Skip to content

Update nuget non-major dependencies#26

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/nuget-minor-patch
Open

Update nuget non-major dependencies#26
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/nuget-minor-patch

Conversation

@renovate

@renovate renovate Bot commented Jun 25, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
Altinn.Platform.Storage.Interface 4.1.0 → 4.7.1 age confidence
Azure.Identity (source) 1.17.1 → 1.21.0 age confidence
Azure.Monitor.OpenTelemetry.AspNetCore (source) 1.4.0 → 1.5.0 age confidence
Azure.Monitor.OpenTelemetry.Exporter (source) 1.5.0 → 1.8.2 age confidence
Azure.Security.KeyVault.Secrets (source) 4.8.0 → 4.11.0 age confidence
Azure.Storage.Blobs (source) 12.22.2 → 12.29.1 age confidence
CloudNative.CloudEvents (source) 2.8.0 → 2.9.0 age confidence
CloudNative.CloudEvents.SystemTextJson (source) 2.8.0 → 2.9.0 age confidence
EFCore.NamingConventions 10.0.0-rc.2 → 10.0.1 age confidence
Microsoft.AspNetCore.Authentication.JwtBearer (source) 10.0.* → 10.0.1* age confidence
Microsoft.AspNetCore.OpenApi (source) 10.0.* → 10.0.1* age confidence
Microsoft.AspNetCore.SpaProxy (source) 10.0.* → 10.0.1* age confidence
Microsoft.Extensions.Azure (source) 1.13.1 → 1.14.0 age confidence
Microsoft.Extensions.Telemetry (source) 10.1.0 → 10.8.0 age confidence
Microsoft.NET.Test.Sdk 18.0.1 → 18.8.1 age confidence
Npgsql.EntityFrameworkCore.PostgreSQL 10.0.0 → 10.0.3 age confidence
OpenTelemetry.Extensions.Hosting (source) 1.15.3 → 1.17.0 age confidence
OpenTelemetry.Instrumentation.AspNetCore (source) 1.14.0 → 1.17.0 age confidence
OpenTelemetry.Instrumentation.Http (source) 1.14.0 → 1.17.0 age confidence
OpenTelemetry.Instrumentation.Runtime (source) 1.14.0 → 1.17.0 age confidence
Scalar.AspNetCore (source) 2.11.3 → 2.16.16 age confidence

Release Notes

Azure/azure-sdk-for-net (Azure.Identity)

v1.21.0

Compare Source

1.21.0 (2026-04-10)

Other Changes
  • All Azure.Identity types have been moved to Azure.Core and are now available through TypeForwardedTo attributes. This is a non-breaking change — existing code continues to work transparently. The library's version number now aligns with that of Azure.Core. See the Migration Guide for details.

v1.20.0

Compare Source

1.20.0 (2026-03-30)
Features Added
  • Added a JSON schema segment to the NuGet package that provides IntelliSense and validation for Azure.Identity credential configuration in appsettings.json.
Breaking Changes
  • AddAzureClient, AddKeyedAzureClient, and WithAzureCredential return type changed from IHostApplicationBuilder to IClientBuilder to align with the IClientBuilder composition change in System.ClientModel.

v1.19.0

Compare Source

1.19.0 (2026-03-11)

Features Added
  • Added support in ClientCertificateCredential to specify a path in the form of cert:/StoreLocation/StoreName/Thumbprint to refer to a certificate in the platform certificate store - such as the Windows Certificate Store on Windows, and the KeyChain on MacOS - instead of a file on disk. For example to load a certificate from the "My" store in the "CurrentUser" location use the path cert:/CurrentUser/My/E661583E8FABEF4C0BEF694CBC41C28FB81CD870 (A community contribution, courtesy of fowl2).
Other Changes
  • Updated Microsoft.Identity.Client and Microsoft.Identity.Client.Extensions.Msal dependencies to version 4.83.1.

v1.18.0

Compare Source

1.18.0 (2026-02-25)

Features Added

  • Added experimental Microsoft.Extensions.Configuration and Microsoft.Extensions.DependencyInjection integration for Azure SDK clients. For details, see the Configuration and Dependency Injection documentation.

  • The WorkloadIdentityCredentialOptions.IsAzureProxyEnabled property, which enables Azure Kubernetes token proxy mode, is only available in beta releases of this package.

  • AzureDeveloperCliCredential now parses JSON error output from azd auth token to extract clean error messages instead of including raw JSON in exceptions. Error messages like {"type":"consoleMessage","data":{"message":"ERROR: fetching token: ..."}} are now displayed as ERROR: fetching token: ....

v1.17.2

Compare Source

1.17.2 (2026-04-15)

Other Changes
  • Updated Microsoft.Identity.Client and Microsoft.Identity.Client.Extensions.Msal dependencies to version 4.83.1.
cloudevents/sdk-csharp (CloudNative.CloudEvents)

v2.9.0: All packages version 2.9.0 (or 3.9.0)

Changes since 2.8.0:

  • Add explicit .NET 10 target to all packages
  • Remove .NET Standard 2.1 target from all packages
  • Release CloudNative.CloudEvents.Kafka as 3.9.0, bumping the major
    version to reflect adopting a new major Confluence.Kafka version.
  • Changed CloudEvents.Amqp dependency from AMQPNetLite and
    AMQPNetLite.Serialization to just AMQPNetLite.Core
  • Performance improvements in both JSON packages
  • Dependency updates:
    • AMQPNetLite.Core: Effectively 2.4.11 => 2.5.3
    • Apache.Avro: 1.11.3 => 1.12.1
    • Confluent.Kafka: 1.93 => 2.14.2
    • Google.Protobuf: 3.27.3 => 3.35.1
    • MQTTnet: 4.3.6.1152 => 4.3.7.1207
    • Newtonsoft.Json: 13.0.3 => 13.0.4
  • Dependencies only for .NET Standard 2.0:
    • Microsoft.AspNetCore.Http: 2.1.34 => 2.3.11
    • System.Memory: 4.5.5 => 4.6.3
    • System.Text.Encodings.Web: 8.0.0 => 10.0.9
    • System.Text.Json: 8.0.4 => 10.0.9

Note on the removal of .NET Standard 2.1: we don't expect this to break users,
although it may mean additional dependencies due to falling back to .NET Standard 2.0.
Please file an issue if this causes problems for you, and we'll consider reinstating
the target.

efcore/EFCore.NamingConventions (EFCore.NamingConventions)

v10.0.1: 10.0.1

What's Changed

New Contributors

Full Changelog: efcore/EFCore.NamingConventions@v10.0.0...v10.0.1

v10.0.0: 10.0.0

What's Changed

New Contributors

Full Changelog: efcore/EFCore.NamingConventions@v9.0.0...v10.0.0

dotnet/dotnet (Microsoft.AspNetCore.Authentication.JwtBearer)

v10.0.10

v10.0.9

v10.0.8

v10.0.7

v10.0.6

v10.0.5

v10.0.4

v10.0.3

v10.0.2

v10.0.1

dotnet/extensions (Microsoft.Extensions.Telemetry)

v10.8.0

This release adds new experimental APIs to Microsoft.Extensions.AI.Abstractions and updates the OpenAI dependency to 2.12.0, alongside documentation, test, and repository maintenance.

Experimental API Changes
New Experimental APIs
What's Changed
AI
Vector Data
Documentation Updates
Test Improvements
Repository Infrastructure Updates
Acknowledgements

Full Changelog: dotnet/extensions@v10.7.0...v10.8.0

v10.7.0

v10.7.0 graduates the Microsoft.Extensions.Diagnostics.ResourceMonitoring.Kubernetes package to stable. The package registers a Kubernetes-aware ResourceQuotaProvider that reads the pod's CPU and memory requests and limits and exposes them to Microsoft.Extensions.Diagnostics.ResourceMonitoring as baseline and maximum quotas, which then feed the request and limit dimensions of the published resource utilization metrics. The companion ResourceQuota and ResourceQuotaProvider types in Microsoft.Extensions.Diagnostics.ResourceMonitoring graduate to stable in the same change so that consumers can implement custom quota providers without taking an experimental dependency.

On the AI side, Microsoft.Extensions.AI.OpenAI moves to OpenAI 2.11.0 and fixes a deserialization bug in ToolJson.AdditionalProperties so that JSON Schema additionalProperties values shaped as sub-schema objects (for example {"type":"string"}) are preserved instead of throwing during deserialization. HostedFileContent.SizeInBytes and HostedFileContent.CreatedAt graduate to stable since both values are consistently available across hosted-file providers, while Purpose and Scope remain experimental as provider-shaped vocabulary. FunctionInvokingChatClient drops a backward-compat path that auto-marked ToolApprovalResponseContent entries with InformationalOnly: true; consumers that need to continue accepting sessions serialized before #​7468 can use the sample ApprovalHistoryNormalizingChatClient middleware added in the test project.

Experimental API Changes
Now Stable
  • Microsoft.Extensions.Diagnostics.ResourceMonitoring.Kubernetes package is now stable #​7253
  • Resource Monitoring ResourceQuota and ResourceQuotaProvider APIs are now stable (previously EXTEXP0008) #​7253
  • HostedFileContent.SizeInBytes and HostedFileContent.CreatedAt are now stable (previously MEAI001) #​7513
What's Changed
AI
Diagnostics, Health Checks, and Resource Monitoring
Repository Infrastructure Updates
  • [main] Update dependencies from dotnet/arcade #​7521
  • Bump dotnet-reportgenerator-globaltool from 5.5.9 to 5.5.10 #​7522
  • Bump dotnet-coverage from 18.6.2 to 18.7.0 #​7530
  • Bump PowerShell from 7.6.1 to 7.6.2 #​7531
  • Bump qs from 6.15.1 to 6.15.2 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7532
  • [main] Update dependencies from dotnet/arcade #​7534
  • Bump tmp from 0.2.5 to 0.2.6 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7537
Acknowledgements

Full Changelog: dotnet/extensions@v10.6.0...v10.7.0

v10.6.0

Version 10.6.0 stabilizes the response continuation token and background-response APIs in Microsoft.Extensions.AI.Abstractions. Most other AI work for May shipped in 10.5.1; this monthly release rolls those changes up alongside dependency updates and a small Resource Monitoring cleanup.

Experimental API Changes
Now Stable
  • ResponseContinuationToken and background-response APIs are now stable (previously MEAI001) #​7512
What's Changed
AI
Repository Infrastructure Updates
  • Update version to 10.6.0 #​7458 by @​jeffhandley
  • [main] Update dependencies from dotnet/arcade #​7451
  • Bump follow-redirects from 1.15.11 to 1.16.0 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript/azure-devops-report/tasks/PublishAIEvaluationReport #​7469
  • Merge release/10.5 into main #​7470 by @​jeffhandley
  • Bump microsoft.visualstudio.slngen.tool from 12.0.13 to 12.0.32 #​7484
  • Bump postcss from 8.5.9 to 8.5.12 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7494
  • Bump dotnet-reportgenerator-globaltool from 5.5.7 to 5.5.9 #​7504
  • Rename release-notes skill to write-release-notes #​7511 by @​jeffhandley (co-authored by @​Copilot)
Acknowledgements

Full Changelog: dotnet/extensions@v10.5.2...v10.6.0

v10.5.0

HTTP Logging Middleware APIs in Microsoft.AspNetCore.Diagnostics.Middleware are now stable. This release also transfers Microsoft.Extensions.VectorData.Abstractions and Microsoft.Extensions.VectorData.ConformanceTests from the Semantic Kernel repository into dotnet/extensions, jumping from 10.1.0 to 10.5.0 for consistent versioning. The release also delivers fixes across the AI libraries, AI Evaluation, and Service Discovery.

Breaking Changes

  1. Rename VectorStoreVectorAttribute constructor parameter #​7460
    • The Dimensions parameter was renamed to dimensions (lowercase). This is a source-breaking change only — binary compatibility is preserved.
    • If you use the named argument syntax new VectorStoreVectorAttribute(Dimensions: 1536), update it to new VectorStoreVectorAttribute(dimensions: 1536).

Experimental API Changes

Now Stable
  • HTTP Logging Middleware APIs are now stable (previously EXTEXP0013): AddHttpLogEnricher<T>, IHttpLogEnricher, and RequestHeadersLogEnricherOptions.HeadersDataClasses #​7380

What's Changed

AI
Vector Data
  • Move Microsoft.Extensions.VectorData.Abstractions over from Semantic Kernel #​7434 by @​roji
  • Rename VectorStoreVectorAttribute dimensions constructor parameter #​7460 by @​roji
AI Evaluation
ASP.NET Core Extensions
Service Discovery

Documentation Updates

Test Improvements

Repository Infrastructure Updates

  • Bump minimatch and azure-pipelines-task-lib in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7361
  • Remove stale user-level .npmrc instead of npmAuthenticate #​7366 by @​ilonatommy
  • [main] Update dependencies from dotnet/arcade #​7374
  • Use env vars in build.ps1 to bypass stale agent npm config #​7376 by @​ilonatommy
  • Add a Release-Notes skill #​7390 by @​jeffhandley
  • Enable CFSClean* policies for extensions-ci-official pipeline #​7403 by @​mmitche
  • Fix CG alerts for Microsoft.Bcl.Memory #​7418 by @​wtgodbe
  • Bump flatted from 3.3.3 to 3.4.2 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7421
  • [main] Update dependencies from dotnet/arcade #​7422
  • Bump picomatch from 2.3.1 to 2.3.2 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7427
  • Bump picomatch in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7429
  • Stop using Mariner 2 images #​7431 by @​wtgodbe
  • [main] Update dependencies from dotnet/arcade #​7435
  • Bump brace-expansion from 1.1.12 to 1.1.13 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7440
  • Bump lodash from 4.17.23 to 4.18.1 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7455
  • Bump vite from 6.4.1 to 6.4.2 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7456
  • Correctly publish MEVD.ConformanceTests as nuget packages #​7459 by @​roji
  • Update ApiChief baselines for MEAI and MEVD #​7461 by @​jeffhandley
  • Upgrade to OpenAI 2.10.0 #​7450 by @​stephentoub
  • Use shared DiagnosticIds constants for MEVD experimental APIs #​7462 by @​jeffhandley

Acknowledgements

Full Changelog: dotnet/extensions@v10.4.1...v10.5.0

v10.4.0

This release advances the AI abstractions with new hosted file, web search, and reasoning content types, stabilizes MCP and tool approval APIs, adds streaming latency metrics to OpenTelemetry instrumentation, and delivers bug fixes across caching, data ingestion, and resource monitoring.

Experimental API Changes

Now Stable
  • MCP Server Tool Content and Function Call Approval APIs are now stable (previously MEAI001) #​7299
  • FakeLogCollector.GetLogsAsync(CancellationToken) is now stable (previously EXTEXP0003) #​7332
New Experimental APIs
  • New experimental AddExtendedHttpClientLogging overloads with wrapHandlersPipeline parameter (EXTEXP0013) #​7231
Removed Experimental APIs
  • AI Tool Reduction experimental APIs removed (was experimental under MEAI001) #​7353

What's Changed

AI
Telemetry and Observability
HTTP Resilience and Diagnostics
Diagnostics, Health Checks, and Resource Monitoring
Data Ingestion
Caching

Test Improvements

Repository I

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (in timezone Europe/Oslo)

  • Branch creation
    • "before 07:00 on Thursday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot force-pushed the renovate/nuget-minor-patch branch 2 times, most recently from 92b8e88 to 5e95f93 Compare July 4, 2026 02:56
@renovate
renovate Bot force-pushed the renovate/nuget-minor-patch branch 2 times, most recently from bfa600c to 7d9ec65 Compare July 18, 2026 03:39
@renovate
renovate Bot force-pushed the renovate/nuget-minor-patch branch from 7d9ec65 to cb3fbcc Compare July 25, 2026 19:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants