Skip to content

chore(deps): Bump the nuget-minor-patch group with 31 updates #129

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
dependabot wants to merge 1 commit into
base: main
Choose a base branch
from
Open

chore(deps): Bump the nuget-minor-patch group with 31 updates #129

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
62 changes: 31 additions & 31 deletions Directory.Packages.props
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -14,60 +14,60 @@
<PackageVersion Include="Azure.AI.OpenAI" Version="2.1.0" />
<PackageVersion Include="Azure.Identity" Version="1.21.0" />
<PackageVersion Include="Anthropic.SDK" Version="5.10.0" />
<PackageVersion Include="Microsoft.AspNetCore.SignalR.Client" Version="10.0.9" />
<PackageVersion Include="Microsoft.AspNetCore.SignalR.Client" Version="10.0.10" />

<!-- Microsoft Agent Framework (MAF) + Microsoft.Extensions.AI -->
<PackageVersion Include="Microsoft.Agents.AI" Version="1.11.1" />
<PackageVersion Include="Microsoft.Agents.AI.OpenAI" Version="1.11.1" />
<PackageVersion Include="Microsoft.Agents.AI.Workflows" Version="1.11.1" />
<PackageVersion Include="Microsoft.Agents.AI" Version="1.13.0" />
<PackageVersion Include="Microsoft.Agents.AI.OpenAI" Version="1.13.0" />
<PackageVersion Include="Microsoft.Agents.AI.Workflows" Version="1.13.0" />

<!-- JSON schema validation. JsonSchema.Net 9 reworked the evaluation API: Evaluate runs on
JsonElement (not JsonNode), EvaluationResults.HasErrors/HasDetails were removed, and
InstanceLocation is now a non-nullable struct. See JsonSchemaValidator for the v9 usage. -->
<PackageVersion Include="JsonSchema.Net" Version="9.*" />

<!-- Microsoft.Extensions (.NET 10) -->
<PackageVersion Include="Microsoft.Extensions.Http" Version="10.0.9" />
<PackageVersion Include="Microsoft.Extensions.Http.Resilience" Version="10.7.0" />
<PackageVersion Include="Microsoft.Extensions.DependencyInjection" Version="10.0.9" />
<PackageVersion Include="Microsoft.Extensions.Options.ConfigurationExtensions" Version="10.0.9" />
<PackageVersion Include="Microsoft.Extensions.Logging.Abstractions" Version="10.0.9" />
<PackageVersion Include="Microsoft.Extensions.Http" Version="10.0.10" />
<PackageVersion Include="Microsoft.Extensions.Http.Resilience" Version="10.8.0" />
<PackageVersion Include="Microsoft.Extensions.DependencyInjection" Version="10.0.10" />
<PackageVersion Include="Microsoft.Extensions.Options.ConfigurationExtensions" Version="10.0.10" />
<PackageVersion Include="Microsoft.Extensions.Logging.Abstractions" Version="10.0.10" />

<!-- Persistence: EF Core + Npgsql. Pin the EF runtime to 10.0.8 explicitly so transitive
consumers (Microsoft.Agents.AI* pulls 10.0.4) unify against the version Npgsql 10.0.2
+ EFCore.Relational 10.0.8 actually deploy. Without the explicit pin, MSBuild warns
MSB3277 and the test host fails to load Microsoft.EntityFrameworkCore.Relational 10.0.8. -->
<PackageVersion Include="Microsoft.EntityFrameworkCore" Version="10.0.9" />
<PackageVersion Include="Microsoft.EntityFrameworkCore.Relational" Version="10.0.9" />
<PackageVersion Include="Npgsql.EntityFrameworkCore.PostgreSQL" Version="10.0.2" />
<PackageVersion Include="Microsoft.EntityFrameworkCore" Version="10.0.10" />
<PackageVersion Include="Microsoft.EntityFrameworkCore.Relational" Version="10.0.10" />
<PackageVersion Include="Npgsql.EntityFrameworkCore.PostgreSQL" Version="10.0.3" />
<!-- Raw Npgsql (pinned to the version the EF provider 10.0.2 resolves) + Dapper for the read-side:
hot projections/aggregations/pagination run as hand-tuned SQL; EF still owns writes, migrations,
change-tracking, and entity-graph loads. See INpgsqlConnectionFactory (SharedKernel). -->
<PackageVersion Include="Npgsql" Version="10.0.3" />
<PackageVersion Include="Dapper" Version="2.1.79" />
<PackageVersion Include="Microsoft.EntityFrameworkCore.Design" Version="10.0.9" />
<PackageVersion Include="Microsoft.EntityFrameworkCore.InMemory" Version="10.0.9" />
<PackageVersion Include="Microsoft.EntityFrameworkCore.Design" Version="10.0.10" />
<PackageVersion Include="Microsoft.EntityFrameworkCore.InMemory" Version="10.0.10" />

<!-- Phase 8.4b — encrypt app_config values at rest -->
<PackageVersion Include="Microsoft.AspNetCore.DataProtection.Abstractions" Version="10.0.8" />
<!-- Durable, shared DataProtection key ring (persisted to Postgres) so encrypted tenant secrets +
auth/OIDC cookies survive restart/scale and decrypt across the Api + Web hosts. -->
<PackageVersion Include="Microsoft.AspNetCore.DataProtection.EntityFrameworkCore" Version="10.0.9" />
<PackageVersion Include="Microsoft.AspNetCore.DataProtection.EntityFrameworkCore" Version="10.0.10" />

<!-- API host: OpenAPI + Scalar + App Insights -->
<PackageVersion Include="Microsoft.AspNetCore.OpenApi" Version="10.0.9" />
<PackageVersion Include="Microsoft.AspNetCore.OpenApi" Version="10.0.10" />
<!-- Pin the transitive Microsoft.OpenApi past GHSA-v5pm-xwqc-g5wc (CVE-2026-49451, published
2026-06-30): circular schema refs can stack-overflow the OpenAPI reader below 2.7.5. Microsoft.
AspNetCore.OpenApi 10.0.9 floors it at 2.0.0 (no upper bound), so an explicit direct reference
here + in AgentOs.Api.csproj is enough to raise the resolved version. -->
<PackageVersion Include="Microsoft.OpenApi" Version="2.9.0" />
<PackageVersion Include="Scalar.AspNetCore" Version="2.16.6" />
<PackageVersion Include="Microsoft.OpenApi" Version="2.11.0" />
<PackageVersion Include="Scalar.AspNetCore" Version="2.16.15" />
<PackageVersion Include="Microsoft.ApplicationInsights.AspNetCore" Version="3.1.2" />

<!-- Phase 8 — JWT bearer auth (API host) + OpenID Connect cookie/code flow (Web host) -->
<PackageVersion Include="Microsoft.AspNetCore.Authentication.JwtBearer" Version="10.0.9" />
<PackageVersion Include="Microsoft.AspNetCore.Authentication.OpenIdConnect" Version="10.0.9" />
<PackageVersion Include="System.IdentityModel.Tokens.Jwt" Version="8.19.1" />
<PackageVersion Include="Microsoft.AspNetCore.Authentication.JwtBearer" Version="10.0.10" />
<PackageVersion Include="Microsoft.AspNetCore.Authentication.OpenIdConnect" Version="10.0.10" />
<PackageVersion Include="System.IdentityModel.Tokens.Jwt" Version="8.19.2" />

<!-- Web host: Blazor diagram editor -->
<PackageVersion Include="Z.Blazor.Diagrams" Version="3.0.4.1" />
Expand All @@ -82,11 +82,11 @@
<!-- Model Context Protocol — official C# SDK. Used by AgentOs.Modules.Mcp to consume tools
exposed by external MCP servers (GitHub MCP, filesystem MCP, ...) and to expose AgentOs
pipeline agents as MCP tools to external hosts (Claude Desktop, VS Code). -->
<PackageVersion Include="ModelContextProtocol" Version="1.4.0" />
<PackageVersion Include="ModelContextProtocol.AspNetCore" Version="1.4.0" />
<PackageVersion Include="ModelContextProtocol" Version="1.4.1" />
<PackageVersion Include="ModelContextProtocol.AspNetCore" Version="1.4.1" />

<!-- Test stack -->
<PackageVersion Include="Microsoft.NET.Test.Sdk" Version="18.7.0" />
<PackageVersion Include="Microsoft.NET.Test.Sdk" Version="18.8.1" />
<PackageVersion Include="xunit.v3" Version="3.2.2" />
<PackageVersion Include="xunit.runner.visualstudio" Version="3.1.5" />
<PackageVersion Include="NSubstitute" Version="5.3.0" />
Expand All @@ -102,17 +102,17 @@
<PackageVersion Include="Aspire.Hosting.Azure.PostgreSQL" Version="13.4.6" />
<PackageVersion Include="Aspire.Hosting.Keycloak" Version="13.3.5-preview.1.26270.6" />
<PackageVersion Include="Aspire.Hosting.Testing" Version="13.4.6" />
<PackageVersion Include="Microsoft.Extensions.ServiceDiscovery" Version="10.7.0" />
<PackageVersion Include="Microsoft.Extensions.ServiceDiscovery" Version="10.8.0" />
<!-- Transitive of Aspire.Hosting — its default 2.5.192 carries GHSA-hv8m-jj95-wg3x (NU1903).
Promoted to a direct reference in AppHost + E2E.Tests to force the patched version. -->
<PackageVersion Include="MessagePack" Version="3.1.7" />
<PackageVersion Include="MessagePack" Version="3.1.8" />

<!-- OpenTelemetry (instrumentation pinned to 1.15.x line) -->
<PackageVersion Include="OpenTelemetry.Extensions.Hosting" Version="1.16.0" />
<PackageVersion Include="OpenTelemetry.Instrumentation.AspNetCore" Version="1.16.0" />
<PackageVersion Include="OpenTelemetry.Instrumentation.Http" Version="1.16.0" />
<PackageVersion Include="OpenTelemetry.Instrumentation.Runtime" Version="1.15.1" />
<PackageVersion Include="OpenTelemetry.Exporter.OpenTelemetryProtocol" Version="1.16.0" />
<PackageVersion Include="OpenTelemetry.Extensions.Hosting" Version="1.17.0" />
<PackageVersion Include="OpenTelemetry.Instrumentation.AspNetCore" Version="1.17.0" />
<PackageVersion Include="OpenTelemetry.Instrumentation.Http" Version="1.17.0" />
<PackageVersion Include="OpenTelemetry.Instrumentation.Runtime" Version="1.17.0" />
<PackageVersion Include="OpenTelemetry.Exporter.OpenTelemetryProtocol" Version="1.17.0" />

<!-- E2E (browser) -->
<PackageVersion Include="Microsoft.Playwright" Version="1.61.0" />
Expand Down
2 changes: 2 additions & 0 deletions src/AgentOs.Web/AgentOs.Web.csproj
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -32,6 +32,8 @@
</ItemGroup>

<ItemGroup>
<PackageReference Include="OpenTelemetry.Exporter.OpenTelemetryProtocol" />
<PackageReference Include="OpenTelemetry.Extensions.Hosting" />
<PackageReference Include="Z.Blazor.Diagrams" />
<PackageReference Include="Microsoft.AspNetCore.Authentication.OpenIdConnect" />
<!-- Telemetry parity with the Api host (conditional on APPLICATIONINSIGHTS_CONNECTION_STRING). -->
Expand Down