Bump the minor-dependencies group with 14 updates by dependabot[bot] · Pull Request #206 · dennisdoomen/packageguard

This release adds new experimental APIs to Microsoft.Extensions.AI.Abstractions and updates the OpenAI dependency to 2.12.0, alongside documentation, test, and repository maintenance.

Experimental API Changes

New Experimental APIs

New experimental API: AIFunctionNameAttribute and AIParameterNameAttribute #7610 by @jozkee (co-authored by @jeffhandley @Copilot)
New experimental API: ToolApprovalRequestContent.RequiresConfirmation (MEAI001) #7549 by @javiercn (co-authored by @Copilot)

What's Changed

AI

Upgrade OpenAI dependency to 2.12.0 #7608 by @jozkee (co-authored by @Copilot)
Auto-detect audio format in OpenAISpeechToTextClient #7575 by @jozkee (co-authored by @Copilot)
Fix ImageGeneratingChatClient duplicating preceding content and dropping following content #7624 by @jozkee (co-authored by @Copilot)

Vector Data

Make all test methods virtual in VectorData.ConformanceTests #7606 by @adamsitnik (co-authored by @Copilot)

Documentation Updates

Remove links to ai-samples repo #7574 by @gewarren
Fix up docs with Copilot (MEVD) #7597 by @gewarren
Fix up docs with Copilot (M.E.ServiceDiscovery) #7598 by @gewarren (co-authored by @Copilot)
Fix up docs with Copilot (MEAI) #7600 by @gewarren
Fix up docs with Copilot #7601 by @gewarren

Test Improvements

Fix flaky StampedeTests and harden related test waits #7572 by @jeffhandley (co-authored by @Copilot)
Fix SQLitePCLRaw.lib.e_sqlite3 vulnerability by replacing SemanticKernel connectors with CommunityToolkit #7579 by @adamsitnik (co-authored by @Copilot)
Removing SemanticKernel Connectors dependency and replacing it #7584 by @adamsitnik (co-authored by @Copilot)
Migrate to xUnit v3 #7607 by @adamsitnik (co-authored by @shyamnamboodiripad @Copilot)

Repository Infrastructure Updates

Update OTel GenAI conventions skill for standalone semconv-genai repo #7519 by @jeffhandley (co-authored by @Copilot)
Bump dotnet-coverage from 18.7.0 to 18.8.0 #7552
[main] Update dependencies from dotnet/arcade #7559
Fix transitive MessagePack vulnerability in AI template AppHost projects #7561 by @adamsitnik (co-authored by @Copilot)
Bump esbuild, @vitejs/plugin-react and vite in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #7564
Bump tmp from 0.2.6 to 0.2.7 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #7569
Bump js-yaml from 4.1.1 to 4.2.0 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #7570
Bump PowerShell from 7.6.2 to 7.6.3 #7576
Remove duplicate 'WebAPI' classification from template #7577 by @danroth27
[main] Update dependencies from dotnet/arcade #7590
Eliminate redundant Correctness CI stage by merging into Build #7594 by @adamsitnik (co-authored by @Copilot)
Update Agent Framework to 1.13.0 #7613 by @jeffhandley (co-authored by @Copilot)
... (truncated)

Commits viewable in compare view.

Updated Microsoft.Extensions.Logging.Abstractions from 10.0.9 to 10.0.10.

Release notes

Sourced from Microsoft.Extensions.Logging.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Logging.Console from 10.0.9 to 10.0.10.

Release notes

Sourced from Microsoft.Extensions.Logging.Console's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.7.0 to 18.8.1.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.8.1 What's Changed

Fix protocol negotiation timeout when STJ reflection is disabled (18.8.1) by @nohwnd in Fix protocol negotiation timeout when STJ reflection is disabled (18.8.1) microsoft/vstest#16281

Full Changelog: microsoft/vstest@v18.8.0...v18.8.1

18.8.0 What's Changed

Migrate from Newtonsoft.Json to System.Text.Json / Jsonite (merge to main) by @nohwnd in feat: migrate from Newtonsoft.Json to System.Text.Json / Jsonite (merge to main) microsoft/vstest#15687
- For more detail refer to https://devblogs.microsoft.com/dotnet/vs-test-is-removing-its-newtonsoft-json-dependency/
Create source-only filter package by @Youssef1313 in Create source-only filter package microsoft/vstest#15638
Add ARM64 msdia140.dll support to test platform packages by @nohwnd in Cherry-pick: Add ARM64 msdia140.dll support to test platform packages microsoft/vstest#15692
Fix mutex cleanup crash on macOS/Linux by @nohwnd in Fix mutex cleanup crash on macOS/Linux microsoft/vstest#15684
Restrict artifact temp directory permissions on Unix by @nohwnd in Restrict artifact temp directory permissions on Unix microsoft/vstest#15729
Add support for filtering uncategorized tests with TestCategory=None by @Evangelink in Add support for filtering uncategorized tests with TestCategory=None microsoft/vstest#15727
Fix SCI binding failure in DTA hosts (main) by @nohwnd in Fix SCI binding failure in DTA hosts (main) microsoft/vstest#15724
Fix HTML logger parallel file collision by @nohwnd in [fix] Fix HTML logger parallel file collision microsoft/vstest#15435
Improve error message when testhost cannot be found by @nohwnd in [fix] Improve error message when testhost cannot be found microsoft/vstest#16053
Fix HTML logger exception on invalid XML chars in test display names by @nohwnd in [fix] Fix HTML logger exception on invalid XML chars in test display names microsoft/vstest#16051

Full Changelog: microsoft/vstest@v18.7.0...v18.8.0

Commits viewable in compare view.

Updated MSTest from 4.2.3 to 4.3.2.

Release notes

Sourced from MSTest's releases.

4.3.2

See the release notes here

4.3.0

See the release notes here

Commits viewable in compare view.

Updated Serilog from 4.3.1 to 4.4.0.

Release notes

Sourced from Serilog's releases.

4.4.0 What's Changed

Emit SelfLog warning when extra arguments are provided by @matantsach in Emit SelfLog warning when extra arguments are provided serilog/serilog#2222
dont WriteQuotedJsonString for null by @SimonCropp in dont WriteQuotedJsonString for null serilog/serilog#2216
Pin System.Security.Cryptography.Xml to 8.0.3 in tests by @ArieGato in Pin System.Security.Cryptography.Xml to 8.0.3 in tests serilog/serilog#2232
Route optional interfaces through OptionalInterfaceForwardingSink for restricted sinks by @ArieGato in Route optional interfaces through OptionalInterfaceForwardingSink for restricted sinks serilog/serilog#2234
SelfMetrics by @nblumhardt in SelfMetrics serilog/serilog#2237

New Contributors

@matantsach made their first contribution in Emit SelfLog warning when extra arguments are provided serilog/serilog#2222
@ArieGato made their first contribution in Pin System.Security.Cryptography.Xml to 8.0.3 in tests serilog/serilog#2232

Full Changelog: serilog/serilog@v4.3.1...v4.4.0

Commits viewable in compare view.

Updated SharpCompress from 0.49.1 to 0.50.1.

Release notes

Sourced from SharpCompress's releases.

0.50.1 What's Changed

Fix ArgumentException in ZlibBaseStream when disposing mid-stream GZip probe in ReaderFactory by @adamhathcock with @Copilot in Fix ArgumentException in ZlibBaseStream when disposing mid-stream GZip probe in ReaderFactory adamhathcock/sharpcompress#1371
Fixes ZipWriter to be fully forward only by @adamhathcock in Fixes ZipWriter to be fully forward only adamhathcock/sharpcompress#1372
Fix tar.gz reader detection for GZip archive entry streams by @adamhathcock with @Copilot in Fix tar.gz reader detection for GZip archive entry streams adamhathcock/sharpcompress#1376

Thanks for reporting!

Full Changelog: adamhathcock/sharpcompress@0.50.0...0.50.1

0.50.0

Breaking changes:

Tar Archive does not try to decompress streams anymore. TarReader will still do this.
Detection API changed.
CRC should be more complete and enabled by default

What's Changed

Reduce LZMA Allocations by @adamhathcock in Reduce LZMA Allocations adamhathcock/sharpcompress#1335
Minor updates by @adamhathcock in Minor updates adamhathcock/sharpcompress#1345
Reduce rar allocations by @adamhathcock in Reduce rar allocations adamhathcock/sharpcompress#1336
LeaveOpen wasn't respected by GZip by @adamhathcock in LeaveOpen wasn't respected by GZip adamhathcock/sharpcompress#1346
Add pooling for arrays for deflate by @adamhathcock in Add pooling for arrays for deflate adamhathcock/sharpcompress#1347
updates docs for latest changes and ArchiveInfo by @adamhathcock in updates docs for latest changes and ArchiveInfo adamhathcock/sharpcompress#1349
Instanced buffer size by @adamhathcock in Instanced buffer size adamhathcock/sharpcompress#1354
more complete CRC checking by @adamhathcock in more complete CRC checking adamhathcock/sharpcompress#1357
xz crc check by @adamhathcock in xz crc check adamhathcock/sharpcompress#1356
BZip2: add opt-in tolerateTruncatedStream to decode a footerless/partial stream by @fiddyschmitt in BZip2: add opt-in tolerateTruncatedStream to decode a footerless/partial stream adamhathcock/sharpcompress#1358
Zip: fix Zip64 streaming reader corrupting entry size/CRC and failing on non-seekable streams by @pathartl in Zip: fix Zip64 streaming reader corrupting entry size/CRC and failing on non-seekable streams adamhathcock/sharpcompress#1362
Remove compressed tar archive by @adamhathcock in Remove compressed tar archive adamhathcock/sharpcompress#1360

New Contributors

@fiddyschmitt made their first contribution in BZip2: add opt-in tolerateTruncatedStream to decode a footerless/partial stream adamhathcock/sharpcompress#1358

Full Changelog: adamhathcock/sharpcompress@0.49.1...0.50.0

Commits viewable in compare view.

Updated Spectre.Console.Cli.Extensions.DependencyInjection from 0.26.0 to 0.27.0.

Release notes

Sourced from Spectre.Console.Cli.Extensions.DependencyInjection's releases.

0.27.0

Install the package from NuGet or download the nupkg directly below.

Commits viewable in compare view.

Updated Verify.DiffPlex from 3.1.2 to 3.3.1.

Release notes

Sourced from Verify.DiffPlex's releases.

3.3.1

#475 Fix compact output crash on empty received

3.2.0

#459 change the default OutputType to Compact

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps CliWrap from 3.10.2 to 3.10.3 Bumps Microsoft.Extensions.Configuration from 10.0.9 to 10.0.10 Bumps Microsoft.Extensions.Configuration.Binder from 10.0.9 to 10.0.10 Bumps Microsoft.Extensions.Configuration.EnvironmentVariables from 10.0.9 to 10.0.10 Bumps Microsoft.Extensions.Configuration.Json from 10.0.9 to 10.0.10 Bumps Microsoft.Extensions.Diagnostics.Testing from 10.7.0 to 10.8.0 Bumps Microsoft.Extensions.Logging.Abstractions from 10.0.9 to 10.0.10 Bumps Microsoft.Extensions.Logging.Console from 10.0.9 to 10.0.10 Bumps Microsoft.NET.Test.Sdk from 18.7.0 to 18.8.1 Bumps MSTest from 4.2.3 to 4.3.2 Bumps Serilog from 4.3.1 to 4.4.0 Bumps SharpCompress from 0.49.1 to 0.50.1 Bumps Spectre.Console.Cli.Extensions.DependencyInjection from 0.26.0 to 0.27.0 Bumps Verify.DiffPlex from 3.1.2 to 3.3.1 --- updated-dependencies: - dependency-name: CliWrap dependency-version: 3.10.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-dependencies - dependency-name: CliWrap dependency-version: 3.10.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-dependencies - dependency-name: Microsoft.Extensions.Configuration dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-dependencies - dependency-name: Microsoft.Extensions.Configuration.Binder dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-dependencies - dependency-name: Microsoft.Extensions.Configuration.EnvironmentVariables dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-dependencies - dependency-name: Microsoft.Extensions.Configuration.Json dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-dependencies - dependency-name: Microsoft.Extensions.Diagnostics.Testing dependency-version: 10.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-dependencies - dependency-name: Microsoft.Extensions.Logging.Abstractions dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-dependencies - dependency-name: Microsoft.Extensions.Logging.Console dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-dependencies - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 18.8.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-dependencies - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 18.8.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-dependencies - dependency-name: MSTest dependency-version: 4.3.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-dependencies - dependency-name: Serilog dependency-version: 4.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-dependencies - dependency-name: SharpCompress dependency-version: 0.50.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-dependencies - dependency-name: Spectre.Console.Cli.Extensions.DependencyInjection dependency-version: 0.27.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-dependencies - dependency-name: Verify.DiffPlex dependency-version: 3.3.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-07-27T10:33:47Z

Test Results

3 files ±0 3 suites ±0 3m 38s ⏱️ -1s
168 tests ±0 168 ✅ ±0 0 💤 ±0 0 ❌ ±0
335 runs ±0 335 ✅ ±0 0 💤 ±0 0 ❌ ±0

Results for commit 51a5a90. ± Comparison against base commit 95c0831.

♻️ This comment has been updated with latest results.

Verify.DiffPlex 3.3.1 requires Verify >=31.24.1, but Verify.Xunit 31.12.5 (the latest available) pins Verify to exactly 31.12.5. NuGet resolves the transitive Verify dependency to the higher 31.24.1, causing a MethodAccessException in ApiApproval.ApproveApi because Verify.Xunit's internals no longer match. Keeping Verify.DiffPlex at 3.1.2 (compatible with Verify 27.0.0+) resolves the mismatch until Verify.Xunit publishes a version compatible with newer Verify.DiffPlex releases. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

coveralls · 2026-07-27T16:56:34Z

Coverage Report for CI Build 30286352178

Coverage remained the same at 77.472%

Details

Coverage remained the same as the base build.
Patch coverage: No coverable lines changed in this PR.
No coverage regressions found.

Uncovered Changes

No uncovered changes found.

Coverage Regressions

No coverage regressions found.

Coverage Stats


Relevant Lines:	5585
Covered Lines:	4500
Line Coverage:	80.57%
Relevant Branches:	2294
Covered Branches:	1604
Branch Coverage:	69.92%
Branches in Coverage %:	Yes
Coverage Strength:	2147.68 hits per line

💛 - Coveralls

dependabot Bot added .NET Pull requests that update .net code dependencies Pull requests that update a dependency file labels Jul 27, 2026

dennisdoomen merged commit b98631f into main Jul 27, 2026
8 checks passed

dennisdoomen deleted the dependabot/nuget/Build/minor-dependencies-cb7db4b7be branch July 27, 2026 16:56

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the minor-dependencies group with 14 updates - #206

Bump the minor-dependencies group with 14 updates#206
dennisdoomen merged 2 commits into
mainfrom
dependabot/nuget/Build/minor-dependencies-cb7db4b7be

dependabot Bot commented on behalf of github Jul 27, 2026

Uh oh!

github-actions Bot commented Jul 27, 2026 •

edited

Loading

Uh oh!

Uh oh!

coveralls commented Jul 27, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 27, 2026

3.10.3

What's Changed

Bugs

New Contributors

10.8.0

Experimental API Changes

New Experimental APIs

What's Changed

AI

Vector Data

Documentation Updates

Test Improvements

Repository Infrastructure Updates

18.8.1

What's Changed

18.8.0

What's Changed

4.3.2

4.3.0

4.4.0

What's Changed

New Contributors

0.50.1

What's Changed

0.50.0

What's Changed

New Contributors

0.27.0

3.3.1

3.2.0

Uh oh!

github-actions Bot commented Jul 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Test Results

Uh oh!

Uh oh!

coveralls commented Jul 27, 2026

Coverage Report for CI Build 30286352178

Coverage remained the same at 77.472%

Details

Uncovered Changes

Coverage Regressions

Coverage Stats

💛 - Coveralls

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

github-actions Bot commented Jul 27, 2026 •

edited

Loading