Bump the minor-and-patch group with 22 updates by dependabot[bot] · Pull Request #40 · dantte-lp/arista-mcp

This release adds new experimental APIs to Microsoft.Extensions.AI.Abstractions and updates the OpenAI dependency to 2.12.0, alongside documentation, test, and repository maintenance.

Experimental API Changes

New Experimental APIs

New experimental API: AIFunctionNameAttribute and AIParameterNameAttribute #7610 by @jozkee (co-authored by @jeffhandley @Copilot)
New experimental API: ToolApprovalRequestContent.RequiresConfirmation (MEAI001) #7549 by @javiercn (co-authored by @Copilot)

What's Changed

AI

Upgrade OpenAI dependency to 2.12.0 #7608 by @jozkee (co-authored by @Copilot)
Auto-detect audio format in OpenAISpeechToTextClient #7575 by @jozkee (co-authored by @Copilot)
Fix ImageGeneratingChatClient duplicating preceding content and dropping following content #7624 by @jozkee (co-authored by @Copilot)

Vector Data

Make all test methods virtual in VectorData.ConformanceTests #7606 by @adamsitnik (co-authored by @Copilot)

Documentation Updates

Remove links to ai-samples repo #7574 by @gewarren
Fix up docs with Copilot (MEVD) #7597 by @gewarren
Fix up docs with Copilot (M.E.ServiceDiscovery) #7598 by @gewarren (co-authored by @Copilot)
Fix up docs with Copilot (MEAI) #7600 by @gewarren
Fix up docs with Copilot #7601 by @gewarren

Test Improvements

Fix flaky StampedeTests and harden related test waits #7572 by @jeffhandley (co-authored by @Copilot)
Fix SQLitePCLRaw.lib.e_sqlite3 vulnerability by replacing SemanticKernel connectors with CommunityToolkit #7579 by @adamsitnik (co-authored by @Copilot)
Removing SemanticKernel Connectors dependency and replacing it #7584 by @adamsitnik (co-authored by @Copilot)
Migrate to xUnit v3 #7607 by @adamsitnik (co-authored by @shyamnamboodiripad @Copilot)

Repository Infrastructure Updates

Update OTel GenAI conventions skill for standalone semconv-genai repo #7519 by @jeffhandley (co-authored by @Copilot)
Bump dotnet-coverage from 18.7.0 to 18.8.0 #7552
[main] Update dependencies from dotnet/arcade #7559
Fix transitive MessagePack vulnerability in AI template AppHost projects #7561 by @adamsitnik (co-authored by @Copilot)
Bump esbuild, @vitejs/plugin-react and vite in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #7564
Bump tmp from 0.2.6 to 0.2.7 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #7569
Bump js-yaml from 4.1.1 to 4.2.0 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #7570
Bump PowerShell from 7.6.2 to 7.6.3 #7576
Remove duplicate 'WebAPI' classification from template #7577 by @danroth27
[main] Update dependencies from dotnet/arcade #7590
Eliminate redundant Correctness CI stage by merging into Build #7594 by @adamsitnik (co-authored by @Copilot)
Update Agent Framework to 1.13.0 #7613 by @jeffhandley (co-authored by @Copilot)
... (truncated)

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration from 10.0.9 to 10.0.10.

Release notes

Sourced from Microsoft.Extensions.Configuration's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.Binder from 10.0.9 to 10.0.10.

Release notes

Sourced from Microsoft.Extensions.Configuration.Binder's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.EnvironmentVariables from 10.0.9 to 10.0.10.

Release notes

Sourced from Microsoft.Extensions.Configuration.EnvironmentVariables's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.Json from 10.0.9 to 10.0.10.

Release notes

Sourced from Microsoft.Extensions.Configuration.Json's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Options.ConfigurationExtensions from 10.0.9 to 10.0.10.

Release notes

Sourced from Microsoft.Extensions.Options.ConfigurationExtensions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.TimeProvider.Testing from 10.7.0 to 10.8.0.

Release notes

Sourced from Microsoft.Extensions.TimeProvider.Testing's releases.

10.8.0

This release adds new experimental APIs to Microsoft.Extensions.AI.Abstractions and updates the OpenAI dependency to 2.12.0, alongside documentation, test, and repository maintenance.

Experimental API Changes

New Experimental APIs

New experimental API: AIFunctionNameAttribute and AIParameterNameAttribute #7610 by @jozkee (co-authored by @jeffhandley @Copilot)
New experimental API: ToolApprovalRequestContent.RequiresConfirmation (MEAI001) #7549 by @javiercn (co-authored by @Copilot)

What's Changed

AI

Upgrade OpenAI dependency to 2.12.0 #7608 by @jozkee (co-authored by @Copilot)
Auto-detect audio format in OpenAISpeechToTextClient #7575 by @jozkee (co-authored by @Copilot)
Fix ImageGeneratingChatClient duplicating preceding content and dropping following content #7624 by @jozkee (co-authored by @Copilot)

Vector Data

Make all test methods virtual in VectorData.ConformanceTests #7606 by @adamsitnik (co-authored by @Copilot)

Documentation Updates

Remove links to ai-samples repo #7574 by @gewarren
Fix up docs with Copilot (MEVD) #7597 by @gewarren
Fix up docs with Copilot (M.E.ServiceDiscovery) #7598 by @gewarren (co-authored by @Copilot)
Fix up docs with Copilot (MEAI) #7600 by @gewarren
Fix up docs with Copilot #7601 by @gewarren

Test Improvements

Fix flaky StampedeTests and harden related test waits #7572 by @jeffhandley (co-authored by @Copilot)
Fix SQLitePCLRaw.lib.e_sqlite3 vulnerability by replacing SemanticKernel connectors with CommunityToolkit #7579 by @adamsitnik (co-authored by @Copilot)
Removing SemanticKernel Connectors dependency and replacing it #7584 by @adamsitnik (co-authored by @Copilot)
Migrate to xUnit v3 #7607 by @adamsitnik (co-authored by @shyamnamboodiripad @Copilot)

Repository Infrastructure Updates

Update OTel GenAI conventions skill for standalone semconv-genai repo #7519 by @jeffhandley (co-authored by @Copilot)
Bump dotnet-coverage from 18.7.0 to 18.8.0 #7552
[main] Update dependencies from dotnet/arcade #7559
Fix transitive MessagePack vulnerability in AI template AppHost projects #7561 by @adamsitnik (co-authored by @Copilot)
Bump esbuild, @vitejs/plugin-react and vite in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #7564
Bump tmp from 0.2.6 to 0.2.7 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #7569
Bump js-yaml from 4.1.1 to 4.2.0 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #7570
Bump PowerShell from 7.6.2 to 7.6.3 #7576
Remove duplicate 'WebAPI' classification from template #7577 by @danroth27
[main] Update dependencies from dotnet/arcade #7590
Eliminate redundant Correctness CI stage by merging into Build #7594 by @adamsitnik (co-authored by @Copilot)
Update Agent Framework to 1.13.0 #7613 by @jeffhandley (co-authored by @Copilot)
... (truncated)

Commits viewable in compare view.

Updated Microsoft.ML.OnnxRuntime from 1.27.0 to 1.27.1.

Release notes

Sourced from Microsoft.ML.OnnxRuntime's releases.

1.27.1

This is a patch release on top of v1.27.0, containing targeted bug fixes, a CUDA QMoE decode-path optimization, and CI/build infrastructure fixes.

Bug Fixes

[MLAS] Fixed an igemm regression in the KleidiAI path (#28571)
Fixed a QMoE CPU livelock by eliminating nested intra-op parallelism (#29081)
Fixed a regression in graph-capture session initialization that rejected an empty graph (#29457)
Fixed CustomOp forward compatibility by capping the version instead of rejecting it (#29574)

Performance

NVIDIA CUDA EP

Added a QMoE GEMV fast path for batch-1 decode (#29038)

CI & Build Infrastructure

Fixed an incorrect identity for azcopy (#29274)
Fixed a brew install applesimutils failure by trusting the wix/brew tap (#29450)
Upgraded to Xcode 26 (#29468)
Stopped echoing the command when setting a VSO variable in mac-cpu-packing-jobs.yml (#29575)
Fixed the web e2e (npm/vite) and Python DML CI pipelines (#29609)

Contributors

Thanks to our 8 contributors for this release!

@tianleiwu, @chilo-ms, @edgchen1, @adrastogi, @damdoo01-arm, @JonathanC-ARM, @martin-klacer-arm, @sanaa-hamel-microsoft

Full Changelog: v1.27.0...v1.27.1

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.7.0 to 18.8.1.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.8.1 What's Changed

Fix protocol negotiation timeout when STJ reflection is disabled (18.8.1) by @nohwnd in Fix protocol negotiation timeout when STJ reflection is disabled (18.8.1) microsoft/vstest#16281

Full Changelog: microsoft/vstest@v18.8.0...v18.8.1

18.8.0 What's Changed

Migrate from Newtonsoft.Json to System.Text.Json / Jsonite (merge to main) by @nohwnd in feat: migrate from Newtonsoft.Json to System.Text.Json / Jsonite (merge to main) microsoft/vstest#15687
- For more detail refer to https://devblogs.microsoft.com/dotnet/vs-test-is-removing-its-newtonsoft-json-dependency/
Create source-only filter package by @Youssef1313 in Create source-only filter package microsoft/vstest#15638
Add ARM64 msdia140.dll support to test platform packages by @nohwnd in Cherry-pick: Add ARM64 msdia140.dll support to test platform packages microsoft/vstest#15692
Fix mutex cleanup crash on macOS/Linux by @nohwnd in Fix mutex cleanup crash on macOS/Linux microsoft/vstest#15684
Restrict artifact temp directory permissions on Unix by @nohwnd in Restrict artifact temp directory permissions on Unix microsoft/vstest#15729
Add support for filtering uncategorized tests with TestCategory=None by @Evangelink in Add support for filtering uncategorized tests with TestCategory=None microsoft/vstest#15727
Fix SCI binding failure in DTA hosts (main) by @nohwnd in Fix SCI binding failure in DTA hosts (main) microsoft/vstest#15724
Fix HTML logger parallel file collision by @nohwnd in [fix] Fix HTML logger parallel file collision microsoft/vstest#15435
Improve error message when testhost cannot be found by @nohwnd in [fix] Improve error message when testhost cannot be found microsoft/vstest#16053
Fix HTML logger exception on invalid XML chars in test display names by @nohwnd in [fix] Fix HTML logger exception on invalid XML chars in test display names microsoft/vstest#16051

Full Changelog: microsoft/vstest@v18.7.0...v18.8.0

Commits viewable in compare view.

Updated ModelContextProtocol from 1.4.0 to 1.4.1.

Release notes

Sourced from ModelContextProtocol's releases.

1.4.1

This release backports a memory-leak fix for HTTP/SSE-based MCP servers. StreamableHttpServerTransport now releases its Server-Sent Events response stream reference as soon as a GET request ends, instead of holding it until the session is disposed via explicit DELETE or idle timeout. Long-lived SSE clients that disconnect without sending DELETE no longer pin the underlying Kestrel connection and its associated memory-pool buffers (~20 MiB per session), preventing the sustained memory growth that could accumulate under connect/disconnect churn.

What's Changed

Release SSE response stream reference when GET request ends #1628 by @halter73 (co-authored by @joelmforsyth @Copilot)

Acknowledgements

@slomangino123 submitted issue #766 (resolved by #1628)

Full Changelog: modelcontextprotocol/csharp-sdk@v1.4.0...v1.4.1

Commits viewable in compare view.

Updated ModelContextProtocol.AspNetCore from 1.4.0 to 1.4.1.

Release notes

Sourced from ModelContextProtocol.AspNetCore's releases.

1.4.1

This release backports a memory-leak fix for HTTP/SSE-based MCP servers. StreamableHttpServerTransport now releases its Server-Sent Events response stream reference as soon as a GET request ends, instead of holding it until the session is disposed via explicit DELETE or idle timeout. Long-lived SSE clients that disconnect without sending DELETE no longer pin the underlying Kestrel connection and its associated memory-pool buffers (~20 MiB per session), preventing the sustained memory growth that could accumulate under connect/disconnect churn.

What's Changed

Release SSE response stream reference when GET request ends #1628 by @halter73 (co-authored by @joelmforsyth @Copilot)

Acknowledgements

@slomangino123 submitted issue #766 (resolved by #1628)

Full Changelog: modelcontextprotocol/csharp-sdk@v1.4.0...v1.4.1

Commits viewable in compare view.

Updated OpenTelemetry from 1.16.0 to 1.17.0.

Release notes

Sourced from OpenTelemetry's releases.

1.17.0

For highlights and announcements pertaining to this release see: Release Notes > 1.17.0.

The following changes are from the previous release 1.17.0-rc.1.

NuGet: OpenTelemetry v1.17.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Api v1.17.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Api.ProviderBuilderExtensions v1.17.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.Console v1.17.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.InMemory v1.17.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.OpenTelemetryProtocol v1.17.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.Zipkin v1.17.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Extensions.Hosting v1.17.0

No notable changes.

... (truncated)

1.17.0-rc.1

The following changes are from the previous release 1.16.0.

NuGet: OpenTelemetry v1.17.0-rc.1
- Fixed a metric point reclaim data race on CPU ARM architectures.
  (#7401)
- The library is now marked as trim and AOT compatible.
  (#7441)
- Replaced the vendored copy of
  EnvironmentVariablesConfigurationProvider with a direct
  Microsoft.Extensions.Configuration.EnvironmentVariables package dependency.
  Consumers gain automatic pickup of upstream bug fixes and security patches;
  no public API or behavioural change.
  (#7146)
- Added a verbose OpenTelemetry-Sdk self-diagnostics event that is emitted
  when an activity is dropped because its local (in-process) parent is not
  recorded.
  (#7427)
- Added support for a Schema URL on Resource instances.
  (#7472)
- Fixed a metric storage leak that occurred when meters and instruments were
  repeatedly created and disposed.
  (#7466)
- Added ExcludedTagKeys property to MetricStreamConfiguration to support
  excluding specific tag keys from metric streams.
  (#7373)
See CHANGELOG for details.
NuGet: OpenTelemetry.Api v1.17.0-rc.1
- Fixed TraceContextPropagator to normalize empty tracestate header values
  to null when extracting trace context.
  (#7407,
  #7433)
- The library is now marked as trim and AOT compatible.
  (#7441)
- Experimental (pre-release builds only): Updated EnvironmentVariableCarrier.Get
  to read only the normalized environment variable name, following the updated
  environment variable carrier specification.
  Non-normalized carrier keys are no longer matched, even when they would
  normalize to the requested key.
  ... (truncated)

1.17.0-beta.1

The following changes are from the previous release 1.16.0-beta.1.

NuGet: OpenTelemetry.Exporter.Prometheus.AspNetCore v1.17.0-beta.1
- Added a verbose-level diagnostic event for ignored metrics.
  (#7429)
- The library is now marked as trim and AOT compatible.
  (#7441)
- Fix double unit suffixes in metric names when using OpenMetrics.
  (#7454)
- Fix incorrect handling of leading digits in metric names for OpenMetrics.
  (#7454)
- Add PrometheusAspNetCoreOptions.ScopeInfoEnabled property to enable or
  disable scope labels in Prometheus metrics. Defaults to true.
  (#7436)
- Added support for the dots and values Prometheus UTF-8 name escaping
  schemes when negotiated via the Accept header.
  (#7439)
- Add PrometheusAspNetCoreOptions.TargetInfoEnabled property to enable or
  disable the target_info metric in Prometheus metrics. Defaults to true.
  (#7438)
- Added support for the allow-utf-8 Prometheus UTF-8 name escaping scheme
  when negotiated via the Accept header.
  (#7440)
- Add PrometheusAspNetCoreOptions.ResourceConstantLabels property to select
  resource attributes to add to each metric as constant labels. Defaults to
  null (no resource attributes are added as metric labels).
  (#7471)
- Add PrometheusAspNetCoreOptions.MaxScrapeResponseSizeBytes to configure
  the maximum size of a scrape response. The default is now ~166 MiB.
  (#7487)
- A scrape whose serialized output exceeds the maximum scrape response size
  limit now responds with HTTP 500.
  (#7487)
- Fixed the Prometheus text exposition format emitting redundant comments.
  (#7491)
- Made Accept header content negotiation consistent with the
  PrometheusHttpListener endpoint.
  ... (truncated)

Commits viewable in compare view.

Updated OpenTelemetry.Exporter.OpenTelemetryProtocol from 1.16.0 to 1.17.0.

Release notes

Sourced from OpenTelemetry.Exporter.OpenTelemetryProtocol's releases.

1.17.0

For highlights and announcements pertaining to this release see: Release Notes > 1.17.0.

The following changes are from the previous release 1.17.0-rc.1.

NuGet: OpenTelemetry v1.17.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Api v1.17.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Api.ProviderBuilderExtensions v1.17.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.Console v1.17.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.InMemory v1.17.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.OpenTelemetryProtocol v1.17.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.Zipkin v1.17.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Extensions.Hosting v1.17.0

No notable changes.

... (truncated)

1.17.0-rc.1

The following changes are from the previous release 1.16.0.

NuGet: OpenTelemetry v1.17.0-rc.1
- Fixed a metric point reclaim data race on CPU ARM architectures.
  (#7401)
- The library is now marked as trim and AOT compatible.
  (#7441)
- Replaced the vendored copy of
  EnvironmentVariablesConfigurationProvider with a direct
  Microsoft.Extensions.Configuration.EnvironmentVariables package dependency.
  Consumers gain automatic pickup of upstream bug fixes and security patches;
  no public API or behavioural change.
  (#7146)
- Added a verbose OpenTelemetry-Sdk self-diagnostics event that is emitted
  when an activity is dropped because its local (in-process) parent is not
  recorded.
  (#7427)
- Added support for a Schema URL on Resource instances.
  (#7472)
- Fixed a metric storage leak that occurred when meters and instruments were
  repeatedly created and disposed.
  (#7466)
- Added ExcludedTagKeys property to MetricStreamConfiguration to support
  excluding specific tag keys from metric streams.
  (#7373)
See CHANGELOG for details.
NuGet: OpenTelemetry.Api v1.17.0-rc.1
- Fixed TraceContextPropagator to normalize empty tracestate header values
  to null when extracting trace context.
  (#7407,
  #7433)
- The library is now marked as trim and AOT compatible.
  (#7441)
- Experimental (pre-release builds only): Updated EnvironmentVariableCarrier.Get
  to read only the normalized environment variable name, following the updated
  environment variable carrier specification.
  Non-normalized carrier keys are no longer matched, even when they would
  normalize to the requested key.
  ... (truncated)

1.17.0-beta.1

The following changes are from the previous release 1.16.0-beta.1.

NuGet: OpenTelemetry.Exporter.Prometheus.AspNetCore v1.17.0-beta.1
- Added a verbose-level diagnostic event for ignored metrics.
  (#7429)
- The library is now marked as trim and AOT compatible.
  (#7441)
- Fix double unit suffixes in metric names when using OpenMetrics.
  (#7454)
- Fix incorrect handling of leading digits in metric names for OpenMetrics.
  (#7454)
- Add PrometheusAspNetCoreOptions.ScopeInfoEnabled property to enable or
  disable scope labels in Prometheus metrics. Defaults to true.
  (#7436)
- Added support for the dots and values Prometheus UTF-8 name escaping
  schemes when negotiated via the Accept header.
  (#7439)
- Add PrometheusAspNetCoreOptions.TargetInfoEnabled property to enable or
  disable the target_info metric in Prometheus metrics. Defaults to true.
  (#7438)
- Added support for the allow-utf-8 Prometheus UTF-8 name escaping scheme
  when negotiated via the Accept header.
  (#7440)
- Add PrometheusAspNetCoreOptions.ResourceConstantLabels property to select
  resource attributes to add to each metric as constant labels. Defaults to
  null (no resource attributes are added as metric labels).
  (#7471)
- Add PrometheusAspNetCoreOptions.MaxScrapeResponseSizeBytes to configure
  the maximum size of a scrape response. The default is now ~166 MiB.
  (#7487)
- A scrape whose serialized output exceeds the maximum scrape response size
  limit now responds with HTTP 500.
  (#7487)
- Fixed the Prometheus text exposition format emitting redundant comments.
  (#7491)
- Made Accept header content negotiation consistent with the
  PrometheusHttpListener endpoint.
  ... (truncated)

Commits viewable in compare view.

Updated OpenTelemetry.Extensions.Hosting from 1.16.0 to 1.17.0.

Release notes

Sourced from OpenTelemetry.Extensions.Hosting's releases.

1.17.0

For highlights and announcements pertaining to this release see: Release Notes > 1.17.0.

The following changes are from the previous release 1.17.0-rc.1.

NuGet: OpenTelemetry v1.17.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Api v1.17.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Api.ProviderBuilderExtensions v1.17.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.Console v1.17.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.InMemory v1.17.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.OpenTelemetryProtocol v1.17.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.Zipkin v1.17.0

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Extensions.Hosting v1.17.0

No notable changes.

... (truncated)

1.17.0-rc.1

The following changes are from the previous release 1.16.0.

NuGet: OpenTelemetry v1.17.0-rc.1
- Fixed a metric point reclaim data race on CPU ARM architectures.
  (#7401)
- The library is now marked as trim and AOT compatible.
  (#7441)
- Replaced the vendored copy of
  EnvironmentVariablesConfigurationProvider with a direct
  Microsoft.Extensions.Configuration.EnvironmentVariables package dependency.
  Consumers gain automatic pickup of upstream bug fixes and security patches;
  no public API or behavioural change.
  (#7146)
- Added a verbose OpenTelemetry-Sdk self-diagnostics event that is emitted
  when an activity is dropped because its local (in-process) parent is not
  recorded.
  (#7427)
- Added support for a Schema URL on Resource instances.
  (#7472)
- Fixed a metric storage leak that occurred when meters and instruments were
  repeatedly created and disposed.
  (#7466)
- Added ExcludedTagKeys property to MetricStreamConfiguration to support
  excluding specific tag keys from metric streams.
  (#7373)
See CHANGELOG for details.
NuGet: OpenTelemetry.Api v1.17.0-rc.1
- Fixed TraceContextPropagator to normalize empty tracestate header values
  to null when extracting trace context.
  (#7407,
  #7433)
- The library is now marked as trim and AOT compatible.
  (#7441)
- Experimental (pre-release builds only): Updated EnvironmentVariableCarrier.Get
  to read only the normalized environment variable name, following the updated
  environment variable carrier specification.
  Non-normalized carrier keys are no longer matched, even when they would
  normalize to the requested key.
  ... (truncated)

1.17.0-beta.1

The following changes are from the previous release 1.16.0-beta.1.

NuGet: OpenTelemetry.Exporter.Prometheus.AspNetCore v1.17.0-beta.1
- Added a verbose-level diagnostic event for ignored metrics.
  (#7429)
- The library is now marked as trim and AOT compatible.
  (#7441)
- Fix double unit suffixes in metric names when using OpenMetrics.
  (#7454)
- Fix incorrect handling of leading digits in metric names for OpenMetrics.
  (#7454)
- Add PrometheusAspNetCoreOptions.ScopeInfoEnabled property to enable or
  disable scope labels in Prometheus metrics. Defaults to true.
  (#7436)
- Added support for the dots and values Prometheus UTF-8 name escaping
  schemes when negotiated via the Accept header.
  (#7439)
- Add PrometheusAspNetCoreOptions.TargetInfoEnabled property to enable or
  disable the target_info metric in Prometheus metrics. Defaults to true.
  (#7438)
- Added support for the allow-utf-8 Prometheus UTF-8 name escaping scheme
  when negotiated via the Accept header.
  (#7440)
- Add PrometheusAspNetCoreOptions.ResourceConstantLabels property to select
  resource attributes to add to each metric as constant labels. Defaults to
  null (no resource attributes are added as metric labels).
  (#7471)
- Add PrometheusAspNetCoreOptions.MaxScrapeResponseSizeBytes to configure
  the maximum size of a scrape response. The default is now ~166 MiB.
  (#7487)
- A scrape whose serialized output exceeds the maximum scrape response size
  limit now responds with HTTP 500.
  (#7487)
- Fixed the Prometheus text exposition format emitting redundant comments.
  (#7491)
- Made Accept header content negotiation consistent with the
  PrometheusHttpListener endpoint.
  ... (truncated)

Commits viewable in compare view.

Updated SonarAnalyzer.CSharp from 10.27.0.140913 to 10.29.0.143774.

Release notes

Sourced from SonarAnalyzer.CSharp's releases.

10.29.0.143774

Release notes - .NET Analyzers - 10.29

Feature

NET-3997 Move S6444 out of hotspot
NET-4060 Update RSPEC before 10.29 release

False Positive

NET-1626 Fix S6444 FP: REGEX_DEFAULT_MATCH_TIMEOUT

False Negative

NET-3920 Fix S2971 FN: Should raise on EntityFramework IQueryables
NET-3921 Fix S1155 FN: Should raise on EntityFramework IQueryables
NET-3922 Fix S3981 FN: Should raise on EntityFramework IQueryables
NET-3924 Fix S3169 FN: Should raise on EntityFramework IQueryables

10.28.0.143324

Release notes - .NET Analyzers - 10.28

Feature

NET-1990 S100/S101: Configuration for custom acronyms
NET-2280 New Rule T0048: Avoid is not { } value
NET-3802 Update RSPEC before 10.28 release
NET-3818 Change Protobuf Info message to Debug
NET-3820 Coverage warnings should surface as Analysis Warnings
NET-3827 Create RSPEC for S8717: Multiple "[Key]" attributes should not be used to define a composite key
NET-3843 Implement rule S8717: Multiple "[Key]" attributes should not be used to define a composite key
NET-3949 Modify rule S2696: add fix guidance, compliant example, and exceptions
NET-3950 Modify rule S1135: add compliant example and fix guidance
NET-3951 Modify rule S108: give the C# page its own code examples
NET-3952 Modify rule S1133: add rationale, fix guidance, code examples
NET-3953 Modify rule S3251: add compliant example, fix guidance, and exceptions
NET-3967 Move S1313 out of hotspot
NET-3969 Move S2077 out of hotspot
NET-3972 Move S2092 and S3330 out of hotspot
NET-3973 Move S2245 out of hotspot
NET-3975 Move S2257 out of hotspot
NET-3976 Move S4036 out of hotspot
NET-3978 Move S4502 out of hotspot
NET-3980 Move S4507 out of hotspot
NET-3982 Move S5122 out of hotspot
NET-3983 Move S5332 out of hotspot
NET-3993 Move S5443 out of hotspot
NET-3995 Move S5753 out of hotspot
NET-3996 Move S5766 out of hotspot
NET-3998 Move S6640 out of hotspot
NET-4000 Move S4790 out of hotspot
NET-4001 Move S5693 out of hotspot
NET-4008 Change S1313 message
NET-4009 Change S2257 message
NET-4010 Change S4036 message
NET-4011 Change S2077 message

False Positive

NET-3564 Fix FP S6966: Do not raise for methods for SqlDataReader.IsDBNull/GetFieldValue
NET-3808 Fix S4260 FP: Don't raise on extension properties
NET-3821 Fix S1244 FP: Should not raise on comparison to 0
NET-3825 Fix S2221 FP: Do not raise on async void
NET-3878 Fix S3358 FP: Suggesting to extract ternary from EF Core select
NET-3914 Fix T0044 FP: Should not raise on locator annotaitons
NET-3926 Fix S6608 FP: Should not raise inside expression tree
NET-3927 Fix S6603 FP: Should not raise inside expression tree
NET-3932 S2068: Do not raise on @paramName and $paramName

False Negative

NET-1673 Fix S4790 FN: default parameters
NET-2846 Fix S1117 FN: Extensions, Partial Events
... (truncated)

Commits viewable in compare view.

Updated Spectre.Console from 0.57.1 to 0.57.2.

Release notes

Sourced from Spectre.Console's releases.

0.57.2 What's Change

Allow wrapping of status text by @patriksvensson in Allow wrapping of status text spectreconsole/spectre.console#2158

Full Changelog: spectreconsole/spectre.console@0.57.1...0.57.2

Commits viewable in compare view.

Updated System.CommandLine from 2.0.9 to 2.0.10.

Release notes

Sourced from System.CommandLine's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Testcontainers.PostgreSql from 4.12.0 to 4.13.0.

Release notes

Sourced from Testcontainers.PostgreSql's releases.

4.13.0

What's Changed

Thank you to everyone who contributed and shared their feedback 🤜🤛.

The NuGet packages for this release have been attested for supply chain security using actions/attest. This confirms the integrity and provenance of the artifacts and helps ensure they can be trusted: #33686956.

🚀 Features

feat: Add Aspire dashboard module (#1194) @NikiforovAll
feat: Add image name substitution hook (#1710) @HofmeisterAn
feat(CosmosDb): Add get method AccountEndpoint (#1707) @srollinet
feat: Improve image build failure messages (#1700) @HofmeisterAn

🐛 Bug Fixes

fix: Restore tar archive write performance regressed by padding trim (#1719) @HofmeisterAn
chore: Bump Docker.DotNet from 4.3.2 to 4.3.3 (#1714) @HofmeisterAn
chore(AspireDashboard): Cover connection string provider (#1713) @HofmeisterAn

📖 Documentation

docs: Add missing TC languages and reorder docs navigation (#1711) @mdelapenya
docs: Add note about unsupported BuildKit Dockerfile features (#1696) @HofmeisterAn
docs: Explain immutable builder behavior (#1693) @HofmeisterAn

🧹 Housekeeping

chore: Enable Dependabot cooldown (#1716) @HofmeisterAn
chore: Add nuget.config (#1715) @Rob-Hague
chore(AspireDashboard): Cover connection string provider (#1713) @HofmeisterAn
chore: Bump Docker.DotNet from 4.2.0 to 4.3.2 (#1712) @HofmeisterAn
chore: Bump sshd-docker image from 1.3.0 to 1.4.0 (#1709) @HofmeisterAn
chore: Rename runtime label and add buildkit and stale labels (#1703) @HofmeisterAn
fix: Guard expensive argument evaluation when logging (#1702) @HofmeisterAn
chore: Defer container ID truncation in logging (#1701) @HofmeisterAn
chore: Migrate to LoggerMessageAttribute (#1697) @HofmeisterAn

📦 Dependency Updates

chore(deps): Bump the actions group with 2 updates (#1721) @dependabot[bot]
chore(deps): Bump the actions group with 7 updates (#1717) @dependabot[bot]
chore: Bump Docker.DotNet from 4.3.2 to 4.3.3 (#1714) @HofmeisterAn
chore: Bump Docker.DotNet from 4.2.0 to 4.3.2 (#1712) @HofmeisterAn
chore(deps): Bump the actions group with 4 updates (#1698) @dependabot[bot]

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps Meziantou.Analyzer from 3.0.117 to 3.0.123 Bumps Microsoft.EntityFrameworkCore from 9.0.17 to 9.0.18 Bumps Microsoft.EntityFrameworkCore.Design from 9.0.17 to 9.0.18 Bumps Microsoft.EntityFrameworkCore.Relational from 9.0.17 to 9.0.18 Bumps Microsoft.Extensions.AI from 10.7.0 to 10.8.0 Bumps Microsoft.Extensions.Configuration from 10.0.9 to 10.0.10 Bumps Microsoft.Extensions.Configuration.Binder from 10.0.9 to 10.0.10 Bumps Microsoft.Extensions.Configuration.EnvironmentVariables from 10.0.9 to 10.0.10 Bumps Microsoft.Extensions.Configuration.Json from 10.0.9 to 10.0.10 Bumps Microsoft.Extensions.Options.ConfigurationExtensions from 10.0.9 to 10.0.10 Bumps Microsoft.Extensions.TimeProvider.Testing from 10.7.0 to 10.8.0 Bumps Microsoft.ML.OnnxRuntime from 1.27.0 to 1.27.1 Bumps Microsoft.NET.Test.Sdk from 18.7.0 to 18.8.1 Bumps ModelContextProtocol from 1.4.0 to 1.4.1 Bumps ModelContextProtocol.AspNetCore from 1.4.0 to 1.4.1 Bumps OpenTelemetry from 1.16.0 to 1.17.0 Bumps OpenTelemetry.Exporter.OpenTelemetryProtocol from 1.16.0 to 1.17.0 Bumps OpenTelemetry.Extensions.Hosting from 1.16.0 to 1.17.0 Bumps SonarAnalyzer.CSharp from 10.27.0.140913 to 10.29.0.143774 Bumps Spectre.Console from 0.57.1 to 0.57.2 Bumps System.CommandLine from 2.0.9 to 2.0.10 Bumps Testcontainers.PostgreSql from 4.12.0 to 4.13.0 --- updated-dependencies: - dependency-name: Meziantou.Analyzer dependency-version: 3.0.123 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Microsoft.EntityFrameworkCore dependency-version: 9.0.18 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Microsoft.EntityFrameworkCore.Design dependency-version: 9.0.18 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Microsoft.EntityFrameworkCore.Relational dependency-version: 9.0.18 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Microsoft.Extensions.AI dependency-version: 10.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: Microsoft.Extensions.Configuration dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Microsoft.Extensions.Configuration.Binder dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Microsoft.Extensions.Configuration.EnvironmentVariables dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Microsoft.Extensions.Configuration.Json dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Microsoft.Extensions.Options.ConfigurationExtensions dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Microsoft.Extensions.TimeProvider.Testing dependency-version: 10.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: Microsoft.ML.OnnxRuntime dependency-version: 1.27.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 18.8.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: ModelContextProtocol dependency-version: 1.4.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: ModelContextProtocol.AspNetCore dependency-version: 1.4.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: OpenTelemetry dependency-version: 1.17.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: OpenTelemetry.Exporter.OpenTelemetryProtocol dependency-version: 1.17.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: OpenTelemetry.Extensions.Hosting dependency-version: 1.17.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: SonarAnalyzer.CSharp dependency-version: 10.29.0.143774 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: Spectre.Console dependency-version: 0.57.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: System.CommandLine dependency-version: 2.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Testcontainers.PostgreSql dependency-version: 4.13.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-07-20T03:53:55Z

Labels

The following labels could not be found: deps, nuget. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the minor-and-patch group with 22 updates#40

Bump the minor-and-patch group with 22 updates#40
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/nuget/minor-and-patch-5b2aba23a7

dependabot Bot commented on behalf of github Jul 20, 2026

Uh oh!

dependabot Bot commented on behalf of github Jul 20, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Jul 20, 2026

3.0.123

What's Changed

3.0.122

What's Changed

3.0.121

What's Changed

3.0.120

What's Changed

3.0.119

What's Changed

3.0.118

What's Changed

9.0.18

What's Changed

9.0.18

What's Changed

9.0.18

What's Changed

10.8.0

Experimental API Changes

New Experimental APIs

What's Changed

AI

Vector Data

Documentation Updates

Test Improvements

Repository Infrastructure Updates

10.8.0

Experimental API Changes

New Experimental APIs

What's Changed

AI

Vector Data

Documentation Updates

Test Improvements

Repository Infrastructure Updates

1.27.1

Bug Fixes

Performance

NVIDIA CUDA EP

CI & Build Infrastructure

Contributors

18.8.1

What's Changed

18.8.0

What's Changed

1.4.1

What's Changed

Acknowledgements

1.4.1

What's Changed

Acknowledgements

1.17.0

1.17.0-rc.1

1.17.0-beta.1

1.17.0

1.17.0-rc.1

1.17.0-beta.1

1.17.0

1.17.0-rc.1

1.17.0-beta.1

10.29.0.143774

Release notes - .NET Analyzers - 10.29

Feature

False Positive

False Negative

10.28.0.143324

Release notes - .NET Analyzers - 10.28

Feature

False Positive

False Negative

0.57.2

What's Change

4.13.0

What's Changed

🚀 Features

🐛 Bug Fixes

📖 Documentation