Skip to content

deps: Bump the microsoft-packages group with 10 updates#257

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/libris-maleficarum-service/microsoft-packages-bd1263ca53
Closed

deps: Bump the microsoft-packages group with 10 updates#257
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/libris-maleficarum-service/microsoft-packages-bd1263ca53

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 23, 2026 •
edited
Loading

Updated Microsoft.AspNetCore.Mvc.Testing from 10.0.0 to 10.0.8.

Release notes

Sourced from Microsoft.AspNetCore.Mvc.Testing's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.OpenApi from 10.0.1 to 10.0.8.

Release notes

Sourced from Microsoft.AspNetCore.OpenApi's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Azure.Cosmos from 3.54.0 to 3.60.0.

Release notes

Sourced from Microsoft.Azure.Cosmos's releases.

3.60.0

See changelog for details.

NuGet: https://www.nuget.org/packages/Microsoft.Azure.Cosmos/3.60.0

3.60.0-preview.0

Added

  • 5804 SemanticReranking: Adds Configurable Request Timeout

Fixed

  • 5783 Container: Fixes SemanticRerankAsync TypeLoadException in derived classes

This preview release also includes all changes from 3.59.0.

See full changelog: https://github.com/Azure/azure-cosmos-dotnet-v3/blob/master/changelog.md#​3600-preview0

3.59.0

3.59.0 - 2026-4-24

Features Added

  • 5579 Change Feed Processor: Adds Lease container export support
  • 5709 Performance: Adds caching for URL-encoded AAD authorization signature
  • 5731 DNS dot-suffix: Adds TCP DNS dot-suffix for Direct mode to avoid Kubernetes ndots latency
  • 5755 Exceptionless: Adds enabling exception less 400 status code
  • 5756 Exceptionless: Adds enabling exception less 404/1002 status code
  • 5757 Exceptionless: Adds enabling exception less 403
  • 5779 Direct: Adds Direct package version bump to 3.42.4
  • 5786 Region Availability: Adds missing regions from Direct 3.42.4
  • 5788 Socket Handler: Adds HTTP/2 PING keep-alive to detect broken connections in pool

Bugs Fixed

  • 5553 NativeDLLs: Fixes Conditionally include win-x64 native DLLs based on RuntimeIdentifier
  • 5588 LINQ: Fixes memory leak from Expression.Compile() in all call sites
  • 5617 ChangeFeedProcessor: Fixes first-change skip during initial startup by anchoring StartTime
  • 5636 CosmosClientBuilder: Fixes self-referencing loop in GetSerializedConfiguration with STJ TypeInfoResolver
  • 5748 Routing: Fixes GetOverlappingRanges CPU overhead from repeated JSON deserialization
  • 5807 ChangeFeedProcessor: Fixes lease de-duplication for /partitionKey-partitioned lease containers
  • 5778 DocumentClient: Fixes Potential Memory Leak By Properly Disposing GlobalPartitionEndpointManagerCore. This bug left the circuit breaker failback loop running indefinitely, leaking Task.Delay timers.

3.59.0-preview.0

3.59.0-preview.0 - 2026-3-20

Added

  • 5502 VectorIndex Policy: Adds Support for QuantizerType in IndexingPolicy
  • 5634 Semantic Reranking: Adds response body in semantic reranking error responses
  • 5685 Read Consistency Strategy: Adds Read Consistency Strategy option for read requests
  • 5447 Per Partition Automatic Failover: Adds Hub Region Processing Only While Routing Requests Failed with 404/1002 for single master accounts
  • 5551 HPK: Adds internal CosmosClientOptions flag UseLengthAwareRangeComparer for length aware range comparer rollout
  • 5582 Query: Adds ability to choose global vs local/focused statistics for FullTextScore
  • 5610 Refactors N-Region Synchronous Commit feature to use IServiceConfigurationReaderVNext interface.
  • 5693 ThinClient Integration: Adds Enable Multiple Http2 connection on SocketsHttpHandler
  • 5614 ThinClient Integration: Adds support for QueryPlan in thinclient mode

Fixed

  • 5597 CosmosClient: Fixes ObjectDisposedException message when client is disposed during request
  • 5613 CrossRegionHedgingAvailabilityStrategy: Fixes ArgumentNullException race condition in hedging cancellation
  • 5650 Batch: Fixes null ErrorMessage when promoting status from MultiStatus response
  • 5651 Serializer: Fixes unsafe stream cast in FromStream
  • 5697 ResourceThrottleRetryPolicy: Fixes cumulativeRetryDelay tracking when x-ms-retry-after-ms header is absent

3.58.0

3.58.0 - 2026-3-20

Added

  • 5447 Per Partition Automatic Failover: Adds Hub Region Processing Only While Routing Requests Failed with 404/1002 for single master accounts
  • 5551 HPK: Adds internal CosmosClientOptions flag UseLengthAwareRangeComparer for length aware range comparer rollout
  • 5582 Query: Adds ability to choose global vs local/focused statistics for FullTextScore
  • 5610 Refactors N-Region Synchronous Commit feature to use IServiceConfigurationReaderVNext interface.
  • 5693 ThinClient Integration: Adds Enable Multiple Http2 connection on SocketsHttpHandler
  • 5614 ThinClient Integration: Adds support for QueryPlan in thinclient mode

Fixed

  • 5597 CosmosClient: Fixes ObjectDisposedException message when client is disposed during request
  • 5613 CrossRegionHedgingAvailabilityStrategy: Fixes ArgumentNullException race condition in hedging cancellation
  • 5650 Batch: Fixes null ErrorMessage when promoting status from MultiStatus response
  • 5651 Serializer: Fixes unsafe stream cast in FromStream
  • 5697 ResourceThrottleRetryPolicy: Fixes cumulativeRetryDelay tracking when x-ms-retry-after-ms header is absent

3.58.0-preview.0

3.58.0-preview.0 - 2026-1-15

Added

  • 5511 Tracing: Adds tracing improvements for pkrange refresh calls
  • 5515 [FullTextPolicy]: Adds tests for full text policy multi-language support.
  • 5529 [Thin Client Integration]: Adds support for store procedure in thinclient mode.
  • 5535 [Thin Client Integration]: Adds thinclient header for refresh account data requests.

Fixed

  • 5512 ChangeFeed: Fixes crts field being nullable
  • 5517 SystemTextSerializer: Fixes serialization to preserve polymorphic serialization when base type is marked [JsonPolymorphic]
  • 5498 Query: Fixes hybrid search query plan optimization to be enabled by default
  • 5543 Query: Fixes GetItemQueryIterator to honor the supplied (optional) FeedRange
  • 5541 Upsert/Batch: Fixes bug where RequestOptions are not honored for Upsert requests in Bulk Mode
  • 5544 Query : Fixes LINQ API to support builtin functions - ARRAY_CONTAINS_ALL and ARRAY_CONTAINS_ANY

3.58.0-preivew.1

3.58.0-preview.1 - 2026-2-20

Fixed

  • 5613 CrossRegionHedgingAvailabilityStrategy: Fixes ArgumentNullException race condition in hedging cancellation

3.57.1

3.57.1 - 2026-2-20

Fixed

  • 5613 CrossRegionHedgingAvailabilityStrategy: Fixes ArgumentNullException race condition in hedging cancellation

3.57.0

3.57.0 - 2026-1-15

Added

  • 5511 Tracing: Adds tracing improvements for pkrange refresh calls
  • 5515 [FullTextPolicy]: Adds tests for full text policy multi-language support.
  • 5529 [Thin Client Integration]: Adds support for store procedure in thinclient mode.
  • 5535 [Thin Client Integration]: Adds thinclient header for refresh account data requests.

Fixed

  • 5512 ChangeFeed: Fixes crts field being nullable
  • 5517 SystemTextSerializer: Fixes serialization to preserve polymorphic serialization when base type is marked [JsonPolymorphic]
  • 5498 Query: Fixes hybrid search query plan optimization to be enabled by default
  • 5543 Query: Fixes GetItemQueryIterator to honor the supplied (optional) FeedRange
  • 5541 Upsert/Batch: Fixes bug where RequestOptions are not honored for Upsert requests in Bulk Mode
  • 5544 Query : Fixes LINQ API to support builtin functions - ARRAY_CONTAINS_ALL and ARRAY_CONTAINS_ANY

3.57.0-preview.1

3.57.0-preview.1 - 2025-12-16

Fixed

  • 5528 Semantic Reranking: Refactors RerankResult.Document to return string type

3.57.0-preview.0

3.57.0-preview.0 - 2025-11-25

Added

  • 5445 Semantic Rerank: Adds Semantic Rerank API

3.56.0

3.56.0 - 2025-11-25

Fixed

  • 5550 Owner not found: Fixes substatus code 1003 for item operations when container doesn't exist (Direct mode)

3.56.0-preview.1

3.56.0-preview.1 - 2025-3-10

Fixed

-5613 CrossRegionHedgingAvailabilityStrategy: Fixes ArgumentNullException race condition in hedging cancellation

3.56.0-preview.0

3.56.0-preview.0 - 2025-11-14

Fixed

  • 5260 HPK: Fixes Lengthaware normalized EPK comparators as default (only in preview)

3.55.1

3.55.1 - 2025-3-10

Fixed

-5613 CrossRegionHedgingAvailabilityStrategy: Fixes ArgumentNullException race condition in hedging cancellation

3.55.0

3.55.0 - 2025-11-14

Added

  • 5462 [VectorIndexPath]: Adds GA IndexingSearchListSize and VectorIndexShardKey
  • 5470 Change feed: Adds id and pk to ChangeFeedMetadata for delete operations (Default policy excludes Previous for deletes)
  • 5474 Binary Encoding: Adds support to DateTimeOffset type

Fixed

  • 5469 BarrierRequests: Adds 410/LeaseNotFound(1022) fail-fast to cross-region retries by retrying on primary (checks last replica response)
  • 5475 Query: Fixes query advisor prefix url links to use aka.ms
  • 5476 HttpTimeoutPolicy: Fixes QueryPlan retry gaps (Http POST but its Read)
  • 5497 HttpTimeoutPolicy: Fixes PPAF and ThinProxy timeout polices to (6s, 6s, 10s) for both PointReads and NonPointReads

3.55.0-preview.1

3.55.0-preview.0

3.55.0-preview.0 - 2025-10-2

Note: FullTextScore query function now expects string value parameters (e.g., FullTextScore(c.text, 'swim','run')); preview array syntax is no longer supported.

Added

  • 5368 VectorDataType: Adds Support for Float16 Data Type
  • 5411 Hedging: Adds GA for adding hedging via RequestOptions
  • 5412 Hedging: Adds back diagnostics filed Response Region to hedging request diagnostics
  • 5386 Build: Removes System.Net.Http and System.Text.RegularExpressions package references

Fixed

  • 5409 Query: Fixes to not use passthrough context for collections with HPK
  • 5422 Diagnostics: Fixes race condition that can cause InvalidOperationException in CosmosOperationCancelledException.ToString()
  • 5427 PPAF: Fixes issue where setting RequestTimeout to 0 second will cause PPAF dynamic enablement to break

3.54.1

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Cosmos from 10.0.0 to 10.0.8.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Cosmos's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.InMemory from 10.0.0 to 10.0.8.

Release notes

Sourced from Microsoft.EntityFrameworkCore.InMemory's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.AI from 9.5.0 to 9.10.2.

Release notes

Sourced from Microsoft.Extensions.AI's releases.

9.10.0

What's Changed

New Contributors

9.9.0

Highlights

AI

  • Abstractions for remote MCP servers; response/approval flow support via new experimental types
  • Function approvals via new experimental types (e.g., ApprovalRequiredAIFunction, user input/approval request & response content).
  • Reasoning text streaming for OpenAI Responses ChatClient streaming.
  • AIFunction split into a base class to improve extensibility.
  • IChatReducer moved to Microsoft.Extensions.AI.Abstractions.
  • Updated to OpenAI 2.4.0 and genai standard convention 1.37.
  • Coalescing logic now treats ChatMessage.Role changes as new messages.
  • GetResponseAsync<T> now reads only the last message (bug fix).
  • OpenTelemetry ChatClient/EmbeddingGenerator logs raw additional properties (no key mangling).
  • Fixed empty annotated text chunk handling in streaming with OpenAI Assistants.

Telemetry & Diagnostics

  • HTTP diagnostics log query string params with proper redaction (emitted on url.query).
  • server.address telemetry emits host only (per OpenTelemetry semantic conventions).
  • Heuristics added to detect well-known model hosts.
  • Resource monitoring can consider Environment.CpuUsage.

New Contributors

Full Changelog: dotnet/extensions@v9.8.0...v9.9.0

9.8.0

What's Changed

9.7.2

Packages Released

What's Changed

  • Target .NET 8 for more stable runtime requirement by @​joelverhagen in #​6617

Full Changelog: dotnet/extensions@v9.7.1...v9.7.2

9.7.1

Packages Released

What's Changed

Full Changelog: dotnet/extensions@v9.7.0...v9.7.1

9.7.0

What's Changed

New Contributors

Full Changelog: dotnet/extensions@v9.6.0...v9.7.0

9.6.0

What's Changed

New Contributors

Full Changelog: dotnet/extensions@v9.5.0...v9.6.0

Commits viewable in compare view.

Updated Microsoft.Extensions.DependencyInjection from 10.0.1 to 10.0.8.

Release notes

Sourced from Microsoft.Extensions.DependencyInjection's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Http.Resilience from 10.1.0 to 10.6.0.

Release notes

Sourced from Microsoft.Extensions.Http.Resilience's releases.

10.6.0

Version 10.6.0 stabilizes the response continuation token and background-response APIs in Microsoft.Extensions.AI.Abstractions. Most other AI work for May shipped in 10.5.1; this monthly release rolls those changes up alongside dependency updates and a small Resource Monitoring cleanup.

Experimental API Changes

Now Stable

  • ResponseContinuationToken and background-response APIs are now stable (previously MEAI001) #​7512

What's Changed

AI

  • Stabilize ResponseContinuationToken / background-response APIs #​7512 by @​jozkee (co-authored by @​Copilot)

Repository Infrastructure Updates

  • Update version to 10.6.0 #​7458 by @​jeffhandley
  • [main] Update dependencies from dotnet/arcade #​7451
  • Bump follow-redirects from 1.15.11 to 1.16.0 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript/azure-devops-report/tasks/PublishAIEvaluationReport #​7469
  • Merge release/10.5 into main #​7470 by @​jeffhandley
  • Bump microsoft.visualstudio.slngen.tool from 12.0.13 to 12.0.32 #​7484
  • Bump postcss from 8.5.9 to 8.5.12 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7494
  • Bump dotnet-reportgenerator-globaltool from 5.5.7 to 5.5.9 #​7504
  • Rename release-notes skill to write-release-notes #​7511 by @​jeffhandley (co-authored by @​Copilot)

Acknowledgements

  • @​wtgodbe @​tarekgh @​peterwald @​JeremyLikness @​eiriktsarpalis @​ericstj @​evgenyfedorov2 reviewed pull requests

Full Changelog: dotnet/extensions@v10.5.2...v10.6.0

10.5.2

This patch release ships a single fix to Microsoft.Extensions.VectorData.Abstractions, correcting StorageName resolution when external serialization is enabled. Microsoft.Extensions.VectorData.ConformanceTests, Microsoft.Extensions.AI.Abstractions, Microsoft.Extensions.AI, and Microsoft.Extensions.AI.OpenAI are published alongside it for version coherency — they contain no code changes from 10.5.1.

Packages in this release

Package Version
Microsoft.Extensions.VectorData.Abstractions 10.5.2
Microsoft.Extensions.VectorData.ConformanceTests 10.5.2
Microsoft.Extensions.AI.Abstractions 10.5.2
Microsoft.Extensions.AI 10.5.2
Microsoft.Extensions.AI.OpenAI 10.5.2

What's Changed

Microsoft.Extensions.VectorData.Abstractions

  • Minor fixes to MEVD.Abstractions: correct StorageName behavior when external serialization is enabled, and disable a warning for net462. (by @​roji in #​7475)

Full Changelog: dotnet/extensions@v10.5.1...v10.5.2

10.5.1

Version 10.5.1 of the Microsoft.Extensions.AI packages stabilizes CodeInterpreter, WebSearch, and ImageGeneration tool content types. The release adds new experimental tool search and OpenAI request policy hooks. And the OpenTelemetry gen-ai semantic conventions are updated to align with v1.41.

The 'aiagent-webapi' project template in Microsoft.Agents.AI.ProjectTemplates is updated to align with v1.3.0 of Agent Framework, updating the OpenTelemetry dependencies within the template projects as well.

Packages in this release

Package Version
Microsoft.Extensions.AI 10.5.1
Microsoft.Extensions.AI.Abstractions 10.5.1
Microsoft.Extensions.AI.OpenAI 10.5.1
Microsoft.Extensions.AI.Templates 10.5.1-preview.3.26251.3
Microsoft.Agents.AI.ProjectTemplates 1.3.0-preview.1.26251.3

Experimental API Changes

Now Stable

The following types previously emitted the MEAI001 experimental diagnostic and are now stable.

  • CodeInterpreter and WebSearch tool content types are now stable #​7493
    • CodeInterpreterToolCallContent
    • CodeInterpreterToolResultContent
    • WebSearchToolCallContent
    • WebSearchToolResultContent
  • ImageGeneration tool content types and tool are now stable #​7476
    • ImageGenerationToolCallContent
    • ImageGenerationToolResultContent
    • HostedImageGenerationTool
    • ImageGenerationOptions
    • ImageGenerationResponseFormat (the Hosted enum value remains experimental)
    • IImageGenerator and the rest of the image generation infrastructure also remain experimental

New Experimental APIs

The following new APIs emit the MEAI001 experimental diagnostic.

  • New experimental API: HostedToolSearchTool with DeferredTools for tool-search-driven deferred tool loading #​7471
  • New experimental API: OpenAIRequestPolicies extension hook for appending System.ClientModel.PipelinePolicy instances to outgoing OpenAI requests #​7495

Breaking Changes to Experimental APIs

  • WebSearchToolResultContent.Results was renamed to Outputs as part of the stabilization in #​7493, aligning with CodeInterpreterToolResultContent.Outputs. The original Results property was included in version 10.4.0 and 10.5.0; this is a binary breaking change and consumers need to update to consume the updated property.

    WebSearchToolResultContent content = ...;
- IList<AIContent>? items = content.Results;
+ IList<AIContent>? items = content.Outputs;

... (truncated)

10.5.0

HTTP Logging Middleware APIs in Microsoft.AspNetCore.Diagnostics.Middleware are now stable. This release also transfers Microsoft.Extensions.VectorData.Abstractions and Microsoft.Extensions.VectorData.ConformanceTests from the Semantic Kernel repository into dotnet/extensions, jumping from 10.1.0 to 10.5.0 for consistent versioning. The release also delivers fixes across the AI libraries, AI Evaluation, and Service Discovery.

Breaking Changes

  1. Rename VectorStoreVectorAttribute constructor parameter #​7460
    • The Dimensions parameter was renamed to dimensions (lowercase). This is a source-breaking change only — binary compatibility is preserved.
    • If you use the named argument syntax new VectorStoreVectorAttribute(Dimensions: 1536), update it to new VectorStoreVectorAttribute(dimensions: 1536).

Experimental API Changes

Now Stable

  • HTTP Logging Middleware APIs are now stable (previously EXTEXP0013): AddHttpLogEnricher<T>, IHttpLogEnricher, and RequestHeadersLogEnricherOptions.HeadersDataClasses #​7380

What's Changed

AI

  • Fix OpenAIResponsesChatClient to respect "store":false in responses #​7417 by @​stephentoub
  • Fix InvalidOperationException in CoalesceWebSearchToolCallContent #​7419 by @​stephentoub
  • Handle F# optional parameters in AIFunctionFactory schema generation #​7439 by @​eiriktsarpalis
  • Fix ComputerCallResponseItem using Item.Id instead of CallId #​7446 by @​jozkee
  • Fix HostedFileContent with image MIME type sent as input_file instead of input_image #​7438 by @​stephentoub (co-authored by @​copilot)
  • Guard Activity.Current restore with null check in OpenTelemetry streaming clients #​7443 by @​stephentoub (co-authored by @​copilot)
  • Enable stateless mode in remote MCP server template (released as v1.2.0 on 2026-04-01) #​7441 by @​jeffhandley

Vector Data

  • Move Microsoft.Extensions.VectorData.Abstractions over from Semantic Kernel #​7434 by @​roji
  • Rename VectorStoreVectorAttribute dimensions constructor parameter #​7460 by @​roji

AI Evaluation

  • Add Path Validation for DiskBasedResponseCache and DiskBasedResultStore #​7397 by @​peterwald
  • Update brace-expansion for CVE-2026-33750 #​7457 by @​SamMonoRT

ASP.NET Core Extensions

  • Removing experimental attribute from Http logging middleware #​7380 by @​mariamgerges

Service Discovery

  • Implement RFC6761 reserved DNS names handling #​6924 by @​rzikm

Documentation Updates

  • Remove per-library CHANGELOG.md files #​7413 by @​jeffhandley

Test Improvements

... (truncated)

10.4.1

This release of the Microsoft.Extensions.AI packages adds new experimental APIs for Realtime client sessions and Text-to-Speech, along with OpenTelemetry and middleware improvements.

Packages in this release

Package Version
Microsoft.Extensions.AI.Abstractions 10.4.1
Microsoft.Extensions.AI 10.4.1
Microsoft.Extensions.AI.OpenAI 10.4.1

Experimental API Changes

New Experimental APIs

  • New experimental API: Realtime Client Sessions #​7285 and #​7399
  • New experimental API: Text-to-Speech Client #​7381

Changes to Experimental APIs

  • Hosted File Download Stream: write-path methods now explicitly throw NotSupportedException #​7394

What's Changed

AI

  • Add ITextToSpeechClient abstraction, middleware, and OpenAI implementation #​7381 by @​stephentoub
  • Realtime Client Proposal #​7285 by @​tarekgh
  • Add VoiceActivityDetection options to realtime session abstractions #​7399 by @​tarekgh
  • Make UriContent mediaType parameter optional with inference from URI file extension #​7398 by @​stephentoub (co-authored by @​Copilot)
  • Emit gen_ai.client.operation.exception via ILogger LoggerMessage on OpenTelemetry instrumentation classes #​7379 by @​stephentoub (co-authored by @​Copilot)
  • Support invoke_workflow as an equivalent parent span to invoke_agent in FunctionInvokingChatClient #​7382 by @​stephentoub (co-authored by @​Copilot)
  • Make HostedFileDownloadStream explicitly read-only #​7394 by @​stephentoub (co-authored by @​Copilot)

Documentation Updates

  • Document JSON schema derivation for return types in AIFunctionFactory #​7400 by @​stephentoub (co-authored by @​Copilot)

Test Improvements

  • Fix test warnings #​7369 by @​jozkee
  • Add tests for JSON deserialization of serializable types #​7373 by @​stephentoub (co-authored by @​Copilot)

Repository Infrastructure Updates

  • Update Package Validation Baseline to 10.4.0 #​7389 by @​jeffhandley (co-authored by @​Copilot)
  • Update ModelContextProtocol libraries to version 1.0.0 #​7340 by @​stephentoub (co-authored by @​Copilot)

Acknowledgements

  • @​eiriktsarpalis @​ericstj @​CodeBlanch @​lmolkova @​adamsitnik @​joperezr reviewed pull requests
    ... (truncated)

10.4.0

This release advances the AI abstractions with new hosted file, web search, and reasoning content types, stabilizes MCP and tool approval APIs, adds streaming latency metrics to OpenTelemetry instrumentation, and delivers bug fixes across caching, data ingestion, and resource monitoring.

Experimental API Changes

Now Stable

  • MCP Server Tool Content and Function Call Approval APIs are now stable (previously MEAI001) #​7299
  • FakeLogCollector.GetLogsAsync(CancellationToken) is now stable (previously EXTEXP0003) #​7332

New Experimental APIs

  • New experimental AddExtendedHttpClientLogging overloads with wrapHandlersPipeline parameter (EXTEXP0013) #​7231

Removed Experimental APIs

  • AI Tool Reduction experimental APIs removed (was experimental under MEAI001) #​7353

What's Changed

AI

  • Add IHostedFileClient and friends #​7269 by @​stephentoub
  • Add web search tool call content #​7276 by @​stephentoub (co-authored by @​Copilot)
  • Surface OpenAI-compatible reasoning_content as TextReasoningContent #​7295 by @​stephentoub
  • MCP/Approvals/Tool Contents stabilization #​7299 by @​jozkee
  • Implement time_to_first_chunk and time_per_output_chunk streaming metrics in OpenTelemetryChatClient #​7325 by @​stephentoub (co-authored by @​Copilot)
  • Add openai.api.type telemetry attribute to OpenAI IChatClient implementations #​7316 by @​stephentoub (co-authored by @​Copilot)
  • Update OpenTelemetry Gen AI semantic conventions to v1.40 #​7322 by @​stephentoub (co-authored by @​Copilot)
  • Fix tool definitions emission regardless of sensitivity setting #​7346 by @​stephentoub (co-authored by @​Copilot)
  • Honor [Required] attribute in AI function parameter JSON schema generation #​7272 by @​stephentoub (co-authored by @​Copilot)
  • AddAIContentType automatically registers content type against every base in the inheritance chain up to AIContent #​7358 by @​jozkee (co-authored by @​Copilot)
  • Auto-mark server-handled FunctionCallContent as InformationalOnly #​7314 by @​stephentoub (co-authored by @​Copilot)
  • Map ReasoningEffort.None and ExtraHigh to none and xhigh in OpenAI IChatClient implementations #​7319 by @​stephentoub (co-authored by @​Copilot)
  • Handle DynamicMethod reflection limitations in AIFunctionFactory #​7287 by @​stephentoub (co-authored by @​Copilot)
  • Fix Activity.Current nulled during streaming tool invocation #​7321 by @​flaviocdc (co-authored by @​Copilot)
  • Handle FunctionCallOutputResponseItem in streaming response conversion #​7307 by @​stephentoub (co-authored by @​Copilot)
  • Fix serialization of response continuation tokens #​7356 by @​stephentoub
  • Remove AI Tool Reduction experimental APIs #​7353 by @​stephentoub (co-authored by @​Copilot)
  • Update OpenAI to 2.9.1 #​7349 by @​stephentoub

Telemetry and Observability

  • Introduce support for the Gauge metric type #​7203 by @​rainsxng
  • Update logging source generator to support generic methods #​7331 by @​svick (co-authored by @​Copilot)
  • Update logging source generator to match runtime PR #​124589 (ref readonly/params/scoped) #​7333 by @​svick (co-authored by @​Copilot)
  • Promote FakeLogCollector.GetLogsAsync(CancellationToken) from experimental to stable #​7332 by @​Demo30
  • Remove obsolete CS1591 warning suppression from generated file preamble #​7308 by @​luissena

HTTP Resilience and Diagnostics

... (truncated)

10.3.0

Experimental API Changes

Now Stable

  • IChatReducer interface — graduated from experimental to stable. The interface is now stable; concrete implementations (MessageCountingChatReducer, SummarizingChatReducer, ReducingChatClient) remain experimental. #​7235 by @​jeffhandley
  • FunctionCallContent and FunctionResultContent unsealed — changed from sealed class to class, enabling derivation. #​7229 by @​stephentoub (co-authored by @​Copilot)

Breaking Changes to Experimental APIs

  • Experimental diagnostic ID reorganization — the blanket MEAI001 diagnostic ID was split into feature-specific constants. OpenAI-specific experimental APIs now use OPENAI001, OPENAI002, or SCME0001 instead of MEAI001. Consumers who suppressed MEAI001 for OpenAI APIs may need to suppress OPENAI001/OPENAI002 instead. #​7116 by @​jeffhandley (co-authored by @​Copilot), #​7235 by @​jeffhandley

New Experimental APIs

  • Chat reduction implementations — MessageCountingChatReducer, SummarizingChatReducer, ReducingChatClient, and UseChatReducer builder extension. #​7235 by @​jeffhandley
  • OpenAI Responses/Assistants/Realtime/Image/Audio integrations — assigned feature-specific experimental diagnostic IDs (OPENAI001, OPENAI002). #​7235 by @​jeffhandley
  • ImageGenerationToolCallContent and ImageGenerationToolResultContent — added to JSON serialization infrastructure. #​7275 by @​stephentoub (co-authored by @​Copilot)

What's Changed

AI

  • Add ReasoningOptions to ChatOptions #​7252 by @​stephentoub (co-authored by @​Copilot)
  • Add LoadFromAsync and SaveToAsync helper methods to DataContent #​7159 by @​stephentoub (co-authored by @​Copilot)
  • Add FunctionCallContent.InformationalOnly property #​7126, #​7262 by @​stephentoub (co-authored by @​Copilot)
  • Add server tool call support to OpenTelemetryChatClient per semantic conventions #​7240 by @​stephentoub (co-authored by @​Copilot)
  • Add ImageGenerationToolCallContent and ImageGenerationToolResultContent to JSON serialization infrastructure #​7275 by @​stephentoub (co-authored by @​Copilot)
  • Add logging to FunctionInvokingChatClient for approval flow, error handling, and loop control #​7228 by @​stephentoub (co-authored by @​Copilot)
  • Allow FunctionResultContent pass-through when CallId matches #​7229 by @​stephentoub (co-authored by @​Copilot)
  • Remove AIFunctionDeclaration tools on last iteration in FunctionInvokingChatClient #​7207 by @​stephentoub (co-authored by @​Copilot)
  • Propagate CachedInputTokenCount in OpenTelemetry telemetry #​7234 by @​stephentoub (co-authored by @​Copilot)
  • Categorize MEAI001 experimental APIs #​7116 by @​jeffhandley (co-authored by @​Copilot)
  • MEAI: Update Experimental / Preview Features #​7235 by @​jeffhandley
  • ToChatResponse: Merge AdditionalProperties into ChatMessage instead of ChatResponse #​7194 by @​stephentoub (co-authored by @​Copilot)
  • Fix FunctionInvokingChatClient to respect ChatOptions.Tools modifications by function tools #​7218 by @​stephentoub (co-authored by @​Copilot)
  • Fix FunctionInvokingChatClient invoke_agent span detection with exact match or space delimiter #​7224 by @​stephentoub (co-authored by @​Copilot)
  • Fix approval request/response correlation in FunctionInvokingChatClient #​7261 by @​stephentoub (co-authored by @​Copilot)
  • Fix DataUriParser to default to text/plain;charset=US-ASCII per RFC 2397 #​7247 by @​stephentoub (co-authored by @​Copilot)
  • Fix NRT resolution for AIFunction parameters #​7200 by @​eiriktsarpalis
  • Preserve extra JSON schema properties in ToolJson serialization #​7250 by @​stephentoub (co-authored by @​Copilot)
  • Fix token metric unit to use UCUM format {token} #​7241 by @​stephentoub
  • Fix OpenAI responses streaming to preserve encrypted reasoning content #​7266 by @​stephentoub
  • Update OpenAIResponsesChatClient to handle streaming code interpreter content #​7267 by @​stephentoub

Diagnostics, Health Checks, and Resource Monitoring

  • [5752] FakeLogCollector waiting capabilities #​6228 by @​Demo30
  • Bring new cpu.requests formula from Kubernetes #​7239 by @​amadeuszl

Service Discovery

... (truncated)

10.2.0

What's Changed

New Contributors

Full Changelog: dotnet/extensions@v10.1...v10.2.0

Commits viewable in compare view.

Updated Microsoft.Extensions.ServiceDiscovery from 10.1.0 to 10.6.0.

Release notes

Sourced from Microsoft.Extensions.ServiceDiscovery's releases.

10.6.0

Version 10.6.0 stabilizes the response continuation token and background-response APIs in Microsoft.Extensions.AI.Abstractions. Most other AI work for May shipped in 10.5.1; this monthly release rolls those changes up alongside dependency updates and a small Resource Monitoring cleanup.

Experimental API Changes

Now Stable

  • ResponseContinuationToken and background-response APIs are now stable (previously MEAI001) #​7512

What's Changed

AI

  • Stabilize ResponseContinuationToken / background-response APIs #​7512 by @​jozkee (co-authored by @​Copilot)

Repository Infrastructure Updates

  • Update version to 10.6.0 #​7458 by @​jeffhandley
  • [main] Update dependencies from dotnet/arcade #​7451
  • Bump follow-redirects from 1.15.11 to 1.16.0 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript/azure-devops-report/tasks/PublishAIEvaluationReport #​7469
  • Merge release/10.5 into main #​7470 by @​jeffhandley
  • Bump microsoft.visualstudio.slngen.tool from 12.0.13 to 12.0.32 #​7484
  • Bump postcss from 8.5.9 to 8.5.12 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7494
  • Bump dotnet-reportgenerator-globaltool from 5.5.7 to 5.5.9 #​7504
  • Rename release-notes skill to write-release-notes #​7511 by @​jeffhandley (co-authored by @​Copilot)

Acknowledgements

  • @​wtgodbe @​tarekgh @​peterwald @​JeremyLikness @​eiriktsarpalis @​ericstj @​evgenyfedorov2 reviewed pull r...

Description has been truncated

This change is Reviewable

@dependabot
deps: Bump the microsoft-packages group with 10 updates
fe0091c 
Bumps Microsoft.AspNetCore.Mvc.Testing from 10.0.0 to 10.0.8
Bumps Microsoft.AspNetCore.OpenApi from 10.0.1 to 10.0.8
Bumps Microsoft.Azure.Cosmos from 3.54.0 to 3.60.0
Bumps Microsoft.EntityFrameworkCore.Cosmos from 10.0.0 to 10.0.8
Bumps Microsoft.EntityFrameworkCore.InMemory from 10.0.0 to 10.0.8
Bumps Microsoft.Extensions.AI from 9.5.0 to 9.10.2
Bumps Microsoft.Extensions.DependencyInjection from 10.0.1 to 10.0.8
Bumps Microsoft.Extensions.Http.Resilience from 10.1.0 to 10.6.0
Bumps Microsoft.Extensions.ServiceDiscovery from 10.1.0 to 10.6.0
Bumps Microsoft.Identity.Web from 3.11.0 to 3.15.0

---
updated-dependencies:
- dependency-name: Microsoft.AspNetCore.Mvc.Testing
  dependency-version: 10.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: microsoft-packages
- dependency-name: Microsoft.AspNetCore.OpenApi
  dependency-version: 10.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: microsoft-packages
- dependency-name: Microsoft.Azure.Cosmos
  dependency-version: 3.60.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: microsoft-packages
- dependency-name: Microsoft.EntityFrameworkCore.Cosmos
  dependency-version: 10.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: microsoft-packages
- dependency-name: Microsoft.EntityFrameworkCore.InMemory
  dependency-version: 10.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: microsoft-packages
- dependency-name: Microsoft.Extensions.AI
  dependency-version: 9.10.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: microsoft-packages
- dependency-name: Microsoft.Extensions.DependencyInjection
  dependency-version: 10.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: microsoft-packages
- dependency-name: Microsoft.Extensions.Http.Resilience
  dependency-version: 10.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: microsoft-packages
- dependency-name: Microsoft.Extensions.ServiceDiscovery
  dependency-version: 10.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: microsoft-packages
- dependency-name: Microsoft.Identity.Web
  dependency-version: 3.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: microsoft-packages
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 23, 2026

Labels

The following labels could not be found: .net, dependencies, nuget. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot requested a review from PlagueHO as a code owner May 23, 2026 04:15
@github-actions
Copy link
Copy Markdown

github-actions Bot commented May 23, 2026

Dependency Review

The following issues were found:
  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 2 package(s) with unknown licenses.
See the Details below.

License Issues

libris-maleficarum-service/src/Client/Api/LibrisMaleficarum.Api.Client.csproj

PackageVersionLicenseIssue Type
Microsoft.Extensions.DependencyInjection>= 0NullUnknown License

libris-maleficarum-service/src/Components/Import/LibrisMaleficarum.Import.csproj

PackageVersionLicenseIssue Type
Microsoft.Extensions.DependencyInjection>= 0NullUnknown License

OpenSSF Scorecard

PackageVersionScoreDetails
nuget/Microsoft.Extensions.DependencyInjection >= 0 UnknownUnknown
nuget/Microsoft.Extensions.DependencyInjection >= 0 UnknownUnknown

Scanned Files

  • libris-maleficarum-service/src/Client/Api/LibrisMaleficarum.Api.Client.csproj
  • libris-maleficarum-service/src/Components/Import/LibrisMaleficarum.Import.csproj

@PlagueHO
Copy link
Copy Markdown
Owner

PlagueHO commented May 23, 2026

[dependabot-triage-js-analyze]
Automated triage: the only failing required check is Analyze (javascript-typescript).

Analyze (csharp), Dependency Review, and CodeQL are passing on this PR, and the same JavaScript/TypeScript analysis failure pattern is present across the current open Dependabot PRs. That points to a repository-level CI or CodeQL analysis/setup issue rather than a PR-specific dependency regression.

I am not merging while required checks are failing. After the Analyze (javascript-typescript) check is fixed or rerun successfully, this PR can be reevaluated for merge.

@PlagueHO
Copy link
Copy Markdown
Owner

PlagueHO commented May 23, 2026

@dependabot rebase .

1 similar comment
@PlagueHO
Copy link
Copy Markdown
Owner

PlagueHO commented May 23, 2026

@dependabot rebase .

@PlagueHO
Copy link
Copy Markdown
Owner

PlagueHO commented May 23, 2026

@dependabot rebase

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 23, 2026

Superseded by #261.

@dependabot dependabot Bot closed this May 23, 2026
@dependabot dependabot Bot deleted the dependabot/nuget/libris-maleficarum-service/microsoft-packages-bd1263ca53 branch May 23, 2026 06:38
Copilot stopped work on behalf of PlagueHO due to an error May 23, 2026 06:39
The session was cancelled by the user.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@PlagueHO PlagueHO Awaiting requested review from PlagueHO PlagueHO is a code owner

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@PlagueHO