deps: Bump the all-dependencies group with 49 updates#96
Merged
Ryan Kearsley (ryankearsley-moj) merged 1 commit intoMay 12, 2026
Merged
Conversation
There was a problem hiding this comment.
Pull request overview
This PR updates centrally-managed NuGet package versions (including several Aspire, AWS SDK, EF Core/.NET 10, OpenTelemetry, and testing dependencies) and adds a couple of configuration-related package references to shared libraries.
Changes:
- Bumped multiple centrally-managed package versions in
Directory.Packages.props(Aspire, AWS SDK, Autofac, EF Core, OpenTelemetry, coverlet, etc.). - Added
Microsoft.Extensions.Configuration.EnvironmentVariablesandMicrosoft.Extensions.Configuration.UserSecretspackage references toMessagingandEnvironmentSetuplibraries.
Reviewed changes
Copilot reviewed 3 out of 3 changed files in this pull request and generated 3 comments.
| File | Description |
|---|---|
| src/Libraries/Messaging/Messaging.csproj | Adds configuration-related package references alongside existing hosting/DI dependencies. |
| src/Libraries/EnvironmentSetup/EnvironmentSetup.csproj | Adds configuration/hosting-related package references for the EnvironmentSetup library. |
| Directory.Packages.props | Central package version bumps across the repo. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
5cc3dcf to
a1d50e2
Compare
Sam Gibson (samgibsonmoj)
previously approved these changes
May 12, 2026
Contributor
Sam Gibson (samgibsonmoj)
left a comment
There was a problem hiding this comment.
I am happy with this, and these changes have been regression tested successfully.
Ryan Kearsley (ryankearsley-moj)
previously approved these changes
May 12, 2026
68b49f8 to
6b1abb2
Compare
cf7ad05
6b1abb2 to
cf7ad05
Compare
Sam Gibson (samgibsonmoj)
approved these changes
May 12, 2026
Ryan Kearsley (ryankearsley-moj)
approved these changes
May 12, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Updated Aspire.Hosting.RabbitMQ from 13.1.0 to 13.2.4.
Release notes
Sourced from Aspire.Hosting.RabbitMQ's releases.
13.2.4
Aspire 13.2.4
What's New in Aspire 13.2.4
Patch release addressing a security advisory in OpenTelemetry dependencies.
🐛 Fixes
🏷️ Housekeeping
13.2.4 (#16436)
13.2.3
What's New in Aspire 13.2.3
Patch release focused on CLI packaging, signing, and reliability fixes.
🐛 Fixes
🔧 Improvements
🏷️ Housekeeping
13.2.2
This is a servicing release focused on bug fixes and platform improvements.
🐛 Bug Fixes
13.2 regressions impacting IDE-based execution (#15714)
🔒 Security & Certificates
🏗️ Infrastructure & Platform
0.22.11 (#15713)
💻 CLI Improvements
13.2.1
🐛 Bug Fixes
✨ Improvements
13.2.0
Aspire 13.2
Aspire 13.2 brings major CLI enhancements, a new TypeScript AppHost (preview), dashboard data export/import, Microsoft Foundry integration, and multi-language improvements — all focused on making local development more streamlined for developers and AI coding agents
alike.
Highlights
and aspire agent (renamed from aspire mcp) for AI agent integration.
Notable breaking changes include service discovery env vars now using endpoint scheme instead of name, aspire.config.json replacing split config files, AIFoundry → Foundry rename, WithSecretBuildArg → WithBuildSecret, and updated default Azure credential behavior.
See the full list of breaking changes.
📖 Learn more
For the full details on everything in this release, check out the What's new in Aspire 13.2 documentation.
Thank you to all the community contributors who helped make this release happen! 💜
13.1.3
What's Changed
Full Changelog: microsoft/aspire@v13.1.2...v13.1.3
13.1.2
What's Changed
Full Changelog: microsoft/aspire@v13.1.1...v13.1.2
13.1.1
What's Changed
Full Changelog: microsoft/aspire@v13.1.0...v13.1.1
Commits viewable in compare view.
Updated Aspire.Hosting.Redis from 13.1.0 to 13.2.4.
Release notes
Sourced from Aspire.Hosting.Redis's releases.
13.2.4
Aspire 13.2.4
What's New in Aspire 13.2.4
Patch release addressing a security advisory in OpenTelemetry dependencies.
🐛 Fixes
🏷️ Housekeeping
13.2.4 (#16436)
13.2.3
What's New in Aspire 13.2.3
Patch release focused on CLI packaging, signing, and reliability fixes.
🐛 Fixes
🔧 Improvements
🏷️ Housekeeping
13.2.2
This is a servicing release focused on bug fixes and platform improvements.
🐛 Bug Fixes
13.2 regressions impacting IDE-based execution (#15714)
🔒 Security & Certificates
🏗️ Infrastructure & Platform
0.22.11 (#15713)
💻 CLI Improvements
13.2.1
🐛 Bug Fixes
✨ Improvements
13.2.0
Aspire 13.2
Aspire 13.2 brings major CLI enhancements, a new TypeScript AppHost (preview), dashboard data export/import, Microsoft Foundry integration, and multi-language improvements — all focused on making local development more streamlined for developers and AI coding agents
alike.
Highlights
and aspire agent (renamed from aspire mcp) for AI agent integration.
Notable breaking changes include service discovery env vars now using endpoint scheme instead of name, aspire.config.json replacing split config files, AIFoundry → Foundry rename, WithSecretBuildArg → WithBuildSecret, and updated default Azure credential behavior.
See the full list of breaking changes.
📖 Learn more
For the full details on everything in this release, check out the What's new in Aspire 13.2 documentation.
Thank you to all the community contributors who helped make this release happen! 💜
13.1.3
What's Changed
Full Changelog: microsoft/aspire@v13.1.2...v13.1.3
13.1.2
What's Changed
Full Changelog: microsoft/aspire@v13.1.1...v13.1.2
13.1.1
What's Changed
Full Changelog: microsoft/aspire@v13.1.0...v13.1.1
Commits viewable in compare view.
Updated Aspire.Hosting.SqlServer from 13.1.0 to 13.2.4.
Release notes
Sourced from Aspire.Hosting.SqlServer's releases.
13.2.4
Aspire 13.2.4
What's New in Aspire 13.2.4
Patch release addressing a security advisory in OpenTelemetry dependencies.
🐛 Fixes
🏷️ Housekeeping
13.2.4 (#16436)
13.2.3
What's New in Aspire 13.2.3
Patch release focused on CLI packaging, signing, and reliability fixes.
🐛 Fixes
🔧 Improvements
🏷️ Housekeeping
13.2.2
This is a servicing release focused on bug fixes and platform improvements.
🐛 Bug Fixes
13.2 regressions impacting IDE-based execution (#15714)
🔒 Security & Certificates
🏗️ Infrastructure & Platform
0.22.11 (#15713)
💻 CLI Improvements
13.2.1
🐛 Bug Fixes
✨ Improvements
13.2.0
Aspire 13.2
Aspire 13.2 brings major CLI enhancements, a new TypeScript AppHost (preview), dashboard data export/import, Microsoft Foundry integration, and multi-language improvements — all focused on making local development more streamlined for developers and AI coding agents
alike.
Highlights
and aspire agent (renamed from aspire mcp) for AI agent integration.
Notable breaking changes include service discovery env vars now using endpoint scheme instead of name, aspire.config.json replacing split config files, AIFoundry → Foundry rename, WithSecretBuildArg → WithBuildSecret, and updated default Azure credential behavior.
See the full list of breaking changes.
📖 Learn more
For the full details on everything in this release, check out the What's new in Aspire 13.2 documentation.
Thank you to all the community contributors who helped make this release happen! 💜
13.1.3
What's Changed
Full Changelog: microsoft/aspire@v13.1.2...v13.1.3
13.1.2
What's Changed
Full Changelog: microsoft/aspire@v13.1.1...v13.1.2
13.1.1
What's Changed
Full Changelog: microsoft/aspire@v13.1.0...v13.1.1
Commits viewable in compare view.
Updated Aspire.RabbitMQ.Client from 13.1.0 to 13.2.4.
Release notes
Sourced from Aspire.RabbitMQ.Client's releases.
13.2.4
Aspire 13.2.4
What's New in Aspire 13.2.4
Patch release addressing a security advisory in OpenTelemetry dependencies.
🐛 Fixes
🏷️ Housekeeping
13.2.4 (#16436)
13.2.3
What's New in Aspire 13.2.3
Patch release focused on CLI packaging, signing, and reliability fixes.
🐛 Fixes
🔧 Improvements
🏷️ Housekeeping
13.2.2
This is a servicing release focused on bug fixes and platform improvements.
🐛 Bug Fixes
13.2 regressions impacting IDE-based execution (#15714)
🔒 Security & Certificates
🏗️ Infrastructure & Platform
0.22.11 (#15713)
💻 CLI Improvements
13.2.1
🐛 Bug Fixes
✨ Improvements
13.2.0
Aspire 13.2
Aspire 13.2 brings major CLI enhancements, a new TypeScript AppHost (preview), dashboard data export/import, Microsoft Foundry integration, and multi-language improvements — all focused on making local development more streamlined for developers and AI coding agents
alike.
Highlights
and aspire agent (renamed from aspire mcp) for AI agent integration.
Notable breaking changes include service discovery env vars now using endpoint scheme instead of name, aspire.config.json replacing split config files, AIFoundry → Foundry rename, WithSecretBuildArg → WithBuildSecret, and updated default Azure credential behavior.
See the full list of breaking changes.
📖 Learn more
For the full details on everything in this release, check out the What's new in Aspire 13.2 documentation.
Thank you to all the community contributors who helped make this release happen! 💜
13.1.3
What's Changed
Full Changelog: microsoft/aspire@v13.1.2...v13.1.3
13.1.2
What's Changed
Full Changelog: microsoft/aspire@v13.1.1...v13.1.2
13.1.1
What's Changed
Full Changelog: microsoft/aspire@v13.1.0...v13.1.1
Commits viewable in compare view.
Updated Autofac from 9.0.0 to 9.1.0.
Release notes
Sourced from Autofac's releases.
9.1.0
This is a pretty big release for Autofac with some major new functionality!
AnyKey Support
First, Autofac now natively supports the concept of
AnyKey. It behaves the same wayAnyKeyworks in Microsoft.Extensions.DependencyInjection, but it is native to Autofac directly. The unit tests here show some very detailed examples of usage, but on a high level:Inject Service Key Into Constructors
The new
[ServiceKey]attribute allows you to inject the service key provided during resolution. This is handy in conjunction withAnyKey. Again, this is similar to the construct in Microsoft.Extensions.DependencyInjection, but with native Autofac.First, mark up your class to take the constructor parameter.
Then when you resolve the class, the service key will automatically be injected.
You can also make use of this in a lambda registration.
Metrics
Some metrics have been introduced that can allow you to capture counters on how long middleware is taking, how often lock contention occurs, and so on.
Set the
AUTOFAC_METRICSenvironment variable in your process totrueor1to enable this feature. You can see the set of counters that will become available here.... (truncated)
Commits viewable in compare view.
Updated Autofac.Extensions.DependencyInjection from 10.0.0 to 11.0.0.
Release notes
Sourced from Autofac.Extensions.DependencyInjection's releases.
11.0.0
Breaking Changes
AnyKeysupport to use the new native support forAnyKeyin core Autofac - this removes some of the custom internals used to support keyed services and moves that to core Autofac.Other Changes
Full Changelog: autofac/Autofac.Extensions.DependencyInjection@v10.0.0...v11.0.0
Commits viewable in compare view.
Updated AWSSDK.Extensions.NETCore.Setup from 4.0.3.15 to 4.0.3.36.
Release notes
Sourced from AWSSDK.Extensions.NETCore.Setup's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated AWSSDK.S3 from 4.0.14.1 to 4.0.22.2.
Release notes
Sourced from AWSSDK.S3's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated AWSSDK.SecurityToken from 4.0.5.2 to 4.0.6.3.
Release notes
Sourced from AWSSDK.SecurityToken's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated CommunityToolkit.Aspire.Hosting.Minio from 13.0.0 to 13.1.1.
Release notes
Sourced from CommunityToolkit.Aspire.Hosting.Minio's releases.
13.1.1
Small fix release that includes a missing API surface area file.
What's Changed
Full Changelog: CommunityToolkit/Aspire@v13.1.0...v13.1.1
13.1.0
Happy 2026 everyone, and welcome to the first release for 2026!
Big ticket items this release are:
There is one potentially breaking change in this release with Dapr - we've found some of the tests are failing in CI for reasons we can't figure out, so as a result we're marking the Dapr integrations as preview. Nothing has actually changed in them, but there may be something underlying that has changed, so be aware and if you do find problems - report them!
What's Changed
New Contributors
... (truncated)
Commits viewable in compare view.
Updated CommunityToolkit.Aspire.Hosting.SqlDatabaseProjects from 13.0.0 to 13.1.1.
Release notes
Sourced from CommunityToolkit.Aspire.Hosting.SqlDatabaseProjects's releases.
13.1.1
Small fix release that includes a missing API surface area file.
What's Changed
Full Changelog: CommunityToolkit/Aspire@v13.1.0...v13.1.1
13.1.0
Happy 2026 everyone, and welcome to the first release for 2026!
Big ticket items this release are:
There is one potentially breaking change in this release with Dapr - we've found some of the tests are failing in CI for reasons we can't figure out, so as a result we're marking the Dapr integrations as preview. Nothing has actually changed in them, but there may be something underlying that has changed, so be aware and if you do find problems - report them!
What's Changed
New Contributors
... (truncated)
Commits viewable in compare view.
Updated CommunityToolkit.Aspire.Minio.Client from 13.0.0 to 13.1.1.
Release notes
Sourced from CommunityToolkit.Aspire.Minio.Client's releases.
13.1.1
Small fix release that includes a missing API surface area file.
What's Changed
Full Changelog: CommunityToolkit/Aspire@v13.1.0...v13.1.1
13.1.0
Happy 2026 everyone, and welcome to the first release for 2026!
Big ticket items this release are:
There is one potentially breaking change in this release with Dapr - we've found some of the tests are failing in CI for reasons we can't figure out, so as a result we're marking the Dapr integrations as preview. Nothing has actually changed in them, but there may be something underlying that has changed, so be aware and if you do find problems - report them!
What's Changed
New Contributors
... (truncated)
Commits viewable in compare view.
Updated coverlet.collector from 6.0.4 to 10.0.0.
Release notes
Sourced from coverlet.collector's releases.
10.0.0
Improvements
--coverlet-file-prefixoption for unique report files #1869Fixed
Maintenance
Diff between 8.0.1 and 10.0.0
8.0.1
Fixed
Description has been truncated
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase man...
Description has been truncated