Skip to content

build: Bump the nuget-deps group with 11 updates#591

Merged
github-actions[bot] merged 1 commit intodependabotchangesfrom
dependabot/nuget/App/backend-api/Microsoft.GS.DPS.Host/dependabotchanges/nuget-deps-bb70b491b0
Apr 2, 2026
Merged

build: Bump the nuget-deps group with 11 updates#591
github-actions[bot] merged 1 commit intodependabotchangesfrom
dependabot/nuget/App/backend-api/Microsoft.GS.DPS.Host/dependabotchanges/nuget-deps-bb70b491b0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 1, 2026

Updated AutoMapper from 16.0.0 to 16.1.1.

Release notes

Sourced from AutoMapper's releases.

16.1.1

What's Changed

Security

Fixed an issue where certain cyclic or self-referential object graphs could trigger uncontrolled recursion during mapping, potentially resulting in stack exhaustion and denial of service.

Applications that process untrusted or attacker-controlled object graphs through affected mapping paths may be impacted.

Users should upgrade to this release.

Security advisory: GHSA-rvv3-g6hj-g44x

Thanks to @​skdishansachin for responsibly disclosing this issue.

Full Changelog: LuckyPennySoftware/AutoMapper@v16.1.0...v16.1.1

16.1.0

What's Changed

New Contributors

Full Changelog: LuckyPennySoftware/AutoMapper@v16.0.0...v16.1.0

Commits viewable in compare view.

Updated Azure.Identity from 1.18.0 to 1.20.0.

Release notes

Sourced from Azure.Identity's releases.

1.20.0

1.20.0 (2026-03-30)

Features Added

  • Added a JSON schema segment to the NuGet package that provides IntelliSense and validation for Azure.Identity credential configuration in appsettings.json.

Breaking Changes

  • AddAzureClient, AddKeyedAzureClient, and WithAzureCredential return type changed from IHostApplicationBuilder to IClientBuilder to align with the IClientBuilder composition change in System.ClientModel.

1.19.0

1.19.0 (2026-03-11)

Features Added

  • Added support in ClientCertificateCredential to specify a path in the form of cert:/StoreLocation/StoreName/Thumbprint to refer to a certificate in the platform certificate store - such as the Windows Certificate Store on Windows, and the KeyChain on MacOS - instead of a file on disk. For example to load a certificate from the "My" store in the "CurrentUser" location use the path cert:/CurrentUser/My/E661583E8FABEF4C0BEF694CBC41C28FB81CD870 (A community contribution, courtesy of fowl2).

Other Changes

  • Updated Microsoft.Identity.Client and Microsoft.Identity.Client.Extensions.Msal dependencies to version 4.83.1.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration from 10.0.3 to 10.0.5.

Release notes

Sourced from Microsoft.Extensions.Configuration's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.Json from 10.0.3 to 10.0.5.

Release notes

Sourced from Microsoft.Extensions.Configuration.Json's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Options from 10.0.3 to 10.0.5.

Release notes

Sourced from Microsoft.Extensions.Options's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Maui.Graphics from 10.0.41 to 10.0.51.

Release notes

Sourced from Microsoft.Maui.Graphics's releases.

10.0.51

What's Changed

Full Changelog: dotnet/maui@10.0.50...10.0.51

10.0.50

What's Changed

.NET MAUI 10.0.50 introduces significant improvements across all platforms with focus on quality, performance, and developer experience. This release includes 78 commits with various improvements, bug fixes, and enhancements.

AI

Ai Agents

Animation

API

Button

... (truncated)

Commits viewable in compare view.

Updated Microsoft.Maui.Graphics.Skia from 10.0.41 to 10.0.51.

Release notes

Sourced from Microsoft.Maui.Graphics.Skia's releases.

10.0.51

What's Changed

Full Changelog: dotnet/maui@10.0.50...10.0.51

10.0.50

What's Changed

.NET MAUI 10.0.50 introduces significant improvements across all platforms with focus on quality, performance, and developer experience. This release includes 78 commits with various improvements, bug fixes, and enhancements.

AI

Ai Agents

Animation

API

Button

... (truncated)

Commits viewable in compare view.

Updated Microsoft.SemanticKernel from 1.72.0 to 1.74.0.

Release notes

Sourced from Microsoft.SemanticKernel's releases.

1.74.0

Changes:

  • 14ea2fcabb02910e6fccfc939d217567caa4a0be SK .NET Release version bump (#​13685)
  • 8b32b3ba6f62e94ea2533d818b89a17eb11bb681 DF PR Review workflow (#​13687)
  • 30aec16700618b9912e08b0a5f919839e058ca11 Update OpenAI to 2.9.1, Azure.AI.OpenAI to 2.9.0-beta.1, Azure.AI.Projects to 2.0.0-beta.2, Microsoft.Extensions.AI* to 10.4.0 (#​13668)
  • 3c1b688dcfd3b05e29423e15b00cc9182b4cf71d Python: Fix ChatHistoryTruncationReducer deleting system prompt (#​13610) [ #​12612, #​10344 ]
  • bb421f67a7d7561517c0eedc31b911f9819bb323 Reduce macos runner coverage due to capacity (#​13686)
  • 620e412c70ea72df3aea6080f83d96e42e9e008f Python: Bump werkzeug from 3.1.1 to 3.1.6 in /python (#​13605) [ #​3065, #​3077, #​3075, #​3020, #​3054, #​3067, #​3044, #​3056, #​2994, #​2993, #​3102, #​3097, #​3085 ]
  • c9efdf50f5825586f12728bebd1364d806793245 Fix link for Chroma documentation in README (#​13682)
  • 2c880ea4b26017f375b3ae8d11cf22a7119c7ce9 .Net: [Breaking] Harden plugin security defaults for WebFileDownloadPlugin (#​13644)
  • 12a7d55d3aca39aeeb20055dbb477b0eaf18da45 .Net: [Breaking] Harden DocumentPlugin security defaults with deny-by-default AllowedDirectories (#​13683)
  • 41cc2487d25a63b6e3ce2f24663f9d03c93787d5 .Net: Fixes Qdrant 1.17 issue with returning empty vectors (#​13638) [ #​13587 ]
See More
  • 301d7dc9239216b5ac9f38df42dcad2d544c69e1 .Net: Migrate from deprecated DALL-E models to gpt-image-1 (#​13650)
  • c2945847eabf2b32b023373d24dfd58b53c40b07 .NET: Update system package dependencies for CVE-2026-26127 (#​13656) [ #​4647 ]
  • e500f727ed6b3ff6f63dacdaf5d224c48275a317 Python: fix prompt template engine blocking HTML tags in content (#​13633) [ #​13632 ]
  • 3f6d72725f85888c7e87ec97c9f1b8a4f1a0b0ee Python: Fix image integration tests that are now blocked due to bot policies (#​13680)
  • cc83889787188c22a770347aacbf5e4842f9a613 Python: fix(python/google): preserve thought_signature in Gemini function call parts (#​13609) [ #​13480, #​13418 ]
  • b3cf64adf868cd96c767776af5730e17b8510f5b Python: Bump Python version to 1.41.0 for a release (#​13655)
  • 5c891d1769e89595375f2fb69c5fe20938e9947e Python: Add support to new openai text to image model (#​13651)
  • c250b379f6748e751276991afc39e3ef46e9441c Python: Refinement of in memory vector collection filter (#​13637)
  • d5c2b9d889355887d6b746425dc45f43c472a76e Python: Improves the robustness of filename handling (#​13643)
  • 02da6c47d768b0e84512557f046e913e0bd08d75 Updating recommended extensions list. (#​13645)
  • 4d675929578f8a07dfdff5361533d362f628d571 .Net: Add server URL validation options for OpenAPI plugins (#​13631)
  • 86d7a498437d988718c0d15302593e3f69bd19e3 .Net: Feature text search linq (#​13384)

This list of changes was auto generated.

1.73.0

Changes:

  • e90102079382d3fb0ffeac29ab7c6d2994a2948f .Net: Bump SK and MEVD versions for release (#​13630)
  • b36a327d76f398346ca6267a1e25ed193cc95bea .Net: Fix input checking in Cosmos NoSQL, Redis and Weaviate providers (#​13629)
  • e9641a9106ba6b67909d65b882f5cf8c292106c7 .Net: Fix column nullability in SQL MEVD providers (#​13622) [ #​12560 ]
  • b712ffc98ef24c3df1004b9be99a3e952adbcf8a Python: Bump py version to 1.40.0 for a release (#​13619)
  • 781881a34f433ed4aa3bcc54cae78be0b565e392 .Net: Deduplicate embedding generation management (#​13615) [ #​12508 ]
  • 429dd1c4c0408415387a61dc294ed1fe2412e60b Python: support (Azure) OpenAI realtime audio models (#​13291) [ #​13267 ]
  • 74d4310fd44bbe555eeba532d6c9edc8e160a879 .Net: Handle installation of pgvector on PostgreSQL (#​13600)
  • f077655fd6bcd586a927f406fa767dacf03e8c5c .Net: [MEVD] Add validation for mismatched collection key (#​13594) [ #​11355 ]
  • f59e3952300b9dd3eb7f42d67d6d1040dc7d7b86 .Net: [MEVD] Make PG schema nullable (#​13593) [ #​10853 ]
  • ea864bf6976f60ddff52d9a2dcae4eadda784cbd .Net: [MEVD] Support DateTime/DateTimeOffset/DateOnly/TimeOnly across providers (#​13569) [ #​11286, #​11086 ]
See More
  • 889807dfda389a7c98c897d820f45c898a80da99 .Net: Update Microsoft.Extensions.AI dependencies to 10.3.0 and OpenAI SDK to 2.8.0 (#​13544)
  • c086d0944259ab3f28ba16f1f984a3ab2fe4fc7d .Net: [MEVD] SQL Server approximate vector search (#​13573) [ #​13270 ]
  • 9f2dafca484b125626fdbcdaf108250373bc0bff .Net: [TINY] [MEVD] Remove SupportsMultipleKeys (#​13572)

This list of changes was auto generated.

Commits viewable in compare view.

Updated MongoDB.Bson from 3.6.0 to 3.7.1.

Release notes

Sourced from MongoDB.Bson's releases.

3.7.1

This is a patch release that contains fixes and stability improvements:

  • CSHARP-5916: ExpressionNotSupportedException when a $set stage expression references a member of a captured constant
  • CSHARP-5918: ExpressionNotSupportedException when a $set stage expression uses ToList method
  • CSHARP-5917: Mql.Field should lookup for default serializer if null is provided as a bsonSerializer parameter
  • CSHARP-5920: SerializerFinder wrapping serializer into Upcast/Downcast serializer breaks some expressions translation
  • CSHARP-5905: Fix bug when using EnumRepresentationConvention or ObjectSerializerAllowedTypesConvention
  • CSHARP-5928: LINQ Provider throws misleading exception if expression translation is not supported
  • CSHARP-5929: Improve SerializerFinder to proper handling of IUnknowableSerializer

The full list of issues resolved in this release is available at CSHARP JIRA project.

Documentation on the .NET driver can be found here.

3.7.0

This is the general availability release for the 3.7.0 version of the driver.

The main new features in 3.7.0 include:

  • CSHARP-3124: OpenTelemetry implementation
  • CSHARP-5736: Expose atClusterTime parameter in snapshot sessions
  • CSHARP-5805: Add support for server selection's deprioritized servers to all topologies
  • CSHARP-5712: WithTransaction API retries too frequently
  • CSHARP-5836: Support new Reverse with array overload introduced by .NET 10
  • CSHARP-4566: Support filters comparing nullable numeric or char field to constant
  • CSHARP-5606: Support ConvertChecked as well as Convert

Improvements:

  • CSHARP-5841: Rewrite $elemMatch with $or referencing implied element due to server limitations
  • CSHARP-5572: Implement new SerializerFinder
  • CSHARP-5861: Use ConnectAsync in synchronous code-path to avoid dead-locks
  • CSHARP-5876: Convert some disposer classes to structs
  • CSHARP-5889: Optimize comparison with nullable constant translation
  • CSHARP-5890: Avoid byte array allocations writing Int64, Double, Decimal128 in ByteBufferStream
  • CSHARP-5888: Optimize CommandEventHelper to avoid redundant message decoding

Fixes:

  • CSHARP-5564: Enum with ushort underlying type is not serialized correctly
  • CSHARP-5654: String.IndexOf comparisons to -1 return incorrect results
  • CSHARP-5866: Avoid raising ClusterDescriptionChangedEvent on unchanged DNS records update
  • CSHARP-5850: Use of an untranslatable property reference in a LINQ expression should be executed client-side
  • CSHARP-5863: The built-in IPAddressSerializer throws when using IPAddress.Any, etc
  • CSHARP-5877: Fix First/Last field path in GroupBy optimizer when source is wrapped
  • CSHARP-5894: Deadlock during concurrent BsonClassMap initialization

The full list of issues resolved in this release is available at CSHARP JIRA project.

Documentation on the .NET driver can be found here.

Commits viewable in compare view.

Updated MongoDB.Driver from 3.6.0 to 3.7.1.

Release notes

Sourced from MongoDB.Driver's releases.

3.7.1

This is a patch release that contains fixes and stability improvements:

  • CSHARP-5916: ExpressionNotSupportedException when a $set stage expression references a member of a captured constant
  • CSHARP-5918: ExpressionNotSupportedException when a $set stage expression uses ToList method
  • CSHARP-5917: Mql.Field should lookup for default serializer if null is provided as a bsonSerializer parameter
  • CSHARP-5920: SerializerFinder wrapping serializer into Upcast/Downcast serializer breaks some expressions translation
  • CSHARP-5905: Fix bug when using EnumRepresentationConvention or ObjectSerializerAllowedTypesConvention
  • CSHARP-5928: LINQ Provider throws misleading exception if expression translation is not supported
  • CSHARP-5929: Improve SerializerFinder to proper handling of IUnknowableSerializer

The full list of issues resolved in this release is available at CSHARP JIRA project.

Documentation on the .NET driver can be found here.

3.7.0

This is the general availability release for the 3.7.0 version of the driver.

The main new features in 3.7.0 include:

  • CSHARP-3124: OpenTelemetry implementation
  • CSHARP-5736: Expose atClusterTime parameter in snapshot sessions
  • CSHARP-5805: Add support for server selection's deprioritized servers to all topologies
  • CSHARP-5712: WithTransaction API retries too frequently
  • CSHARP-5836: Support new Reverse with array overload introduced by .NET 10
  • CSHARP-4566: Support filters comparing nullable numeric or char field to constant
  • CSHARP-5606: Support ConvertChecked as well as Convert

Improvements:

  • CSHARP-5841: Rewrite $elemMatch with $or referencing implied element due to server limitations
  • CSHARP-5572: Implement new SerializerFinder
  • CSHARP-5861: Use ConnectAsync in synchronous code-path to avoid dead-locks
  • CSHARP-5876: Convert some disposer classes to structs
  • CSHARP-5889: Optimize comparison with nullable constant translation
  • CSHARP-5890: Avoid byte array allocations writing Int64, Double, Decimal128 in ByteBufferStream
  • CSHARP-5888: Optimize CommandEventHelper to avoid redundant message decoding

Fixes:

  • CSHARP-5564: Enum with ushort underlying type is not serialized correctly
  • CSHARP-5654: String.IndexOf comparisons to -1 return incorrect results
  • CSHARP-5866: Avoid raising ClusterDescriptionChangedEvent on unchanged DNS records update
  • CSHARP-5850: Use of an untranslatable property reference in a LINQ expression should be executed client-side
  • CSHARP-5863: The built-in IPAddressSerializer throws when using IPAddress.Any, etc
  • CSHARP-5877: Fix First/Last field path in GroupBy optimizer when source is wrapped
  • CSHARP-5894: Deadlock during concurrent BsonClassMap initialization

The full list of issues resolved in this release is available at CSHARP JIRA project.

Documentation on the .NET driver can be found here.

Commits viewable in compare view.

Updated Swashbuckle.AspNetCore from 10.1.4 to 10.1.7.

Release notes

Sourced from Swashbuckle.AspNetCore's releases.

10.1.7

What's Changed

New Contributors

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.6...v10.1.7

10.1.6

What's Changed

New Contributors

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.5...v10.1.6

10.1.5

What's Changed

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.4...v10.1.5

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build: Bump the nuget-deps group with 11 updates
a4ea9fb 
Bumps AutoMapper from 16.0.0 to 16.1.1
Bumps Azure.Identity from 1.18.0 to 1.20.0
Bumps Microsoft.Extensions.Configuration from 10.0.3 to 10.0.5
Bumps Microsoft.Extensions.Configuration.Json from 10.0.3 to 10.0.5
Bumps Microsoft.Extensions.Options from 10.0.3 to 10.0.5
Bumps Microsoft.Maui.Graphics from 10.0.41 to 10.0.51
Bumps Microsoft.Maui.Graphics.Skia from 10.0.41 to 10.0.51
Bumps Microsoft.SemanticKernel from 1.72.0 to 1.74.0
Bumps MongoDB.Bson from 3.6.0 to 3.7.1
Bumps MongoDB.Driver from 3.6.0 to 3.7.1
Bumps Swashbuckle.AspNetCore from 10.1.4 to 10.1.7

---
updated-dependencies:
- dependency-name: AutoMapper
  dependency-version: 16.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-deps
- dependency-name: Azure.Identity
  dependency-version: 1.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-deps
- dependency-name: Microsoft.Extensions.Configuration
  dependency-version: 10.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-deps
- dependency-name: Microsoft.Extensions.Configuration.Json
  dependency-version: 10.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-deps
- dependency-name: Microsoft.Extensions.Options
  dependency-version: 10.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-deps
- dependency-name: Microsoft.Maui.Graphics
  dependency-version: 10.0.51
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-deps
- dependency-name: Microsoft.Maui.Graphics.Skia
  dependency-version: 10.0.51
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-deps
- dependency-name: Microsoft.SemanticKernel
  dependency-version: 1.74.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-deps
- dependency-name: MongoDB.Bson
  dependency-version: 3.7.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-deps
- dependency-name: MongoDB.Driver
  dependency-version: 3.7.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-deps
- dependency-name: Swashbuckle.AspNetCore
  dependency-version: 10.1.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added .NET Pull requests that update .net code dependencies Pull requests that update a dependency file labels Apr 1, 2026
@dependabot dependabot bot added dependencies Pull requests that update a dependency file .NET Pull requests that update .net code labels Apr 1, 2026
@dependabot dependabot bot mentioned this pull request Apr 1, 2026
Closed
@github-actions github-actions bot merged commit 8045fe2 into dependabotchanges Apr 2, 2026
2 checks passed
@dependabot dependabot bot deleted the dependabot/nuget/App/backend-api/Microsoft.GS.DPS.Host/dependabotchanges/nuget-deps-bb70b491b0 branch April 2, 2026 00:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@Avijit-Microsoft Avijit-Microsoft Awaiting requested review from Avijit-Microsoft Avijit-Microsoft is a code owner

@Roopan-Microsoft Roopan-Microsoft Awaiting requested review from Roopan-Microsoft Roopan-Microsoft is a code owner

@Prajwal-Microsoft Prajwal-Microsoft Awaiting requested review from Prajwal-Microsoft Prajwal-Microsoft is a code owner

@Dongbumlee Dongbumlee Awaiting requested review from Dongbumlee Dongbumlee is a code owner

@Vinay-Microsoft Vinay-Microsoft Awaiting requested review from Vinay-Microsoft Vinay-Microsoft is a code owner

@aniaroramsft aniaroramsft Awaiting requested review from aniaroramsft aniaroramsft is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .net code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants