Skip to content

chore(deps): update nuget non-major dependencies (minor) - #1787

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/nuget-minor-patch
Open

chore(deps): update nuget non-major dependencies (minor)#1787
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/nuget-minor-patch

Conversation

@renovate

@renovate renovate Bot commented May 31, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
Azure.Monitor.OpenTelemetry.Exporter (source) 1.9.0 → 1.10.0 age confidence
Microsoft.Extensions.Caching.Hybrid (source) 10.10.0 → 10.11.0 age confidence
Microsoft.NET.Test.Sdk 18.10.1 → 18.11.0 age confidence
Nullable.Extended.Analyzer 1.16.6891 → 1.19.0 age confidence
OpenTelemetry (source) 1.19.1 → 1.20.1 age confidence
OpenTelemetry.Api (source) 1.19.1 → 1.20.1 age confidence
OpenTelemetry.Exporter.InMemory (source) 1.19.1 → 1.20.1 age confidence
OpenTelemetry.Exporter.OpenTelemetryProtocol (source) 1.19.1 → 1.20.1 age confidence
OpenTelemetry.Extensions.Hosting (source) 1.19.1 → 1.20.1 age confidence
OpenTelemetry.Instrumentation.AspNetCore (source) 1.19.0 → 1.20.1 age confidence
OpenTelemetry.Instrumentation.Http (source) 1.19.0 → 1.20.1 age confidence
OpenTelemetry.Instrumentation.Runtime (source) 1.19.0 → 1.20.1 age confidence
Polly.Extensions 8.8.0 → 8.9.0 age confidence
Polly.Testing 8.8.0 → 8.9.0 age confidence
WireMock.Net 2.18.0 → 2.21.0 age confidence

Release Notes

Azure/azure-sdk-for-net (Azure.Monitor.OpenTelemetry.Exporter)

v1.10.0

Compare Source

1.10.0 (2026-10-05)

Features Added
  • Added the Azure.Monitor.OpenTelemetry.Exporter.StorageSubDirectory AppContext value, settable with AppContext.SetData or a runtimeconfig.json configProperty, so that the processes or entry points of one application can share a persistent storage directory. By default the directory name is derived from the process name and AppContext.BaseDirectory, which splits storage when components of one application differ in either, and a component that runs rarely never drains its backlog. When set, the value replaces those two inputs; the instrumentation key and user name still contribute, so different users and resources stay isolated. Behaviour is unchanged when the value is not set.
    (#​62997)
Bugs Fixed
  • SDK statistics sent to the Microsoft OpenTelemetry distro's configured ingestion endpoint (the Azure.Monitor.OpenTelemetry.Exporter.RouteSdkStatsToDistroEndpoint AppContext switch) now carry the same region-matched SDK statistics instrumentation key as the existing SDK statistics endpoint, instead of an all-zero placeholder. Only the destination differs on the distro path.
    (#​63342)
dotnet/extensions (Microsoft.Extensions.Caching.Hybrid)

v10.11.0

.NET Extensions 10.11.0

This release adds optional scope capture for buffered logs and updates experimental HTTP latency enrichment APIs. It also includes fixes for AI streaming and function invocation, evaluation reports, HybridCache invalidation, and logging.

Experimental API Changes

New Experimental APIs
  • Optional logging-scope capture for global and per-request log buffering through GlobalLogBufferingOptions.IncludeScopes and PerRequestLogBufferingOptions.IncludeScopes (EXTEXP0003) #​7813
Breaking Changes to Experimental APIs
  • Incoming HTTP latency log enrichment: AddHttpLatencyTelemetry is renamed to AddHttpServerLatencyTelemetry and moves from HttpLatencyTelemetryServiceCollectionExtensions to HttpLoggingServiceCollectionExtensions. It remains experimental under EXTEXP0013 in this release. #​7730

What's Changed

AI
AI Evaluation
Telemetry and Observability
ASP.NET Core Extensions
AI Project Templates
Caching
HTTP Resilience and Diagnostics

Test Improvements

Repository Infrastructure Updates

  • Bump PowerShell from 7.6.5 to 7.6.6 #​7743
  • [main] Update dependencies from dotnet/arcade #​7755
  • Bump adm-zip from 0.6.0 to 0.6.1 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript/azure-devops-report/tasks/PublishAIEvaluationReport #​7763
  • Bump dotnet-coverage from 18.10.0 to 18.11.2 #​7762
  • [main] Update dependencies from dotnet/arcade #​7767
  • Bump browserslist from 4.28.2 to 4.28.8 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7733
  • Build: Add npm feed failure investigation skill #​7782 by @​jozkee (co-authored by @​Copilot)
  • Bump @​vitest/mocker and vitest in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7745
  • Update SDK to 10.0.401 #​7793 by @​peterwald
  • Bump microsoft.visualstudio.slngen.tool from 12.0.32 to 12.0.53 #​7794

Acknowledgements

Full Changelog: dotnet/extensions@v10.10.1...v10.11.0

microsoft/vstest (Microsoft.NET.Test.Sdk)

v18.11.0

What's Changed

New Contributors

Full Changelog: microsoft/vstest@v18.10.1...v18.11.0

tom-englert/Nullable.Extended.Analyzer (Nullable.Extended.Analyzer)

v1.19.0

  • New: MCP server: The check_required tool
  • New: MCP server: The annotate tool writes justification comments for null-forgiving operators, and replaces TODO: placeholders.
  • Fix: MCP server: The configuration suggested by nuget.org no longer asks for the optional --root and --solution arguments.

v1.18.2

  • Fix: MCP server: Workspace folders reported by VS Code (file:///d%3A/...) were not converted to a valid local path.

v1.18.1

  • MCP server: No command line arguments are required any more, the server uses the workspace folder of the client. --root and --solution are optional overrides.
  • MCP server: Log the working directory, arguments, and the root used for every call to stderr, to simplify troubleshooting.
  • Fix: Add the missing icon, license and readme to the NuGet packages of the MCP server and the analyzer, and add a readme for the Visual Studio extension.

v1.18.0

  • New: Nullable.Extended.Mcp, an MCP server that finds unjustified null-forgiving operators in large solutions, see Documentation.
  • Fix: Results of multi-targeted projects are merged again, a null-forgiving operator is required if it is required in any target framework.

v1.17.1

  • Performance improvements of the VS extension.

v1.17.0

  • Roll forward to 17.0 due to version conflicts with old versioning sheme.
open-telemetry/opentelemetry-dotnet (OpenTelemetry)

v1.20.1

Release details: 1.20.1

  • Breaking change HttpClient instances created directly by the OTLP
    exporter no longer follow HTTP redirects. A 3xx response is now treated as
    a failed export. See the OTLP exporter README to prevent an HttpClient
    created by IHttpClientFactory from following redirects.
  • Breaking change The experimental OTLP disk retry storage is now separated
    per destination, derived from the exporter's Protocol, Endpoint and
    Headers. This prevents telemetry stored by one exporter being resent by
    another exporter to its own endpoint with its own headers. Telemetry stored on
    disk by earlier versions is not resent.
  • Improved how values near a bucket boundary are assigned to exponential
    histogram buckets by using a pre-computed lookup table.
  • Invalid OTEL_EXPORTER_OTLP_ENDPOINT (and signal-specific) and
    OTEL_EXPORTER_ZIPKIN_ENDPOINT values are no longer written to the
    exporter's diagnostic log.
  • Hardened the experimental OTLP disk retry feature:
    • On non-Windows platforms the retry directory and blob files are now
      accessible to the current user only.
    • Only files named the way the exporter names its blobs are now retried,
      removed or renamed. This matters when the retry directory is shared with
      other files.
    • Blobs that are empty, larger than the maximum storage size, or (on .NET)
      symbolic links are no longer read, and subdirectories are no longer
      followed when calculating the size of the directory.
    • Fixed files never being cleaned up when the current culture uses a
      non-Gregorian calendar, and fixed expired leases being located and released
      incorrectly.
  • Self-diagnostics log files, whether configured through OTEL_DIAGNOSTICS.json
    or SelfDiagnosticsOptions, are now always created as new files.
  • Self-diagnostics messages written to SelfDiagnosticsOptions sinks are now
    truncated to 16,384 characters. Only the first 4 KiB of the body of an
    unsuccessful OTLP export response is now read and written to the exporter's
    diagnostic log.
  • On Linux and macOS, the self-diagnostics log directory and files can now only
    be accessed by their owner (0700/0600) instead of inheriting the process
    umask.
  • OTLP exponential histogram bucket counts are now serialized using packed
    encoding, which reduces the size of the exported payload.
  • Fixed a possible race condition on ARM64 when multiple threads record the
    first measurement with no tags, or the first overflow measurement, at the
    same time.
  • Fixed the Prometheus exporters handing scrape responses to the server in a
    single write. For each client that did not read the response, the server held
    a full copy of it until the request completed or timed out (for HttpListener,
    only on Linux and macOS). Responses are now written in bounded slices.
  • Fixed self-diagnostics preamble redaction of quoted or encoded PEM material
    and prefixed JWTs.
  • Fixed TracerProvider.GetTracer caching a new tracer on every call that
    passes equal array-valued scope tags.
  • Fixed informational HTTP client logs not being suppressed by default when the
    OTLP log exporter is registered using OpenTelemetryLoggerOptions.AddOtlpExporter.
  • Fixed legacy self-diagnostics logging terminating the process when the log
    file is truncated or its volume runs out of space.
  • Experimental (pre-release builds only): Fixed Logger.EmitLog ignoring
    instrumentation suppression, which could cause recursive exports or deadlocks.
  • Fixed Prometheus HttpListener scrape requests that announce a request body
    holding a thread pool thread on Linux and macOS for as long as the client
    kept sending the body slowly after the response was sent. The connection is
    now closed after responding to a request with a body.
  • Fixed delta double counters losing later measurements after a non-finite or
    large value, and idle metric points with a NaN value not being reclaimed.
  • Fixed LogRecords being returned to the shared pool while still queued for
    export when an exporter stops enumerating a single-item or array
    Batch<LogRecord> early.
  • Fixed a SuppressInstrumentationScope.Enter() reference count never being
    released when the Activity it was entered for is not recorded. This caused
    all later telemetry in that execution context to be suppressed.
  • Fixed reading the body of a failed OTLP export response for the diagnostic
    log not being bounded by the export timeout, and the body never being logged
    on .NET Framework.
  • Fixed OTLP attributes whose value is converted with ToString() (for example
    enums, Uri or StringValues) being dropped when the export buffer was
    resized while the attribute was being written. For metric data points, the
    attribute was also left out of every later export.
  • Fixed pooled log records retaining completed log data until reused.
  • Fixed inline OTLP certificate or private key material being included in
    diagnostic events and exceptions when supplied instead of a file path.
  • Fixed slow metric recording when distinct wide tag values, such as long or
    Guid, share the same built-in hash code.
  • Fixed early metric collections permanently omitting resource attributes from
    later OTLP exports, and target_info and resource constant labels from later
    Prometheus scrape responses, while the MeterProvider is being built.
  • Fixed ObservableCounter and ObservableUpDownCounter overflow points
    reporting only the last observation instead of the sum of all observations
    for each collection.
  • Fixed replaced log attributes being exported together with their original
    values when buffering or updating LogRecord.State.

v1.20.0

Release details: 1.20.0

  • Breaking change byte[] attributes longer than the configured attribute value
    length limit (for example OTEL_ATTRIBUTE_VALUE_LENGTH_LIMIT) are now truncated
    to that many bytes instead of being exported in full.
  • Breaking change OTEL_EVENT_ATTRIBUTE_COUNT_LIMIT and OTEL_LINK_ATTRIBUTE_COUNT_LIMIT
    now fall back to OTEL_ATTRIBUTE_COUNT_LIMIT (then the default of 128) when
    not set, instead of falling back to OTEL_SPAN_ATTRIBUTE_COUNT_LIMIT.
  • Breaking change Instrumentation scope attributes exported from ActivitySource.Tags
    are now limited by OTEL_ATTRIBUTE_COUNT_LIMIT instead of
    OTEL_SPAN_ATTRIBUTE_COUNT_LIMIT. Only applications that set
    OTEL_SPAN_ATTRIBUTE_COUNT_LIMIT to a different value from OTEL_ATTRIBUTE_COUNT_LIMIT
    are affected.
  • Breaking change (pre-release only versions): LoggerProvider's protected
    TryCreateLogger(string? name, out Logger? logger) extensibility method has
    been replaced by TryCreateLogger(LoggerOptions options, out Logger? logger).
  • Added OpenTelemetryLoggerOptions.Version and
    OpenTelemetryLoggerOptions.SchemaUrl options to set an instrumentation
    library version and schema URL applied to logs emitted via the
    Microsoft.Extensions.Logging ILogger integration.
  • Added Logger.SchemaUrl and a LoggerProvider.GetLogger overload accepting
    a schema URL parameter using the new LoggerOptions type.
  • ConsoleLogRecordExporter now writes an Instrumentation scope (Logger) section
    (Name, Version, and Schema URL) for each exported LogRecord.
  • The OTLP log exporter now exports schema_url on ScopeLogs. Log records
    emitted from a Logger with a schema URL set now populate ScopeLogs.schema_url
    in exported OTLP requests.
  • Custom TLS certificate options (custom CA trust and mTLS) and the experimental
    disk retry feature are explicitly marked as not supported on browser-based
    platforms (e.g. Blazor).
  • Suppressed informational HTTP client logs from OTLP exporters by default.
  • Added improved self-diagnostics logging to improve the support experience.
  • Self-diagnostic features are explicitly disabled on browser-based platforms
    (e.g. Blazor) and are now non-functional.
  • Added TracerProviderBuilder.ConfigureSampler intended for library authors
    who need to influence sampling without overriding a sampler the application
    has configured.
  • Fixed SuppressInstrumentationScope reference counts leaking between
    inherited asynchronous execution contexts.
  • Fixed ResourceBuilder.CreateDefault ignoring OTEL_RESOURCE_ATTRIBUTES and
    OTEL_SERVICE_NAME environment variables when the host IConfiguration does
    not contain those settings.
  • Fixed a race that could incorrectly route a concurrent metric measurement to
    the overflow point when its tag set was published as the cardinality limit was
    reached.
  • Fixed LogRecord.CategoryName resetting the current Logger's Version to
    null when set to a new value.
  • Bounded the internal cache of Logger scopes keyed by instrumentation to
    avoid unbounded growth.
  • Fixed the MeterProvider and its IServiceProvider being kept alive after the
    host is disposed when using Microsoft.Extensions.Diagnostics versions prior
    to .NET 9.0.
  • Fixed a race condition between recording a measurement and collecting a
    histogram with delta temporality that could cause an empty data point to be exported.
  • Improved metric collection performance after metric streams are removed by
    compacting metric storage during collection.
  • Optimize performance of BaggagePropagator.Inject on .NET Framework using
    lookup tables.
  • Avoid closure allocations when serializing cached metric metadata.
  • Avoid logging malformed HTTP request headers in the exporter's diagnostic log.
  • Avoid buffering the whole compressed request body in memory before sending it
    on .NET Framework when using HTTP/protobuf with gzip compression.
  • Fixed log records being dropped when using OtlpExportProtocol.HttpProtobuf
    with IHttpClientFactory integration if the first export of logs happens while
    the IServiceProvider is being disposed. The exporter now falls back to the
    default HttpClient instead of failing the export.
  • Dozens of other minor performance improvements.
App-vNext/Polly (Polly.Extensions)

v8.9.0

Compare Source

v8.8.1

Compare Source

wiremock/WireMock.Net (WireMock.Net)

v2.21.0

Compare Source

  • #​1526 - Update Scriban to 7.5.3 [dependencies] contributed by StefH
  • #​1525 - High security vulnerability in Scriban package [security]

v2.20.0

Compare Source

  • #​1516 - Add ScribanRegistrationCallback to register custom Scriban functions [feature] contributed by Quattordici
  • #​1519 - Bump MessagePack from 2.5.302 to 2.5.303 [dependencies] contributed by StefH
  • #​1521 - Add near-miss diagnostics and request count/unmatched endpoints to the admin API [feature] contributed by Quattordici
  • #​1522 - Downgrade JsonPath.Net from 3.0.2 to 2.2.0 to avoid Open Source Maintenance Fee issues [dependencies] contributed by StefH
  • #​1515 - Allow registering custom Scriban functions (ScribanRegistrationCallback), like HandlebarsRegistrationCallback [feature]
  • #​1520 - json-everything sub-dependency now has Open Source Maintenance Fee [dependencies]

v2.19.0

Compare Source

  • #​1512 - Use IDateTimeUtils in WireMockWebSocketContext [bug] contributed by StefH
  • #​1514 - Fix DateTime in Response [bug] contributed by StefH
  • #​1511 - Incorrect response datetime for mapped response [bug]

Configuration

📅 Schedule: (in timezone Europe/Oslo)

  • Branch creation
    • "before 07:00 on Thursday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the dependency Label Pull requests with dependency updates. Used when generation releasenotes label May 31, 2026
ivarne
ivarne reviewed Jun 2, 2026
View reviewed changes
Comment thread Directory.Packages.props Resolved
@ivarne
ivarne enabled auto-merge (squash) June 2, 2026 05:20
@renovate renovate Bot changed the title chore(deps): update nuget non-major dependencies (minor) chore(deps): update nuget non-major dependencies (minor) - abandoned Jun 2, 2026
@renovate

renovate Bot commented Jun 2, 2026

Copy link
Copy Markdown
Contributor Author

Autoclosing Skipped

This PR has been flagged for autoclosing. However, it is being skipped due to the branch being already modified. Please close/delete it manually or report a bug if you think this is in error.

@renovate
renovate Bot force-pushed the renovate/nuget-minor-patch branch from ca0f3c3 to c8008af Compare June 23, 2026 11:26
@renovate renovate Bot changed the title chore(deps): update nuget non-major dependencies (minor) - abandoned Update nuget non-major dependencies (minor) Jun 23, 2026
@sonarqubecloud

sonarqubecloud Bot commented Jun 23, 2026

Copy link
Copy Markdown

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

@renovate
renovate Bot force-pushed the renovate/nuget-minor-patch branch 3 times, most recently from 57eb6f2 to f48a7b2 Compare June 26, 2026 08:56
auto-merge was automatically disabled June 26, 2026 11:24

Repository rule violations found

@renovate
renovate Bot force-pushed the renovate/nuget-minor-patch branch from 1ddf220 to 5afd272 Compare October 8, 2026 08:13
@renovate renovate Bot changed the title Update nuget non-major dependencies (minor) chore(deps): update nuget non-major dependencies (minor) Oct 8, 2026
@coderabbitai

coderabbitai Bot commented Oct 8, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration
  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: Organization UI
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: d006e388-acc8-42c8-bd4c-2cf7c208042d

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

@ivarne-agent ivarne-agent mentioned this pull request Oct 8, 2026
Merged
5 tasks
ivarne pushed a commit that referenced this pull request Oct 8, 2026
@ivarne-agent ivarne-agent @claude
chore(deps): update nuget non-major dependencies that build and pass …
eb29a81 
…tests (#1883)

Subset of the Renovate updates in #1787. Left out:
- CSharpier.Core 1.3.0: pulls Microsoft.CodeAnalysis.Common 5.3.0 (NU1608
  against the pinned Microsoft.CodeAnalysis.CSharp 4.14.0) and removes
  CodeFormatterResult.CompilationErrors used by SourceGenerator tests.
- Moq 4.21.0: new nullable annotations on It.Is predicates give CS8602
  errors in tests when warnings are treated as errors (CI=true).

Co-authored-by: ivarne-agent <ivar.nesje+agent@digdir.no>
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
@renovate
renovate Bot force-pushed the renovate/nuget-minor-patch branch 2 times, most recently from 8c5af2f to d88a105 Compare October 9, 2026 07:34
@renovate renovate Bot changed the title chore(deps): update nuget non-major dependencies (minor) chore(deps): update dependency moq to 4.21.0 Oct 9, 2026
@renovate
renovate Bot force-pushed the renovate/nuget-minor-patch branch from d88a105 to 13dc1b8 Compare October 10, 2026 18:32
@renovate renovate Bot changed the title chore(deps): update dependency moq to 4.21.0 chore(deps): update nuget non-major dependencies (minor) Oct 10, 2026
@renovate
renovate Bot force-pushed the renovate/nuget-minor-patch branch 5 times, most recently from be08774 to c3af518 Compare October 21, 2026 17:57
@renovate
renovate Bot force-pushed the renovate/nuget-minor-patch branch 2 times, most recently from 3601372 to c3f82f2 Compare October 24, 2026 10:31
@renovate
renovate Bot force-pushed the renovate/nuget-minor-patch branch 6 times, most recently from 492a194 to a6862d9 Compare October 31, 2026 14:51
@renovate
renovate Bot force-pushed the renovate/nuget-minor-patch branch from a6862d9 to fa56c1f Compare October 31, 2026 22:50
@sonarqubecloud

sonarqubecloud Bot commented Oct 31, 2026

Copy link
Copy Markdown

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@ivarne ivarne ivarne approved these changes

Assignees

No one assigned

Labels

dependency Label Pull requests with dependency updates. Used when generation releasenotes

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@ivarne