Skip to content

Bump the dotnet-deps group with 20 updates#40

Merged
MiguelGuedelha merged 2 commits intomasterfrom
dependabot/nuget/project-templates/content/umbraco-headless-bff/UmbracoHeadlessBFF.Aspire/dotnet-deps-a669045aa4
Mar 14, 2026
Merged

Bump the dotnet-deps group with 20 updates#40
MiguelGuedelha merged 2 commits intomasterfrom
dependabot/nuget/project-templates/content/umbraco-headless-bff/UmbracoHeadlessBFF.Aspire/dotnet-deps-a669045aa4

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 13, 2026

Updated Aspire.Hosting.AppHost from 13.1.1 to 13.1.2.

Release notes

Sourced from Aspire.Hosting.AppHost's releases.

13.1.2

What's Changed

Full Changelog: dotnet/aspire@v13.1.1...v13.1.2

Commits viewable in compare view.

Updated Aspire.Hosting.Azure.Storage from 13.1.1 to 13.1.2.

Release notes

Sourced from Aspire.Hosting.Azure.Storage's releases.

13.1.2

What's Changed

Full Changelog: dotnet/aspire@v13.1.1...v13.1.2

Commits viewable in compare view.

Updated Aspire.Hosting.Redis from 13.1.1 to 13.1.2.

Release notes

Sourced from Aspire.Hosting.Redis's releases.

13.1.2

What's Changed

Full Changelog: dotnet/aspire@v13.1.1...v13.1.2

Commits viewable in compare view.

Updated Aspire.Hosting.SqlServer from 13.1.1 to 13.1.2.

Release notes

Sourced from Aspire.Hosting.SqlServer's releases.

13.1.2

What's Changed

Full Changelog: dotnet/aspire@v13.1.1...v13.1.2

Commits viewable in compare view.

Updated Aspire.StackExchange.Redis.DistributedCaching from 13.1.1 to 13.1.2.

Release notes

Sourced from Aspire.StackExchange.Redis.DistributedCaching's releases.

13.1.2

What's Changed

Full Changelog: dotnet/aspire@v13.1.1...v13.1.2

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Authentication.JwtBearer from 10.0.3 to 10.0.5.

Release notes

Sourced from Microsoft.AspNetCore.Authentication.JwtBearer's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.HeaderPropagation from 10.0.3 to 10.0.5.

Release notes

Sourced from Microsoft.AspNetCore.HeaderPropagation's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Http.Resilience from 10.3.0 to 10.4.0.

Release notes

Sourced from Microsoft.Extensions.Http.Resilience's releases.

10.4.0

This release advances the AI abstractions with new hosted file, web search, and reasoning content types, stabilizes MCP and tool approval APIs, adds streaming latency metrics to OpenTelemetry instrumentation, and delivers bug fixes across caching, data ingestion, and resource monitoring.

Experimental API Changes

Now Stable

  • MCP Server Tool Content and Function Call Approval APIs are now stable (previously MEAI001) #​7299
  • FakeLogCollector.GetLogsAsync(CancellationToken) is now stable (previously EXTEXP0003) #​7332

New Experimental APIs

  • New experimental AddExtendedHttpClientLogging overloads with wrapHandlersPipeline parameter (EXTEXP0013) #​7231

Removed Experimental APIs

  • AI Tool Reduction experimental APIs removed (was experimental under MEAI001) #​7353

What's Changed

AI

  • Add IHostedFileClient and friends #​7269 by @​stephentoub
  • Add web search tool call content #​7276 by @​stephentoub (co-authored by @​Copilot)
  • Surface OpenAI-compatible reasoning_content as TextReasoningContent #​7295 by @​stephentoub
  • MCP/Approvals/Tool Contents stabilization #​7299 by @​jozkee
  • Implement time_to_first_chunk and time_per_output_chunk streaming metrics in OpenTelemetryChatClient #​7325 by @​stephentoub (co-authored by @​Copilot)
  • Add openai.api.type telemetry attribute to OpenAI IChatClient implementations #​7316 by @​stephentoub (co-authored by @​Copilot)
  • Update OpenTelemetry Gen AI semantic conventions to v1.40 #​7322 by @​stephentoub (co-authored by @​Copilot)
  • Fix tool definitions emission regardless of sensitivity setting #​7346 by @​stephentoub (co-authored by @​Copilot)
  • Honor [Required] attribute in AI function parameter JSON schema generation #​7272 by @​stephentoub (co-authored by @​Copilot)
  • AddAIContentType automatically registers content type against every base in the inheritance chain up to AIContent #​7358 by @​jozkee (co-authored by @​Copilot)
  • Auto-mark server-handled FunctionCallContent as InformationalOnly #​7314 by @​stephentoub (co-authored by @​Copilot)
  • Map ReasoningEffort.None and ExtraHigh to none and xhigh in OpenAI IChatClient implementations #​7319 by @​stephentoub (co-authored by @​Copilot)
  • Handle DynamicMethod reflection limitations in AIFunctionFactory #​7287 by @​stephentoub (co-authored by @​Copilot)
  • Fix Activity.Current nulled during streaming tool invocation #​7321 by @​flaviocdc (co-authored by @​Copilot)
  • Handle FunctionCallOutputResponseItem in streaming response conversion #​7307 by @​stephentoub (co-authored by @​Copilot)
  • Fix serialization of response continuation tokens #​7356 by @​stephentoub
  • Remove AI Tool Reduction experimental APIs #​7353 by @​stephentoub (co-authored by @​Copilot)
  • Update OpenAI to 2.9.1 #​7349 by @​stephentoub

Telemetry and Observability

  • Introduce support for the Gauge metric type #​7203 by @​rainsxng
  • Update logging source generator to support generic methods #​7331 by @​svick (co-authored by @​Copilot)
  • Update logging source generator to match runtime PR #​124589 (ref readonly/params/scoped) #​7333 by @​svick (co-authored by @​Copilot)
  • Promote FakeLogCollector.GetLogsAsync(CancellationToken) from experimental to stable #​7332 by @​Demo30
  • Remove obsolete CS1591 warning suppression from generated file preamble #​7308 by @​luissena

HTTP Resilience and Diagnostics

... (truncated)

Commits viewable in compare view.

Updated Microsoft.Extensions.ServiceDiscovery from 10.3.0 to 10.4.0.

Release notes

Sourced from Microsoft.Extensions.ServiceDiscovery's releases.

10.4.0

This release advances the AI abstractions with new hosted file, web search, and reasoning content types, stabilizes MCP and tool approval APIs, adds streaming latency metrics to OpenTelemetry instrumentation, and delivers bug fixes across caching, data ingestion, and resource monitoring.

Experimental API Changes

Now Stable

  • MCP Server Tool Content and Function Call Approval APIs are now stable (previously MEAI001) #​7299
  • FakeLogCollector.GetLogsAsync(CancellationToken) is now stable (previously EXTEXP0003) #​7332

New Experimental APIs

  • New experimental AddExtendedHttpClientLogging overloads with wrapHandlersPipeline parameter (EXTEXP0013) #​7231

Removed Experimental APIs

  • AI Tool Reduction experimental APIs removed (was experimental under MEAI001) #​7353

What's Changed

AI

  • Add IHostedFileClient and friends #​7269 by @​stephentoub
  • Add web search tool call content #​7276 by @​stephentoub (co-authored by @​Copilot)
  • Surface OpenAI-compatible reasoning_content as TextReasoningContent #​7295 by @​stephentoub
  • MCP/Approvals/Tool Contents stabilization #​7299 by @​jozkee
  • Implement time_to_first_chunk and time_per_output_chunk streaming metrics in OpenTelemetryChatClient #​7325 by @​stephentoub (co-authored by @​Copilot)
  • Add openai.api.type telemetry attribute to OpenAI IChatClient implementations #​7316 by @​stephentoub (co-authored by @​Copilot)
  • Update OpenTelemetry Gen AI semantic conventions to v1.40 #​7322 by @​stephentoub (co-authored by @​Copilot)
  • Fix tool definitions emission regardless of sensitivity setting #​7346 by @​stephentoub (co-authored by @​Copilot)
  • Honor [Required] attribute in AI function parameter JSON schema generation #​7272 by @​stephentoub (co-authored by @​Copilot)
  • AddAIContentType automatically registers content type against every base in the inheritance chain up to AIContent #​7358 by @​jozkee (co-authored by @​Copilot)
  • Auto-mark server-handled FunctionCallContent as InformationalOnly #​7314 by @​stephentoub (co-authored by @​Copilot)
  • Map ReasoningEffort.None and ExtraHigh to none and xhigh in OpenAI IChatClient implementations #​7319 by @​stephentoub (co-authored by @​Copilot)
  • Handle DynamicMethod reflection limitations in AIFunctionFactory #​7287 by @​stephentoub (co-authored by @​Copilot)
  • Fix Activity.Current nulled during streaming tool invocation #​7321 by @​flaviocdc (co-authored by @​Copilot)
  • Handle FunctionCallOutputResponseItem in streaming response conversion #​7307 by @​stephentoub (co-authored by @​Copilot)
  • Fix serialization of response continuation tokens #​7356 by @​stephentoub
  • Remove AI Tool Reduction experimental APIs #​7353 by @​stephentoub (co-authored by @​Copilot)
  • Update OpenAI to 2.9.1 #​7349 by @​stephentoub

Telemetry and Observability

  • Introduce support for the Gauge metric type #​7203 by @​rainsxng
  • Update logging source generator to support generic methods #​7331 by @​svick (co-authored by @​Copilot)
  • Update logging source generator to match runtime PR #​124589 (ref readonly/params/scoped) #​7333 by @​svick (co-authored by @​Copilot)
  • Promote FakeLogCollector.GetLogsAsync(CancellationToken) from experimental to stable #​7332 by @​Demo30
  • Remove obsolete CS1591 warning suppression from generated file preamble #​7308 by @​luissena

HTTP Resilience and Diagnostics

... (truncated)

Commits viewable in compare view.

Updated OpenTelemetry.Instrumentation.AspNetCore from 1.15.0 to 1.15.1.

Release notes

Sourced from OpenTelemetry.Instrumentation.AspNetCore's releases.

1.15.1

Commits viewable in compare view.

Updated OpenTelemetry.Instrumentation.SqlClient from 1.15.0 to 1.15.1.

Release notes

Sourced from OpenTelemetry.Instrumentation.SqlClient's releases.

1.15.1

Commits viewable in compare view.

Updated Scalar.AspNetCore from 2.12.46 to 2.13.8.

Release notes

Sourced from Scalar.AspNetCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Swashbuckle.AspNetCore from 10.1.4 to 10.1.5.

Release notes

Sourced from Swashbuckle.AspNetCore's releases.

10.1.5

What's Changed

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.4...v10.1.5

Commits viewable in compare view.

Updated Swashbuckle.AspNetCore.SwaggerGen from 10.1.4 to 10.1.5.

Release notes

Sourced from Swashbuckle.AspNetCore.SwaggerGen's releases.

10.1.5

What's Changed

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.4...v10.1.5

Commits viewable in compare view.

Updated Umbraco.Cms from 17.2.0 to 17.2.2.

Release notes

Sourced from Umbraco.Cms's releases.

17.2.2

🔒 Security updates

  • Fixed issue relating to privilege escalation relating to user group memberships - GHSA-rhcg-3h8r-v6vp
  • Fixed issue relating to XSS vulnerability with property type descriptions - GHSA-vrqc-59mw-qqg
  • Fixed issue relating to authorization checks on node domain access - GHSA-fpvf-fvp5-996r

Full Changelog: umbraco/Umbraco-CMS@release-17.2.1...release-17.2.2

17.2.1

What's Changed

🐛 Bug Fixes

Full Changelog: umbraco/Umbraco-CMS@release-17.2.0...release-17.2.1

Commits viewable in compare view.

Updated Umbraco.Cms.Core from 17.2.0 to 17.2.2.

Release notes

Sourced from Umbraco.Cms.Core's releases.

17.2.2

🔒 Security updates

  • Fixed issue relating to privilege escalation relating to user group memberships - GHSA-rhcg-3h8r-v6vp
  • Fixed issue relating to XSS vulnerability with property type descriptions - GHSA-vrqc-59mw-qqg
  • Fixed issue relating to authorization checks on node domain access - GHSA-fpvf-fvp5-996r

Full Changelog: umbraco/Umbraco-CMS@release-17.2.1...release-17.2.2

17.2.1

What's Changed

🐛 Bug Fixes

Full Changelog: umbraco/Umbraco-CMS@release-17.2.0...release-17.2.1

Commits viewable in compare view.

Updated Umbraco.Cms.Infrastructure from 17.2.0 to 17.2.2.

Release notes

Sourced from Umbraco.Cms.Infrastructure's releases.

17.2.2

🔒 Security updates

  • Fixed issue relating to privilege escalation relating to user group memberships - GHSA-rhcg-3h8r-v6vp
  • Fixed issue relating to XSS vulnerability with property type descriptions - GHSA-vrqc-59mw-qqg
  • Fixed issue relating to authorization checks on node domain access - GHSA-fpvf-fvp5-996r

Full Changelog: umbraco/Umbraco-CMS@release-17.2.1...release-17.2.2

17.2.1

What's Changed

🐛 Bug Fixes

Full Changelog: umbraco/Umbraco-CMS@release-17.2.0...release-17.2.1

Commits viewable in compare view.

Updated Umbraco.Cms.Web.Common from 17.2.0 to 17.2.2.

Release notes

Sourced from Umbraco.Cms.Web.Common's releases.

17.2.2

🔒 Security updates

  • Fixed issue relating to privilege escalation relating to user group memberships - GHSA-rhcg-3h8r-v6vp
  • Fixed issue relating to XSS vulnerability with property type descriptions - GHSA-vrqc-59mw-qqg
  • Fixed issue relating to authorization checks on node domain access - GHSA-fpvf-fvp5-996r

Full Changelog: umbraco/Umbraco-CMS@release-17.2.1...release-17.2.2

17.2.1

What's Changed

🐛 Bug Fixes

Full Changelog: umbraco/Umbraco-CMS@release-17.2.0...release-17.2.1

Commits viewable in compare view.

Updated Umbraco.Cms.Web.Website from 17.2.0 to 17.2.2.

Release notes

Sourced from Umbraco.Cms.Web.Website's releases.

17.2.2

🔒 Security updates

  • Fixed issue relating to privilege escalation relating to user group memberships - GHSA-rhcg-3h8r-v6vp
  • Fixed issue relating to XSS vulnerability with property type descriptions - GHSA-vrqc-59mw-qqg
  • Fixed issue relating to authorization checks on node domain access - GHSA-fpvf-fvp5-996r

Full Changelog: umbraco/Umbraco-CMS@release-17.2.1...release-17.2.2

17.2.1

What's Changed

🐛 Bug Fixes

Full Changelog: umbraco/Umbraco-CMS@release-17.2.0...release-17.2.1

Commits viewable in compare view.

Updated uSync from 17.0.2 to 17.0.4.

Release notes

Sourced from uSync's releases.

17.0.3

This is a patch release of uSync for Umbraco v17 - it contains some fixes for reported issues.

[!NOTE]
This version supports all versions of Umbraco v17.*

What's Changed

Full Changelog: KevinJump/uSync@v17.0.2...v17.0.4

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps Aspire.Hosting.AppHost from 13.1.1 to 13.1.2
Bumps Aspire.Hosting.Azure.Storage from 13.1.1 to 13.1.2
Bumps Aspire.Hosting.Redis from 13.1.1 to 13.1.2
Bumps Aspire.Hosting.SqlServer from 13.1.1 to 13.1.2
Bumps Aspire.StackExchange.Redis.DistributedCaching from 13.1.1 to 13.1.2
Bumps Microsoft.AspNetCore.Authentication.JwtBearer from 10.0.3 to 10.0.5
Bumps Microsoft.AspNetCore.HeaderPropagation from 10.0.3 to 10.0.5
Bumps Microsoft.Extensions.Http.Resilience from 10.3.0 to 10.4.0
Bumps Microsoft.Extensions.ServiceDiscovery from 10.3.0 to 10.4.0
Bumps OpenTelemetry.Instrumentation.AspNetCore from 1.15.0 to 1.15.1
Bumps OpenTelemetry.Instrumentation.SqlClient from 1.15.0 to 1.15.1
Bumps Scalar.AspNetCore from 2.12.46 to 2.13.8
Bumps Swashbuckle.AspNetCore from 10.1.4 to 10.1.5
Bumps Swashbuckle.AspNetCore.SwaggerGen from 10.1.4 to 10.1.5
Bumps Umbraco.Cms from 17.2.0 to 17.2.2
Bumps Umbraco.Cms.Core from 17.2.0 to 17.2.2
Bumps Umbraco.Cms.Infrastructure from 17.2.0 to 17.2.2
Bumps Umbraco.Cms.Web.Common from 17.2.0 to 17.2.2
Bumps Umbraco.Cms.Web.Website from 17.2.0 to 17.2.2
Bumps uSync from 17.0.2 to 17.0.4

---
updated-dependencies:
- dependency-name: Aspire.Hosting.AppHost
  dependency-version: 13.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-deps
- dependency-name: Aspire.Hosting.Azure.Storage
  dependency-version: 13.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-deps
- dependency-name: Aspire.Hosting.Redis
  dependency-version: 13.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-deps
- dependency-name: Aspire.Hosting.SqlServer
  dependency-version: 13.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-deps
- dependency-name: Aspire.StackExchange.Redis.DistributedCaching
  dependency-version: 13.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-deps
- dependency-name: Microsoft.AspNetCore.Authentication.JwtBearer
  dependency-version: 10.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-deps
- dependency-name: Microsoft.AspNetCore.HeaderPropagation
  dependency-version: 10.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-deps
- dependency-name: Microsoft.Extensions.Http.Resilience
  dependency-version: 10.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet-deps
- dependency-name: Microsoft.Extensions.ServiceDiscovery
  dependency-version: 10.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet-deps
- dependency-name: OpenTelemetry.Instrumentation.AspNetCore
  dependency-version: 1.15.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-deps
- dependency-name: OpenTelemetry.Instrumentation.SqlClient
  dependency-version: 1.15.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-deps
- dependency-name: Scalar.AspNetCore
  dependency-version: 2.13.8
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet-deps
- dependency-name: Scalar.AspNetCore
  dependency-version: 2.13.8
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet-deps
- dependency-name: Swashbuckle.AspNetCore
  dependency-version: 10.1.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-deps
- dependency-name: Swashbuckle.AspNetCore.SwaggerGen
  dependency-version: 10.1.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-deps
- dependency-name: Umbraco.Cms
  dependency-version: 17.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-deps
- dependency-name: Umbraco.Cms.Core
  dependency-version: 17.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-deps
- dependency-name: Umbraco.Cms.Infrastructure
  dependency-version: 17.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-deps
- dependency-name: Umbraco.Cms.Web.Common
  dependency-version: 17.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-deps
- dependency-name: Umbraco.Cms.Web.Website
  dependency-version: 17.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-deps
- dependency-name: uSync
  dependency-version: 17.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Mar 13, 2026
@MiguelGuedelha MiguelGuedelha merged commit 5fd7646 into master Mar 14, 2026
3 checks passed
@MiguelGuedelha MiguelGuedelha deleted the dependabot/nuget/project-templates/content/umbraco-headless-bff/UmbracoHeadlessBFF.Aspire/dotnet-deps-a669045aa4 branch March 14, 2026 16:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant