Skip to content

Update nuget#266

Open
projectorigin-renovate[bot] wants to merge 1 commit into
mainfrom
renovate/nuget
Open

Update nuget#266
projectorigin-renovate[bot] wants to merge 1 commit into
mainfrom
renovate/nuget

Conversation

@projectorigin-renovate

@projectorigin-renovate projectorigin-renovate Bot commented Aug 28, 2025

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change
Dapper nuget patch 2.1.662.1.79
FluentAssertions (source) nuget patch 7.2.07.2.2
Grpc.AspNetCore nuget minor 2.71.02.80.0
MassTransit (source) nuget patch 8.5.28.5.10
MassTransit.RabbitMQ (source) nuget patch 8.5.28.5.10
Microsoft.AspNetCore.Authentication.JwtBearer (source) nuget patch 9.0.89.0.17
Microsoft.AspNetCore.TestHost (source) nuget patch 9.0.89.0.17
Microsoft.Extensions.Diagnostics.Testing (source) nuget minor 9.8.09.10.0
Microsoft.Extensions.Options.ConfigurationExtensions (source) nuget patch 9.0.89.0.17
Microsoft.Identity.Web nuget minor 3.14.03.15.1
Npgsql nuget patch 9.0.39.0.5
Npgsql.OpenTelemetry nuget patch 9.0.39.0.5
OpenTelemetry (source) nuget minor 1.12.01.16.0
OpenTelemetry.Exporter.OpenTelemetryProtocol (source) nuget minor 1.12.01.16.0
OpenTelemetry.Extensions.Hosting (source) nuget minor 1.12.01.16.0
OpenTelemetry.Instrumentation.AspNetCore (source) nuget minor 1.12.01.15.2
OpenTelemetry.Instrumentation.Http (source) nuget minor 1.12.01.15.1
OpenTelemetry.Instrumentation.Runtime (source) nuget minor 1.12.01.15.1
Swashbuckle.AspNetCore nuget patch 9.0.49.0.6
Swashbuckle.AspNetCore.Annotations nuget patch 9.0.49.0.6
Testcontainers.PostgreSql (source) nuget minor 4.6.04.12.0
Testcontainers.RabbitMq (source) nuget minor 4.6.04.12.0
dbup-postgresql (source) nuget minor 6.0.36.1.5
dotnet-grpc nuget minor 2.71.02.80.0
xunit.runner.visualstudio nuget patch 3.1.43.1.5

Release Notes

DapperLib/Dapper (Dapper)

v2.1.79

Compare Source

What's Changed

New Contributors

Full Changelog: DapperLib/Dapper@2.1.72...2.1.79

v2.1.72

Compare Source

What's Changed

New Contributors

Full Changelog: DapperLib/Dapper@2.1.66...2.1.72

fluentassertions/fluentassertions (FluentAssertions)

v7.2.2

Compare Source

What's Changed
Fixes
Building

Full Changelog: fluentassertions/fluentassertions@7.2.1...7.2.2

v7.2.1

Compare Source

What's Changed
Fixes

Full Changelog: fluentassertions/fluentassertions@7.2.0...7.2.1

grpc/grpc-dotnet (Grpc.AspNetCore)

v2.80.0

What's Changed
New Contributors

Full Changelog: grpc/grpc-dotnet@v2.76.0...v2.80.0

v2.76.0

What's Changed
New Contributors

Full Changelog: grpc/grpc-dotnet@v2.71.0...v2.76.0

dotnet/extensions (Microsoft.Extensions.Diagnostics.Testing)

v9.10.0

What's Changed

New Contributors

Full Changelog: dotnet/extensions@v9.9.0...v9.10.0

v9.9.0

Highlights

AI
  • Abstractions for remote MCP servers; response/approval flow support via new experimental types
  • Function approvals via new experimental types (e.g., ApprovalRequiredAIFunction, user input/approval request & response content).
  • Reasoning text streaming for OpenAI Responses ChatClient streaming.
  • AIFunction split into a base class to improve extensibility.
  • IChatReducer moved to Microsoft.Extensions.AI.Abstractions.
  • Updated to OpenAI 2.4.0 and genai standard convention 1.37.
  • Coalescing logic now treats ChatMessage.Role changes as new messages.
  • GetResponseAsync<T> now reads only the last message (bug fix).
  • OpenTelemetry ChatClient/EmbeddingGenerator logs raw additional properties (no key mangling).
  • Fixed empty annotated text chunk handling in streaming with OpenAI Assistants.
Telemetry & Diagnostics
  • HTTP diagnostics log query string params with proper redaction (emitted on url.query).
  • server.address telemetry emits host only (per OpenTelemetry semantic conventions).
  • Heuristics added to detect well-known model hosts.
  • Resource monitoring can consider Environment.CpuUsage.

New Contributors

Full Changelog: dotnet/extensions@v9.8.0...v9.9.0

AzureAD/microsoft-identity-web (Microsoft.Identity.Web)

v3.15.1

Compare Source

Bug fixes
  • Improve User Agent processing in cookie policy extensions. See PR #​3824 for details.
  • Use LRU cache for issuer address in B2C OpenID Connect event handler to improve performance. See PR #​3823 for details.
Dependencies updates
  • Pin Microsoft.Kiota.Abstractions to 1.22.0 for GraphServiceClient, fixing NU1903 build break caused by the GHSA-7j59-v9qr-6fq9 advisory. See PR #​3818 for details.
  • Pin Microsoft.Kiota.Abstractions to 1.22.0 for GraphServiceClientBeta, fixing the same advisory. See PR #​3827 for details.
Fundamentals
  • Migrate tests to Lab.API 2.x. See PR #​3837 for details.
  • Fix web UI tests. See PR #​3838 for details.

v3.15.0

Bug fixes

  • Fix AccountController.Challenge redirect URI validation to reject percent-encoded protocol-relative bypasses (%2F%2F, %5C%2F, etc.) that could be decoded by misconfigured reverse proxies. See #​3785.

Behavior changes

  • DownstreamApi: reserved header filtering. Headers supplied via DownstreamApiOptions.ExtraHeaderParameters whose names match reserved HTTP headers (Authorization, Host, Content-Length, Proxy-Authorization, Sec-, Proxy-, etc.) or duplicate a header the library already set are now silently skipped. A warning-level log entry (ReservedHeaderIgnored / DuplicateHeaderIgnored) is emitted so operators can spot misconfigurations. No exception is thrown. See #​3793.

Dependencies updates

  • Updated MSAL.NET 4.76.0 → 4.83.1
  • Bump System.Security.Cryptography.Pkcs and System.Security.Cryptography.Xml to latest patched versions. See #​3799.

Full Changelog: 3.14.1...3.15.0 (AzureAD/microsoft-identity-web@3.14.1...3.15.0)

v3.14.1

=======

Bug fix

  • Support client secrets with agent user identities. See #​3470 for details.
npgsql/npgsql (Npgsql)

v9.0.5

v9.0.5 contains several minor bug fixes.

Milestone issues

Full Changelog: npgsql/npgsql@v9.0.4...v9.0.5

v9.0.4

v9.0.4 contains several minor bug fixes.

Milestone issues

Full Changelog: npgsql/npgsql@v9.0.3...v9.0.4

open-telemetry/opentelemetry-dotnet (OpenTelemetry)

v1.16.0

Release details: 1.16.0

  • Breaking Change Explicit histogram boundaries no longer allow more than
    10 million values.
  • Fix BaggagePropagator to correctly follow Key and Value Encoding rules.
  • Add support for the W3C randomness flag.
  • Fixed TraceContextPropagator to deduplicate duplicate tracestate keys.
  • ObservedTimestamp will now be exported for logs in the console exporter.
  • Fixed NullReferenceException when exporting OTLP logs if the scope key is
    null.
  • Added opt-in support for gzip compression to the OTLP exporter.
  • Fixed OTLP disk retry data being stored incorrectly when using persistent
    storage retry.
  • Fixed OtlpLogExporter integration with IHttpClientFactory.
  • Do not enable the OTLP integration with IHttpClientFactory when mTLS is
    enabled.
  • Handle Retry-After response headers that specify a date instead of a delay.
  • observed_time_unix_nano will no longer always be identical to time_unix_nano
    when using the logs bridge API.
  • Stop validating View-provided metric stream Name against the instrument name
    syntax.
  • Fix incorrect validation of OTEL_BSP_* and OTEL_BLRP_* environment variables.
  • Fix observable instrument callbacks running once per reader instead of once per
    collection cycle.
  • Added exception safety for user-supplied ExemplarReservoir implementations.
  • Fixed a circular reference which could cause a LoggerProvider to fail to
    resolve when one of its dependencies depends on ILogger or ILoggerFactory.

v1.15.3

Release details: 1.15.3

  • Breaking change: Fixed tracestate parsing to reject keys that do not
    begin with a lowercase letter, including keys beginning with digits, to
    align with the W3C Trace Context specification.
  • Breaking change: Fixed an insecure disk retry default for OTLP export.
    Disk retry now requires OTEL_DOTNET_EXPERIMENTAL_OTLP_DISK_RETRY_DIRECTORY_PATH
    when OTEL_DOTNET_EXPERIMENTAL_OTLP_RETRY=disk is configured.
  • Improve efficiency of parsing of baggage and B3 propagation headers.
  • OtlpLogExporter now uses IHttpClientFactory on .NET 8+.
  • Fixed an issue in OTLP/gRPC retry handling when parsing gRPC statuses.
  • Fixed OTEL_SPAN_ATTRIBUTE_VALUE_LENGTH_LIMIT not being applied.
  • Fixed baggage and trace headers not respecting the maximum length in some cases.
  • Fixed BaggagePropagator to trim optional whitespace (OWS) around =
    separators when parsing the baggage header.
  • Fixed BaggagePropagator to strip baggage properties from values when
    parsing the baggage header.
  • Fixed OTLP persistent storage clean-up handling for malformed filenames.
  • Fixed resource leak in batch and periodic exporting task workers for Blazor/WASM.
  • Fixed LogRecord.LogLevel to preserve LogLevel.None.
  • Fixed OTEL_TRACES_SAMPLER_ARG handling for out-of-range values.
  • Fixed an issue with OTLP disk retry storage where metrics and logs used the
    traces storage directory.
  • Fixed full OTLP endpoint being logged by internal diagnostics.
  • Improve efficiency of parsing of baggage, B3 and Jaeger propagation headers.
  • Hardened Zipkin exporter memory usage for endpoint caching and array tag
    serialization.

v1.15.2

Release details: 1.15.2

  • Limit how much of the response body is read by the OTLP exporter when
    export fails and error logging is enabled.
  • Added Task-based worker support for BatchExportProcessor and
    PeriodicExportingMetricReader to enable the OpenTelemetry SDK to work
    in single-threaded WebAssembly environments such as Blazor and
    Uno Platform.

v1.15.1

Release details: 1.15.1

  • Breaking change: The Baggage API now disallows empty baggage names and
    treats baggage names and values as case sensitive, aligning with the latest
    Baggage API specification.
  • Various bug fixes across OpenTelemetry.Api and OpenTelemetry SDK,
    including fixes for thread-safety, sampler edge cases, metrics precision,
    and observable instrument lifecycle handling.

v1.15.0

Release details: 1.15.0

  • Added support for ActivitySource.TelemetrySchemaUrl
    and Meter.TelemetrySchemaUrl properties across exporters.
  • Improved performance and reduced memory consumption for metrics histograms.
  • Added mTLS configuration support for the OTLP exporter (client cert/key and
    CA certificate options).
  • OpenTelemetry.Exporter.Zipkin is deprecated and will stop receiving updates
    in December 2026. Zipkin already supports OTLP ingestion.
    Migrate to OpenTelemetry.Exporter.OpenTelemetryProtocol as stated
    in the Deprecating Zipkin Exporter blog post.

v1.14.0

Release details: 1.14.0

  • Add support for .NET 10.0.
  • Breaking Change When targeting net8.0, the package now depends on version
    8.0.0 of the Microsoft.Extensions.DependencyInjection.Abstractions,
    Microsoft.Extensions.Diagnostics.Abstractions,
    Microsoft.Extensions.Hosting.Abstractions and
    Microsoft.Extensions.Logging.Configuration NuGet packages.
  • Update System.Diagnostics.DiagnosticSource dependency to 10.0.0
    for all target frameworks.
  • Update Microsoft.Extensions.* dependencies to 10.0.0
    for .NET Framework and .NET Standard.
  • Breaking Change NuGet packages now use the Sigstore bundle format
    (.sigstore.json) for digital signatures instead of separate signature
    (.sig) and certificate (.pem) files. This requires cosign 3.0 or later
    for verification. See the Digital signing
    section
    for updated verification instructions.

v1.13.1

Release details: 1.13.1

  • In version 1.13.0, the digital signature (.dll-keyless.sig) and
    certificate (.dll-keyless.pem) files were unintentionally omitted from the
    published NuGet packages.
  • This hotfix restores the Sigstore signing artifacts for all target frameworks
    (net462, netstandard2.0, netstandard2.1, net8.0, net9.0), ensuring
    the integrity of DLL verification using Sigstore cosign.

v1.13.0

Release details: 1.13.0

  • gRPC calls to export traces, logs, and metrics using OtlpExportProtocol.Grpc
    now set the TE=trailers HTTP request header to improve interoperability.
  • EventName is now exported by default as EventName instead of
    logrecord.event.name when specified through ILogger or the experimental
    log bridge API.
domaindrivendev/Swashbuckle.AspNetCore (Swashbuckle.AspNetCore)

v9.0.6

What's Changed

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v9.0.5...v9.0.6

v9.0.5

What's Changed

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v9.0.4...v9.0.5

testcontainers/testcontainers-dotnet (Testcontainers.PostgreSql)

v4.12.0

Compare Source

What's Changed

Thanks to all contributors 👏.

The NuGet packages for this release have been attested for supply chain security using actions/attest. This confirms the integrity and provenance of the artifacts and helps ensure they can be trusted: #​21198535.

⚠️ Breaking Changes
🚀 Features
🐛 Bug Fixes
📖 Documentation
🧹 Housekeeping
📦 Dependency Updates

v4.11.0

Compare Source

What's Changed

Thanks to all contributors. Once again, really great contributions from everyone 🤝.

The NuGet packages for this release have been attested for supply chain security using actions/attest. This confirms the integrity and provenance of the artifacts and helps ensure they can be trusted: #​21198535.

Please be aware that we have changed the supported and underlying image used for the Cosmos DB module. The latest tag only supports certain environments and provides a limited set of features. Microsoft has introduced a new implementation, vnext-preview, which receives more updates and features. Due to the limitations of the latest tag, we decided to replace it with vnext-preview. You find more information about the image here: https://github.com/Azure/azure-cosmos-db-emulator-docker.

⚠️ Breaking Changes
🚀 Features
🐛 Bug Fixes
📖 Documentation
🧹 Housekeeping
📦 Dependency Updates

v4.10.0

Compare Source

What's Changed

Happy New Year, everyone! 🎉

Please note that going forward, we expect developers to explicitly pin the image version (https://redirect.github.com/testcontainers/testcontainers-dotnet/discussions/1470). We consider this a best practice and it aligns with other language implementations.

Also, due to the recent Docker Engine v29 release, TC for .NET pins the Docker Engine API version to 1.44 (see the previous release notes). You can override this default and set it to the version you're using, ideally 1.52, which corresponds to v29, if you're already running it.

⚠️ Breaking Changes

Note

PR body was truncated to here.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

@projectorigin-renovate projectorigin-renovate Bot enabled auto-merge (squash) August 28, 2025 10:21
@projectorigin-renovate projectorigin-renovate Bot force-pushed the renovate/nuget branch 2 times, most recently from 9eda532 to 0742374 Compare September 9, 2025 12:38
@projectorigin-renovate projectorigin-renovate Bot changed the title Update nuget to 4.7.0 Update nuget Sep 9, 2025
@projectorigin-renovate projectorigin-renovate Bot force-pushed the renovate/nuget branch 6 times, most recently from 4126cd2 to 5aa2a53 Compare September 11, 2025 08:25
@projectorigin-renovate projectorigin-renovate Bot force-pushed the renovate/nuget branch 4 times, most recently from f14497d to 2e097ed Compare October 1, 2025 08:26
@projectorigin-renovate projectorigin-renovate Bot force-pushed the renovate/nuget branch 2 times, most recently from 3c39a6b to 57766f1 Compare October 6, 2025 08:26
@projectorigin-renovate projectorigin-renovate Bot force-pushed the renovate/nuget branch 2 times, most recently from 52af949 to 38a563f Compare October 15, 2025 08:27
@projectorigin-renovate projectorigin-renovate Bot force-pushed the renovate/nuget branch 3 times, most recently from 1064350 to 2269520 Compare October 23, 2025 08:27
@projectorigin-renovate projectorigin-renovate Bot force-pushed the renovate/nuget branch 3 times, most recently from f6cf47d to 5b8bd72 Compare November 11, 2025 12:39
@projectorigin-renovate projectorigin-renovate Bot force-pushed the renovate/nuget branch 3 times, most recently from fc9bb58 to 5c971cf Compare November 13, 2025 11:21
@projectorigin-renovate projectorigin-renovate Bot force-pushed the renovate/nuget branch 2 times, most recently from df3834f to 63b9cd3 Compare November 26, 2025 08:28
@projectorigin-renovate projectorigin-renovate Bot force-pushed the renovate/nuget branch 2 times, most recently from 5816bb0 to 58ed892 Compare January 21, 2026 12:47
@projectorigin-renovate projectorigin-renovate Bot force-pushed the renovate/nuget branch 2 times, most recently from 04a90a2 to b4d74b1 Compare February 11, 2026 08:51
@projectorigin-renovate projectorigin-renovate Bot force-pushed the renovate/nuget branch 3 times, most recently from a3154d5 to 98a0208 Compare March 11, 2026 10:41
@projectorigin-renovate projectorigin-renovate Bot force-pushed the renovate/nuget branch 2 times, most recently from 4a36a7d to 4b49902 Compare March 17, 2026 08:53
@projectorigin-renovate projectorigin-renovate Bot force-pushed the renovate/nuget branch 2 times, most recently from 21fc2eb to 704dc2f Compare April 9, 2026 09:10
@projectorigin-renovate projectorigin-renovate Bot force-pushed the renovate/nuget branch 3 times, most recently from 06f7c4b to 269a334 Compare April 21, 2026 13:21
@projectorigin-renovate

Copy link
Copy Markdown
Contributor Author

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

@projectorigin-renovate projectorigin-renovate Bot force-pushed the renovate/nuget branch 2 times, most recently from 9dd6004 to 312c8d6 Compare May 13, 2026 10:30
@projectorigin-renovate projectorigin-renovate Bot force-pushed the renovate/nuget branch 2 times, most recently from 3e06446 to 4cd812f Compare May 19, 2026 16:56
@projectorigin-renovate projectorigin-renovate Bot changed the title Update nuget Update nuget to v2.80.0 Jun 2, 2026
@projectorigin-renovate projectorigin-renovate Bot changed the title Update nuget to v2.80.0 Update nuget Jun 8, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants