Skip to content

Bump the minor-and-patch group with 19 updates#17

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/nuget/minor-and-patch-dd75648eb4
Closed

Bump the minor-and-patch group with 19 updates#17
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/nuget/minor-and-patch-dd75648eb4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 1, 2026 •
edited
Loading

Copy link
Copy Markdown

Updated FluentAssertions from 8.9.0 to 8.10.0.

Release notes

Sourced from FluentAssertions's releases.

8.10.0

What's Changed

Improvements

Documentation

Others

Full Changelog: fluentassertions/fluentassertions@8.9.0...8.10.0

Commits viewable in compare view.

Updated Meziantou.Analyzer from 3.0.50 to 3.0.98.

Release notes

Sourced from Meziantou.Analyzer's releases.

3.0.98

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.98

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.97...3.0.98

3.0.97

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.97

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.96...3.0.97

3.0.96

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.96

Full Changelog: meziantou/Meziantou.Analyzer@3.0.95...3.0.96

3.0.95

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.95

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.94...3.0.95

3.0.94

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.94

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.93...3.0.94

3.0.93

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.93

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.92...3.0.93

3.0.92

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.92

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.91...3.0.92

3.0.91

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.91

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.90...3.0.91

3.0.90

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.90

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.89...3.0.90

3.0.89

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.89

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.88...3.0.89

3.0.88

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.88

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.87...3.0.88

3.0.87

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.87

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.86...3.0.87

3.0.86

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.86

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.85...3.0.86

3.0.85

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.85

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.84...3.0.85

3.0.84

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.84

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.83...3.0.84

3.0.83

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.83

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.82...3.0.83

3.0.82

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.82

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.81...3.0.82

3.0.81

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.81

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.80...3.0.81

3.0.80

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.80

Full Changelog: meziantou/Meziantou.Analyzer@3.0.79...3.0.80

3.0.79

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.79

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.78...3.0.79

3.0.78

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.78

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.77...3.0.78

3.0.77

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.77

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.76...3.0.77

3.0.76

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.76

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.75...3.0.76

3.0.75

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.75

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.74...3.0.75

3.0.74

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.74

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.73...3.0.74

3.0.73

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.73

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.72...3.0.73

3.0.72

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.72

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.71...3.0.72

3.0.71

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.71

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.70...3.0.71

3.0.70

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.70

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.69...3.0.70

3.0.69

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.69

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.68...3.0.69

3.0.68

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.68

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.67...3.0.68

3.0.67

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.67

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.66...3.0.67

3.0.66

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.66

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.65...3.0.66

3.0.65

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.65

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.64...3.0.65

3.0.64

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.64

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.63...3.0.64

3.0.63

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.63

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.62...3.0.63

3.0.62

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.62

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.61...3.0.62

3.0.61

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.61

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.60...3.0.61

3.0.60

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.60

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.59...3.0.60

3.0.59

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.59

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.58...3.0.59

3.0.58

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.58

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.57...3.0.58

3.0.57

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.57

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.56...3.0.57

3.0.56

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.56

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.55...3.0.56

3.0.55

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.55

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.54...3.0.55

3.0.54

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.54

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.53...3.0.54

3.0.53

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.53

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.52...3.0.53

3.0.52

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.52

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.51...3.0.52

3.0.51

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.51

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.50...3.0.51

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore from 9.0.15 to 9.0.16.

Release notes

Sourced from Microsoft.EntityFrameworkCore's releases.

9.0.16

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.15...v9.0.16

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Design from 9.0.15 to 9.0.16.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Design's releases.

9.0.16

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.15...v9.0.16

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Relational from 9.0.15 to 9.0.16.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Relational's releases.

9.0.16

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.15...v9.0.16

Commits viewable in compare view.

Updated Microsoft.Extensions.AI from 10.5.0 to 10.6.0.

Release notes

Sourced from Microsoft.Extensions.AI's releases.

10.6.0

Version 10.6.0 stabilizes the response continuation token and background-response APIs in Microsoft.Extensions.AI.Abstractions. Most other AI work for May shipped in 10.5.1; this monthly release rolls those changes up alongside dependency updates and a small Resource Monitoring cleanup.

Experimental API Changes

Now Stable

  • ResponseContinuationToken and background-response APIs are now stable (previously MEAI001) #​7512

What's Changed

AI

  • Stabilize ResponseContinuationToken / background-response APIs #​7512 by @​jozkee (co-authored by @​Copilot)

Repository Infrastructure Updates

  • Update version to 10.6.0 #​7458 by @​jeffhandley
  • [main] Update dependencies from dotnet/arcade #​7451
  • Bump follow-redirects from 1.15.11 to 1.16.0 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript/azure-devops-report/tasks/PublishAIEvaluationReport #​7469
  • Merge release/10.5 into main #​7470 by @​jeffhandley
  • Bump microsoft.visualstudio.slngen.tool from 12.0.13 to 12.0.32 #​7484
  • Bump postcss from 8.5.9 to 8.5.12 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7494
  • Bump dotnet-reportgenerator-globaltool from 5.5.7 to 5.5.9 #​7504
  • Rename release-notes skill to write-release-notes #​7511 by @​jeffhandley (co-authored by @​Copilot)

Acknowledgements

  • @​wtgodbe @​tarekgh @​peterwald @​JeremyLikness @​eiriktsarpalis @​ericstj @​evgenyfedorov2 reviewed pull requests

Full Changelog: dotnet/extensions@v10.5.2...v10.6.0

10.5.2

This patch release ships a single fix to Microsoft.Extensions.VectorData.Abstractions, correcting StorageName resolution when external serialization is enabled. Microsoft.Extensions.VectorData.ConformanceTests, Microsoft.Extensions.AI.Abstractions, Microsoft.Extensions.AI, and Microsoft.Extensions.AI.OpenAI are published alongside it for version coherency — they contain no code changes from 10.5.1.

Packages in this release

Package Version
Microsoft.Extensions.VectorData.Abstractions 10.5.2
Microsoft.Extensions.VectorData.ConformanceTests 10.5.2
Microsoft.Extensions.AI.Abstractions 10.5.2
Microsoft.Extensions.AI 10.5.2
Microsoft.Extensions.AI.OpenAI 10.5.2

What's Changed

Microsoft.Extensions.VectorData.Abstractions

  • Minor fixes to MEVD.Abstractions: correct StorageName behavior when external serialization is enabled, and disable a warning for net462. (by @​roji in #​7475)

Full Changelog: dotnet/extensions@v10.5.1...v10.5.2

10.5.1

Version 10.5.1 of the Microsoft.Extensions.AI packages stabilizes CodeInterpreter, WebSearch, and ImageGeneration tool content types. The release adds new experimental tool search and OpenAI request policy hooks. And the OpenTelemetry gen-ai semantic conventions are updated to align with v1.41.

The 'aiagent-webapi' project template in Microsoft.Agents.AI.ProjectTemplates is updated to align with v1.3.0 of Agent Framework, updating the OpenTelemetry dependencies within the template projects as well.

Packages in this release

Package Version
Microsoft.Extensions.AI 10.5.1
Microsoft.Extensions.AI.Abstractions 10.5.1
Microsoft.Extensions.AI.OpenAI 10.5.1
Microsoft.Extensions.AI.Templates 10.5.1-preview.3.26251.3
Microsoft.Agents.AI.ProjectTemplates 1.3.0-preview.1.26251.3

Experimental API Changes

Now Stable

The following types previously emitted the MEAI001 experimental diagnostic and are now stable.

  • CodeInterpreter and WebSearch tool content types are now stable #​7493
    • CodeInterpreterToolCallContent
    • CodeInterpreterToolResultContent
    • WebSearchToolCallContent
    • WebSearchToolResultContent
  • ImageGeneration tool content types and tool are now stable #​7476
    • ImageGenerationToolCallContent
    • ImageGenerationToolResultContent
    • HostedImageGenerationTool
    • ImageGenerationOptions
    • ImageGenerationResponseFormat (the Hosted enum value remains experimental)
    • IImageGenerator and the rest of the image generation infrastructure also remain experimental

New Experimental APIs

The following new APIs emit the MEAI001 experimental diagnostic.

  • New experimental API: HostedToolSearchTool with DeferredTools for tool-search-driven deferred tool loading #​7471
  • New experimental API: OpenAIRequestPolicies extension hook for appending System.ClientModel.PipelinePolicy instances to outgoing OpenAI requests #​7495

Breaking Changes to Experimental APIs

  • WebSearchToolResultContent.Results was renamed to Outputs as part of the stabilization in #​7493, aligning with CodeInterpreterToolResultContent.Outputs. The original Results property was included in version 10.4.0 and 10.5.0; this is a binary breaking change and consumers need to update to consume the updated property.

    WebSearchToolResultContent content = ...;
- IList<AIContent>? items = content.Results;
+ IList<AIContent>? items = content.Outputs;

... (truncated)

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration from 10.0.6 to 10.0.8.

Release notes

Sourced from Microsoft.Extensions.Configuration's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.Binder from 10.0.6 to 10.0.8.

Release notes

Sourced from Microsoft.Extensions.Configuration.Binder's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.EnvironmentVariables from 10.0.6 to 10.0.8.

Release notes

Sourced from Microsoft.Extensions.Configuration.EnvironmentVariables's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.Json from 10.0.6 to 10.0.8.

Release notes

Sourced from Microsoft.Extensions.Configuration.Json's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Options.ConfigurationExtensions from 10.0.6 to 10.0.8.

Release notes

Sourced from Microsoft.Extensions.Options.ConfigurationExtensions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.TimeProvider.Testing from 10.5.0 to 10.6.0.

Release notes

Sourced from Microsoft.Extensions.TimeProvider.Testing's releases.

10.6.0

Version 10.6.0 stabilizes the response continuation token and background-response APIs in Microsoft.Extensions.AI.Abstractions. Most other AI work for May shipped in 10.5.1; this monthly release rolls those changes up alongside dependency updates and a small Resource Monitoring cleanup.

Experimental API Changes

Now Stable

  • ResponseContinuationToken and background-response APIs are now stable (previously MEAI001) #​7512

What's Changed

AI

  • Stabilize ResponseContinuationToken / background-response APIs #​7512 by @​jozkee (co-authored by @​Copilot)

Repository Infrastructure Updates

  • Update version to 10.6.0 #​7458 by @​jeffhandley
  • [main] Update dependencies from dotnet/arcade #​7451
  • Bump follow-redirects from 1.15.11 to 1.16.0 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript/azure-devops-report/tasks/PublishAIEvaluationReport #​7469
  • Merge release/10.5 into main #​7470 by @​jeffhandley
  • Bump microsoft.visualstudio.slngen.tool from 12.0.13 to 12.0.32 #​7484
  • Bump postcss from 8.5.9 to 8.5.12 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7494
  • Bump dotnet-reportgenerator-globaltool from 5.5.7 to 5.5.9 #​7504
  • Rename release-notes skill to write-release-notes #​7511 by @​jeffhandley (co-authored by @​Copilot)

Acknowledgements

  • @​wtgodbe @​tarekgh @​peterwald @​JeremyLikness @​eiriktsarpalis @​ericstj @​evgenyfedorov2 reviewed pull requests

Full Changelog: dotnet/extensions@v10.5.2...v10.6.0

10.5.2

This patch release ships a single fix to Microsoft.Extensions.VectorData.Abstractions, correcting StorageName resolution when external serialization is enabled. Microsoft.Extensions.VectorData.ConformanceTests, Microsoft.Extensions.AI.Abstractions, Microsoft.Extensions.AI, and Microsoft.Extensions.AI.OpenAI are published alongside it for version coherency — they contain no code changes from 10.5.1.

Packages in this release

Package Version
Microsoft.Extensions.VectorData.Abstractions 10.5.2
Microsoft.Extensions.VectorData.ConformanceTests 10.5.2
Microsoft.Extensions.AI.Abstractions 10.5.2
Microsoft.Extensions.AI 10.5.2
Microsoft.Extensions.AI.OpenAI 10.5.2

What's Changed

Microsoft.Extensions.VectorData.Abstractions

  • Minor fixes to MEVD.Abstractions: correct StorageName behavior when external serialization is enabled, and disable a warning for net462. (by @​roji in #​7475)

Full Changelog: dotnet/extensions@v10.5.1...v10.5.2

10.5.1

Version 10.5.1 of the Microsoft.Extensions.AI packages stabilizes CodeInterpreter, WebSearch, and ImageGeneration tool content types. The release adds new experimental tool search and OpenAI request policy hooks. And the OpenTelemetry gen-ai semantic conventions are updated to align with v1.41.

The 'aiagent-webapi' project template in Microsoft.Agents.AI.ProjectTemplates is updated to align with v1.3.0 of Agent Framework, updating the OpenTelemetry dependencies within the template projects as well.

Packages in this release

Package Version
Microsoft.Extensions.AI 10.5.1
Microsoft.Extensions.AI.Abstractions 10.5.1
Microsoft.Extensions.AI.OpenAI 10.5.1
Microsoft.Extensions.AI.Templates 10.5.1-preview.3.26251.3
Microsoft.Agents.AI.ProjectTemplates 1.3.0-preview.1.26251.3

Experimental API Changes

Now Stable

The following types previously emitted the MEAI001 experimental diagnostic and are now stable.

  • CodeInterpreter and WebSearch tool content types are now stable #​7493
    • CodeInterpreterToolCallContent
    • CodeInterpreterToolResultContent
    • WebSearchToolCallContent
    • WebSearchToolResultContent
  • ImageGeneration tool content types and tool are now stable #​7476
    • ImageGenerationToolCallContent
    • ImageGenerationToolResultContent
    • HostedImageGenerationTool
    • ImageGenerationOptions
    • ImageGenerationResponseFormat (the Hosted enum value remains experimental)
    • IImageGenerator and the rest of the image generation infrastructure also remain experimental

New Experimental APIs

The following new APIs emit the MEAI001 experimental diagnostic.

  • New experimental API: HostedToolSearchTool with DeferredTools for tool-search-driven deferred tool loading #​7471
  • New experimental API: OpenAIRequestPolicies extension hook for appending System.ClientModel.PipelinePolicy instances to outgoing OpenAI requests #​7495

Breaking Changes to Experimental APIs

  • WebSearchToolResultContent.Results was renamed to Outputs as part of the stabilization in #​7493, aligning with CodeInterpreterToolResultContent.Outputs. The original Results property was included in version 10.4.0 and 10.5.0; this is a binary breaking change and consumers need to update to consume the updated property.

    WebSearchToolResultContent content = ...;
- IList<AIContent>? items = content.Results;
+ IList<AIContent>? items = content.Outputs;

... (truncated)

Commits viewable in compare view.

Updated Microsoft.ML.OnnxRuntime from 1.24.4 to 1.26.0.

Release notes

Sourced from Microsoft.ML.OnnxRuntime's releases.

1.26.0

n.b. The following was generated via LLM from Git history. Only the contributor list has been verified.

ONNX Runtime Release 1.26.0

Announcement - Breaking Changes

  • Support for CUDA 12 will be removed in 1.27.0.
    • CUDA 13 will continue to be published as onnxruntime-<os>-<arch>-gpu_cuda13-<version>.<ext>
  • CUDA runtime will be moving soon to a dedicated Execution Provider (EP) instead of a published package from ORT core.

Highlights

  • Added optional memory mapping for .ort model loads (#​28164).
  • Added RISC-V Vector (RVV) support for CPU EP (#​28261).
  • OpenVINO EP upgraded for 1.26.0 development release (#​28297).
  • WebGPU gained GridSample support (#​28264) and Split-K improvements (#​28151).
  • CUDA plugin EP gained graph support (#​28002), profiling API (#​28216).

Security and Reliability Hardening

  • Replaced unrestricted Python setattr configuration with an allowlist (#​28083).
  • Hardened multiple OOB and overflow scenarios across ML and core ops:
  • Fixed session logger use-after-free during EP teardown under verbose logging (#​28274).

CUDA, Attention, and MLAS

  • Filled CUDA opset/operator gaps and extended support:
    • Transpose opset 23 -> 25 (#​27740).
    • QuantizeLinear/DequantizeLinear opset 25 (#​28046).
    • CUDA TopK INT8/INT16/UINT8 support (#​27862).
    • LabelEncoder CUDA support for numeric types (#​28045).
  • Attention/GQA improvements:
    • Fixed ONNX Attention min-bias alignment crash on SM<80 and masked-batch NaN behavior (#​27831).
    • Added FP32 QK accumulation path for unfused GQA attention (#​28198).
    • Added CUDART_VERSION reduction compatibility in GQA attention (#​28296).
    • Fixed CUDA 13 build error in GQA unfused attention (#​28309).
    • PagedAttention fallback for SM<80 fp16 (#​28200).
  • MLAS updates:
    • FP16 Gelu enablement (#​26815).
    • Arm64 BF16 fast-math conv kernels for NCHW/NCHWc paths (#​27878).

WebGPU, WebNN, and JavaScript

... (truncated)

1.25.1

n.b. This changelog is LLM generated. Only the contributor listing has been verified.

ONNX Runtime Release 1.25.1

📢 Announcements & Breaking Changes

ONNX Op Updates

  • Enhanced ONNX operator support with new opset versions: Reshape (opset 25), Transpose (opset 24) (#​27752)

✨ New Features

📊 New ONNX Ops & Model Support

  • LinearAttention and CausalConvState operators for Qwen3.5 model support (#​27907)
  • RotaryEmbedding (RotEMB) and RMSNorm operators added (#​27752)
  • Linear Attention signature support (#​27842)

🌐 Web & JavaScript

WebGPU EP

  • Qwen3.5 model support on WebGPU execution provider (#​27996)
  • QMoE 1-token decode path optimization — fused operations to reduce GPU dispatches for improved performance (#​27998)

🐛 Bug Fixes

Core Runtime Fixes

  • Improved filesystem error messages during Linux device discovery for better debugging experience (#​27289)
  • Fixed missing include for SetRawDataInTensorProto in NVIDIA TensorRT RTX tests (#​28065)

🙏 Contributors

Thanks to our 7 contributors for this release:
@​guschmue, @​sanaa-hamel-microsoft, @​apsonawane, @​eserscor, @​ishwar-raut1, @​qjia7, @​theHamsta

Full Changelog: microsoft/onnxruntime@v1.25.0...v1.25.1

1.25.0

📢 Announcements & Breaking Changes

Build & Platform

  • C++20 is now required to build ONNX Runtime from source. Minimum toolchains: MSVC 19.29+, GCC 10+, Clang 10+. Users of prebuilt packages are unaffected. (#​27178)
  • CUDA minimum version raised to 12.0 — CUDA 11.x is no longer supported. Users pinned to CUDA 11.x should stay on ORT 1.24.x or upgrade their CUDA toolkit/driver. (#​27570)
  • ONNX upgraded to 1.21.0 (#​27601)
  • sympy is now an optional dependency for Python builds. (#​27200)

Execution Provider Changes

  • ArmNN EP has been removed. Users should remove any --use_armnn build flags and migrate to the MLAS/KleidiAI-backed CPU EP or QNN EP for Qualcomm hardware. (#​27447)

API Version

🔒 Security Fixes

  • Fixed potential integer truncation leading to heap out-of-bounds read/write (#​27544)
  • Addressed Pad Reflect vulnerability (#​27652)
  • Security fix for transpose optimizer (#​27555)
  • Upgraded minimatch 3.1.2 → 3.1.4 for CVE-2026-27904 (#​27667)
  • Hardened shell command handling for constant strings (#​27840)
  • Added validation of onnx::TensorProto data size before allocation (#​27547)
  • Cleaned up external data path validation (#​27539)
  • Fixed misaligned address reads for tensor attributes from raw data buffers (#​27312)
  • Fixed CPU Attention overflow issue (#​27822)
  • Fixed CPU LRN integer overflow issues (#​27886)
  • Additional input validation hardening:

✨ New Features

🔌 Execution Provider Plugin API & CUDA Plugin EP

... (truncated)

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.4.0 to 18.6.0.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.6.0

What's Changed

Changes to tests and infra

18.5.1

What's Changed

Full Changelog: microsoft/vstest@v18.5.0...v18.5.1

18.5.0

⚠️ Unlisted on Nuget, because of #​15718

What's Changed

Full Changelog: microsoft/vstest@v18.4.0...v18.5.0

Commits viewable in compare view.

Updated ModelContextProtocol from 1.2.0 to 1.3.0.

Release notes

Sourced from ModelContextProtocol's releases.

1.3.0

v1.3.0 focuses on improved transport diagnostics and security-focused documentation. The new public ClientTransportClosedException gives stdio and HTTP clients structured access to transport closure details (exit codes, process IDs, stderr tails, HTTP status codes) without parsing exception messages. Two reliability fixes harden the stdio process pipeline (preventing host crashes from user StandardErrorLines callbacks) and correct the stateless HTTP transport's capability advertisement. New conceptual documentation covers role/identity propagation in tool execution, allowed-hosts and CORS guidance for HTTP servers, and aligns the docs information architecture with the MCP specification structure.

What's Changed

  • Make ClientTransportClosedException public and unify transport exception handling #​1467 by @​stephentoub (co-authored by @​halter73 @​Copilot)
    • As part of this unification, SSE/HTTP client connection failures from McpClient.CreateAsync(...) now surface as IOException (the new ClientTransportClosedException derives from IOException) rather than InvalidOperationException. Caller-triggered OperationCanceledException is also no longer wrapped, matching standard async cancellation semantics.
  • Fix process crash when testing Stderr #​1449 by @​ericstj (co-authored by @​Copilot)
  • Fix stateless HTTP transport advertising listChanged capability #​1509 by @​jayaraman-venkatesan

Documentation Updates

  • docs: align docs IA with MCP specification structure #​1481 by @​jeffhandley (co-authored by @​mikekistler @​Copilot)
  • Document recommended pattern for role/identity propagation in MCP tool execution #​1497 by @​jeffhandley (co-authored by @​halter73 @​mikekistler @​Copilot)
  • Document and demonstrate allowed hosts and CORS policy guidance #​1554 by @​jeffhandley (co-authored by @​halter73 @​mikekistler @​Copilot)

Test Improvements

  • Fix flaky OutgoingFilter_MultipleFilters_ExecuteInOrder test #​1488 by @​ericstj (co-authored by @​Copilot)

Repository Infrastructure Updates

  • Bump the opentelemetry-testing group with 5 updates #​1478
  • Bump actions/deploy-pages from 4.0.5 to 5.0.0 #​1477
  • Bump actions/download-artifact from 8.0.0 to 8.0.1 #​1437
  • Bump actions/setup-dotnet from 5.1.0 to 5.2.0 #​1418
  • Bump actions/setup-node from 6.2.0 to 6.3.0 #​1419
  • Bump the testing-frameworks group with 1 update #​1459
  • Bump the npm_and_yarn group across 1 directory with 2 updates #​1410
  • Switch to custom CodeQL workflow #​1489 by @​jeffhandley
  • Block Release Publishing workflow from automatically running on forks #​1450 by @​jeffhandley (co-authored by @​Copilot)
  • Bump actions/checkout from 4 to 6 #​1504
  • Add testing guidelines, update copilot instructions for tests #​1507 by @​ericstj
  • Bump OpenTelemetry and 3 others #​1514
  • Bump the opentelemetry-testing group with 6 updates #​1533
  • Bump actions/setup-node from 6.3.0 to 6.4.0 #​1522
  • Bump actions/upload-pages-artifact from 4.0.0 to 5.0.0 #​1511
  • Bump the npm_and_yarn group across 1 directory with 5 updates #​1500
  • Bump Anthropic from 12.9.0 to 12.11.0 #​1506
  • Bump actions/upload-artifact from 7.0.0 to 7.0.1 #​1512
  • Bump danielpalme/ReportGenerator-GitHub-Action from 5.5.4 to 5.5.5 #​1521
  • Bump the testing-frameworks group with 2 updates #​1523
  • Bump the other-testing group with 2 updates #​1534
  • Bump Microsoft.Extensions.AI from 10.4.1 to 10.5.0 #​1525
  • Remove extraneous labels from dependabot.yml #​1535 by @​mikekistler
  • Bump Anthropic from 12.11.0 to 12.17.0 #​1544
  • Fix dev container configuration to work in codespaces #​1555 by @​mikekistler
  • Bump Microsoft.NET.Test.Sdk from 18.4.0 to 18.5.1 #​1543
  • Bump the npm_and_yarn group across 1 directory with 3 updates #​1565
  • Bump Microsoft.Extensions.AI.Abstractions from 10.5.0 to 10.5.2 #​1561

... (truncated)

Commits viewable in compare view.

Updated ModelContextProtocol.AspNetCore from 1.2.0 to 1.3.0.

Release notes

Sourced from ModelContextProtocol.AspNetCore's releases.

1.3.0

v1.3.0 focuses on improved transport diagnostics and security-focused documentation. The new public ClientTransportClosedException gives stdio and HTTP clients structured access to transport closure details (exit codes, process IDs, stderr tails, HTTP status codes) without parsing exception messages. Two reliability fixes harden the stdio process pipeline (preventing host crashes from user StandardErrorLines callbacks) and correct the stateless HTTP transport's capability advertisement. New conceptual documentation covers role/identity propagation in tool execution, allowed-hosts and CORS guidance for HTTP servers, and aligns the docs information architecture with the MCP specification structure.

What's Changed

  • Make ClientTransportClosedException public and unify transport exception handling #​1467 by @​stephentoub (co-authored by @​halter73 @​Copilot)
    • As part of this unification, SSE/HTTP client connection failures from McpClient.CreateAsync(...) now surface as IOException (the new ClientTransportClosedException derives from IOException) rather than InvalidOperationException. Caller-triggered OperationCanceledException is also no longer wrapped, matching standard async cancellation semantics.
  • Fix process crash when testing Stderr #​1449 by @​ericstj (co-authored by @​Copilot)
  • Fix stateless HTTP transport advertising listChanged capability #​1509 by @​jayaraman-venkatesan

Documentation Updates

  • docs: align docs IA with MCP specification structure #​1481 by @​jeffhandley (co-authored by @​mikekistler @​Copilot)
  • Document recommended pattern for role/identity propagation in MCP tool execution #​1497 by @​jeffhandley (co-authored by @​halter73 @​mikekistler @​Copilot)
  • Document and demonstrate allowed hosts and CORS policy guidance #​1554 by @​jeffhandley (co-authored by @​halter73 @​mikekistler @​Copilot)

Test Improvements

  • Fix flaky OutgoingFilter_MultipleFilters_ExecuteInOrder test #​1488 by @​ericstj (co-authored by @​Copilot)

Repository Infrastructure Updates

  • Bump the opentelemetry-testing group with 5 updates #​1478
  • Bump actions/deploy-pages from 4.0.5 to 5.0.0 #​1477
  • Bump actions/download-artifact from 8.0.0 to 8.0.1 #​1437
  • Bump actions/setup-dotnet from 5.1.0 to 5.2.0 #​1418
  • Bump actions/setup-node from 6.2.0 to 6.3.0 #​1419
  • Bump the testing-frameworks group with 1 update #​1459
  • Bump the npm_and_yarn group across 1 directory with 2 updates #​1410
  • Switch to custom CodeQL workflow #​1489 by @​jeffhandley
  • Block Release Publishing workflow from automatically running on forks #​1450 by @​jeffhandley (co-authored by @​Copilot)
  • Bump actions/checkout from 4 to 6 #​1504
  • Add testing guidelines, update copilot instructions for tests #​1507 by @​ericstj
  • Bump OpenTelemetry and 3 others #​1514
  • Bump the opentelemetry-testing group with 6 updates #​1533
  • Bump actions/setup-node from 6.3.0 to 6.4.0 #​1522
  • Bump actions/upload-pages-artifact from 4.0.0 to 5.0.0 #​1511
  • Bump the npm_and_yarn group across 1 directory with 5 updates #​1500
  • Bump Anthropic from 12.9.0 to 12.11.0 #​1506
  • Bump actions/upload-artifact from 7.0.0 to 7.0.1 #​1512
  • Bump danielpalme/ReportGenerator-GitHub-Action from 5.5.4 to 5.5.5 #​1521
  • Bump the testing-frameworks group with 2 updates #​1523
  • Bump the other-testing group with 2 updates #​1534
  • Bump Microsoft.Extensions.AI from 10.4.1 to 10.5.0 #​1525
  • Remove extraneous labels from dependabot.yml #​1535 by @​mikekistler
  • Bump Anthropic from 12.11.0 to 12.17.0 #​1544
  • Fix dev container configuration to work in codespaces #​1555 by @​mikekistler
  • Bump Microsoft.NET.Test.Sdk from 18.4.0 to 18.5.1 #​1543
  • Bump the npm_and_yarn group across 1 directory with 3 updates #​1565
  • Bump Microsoft.Extensions.AI.Abstractions from 10.5.0 to 10.5.2 #​1561

... (truncated)

Commits viewable in compare view.

Updated SonarAnalyzer.CSharp from 10.23.0.137933 to 10.27.0.140913.

Release notes

Sourced from SonarAnalyzer.CSharp's releases.

10.27.0.140913

Release notes - .NET Analyzers - 10.27

Feature

NET-1285 S2629: Add custom message for Log4Net and Castle.Core
NET-3666 Deprecate S5042 and move it from HotSpots to Code Smell
NET-3783 Update RSPEC before 10.27 release

False Positive

NET-2696 Fix S4260 FP: Extension Properties always raise

False Negative

NET-230 Fix S4056 FN: SpecifyIFormatProviderOrCultureInfo for C#​13 compatibility
NET-2692 Fix S2190 FN: Recursive extension properties
NET-2705 Fix S3343 FN: Partial Constructor with attribute in definition
[NET-2732](https://sonarsource.atlassian.net/bro...

_De...

Description has been truncated

@dependabot
Bump the minor-and-patch group with 19 updates
6a4daf9 
Bumps FluentAssertions from 8.9.0 to 8.10.0
Bumps Meziantou.Analyzer from 3.0.50 to 3.0.98
Bumps Microsoft.EntityFrameworkCore from 9.0.15 to 9.0.16
Bumps Microsoft.EntityFrameworkCore.Design from 9.0.15 to 9.0.16
Bumps Microsoft.EntityFrameworkCore.Relational from 9.0.15 to 9.0.16
Bumps Microsoft.Extensions.AI from 10.5.0 to 10.6.0
Bumps Microsoft.Extensions.Configuration from 10.0.6 to 10.0.8
Bumps Microsoft.Extensions.Configuration.Binder from 10.0.6 to 10.0.8
Bumps Microsoft.Extensions.Configuration.EnvironmentVariables from 10.0.6 to 10.0.8
Bumps Microsoft.Extensions.Configuration.Json from 10.0.6 to 10.0.8
Bumps Microsoft.Extensions.Options.ConfigurationExtensions from 10.0.6 to 10.0.8
Bumps Microsoft.Extensions.TimeProvider.Testing from 10.5.0 to 10.6.0
Bumps Microsoft.ML.OnnxRuntime from 1.24.4 to 1.26.0
Bumps Microsoft.NET.Test.Sdk from 18.4.0 to 18.6.0
Bumps ModelContextProtocol from 1.2.0 to 1.3.0
Bumps ModelContextProtocol.AspNetCore from 1.2.0 to 1.3.0
Bumps SonarAnalyzer.CSharp from 10.23.0.137933 to 10.27.0.140913
Bumps System.CommandLine from 2.0.6 to 2.0.8
Bumps Testcontainers.PostgreSql from 4.11.0 to 4.12.0

---
updated-dependencies:
- dependency-name: FluentAssertions
  dependency-version: 8.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: Meziantou.Analyzer
  dependency-version: 3.0.98
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: Microsoft.EntityFrameworkCore
  dependency-version: 9.0.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: Microsoft.EntityFrameworkCore.Design
  dependency-version: 9.0.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: Microsoft.EntityFrameworkCore.Relational
  dependency-version: 9.0.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: Microsoft.Extensions.AI
  dependency-version: 10.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: Microsoft.Extensions.Configuration
  dependency-version: 10.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: Microsoft.Extensions.Configuration.Binder
  dependency-version: 10.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: Microsoft.Extensions.Configuration.EnvironmentVariables
  dependency-version: 10.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: Microsoft.Extensions.Configuration.Json
  dependency-version: 10.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: Microsoft.Extensions.Options.ConfigurationExtensions
  dependency-version: 10.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: Microsoft.Extensions.TimeProvider.Testing
  dependency-version: 10.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: Microsoft.ML.OnnxRuntime
  dependency-version: 1.26.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: ModelContextProtocol
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: ModelContextProtocol.AspNetCore
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: SonarAnalyzer.CSharp
  dependency-version: 10.27.0.140913
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: System.CommandLine
  dependency-version: 2.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: Testcontainers.PostgreSql
  dependency-version: 4.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Jun 1, 2026

Copy link
Copy Markdown
Author

Labels

The following labels could not be found: deps, nuget. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot mentioned this pull request Jun 1, 2026
Closed
@dependabot @github

dependabot Bot commented on behalf of github Jun 8, 2026

Copy link
Copy Markdown
Author

Superseded by #18.

@dependabot dependabot Bot closed this Jun 8, 2026
@dependabot dependabot Bot deleted the dependabot/nuget/minor-and-patch-dd75648eb4 branch June 8, 2026 03:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants