Skip to content

Bump the microsoft-dotnet group with 15 updates - #47

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/microsoft-dotnet-ad5a53b9cc
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/microsoft-dotnet-ad5a53b9cc

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 21, 2026

Copy link
Copy Markdown
Contributor

Updated Microsoft.Agents.AI from 1.23.0 to 1.25.0.

Release notes

Sourced from Microsoft.Agents.AI's releases.

1.25.0

Changes:

  • 1ab3430a4b6c8add9f08854c77544b0211a3f13c .NET: Dotnet: Add approval reuse considerations (#​9389)
  • 563eb3a9965f7c144ad697223320411c02fa349a .NET: terminate chat completions SSE stream with data: [DONE] (#​8532) [ #​8526 ]
  • 4964bdd1b2d55b8137cbc1bc85840181af05bda0 .NET: Update version for 1.25.0 release (#​9388)
  • 5abdadf262141b56f84111b89b607b2d6bd6ebaa .NET: Also include citations and error details in purview checks. (#​9375)
  • 74db3c11201f32b919781ebbb3de4f643150510b .NET: Fix reasoning remnants and handoff bounce-back (#​9174)
  • 6b57b5f4cb15ddb87a2ca4f9d958a80dd0fc8455 .NET: Upgrade A2A packages to 1.0.0-preview3 (#​9386)
  • 95feea605dbbe879f678602585c76fdb5a963b63 .NET: Automatically reject tool-approval requests that never receive a response (#​9152)
See More
  • 1b9879c58ac950ef235471209b4c5cb402972bab .NET: feat(dotnet): support closed-list workflow questions (#​9202) [ #​1530 ]
  • dcbbf7967afe877913275f1a445166a7ac301ab0 Bump the agent-memory group with 2 updates (#​9315)
  • b53d25ed1cd2f54ee5e5e5ed548bb2c5515022f3 .NET: fix: preserve agent continuation token when wrapped with UseOpenTelemetry (#​8265) [ #​8243 ]
  • f72bf952415a770a879aa19d8e397c82a765c9d0 .NET: [BREAKING] Decouple Cosmos chat metadata from partition-key strategy (#​9214)
  • 6e630f4796b84c0f72640b9cc914b7325254ad1d .NET: Isolate Foundry toolbox response cache (#​8848)
  • 1e722004da32080df18f66eae3558600333d4c92 Revert ".NET: [BREAKING] Request concise Harness progress without private reasoning (#​9004)" (#​9147)
  • 8254704d57dcc42b8542a0eeef79a25145a89e4d .NET: [BREAKING] Request concise Harness progress without private reasoning (#​9004)

This list of changes was auto generated.

1.24.0

Changes:

  • 245d4284a5018b7f446b5eac4d3add1fa5547229 .NET: Restore source-only release solution filter (#​9140) [ #​8537 ]
  • d0ccaa62761ec36c59c139940797978623fb630a .NET: Preserve explicit null session state across roundtrips (#​9012)
  • 279d97f75cb2e7eee885dcdc2c741ef7361ee903 .NET: Honor disabled recent search memory (#​9013)
  • 41e785fb9a3c853272ce0fbd2eb93364e9d1de13 .NET: Preserve lazy request messages through agent invocation (#​9017)
  • 9251bc9911d30f5035b4a75cd1c61f96c90f38a6 .NET: Update version for 1.24.0 release (#​9120)
  • 73a96cb1a90213dfc2b1d36e7c7250559fb28d5d .NET: Stabilize Anthropic agent package (#​9111) [ #​9110 ]
  • 0774607d8d3fa8a3f50cd5bda7b4c7ad400403f3 .NET: Reject sensitive declarative identifiers (#​9071)
  • 41c4f1c9b0242cfc3f2567db9f9c9a462982a4e7 .NET: Harden LocalCodeAct capability validation (#​9057)
See More
  • b9d24c8fb484c8330abe8bb9e7500ca3c3bbf46c .NET: test: add loopback destination regression coverage (#​9064)
  • bd5ab48cfdebb49b9223de0fc75c7141641927f3 .NET: Validate handoff request lifecycle before routing (#​8855)
  • 636e8562d1db4e678e0bb88f602e0bbc7318f6a4 .NET: Synchronize background task metadata and defer publication until session creation (#​8933)
  • 6ef0b73ed8ee5ae9a5cdc709edc5bfc9443d91cb .NET: Isolate GitHub Copilot attachment staging (#​8846)
  • 52fed574f05aa4c22ae4cc024679d501ec5f327a .NET: Preserve atomic cache creation across factory failures (#​8931)
  • a2f4506c0ba30cea7c9bbe907fc158c0db2cc6a3 .NET: Skip empty Foundry memory context messages (#​8932)
  • 501989469265894443ba0812264397aec986e4cd Improve MCP skill archive loading consistency (#​8937)
  • 2e8b58c06da252755c892963053f4e6b7a9417fc .NET: Return only the items between 'after' and 'before' when listing response input items (#​8872) [ #​8871 ]
  • a15c0197b2823f1197d3dc37f3411ffb0ba3cc15 .NET: document A2A authentication and tool authorization (#​8491)
  • d52db94e4b617e6fc76a13189b78d30546062481 .NET: Reject a MaxBatchSize outside 1..100 in CosmosChatHistoryProvider (#​8870) [ #​8869 ]
  • 99215f96dafa0e24491dcbc015d013f649a2b066 .NET: Update retired Claude model in 04_MultiModelService sample (#​8879) [ #​5074, #​8878 ]
  • 7634356a1de0fd5de287544113c34d32afeeba83 .NET: Fix Foundry MCP approval replay IDs (#​8873)
  • 2f5713f60e6e3036e2c21bf01068602ca1fa3a2e .NET: Preserve A2A run errors when session save fails (#​8877)
  • 2a7470a92c9bc5afb9581ccb90008f41c92a1a6a .NET: Publish synthetic terminal responses with their events (#​8885)
  • e23f3c89f29eed39ad921c21acc697a20fe066cd .NET: Validate HTTP header delimiters (#​8847)
  • 5343347312795ef589c8d8047326eb1b6ef3aa3c .NET: Allow compaction for per-service-call local chat history (#​8845)
  • 71e84a098dec7f4d4c2273759fb2ce5914419b91 .NET: Propagate ChatHistoryMemoryProvider caller cancellation (#​8813)
  • e626cef6c9536536d4dd8796ea7f1914af49596e .NET: Bind MCP approval headers to approved invocation (#​8834)
  • ba320332d496783c953246c00852f078e7594ea3 .NET: Reject protected values in declarative MCP invocations (#​8832)
  • 77f832ff1ac915ed3c4a1bddb12e43cb9aec0c86 .NET: fix(harness): honor cancellation while waiting for background agents (#​8805)
  • 202e85d0d8767180e24b5ef19e43f712a19e1953 .NET: Remove unused GitTag property (#​8827)
  • 763887452f371d8d03a67993ec7adcd95a0e18c2 .NET: Dispose AI context streaming enumerators (#​8812)
  • 7a98aa9f3c2136ce012e552f62286d7225b2f910 .NET: Honor a zero message limit in ValkeyChatHistoryProvider (#​8809)
  • 06e9b48937d5f6c46da8f89817e51364a10cfb19 .NET: Python: Add optional OAuth consent origin allowlist to Foundry hosting (#​8713)

This list of changes was auto generated.

Commits viewable in compare view.

Updated Microsoft.Data.Sqlite from 10.0.12 to 10.0.13.

Release notes

Sourced from Microsoft.Data.Sqlite's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.AI from 10.10.0 to 10.11.0.

Release notes

Sourced from Microsoft.Extensions.AI's releases.

10.11.0

.NET Extensions 10.11.0

This release adds optional scope capture for buffered logs and updates experimental HTTP latency enrichment APIs. It also includes fixes for AI streaming and function invocation, evaluation reports, HybridCache invalidation, and logging.

Experimental API Changes

New Experimental APIs

  • Optional logging-scope capture for global and per-request log buffering through GlobalLogBufferingOptions.IncludeScopes and PerRequestLogBufferingOptions.IncludeScopes (EXTEXP0003) #​7813

Breaking Changes to Experimental APIs

  • Incoming HTTP latency log enrichment: AddHttpLatencyTelemetry is renamed to AddHttpServerLatencyTelemetry and moves from HttpLatencyTelemetryServiceCollectionExtensions to HttpLoggingServiceCollectionExtensions. It remains experimental under EXTEXP0013 in this release. #​7730

What's Changed

AI

  • Yield final image when streaming with HostedImageGenerationTool #​7774 by @​iamAdarshh
  • Make the default tool-rejection message state that the decision is final #​7784 by @​manjunathshiva
  • AI: Remove obsolete OpenAI JsonPatch workaround #​7815 by @​jozkee (co-authored by @​Copilot)
  • Ignore empty model IDs in streaming responses #​7816 by @​valkiara
  • Honor FunctionInvocationContext.Terminate when the function throws #​7801 by @​gjz22
  • Fix ChatResponseUpdate.Clone dropping ContinuationToken #​7699 by @​dfedoryshchev
  • Decode non-base64 data URIs in DataContent to the octets they encode #​7798 by @​Laurianti

AI Evaluation

  • [M.E.AI.Evaluation.Reporting] Fix context and metric interpretation visualization #​7738 by @​grafanaKibana
  • Fix tokenizer attaching punctuation to number tokens #​7766 by @​tahakocal
  • Order iteration results numerically #​7769 by @​tahakocal
  • Score GLEU against the best matching reference #​7768 by @​tahakocal

Telemetry and Observability

  • Optionally preserve logging scopes in buffered log records #​7813 by @​evgenyfedorov2 (co-authored by @​Copilot)
  • Fix OOM from unbounded enumeration of ExtendedLogger tag joiners #​7819 by @​evgenyfedorov2 (co-authored by @​Copilot)
  • Fix log buffering race by removing the rule selector cache #​7803 by @​evgenyfedorov2 (co-authored by @​Copilot)

ASP.NET Core Extensions

  • Rename AddHttpLatencyTelemetry to AddHttpServerLatencyTelemetry (API-approved shape) #​7730 by @​EasyL0ver (co-authored by @​Copilot)
  • Fix ArgumentNullException in per-request log buffering at the end of a request #​7811 by @​evgenyfedorov2 (co-authored by @​Copilot)

AI Project Templates

  • Align aichatweb local vector-store keys with Guid record keys #​7804 by @​jongalloway (co-authored by @​adamsitnik @​Copilot)

Caching

... (truncated)

10.10.1

This release fixes two OpenAI integration issues: a TypeLoadException on tool-carrying Responses API calls and a streaming crash against third-party OpenAI-compatible endpoints, by upgrading the OpenAI SDK to 2.14.0.

Packages in this release

Package Version
Microsoft.Extensions.AI.OpenAI 10.10.1
Microsoft.Extensions.AI.Abstractions 10.10.1

What's Changed

AI

  • Upgrade OpenAI SDK to 2.14.0 #​7761 by @​zxyao145

Acknowledgements

  • @​zxyao145 made their first contribution in #​7761
  • @​zxyao145 submitted issue #​7760 (resolved by #​7761)
  • @​jozkee @​wtgodbe reviewed pull requests

Full Changelog: dotnet/extensions@v10.10.0...v10.10.1

Commits viewable in compare view.

Updated Microsoft.Extensions.AI.OpenAI from 10.10.1 to 10.11.0.

Release notes

Sourced from Microsoft.Extensions.AI.OpenAI's releases.

10.11.0

.NET Extensions 10.11.0

This release adds optional scope capture for buffered logs and updates experimental HTTP latency enrichment APIs. It also includes fixes for AI streaming and function invocation, evaluation reports, HybridCache invalidation, and logging.

Experimental API Changes

New Experimental APIs

  • Optional logging-scope capture for global and per-request log buffering through GlobalLogBufferingOptions.IncludeScopes and PerRequestLogBufferingOptions.IncludeScopes (EXTEXP0003) #​7813

Breaking Changes to Experimental APIs

  • Incoming HTTP latency log enrichment: AddHttpLatencyTelemetry is renamed to AddHttpServerLatencyTelemetry and moves from HttpLatencyTelemetryServiceCollectionExtensions to HttpLoggingServiceCollectionExtensions. It remains experimental under EXTEXP0013 in this release. #​7730

What's Changed

AI

  • Yield final image when streaming with HostedImageGenerationTool #​7774 by @​iamAdarshh
  • Make the default tool-rejection message state that the decision is final #​7784 by @​manjunathshiva
  • AI: Remove obsolete OpenAI JsonPatch workaround #​7815 by @​jozkee (co-authored by @​Copilot)
  • Ignore empty model IDs in streaming responses #​7816 by @​valkiara
  • Honor FunctionInvocationContext.Terminate when the function throws #​7801 by @​gjz22
  • Fix ChatResponseUpdate.Clone dropping ContinuationToken #​7699 by @​dfedoryshchev
  • Decode non-base64 data URIs in DataContent to the octets they encode #​7798 by @​Laurianti

AI Evaluation

  • [M.E.AI.Evaluation.Reporting] Fix context and metric interpretation visualization #​7738 by @​grafanaKibana
  • Fix tokenizer attaching punctuation to number tokens #​7766 by @​tahakocal
  • Order iteration results numerically #​7769 by @​tahakocal
  • Score GLEU against the best matching reference #​7768 by @​tahakocal

Telemetry and Observability

  • Optionally preserve logging scopes in buffered log records #​7813 by @​evgenyfedorov2 (co-authored by @​Copilot)
  • Fix OOM from unbounded enumeration of ExtendedLogger tag joiners #​7819 by @​evgenyfedorov2 (co-authored by @​Copilot)
  • Fix log buffering race by removing the rule selector cache #​7803 by @​evgenyfedorov2 (co-authored by @​Copilot)

ASP.NET Core Extensions

  • Rename AddHttpLatencyTelemetry to AddHttpServerLatencyTelemetry (API-approved shape) #​7730 by @​EasyL0ver (co-authored by @​Copilot)
  • Fix ArgumentNullException in per-request log buffering at the end of a request #​7811 by @​evgenyfedorov2 (co-authored by @​Copilot)

AI Project Templates

  • Align aichatweb local vector-store keys with Guid record keys #​7804 by @​jongalloway (co-authored by @​adamsitnik @​Copilot)

Caching

... (truncated)

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration from 10.0.12 to 10.0.13.

Release notes

Sourced from Microsoft.Extensions.Configuration's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.DependencyInjection from 10.0.12 to 10.0.13.

Release notes

Sourced from Microsoft.Extensions.DependencyInjection's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.DependencyInjection.Abstractions from 10.0.12 to 10.0.13.

Release notes

Sourced from Microsoft.Extensions.DependencyInjection.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Hosting from 10.0.12 to 10.0.13.

Release notes

Sourced from Microsoft.Extensions.Hosting's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Http from 10.0.12 to 10.0.13.

Release notes

Sourced from Microsoft.Extensions.Http's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Logging.Abstractions from 10.0.12 to 10.0.13.

Release notes

Sourced from Microsoft.Extensions.Logging.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Options from 10.0.12 to 10.0.13.

Release notes

Sourced from Microsoft.Extensions.Options's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Options.ConfigurationExtensions from 10.0.12 to 10.0.13.

Release notes

Sourced from Microsoft.Extensions.Options.ConfigurationExtensions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.10.1 to 18.11.0.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.11.0

What's Changed

New Contributors

Full Changelog: microsoft/vstest@v18.10.1...v18.11.0

Commits viewable in compare view.

Updated System.CommandLine from 2.0.12 to 2.0.13.

Release notes

Sourced from System.CommandLine's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated System.Security.Cryptography.ProtectedData from 10.0.12 to 10.0.13.

Release notes

Sourced from System.Security.Cryptography.ProtectedData's releases.

No release notes found for this version range.

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps Microsoft.Agents.AI from 1.23.0 to 1.25.0
Bumps Microsoft.Data.Sqlite from 10.0.12 to 10.0.13
Bumps Microsoft.Extensions.AI from 10.10.0 to 10.11.0
Bumps Microsoft.Extensions.AI.OpenAI from 10.10.1 to 10.11.0
Bumps Microsoft.Extensions.Configuration from 10.0.12 to 10.0.13
Bumps Microsoft.Extensions.DependencyInjection from 10.0.12 to 10.0.13
Bumps Microsoft.Extensions.DependencyInjection.Abstractions from 10.0.12 to 10.0.13
Bumps Microsoft.Extensions.Hosting from 10.0.12 to 10.0.13
Bumps Microsoft.Extensions.Http from 10.0.12 to 10.0.13
Bumps Microsoft.Extensions.Logging.Abstractions from 10.0.12 to 10.0.13
Bumps Microsoft.Extensions.Options from 10.0.12 to 10.0.13
Bumps Microsoft.Extensions.Options.ConfigurationExtensions from 10.0.12 to 10.0.13
Bumps Microsoft.NET.Test.Sdk from 18.10.1 to 18.11.0
Bumps System.CommandLine from 2.0.12 to 2.0.13
Bumps System.Security.Cryptography.ProtectedData from 10.0.12 to 10.0.13

---
updated-dependencies:
- dependency-name: Microsoft.Agents.AI
  dependency-version: 1.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: microsoft-dotnet
- dependency-name: Microsoft.Data.Sqlite
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: microsoft-dotnet
- dependency-name: Microsoft.Extensions.AI
  dependency-version: 10.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: microsoft-dotnet
- dependency-name: Microsoft.Extensions.DependencyInjection.Abstractions
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: microsoft-dotnet
- dependency-name: Microsoft.Extensions.AI.OpenAI
  dependency-version: 10.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: microsoft-dotnet
- dependency-name: Microsoft.Extensions.Configuration
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: microsoft-dotnet
- dependency-name: Microsoft.Extensions.DependencyInjection
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: microsoft-dotnet
- dependency-name: Microsoft.Extensions.Hosting
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: microsoft-dotnet
- dependency-name: Microsoft.Extensions.Http
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: microsoft-dotnet
- dependency-name: Microsoft.Extensions.Logging.Abstractions
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: microsoft-dotnet
- dependency-name: Microsoft.Extensions.Options
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: microsoft-dotnet
- dependency-name: Microsoft.Extensions.Options.ConfigurationExtensions
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: microsoft-dotnet
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: microsoft-dotnet
- dependency-name: System.CommandLine
  dependency-version: 2.0.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: microsoft-dotnet
- dependency-name: System.Security.Cryptography.ProtectedData
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: microsoft-dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Oct 21, 2026
@coderabbitai

coderabbitai Bot commented Oct 21, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: defaults
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 45285a5f-af85-4ef8-9ea2-e6660f62df6c

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants