Update all non-major dependencies

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update	Pending
AWSSDK.S3	4.0.18.7 → 4.0.19.1					nuget	patch
Microsoft.AspNetCore.Authentication.JwtBearer (source)	10.0.3 → 10.0.5					nuget	patch
Microsoft.AspNetCore.Identity.EntityFrameworkCore (source)	10.0.3 → 10.0.5					nuget	patch
Microsoft.AspNetCore.OpenApi (source)	10.0.3 → 10.0.5					nuget	patch
Microsoft.AspNetCore.OutputCaching.StackExchangeRedis (source)	10.0.3 → 10.0.5					nuget	patch
Microsoft.EntityFrameworkCore.InMemory (source)	10.0.3 → 10.0.5					nuget	patch
Microsoft.EntityFrameworkCore.Tools (source)	10.0.3 → 10.0.5					nuget	patch
Microsoft.Extensions.Caching.Hybrid (source)	10.3.0 → 10.4.0					nuget	minor
Microsoft.Extensions.Caching.StackExchangeRedis (source)	10.0.3 → 10.0.5					nuget	patch
Microsoft.Extensions.Http.Resilience (source)	10.3.0 → 10.4.0					nuget	minor
Microsoft.Extensions.TimeProvider.Testing (source)	10.3.0 → 10.4.0					nuget	minor
Npgsql	10.0.1 → 10.0.2					nuget	patch
Npgsql.EntityFrameworkCore.PostgreSQL	10.0.0 → 10.0.1					nuget	patch
Pyroscope (source)	0.14.1 → 0.14.2					nuget	patch
Refit	10.0.1 → 10.1.6					nuget	minor
Refit.HttpClientFactory	10.0.1 → 10.1.6					nuget	minor
Scalar.AspNetCore (source)	2.13.1 → 2.13.13					nuget	patch	2.13.15 (+1)
StackExchange.Redis (source)	2.11.8 → 2.12.4					nuget	minor	2.12.8
Swashbuckle.AspNetCore	10.1.4 → 10.1.5					nuget	patch	10.1.6
Swashbuckle.AspNetCore.Annotations	10.1.4 → 10.1.5					nuget	patch	10.1.6
System.Threading.RateLimiting (source)	10.0.3 → 10.0.5					nuget	patch
Testcontainers.PostgreSql (source)	4.10.0 → 4.11.0					nuget	minor
coverlet.collector	8.0.0 → 8.0.1					nuget	patch
dotnet-ef (source)	10.0.1 → 10.0.5					nuget	patch
dotnet-sdk	10.0.0 → 10.0.201					dotnet-sdk	patch
prom/prometheus	v3.5.0 → v3.10.0						minor
pyroscope/pyroscope-dotnet	0.13.0-glibc → 0.14.2-glibc					stage	minor

---

Release Notes

aws/aws-sdk-net (AWSSDK.S3)

v4.0.19

dotnet/dotnet (Microsoft.AspNetCore.Authentication.JwtBearer)

v10.0.5

v10.0.4

dotnet/extensions (Microsoft.Extensions.Caching.Hybrid)

v10.4.0

This release advances the AI abstractions with new hosted file, web search, and reasoning content types, stabilizes MCP and tool approval APIs, adds streaming latency metrics to OpenTelemetry instrumentation, and delivers bug fixes across caching, data ingestion, and resource monitoring.

Experimental API Changes

Now Stable

• MCP Server Tool Content and Function Call Approval APIs are now stable (previously MEAI001) #​7299
• FakeLogCollector.GetLogsAsync(CancellationToken) is now stable (previously EXTEXP0003) #​7332

New Experimental APIs

• New experimental AddExtendedHttpClientLogging overloads with wrapHandlersPipeline parameter (EXTEXP0013) #​7231

Removed Experimental APIs

• AI Tool Reduction experimental APIs removed (was experimental under MEAI001) #​7353

What's Changed

AI

• Add IHostedFileClient and friends #​7269 by @​stephentoub
• Add web search tool call content #​7276 by @​stephentoub (co-authored by @​Copilot)
• Surface OpenAI-compatible reasoning_content as TextReasoningContent #​7295 by @​stephentoub
• MCP/Approvals/Tool Contents stabilization #​7299 by @​jozkee
• Implement time_to_first_chunk and time_per_output_chunk streaming metrics in OpenTelemetryChatClient #​7325 by @​stephentoub (co-authored by @​Copilot)
• Add openai.api.type telemetry attribute to OpenAI IChatClient implementations #​7316 by @​stephentoub (co-authored by @​Copilot)
• Update OpenTelemetry Gen AI semantic conventions to v1.40 #​7322 by @​stephentoub (co-authored by @​Copilot)
• Fix tool definitions emission regardless of sensitivity setting #​7346 by @​stephentoub (co-authored by @​Copilot)
• Honor [Required] attribute in AI function parameter JSON schema generation #​7272 by @​stephentoub (co-authored by @​Copilot)
• AddAIContentType automatically registers content type against every base in the inheritance chain up to AIContent #​7358 by @​jozkee (co-authored by @​Copilot)
• Auto-mark server-handled FunctionCallContent as InformationalOnly #​7314 by @​stephentoub (co-authored by @​Copilot)
• Map ReasoningEffort.None and ExtraHigh to none and xhigh in OpenAI IChatClient implementations #​7319 by @​stephentoub (co-authored by @​Copilot)
• Handle DynamicMethod reflection limitations in AIFunctionFactory #​7287 by @​stephentoub (co-authored by @​Copilot)
• Fix Activity.Current nulled during streaming tool invocation #​7321 by @​flaviocdc (co-authored by @​Copilot)
• Handle FunctionCallOutputResponseItem in streaming response conversion #​7307 by @​stephentoub (co-authored by @​Copilot)
• Fix serialization of response continuation tokens #​7356 by @​stephentoub
• Remove AI Tool Reduction experimental APIs #​7353 by @​stephentoub (co-authored by @​Copilot)
• Update OpenAI to 2.9.1 #​7349 by @​stephentoub

Telemetry and Observability

• Introduce support for the Gauge metric type #​7203 by @​rainsxng
• Update logging source generator to support generic methods #​7331 by @​svick (co-authored by @​Copilot)
• Update logging source generator to match runtime PR #​124589 (ref readonly/params/scoped) #​7333 by @​svick (co-authored by @​Copilot)
• Promote FakeLogCollector.GetLogsAsync(CancellationToken) from experimental to stable #​7332 by @​Demo30
• Remove obsolete CS1591 warning suppression from generated file preamble #​7308 by @​luissena

HTTP Resilience and Diagnostics

• Expose wrapHandlersPipeline parameter in AddExtendedHttpClientLogging API #​7231 by @​rainsxng (co-authored by @​Copilot)

Diagnostics, Health Checks, and Resource Monitoring

• Add scaling to [0, 100] for LinuxUtilizationProvider #​7289 by @​amadeuszl

Data Ingestion

• Fix infinite loop in GetPreExistingChunksIdsAsync when records exceed MaxTopCount #​7311 by @​adamsitnik (co-authored by @​Copilot)

Caching

• Fix buffer copying for HybridCachePayload. #​7343 by @​cincuranet

Test Improvements

• Fix flaky LinuxResourceHealthCheckTests by isolating MeterListener with ReferenceEquals #​7302 by @​stephentoub (co-authored by @​Copilot)
• Fix flaky resource monitoring test #​7303 by @​stephentoub
• Fix flaky HttpRequestBuffering_DoesNotBufferDisabledOrOversizedLogs test #​7304 by @​stephentoub (co-authored by @​Copilot)
• Fix race condition in FakeLogCollector async enumeration test #​7300 by @​stephentoub (co-authored by @​Copilot)
• Fix cgroupv1 acceptance test to explicitly register the v1 parser #​7296 by @​stephentoub (co-authored by @​Copilot)

Repository Infrastructure Updates

• Update McpServer project template to ModelContextProtocol 1.1.0 #​7338 by @​jeffhandley (co-authored by @​Copilot)
• Update aiagent-webapi template to latest Agent Framework versions (rc1/260219) #​7339 by @​jeffhandley (co-authored by @​Copilot)
• Update SDK and dotnet version to 10.0.103 #​7326 by @​wtgodbe
• Introduce an ApiChief skill to streamline updating API baselines #​7281 by @​jeffhandley (co-authored by @​Copilot)
• Update ApiChief script to use the net10.0 artifacts #​7280 by @​jeffhandley
• Replace Windows queue image references from vs2022preview to vs2022 in pipeline YAML #​7347 by @​wtgodbe (co-authored by @​Copilot)
• Update public pipeline pool images to fix broken builds #​7292 by @​joperezr
• Use smaller windows.vs2022.amd64.open pool image #​7298 by @​joperezr
• Remove main-to-dev inter-branch merge automation #​7315 by @​joperezr (co-authored by @​Copilot)
• Updating FakeLogCollector API baselines #​7334 by @​Demo30
• Run the issue-labeler over pull requests using polling #​7273 by @​jeffhandley (co-authored by @​Copilot)
• Add npmAuthenticate task to fix npm E401 errors on CI agents #​7364 by @​ilonatommy (co-authored by @​Copilot)
• Pass sourceIndexBuildCommand through to SourceIndex #​7348 by @​wtgodbe
• Bump qs from 6.14.1 to 6.14.2 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7301
• Bump rollup from 4.40.0 to 4.59.0 #​7345

Acknowledgements

• @​luissena made their first contribution in #​7308
• @​flaviocdc made their first contribution in #​7321
• @​bryjen submitted issue #​7271 (resolved by #​7272)
• @​vsantele submitted issue #​7306 (resolved by #​7307)
• @​evgenyfedorov2 @​eiriktsarpalis @​tarekgh @​ericstj @​iliar-turdushev @​rogerbarreto @​shyamnamboodiripad @​DeagleGross @​MihaZupan @​akoeplinger @​mattleibow @​rafal-mz @​roji @​rosebyte reviewed pull requests

Full Changelog: dotnet/extensions@v10.3.0...v10.4.0

npgsql/npgsql (Npgsql)

v10.0.2

v10.0.2 contains several minor bug fixes.

Milestone issues

Full Changelog: npgsql/npgsql@v10.0.1...v10.0.2

reactiveui/refit (Refit)

v10.1.6

Compare Source

🗞️ What's Changed

🐛 Fixes

• @​cfe6862 Fixes examples, issues 2058, 1761, 1889, and 2056 (#​2061) @​ChrisPulman
• @​71e7a32 Fix is packable (#​2063) @​ChrisPulman

🧹 General Changes

• @​c945712 Update AoT, Add Roslyn 5.0, Update serialisation (#​2062) @​ChrisPulman

📦 Dependencies

• @​d3b9f6e chore(deps): update .net test stack (#​2054) @​ChrisPulman @​renovate[bot]
• @​804eb41 chore(deps): update .net test stack to v8 (#​2057) @​renovate[bot]

📌 Other

• @​14811e0 Enhance release workflow with new jobs and permissions @​ChrisPulman
• @​49858e3 Bump version from 10.0 to 10.1 @​ChrisPulman
• @​2f43b67 Remove productNamespacePrefix from release workflow @​ChrisPulman

🔗 Full Changelog: reactiveui/refit@10.0.1...10.1.6

🙌 Contributions

💖 Thanks to all the contributors: @​ChrisPulman

🤖 Automated services that contributed: @​renovate[bot]

StackExchange/StackExchange.Redis (StackExchange.Redis)

v2.12.4

Compare Source

What's Changed

• Improve detection of connect/handshake failures and how that impacts the retry-policy by @​mgravell in #​3038
• Fix RESP3 client handshakes on non-RESP3 servers by @​mgravell in #​3037

Full Changelog: StackExchange/StackExchange.Redis@2.12.1...2.12.4

v2.12.1

Compare Source

What's Changed

• Add missing LCS outputs and missing RedisType.VectorSet (#​3028 by @​mgravell)
• Track and report multiplexer count (#​3030 by @​mgravell)
• (docs) Add Entra ID authentication docs (#​3023 by @​philon-msft)
• (eng) Improve test infrastructure (toy-server) (#​3021 by @​mgravell, #​3022 by @​mgravell, #​3027 by @​mgravell, #​3028 by @​mgravell)
• (eng) Pre-V2 work: bring RESPite down, toy-server, migrate to AsciiHash (#​3028 by @​mgravell)

Full Changelog: StackExchange/StackExchange.Redis@2.11.8...2.12.1

domaindrivendev/Swashbuckle.AspNetCore (Swashbuckle.AspNetCore)

v10.1.5

What's Changed

• Bump swagger-ui-dist from 5.31.1 to 5.32.0 in /src/Swashbuckle.AspNetCore.SwaggerUI by @​dependabot in #​3814
• Migrate to actions/attest by @​martincostello in #​3815
• Disable secrets-outside-env audit by @​martincostello in #​3823
• Update zizmor to 1.23.1 by @​martincostello in #​3825
• Fix null examples by @​jgarciadelanoceda in #​3803
• Bump dependencies by @​martincostello in #​3835

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.4...v10.1.5

testcontainers/testcontainers-dotnet (Testcontainers.PostgreSql)

v4.11.0

Compare Source

What's Changed

Thanks to all contributors. Once again, really great contributions from everyone 🤝.

The NuGet packages for this release have been attested for supply chain security using actions/attest. This confirms the integrity and provenance of the artifacts and helps ensure they can be trusted: #​21198535.

Please be aware that we have changed the supported and underlying image used for the Cosmos DB module. The latest tag only supports certain environments and provides a limited set of features. Microsoft has introduced a new implementation, vnext-preview, which receives more updates and features. Due to the limitations of the latest tag, we decided to replace it with vnext-preview. You find more information about the image here: https://github.com/Azure/azure-cosmos-db-emulator-docker.

⚠️ Breaking Changes

• feat(CosmosDb): Update base image from latest to vnext-preview (#​1324) @​NelsonBN

🚀 Features

• feat(CosmosDb): Update base image from latest to vnext-preview (#​1324) @​NelsonBN
• feat: Add typed WithResourceMapping(...) overloads (#​1497) @​cimnine
• feat: Add Seq module (#​1276) @​montanehamilton
• feat(PostgreSql): Add WithSsl builder API (#​1529) @​ozkanpakdil
• feat: Add Temporal module (#​1635) @​bgener
• feat: Add module connection string provider (#​1632) @​HofmeisterAn
• fead: Add default container connection string provider (#​1630) @​HofmeisterAn
• feat(ServiceBus): Add method to get HTTP connection string (#​1622) @​NelsonBN

🐛 Bug Fixes

• fix(MongoDb): Wait for post-init startup readiness before replica set initiation (#​1656) @​HofmeisterAn
• fix(Seq): Assert connection string provider (#​1645) @​HofmeisterAn
• fix(EventHubs): Ignore runtime property to support reuse (#​1644) @​franciscosamuel
• fix(ServiceBus): Ignore runtime property to support reuse (#​1643) @​franciscosamuel
• fix(ResourceReaper): Set wait strategy (#​1634) @​HofmeisterAn
• fix(ServiceBus): Workaround health API timeout (#​1625) @​HofmeisterAn
• fix: Do not set console buffer width (ConsoleLogger) (#​1623) @​HofmeisterAn
• fix(EventHubs): Workaround health API timeout (#​1624) @​HofmeisterAn

📖 Documentation

• docs(CosmosDb): Replace unsupported tag 'latest' with 'vnext-preview' (#​1660) @​HofmeisterAn
• docs(Redis): Add example (#​1641) @​HofmeisterAn

🧹 Housekeeping

• chore(examples): Enable NuGet restore lock mode (#​1659) @​HofmeisterAn
• chore: Pin image digest (#​1658) @​HofmeisterAn
• fix: Run OpenSSF Scorecard only on default branch (#​1657) @​HofmeisterAn
• chore: Remove Git LFS tracking for .snk (#​1655) @​HofmeisterAn
• feat: Enable Dependabot for NuGet (repo) (#​1654) @​HofmeisterAn
• feat: Enable Dependabot for NuGet (src) (#​1653) @​HofmeisterAn
• fix: Replace branch protection with ruleset (#​1652) @​HofmeisterAn
• fix: Do not enforce policies for admins (#​1651) @​HofmeisterAn
• fix: Remove missing labels from Dependabot (#​1650) @​HofmeisterAn
• chore: Set top-level permissions to read-all (#​1649) @​HofmeisterAn
• chore: Remove Sonar findings (#​1646) @​HofmeisterAn
• chore: Bump Docker Engine API to 1.52 (#​1633) @​HofmeisterAn
• chore: Update examples to use TC for .NET 4.10.0 (#​1616) @​HofmeisterAn
• feat: Prepare next release cycle (4.11.0) (#​1615) @​HofmeisterAn

📦 Dependency Updates

• chore(deps): Bump Elastic.Clients.Elasticsearch from 8.16.3 to 8.19.15 (#​1647) @​flobernd

coverlet-coverage/coverlet (coverlet.collector)

v8.0.1

Fixed

• Fix [BUG] TypeInitializationException when targeting .NET Framework #​1818
• Fix [BUG] coverlet.MTP build fails with CS0400 due to developmentDependency=true #​1827

Improvements

• Additional improvements needed for .NET Framework instrumentation type import #​1825

Diff between 8.0.0 and 8.0.1

dotnet/sdk (dotnet-sdk)

v10.0.201

Compare Source

v10.0.200: .NET 10.0.4

Compare Source

Release

v10.0.105

Compare Source

v10.0.104

Compare Source

v10.0.103: .NET 10.0.3

Compare Source

Release

What's Changed

• [release/8.0.1xx] Update dependencies from dotnet/templating by @​dotnet-maestro[bot] in #​51980
• [automated] Merge branch 'release/8.0.1xx' => 'release/8.0.3xx' by @​github-actions[bot] in #​51986
• [automated] Merge branch 'release/8.0.3xx' => 'release/8.0.4xx' by @​github-actions[bot] in #​51998
• [release/9.0.3xx] Update dependencies from dotnet/msbuild by @​dotnet-maestro[bot] in #​52037
• [release/9.0.3xx] Update dependencies from dotnet/templating by @​dotnet-maestro[bot] in #​52043
• [release/8.0.4xx] Update dependencies from dotnet/templating by @​dotnet-maestro[bot] in #​52052
• [automated] Merge branch 'release/8.0.4xx' => 'release/9.0.1xx' by @​github-actions[bot] in #​52060
• [automated] Merge branch 'release/9.0.1xx' => 'release/9.0.3xx' by @​github-actions[bot] in #​52061
• [release/10.0.1xx] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in #​52096
• [release/10.0.1xx] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in #​52143
• [release/10.0.1xx] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in #​52152
• [release/10.0.1xx] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in #​52176
• [release/10.0.1xx] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in #​52246
• [release/10.0.1xx] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in #​52259
• [release/10.0.1xx] Avoid discarding file-like arguments in dotnet file.cs invocations by @​github-actions[bot] in #​52266
• Localized file check-in by OneLocBuild Task: Build definition ID 140: Build ID 2865770 by @​dotnet-bot in #​52248
• [release/10.0.1xx] Update osx arm64 helix images by @​github-actions[bot] in #​52354
• [automated] Merge branch 'release/9.0.3xx' => 'release/10.0.1xx' by @​github-actions[bot] in #​52074
• [release/10.0.1xx] Update dependencies from microsoft/testfx by @​dotnet-maestro[bot] in #​52053
• Switch onelocbuild to target release/10.0.2xx branch by @​Copilot in #​52164
• [release/10.0.1xx] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in #​52339
• [release/10.0.1xx] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in #​52372
• [release/10.0.1xx] Update dependencies from microsoft/testfx by @​dotnet-maestro[bot] in #​52371
• [release/10.0.1xx] Update dependencies from microsoft/testfx by @​dotnet-maestro[bot] in #​52392
• [release/10.0.1xx] Fix a file-based app package test by @​jjonescz in #​52450
• [release/10.0.1xx] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in #​52421
• [release/10.0.1xx] Update dependencies from microsoft/testfx by @​dotnet-maestro[bot] in #​52415
• [release/10.0.1xx] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in #​52476
• [release/10.0.1xx] Update dependencies from microsoft/testfx by @​dotnet-maestro[bot] in #​52500
• [release/10.0.1xx] Bump analysislevel constants for .NET 10 release by @​github-actions[bot] in #​52511
• [release/10.0.1xx] Update dependencies from microsoft/testfx by @​dotnet-maestro[bot] in #​52521
• [release/10.0.1xx] Update dependencies from microsoft/testfx by @​dotnet-maestro[bot] in #​52536
• [automated] Merge branch 'release/9.0.3xx' => 'release/10.0.1xx' by @​github-actions[bot] in #​52375
• [release/10.0.1xx] Source code updates from dotnet/dotnet by [@​dotnet-maestro](ht

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.