Skip to content

Update nuget - #266

Open
projectorigin-renovate[bot] wants to merge 1 commit into
mainfrom
renovate/nuget
Open

projectorigin-renovate[bot] wants to merge 1 commit into
mainfrom
renovate/nuget

Conversation

@projectorigin-renovate

@projectorigin-renovate projectorigin-renovate Bot commented Aug 28, 2025 •

Copy link
Copy Markdown
Contributor

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change
Dapper (source) nuget patch 2.1.66 → 2.1.89
FluentAssertions (source) nuget patch 7.2.0 → 7.2.2
Grpc.AspNetCore nuget minor 2.71.0 → 2.85.0
MassTransit (source) nuget patch 8.5.2 → 8.5.12
MassTransit.RabbitMQ (source) nuget patch 8.5.2 → 8.5.12
Microsoft.AspNetCore.Authentication.JwtBearer (source) nuget patch 9.0.8 → 9.0.22
Microsoft.AspNetCore.TestHost (source) nuget patch 9.0.8 → 9.0.22
Microsoft.Extensions.Diagnostics.Testing (source) nuget minor 9.8.0 → 9.10.0
Microsoft.Extensions.Options.ConfigurationExtensions (source) nuget patch 9.0.8 → 9.0.22
Microsoft.Identity.Web nuget minor 3.14.0 → 3.16.0
Npgsql nuget patch 9.0.3 → 9.0.5
Npgsql.OpenTelemetry nuget patch 9.0.3 → 9.0.5
OpenTelemetry (source) nuget minor 1.12.0 → 1.20.1
OpenTelemetry.Exporter.OpenTelemetryProtocol (source) nuget minor 1.12.0 → 1.20.1
OpenTelemetry.Extensions.Hosting (source) nuget minor 1.12.0 → 1.20.1
OpenTelemetry.Instrumentation.AspNetCore (source) nuget minor 1.12.0 → 1.20.1
OpenTelemetry.Instrumentation.Http (source) nuget minor 1.12.0 → 1.20.1
OpenTelemetry.Instrumentation.Runtime (source) nuget minor 1.12.0 → 1.20.1
Swashbuckle.AspNetCore nuget patch 9.0.4 → 9.0.6
Swashbuckle.AspNetCore.Annotations nuget patch 9.0.4 → 9.0.6
Testcontainers.PostgreSql (source) nuget minor 4.6.0 → 4.16.0
Testcontainers.RabbitMq (source) nuget minor 4.6.0 → 4.16.0
dbup-postgresql (source) nuget minor 6.0.3 → 6.1.5
dotnet-grpc nuget minor 2.71.0 → 2.85.0
xunit.runner.visualstudio nuget patch 3.1.4 → 3.1.5

Release Notes

DapperLib/Dapper (Dapper)

v2.1.89

Compare Source

What's Changed

New Contributors

Full Changelog: DapperLib/Dapper@2.1.86...2.1.89

v2.1.86

Compare Source

What's Changed

Full Changelog: DapperLib/Dapper@2.1.79...2.1.86

v2.1.79

Compare Source

What's Changed

New Contributors

Full Changelog: DapperLib/Dapper@2.1.72...2.1.79

v2.1.72

Compare Source

What's Changed

New Contributors

Full Changelog: DapperLib/Dapper@2.1.66...2.1.72

fluentassertions/fluentassertions (FluentAssertions)

v7.2.2

Compare Source

What's Changed
Fixes
Building

Full Changelog: fluentassertions/fluentassertions@7.2.1...7.2.2

v7.2.1

Compare Source

What's Changed
Fixes

Full Changelog: fluentassertions/fluentassertions@7.2.0...7.2.1

grpc/grpc-dotnet (Grpc.AspNetCore)

v2.85.0

What's Changed

Full Changelog: grpc/grpc-dotnet@v2.84.0...v2.85.0

v2.84.0

What's Changed
New Contributors

Full Changelog: grpc/grpc-dotnet@v2.83.0...v2.84.0

v2.83.0

What's Changed
New Contributors

Full Changelog: grpc/grpc-dotnet@v2.80.0...v2.83.0

v2.80.0

What's Changed
New Contributors

Full Changelog: grpc/grpc-dotnet@v2.76.0...v2.80.0

v2.76.0

What's Changed
New Contributors

Full Changelog: grpc/grpc-dotnet@v2.71.0...v2.76.0

dotnet/extensions (Microsoft.Extensions.Diagnostics.Testing)

v9.10.0

What's Changed

New Contributors

Full Changelog: dotnet/extensions@v9.9.0...v9.10.0

v9.9.0

Highlights

AI
  • Abstractions for remote MCP servers; response/approval flow support via new experimental types
  • Function approvals via new experimental types (e.g., ApprovalRequiredAIFunction, user input/approval request & response content).
  • Reasoning text streaming for OpenAI Responses ChatClient streaming.
  • AIFunction split into a base class to improve extensibility.
  • IChatReducer moved to Microsoft.Extensions.AI.Abstractions.
  • Updated to OpenAI 2.4.0 and genai standard convention 1.37.
  • Coalescing logic now treats ChatMessage.Role changes as new messages.
  • GetResponseAsync<T> now reads only the last message (bug fix).
  • OpenTelemetry ChatClient/EmbeddingGenerator logs raw additional properties (no key mangling).
  • Fixed empty annotated text chunk handling in streaming with OpenAI Assistants.
Telemetry & Diagnostics
  • HTTP diagnostics log query string params with proper redaction (emitted on url.query).
  • server.address telemetry emits host only (per OpenTelemetry semantic conventions).
  • Heuristics added to detect well-known model hosts.
  • Resource monitoring can consider Environment.CpuUsage.

New Contributors

Full Changelog: dotnet/extensions@v9.8.0...v9.9.0

AzureAD/microsoft-identity-web (Microsoft.Identity.Web)

v3.16.0

Compare Source

What's Changed

  • Security fixes and general reliability improvements.

Full Changelog: AzureAD/microsoft-identity-web@3.15.1...3.16.0

v3.15.1

Compare Source

Bug fixes
  • Improve User Agent processing in cookie policy extensions. See PR #​3824 for details.
  • Use LRU cache for issuer address in B2C OpenID Connect event handler to improve performance. See PR #​3823 for details.
Dependencies updates
  • Pin Microsoft.Kiota.Abstractions to 1.22.0 for GraphServiceClient, fixing NU1903 build break caused by the GHSA-7j59-v9qr-6fq9 advisory. See PR #​3818 for details.
  • Pin Microsoft.Kiota.Abstractions to 1.22.0 for GraphServiceClientBeta, fixing the same advisory. See PR #​3827 for details.
Fundamentals
  • Migrate tests to Lab.API 2.x. See PR #​3837 for details.
  • Fix web UI tests. See PR #​3838 for details.

v3.15.0

Bug fixes

  • Fix AccountController.Challenge redirect URI validation to reject percent-encoded protocol-relative bypasses (%2F%2F, %5C%2F, etc.) that could be decoded by misconfigured reverse proxies. See #​3785.

Behavior changes

  • DownstreamApi: reserved header filtering. Headers supplied via DownstreamApiOptions.ExtraHeaderParameters whose names match reserved HTTP headers (Authorization, Host, Content-Length, Proxy-Authorization, Sec-, Proxy-, etc.) or duplicate a header the library already set are now silently skipped. A warning-level log entry (ReservedHeaderIgnored / DuplicateHeaderIgnored) is emitted so operators can spot misconfigurations. No exception is thrown. See #​3793.

Dependencies updates

  • Updated MSAL.NET 4.76.0 → 4.83.1
  • Bump System.Security.Cryptography.Pkcs and System.Security.Cryptography.Xml to latest patched versions. See #​3799.

Full Changelog: 3.14.1...3.15.0 (AzureAD/microsoft-identity-web@3.14.1...3.15.0)

v3.14.1

=======

Bug fix

  • Support client secrets with agent user identities. See #​3470 for details.
npgsql/npgsql (Npgsql)

v9.0.5

v9.0.5 contains several minor bug fixes.

Milestone issues

Full Changelog: npgsql/npgsql@v9.0.4...v9.0.5

v9.0.4

v9.0.4 contains several minor bug fixes.

Milestone issues

Full Changelog: npgsql/npgsql@v9.0.3...v9.0.4

open-telemetry/opentelemetry-dotnet (OpenTelemetry)

v1.20.1

Release details: 1.20.1

  • Breaking change HttpClient instances created directly by the OTLP
    exporter no longer follow HTTP redirects. A 3xx response is now treated as
    a failed export. See the OTLP exporter README to prevent an HttpClient
    created by IHttpClientFactory from following redirects.
  • Breaking change The experimental OTLP disk retry storage is now separated
    per destination, derived from the exporter's Protocol, Endpoint and
    Headers. This prevents telemetry stored by one exporter being resent by
    another exporter to its own endpoint with its own headers. Telemetry stored on
    disk by earlier versions is not resent.
  • Improved how values near a bucket boundary are assigned to exponential
    histogram buckets by using a pre-computed lookup table.
  • Invalid OTEL_EXPORTER_OTLP_ENDPOINT (and signal-specific) and
    OTEL_EXPORTER_ZIPKIN_ENDPOINT values are no longer written to the
    exporter's diagnostic log.
  • Hardened the experimental OTLP disk retry feature:
    • On non-Windows platforms the retry directory and blob files are now
      accessible to the current user only.
    • Only files named the way the exporter names its blobs are now retried,
      removed or renamed. This matters when the retry directory is shared with
      other files.
    • Blobs that are empty, larger than the maximum storage size, or (on .NET)
      symbolic links are no longer read, and subdirectories are no longer
      followed when calculating the size of the directory.
    • Fixed files never being cleaned up when the current culture uses a
      non-Gregorian calendar, and fixed expired leases being located and released
      incorrectly.
  • Self-diagnostics log files, whether configured through OTEL_DIAGNOSTICS.json
    or SelfDiagnosticsOptions, are now always created as new files.
  • Self-diagnostics messages written to SelfDiagnosticsOptions sinks are now
    truncated to 16,384 characters. Only the first 4 KiB of the body of an
    unsuccessful OTLP export response is now read and written to the exporter's
    diagnostic log.
  • On Linux and macOS, the self-diagnostics log directory and files can now only
    be accessed by their owner (0700/0600) instead of inheriting the process
    umask.
  • OTLP exponential histogram bucket counts are now serialized using packed
    encoding, which reduces the size of the exported payload.
  • Fixed a possible race condition on ARM64 when multiple threads record the
    first measurement with no tags, or the first overflow measurement, at the
    same time.
  • Fixed the Prometheus exporters handing scrape responses to the server in a
    single write. For each client that did not read the response, the server held
    a full copy of it until the request completed or timed out (for HttpListener,
    only on Linux and macOS). Responses are now written in bounded slices.
  • Fixed self-diagnostics preamble redaction of quoted or encoded PEM material
    and prefixed JWTs.
  • Fixed TracerProvider.GetTracer caching a new tracer on every call that
    passes equal array-valued scope tags.
  • Fixed informational HTTP client logs not being suppressed by default when the
    OTLP log exporter is registered using OpenTelemetryLoggerOptions.AddOtlpExporter.
  • Fixed legacy self-diagnostics logging terminating the process when the log
    file is truncated or its volume runs out of space.
  • Experimental (pre-release builds only): Fixed Logger.EmitLog ignoring
    instrumentation suppression, which could cause recursive exports or deadlocks.
  • Fixed Prometheus HttpListener scrape requests that announce a request body
    holding a thread pool thread on Linux and macOS for as long as the client
    kept sending the body slowly after the response was sent. The connection is
    now closed after responding to a request with a body.
  • Fixed delta double counters losing later measurements after a non-finite or
    large value, and idle metric points with a NaN value not being reclaimed.
  • Fixed LogRecords being returned to the shared pool while still queued for
    export when an exporter stops enumerating a single-item or array
    Batch<LogRecord> early.
  • Fixed a SuppressInstrumentationScope.Enter() reference count never being
    released when the Activity it was entered for is not recorded. This caused
    all later telemetry in that execution context to be suppressed.
  • Fixed reading the body of a failed OTLP export response for the diagnostic
    log not being bounded by the export timeout, and the body never being logged
    on .NET Framework.
  • Fixed OTLP attributes whose value is converted with ToString() (for example
    enums, Uri or StringValues) being dropped when the export buffer was
    resized while the attribute was being written. For metric data points, the
    attribute was also left out of every later export.
  • Fixed pooled log records retaining completed log data until reused.
  • Fixed inline OTLP certificate or private key material being included in
    diagnostic events and exceptions when supplied instead of a file path.
  • Fixed slow metric recording when distinct wide tag values, such as long or
    Guid, share the same built-in hash code.
  • Fixed early metric collections permanently omitting resource attributes from
    later OTLP exports, and target_info and resource constant labels from later
    Prometheus scrape responses, while the MeterProvider is being built.
  • Fixed ObservableCounter and ObservableUpDownCounter overflow points
    reporting only the last observation instead of the sum of all observations
    for each collection.
  • Fixed replaced log attributes being exported together with their original
    values when buffering or updating LogRecord.State.

v1.20.0

Release details: 1.20.0

  • Breaking change byte[] attributes longer than the configured attribute value
    length limit (for example OTEL_ATTRIBUTE_VALUE_LENGTH_LIMIT) are now truncated
    to that many bytes instead of being exported in full.
  • Breaking change OTEL_EVENT_ATTRIBUTE_COUNT_LIMIT and OTEL_LINK_ATTRIBUTE_COUNT_LIMIT
    now fall back to OTEL_ATTRIBUTE_COUNT_LIMIT (then the default of 128) when
    not set, instead of falling back to OTEL_SPAN_ATTRIBUTE_COUNT_LIMIT.
  • Breaking change Instrumentation scope attributes exported from ActivitySource.Tags
    are now limited by OTEL_ATTRIBUTE_COUNT_LIMIT instead of
    OTEL_SPAN_ATTRIBUTE_COUNT_LIMIT. Only applications that set
    OTEL_SPAN_ATTRIBUTE_COUNT_LIMIT to a different value from OTEL_ATTRIBUTE_COUNT_LIMIT
    are affected.
  • Breaking change (pre-release only versions): LoggerProvider's protected
    TryCreateLogger(string? name, out Logger? logger) extensibility method has
    been replaced by TryCreateLogger(LoggerOptions options, out Logger? logger).
  • Added OpenTelemetryLoggerOptions.Version and
    OpenTelemetryLoggerOptions.SchemaUrl options to set an instrumentation
    library version and schema URL applied to logs emitted via the
    Microsoft.Extensions.Logging ILogger integration.
  • Added Logger.SchemaUrl and a LoggerProvider.GetLogger overload accepting
    a schema

[!IMPORTANT]
✂ PR body was truncated to here.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

@projectorigin-renovate
projectorigin-renovate Bot enabled auto-merge (squash) August 28, 2025 10:21
@projectorigin-renovate
projectorigin-renovate Bot force-pushed the renovate/nuget branch 2 times, most recently from 9eda532 to 0742374 Compare September 9, 2025 12:38
@projectorigin-renovate projectorigin-renovate Bot changed the title Update nuget to 4.7.0 Update nuget Sep 9, 2025
@projectorigin-renovate
projectorigin-renovate Bot force-pushed the renovate/nuget branch 6 times, most recently from 4126cd2 to 5aa2a53 Compare September 11, 2025 08:25
@projectorigin-renovate
projectorigin-renovate Bot force-pushed the renovate/nuget branch 4 times, most recently from f14497d to 2e097ed Compare October 1, 2025 08:26
@projectorigin-renovate
projectorigin-renovate Bot force-pushed the renovate/nuget branch 2 times, most recently from 3c39a6b to 57766f1 Compare October 6, 2025 08:26
@projectorigin-renovate
projectorigin-renovate Bot force-pushed the renovate/nuget branch 2 times, most recently from 52af949 to 38a563f Compare October 15, 2025 08:27
@projectorigin-renovate
projectorigin-renovate Bot force-pushed the renovate/nuget branch 3 times, most recently from 1064350 to 2269520 Compare October 23, 2025 08:27
@projectorigin-renovate
projectorigin-renovate Bot force-pushed the renovate/nuget branch 3 times, most recently from f6cf47d to 5b8bd72 Compare November 11, 2025 12:39
@projectorigin-renovate
projectorigin-renovate Bot force-pushed the renovate/nuget branch 3 times, most recently from fc9bb58 to 5c971cf Compare November 13, 2025 11:21
@projectorigin-renovate
projectorigin-renovate Bot force-pushed the renovate/nuget branch 2 times, most recently from df3834f to 63b9cd3 Compare November 26, 2025 08:28
@projectorigin-renovate
projectorigin-renovate Bot force-pushed the renovate/nuget branch 2 times, most recently from 21fc2eb to 704dc2f Compare April 9, 2026 09:10
@projectorigin-renovate
projectorigin-renovate Bot force-pushed the renovate/nuget branch 3 times, most recently from 06f7c4b to 269a334 Compare April 21, 2026 13:21
@projectorigin-renovate

Copy link
Copy Markdown
Contributor Author

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

@projectorigin-renovate
projectorigin-renovate Bot force-pushed the renovate/nuget branch 2 times, most recently from 9dd6004 to 312c8d6 Compare May 13, 2026 10:30
@projectorigin-renovate
projectorigin-renovate Bot force-pushed the renovate/nuget branch 2 times, most recently from 3e06446 to 4cd812f Compare May 19, 2026 16:56
@projectorigin-renovate projectorigin-renovate Bot changed the title Update nuget Update nuget to v2.80.0 Jun 2, 2026
@projectorigin-renovate projectorigin-renovate Bot changed the title Update nuget to v2.80.0 Update nuget Jun 8, 2026
@projectorigin-renovate
projectorigin-renovate Bot force-pushed the renovate/nuget branch 2 times, most recently from 880d19a to da92aeb Compare June 11, 2026 12:14
@projectorigin-renovate
projectorigin-renovate Bot force-pushed the renovate/nuget branch 3 times, most recently from 9fe20de to 6385bf9 Compare July 16, 2026 15:04
@projectorigin-renovate
projectorigin-renovate Bot force-pushed the renovate/nuget branch 2 times, most recently from 119110c to d5c0da9 Compare July 17, 2026 13:25
@projectorigin-renovate
projectorigin-renovate Bot force-pushed the renovate/nuget branch 2 times, most recently from 2d30032 to b036250 Compare August 14, 2026 09:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants