Update all non-major dependencies

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update
AWSSDK.S3	4.0.18.7 → 4.0.23.3					nuget	patch
ErrorOr	2.0.1 → 2.1.1					nuget	minor
FastEndpoints (source)	8.0.1 → 8.1.0					nuget	minor
FastEndpoints.Generator (source)	8.0.1 → 8.1.0					nuget	minor
FastEndpoints.Security (source)	8.0.1 → 8.1.0					nuget	minor
FastEndpoints.Swagger (source)	8.0.1 → 8.1.0					nuget	minor
FastEndpoints.Testing (source)	8.0.1 → 8.1.0					nuget	minor
Microsoft.AspNetCore.Authentication.JwtBearer (source)	10.0.3 → 10.0.8					nuget	patch
Microsoft.AspNetCore.Identity.EntityFrameworkCore (source)	10.0.3 → 10.0.8					nuget	patch
Microsoft.AspNetCore.OpenApi (source)	10.0.3 → 10.0.8					nuget	patch
Microsoft.AspNetCore.OutputCaching.StackExchangeRedis (source)	10.0.3 → 10.0.8					nuget	patch
Microsoft.EntityFrameworkCore.InMemory (source)	10.0.3 → 10.0.8					nuget	patch
Microsoft.EntityFrameworkCore.Tools (source)	10.0.3 → 10.0.8					nuget	patch
Microsoft.Extensions.Caching.Hybrid (source)	10.3.0 → 10.6.0					nuget	minor
Microsoft.Extensions.Caching.StackExchangeRedis (source)	10.0.3 → 10.0.8					nuget	patch
Microsoft.Extensions.Http.Resilience (source)	10.3.0 → 10.6.0					nuget	minor
Microsoft.Extensions.TimeProvider.Testing (source)	10.3.0 → 10.6.0					nuget	minor
Microsoft.NET.Test.Sdk	18.3.0 → 18.5.1					nuget	minor
MinecraftRenderer	0.4.2 → 0.6.0					nuget	minor
Npgsql	10.0.1 → 10.0.2					nuget	patch
Npgsql.EntityFrameworkCore.PostgreSQL	10.0.0 → 10.0.1					nuget	patch
OpenTelemetry.Extensions.Hosting (source)	1.15.0 → 1.15.3					nuget	patch
Pyroscope (source)	0.14.1 → 0.15.0					nuget	minor
Quartz.Extensions.Hosting (source)	3.16.1 → 3.18.1					nuget	minor
Refit	10.0.1 → 10.1.6					nuget	minor
Refit.HttpClientFactory	10.0.1 → 10.1.6					nuget	minor
Scalar.AspNetCore (source)	2.13.1 → 2.14.14					nuget	minor
SkyblockRepo	0.4.3 → 0.5.0					nuget	minor
StackExchange.Redis (source)	2.11.8 → 2.13.1					nuget	minor
Swashbuckle.AspNetCore	10.1.4 → 10.1.7					nuget	patch
Swashbuckle.AspNetCore.Annotations	10.1.4 → 10.1.7					nuget	patch
System.Linq.Async	7.0.0 → 7.0.1					nuget	patch
System.Threading.RateLimiting (source)	10.0.3 → 10.0.8					nuget	patch
Testcontainers.PostgreSql (source)	4.10.0 → 4.11.0					nuget	minor
ZLinq	1.5.5 → 1.5.6					nuget	patch
coverlet.collector	8.0.0 → 8.0.1					nuget	patch
dotnet-ef (source)	10.0.1 → 10.0.8					nuget	patch
dotnet-sdk	10.0.0 → 10.0.300					dotnet-sdk	patch
prom/prometheus	v3.5.0 → v3.11.3						minor
pyroscope/pyroscope-dotnet	0.13.0-glibc → 0.14.5-glibc					stage	minor
redis	8.4-alpine → 8.6-alpine						minor

---

Release Notes

aws/aws-sdk-net (AWSSDK.S3)

v4.0.23

v4.0.22

v4.0.21

v4.0.20

v4.0.19

error-or/error-or (ErrorOr)

v2.1.1

Added

• #​94, #​95 Added missing async versions of FailIf methods

  public async Task<ErrorOr<TValue>> FailIfAsync(Func<TValue, Task<bool>> onValue, Error error)

  public static async Task<ErrorOr<TValue>> FailIf<TValue>(
      this Task<ErrorOr<TValue>> errorOr,
      Func<TValue, bool> onValue,
      Error error)

  public static async Task<ErrorOr<TValue>> FailIfAsync<TValue>(
      this Task<ErrorOr<TValue>> errorOr,
      Func<TValue, Task<bool>> onValue,
      Error error)

• #​104 Support for .NET 8 was added

• #​109, #​111 Added FailIf method overloads that allow to use value in error definition using Func<TValue, Error> error builder

  public ErrorOr<TValue> FailIf(Func<TValue, bool> onValue, Func<TValue, Error> errorBuilder)

  public async Task<ErrorOr<TValue>> FailIfAsync(Func<TValue, Task<bool>> onValue, Func<TValue, Task<Error>> errorBuilder)

  public static async Task<ErrorOr<TValue>> FailIf<TValue>(
      this Task<ErrorOr<TValue>> errorOr,
      Func<TValue, bool> onValue,
      Func<TValue, Error> errorBuilder)

  public static async Task<ErrorOr<TValue>> FailIfAsync<TValue>(
      this Task<ErrorOr<TValue>> errorOr,
      Func<TValue, Task<bool>> onValue,
      Func<TValue, Task<Error>> errorBuilder)

  Value can now be used to build the error:

  ErrorOr<int> result = errorOrInt
      .FailIf(num => num > 3, (num) => Error.Failure(description: $"{num} is greater than 3"));

• #​117 Added ElseDo and ElseDoAsync methods

  Actions returning no result can now be called when IsError is true.

  ErrorOr<string> foo = result
      .Else(errors => Error.Unexpected())
      .ElseDo(error => Console.WriteLine(error.FirstError.Description));

  ErrorOr<string> foo = await result
      .ElseDoAsync(HandleErrorAsync);

• #​122 Added ToErrorOrAsync method

  Values in Task can now be easily converted to ErrorOr.

  ErrorOr<int> result = await Task.FromResult(5).ToErrorOrAsync();

• #​129 Added missing ErrorOrFactory.From methods

  Now following calls from README.md are available

  ErrorOr<int> result = ErrorOrFactory.From<int>(Error.Unexpected());
  ErrorOr<int> result = ErrorOrFactory.From<int>([Error.Validation(), Error.Validation()]);

  Following call is now obsolete

  ErrorOr<int> errorOrPerson = ErrorOr<int>.From([Error.Validation(), Error.Validation()]);

• #​133 Added missing collection expression support

  Now following call from README.md is available

  ErrorOr<int> result = [Error.Validation(), Error.Validation()];

• #​134 Added FromAsync and missing ToErrorOrAsync methods

  Added support for FromAsync methods.

  public async Tak<ErrorOr<int>> GetValueAsync()
  {
      return await ErrorOrFactory.FromAsync(5);
  }

  public async Tak<ErrorOr<int>> SingleErrorToErrorOrAsync()
  {
      return await ErrorOrFactory.FromAsync<int>(Error.Unexpected());
  }

  public async Tak<ErrorOr<int>> MultipleErrorsToErrorOrAsync()
  {
      return await ErrorOrFactory.FromAsync([
          Error.Validation(description: "Invalid Name"),
          Error.Validation(description: "Invalid Last Name")
      ]);
  }

  Added support for ToErrorOrAsync methods from errors:

  Task<Error> errorTask = Task.FromResult(Error.Validation());
  ErrorOr<int> result = errorTask.ToErrorOrAsync<int>();

  List<Error> errors = [Error.Unauthorized(), Error.Validation()];
  Task<List<Error>> errorsTask = Task.FromResult(errors);
  ErrorOr<int> result = await errorsTask.ToErrorOrAsync<int>();

• #​149 Added Else/ElseAsync overloads returning ErrorOr

• #​152 Added ThenEnsure and ThenEnsureAsync methods.

  They are similar to ThenDo and ThenDoAsync, but they receive a function that can return errors.
  If no errors are returned, the original value is preserved and the ensure function's success value is ignored.

• #​159 Added IsSuccess property to ErrorOr

• #​158 Added support for serialization via IErrorOr interface without direct access to Value property. The IRecordable base interface provides a way to obtain a serialized representation of the current state.

  void Log(IErrorOr result)
  {
      Console.WriteLine(result.GetRecording(serializer));
  }

  IRecordingSerializer<TOutput> interface can be implemented to provide concrete serialization strategy, for exaple JSON serialization:

  using System.Text.Json;
  using System.Text.Json.Serialization;
  using ErrorOr;
  
  public class SystemTextJsonRecordingSerializer : IRecordingSerializer<string>
  {
      private static readonly JsonSerializerOptions JsonOptions = new()
      {
          WriteIndented = true,
          Converters = { new JsonStringEnumConverter() },
          DefaultIgnoreCondition = JsonIgnoreCondition.Never,
      };
  
      public string SerializeValue<TValue>(TValue value)
          => JsonSerializer.Serialize(value, JsonOptions);
  
      public string SerializeErrors(List<Error> errors)
          => JsonSerializer.Serialize(errors, JsonOptions);
  }

• #​179 Support for .NET 10 was added

Fixed

• #​85, #​97 ErrorOr turned into Value Object by reimplementing Equals and GetHashCode methods

  New dependency was introduced to Microsoft.Bcl.HashCode and development dependency was introduced to Nullable

• #​178 Initializing ErrorOr<T> with empty or null error collection results with unexpected error.

Optimized

• #​98, #​99 Memory consumption optimized by moving static empty errors lists from generic struct into non-generic class

Refactored

• #​154 Modernized NuGet publish workflow

dotnet/dotnet (Microsoft.AspNetCore.Authentication.JwtBearer)

v10.0.8

v10.0.7

v10.0.6

v10.0.5

v10.0.4

dotnet/extensions (Microsoft.Extensions.Caching.Hybrid)

v10.6.0

Version 10.6.0 stabilizes the response continuation token and background-response APIs in Microsoft.Extensions.AI.Abstractions. Most other AI work for May shipped in 10.5.1; this monthly release rolls those changes up alongside dependency updates and a small Resource Monitoring cleanup.

Experimental API Changes

Now Stable

• ResponseContinuationToken and background-response APIs are now stable (previously MEAI001) #​7512

What's Changed

AI

• Stabilize ResponseContinuationToken / background-response APIs #​7512 by @​jozkee (co-authored by @​Copilot)

Repository Infrastructure Updates

• Update version to 10.6.0 #​7458 by @​jeffhandley
• [main] Update dependencies from dotnet/arcade #​7451
• Bump follow-redirects from 1.15.11 to 1.16.0 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript/azure-devops-report/tasks/PublishAIEvaluationReport #​7469
• Merge release/10.5 into main #​7470 by @​jeffhandley
• Bump microsoft.visualstudio.slngen.tool from 12.0.13 to 12.0.32 #​7484
• Bump postcss from 8.5.9 to 8.5.12 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7494
• Bump dotnet-reportgenerator-globaltool from 5.5.7 to 5.5.9 #​7504
• Rename release-notes skill to write-release-notes #​7511 by @​jeffhandley (co-authored by @​Copilot)

Acknowledgements

• @​wtgodbe @​tarekgh @​peterwald @​JeremyLikness @​eiriktsarpalis @​ericstj @​evgenyfedorov2 reviewed pull requests

Full Changelog: dotnet/extensions@v10.5.2...v10.6.0

v10.5.0

HTTP Logging Middleware APIs in Microsoft.AspNetCore.Diagnostics.Middleware are now stable. This release also transfers Microsoft.Extensions.VectorData.Abstractions and Microsoft.Extensions.VectorData.ConformanceTests from the Semantic Kernel repository into dotnet/extensions, jumping from 10.1.0 to 10.5.0 for consistent versioning. The release also delivers fixes across the AI libraries, AI Evaluation, and Service Discovery.

Breaking Changes

1. Rename VectorStoreVectorAttribute constructor parameter #​7460
   • The Dimensions parameter was renamed to dimensions (lowercase). This is a source-breaking change only — binary compatibility is preserved.
   • If you use the named argument syntax new VectorStoreVectorAttribute(Dimensions: 1536), update it to new VectorStoreVectorAttribute(dimensions: 1536).

Experimental API Changes

Now Stable

• HTTP Logging Middleware APIs are now stable (previously EXTEXP0013): AddHttpLogEnricher<T>, IHttpLogEnricher, and RequestHeadersLogEnricherOptions.HeadersDataClasses #​7380

What's Changed

AI

• Fix OpenAIResponsesChatClient to respect "store":false in responses #​7417 by @​stephentoub
• Fix InvalidOperationException in CoalesceWebSearchToolCallContent #​7419 by @​stephentoub
• Handle F# optional parameters in AIFunctionFactory schema generation #​7439 by @​eiriktsarpalis
• Fix ComputerCallResponseItem using Item.Id instead of CallId #​7446 by @​jozkee
• Fix HostedFileContent with image MIME type sent as input_file instead of input_image #​7438 by @​stephentoub (co-authored by @​copilot)
• Guard Activity.Current restore with null check in OpenTelemetry streaming clients #​7443 by @​stephentoub (co-authored by @​copilot)
• Enable stateless mode in remote MCP server template (released as v1.2.0 on 2026-04-01) #​7441 by @​jeffhandley

Vector Data

• Move Microsoft.Extensions.VectorData.Abstractions over from Semantic Kernel #​7434 by @​roji
• Rename VectorStoreVectorAttribute dimensions constructor parameter #​7460 by @​roji

AI Evaluation

• Add Path Validation for DiskBasedResponseCache and DiskBasedResultStore #​7397 by @​peterwald
• Update brace-expansion for CVE-2026-33750 #​7457 by @​SamMonoRT

ASP.NET Core Extensions

• Removing experimental attribute from Http logging middleware #​7380 by @​mariamgerges

Service Discovery

• Implement RFC6761 reserved DNS names handling #​6924 by @​rzikm

Documentation Updates

• Remove per-library CHANGELOG.md files #​7413 by @​jeffhandley

Test Improvements

• Fix SqliteVectorStoreWriterTests hang: reduce test record count and use conditional MaxTopCount #​7360 by @​stephentoub (co-authored by @​copilot)

Repository Infrastructure Updates

• Bump minimatch and azure-pipelines-task-lib in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7361
• Remove stale user-level .npmrc instead of npmAuthenticate #​7366 by @​ilonatommy
• [main] Update dependencies from dotnet/arcade #​7374
• Use env vars in build.ps1 to bypass stale agent npm config #​7376 by @​ilonatommy
• Add a Release-Notes skill #​7390 by @​jeffhandley
• Enable CFSClean* policies for extensions-ci-official pipeline #​7403 by @​mmitche
• Fix CG alerts for Microsoft.Bcl.Memory #​7418 by @​wtgodbe
• Bump flatted from 3.3.3 to 3.4.2 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7421
• [main] Update dependencies from dotnet/arcade #​7422
• Bump picomatch from 2.3.1 to 2.3.2 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7427
• Bump picomatch in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7429
• Stop using Mariner 2 images #​7431 by @​wtgodbe
• [main] Update dependencies from dotnet/arcade #​7435
• Bump brace-expansion from 1.1.12 to 1.1.13 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7440
• Bump lodash from 4.17.23 to 4.18.1 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7455
• Bump vite from 6.4.1 to 6.4.2 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7456
• Correctly publish MEVD.ConformanceTests as nuget packages #​7459 by @​roji
• Update ApiChief baselines for MEAI and MEVD #​7461 by @​jeffhandley
• Upgrade to OpenAI 2.10.0 #​7450 by @​stephentoub
• Use shared DiagnosticIds constants for MEVD experimental APIs #​7462 by @​jeffhandley

Acknowledgements

• @​shyamnamboodiripad @​rogerbarreto @​ReubenBond @​evgenyfedorov2 @​tarekgh reviewed pull requests

Full Changelog: dotnet/extensions@v10.4.1...v10.5.0

v10.4.0

This release advances the AI abstractions with new hosted file, web search, and reasoning content types, stabilizes MCP and tool approval APIs, adds streaming latency metrics to OpenTelemetry instrumentation, and delivers bug fixes across caching, data ingestion, and resource monitoring.

Experimental API Changes

Now Stable

• MCP Server Tool Content and Function Call Approval APIs are now stable (previously MEAI001) #​7299
• FakeLogCollector.GetLogsAsync(CancellationToken) is now stable (previously EXTEXP0003) #​7332

New Experimental APIs

• New experimental AddExtendedHttpClientLogging overloads with wrapHandlersPipeline parameter (EXTEXP0013) #​7231

Removed Experimental APIs

• AI Tool Reduction experimental APIs removed (was experimental under MEAI001) #​7353

What's Changed

AI

• Add IHostedFileClient and friends #​7269 by @​stephentoub
• Add web search tool call content #​7276 by @​stephentoub (co-authored by @​Copilot)
• Surface OpenAI-compatible reasoning_content as TextReasoningContent #​7295 by @​stephentoub
• MCP/Approvals/Tool Contents stabilization #​7299 by @​jozkee
• Implement time_to_first_chunk and time_per_output_chunk streaming metrics in OpenTelemetryChatClient #​7325 by @​stephentoub (co-authored by @​Copilot)
• Add openai.api.type telemetry attribute to OpenAI IChatClient implementations #​7316 by @​stephentoub (co-authored by @​Copilot)
• Update OpenTelemetry Gen AI semantic conventions to v1.40 #​7322 by @​stephentoub (co-authored by @​Copilot)
• Fix tool definitions emission regardless of sensitivity setting #​7346 by @​stephentoub (co-authored by @​Copilot)
• Honor [Required] attribute in AI function parameter JSON schema generation #​7272 by @​stephentoub (co-authored by @​Copilot)
• AddAIContentType automatically registers content type against every base in the inheritance chain up to AIContent #​7358 by @​jozkee (co-authored by @​Copilot)
• Auto-mark server-handled FunctionCallContent as InformationalOnly #​7314 by @​stephentoub (co-authored by @​Copilot)
• Map ReasoningEffort.None and ExtraHigh to none and xhigh in OpenAI IChatClient implementations #​7319 by @​stephentoub (co-authored by @​Copilot)
• Handle DynamicMethod reflection limitations in AIFunctionFactory #​7287 by @​stephentoub (co-authored by @​Copilot)
• Fix Activity.Current nulled during streaming tool invocation #​7321 by @​flaviocdc (co-authored by @​Copilot)
• Handle FunctionCallOutputResponseItem in streaming response conversion #​7307 by @​stephentoub (co-authored by @​Copilot)
• Fix serialization of response continuation tokens #​7356 by @​stephentoub
• Remove AI Tool Reduction experimental APIs #​7353 by @​stephentoub (co-authored by @​Copilot)
• Update OpenAI to 2.9.1 #​7349 by @​stephentoub

Telemetry and Observability

• Introduce support for the Gauge metric type #​7203 by @​rainsxng
• Update logging source generator to support generic methods #​7331 by @​svick (co-authored by @​Copilot)
• Update logging source generator to match runtime PR #​124589 (ref readonly/params/scoped) #​7333 by @​svick (co-authored by @​Copilot)
• Promote FakeLogCollector.GetLogsAsync(CancellationToken) from experimental to stable #​7332 by @​Demo30
• Remove obsolete CS1591 warning suppression from generated file preamble #​7308 by @​luissena

HTTP Resilience and Diagnostics

• Expose wrapHandlersPipeline parameter in AddExtendedHttpClientLogging API #​7231 by @​rainsxng (co-authored by @​Copilot)

Diagnostics, Health Checks, and Resource Monitoring

• Add scaling to [0, 100] for LinuxUtilizationProvider #​7289 by @​amadeuszl

Data Ingestion

• Fix infinite loop in GetPreExistingChunksIdsAsync when records exceed MaxTopCount #​7311 by @​adamsitnik (co-authored by @​Copilot)

Caching

• Fix buffer copying for HybridCachePayload. #​7343 by @​cincuranet

Test Improvements

• Fix flaky LinuxResourceHealthCheckTests by isolating MeterListener with ReferenceEquals #​7302 by @​stephentoub (co-authored by @​Copilot)
• Fix flaky resource monitoring test #​7303 by @​stephentoub
• Fix flaky HttpRequestBuffering_DoesNotBufferDisabledOrOversizedLogs test #​7304 by @​stephentoub (co-authored by @​Copilot)
• Fix race condition in FakeLogCollector async enumeration test #​7300 by @​stephentoub (co-authored by @​Copilot)
• Fix cgroupv1 acceptance test to explicitly register the v1 parser #​7296 by @​stephentoub (co-authored by @​Copilot)

Repository Infrastructure Updates

• Update McpServer project template to ModelContextProtocol 1.1.0 #​7338 by @​jeffhandley (co-authored by @​Copilot)
• Update aiagent-webapi template to latest Agent Framework versions (rc1/260219) #​7339 by @​jeffhandley (co-authored by @​Copilot)
• Update SDK and dotnet version to 10.0.103 #​7326 by @​wtgodbe
• Introduce an ApiChief skill to streamline updating API baselines #​7281 by @​jeffhandley (co-authored by @​Copilot)
• Update ApiChief script to use the net10.0 artifacts #​7280 by @​jeffhandley
• Replace Windows queue image references from vs2022preview to vs2022 in pipeline YAML #​7347 by @​wtgodbe (co-authored by @​Copilot)
• Update public pipeline pool images to fix broken builds #​7292 by @​joperezr
• Use smaller windows.vs2022.amd64.open pool image #​7298 by @​joperezr
• Remove main-to-dev inter-branch merge automation #​7315 by @​joperezr (co-authored by @​Copilot)
• Updating FakeLogCollector API baselines #​7334 by [@​Demo30](https://re

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.