Skip to content

chore(deps): Bump the nuget-dependencies group with 4 updates#58

Merged
JerrettDavis merged 1 commit into
mainfrom
dependabot/nuget/nuget-dependencies-db87d7f117
Jul 13, 2026
Merged

chore(deps): Bump the nuget-dependencies group with 4 updates#58
JerrettDavis merged 1 commit into
mainfrom
dependabot/nuget/nuget-dependencies-db87d7f117

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 13, 2026

Copy link
Copy Markdown
Contributor

Updated JD.SemanticKernel.Connectors.Abstractions from 0.1.70 to 0.1.71.

Release notes

Sourced from JD.SemanticKernel.Connectors.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Meziantou.Analyzer from 3.0.119 to 3.0.122.

Release notes

Sourced from Meziantou.Analyzer's releases.

3.0.122

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.122

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.121...3.0.122

3.0.121

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.121

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.120...3.0.121

3.0.120

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.120

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.119...3.0.120

Commits viewable in compare view.

Updated Microsoft.SemanticKernel from 1.77.0 to 1.78.0.

Release notes

Sourced from Microsoft.SemanticKernel's releases.

1.78.0

Changes:

  • 35ba23e1b3092271c778ca057afe1a796e16e70e .Net: Update package version to 1.78.0 (#​14142)
  • e6c9673684ca03621885083faff1644e1f42695e .Net: Disable automatic HTTP redirects in HttpPlugin and WebFileDownloadPlugin default clients (#​14132)
  • f25753be0a126138d2eea39b0ca2985252dde25a Bump Scriban from 7.2.0 to 7.2.5 to fix NU1902 vulnerability (#​14133)
  • dfc5227227352e7cf4b11de1d9b8e49ebc7b43ff .Net: Update .NET SDK to 10.0.301 (#​14119)
  • cf9af8b966841e8f16d528bd0f2c69c51213b68d .Net: Bump axios to 1.16.0 and form-data to 4.0.6 in /dotnet/samples/Demos/ProcessFrameworkWithSignalR (#​13858)
See More
  • e99c633fba9e4005bdb9b90a1f5441945b781040 .Net: Harden file path validation in Core, Document, and Web plugins (#​14118)
  • 99d1953e935bd88a4cc993cbad9485703734f1b5 Bump axios from 1.13.2 to 1.16.0 in /dotnet/samples/Demos/ProcessFrameworkWithSignalR/src/ProcessFramework.Aspire.SignalR.ReactFrontend (#​14044) [ #​10795, #​10822, #​10825, #​10729, #​7378, #​10745, #​10810, #​10802, #​6485, #​10680, #​6897, #​10794, #​10800, #​6241, #​10708, #​10819, #​7149, #​10772, #​10806, #​7260, #​10787, #​10724, #​7276, #​7414, #​6389, #​6460, #​10833, #​10588, #​7419, #​10820, #​10791, #​10796, #​10821, #​10782, #​10759, #​10804, #​10785, #​10813, #​10814, #​10790, #​10834 ]
  • 82f244233b89d38bf5e424ca409caa46f14490e6 .Net: Update SK to use MEVD packages and move MEVD projects out of main solution (#​14117)
  • 8ce2bcc07f0ce5e56052ffd4abd0332cc8fc08e5 .Net: Bump Aspire.Hosting.Azure.CognitiveServices from 13.0.0 to 13.3.0 (#​13996)
  • 20be253d7b4a41c8943f36addd8b6365bdcf7299 .Net: Bump esbuild, @​vitejs/plugin-react, vite, and transitive lockfile deps in /dotnet/samples/Demos/ProcessFrameworkWithSignalR/src/ProcessFramework.Aspire.SignalR.ReactFrontend (#​14070)
  • 445fd0ea5364622d30069510f639032ecea6eaff .Net: Bump Aspire.Azure.Search.Documents from 9.5.1 to 13.3.0 (#​13994)
  • 367c75f4ff972e7a2281dcae4bd74800c5eef9eb .Net: Bump minimatch from 3.1.2 to 3.1.5 in /dotnet/samples/Demos/ProcessWithCloudEvents/ProcessWithCloudEvents.Client (#​13604)
  • 6209c77fd52d6ff99d7797d66639055b36a91ae3 .Net: Bump @​babel/core from 7.26.10 to 7.29.7 in /dotnet/samples/Demos/ProcessWithCloudEvents/ProcessWithCloudEvents.Client (#​14083) [ #​18014, #​18001, #​17998, #​17992, #​17974, #​17923, #​17931, #​17915, #​17788, #​17739, #​17606, #​17592, #​17589 ]
  • 1ad0b7501bd9c8f8dfbafb7c1aa69fab1ba4cd28 Bump Aspire.Hosting.AppHost from 13.0.0 to 13.3.0 (#​13995)
  • 56422ada8aa95702aab5c969805c3395dd2f5022 .Net: Bump follow-redirects from 1.15.11 to 1.16.0 in /dotnet/samples/Demos/ProcessFrameworkWithSignalR/src/ProcessFramework.Aspire.SignalR.ReactFrontend (#​13877)
  • a5e8f9b43230675c86dcb7c3ff5021914537f8be .Net: Bump form-data from 4.0.5 to 4.0.6 in /dotnet/samples/Demos/ProcessFrameworkWithSignalR/src/ProcessFramework.Aspire.SignalR.ReactFrontend (#​14082)
  • 7fd75c3c73ac84106ce2883bae32b50c99378e40 .Net: fix: prevent duplicate "null" in JSON Schema type arrays for nullable parameters (#​13635) [ #​13527 ]
  • f8c757b218cfe70cd9bc0d921eb0828d290cbe56 Fix MessagePack high severity vulnerability (#​14079)

This list of changes was auto generated.

Commits viewable in compare view.

Updated Nerdbank.GitVersioning from 3.10.85 to 3.10.91.

Release notes

Sourced from Nerdbank.GitVersioning's releases.

3.10.91

What's Changed

Full Changelog: dotnet/Nerdbank.GitVersioning@v3.10.85...v3.10.91

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps JD.SemanticKernel.Connectors.Abstractions from 0.1.70 to 0.1.71
Bumps Meziantou.Analyzer from 3.0.119 to 3.0.122
Bumps Microsoft.SemanticKernel from 1.77.0 to 1.78.0
Bumps Nerdbank.GitVersioning from 3.10.85 to 3.10.91

---
updated-dependencies:
- dependency-name: JD.SemanticKernel.Connectors.Abstractions
  dependency-version: 0.1.71
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-dependencies
- dependency-name: Meziantou.Analyzer
  dependency-version: 3.0.122
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-dependencies
- dependency-name: Microsoft.SemanticKernel
  dependency-version: 1.78.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-dependencies
- dependency-name: Nerdbank.GitVersioning
  dependency-version: 3.10.91
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@github-actions

Copy link
Copy Markdown
Contributor

Test Results

184 tests   175 ✅  3s ⏱️
  5 suites    9 💤
  5 files      0 ❌

Results for commit 20ee65c.

@github-actions

Copy link
Copy Markdown
Contributor

⚠️ Deprecation Warning: The deny-licenses option is deprecated for possible removal in the next major release. For more information, see issue 997.

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Scanned Files

None

@github-actions

Copy link
Copy Markdown
Contributor

Code Coverage

Summary
  Generated on: 07/13/2026 - 11:31:39
  Coverage date: 07/13/2026 - 11:31:28 - 07/13/2026 - 11:31:37
  Parser: MultiReport (9x Cobertura)
  Assemblies: 1
  Classes: 10
  Files: 9
  Line coverage: 79%
  Covered lines: 230
  Uncovered lines: 61
  Coverable lines: 291
  Total lines: 913
  Branch coverage: 67.2% (78 of 116)
  Covered branches: 78
  Total branches: 116
  Method coverage: 89.5% (43 of 48)
  Full method coverage: 81.2% (39 of 48)
  Covered methods: 43
  Fully covered methods: 39
  Total methods: 48

JD.SemanticKernel.Connectors.ClaudeCode                                    79%
  JD.SemanticKernel.Connectors.ClaudeCode.ClaudeCodeCredentialsFile       100%
  JD.SemanticKernel.Connectors.ClaudeCode.ClaudeCodeHttpClientFactory     100%
  JD.SemanticKernel.Connectors.ClaudeCode.ClaudeCodeOAuthCredentials      100%
  JD.SemanticKernel.Connectors.ClaudeCode.ClaudeCodeSessionException     33.3%
  JD.SemanticKernel.Connectors.ClaudeCode.ClaudeCodeSessionHttpHandler   95.2%
  JD.SemanticKernel.Connectors.ClaudeCode.ClaudeCodeSessionOptions        100%
  JD.SemanticKernel.Connectors.ClaudeCode.ClaudeCodeSessionProvider        70%
  JD.SemanticKernel.Connectors.ClaudeCode.ClaudeModelDiscovery            100%
  JD.SemanticKernel.Connectors.ClaudeCode.KernelBuilderExtensions        93.7%
  JD.SemanticKernel.Connectors.ClaudeCode.ServiceCollectionExtensions     100%

@JerrettDavis
JerrettDavis merged commit 567ca41 into main Jul 13, 2026
11 checks passed
@dependabot
dependabot Bot deleted the dependabot/nuget/nuget-dependencies-db87d7f117 branch July 13, 2026 23:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant