deps: Bump the all-dependencies group with 11 updates#996
Merged
Carl Sixsmith (carlsixsmith-moj) merged 2 commits intomainfrom Mar 30, 2026
Conversation
Vinay Saini (vks333)
previously approved these changes
Mar 30, 2026
2be6261 to
2b53680
Compare
0a2a003 to
85ad108
Compare
Carl Sixsmith (carlsixsmith-moj)
previously approved these changes
Mar 30, 2026
85ad108 to
4e5ecab
Compare
Contributor
|
This can be merged now. I can't approve the merge as I pushed a fix for the dependabot push |
4e5ecab to
b624792
Compare
Vinay Saini (vks333)
approved these changes
Mar 30, 2026
Bumps aspire.cli from 13.0.0 to 13.1.3 Bumps dotnet-ef from 10.0.0 to 10.0.5 Bumps Humanizer from 3.0.1 to 3.0.10 Bumps Humanizer.Core.uk from 3.0.1 to 3.0.10 Bumps Microsoft.AspNetCore.DataProtection.EntityFrameworkCore from 10.0.0 to 10.0.5 Bumps Microsoft.AspNetCore.Identity.EntityFrameworkCore from 10.0.0 to 10.0.5 Bumps Microsoft.Extensions.Http.Resilience from 10.0.0 to 10.4.0 Bumps Microsoft.Extensions.Localization.Abstractions from 10.0.0 to 10.0.5 Bumps Microsoft.Extensions.ServiceDiscovery from 10.0.0 to 10.4.0 Bumps OpenTelemetry.Instrumentation.Runtime from 1.14.0 to 1.15.0 Bumps Sentry from 5.16.2 to 6.2.0 --- updated-dependencies: - dependency-name: aspire.cli dependency-version: 13.1.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: dotnet-ef dependency-version: 10.0.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: Humanizer dependency-version: 3.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: Humanizer.Core.uk dependency-version: 3.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: Microsoft.AspNetCore.DataProtection.EntityFrameworkCore dependency-version: 10.0.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: Microsoft.AspNetCore.Identity.EntityFrameworkCore dependency-version: 10.0.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: Microsoft.Extensions.Http.Resilience dependency-version: 10.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: Microsoft.Extensions.Localization.Abstractions dependency-version: 10.0.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: Microsoft.Extensions.ServiceDiscovery dependency-version: 10.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: OpenTelemetry.Instrumentation.Runtime dependency-version: 1.15.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: Sentry dependency-version: 6.2.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
b624792 to
1902bbe
Compare
Vinay Saini (vks333)
pushed a commit
that referenced
this pull request
Mar 31, 2026
* deps: Bump the all-dependencies group with 11 updates Bumps aspire.cli from 13.0.0 to 13.1.3 Bumps dotnet-ef from 10.0.0 to 10.0.5 Bumps Humanizer from 3.0.1 to 3.0.10 Bumps Humanizer.Core.uk from 3.0.1 to 3.0.10 Bumps Microsoft.AspNetCore.DataProtection.EntityFrameworkCore from 10.0.0 to 10.0.5 Bumps Microsoft.AspNetCore.Identity.EntityFrameworkCore from 10.0.0 to 10.0.5 Bumps Microsoft.Extensions.Http.Resilience from 10.0.0 to 10.4.0 Bumps Microsoft.Extensions.Localization.Abstractions from 10.0.0 to 10.0.5 Bumps Microsoft.Extensions.ServiceDiscovery from 10.0.0 to 10.4.0 Bumps OpenTelemetry.Instrumentation.Runtime from 1.14.0 to 1.15.0 Bumps Sentry from 5.16.2 to 6.2.0 --- updated-dependencies: - dependency-name: aspire.cli dependency-version: 13.1.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: dotnet-ef dependency-version: 10.0.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: Humanizer dependency-version: 3.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: Humanizer.Core.uk dependency-version: 3.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: Microsoft.AspNetCore.DataProtection.EntityFrameworkCore dependency-version: 10.0.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: Microsoft.AspNetCore.Identity.EntityFrameworkCore dependency-version: 10.0.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: Microsoft.Extensions.Http.Resilience dependency-version: 10.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: Microsoft.Extensions.Localization.Abstractions dependency-version: 10.0.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: Microsoft.Extensions.ServiceDiscovery dependency-version: 10.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: OpenTelemetry.Instrumentation.Runtime dependency-version: 1.15.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: Sentry dependency-version: 6.2.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-dependencies ... Signed-off-by: dependabot[bot] <support@github.com> * Update all packages --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Carl Sixsmith <carl.sixsmith1@justice.gov.uk>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Updated aspire.cli from 13.0.0 to 13.1.3.
Release notes
Sourced from aspire.cli's releases.
13.1.3
What's Changed
Full Changelog: microsoft/aspire@v13.1.2...v13.1.3
13.1.2
What's Changed
Full Changelog: microsoft/aspire@v13.1.1...v13.1.2
13.1.1
What's Changed
Full Changelog: microsoft/aspire@v13.1.0...v13.1.1
13.1.0
We are excited to share that our 13.1.0 release of Aspire has shipped! All of the packages are available in NuGet.org now. Head over to https://aspire.dev/whats-new/aspire-13-1/ to find what's new in 13.1.0!
What's Changed
ExcludeFromMcp()resource extension by @JamesNK in AddExcludeFromMcp()resource extension microsoft/aspire#12515aspire updatecommand by @Copilot in Add CLI self-update prompts toaspire updatecommand microsoft/aspire#12395CertificateAuthorityCollectionResourceby @danegsta in Add missing namespace toCertificateAuthorityCollectionResourcemicrosoft/aspire#12639... (truncated)
13.0.2
This patch is updating our Project Templates for our Python starter app to ensure we depend on the latest version of React. This is out of an abundance of caution, as we don't depend on any of the react packages that were flagged as vulnerable in GHSA-fv66-9v8q-g76r.
What's Changed
Full Changelog: microsoft/aspire@v13.0.1...v13.0.2
13.0.1
What's Changed
Full Changelog: microsoft/aspire@v13.0.0...v13.0.1
Commits viewable in compare view.
Updated dotnet-ef from 10.0.0 to 10.0.5.
Release notes
Sourced from dotnet-ef's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated Humanizer from 3.0.1 to 3.0.10.
Release notes
Sourced from Humanizer's releases.
3.0.10
Changes:
This list of changes was auto generated.
3.0.8
Changes:
Localization:
Others:
This list of changes was auto generated.
Commits viewable in compare view.
Updated Humanizer.Core.uk from 3.0.1 to 3.0.10.
Release notes
Sourced from Humanizer.Core.uk's releases.
3.0.10
Changes:
This list of changes was auto generated.
3.0.8
Changes:
Localization:
Others:
This list of changes was auto generated.
Commits viewable in compare view.
Updated Microsoft.AspNetCore.DataProtection.EntityFrameworkCore from 10.0.0 to 10.0.5.
Release notes
Sourced from Microsoft.AspNetCore.DataProtection.EntityFrameworkCore's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated Microsoft.AspNetCore.Identity.EntityFrameworkCore from 10.0.0 to 10.0.5.
Release notes
Sourced from Microsoft.AspNetCore.Identity.EntityFrameworkCore's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated Microsoft.Extensions.Http.Resilience from 10.0.0 to 10.4.0.
Release notes
Sourced from Microsoft.Extensions.Http.Resilience's releases.
10.4.0
This release advances the AI abstractions with new hosted file, web search, and reasoning content types, stabilizes MCP and tool approval APIs, adds streaming latency metrics to OpenTelemetry instrumentation, and delivers bug fixes across caching, data ingestion, and resource monitoring.
Experimental API Changes
Now Stable
MEAI001) #7299FakeLogCollector.GetLogsAsync(CancellationToken)is now stable (previouslyEXTEXP0003) #7332New Experimental APIs
AddExtendedHttpClientLoggingoverloads withwrapHandlersPipelineparameter (EXTEXP0013) #7231Removed Experimental APIs
MEAI001) #7353What's Changed
AI
Telemetry and Observability
HTTP Resilience and Diagnostics
... (truncated)
10.3.0
Experimental API Changes
Now Stable
IChatReducerinterface — graduated from experimental to stable. The interface is now stable; concrete implementations (MessageCountingChatReducer,SummarizingChatReducer,ReducingChatClient) remain experimental. #7235 by @jeffhandleyFunctionCallContentandFunctionResultContentunsealed — changed fromsealed classtoclass, enabling derivation. #7229 by @stephentoub (co-authored by @Copilot)Breaking Changes to Experimental APIs
MEAI001diagnostic ID was split into feature-specific constants. OpenAI-specific experimental APIs now useOPENAI001,OPENAI002, orSCME0001instead ofMEAI001. Consumers who suppressedMEAI001for OpenAI APIs may need to suppressOPENAI001/OPENAI002instead. #7116 by @jeffhandley (co-authored by @Copilot), #7235 by @jeffhandleyNew Experimental APIs
MessageCountingChatReducer,SummarizingChatReducer,ReducingChatClient, andUseChatReducerbuilder extension. #7235 by @jeffhandleyOPENAI001,OPENAI002). #7235 by @jeffhandleyImageGenerationToolCallContentandImageGenerationToolResultContent— added to JSON serialization infrastructure. #7275 by @stephentoub (co-authored by @Copilot)What's Changed
AI
Diagnostics, Health Checks, and Resource Monitoring
Service Discovery
... (truncated)
10.2.0
What's Changed
SummarizingChatReducerintegration tests by @MackinnonBuck in Fix expected conversation length inSummarizingChatReducerintegration tests dotnet/extensions#7119New Contributors
Full Changelog: dotnet/extensions@v10.1...v10.2.0
10.1.0
What's Changed
Microsoft.Extensions.DataIngestionin AI Chat Web template by @MackinnonBuck in UseMicrosoft.Extensions.DataIngestionin AI Chat Web template dotnet/extensions#7023... (truncated)
Commits viewable in compare view.
Updated Microsoft.Extensions.Localization.Abstractions from 10.0.0 to 10.0.5.
Release notes
Sourced from Microsoft.Extensions.Localization.Abstractions's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated Microsoft.Extensions.ServiceDiscovery from 10.0.0 to 10.4.0.
Release notes
Sourced from Microsoft.Extensions.ServiceDiscovery's releases.
10.4.0
This release advances the AI abstractions with new hosted file, web search, and reasoning content types, stabilizes MCP and tool approval APIs, adds streaming latency metrics to OpenTelemetry instrumentation, and delivers bug fixes across caching, data ingestion, and resource monitoring.
Experimental API Changes
Now Stable
MEAI001) #7299FakeLogCollector.GetLogsAsync(CancellationToken)is now stable (previouslyEXTEXP0003) #7332New Experimental APIs
AddExtendedHttpClientLoggingoverloads withwrapHandlersPipelineparameter (EXTEXP0013) #7231Removed Experimental APIs
MEAI001) #7353What's Changed
AI
Telemetry and Observability
HTTP Resilience and Diagnostics
... (truncated)
10.3.0
Experimental API Changes
Now Stable
IChatReducerinterface — graduated from experimental to stable. The interface is now stable; concrete implementations (MessageCountingChatReducer,SummarizingChatReducer,ReducingChatClient) remain experimental. #7235 by @jeffhandleyFunctionCallContentandFunctionResultContentunsealed — changed fromsealed classtoclass, enabling derivation. #7229 by @stephentoub (co-authored by @Copilot)Breaking Changes to Experimental APIs
MEAI001diagnostic ID was split into feature-specific constants. OpenAI-specific experimental APIs now useOPENAI001,OPENAI002, orSCME0001instead ofMEAI001. Consumers who suppressedMEAI001for OpenAI APIs may need to suppressOPENAI001/OPENAI002instead. #7116 by @jeffhandley (co-authored by @Copilot), #7235 by @jeffhandleyNew Experimental APIs
MessageCountingChatReducer,SummarizingChatReducer,ReducingChatClient, andUseChatReducerbuilder extension. #7235 by @jeffhandleyOPENAI001,OPENAI002). #7235 by @jeffhandleyImageGenerationToolCallContentandImageGenerationToolResultContent— added to JSON serialization infrastructure. #7275 by @stephentoub (co-authored by @Copilot)What's Changed
AI
Diagnostics, Health Checks, and Resource Monitoring
Service Discovery
... (truncated)
10.2.0
What's Changed
SummarizingChatReducerintegration tests by @MackinnonBuck in Fix expected conversation length inSummarizingChatReducerintegration tests dotnet/extensions#7119New Contributors
Full Changelog: dotnet/extensions@v10.1...v10.2.0
10.1.0
What's Changed
Microsoft.Extensions.DataIngestionin AI Chat Web template by @MackinnonBuck in UseMicrosoft.Extensions.DataIngestionin AI Chat Web template dotnet/extensions#7023... (truncated)
Commits viewable in compare view.
Updated OpenTelemetry.Instrumentation.Runtime from 1.14.0 to 1.15.0.
Release notes
Sourced from OpenTelemetry.Instrumentation.Runtime's releases.
1.15.0
NuGet: OpenTelemetry.Exporter.OneCollector v1.15.0
1.15.0.(#3721)
See CHANGELOG for details.
1.15.0-rc.1
NuGet: OpenTelemetry.Instrumentation.SqlClient v1.15.0-rc.1
1.15.0.(#3721)
See CHANGELOG for details.
1.15.0-beta.2
NuGet: OpenTelemetry.Resources.Host v1.15.0-beta.2
host.archattribute to returnamd64instead ofx64for X64 architecture to comply with OpenTelemetry Semantic Conventions.(#3811)
See CHANGELOG for details.
1.15.0-beta.1
NuGet: OpenTelemetry.Extensions.Enrichment v1.15.0-beta.1
1.15.0.(#3721)
See CHANGELOG for details.
1.15.0-alpha.1
NuGet: OpenTelemetry.Instrumentation.EventCounters v1.15.0-alpha.1
1.15.0.(#3721)
See CHANGELOG for details.
1.14.2
NuGet: OpenTelemetry.Extensions.AWS v1.14.2
No notable changes.
See CHANGELOG for details.
NuGet: OpenTelemetry.Instrumentation.AWS v1.14.2
AWSSDK.Coreto4.0.3.3.Older versions are affected by CVE-2026-22611.
(#3683)
See CHANGELOG for details.
NuGet: OpenTelemetry.Instrumentation.AWSLambda v1.14.2
No notable changes.
See CHANGELOG for details.
1.14.1
NuGet: OpenTelemetry.Extensions.AWS v1.14.1
No notable changes.
See CHANGELOG for details.
NuGet: OpenTelemetry.Instrumentation.AWS v1.14.1
No notable changes.
See CHANGELOG for details.
NuGet: OpenTelemetry.Instrumentation.AWSLambda v1.14.1
OpenTelemetry.Instrumentation.AWSLambda in the Lambda layer. In this scenario
nothing is forcing the NuGet resolution to include the updated version of
Amazon.Lambda.Core that has the reworked logic
for determining the trace id.
(#3629)
See CHANGELOG for details.
Commits viewable in compare view.
Updated Sentry from 5.16.2 to 6.2.0.
Release notes
Sourced from Sentry's releases.
6.2.0
Features
Fixes
Warninginstead of anErrorwhen being ratelimited (#4927)libmonosgenandlibxamarinframes no longer show as in-app (#4960)Dependencies
SentryApiKey, you need to generate an Auth Token and useSentryAuthToken, instead.6.2.0-alpha.0
Features
Dependencies
6.1.0
Features
SentryThreadbyMainto allow indication whether the thread is considered the current main thread (#4807)Fixes
EnvironmentandRelease(#4883)Dependencies
6.1.0-alpha.2
BREAKING CHANGES
AddCountertoEmitCounterRecordDistributiontoEmitDistributionRecordGaugetoEmitGaugeFeatures
Fixes
SetBeforeSendLogcallback (#4834)decimal) for Trace-connected Metrics (#4834)6.1.0-alpha.1
Features
SentryThreadbyMainto allow indication whether the thread is considered the current main thread (#4807)Dependencies
6.0.0
BREAKING CHANGES
SentryLoggingOptions.ExperimentalLogging.MinimumLogLevel. Structured Logs can now be configured via the"Sentry"logging provider (e.g. inappsettings.jsonandappsettings.{HostEnvironment}.json) (#4700)SentryLog.ParentSpanIdtoSentryLog.SpanIdreflecting the protocol change (#4778)IDisposableso that they can be used withusingstatements/declarations that will automatically finish the span with a status of OK when it passes out of scope, if it has not already been finished, to be consistent withActivityclasses when using OpenTelemetry (#4627)sealed(see also #4627)ExperimentalfromSentryOptions(#4699)SentryIdand aCaptureFeedbackResultout parameter that indicate whether feedback was captured successfully and what the reason for failure was otherwise (#4613)Sentry.Azure.Functions.Workeras very few people were using it and the functionality can easily be replaced with OpenTelemetry. We've replaced our integration with a sample showing how to do this using our OpenTelemetry package instead. (#4693)BreadcrumbLevel.Criticalhas been renamed toBreadcrumbLevel.Fatalfor consistency with the other Sentry SDKs (#4605)Description has been truncated