Skip to content

build: Bump the nuget-deps group with 11 updates#653

Open
dependabot[bot] wants to merge 1 commit into
dependabotchangesfrom
dependabot/nuget/App/backend-api/Microsoft.GS.DPS.Host/dependabotchanges/nuget-deps-b76c52de24
Open

build: Bump the nuget-deps group with 11 updates#653
dependabot[bot] wants to merge 1 commit into
dependabotchangesfrom
dependabot/nuget/App/backend-api/Microsoft.GS.DPS.Host/dependabotchanges/nuget-deps-b76c52de24

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Jun 3, 2026

Updated Azure.Search.Documents from 11.7.0 to 12.0.0.

Release notes

Sourced from Azure.Search.Documents's releases.

12.0.0

12.0.0 (2026-05-01)

Features Added

  • Added support for 2026-04-01 service version.
  • Added KnowledgeBaseRetrievalClient for agentic retrieval operations against knowledge bases.
  • Added knowledge base management types: KnowledgeBase, KnowledgeBaseModel, KnowledgeBaseAzureOpenAIModel, and KnowledgeSourceReference.
  • Added knowledge source types: AzureBlobKnowledgeSource, SearchIndexKnowledgeSource, IndexedOneLakeKnowledgeSource, and WebKnowledgeSource with associated parameters.
  • Added knowledge base retrieval models: KnowledgeBaseRetrievalRequest, KnowledgeBaseRetrievalResponse, KnowledgeBaseMessage, KnowledgeBaseMessageContent, and KnowledgeBaseReference with typed variants (KnowledgeBaseAzureBlobReference, KnowledgeBaseSearchIndexReference, KnowledgeBaseIndexedOneLakeReference, KnowledgeBaseWebReference).
  • Added knowledge base activity tracking: KnowledgeBaseActivityRecord, KnowledgeBaseAgenticReasoningActivityRecord, and KnowledgeBaseModelWebSummarizationActivityRecord.
  • Added KnowledgeBaseActivityRecordType.ModelWebSummarization value for LLM web summarization activity records.
  • Added knowledge source ingestion and status models: KnowledgeSourceIngestionParameters, KnowledgeSourceStatus, KnowledgeSourceStatistics, and SynchronizationState.
  • Added AI skill types: ChatCompletionSkill, ContentUnderstandingSkill, and DocumentIntelligenceLayoutSkill with associated configuration models.
  • Added AzureMachineLearningVectorizer and AzureMachineLearningParameters for AML-based vectorization.
  • Added SearchAlias for index alias management.
  • Added SearchIndexResponse model returned by index operations.
  • Added NativeBlobSoftDeleteDeletionDetectionPolicy for native blob soft delete detection.
  • Added VectorizableImageBinaryQuery and VectorizableImageUrlQuery for image-based vector search.
  • Added DebugInfo property to SearchResults<T> and SearchResultsPage<T> for enhanced search debugging.
  • Added VectorFilterMode.StrictPostFilter option for strict post-filtering in vector search.
  • Added SearchServiceCounters.AliasCounter for alias resource tracking.
  • Added SearchServiceLimits.MaxCumulativeIndexerRuntimeSeconds for runtime constraints.
  • Added IndexerChangeTrackingState for indexer change tracking status.
  • Added LookupDocument model for document lookup responses.
  • Added nullable implicit conversion operators for SemanticErrorMode, SemanticErrorReason, SemanticSearchResultsType, and VectorFilterMode.
  • Added AIServicesAccountIdentity and AIServicesAccountKey for AI services authentication.
  • Added SearchClientSettings to support creating a SearchClient from IConfiguration, including configuration-based credential resolution and dependency injection registration.
  • Added SearchIndexClientSettings to support creating a SearchIndexClient from IConfiguration, including configuration-based credential resolution and dependency injection registration.
  • Added SearchIndexerClientSettings to support creating a SearchIndexerClient from IConfiguration, including configuration-based credential resolution and dependency injection registration.
  • Added KnowledgeBaseRetrievalClientSettings to support creating a KnowledgeBaseRetrievalClient from IConfiguration, including configuration-based credential resolution and dependency injection registration.

Breaking Changes

  • Deprecated EntityRecognitionSkill.SkillVersion.V1 is now obsolete. Use V3 instead.
  • Deprecated EntityRecognitionSkill.IncludeTypelessEntities is now obsolete. Use V3 instead.
  • Deprecated SentimentSkill.SkillVersion.V1 is now obsolete. Use V3 instead.

12.0.0-preview.62

12.0.0-preview.62 (2026-05-12)

Features Added

  • This release contains bug fixes to improve quality.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration from 10.0.7 to 10.0.8.

Release notes

Sourced from Microsoft.Extensions.Configuration's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.Json from 10.0.7 to 10.0.8.

Release notes

Sourced from Microsoft.Extensions.Configuration.Json's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Options from 10.0.7 to 10.0.8.

Release notes

Sourced from Microsoft.Extensions.Options's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Maui.Graphics from 10.0.60 to 10.0.70.

Release notes

Sourced from Microsoft.Maui.Graphics's releases.

10.0.70

What's Changed

.NET MAUI 10.0.70 introduces significant improvements across all platforms with focus on quality, performance, and developer experience. This release includes 135 commits with various improvements, bug fixes, and enhancements.

Ai Agents

API

Blazor

Button

CollectionView

... (truncated)

Commits viewable in compare view.

Updated Microsoft.Maui.Graphics.Skia from 10.0.60 to 10.0.70.

Release notes

Sourced from Microsoft.Maui.Graphics.Skia's releases.

10.0.70

What's Changed

.NET MAUI 10.0.70 introduces significant improvements across all platforms with focus on quality, performance, and developer experience. This release includes 135 commits with various improvements, bug fixes, and enhancements.

Ai Agents

API

Blazor

Button

CollectionView

... (truncated)

Commits viewable in compare view.

Updated Microsoft.SemanticKernel from 1.75.0 to 1.77.0.

Release notes

Sourced from Microsoft.SemanticKernel's releases.

1.77.0

Changes:

  • 32e904c017c33eb35f7abb5a9e6e61e2e7aea81c .Net: Bump .NET package version to 1.77.0 (#​14040)
  • 3e180c16b3004f8b10720ea5f82c3ad136e59153 .Net: Enable default-on server URL validation for OpenAPI plugins (#​14029)
  • fdc6e68f5892c3f76519d22a770d7e0a12a261f6 .Net: Semantic Kernel -> Agent Framework - Migration/Samples Update (AF 1.0 Compatible) (#​13852)
  • 590003243af26f83cefa8a3768688065a8b5484e .Net: Pin SharpCompress 0.48.0 to fix GHSA-6c8g-7p36-r338 (#​13977)

This list of changes was auto generated.

1.76.0

Changes:

  • f2b3c931d1bc43b5630eb16aea24a4fe93d56699 .Net: Version bump 1.76.0 (#​13972)
  • 3dd139b2bd4000dd8efc19edd6d3127e17916550 .Net: Harden CloudDrivePlugin defaults and add path validation (#​13958)
  • 446c2eff94bcf4539e1528db692352bbbb3628a5 .Net: Improve input validation in OpenAPI plugin (#​13962)
  • b7ae840d65c244b8f72e55ef1a5be8bdb4f31ac7 .Net: feat(connectors): Support ImageContent in tool/function results (#​13431) [ #​13430, #​13419 ]
  • 52d4e5ce857bcdc770eb9ea415e2092aae3fa258 .Net: Harden gRPC plugin address handling (#​13961)
  • 73d3c59902914f79d3068a54aaa851d275c91de8 Update Kiota packages to fix NU1903 vulnerability (#​13966)
  • fb10d92d8c9c21d1a0122f53781bd1bee5acd25f .Net: Bump Snappier to 1.3.1 to fix NU1903 high-severity vulnerability (GHSA-pggp-6c3x-2xmx) (#​13960) [ #​13431 ]
  • 1a5065e5cf25536ffe94ff1fba7713f300c7c9b7 .Net: Fix DocumentPlugin path validation order (#​13956)
  • 2a719ca3182f547203f54257f69c47a175fbb3fd .Net: Add deny-by-default AllowedUploadDirectories to CloudDrivePlugin (#​13953)
  • 006a5d9a9b3eb4ed41f63beb6341bc44e724d9db .Net: fix: fall back to ToString() when logging function results with unregistered types (#​13884) [ #​13681 ]
See More * 6e1ab9dee5e73131099a85314464287088bbd651 .Net: Fix VertexAI global endpoint URI construction (#​13620) (#​13621) * a1a701d051d425897518c3f70dc3d835cd949c7b .Net: Fix whitespace formatting in PromptExecutionSettingsExtensions.cs (#​13941) * 1369c2e0ce6b9e5e86877b62c14b7311440aed2c .Net: Add ExtraBody to OpenAIPromptExecutionSettings (#​12307) (#​13934) [ #​11852 ] * a68600a73a8153c436bffe5a96c4508cf0c09238 .Net: Update Step04_AzureAIAgent_CodeInterpreter.cs (#​13886)

Commits viewable in compare view.

Updated MongoDB.Bson from 3.8.0 to 3.9.0.

Release notes

Sourced from MongoDB.Bson's releases.

3.9.0

This is the general availability release for the 3.9.0 version of the driver.

[!IMPORTANT]
Next minor release will raise the minimum supported MongoDB Server version from 4.2 to 4.4. This is in accordance with MongoDB Software Lifecycle Schedules. Support for MongoDB Server 4.2 will be dropped in a future release!

The main new features in 3.9.0 include:

  • CSHARP-5567: Add a LINQ equivalent for $toHashedIndexKey
  • CSHARP-4901: Add support for SearchMeta facet without operator
  • CSHARP-5930: Allow registering the same encryption provider multiple times
  • CSHARP-5899: Add support for "flat" indexing method in vector search index builders
  • CSHARP-5931: Add builder support for $scoreFusion stage

Improvements:

  • CSHARP-3556: Use EndPointServerSelector in SingleServerBinding instead of busy wait
  • CSHARP-5611: Support ReadOnlySpan in ObjectId and eliminate the temporary byte array allocations

Fixes:

  • CSHARP-5967: Ensure SerializerFinder proper support of Parse method
  • CSHARP-5966: Add support of string.TrimStart and TrimEnd methods to SerializerFinder
  • CSHARP-5942: Fix serializer resolution for dictionary paths with numeric string keys
  • CSHARP-2868: Allow maxIdleTimeMS=0 and treat it as no idle time limit
  • CSHARP-5762: Avoid changing "filter" to "parentFilter" in previously supported case
  • CSHARP-5629: Respect BsonElement attribute in NamedIdMemberConvention
  • CSHARP-6029: Execute endSessions on ServerSessionPool close
  • CSHARP-6043: NullReferenceException in IEnumerableSerializerBase.Serialize when projecting nullable array with conditional Select
  • CSHARP-6040: Fix StackOverflowException in convention CouldApply on self-referencing IEnumerable<T> types

Maintenance:

  • CSHARP-6055: Update SharpCompress to remedy vulnerability
  • CSHARP-6023: Update libmongocrypt URLs for 1.18.0+
  • CSHARP-5943: Initial small AGENTS.md file for the C# driver
  • CSHARP-5671: Replace Artifactory with ECR for container image pulls

The full list of issues resolved in this release is available at CSHARP JIRA project.

Documentation on the .NET driver can be found here.

3.8.1

This is a patch release that addresses a security issue:

Known warning when restoring: SharpCompress NU1902

When restoring a project that references this driver with the .NET 8 SDK or newer, NuGet may emit the NU1902 audit warning for the transitive SharpCompress 0.30.1 dependency (GHSA-6c8g-7p36-r338 — directory traversal via IArchive.WriteToDirectory()). The driver does not use that API; SharpCompress is only used for in-memory ZLib stream compression of MongoDB wire-protocol messages, so the driver's usage does not expose consumers to this advisory. This issue will be addressed in an upcoming release (CSHARP-6037).

Documentation on the .NET driver can be found here.

Commits viewable in compare view.

Updated MongoDB.Driver from 3.8.0 to 3.9.0.

Release notes

Sourced from MongoDB.Driver's releases.

3.9.0

This is the general availability release for the 3.9.0 version of the driver.

[!IMPORTANT]
Next minor release will raise the minimum supported MongoDB Server version from 4.2 to 4.4. This is in accordance with MongoDB Software Lifecycle Schedules. Support for MongoDB Server 4.2 will be dropped in a future release!

The main new features in 3.9.0 include:

  • CSHARP-5567: Add a LINQ equivalent for $toHashedIndexKey
  • CSHARP-4901: Add support for SearchMeta facet without operator
  • CSHARP-5930: Allow registering the same encryption provider multiple times
  • CSHARP-5899: Add support for "flat" indexing method in vector search index builders
  • CSHARP-5931: Add builder support for $scoreFusion stage

Improvements:

  • CSHARP-3556: Use EndPointServerSelector in SingleServerBinding instead of busy wait
  • CSHARP-5611: Support ReadOnlySpan in ObjectId and eliminate the temporary byte array allocations

Fixes:

  • CSHARP-5967: Ensure SerializerFinder proper support of Parse method
  • CSHARP-5966: Add support of string.TrimStart and TrimEnd methods to SerializerFinder
  • CSHARP-5942: Fix serializer resolution for dictionary paths with numeric string keys
  • CSHARP-2868: Allow maxIdleTimeMS=0 and treat it as no idle time limit
  • CSHARP-5762: Avoid changing "filter" to "parentFilter" in previously supported case
  • CSHARP-5629: Respect BsonElement attribute in NamedIdMemberConvention
  • CSHARP-6029: Execute endSessions on ServerSessionPool close
  • CSHARP-6043: NullReferenceException in IEnumerableSerializerBase.Serialize when projecting nullable array with conditional Select
  • CSHARP-6040: Fix StackOverflowException in convention CouldApply on self-referencing IEnumerable<T> types

Maintenance:

  • CSHARP-6055: Update SharpCompress to remedy vulnerability
  • CSHARP-6023: Update libmongocrypt URLs for 1.18.0+
  • CSHARP-5943: Initial small AGENTS.md file for the C# driver
  • CSHARP-5671: Replace Artifactory with ECR for container image pulls

The full list of issues resolved in this release is available at CSHARP JIRA project.

Documentation on the .NET driver can be found here.

3.8.1

This is a patch release that addresses a security issue:

Known warning when restoring: SharpCompress NU1902

When restoring a project that references this driver with the .NET 8 SDK or newer, NuGet may emit the NU1902 audit warning for the transitive SharpCompress 0.30.1 dependency (GHSA-6c8g-7p36-r338 — directory traversal via IArchive.WriteToDirectory()). The driver does not use that API; SharpCompress is only used for in-memory ZLib stream compression of MongoDB wire-protocol messages, so the driver's usage does not expose consumers to this advisory. This issue will be addressed in an upcoming release (CSHARP-6037).

Documentation on the .NET driver can be found here.

Commits viewable in compare view.

Updated SkiaSharp.NativeAssets.Linux from 3.119.2 to 3.119.4.

Updated Swashbuckle.AspNetCore from 10.1.7 to 10.2.1.

Release notes

Sourced from Swashbuckle.AspNetCore's releases.

10.2.1

What's Changed

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.2.0...v10.2.1

10.2.0

What's Changed

New Contributors

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.7...v10.2.0

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build: Bump the nuget-deps group with 11 updates
0c5b819 
Bumps Azure.Search.Documents from 11.7.0 to 12.0.0
Bumps Microsoft.Extensions.Configuration from 10.0.7 to 10.0.8
Bumps Microsoft.Extensions.Configuration.Json from 10.0.7 to 10.0.8
Bumps Microsoft.Extensions.Options from 10.0.7 to 10.0.8
Bumps Microsoft.Maui.Graphics from 10.0.60 to 10.0.70
Bumps Microsoft.Maui.Graphics.Skia from 10.0.60 to 10.0.70
Bumps Microsoft.SemanticKernel from 1.75.0 to 1.77.0
Bumps MongoDB.Bson from 3.8.0 to 3.9.0
Bumps MongoDB.Driver from 3.8.0 to 3.9.0
Bumps SkiaSharp.NativeAssets.Linux from 3.119.2 to 3.119.4
Bumps Swashbuckle.AspNetCore from 10.1.7 to 10.2.1

---
updated-dependencies:
- dependency-name: Azure.Search.Documents
  dependency-version: 12.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-deps
- dependency-name: Microsoft.Extensions.Configuration
  dependency-version: 10.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-deps
- dependency-name: Microsoft.Extensions.Configuration.Json
  dependency-version: 10.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-deps
- dependency-name: Microsoft.Extensions.Options
  dependency-version: 10.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-deps
- dependency-name: Microsoft.Maui.Graphics
  dependency-version: 10.0.70
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-deps
- dependency-name: Microsoft.Maui.Graphics.Skia
  dependency-version: 10.0.70
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-deps
- dependency-name: Microsoft.SemanticKernel
  dependency-version: 1.77.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-deps
- dependency-name: MongoDB.Bson
  dependency-version: 3.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-deps
- dependency-name: MongoDB.Driver
  dependency-version: 3.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-deps
- dependency-name: SkiaSharp.NativeAssets.Linux
  dependency-version: 3.119.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-deps
- dependency-name: Swashbuckle.AspNetCore
  dependency-version: 10.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added .NET Pull requests that update .net code dependencies Pull requests that update a dependency file labels Jun 3, 2026
@dependabot dependabot Bot added the .NET Pull requests that update .net code label Jun 3, 2026
@dependabot dependabot Bot mentioned this pull request Jun 3, 2026
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@Avijit-Microsoft Avijit-Microsoft Awaiting requested review from Avijit-Microsoft Avijit-Microsoft is a code owner

@Roopan-Microsoft Roopan-Microsoft Awaiting requested review from Roopan-Microsoft Roopan-Microsoft is a code owner

@Dongbumlee Dongbumlee Awaiting requested review from Dongbumlee Dongbumlee is a code owner

@aniaroramsft aniaroramsft Awaiting requested review from aniaroramsft aniaroramsft is a code owner

@toherman-msft toherman-msft Awaiting requested review from toherman-msft toherman-msft is a code owner

@nchandhi nchandhi Awaiting requested review from nchandhi nchandhi is a code owner

@dgp10801 dgp10801 Awaiting requested review from dgp10801 dgp10801 is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .net code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants