Bump the version-updates group with 11 updates

[dependabot]

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

---

Updated Asm from 3.8.169 to 3.8.223.

Release notes

Sourced from Asm's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Asm.AspNetCore from 3.8.169 to 3.8.223.

Release notes

Sourced from Asm.AspNetCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Asm.AspNetCore.Api from 3.8.169 to 3.8.223.

Release notes

Sourced from Asm.AspNetCore.Api's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Asm.Cqrs.AspNetCore from 3.8.169 to 3.8.223.

Release notes

Sourced from Asm.Cqrs.AspNetCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Asm.Domain from 3.8.169 to 3.8.223.

Release notes

Sourced from Asm.Domain's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Asm.Domain.Infrastructure from 3.8.169 to 3.8.223.

Release notes

Sourced from Asm.Domain.Infrastructure's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Asm.Testing.Domain from 3.8.169 to 3.8.223.

Release notes

Sourced from Asm.Testing.Domain's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated MessagePack from 3.1.7 to 3.1.8.

Release notes

Sourced from MessagePack's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Identity.Client from 4.85.2 to 4.86.0.

Release notes

Sourced from Microsoft.Identity.Client's releases.

4.86.0

What's Changed

• Propagate KeyGuard attestation failures and bridge native MAA logs to the MSAL logger by @​gladjohn in Propagate KeyGuard attestation failures and bridge native MAA logs to the MSAL logger AzureAD/microsoft-authentication-library-for-dotnet#6081
• Token Binding Demo Helper by @​gladjohn in Token Binding Demo Helper AzureAD/microsoft-authentication-library-for-dotnet#6097
• Include ManagedIdentitySource in managed identity error messages and request-failure logs by @​Robbie-Microsoft in Include ManagedIdentitySource in managed identity error messages and request-failure logs AzureAD/microsoft-authentication-library-for-dotnet#6101
• Remove Mooncake (AzureChinaCloud) lab client from WAM dev apps by @​RyAuld in Remove Mooncake (AzureChinaCloud) lab client from WAM dev apps AzureAD/microsoft-authentication-library-for-dotnet#6103
• Surface token-acquisition failure metadata on MsalException by @​neha-bhargava in Surface token-acquisition failure metadata on MsalException AzureAD/microsoft-authentication-library-for-dotnet#6096
• Skip IMDS lookup for explicit regions by @​4gust in Skip IMDS lookup for explicit regions AzureAD/microsoft-authentication-library-for-dotnet#6092
• Fix region failure-metadata test broken by explicit-region IMDS skip by @​neha-bhargava in Fix region failure-metadata test broken by explicit-region IMDS skip AzureAD/microsoft-authentication-library-for-dotnet#6105

Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@4.85.2...4.86.0

Commits viewable in compare view.

Updated ModelContextProtocol from 1.4.0 to 1.4.1.

Release notes

Sourced from ModelContextProtocol's releases.

1.4.1

This release backports a memory-leak fix for HTTP/SSE-based MCP servers. StreamableHttpServerTransport now releases its Server-Sent Events response stream reference as soon as a GET request ends, instead of holding it until the session is disposed via explicit DELETE or idle timeout. Long-lived SSE clients that disconnect without sending DELETE no longer pin the underlying Kestrel connection and its associated memory-pool buffers (~20 MiB per session), preventing the sustained memory growth that could accumulate under connect/disconnect churn.

What's Changed

• Release SSE response stream reference when GET request ends #​1628 by @​halter73 (co-authored by @​joelmforsyth @​Copilot)

Acknowledgements

• @​slomangino123 submitted issue #​766 (resolved by #​1628)

Full Changelog: modelcontextprotocol/csharp-sdk@v1.4.0...v1.4.1

Commits viewable in compare view.

Updated ModelContextProtocol.AspNetCore from 1.4.0 to 1.4.1.

Release notes

Sourced from ModelContextProtocol.AspNetCore's releases.

1.4.1

This release backports a memory-leak fix for HTTP/SSE-based MCP servers. StreamableHttpServerTransport now releases its Server-Sent Events response stream reference as soon as a GET request ends, instead of holding it until the session is disposed via explicit DELETE or idle timeout. Long-lived SSE clients that disconnect without sending DELETE no longer pin the underlying Kestrel connection and its associated memory-pool buffers (~20 MiB per session), preventing the sustained memory growth that could accumulate under connect/disconnect churn.

What's Changed

• Release SSE response stream reference when GET request ends #​1628 by @​halter73 (co-authored by @​joelmforsyth @​Copilot)

Acknowledgements

• @​slomangino123 submitted issue #​766 (resolved by #​1628)

Full Changelog: modelcontextprotocol/csharp-sdk@v1.4.0...v1.4.1

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

Summary

Assembly	Line coverage	Branch coverage
Asm.MooBank	83.5%	77%
Asm.MooBank.Api	22.3%	70%
Asm.MooBank.Domain	91.2%	85.8%
Asm.MooBank.Infrastructure	83.4%	78.2%
Asm.MooBank.Institution.AustralianSuper	74.7%	69.1%
Asm.MooBank.Institution.Ing	69%	69.3%
Asm.MooBank.Institution.Macquarie	92.5%	81.4%
Asm.MooBank.Models	96.7%	88.8%
Asm.MooBank.Modules.Accounts	92.5%	76.1%
Asm.MooBank.Modules.Assets	74.7%	91.6%
Asm.MooBank.Modules.Bills	97.3%	81.7%
Asm.MooBank.Modules.Budgets	92.9%	93.6%
Asm.MooBank.Modules.Families	100%	100%
Asm.MooBank.Modules.Forecast	85.4%	82%
Asm.MooBank.Modules.Groups	100%	100%
Asm.MooBank.Modules.Institutions	100%	100%
Asm.MooBank.Modules.Instruments	93%	66%
Asm.MooBank.Modules.ReferenceData	43.4%	****
Asm.MooBank.Modules.Reports	71.1%	63.4%
Asm.MooBank.Modules.Stocks	84.5%	79.5%
Asm.MooBank.Modules.Tags	96.6%	75%
Asm.MooBank.Modules.Transactions	83.1%	72.7%
Asm.MooBank.Modules.Users	80%	100%
Asm.MooBank.Primitives	89.6%	95.4%
Asm.MooBank.Security	99.4%	90.6%