Skip to content

Bump the version-updates group with 13 updates - #934

Merged
AndrewMcLachlan merged 1 commit into
mainfrom
dependabot/nuget/version-updates-28c94e5358
Jul 28, 2026
Merged

Bump the version-updates group with 13 updates#934
AndrewMcLachlan merged 1 commit into
mainfrom
dependabot/nuget/version-updates-28c94e5358

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 27, 2026

Copy link
Copy Markdown
Contributor

Updated Asm from 4.1.16 to 5.0.3.

Release notes

Sourced from Asm's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Asm.AspNetCore from 4.0.31 to 5.0.3.

Release notes

Sourced from Asm.AspNetCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Asm.AspNetCore.Api from 4.0.31 to 5.0.3.

Release notes

Sourced from Asm.AspNetCore.Api's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Asm.AspNetCore.Postie from 4.1.16 to 5.0.3.

Release notes

Sourced from Asm.AspNetCore.Postie's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Asm.Domain from 4.0.31 to 5.0.3.

Release notes

Sourced from Asm.Domain's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Asm.Domain.Infrastructure from 4.0.31 to 5.0.3.

Release notes

Sourced from Asm.Domain.Infrastructure's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Asm.Hosting from 4.0.31 to 5.0.3.

Release notes

Sourced from Asm.Hosting's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Asm.ModelContextProtocol from 4.0.31 to 5.0.3.

Release notes

Sourced from Asm.ModelContextProtocol's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Asm.Testing.Domain from 4.0.31 to 5.0.3.

Release notes

Sourced from Asm.Testing.Domain's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Azure.Monitor.OpenTelemetry.AspNetCore from 1.5.0 to 1.6.0.

Release notes

Sourced from Azure.Monitor.OpenTelemetry.AspNetCore's releases.

1.6.0

1.6.0 (2026-07-27)

Bugs Fixed

  • Hardened Azure Monitor ingestion and Live Metrics redirect handling to prevent credentials and telemetry from being forwarded to untrusted destinations.
    (#​61244)

Other Changes

  • Updated Azure.Monitor.OpenTelemetry.Exporter dependency to 1.8.3, which brings: customer SDK stats enabled by default (opt out with APPLICATIONINSIGHTS_SDKSTATS_DISABLED=true), internal Network SDK statistics signals, GenAI agent attribution processors for spans and logs, and CategoryName added to custom event custom dimensions.

Commits viewable in compare view.

Updated Microsoft.Extensions.Http.Resilience from 10.7.0 to 10.8.0.

Release notes

Sourced from Microsoft.Extensions.Http.Resilience's releases.

10.8.0

This release adds new experimental APIs to Microsoft.Extensions.AI.Abstractions and updates the OpenAI dependency to 2.12.0, alongside documentation, test, and repository maintenance.

Experimental API Changes

New Experimental APIs

  • New experimental API: AIFunctionNameAttribute and AIParameterNameAttribute #​7610 by @​jozkee (co-authored by @​jeffhandley @​Copilot)
  • New experimental API: ToolApprovalRequestContent.RequiresConfirmation (MEAI001) #​7549 by @​javiercn (co-authored by @​Copilot)

What's Changed

AI

  • Upgrade OpenAI dependency to 2.12.0 #​7608 by @​jozkee (co-authored by @​Copilot)
  • Auto-detect audio format in OpenAISpeechToTextClient #​7575 by @​jozkee (co-authored by @​Copilot)
  • Fix ImageGeneratingChatClient duplicating preceding content and dropping following content #​7624 by @​jozkee (co-authored by @​Copilot)

Vector Data

  • Make all test methods virtual in VectorData.ConformanceTests #​7606 by @​adamsitnik (co-authored by @​Copilot)

Documentation Updates

  • Remove links to ai-samples repo #​7574 by @​gewarren
  • Fix up docs with Copilot (MEVD) #​7597 by @​gewarren
  • Fix up docs with Copilot (M.E.ServiceDiscovery) #​7598 by @​gewarren (co-authored by @​Copilot)
  • Fix up docs with Copilot (MEAI) #​7600 by @​gewarren
  • Fix up docs with Copilot #​7601 by @​gewarren

Test Improvements

  • Fix flaky StampedeTests and harden related test waits #​7572 by @​jeffhandley (co-authored by @​Copilot)
  • Fix SQLitePCLRaw.lib.e_sqlite3 vulnerability by replacing SemanticKernel connectors with CommunityToolkit #​7579 by @​adamsitnik (co-authored by @​Copilot)
  • Removing SemanticKernel Connectors dependency and replacing it #​7584 by @​adamsitnik (co-authored by @​Copilot)
  • Migrate to xUnit v3 #​7607 by @​adamsitnik (co-authored by @​shyamnamboodiripad @​Copilot)

Repository Infrastructure Updates

  • Update OTel GenAI conventions skill for standalone semconv-genai repo #​7519 by @​jeffhandley (co-authored by @​Copilot)
  • Bump dotnet-coverage from 18.7.0 to 18.8.0 #​7552
  • [main] Update dependencies from dotnet/arcade #​7559
  • Fix transitive MessagePack vulnerability in AI template AppHost projects #​7561 by @​adamsitnik (co-authored by @​Copilot)
  • Bump esbuild, @​vitejs/plugin-react and vite in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7564
  • Bump tmp from 0.2.6 to 0.2.7 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7569
  • Bump js-yaml from 4.1.1 to 4.2.0 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7570
  • Bump PowerShell from 7.6.2 to 7.6.3 #​7576
  • Remove duplicate 'WebAPI' classification from template #​7577 by @​danroth27
  • [main] Update dependencies from dotnet/arcade #​7590
  • Eliminate redundant Correctness CI stage by merging into Build #​7594 by @​adamsitnik (co-authored by @​Copilot)
  • Update Agent Framework to 1.13.0 #​7613 by @​jeffhandley (co-authored by @​Copilot)
    ... (truncated)

Commits viewable in compare view.

Updated Microsoft.Identity.Client from 4.86.0 to 4.87.0.

Release notes

Sourced from Microsoft.Identity.Client's releases.

4.87.0

What's Changed

  • Expose MsalServiceException.ErrorCodesForLogging for diagnostics in #​6138
  • Expose WithOtelTagsEnricher for managed identity requests in #​6144
  • Forward OpenTelemetry tags enricher to the client-assertion callback in #​6142
  • Add client-side opaque-token log scrubber in #​6119
  • Populate ExecutionResult.Exception for non-MSAL failures in #​6139
  • Use PSS padding in KeyGuard liveness probe (CodeQL SM03799) in #​6141
  • Remove managed identity support from WithClaimsFromClient (confidential-client only) in #​6113
  • Remove experimental features from client setup in #​6143
  • Update Azure Arc managed identity API version from 2019-11-01 to 2020-06-01 in #​6130

Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@4.86.1...4.87.0

4.86.1

Bug Fixes

  • Fixed the mTLS Proof-of-Possession token cache to key on the certificate's full DER (x5t#S256) instead of only the public key, preventing a stale token (and AADSTS500181) after a same-key certificate renewal. #​6123
  • Fell back to RS256 when a certificate's PSS signing operation is rejected by RSACryptoServiceProvider, rebuilding the client assertion so authentication can proceed. #​6126
  • Detect and reject symbolic links in the Unix cache-file write path (lstat pre-check plus O_NOFOLLOW), closing a TOCTOU window. #​6115
  • Corrected misleading "region required" error messages and doc comments in the mTLS PoP flow. #​6127

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.7.0 to 18.8.1.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.8.1

What's Changed

Full Changelog: microsoft/vstest@v18.8.0...v18.8.1

18.8.0

What's Changed

Full Changelog: microsoft/vstest@v18.7.0...v18.8.0

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps Asm from 4.1.16 to 5.0.3
Bumps Asm.AspNetCore from 4.0.31 to 5.0.3
Bumps Asm.AspNetCore.Api from 4.0.31 to 5.0.3
Bumps Asm.AspNetCore.Postie from 4.1.16 to 5.0.3
Bumps Asm.Domain from 4.0.31 to 5.0.3
Bumps Asm.Domain.Infrastructure from 4.0.31 to 5.0.3
Bumps Asm.Hosting from 4.0.31 to 5.0.3
Bumps Asm.ModelContextProtocol from 4.0.31 to 5.0.3
Bumps Asm.Testing.Domain from 4.0.31 to 5.0.3
Bumps Azure.Monitor.OpenTelemetry.AspNetCore from 1.5.0 to 1.6.0
Bumps Microsoft.Extensions.Http.Resilience from 10.7.0 to 10.8.0
Bumps Microsoft.Identity.Client from 4.86.0 to 4.87.0
Bumps Microsoft.NET.Test.Sdk from 18.7.0 to 18.8.1

---
updated-dependencies:
- dependency-name: Asm
  dependency-version: 5.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: version-updates
- dependency-name: Asm.AspNetCore
  dependency-version: 5.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: version-updates
- dependency-name: Asm.AspNetCore.Api
  dependency-version: 5.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: version-updates
- dependency-name: Asm.AspNetCore.Postie
  dependency-version: 5.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: version-updates
- dependency-name: Asm.Domain
  dependency-version: 5.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: version-updates
- dependency-name: Asm.Domain.Infrastructure
  dependency-version: 5.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: version-updates
- dependency-name: Asm.Hosting
  dependency-version: 5.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: version-updates
- dependency-name: Asm.ModelContextProtocol
  dependency-version: 5.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: version-updates
- dependency-name: Asm.Testing.Domain
  dependency-version: 5.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: version-updates
- dependency-name: Azure.Monitor.OpenTelemetry.AspNetCore
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: version-updates
- dependency-name: Microsoft.Extensions.Http.Resilience
  dependency-version: 10.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: version-updates
- dependency-name: Microsoft.Identity.Client
  dependency-version: 4.87.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: version-updates
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: version-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added .NET Pull requests that update .net code dependencies Pull requests that update a dependency file labels Jul 27, 2026
@dependabot
dependabot Bot requested a review from AndrewMcLachlan as a code owner July 27, 2026 22:32
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file .NET Pull requests that update .net code labels Jul 27, 2026
@github-actions

Copy link
Copy Markdown
Contributor

Summary

Line coverage Branch coverage

Assembly Line coverage Branch coverage
Asm.MooBank 85.3% 81.5%
Asm.MooBank.Api 22.3% 70%
Asm.MooBank.Domain 91.1% 85.8%
Asm.MooBank.Infrastructure 83.4% 78.2%
Asm.MooBank.Institution.AustralianSuper 74.7% 69.1%
Asm.MooBank.Institution.Ing 69% 69.3%
Asm.MooBank.Institution.Macquarie 92.5% 81.4%
Asm.MooBank.Models 96.7% 88.8%
Asm.MooBank.Modules.Accounts 92% 75%
Asm.MooBank.Modules.Assets 74.7% 91.6%
Asm.MooBank.Modules.Bills 97.3% 81.7%
Asm.MooBank.Modules.Budgets 92.9% 93.6%
Asm.MooBank.Modules.Families 100% 100%
Asm.MooBank.Modules.Forecast 85.7% 82.7%
Asm.MooBank.Modules.Groups 100% 100%
Asm.MooBank.Modules.Institutions 100% 100%
Asm.MooBank.Modules.Instruments 94.3% 70.6%
Asm.MooBank.Modules.ReferenceData 43.4% ****
Asm.MooBank.Modules.Reports 71.1% 63.4%
Asm.MooBank.Modules.Stocks 84.5% 79.5%
Asm.MooBank.Modules.Tags 96.6% 75%
Asm.MooBank.Modules.Transactions 83.1% 72.7%
Asm.MooBank.Modules.Users 80% 100%
Asm.MooBank.Primitives 89.6% 95.4%
Asm.MooBank.Security 99.4% 90.6%

@AndrewMcLachlan
AndrewMcLachlan merged commit e4cc784 into main Jul 28, 2026
30 checks passed
@AndrewMcLachlan
AndrewMcLachlan deleted the dependabot/nuget/version-updates-28c94e5358 branch July 28, 2026 03:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .net code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant