Bump the microsoft group with 8 updates#433
Open
dependabot[bot] wants to merge 1 commit into
Open
Conversation
Bumps Microsoft.AspNetCore.Authentication.JwtBearer from 10.0.5 to 10.0.9 Bumps Microsoft.AspNetCore.Mvc.Testing from 10.0.7 to 10.0.9 Bumps Microsoft.AspNetCore.OpenApi from 10.0.2 to 10.0.9 Bumps Microsoft.Extensions.Http.Resilience from 10.4.0 to 10.7.0 Bumps Microsoft.Extensions.ServiceDiscovery from 10.4.0 to 10.7.0 Bumps Microsoft.Extensions.ServiceDiscovery.Yarp from 10.4.0 to 10.7.0 Bumps Microsoft.Identity.Web from 4.1.1 to 4.11.0 Bumps Microsoft.NET.Test.Sdk from 18.4.0 to 18.7.0 --- updated-dependencies: - dependency-name: Microsoft.AspNetCore.Authentication.JwtBearer dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: microsoft - dependency-name: Microsoft.AspNetCore.Mvc.Testing dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: microsoft - dependency-name: Microsoft.AspNetCore.OpenApi dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: microsoft - dependency-name: Microsoft.Extensions.Http.Resilience dependency-version: 10.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: microsoft - dependency-name: Microsoft.Extensions.ServiceDiscovery dependency-version: 10.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: microsoft - dependency-name: Microsoft.Extensions.ServiceDiscovery.Yarp dependency-version: 10.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: microsoft - dependency-name: Microsoft.Identity.Web dependency-version: 4.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: microsoft - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 18.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: microsoft ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
.NET
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Updated Microsoft.AspNetCore.Authentication.JwtBearer from 10.0.5 to 10.0.9.
Release notes
Sourced from Microsoft.AspNetCore.Authentication.JwtBearer's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated Microsoft.AspNetCore.Mvc.Testing from 10.0.7 to 10.0.9.
Release notes
Sourced from Microsoft.AspNetCore.Mvc.Testing's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated Microsoft.AspNetCore.OpenApi from 10.0.2 to 10.0.9.
Release notes
Sourced from Microsoft.AspNetCore.OpenApi's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated Microsoft.Extensions.Http.Resilience from 10.4.0 to 10.7.0.
Release notes
Sourced from Microsoft.Extensions.Http.Resilience's releases.
10.7.0
v10.7.0 graduates the Microsoft.Extensions.Diagnostics.ResourceMonitoring.Kubernetes package to stable. The package registers a Kubernetes-aware
ResourceQuotaProviderthat reads the pod's CPU and memory requests and limits and exposes them toMicrosoft.Extensions.Diagnostics.ResourceMonitoringas baseline and maximum quotas, which then feed the request and limit dimensions of the published resource utilization metrics. The companionResourceQuotaandResourceQuotaProvidertypes inMicrosoft.Extensions.Diagnostics.ResourceMonitoringgraduate to stable in the same change so that consumers can implement custom quota providers without taking an experimental dependency.On the AI side,
Microsoft.Extensions.AI.OpenAImoves to OpenAI 2.11.0 and fixes a deserialization bug inToolJson.AdditionalPropertiesso that JSON SchemaadditionalPropertiesvalues shaped as sub-schema objects (for example{"type":"string"}) are preserved instead of throwing during deserialization.HostedFileContent.SizeInBytesandHostedFileContent.CreatedAtgraduate to stable since both values are consistently available across hosted-file providers, whilePurposeandScoperemain experimental as provider-shaped vocabulary.FunctionInvokingChatClientdrops a backward-compat path that auto-markedToolApprovalResponseContententries withInformationalOnly: true; consumers that need to continue accepting sessions serialized before #7468 can use the sampleApprovalHistoryNormalizingChatClientmiddleware added in the test project.Experimental API Changes
Now Stable
Microsoft.Extensions.Diagnostics.ResourceMonitoring.Kubernetespackage is now stable #7253ResourceQuotaandResourceQuotaProviderAPIs are now stable (previouslyEXTEXP0008) #7253HostedFileContent.SizeInBytesandHostedFileContent.CreatedAtare now stable (previouslyMEAI001) #7513What's Changed
AI
Diagnostics, Health Checks, and Resource Monitoring
Repository Infrastructure Updates
Acknowledgements
Full Changelog: dotnet/extensions@v10.6.0...v10.7.0
10.6.0
Version 10.6.0 stabilizes the response continuation token and background-response APIs in Microsoft.Extensions.AI.Abstractions. Most other AI work for May shipped in 10.5.1; this monthly release rolls those changes up alongside dependency updates and a small Resource Monitoring cleanup.
Experimental API Changes
Now Stable
MEAI001) #7512What's Changed
AI
Repository Infrastructure Updates
Acknowledgements
Full Changelog: dotnet/extensions@v10.5.2...v10.6.0
10.5.2
This patch release ships a single fix to
Microsoft.Extensions.VectorData.Abstractions, correctingStorageNameresolution when external serialization is enabled.Microsoft.Extensions.VectorData.ConformanceTests,Microsoft.Extensions.AI.Abstractions,Microsoft.Extensions.AI, andMicrosoft.Extensions.AI.OpenAIare published alongside it for version coherency — they contain no code changes from 10.5.1.Packages in this release
What's Changed
Microsoft.Extensions.VectorData.Abstractions
StorageNamebehavior when external serialization is enabled, and disable a warning fornet462. (by @roji in #7475)Full Changelog: dotnet/extensions@v10.5.1...v10.5.2
10.5.1
Version 10.5.1 of the Microsoft.Extensions.AI packages stabilizes CodeInterpreter, WebSearch, and ImageGeneration tool content types. The release adds new experimental tool search and OpenAI request policy hooks. And the OpenTelemetry gen-ai semantic conventions are updated to align with v1.41.
The 'aiagent-webapi' project template in Microsoft.Agents.AI.ProjectTemplates is updated to align with v1.3.0 of Agent Framework, updating the OpenTelemetry dependencies within the template projects as well.
Packages in this release
Experimental API Changes
Now Stable
The following types previously emitted the
MEAI001experimental diagnostic and are now stable.CodeInterpreterToolCallContentCodeInterpreterToolResultContentWebSearchToolCallContentWebSearchToolResultContentImageGenerationToolCallContentImageGenerationToolResultContentHostedImageGenerationToolImageGenerationOptionsImageGenerationResponseFormat(theHostedenum value remains experimental)IImageGeneratorand the rest of the image generation infrastructure also remain experimentalNew Experimental APIs
The following new APIs emit the
MEAI001experimental diagnostic.HostedToolSearchToolwithDeferredToolsfor tool-search-driven deferred tool loading #7471OpenAIRequestPoliciesextension hook for appendingSystem.ClientModel.PipelinePolicyinstances to outgoing OpenAI requests #7495Breaking Changes to Experimental APIs
WebSearchToolResultContent.Resultswas renamed toOutputsas part of the stabilization in #7493, aligning withCodeInterpreterToolResultContent.Outputs. The originalResultsproperty was included in version 10.4.0 and 10.5.0; this is a binary breaking change and consumers need to update to consume the updated property.... (truncated)
10.5.0
HTTP Logging Middleware APIs in
Microsoft.AspNetCore.Diagnostics.Middlewareare now stable. This release also transfersMicrosoft.Extensions.VectorData.AbstractionsandMicrosoft.Extensions.VectorData.ConformanceTestsfrom the Semantic Kernel repository into dotnet/extensions, jumping from 10.1.0 to 10.5.0 for consistent versioning. The release also delivers fixes across the AI libraries, AI Evaluation, and Service Discovery.Breaking Changes
VectorStoreVectorAttributeconstructor parameter #7460Dimensionsparameter was renamed todimensions(lowercase). This is a source-breaking change only — binary compatibility is preserved.new VectorStoreVectorAttribute(Dimensions: 1536), update it tonew VectorStoreVectorAttribute(dimensions: 1536).Experimental API Changes
Now Stable
EXTEXP0013):AddHttpLogEnricher<T>,IHttpLogEnricher, andRequestHeadersLogEnricherOptions.HeadersDataClasses#7380What's Changed
AI
Vector Data
AI Evaluation
ASP.NET Core Extensions
Service Discovery
Documentation Updates
Test Improvements
... (truncated)
10.4.1
This release of the Microsoft.Extensions.AI packages adds new experimental APIs for Realtime client sessions and Text-to-Speech, along with OpenTelemetry and middleware improvements.
Packages in this release
Experimental API Changes
New Experimental APIs
Changes to Experimental APIs
NotSupportedException#7394What's Changed
AI
ITextToSpeechClientabstraction, middleware, and OpenAI implementation #7381 by @stephentoubVoiceActivityDetectionoptions to realtime session abstractions #7399 by @tarekghUriContentmediaTypeparameter optional with inference from URI file extension #7398 by @stephentoub (co-authored by @Copilot)gen_ai.client.operation.exceptionviaILogger LoggerMessageon OpenTelemetry instrumentation classes #7379 by @stephentoub (co-authored by @Copilot)invoke_workflowas an equivalent parent span toinvoke_agentinFunctionInvokingChatClient#7382 by @stephentoub (co-authored by @Copilot)HostedFileDownloadStreamexplicitly read-only #7394 by @stephentoub (co-authored by @Copilot)Documentation Updates
Test Improvements
Repository Infrastructure Updates
Acknowledgements
... (truncated)
Commits viewable in compare view.
Updated Microsoft.Extensions.ServiceDiscovery from 10.4.0 to 10.7.0.
Release notes
Sourced from Microsoft.Extensions.ServiceDiscovery's releases.
10.7.0
v10.7.0 graduates the Microsoft.Extensions.Diagnostics.ResourceMonitoring.Kubernetes package to stable. The package registers a Kubernetes-aware
ResourceQuotaProviderthat reads the pod's CPU and memory requests and limits and exposes them toMicrosoft.Extensions.Diagnostics.ResourceMonitoringas baseline and maximum quotas, which then feed the request and limit dimensions of the published resource utilization metrics. The companionResourceQuotaandResourceQuotaProvidertypes inMicrosoft.Extensions.Diagnostics.ResourceMonitoringgraduate to stable in the same change so that consumers can implement custom quota providers without taking an experimental dependency.On the AI side,
Microsoft.Extensions.AI.OpenAImoves to OpenAI 2.11.0 and fixes a deserialization bug inToolJson.AdditionalPropertiesso that JSON SchemaadditionalPropertiesvalues shaped as sub-schema objects (for example{"type":"string"}) are preserved instead of throwing during deserialization.HostedFileContent.SizeInBytesandHostedFileContent.CreatedAtgraduate to stable since both values are consistently available across hosted-file providers, whilePurposeandScoperemain experimental as provider-shaped vocabulary.FunctionInvokingChatClientdrops a backward-compat path that auto-markedToolApprovalResponseContententries withInformationalOnly: true; consumers that need to continue accepting sessions serialized before #7468 can use the sampleApprovalHistoryNormalizingChatClientmiddleware added in the test project.Experimental API Changes
Now Stable
Microsoft.Extensions.Diagnostics.ResourceMonitoring.Kubernetespackage is now stable #7253ResourceQuotaandResourceQuotaProviderAPIs are now stable (previouslyEXTEXP0008) #7253HostedFileContent.SizeInBytesandHostedFileContent.CreatedAtare now stable (previouslyMEAI001) #7513What's Changed
AI
Diagnostics, Health Checks, and Resource Monitoring
Repository Infrastructure Updates
Acknowledgements
Full Changelog: dotnet/extensions@v10.6.0...v10.7.0
10.6.0
Version 10.6.0 stabilizes the response continuation token and background-response APIs in Microsoft.Extensions.AI.Abstractions. Most other AI work for May shipped in 10.5.1; this monthly release rolls those changes up alongside dependency updates and a small Resource Monitoring cleanup.
Experimental API Changes
Now Stable
MEAI001) #7512What's Changed
AI
Repository Infrastructure Updates
Acknowledgements
Full Changelog: dotnet/extensions@v10.5.2...v10.6.0
10.5.2
This patch release ships a single fix to
Microsoft.Extensions.VectorData.Abstractions, correctingStorageNameresolution when external serialization is enabled.Microsoft.Extensions.VectorData.ConformanceTests,Microsoft.Extensions.AI.Abstractions,Microsoft.Extensions.AI, andMicrosoft.Extensions.AI.OpenAIare published alongside it for version coherency — they contain no code changes from 10.5.1.Packages in this release
What's Changed
Microsoft.Extensions.VectorData.Abstractions
StorageNamebehavior when external serialization is enabled, and disable a warning fornet462. (by @roji in #7475)Full Changelog: dotnet/extensions@v10.5.1...v10.5.2
10.5.1
Version 10.5.1 of the Microsoft.Extensions.AI packages stabilizes CodeInterpreter, WebSearch, and ImageGeneration tool content types. The release adds new experimental tool search and OpenAI request policy hooks. And the OpenTelemetry gen-ai semantic conventions are updated to align with v1.41.
The 'aiagent-webapi' project template in Microsoft.Agents.AI.ProjectTemplates is updated to align with v1.3.0 of Agent Framework, updating the OpenTelemetry dependencies within the template projects as well.
Packages in this release
Experimental API Changes
Now Stable
The following types previously emitted the
MEAI001experimental diagnostic and are now stable.CodeInterpreterToolCallContentCodeInterpreterToolResultContentWebSearchToolCallContentWebSearchToolResultContentImageGenerationToolCallContentImageGenerationToolResultContentHostedImageGenerationToolImageGenerationOptionsImageGenerationResponseFormat(theHostedenum value remains experimental)IImageGeneratorand the rest of the image generation infrastructure also remain experimentalNew Experimental APIs
The following new APIs emit the
MEAI001experimental diagnostic.HostedToolSearchToolwithDeferredToolsfor tool-search-driven deferred tool loading #7471OpenAIRequestPoliciesextension hook for appendingSystem.ClientModel.PipelinePolicyinstances to outgoing OpenAI requests #7495Breaking Changes to Experimental APIs
WebSearchToolResultContent.Resultswas renamed toOutputsas part of the stabilization in #7493, aligning withCodeInterpreterToolResultContent.Outputs. The originalResultsproperty was included in version 10.4.0 and 10.5.0; this is a binary breaking change and consumers need to update to consume the updated property.... (truncated)
10.5.0
HTTP Logging Middleware APIs in
Microsoft.AspNetCore.Diagnostics.Middlewareare now stable. This release also transfersMicrosoft.Extensions.VectorData.AbstractionsandMicrosoft.Extensions.VectorData.ConformanceTestsfrom the Semantic Kernel repository into dotnet/extensions, jumping from 10.1.0 to 10.5.0 for consistent versioning. The release also delivers fixes across the AI libraries, AI Evaluation, and Service Discovery.Breaking Changes
VectorStoreVectorAttributeconstructor parameter #7460Dimensionsparameter was renamed todimensions(lowercase). This is a source-breaking change only — binary compatibility is preserved.new VectorStoreVectorAttribute(Dimensions: 1536), update it tonew VectorStoreVectorAttribute(dimensions: 1536).Experimental API Changes
Now Stable
EXTEXP0013):AddHttpLogEnricher<T>,IHttpLogEnricher, andRequestHeadersLogEnricherOptions.HeadersDataClasses#7380What's Changed
AI
Vector Data
AI Evaluation
ASP.NET Core Extensions
Service Discovery
Documentation Updates
Test Improvements
... (truncated)
10.4.1
This release of the Microsoft.Extensions.AI packages adds new experimental APIs for Realtime client sessions and Text-to-Speech, along with OpenTelemetry and middleware improvements.
Packages in this release
Experimental API Changes
New Experimental APIs
Changes to Experimental APIs
NotSupportedException#7394What's Changed
AI
ITextToSpeechClientabstraction, middleware, and OpenAI implementation #7381 by @stephentoubVoiceActivityDetectionoptions to realtime session abstractions #7399 by @tarekghUriContentmediaTypeparameter optional with inference from URI file extension #7398 by @stephentoub (co-authored by @Copilot)gen_ai.client.operation.exceptionviaILogger LoggerMessageon OpenTelemetry instrumentation classes #7379 by @stephentoub (co-authored by @Copilot)invoke_workflowas an equivalent parent span toinvoke_agentinFunctionInvokingChatClient#7382 by @stephentoub (co-authored by @Copilot)HostedFileDownloadStreamexplicitly read-only #7394 by @stephentoub (co-authored by @Copilot)Documentation Updates
Test Improvements
Repository Infrastructure Updates
Acknowledgements
... (truncated)
Commits viewable in compare view.
Updated Microsoft.Extensions.ServiceDiscovery.Yarp from 10.4.0 to 10.7.0.
Release notes
Sourced from Microsoft.Extensions.ServiceDiscovery.Yarp's releases.
10.7.0
v10.7.0 graduates the Microsoft.Extensions.Diagnostics.ResourceMonitoring.Kubernetes package to stable. The package registers a Kubernetes-aware
ResourceQuotaProviderthat reads the pod's CPU and memory requests and limits and exposes them toMicrosoft.Extensions.Diagnostics.ResourceMonitoringas baseline and maximum quotas, which then feed the request and limit dimensions of the published resource utilization metrics. The companionResourceQuotaandResourceQuotaProvidertypes inMicrosoft.Extensions.Diagnostics.ResourceMonitoringgraduate to stable in the same change so that consumers can implement custom quota providers without taking an experimental dependency.On the AI side,
Microsoft.Extensions.AI.OpenAImoves to OpenAI 2.11.0 and fixes a deserialization bug inToolJson.AdditionalPropertiesso that JSON SchemaadditionalPropertiesvalues shaped as sub-schema objects (for example{"type":"string"}) are preserved instead of throwing during deserialization.HostedFileContent.SizeInBytesandHostedFileContent.CreatedAtgraduate to stable since both values are consistently available across hosted-file providers, whilePurposeandScoperemain experimental as provider-shaped vocabulary.FunctionInvokingChatClientdrops a backward-compat path that auto-markedToolApprovalResponseContententries withInformationalOnly: true; consumers that need to continue accepting sessions serialized before #7468 can use the sampleApprovalHistoryNormalizingChatClientmiddleware added in the test project.Experimental API Changes
Now Stable
Microsoft.Extensions.Diagnostics.ResourceMonitoring.Kubernetespackage is now stable #7253ResourceQuotaandResourceQuotaProviderAPIs are now stable (previouslyEXTEXP0008) #7253HostedFileContent.SizeInBytesandHostedFileContent.CreatedAtare now stable (previouslyMEAI001) #7513What's Changed
AI
Diagnostics, Health Checks, and Resource Monitoring
Repository Infrastructure Updates
Acknowledgements
Full Changelog: dotnet/extensions@v10.6.0...v10.7.0
10.6.0
Version 10.6.0 stabilizes the response continuation token and background-response APIs in Microsoft.Extensions.AI.Abstractions. Most other AI work for May shipped in 10.5.1; this monthly release rolls those changes up alongside dependency updates and a small Resource Monitoring cleanup.
Experimental API Changes
Now Stable
MEAI001) #7512What's Changed
AI
Repository Infrastructure Updates
Acknowledgements
Full Changelog: dotnet/extensions@v10.5.2...v10.6.0
10.5.2
This patch release ships a single fix to
Microsoft.Extensions.VectorData.Abstractions, correctingStorageNameresolution when external serialization is enabled.Microsoft.Extensions.VectorData.ConformanceTests,Microsoft.Extensions.AI.Abstractions,Microsoft.Extensions.AI, andMicrosoft.Extensions.AI.OpenAIare published alongside it for version coherency — they contain no code changes from 10.5.1.Packages in this release
What's Changed
Microsoft.Extensions.VectorData.Abstractions
StorageNamebehavior when external serialization is enabled, and disable a warning fornet462. (by @roji in #7475)Full Changelog: dotnet/extensions@v10.5.1...v10.5.2
10.5.1
Version 10.5.1 of the Microsoft.Extensions.AI packages stabilizes CodeInterpreter, WebSearch, and ImageGeneration tool content types. The release adds new experimental tool search and OpenAI request policy hooks. And the OpenTelemetry gen-ai semantic conventions are updated to align with v1.41.
The 'aiagent-webapi' project template in Microsoft.Agents.AI.ProjectTemplates is updated to align with v1.3.0 of Agent Framework, updating the OpenTelemetry dependencies within the template projects as well.
Packages in this release
Experimental API Changes
Now Stable
The following types previously emitted the
MEAI001experimental diagnostic and are now stable.CodeInterpreterToolCallContentCodeInterpreterToolResultContentWebSearchToolCallContentWebSearchToolResultContentImageGenerationToolCallContentImageGenerationToolResultContentHostedImageGenerationToolImageGenerationOptionsImageGenerationResponseFormat(theHostedenum value remains experimental)IImageGeneratorand the rest of the image generation infrastructure also remain experimentalNew Experimental APIs
The following new APIs emit the
MEAI001experimental diagnostic.HostedToolSearchToolwithDeferredToolsfor tool-search-driven deferred tool loading #7471OpenAIRequestPoliciesextension hook for appendingSystem.ClientModel.PipelinePolicyinstances to outgoing OpenAI requests #7495Breaking Changes to Experimental APIs
WebSearchToolResultContent.Resultswas renamed toOutputsas part of the stabilization in #7493, aligning withCodeInterpreterToolResultContent.Outputs. The originalResultsproperty was included in version 10.4.0 and 10.5.0; this is a binary breaking change and consumers need to update to consume the updated property.... (truncated)
10.5.0
HTTP Logging Middleware APIs in
Microsoft.AspNetCore.Diagnostics.Middlewareare now stable. This release also transfersMicrosoft.Extensions.VectorData.AbstractionsandMicrosoft.Extensions.VectorData.ConformanceTestsfrom the Semantic Kernel repository into dotnet/extensions, jumping from 10.1.0 to 10.5.0 for consistent versioning. The release also delivers fixes across the AI libraries, AI Evaluation, and Service Discovery.Breaking Changes
VectorStoreVectorAttributeconstructor parameter #7460Dimensionsparameter was renamed todimensions(lowercase). This is a source-breaking change only — binary compatibility is preserved.new VectorStoreVectorAttribute(Dimensions: 1536), update it tonew VectorStoreVectorAttribute(dimensions: 1536).Experimental API Changes
Now Stable
EXTEXP0013):AddHttpLogEnricher<T>,IHttpLogEnricher, andRequestHeadersLogEnricherOptions.HeadersDataClasses#7380What's Changed
AI
Vector Data
AI Evaluation
ASP.NET Core Extensions
Service Discovery
Documentation Updates
Test Improvements
... (truncated)
10.4.1
This release of the Microsoft.Extensions.AI packages adds new experimental APIs for Realtime client sessions and Text-to-Speech, along with OpenTelemetry and middleware improvements.
Packages in this release
Experimental API Changes
New Experimental APIs
Changes to Experimental APIs
NotSupportedException#7394What's Changed
AI
ITextToSpeechClientabstraction, middleware, and OpenAI implementation #7381 by @stephentoubVoiceActivityDetectionoptions to realtime session abstractions #7399 by @tarekghUriContentmediaTypeparameter optional with inference from URI file extension #7398 by @stephentoub (co-authored by @Copilot)gen_ai.client.operation.exceptionviaILogger LoggerMessageon OpenTelemetry instrumentation classes #7379 by @stephentoub (co-authored by @Copilot)invoke_workflowas an equivalent parent span toinvoke_agentinFunctionInvokingChatClient#7382 by @stephentoub (co-authored by @Copilot)HostedFileDownloadStreamexplicitly read-only #7394 by @stephentoub (co-authored by @Copilot)Documentation Updates
Test Improvements
Repository Infrastructure Updates
Acknowledgements
... (truncated)
Commits viewable in compare view.
Updated Microsoft.Identity.Web from 4.1.1 to 4.11.0.
Release notes
Sourced from Microsoft.Identity.Web's releases.
4.11.0
What's Changed
New Contributors
Full Changelog: AzureAD/microsoft-identity-web@4.10.0...4.11.0
4.10.0
New features
WithExtraBodyParametersfluent API for attaching extra body parameters to token acquisition requests. See #3819.IConfidentialClientApplicationProviderextensibility interface andCachePartitionKeysupport for silent token acquisition. See #3822.Bug fixes
Authorityvalues with a clearer exception, steering users to useInstance+TenantIdinstead. See #3805.Behavior changes
Dependencies updates
Microsoft.Kiota.Abstractionsto 1.22.0 for GraphServiceClient. See #3817.uuidand@azure/msal-nodein SidecarAdapter TypeScript test app. See #3826.qsin SidecarAdapter TypeScript test app. See #3829.4.9.0
New features
Sidecar:AllowOverridesconfiguration section provides explicit, per-route control over whetheroptionsOverride.*query-string parameters are honored. Authenticated routes default to allowing overrides (preserving existing behavior); unauthenticated routes default to rejecting them.optionsOverride.BaseUrlis unconditionally rejected on all routes as a hardening measure. See #3794.Bug fixes
AccountController.Challengeredirect URI validation to reject percent-encoded protocol-relative bypasses (%2F%2F,%5C%2F, etc.) that could be decoded by misconfigured reverse proxies. See #3792.Behavior changes
DownstreamApiOptions.ExtraHeaderParameterswhose names match reserved HTTP headers (Authorization,Host,Content-Length,Proxy-Authorization,Sec-*,Proxy-*, etc.) or duplicate a header the library already set are now silently skipped. A warning-level log entry (ReservedHeaderIgnored/DuplicateHeaderIgnored) is emitted so operators can spot misconfigurations. No exception is thrown. See #3793.Dependencies updates
Microsoft.Extensions.DependencyInjection.Abstractions8.0.2 on non-framework-coupled TFMs (net462, net472, netstandard2.0). This caused aCS0433type collision with the previously-pinnedMicrosoft.Extensions.DependencyInjection2.1.0. Rather than patch individual packages, the entireMicrosoft.Extensions.*stack on these older TFMs has been bumped to 8.0.x, closing several 5-year version gaps and aligning with the net8.0 baseline. If your application targets net462, net472, or netstandard2.0, your resolvedMicrosoft.Extensions.*versions will increase (e.g.,Extensions.Http3.1.3 → 8.0.0,Extensions.DependencyInjection2.1.0 → 8.0.0,Extensions.Caching.Memory2.1.0/6.0.2 → 8.0.1). Applications already targeting net8.0+ are unaffected. See #3787.System.Text.Json8.0.5 → 8.0.6 (CVE-2024-43485). See #3787.Microsoft.AspNetCore.DataProtectionto 10.0.7 for CVE fix on net10.0. See #3796.OpenTelemetry.Exporter.OpenTelemetryProtocol1.14.0 → 1.15.3. See #3788.Full Changelog: AzureAD/microsoft-identity-web@4.8.0...4.9.0
4.8.0
What's Changed
New Contributors
Full Changelog: AzureAD/microsoft-identity-web@4.6.0...4.8.0
4.7.0
4.7.0
Bug fixes
Certificateextension method inCredentialDescriptionwas reverted to normal property.) See #3767.4.6.0
What's Changed
Full Changelog: AzureAD/microsoft-identity-web@4.5.0...4.6.0
4.5.0
New features
Dependencies updates
4.4.0
New features
WithClientClaimsflow for token acquisition. See #3623.OnBeforeTokenAcquisitionForOnBehalfOfevent. See #3680.Bug fixes
InvalidOperationExceptionwith actionable message when a custom credential is not registered. See #3626.InvokeOnBeforeTokenAcquisitionForOnBehalfOfAsync. See #3717.OnBeforeTokenAcquisitionForOnBehalfOfto constructClaimsPrincipalfrom token. See #3714.SendX5Cto MSAL. See #3671.Dependencies updates
qsin/tests/DevApps/SidecarAdapter/typescript. See #3725.Documentation
CertificatelessOptions.ManagedIdentityClientId. See #3667.Fundamentals
CertificatesObserverTests. See #3687.New Contributors
4.4.0-preview.1
New features
WithClientClaimsflow for token acquisition. See #3623.OnBeforeTokenAcquisitionForOnBehalfOfevent. See #3680.Bug fixes
InvalidOperationExceptionwith actionable message when a custom credential is not registered. See #3626.InvokeOnBeforeTokenAcquisitionForOnBehalfOfAsync. See #3717.OnBeforeTokenAcquisitionForOnBehalfOfto constructClaimsPrincipalfrom token. See #3714.SendX5Cto MSAL. See #3671.Dependencies updates
qsin/tests/DevApps/SidecarAdapter/typescript. See [#3725](https://github.com/A...Description has been truncated