Skip to content

chore(deps): Bump NATS.Net from 2.6.11 to 2.7.3#95

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/src/multi-307b4c2a1c
Closed

chore(deps): Bump NATS.Net from 2.6.11 to 2.7.3#95
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/src/multi-307b4c2a1c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Mar 16, 2026

Copy link
Copy Markdown
Contributor

Updated NATS.Net from 2.6.11 to 2.7.3.

Release notes

Sourced from NATS.Net's releases.

2.7.3

Announcing a new version of NATS .NET client library covering various fixes and a security update on one dependency for NETStandard targets (#​1089) even though the vulnerable API is not used by our library.

A big thank you to all NATS contributors and community members who helped make this release possible ❤️

Breaking Changes

NakAsync Signature Change (#​1081)

The TimeSpan delay parameter has been removed from INatsJSMsg<T>.NakAsync(). The delay must now be passed via AckOpts.NakDelay.

Before (v2.7.2):

await msg.NakAsync(delay: TimeSpan.FromSeconds(5));
await msg.NakAsync(opts, TimeSpan.FromSeconds(5));

After (v2.7.3):

// Option 1: Use the new extension method
await msg.NakAsync(TimeSpan.FromSeconds(5));

// Option 2: Use AckOpts with NakDelay
await msg.NakAsync(new AckOpts { NakDelay = TimeSpan.FromSeconds(5) });

Note: because we also have an extension method, recompiling your project is enough.

AckTerminateAsync TermWithReason (#​1048, #​1081)

AckTerminateAsync now supports an optional termination reason. A new overload and a new TerminateReason property on AckOpts have been added to INatsJSMsg<T>. Implementors of this interface must add the new method.

// New overload
await msg.AckTerminateAsync("processing failed permanently");

// Or via AckOpts
await msg.AckTerminateAsync(new AckOpts { TerminateReason = "processing failed permanently" });

// Extension method shorthand
await msg.AckTerminateAsync("reason", cancellationToken);

Requires NATS Server 2.10.4+.

PinnedClient Validation (#​1063)

Calling NextAsync(), FetchAsync(), or FetchNoWaitAsync() on a consumer with PriorityPolicy.PinnedClient now throws NatsJSException. Use ConsumeAsync() instead.

// This now throws NatsJSException:
 ... (truncated)

## 2.7.2

Excited to announce a new patch release of NATS .NET client library version 2.7.2 with an important fix to slow consumers improving reliability and performance.

Please see [Preview 1](https://github.com/nats-io/nats.net/releases/tag/v2.7.2-preview.1) release notes for details.

Additionally added `SlowConsumerDetected` event and logging to make sure applications will be aware of he slow consumers and can look into adjusting channel size or application logic to handle slow message processors when identified.

We also have lots of other minor and important fixes and improvements. Please see the full list below.

## What's Changed

Preview 1:
* Add API Compat for TFMs by @​mtmk in https://github.com/nats-io/nats.net/pull/1033
* Fix slow consumer blocking by @​mtmk in https://github.com/nats-io/nats.net/pull/1041
* resolves: 1035 - Use ConnectTimeout when awaiting INFO signal by @​ptsteward in https://github.com/nats-io/nats.net/pull/1039

Preview 2:
* FIXED unobserved exceptions surfacing due to unobserved tcs. by @​me064 in https://github.com/nats-io/nats.net/pull/1051
* Add SlowConsumerDetected event and warnings by @​mtmk in https://github.com/nats-io/nats.net/pull/1052
* Fix subject encoding to use UTF-8 per NATS protocol spec by @​aafloy in https://github.com/nats-io/nats.net/pull/1054
* Fix OTel activity leak in Direct request mode by @​aradalvand in https://github.com/nats-io/nats.net/pull/1047

In this release: 
* Fix NatsUri not reflecting host/port changes from OnConnectingAsync hook by @​tormoder in https://github.com/nats-io/nats.net/pull/997
* Fix StreamSourceInfo.Active handle -1 correctly by @​paagamelo2 in https://github.com/nats-io/nats.net/pull/1058

## New Contributors
* @​ptsteward made their first contribution in https://github.com/nats-io/nats.net/pull/1039
* @​me064 made their first contribution in https://github.com/nats-io/nats.net/pull/1051
* @​tormoder made their first contribution in https://github.com/nats-io/nats.net/pull/997

**Full Changelog**: https://github.com/nats-io/nats.net/compare/v2.7.1...v2.7.2

Huge thank you to our community for helping with this release ❤️ 

Download from NuGet https://www.nuget.org/packages/NATS.Net/2.7.2

## 2.7.2-preview.2

This is another bug fix preview release possibly last before a stable 2.7.2 release. Please test this release as much as you can and provide feedback. Thank you.

## What's Changed
* FIXED unobserved exceptions surfacing due to unobserved tcs. by @​me064 in https://github.com/nats-io/nats.net/pull/1051
* Add SlowConsumerDetected event and warnings by @​mtmk in https://github.com/nats-io/nats.net/pull/1052
* Fix subject encoding to use UTF-8 per NATS protocol spec by @​aafloy in https://github.com/nats-io/nats.net/pull/1054
* Fix OTel activity leak in Direct request mode by @​aradalvand in https://github.com/nats-io/nats.net/pull/1047

## New Contributors
* @​me064 made their first contribution in https://github.com/nats-io/nats.net/pull/1051
* @​aafloy  made their first contribution in https://github.com/nats-io/nats.net/pull/1054

**Full Changelog**: https://github.com/nats-io/nats.net/compare/v2.7.2-preview.1...v2.7.2-preview.2

Huge thanks to our contributors and the awesome NATS community ❤️ 

Download from NuGet at https://www.nuget.org/packages/NATS.Net/2.7.2-preview.2

## 2.7.2-preview.1

This is a preview release of NATS .NET version 2.7.2 fixing an important slow consumer issue as well as timeout option correction.

## What's Changed
* Fix slow consumer blocking by @​mtmk in https://github.com/nats-io/nats.net/pull/1041
* resolves: 1035 - Use ConnectTimeout when awaiting INFO signal by @​ptsteward in https://github.com/nats-io/nats.net/pull/1039

## Slow Consumer Fix
Although we are happy that we believe slow consumer fix will solve a lot of the performance issues under load, please test this release as much as you can since there maybe behavioral changes that might affect your application. Please see #​1041 for more information.

Here are suggested changes after upgrading to 2.7.2-preview.1 or above:

### Observing Slow Consumer Events
In NATS .NET you can watch for slow consumer events by subscribing to `MessageDropped` event on the `INatsConnection` object and set the internal channel capacity using the `SubPendingChannelCapacity` option:

```csharp
await using var client = new NatsClient(
    opts : new NatsOpts
    {
        // Default is 1024, however, this may be too small for
        // high throughput scenarios. 16K is more reasonable for these cases.
        // Tradeoff is more memory usage especially because over 1024 messages
        // the backing array will be allocated on the LOH (large object heap).
        SubPendingChannelCapacity = 16384,
    },

    // This option may be deprecated in the future and set to DropNewest by default
    pending: BoundedChannelFullMode.DropNewest); 

client.Connection.MessageDropped += (sender, args) =>
{
    Console.WriteLine($"Message dropped. Subject:{args.Subject} Pending:{args.Pending}");
    return default;
};

Trade-offs of SubPendingChannelCapacity

Setting Pros Cons
Lower capacity (1024) Avoids LOH allocations Higher chance of message drops under load
Higher capacity (16384) Handles burst traffic better More memory usage, potential LOH allocations

You should watch LOH memory usage and slow consumer events using MessageDropped handler.

Also note that channel doesn't allocate this immediately. The backing array grows twice as much each time there is need for more space.

Differences between NatsClient and NatsConnection

NatsClient sets SubPendingChannelFullMode option to BoundedChannelFullMode.Wait by default which means you won't take advantage of this fix if you're using NatsClient to setup your connection.

If you are using NatsClient this fix won't affect your applications.
... (truncated)

2.7.1

This is a patch fix release for NATS .NET client fixing breaking changes introduced in the previous minor release. With this release errors with transient dependencies that are referencing older versions of the client are corrected by using type forwarding since we moved serialization interfaces to a new 'Abstractions' assembly. We are planning to more other interfaces into the Abstractions assembly and we will make sure the type forwards are in place for those. We also had a fix for an OTel extension due to moving return types to interfaces.

What's Changed

Full Changelog: nats-io/nats.net@v2.7.0...v2.7.1

Big thanks to @​caleblloyd and @​heikkilamarko for their help finding and fixing these issues for everyone.

You can download this release from NuGet as usual: https://www.nuget.org/packages/NATS.Net/2.7.1

2.7.0

⚠️ This release might create issues with transient dependencies because serialization interfaces are moved to different assemblies. Please use 2.7.1 or later versions where this was fixed with type forwarding.

We are excited to announce a minor release of NATS .NET version 2.7.0 with a lot of fixes and improvements making NATS .NET client easier to use, testing friendly and more robust:

  • Improved OpenTelemetry support: Added filtering and enrichment for activities (#​859)
  • JetStream publish improvements: Better retry defaults and consistent error handling
  • Dependency upgrades: All Microsoft.Extensions packages updated to .NET 8 (improves compatibility, security, and performance)
  • Abstractions package: Moved serialization interface into abstractions (#​858) for better modularity/ We will move other interfaces to Abstractions gradually.

Important: Please note, there are also minor breaking changes which might affect dependent applications and sometimes transient dependencies. Application developers should recompile and test their application more rigorously in a non-production environment before deploying to production.

Breaking Changes

  • Timeout exceptions: Replaced OperationCanceledException with NatsTimeoutException for timeouts (previously surfaced as cancellations). Update any code catching OperationCanceledException for timeouts.

  • ReplyAsync on NatsJsMsg: Now marked [Obsolete]. Use the alternative method instead.

  • Serialization interface moved into abstractions: Via PR #​858 ("Move Serialization Interface into Abstractions").

    • This is a structural refactor that relocates the serialization-related interface to a dedicated abstractions layer in the codebase.
    • Why it matters: It improves modularity, maintainability, and separation of concerns (e.g., making it easier to swap or extend serialization without touching core implementation).
    • Impact: This is not a breaking change for end-users (no API surface change is mentioned), but it could affect anyone building extensions or custom serializers that directly reference the old location.
    • Linked issue: #​851

  • Fixed KV TTL interface handling (#​854): This brings KV API inline with the design documents. It removed TTL parameters from update calls, which are problematic with buckets with history enabled.

New Features

  • OpenTelemetry activity filtering & enrichment
  • Improved JetStream publish retry behavior

Bug Fixes

  • Fixed KV TTL interface handling (#​854)
  • Fixed connection state issues for consume, request, and reply (#​856–858)
  • Improved timeout exception handling across client, JetStream, and consumer scenarios

What's Changed - Full List

2.7.0-preview.8

This is a bug fix and main merge release.

What's Changed

Full Changelog: nats-io/nats.net@v2.7.0-preview.7...v2.7.0-preview.8

Download from NuGet at https://www.nuget.org/packages/NATS.Net/2.7.0-preview.8

2.7.0-preview.7

This release aligns with the stable 2.6.10 release supporting new NATS Server version 2.12 features.

What's Changed

Full Changelog: nats-io/nats.net@v2.7.0-preview.6...v2.7.0-preview.7

Download from NuGet https://www.nuget.org/packages/NATS.Net/2.7.0-preview.7

2.7.0-preview.5

This release brings 2.7.x branch inline with main. There are important bug fixes. See release notes for 2.6.8 for details.

What's Changed

New Contributors

Full Changelog: nats-io/nats.net@v2.7.0-preview.4...v2.7.0-preview.5

Packages can be downloaded from NuGet: https://www.nuget.org/packages/NATS.Net/2.7.0-preview.5

2.7.0-preview.4

This is a patch preview release of NAT .NET client fixing a dispose and a consumer bug as well as providing corrections and improvements to interfaces.

What's Changed

New Contributors

Full Changelog: nats-io/nats.net@v2.7.0-preview.3...v2.7.0-preview.4

2.7.0-preview.3

Bug fix release and merges from main.

What's Changed

Full Changelog: nats-io/nats.net@v2.7.0-preview.2...v2.7.0-preview.3

2.7.0-preview.1

This is a new preview release with new features like the new Abstractions package.

What's Changed

New Contributors

Full Changelog: nats-io/nats.net@v2.6.4...v2.7.0-preview.1

2.6.14

This is a bugfix release with a small but important Subject Validation feature. Subject validation is turned of by default and can be enabled in NatsOpts. It will be enabled by default in a couple of releases down the line, so if you can, please enable it as soon as possible to make sure your applications are not affected. Subject validation makes sure subjects does not have whitespace characters as to not break the wire protocol. Placing spaces in subjects is not valid and well known. We do not expect the new subject validation feature to break any applications. Only being careful here. See #​1017 for more details.

What's Changed

Full Changelog: nats-io/nats.net@v2.6.12...v2.6.14

Packages can be downloaded from NuGet as usual: https://www.nuget.org/packages/NATS.Net/2.6.14

2.6.12

Happy to announce we have a new release of NATS .NET client library version 2.6.12. With this version we are providing several minor bug fixes and improvements as well as a couple of new features we missed out in our previous release supporting NATS Server 2.12: Support for Nats-Expected-Last-Subject-Sequence-Subject header #​1007 and prioritized mode #​1011.

Big thank you to our community for helping us with this release and to our contributors taking time to improve NATS .NET for everyone ❤️

What's Changed

New Contributors

Full Changelog: nats-io/nats.net@v2.6.11...v2.6.12

You can download the packages from NuGet: https://www.nuget.org/packages/NATS.Net/2.6.12

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot
chore(deps): Bump NATS.Net from 2.6.11 to 2.7.3
19b2035 
---
updated-dependencies:
- dependency-name: NATS.Net
  dependency-version: 2.7.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: NATS.Net
  dependency-version: 2.7.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Mar 16, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: nuget. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot mentioned this pull request Mar 16, 2026
Closed
@github-actions

github-actions Bot commented Mar 16, 2026

Copy link
Copy Markdown

✅ This is a version-update:semver-minor update. Auto-merge has been enabled after CI passes.

@github-actions

github-actions Bot commented May 1, 2026

Copy link
Copy Markdown

This pull request has been automatically marked as stale because it has not had recent activity.
It will be closed in 14 days if no further activity occurs.
If this is still relevant, please comment or push new commits to keep it open.

@github-actions github-actions Bot added the stale label May 1, 2026
@github-actions

github-actions Bot commented May 15, 2026

Copy link
Copy Markdown

This pull request was automatically closed due to inactivity.
If you'd like to continue this work, please feel free to reopen it or create a new PR.

@github-actions github-actions Bot closed this May 15, 2026
@dependabot @github

dependabot Bot commented on behalf of github May 15, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/nuget/src/multi-307b4c2a1c branch May 15, 2026 02:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies jetstream size/xs stale tests

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants