Skip to content

deps: Bump Microsoft.Extensions.Configuration and 6 others#25

Merged
JerrettDavis merged 2 commits intomainfrom
dependabot/nuget/microsoft-37396488cc
Apr 20, 2026
Merged

deps: Bump Microsoft.Extensions.Configuration and 6 others#25
JerrettDavis merged 2 commits intomainfrom
dependabot/nuget/microsoft-37396488cc

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 20, 2026

Pinned Microsoft.Extensions.Configuration at 10.0.6.

Release notes

Sourced from Microsoft.Extensions.Configuration's releases.

No release notes found for this version range.

Commits viewable in compare view.

Pinned Microsoft.Extensions.DependencyInjection.Abstractions at 10.0.6.

Release notes

Sourced from Microsoft.Extensions.DependencyInjection.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Logging from 10.0.5 to 10.0.6.

Release notes

Sourced from Microsoft.Extensions.Logging's releases.

No release notes found for this version range.

Commits viewable in compare view.

Pinned Microsoft.Extensions.Logging.Abstractions at 10.0.6.

Release notes

Sourced from Microsoft.Extensions.Logging.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Pinned Microsoft.Extensions.Options at 10.0.6.

Release notes

Sourced from Microsoft.Extensions.Options's releases.

No release notes found for this version range.

Commits viewable in compare view.

Pinned Microsoft.Extensions.Options.ConfigurationExtensions at 10.0.6.

Release notes

Sourced from Microsoft.Extensions.Options.ConfigurationExtensions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.SourceLink.GitHub from 10.0.201 to 10.0.202.

Release notes

Sourced from Microsoft.SourceLink.GitHub's releases.

10.0.202

You can build .NET 10.0 from the repository by cloning the release tag v10.0.202 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

Commits viewable in compare view.

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Apr 20, 2026

Labels

The following labels could not be found: nuget. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@github-actions
Copy link
Copy Markdown

github-actions Bot commented Apr 20, 2026

⚠️ Deprecation Warning: The deny-licenses option is deprecated for possible removal in the next major release. For more information, see issue 997.

Dependency Review

The following issues were found:
  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 1 package(s) with unknown licenses.
See the Details below.

License Issues

samples/CopilotChat/CopilotChat.csproj

PackageVersionLicenseIssue Type
Microsoft.Extensions.Configuration>= 0NullUnknown License
Denied Licenses: GPL-2.0, GPL-3.0, AGPL-3.0

OpenSSF Scorecard

PackageVersionScoreDetails
nuget/Microsoft.Extensions.Configuration >= 0 UnknownUnknown

Scanned Files

  • samples/CopilotChat/CopilotChat.csproj

@github-actions
Copy link
Copy Markdown

github-actions Bot commented Apr 20, 2026

Test Results

101 tests   92 ✅  0s ⏱️
  3 suites   9 💤
  3 files     0 ❌

Results for commit 10f53e9.

♻️ This comment has been updated with latest results.

@dependabot dependabot Bot changed the title deps: Bump the microsoft group with 7 updates deps: Bump Microsoft.Extensions.Configuration and 6 others Apr 20, 2026
Bumps Microsoft.Extensions.Configuration from 10.0.5 to 10.0.6
Bumps Microsoft.Extensions.DependencyInjection.Abstractions from 10.0.5 to 10.0.6
Bumps Microsoft.Extensions.Logging from 10.0.5 to 10.0.6
Bumps Microsoft.Extensions.Logging.Abstractions from 10.0.5 to 10.0.6
Bumps Microsoft.Extensions.Options from 10.0.5 to 10.0.6
Bumps Microsoft.Extensions.Options.ConfigurationExtensions from 10.0.5 to 10.0.6
Bumps Microsoft.SourceLink.GitHub from 10.0.201 to 10.0.202

---
updated-dependencies:
- dependency-name: Microsoft.Extensions.Configuration
  dependency-version: 10.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: microsoft
- dependency-name: Microsoft.Extensions.DependencyInjection.Abstractions
  dependency-version: 10.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: microsoft
- dependency-name: Microsoft.Extensions.Logging
  dependency-version: 10.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: microsoft
- dependency-name: Microsoft.Extensions.Logging.Abstractions
  dependency-version: 10.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: microsoft
- dependency-name: Microsoft.Extensions.Options
  dependency-version: 10.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: microsoft
- dependency-name: Microsoft.Extensions.Options.ConfigurationExtensions
  dependency-version: 10.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: microsoft
- dependency-name: Microsoft.SourceLink.GitHub
  dependency-version: 10.0.202
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: microsoft
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/nuget/microsoft-37396488cc branch from 90d7046 to de40551 Compare April 20, 2026 12:49
The Dependabot PR bumped Microsoft.Extensions.Options.ConfigurationExtensions
to 10.0.6 which transitively requires Microsoft.Extensions.Configuration >=
10.0.6, but the csproj still had VersionOverride=10.0.5, causing NU1605.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@github-actions
Copy link
Copy Markdown

Code Coverage

Summary
  Generated on: 04/20/2026 - 13:01:44
  Coverage date: 04/20/2026 - 13:01:39 - 04/20/2026 - 13:01:42
  Parser: MultiReport (5x Cobertura)
  Assemblies: 2
  Classes: 14
  Files: 13
  Line coverage: 87.2%
  Covered lines: 225
  Uncovered lines: 33
  Coverable lines: 258
  Total lines: 880
  Branch coverage: 78.5% (77 of 98)
  Covered branches: 77
  Total branches: 98
  Method coverage: 98% (51 of 52)
  Full method coverage: 88.4% (46 of 52)
  Covered methods: 51
  Fully covered methods: 46
  Total methods: 52

JD.SemanticKernel.Connectors.Abstractions                                   100%
  JD.SemanticKernel.Connectors.Abstractions.ModelInfo                       100%
  JD.SemanticKernel.Connectors.Abstractions.SessionCredentials              100%
  JD.SemanticKernel.Connectors.Abstractions.SessionOptionsBase              100%

JD.SemanticKernel.Connectors.GitHubCopilot                                 86.9%
  JD.SemanticKernel.Connectors.GitHubCopilot.CopilotHttpClientFactory       100%
  JD.SemanticKernel.Connectors.GitHubCopilot.CopilotModelDiscovery          100%
  JD.SemanticKernel.Connectors.GitHubCopilot.CopilotSessionException        100%
  JD.SemanticKernel.Connectors.GitHubCopilot.CopilotSessionHttpHandler      100%
  JD.SemanticKernel.Connectors.GitHubCopilot.CopilotSessionOptions          100%
  JD.SemanticKernel.Connectors.GitHubCopilot.CopilotSessionProvider        75.9%
  JD.SemanticKernel.Connectors.GitHubCopilot.KernelBuilderExtensions        100%
  JD.SemanticKernel.Connectors.GitHubCopilot.Models.CopilotAppsEntry       66.6%
  JD.SemanticKernel.Connectors.GitHubCopilot.Models.CopilotEndpoints        100%
  JD.SemanticKernel.Connectors.GitHubCopilot.Models.CopilotTokenResponse    100%
  JD.SemanticKernel.Connectors.GitHubCopilot.ServiceCollectionExtensions    100%

@codecov-commenter
Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
⚠️ Please upload report for BASE (main@c5055d1). Learn more about missing BASE report.

Additional details and impacted files
@@           Coverage Diff           @@
##             main      #25   +/-   ##
=======================================
  Coverage        ?   82.94%           
=======================================
  Files           ?       13           
  Lines           ?      258           
  Branches        ?       40           
=======================================
  Hits            ?      214           
  Misses          ?       33           
  Partials        ?       11           
Flag Coverage Δ
unittests 82.94% <ø> (?)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants