Bump the all group with 11 updates by dependabot[bot] · Pull Request #12 · adaptive-architecture/extensions-dotnet-yarp

dependabot · 2026-03-23T14:06:28Z

Updated coverlet.collector from 8.0.0 to 8.0.1.

Release notes

Sourced from coverlet.collector's releases.

8.0.1

Fixed

Fix [BUG] TypeInitializationException when targeting .NET Framework #1818
Fix [BUG] coverlet.MTP build fails with CS0400 due to developmentDependency=true #1827

Improvements

Additional improvements needed for .NET Framework instrumentation type import #1825

Diff between 8.0.0 and 8.0.1

Commits viewable in compare view.

Updated coverlet.msbuild from 8.0.0 to 8.0.1.

Release notes

Sourced from coverlet.msbuild's releases.

8.0.1

Fixed

Fix [BUG] TypeInitializationException when targeting .NET Framework #1818
Fix [BUG] coverlet.MTP build fails with CS0400 due to developmentDependency=true #1827

Improvements

Additional improvements needed for .NET Framework instrumentation type import #1825

Diff between 8.0.0 and 8.0.1

Commits viewable in compare view.

Updated husky from 0.8.0 to 0.9.1.

Release notes

Sourced from husky's releases.

0.9.1 What's Changed

Fix install command race condition on first run with parallel MSBuild nodes by @MattKotsenas in Fix Touch race condition on first run with parallel MSBuild nodes alirezanet/Husky.Net#168

Full Changelog: alirezanet/Husky.Net@v0.9.0...v0.9.1

0.9.0 What's Changed

remove net6.0/net7.0 since out of support by @WeihanLi in remove net6.0/net7.0 since out of support alirezanet/Husky.Net#135
fix: update regex pattern to allow breaking commits by @joaoopereira in fix: update regex pattern to allow breaking commits alirezanet/Husky.Net#153
Fix parallel install mutex bug and support incremental build by @MattKotsenas in Fix parallel install mutex bug and support incremental build alirezanet/Husky.Net#159
fix: handle file paths with spaces in git commands in fix: handle file paths with spaces in git commands alirezanet/Husky.Net#156
feat: add staged property to custom variables for re-staging support in feat: add staged property to custom variables for re-staging support alirezanet/Husky.Net#163
feat: support variables in include/exclude glob patterns in feat: support variables in include/exclude glob patterns alirezanet/Husky.Net#161
fix: use AfterTargets="Restore" to support NuGet credential helpers for private feeds in fix: use AfterTargets="Restore" to support NuGet credential helpers for private feeds alirezanet/Husky.Net#162

New Contributors

@joaoopereira made their first contribution in fix: update regex pattern to allow breaking commits alirezanet/Husky.Net#153
@MattKotsenas made their first contribution in Fix parallel install mutex bug and support incremental build alirezanet/Husky.Net#159

Full Changelog: alirezanet/Husky.Net@v0.8.0...v0.9.0

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Mvc.Testing from 10.0.3 to 10.0.5.

Release notes

Sourced from Microsoft.AspNetCore.Mvc.Testing's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.TestHost from 10.0.3 to 10.0.5.

Release notes

Sourced from Microsoft.AspNetCore.TestHost's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.ApiDescription.Server from 10.0.3 to 10.0.5.

Release notes

Sourced from Microsoft.Extensions.ApiDescription.Server's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Caching.Hybrid from 10.3.0 to 10.4.0.

Release notes

Sourced from Microsoft.Extensions.Caching.Hybrid's releases.

10.4.0

This release advances the AI abstractions with new hosted file, web search, and reasoning content types, stabilizes MCP and tool approval APIs, adds streaming latency metrics to OpenTelemetry instrumentation, and delivers bug fixes across caching, data ingestion, and resource monitoring.

Experimental API Changes

Now Stable

MCP Server Tool Content and Function Call Approval APIs are now stable (previously MEAI001) #7299
FakeLogCollector.GetLogsAsync(CancellationToken) is now stable (previously EXTEXP0003) #7332

New Experimental APIs

New experimental AddExtendedHttpClientLogging overloads with wrapHandlersPipeline parameter (EXTEXP0013) #7231

Removed Experimental APIs

AI Tool Reduction experimental APIs removed (was experimental under MEAI001) #7353

What's Changed

AI

Add IHostedFileClient and friends #7269 by @stephentoub
Add web search tool call content #7276 by @stephentoub (co-authored by @Copilot)
Surface OpenAI-compatible reasoning_content as TextReasoningContent #7295 by @stephentoub
MCP/Approvals/Tool Contents stabilization #7299 by @jozkee
Implement time_to_first_chunk and time_per_output_chunk streaming metrics in OpenTelemetryChatClient #7325 by @stephentoub (co-authored by @Copilot)
Add openai.api.type telemetry attribute to OpenAI IChatClient implementations #7316 by @stephentoub (co-authored by @Copilot)
Update OpenTelemetry Gen AI semantic conventions to v1.40 #7322 by @stephentoub (co-authored by @Copilot)
Fix tool definitions emission regardless of sensitivity setting #7346 by @stephentoub (co-authored by @Copilot)
Honor [Required] attribute in AI function parameter JSON schema generation #7272 by @stephentoub (co-authored by @Copilot)
AddAIContentType automatically registers content type against every base in the inheritance chain up to AIContent #7358 by @jozkee (co-authored by @Copilot)
Auto-mark server-handled FunctionCallContent as InformationalOnly #7314 by @stephentoub (co-authored by @Copilot)
Map ReasoningEffort.None and ExtraHigh to none and xhigh in OpenAI IChatClient implementations #7319 by @stephentoub (co-authored by @Copilot)
Handle DynamicMethod reflection limitations in AIFunctionFactory #7287 by @stephentoub (co-authored by @Copilot)
Fix Activity.Current nulled during streaming tool invocation #7321 by @flaviocdc (co-authored by @Copilot)
Handle FunctionCallOutputResponseItem in streaming response conversion #7307 by @stephentoub (co-authored by @Copilot)
Fix serialization of response continuation tokens #7356 by @stephentoub
Remove AI Tool Reduction experimental APIs #7353 by @stephentoub (co-authored by @Copilot)
Update OpenAI to 2.9.1 #7349 by @stephentoub

Telemetry and Observability

Introduce support for the Gauge metric type #7203 by @rainsxng
Update logging source generator to support generic methods #7331 by @svick (co-authored by @Copilot)
Update logging source generator to match runtime PR #124589 (ref readonly/params/scoped) #7333 by @svick (co-authored by @Copilot)
Promote FakeLogCollector.GetLogsAsync(CancellationToken) from experimental to stable #7332 by @Demo30
Remove obsolete CS1591 warning suppression from generated file preamble #7308 by @luissena

HTTP Resilience and Diagnostics

... (truncated)

Commits viewable in compare view.

Updated Microsoft.Extensions.Http from 10.0.3 to 10.0.5.

Release notes

Sourced from Microsoft.Extensions.Http's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.0.1 to 18.3.0.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.3.0 What's Changed

Fix answer file splitting by @nohwnd in Fix answer file splitting microsoft/vstest#15306

Internal fixes and updates

Bump branding to 18.1 by @nohwnd in Bump branding to 18.1 microsoft/vstest#15286
Remove stale copy of S.ComponentModel.Composition from testplatform packages by @ViktorHofer in Remove stale copy of S.ComponentModel.Composition from testplatform packages microsoft/vstest#15287
Update codeflow metadata to fix backflow by @premun in Update codeflow metadata to fix backflow microsoft/vstest#15291
[main] Update dependencies from devdiv/DevDiv/vs-code-coverage by @dotnet-maestro[bot] in [main] Update dependencies from devdiv/DevDiv/vs-code-coverage microsoft/vstest#15283
Update Microsoft.Build.Utilities.Core by @Youssef1313 in Update Microsoft.Build.Utilities.Core microsoft/vstest#15300
Disable DynamicNative instrumentation by default by @nohwnd in Disable DynamicNative instrumentation by default microsoft/vstest#15299
[main] Source code updates from dotnet/dotnet by @dotnet-maestro[bot] in [main] Source code updates from dotnet/dotnet microsoft/vstest#15293
[main] Source code updates from dotnet/dotnet by @dotnet-maestro[bot] in [main] Source code updates from dotnet/dotnet microsoft/vstest#15302
[main] Source code updates from dotnet/dotnet by @dotnet-maestro[bot] in [main] Source code updates from dotnet/dotnet microsoft/vstest#15314
Delete sha1 custom implementation we are not using for a long time by @nohwnd in Delete sha1 custom implementation we are not using for a long time microsoft/vstest#15313
[main] Source code updates from dotnet/dotnet by @dotnet-maestro[bot] in [main] Source code updates from dotnet/dotnet microsoft/vstest#15315
Update branding to 18.3.0 by @nohwnd in Update branding to 18.3.0 microsoft/vstest#15321
[main] Update dependencies from devdiv/DevDiv/vs-code-coverage by @dotnet-maestro[bot] in [main] Update dependencies from devdiv/DevDiv/vs-code-coverage microsoft/vstest#15325
[main] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in [main] Update dependencies from dotnet/arcade microsoft/vstest#15264
Revert adding dotnet_host_path workaround by @nohwnd in Revert adding dotnet_host_path workaround microsoft/vstest#15328
[main] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in [main] Update dependencies from dotnet/arcade microsoft/vstest#15338
[main] Source code updates from dotnet/dotnet by @dotnet-maestro[bot] in [main] Source code updates from dotnet/dotnet microsoft/vstest#15322
[main] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in [main] Update dependencies from dotnet/arcade microsoft/vstest#15343
Change PreReleaseVersionLabel from 'preview' to 'release' by @nohwnd in Change PreReleaseVersionLabel from 'preview' to 'release' microsoft/vstest#15352
[rel/18.3] Update dependencies from devdiv/DevDiv/vs-code-coverage by @dotnet-maestro[bot] in [rel/18.3] Update dependencies from devdiv/DevDiv/vs-code-coverage microsoft/vstest#15354
[rel/18.3] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in [rel/18.3] Update dependencies from dotnet/arcade microsoft/vstest#15389
[rel/18.3] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in [rel/18.3] Update dependencies from dotnet/arcade microsoft/vstest#15400
Update build tools to 17.11.48 to be source buildable by @nohwnd in Update build tools to 17.11.48 to be source buildable microsoft/vstest#15310
Disable publishing on RTM by @nohwnd in Disable publishing on RTM microsoft/vstest#15296
Don't access nuget.org for package feeds by @nohwnd in Don't access nuget.org for package feeds microsoft/vstest#15316
No nuget access fix tests by @nohwnd in No nuget access fix tests microsoft/vstest#15317
Disable Dependabot updates in dependabot.yml by @mmitche in Disable Dependabot updates in dependabot.yml microsoft/vstest#15324

New Contributors

@premun made their first contribution in Update codeflow metadata to fix backflow microsoft/vstest#15291

Commits viewable in compare view.

Updated Microsoft.OpenApi from 3.3.1 to 3.5.0.

Release notes

Sourced from Microsoft.OpenApi's releases.

3.5.0 3.5.0 (2026-03-20)

Features

library: add Extensions support for schema references in v3.1/v3.2; add SerializeAsV32 with loop detection (9b422bf)

Bug Fixes

a bug where path parameter validation would fail if they contained forbidden JSON pointer characters (ef55b2c)
a bug where path parameter validation would fail if they contained forbidden JSON pointer characters (4b3164a)
double encoding of json pointer for invalid reference rule (b246cd0)
encoding of special characters for JSON paths (4c757e1)
library: do not emit unevaluatedProperties for non-object schemas (852fb4c)
library: do not emit unevaluatedProperties for non-object schemas (19538aa)
library: enforce spec-compliant $ref serialization; add Extensions support for schema references in v3.1/v3.2 (9bf61de)
potential double encoding of paths (471a61a)

3.4.0 3.4.0 (2026-03-04)

Features

library: preserve PatternProperties as x-jsonschema-patternProperties extension for OpenAPI v2/v3.0 serialization (d969fdc)
library: Preserve PatternProperties via x-jsonschema-patternProperties extension for OpenAPI v2/v3.0 (16ab5e4)
securityscheme: add oauth2MetadataUrl support (OpenAPI 3.2) (4509488)

Bug Fixes

implement unevaluatedProperties as schema per JSON Schema 2020-12 (#2728) (7c13fb3)
library: serialize additionalProperties schema in OpenAPI V2 (f3165fa)
library: serialize additionalProperties schema in OpenAPI V2 documents (3d07756)
optimize parsing V3.1 documents by reducing GetLocation method allocation on hot path(#2748) (f690681)

Commits viewable in compare view.

Updated Swashbuckle.AspNetCore from 10.1.4 to 10.1.5.

Release notes

Sourced from Swashbuckle.AspNetCore's releases.

10.1.5 What's Changed

Bump swagger-ui-dist from 5.31.1 to 5.32.0 in /src/Swashbuckle.AspNetCore.SwaggerUI by @dependabot in Bump swagger-ui-dist from 5.31.1 to 5.32.0 in /src/Swashbuckle.AspNetCore.SwaggerUI domaindrivendev/Swashbuckle.AspNetCore#3814
Migrate to actions/attest by @martincostello in Migrate to actions/attest domaindrivendev/Swashbuckle.AspNetCore#3815
Disable secrets-outside-env audit by @martincostello in Disable secrets-outside-env audit domaindrivendev/Swashbuckle.AspNetCore#3823
Update zizmor to 1.23.1 by @martincostello in Update zizmor to 1.23.1 domaindrivendev/Swashbuckle.AspNetCore#3825
Fix null examples by @jgarciadelanoceda in Fix nullExamples domaindrivendev/Swashbuckle.AspNetCore#3803
Bump dependencies by @martincostello in Bump dependencies domaindrivendev/Swashbuckle.AspNetCore#3835

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.4...v10.1.5

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps coverlet.collector from 8.0.0 to 8.0.1 Bumps coverlet.msbuild from 8.0.0 to 8.0.1 Bumps husky from 0.8.0 to 0.9.1 Bumps Microsoft.AspNetCore.Mvc.Testing from 10.0.3 to 10.0.5 Bumps Microsoft.AspNetCore.TestHost from 10.0.3 to 10.0.5 Bumps Microsoft.Extensions.ApiDescription.Server from 10.0.3 to 10.0.5 Bumps Microsoft.Extensions.Caching.Hybrid from 10.3.0 to 10.4.0 Bumps Microsoft.Extensions.Http from 10.0.3 to 10.0.5 Bumps Microsoft.NET.Test.Sdk from 18.0.1 to 18.3.0 Bumps Microsoft.OpenApi from 3.3.1 to 3.5.0 Bumps Swashbuckle.AspNetCore from 10.1.4 to 10.1.5 --- updated-dependencies: - dependency-name: coverlet.collector dependency-version: 8.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: coverlet.msbuild dependency-version: 8.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: husky dependency-version: 0.9.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: Microsoft.AspNetCore.Mvc.Testing dependency-version: 10.0.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: Microsoft.AspNetCore.TestHost dependency-version: 10.0.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: Microsoft.Extensions.ApiDescription.Server dependency-version: 10.0.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: Microsoft.Extensions.Caching.Hybrid dependency-version: 10.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: Microsoft.Extensions.Http dependency-version: 10.0.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 18.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: Microsoft.OpenApi dependency-version: 3.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: Swashbuckle.AspNetCore dependency-version: 10.1.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all ... Signed-off-by: dependabot[bot] <support@github.com>

sonarqubecloud · 2026-03-23T14:08:36Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

dependabot bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Mar 23, 2026

dependabot bot mentioned this pull request Mar 23, 2026

Bump the all group with 9 updates #11

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the all group with 11 updates#12

Bump the all group with 11 updates#12
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/nuget/dot-config/all-fa8e7c11ec

dependabot bot commented on behalf of github Mar 23, 2026

Uh oh!

sonarqubecloud bot commented Mar 23, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot bot commented on behalf of github Mar 23, 2026

8.0.1

Fixed

Improvements

8.0.1

Fixed

Improvements

0.9.1

What's Changed

0.9.0

What's Changed

New Contributors

10.4.0

Experimental API Changes

Now Stable

New Experimental APIs

Removed Experimental APIs

What's Changed

AI

Telemetry and Observability

HTTP Resilience and Diagnostics

18.3.0

What's Changed

Internal fixes and updates

New Contributors

3.5.0

3.5.0 (2026-03-20)

Features

Bug Fixes

3.4.0

3.4.0 (2026-03-04)

Features

Bug Fixes

10.1.5

What's Changed

Uh oh!

sonarqubecloud bot commented Mar 23, 2026

Quality Gate passed

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants