Update: Bump Microsoft.Extensions.Hosting and 5 others#10
Open
dependabot[bot] wants to merge 1 commit into
Open
Update: Bump Microsoft.Extensions.Hosting and 5 others#10dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
dependabot
Bot
force-pushed
the
dependabot/nuget/nuget-dependencies-1d4a75407d
branch
4 times, most recently
from
July 20, 2026 00:46
5215301 to
e46541d
Compare
Bumps Microsoft.Extensions.Hosting from 10.0.9 to 10.0.10 Bumps Microsoft.NET.Test.Sdk from 18.7.0 to 18.8.1 Bumps Microsoft.SourceLink.GitHub from 10.0.300 to 10.0.301 Bumps ModelContextProtocol from 1.4.0 to 1.4.1 Bumps ProcessKit from 2.4.0 to 2.4.2 Bumps ProcessKit.Testing from 2.4.0 to 2.4.2 --- updated-dependencies: - dependency-name: Microsoft.Extensions.Hosting dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-dependencies - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 18.8.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-dependencies - dependency-name: Microsoft.SourceLink.GitHub dependency-version: 10.0.301 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-dependencies - dependency-name: ModelContextProtocol dependency-version: 1.4.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-dependencies - dependency-name: ProcessKit dependency-version: 2.4.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-dependencies - dependency-name: ProcessKit.Testing dependency-version: 2.4.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/nuget/nuget-dependencies-1d4a75407d
branch
from
July 20, 2026 11:01
e46541d to
0ce6a68
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Updated Microsoft.Extensions.Hosting from 10.0.9 to 10.0.10.
Release notes
Sourced from Microsoft.Extensions.Hosting's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated Microsoft.NET.Test.Sdk from 18.7.0 to 18.8.1.
Release notes
Sourced from Microsoft.NET.Test.Sdk's releases.
18.8.1
What's Changed
Full Changelog: microsoft/vstest@v18.8.0...v18.8.1
18.8.0
What's Changed
Full Changelog: microsoft/vstest@v18.7.0...v18.8.0
Commits viewable in compare view.
Updated Microsoft.SourceLink.GitHub from 10.0.300 to 10.0.301.
Release notes
Sourced from Microsoft.SourceLink.GitHub's releases.
10.0.301
You can build .NET 10.0 from the repository by cloning the release tag
v10.0.301and following the build instructions in the main README.md.Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.
Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023
Commits viewable in compare view.
Updated ModelContextProtocol from 1.4.0 to 1.4.1.
Release notes
Sourced from ModelContextProtocol's releases.
1.4.1
This release backports a memory-leak fix for HTTP/SSE-based MCP servers.
StreamableHttpServerTransportnow releases its Server-Sent Events response stream reference as soon as a GET request ends, instead of holding it until the session is disposed via explicit DELETE or idle timeout. Long-lived SSE clients that disconnect without sending DELETE no longer pin the underlying Kestrel connection and its associated memory-pool buffers (~20 MiB per session), preventing the sustained memory growth that could accumulate under connect/disconnect churn.What's Changed
Acknowledgements
Full Changelog: modelcontextprotocol/csharp-sdk@v1.4.0...v1.4.1
Commits viewable in compare view.
Updated ProcessKit from 2.4.0 to 2.4.2.
Release notes
Sourced from ProcessKit's releases.
2.4.2
Fixed
Stdin.FromFilesources reliably reportProcessError.Stdinwhen a child exits successfully.RunningProcess.StopAsync(gracePeriod)andProcessGroup.ShutdownAsync(gracePeriod)now reject negative grace periods withArgumentOutOfRangeExceptioninstead of silently treating them as an immediate kill.EPERMare no longer treated as gone: they remain tracked for later control and teardown, while onlyESRCHproves that a group no longer exists.StdioMode.Inherit(orCommand.InheritStdin) no longer silently receives a handle to the parent process itself as its std input/output/error when the correspondingGetStdHandlefails.GetStdHandlereturnsINVALID_HANDLE_VALUE(-1) on failure, and toDuplicateHandlethat-1is the current-process pseudo-handle — the old check rejected onlyNULL, so-1slipped through and duplicated the parent's full-access process handle into the child. Both failure sentinels are now rejected, so a brokenGetStdHandleproduces an honestProcessError.Spawninstead.Timeouts.raceTimeoutnow cancels the unused total-timeout timer as soon as an idle timeout wins, so long configured total deadlines no longer remain scheduled after the process has been timed out.Exec.outputAll/Exec.outputAllBytesnow cancel commands still waiting for a batch-concurrency slot immediately, while preserving results already completed before cancellation.Command.Stdin(source)combined withCommand.KeepStdinOpen()now works as documented instead of being a silent no-op. The stdin pipe is no longer force-closed once the source is exhausted: the source is fed first and the pipe is left open, andRunningProcess.TakeStdinthen hands back a writable handle so the caller can keep writing to the same child interactively. The handle becomes available only after the background feeder has finished draining the source, so the source and the interactive writer never write the pipe at the same time.TakeStdin's wait for that feeder is deadlock-safe even when called from a single-threadedSynchronizationContext(a WPF/WinForms UI thread, classic ASP.NET): the feeder runs on the thread pool and never needs the caller's context to make progress. Both spawn paths (Command.StartAsync/ProcessGroupand the pipeline runner) close stdin after the source exactly as before whenKeepStdinOpenis not set.ProcessKit.Extensions.Hosting: aHostedProcessService.StopAsynccall that found no active child to stop (supervision mid-backoff-sleep, or already ended) no longer resetsLastStopOutcometoNone, discarding a previous real stop's outcome; and aStopAsyncwhose internal stop wait was abandoned because the caller'scancellationTokenexpired first no longer risks an unobserved task exception if that abandoned stop later completes with a fault.2.4.1
Added
docs/guide set is now built with mdBook and published to GitHub Pages at https://zelanton.github.io/ProcessKit-fSharp/, with the generated fsdocs API reference served alongside it under https://zelanton.github.io/ProcessKit-fSharp/api/. The book is rebuilt on pushes todocs/**/theme/**/book.toml; the API reference still tracks the latest published release. (docs/internals/anddocs/planning/remain internal — they are not part of the published site.)Commits viewable in compare view.
Updated ProcessKit.Testing from 2.4.0 to 2.4.2.
Release notes
Sourced from ProcessKit.Testing's releases.
2.4.2
Fixed
Stdin.FromFilesources reliably reportProcessError.Stdinwhen a child exits successfully.RunningProcess.StopAsync(gracePeriod)andProcessGroup.ShutdownAsync(gracePeriod)now reject negative grace periods withArgumentOutOfRangeExceptioninstead of silently treating them as an immediate kill.EPERMare no longer treated as gone: they remain tracked for later control and teardown, while onlyESRCHproves that a group no longer exists.StdioMode.Inherit(orCommand.InheritStdin) no longer silently receives a handle to the parent process itself as its std input/output/error when the correspondingGetStdHandlefails.GetStdHandlereturnsINVALID_HANDLE_VALUE(-1) on failure, and toDuplicateHandlethat-1is the current-process pseudo-handle — the old check rejected onlyNULL, so-1slipped through and duplicated the parent's full-access process handle into the child. Both failure sentinels are now rejected, so a brokenGetStdHandleproduces an honestProcessError.Spawninstead.Timeouts.raceTimeoutnow cancels the unused total-timeout timer as soon as an idle timeout wins, so long configured total deadlines no longer remain scheduled after the process has been timed out.Exec.outputAll/Exec.outputAllBytesnow cancel commands still waiting for a batch-concurrency slot immediately, while preserving results already completed before cancellation.Command.Stdin(source)combined withCommand.KeepStdinOpen()now works as documented instead of being a silent no-op. The stdin pipe is no longer force-closed once the source is exhausted: the source is fed first and the pipe is left open, andRunningProcess.TakeStdinthen hands back a writable handle so the caller can keep writing to the same child interactively. The handle becomes available only after the background feeder has finished draining the source, so the source and the interactive writer never write the pipe at the same time.TakeStdin's wait for that feeder is deadlock-safe even when called from a single-threadedSynchronizationContext(a WPF/WinForms UI thread, classic ASP.NET): the feeder runs on the thread pool and never needs the caller's context to make progress. Both spawn paths (Command.StartAsync/ProcessGroupand the pipeline runner) close stdin after the source exactly as before whenKeepStdinOpenis not set.ProcessKit.Extensions.Hosting: aHostedProcessService.StopAsynccall that found no active child to stop (supervision mid-backoff-sleep, or already ended) no longer resetsLastStopOutcometoNone, discarding a previous real stop's outcome; and aStopAsyncwhose internal stop wait was abandoned because the caller'scancellationTokenexpired first no longer risks an unobserved task exception if that abandoned stop later completes with a fault.2.4.1
Added
docs/guide set is now built with mdBook and published to GitHub Pages at https://zelanton.github.io/ProcessKit-fSharp/, with the generated fsdocs API reference served alongside it under https://zelanton.github.io/ProcessKit-fSharp/api/. The book is rebuilt on pushes todocs/**/theme/**/book.toml; the API reference still tracks the latest published release. (docs/internals/anddocs/planning/remain internal — they are not part of the published site.)Commits viewable in compare view.