Bump the minor-and-patch group with 7 updates

[dependabot]

Updated Meziantou.Analyzer from 3.0.117 to 3.0.122.

Release notes

Sourced from Meziantou.Analyzer's releases.

3.0.122

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.122

What's Changed

• Add MA0211 to enforce multi-line XML documentation comments by @​meziantou with @​Copilot in Add MA0211 to enforce multi-line XML documentation comments meziantou/Meziantou.Analyzer#1218

Full Changelog: meziantou/Meziantou.Analyzer@3.0.121...3.0.122

3.0.121

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.121

What's Changed

• MA0099: add opt-in configuration options for report location and zero-member filtering by @​meziantou in MA0099: add opt-in configuration options for report location and zero-member filtering meziantou/Meziantou.Analyzer#1215

Full Changelog: meziantou/Meziantou.Analyzer@3.0.120...3.0.121

3.0.120

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.120

What's Changed

• Skip XML comment langword diagnostics for attributed code tags by @​meziantou in Skip XML comment langword diagnostics for attributed code tags meziantou/Meziantou.Analyzer#1214

Full Changelog: meziantou/Meziantou.Analyzer@3.0.119...3.0.120

3.0.119

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.119

What's Changed

• Fix MA0194 invalid pattern merges by @​meziantou in Fix MA0194 invalid pattern merges meziantou/Meziantou.Analyzer#1212

Full Changelog: meziantou/Meziantou.Analyzer@3.0.118...3.0.119

3.0.118

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.118

What's Changed

• [codex] Fix MA0002 dictionary comparer formatting by @​meziantou in [codex] Fix MA0002 dictionary comparer formatting meziantou/Meziantou.Analyzer#1211

Full Changelog: meziantou/Meziantou.Analyzer@3.0.117...3.0.118

Commits viewable in compare view.

Updated Microsoft.ML.OnnxRuntime from 1.27.0 to 1.27.1.

Release notes

Sourced from Microsoft.ML.OnnxRuntime's releases.

1.27.1

This is a patch release on top of v1.27.0, containing targeted bug fixes, a CUDA QMoE decode-path optimization, and CI/build infrastructure fixes.

Bug Fixes

• [MLAS] Fixed an igemm regression in the KleidiAI path (#​28571)
• Fixed a QMoE CPU livelock by eliminating nested intra-op parallelism (#​29081)
• Fixed a regression in graph-capture session initialization that rejected an empty graph (#​29457)
• Fixed CustomOp forward compatibility by capping the version instead of rejecting it (#​29574)

Performance

NVIDIA CUDA EP

• Added a QMoE GEMV fast path for batch-1 decode (#​29038)

CI & Build Infrastructure

• Fixed an incorrect identity for azcopy (#​29274)
• Fixed a brew install applesimutils failure by trusting the wix/brew tap (#​29450)
• Upgraded to Xcode 26 (#​29468)
• Stopped echoing the command when setting a VSO variable in mac-cpu-packing-jobs.yml (#​29575)
• Fixed the web e2e (npm/vite) and Python DML CI pipelines (#​29609)

Contributors

Thanks to our 8 contributors for this release!

@​tianleiwu, @​chilo-ms, @​edgchen1, @​adrastogi, @​damdoo01-arm, @​JonathanC-ARM, @​martin-klacer-arm, @​sanaa-hamel-microsoft

Full Changelog: v1.27.0...v1.27.1

Commits viewable in compare view.

Updated ModelContextProtocol from 1.4.0 to 1.4.1.

Release notes

Sourced from ModelContextProtocol's releases.

1.4.1

This release backports a memory-leak fix for HTTP/SSE-based MCP servers. StreamableHttpServerTransport now releases its Server-Sent Events response stream reference as soon as a GET request ends, instead of holding it until the session is disposed via explicit DELETE or idle timeout. Long-lived SSE clients that disconnect without sending DELETE no longer pin the underlying Kestrel connection and its associated memory-pool buffers (~20 MiB per session), preventing the sustained memory growth that could accumulate under connect/disconnect churn.

What's Changed

• Release SSE response stream reference when GET request ends #​1628 by @​halter73 (co-authored by @​joelmforsyth @​Copilot)

Acknowledgements

• @​slomangino123 submitted issue #​766 (resolved by #​1628)

Full Changelog: modelcontextprotocol/csharp-sdk@v1.4.0...v1.4.1

Commits viewable in compare view.

Updated ModelContextProtocol.AspNetCore from 1.4.0 to 1.4.1.

Release notes

Sourced from ModelContextProtocol.AspNetCore's releases.

1.4.1

This release backports a memory-leak fix for HTTP/SSE-based MCP servers. StreamableHttpServerTransport now releases its Server-Sent Events response stream reference as soon as a GET request ends, instead of holding it until the session is disposed via explicit DELETE or idle timeout. Long-lived SSE clients that disconnect without sending DELETE no longer pin the underlying Kestrel connection and its associated memory-pool buffers (~20 MiB per session), preventing the sustained memory growth that could accumulate under connect/disconnect churn.

What's Changed

• Release SSE response stream reference when GET request ends #​1628 by @​halter73 (co-authored by @​joelmforsyth @​Copilot)

Acknowledgements

• @​slomangino123 submitted issue #​766 (resolved by #​1628)

Full Changelog: modelcontextprotocol/csharp-sdk@v1.4.0...v1.4.1

Commits viewable in compare view.

Updated SonarAnalyzer.CSharp from 10.27.0.140913 to 10.29.0.143774.

Release notes

Sourced from SonarAnalyzer.CSharp's releases.

10.29.0.143774

Release notes - .NET Analyzers - 10.29

Feature

NET-3997 Move S6444 out of hotspot
NET-4060 Update RSPEC before 10.29 release

False Positive

NET-1626 Fix S6444 FP: REGEX_DEFAULT_MATCH_TIMEOUT

False Negative

NET-3920 Fix S2971 FN: Should raise on EntityFramework IQueryables
NET-3921 Fix S1155 FN: Should raise on EntityFramework IQueryables
NET-3922 Fix S3981 FN: Should raise on EntityFramework IQueryables
NET-3924 Fix S3169 FN: Should raise on EntityFramework IQueryables

10.28.0.143324

Release notes - .NET Analyzers - 10.28

Feature

NET-1990 S100/S101: Configuration for custom acronyms
NET-2280 New Rule T0048: Avoid is not { } value
NET-3802 Update RSPEC before 10.28 release
NET-3818 Change Protobuf Info message to Debug
NET-3820 Coverage warnings should surface as Analysis Warnings
NET-3827 Create RSPEC for S8717: Multiple "[Key]" attributes should not be used to define a composite key
NET-3843 Implement rule S8717: Multiple "[Key]" attributes should not be used to define a composite key
NET-3949 Modify rule S2696: add fix guidance, compliant example, and exceptions
NET-3950 Modify rule S1135: add compliant example and fix guidance
NET-3951 Modify rule S108: give the C# page its own code examples
NET-3952 Modify rule S1133: add rationale, fix guidance, code examples
NET-3953 Modify rule S3251: add compliant example, fix guidance, and exceptions
NET-3967 Move S1313 out of hotspot
NET-3969 Move S2077 out of hotspot
NET-3972 Move S2092 and S3330 out of hotspot
NET-3973 Move S2245 out of hotspot
NET-3975 Move S2257 out of hotspot
NET-3976 Move S4036 out of hotspot
NET-3978 Move S4502 out of hotspot
NET-3980 Move S4507 out of hotspot
NET-3982 Move S5122 out of hotspot
NET-3983 Move S5332 out of hotspot
NET-3993 Move S5443 out of hotspot
NET-3995 Move S5753 out of hotspot
NET-3996 Move S5766 out of hotspot
NET-3998 Move S6640 out of hotspot
NET-4000 Move S4790 out of hotspot
NET-4001 Move S5693 out of hotspot
NET-4008 Change S1313 message
NET-4009 Change S2257 message
NET-4010 Change S4036 message
NET-4011 Change S2077 message

False Positive

NET-3564 Fix FP S6966: Do not raise for methods for SqlDataReader.IsDBNull/GetFieldValue
NET-3808 Fix S4260 FP: Don't raise on extension properties
NET-3821 Fix S1244 FP: Should not raise on comparison to 0
NET-3825 Fix S2221 FP: Do not raise on async void
NET-3878 Fix S3358 FP: Suggesting to extract ternary from EF Core select
NET-3914 Fix T0044 FP: Should not raise on locator annotaitons
NET-3926 Fix S6608 FP: Should not raise inside expression tree
NET-3927 Fix S6603 FP: Should not raise inside expression tree
NET-3932 S2068: Do not raise on @​paramName and $paramName

False Negative

NET-1673 Fix S4790 FN: default parameters
NET-2846 Fix S1117 FN: Extensions, Partial Events
... (truncated)

Commits viewable in compare view.

Updated Spectre.Console from 0.57.1 to 0.57.2.

Release notes

Sourced from Spectre.Console's releases.

0.57.2

What's Change

• Allow wrapping of status text by @​patriksvensson in Allow wrapping of status text spectreconsole/spectre.console#2158

Full Changelog: spectreconsole/spectre.console@0.57.1...0.57.2

Commits viewable in compare view.

Updated Testcontainers.PostgreSql from 4.12.0 to 4.13.0.

Release notes

Sourced from Testcontainers.PostgreSql's releases.

4.13.0

What's Changed

Thank you to everyone who contributed and shared their feedback 🤜🤛.

The NuGet packages for this release have been attested for supply chain security using actions/attest. This confirms the integrity and provenance of the artifacts and helps ensure they can be trusted: #​33686956.

🚀 Features

• feat: Add Aspire dashboard module (#​1194) @​NikiforovAll
• feat: Add image name substitution hook (#​1710) @​HofmeisterAn
• feat(CosmosDb): Add get method AccountEndpoint (#​1707) @​srollinet
• feat: Improve image build failure messages (#​1700) @​HofmeisterAn

🐛 Bug Fixes

• fix: Restore tar archive write performance regressed by padding trim (#​1719) @​HofmeisterAn
• chore: Bump Docker.DotNet from 4.3.2 to 4.3.3 (#​1714) @​HofmeisterAn
• chore(AspireDashboard): Cover connection string provider (#​1713) @​HofmeisterAn

📖 Documentation

• docs: Add missing TC languages and reorder docs navigation (#​1711) @​mdelapenya
• docs: Add note about unsupported BuildKit Dockerfile features (#​1696) @​HofmeisterAn
• docs: Explain immutable builder behavior (#​1693) @​HofmeisterAn

🧹 Housekeeping

• chore: Enable Dependabot cooldown (#​1716) @​HofmeisterAn
• chore: Add nuget.config (#​1715) @​Rob-Hague
• chore(AspireDashboard): Cover connection string provider (#​1713) @​HofmeisterAn
• chore: Bump Docker.DotNet from 4.2.0 to 4.3.2 (#​1712) @​HofmeisterAn
• chore: Bump sshd-docker image from 1.3.0 to 1.4.0 (#​1709) @​HofmeisterAn
• chore: Rename runtime label and add buildkit and stale labels (#​1703) @​HofmeisterAn
• fix: Guard expensive argument evaluation when logging (#​1702) @​HofmeisterAn
• chore: Defer container ID truncation in logging (#​1701) @​HofmeisterAn
• chore: Migrate to LoggerMessageAttribute (#​1697) @​HofmeisterAn

📦 Dependency Updates

• chore(deps): Bump the actions group with 2 updates (#​1721) @dependabot[bot]
• chore(deps): Bump the actions group with 7 updates (#​1717) @dependabot[bot]
• chore: Bump Docker.DotNet from 4.3.2 to 4.3.3 (#​1714) @​HofmeisterAn
• chore: Bump Docker.DotNet from 4.2.0 to 4.3.2 (#​1712) @​HofmeisterAn
• chore(deps): Bump the actions group with 4 updates (#​1698) @dependabot[bot]

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: deps, nuget. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.