft.NET.Test.Sdk from 17.14.1 to 18.9.0 Bumps NATS.Net from 2.7.3 to 3.1.0 Bumps OpenTelemetry.Exporter.OpenTelemetryProtocol from 1.16.0 to 1.18.0 Bumps OpenTelemetry.Extensions.Hosting from 1.16.0 to 1.18.0 Bumps OpenTelemetry.Instrumentation.AspNetCore from 1.16.0 to 1.18.0 Bumps OpenTelemetry.Instrumentation.Runtime from 1.16.0 to 1.18.0 Bumps StackExchange.Redis from 3.0.17 to 3.1.31 Bumps xunit.runner.visualstudio from 3.1.1 to 4.0.0 Bumps xunit.v3 from 3.0.1 to 4.0.0 --- updated-dependencies: - dependency-name: Avalonia.Desktop dependency-version: 12.1.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: nuget-dependencies - dependency-name: Avalonia.Fonts.Inter dependency-version: 12.1.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: nuget-dependencies - dependency-name: Avalonia.Themes.Fluent dependency-version: 12.1.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: nuget-dependencies - dependency-name: Microsoft.AspNetCore.Authentication.JwtBearer dependency-version: 10.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-dependencies - dependency-name: Microsoft.AspNetCore.Authentication.OpenIdConnect dependency-version: 10.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-dependencies - dependency-name: Microsoft.AspNetCore.Mvc.Testing dependency-version: 10.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-dependencies - dependency-name: Microsoft.Extensions.Hosting dependency-version: 10.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-dependencies - dependency-name: Microsoft.Extensions.Hosting dependency-version: 10.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-dependencies - dependency-name: Microsoft.Extensions.Http dependency-version: 10.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-dependencies - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 18.9.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: nuget-dependencies - dependency-name: NATS.Net dependency-version: 3.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: nuget-dependencies - dependency-name: NATS.Net dependency-version: 3.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: nuget-dependencies - dependency-name: OpenTelemetry.Exporter.OpenTelemetryProtocol dependency-version: 1.18.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-dependencies - dependency-name: OpenTelemetry.Extensions.Hosting dependency-version: 1.18.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-dependencies - dependency-name: OpenTelemetry.Instrumentation.AspNetCore dependency-version: 1.18.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-dependencies - dependency-name: OpenTelemetry.Instrumentation.Runtime dependency-version: 1.18.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-dependencies - dependency-name: StackExchange.Redis dependency-version: 3.1.31 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-dependencies - dependency-name: xunit.runner.visualstudio dependency-version: 4.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: nuget-dependencies - dependency-name: xunit.v3 dependency-version: 4.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: nuget-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Aug 22, 2026

Navigation Menu

Bump the nuget-dependencies group with 17 updates - #67

Bump the nuget-dependencies group with 17 updates#67
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/backend/Certael.AnalyticsWorker/nuget-dependencies-1a642314d2

dependabot Bot commented on behalf of github Aug 22, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Aug 22, 2026

18.9.0

What's Changed

New Contributors

18.8.1

What's Changed

18.8.0

What's Changed

18.7.0

What's Changed

New Contributors

18.6.0

What's Changed

Changes to tests and infra

18.5.1

What's Changed

18.5.0

What's Changed

18.4.0

What's Changed

New Contributors

18.3.0

What's Changed

Internal fixes and updates

New Contributors

18.0.1

What's Changed

Internal changes

18.0.0

What's Changed

Internal fixes and updates

3.1.0

Thanks

3.0.1

Thanks

3.0.0

.NET 10 Target

OpenTelemetry

API and behavior changes

Performance and internals

Tests and docs

Thanks

3.0.0-preview.11

3.0.0-preview.10

3.0.0-preview.9

3.0.0-preview.8

3.0.0-preview.7

3.0.0-preview.6

3.0.0-preview.5

3.0.0-preview.4

3.0.0-preview.3

3.0.0-preview.2

What's Changed

2.8.2

What's Changed

2.8.1

What's Changed

New Services Extensions

Detect service errors on responses (#​1152)

2.8.0

NATS Server v2.14 Features

Breaking Changes

Subject Validation On By Default (#​1093)

NKeyPair Removed From NATS.Client.Core (#​1101)

Other Notable Changes

2.8.0-preview.3

2.8.0-preview.2

2.8.0-preview.1

1.18.0

1.18.0-rc.1

1.18.0-beta.1

1.17.0

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Detect service errors on responses (#1152)

Subject Validation On By Default (#1093)

NKeyPair Removed From NATS.Client.Core (#1101)