Bump the dotnet-minor-patch group with 7 updates

[dependabot]

Updated Aspire.Hosting.JavaScript from 13.1.2 to 13.1.3.

Release notes

Sourced from Aspire.Hosting.JavaScript's releases.

13.1.3

What's Changed

• [release/13.1] Add installer publishing updates for 13.1.3 by @​radical in [release/13.1] Add installer publishing updates for 13.1.3 microsoft/aspire#15158

Full Changelog: microsoft/aspire@v13.1.2...v13.1.3

Commits viewable in compare view.

Updated Aspire.Hosting.PostgreSQL from 13.1.2 to 13.1.3.

Release notes

Sourced from Aspire.Hosting.PostgreSQL's releases.

13.1.3

What's Changed

• [release/13.1] Add installer publishing updates for 13.1.3 by @​radical in [release/13.1] Add installer publishing updates for 13.1.3 microsoft/aspire#15158

Full Changelog: microsoft/aspire@v13.1.2...v13.1.3

Commits viewable in compare view.

Updated coverlet.collector from 8.0.0 to 8.0.1.

Release notes

Sourced from coverlet.collector's releases.

8.0.1

Fixed

• Fix [BUG] TypeInitializationException when targeting .NET Framework #​1818
• Fix [BUG] coverlet.MTP build fails with CS0400 due to developmentDependency=true #​1827

Improvements

• Additional improvements needed for .NET Framework instrumentation type import #​1825

Diff between 8.0.0 and 8.0.1

Commits viewable in compare view.

Updated Microsoft.Extensions.AI from 10.4.0 to 10.4.1.

Release notes

Sourced from Microsoft.Extensions.AI's releases.

10.4.1

This release of the Microsoft.Extensions.AI packages adds new experimental APIs for Realtime client sessions and Text-to-Speech, along with OpenTelemetry and middleware improvements.

Packages in this release

Package	Version
Microsoft.Extensions.AI.Abstractions	10.4.1
Microsoft.Extensions.AI	10.4.1
Microsoft.Extensions.AI.OpenAI	10.4.1

Experimental API Changes

New Experimental APIs

• New experimental API: Realtime Client Sessions #​7285 and #​7399
• New experimental API: Text-to-Speech Client #​7381

Changes to Experimental APIs

• Hosted File Download Stream: write-path methods now explicitly throw NotSupportedException #​7394

What's Changed

AI

• Add ITextToSpeechClient abstraction, middleware, and OpenAI implementation #​7381 by @​stephentoub
• Realtime Client Proposal #​7285 by @​tarekgh
• Add VoiceActivityDetection options to realtime session abstractions #​7399 by @​tarekgh
• Make UriContent mediaType parameter optional with inference from URI file extension #​7398 by @​stephentoub (co-authored by @​Copilot)
• Emit gen_ai.client.operation.exception via ILogger LoggerMessage on OpenTelemetry instrumentation classes #​7379 by @​stephentoub (co-authored by @​Copilot)
• Support invoke_workflow as an equivalent parent span to invoke_agent in FunctionInvokingChatClient #​7382 by @​stephentoub (co-authored by @​Copilot)
• Make HostedFileDownloadStream explicitly read-only #​7394 by @​stephentoub (co-authored by @​Copilot)

Documentation Updates

• Document JSON schema derivation for return types in AIFunctionFactory #​7400 by @​stephentoub (co-authored by @​Copilot)

Test Improvements

• Fix test warnings #​7369 by @​jozkee
• Add tests for JSON deserialization of serializable types #​7373 by @​stephentoub (co-authored by @​Copilot)

Repository Infrastructure Updates

• Update Package Validation Baseline to 10.4.0 #​7389 by @​jeffhandley (co-authored by @​Copilot)
• Update ModelContextProtocol libraries to version 1.0.0 #​7340 by @​stephentoub (co-authored by @​Copilot)

Acknowledgements

• @​eiriktsarpalis @​ericstj @​CodeBlanch @​lmolkova @​adamsitnik @​joperezr reviewed pull requests
  ... (truncated)

Commits viewable in compare view.

Updated Microsoft.Identity.Web from 4.5.0 to 4.6.0.

Release notes

Sourced from Microsoft.Identity.Web's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.SemanticKernel from 1.73.0 to 1.74.0.

Release notes

Sourced from Microsoft.SemanticKernel's releases.

1.74.0

Changes:

• 14ea2fcabb02910e6fccfc939d217567caa4a0be SK .NET Release version bump (#​13685)
• 8b32b3ba6f62e94ea2533d818b89a17eb11bb681 DF PR Review workflow (#​13687)
• 30aec16700618b9912e08b0a5f919839e058ca11 Update OpenAI to 2.9.1, Azure.AI.OpenAI to 2.9.0-beta.1, Azure.AI.Projects to 2.0.0-beta.2, Microsoft.Extensions.AI* to 10.4.0 (#​13668)
• 3c1b688dcfd3b05e29423e15b00cc9182b4cf71d Python: Fix ChatHistoryTruncationReducer deleting system prompt (#​13610) [ #​12612, #​10344 ]
• bb421f67a7d7561517c0eedc31b911f9819bb323 Reduce macos runner coverage due to capacity (#​13686)
• 620e412c70ea72df3aea6080f83d96e42e9e008f Python: Bump werkzeug from 3.1.1 to 3.1.6 in /python (#​13605) [ #​3065, #​3077, #​3075, #​3020, #​3054, #​3067, #​3044, #​3056, #​2994, #​2993, #​3102, #​3097, #​3085 ]
• c9efdf50f5825586f12728bebd1364d806793245 Fix link for Chroma documentation in README (#​13682)
• 2c880ea4b26017f375b3ae8d11cf22a7119c7ce9 .Net: [Breaking] Harden plugin security defaults for WebFileDownloadPlugin (#​13644)
• 12a7d55d3aca39aeeb20055dbb477b0eaf18da45 .Net: [Breaking] Harden DocumentPlugin security defaults with deny-by-default AllowedDirectories (#​13683)
• 41cc2487d25a63b6e3ce2f24663f9d03c93787d5 .Net: Fixes Qdrant 1.17 issue with returning empty vectors (#​13638) [ #​13587 ]

See More

• 301d7dc9239216b5ac9f38df42dcad2d544c69e1 .Net: Migrate from deprecated DALL-E models to gpt-image-1 (#​13650)
• c2945847eabf2b32b023373d24dfd58b53c40b07 .NET: Update system package dependencies for CVE-2026-26127 (#​13656) [ #​4647 ]
• e500f727ed6b3ff6f63dacdaf5d224c48275a317 Python: fix prompt template engine blocking HTML tags in content (#​13633) [ #​13632 ]
• 3f6d72725f85888c7e87ec97c9f1b8a4f1a0b0ee Python: Fix image integration tests that are now blocked due to bot policies (#​13680)
• cc83889787188c22a770347aacbf5e4842f9a613 Python: fix(python/google): preserve thought_signature in Gemini function call parts (#​13609) [ #​13480, #​13418 ]
• b3cf64adf868cd96c767776af5730e17b8510f5b Python: Bump Python version to 1.41.0 for a release (#​13655)
• 5c891d1769e89595375f2fb69c5fe20938e9947e Python: Add support to new openai text to image model (#​13651)
• c250b379f6748e751276991afc39e3ef46e9441c Python: Refinement of in memory vector collection filter (#​13637)
• d5c2b9d889355887d6b746425dc45f43c472a76e Python: Improves the robustness of filename handling (#​13643)
• 02da6c47d768b0e84512557f046e913e0bd08d75 Updating recommended extensions list. (#​13645)
• 4d675929578f8a07dfdff5361533d362f628d571 .Net: Add server URL validation options for OpenAPI plugins (#​13631)
• 86d7a498437d988718c0d15302593e3f69bd19e3 .Net: Feature text search linq (#​13384)

This list of changes was auto generated.

Commits viewable in compare view.

Updated Scalar.AspNetCore from 2.13.8 to 2.13.13.

Release notes

Sourced from Scalar.AspNetCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!