Bump the minor-dependencies group with 11 updates by dependabot[bot] · Pull Request #167 · dennisdoomen/packageguard

This release advances the AI abstractions with new hosted file, web search, and reasoning content types, stabilizes MCP and tool approval APIs, adds streaming latency metrics to OpenTelemetry instrumentation, and delivers bug fixes across caching, data ingestion, and resource monitoring.

Experimental API Changes

Now Stable

MCP Server Tool Content and Function Call Approval APIs are now stable (previously MEAI001) #7299
FakeLogCollector.GetLogsAsync(CancellationToken) is now stable (previously EXTEXP0003) #7332

New Experimental APIs

New experimental AddExtendedHttpClientLogging overloads with wrapHandlersPipeline parameter (EXTEXP0013) #7231

Removed Experimental APIs

AI Tool Reduction experimental APIs removed (was experimental under MEAI001) #7353

What's Changed

AI

Add IHostedFileClient and friends #7269 by @stephentoub
Add web search tool call content #7276 by @stephentoub (co-authored by @Copilot)
Surface OpenAI-compatible reasoning_content as TextReasoningContent #7295 by @stephentoub
MCP/Approvals/Tool Contents stabilization #7299 by @jozkee
Implement time_to_first_chunk and time_per_output_chunk streaming metrics in OpenTelemetryChatClient #7325 by @stephentoub (co-authored by @Copilot)
Add openai.api.type telemetry attribute to OpenAI IChatClient implementations #7316 by @stephentoub (co-authored by @Copilot)
Update OpenTelemetry Gen AI semantic conventions to v1.40 #7322 by @stephentoub (co-authored by @Copilot)
Fix tool definitions emission regardless of sensitivity setting #7346 by @stephentoub (co-authored by @Copilot)
Honor [Required] attribute in AI function parameter JSON schema generation #7272 by @stephentoub (co-authored by @Copilot)
AddAIContentType automatically registers content type against every base in the inheritance chain up to AIContent #7358 by @jozkee (co-authored by @Copilot)
Auto-mark server-handled FunctionCallContent as InformationalOnly #7314 by @stephentoub (co-authored by @Copilot)
Map ReasoningEffort.None and ExtraHigh to none and xhigh in OpenAI IChatClient implementations #7319 by @stephentoub (co-authored by @Copilot)
Handle DynamicMethod reflection limitations in AIFunctionFactory #7287 by @stephentoub (co-authored by @Copilot)
Fix Activity.Current nulled during streaming tool invocation #7321 by @flaviocdc (co-authored by @Copilot)
Handle FunctionCallOutputResponseItem in streaming response conversion #7307 by @stephentoub (co-authored by @Copilot)
Fix serialization of response continuation tokens #7356 by @stephentoub
Remove AI Tool Reduction experimental APIs #7353 by @stephentoub (co-authored by @Copilot)
Update OpenAI to 2.9.1 #7349 by @stephentoub

Telemetry and Observability

Introduce support for the Gauge metric type #7203 by @rainsxng
Update logging source generator to support generic methods #7331 by @svick (co-authored by @Copilot)
Update logging source generator to match runtime PR #124589 (ref readonly/params/scoped) #7333 by @svick (co-authored by @Copilot)
Promote FakeLogCollector.GetLogsAsync(CancellationToken) from experimental to stable #7332 by @Demo30
Remove obsolete CS1591 warning suppression from generated file preamble #7308 by @luissena

HTTP Resilience and Diagnostics

... (truncated)

Commits viewable in compare view.

Updated Microsoft.Extensions.Logging.Abstractions from 10.0.3 to 10.0.5.

Release notes

Sourced from Microsoft.Extensions.Logging.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Logging.Console from 10.0.3 to 10.0.5.

Release notes

Sourced from Microsoft.Extensions.Logging.Console's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated SharpCompress from 0.46.4 to 0.47.3.

Release notes

Sourced from SharpCompress's releases.

0.47.3 What's Changed

Fix denial-of-service crashes in 8 decompressors on malformed input by @Copilot in Fix denial-of-service crashes in 8 decompressors on malformed input adamhathcock/sharpcompress#1260

Full Changelog: adamhathcock/sharpcompress@0.47.2...0.47.3

0.47.2

Making the default experience better with a larger buffer size.

What's Changed

Increase default RewindableBufferSize to 160KB to handle ZStandard tar detection by @Copilot in Increase default RewindableBufferSize to 160KB to handle ZStandard tar detection adamhathcock/sharpcompress#1257

Full Changelog: adamhathcock/sharpcompress@0.47.1...0.47.2

0.47.1 What's Changed

Proper test file clean up by @adamhathcock in Proper test file clean up adamhathcock/sharpcompress#1245
Fix ZIP64 stream bounding and WinZip AES read-state corruption in ZIP reader by @adamhathcock in Fix ZIP64 stream bounding and WinZip AES read-state corruption in ZIP reader adamhathcock/sharpcompress#1253

Full Changelog: adamhathcock/sharpcompress@0.47.0...0.47.1

0.47.0

I think this is the last breaking change before I mark things as 1.0. Looking for feedback

What's Changed

Fix CompressionType for WinZip AES encrypted ZIP entries by @Copilot in Fix CompressionType for WinZip AES encrypted ZIP entries adamhathcock/sharpcompress#1213
Add ability to have alternate compressions by @adamhathcock in Add ability to have alternate compressions adamhathcock/sharpcompress#1197
Expose SharpCompressStream to allow ringbuffer to be used on non-seekable streams by @adamhathcock in Expose SharpCompressStream to allow ringbuffer to be used on non-seekable streams adamhathcock/sharpcompress#1220
Tightening build errors by warnings as errors and making more build time issues by @adamhathcock in Tightening build errors by warnings as errors and making more build time issues adamhathcock/sharpcompress#1214
Use more SharpCompress exceptions instead of generic ones by @adamhathcock in Use more SharpCompress exceptions instead of generic ones adamhathcock/sharpcompress#1224
Added Net7.0 / Net 6.0 / Net 5.0 and NetStandard2.1 by @Nanook in Added Net7.0 / Net 6.0 / Net 5.0 and NetStandard2.1 adamhathcock/sharpcompress#1227
Writers should have async API by @adamhathcock in Writers should have async API adamhathcock/sharpcompress#1211
Add 7z archive writer with LZMA/LZMA2 compression by @DanNsk in Add 7z archive writer with LZMA/LZMA2 compression adamhathcock/sharpcompress#1229
Add async 7z writing by @adamhathcock in Add async 7z writing adamhathcock/sharpcompress#1235
Bump actions/upload-artifact from 6 to 7 by @dependabot[bot] in Bump actions/upload-artifact from 6 to 7 adamhathcock/sharpcompress#1240
Moving extraction options back by @adamhathcock in Moving extraction options back adamhathcock/sharpcompress#1239
Fix DataErrorException when extracting LZMA-compressed zero-byte ZIP entries by @Copilot in Fix DataErrorException when extracting LZMA-compressed zero-byte ZIP entries adamhathcock/sharpcompress#1237
Update test dependencies by @adamhathcock in Update test dependencies adamhathcock/sharpcompress#1242

New Contributors

@DanNsk made their first contribution in Add 7z archive writer with LZMA/LZMA2 compression adamhathcock/sharpcompress#1229

Full Changelog: adamhathcock/sharpcompress@0.46.4...0.47.0

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps CliWrap from 3.10.0 to 3.10.1 Bumps FluentAssertions from 8.8.0 to 8.9.0 Bumps Meziantou.Extensions.Logging.InMemory from 1.3.9 to 1.3.11 Bumps Microsoft.Extensions.Configuration from 10.0.3 to 10.0.5 Bumps Microsoft.Extensions.Configuration.Binder from 10.0.3 to 10.0.5 Bumps Microsoft.Extensions.Configuration.EnvironmentVariables from 10.0.3 to 10.0.5 Bumps Microsoft.Extensions.Configuration.Json from 10.0.3 to 10.0.5 Bumps Microsoft.Extensions.Diagnostics.Testing from 10.3.0 to 10.4.0 Bumps Microsoft.Extensions.Logging.Abstractions from 10.0.3 to 10.0.5 Bumps Microsoft.Extensions.Logging.Console from 10.0.3 to 10.0.5 Bumps SharpCompress from 0.46.4 to 0.47.3 --- updated-dependencies: - dependency-name: CliWrap dependency-version: 3.10.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-dependencies - dependency-name: CliWrap dependency-version: 3.10.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-dependencies - dependency-name: FluentAssertions dependency-version: 8.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-dependencies - dependency-name: Meziantou.Extensions.Logging.InMemory dependency-version: 1.3.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-dependencies - dependency-name: Microsoft.Extensions.Configuration dependency-version: 10.0.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-dependencies - dependency-name: Microsoft.Extensions.Configuration.Binder dependency-version: 10.0.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-dependencies - dependency-name: Microsoft.Extensions.Configuration.EnvironmentVariables dependency-version: 10.0.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-dependencies - dependency-name: Microsoft.Extensions.Configuration.Json dependency-version: 10.0.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-dependencies - dependency-name: Microsoft.Extensions.Diagnostics.Testing dependency-version: 10.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-dependencies - dependency-name: Microsoft.Extensions.Logging.Abstractions dependency-version: 10.0.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-dependencies - dependency-name: Microsoft.Extensions.Logging.Console dependency-version: 10.0.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-dependencies - dependency-name: SharpCompress dependency-version: 0.47.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-03-30T11:09:21Z

Test Results

164 tests ±0 164 ✅ ±0 3m 2s ⏱️ -8s
2 suites ±0 0 💤 ±0
2 files ±0 0 ❌ ±0

Results for commit a0843ca. ± Comparison against base commit e070812.

♻️ This comment has been updated with latest results.

dennisdoomen · 2026-03-30T17:41:46Z

@copilot please investigate why the builds failed and suggest an improvement

Agent-Logs-Url: https://github.com/dennisdoomen/packageguard/sessions/36cf63f1-d50b-45d8-841e-1cb6d08b6a6c Co-authored-by: dennisdoomen <572734+dennisdoomen@users.noreply.github.com>

Copilot · 2026-03-30T17:50:04Z

@copilot please investigate why the builds failed and suggest an improvement

The build failed because the test Can_prefer_repository_metadata_over_project_url was hardcoded to use FluentAssertions 8.8.0, which was no longer in the NuGet global packages cache after the bump to 8.9.0.

When the .nuspec for 8.8.0 wasn't in cache, the code fell back to the NuGet API's projectUrl — which now returns https://xceed.com/products/unit-testing/fluent-assertions/ (Xceed's URL after their acquisition) instead of the expected GitHub URL.

Fixed in commit a0843ca by updating the test to use 8.9.0. This actually makes the test more meaningful: 8.9.0's .nuspec still has repository url="https://github.com/fluentassertions/fluentassertions" while the NuGet API's projectUrl now points to Xceed, so the test now genuinely exercises the "prefer repository metadata over project URL" behavior.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

https://api.github.com/repos/nunit/nunit/license
- Triggering command: /usr/share/dotnet/dotnet /usr/share/dotnet/dotnet exec --runtimeconfig /home/REDACTED/work/packageguard/packageguard/Src/PackageGuard.Specs/bin/Debug/net9.0/PackageGuard.Specs.runtimeconfig.json --depsfile /home/REDACTED/work/packageguard/packageguard/Src/PackageGuard.Specs/bin/Debug/net9.0/PackageGuard.Specs.deps.json /home/REDACTED/work/packageguard/packageguard/Src/PackageGuard.Specs/bin/Debug/net9.0/testhost.dll --port 40539 --endpoint 127.0.0.1:040539 --role client --parentprocessid 4323 --telemetryoptedin false (http block)
- Triggering command: /usr/share/dotnet/dotnet /usr/share/dotnet/dotnet exec --runtimeconfig /home/REDACTED/work/packageguard/packageguard/Src/PackageGuard.Specs/bin/Debug/net9.0/PackageGuard.Specs.runtimeconfig.json --depsfile /home/REDACTED/work/packageguard/packageguard/Src/PackageGuard.Specs/bin/Debug/net9.0/PackageGuard.Specs.deps.json /home/REDACTED/work/packageguard/packageguard/Src/PackageGuard.Specs/bin/Debug/net9.0/testhost.dll --port 44749 --endpoint 127.0.0.1:044749 --role client --parentprocessid 4389 --telemetryoptedin false (http block)
- Triggering command: /usr/share/dotnet/dotnet /usr/share/dotnet/dotnet exec --runtimeconfig /home/REDACTED/work/packageguard/packageguard/Src/PackageGuard.Specs/bin/Debug/net9.0/PackageGuard.Specs.runtimeconfig.json --depsfile /home/REDACTED/work/packageguard/packageguard/Src/PackageGuard.Specs/bin/Debug/net9.0/PackageGuard.Specs.deps.json /home/REDACTED/work/packageguard/packageguard/Src/PackageGuard.Specs/bin/Debug/net9.0/testhost.dll --port 37215 --endpoint 127.0.0.1:037215 --role client --parentprocessid 4457 --telemetryoptedin false (http block)
www.nuget.org
- Triggering command: /usr/share/dotnet/dotnet /usr/share/dotnet/dotnet exec --runtimeconfig /home/REDACTED/work/packageguard/packageguard/Src/PackageGuard.Specs/bin/Debug/net9.0/PackageGuard.Specs.runtimeconfig.json --depsfile /home/REDACTED/work/packageguard/packageguard/Src/PackageGuard.Specs/bin/Debug/net9.0/PackageGuard.Specs.deps.json /home/REDACTED/work/packageguard/packageguard/Src/PackageGuard.Specs/bin/Debug/net9.0/testhost.dll --port 33311 --endpoint 127.0.0.1:033311 --role client --parentprocessid 4260 --telemetryoptedin false (dns block)
- Triggering command: /usr/share/dotnet/dotnet /usr/share/dotnet/dotnet exec --runtimeconfig /home/REDACTED/work/packageguard/packageguard/Src/PackageGuard.Specs/bin/Debug/net9.0/PackageGuard.Specs.runtimeconfig.json --depsfile /home/REDACTED/work/packageguard/packageguard/Src/PackageGuard.Specs/bin/Debug/net9.0/PackageGuard.Specs.deps.json /home/REDACTED/work/packageguard/packageguard/Src/PackageGuard.Specs/bin/Debug/net9.0/testhost.dll --port 40539 --endpoint 127.0.0.1:040539 --role client --parentprocessid 4323 --telemetryoptedin false (dns block)
- Triggering command: /usr/share/dotnet/dotnet /usr/share/dotnet/dotnet exec --runtimeconfig /home/REDACTED/work/packageguard/packageguard/Src/PackageGuard.Specs/bin/Debug/net9.0/PackageGuard.Specs.runtimeconfig.json --depsfile /home/REDACTED/work/packageguard/packageguard/Src/PackageGuard.Specs/bin/Debug/net9.0/PackageGuard.Specs.deps.json /home/REDACTED/work/packageguard/packageguard/Src/PackageGuard.Specs/bin/Debug/net9.0/testhost.dll --port 44749 --endpoint 127.0.0.1:044749 --role client --parentprocessid 4389 --telemetryoptedin false (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

Configure Actions setup steps to set up my environment, which run before the firewall is enabled
Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

coveralls · 2026-03-31T05:40:30Z

Pull Request Test Coverage Report for Build 23759289349

Details

0 of 0 changed or added relevant lines in 0 files are covered.
No unchanged relevant lines lost coverage.
Overall coverage remained the same at 77.994%

Totals
Change from base Build 23662511870:	0.0%
Covered Lines:	4485
Relevant Lines:	5546

💛 - Coveralls

dependabot bot added .NET Pull requests that update .net code dependencies Pull requests that update a dependency file labels Mar 30, 2026

Copilot started work on behalf of dennisdoomen March 30, 2026 17:41 View session

Fix test to use FluentAssertions 8.9.0 instead of 8.8.0

a0843ca

Agent-Logs-Url: https://github.com/dennisdoomen/packageguard/sessions/36cf63f1-d50b-45d8-841e-1cb6d08b6a6c Co-authored-by: dennisdoomen <572734+dennisdoomen@users.noreply.github.com>

Copilot finished work on behalf of dennisdoomen March 30, 2026 17:50

Copilot AI requested a review from dennisdoomen March 30, 2026 17:50

dennisdoomen merged commit 61faa59 into main Mar 31, 2026
8 checks passed

dennisdoomen deleted the dependabot/nuget/Build/minor-dependencies-4dc58e7bb8 branch March 31, 2026 06:18

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the minor-dependencies group with 11 updates#167

Bump the minor-dependencies group with 11 updates#167
dennisdoomen merged 2 commits intomainfrom
dependabot/nuget/Build/minor-dependencies-4dc58e7bb8

dependabot bot commented on behalf of github Mar 30, 2026

Uh oh!

github-actions bot commented Mar 30, 2026 •

edited

Loading

Uh oh!

dennisdoomen commented Mar 30, 2026

Uh oh!

Copilot AI commented Mar 30, 2026 •

edited

Loading

I tried to connect to the following addresses, but was blocked by firewall rules:

Uh oh!

coveralls commented Mar 31, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Uh oh!

Conversation

dependabot bot commented on behalf of github Mar 30, 2026

3.10.1

What's Changed

New Contributors

8.9.0

What's Changed

New features

Improvements

Fixes

Documentation

Others

10.4.0

Experimental API Changes

Now Stable

New Experimental APIs

Removed Experimental APIs

What's Changed

AI

Telemetry and Observability

HTTP Resilience and Diagnostics

0.47.3

What's Changed

0.47.2

What's Changed

0.47.1

What's Changed

0.47.0

What's Changed

New Contributors

Uh oh!

github-actions bot commented Mar 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Test Results

Uh oh!

dennisdoomen commented Mar 30, 2026

Uh oh!

Copilot AI commented Mar 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

I tried to connect to the following addresses, but was blocked by firewall rules:

Uh oh!

coveralls commented Mar 31, 2026

Pull Request Test Coverage Report for Build 23759289349

Details

💛 - Coveralls

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

github-actions bot commented Mar 30, 2026 •

edited

Loading

Copilot AI commented Mar 30, 2026 •

edited

Loading