Skip to content

Bump the dependencies group with 25 updates - #87

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/src/DebaitMyFeed/DebaitMyFeed.Feeds/dependencies-9e486cd02d
Open

Bump the dependencies group with 25 updates#87
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/src/DebaitMyFeed/DebaitMyFeed.Feeds/dependencies-9e486cd02d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 18, 2026

Copy link
Copy Markdown
Contributor

Updated AngleSharp from 1.5.2 to 1.8.2.

Release notes

Sourced from AngleSharp's releases.

1.8.1

Released on Thursday, September 10 2026

What's Changed

  • Updated DoFocus and DoBlur to apply to form elements
  • Improved explicit form ownership to take precedence over ancestor forms for connected controls (#​1323) @​sebastienros
  • Fixed HTML hyperlink pseudo-classes omitting empty href and matching link elements (#​1337) @​sebastienros
  • Fixed HTML-namespace element creation losing local-name case (#​1327) @​sebastienros
  • Fixed :enabled incorrectly matching HTML links with nonempty href (#​1324) @​sebastienros
  • Fixed changing focus of elements
  • Released 1.8.1 by @​FlorianRappl in Release 1.8.1 AngleSharp/AngleSharp#1343

New Contributors

Full Changelog: AngleSharp/AngleSharp@v1.8.0...v1.8.1

1.8.0

Released on Saturday, September 5 2026

What's Changed

  • Improved AngleSharp's test website
  • Fixed script data escaped state potentially not bouncing back correctly
  • Added the DomSameObject annotation for the respective IDL members (#​1314) @​lahma
  • Added the DomReturnType annotation for methods returning a different IDL type (#​1318)
  • Released 1.8.0 by @​FlorianRappl in Release 1.8.0 AngleSharp/AngleSharp#1317

Full Changelog: AngleSharp/AngleSharp@v1.7.3...v1.8.0

1.7.3

Released on Thursday, September 3 2026

What's Changed

  • Improved tracking of parse exceptions in the HtmlParser (#​1315) @​lahma
  • Fixed tokenizer buffer overrun on encoding change (#​1290) @​jafin
  • Fixed selector text dropping the nth-child of clause (#​1292) @​jafin
  • Fixed selector text dropping the case-insensitive (#​1291) @​jafin
  • Fixed selector specificity carrying between fields instead of saturating (#​1300) @​meziantou
  • Fixed condition check for disposed state in ReturnToPool (#​1296) @​meziantou
  • Fixed ArgumentOutOfRangeException CSS escapes (#​1299) @​meziantou
  • Fixed whitespace around An+B CSS selector notations (#​1297)
  • Fixed unsupported pseudo-classes matching everything (#​1295)
  • Fixed DomException for invalid foreign attribute names such as xml:lang[ (#​1294)
  • Fixed script data escaped state leaving escaped mode too early (#​1298)
  • Fixed CurrentScript not indicating the currently executing script (#​1308) @​lahma
  • Fixed returned missing attribute-properties to use empty string instead of null (#​1313) @​lahma
  • Fixed removal of data-* attributes (#​1310) @​lahma
  • Added missing DomName/DomAccessor annotations (#​1301) @​meziantou
  • Added missing DomLiterals attribute to AdjacentPosition (#​1311) @​lahma
  • Released 1.7.3 by @​FlorianRappl in Release 1.7.3 AngleSharp/AngleSharp#1302

Full Changelog: AngleSharp/AngleSharp@v1.7.2...v1.7.3

1.7.2

Released on Sunday, August 23 2026

What's Changed

  • Fixed matching of annotation-xml encoding to be case-insensitive (#​1284) @​arpitjain099
  • Fixed <xmp> usage in <select> elements
  • Added ability to parse immutable byte buffers without a stream (#​1286) @​dv00d00
  • Released 1.7.2 by @​FlorianRappl in Release 1.7.2 AngleSharp/AngleSharp#1288

New Contributors

Full Changelog: AngleSharp/AngleSharp@1.7.1...v1.7.2

1.7.1

Released on Wednesday, August 5 2026

  • Migrated the build system from NUKE to Fallout by @​jafin in Migrate the build system from NUKE to Fallout AngleSharp/AngleSharp#1275
  • Improved WHATWG Url specification (#​802) @​jafin
  • Improved tokenizer read performance (#​1274) @​dv00d00
  • Fixed auxiliary browsing context lifetime (#​1278) @​jafin
  • Fixed duplicated DomName attributes on DOM geometry
  • Fixed document.open() destroying the DOM tree in case of encoding problems (#​1276)
  • Fixed source references having wrong line (#​1280)
  • Released 1.7.1 by @​FlorianRappl in Release 1.7.1 AngleSharp/AngleSharp#1281

Full Changelog: AngleSharp/AngleSharp@1.7.0...v1.7.1

1.7.0

Released on Friday, July 31 2026

  • Improved CSS selector performance (#​1270, #​929) @​lahma
  • Added support for the :host pseudo selector (#​1271)
  • Added support for the DomGeometry spec (#​1193)

1.6.0

Released on Sunday, July 26 2026

  • Improved performance for text tokenization (#​1262) @​dv00d00
  • Improved CSS selector performance
  • Improved observer dispatch during HTML parsing (#​1266) @​dv00d00
  • Improved declaration of unsupported pseudo elements
  • Fixed inconsistent behavior and segfaults on Android Release build (#​1252) @​DevGitPit
  • Fixed CSS attribute selector modifier handling for i / I (case-insensitive) and s / S (case-sensitive)
  • Added API enhancements to expose asynchronous HTML token source (#​1265) @​dv00d00
  • Added bounded stream parsing mode (#​1263) @​dv00d00
  • Added canonicalization of decimal, octal, or hexadecimal IPv4 literals in Url
  • Added parsing of / checks for IPv6 literals in Url
  • Added support for the CSS column combinator (||) selector syntax
  • Added correct identification of CurrentSource in CssMediaElement

Commits viewable in compare view.

Updated Microsoft.AspNetCore.OpenApi from 10.0.10 to 10.0.12.

Release notes

Sourced from Microsoft.AspNetCore.OpenApi's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.AI.Abstractions from 10.8.1 to 10.10.0.

Release notes

Sourced from Microsoft.Extensions.AI.Abstractions's releases.

10.10.0

This month's release focuses on AI package reliability: closing gaps in evaluation scoring, hardening OpenAI image-option handling, and removing the deprecated OpenAI Assistants API support.

Experimental API Changes

Removed Experimental APIs

  • OpenAI Assistants experimental APIs removed (was experimental under OPENAI001) #​7724

What's Changed

AI

  • Remove OpenAI Assistants API support #​7724 by @​jozkee (co-authored by @​Copilot)
  • Update OpenAI package version to 2.13.0 #​7726 by @​jozkee
  • OpenAI: Avoid null implicit conversions for image options #​7727 by @​jozkee (co-authored by @​Copilot)

AI Evaluation

  • Fail closed when a quality metric has no valid score #​7735 by @​thaildhe172591
  • Validate path segments in Azure storage result store and response cache #​7718 by @​Lroca88

Repository Infrastructure Updates

  • Add TfxInstaller for publishing #​7695 by @​peterwaltonwork
  • Bump PowerShell from 7.6.4 to 7.6.5 #​7702
  • [Infrastructure] Update vulnerable npm dependencies #​7705 by @​wtgodbe
  • Add Node installation for TfxInstaller #​7703 by @​peterwaltonwork
  • Publish VSIX using publish task instead of output #​7711 by @​peterwaltonwork
  • Bump dotnet-coverage from 18.9.0 to 18.10.0 #​7708
  • Do not validate extension during publish step #​7725 by @​peterwaltonwork
  • Add skill for upgrading OpenAI #​7728 by @​jozkee
  • Fix source indexer stage #​7694 by @​jjonescz

Acknowledgements

  • @​Lroca88 made their first contribution in #​7718
  • @​thaildhe172591 made their first contribution in #​7735
  • @​ANcpLua submitted issue #​7665 (resolved by #​7735)
  • @​jeffhandley @​peterwald @​shyamnamboodiripad reviewed pull requests

Full Changelog: dotnet/extensions@v10.9.0...v10.10.0

10.9.0

Version 10.9.0 is headlined by changes in these areas:

  • AI: New experimental routing APIs center on the abstract RoutingChatClient base class, with SemanticRoutingChatClient as a concrete semantic-routing implementation. Separately, the abstract FailoverChatClient specialization and its concrete OrderedFailoverChatClient implementation add failover routing.
  • AI Evaluation: The generated report gains redesigned Overview, Cases, History, and Comparison views.
  • ASP.NET Core and HTTP diagnostics: The release adds HTTP request latency log enrichment and fixes configuration binding, response-body logging, request-path redaction, and resilience package version handling.
  • Source-generated logging and service discovery: Fixes cover classification type qualification, thread-local state cleanup, and DNS query suffix handling.

Experimental API Changes

New Experimental APIs

  • New experimental API: HTTP request latency log enrichment (EXTEXP0013) #​7602
  • New experimental API: Chat client routing and failover (MEAI001) #​7662

What's Changed

AI (Microsoft.Extensions.AI, Microsoft.Extensions.AI.Abstractions, and Microsoft.Extensions.AI.OpenAI)

  • Add extensible chat client routing #​7662 by @​joshuajyue (co-authored by @​Copilot)
  • Pass the request's options to the selected client #​7685 by @​joshuajyue (co-authored by @​jozkee @​Copilot)
  • AI.Abstractions: fix ExcludeFromSchema dropped under concurrent AIFunction creation #​7677 by @​jozkee (co-authored by @​Copilot)
  • Cap OpenAI dependency version (b10f9c0) by @​jeffhandley (co-authored by @​Copilot)

Note: Microsoft.Extensions.AI.OpenAI constrains its dependency for OpenAI to 2.12.x, preventing OpenAI updates to 2.13.0+ due to an incompatibility. We expect to release Microsoft.Extensions.AI.OpenAI version 10.9.1 during the week of August 17 to address this issue.

HTTP Resilience and Diagnostics (Microsoft.Extensions.Http.Resilience and Microsoft.Extensions.Http.Diagnostics)

  • Fix Grpc.Net.ClientFactory version range check - Fixes #​7565 #​7566 by @​Ghost93
  • Fix response body logging under debugger #​7678 by @​Rimobul
  • Redact outgoing path when route is unknown #​7687 by @​Rimobul
  • Fix HTTP client logging config binding #​7691 by @​Rimobul

ASP.NET Core Extensions (Microsoft.AspNetCore.Diagnostics.Middleware)

  • Rename HttpLatencyTelemetry extensions class and drop redundant TFM guard #​7645 by @​EasyL0ver (co-authored by @​Copilot)
  • Add HTTP request latency log enricher (experimental) #​7602 by @​EasyL0ver (co-authored by @​Copilot)

Logging Source Generator (Microsoft.Gen.Logging)

  • [Microsoft.Gen.Logging] Clear thread-local state when logging throws #​7682 by @​Rimobul
  • [Microsoft.Gen.Logging] Fully qualify classification types #​7689 by @​Rimobul

AI Evaluation (Microsoft.Extensions.AI.Evaluation.Reporting)

  • [Microsoft.Extensions.AI.Evaluation.Reporting] Evaluation report redesign #​7609 by @​grafanaKibana

Project Templates (Microsoft.McpServer.ProjectTemplates)

  • Remove MCP server project template #​7680 by @​jeffhandley (co-authored by @​Copilot)

... (truncated)

10.8.4

This servicing update refreshes the .NET AI project templates ahead of the July 30, 2026 retirement of GitHub Models — removing the GitHub Models provider option and updating template dependencies.

As a result, both the AI Chat Web (aichatweb) and AI Agent Web API (aiagent-webapi) templates now require the AI service provider to be chosen explicitly via --provider; there is no longer a default. One of the following must be selected:

  • --provider azureopenai — Azure OpenAI
  • --provider ollama — Ollama (for local development)
  • --provider openai — OpenAI Platform

Packages in this release

Package Version
Microsoft.Extensions.AI.Templates 10.8.4-preview.3.26379.3
Microsoft.Agents.AI.ProjectTemplates 1.13.0-preview.1.26379.3

What's Changed

Project templates

  • Removed the GitHub Models provider from the AI Chat Web and AI Agent Web API templates, ahead of GitHub Models being fully retired on July 30, 2026. The --provider option is now required with no default (#​7667).
  • Updated AI template dependencies — bumped Aspire.Hosting.AppHost to 13.4.6 and CommunityToolkit.VectorData.SqliteVec to 1.0.0-preview.4 (aligned System.Linq.AsyncEnumerable to 10.0.9), replacing earlier workaround package pins (#​7639).

Full Changelog

10.8.3

Packages in this release

Package Version
Microsoft.Extensions.AI 10.8.3
Microsoft.Extensions.AI.Abstractions 10.8.3
Microsoft.Extensions.AI.OpenAI 10.8.3

Experimental API Changes

Experimental API behavior updates

  • Updated serialization behavior for experimental ToolApprovalRequestContent.RequiresConfirmation so it no longer leaks into consumer source-generated AIContent JSON metadata unless approval APIs are intentionally used (#​7659).

What's Changed

AI abstractions and serialization

  • Fixed MEAI001 leakage from RequiresConfirmation in source-generated AIContent contexts by using an internal JSON-included backing member while keeping the public experimental member ignored for source-generation metadata (#​7659).

Test Improvements

  • Added stabilization regression coverage to verify consumer source-generated List<AIContent> contexts compile and round-trip without requiring MEAI001 suppression (#​7659).

Full Changelog

10.8.2

This servicing release updates Microsoft.Extensions.VectorData.ConformanceTests to 10.8.2 and includes targeted test framework migration fixes.

Packages in this release

Package Version Note
Microsoft.Extensions.VectorData.Abstractions 10.8.2 Published August 7, 2026
Microsoft.Extensions.VectorData.ConformanceTests 10.8.2

Update: August 7, 2026
The Microsoft.Extensions.VectorData.Abstractions package was initially excluded from this release by mistake. Because Microsoft.Extensions.VectorData.ConformanceTests has a dependency on Microsoft.Extensions.VectorData.Abstractions, that led to failures when updating to Microsoft.Extensions.VectorData.ConformanceTests 10.8.2.

Microsoft.Extensions.VectorData.Abstractions was published August 7, 2026 to resolve that issue.

What's Changed

AI

  • Move Microsoft.Extensions.VectorData.ConformanceTests to xUnit 3 #​7636 by @​adamsitnik (co-authored by @​Copilot)

Acknowledgements

  • @​roji reviewed pull requests

Full Changelog: dotnet/extensions@v10.8.1...v10.8.2

Commits viewable in compare view.

Updated Microsoft.Extensions.Caching.Memory from 10.0.10 to 10.0.12.

Release notes

Sourced from Microsoft.Extensions.Caching.Memory's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Caching.StackExchangeRedis from 10.0.10 to 10.0.12.

Release notes

Sourced from Microsoft.Extensions.Caching.StackExchangeRedis's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration from 10.0.10 to 10.0.12.

Release notes

Sourced from Microsoft.Extensions.Configuration's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.Binder from 10.0.10 to 10.0.12.

Release notes

Sourced from Microsoft.Extensions.Configuration.Binder's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.EnvironmentVariables from 10.0.10 to 10.0.12.

Release notes

Sourced from Microsoft.Extensions.Configuration.EnvironmentVariables's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Http from 10.0.10 to 10.0.12.

Release notes

Sourced from Microsoft.Extensions.Http's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.8.1 to 18.10.1.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.10.1

What's Changed

Full Changelog: microsoft/vstest@v18.10.0...v18.10.1

18.10.0

What's Changed

Full Changelog: microsoft/vstest@v18.9.0...v18.10.0

18.9.0

What's Changed

New Contributors

Full Changelog: microsoft/vstest@v18.8.0...v18.9.0

Commits viewable in compare view.

Updated Microsoft.Playwright from 1.61.0 to 1.62.0.

Release notes

Sourced from Microsoft.Playwright's releases.

1.62.0

🖼️ WebP screenshots

page.screenshot() and locator.screenshot() can now capture screenshots in the WebP format — Playwright infers the format from a .webp file extension, or you can set the type explicitly. Quality 100 (the default) is lossless, while lower values use lossy compression:

await Page.ScreenshotAsync(new() { Path = "homepage.webp", Quality = 50 });

New APIs

  • New Scroll option (Auto | None) on actions to opt out of Playwright's automatic scroll-into-view.
  • New Locator.WaitForFunctionAsync() waits until a function — called with the matching element — returns a truthy value.
  • New APIResponse.TimingAsync() returns resource timing information for an API response.

Announcements

  • 📋 The clipboard is now isolated from the operating system in headless mode, so tests that use navigator.clipboard no longer read or overwrite the clipboard of the machine running them.
  • ⚠️ Debian 11 is not supported anymore.

Browser Versions

  • Chromium 151.0.7922.34
  • Mozilla Firefox 153.0
  • WebKit 26.5

This version was also tested against the following stable channels:

  • Google Chrome 151
  • Microsoft Edge 151

Commits viewable in compare view.

Updated Microsoft.Playwright.Xunit from 1.61.0 to 1.62.0.

Release notes

Sourced from Microsoft.Playwright.Xunit's releases.

1.62.0

🖼️ WebP screenshots

page.screenshot() and locator.screenshot() can now capture screenshots in the WebP format — Playwright infers the format from a .webp file extension, or you can set the type explicitly. Quality 100 (the default) is lossless, while lower values use lossy compression:

await Page.ScreenshotAsync(new() { Path = "homepage.webp", Quality = 50 });

New APIs

  • New Scroll option (Auto | None) on actions to opt out of Playwright's automatic scroll-into-view.
  • New Locator.WaitForFunctionAsync() waits until a function — called with the matching element — returns a truthy value.
  • New APIResponse.TimingAsync() returns resource timing information for an API response.

Announcements

  • 📋 The clipboard is now isolated from the operating system in headless mode, so tests that use navigator.clipboard no longer read or overwrite the clipboard of the machine running them.
  • ⚠️ Debian 11 is not supported anymore.

Browser Versions

  • Chromium 151.0.7922.34
  • Mozilla Firefox 153.0
  • WebKit 26.5

This version was also tested against the following stable channels:

  • Google Chrome 151
  • Microsoft Edge 151

Commits viewable in compare view.

Updated OpenAI from 2.12.0 to 2.14.0.

Release notes

Sourced from OpenAI's releases.

2.14.0

See full changelog: https://github.com/openai/openai-dotnet/blob/OpenAI_2.14.0/CHANGELOG.md

2.13.0

See full changelog: https://github.com/openai/openai-dotnet/blob/OpenAI_2.13.0/CHANGELOG.md

Commits viewable in compare view.

Updated OpenTelemetry.Exporter.OpenTelemetryProtocol from 1.17.0 to 1.18.0.

Release notes

Sourced from OpenTelemetry.Exporter.OpenTelemetryProtocol's releases.

1.18.0

For highlights and announcements pertaining to this release see: Release Notes > 1.18.0.

The following changes are from the previous release 1.17.0.

  • NuGet: OpenTelemetry v1.18.0

    • Fixed self-diagnostics log lines being silently dropped when an event message or parameter contained enough 3-byte UTF-8 characters to overflow the internal buffer estimate. Such content is now truncated.
      (#​7543)

    • Fixed activity creation throwing when multiple tracer providers return a sampler attribute with the same key.
      (#​7558)

    • Added the otel.sdk.processor.log.processed SDK self-observability metric.
      (#​7486)

    • Added the otel.sdk.processor.span.processed SDK self-observability metric.
      (#​7598)

    • BatchActivityExportProcessor and SimpleActivityExportProcessor no longer forward spans to the exporter once Shutdown has been called, and BatchActivityExportProcessor.Shutdown now waits for in-flight OnEnd calls to finish enqueueing before flushing.
      (#​7598)

    • Fix logger, meter and tracer providers leaking background threads if an exception is thrown by their constructor after resource creation.
      (#​7615)

    • CircularBufferBuckets.Copy optimized to use bulk array copies.
      (#​7670)

    • Restored configured MaxScale after delta exponential histogram collection.
      (#​7671)

    See CHANGELOG for details.

  • NuGet: OpenTelemetry.Api v1.18.0

    • Avoid formatting exceptions and creating exception attributes when RecordException is called on a span that is not recorded.
      (#​7669)

    See CHANGELOG for details.

  • NuGet: OpenTelemetry.Api.ProviderBuilderExtensions v1.18.0

    No notable changes.

    See CHANGELOG for details.

  • NuGet: OpenTelemetry.Exporter.Console v1.18.0

    • Added support for serializing attribute values that are key/value lists (IEnumerable<KeyValuePair<string, object?>>). These attributes will be serialized as JSON objects.
      (#​7015)

... (truncated)

1.18.0-rc.1

The following changes are from the previous release 1.17.0.

  • NuGet: OpenTelemetry v1.18.0-rc.1

    • Fixed self-diagnostics log lines being silently dropped when an event message or parameter contained enough 3-byte UTF-8 characters to overflow the internal buffer estimate. Such content is now truncated.
      (#​7543)

    • Fixed activity creation throwing when multiple tracer providers return a sampler attribute with the same key.
      (#​7558)

    • Added the otel.sdk.processor.log.processed SDK self-observability metric.
      (#​7486)

    • Added the otel.sdk.processor.span.processed SDK self-observability metric.
      (#​7598)

    • BatchActivityExportProcessor and SimpleActivityExportProcessor no longer forward spans to the exporter once Shutdown has been called, and BatchActivityExportProcessor.Shutdown now waits for in-flight OnEnd calls to finish enqueueing before flushing.
      (#​7598)

    • Fix logger, meter and tracer providers leaking background threads if an exception is thrown by their constructor after resource creation.
      (#​7615)

    • CircularBufferBuckets.Copy optimized to use bulk array copies.
      (#​7670)

    • Restored configured MaxScale after delta exponential histogram collection.
      (#​7671)

    See CHANGELOG for details.

  • NuGet: OpenTelemetry.Api v1.18.0-rc.1

    • Avoid formatting exceptions and creating exception attributes when RecordException is called on a span that is not recorded.
      (#​7669)

    See CHANGELOG for details.

  • NuGet: OpenTelemetry.Api.ProviderBuilderExtensions v1.18.0-rc.1

    No notable changes.

    See CHANGELOG for details.

  • NuGet: OpenTelemetry.Exporter.Console v1.18.0-rc.1

    • Added support for serializing attribute values that are key/value lists (IEnumerable<KeyValuePair<string, object?>>). These attributes will be serialized as JSON objects.
      (#​7015)

    See CHANGELOG for details.

... (truncated)

1.18.0-beta.1

The following changes are from the previous release 1.17.0-beta.1.

  • NuGet: OpenTelemetry.Exporter.Prometheus.AspNetCore v1.18.0-beta.1

    • Fix concurrent scrapes returning an empty response under contention. Now the exporter will return an HTTP 500 error instead.
      (#​7571)

    • Waiting for concurrent scrapes to finish before collecting no longer blocks, which could stall concurrent scrapes being waited on.
      (#​7571)

    • Fixed the interaction between PrometheusAspNetCoreOptions.TranslationStrategy and content negotiation. The configured strategy is now applied before content negotiation, instead of the negotiated escaping scheme replacing the strategy's, and the Content-Type header now reports the escaping scheme that was applied rather than the one that was negotiated.
      (#​7610)

    • Fixed metric values and histogram bucket bounds being written with 17 significant digits instead of their shortest round-trippable representation.
      (#​7589)

    • Fixed the canonical representation used for histogram le and summary quantile label values falling back to 17 significant digits incorrectly.
      (#​7589)

    • Fixed a race where a slow scrape could return an HTTP 200 instead of 408.
      (#​7615)

    • Updated OpenTelemetry core component version(s) to 1.18.0.
      (#​7674)

    See CHANGELOG for details.

  • NuGet: OpenTelemetry.Exporter.Prometheus.HttpListener v1.18.0-beta.1

    • Fix concurrent scrapes returning an empty response under contention. Now the exporter will return an HTTP 500 error instead.
      (#​7571)

    • Waiting for concurrent scrapes to finish before collecting no longer blocks, which could stall concurrent scrapes being waited on.
      (#​7571)

    • A scrape which is still collecting when the listener is disposed now returns an HTTP 503 response.
      (#​7587)

    • Shutting down the listener no longer waits indefinitely for its request processing loop to stop, and no longer throws if the loop faulted.
      (#​7587)

    • Fixed the interaction between PrometheusHttpListenerOptions.TranslationStrategy and content negotiation. The configured strategy is now applied before content negotiation, instead of the negotiated escaping scheme replacing the strategy's, and the Content-Type header now reports the escaping scheme that was applied rather than the one that was negotiated.
      (#​7610)

    • Fixed metric values and histogram bucket bounds being written with 17 significant digits instead of their shortest round-trippable representation.
      (#​7589)

    • Fixed the canonical representation used for histogram le and summary quantile label values falling back to 17 significant digits incorrectly.
      (#​7589)

... (truncated)

Commits viewable in compare view.

Updated OpenTelemetry.Extensions.Hosting from 1.17.0 to 1.18.0.

Release notes

Sourced from OpenTelemetry.Extensions.Hosting's releases.

1.18.0

For highlights and announcements pertaining to this release see: Release Notes > 1.18.0.

The following changes are from the previous release 1.17.0.

  • NuGet: OpenTelemetry v1.18.0

    • Fixed self-diagnostics log lines being silently dropped when an event message or parameter contained enough 3-byte UTF-8 characters to overflow the internal buffer estimate. Such content is now truncated.
      (#​7543)

    • Fixed activity creation throwing when multiple tracer providers return a sampler attribute with the same key.
      (#​7558)

    • Added the otel.sdk.processor.log.processed SDK self-observability metric.
      (#​7486)

    • Added the otel.sdk.processor.span.processed SDK self-observability metric.
      (#​7598)

    • BatchActivityExportProcessor and SimpleActivityExportProcessor no longer forward spans to the exporter once Shutdown has been called, and BatchActivityExportProcessor.Shutdown now waits for in-flight OnEnd calls to finish enqueueing before flushing.
      (#​7598)

    • Fix logger, meter and tracer providers leaking background threads if an exception is thrown by their constructor after resource creation.
      (#​7615)

    • CircularBufferBuckets.Copy optimized to use bulk array copies.
      (#​7670)

    • Restored configured MaxScale after delta exponential histogram collection.
      (#​7671)

    See CHANGELOG for details.

  • NuGet: OpenTelemetry.Api v1.18.0

    • Avoid formatting exceptions and creating exception attributes when RecordException is called on a span that is not recorded.
      (#​7669)

    See CHANGELOG for details.

  • NuGet: OpenTelemetry.Api.ProviderBuilderExtensions v1.18.0

    No notable changes.

    See CHANGELOG for details.

  • NuGet: OpenTelemetry.Exporter.Console v1.18.0

    • Added support for serializing attribute values that are key/value lists (IEnumerable<KeyValuePair<string, object?>>). These attributes will be serialized as JSON objects.
      (#​7015)

... (truncated)

1.18.0-rc.1

The following changes are from the previous release 1.17.0.

  • NuGet: OpenTelemetry v1.18.0-rc.1

    • Fixed self-diagnostics log lines being silently dropped when an event message or parameter contained enough 3-byte UTF-8 characters to overflow the internal buffer estimate. Such content is now truncated.
      (#​7543)

    • Fixed activity creation throwing when multiple tracer providers return a sampler attribute with the same key.
      (#​7558)

    • Added the otel.sdk.processor.log.processed SDK self-observability metric.
      (#​7486)

    • Added the otel.sdk.processor.span.processed SDK self-observability metric.
      (#​7598)

    • BatchActivityExportProcessor and SimpleActivityExportProcessor no longer forward spans to the exporter once Shutdown has been called, and BatchActivityExportProcessor.Shutdown now waits for in-flight OnEnd calls to finish enqueueing before flushing.
      (#​7598)

    • Fix logger, meter and tracer providers leaking background threads if an exception is thrown by their constructor after resource creation.
      (#​7615)

    • CircularBufferBuckets.Copy optimized to use bulk array copies.
      (#​7670)

    • Restored configured MaxScale after delta exponential histogram collection.
      (#​7671)

    See CHANGELOG for details.

  • NuGet: OpenTelemetry.Api v1.18.0-rc.1

    • Avoid formatting exceptions and creating exception attributes when RecordException is called on a span that is not recorded.
      (#​7669)

    See CHANGELOG for details.

  • NuGet: OpenTelemetry.Api.ProviderBuilderExtensions v1.18.0-rc.1

    No notable changes.

    See CHANGELOG for details.

  • NuGet: OpenTelemetry.Exporter.Console v1.18.0-rc.1

    • Added support for serializing attribute values that are key/value lists (IEnumerable<KeyValuePair<string, object?>>). These attributes will be serialized as JSON objects.
      (#​7015)

    See CHANGELOG for details.

... (truncated)

1.18.0-beta.1

The following changes are from the previous release 1.17.0-beta.1.

  • NuGet: OpenTelemetry.Exporter.Prometheus.AspNetCore v1.18.0-beta.1

    • Fix concurrent scrapes returning an empty response under contention. Now the exporter will return an HTTP 500 error instead.
      (#​7571)

    • Waiting for concurrent scrapes to finish before collecting no longer blocks, which could stall concurrent scrapes being waited on.
      (#​7571)

    • Fixed the interaction between PrometheusAspNetCoreOptions.TranslationStrategy and content negotiation. The configured strategy is now applied before content negotiation, instead of the negotiated escaping scheme replacing the strategy's, and the Content-Type header now reports the escaping scheme that was applied rather than the one that was negotiated.
      (#​7610)

    • Fixed metric values and histogram bucket bounds being written with 17 significant digits instead of their shortest round-trippable representation.
      (#​7589)

    • Fixed the canonical representation used for histogram le and summary quantile label values falling back to 17 significant digits incorrectly.
      (#​7589)

    • Fixed a race where a slow scrape could return an HTTP 200 instead of 408.
      (#​7615)

    • Updated OpenTelemetry core component version(s) to 1.18.0.
      (#​7674)

    See CHANGELOG for details.

  • NuGet: OpenTelemetry.Exporter.Prometheus.HttpListener v1.18.0-beta.1

    • Fix concurrent scrapes returning an empty response under contention. Now the exporter will return an HTTP 500 error instead.
      (#​7571)

    • Waiting for concurrent scrapes to finish before collecting no longer blocks, which could stall concurrent scrapes being waited on.
      (#​7571)

    • A scrape which is still collecting when the listener is disposed now returns an HTTP 503 response.
      (#​7587)

    • Shutting down the listener no longer waits indefinitely for its request processing loop to stop, and no longer throws if the loop faulted.
      (#​7587)

    • Fixed the interaction between PrometheusHttpListenerOptions.TranslationStrategy and content negotiation. The configured strategy is now applied before content negotiation, instead of the negotiated escaping scheme replacing the strategy's, and the Content-Type header now reports the escaping scheme that was applied rather than the one that was negotiated.
      (#​7610)

    • Fixed metric values and histogram bucket bounds being written with 17 significant digits instead of their shortest round-trippable representation.
      (#​7589)

    • Fixed the canonical representation used for histogram le and summary quantile label values falling back to 17 significant digits incorrectly.
      (#​7589)

... (truncated)

Commits viewable in compare view.

Updated OpenTelemetry.Instrumentation.AspNetCore from 1.17.0 to 1.18.0.

Release notes

Sourced from OpenTelemetry.Instrumentation.AspNetCore's releases.

1.18.0

1.18.0-rc.1

1.18.0-beta.3

1.18.0-beta.2

1.18.0-beta.1

  • NuGet: OpenTelemetry.Exporter.Geneva v1.18.0-beta.1

    • Fixed a metric TLV serialization issue where an exemplar whose filtered tags
      serialized to more than 255 bytes caused the payload to be corrupted.
      (#​4856)

    • Renamed the PrivatePreviewEnableOtlpProtobufEncoding connection string switch
      to EnableOtlpProtobufEncoding. The old PrivatePreviewEnableOtlpProtobufEncoding
      switch is no longer supported.
      (#​4920)

    • Fixed a regression introduced in 1.17.0 where EtwDataTransport prepended a
      synthetic 4-byte length field to the ETW payload for logs and traces, causing
      the agent to reject the data with "Bad forward protocol format". The raw
      payload is once again written as a single unframed field.
      (#​4941)

    See CHANGELOG for details.

1.18.0-alpha.1

Commits viewable in compare view.

Updated OpenTelemetry.Instrumentation.Http from 1.17.0 to 1.18.0.

Release notes

Sourced from OpenTelemetry.Instrumentation.Http's releases.

1.18.0

1.18.0-rc.1

1.18.0-beta.3

1.18.0-beta.2

1.18.0-beta.1

  • NuGet: OpenTelemetry.Exporter.Geneva v1.18.0-beta.1

    • Fixed a metric TLV serialization issue where an exemplar whose filtered tags
      serialized to more than 255 bytes caused the payload to be corrupted.
      (#​4856)

    • Renamed the PrivatePreviewEnableOtlpProtobufEncoding connection string switch
      to EnableOtlpProtobufEncoding. The old PrivatePreviewEnableOtlpProtobufEncoding
      switch is no longer supported.
      (#​4920)

    • Fixed a regression introduced in 1.17.0 where EtwDataTransport prepended a
      synthetic 4-byte length field to the ETW payload for logs and traces, causing
      the agent to reject the data with "Bad forward protocol format". The raw
      payload is once again written as a single unframed field.
      (#​4941)

    See CHANGELOG for details.

1.18.0-alpha.1

Commits viewable in compare view.

Updated System.Memory.Data from 10.0.10 to 10.0.12.

Release notes

Sourced from System.Memory.Data's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated System.ServiceModel.Syndication from 10.0.10 to 10.0.12.

Release notes

Sourced from System.ServiceModel.Syndication's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Testcontainers from 4.13.0 to 4.15.0.

Release notes

Sourced from Testcontainers's releases.

4.15.0

What's Changed

The NuGet packages for this release have been attested for supply chain security using actions/attest. This confirms the integrity and provenance of the artifacts and helps ensure they can be trusted: #​45594466.

🚀 Features

  • feat: Add options to the Docker Compose up and down command (#​1759) @​HofmeisterAn
  • feat: Add QuestDB module (#​1618) @​FortuneN, @​HofmeisterAn
  • feat: Add Compose support (#​1750) @​HofmeisterAn
  • fix(Couchbase): Treat an already provisioned cluster as configured (#​1736) @​arnelirobles, @​HofmeisterAn
  • feat: Retry transient Docker image pull failures (#​1734) @​thomhurst, @​HofmeisterAn
  • chore(deps): Split Dependabot NuGet jobs and bump test dependencies (#​1746) @​HofmeisterAn
  • feat(MongoDb): Resolve the MongoDb shell file path once (#​1745) @​HofmeisterAn

🐛 Bug Fixes

  • fix: Detach from the container output before stopping or removing it (#​1755) @​HofmeisterAn
  • fix(GCloud): Bump test image version (#​1752) @​HofmeisterAn

📖 Documentation

  • docs: Update CONTRIBUTING.md (#​1744) @​HofmeisterAn

🧹 Housekeeping

  • chore: Improve null check, test typing, and IDE settings (#​1757) @​HofmeisterAn
  • fix(GCloud): Bump test image version (#​1752) @​HofmeisterAn
  • chore: Resolve Sonar findings (#​1751) @​HofmeisterAn
  • chore(deps): Revert Dependabot NuGet jobs (#​1748) @​HofmeisterAn
  • feat: Prepare next release cycle (4.15.0) (#​1742) @​HofmeisterAn

📦 Dependency Updates

  • chore(deps): Bump mkdocs-material from 9.7.2 to 9.7.7 (#​1758) @​dependabot[bot]
  • chore(deps): Bump the actions group with 5 updates (#​1754) @​dependabot[bot]
  • chore(deps): Bump the actions group across 1 directory with 7 updates (#​1747) @​dependabot[bot]
  • chore(deps): Revert Dependabot NuGet jobs (#​1748) @​HofmeisterAn
  • chore(deps): Split Dependabot NuGet jobs and bump test dependencies (#​1746) @​HofmeisterAn

4.14.0

What's Changed

I published this version because several developers asked for a release addressing the SSH.NET vulnerability. As an interim fix, you can also bump the transitive dependency, which should work fine.

Unfortunately, I had to run the release CI pipeline twice (1, 2). The change #​1725 introduced a regression that caused the pipeline to attempt to publish the Cake build project, which correctly failed (partially published).

The NuGet packages for this release have been attested for supply chain security using actions/attest. This confirms the integrity and provenance of the artifacts and helps ensure they can be trusted: #​40693051.

🚀 Features

  • feat: Add possibility to select MSSQL database (instead of master) (#​1737) @​0xced, @​HofmeisterAn
  • feat: Add Mailpit module (#​1727) @​0xced, @​feslima, @​HofmeisterAn

🐛 Bug Fixes

  • fix(MongoDb): Probe the server instead of counting log messages before initiating (#​1735) @​arnelirobles, @​HofmeisterAn
  • fix(MongoDb): Treat an already initiated replica set as success (#​1731) @​arnelirobles, @​HofmeisterAn

🧹 Housekeeping

  • chore: Cleanup and align tests (#​1740) @​HofmeisterAn
  • chore: Set Cake build solution file path to Testcontainers.slnx (#​1728) @​0xced
  • chore: Keep Testcontainers.slnx solution file only (#​1725) @​0xced
  • feat: Prepare next release cycle (4.14.0) (#​1726) @​HofmeisterAn

📦 Dependency Updates

  • chore(deps): Bump SSH.NET to 2026.0.0 and BouncyCastle.Cryptography to 2.7.0 (#​1739) @​markmario
  • chore(deps): Bump the actions group with 10 updates (#​1730) @​dependabot[bot]

Commits viewable in compare view.

Updated Testcontainers.Redis from 4.13.0 to 4.15.0.

Release notes

Sourced from Testcontainers.Redis's releases.

4.15.0

What's Changed

The NuGet packages for this release have been attested for supply chain security using actions/attest. This confirms the integrity and provenance of the artifacts and helps ensure they can be trusted: #​45594466.

🚀 Features

  • feat: Add options to the Docker Compose up and down command (#​1759) @​HofmeisterAn
  • feat: Add QuestDB module (#​1618) @​FortuneN, @​HofmeisterAn
  • feat: Add Compose support (#​1750) @​HofmeisterAn
  • fix(Couchbase): Treat an already provisioned cluster as configured (#​1736) @​arnelirobles, @​HofmeisterAn
  • feat: Retry transient Docker image pull failures (#​1734) @​thomhurst, @​HofmeisterAn
  • chore(deps): Split Dependabot NuGet jobs and bump test dependencies (#​1746) @​HofmeisterAn
  • feat(MongoDb): Resolve the MongoDb shel...

_Descript...

Description has been truncated

@dependabot
Bump the dependencies group with 25 updates
108c17f 
Bumps AngleSharp from 1.5.2 to 1.8.2
Bumps Microsoft.AspNetCore.OpenApi from 10.0.10 to 10.0.12
Bumps Microsoft.Extensions.AI.Abstractions from 10.8.1 to 10.10.0
Bumps Microsoft.Extensions.Caching.Memory from 10.0.10 to 10.0.12
Bumps Microsoft.Extensions.Caching.StackExchangeRedis from 10.0.10 to 10.0.12
Bumps Microsoft.Extensions.Configuration from 10.0.10 to 10.0.12
Bumps Microsoft.Extensions.Configuration.Binder from 10.0.10 to 10.0.12
Bumps Microsoft.Extensions.Configuration.EnvironmentVariables from 10.0.10 to 10.0.12
Bumps Microsoft.Extensions.Http from 10.0.10 to 10.0.12
Bumps Microsoft.NET.Test.Sdk from 18.8.1 to 18.10.1
Bumps Microsoft.Playwright from 1.61.0 to 1.62.0
Bumps Microsoft.Playwright.Xunit from 1.61.0 to 1.62.0
Bumps OpenAI from 2.12.0 to 2.14.0
Bumps OpenTelemetry.Exporter.OpenTelemetryProtocol from 1.17.0 to 1.18.0
Bumps OpenTelemetry.Extensions.Hosting from 1.17.0 to 1.18.0
Bumps OpenTelemetry.Instrumentation.AspNetCore from 1.17.0 to 1.18.0
Bumps OpenTelemetry.Instrumentation.Http from 1.17.0 to 1.18.0
Bumps System.Memory.Data from 10.0.10 to 10.0.12
Bumps System.ServiceModel.Syndication from 10.0.10 to 10.0.12
Bumps Testcontainers from 4.13.0 to 4.15.0
Bumps Testcontainers.Redis from 4.13.0 to 4.15.0
Bumps Testcontainers.Xunit from 4.13.0 to 4.15.0
Bumps xunit.runner.visualstudio from 3.1.5 to 4.0.0
Bumps ZiggyCreatures.FusionCache from 2.6.0 to 2.8.0
Bumps ZiggyCreatures.FusionCache.Serialization.SystemTextJson from 2.6.0 to 2.8.0

---
updated-dependencies:
- dependency-name: AngleSharp
  dependency-version: 1.8.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: Microsoft.AspNetCore.OpenApi
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: Microsoft.Extensions.AI.Abstractions
  dependency-version: 10.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: Microsoft.Extensions.Caching.Memory
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: Microsoft.Extensions.Caching.StackExchangeRedis
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: Microsoft.Extensions.Configuration
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: Microsoft.Extensions.Configuration.Binder
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: Microsoft.Extensions.Configuration.EnvironmentVariables
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: Microsoft.Extensions.Http
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.10.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: Microsoft.Playwright
  dependency-version: 1.62.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: Microsoft.Playwright.Xunit
  dependency-version: 1.62.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: OpenAI
  dependency-version: 2.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: OpenTelemetry.Exporter.OpenTelemetryProtocol
  dependency-version: 1.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: OpenTelemetry.Extensions.Hosting
  dependency-version: 1.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: OpenTelemetry.Instrumentation.AspNetCore
  dependency-version: 1.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: OpenTelemetry.Instrumentation.Http
  dependency-version: 1.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: System.Memory.Data
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: System.ServiceModel.Syndication
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: Testcontainers
  dependency-version: 4.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: Testcontainers.Redis
  dependency-version: 4.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: Testcontainers.Xunit
  dependency-version: 4.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: xunit.runner.visualstudio
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: ZiggyCreatures.FusionCache
  dependency-version: 2.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: ZiggyCreatures.FusionCache.Serialization.SystemTextJson
  dependency-version: 2.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Sep 18, 2026
@dependabot dependabot Bot mentioned this pull request Sep 18, 2026
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants