[nuget][StubCustodians]- Bump Asp.Versioning.Mvc.ApiExplorer and 20 others by dependabot[bot] · Pull Request #664 · DFE-Digital/single-unique-identifier

dependabot · 2026-06-09T06:20:36Z

Updated Asp.Versioning.Mvc.ApiExplorer from 8.1.1 to 10.0.0.

Release notes

Sourced from Asp.Versioning.Mvc.ApiExplorer's releases.

10.0.0

The official release for 10.0 is here! In addition to the changes in the preview releases, there are a few additional changes.

Features

All Platforms

ApiVersionAttribute, MapToVersionAttribute, and AdvertiseApiVersionsAttribute all now have a constructor which can support the date format without being a string; for example, [ApiVersion(2026, 04, 01)]

ASP.NET Core OpenAPI

XmlCommentsTransformer is now resolved via DI, which allows it to be re-registered with a user-defined file path
Public types and members are now virtual for developer extensibility

Fixes

ASP.NET Core OpenAPI

Fix comparison between entry and calling assembly (#1175)
Ensure keyed services are registered with a lowercase key (#1176)
Fix nested key service resolution (#1177)
Implement IKeyedServiceProvider when injecting ApiVersion (#1178)

Breaking Changes

ASP.NET Core OpenAPI

OpenAPI documents use "enum": ["1.0"] instead of "default": "1.0"
- This has a similar effect, but removes the free-form input when the value is bounded
- When optional, the enum value can still be deleted/removed
- Some UIs, such as Scalar, still provide a way to provide an enumerated value that isn't in the list

Release Notes

Asp.Versioning.OData is being released as rc.1 because Microsoft.AspNetCore.OData is only at preview.2
Asp.Versioning.OpenAPI is being released as rc.1 pending the outcome of dotnet/aspnetcore#66408
- If the package can be released without requiring the explicit use of Reflection, that is the preference
- No additional changes are planned unless bugs are reported

Feedback

Thanks to the contributors on this release whether it was code contributions or test driving the previews. Special thanks to @sander1095 for being a strong advocate and helping to bring even more visibility to the project.

10.0.0-preview.2

This release is a quick iteration which contains minor fixes based on feedback from Preview 1.

Trying out previews is always a big ask. The OpenAPI extensions are net new, so I really am looking for some community support to flush out any edge cases I may have been missed before releasing officially. All other libraries are stable.

Aside from whatever the community may report, there are only two final things I'm considering for the final release:

gRPC versioning support, which I'm waiting on grpc/grpc-dotnet#2690 and grpc/grpc-dotnet#2693
Coordination with Microsoft to open up types in Microsoft.AspNetCore.OpenAPI so I don't have to resort to Reflection for integration

If these are not able to be completed within the next few weeks, then I will officially release the stable libraries. The gRPC support will then come in a future, likely minor version, release. The OpenAPI extensions may stay in preview as AOT will likely be broken.

Features

All Platforms

Support _ prefix character when extracting API versions from a .NET namespace (#1172)
Generate software bill of materials (SBOM) (#1100)

Fixes

ASP.NET Core with OpenAPI

Build-time OpenAPI documents have empty paths (#1165, #1168)
Missing XML Comments (#1169)
Support <example> tags (#1170)

Breaking Changes

The OpenAPI extensions for API Versioning (e.g. x-api-versioning) will now use a nested links property rather than a simple array. This allows the schema to be open for possible future enhancements.

Preview 1

{
    "x-api-versioning":
    [
        {
            "title": "Version Policy",
            "type": "text/html",
            "rel": "info",
            "url": "http://my.api.com/policies/versioning.html"
        }
    ]
}

Preview 2+

{
 ... (truncated)

## 10.0.0-preview.1

This is a major release that includes new, publicly visible API changes as well as a rollup of bug fixes. This is an initial preview release that is primarily focused on improving OpenAPI integration. Additional features will come in the next preview. The wiki has not be fully updated - yet, but that will also occur in the near future.

These are preview features and changes. Please report issues if you find them. Feel free to start a [discussion](../../discussions) about the changes in the forthcoming official release.

# Features

## All Platforms

- Support for the `deprecation` response header as defined by [RFC 9745](https://www.rfc-editor.org/rfc/rfc9745.html) (#1128)

## ASP.NET Core

- Integration with the [Microsoft.AspNetCore.OpenApi](https://www.nuget.org/packages/Microsoft.AspNetCore.OpenApi) library
  - These features in the new [Asp.Versioning.OpenApi](https://www.nuget.org/packages/Asp.Versioning.OpenApi) library
  - OpenAPI documents are now generated per API version
  - Sunset and deprecation policies are automatically included with standard (English) text, but can be customized
  - Sunset and deprecation policies links are included in OpenAPI documents via the `x-api-versioning` extension
  - The versioned `HttpClient` can now read and report on sunset and deprecation policies
  - All [example projects](../../tree/main/examples/AspNetCore) have been updated to use [Scalar](https://scalar.com/)

### Example

The following provides an example of a bare minimum setup:

```c#
var builder = WebApplication.CreateBuilder( args );
var services = builder.Services;

services.AddApiVersioning()
        .AddApiExplorer()
        .AddOpenApi();

var app = builder.Build();
var hello = app.NewVersionedApi( "HelloWorld" );
var v1 = hello.MapGroup( "/hello-world" ).HasApiVersion( 1.0 );
var v2 = hello.MapGroup( "/hello-world" ).HasApiVersion( 2.0 );

v1.MapGet( "/", ( ApiVersion version ) => $"Hello world from v{version}" );
v2.MapGet( "/", ( ApiVersion version ) => $"Hello world from v{version}" );

if ( app.Environment.IsDevelopment() )
{
    app.MapOpenApi().WithDocumentPerVersion();
}

app.Run();

The key differences from what you may be currently doing:

... (truncated)

Commits viewable in compare view.

Pinned Azure.Monitor.OpenTelemetry.AspNetCore at 1.5.0.

Release notes

Sourced from Azure.Monitor.OpenTelemetry.AspNetCore's releases.

1.5.0 1.5.0 (2026-04-30)

Features Added

Add ability to specify EnableStandardMetrics and EnablePerformanceCounters
(#56438)

Breaking Changes

Default Sampler Changed: The default sampling behavior has been changed from
ApplicationInsightsSampler with 100% sampling (all traces sampled) to
RateLimitedSampler with 5.0 traces per second. This change significantly
reduces telemetry volume for high-traffic applications and provides better
cost optimization out of the box.
Impact: Applications with more than 5 requests per second will see fewer
traces exported by default.
Migration: To maintain the previous behavior (100% sampling), explicitly
configure the sampler:

// Option 1: Set SamplingRatio and clear TracesPerSecond
builder.Services.AddOpenTelemetry()
    .UseAzureMonitor(options =>
    {
        options.SamplingRatio = 1.0f;
        options.TracesPerSecond = null;
    });
// Option 2: Use environment variables
// OTEL_TRACES_SAMPLER=microsoft.fixed_percentage
// OTEL_TRACES_SAMPLER_ARG=1.0

Bugs Fixed

Fixed an issue where Azure Container Apps instances were showing VM instance GUIDs
instead of replica names in the Role Instance field.
(#54586)

1.5.0-beta.1

1.5.0-beta.1 (2026-05-27)

Features Added

Upgraded api-version from '2024-11-30' to '2025-05-31-preview'.
Exposed User-Assigned Identity AssignmentRestrictions property.

1.4.1 1.4.1 (2026-06-03)

Other Changes

Upgraded dependent Azure.Core to 1.57.0.
Upgraded dependent Azure.ResourceManager to 1.14.0.

1.4.1-beta.5

1.4.1-beta.5 (2026-05-26)

Bugs Fixed

Improved redirect performance for write operations by caching the latest primary node URL from redirect responses and reusing it for subsequent non-GET requests. The cache is lazily populated and refreshed whenever the service redirects to a different primary node.

Commits viewable in compare view.

Pinned Azure.Monitor.OpenTelemetry.Exporter at 1.8.1.

Release notes

Sourced from Azure.Monitor.OpenTelemetry.Exporter's releases.

1.8.1 1.8.1 (2026-05-20)

Features Added

Added GenAI main agent attribution support. Automatically propagates microsoft.gen_ai.main_agent.* attributes from parent spans to child spans and log records, enabling end-to-end tracing of AI agent orchestration.
(#59368)

1.8.0 1.8.0 (2026-05-11)

Features Added

Upgraded the api-version to 2026-03-01.

1.7.0 1.7.0 (2026-05-22)

Features Added

Upgraded api-version from 2025-06-01 to 2025-08-01. Tag details available at https://github.com/Azure/azure-rest-api-specs/tree/dddcb1f2f0131aa15cc761624959063f2e197b57/specification/storage/Storage.Management.
- Supported new StorageAccountAccessTier.Smart access tier (requires zone-redundant storage).
- Supported new AllowedCopyScope.All value.
- Supported new property TagsReplicationEnabled on ObjectReplicationPolicyData.
- Supported new StaticWebsite property on BlobServiceData with DefaultIndexDocumentPath.
- Supported new StorageConnectorResource for managing storage connectors.
- Supported new StorageDataShareResource for managing storage data shares.
- Supported new StopAssignment operation on StorageTaskAssignmentResource.
- Supported new AllowSharedKeyAccessForServices property on storage account create/update.
- Supported new DataCollaborationPolicyProperties property on storage account create/update.
- Supported new TaskExecutionTriggerType.MockRun trigger type.

1.6.3 1.6.3 (2026-05-08)

Bugs Fixed

Fixed a misalignment between the explicit net8.0 target of this package and its Microsoft.AspNetCore.DataProtection dependency, which does not offer a net8.0 asset in the 10.x version. The dependency now resolves to version 8.0.26 when targeting net8.0, ensuring consumers receive a framework-compatible asset and eliminating the associated dependency warnings.

1.6.1 1.6.1 (2026-06-02)

Other Changes

Upgraded dependent Azure.Core to 1.57.0.
Upgraded dependent Azure.ResourceManager to 1.14.0.

Commits viewable in compare view.

Updated coverlet.collector from 8.0.1 to 10.0.1.

Release notes

Sourced from coverlet.collector's releases.

10.0.1

Improvements

Coverlet with MTP 2 doesn't show test coverage statistic in console #1907
Avoid unnecessary testhost restarts #1912 by https://github.com/mawosoft

Fixed

Fix inconsistent paths in cobertura reports #1723
Fix when using "is" with "and" in pattern matching, branch coverage is lower than normal #1313
Fix Coverlet flagging a branch for an async functions finally block where none exists #1337
Fix Coverlet Tracker Missing CompilerGeneratedAttribute #1828

Maintenance

Add architecture docs and diagrams for all integrations #1927
Update NuGet packages and .NET SDK versions #1933

Diff between 10.0.0 and 10.0.1

10.0.0 Improvements

Unique Report Filenames (coverlet.MTP and AzDO) #1866
Add --coverlet-file-prefix option for unique report files #1869
Introduce .NET 10 support #1823

Fixed

Fix [BUG] Wrong branch rate on IAsyncEnumerable for generic type #1836
Fix [BUG] Missing Coverage after moving to MTP #1843
Fix [BUG] No coverage reported when targeting .NET Framework with 8.0.1 #1842
Fix [BUG] Behavior changes between MTP and Legacy (msbuild) #1878
Fix [BUG] Coverlet.MTP - Unable to load coverlet.mtp.appsettings.json #1880
Fix [BUG] Coverlet.Collector produces empty report when Mediator.SourceGenerator is referenced #1718 by https://github.com/yusyd
Fix [BUG] Crash during instrumentation (Methods using LibraryImport/DllImport have no body) #1762

Maintenance

Add comprehensive async method tests and documentation for issue #1864
Replace Tmds.ExecFunction Package in coverlet.core.coverage.tests #1833
Add net9.0 and net10.0 targets #1822

Diff between 8.0.1 and 10.0.0

Commits viewable in compare view.

Updated dotnet-reportgenerator-globaltool from 5.5.4 to 5.5.10.

Release notes

Sourced from dotnet-reportgenerator-globaltool's releases.

5.5.10

Changes:

Added support for Sha256 signed licenses

This release requires .NET Framework 4.7 or .NET 8.0/9.0/10.0

5.5.9

Changes:

Added new setting "applyQueryStringToAllLinks" to apply query string to referenced CSS and JavaScript files and links to support SAS tokens (e.g. on blob storage) (#349)
Improved escaping of JavaScript content

This release requires .NET Framework 4.7 or .NET 8.0/9.0/10.0

5.5.8

Changes:

Azure DevOps: Added metadata to become a trusted publisher

This release requires .NET Framework 4.7 or .NET 8.0/9.0/10.0

5.5.7

Changes:

#783: Reduce memory usage for large code files

This release requires .NET Framework 4.7 or .NET 8.0/9.0/10.0

5.5.6

Changes:

Path validation does not consider runner.temp danielpalme/ReportGenerator-GitHub-Action#39: Github Action: Allow runner.temp directory

This release requires .NET Framework 4.7 or .NET 8.0/9.0/10.0

5.5.5

Changes:

#780: Improved branch handling for Coberatura files (contributed by @lorenz-ammersbach)
#782: Dynamic metric rows (assemblies/modules) in HTML report
Missing input validation on path and argument inputs danielpalme/ReportGenerator-GitHub-Action#37: Github Action: Added input validation and path scope enforcement (contributed by @ismits)

This release requires .NET Framework 4.7 or .NET 8.0/9.0/10.0

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Http from 2.3.9 to 2.3.10.

Release notes

Sourced from Microsoft.AspNetCore.Http's releases.