Skip to content

Update: Bump Microsoft.Extensions.Hosting and 5 others#10

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/nuget-dependencies-1d4a75407d
Open

Update: Bump Microsoft.Extensions.Hosting and 5 others#10
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/nuget-dependencies-1d4a75407d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 18, 2026

Copy link
Copy Markdown
Contributor

Updated Microsoft.Extensions.Hosting from 10.0.9 to 10.0.10.

Release notes

Sourced from Microsoft.Extensions.Hosting's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.7.0 to 18.8.1.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.8.1

What's Changed

Full Changelog: microsoft/vstest@v18.8.0...v18.8.1

18.8.0

What's Changed

Full Changelog: microsoft/vstest@v18.7.0...v18.8.0

Commits viewable in compare view.

Updated Microsoft.SourceLink.GitHub from 10.0.300 to 10.0.301.

Release notes

Sourced from Microsoft.SourceLink.GitHub's releases.

10.0.301

You can build .NET 10.0 from the repository by cloning the release tag v10.0.301 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

Commits viewable in compare view.

Updated ModelContextProtocol from 1.4.0 to 1.4.1.

Release notes

Sourced from ModelContextProtocol's releases.

1.4.1

This release backports a memory-leak fix for HTTP/SSE-based MCP servers. StreamableHttpServerTransport now releases its Server-Sent Events response stream reference as soon as a GET request ends, instead of holding it until the session is disposed via explicit DELETE or idle timeout. Long-lived SSE clients that disconnect without sending DELETE no longer pin the underlying Kestrel connection and its associated memory-pool buffers (~20 MiB per session), preventing the sustained memory growth that could accumulate under connect/disconnect churn.

What's Changed

  • Release SSE response stream reference when GET request ends #​1628 by @​halter73 (co-authored by @​joelmforsyth @​Copilot)

Acknowledgements

  • @​slomangino123 submitted issue #​766 (resolved by #​1628)

Full Changelog: modelcontextprotocol/csharp-sdk@v1.4.0...v1.4.1

Commits viewable in compare view.

Updated ProcessKit from 2.4.0 to 2.4.2.

Release notes

Sourced from ProcessKit's releases.

2.4.2

Fixed

  • Made missing Stdin.FromFile sources reliably report ProcessError.Stdin when a child exits successfully.
  • Restored XPlat code-coverage collection for the C# test project in CI.
  • RunningProcess.StopAsync(gracePeriod) and ProcessGroup.ShutdownAsync(gracePeriod) now reject negative grace periods with ArgumentOutOfRangeException instead of silently treating them as an immediate kill.
  • On POSIX, process groups that reject a signal-0 liveness probe with EPERM are no longer treated as gone: they remain tracked for later control and teardown, while only ESRCH proves that a group no longer exists.
  • A Windows child spawned with StdioMode.Inherit (or Command.InheritStdin) no longer silently receives a handle to the parent process itself as its std input/output/error when the corresponding GetStdHandle fails. GetStdHandle returns INVALID_HANDLE_VALUE (-1) on failure, and to DuplicateHandle that -1 is the current-process pseudo-handle — the old check rejected only NULL, so -1 slipped through and duplicated the parent's full-access process handle into the child. Both failure sentinels are now rejected, so a broken GetStdHandle produces an honest ProcessError.Spawn instead.
  • Timeouts.raceTimeout now cancels the unused total-timeout timer as soon as an idle timeout wins, so long configured total deadlines no longer remain scheduled after the process has been timed out.
  • Exec.outputAll / Exec.outputAllBytes now cancel commands still waiting for a batch-concurrency slot immediately, while preserving results already completed before cancellation.
  • Command.Stdin(source) combined with Command.KeepStdinOpen() now works as documented instead of being a silent no-op. The stdin pipe is no longer force-closed once the source is exhausted: the source is fed first and the pipe is left open, and RunningProcess.TakeStdin then hands back a writable handle so the caller can keep writing to the same child interactively. The handle becomes available only after the background feeder has finished draining the source, so the source and the interactive writer never write the pipe at the same time. TakeStdin's wait for that feeder is deadlock-safe even when called from a single-threaded SynchronizationContext (a WPF/WinForms UI thread, classic ASP.NET): the feeder runs on the thread pool and never needs the caller's context to make progress. Both spawn paths (Command.StartAsync/ProcessGroup and the pipeline runner) close stdin after the source exactly as before when KeepStdinOpen is not set.
  • ProcessKit.Extensions.Hosting: a HostedProcessService.StopAsync call that found no active child to stop (supervision mid-backoff-sleep, or already ended) no longer resets LastStopOutcome to None, discarding a previous real stop's outcome; and a StopAsync whose internal stop wait was abandoned because the caller's cancellationToken expired first no longer risks an unobserved task exception if that abandoned stop later completes with a fault.

2.4.1

Added

  • A published guides site: the docs/ guide set is now built with mdBook and published to GitHub Pages at https://zelanton.github.io/ProcessKit-fSharp/, with the generated fsdocs API reference served alongside it under https://zelanton.github.io/ProcessKit-fSharp/api/. The book is rebuilt on pushes to docs/**/theme/**/book.toml; the API reference still tracks the latest published release. (docs/internals/ and docs/planning/ remain internal — they are not part of the published site.)

Commits viewable in compare view.

Updated ProcessKit.Testing from 2.4.0 to 2.4.2.

Release notes

Sourced from ProcessKit.Testing's releases.

2.4.2

Fixed

  • Made missing Stdin.FromFile sources reliably report ProcessError.Stdin when a child exits successfully.
  • Restored XPlat code-coverage collection for the C# test project in CI.
  • RunningProcess.StopAsync(gracePeriod) and ProcessGroup.ShutdownAsync(gracePeriod) now reject negative grace periods with ArgumentOutOfRangeException instead of silently treating them as an immediate kill.
  • On POSIX, process groups that reject a signal-0 liveness probe with EPERM are no longer treated as gone: they remain tracked for later control and teardown, while only ESRCH proves that a group no longer exists.
  • A Windows child spawned with StdioMode.Inherit (or Command.InheritStdin) no longer silently receives a handle to the parent process itself as its std input/output/error when the corresponding GetStdHandle fails. GetStdHandle returns INVALID_HANDLE_VALUE (-1) on failure, and to DuplicateHandle that -1 is the current-process pseudo-handle — the old check rejected only NULL, so -1 slipped through and duplicated the parent's full-access process handle into the child. Both failure sentinels are now rejected, so a broken GetStdHandle produces an honest ProcessError.Spawn instead.
  • Timeouts.raceTimeout now cancels the unused total-timeout timer as soon as an idle timeout wins, so long configured total deadlines no longer remain scheduled after the process has been timed out.
  • Exec.outputAll / Exec.outputAllBytes now cancel commands still waiting for a batch-concurrency slot immediately, while preserving results already completed before cancellation.
  • Command.Stdin(source) combined with Command.KeepStdinOpen() now works as documented instead of being a silent no-op. The stdin pipe is no longer force-closed once the source is exhausted: the source is fed first and the pipe is left open, and RunningProcess.TakeStdin then hands back a writable handle so the caller can keep writing to the same child interactively. The handle becomes available only after the background feeder has finished draining the source, so the source and the interactive writer never write the pipe at the same time. TakeStdin's wait for that feeder is deadlock-safe even when called from a single-threaded SynchronizationContext (a WPF/WinForms UI thread, classic ASP.NET): the feeder runs on the thread pool and never needs the caller's context to make progress. Both spawn paths (Command.StartAsync/ProcessGroup and the pipeline runner) close stdin after the source exactly as before when KeepStdinOpen is not set.
  • ProcessKit.Extensions.Hosting: a HostedProcessService.StopAsync call that found no active child to stop (supervision mid-backoff-sleep, or already ended) no longer resets LastStopOutcome to None, discarding a previous real stop's outcome; and a StopAsync whose internal stop wait was abandoned because the caller's cancellationToken expired first no longer risks an unobserved task exception if that abandoned stop later completes with a fault.

2.4.1

Added

  • A published guides site: the docs/ guide set is now built with mdBook and published to GitHub Pages at https://zelanton.github.io/ProcessKit-fSharp/, with the generated fsdocs API reference served alongside it under https://zelanton.github.io/ProcessKit-fSharp/api/. The book is rebuilt on pushes to docs/**/theme/**/book.toml; the API reference still tracks the latest published release. (docs/internals/ and docs/planning/ remain internal — they are not part of the published site.)

Commits viewable in compare view.

@dependabot dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Jul 18, 2026
@dependabot dependabot Bot changed the title Update: Bump the nuget-dependencies group with 6 updates Update: Bump Microsoft.Extensions.Hosting and 5 others Jul 18, 2026
@dependabot
dependabot Bot force-pushed the dependabot/nuget/nuget-dependencies-1d4a75407d branch 4 times, most recently from 5215301 to e46541d Compare July 20, 2026 00:46
Bumps Microsoft.Extensions.Hosting from 10.0.9 to 10.0.10
Bumps Microsoft.NET.Test.Sdk from 18.7.0 to 18.8.1
Bumps Microsoft.SourceLink.GitHub from 10.0.300 to 10.0.301
Bumps ModelContextProtocol from 1.4.0 to 1.4.1
Bumps ProcessKit from 2.4.0 to 2.4.2
Bumps ProcessKit.Testing from 2.4.0 to 2.4.2

---
updated-dependencies:
- dependency-name: Microsoft.Extensions.Hosting
  dependency-version: 10.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-dependencies
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-dependencies
- dependency-name: Microsoft.SourceLink.GitHub
  dependency-version: 10.0.301
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-dependencies
- dependency-name: ModelContextProtocol
  dependency-version: 1.4.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-dependencies
- dependency-name: ProcessKit
  dependency-version: 2.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-dependencies
- dependency-name: ProcessKit.Testing
  dependency-version: 2.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/nuget/nuget-dependencies-1d4a75407d branch from e46541d to 0ce6a68 Compare July 20, 2026 11:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants