Skip to content

Bump the dotnet group with 5 updates#470

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/nuget/docs/ai/quickstarts/snippets/chat-with-data/azure-openai/dotnet-d6b2050c35
Open

Bump the dotnet group with 5 updates#470
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/nuget/docs/ai/quickstarts/snippets/chat-with-data/azure-openai/dotnet-d6b2050c35

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot bot commented on behalf of github Mar 25, 2026

Updated Azure.Identity from 1.17.1 to 1.19.0.

Release notes

Sourced from Azure.Identity's releases.

1.19.0

1.19.0 (2026-03-11)

Features Added

  • Added support in ClientCertificateCredential to specify a path in the form of cert:/StoreLocation/StoreName/Thumbprint to refer to a certificate in the platform certificate store - such as the Windows Certificate Store on Windows, and the KeyChain on MacOS - instead of a file on disk. For example to load a certificate from the "My" store in the "CurrentUser" location use the path cert:/CurrentUser/My/E661583E8FABEF4C0BEF694CBC41C28FB81CD870 (A community contribution, courtesy of fowl2).

Other Changes

  • Updated Microsoft.Identity.Client and Microsoft.Identity.Client.Extensions.Msal dependencies to version 4.83.1.

1.18.0

1.18.0 (2026-02-25)

Features Added

  • Added experimental Microsoft.Extensions.Configuration and Microsoft.Extensions.DependencyInjection integration for Azure SDK clients. For details, see the Configuration and Dependency Injection documentation.

  • The WorkloadIdentityCredentialOptions.IsAzureProxyEnabled property, which enables Azure Kubernetes token proxy mode, is only available in beta releases of this package.

  • AzureDeveloperCliCredential now parses JSON error output from azd auth token to extract clean error messages instead of including raw JSON in exceptions. Error messages like {"type":"consoleMessage","data":{"message":"ERROR: fetching token: ..."}} are now displayed as ERROR: fetching token: ....

Commits viewable in compare view.

Updated Microsoft.Extensions.AI.OpenAI from 10.3.0 to 10.4.1.

Release notes

Sourced from Microsoft.Extensions.AI.OpenAI's releases.

10.4.1

This release of the Microsoft.Extensions.AI packages adds new experimental APIs for Realtime client sessions and Text-to-Speech, along with OpenTelemetry and middleware improvements.

Packages in this release

Package Version
Microsoft.Extensions.AI.Abstractions 10.4.1
Microsoft.Extensions.AI 10.4.1
Microsoft.Extensions.AI.OpenAI 10.4.1

Experimental API Changes

New Experimental APIs

  • New experimental API: Realtime Client Sessions #​7285 and #​7399
  • New experimental API: Text-to-Speech Client #​7381

Changes to Experimental APIs

  • Hosted File Download Stream: write-path methods now explicitly throw NotSupportedException #​7394

What's Changed

AI

  • Add ITextToSpeechClient abstraction, middleware, and OpenAI implementation #​7381 by @​stephentoub
  • Realtime Client Proposal #​7285 by @​tarekgh
  • Add VoiceActivityDetection options to realtime session abstractions #​7399 by @​tarekgh
  • Make UriContent mediaType parameter optional with inference from URI file extension #​7398 by @​stephentoub (co-authored by @​Copilot)
  • Emit gen_ai.client.operation.exception via ILogger LoggerMessage on OpenTelemetry instrumentation classes #​7379 by @​stephentoub (co-authored by @​Copilot)
  • Support invoke_workflow as an equivalent parent span to invoke_agent in FunctionInvokingChatClient #​7382 by @​stephentoub (co-authored by @​Copilot)
  • Make HostedFileDownloadStream explicitly read-only #​7394 by @​stephentoub (co-authored by @​Copilot)

Documentation Updates

  • Document JSON schema derivation for return types in AIFunctionFactory #​7400 by @​stephentoub (co-authored by @​Copilot)

Test Improvements

  • Fix test warnings #​7369 by @​jozkee
  • Add tests for JSON deserialization of serializable types #​7373 by @​stephentoub (co-authored by @​Copilot)

Repository Infrastructure Updates

  • Update Package Validation Baseline to 10.4.0 #​7389 by @​jeffhandley (co-authored by @​Copilot)
  • Update ModelContextProtocol libraries to version 1.0.0 #​7340 by @​stephentoub (co-authored by @​Copilot)

Acknowledgements

  • @​eiriktsarpalis @​ericstj @​CodeBlanch @​lmolkova @​adamsitnik @​joperezr reviewed pull requests
    ... (truncated)

10.4.0

This release advances the AI abstractions with new hosted file, web search, and reasoning content types, stabilizes MCP and tool approval APIs, adds streaming latency metrics to OpenTelemetry instrumentation, and delivers bug fixes across caching, data ingestion, and resource monitoring.

Experimental API Changes

Now Stable

  • MCP Server Tool Content and Function Call Approval APIs are now stable (previously MEAI001) #​7299
  • FakeLogCollector.GetLogsAsync(CancellationToken) is now stable (previously EXTEXP0003) #​7332

New Experimental APIs

  • New experimental AddExtendedHttpClientLogging overloads with wrapHandlersPipeline parameter (EXTEXP0013) #​7231

Removed Experimental APIs

  • AI Tool Reduction experimental APIs removed (was experimental under MEAI001) #​7353

What's Changed

AI

  • Add IHostedFileClient and friends #​7269 by @​stephentoub
  • Add web search tool call content #​7276 by @​stephentoub (co-authored by @​Copilot)
  • Surface OpenAI-compatible reasoning_content as TextReasoningContent #​7295 by @​stephentoub
  • MCP/Approvals/Tool Contents stabilization #​7299 by @​jozkee
  • Implement time_to_first_chunk and time_per_output_chunk streaming metrics in OpenTelemetryChatClient #​7325 by @​stephentoub (co-authored by @​Copilot)
  • Add openai.api.type telemetry attribute to OpenAI IChatClient implementations #​7316 by @​stephentoub (co-authored by @​Copilot)
  • Update OpenTelemetry Gen AI semantic conventions to v1.40 #​7322 by @​stephentoub (co-authored by @​Copilot)
  • Fix tool definitions emission regardless of sensitivity setting #​7346 by @​stephentoub (co-authored by @​Copilot)
  • Honor [Required] attribute in AI function parameter JSON schema generation #​7272 by @​stephentoub (co-authored by @​Copilot)
  • AddAIContentType automatically registers content type against every base in the inheritance chain up to AIContent #​7358 by @​jozkee (co-authored by @​Copilot)
  • Auto-mark server-handled FunctionCallContent as InformationalOnly #​7314 by @​stephentoub (co-authored by @​Copilot)
  • Map ReasoningEffort.None and ExtraHigh to none and xhigh in OpenAI IChatClient implementations #​7319 by @​stephentoub (co-authored by @​Copilot)
  • Handle DynamicMethod reflection limitations in AIFunctionFactory #​7287 by @​stephentoub (co-authored by @​Copilot)
  • Fix Activity.Current nulled during streaming tool invocation #​7321 by @​flaviocdc (co-authored by @​Copilot)
  • Handle FunctionCallOutputResponseItem in streaming response conversion #​7307 by @​stephentoub (co-authored by @​Copilot)
  • Fix serialization of response continuation tokens #​7356 by @​stephentoub
  • Remove AI Tool Reduction experimental APIs #​7353 by @​stephentoub (co-authored by @​Copilot)
  • Update OpenAI to 2.9.1 #​7349 by @​stephentoub

Telemetry and Observability

  • Introduce support for the Gauge metric type #​7203 by @​rainsxng
  • Update logging source generator to support generic methods #​7331 by @​svick (co-authored by @​Copilot)
  • Update logging source generator to match runtime PR #​124589 (ref readonly/params/scoped) #​7333 by @​svick (co-authored by @​Copilot)
  • Promote FakeLogCollector.GetLogsAsync(CancellationToken) from experimental to stable #​7332 by @​Demo30
  • Remove obsolete CS1591 warning suppression from generated file preamble #​7308 by @​luissena

HTTP Resilience and Diagnostics

... (truncated)

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration from 10.0.3 to 10.0.5.

Release notes

Sourced from Microsoft.Extensions.Configuration's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.UserSecrets from 10.0.3 to 10.0.5.

Release notes

Sourced from Microsoft.Extensions.Configuration.UserSecrets's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.VectorData.Abstractions from 10.0.0 to 10.1.0.

Release notes

Sourced from Microsoft.Extensions.VectorData.Abstractions's releases.

10.1.0

Changes:

  • 14ea2fcabb02910e6fccfc939d217567caa4a0be SK .NET Release version bump (#​13685)
  • 8b32b3ba6f62e94ea2533d818b89a17eb11bb681 DF PR Review workflow (#​13687)
  • 30aec16700618b9912e08b0a5f919839e058ca11 Update OpenAI to 2.9.1, Azure.AI.OpenAI to 2.9.0-beta.1, Azure.AI.Projects to 2.0.0-beta.2, Microsoft.Extensions.AI* to 10.4.0 (#​13668)
  • 3c1b688dcfd3b05e29423e15b00cc9182b4cf71d Python: Fix ChatHistoryTruncationReducer deleting system prompt (#​13610) [ #​12612, #​10344 ]
  • bb421f67a7d7561517c0eedc31b911f9819bb323 Reduce macos runner coverage due to capacity (#​13686)
  • 620e412c70ea72df3aea6080f83d96e42e9e008f Python: Bump werkzeug from 3.1.1 to 3.1.6 in /python (#​13605) [ #​3065, #​3077, #​3075, #​3020, #​3054, #​3067, #​3044, #​3056, #​2994, #​2993, #​3102, #​3097, #​3085 ]
  • c9efdf50f5825586f12728bebd1364d806793245 Fix link for Chroma documentation in README (#​13682)
  • 2c880ea4b26017f375b3ae8d11cf22a7119c7ce9 .Net: [Breaking] Harden plugin security defaults for WebFileDownloadPlugin (#​13644)
  • 12a7d55d3aca39aeeb20055dbb477b0eaf18da45 .Net: [Breaking] Harden DocumentPlugin security defaults with deny-by-default AllowedDirectories (#​13683)
  • 41cc2487d25a63b6e3ce2f24663f9d03c93787d5 .Net: Fixes Qdrant 1.17 issue with returning empty vectors (#​13638) [ #​13587 ]
See More
  • 301d7dc9239216b5ac9f38df42dcad2d544c69e1 .Net: Migrate from deprecated DALL-E models to gpt-image-1 (#​13650)
  • c2945847eabf2b32b023373d24dfd58b53c40b07 .NET: Update system package dependencies for CVE-2026-26127 (#​13656) [ #​4647 ]
  • e500f727ed6b3ff6f63dacdaf5d224c48275a317 Python: fix prompt template engine blocking HTML tags in content (#​13633) [ #​13632 ]
  • 3f6d72725f85888c7e87ec97c9f1b8a4f1a0b0ee Python: Fix image integration tests that are now blocked due to bot policies (#​13680)
  • cc83889787188c22a770347aacbf5e4842f9a613 Python: fix(python/google): preserve thought_signature in Gemini function call parts (#​13609) [ #​13480, #​13418 ]
  • b3cf64adf868cd96c767776af5730e17b8510f5b Python: Bump Python version to 1.41.0 for a release (#​13655)
  • 5c891d1769e89595375f2fb69c5fe20938e9947e Python: Add support to new openai text to image model (#​13651)
  • c250b379f6748e751276991afc39e3ef46e9441c Python: Refinement of in memory vector collection filter (#​13637)
  • d5c2b9d889355887d6b746425dc45f43c472a76e Python: Improves the robustness of filename handling (#​13643)
  • 02da6c47d768b0e84512557f046e913e0bd08d75 Updating recommended extensions list. (#​13645)
  • 4d675929578f8a07dfdff5361533d362f628d571 .Net: Add server URL validation options for OpenAPI plugins (#​13631)
  • 86d7a498437d988718c0d15302593e3f69bd19e3 .Net: Feature text search linq (#​13384)

This list of changes was auto generated.

10.0.1

Changes:

  • e90102079382d3fb0ffeac29ab7c6d2994a2948f .Net: Bump SK and MEVD versions for release (#​13630)
  • b36a327d76f398346ca6267a1e25ed193cc95bea .Net: Fix input checking in Cosmos NoSQL, Redis and Weaviate providers (#​13629)
  • e9641a9106ba6b67909d65b882f5cf8c292106c7 .Net: Fix column nullability in SQL MEVD providers (#​13622) [ #​12560 ]
  • b712ffc98ef24c3df1004b9be99a3e952adbcf8a Python: Bump py version to 1.40.0 for a release (#​13619)
  • 781881a34f433ed4aa3bcc54cae78be0b565e392 .Net: Deduplicate embedding generation management (#​13615) [ #​12508 ]
  • 429dd1c4c0408415387a61dc294ed1fe2412e60b Python: support (Azure) OpenAI realtime audio models (#​13291) [ #​13267 ]
  • 74d4310fd44bbe555eeba532d6c9edc8e160a879 .Net: Handle installation of pgvector on PostgreSQL (#​13600)
  • f077655fd6bcd586a927f406fa767dacf03e8c5c .Net: [MEVD] Add validation for mismatched collection key (#​13594) [ #​11355 ]
  • f59e3952300b9dd3eb7f42d67d6d1040dc7d7b86 .Net: [MEVD] Make PG schema nullable (#​13593) [ #​10853 ]
  • ea864bf6976f60ddff52d9a2dcae4eadda784cbd .Net: [MEVD] Support DateTime/DateTimeOffset/DateOnly/TimeOnly across providers (#​13569) [ #​11286, #​11086 ]
See More
  • 889807dfda389a7c98c897d820f45c898a80da99 .Net: Update Microsoft.Extensions.AI dependencies to 10.3.0 and OpenAI SDK to 2.8.0 (#​13544)
  • c086d0944259ab3f28ba16f1f984a3ab2fe4fc7d .Net: [MEVD] SQL Server approximate vector search (#​13573) [ #​13270 ]
  • 9f2dafca484b125626fdbcdaf108250373bc0bff .Net: [TINY] [MEVD] Remove SupportsMultipleKeys (#​13572)

This list of changes was auto generated.

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps Azure.Identity from 1.17.1 to 1.19.0
Bumps Microsoft.Extensions.AI.OpenAI from 10.3.0 to 10.4.1
Bumps Microsoft.Extensions.Configuration from 10.0.3 to 10.0.5
Bumps Microsoft.Extensions.Configuration.UserSecrets from 10.0.3 to 10.0.5
Bumps Microsoft.Extensions.VectorData.Abstractions from 10.0.0 to 10.1.0

---
updated-dependencies:
- dependency-name: Azure.Identity
  dependency-version: 1.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
- dependency-name: Microsoft.Extensions.AI.OpenAI
  dependency-version: 10.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
- dependency-name: Microsoft.Extensions.Configuration
  dependency-version: 10.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: Microsoft.Extensions.Configuration.UserSecrets
  dependency-version: 10.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: Microsoft.Extensions.VectorData.Abstractions
  dependency-version: 10.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Mar 25, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants