Skip to content

deps: Bump the microsoft group with 7 updates#19

Merged
JerrettDavis merged 1 commit intomainfrom
dependabot/nuget/microsoft-29fece1428
Mar 16, 2026
Merged

deps: Bump the microsoft group with 7 updates#19
JerrettDavis merged 1 commit intomainfrom
dependabot/nuget/microsoft-29fece1428

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 16, 2026

Updated Microsoft.Extensions.AI from 10.3.0 to 10.4.0.

Release notes

Sourced from Microsoft.Extensions.AI's releases.

10.4.0

This release advances the AI abstractions with new hosted file, web search, and reasoning content types, stabilizes MCP and tool approval APIs, adds streaming latency metrics to OpenTelemetry instrumentation, and delivers bug fixes across caching, data ingestion, and resource monitoring.

Experimental API Changes

Now Stable

  • MCP Server Tool Content and Function Call Approval APIs are now stable (previously MEAI001) #​7299
  • FakeLogCollector.GetLogsAsync(CancellationToken) is now stable (previously EXTEXP0003) #​7332

New Experimental APIs

  • New experimental AddExtendedHttpClientLogging overloads with wrapHandlersPipeline parameter (EXTEXP0013) #​7231

Removed Experimental APIs

  • AI Tool Reduction experimental APIs removed (was experimental under MEAI001) #​7353

What's Changed

AI

  • Add IHostedFileClient and friends #​7269 by @​stephentoub
  • Add web search tool call content #​7276 by @​stephentoub (co-authored by @​Copilot)
  • Surface OpenAI-compatible reasoning_content as TextReasoningContent #​7295 by @​stephentoub
  • MCP/Approvals/Tool Contents stabilization #​7299 by @​jozkee
  • Implement time_to_first_chunk and time_per_output_chunk streaming metrics in OpenTelemetryChatClient #​7325 by @​stephentoub (co-authored by @​Copilot)
  • Add openai.api.type telemetry attribute to OpenAI IChatClient implementations #​7316 by @​stephentoub (co-authored by @​Copilot)
  • Update OpenTelemetry Gen AI semantic conventions to v1.40 #​7322 by @​stephentoub (co-authored by @​Copilot)
  • Fix tool definitions emission regardless of sensitivity setting #​7346 by @​stephentoub (co-authored by @​Copilot)
  • Honor [Required] attribute in AI function parameter JSON schema generation #​7272 by @​stephentoub (co-authored by @​Copilot)
  • AddAIContentType automatically registers content type against every base in the inheritance chain up to AIContent #​7358 by @​jozkee (co-authored by @​Copilot)
  • Auto-mark server-handled FunctionCallContent as InformationalOnly #​7314 by @​stephentoub (co-authored by @​Copilot)
  • Map ReasoningEffort.None and ExtraHigh to none and xhigh in OpenAI IChatClient implementations #​7319 by @​stephentoub (co-authored by @​Copilot)
  • Handle DynamicMethod reflection limitations in AIFunctionFactory #​7287 by @​stephentoub (co-authored by @​Copilot)
  • Fix Activity.Current nulled during streaming tool invocation #​7321 by @​flaviocdc (co-authored by @​Copilot)
  • Handle FunctionCallOutputResponseItem in streaming response conversion #​7307 by @​stephentoub (co-authored by @​Copilot)
  • Fix serialization of response continuation tokens #​7356 by @​stephentoub
  • Remove AI Tool Reduction experimental APIs #​7353 by @​stephentoub (co-authored by @​Copilot)
  • Update OpenAI to 2.9.1 #​7349 by @​stephentoub

Telemetry and Observability

  • Introduce support for the Gauge metric type #​7203 by @​rainsxng
  • Update logging source generator to support generic methods #​7331 by @​svick (co-authored by @​Copilot)
  • Update logging source generator to match runtime PR #​124589 (ref readonly/params/scoped) #​7333 by @​svick (co-authored by @​Copilot)
  • Promote FakeLogCollector.GetLogsAsync(CancellationToken) from experimental to stable #​7332 by @​Demo30
  • Remove obsolete CS1591 warning suppression from generated file preamble #​7308 by @​luissena

HTTP Resilience and Diagnostics

... (truncated)

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration from 10.0.3 to 10.0.5.

Release notes

Sourced from Microsoft.Extensions.Configuration's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.DependencyInjection.Abstractions from 10.0.3 to 10.0.5.

Release notes

Sourced from Microsoft.Extensions.DependencyInjection.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Logging from 10.0.3 to 10.0.5.

Release notes

Sourced from Microsoft.Extensions.Logging's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Logging.Abstractions from 10.0.3 to 10.0.5.

Release notes

Sourced from Microsoft.Extensions.Logging.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Options from 10.0.3 to 10.0.5.

Release notes

Sourced from Microsoft.Extensions.Options's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Options.ConfigurationExtensions from 10.0.3 to 10.0.5.

Release notes

Sourced from Microsoft.Extensions.Options.ConfigurationExtensions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps Microsoft.Extensions.AI from 10.3.0 to 10.4.0
Bumps Microsoft.Extensions.Configuration from 10.0.3 to 10.0.5
Bumps Microsoft.Extensions.DependencyInjection.Abstractions from 10.0.3 to 10.0.5
Bumps Microsoft.Extensions.Logging from 10.0.3 to 10.0.5
Bumps Microsoft.Extensions.Logging.Abstractions from 10.0.3 to 10.0.5
Bumps Microsoft.Extensions.Options from 10.0.3 to 10.0.5
Bumps Microsoft.Extensions.Options.ConfigurationExtensions from 10.0.3 to 10.0.5

---
updated-dependencies:
- dependency-name: Microsoft.Extensions.AI
  dependency-version: 10.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: microsoft
- dependency-name: Microsoft.Extensions.Configuration
  dependency-version: 10.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: microsoft
- dependency-name: Microsoft.Extensions.DependencyInjection.Abstractions
  dependency-version: 10.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: microsoft
- dependency-name: Microsoft.Extensions.Logging
  dependency-version: 10.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: microsoft
- dependency-name: Microsoft.Extensions.Logging.Abstractions
  dependency-version: 10.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: microsoft
- dependency-name: Microsoft.Extensions.Options
  dependency-version: 10.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: microsoft
- dependency-name: Microsoft.Extensions.Options.ConfigurationExtensions
  dependency-version: 10.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: microsoft
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Mar 16, 2026

Labels

The following labels could not be found: nuget. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@github-actions
Copy link
Contributor

⚠️ Deprecation Warning: The deny-licenses option is deprecated for possible removal in the next major release. For more information, see issue 997.

Dependency Review

The following issues were found:
  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 1 package(s) with unknown licenses.
See the Details below.

License Issues

src/JD.SemanticKernel.Connectors.ClaudeCode/JD.SemanticKernel.Connectors.ClaudeCode.csproj

PackageVersionLicenseIssue Type
Microsoft.Extensions.Configuration>= 0NullUnknown License
Denied Licenses: GPL-2.0, GPL-3.0, AGPL-3.0

OpenSSF Scorecard

PackageVersionScoreDetails
nuget/Microsoft.Extensions.Configuration >= 0 UnknownUnknown

Scanned Files

  • src/JD.SemanticKernel.Connectors.ClaudeCode/JD.SemanticKernel.Connectors.ClaudeCode.csproj

@github-actions
Copy link
Contributor

Code Coverage

Summary
  Generated on: 03/16/2026 - 09:52:32
  Coverage date: 03/16/2026 - 09:52:22 - 03/16/2026 - 09:52:30
  Parser: MultiReport (9x Cobertura)
  Assemblies: 1
  Classes: 10
  Files: 9
  Line coverage: 79%
  Covered lines: 230
  Uncovered lines: 61
  Coverable lines: 291
  Total lines: 913
  Branch coverage: 67.7% (80 of 118)
  Covered branches: 80
  Total branches: 118
  Method coverage: 89.5% (43 of 48)
  Full method coverage: 81.2% (39 of 48)
  Covered methods: 43
  Fully covered methods: 39
  Total methods: 48

JD.SemanticKernel.Connectors.ClaudeCode                                    79%
  JD.SemanticKernel.Connectors.ClaudeCode.ClaudeCodeCredentialsFile       100%
  JD.SemanticKernel.Connectors.ClaudeCode.ClaudeCodeHttpClientFactory     100%
  JD.SemanticKernel.Connectors.ClaudeCode.ClaudeCodeOAuthCredentials      100%
  JD.SemanticKernel.Connectors.ClaudeCode.ClaudeCodeSessionException     33.3%
  JD.SemanticKernel.Connectors.ClaudeCode.ClaudeCodeSessionHttpHandler   95.2%
  JD.SemanticKernel.Connectors.ClaudeCode.ClaudeCodeSessionOptions        100%
  JD.SemanticKernel.Connectors.ClaudeCode.ClaudeCodeSessionProvider        70%
  JD.SemanticKernel.Connectors.ClaudeCode.ClaudeModelDiscovery            100%
  JD.SemanticKernel.Connectors.ClaudeCode.KernelBuilderExtensions        93.7%
  JD.SemanticKernel.Connectors.ClaudeCode.ServiceCollectionExtensions     100%

@github-actions
Copy link
Contributor

Test Results

184 tests   175 ✅  3s ⏱️
  5 suites    9 💤
  5 files      0 ❌

Results for commit 203a50a.

@codecov-commenter
Copy link

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 75.94%. Comparing base (b30146b) to head (203a50a).
⚠️ Report is 8 commits behind head on main.

Additional details and impacted files
@@            Coverage Diff             @@
##             main      #19      +/-   ##
==========================================
- Coverage   80.31%   75.94%   -4.37%     
==========================================
  Files           9        9              
  Lines         254      291      +37     
  Branches       37       48      +11     
==========================================
+ Hits          204      221      +17     
- Misses         41       61      +20     
  Partials        9        9              
Flag Coverage Δ
unittests 75.94% <ø> (-4.37%) ⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@JerrettDavis JerrettDavis merged commit d9fd9b2 into main Mar 16, 2026
11 checks passed
@dependabot dependabot bot deleted the dependabot/nuget/microsoft-29fece1428 branch March 16, 2026 19:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants