Bump the production-dependencies group with 24 updates

[dependabot]

Updated Asp.Versioning.Http from 10.2.1 to 10.2.2.

Release notes

Sourced from Asp.Versioning.Http's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated AWSSDK.S3 from 4.0.102 to 4.0.102.1.

Release notes

Sourced from AWSSDK.S3's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated AWSSDK.SimpleEmailV2 from 4.0.102.1 to 4.0.102.2.

Release notes

Sourced from AWSSDK.SimpleEmailV2's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated libphonenumber-csharp from 9.0.36 to 9.0.37.

Release notes

Sourced from libphonenumber-csharp's releases.

9.0.37

libphonenumber-csharp 9.0.37 · libphonenumber-csharp.extensions 9.0.37 · upstream v9.0.37

What's Changed

• fix: pin the release tag to the commit just pushed by @​twcclegg in fix: pin the release tag to the commit just pushed twcclegg/libphonenumber-csharp#369
• Modernization: stack-overflow fix, frozen collections, drop net9.0, centralized build config by @​twcclegg in Modernization: stack-overflow fix, frozen collections, drop net9.0, centralized build config twcclegg/libphonenumber-csharp#370
• build(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 by @​dependabot[bot] in build(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 twcclegg/libphonenumber-csharp#371
• Add offline geocoder benchmarks, and fix the crash they exposed by @​twcclegg in Add offline geocoder benchmarks, and fix the crash they exposed twcclegg/libphonenumber-csharp#372
• Cache NuGet packages, enable lock files and package validation by @​twcclegg in Cache NuGet packages, enable lock files and package validation twcclegg/libphonenumber-csharp#373
• Read the flyweight map buffer from an array instead of a stream by @​twcclegg in Read the flyweight map buffer from an array instead of a stream twcclegg/libphonenumber-csharp#376
• Raise analysis on the library, and fix what it found by @​twcclegg in Raise analysis on the library, and fix what it found twcclegg/libphonenumber-csharp#374
• Filter the benchmark job, drop netframework4.8, pin nuget sources by @​twcclegg in Filter the benchmark job, drop netframework4.8, pin nuget sources twcclegg/libphonenumber-csharp#377
• Check the public surface survives hostile input by @​twcclegg in Check the public surface survives hostile input twcclegg/libphonenumber-csharp#379
• Measure the parse, validate and format phases separately by @​twcclegg in Measure the parse, validate and format phases separately twcclegg/libphonenumber-csharp#378
• Benchmark the input shapes callers actually supply by @​twcclegg in Benchmark the input shapes callers actually supply twcclegg/libphonenumber-csharp#381
• Match slices without materialising them when parsing by @​twcclegg in Match slices without materialising them when parsing twcclegg/libphonenumber-csharp#382
• Capture every extension alternative into one named group by @​twcclegg in Capture every extension alternative into one named group twcclegg/libphonenumber-csharp#383
• Skip the match groups when stripping a national prefix by @​twcclegg in Skip the match groups when stripping a national prefix twcclegg/libphonenumber-csharp#384
• Strip the national prefix without materialising a match by @​twcclegg in Strip the national prefix without materialising a match twcclegg/libphonenumber-csharp#385
• Don't render the country calling code test to strings by @​twcclegg in Don't render the country calling code test to strings twcclegg/libphonenumber-csharp#386
• fix: ship symbols in a .snupkg instead of embedding them in the assembly by @​twcclegg in fix: ship symbols in a .snupkg instead of embedding them in the assembly twcclegg/libphonenumber-csharp#390

Full Changelog: twcclegg/libphonenumber-csharp@v9.0.36...v9.0.37

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Authentication.JwtBearer from 10.0.10 to 10.0.11.

Release notes

Sourced from Microsoft.AspNetCore.Authentication.JwtBearer's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Mvc.Testing from 10.0.10 to 10.0.11.

Release notes

Sourced from Microsoft.AspNetCore.Mvc.Testing's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.OpenApi from 10.0.10 to 10.0.11.

Release notes

Sourced from Microsoft.AspNetCore.OpenApi's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore from 10.0.10 to 10.0.11.

Release notes

Sourced from Microsoft.EntityFrameworkCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Design from 10.0.10 to 10.0.11.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Design's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Tools from 10.0.10 to 10.0.11.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Tools's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Caching.Hybrid from 10.8.0 to 10.9.0.

Release notes

Sourced from Microsoft.Extensions.Caching.Hybrid's releases.

10.9.0

Version 10.9.0 is headlined by changes in these areas:

• AI: New experimental routing APIs center on the abstract RoutingChatClient base class, with SemanticRoutingChatClient as a concrete semantic-routing implementation. Separately, the abstract FailoverChatClient specialization and its concrete OrderedFailoverChatClient implementation add failover routing.
• AI Evaluation: The generated report gains redesigned Overview, Cases, History, and Comparison views.
• ASP.NET Core and HTTP diagnostics: The release adds HTTP request latency log enrichment and fixes configuration binding, response-body logging, request-path redaction, and resilience package version handling.
• Source-generated logging and service discovery: Fixes cover classification type qualification, thread-local state cleanup, and DNS query suffix handling.

Experimental API Changes

New Experimental APIs

• New experimental API: HTTP request latency log enrichment (EXTEXP0013) #​7602
• New experimental API: Chat client routing and failover (MEAI001) #​7662

What's Changed

AI (Microsoft.Extensions.AI, Microsoft.Extensions.AI.Abstractions, and Microsoft.Extensions.AI.OpenAI)

• Add extensible chat client routing #​7662 by @​joshuajyue (co-authored by @​Copilot)
• Pass the request's options to the selected client #​7685 by @​joshuajyue (co-authored by @​jozkee @​Copilot)
• AI.Abstractions: fix ExcludeFromSchema dropped under concurrent AIFunction creation #​7677 by @​jozkee (co-authored by @​Copilot)
• Cap OpenAI dependency version (b10f9c0) by @​jeffhandley (co-authored by @​Copilot)

Note: Microsoft.Extensions.AI.OpenAI constrains its dependency for OpenAI to 2.12.x, preventing OpenAI updates to 2.13.0+ due to an incompatibility. We expect to release Microsoft.Extensions.AI.OpenAI version 10.9.1 during the week of August 17 to address this issue.

HTTP Resilience and Diagnostics (Microsoft.Extensions.Http.Resilience and Microsoft.Extensions.Http.Diagnostics)

• Fix Grpc.Net.ClientFactory version range check - Fixes #​7565 #​7566 by @​Ghost93
• Fix response body logging under debugger #​7678 by @​Rimobul
• Redact outgoing path when route is unknown #​7687 by @​Rimobul
• Fix HTTP client logging config binding #​7691 by @​Rimobul

ASP.NET Core Extensions (Microsoft.AspNetCore.Diagnostics.Middleware)

• Rename HttpLatencyTelemetry extensions class and drop redundant TFM guard #​7645 by @​EasyL0ver (co-authored by @​Copilot)
• Add HTTP request latency log enricher (experimental) #​7602 by @​EasyL0ver (co-authored by @​Copilot)

Logging Source Generator (Microsoft.Gen.Logging)

• [Microsoft.Gen.Logging] Clear thread-local state when logging throws #​7682 by @​Rimobul
• [Microsoft.Gen.Logging] Fully qualify classification types #​7689 by @​Rimobul

AI Evaluation (Microsoft.Extensions.AI.Evaluation.Reporting)

• [Microsoft.Extensions.AI.Evaluation.Reporting] Evaluation report redesign #​7609 by @​grafanaKibana

Project Templates (Microsoft.McpServer.ProjectTemplates)

• Remove MCP server project template #​7680 by @​jeffhandley (co-authored by @​Copilot)

... (truncated)

10.8.4

This servicing update refreshes the .NET AI project templates ahead of the July 30, 2026 retirement of GitHub Models — removing the GitHub Models provider option and updating template dependencies.

As a result, both the AI Chat Web (aichatweb) and AI Agent Web API (aiagent-webapi) templates now require the AI service provider to be chosen explicitly via --provider; there is no longer a default. One of the following must be selected:

• --provider azureopenai — Azure OpenAI
• --provider ollama — Ollama (for local development)
• --provider openai — OpenAI Platform

Packages in this release

Package	Version
Microsoft.Extensions.AI.Templates	10.8.4-preview.3.26379.3
Microsoft.Agents.AI.ProjectTemplates	1.13.0-preview.1.26379.3

What's Changed

Project templates

• Removed the GitHub Models provider from the AI Chat Web and AI Agent Web API templates, ahead of GitHub Models being fully retired on July 30, 2026. The --provider option is now required with no default (#​7667).
• Updated AI template dependencies — bumped Aspire.Hosting.AppHost to 13.4.6 and CommunityToolkit.VectorData.SqliteVec to 1.0.0-preview.4 (aligned System.Linq.AsyncEnumerable to 10.0.9), replacing earlier workaround package pins (#​7639).

Full Changelog

• dotnet/extensions@v10.8.3...v10.8.4

10.8.3

Packages in this release

Package	Version
Microsoft.Extensions.AI	10.8.3
Microsoft.Extensions.AI.Abstractions	10.8.3
Microsoft.Extensions.AI.OpenAI	10.8.3

Experimental API Changes

Experimental API behavior updates

• Updated serialization behavior for experimental ToolApprovalRequestContent.RequiresConfirmation so it no longer leaks into consumer source-generated AIContent JSON metadata unless approval APIs are intentionally used (#​7659).

What's Changed

AI abstractions and serialization

• Fixed MEAI001 leakage from RequiresConfirmation in source-generated AIContent contexts by using an internal JSON-included backing member while keeping the public experimental member ignored for source-generation metadata (#​7659).

Test Improvements

• Added stabilization regression coverage to verify consumer source-generated List<AIContent> contexts compile and round-trip without requiring MEAI001 suppression (#​7659).

Full Changelog

• dotnet/extensions@v10.8.2...v10.8.3

10.8.2

This servicing release updates Microsoft.Extensions.VectorData.ConformanceTests to 10.8.2 and includes targeted test framework migration fixes.

Packages in this release

Package	Version	Note
Microsoft.Extensions.VectorData.Abstractions	10.8.2	Published August 7, 2026
Microsoft.Extensions.VectorData.ConformanceTests	10.8.2

Update: August 7, 2026
The Microsoft.Extensions.VectorData.Abstractions package was initially excluded from this release by mistake. Because Microsoft.Extensions.VectorData.ConformanceTests has a dependency on Microsoft.Extensions.VectorData.Abstractions, that led to failures when updating to Microsoft.Extensions.VectorData.ConformanceTests 10.8.2.

Microsoft.Extensions.VectorData.Abstractions was published August 7, 2026 to resolve that issue.

What's Changed

AI

• Move Microsoft.Extensions.VectorData.ConformanceTests to xUnit 3 #​7636 by @​adamsitnik (co-authored by @​Copilot)

Acknowledgements

• @​roji reviewed pull requests

Full Changelog: dotnet/extensions@v10.8.1...v10.8.2

10.8.1

This servicing release updates the Microsoft.Extensions.AI, Microsoft.Extensions.AI.Abstractions, and Microsoft.Extensions.AI.OpenAI packages to 10.8.1 with two targeted fixes: correct tool-call/tool-result ordering when resuming approval-gated functions with service-managed chat history, and preservation of the OpenAI Responses reasoning item id for stateless (store=false) encrypted reasoning.

Packages in this release

Package	Version
Microsoft.Extensions.AI	10.8.1
Microsoft.Extensions.AI.Abstractions	10.8.1
Microsoft.Extensions.AI.OpenAI	10.8.1

What's Changed

AI

• Fix FICC tool_calls/tool ordering with approvals and service-managed chat history #​7617 by @​westey-m
• Roundtrip OpenAI Responses reasoning item id for stateless (store=false) encrypted reasoning #​7629 by @​rogerbarreto (co-authored by @​tarekgh)

Acknowledgements

• @​jozkee reviewed pull requests

Full Changelog: dotnet/extensions@v10.8.0...v10.8.1

Commits viewable in compare view.

Updated Microsoft.Extensions.Caching.StackExchangeRedis from 10.0.10 to 10.0.11.

Release notes

Sourced from Microsoft.Extensions.Caching.StackExchangeRedis's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration from 10.0.10 to 10.0.11.

Release notes

Sourced from Microsoft.Extensions.Configuration's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.Abstractions from 10.0.10 to 10.0.11.

Release notes

Sourced from Microsoft.Extensions.Configuration.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.DependencyInjection from 10.0.10 to 10.0.11.

Release notes

Sourced from Microsoft.Extensions.DependencyInjection's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Diagnostics.HealthChecks from 10.0.10 to 10.0.11.

Release notes

Sourced from Microsoft.Extensions.Diagnostics.HealthChecks's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Http.Resilience from 10.8.0 to 10.9.0.

Release notes

Sourced from Microsoft.Extensions.Http.Resilience's releases.

10.9.0

Version 10.9.0 is headlined by changes in these areas:

• AI: New experimental routing APIs center on the abstract RoutingChatClient base class, with SemanticRoutingChatClient as a concrete semantic-routing implementation. Separately, the abstract FailoverChatClient specialization and its concrete OrderedFailoverChatClient implementation add failover routing.
• AI Evaluation: The generated report gains redesigned Overview, Cases, History, and Comparison views.
• ASP.NET Core and HTTP diagnostics: The release adds HTTP request latency log enrichment and fixes configuration binding, response-body logging, request-path redaction, and resilience package version handling.
• Source-generated logging and service discovery: Fixes cover classification type qualification, thread-local state cleanup, and DNS query suffix handling.

Experimental API Changes

New Experimental APIs

• New experimental API: HTTP request latency log enrichment (EXTEXP0013) #​7602
• New experimental API: Chat client routing and failover (MEAI001) #​7662

What's Changed

AI (Microsoft.Extensions.AI, Microsoft.Extensions.AI.Abstractions, and Microsoft.Extensions.AI.OpenAI)

• Add extensible chat client routing #​7662 by @​joshuajyue (co-authored by @​Copilot)
• Pass the request's options to the selected client #​7685 by @​joshuajyue (co-authored by @​jozkee @​Copilot)
• AI.Abstractions: fix ExcludeFromSchema dropped under concurrent AIFunction creation #​7677 by @​jozkee (co-authored by @​Copilot)
• Cap OpenAI dependency version (b10f9c0) by @​jeffhandley (co-authored by @​Copilot)

Note: Microsoft.Extensions.AI.OpenAI constrains its dependency for OpenAI to 2.12.x, preventing OpenAI updates to 2.13.0+ due to an incompatibility. We expect to release Microsoft.Extensions.AI.OpenAI version 10.9.1 during the week of August 17 to address this issue.

HTTP Resilience and Diagnostics (Microsoft.Extensions.Http.Resilience and Microsoft.Extensions.Http.Diagnostics)

• Fix Grpc.Net.ClientFactory version range check - Fixes #​7565 #​7566 by @​Ghost93
• Fix response body logging under debugger #​7678 by @​Rimobul
• Redact outgoing path when route is unknown #​7687 by @​Rimobul
• Fix HTTP client logging config binding #​7691 by @​Rimobul

ASP.NET Core Extensions (Microsoft.AspNetCore.Diagnostics.Middleware)

• Rename HttpLatencyTelemetry extensions class and drop redundant TFM guard #​7645 by @​EasyL0ver (co-authored by @​Copilot)
• Add HTTP request latency log enricher (experimental) #​7602 by @​EasyL0ver (co-authored by @​Copilot)

Logging Source Generator (Microsoft.Gen.Logging)

• [Microsoft.Gen.Logging] Clear thread-local state when logging throws #​7682 by @​Rimobul
• [Microsoft.Gen.Logging] Fully qualify classification types #​7689 by @​Rimobul

AI Evaluation (Microsoft.Extensions.AI.Evaluation.Reporting)

• [Microsoft.Extensions.AI.Evaluation.Reporting] Evaluation report redesign #​7609 by @​grafanaKibana

Project Templates (Microsoft.McpServer.ProjectTemplates)

• Remove MCP server project template #​7680 by @​jeffhandley (co-authored by @​Copilot)

... (truncated)

10.8.4

This servicing update refreshes the .NET AI project templates ahead of the July 30, 2026 retirement of GitHub Models — removing the GitHub Models provider option and updating template dependencies.

As a result, both the AI Chat Web (aichatweb) and AI Agent Web API (aiagent-webapi) templates now require the AI service provider to be chosen explicitly via --provider; there is no longer a default. One of the following must be selected:

• --provider azureopenai — Azure OpenAI
• --provider ollama — Ollama (for local development)
• --provider openai — OpenAI Platform

Packages in this release

Package	Version
Microsoft.Extensions.AI.Templates	10.8.4-preview.3.26379.3
Microsoft.Agents.AI.ProjectTemplates	1.13.0-preview.1.26379.3

What's Changed

Project templates

• Removed the GitHub Models provider from the AI Chat Web and AI Agent Web API templates, ahead of GitHub Models being fully retired on July 30, 2026. The --provider option is now required with no default (#​7667).
• Updated AI template dependencies — bumped Aspire.Hosting.AppHost to 13.4.6 and CommunityToolkit.VectorData.SqliteVec to 1.0.0-preview.4 (aligned System.Linq.AsyncEnumerable to 10.0.9), replacing earlier workaround package pins (#​7639).

Full Changelog

• dotnet/extensions@v10.8.3...v10.8.4

10.8.3

Packages in this release

Package	Version
Microsoft.Extensions.AI	10.8.3
Microsoft.Extensions.AI.Abstractions	10.8.3
Microsoft.Extensions.AI.OpenAI	10.8.3

Experimental API Changes

Experimental API behavior updates

• Updated serialization behavior for experimental ToolApprovalRequestContent.RequiresConfirmation so it no longer leaks into consumer source-generated AIContent JSON metadata unless approval APIs are intentionally used (#​7659).

What's Changed

AI abstractions and serialization

• Fixed MEAI001 leakage from RequiresConfirmation in source-generated AIContent contexts by using an internal JSON-included backing member while keeping the public experimental member ignored for source-generation metadata (#​7659).

Test Improvements

• Added stabilization regression coverage to verify consumer source-generated List<AIContent> contexts compile and round-trip without requiring MEAI001 suppression (#​7659).

Full Changelog

• dotnet/extensions@v10.8.2...v10.8.3

10.8.2

This servicing release updates Microsoft.Extensions.VectorData.ConformanceTests to 10.8.2 and includes targeted test framework migration fixes.

Packages in this release

Package	Version	Note
Microsoft.Extensions.VectorData.Abstractions	10.8.2	Published August 7, 2026
Microsoft.Extensions.VectorData.ConformanceTests	10.8.2

Update: August 7, 2026
The Microsoft.Extensions.VectorData.Abstractions package was initially excluded from this release by mistake. Because Microsoft.Extensions.VectorData.ConformanceTests has a dependency on Microsoft.Extensions.VectorData.Abstractions, that led to failures when updating to Microsoft.Extensions.VectorData.ConformanceTests 10.8.2.

Microsoft.Extensions.VectorData.Abstractions was published August 7, 2026 to resolve that issue.

What's Changed

AI

• Move Microsoft.Extensions.VectorData.ConformanceTests to xUnit 3 #​7636 by @​adamsitnik (co-authored by @​Copilot)

Acknowledgements

• @​roji reviewed pull requests

Full Changelog: dotnet/extensions@v10.8.1...v10.8.2

10.8.1

This servicing release updates the Microsoft.Extensions.AI, Microsoft.Extensions.AI.Abstractions, and Microsoft.Extensions.AI.OpenAI packages to 10.8.1 with two targeted fixes: correct tool-call/tool-result ordering when resuming approval-gated functions with service-managed chat history, and preservation of the OpenAI Responses reasoning item id for stateless (store=false) encrypted reasoning.

Packages in this release

Package	Version
Microsoft.Extensions.AI	10.8.1
Microsoft.Extensions.AI.Abstractions	10.8.1
Microsoft.Extensions.AI.OpenAI	10.8.1

What's Changed

AI

• Fix FICC tool_calls/tool ordering with approvals and service-managed chat history #​7617 by @​westey-m
• Roundtrip OpenAI Responses reasoning item id for stateless (store=false) encrypted reasoning #​7629 by @​rogerbarreto (co-authored by @​tarekgh)

Acknowledgements

• @​jozkee reviewed pull requests

Full Changelog: dotnet/extensions@v10.8.0...v10.8.1

Commits viewable in compare view.

Updated Microsoft.Extensions.Logging.Abstractions from 10.0.10 to 10.0.11.

Release notes

Sourced from Microsoft.Extensions.Logging.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Options.ConfigurationExtensions from 10.0.10 to 10.0.11.

Release notes

Sourced from Microsoft.Extensions.Options.ConfigurationExtensions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.ServiceDiscovery from 10.8.0 to 10.9.0.

Release notes

Sourced from Microsoft.Extensions.ServiceDiscovery's releases.

10.9.0

Version 10.9.0 is headlined by changes in these areas:

• AI: New experimental routing APIs center on the abstract RoutingChatClient base class, with SemanticRoutingChatClient as a concrete semantic-routing implementation. Separately, the abstract FailoverChatClient specialization and its concrete OrderedFailoverChatClient implementation add failover routing.
• AI Evaluation: The generated report gains redesigned Overview, Cases, History, and Comparison views.
• ASP.NET Core and HTTP diagnostics: The release adds HTTP request latency log enrichment and fixes configuration binding, response-body logging, request-path redaction, and resilience package version handling.
• Source-generated logging and service discovery: Fixes cover classification type qualification, thread-local state cleanup, and DNS query suffix handling.

Experimental API Changes

New Experimental APIs

• New experimental API: HTTP request latency log enrichment (EXTEXP0013) #​7602
• New experimental API: Chat client routing and failover (MEAI001) #​7662

What's Changed

AI (Microsoft.Extensions.AI, Microsoft.Extensions.AI.Abstractions, and Microsoft.Extensions.AI.OpenAI)

• Add extensible chat client routing #​7662 by @​joshuajyue (co-authored by @​Copilot)
• Pass the request's options to the selected client #​7685 by @​joshuajyue (co-authored by @​jozkee @​Copilot)
• AI.Abstractions: fix ExcludeFromSchema dropped under concurrent AIFunction creation #​7677 by @​jozkee (co-authored by @​Copilot)
• Cap OpenAI dependency version (b10f9c0) by @​jeffhandley (co-authored by @​Copilot)

Note: Microsoft.Extensions.AI.OpenAI constrains its dependency for OpenAI to 2.12.x, preventing OpenAI updates to 2.13.0+ due to an incompatibility. We expect to release Microsoft.Extensions.AI.OpenAI version 10.9.1 during the week of August 17 to address this issue.

HTTP Resilience and Diagnostics (Microsoft.Extensions.Http.Resilience and Microsoft.Extensions.Http.Diagnostics)

• Fix Grpc.Net.ClientFactory version range check - Fixes #​7565 #​7566 by @​Ghost93
• Fix response body logging under debugger #​7678 by @​Rimobul
• Redact outgoing path when route is unknown #​7687 by @​Rimobul
• Fix HTTP client logging config binding #​7691 by @​Rimobul

ASP.NET Core Extensions (Microsoft.AspNetCore.Diagnostics.Middleware)

• Rename HttpLatencyTelemetry extensions class and drop redundant TFM guard #​7645 by @​EasyL0ver (co-authored by @​Copilot)
• Add HTTP request latency log enricher (experimental) #​7602 by @​EasyL0ver (co-authored by @​Copilot)

Logging Source Generator (Microsoft.Gen.Logging)

• [Microsoft.Gen.Logging] Clear thread-local state when logging throws #​7682 by @​Rimobul
• [Microsoft.Gen.Logging] Fully qualify classification types #​7689 by @​Rimobul

AI Evaluation (Microsoft.Extensions.AI.Evaluation.Reporting)

• [Microsoft.Extensions.AI.Evaluation.Reporting] Evaluation report redesign #​7609 by @​grafanaKibana

Project Templates (Microsoft.McpServer.ProjectTemplates)

• Remove MCP server project template #​7680 by @​jeffhandley (co-authored by @​Copilot)

... (truncated)

10.8.4

This servicing update refreshes the .NET AI project templates ahead of the July 30, 2026 retirement of GitHub Models — removing the GitHub Models provider option and updating template dependencies.

As a result, both the AI Chat Web (aichatweb) and AI Agent Web API (aiagent-webapi) templates now require the AI service provider to be chosen explicitly via --provider; there is no longer a default. One of the following must be selected:

• --provider azureopenai — Azure OpenAI
• --provider ollama — Ollama (for local development)
• --provider openai — OpenAI Platform

Packages in this release

Package	Version
Microsoft.Extensions.AI.Templates	10.8.4-preview.3.26379.3
Microsoft.Agents.AI.ProjectTemplates	1.13.0-preview.1.26379.3

What's Changed

Project templates

• Removed the GitHub Models provider from the AI Chat Web and AI Agent Web API templates, ahead of GitHub Models being fully retired on July 30, 2026. The --provider option is now required with no default (#​7667).
• Updated AI template dependencies — bumped Aspire.Hosting.AppHost to 13.4.6 and CommunityToolkit.VectorData.SqliteVec to 1.0.0-preview.4 (aligned System.Linq.AsyncEnumerable to 10.0.9), replacing earlier workaround package pins (#​7639).

Full Changelog

• dotnet/extensions@v10.8.3...v10.8.4

10.8.3

Packages in this release

Package	Version
Microsoft.Extensions.AI	10.8.3
Microsoft.Extensions.AI.Abstractions	10.8.3
Microsoft.Extensions.AI.OpenAI	10.8.3

Experimental API Changes

Experimental API behavior updates

• Updated serialization behavior for experimental ToolApprovalRequestContent.RequiresConfirmation so it no longer leaks into consumer source-generated AIContent JSON metadata unless approval APIs are intentionally used (#​7659).

What's Changed

AI abstractions and serialization

• Fixed MEAI001 leakage from RequiresConfirmation in source-generated AIContent contexts by using an internal JSON-included backing member while keeping the public experimental member ignored for source-generation metadata (#​7659).

Test Improvements

• Added stabilization regression coverage to verify consumer source-generated List<AIContent> contexts compile and round-trip without requiring MEAI001 suppression (#​7659).

Full Changelog

• dotnet/extensions@v10.8.2...v10.8.3

10.8.2

This servicing release updates Microsoft.Extensions.VectorData.ConformanceTests to 10.8.2 and includes targeted test framework migration fixes.

Packages in this release

Package	Version	Note
Microsoft.Extensions.VectorData.Abstractions	10.8.2	Published August 7, 2026
Microsoft.Extensions.VectorData.ConformanceTests	10.8.2

Update: August 7, 2026
The Microsoft.Extensions.VectorData.Abstractions package was initially excluded from this release by mistake. Because Microsoft.Extensions.VectorData.ConformanceTests has a dependency on Microsoft.Extensions.VectorData.Abstractions, that led to failures when updating to Microsoft.Extensions.VectorData.ConformanceTests 10.8.2.

Microsoft.Extensions.VectorData.Abstractions was published August 7, 2026 to resolve that issue.

What's Changed

AI

• Move Microsoft.Extensions.VectorData.ConformanceTests to xUnit 3 #​7636 by @​adamsitnik (co-authored by @​Copilot)

Acknowledgements

• @​roji reviewed pull requests

Full Changelog: dotnet/extensions@v10.8.1...v10.8.2

10.8.1

This servicing release updates the Microsoft.Extensions.AI, Microsoft.Extensions.AI.Abstractions, and Microsoft.Extensions.AI.OpenAI packages to 10.8.1 with two targeted fixes: correct tool-call/tool-result ordering when resuming approval-gated functions with service-managed chat history, and preservation of the OpenAI Responses reasoning item id for stateless (store=false) encrypted reasoning.

Packages in this release

Package	Version
Microsoft.Extensions.AI	10.8.1
Microsoft.Extensions.AI.Abstractions	10.8.1
Microsoft.Extensions.AI.OpenAI	10.8.1

What's Changed

AI

• Fix FICC tool_calls/tool ordering with approvals and service-managed chat history #​7617 by @​westey-m
• Roundtrip OpenAI Responses reasoning item id for stateless (store=false) encrypted reasoning #​7629 by @​rogerbarreto (co-authored by @​tarekgh)

Acknowledgements

• @​jozkee reviewed pull requests

Full Changelog: dotnet/extensions@v10.8.0...v10.8.1

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.8.1 to 18.9.0.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.9.0

What's Changed

• Fix tilde/exclamation characters corrupted in TerminalLogger test output by @​nohwnd in [fix] Fix tilde/exclamation characters corrupted in TerminalLogger test output microsoft/vstest#16046
• Make TranslationLayer Native AOT-compatible by @​drewnoakes in Make TranslationLayer Native AOT-compatible microsoft/vstest#16045
• Guard GenerateProgramFile target against UseWinUI/UseUwpTools evaluation order by @​nohwnd in [fix] fix: guard GenerateProgramFile target against UseWinUI/UseUwpTools evaluation order microsoft/vstest#16072
• Add RequestingAssembly to AssemblyResolveEventArgs for binary compat by @​nohwnd in [fix] fix: add RequestingAssembly to AssemblyResolveEventArgs for binary compat microsoft/vstest#16076
• Remove stale Microsoft.Extensions.FileSystemGlobbing binding redirect from testhost.x86 and datacollector by @​Evangelink in Remove stale Microsoft.Extensions.FileSystemGlobbing binding redirect from testhost.x86 and datacollector microsoft/vstest#16082
• Fix TRX attachment paths when LogFileName contains a subdirectory by @​nohwnd in [fix] Fix TRX attachment paths when LogFileName contains a subdirectory microsoft/vstest#15791
• Fix missing dumps for .NET Framework child processes in NetClientHangDumper by @​nohwnd in [fix] Fix missing dumps for .NET Framework child processes in NetClientHangDumper microsoft/vstest#16098
• Fix data collection channels to use negotiated protocol version instead of V1 by @​nohwnd in [fix] Fix data collection channels to use negotiated protocol version instead of V1 microsoft/vstest#16096
• Fix race condition in BlameCollector: skip hang dump when testhost hasn't launched yet by @​nohwnd in [fix] Fix race condition in BlameCollector: skip hang dump when testhost hasn't launched yet microsoft/vstest#16065
• Replace TestSDKAutoGeneratedCode with ExcludeFromCodeCoverage in auto-generated Program files by @​nohwnd in [fix] Replace TestSDKAutoGeneratedCode with ExcludeFromCodeCoverage in auto-generated Program files microsoft/vstest#16101
• Include testhost process path in crash error messages by @​nohwnd in [fix] Include testhost process path in crash error messages microsoft/vstest#16108
• Fix DataDriven test results being double-counted in TRX logger totals by @​nohwnd in [fix] Fix DataDriven test results being double-counted in TRX logger totals microsoft/vstest#15766
• Fix datacollector crash visibility: replace Assert with throwable exceptions by @​nohwnd in [fix] Fix datacollector crash visibility: replace Assert with throwable exceptions microsoft/vstest#16048
• Add TreatErrorMessagesAsWarnings parameter to TRX logger by @​nohwnd in [fix] Add TreatErrorMessagesAsWarnings parameter to TRX logger microsoft/vstest#16106
• Wait for testhost stderr to drain before reading its crash output by @​nohwnd in Wait for testhost stderr to drain before reading its crash output microsoft/vstest#16128
• Handle runtimeconfig.dev.json without additionalProbingPaths by @​tmat in Handle runtimeconfig.dev.json without additionalProbingPaths microsoft/vstest#16166
• Suggest Microsoft.NET.Test.Sdk when a managed test project brings no testhost by @​nohwnd in Suggest Microsoft.NET.Test.Sdk when a managed test project brings no testhost microsoft/vstest#16169
• Fix x86 testhost loading mismatched x64 hostfxr (0x800700C1) when run via vstest.console.exe directly (#​16151) by @​azat-msft in Fix x86 testhost loading mismatched x64 hostfxr (0x800700C1) when run via vstest.console.exe directly (#16151) microsoft/vstest#16156
• Preserve the real exception (type + stack trace) when a test run aborts in BaseRunTests by @​nohwnd in [fix] Preserve the real exception (type + stack trace) when a test run aborts in BaseRunTests microsoft/vstest#16167

New Contributors

• @​drewnoakes made their first contribution in Make TranslationLayer Native AOT-compatible microsoft/vstest#16045

Full Changelog: microsoft/vstest@v18.8.0...v18.9.0

Commits viewable in compare view.

Updated Microsoft.OpenApi from 2.7.5 to 2.12.0.

Release notes

Sourced from Microsoft.OpenApi's releases.

2.12.0

2.12.0 (2026-08-12)

Features

• adds deserialization of the example extension (095ae3b)
• serialize license identifier as extension for earlier versions (d5cdce8)
• serialize license identifier as extension for earlier versions (fde38d8)

Bug Fixes

• better nullability round-tripping (7a25659)
• bound YAML anchor/alias expansion to prevent OOM (billion laughs) (#​3000) (a361360)
• bound YAML anchor/alias expansion to prevent OOM (billion laughs) (#​3000) (4db9af0)
• library: serialize multiple schema types as anyOf/oneOf for OpenAPI 3.0 (6568896)
• marks deprecated properties from the specification as obsolete (26aba69)
• marks deprecated properties from the specification as obsolete (abc5301)
• schema: serialize compatibility examples from examples list (be57a7c)
• serialize examples as extension in v2/v3 (d27141b)

2.11.0

2.11.0 (2026-07-15)

Features

• adds support for anchor and id external resolution (557bd6a)
• adds support for anchor and id external resolution (4138e47)
• schema: resolve bare $dynamicRef via $dynamicAnchor index (#​2913) (baf8428)
• schema: resolve bare $dynamicRef via $dynamicAnchor index (#​2913) (a139f83)
• support relative URI resolution in $dynamicRef (#​2928) (#​2945) (6091f5a)
• support relative URI resolution in $dynamicRef (#​2928) (#​2945) (a8688dc)

Bug Fixes

• adds explicit error message for invalid json pointers (#​2955) (a304e56)
• differentiate unset value from null value in OpenApiSchema.Const (#​2936) (a8787af)
• differentiate unset value from null value in OpenApiSchema.Const (#​2936) (e08570f)
• handle nullability more accurately during serialization for 3.0/2.0 (#​2933) (bc11356)
• handle nullability more accurately during serialization for 3.0/2.0 (#​2933) (310b6e2)

2.10.0

2.10.0 (2026-07-03)

Features

• add JsonConverter for OpenApiSchema System.Text.Json serialization (#​2915) (465521b)
• library: support schema keywords on references (2749463), closes #​2903

Bug Fixes

• Don't silently skip null assignment to OpenApiDocument.Tags (#​2917) (6a45a82)
• handling of nullable enums for 3.0 (#​2920) (f4778e0)
• library: keep v3 schema references ref-only (8d811c3)
• preserve JSON Schema 2020-12 keyword siblings on $ref schemas for OAS 3.1+ (#​2896) (fb20d46)
• preserve JSON Schema 2020-12 keyword siblings on $ref schemas for OAS 3.1+ (#​2896) (c79a83e)
• use async method for crypto flush (677b519)

2.9.0

2.9.0 (2026-06-10)

Features

• add contains/minContains/maxContains members (fadb422)
• library: add missing json schema properties (db41a3c)

Bug Fixes

• library: always copy unevaluated properties (3951a31)
• library: avoid false circular refs for external schema re-exports (a058913)
• library: avoid false circular refs for external schema re-exports (1bace68)
• library: merge contains compat members into missing properties (7dc45e1)
• library: remove unshipped schema extension fallback (b301827)
• library: use version-specific schema keyword callbacks (f93d76a)
• library: use x-jsonschema schema extensions (ec04a7f)

2.8.0

2.8.0 (2026-06-01)

Features

• reader: remove ParseNode infrastructure (d7c6a9d)
• Significant performance improvements resulting ~40% reduced allocations when parsing JSON descriptions, ~25% for YAML.

2.7.6

2.7.6 (2026-05-28)

Bug Fixes

• reader: preserve nullable Null flag when type appears after nullable in V3.1/V3.2 deserializers (288e95a)

Commits viewable in compare view.

Updated NSubstitute from 6.1.0 to 6.2.0.

Release notes

Sourced from NSubstitute's releases.

6.2.0

NSubstitute v6.2.0

This release improves generic call matching (#​989, #​974, #​990). Thanks to @​zvirja and @​JMolenkamp for fixes this.
We've also switched to using trusted nuget publishing linked to GitHub Releases. (#​987, @​zvirja)

What's Changed

• Add trusted nuget publish by @​zvirja in Add trusted nuget publish nsubstitute/NSubstitute#987
• fix: Stop using return-type assignability for generic call matching by @​zvirja in fix: Stop using return-type assignability for generic call matching nsubstitute/NSubstitute#989
• Remove skip-duplicate option from NuGet push command by @​zvirja in Remove skip-duplicate option from NuGet push command nsubstitute/NSubstitute#988
• Add tag trigger for release pipeline by @​zvirja in Add tag trigger for release pipeline nsubstitute/NSubstitute#991
• Fix broken comparison of the generic methods by @​zvirja in Fix broken comparison of the generic methods nsubstitute/NSubstitute#990
• Support C# 13 params collections in argument matching by @​zvirja in Support C# 13 params collections in argument matching nsubstitute/NSubstitute#993
• Add tests for nullable Task by @​zvirja in Add tests for nullable Task nsubstitute/NSubstitute#994

Full Changelog: nsubstitute/NSubstitute@v6.1.0...v6.2.0

Commits viewable in compare view.

Updated SonarAnalyzer.CSharp from 10.31.0.145097 to 10.32.0.713.

Release notes

Sourced from SonarAnalyzer.CSharp's releases.

10.32.0.713

Release notes - .NET Analyzers - 10.32

Feature

NET-4132 Implement rule S9022: Redundant "Include" calls should be removed
NET-4215 Implement rule S9118: Default values should be compatible with their entity property type
NET-4240 Update RSPEC before 10.32 release

False Positive

NET-1322 Fix S2857 FP: Do not raise in constant string interpolation when string is in square brackets
NET-1468 Fix S6966 FP: should not raise when inside lock
NET-1598 Fix S1125 FP: dynamic and custom nullable structs with conversion to bool are compliant
NET-4233 Fix S8733 FP: AsSplitQuery/AsSingleQuery set in a different statement than the colliding Includes goes undetected
NET-4297 Fix S8717 FP: EFCore DBFirst Scaffold

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: dependencies, nuget. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[dependabot]

Superseded by #85.