Bump the microsoft-extensions group with 11 updates by dependabot[bot] · Pull Request #180 · emeraldleaf/NextAurora

This release adds new experimental APIs to Microsoft.Extensions.AI.Abstractions and updates the OpenAI dependency to 2.12.0, alongside documentation, test, and repository maintenance.

Experimental API Changes

New Experimental APIs

New experimental API: AIFunctionNameAttribute and AIParameterNameAttribute #7610 by @jozkee (co-authored by @jeffhandley @Copilot)
New experimental API: ToolApprovalRequestContent.RequiresConfirmation (MEAI001) #7549 by @javiercn (co-authored by @Copilot)

What's Changed

AI

Upgrade OpenAI dependency to 2.12.0 #7608 by @jozkee (co-authored by @Copilot)
Auto-detect audio format in OpenAISpeechToTextClient #7575 by @jozkee (co-authored by @Copilot)
Fix ImageGeneratingChatClient duplicating preceding content and dropping following content #7624 by @jozkee (co-authored by @Copilot)

Vector Data

Make all test methods virtual in VectorData.ConformanceTests #7606 by @adamsitnik (co-authored by @Copilot)

Documentation Updates

Remove links to ai-samples repo #7574 by @gewarren
Fix up docs with Copilot (MEVD) #7597 by @gewarren
Fix up docs with Copilot (M.E.ServiceDiscovery) #7598 by @gewarren (co-authored by @Copilot)
Fix up docs with Copilot (MEAI) #7600 by @gewarren
Fix up docs with Copilot #7601 by @gewarren

Test Improvements

Fix flaky StampedeTests and harden related test waits #7572 by @jeffhandley (co-authored by @Copilot)
Fix SQLitePCLRaw.lib.e_sqlite3 vulnerability by replacing SemanticKernel connectors with CommunityToolkit #7579 by @adamsitnik (co-authored by @Copilot)
Removing SemanticKernel Connectors dependency and replacing it #7584 by @adamsitnik (co-authored by @Copilot)
Migrate to xUnit v3 #7607 by @adamsitnik (co-authored by @shyamnamboodiripad @Copilot)

Repository Infrastructure Updates

Update OTel GenAI conventions skill for standalone semconv-genai repo #7519 by @jeffhandley (co-authored by @Copilot)
Bump dotnet-coverage from 18.7.0 to 18.8.0 #7552
[main] Update dependencies from dotnet/arcade #7559
Fix transitive MessagePack vulnerability in AI template AppHost projects #7561 by @adamsitnik (co-authored by @Copilot)
Bump esbuild, @vitejs/plugin-react and vite in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #7564
Bump tmp from 0.2.6 to 0.2.7 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #7569
Bump js-yaml from 4.1.1 to 4.2.0 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #7570
Bump PowerShell from 7.6.2 to 7.6.3 #7576
Remove duplicate 'WebAPI' classification from template #7577 by @danroth27
[main] Update dependencies from dotnet/arcade #7590
Eliminate redundant Correctness CI stage by merging into Build #7594 by @adamsitnik (co-authored by @Copilot)
Update Agent Framework to 1.13.0 #7613 by @jeffhandley (co-authored by @Copilot)
... (truncated)

Commits viewable in compare view.

Updated Microsoft.Extensions.Caching.StackExchangeRedis from 10.0.9 to 10.0.10.

Release notes

Sourced from Microsoft.Extensions.Caching.StackExchangeRedis's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Diagnostics.HealthChecks.EntityFrameworkCore from 10.0.9 to 10.0.10.

Release notes

Sourced from Microsoft.Extensions.Diagnostics.HealthChecks.EntityFrameworkCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Http.Resilience from 10.7.0 to 10.8.0.

Release notes

Sourced from Microsoft.Extensions.Http.Resilience's releases.

10.8.0

This release adds new experimental APIs to Microsoft.Extensions.AI.Abstractions and updates the OpenAI dependency to 2.12.0, alongside documentation, test, and repository maintenance.

Experimental API Changes

New Experimental APIs

New experimental API: AIFunctionNameAttribute and AIParameterNameAttribute #7610 by @jozkee (co-authored by @jeffhandley @Copilot)
New experimental API: ToolApprovalRequestContent.RequiresConfirmation (MEAI001) #7549 by @javiercn (co-authored by @Copilot)

What's Changed

AI

Upgrade OpenAI dependency to 2.12.0 #7608 by @jozkee (co-authored by @Copilot)
Auto-detect audio format in OpenAISpeechToTextClient #7575 by @jozkee (co-authored by @Copilot)
Fix ImageGeneratingChatClient duplicating preceding content and dropping following content #7624 by @jozkee (co-authored by @Copilot)

Vector Data

Make all test methods virtual in VectorData.ConformanceTests #7606 by @adamsitnik (co-authored by @Copilot)

Documentation Updates

Remove links to ai-samples repo #7574 by @gewarren
Fix up docs with Copilot (MEVD) #7597 by @gewarren
Fix up docs with Copilot (M.E.ServiceDiscovery) #7598 by @gewarren (co-authored by @Copilot)
Fix up docs with Copilot (MEAI) #7600 by @gewarren
Fix up docs with Copilot #7601 by @gewarren

Test Improvements

Fix flaky StampedeTests and harden related test waits #7572 by @jeffhandley (co-authored by @Copilot)
Fix SQLitePCLRaw.lib.e_sqlite3 vulnerability by replacing SemanticKernel connectors with CommunityToolkit #7579 by @adamsitnik (co-authored by @Copilot)
Removing SemanticKernel Connectors dependency and replacing it #7584 by @adamsitnik (co-authored by @Copilot)
Migrate to xUnit v3 #7607 by @adamsitnik (co-authored by @shyamnamboodiripad @Copilot)

Repository Infrastructure Updates

Update OTel GenAI conventions skill for standalone semconv-genai repo #7519 by @jeffhandley (co-authored by @Copilot)
Bump dotnet-coverage from 18.7.0 to 18.8.0 #7552
[main] Update dependencies from dotnet/arcade #7559
Fix transitive MessagePack vulnerability in AI template AppHost projects #7561 by @adamsitnik (co-authored by @Copilot)
Bump esbuild, @vitejs/plugin-react and vite in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #7564
Bump tmp from 0.2.6 to 0.2.7 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #7569
Bump js-yaml from 4.1.1 to 4.2.0 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #7570
Bump PowerShell from 7.6.2 to 7.6.3 #7576
Remove duplicate 'WebAPI' classification from template #7577 by @danroth27
[main] Update dependencies from dotnet/arcade #7590
Eliminate redundant Correctness CI stage by merging into Build #7594 by @adamsitnik (co-authored by @Copilot)
Update Agent Framework to 1.13.0 #7613 by @jeffhandley (co-authored by @Copilot)
... (truncated)

Commits viewable in compare view.

Updated Microsoft.Extensions.ServiceDiscovery from 10.7.0 to 10.8.0.

Release notes

Sourced from Microsoft.Extensions.ServiceDiscovery's releases.

10.8.0

This release adds new experimental APIs to Microsoft.Extensions.AI.Abstractions and updates the OpenAI dependency to 2.12.0, alongside documentation, test, and repository maintenance.

Experimental API Changes

New Experimental APIs

New experimental API: AIFunctionNameAttribute and AIParameterNameAttribute #7610 by @jozkee (co-authored by @jeffhandley @Copilot)
New experimental API: ToolApprovalRequestContent.RequiresConfirmation (MEAI001) #7549 by @javiercn (co-authored by @Copilot)

What's Changed

AI

Upgrade OpenAI dependency to 2.12.0 #7608 by @jozkee (co-authored by @Copilot)
Auto-detect audio format in OpenAISpeechToTextClient #7575 by @jozkee (co-authored by @Copilot)
Fix ImageGeneratingChatClient duplicating preceding content and dropping following content #7624 by @jozkee (co-authored by @Copilot)

Vector Data

Make all test methods virtual in VectorData.ConformanceTests #7606 by @adamsitnik (co-authored by @Copilot)

Documentation Updates

Remove links to ai-samples repo #7574 by @gewarren
Fix up docs with Copilot (MEVD) #7597 by @gewarren
Fix up docs with Copilot (M.E.ServiceDiscovery) #7598 by @gewarren (co-authored by @Copilot)
Fix up docs with Copilot (MEAI) #7600 by @gewarren
Fix up docs with Copilot #7601 by @gewarren

Test Improvements

Fix flaky StampedeTests and harden related test waits #7572 by @jeffhandley (co-authored by @Copilot)
Fix SQLitePCLRaw.lib.e_sqlite3 vulnerability by replacing SemanticKernel connectors with CommunityToolkit #7579 by @adamsitnik (co-authored by @Copilot)
Removing SemanticKernel Connectors dependency and replacing it #7584 by @adamsitnik (co-authored by @Copilot)
Migrate to xUnit v3 #7607 by @adamsitnik (co-authored by @shyamnamboodiripad @Copilot)

Repository Infrastructure Updates

Update OTel GenAI conventions skill for standalone semconv-genai repo #7519 by @jeffhandley (co-authored by @Copilot)
Bump dotnet-coverage from 18.7.0 to 18.8.0 #7552
[main] Update dependencies from dotnet/arcade #7559
Fix transitive MessagePack vulnerability in AI template AppHost projects #7561 by @adamsitnik (co-authored by @Copilot)
Bump esbuild, @vitejs/plugin-react and vite in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #7564
Bump tmp from 0.2.6 to 0.2.7 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #7569
Bump js-yaml from 4.1.1 to 4.2.0 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #7570
Bump PowerShell from 7.6.2 to 7.6.3 #7576
Remove duplicate 'WebAPI' classification from template #7577 by @danroth27
[main] Update dependencies from dotnet/arcade #7590
Eliminate redundant Correctness CI stage by merging into Build #7594 by @adamsitnik (co-authored by @Copilot)
Update Agent Framework to 1.13.0 #7613 by @jeffhandley (co-authored by @Copilot)
... (truncated)

Commits viewable in compare view.

Updated Microsoft.Extensions.TimeProvider.Testing from 10.7.0 to 10.8.0.

Release notes

Sourced from Microsoft.Extensions.TimeProvider.Testing's releases.

10.8.0

This release adds new experimental APIs to Microsoft.Extensions.AI.Abstractions and updates the OpenAI dependency to 2.12.0, alongside documentation, test, and repository maintenance.

Experimental API Changes

New Experimental APIs

New experimental API: AIFunctionNameAttribute and AIParameterNameAttribute #7610 by @jozkee (co-authored by @jeffhandley @Copilot)
New experimental API: ToolApprovalRequestContent.RequiresConfirmation (MEAI001) #7549 by @javiercn (co-authored by @Copilot)

What's Changed

AI

Upgrade OpenAI dependency to 2.12.0 #7608 by @jozkee (co-authored by @Copilot)
Auto-detect audio format in OpenAISpeechToTextClient #7575 by @jozkee (co-authored by @Copilot)
Fix ImageGeneratingChatClient duplicating preceding content and dropping following content #7624 by @jozkee (co-authored by @Copilot)

Vector Data

Make all test methods virtual in VectorData.ConformanceTests #7606 by @adamsitnik (co-authored by @Copilot)

Documentation Updates

Remove links to ai-samples repo #7574 by @gewarren
Fix up docs with Copilot (MEVD) #7597 by @gewarren
Fix up docs with Copilot (M.E.ServiceDiscovery) #7598 by @gewarren (co-authored by @Copilot)
Fix up docs with Copilot (MEAI) #7600 by @gewarren
Fix up docs with Copilot #7601 by @gewarren

Test Improvements

Fix flaky StampedeTests and harden related test waits #7572 by @jeffhandley (co-authored by @Copilot)
Fix SQLitePCLRaw.lib.e_sqlite3 vulnerability by replacing SemanticKernel connectors with CommunityToolkit #7579 by @adamsitnik (co-authored by @Copilot)
Removing SemanticKernel Connectors dependency and replacing it #7584 by @adamsitnik (co-authored by @Copilot)
Migrate to xUnit v3 #7607 by @adamsitnik (co-authored by @shyamnamboodiripad @Copilot)

Repository Infrastructure Updates

Update OTel GenAI conventions skill for standalone semconv-genai repo #7519 by @jeffhandley (co-authored by @Copilot)
Bump dotnet-coverage from 18.7.0 to 18.8.0 #7552
[main] Update dependencies from dotnet/arcade #7559
Fix transitive MessagePack vulnerability in AI template AppHost projects #7561 by @adamsitnik (co-authored by @Copilot)
Bump esbuild, @vitejs/plugin-react and vite in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #7564
Bump tmp from 0.2.6 to 0.2.7 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #7569
Bump js-yaml from 4.1.1 to 4.2.0 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #7570
Bump PowerShell from 7.6.2 to 7.6.3 #7576
Remove duplicate 'WebAPI' classification from template #7577 by @danroth27
[main] Update dependencies from dotnet/arcade #7590
Eliminate redundant Correctness CI stage by merging into Build #7594 by @adamsitnik (co-authored by @Copilot)
Update Agent Framework to 1.13.0 #7613 by @jeffhandley (co-authored by @Copilot)
... (truncated)

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps Microsoft.AspNetCore.Authentication.JwtBearer from 10.0.9 to 10.0.10 Bumps Microsoft.AspNetCore.Components.WebAssembly from 10.0.9 to 10.0.10 Bumps Microsoft.AspNetCore.Components.WebAssembly.DevServer from 10.0.9 to 10.0.10 Bumps Microsoft.AspNetCore.Mvc.Testing from 10.0.9 to 10.0.10 Bumps Microsoft.AspNetCore.OpenApi from 10.0.9 to 10.0.10 Bumps Microsoft.Extensions.Caching.Hybrid from 10.7.0 to 10.8.0 Bumps Microsoft.Extensions.Caching.StackExchangeRedis from 10.0.9 to 10.0.10 Bumps Microsoft.Extensions.Diagnostics.HealthChecks.EntityFrameworkCore from 10.0.9 to 10.0.10 Bumps Microsoft.Extensions.Http.Resilience from 10.7.0 to 10.8.0 Bumps Microsoft.Extensions.ServiceDiscovery from 10.7.0 to 10.8.0 Bumps Microsoft.Extensions.TimeProvider.Testing from 10.7.0 to 10.8.0 --- updated-dependencies: - dependency-name: Microsoft.AspNetCore.Authentication.JwtBearer dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: microsoft-extensions - dependency-name: Microsoft.AspNetCore.Components.WebAssembly dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: microsoft-extensions - dependency-name: Microsoft.AspNetCore.Components.WebAssembly.DevServer dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: microsoft-extensions - dependency-name: Microsoft.AspNetCore.Mvc.Testing dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: microsoft-extensions - dependency-name: Microsoft.AspNetCore.OpenApi dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: microsoft-extensions - dependency-name: Microsoft.Extensions.Caching.Hybrid dependency-version: 10.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: microsoft-extensions - dependency-name: Microsoft.Extensions.Caching.StackExchangeRedis dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: microsoft-extensions - dependency-name: Microsoft.Extensions.Diagnostics.HealthChecks.EntityFrameworkCore dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: microsoft-extensions - dependency-name: Microsoft.Extensions.Http.Resilience dependency-version: 10.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: microsoft-extensions - dependency-name: Microsoft.Extensions.ServiceDiscovery dependency-version: 10.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: microsoft-extensions - dependency-name: Microsoft.Extensions.TimeProvider.Testing dependency-version: 10.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: microsoft-extensions ... Signed-off-by: dependabot[bot] <support@github.com>

emeraldleaf · 2026-07-20T02:58:31Z

@dependabot rebase

emeraldleaf · 2026-07-20T03:08:19Z

@dependabot rebase

emeraldleaf · 2026-07-20T03:09:34Z

Deferring this cycle's microsoft-extensions bump. It's a routine patch/minor update (10.0.9→10.0.10, 10.7→10.8) with nothing waiting on it, and its rebase stalled in a GitHub Actions incident this morning.

Once #185 merges (it combines the microsoft-extensions and entity-framework dependabot groups — they're transitively coupled via AspNetCore→EF.Relational, which is what caused this PR's NU1605), dependabot's next run re-offers these bumps as a single AspNet+EF group PR instead of the #180/#181 split that broke here. Cleaner to take it then. No loss — the versions come back next cycle.

dependabot · 2026-07-20T03:09:36Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

dependabot · 2026-07-20T03:17:10Z

Oh no! Something went wrong on our end. Please try again later.

If the problem persists, please contact GitHub support for assistance 🙇

… groups (they're transitively coupled) (#185) Microsoft.AspNetCore.* transitively depends on Microsoft.EntityFrameworkCore.Relational, so an AspNetCore bump pulls a newer EF.Relational and downgrades it against the pinned EF Core → NU1605. As two separate groups they came as two PRs that merged out of step and broke the build TWICE: #155 (Aug) and again #180/#181 this week (AspNetCore 10.0.10 needs EF 10.0.10; the EF group PR was separate). #178 grouped the standalone families (FluentValidation/Grpc/Testcontainers) but not this CROSS-family transitive coupling. Merging the two groups into one (`microsoft-aspnet-ef`) means one PR, so AspNetCore and EF Core always move together — the NU1605 skew becomes structurally impossible. Npgsql EF provider rides along (same cadence). Config-only, no code/package change — architecture-review gate exempt. Does not fix the current #180 — merge #181 (EF 10.0.10) first, then #180 rebases green. Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

dependabot Bot added dependencies Pull requests that update a dependency file nuget Pull requests that update NuGet packages labels Jul 19, 2026

dependabot Bot requested a review from emeraldleaf as a code owner July 19, 2026 23:45

emeraldleaf mentioned this pull request Jul 20, 2026

chore(deps): merge AspNetCore + EF dependabot groups so the NU1605 skew can't recur #185

Merged

emeraldleaf closed this Jul 20, 2026

dependabot Bot deleted the dependabot/nuget/microsoft-extensions-10b945624d branch July 20, 2026 03:09

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the microsoft-extensions group with 11 updates#180

Bump the microsoft-extensions group with 11 updates#180
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/microsoft-extensions-10b945624d

dependabot Bot commented on behalf of github Jul 19, 2026 •

edited

Loading

Uh oh!

emeraldleaf commented Jul 20, 2026

Uh oh!

emeraldleaf commented Jul 20, 2026

Uh oh!

emeraldleaf commented Jul 20, 2026

Uh oh!

dependabot Bot commented on behalf of github Jul 20, 2026

Uh oh!

dependabot Bot commented on behalf of github Jul 20, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Jul 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

10.8.0

Experimental API Changes

New Experimental APIs

What's Changed

AI

Vector Data

Documentation Updates

Test Improvements

Repository Infrastructure Updates

10.8.0

Experimental API Changes

New Experimental APIs

What's Changed

AI

Vector Data

Documentation Updates

Test Improvements

Repository Infrastructure Updates

10.8.0

Experimental API Changes

New Experimental APIs

What's Changed

AI

Vector Data

Documentation Updates

Test Improvements

Repository Infrastructure Updates

10.8.0

Experimental API Changes

New Experimental APIs

What's Changed

AI

Vector Data

Documentation Updates

Test Improvements

Repository Infrastructure Updates

Uh oh!

emeraldleaf commented Jul 20, 2026

Uh oh!

emeraldleaf commented Jul 20, 2026

Uh oh!

emeraldleaf commented Jul 20, 2026

Uh oh!

dependabot Bot commented on behalf of github Jul 20, 2026

Uh oh!

dependabot Bot commented on behalf of github Jul 20, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Jul 19, 2026 •

edited

Loading