deps: Bump the all-dependencies group with 25 updates by dependabot[bot] · Pull Request #1039 · ministryofjustice/CFO-CaseAssessmentTrackingSystem

dependabot · 2026-05-01T04:41:38Z

Updated ActualLab.Fusion from 12.2.4 to 12.3.74.

Release notes

Sourced from ActualLab.Fusion's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated ActualLab.Fusion.Blazor from 12.2.4 to 12.3.74.

Release notes

Sourced from ActualLab.Fusion.Blazor's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated ActualLab.Fusion.Ext.Services from 12.2.4 to 12.3.74.

Release notes

Sourced from ActualLab.Fusion.Ext.Services's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated ActualLab.Generators from 12.2.4 to 12.3.74.

Release notes

Sourced from ActualLab.Generators's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated aspire.cli from 13.2.2 to 13.2.3.

Release notes

Sourced from aspire.cli's releases.

13.2.3

What's New in Aspire 13.2.3

Patch release focused on CLI packaging, signing, and reliability fixes.

🐛 Fixes

🛑 aspire stop now properly cleans up application containers on Windows (#16123)
🔐 Fixed macOS signing, permissions, and certificate trust with improved CI verification (#16053)
✍️ Fixed signing for the aspire-managed bundle payload (#16211)
🎭 Fixed Playwright CLI provenance verification for the new tag format (#16134)
🧭 Updated service discovery environment variables (#16223)

🔧 Improvements

📊 Removed telemetry API data limits and refactored URL builders (#16023)
⏱️ Increased native build + sign timeout to 60 minutes for reliability (#16212)

🏷️ Housekeeping

🔖 Bumped branding to 13.2.3 (#16181)
🧪 Temporarily disabled Verify CLI archive step on Windows while investigating (#16276, #16285)

Commits viewable in compare view.

Updated Aspire.Hosting.RabbitMQ from 13.2.2 to 13.2.3.

Release notes

Sourced from Aspire.Hosting.RabbitMQ's releases.

13.2.3

What's New in Aspire 13.2.3

Patch release focused on CLI packaging, signing, and reliability fixes.

🐛 Fixes

🛑 aspire stop now properly cleans up application containers on Windows (#16123)
🔐 Fixed macOS signing, permissions, and certificate trust with improved CI verification (#16053)
✍️ Fixed signing for the aspire-managed bundle payload (#16211)
🎭 Fixed Playwright CLI provenance verification for the new tag format (#16134)
🧭 Updated service discovery environment variables (#16223)

🔧 Improvements

📊 Removed telemetry API data limits and refactored URL builders (#16023)
⏱️ Increased native build + sign timeout to 60 minutes for reliability (#16212)

🏷️ Housekeeping

🔖 Bumped branding to 13.2.3 (#16181)
🧪 Temporarily disabled Verify CLI archive step on Windows while investigating (#16276, #16285)

Commits viewable in compare view.

Updated Aspire.Hosting.SqlServer from 13.2.2 to 13.2.3.

Release notes

Sourced from Aspire.Hosting.SqlServer's releases.

13.2.3

What's New in Aspire 13.2.3

Patch release focused on CLI packaging, signing, and reliability fixes.

🐛 Fixes

🛑 aspire stop now properly cleans up application containers on Windows (#16123)
🔐 Fixed macOS signing, permissions, and certificate trust with improved CI verification (#16053)
✍️ Fixed signing for the aspire-managed bundle payload (#16211)
🎭 Fixed Playwright CLI provenance verification for the new tag format (#16134)
🧭 Updated service discovery environment variables (#16223)

🔧 Improvements

📊 Removed telemetry API data limits and refactored URL builders (#16023)
⏱️ Increased native build + sign timeout to 60 minutes for reliability (#16212)

🏷️ Housekeeping

🔖 Bumped branding to 13.2.3 (#16181)
🧪 Temporarily disabled Verify CLI archive step on Windows while investigating (#16276, #16285)

Commits viewable in compare view.

Updated AWSSDK.Extensions.NETCore.Setup from 4.0.3.33 to 4.0.3.34.

Release notes

Sourced from AWSSDK.Extensions.NETCore.Setup's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated AWSSDK.S3 from 4.0.21.1 to 4.0.22.

Release notes

Sourced from AWSSDK.S3's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated CodeBeam.MudBlazor.Extensions from 9.0.4 to 9.0.5.

Release notes

Sourced from CodeBeam.MudBlazor.Extensions's releases.

9.0.5 What's Changed

🔧 Fix: Place aria-label on visible MudSelectExtended control instead of hidden input by @PlayerModu in ## 🔧 Fix: Place aria-label on visible MudSelectExtended control instead of hidden input CodeBeamOrg/CodeBeam.MudBlazor.Extensions#622
MudDebouncedInputExtended: Sync the MudDebouncedInput debounce implementations to fix the current issues by @DrastamatSargsyan in MudDebouncedInputExtended: Sync the MudDebouncedInput debounce implementations to fix the current issues CodeBeamOrg/CodeBeam.MudBlazor.Extensions#623

New Contributors

@DrastamatSargsyan made their first contribution in MudDebouncedInputExtended: Sync the MudDebouncedInput debounce implementations to fix the current issues CodeBeamOrg/CodeBeam.MudBlazor.Extensions#623

Full Changelog: CodeBeamOrg/CodeBeam.MudBlazor.Extensions@9.0.4...9.0.5

Commits viewable in compare view.

Updated dotnet-ef from 10.0.5 to 10.0.7.

Release notes

Sourced from dotnet-ef's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Components.Web from 10.0.5 to 10.0.7.

Release notes

Sourced from Microsoft.AspNetCore.Components.Web's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.DataProtection.EntityFrameworkCore from 10.0.5 to 10.0.7.

Release notes

Sourced from Microsoft.AspNetCore.DataProtection.EntityFrameworkCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore from 10.0.5 to 10.0.7.

Release notes

Sourced from Microsoft.EntityFrameworkCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Hosting from 10.0.5 to 10.0.7.

Release notes

Sourced from Microsoft.Extensions.Hosting's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Http.Resilience from 10.4.0 to 10.5.0.

Release notes

Sourced from Microsoft.Extensions.Http.Resilience's releases.

10.5.0

HTTP Logging Middleware APIs in Microsoft.AspNetCore.Diagnostics.Middleware are now stable. This release also transfers Microsoft.Extensions.VectorData.Abstractions and Microsoft.Extensions.VectorData.ConformanceTests from the Semantic Kernel repository into dotnet/extensions, jumping from 10.1.0 to 10.5.0 for consistent versioning. The release also delivers fixes across the AI libraries, AI Evaluation, and Service Discovery.

Breaking Changes

Rename VectorStoreVectorAttribute constructor parameter #7460
- The Dimensions parameter was renamed to dimensions (lowercase). This is a source-breaking change only — binary compatibility is preserved.
- If you use the named argument syntax new VectorStoreVectorAttribute(Dimensions: 1536), update it to new VectorStoreVectorAttribute(dimensions: 1536).

Experimental API Changes

Now Stable

HTTP Logging Middleware APIs are now stable (previously EXTEXP0013): AddHttpLogEnricher<T>, IHttpLogEnricher, and RequestHeadersLogEnricherOptions.HeadersDataClasses #7380

What's Changed

AI

Fix OpenAIResponsesChatClient to respect "store":false in responses #7417 by @stephentoub
Fix InvalidOperationException in CoalesceWebSearchToolCallContent #7419 by @stephentoub
Handle F# optional parameters in AIFunctionFactory schema generation #7439 by @eiriktsarpalis
Fix ComputerCallResponseItem using Item.Id instead of CallId #7446 by @jozkee
Fix HostedFileContent with image MIME type sent as input_file instead of input_image #7438 by @stephentoub (co-authored by @copilot)
Guard Activity.Current restore with null check in OpenTelemetry streaming clients #7443 by @stephentoub (co-authored by @copilot)
Enable stateless mode in remote MCP server template (released as v1.2.0 on 2026-04-01) #7441 by @jeffhandley

Vector Data

Move Microsoft.Extensions.VectorData.Abstractions over from Semantic Kernel #7434 by @roji
Rename VectorStoreVectorAttribute dimensions constructor parameter #7460 by @roji

AI Evaluation

Add Path Validation for DiskBasedResponseCache and DiskBasedResultStore #7397 by @peterwald
Update brace-expansion for CVE-2026-33750 #7457 by @SamMonoRT

ASP.NET Core Extensions

Removing experimental attribute from Http logging middleware #7380 by @mariamgerges

Service Discovery

Implement RFC6761 reserved DNS names handling #6924 by @rzikm

Documentation Updates

Remove per-library CHANGELOG.md files #7413 by @jeffhandley

Test Improvements

... (truncated)

10.4.1

This release of the Microsoft.Extensions.AI packages adds new experimental APIs for Realtime client sessions and Text-to-Speech, along with OpenTelemetry and middleware improvements.

Packages in this release

Package	Version
Microsoft.Extensions.AI.Abstractions	10.4.1
Microsoft.Extensions.AI	10.4.1
Microsoft.Extensions.AI.OpenAI	10.4.1

Experimental API Changes

New Experimental APIs

New experimental API: Realtime Client Sessions #7285 and #7399
New experimental API: Text-to-Speech Client #7381

Changes to Experimental APIs

Hosted File Download Stream: write-path methods now explicitly throw NotSupportedException #7394

What's Changed

AI

Add ITextToSpeechClient abstraction, middleware, and OpenAI implementation #7381 by @stephentoub
Realtime Client Proposal #7285 by @tarekgh
Add VoiceActivityDetection options to realtime session abstractions #7399 by @tarekgh
Make UriContent mediaType parameter optional with inference from URI file extension #7398 by @stephentoub (co-authored by @Copilot)
Emit gen_ai.client.operation.exception via ILogger LoggerMessage on OpenTelemetry instrumentation classes #7379 by @stephentoub (co-authored by @Copilot)
Support invoke_workflow as an equivalent parent span to invoke_agent in FunctionInvokingChatClient #7382 by @stephentoub (co-authored by @Copilot)
Make HostedFileDownloadStream explicitly read-only #7394 by @stephentoub (co-authored by @Copilot)

Documentation Updates

Document JSON schema derivation for return types in AIFunctionFactory #7400 by @stephentoub (co-authored by @Copilot)

Test Improvements

Fix test warnings #7369 by @jozkee
Add tests for JSON deserialization of serializable types #7373 by @stephentoub (co-authored by @Copilot)

Repository Infrastructure Updates

Update Package Validation Baseline to 10.4.0 #7389 by @jeffhandley (co-authored by @Copilot)
Update ModelContextProtocol libraries to version 1.0.0 #7340 by @stephentoub (co-authored by @Copilot)

Acknowledgements

@eiriktsarpalis @ericstj @CodeBlanch @lmolkova @adamsitnik @joperezr reviewed pull requests
... (truncated)

Commits viewable in compare view.

Updated Microsoft.Extensions.Localization.Abstractions from 10.0.5 to 10.0.7.

Release notes

Sourced from Microsoft.Extensions.Localization.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.ServiceDiscovery from 10.4.0 to 10.5.0.

Release notes

Sourced from Microsoft.Extensions.ServiceDiscovery's releases.

10.5.0

HTTP Logging Middleware APIs in Microsoft.AspNetCore.Diagnostics.Middleware are now stable. This release also transfers Microsoft.Extensions.VectorData.Abstractions and Microsoft.Extensions.VectorData.ConformanceTests from the Semantic Kernel repository into dotnet/extensions, jumping from 10.1.0 to 10.5.0 for consistent versioning. The release also delivers fixes across the AI libraries, AI Evaluation, and Service Discovery.

Breaking Changes

Rename VectorStoreVectorAttribute constructor parameter #7460
- The Dimensions parameter was renamed to dimensions (lowercase). This is a source-breaking change only — binary compatibility is preserved.
- If you use the named argument syntax new VectorStoreVectorAttribute(Dimensions: 1536), update it to new VectorStoreVectorAttribute(dimensions: 1536).

Experimental API Changes

Now Stable

HTTP Logging Middleware APIs are now stable (previously EXTEXP0013): AddHttpLogEnricher<T>, IHttpLogEnricher, and RequestHeadersLogEnricherOptions.HeadersDataClasses #7380

What's Changed

AI

Fix OpenAIResponsesChatClient to respect "store":false in responses #7417 by @stephentoub
Fix InvalidOperationException in CoalesceWebSearchToolCallContent #7419 by @stephentoub
Handle F# optional parameters in AIFunctionFactory schema generation #7439 by @eiriktsarpalis
Fix ComputerCallResponseItem using Item.Id instead of CallId #7446 by @jozkee
Fix HostedFileContent with image MIME type sent as input_file instead of input_image #7438 by @stephentoub (co-authored by @copilot)
Guard Activity.Current restore with null check in OpenTelemetry streaming clients #7443 by @stephentoub (co-authored by @copilot)
Enable stateless mode in remote MCP server template (released as v1.2.0 on 2026-04-01) #7441 by @jeffhandley

Vector Data

Move Microsoft.Extensions.VectorData.Abstractions over from Semantic Kernel #7434 by @roji
Rename VectorStoreVectorAttribute dimensions constructor parameter #7460 by @roji

AI Evaluation

Add Path Validation for DiskBasedResponseCache and DiskBasedResultStore #7397 by @peterwald
Update brace-expansion for CVE-2026-33750 #7457 by @SamMonoRT

ASP.NET Core Extensions

Removing experimental attribute from Http logging middleware #7380 by @mariamgerges

Service Discovery

Implement RFC6761 reserved DNS names handling #6924 by @rzikm

Documentation Updates

Remove per-library CHANGELOG.md files #7413 by @jeffhandley

Test Improvements

... (truncated)

10.4.1

This release of the Microsoft.Extensions.AI packages adds new experimental APIs for Realtime client sessions and Text-to-Speech, along with OpenTelemetry and middleware improvements.

Packages in this release

Package	Version
Microsoft.Extensions.AI.Abstractions	10.4.1
Microsoft.Extensions.AI	10.4.1
Microsoft.Extensions.AI.OpenAI	10.4.1

Experimental API Changes

New Experimental APIs

New experimental API: Realtime Client Sessions #7285 and #7399
New experimental API: Text-to-Speech Client #7381

Changes to Experimental APIs

Hosted File Download Stream: write-path methods now explicitly throw NotSupportedException #7394

What's Changed

AI

Add ITextToSpeechClient abstraction, middleware, and OpenAI implementation #7381 by @stephentoub
Realtime Client Proposal #7285 by @tarekgh
Add VoiceActivityDetection options to realtime session abstractions #7399 by @tarekgh
Make UriContent mediaType parameter optional with inference from URI file extension #7398 by @stephentoub (co-authored by @Copilot)
Emit gen_ai.client.operation.exception via ILogger LoggerMessage on OpenTelemetry instrumentation classes #7379 by @stephentoub (co-authored by @Copilot)
Support invoke_workflow as an equivalent parent span to invoke_agent in FunctionInvokingChatClient #7382 by @stephentoub (co-authored by @Copilot)
Make HostedFileDownloadStream explicitly read-only #7394 by @stephentoub (co-authored by @Copilot)

Documentation Updates

Document JSON schema derivation for return types in AIFunctionFactory #7400 by @stephentoub (co-authored by @Copilot)

Test Improvements

Fix test warnings #7369 by @jozkee
Add tests for JSON deserialization of serializable types #7373 by @stephentoub (co-authored by @Copilot)

Repository Infrastructure Updates

Update Package Validation Baseline to 10.4.0 #7389 by @jeffhandley (co-authored by @Copilot)
Update ModelContextProtocol libraries to version 1.0.0 #7340 by @stephentoub (co-authored by @Copilot)

Acknowledgements

@eiriktsarpalis @ericstj @CodeBlanch @lmolkova @adamsitnik @joperezr reviewed pull requests
... (truncated)

Commits viewable in compare view.

Updated OpenTelemetry.Exporter.OpenTelemetryProtocol from 1.15.2 to 1.15.3.

Release notes

Sourced from OpenTelemetry.Exporter.OpenTelemetryProtocol's releases.

1.15.3

For highlights and announcements pertaining to this release see: Release Notes > 1.15.3.

The following changes are from the previous release 1.15.2.

NuGet: OpenTelemetry v1.15.3
- Fix resource leak in batch and periodic exporting task workers for Blazor/WASM.
  (#7069)
- Fixed LogRecord.LogLevel to preserve LogLevel.None and handle
  unspecified or out-of-range severities without returning invalid enum values.
  (#7092)
- Fixed OTEL_TRACES_SAMPLER_ARG handling to treat out-of-range, NaN, and
  infinite values as invalid and fall back to the default ratio when using
  traceidratio and parentbased_traceidratio samplers.
  (#7103)
See CHANGELOG for details.
NuGet: OpenTelemetry.Api v1.15.3
- Fix baggage and trace headers not respecting the maximum length in some cases.
  (#7061)
- Improve efficiency of parsing of baggage and B3 propagation headers.
  (#7061)
- Breaking change: Fixed tracestate parsing to reject keys that do not
  begin with a lowercase letter, including keys beginning with digits, to
  align with the W3C Trace Context specification.
  (#7065)
- Fixed BaggagePropagator to trim optional whitespace (OWS) around =
  separators when parsing the baggage header, as required by the
  W3C Baggage specification.
  (#7009)
- Fixed BaggagePropagator to strip baggage properties (e.g. ;metadata)
  from values when parsing the baggage header.
  (#7009)
See CHANGELOG for details.
NuGet: OpenTelemetry.Api.ProviderBuilderExtensions v1.15.3

No notable changes.

See CHANGELOG for details.

... (truncated)

1.15.3-beta.1

The following changes are from the previous release 1.15.2-beta.1.

NuGet: OpenTelemetry.Exporter.Prometheus.AspNetCore v1.15.3-beta.1
- Fixed metric unit strings containing invalid Prometheus characters (e.g. # RU)
  not being sanitized, resulting in malformed metric names.
  (#6187)
- Fixed Prometheus metric serialization to handle empty label names without
  throwing during scrape rendering.
  (#7077)
- Updated OpenTelemetry core component version(s) to 1.15.3.
  (#7125)
See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.Prometheus.HttpListener v1.15.3-beta.1
- Fixed metric unit strings containing invalid Prometheus characters (e.g. # RU)
  not being sanitized, resulting in malformed metric names.
  (#6187)
- Fixed Prometheus metric serialization to handle empty label names without
  throwing during scrape rendering.
  (#7077)
- Updated OpenTelemetry core component version(s) to 1.15.3.
  (#7125)
See CHANGELOG for details.
NuGet: OpenTelemetry.Shims.OpenTracing v1.15.3-beta.1
- Fixes support for byte, short, int, and float attributes.
  (#7080)
- Updated OpenTelemetry core component version(s) to 1.15.3.
  (#7125)
See CHANGELOG for details.

Commits viewable in compare view.

Updated OpenTelemetry.Extensions.Hosting from 1.15.2 to 1.15.3.

Release notes

Sourced from OpenTelemetry.Extensions.Hosting's releases.

1.15.3

For highlights and announcements pertaining to this release see: Release Notes > 1.15.3.

The following changes are from the previous release 1.15.2.

NuGet: OpenTelemetry v1.15.3
- Fix resource leak in batch and periodic exporting task workers for Blazor/WASM.
  (#7069)
- Fixed LogRecord.LogLevel to preserve LogLevel.None and handle
  unspecified or out-of-range severities without returning invalid enum values.
  (#7092)
- Fixed OTEL_TRACES_SAMPLER_ARG handling to treat out-of-range, NaN, and
  infinite values as invalid and fall back to the default ratio when using
  traceidratio and parentbased_traceidratio samplers.
  (#7103)
See CHANGELOG for details.
NuGet: OpenTelemetry.Api v1.15.3
- Fix baggage and trace headers not respecting the maximum length in some cases.
  (#7061)
- Improve efficiency of parsing of baggage and B3 propagation headers.
  (#7061)
- Breaking change: Fixed tracestate parsing to reject keys that do not
  begin with a lowercase letter, including keys beginning with digits, to
  align with the W3C Trace Context specification.
  (#7065)
- Fixed BaggagePropagator to trim optional whitespace (OWS) around =
  separators when parsing the baggage header, as required by the
  W3C Baggage specification.
  (#7009)
- Fixed BaggagePropagator to strip baggage properties (e.g. ;metadata)
  from values when parsing the baggage header.
  (#7009)
See CHANGELOG for details.
NuGet: OpenTelemetry.Api.ProviderBuilderExtensions v1.15.3

No notable changes.

See CHANGELOG for details.

... (truncated)

1.15.3-beta.1

The following changes are from the previous release 1.15.2-beta.1.

NuGet: OpenTelemetry.Exporter.Prometheus.AspNetCore v1.15.3-beta.1
- Fixed metric unit strings containing invalid Prometheus characters (e.g. # RU)
  not being sanitized, resulting in malformed metric names.
  (#6187)
- Fixed Prometheus metric serialization to handle empty label names without
  throwing during scrape rendering.
  (#7077)
- Updated OpenTelemetry core component version(s) to 1.15.3.
  (#7125)
See CHANGELOG for details.
NuGet: OpenTelemetry.Exporter.Prometheus.HttpListener v1.15.3-beta.1
- Fixed metric unit strings containing invalid Prometheus characters (e.g. # RU)
  not being sanitized, resulting in malformed metric names.
  (#6187)
- Fixed Prometheus metric serialization to handle empty label names without
  throwing during scrape rendering.
  (#7077)
- Updated OpenTelemetry core component version(s) to 1.15.3.
  (#7125)
See CHANGELOG for details.
NuGet: OpenTelemetry.Shims.OpenTracing v1.15.3-beta.1
- Fixes support for byte, short, int, and float attributes.
  (#7080)
- Updated OpenTelemetry core component version(s) to 1.15.3.
  (#7125)
See CHANGELOG for details.

Commits viewable in compare view.

Updated OpenTelemetry.Instrumentation.AspNetCore from 1.15.1 to 1.15.2.

Release notes

Sourced from OpenTelemetry.Instrumentation.AspNetCore's releases.

1.15.2

NuGet: OpenTelemetry.Exporter.Geneva v1.15.2
- Updated OpenTelemetry core component version(s) to 1.15.3.
  (#4166)
See CHANGELOG for details.

Commits viewable in compare view.

Updated OpenTelemetry.Instrumentation.Http from 1.15.0 to 1.15.1.

Release notes

Sourced from OpenTelemetry.Instrumentation.Http's releases.

1.15.1

NuGet: OpenTelemetry.Instrumentation.AspNet v1.15.1

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Instrumentation.AspNet.TelemetryHttpModule v1.15.1
- Propagate baggage before Activity is created.
  (#3820)
See CHANGELOG for details.

1.15.1-beta.2

NuGet: OpenTelemetry.Instrumentation.Wcf v1.15.1-beta.2
- Revert System.Security.Cryptography.Xml dependency version update for
  .NET 8, 9, and 10 to 4.7.1 released in 1.15.1-beta.1 introduced in #4103.
  (#4266)
See CHANGELOG for details.

1.15.1-beta.1

NuGet: OpenTelemetry.Extensions.Enrichment v1.15.1-beta.1
- Updated OpenTelemetry core component version(s) to 1.15.3.
  (#4166)
- Fixed trace enrichment callbacks so exceptions thrown by user-provided
  enrichers or enrichment actions no longer interrupt trace processing.
  (#4165)
See CHANGELOG for details.

1.15.1-alpha.1

NuGet: OpenTelemetry.Instrumentation.EventCounters v1.15.1-alpha.1
- Updated OpenTelemetry core component version(s) to 1.15.3.
  (#4166)
See CHANGELOG for details.

Commits viewable in compare view.

Updated OpenTelemetry.Instrumentation.Runtime from 1.15.0 to 1.15.1.

Release notes

Sourced from OpenTelemetry.Instrumentation.Runtime's releases.

1.15.1

NuGet: OpenTelemetry.Instrumentation.AspNet v1.15.1

No notable changes.

See CHANGELOG for details.
NuGet: OpenTelemetry.Instrumentation.AspNet.TelemetryHttpModule v1.15.1
- Propagate baggage before Activity is created.
  (#3820)
See CHANGELOG for details.

1.15.1-beta.2

NuGet: OpenTelemetry.Instrumentation.Wcf v1.15.1-beta.2
- Revert System.Security.Cryptography.Xml dependency version update for
  .NET 8, 9, and 10 to 4.7.1 released in 1.15.1-beta.1 introduced in #4103.
  (#4266)
See CHANGELOG for details.

1.15.1-beta.1

NuGet: OpenTelemetry.Extensions.Enrichment v1.15.1-beta.1
- Updated OpenTelemetry core component version(s) to 1.15.3.
  (#4166)
- Fixed trace enrichment callbacks so exceptions thrown by user-provided
  enrichers or enrichment actions no longer interrupt trace processing.
  (#4165)
See CHANGELOG for details.

1.15.1-alpha.1

NuGet: OpenTelemetry.Instrumentation.EventCounters v1.15.1-alpha.1
- Updated OpenTelemetry core component version(s) to 1.15.3.
  (#4166)
See CHANGELOG for details.

Commits viewable in compare view.

Updated Rebus from 8.9.0 to 8.9.2.

Release notes

Sourced from Rebus's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Sentry from 6.3.1 to 6.4.1.

Release notes

Sourced from Sentry's releases.

6.4.1

Fixes 🐛

fix: prevent redundant native exceptions on Android/CoreCLR by @jpnurmi in #5127

Dependencies ⬆️

Deps

chore(deps): update Java SDK to v8.39.0 by @github-actions in #5137
chore(deps): update Native SDK to v0.13.7 by @github-actions in #5136

6.4.0

Features ✨

feat: Add network details for session replay on iOS by @jamescrosswell in #4891
feat: Add option to exclude certain HTTP statuses from tracing by @jamescrosswell in #5034

Fixes 🐛

fix: memory leak when profiling is enabled by @jamescrosswell in #5133
fix: prevent redundant native exceptions on iOS by @jpnurmi in #5126
fix: prevent redundant native exceptions on Android/Mono by @jpnurmi in #4676
- Note: opt in by setting options.Native.ExperimentalOptions.SignalHandlerStrategy to Sentry.Android.SignalHandlerStrategy.ChainAtStart

Dependencies ⬆️

Deps

chore(deps): update Cocoa SDK to v9.10.0 by @github-actions in #5132
chore(deps): update Cocoa SDK to v9.9.0 by @github-actions in #5115
chore(deps): update Java SDK to v8.38.0 by @github-actions in #5124

6.3.2

Dependencies ⬆️

chore(deps): update Native SDK to v0.13.6 by @github-actions in #5128

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps ActualLab.Fusion from 12.2.4 to 12.3.74 Bumps ActualLab.Fusion.Blazor from 12.2.4 to 12.3.74 Bumps ActualLab.Fusion.Ext.Services from 12.2.4 to 12.3.74 Bumps ActualLab.Generators from 12.2.4 to 12.3.74 Bumps aspire.cli from 13.2.2 to 13.2.3 Bumps Aspire.Hosting.RabbitMQ from 13.2.2 to 13.2.3 Bumps Aspire.Hosting.SqlServer from 13.2.2 to 13.2.3 Bumps AWSSDK.Extensions.NETCore.Setup from 4.0.3.33 to 4.0.3.34 Bumps AWSSDK.S3 from 4.0.21.1 to 4.0.22 Bumps CodeBeam.MudBlazor.Extensions from 9.0.4 to 9.0.5 Bumps dotnet-ef from 10.0.5 to 10.0.7 Bumps Microsoft.AspNetCore.Components.Web from 10.0.5 to 10.0.7 Bumps Microsoft.AspNetCore.DataProtection.EntityFrameworkCore from 10.0.5 to 10.0.7 Bumps Microsoft.EntityFrameworkCore from 10.0.5 to 10.0.7 Bumps Microsoft.Extensions.Hosting from 10.0.5 to 10.0.7 Bumps Microsoft.Extensions.Http.Resilience from 10.4.0 to 10.5.0 Bumps Microsoft.Extensions.Localization.Abstractions from 10.0.5 to 10.0.7 Bumps Microsoft.Extensions.ServiceDiscovery from 10.4.0 to 10.5.0 Bumps OpenTelemetry.Exporter.OpenTelemetryProtocol from 1.15.2 to 1.15.3 Bumps OpenTelemetry.Extensions.Hosting from 1.15.2 to 1.15.3 Bumps OpenTelemetry.Instrumentation.AspNetCore from 1.15.1 to 1.15.2 Bumps OpenTelemetry.Instrumentation.Http from 1.15.0 to 1.15.1 Bumps OpenTelemetry.Instrumentation.Runtime from 1.15.0 to 1.15.1 Bumps Rebus from 8.9.0 to 8.9.2 Bumps Sentry from 6.3.1 to 6.4.1 --- updated-dependencies: - dependency-name: ActualLab.Fusion dependency-version: 12.3.74 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: ActualLab.Fusion.Blazor dependency-version: 12.3.74 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: ActualLab.Fusion.Ext.Services dependency-version: 12.3.74 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: ActualLab.Generators dependency-version: 12.3.74 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: aspire.cli dependency-version: 13.2.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: Aspire.Hosting.RabbitMQ dependency-version: 13.2.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: Aspire.Hosting.SqlServer dependency-version: 13.2.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: AWSSDK.Extensions.NETCore.Setup dependency-version: 4.0.3.34 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: AWSSDK.S3 dependency-version: 4.0.22 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: CodeBeam.MudBlazor.Extensions dependency-version: 9.0.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: dotnet-ef dependency-version: 10.0.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: Microsoft.AspNetCore.Components.Web dependency-version: 10.0.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: Microsoft.AspNetCore.DataProtection.EntityFrameworkCore dependency-version: 10.0.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: Microsoft.EntityFrameworkCore dependency-version: 10.0.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: Microsoft.Extensions.Hosting dependency-version: 10.0.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: Microsoft.Extensions.Http.Resilience dependency-version: 10.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: Microsoft.Extensions.Localization.Abstractions dependency-version: 10.0.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: Microsoft.Extensions.ServiceDiscovery dependency-version: 10.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: OpenTelemetry.Exporter.OpenTelemetryProtocol dependency-version: 1.15.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: OpenTelemetry.Extensions.Hosting dependency-version: 1.15.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: OpenTelemetry.Instrumentation.AspNetCore dependency-version: 1.15.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: OpenTelemetry.Instrumentation.Http dependency-version: 1.15.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: OpenTelemetry.Instrumentation.Runtime dependency-version: 1.15.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: Rebus dependency-version: 8.9.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: Sentry dependency-version: 6.4.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-05-01T13:09:23Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file minor Small, non-critical changes labels May 1, 2026

dependabot Bot requested review from a team as code owners May 1, 2026 04:41

dependabot Bot added minor Small, non-critical changes dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code labels May 1, 2026

Carl Sixsmith (carlsixsmith-moj) closed this May 1, 2026

dependabot Bot deleted the dependabot/nuget/dot-config/develop/all-dependencies-0f23194f1d branch May 1, 2026 13:09

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

deps: Bump the all-dependencies group with 25 updates#1039

deps: Bump the all-dependencies group with 25 updates#1039
dependabot[bot] wants to merge 1 commit intodevelopfrom
dependabot/nuget/dot-config/develop/all-dependencies-0f23194f1d

dependabot Bot commented on behalf of github May 1, 2026

Uh oh!

dependabot Bot commented on behalf of github May 1, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github May 1, 2026

13.2.3

What's New in Aspire 13.2.3

🐛 Fixes

🔧 Improvements

🏷️ Housekeeping

13.2.3

What's New in Aspire 13.2.3

🐛 Fixes

🔧 Improvements

🏷️ Housekeeping

13.2.3

What's New in Aspire 13.2.3

🐛 Fixes

🔧 Improvements

🏷️ Housekeeping

9.0.5

What's Changed

New Contributors

10.5.0

Breaking Changes

Experimental API Changes

Now Stable

What's Changed

AI

Vector Data

AI Evaluation

ASP.NET Core Extensions

Service Discovery

Documentation Updates

Test Improvements

10.4.1

Packages in this release

Experimental API Changes

New Experimental APIs

Changes to Experimental APIs

What's Changed

AI

Documentation Updates

Test Improvements

Repository Infrastructure Updates

Acknowledgements

10.5.0

Breaking Changes

Experimental API Changes

Now Stable

What's Changed

AI

Vector Data

AI Evaluation

ASP.NET Core Extensions

Service Discovery

Documentation Updates

Test Improvements

10.4.1

Packages in this release

Experimental API Changes

New Experimental APIs

Changes to Experimental APIs

What's Changed

AI

Documentation Updates

Test Improvements

Repository Infrastructure Updates

Acknowledgements

1.15.3

1.15.3-beta.1

1.15.3

1.15.3-beta.1

1.15.2

1.15.1

1.15.1-beta.2

1.15.1-beta.1

1.15.1-alpha.1

1.15.1

1.15.1-beta.2

1.15.1-beta.1

1.15.1-alpha.1

6.4.1