From 6c59dd32681f6be0e0eb895fbe186ccd5e42ece8 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 27 Oct 2026 22:24:20 +0000
Subject: [PATCH] chore(deps): Bump the dotnet group with 12 updates

Bumps bunit from 2.11.3 to 2.12.5
Bumps FsCheck from 3.4.0 to 3.5.0
Bumps HotChocolate.Types from 16.6.8 to 16.6.9
Bumps HotChocolate.Types.Analyzers from 16.6.8 to 16.6.9
Bumps LateApexEarlySpeed.Json.Schema from 4.2.0 to 4.2.2
Bumps MessagePack from 3.1.11 to 3.1.12
Bumps Microsoft.Agents.AI from 1.24.0 to 1.25.0
Bumps Microsoft.Extensions.AI.Abstractions from 10.10.1 to 10.11.0
Bumps Microsoft.Extensions.AI.OpenAI from 10.10.1 to 10.11.0
Bumps Microsoft.NET.Test.Sdk from 18.10.1 to 18.11.0
Bumps Microsoft.SourceLink.GitHub from 10.0.401 to 10.0.402
Bumps Swashbuckle.AspNetCore.SwaggerGen from 10.3.0 to 10.3.1

---
updated-dependencies:
- dependency-name: bunit
  dependency-version: 2.12.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
- dependency-name: FsCheck
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
- dependency-name: HotChocolate.Types
  dependency-version: 16.6.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: HotChocolate.Types.Analyzers
  dependency-version: 16.6.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: LateApexEarlySpeed.Json.Schema
  dependency-version: 4.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: MessagePack
  dependency-version: 3.1.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: Microsoft.Agents.AI
  dependency-version: 1.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
- dependency-name: Microsoft.Extensions.AI.Abstractions
  dependency-version: 10.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
- dependency-name: Microsoft.Extensions.AI.OpenAI
  dependency-version: 10.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
- dependency-name: Microsoft.SourceLink.GitHub
  dependency-version: 10.0.402
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: Swashbuckle.AspNetCore.SwaggerGen
  dependency-version: 10.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 Directory.Packages.props | 24 ++++++++++++------------
 1 file changed, 12 insertions(+), 12 deletions(-)

diff --git a/Directory.Packages.props b/Directory.Packages.props
index 112d58e0..def0a75d 100644
--- a/Directory.Packages.props
+++ b/Directory.Packages.props
@@ -7,7 +7,7 @@
 
   <ItemGroup Label="Build">
     <PackageVersion Include="MinVer" Version="6.1.0" />
-    <PackageVersion Include="Microsoft.SourceLink.GitHub" Version="10.0.401" />
+    <PackageVersion Include="Microsoft.SourceLink.GitHub" Version="10.0.402" />
   </ItemGroup>
 
   <ItemGroup Label="Source generators and analyzers">
@@ -47,7 +47,7 @@
          a decision, not a bump (docs/adr/0010-version-every-package-in-lockstep-independently-of-dotnet.md). No version is
          pinned for Swashbuckle.AspNetCore.Swagger, which the tests take through it: a pin would make it a dependency of
          the package. -->
-    <PackageVersion Include="Swashbuckle.AspNetCore.SwaggerGen" Version="10.3.0" />
+    <PackageVersion Include="Swashbuckle.AspNetCore.SwaggerGen" Version="10.3.1" />
     <!-- The Serilog package's floor, the version it is built against
          (docs/adr/0010-version-every-package-in-lockstep-independently-of-dotnet.md). Its net10.0 asset depends on
          nothing. -->
@@ -60,7 +60,7 @@
          (docs/adr/0010-version-every-package-in-lockstep-independently-of-dotnet.md). MessagePack 3 lifts the 2.5.302 the
          hub protocol asks for. MessagePack.Annotations and MessagePackAnalyzer come with MessagePack and are pinned by
          nothing here: a pin would make them dependencies of the package. -->
-    <PackageVersion Include="MessagePack" Version="3.1.11" />
+    <PackageVersion Include="MessagePack" Version="3.1.12" />
     <PackageVersion Include="Microsoft.AspNetCore.SignalR.Protocols.MessagePack" Version="10.0.13" />
     <!-- The test-data packages' floors, the versions they are built against
          (docs/adr/0010-version-every-package-in-lockstep-independently-of-dotnet.md). AutoFixture stays on 4.18.1 while
@@ -69,11 +69,11 @@
          dependencies of the packages. -->
     <PackageVersion Include="AutoFixture" Version="4.18.1" />
     <PackageVersion Include="Bogus" Version="35.6.5" />
-    <PackageVersion Include="FsCheck" Version="3.4.0" />
+    <PackageVersion Include="FsCheck" Version="3.5.0" />
     <!-- The AI package's floor, the version it is built against
          (docs/adr/0010-version-every-package-in-lockstep-independently-of-dotnet.md). Its net10.0 asset depends on
          nothing. -->
-    <PackageVersion Include="Microsoft.Extensions.AI.Abstractions" Version="10.10.1" />
+    <PackageVersion Include="Microsoft.Extensions.AI.Abstractions" Version="10.11.0" />
     <!-- The Model Context Protocol package's floor, the version it is built against
          (docs/adr/0010-version-every-package-in-lockstep-independently-of-dotnet.md). ModelContextProtocol.Core comes with
          it at exactly that version, and Microsoft.Extensions.Hosting.Abstractions and Caching.Abstractions at their
@@ -95,7 +95,7 @@
          (docs/adr/0010-version-every-package-in-lockstep-independently-of-dotnet.md); HotChocolate 17 is a decision, not a
          bump. Its other HotChocolate and GreenDonut packages come with it, at exactly its version, and are pinned by
          nothing here: a pin would make them dependencies of the package. -->
-    <PackageVersion Include="HotChocolate.Types" Version="16.6.8" />
+    <PackageVersion Include="HotChocolate.Types" Version="16.6.9" />
     <!-- IStringLocalizerFactory, for the HotChocolate package's localized messages; its net10.0 asset depends on nothing.
          The Blazor package takes it through Microsoft.Extensions.Localization, and pinning lists it as a dependency of
          both. -->
@@ -128,7 +128,7 @@
   </ItemGroup>
 
   <ItemGroup Label="Testing">
-    <PackageVersion Include="Microsoft.NET.Test.Sdk" Version="18.10.1" />
+    <PackageVersion Include="Microsoft.NET.Test.Sdk" Version="18.11.0" />
     <PackageVersion Include="xunit.v3" Version="4.0.2" />
     <PackageVersion Include="xunit.v3.extensibility.core" Version="4.0.2" />
     <PackageVersion Include="xunit.v3.assert" Version="4.0.2" />
@@ -170,7 +170,7 @@
          through, as a test of an application's form does; no package under src/ references it. It asks for Components
          10.0.10, which the pin of Microsoft.AspNetCore.Components.Web lifts, and the project loads the shared
          framework's Components assemblies. -->
-    <PackageVersion Include="bunit" Version="2.11.3" />
+    <PackageVersion Include="bunit" Version="2.12.5" />
     <!-- ObservableValidator, the view model base that validates DataAnnotations attributes as a property is set, which
          the unit suite runs [ParsesAs] and [NotDefault] through; no package under src/ references it. -->
     <PackageVersion Include="CommunityToolkit.Mvvm" Version="8.4.2" />
@@ -179,7 +179,7 @@
     <!-- Validates what the serializer writes against the JSON Schema exported for it, under draft 2020-12, the draft
          System.Text.Json exports. BSD-3-Clause, as is the package of its author it depends on, the others being
          Microsoft's, under MIT; JsonSchema.Net, which it replaces, moved to the Open Source Maintenance Fee EULA at 9.0. -->
-    <PackageVersion Include="LateApexEarlySpeed.Json.Schema" Version="4.2.0" />
+    <PackageVersion Include="LateApexEarlySpeed.Json.Schema" Version="4.2.2" />
     <!-- The attribute a consumer derives to classify a value object as personal data, which the generator recognizes
          by name: the tests classify value objects as a consumer does, and no package under src/ references it. At the
          version Microsoft.Extensions.Telemetry.Abstractions asks for, which a lower pin would fail the restore of
@@ -201,10 +201,10 @@
          application does, and the OpenAI adapter whose strict-mode request it captures; no package under src/ references
          them. Microsoft.Extensions.AI has no 10.10.1. -->
     <PackageVersion Include="Microsoft.Extensions.AI" Version="10.10.0" />
-    <PackageVersion Include="Microsoft.Extensions.AI.OpenAI" Version="10.10.1" />
+    <PackageVersion Include="Microsoft.Extensions.AI.OpenAI" Version="10.11.0" />
     <!-- Agent Framework's ChatClientAgent, which the unit suite runs the AI package's tools and response format through,
          as an application does; no package under src/ references it. -->
-    <PackageVersion Include="Microsoft.Agents.AI" Version="1.24.0" />
+    <PackageVersion Include="Microsoft.Agents.AI" Version="1.25.0" />
     <!-- The Functions application the integration suite runs in the host's container: the worker's build, and the queue
          trigger whose binding data it reads; no package under src/ references them. -->
     <PackageVersion Include="Microsoft.Azure.Functions.Worker.Sdk" Version="2.1.0" />
@@ -212,7 +212,7 @@
     <!-- What the unit suite drives the HotChocolate packages through, as an application does: the HTTP endpoint and, in a
          fixture, HotChocolate's source generator; no package under src/ references them. -->
     <PackageVersion Include="HotChocolate.AspNetCore" Version="16.6.8" />
-    <PackageVersion Include="HotChocolate.Types.Analyzers" Version="16.6.8" />
+    <PackageVersion Include="HotChocolate.Types.Analyzers" Version="16.6.9" />
     <!-- NSwag's document generation over TestHost and its C# client generator, and Confluent's JSON serdes for the Schema
          Registry over a substitute registry client, which the unit suite drives the NJsonSchema package through, as an
          application does; no package under src/ references them. The Kafka client's native library comes with the serdes