Skip to content

Update nuget non-major dependencies - #26

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/nuget-minor-patch
Open

Update nuget non-major dependencies#26
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/nuget-minor-patch

Conversation

@renovate

@renovate renovate Bot commented Jun 25, 2026

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
Altinn.Platform.Storage.Interface 4.1.04.7.1 age confidence
Azure.Identity (source) 1.17.11.21.0 age confidence
Azure.Monitor.OpenTelemetry.AspNetCore (source) 1.4.01.6.0 age confidence
Azure.Monitor.OpenTelemetry.Exporter (source) 1.5.01.8.3 age confidence
Azure.Security.KeyVault.Secrets (source) 4.8.04.11.0 age confidence
Azure.Storage.Blobs (source) 12.22.212.29.1 age confidence
CloudNative.CloudEvents (source) 2.8.02.9.0 age confidence
CloudNative.CloudEvents.SystemTextJson (source) 2.8.02.9.0 age confidence
EFCore.NamingConventions 10.0.0-rc.210.0.1 age confidence
Microsoft.AspNetCore.Authentication.JwtBearer (source) 10.0.*10.0.1* age confidence
Microsoft.AspNetCore.OpenApi (source) 10.0.*10.0.1* age confidence
Microsoft.AspNetCore.SpaProxy (source) 10.0.*10.0.1* age confidence
Microsoft.Extensions.Azure (source) 1.13.11.14.0 age confidence
Microsoft.Extensions.Telemetry (source) 10.1.010.9.0 age confidence
Microsoft.NET.Test.Sdk 18.0.118.8.1 age confidence
Npgsql.EntityFrameworkCore.PostgreSQL 10.0.010.0.3 age confidence
OpenTelemetry.Extensions.Hosting (source) 1.15.31.17.0 age confidence
OpenTelemetry.Instrumentation.AspNetCore (source) 1.14.01.17.0 age confidence
OpenTelemetry.Instrumentation.Http (source) 1.14.01.17.0 age confidence
OpenTelemetry.Instrumentation.Runtime (source) 1.14.01.17.0 age confidence
Scalar.AspNetCore (source) 2.11.32.16.19 age confidence

Release Notes

Azure/azure-sdk-for-net (Azure.Identity)

v1.21.0

Compare Source

1.21.0 (2026-04-10)

Other Changes
  • All Azure.Identity types have been moved to Azure.Core and are now available through TypeForwardedTo attributes. This is a non-breaking change — existing code continues to work transparently. The library's version number now aligns with that of Azure.Core. See the Migration Guide for details.

v1.20.0

Compare Source

1.20.0 (2026-03-30)
Features Added
  • Added a JSON schema segment to the NuGet package that provides IntelliSense and validation for Azure.Identity credential configuration in appsettings.json.
Breaking Changes
  • AddAzureClient, AddKeyedAzureClient, and WithAzureCredential return type changed from IHostApplicationBuilder to IClientBuilder to align with the IClientBuilder composition change in System.ClientModel.

v1.19.0

Compare Source

1.19.0 (2026-03-11)

Features Added
  • Added support in ClientCertificateCredential to specify a path in the form of cert:/StoreLocation/StoreName/Thumbprint to refer to a certificate in the platform certificate store - such as the Windows Certificate Store on Windows, and the KeyChain on MacOS - instead of a file on disk. For example to load a certificate from the "My" store in the "CurrentUser" location use the path cert:/CurrentUser/My/E661583E8FABEF4C0BEF694CBC41C28FB81CD870 (A community contribution, courtesy of fowl2).
Other Changes
  • Updated Microsoft.Identity.Client and Microsoft.Identity.Client.Extensions.Msal dependencies to version 4.83.1.

v1.18.0

Compare Source

1.18.0 (2026-02-25)

Features Added
  • Added experimental Microsoft.Extensions.Configuration and Microsoft.Extensions.DependencyInjection integration for Azure SDK clients. For details, see the Configuration and Dependency Injection documentation.

  • The WorkloadIdentityCredentialOptions.IsAzureProxyEnabled property, which enables Azure Kubernetes token proxy mode, is only available in beta releases of this package.

  • AzureDeveloperCliCredential now parses JSON error output from azd auth token to extract clean error messages instead of including raw JSON in exceptions. Error messages like {"type":"consoleMessage","data":{"message":"ERROR: fetching token: ..."}} are now displayed as ERROR: fetching token: ....

v1.17.2

Compare Source

1.17.2 (2026-04-15)

Other Changes
  • Updated Microsoft.Identity.Client and Microsoft.Identity.Client.Extensions.Msal dependencies to version 4.83.1.
cloudevents/sdk-csharp (CloudNative.CloudEvents)

v2.9.0: All packages version 2.9.0 (or 3.9.0)

Changes since 2.8.0:

  • Add explicit .NET 10 target to all packages
  • Remove .NET Standard 2.1 target from all packages
  • Release CloudNative.CloudEvents.Kafka as 3.9.0, bumping the major
    version to reflect adopting a new major Confluence.Kafka version.
  • Changed CloudEvents.Amqp dependency from AMQPNetLite and
    AMQPNetLite.Serialization to just AMQPNetLite.Core
  • Performance improvements in both JSON packages
  • Dependency updates:
    • AMQPNetLite.Core: Effectively 2.4.11 => 2.5.3
    • Apache.Avro: 1.11.3 => 1.12.1
    • Confluent.Kafka: 1.93 => 2.14.2
    • Google.Protobuf: 3.27.3 => 3.35.1
    • MQTTnet: 4.3.6.1152 => 4.3.7.1207
    • Newtonsoft.Json: 13.0.3 => 13.0.4
  • Dependencies only for .NET Standard 2.0:
    • Microsoft.AspNetCore.Http: 2.1.34 => 2.3.11
    • System.Memory: 4.5.5 => 4.6.3
    • System.Text.Encodings.Web: 8.0.0 => 10.0.9
    • System.Text.Json: 8.0.4 => 10.0.9

Note on the removal of .NET Standard 2.1: we don't expect this to break users,
although it may mean additional dependencies due to falling back to .NET Standard 2.0.
Please file an issue if this causes problems for you, and we'll consider reinstating
the target.

efcore/EFCore.NamingConventions (EFCore.NamingConventions)

v10.0.1: 10.0.1

What's Changed

New Contributors

Full Changelog: efcore/EFCore.NamingConventions@v10.0.0...v10.0.1

v10.0.0: 10.0.0

What's Changed

New Contributors

Full Changelog: efcore/EFCore.NamingConventions@v9.0.0...v10.0.0

dotnet/dotnet (Microsoft.AspNetCore.Authentication.JwtBearer)

v10.0.11

v10.0.10

v10.0.9

v10.0.8

v10.0.7

v10.0.6

v10.0.5

v10.0.4

v10.0.3

v10.0.2

v10.0.1

dotnet/extensions (Microsoft.Extensions.Telemetry)

v10.9.0

Version 10.9.0 is headlined by changes in these areas:

  • AI: New experimental routing APIs center on the abstract RoutingChatClient base class, with SemanticRoutingChatClient as a concrete semantic-routing implementation. Separately, the abstract FailoverChatClient specialization and its concrete OrderedFailoverChatClient implementation add failover routing.
  • AI Evaluation: The generated report gains redesigned Overview, Cases, History, and Comparison views.
  • ASP.NET Core and HTTP diagnostics: The release adds HTTP request latency log enrichment and fixes configuration binding, response-body logging, request-path redaction, and resilience package version handling.
  • Source-generated logging and service discovery: Fixes cover classification type qualification, thread-local state cleanup, and DNS query suffix handling.

Experimental API Changes

New Experimental APIs
  • New experimental API: HTTP request latency log enrichment (EXTEXP0013) #​7602
  • New experimental API: Chat client routing and failover (MEAI001) #​7662

What's Changed

AI (Microsoft.Extensions.AI, Microsoft.Extensions.AI.Abstractions, and Microsoft.Extensions.AI.OpenAI)

Note: Microsoft.Extensions.AI.OpenAI constrains its dependency for OpenAI to 2.12.x, preventing OpenAI updates to 2.13.0+ due to an incompatibility. We expect to release Microsoft.Extensions.AI.OpenAI version 10.9.1 during the week of August 17 to address this issue.

HTTP Resilience and Diagnostics (Microsoft.Extensions.Http.Resilience and Microsoft.Extensions.Http.Diagnostics)
ASP.NET Core Extensions (Microsoft.AspNetCore.Diagnostics.Middleware)
Logging Source Generator (Microsoft.Gen.Logging)
AI Evaluation (Microsoft.Extensions.AI.Evaluation.Reporting)
Project Templates (Microsoft.McpServer.ProjectTemplates)

Note: The MCP server project template was migrated to the dotnet/aspnetcore repository, and it is now included in the .NET 10 and .NET 11 SDKs.

Service Discovery (Microsoft.Extensions.ServiceDiscovery.Dns)

Test Improvements

Repository Infrastructure Updates

  • [main] Update dependencies from dotnet/arcade #​7621
  • Merge release/10.8 into main #​7632 by @​jeffhandley (co-authored by @​jozkee @​Copilot)
  • Add agentic workflows that keep Microsoft.Extensions.AI aligned with OpenTelemetry GenAI semantic-conventions #​7611 by @​jeffhandley (co-authored by @​Copilot)
  • Bump brace-expansion, eslint and tfx-cli in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7648
  • Add a release-manager agent for the dotnet/extensions release process #​7643 by @​jeffhandley (co-authored by @​Copilot)
  • Bump CommunityToolkit.VectorData package baselines to 1.0.0 / 1.0.0-preview #​7651 by @​adamsitnik (co-authored by @​Copilot)
  • Incorporate servicing release experience into release-manager playbooks #​7656 by @​jeffhandley (co-authored by @​Copilot)
  • Bump dotnet-reportgenerator-globaltool from 5.5.10 to 5.5.11 #​7666
  • Bump adm-zip and azure-pipelines-task-lib in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript/azure-devops-report/tasks/PublishAIEvaluationReport #​7652
  • Bump postcss from 8.5.15 to 8.5.23 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7660
  • Bump PowerShell from 7.6.3 to 7.6.4 #​7650
  • [main] Update dependencies from dotnet/arcade #​7644
  • [release-manager] Require package dependency closure for releases #​7693 by @​jeffhandley (co-authored by @​Copilot)
  • Optionally allow official builds to publish VSIX extension. #​7692 by @​peterwald
  • [main] Update dependencies from dotnet/arcade #​7690

Acknowledgements

Full Changelog: dotnet/extensions@v10.8.4...v10.9.0

Packages in this release

Package Version
Microsoft.AspNetCore.Testing 10.9.0
Microsoft.Extensions.AI.Abstractions 10.9.0
Microsoft.Extensions.AI.Evaluation.Console 10.9.0
Microsoft.Extensions.AI.Templates 10.9.0-preview.3.26411.16
Microsoft.Extensions.AmbientMetadata.Application 10.9.0
Microsoft.Extensions.AmbientMetadata.Build 10.9.0
Microsoft.Extensions.AuditReports 10.9.0
Microsoft.Extensions.Caching.Hybrid 10.9.0
Microsoft.Extensions.Compliance.Abstractions 10.9.0
Microsoft.Extensions.DataIngestion.Abstractions 10.9.0-preview.1.26411.16
Microsoft.Extensions.DependencyInjection.AutoActivation 10.9.0
Microsoft.Extensions.Diagnostics.ExceptionSummarization 10.9.0
Microsoft.Extensions.ObjectPool.DependencyInjection 10.9.0
Microsoft.Extensions.Options.Contextual 10.9.0-preview.1.26411.16
Microsoft.Extensions.ServiceDiscovery.Abstractions 10.9.0
Microsoft.Extensions.StaticAnalysis 10.9.0
Microsoft.Extensions.TimeProvider.Testing 10.9.0
Microsoft.Extensions.AI 10.9.0
Microsoft.Extensions.AI.Evaluation 10.9.0
Microsoft.Extensions.AI.OpenAI 10.9.0
Microsoft.Extensions.AsyncState 10.9.0
Microsoft.Extensions.Compliance.Redaction 10.9.0
Microsoft.Extensions.Compliance.Testing 10.9.0
Microsoft.Extensions.DataIngestion.Markdig 10.9.0-preview.1.26411.16
Microsoft.Extensions.DataIngestion.MarkItDown 10.9.0-preview.1.26411.16
Microsoft.Extensions.ServiceDiscovery 10.9.0
Microsoft.Extensions.Telemetry.Abstractions 10.9.0
Microsoft.Extensions.VectorData.Abstractions 10.9.0
Microsoft.AspNetCore.AsyncState 10.9.0
Microsoft.AspNetCore.HeaderParsing 10.9.0
Microsoft.Extensions.AI.Evaluation.NLP 10.9.0-preview.1.26411.16
Microsoft.Extensions.AI.Evaluation.Quality 10.9.0
Microsoft.Extensions.AI.Evaluation.Reporting 10.9.0
Microsoft.Extensions.AI.Evaluation.Safety 10.9.0-preview.1.26411.16
Microsoft.Extensions.DataIngestion 10.9.0-preview.1.26411.16
Microsoft.Extensions.Diagnostics.HealthChecks.Common 10.9.0
Microsoft.Extensions.Diagnostics.Probes 10.9.0-preview.1.26411.16
Microsoft.Extensions.Diagnostics.ResourceMonitoring 10.9.0
Microsoft.Extensions.Diagnostics.Testing 10.9.0
Microsoft.Extensions.Resilience 10.9.0
Microsoft.Extensions.ServiceDiscovery.Dns 10.9.0
Microsoft.Extensions.ServiceDiscovery.Yarp 10.9.0
Microsoft.Extensions.Telemetry 10.9.0
Microsoft.Extensions.VectorData.ConformanceTests 10.9.0
Microsoft.AspNetCore.Diagnostics.Middleware 10.9.0
Microsoft.Extensions.AI.Evaluation.Reporting.Azure 10.9.0
Microsoft.Extensions.Diagnostics.HealthChecks.ResourceUtilization 10.9.0
Microsoft.Extensions.Diagnostics.ResourceMonitoring.Kubernetes 10.9.0
Microsoft.Extensions.Hosting.Testing 10.9.0-preview.1.26411.16
Microsoft.Extensions.Http.Diagnostics 10.9.0
Microsoft.Extensions.Http.Resilience 10.9.0

The Microsoft.Agents.AI.ProjectTemplates package is not included in this release.

v10.8.0

This release adds new experimental APIs to Microsoft.Extensions.AI.Abstractions and updates the OpenAI dependency to 2.12.0, alongside documentation, test, and repository maintenance.

Experimental API Changes
New Experimental APIs
What's Changed
AI
Vector Data
Documentation Updates
Test Improvements
Repository Infrastructure Updates
Acknowledgements

Full Changelog: dotnet/extensions@v10.7.0...v10.8.0

v10.7.0

v10.7.0 graduates the Microsoft.Extensions.Diagnostics.ResourceMonitoring.Kubernetes package to stable. The package registers a Kubernetes-aware ResourceQuotaProvider that reads the pod's CPU and memory requests and limits and exposes them to Microsoft.Extensions.Diagnostics.ResourceMonitoring as baseline and maximum quotas, which then feed the request and limit dimensions of the published resource utilization metrics. The companion ResourceQuota and ResourceQuotaProvider types in Microsoft.Extensions.Diagnostics.ResourceMonitoring graduate to stable in the same change so that consumers can implement custom quota providers without taking an experimental dependency.

On the AI side, Microsoft.Extensions.AI.OpenAI moves to OpenAI 2.11.0 and fixes a deserialization bug in ToolJson.AdditionalProperties so that JSON Schema additionalProperties values shaped as sub-schema objects (for example {"type":"string"}) are preserved instead of throwing during deserialization. HostedFileContent.SizeInBytes and HostedFileContent.CreatedAt graduate to stable since both values are consistently available across hosted-file providers, while Purpose and Scope remain experimental as provider-shaped vocabulary. FunctionInvokingChatClient drops a backward-compat path that auto-marked ToolApprovalResponseContent entries with InformationalOnly: true; consumers that need to continue accepting sessions serialized before #​7468 can use the sample ApprovalHistoryNormalizingChatClient middleware added in the test project.

Experimental API Changes
Now Stable
  • Microsoft.Extensions.Diagnostics.ResourceMonitoring.Kubernetes package is now stable #​7253
  • Resource Monitoring ResourceQuota and ResourceQuotaProvider APIs are now stable (previously EXTEXP0008) #​7253
  • HostedFileContent.SizeInBytes and HostedFileContent.CreatedAt are now stable (previously MEAI001) #​7513
What's Changed
AI
Diagnostics, Health Checks, and Resource Monitoring
Repository Infrastructure Updates
  • [main] Update dependencies from dotnet/arcade #​7521
  • Bump dotnet-reportgenerator-globaltool from 5.5.9 to 5.5.10 #​7522
  • Bump dotnet-coverage from 18.6.2 to 18.7.0 #​7530
  • Bump PowerShell from 7.6.1 to 7.6.2 #​7531
  • Bump qs from 6.15.1 to 6.15.2 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7532
  • [main] Update dependencies from dotnet/arcade #​7534
  • Bump tmp from 0.2.5 to 0.2.6 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7537
Acknowledgements

Full Changelog: dotnet/extensions@v10.6.0...v10.7.0

v10.6.0

Version 10.6.0 stabilizes the response continuation token and background-response APIs in Microsoft.Extensions.AI.Abstractions. Most other AI work for May shipped in 10.5.1; this monthly release rolls those changes up alongside dependency updates and a small Resource Monitoring cleanup.

Experimental API Changes
Now Stable
  • ResponseContinuationToken and background-response APIs are now stable (previously MEAI001) #​7512
What's Changed
AI
Repository Infrastructure Updates
  • Update version to 10.6.0 #​7458 by @​jeffhandley
  • [main] Update dependencies from dotnet/arcade #​7451
  • Bump follow-redirects from 1.15.11 to 1.16.0 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript/azure-devops-report/tasks/PublishAIEvaluationReport #​7469
  • Merge release/10.5 into main #​7470 by @​jeffhandley
  • Bump microsoft.visualstudio.slngen.tool from 12.0.13 to 12.0.32 #​7484
  • Bump postcss from 8.5.9 to 8.5.12 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7494
  • Bump dotnet-reportgenerator-globaltool from 5.5.7 to 5.5.9 #​7504
  • Rename release-notes skill to write-release-notes #​7511 by @​jeffhandley (co-authored by [@​Copilot](https://redirect.github.com/Copilot

Note

PR body was truncated to here.


Configuration

📅 Schedule: (in timezone Europe/Oslo)

  • Branch creation
    • "before 07:00 on Thursday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot force-pushed the renovate/nuget-minor-patch branch 2 times, most recently from 92b8e88 to 5e95f93 Compare July 4, 2026 02:56
@renovate
renovate Bot force-pushed the renovate/nuget-minor-patch branch 2 times, most recently from bfa600c to 7d9ec65 Compare July 18, 2026 03:39
@renovate
renovate Bot force-pushed the renovate/nuget-minor-patch branch 4 times, most recently from 731b2fb to 028a5e4 Compare July 30, 2026 23:55
@renovate
renovate Bot force-pushed the renovate/nuget-minor-patch branch from 028a5e4 to 7f473e7 Compare August 3, 2026 03:53
@renovate
renovate Bot force-pushed the renovate/nuget-minor-patch branch 2 times, most recently from 3df7b11 to a102797 Compare August 15, 2026 03:32
@renovate
renovate Bot force-pushed the renovate/nuget-minor-patch branch from a102797 to 8aa1cfc Compare August 16, 2026 10:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants