Bump the nuget group with 6 updates#601
Merged
Merged
Conversation
dependabot
Bot
added
.NET
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
Keboo
force-pushed
the
dependabot/nuget/nuget-274e816239
branch
from
July 18, 2026 20:26
59e864f to
27df358
Compare
Bumps Aspire.Hosting.JavaScript from 13.4.5 to 13.4.6 Bumps MessagePack from 3.1.7 to 3.1.8 Bumps Microsoft.AspNetCore.Mvc.Testing from 10.0.9 to 10.0.10 Bumps Microsoft.Extensions.TimeProvider.Testing from 10.7.0 to 10.8.0 Bumps Microsoft.NET.Test.Sdk from 18.6.0 to 18.8.1 Bumps OpenTelemetry.Exporter.InMemory from 1.16.0 to 1.17.0 --- updated-dependencies: - dependency-name: Aspire.Hosting.JavaScript dependency-version: 13.4.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget - dependency-name: MessagePack dependency-version: 3.1.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget - dependency-name: Microsoft.AspNetCore.Mvc.Testing dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget - dependency-name: Microsoft.Extensions.TimeProvider.Testing dependency-version: 10.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 18.8.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget - dependency-name: OpenTelemetry.Exporter.InMemory dependency-version: 1.17.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget ... Signed-off-by: dependabot[bot] <support@github.com>
Summary - Code CoverageSummary
CoveragePointerStar.Server - 68.1%
PointerStar.Shared - 91.3%
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Updated Aspire.Hosting.JavaScript from 13.4.5 to 13.4.6.
Release notes
Sourced from Aspire.Hosting.JavaScript's releases.
13.4.6
What's New in Aspire 13.4.6
Patch release for Aspire 13.4 fixing polyglot AppHost code generation binding when CLI and SDK versions diverge, resource service port collision in
--isolatedmode, and a MongoDB.Driver dependency update.🐛 Fixes
🔗 Polyglot AppHost code generation silently failed when CLI and SDK versions diverged —
Aspire.TypeSystemused a floating strong-nameAssemblyVersionthat changed with every build. When the installed Aspire CLI was built at a different version than the AppHost's SDK, the CLR couldn't satisfy the strong-name bind and every code generator (TypeScript, Python, Java, Go, Rust) was silently dropped, surfacing asNo code generator found for language: <lang>. TheAssemblyVersionis now frozen at a stable constant so any compatible CLI/SDK pair on 13.4 binds successfully. Relates to #18110 and #17910. (#18160,@sebastienros)🔌 Multiple AppHosts started with
--isolatedcollided on the resource service port — Both instances tried to bind to the same fixed port fromASPIRE_RESOURCE_SERVICE_ENDPOINT_URL, causing an "address already in use" error on the second instance.DashboardServiceHostnow binds to port 0 on loopback whenRandomizePortsis true (set by--isolated), letting the OS assign a unique port per instance. (#18341,@JamesNK)🍃 MongoDB.Driver updated to 3.9.0 — Removes a wrongly pinned
SharpCompresstransitive dependency and uses the correctedSnappiertransitive. Fixes #17981. (#18279,@Falco20019)🏷️ Housekeeping
Full Changelog: v13.4.5...v13.4.6
Full commit: 87fe259e4fc244c599019a7b1304c85a1488f248
Commits viewable in compare view.
Updated MessagePack from 3.1.7 to 3.1.8.
Release notes
Sourced from MessagePack's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated Microsoft.AspNetCore.Mvc.Testing from 10.0.9 to 10.0.10.
Release notes
Sourced from Microsoft.AspNetCore.Mvc.Testing's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated Microsoft.Extensions.TimeProvider.Testing from 10.7.0 to 10.8.0.
Release notes
Sourced from Microsoft.Extensions.TimeProvider.Testing's releases.
10.8.0
This release adds new experimental APIs to Microsoft.Extensions.AI.Abstractions and updates the OpenAI dependency to 2.12.0, alongside documentation, test, and repository maintenance.
Experimental API Changes
New Experimental APIs
AIFunctionNameAttributeandAIParameterNameAttribute#7610 by @jozkee (co-authored by @jeffhandley @Copilot)ToolApprovalRequestContent.RequiresConfirmation(MEAI001) #7549 by @javiercn (co-authored by @Copilot)What's Changed
AI
Vector Data
Documentation Updates
Test Improvements
Repository Infrastructure Updates
... (truncated)
Commits viewable in compare view.
Updated Microsoft.NET.Test.Sdk from 18.6.0 to 18.8.1.
Release notes
Sourced from Microsoft.NET.Test.Sdk's releases.
18.8.1
What's Changed
Full Changelog: microsoft/vstest@v18.8.0...v18.8.1
18.8.0
What's Changed
Full Changelog: microsoft/vstest@v18.7.0...v18.8.0
18.7.0
What's Changed
New Contributors
Full Changelog: microsoft/vstest@v18.6.0...v18.7.0
Commits viewable in compare view.
Updated OpenTelemetry.Exporter.InMemory from 1.16.0 to 1.17.0.
Release notes
Sourced from OpenTelemetry.Exporter.InMemory's releases.
1.17.0
For highlights and announcements pertaining to this release see: Release Notes > 1.17.0.
The following changes are from the previous release 1.17.0-rc.1.
NuGet: OpenTelemetry v1.17.0
No notable changes.
See CHANGELOG for details.
NuGet: OpenTelemetry.Api v1.17.0
No notable changes.
See CHANGELOG for details.
NuGet: OpenTelemetry.Api.ProviderBuilderExtensions v1.17.0
No notable changes.
See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.Console v1.17.0
No notable changes.
See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.InMemory v1.17.0
No notable changes.
See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.OpenTelemetryProtocol v1.17.0
No notable changes.
See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.Zipkin v1.17.0
No notable changes.
See CHANGELOG for details.
NuGet: OpenTelemetry.Extensions.Hosting v1.17.0
No notable changes.
... (truncated)
1.17.0-rc.1
The following changes are from the previous release 1.16.0.
NuGet: OpenTelemetry v1.17.0-rc.1
Fixed a metric point reclaim data race on CPU ARM architectures.
(#7401)
The library is now marked as trim and AOT compatible.
(#7441)
Replaced the vendored copy of
EnvironmentVariablesConfigurationProviderwith a directMicrosoft.Extensions.Configuration.EnvironmentVariablespackage dependency.Consumers gain automatic pickup of upstream bug fixes and security patches;
no public API or behavioural change.
(#7146)
Added a verbose
OpenTelemetry-Sdkself-diagnostics event that is emittedwhen an activity is dropped because its local (in-process) parent is not
recorded.
(#7427)
Added support for a Schema URL on
Resourceinstances.(#7472)
Fixed a metric storage leak that occurred when meters and instruments were
repeatedly created and disposed.
(#7466)
Added
ExcludedTagKeysproperty toMetricStreamConfigurationto supportexcluding specific tag keys from metric streams.
(#7373)
See CHANGELOG for details.
NuGet: OpenTelemetry.Api v1.17.0-rc.1
Fixed
TraceContextPropagatorto normalize emptytracestateheader valuesto
nullwhen extracting trace context.(#7407,
#7433)
The library is now marked as trim and AOT compatible.
(#7441)
Experimental (pre-release builds only): Updated
EnvironmentVariableCarrier.Getto read only the normalized environment variable name, following the updated
environment variable carrier specification.
Non-normalized carrier keys are no longer matched, even when they would
normalize to the requested key.
... (truncated)
1.17.0-beta.1
The following changes are from the previous release 1.16.0-beta.1.
NuGet: OpenTelemetry.Exporter.Prometheus.AspNetCore v1.17.0-beta.1
Added a verbose-level diagnostic event for ignored metrics.
(#7429)
The library is now marked as trim and AOT compatible.
(#7441)
Fix double unit suffixes in metric names when using OpenMetrics.
(#7454)
Fix incorrect handling of leading digits in metric names for OpenMetrics.
(#7454)
Add
PrometheusAspNetCoreOptions.ScopeInfoEnabledproperty to enable ordisable scope labels in Prometheus metrics. Defaults to
true.(#7436)
Added support for the
dotsandvaluesPrometheus UTF-8 name escapingschemes when negotiated via the
Acceptheader.(#7439)
Add
PrometheusAspNetCoreOptions.TargetInfoEnabledproperty to enable ordisable the
target_infometric in Prometheus metrics. Defaults totrue.(#7438)
Added support for the
allow-utf-8Prometheus UTF-8 name escaping schemewhen negotiated via the
Acceptheader.(#7440)
Add
PrometheusAspNetCoreOptions.ResourceConstantLabelsproperty to selectresource attributes to add to each metric as constant labels. Defaults to
null(no resource attributes are added as metric labels).(#7471)
Add
PrometheusAspNetCoreOptions.MaxScrapeResponseSizeBytesto configurethe maximum size of a scrape response. The default is now ~166 MiB.
(#7487)
A scrape whose serialized output exceeds the maximum scrape response size
limit now responds with HTTP 500.
(#7487)
Fixed the Prometheus text exposition format emitting redundant comments.
(#7491)
Made
Acceptheader content negotiation consistent with thePrometheusHttpListenerendpoint.... (truncated)
Commits viewable in compare view.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions