deps: Bump the nuget-dependencies group with 5 updates#129
Merged
PlagueHO merged 2 commits intoMay 26, 2026
Merged
Conversation
Bumps Aspire.Hosting.JavaScript from 13.3.2 to 13.3.5 Bumps Azure.Core from 1.56.0 to 1.57.0 Bumps Microsoft.Azure.Cosmos from 3.59.0 to 3.60.0 Bumps Microsoft.Extensions.VectorData.Abstractions from 10.1.0 to 10.6.0 Bumps YamlDotNet from 17.1.0 to 18.0.0 --- updated-dependencies: - dependency-name: Aspire.Hosting.JavaScript dependency-version: 13.3.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-dependencies - dependency-name: Azure.Core dependency-version: 1.57.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-dependencies - dependency-name: Microsoft.Azure.Cosmos dependency-version: 3.60.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-dependencies - dependency-name: Microsoft.Extensions.VectorData.Abstractions dependency-version: 10.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-dependencies - dependency-name: YamlDotNet dependency-version: 18.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: nuget-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
.net
dependabot
Bot
added
.net
…lity Agent-Logs-Url: https://github.com/PlagueHO/genai-database-explorer/sessions/5df9d8ee-6979-4b26-b597-0a6be564451c Co-authored-by: PlagueHO <7589164+PlagueHO@users.noreply.github.com>
SummarySummary
CoverageGenAIDBExplorer.Api - 54.3%
GenAIDBExplorer.Console - 27.6%
GenAIDBExplorer.Core - 56.2%
GenAIDBExplorer.ServiceDefaults - 92.5%
|
SummarySummary
CoverageGenAIDBExplorer.Api - 54.3%
GenAIDBExplorer.Console - 27.6%
GenAIDBExplorer.Core - 56.2%
GenAIDBExplorer.ServiceDefaults - 92.5%
|
PlagueHO
deleted the
dependabot/nuget/genai-database-explorer-service/nuget-dependencies-b4b596e442
branch
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Updated Aspire.Hosting.JavaScript from 13.3.2 to 13.3.5.
Release notes
Sourced from Aspire.Hosting.JavaScript's releases.
13.3.5
What's New in Aspire 13.3.5
Patch release for Aspire 13.3 with fixes for the Azure provisioning location prompt and an Aspire CLI named-pipe timeout on Linux with .NET SDK 10.0.300.
🐛 Fixes
aspire publishnow correctly populates dependent server-controlled fields (such as Location). Previously, server-provided values for disabled inputs were discarded, leaving those fields blank. (#17278, backported via #17291)DOTNET_CLI_USE_MSBUILD_SERVER=1for alldotnet run/dotnet buildinvocations. On Linux with SDK 10.0.300 this caused a named-pipe timeout that preventedaspire runfrom building the AppHost. The forced override has been removed so the SDK chooses MSBuild server behavior. Fixes #16849. (#17313, backported via #17314)🏷️ Housekeeping
Full Changelog: microsoft/aspire@v13.3.4...v13.3.5
Full commit: 70b33bcb5f64c75e3ab6f57616545f35bd43dc81
13.3.4
What's New in Aspire 13.3.4
Patch release for Aspire 13.3 with a fix for the Aspire skill description exceeding agent host limits.
🐛 Fixes
SKILL.mdgenerated byaspire agent initincluded a frontmatter description that exceeded the 1024-character limit enforced by agent hosts such as Codex and Copilot CLI, causing the Aspire skill to fail to load. The bundled skill description has been shortened to stay within the limit. (#17183, backported via #17188)🏷️ Housekeeping
Full commit: 75080796af797483231a9da2d1642b5130617565
13.3.3
What's New in Aspire 13.3.3
Patch release for Aspire 13.3 with fixes for debug log level leaking into user resources, Keycloak HTTPS endpoint token invalidation, and endpoint materialization in
HostResourceWithEndpoints.🐛 Fixes
Logging__LogLevel__Default=Debugset by the app host was being inherited by all user resources, silently changing their logging verbosity. The app host now usesASPIRE_APPHOST_LOGLEVELinstead, which is scoped to Aspire processes only. (#17071, backported via #17078)httpto enable standardhttp+https://service discovery URLs. (#17058, backported via #17063)HostResourceWithEndpoints— Endpoints configured viaHostResourceWithEndpointsare now correctly materialized, ensuring endpoint resolution and service discovery work as expected. (#17091, backported via #17092)🏷️ Housekeeping
[SHOULD NOT HAPPEN] failed to update managedFieldserrors. (#17070)Full commit: a4615e7c6def6cba4703cdbd84009cd3da9a261b
Commits viewable in compare view.
Updated Azure.Core from 1.56.0 to 1.57.0.
Release notes
Sourced from Azure.Core's releases.
1.57.0
1.57.0 (2026-05-21)
Features Added
RequestContent.Create(BinaryContent)overload that adapts aSystem.ClientModel.BinaryContentinstance into aAzure.Core.RequestContentinstance.SCME0002)AzureCredentialResolverthat resolves Azure token credential sections (e.g.AzureCliCredential,ManagedIdentityCredential,ChainedTokenCredential) intoTokenCredentialinstances.ApiKeyCredentialsections are not claimed — clients dispatch onCredential.CredentialSourcethemselves.SCME0002) extensions onAzure.Identity.ConfigurationExtensions:AddAzureCredentialResolver()onIServiceCollectionandIHostApplicationBuilder— idempotent DI registration.IConfiguration.GetAzureCredentialSettings(sectionName, ...)— returnsCredentialSettings?withTokenProviderpopulated for token sources andKeypopulated for inline ApiKey sources, so a single call site can dispatch on either shape without binding aClientSettings.IConfiguration.GetAzureClientSettings<T>(sectionName, params CredentialResolver[] resolvers)— resolver-aware overload.Credential:Scopeat the credential-section root (the canonical SCM 1.12.0+ location) instead ofCredential:AdditionalProperties:Scope. SCM 1.12.0 reads both locations so existing configs continue to work.Breaking Changes
SCME0002)WithAzureCredentialextension methods onClientSettingsandIClientBuilder. For DI, useAddAzureClient<TClient, TSettings>/AddKeyedAzureClient<TClient, TSettings>(which registerAzureCredentialResolverautomatically), or callAddAzureCredentialResolver()followed byAddClient<TClient, TSettings>/AddKeyedClient<TClient, TSettings>. For standalone scenarios, useIConfiguration.GetAzureClientSettings<T>(...)orIConfiguration.GetAzureCredentialSettings(...).Commits viewable in compare view.
Updated Microsoft.Azure.Cosmos from 3.59.0 to 3.60.0.
Release notes
Sourced from Microsoft.Azure.Cosmos's releases.
3.60.0
See changelog for details.
NuGet: https://www.nuget.org/packages/Microsoft.Azure.Cosmos/3.60.0
3.60.0-preview.0
Added
Fixed
This preview release also includes all changes from 3.59.0.
See full changelog: https://github.com/Azure/azure-cosmos-dotnet-v3/blob/master/changelog.md#3600-preview0
Commits viewable in compare view.
Updated Microsoft.Extensions.VectorData.Abstractions from 10.1.0 to 10.6.0.
Release notes
Sourced from Microsoft.Extensions.VectorData.Abstractions's releases.
10.6.0
Version 10.6.0 stabilizes the response continuation token and background-response APIs in Microsoft.Extensions.AI.Abstractions. Most other AI work for May shipped in 10.5.1; this monthly release rolls those changes up alongside dependency updates and a small Resource Monitoring cleanup.
Experimental API Changes
Now Stable
MEAI001) #7512What's Changed
AI
Repository Infrastructure Updates
Acknowledgements
Full Changelog: dotnet/extensions@v10.5.2...v10.6.0
10.5.2
This patch release ships a single fix to
Microsoft.Extensions.VectorData.Abstractions, correctingStorageNameresolution when external serialization is enabled.Microsoft.Extensions.VectorData.ConformanceTests,Microsoft.Extensions.AI.Abstractions,Microsoft.Extensions.AI, andMicrosoft.Extensions.AI.OpenAIare published alongside it for version coherency — they contain no code changes from 10.5.1.Packages in this release
What's Changed
Microsoft.Extensions.VectorData.Abstractions
StorageNamebehavior when external serialization is enabled, and disable a warning fornet462. (by @roji in #7475)Full Changelog: dotnet/extensions@v10.5.1...v10.5.2
10.5.1
Version 10.5.1 of the Microsoft.Extensions.AI packages stabilizes CodeInterpreter, WebSearch, and ImageGeneration tool content types. The release adds new experimental tool search and OpenAI request policy hooks. And the OpenTelemetry gen-ai semantic conventions are updated to align with v1.41.
The 'aiagent-webapi' project template in Microsoft.Agents.AI.ProjectTemplates is updated to align with v1.3.0 of Agent Framework, updating the OpenTelemetry dependencies within the template projects as well.
Packages in this release
Experimental API Changes
Now Stable
The following types previously emitted the
MEAI001experimental diagnostic and are now stable.CodeInterpreterToolCallContentCodeInterpreterToolResultContentWebSearchToolCallContentWebSearchToolResultContentImageGenerationToolCallContentImageGenerationToolResultContentHostedImageGenerationToolImageGenerationOptionsImageGenerationResponseFormat(theHostedenum value remains experimental)IImageGeneratorand the rest of the image generation infrastructure also remain experimentalNew Experimental APIs
The following new APIs emit the
MEAI001experimental diagnostic.HostedToolSearchToolwithDeferredToolsfor tool-search-driven deferred tool loading #7471OpenAIRequestPoliciesextension hook for appendingSystem.ClientModel.PipelinePolicyinstances to outgoing OpenAI requests #7495Breaking Changes to Experimental APIs
WebSearchToolResultContent.Resultswas renamed toOutputsas part of the stabilization in #7493, aligning withCodeInterpreterToolResultContent.Outputs. The originalResultsproperty was included in version 10.4.0 and 10.5.0; this is a binary breaking change and consumers need to update to consume the updated property.... (truncated)
10.5.0
HTTP Logging Middleware APIs in
Microsoft.AspNetCore.Diagnostics.Middlewareare now stable. This release also transfersMicrosoft.Extensions.VectorData.AbstractionsandMicrosoft.Extensions.VectorData.ConformanceTestsfrom the Semantic Kernel repository into dotnet/extensions, jumping from 10.1.0 to 10.5.0 for consistent versioning. The release also delivers fixes across the AI libraries, AI Evaluation, and Service Discovery.Breaking Changes
VectorStoreVectorAttributeconstructor parameter #7460Dimensionsparameter was renamed todimensions(lowercase). This is a source-breaking change only — binary compatibility is preserved.new VectorStoreVectorAttribute(Dimensions: 1536), update it tonew VectorStoreVectorAttribute(dimensions: 1536).Experimental API Changes
Now Stable
EXTEXP0013):AddHttpLogEnricher<T>,IHttpLogEnricher, andRequestHeadersLogEnricherOptions.HeadersDataClasses#7380What's Changed
AI
Vector Data
AI Evaluation
ASP.NET Core Extensions
Service Discovery
Documentation Updates
Test Improvements
... (truncated)
10.4.1
This release of the Microsoft.Extensions.AI packages adds new experimental APIs for Realtime client sessions and Text-to-Speech, along with OpenTelemetry and middleware improvements.
Packages in this release
Experimental API Changes
New Experimental APIs
Changes to Experimental APIs
NotSupportedException#7394What's Changed
AI
ITextToSpeechClientabstraction, middleware, and OpenAI implementation #7381 by @stephentoubVoiceActivityDetectionoptions to realtime session abstractions #7399 by @tarekghUriContentmediaTypeparameter optional with inference from URI file extension #7398 by @stephentoub (co-authored by @Copilot)gen_ai.client.operation.exceptionviaILogger LoggerMessageon OpenTelemetry instrumentation classes #7379 by @stephentoub (co-authored by @Copilot)invoke_workflowas an equivalent parent span toinvoke_agentinFunctionInvokingChatClient#7382 by @stephentoub (co-authored by @Copilot)HostedFileDownloadStreamexplicitly read-only #7394 by @stephentoub (co-authored by @Copilot)Documentation Updates
Test Improvements
Repository Infrastructure Updates
Acknowledgements
... (truncated)
10.4.0
This release advances the AI abstractions with new hosted file, web search, and reasoning content types, stabilizes MCP and tool approval APIs, adds streaming latency metrics to OpenTelemetry instrumentation, and delivers bug fixes across caching, data ingestion, and resource monitoring.
Experimental API Changes
Now Stable
MEAI001) #7299FakeLogCollector.GetLogsAsync(CancellationToken)is now stable (previouslyEXTEXP0003) #7332New Experimental APIs
AddExtendedHttpClientLoggingoverloads withwrapHandlersPipelineparameter (EXTEXP0013) #7231Removed Experimental APIs
MEAI001) #7353What's Changed
AI
Telemetry and Observability
HTTP Resilience and Diagnostics
... (truncated)
10.3.0
Experimental API Changes
Now Stable
IChatReducerinterface — graduated from experimental to stable. The interface is now stable; concrete implementations (MessageCountingChatReducer,SummarizingChatReducer,ReducingChatClient) remain experimental. #7235 by @jeffhandleyFunctionCallContentandFunctionResultContentunsealed — changed fromsealed classtoclass, enabling derivation. #7229 by @stephentoub (co-authored by @Copilot)Breaking Changes to Experimental APIs
MEAI001diagnostic ID was split into feature-specific constants. OpenAI-specific experimental APIs now useOPENAI001,OPENAI002, orSCME0001instead ofMEAI001. Consumers who suppressedMEAI001for OpenAI APIs may need to suppressOPENAI001/OPENAI002instead. #7116 by @jeffhandley (co-authored by @Copilot), #7235 by @jeffhandleyNew Experimental APIs
MessageCountingChatReducer,SummarizingChatReducer,ReducingChatClient, andUseChatReducerbuilder extension. #7235 by @jeffhandleyOPENAI001,OPENAI002). #7235 by @jeffhandleyImageGenerationToolCallContentandImageGenerationToolResultContent— added to JSON serialization infrastructure. #7275 by @stephentoub (co-authored by @Copilot)What's Changed
AI
Diagnostics, Health Checks, and Resource Monitoring
Service Discovery
... (truncated)
10.2.0
What's Changed
SummarizingChatReducerintegration tests by @MackinnonBuck in Fix expected conversation length inSummarizingChatReducerintegration tests dotnet/extensions#7119New Contributors
Full Changelog: dotnet/extensions@v10.1...v10.2.0
Commits viewable in compare view.
Updated YamlDotNet from 17.1.0 to 18.0.0.
Release notes
Sourced from YamlDotNet's releases.
18.0.0
What's Changed
BREAKING CHANGE This is a breaking change in the
TypeInspectorSkeletonclass and theITypeInspectorinterface by adding 2 methods . Quick fix to resolve those breaking changes in your own custom TypeInspector is to return false on the HasParseMethod method and return null or throw an exception on the Parse method.Full Changelog: aaubry/YamlDotNet@v17.1.0...v18.0.0
Commits viewable in compare view.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditionsThis change is