chore(deps): Bump the nuget-dependencies group with 19 updates by dependabot[bot] · Pull Request #559 · JerrettDavis/JD.AI

dependabot · 2026-07-13T11:26:58Z

Updated AWSSDK.SecretsManager from 4.0.100.2 to 4.0.100.3.

Release notes

Sourced from AWSSDK.SecretsManager's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Azure.Messaging.ServiceBus from 7.20.1 to 7.20.2.

Release notes

Sourced from Azure.Messaging.ServiceBus's releases.

7.20.2 7.20.2 (2026-07-08)

Acknowledgments

Thank you to our developer community members who helped to make the Service Bus client library better with their contributions to this release:

Daniel Marbach (GitHub)

Bugs Fixed

Fixed a bug where ServiceBusAdministrationClient operations (such as GetQueueAsync, GetTopicAsync, QueueExistsAsync, and TopicExistsAsync) threw a ServiceBusException wrapping an ArgumentException ("Value cannot be empty or contain only white-space characters") when an entity had a shared access authorization rule whose key values were masked (returned empty) by the service for callers lacking the listkeys/action permission. The deserialization path now accepts empty key values, and creating CreateQueueOptions/CreateTopicOptions from the returned properties no longer throws, matching the behavior of the other Azure Service Bus SDKs. (#60469)
Fixed a bug in the ServiceBusProcessor where terminal errors (such as DNS resolution failures) caused a tight retry loop with no delay between attempts, potentially overwhelming logs and consuming excessive resources. (#54572)
Fixed a race condition in AmqpSender where concurrent calls to CreateMessageBatchAsync during initial AMQP link creation could observe an inconsistent MaxBatchSize, causing a spurious ArgumentOutOfRangeException. (#56301)
The sender now reads the com.microsoft:max-message-batch-size vendor property from the AMQP link to correctly limit batch size on Premium large-message entities, where max-message-size can be up to 100 MB but the batch limit is 1 MB. The 4,500 message count cap on batches has been removed as the service does not enforce a count limit. (#44914)

Other Changes

Several areas of the AMQP transport integration have been cleaned up, modernized, and made more efficient. (A community contribution, courtesy of danielmarbach)

Commits viewable in compare view.

Updated JD.SemanticKernel.Connectors.ClaudeCode from 1.0.40 to 1.0.42.

Release notes

Sourced from JD.SemanticKernel.Connectors.ClaudeCode's releases.

1.0.42 What's Changed

chore(deps): Bump the nuget-dependencies group with 2 updates by @dependabot[bot] in chore(deps): Bump the nuget-dependencies group with 2 updates JD.SemanticKernel.Connectors.ClaudeCode#56
chore(deps): Bump marocchino/sticky-pull-request-comment from 3 to 3.0.4 in the github-actions-dependencies group by @dependabot[bot] in chore(deps): Bump marocchino/sticky-pull-request-comment from 3 to 3.0.4 in the github-actions-dependencies group JD.SemanticKernel.Connectors.ClaudeCode#55

Full Changelog: JerrettDavis/JD.SemanticKernel.Connectors.ClaudeCode@v1.0.40...v1.0.42

Commits viewable in compare view.

Updated JD.SemanticKernel.Connectors.GitHubCopilot from 0.1.70 to 0.1.71.

Release notes

Sourced from JD.SemanticKernel.Connectors.GitHubCopilot's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated JD.SemanticKernel.Connectors.OpenAICodex from 0.1.36 to 0.1.38.

Release notes

Sourced from JD.SemanticKernel.Connectors.OpenAICodex's releases.

0.1.38 What's Changed

chore(deps): Bump marocchino/sticky-pull-request-comment from 3 to 3.0.4 in the github-actions-dependencies group by @dependabot[bot] in chore(deps): Bump marocchino/sticky-pull-request-comment from 3 to 3.0.4 in the github-actions-dependencies group JD.SemanticKernel.Connectors.OpenAICodex#36

Full Changelog: JerrettDavis/JD.SemanticKernel.Connectors.OpenAICodex@v0.1.37...v0.1.38

0.1.37 What's Changed

chore(deps): Bump the nuget-dependencies group with 2 updates by @dependabot[bot] in chore(deps): Bump the nuget-dependencies group with 2 updates JD.SemanticKernel.Connectors.OpenAICodex#37

Full Changelog: JerrettDavis/JD.SemanticKernel.Connectors.OpenAICodex@v0.1.36...v0.1.37

Commits viewable in compare view.

Updated JD.SemanticKernel.Extensions from 0.1.109 to 0.1.111.

Release notes

Sourced from JD.SemanticKernel.Extensions's releases.

0.1.111 What's Changed

chore(deps): Bump the github-actions-dependencies group with 2 updates by @dependabot[bot] in chore(deps): Bump the github-actions-dependencies group with 2 updates JD.SemanticKernel.Extensions#77

Full Changelog: JerrettDavis/JD.SemanticKernel.Extensions@v0.1.110...v0.1.111

0.1.110 What's Changed

chore(deps): Bump the nuget-dependencies group with 2 updates by @dependabot[bot] in chore(deps): Bump the nuget-dependencies group with 2 updates JD.SemanticKernel.Extensions#78

Full Changelog: JerrettDavis/JD.SemanticKernel.Extensions@v0.1.109...v0.1.110

Commits viewable in compare view.

Updated JD.SemanticKernel.Extensions.Mcp from 0.1.109 to 0.1.111.

Release notes

Sourced from JD.SemanticKernel.Extensions.Mcp's releases.

0.1.111 What's Changed

chore(deps): Bump the github-actions-dependencies group with 2 updates by @dependabot[bot] in chore(deps): Bump the github-actions-dependencies group with 2 updates JD.SemanticKernel.Extensions#77

Full Changelog: JerrettDavis/JD.SemanticKernel.Extensions@v0.1.110...v0.1.111

0.1.110 What's Changed

chore(deps): Bump the nuget-dependencies group with 2 updates by @dependabot[bot] in chore(deps): Bump the nuget-dependencies group with 2 updates JD.SemanticKernel.Extensions#78

Full Changelog: JerrettDavis/JD.SemanticKernel.Extensions@v0.1.109...v0.1.110

Commits viewable in compare view.

Updated Meziantou.Analyzer from 3.0.119 to 3.0.122.

Release notes

Sourced from Meziantou.Analyzer's releases.

3.0.122

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.122

What's Changed

Add MA0211 to enforce multi-line XML documentation comments by @meziantou with @Copilot in Add MA0211 to enforce multi-line XML documentation comments meziantou/Meziantou.Analyzer#1218

Full Changelog: meziantou/Meziantou.Analyzer@3.0.121...3.0.122

3.0.121

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.121

What's Changed

MA0099: add opt-in configuration options for report location and zero-member filtering by @meziantou in MA0099: add opt-in configuration options for report location and zero-member filtering meziantou/Meziantou.Analyzer#1215

Full Changelog: meziantou/Meziantou.Analyzer@3.0.120...3.0.121

3.0.120

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.120

What's Changed

Skip XML comment langword diagnostics for attributed code tags by @meziantou in Skip XML comment langword diagnostics for attributed code tags meziantou/Meziantou.Analyzer#1214

Full Changelog: meziantou/Meziantou.Analyzer@3.0.119...3.0.120

Commits viewable in compare view.

Updated Microsoft.OpenApi from 2.9.0 to 2.10.0.

Release notes

Sourced from Microsoft.OpenApi's releases.

2.10.0 2.10.0 (2026-07-03)

Features

add JsonConverter for OpenApiSchema System.Text.Json serialization (#2915) (465521b)
library: support schema keywords on references (2749463), closes #2903

Bug Fixes

Don't silently skip null assignment to OpenApiDocument.Tags (#2917) (6a45a82)
handling of nullable enums for 3.0 (#2920) (f4778e0)
library: keep v3 schema references ref-only (8d811c3)
preserve JSON Schema 2020-12 keyword siblings on $ref schemas for OAS 3.1+ (#2896) (fb20d46)
preserve JSON Schema 2020-12 keyword siblings on $ref schemas for OAS 3.1+ (#2896) (c79a83e)
use async method for crypto flush (677b519)

Commits viewable in compare view.

Updated Microsoft.SemanticKernel from 1.77.0 to 1.78.0.

Release notes

Sourced from Microsoft.SemanticKernel's releases.

1.78.0 Changes:

35ba23e1b3092271c778ca057afe1a796e16e70e .Net: Update package version to 1.78.0 (#14142)
e6c9673684ca03621885083faff1644e1f42695e .Net: Disable automatic HTTP redirects in HttpPlugin and WebFileDownloadPlugin default clients (#14132)
f25753be0a126138d2eea39b0ca2985252dde25a Bump Scriban from 7.2.0 to 7.2.5 to fix NU1902 vulnerability (#14133)
dfc5227227352e7cf4b11de1d9b8e49ebc7b43ff .Net: Update .NET SDK to 10.0.301 (#14119)
cf9af8b966841e8f16d528bd0f2c69c51213b68d .Net: Bump axios to 1.16.0 and form-data to 4.0.6 in /dotnet/samples/Demos/ProcessFrameworkWithSignalR (#13858)

See More

e99c633fba9e4005bdb9b90a1f5441945b781040 .Net: Harden file path validation in Core, Document, and Web plugins (#14118)
99d1953e935bd88a4cc993cbad9485703734f1b5 Bump axios from 1.13.2 to 1.16.0 in /dotnet/samples/Demos/ProcessFrameworkWithSignalR/src/ProcessFramework.Aspire.SignalR.ReactFrontend (#14044) [ #10795, #10822, #10825, #10729, #7378, #10745, #10810, #10802, #6485, #10680, #6897, #10794, #10800, #6241, #10708, #10819, #7149, #10772, #10806, #7260, #10787, #10724, #7276, #7414, #6389, #6460, #10833, #10588, #7419, #10820, #10791, #10796, #10821, #10782, #10759, #10804, #10785, #10813, #10814, #10790, #10834 ]
82f244233b89d38bf5e424ca409caa46f14490e6 .Net: Update SK to use MEVD packages and move MEVD projects out of main solution (#14117)
8ce2bcc07f0ce5e56052ffd4abd0332cc8fc08e5 .Net: Bump Aspire.Hosting.Azure.CognitiveServices from 13.0.0 to 13.3.0 (#13996)
20be253d7b4a41c8943f36addd8b6365bdcf7299 .Net: Bump esbuild, @vitejs/plugin-react, vite, and transitive lockfile deps in /dotnet/samples/Demos/ProcessFrameworkWithSignalR/src/ProcessFramework.Aspire.SignalR.ReactFrontend (#14070)
445fd0ea5364622d30069510f639032ecea6eaff .Net: Bump Aspire.Azure.Search.Documents from 9.5.1 to 13.3.0 (#13994)
367c75f4ff972e7a2281dcae4bd74800c5eef9eb .Net: Bump minimatch from 3.1.2 to 3.1.5 in /dotnet/samples/Demos/ProcessWithCloudEvents/ProcessWithCloudEvents.Client (#13604)
6209c77fd52d6ff99d7797d66639055b36a91ae3 .Net: Bump @babel/core from 7.26.10 to 7.29.7 in /dotnet/samples/Demos/ProcessWithCloudEvents/ProcessWithCloudEvents.Client (#14083) [ #18014, #18001, #17998, #17992, #17974, #17923, #17931, #17915, #17788, #17739, #17606, #17592, #17589 ]
1ad0b7501bd9c8f8dfbafb7c1aa69fab1ba4cd28 Bump Aspire.Hosting.AppHost from 13.0.0 to 13.3.0 (#13995)
56422ada8aa95702aab5c969805c3395dd2f5022 .Net: Bump follow-redirects from 1.15.11 to 1.16.0 in /dotnet/samples/Demos/ProcessFrameworkWithSignalR/src/ProcessFramework.Aspire.SignalR.ReactFrontend (#13877)
a5e8f9b43230675c86dcb7c3ff5021914537f8be .Net: Bump form-data from 4.0.5 to 4.0.6 in /dotnet/samples/Demos/ProcessFrameworkWithSignalR/src/ProcessFramework.Aspire.SignalR.ReactFrontend (#14082)
7fd75c3c73ac84106ce2883bae32b50c99378e40 .Net: fix: prevent duplicate "null" in JSON Schema type arrays for nullable parameters (#13635) [ #13527 ]
f8c757b218cfe70cd9bc0d921eb0828d290cbe56 Fix MessagePack high severity vulnerability (#14079)

This list of changes was auto generated.

Commits viewable in compare view.

Updated Microsoft.SemanticKernel.Abstractions from 1.77.0 to 1.78.0.

Release notes

Sourced from Microsoft.SemanticKernel.Abstractions's releases.

1.78.0 Changes:

35ba23e1b3092271c778ca057afe1a796e16e70e .Net: Update package version to 1.78.0 (#14142)
e6c9673684ca03621885083faff1644e1f42695e .Net: Disable automatic HTTP redirects in HttpPlugin and WebFileDownloadPlugin default clients (#14132)
f25753be0a126138d2eea39b0ca2985252dde25a Bump Scriban from 7.2.0 to 7.2.5 to fix NU1902 vulnerability (#14133)
dfc5227227352e7cf4b11de1d9b8e49ebc7b43ff .Net: Update .NET SDK to 10.0.301 (#14119)
cf9af8b966841e8f16d528bd0f2c69c51213b68d .Net: Bump axios to 1.16.0 and form-data to 4.0.6 in /dotnet/samples/Demos/ProcessFrameworkWithSignalR (#13858)

See More

e99c633fba9e4005bdb9b90a1f5441945b781040 .Net: Harden file path validation in Core, Document, and Web plugins (#14118)
99d1953e935bd88a4cc993cbad9485703734f1b5 Bump axios from 1.13.2 to 1.16.0 in /dotnet/samples/Demos/ProcessFrameworkWithSignalR/src/ProcessFramework.Aspire.SignalR.ReactFrontend (#14044) [ #10795, #10822, #10825, #10729, #7378, #10745, #10810, #10802, #6485, #10680, #6897, #10794, #10800, #6241, #10708, #10819, #7149, #10772, #10806, #7260, #10787, #10724, #7276, #7414, #6389, #6460, #10833, #10588, #7419, #10820, #10791, #10796, #10821, #10782, #10759, #10804, #10785, #10813, #10814, #10790, #10834 ]
82f244233b89d38bf5e424ca409caa46f14490e6 .Net: Update SK to use MEVD packages and move MEVD projects out of main solution (#14117)
8ce2bcc07f0ce5e56052ffd4abd0332cc8fc08e5 .Net: Bump Aspire.Hosting.Azure.CognitiveServices from 13.0.0 to 13.3.0 (#13996)
20be253d7b4a41c8943f36addd8b6365bdcf7299 .Net: Bump esbuild, @vitejs/plugin-react, vite, and transitive lockfile deps in /dotnet/samples/Demos/ProcessFrameworkWithSignalR/src/ProcessFramework.Aspire.SignalR.ReactFrontend (#14070)
445fd0ea5364622d30069510f639032ecea6eaff .Net: Bump Aspire.Azure.Search.Documents from 9.5.1 to 13.3.0 (#13994)
367c75f4ff972e7a2281dcae4bd74800c5eef9eb .Net: Bump minimatch from 3.1.2 to 3.1.5 in /dotnet/samples/Demos/ProcessWithCloudEvents/ProcessWithCloudEvents.Client (#13604)
6209c77fd52d6ff99d7797d66639055b36a91ae3 .Net: Bump @babel/core from 7.26.10 to 7.29.7 in /dotnet/samples/Demos/ProcessWithCloudEvents/ProcessWithCloudEvents.Client (#14083) [ #18014, #18001, #17998, #17992, #17974, #17923, #17931, #17915, #17788, #17739, #17606, #17592, #17589 ]
1ad0b7501bd9c8f8dfbafb7c1aa69fab1ba4cd28 Bump Aspire.Hosting.AppHost from 13.0.0 to 13.3.0 (#13995)
56422ada8aa95702aab5c969805c3395dd2f5022 .Net: Bump follow-redirects from 1.15.11 to 1.16.0 in /dotnet/samples/Demos/ProcessFrameworkWithSignalR/src/ProcessFramework.Aspire.SignalR.ReactFrontend (#13877)
a5e8f9b43230675c86dcb7c3ff5021914537f8be .Net: Bump form-data from 4.0.5 to 4.0.6 in /dotnet/samples/Demos/ProcessFrameworkWithSignalR/src/ProcessFramework.Aspire.SignalR.ReactFrontend (#14082)
7fd75c3c73ac84106ce2883bae32b50c99378e40 .Net: fix: prevent duplicate "null" in JSON Schema type arrays for nullable parameters (#13635) [ #13527 ]
f8c757b218cfe70cd9bc0d921eb0828d290cbe56 Fix MessagePack high severity vulnerability (#14079)

This list of changes was auto generated.

Commits viewable in compare view.

Updated Microsoft.SemanticKernel.Connectors.AzureOpenAI from 1.77.0 to 1.78.0.

Release notes

Sourced from Microsoft.SemanticKernel.Connectors.AzureOpenAI's releases.

1.78.0 Changes:

35ba23e1b3092271c778ca057afe1a796e16e70e .Net: Update package version to 1.78.0 (#14142)
e6c9673684ca03621885083faff1644e1f42695e .Net: Disable automatic HTTP redirects in HttpPlugin and WebFileDownloadPlugin default clients (#14132)
f25753be0a126138d2eea39b0ca2985252dde25a Bump Scriban from 7.2.0 to 7.2.5 to fix NU1902 vulnerability (#14133)
dfc5227227352e7cf4b11de1d9b8e49ebc7b43ff .Net: Update .NET SDK to 10.0.301 (#14119)
cf9af8b966841e8f16d528bd0f2c69c51213b68d .Net: Bump axios to 1.16.0 and form-data to 4.0.6 in /dotnet/samples/Demos/ProcessFrameworkWithSignalR (#13858)

See More

e99c633fba9e4005bdb9b90a1f5441945b781040 .Net: Harden file path validation in Core, Document, and Web plugins (#14118)
99d1953e935bd88a4cc993cbad9485703734f1b5 Bump axios from 1.13.2 to 1.16.0 in /dotnet/samples/Demos/ProcessFrameworkWithSignalR/src/ProcessFramework.Aspire.SignalR.ReactFrontend (#14044) [ #10795, #10822, #10825, #10729, #7378, #10745, #10810, #10802, #6485, #10680, #6897, #10794, #10800, #6241, #10708, #10819, #7149, #10772, #10806, #7260, #10787, #10724, #7276, #7414, #6389, #6460, #10833, #10588, #7419, #10820, #10791, #10796, #10821, #10782, #10759, #10804, #10785, #10813, #10814, #10790, #10834 ]
82f244233b89d38bf5e424ca409caa46f14490e6 .Net: Update SK to use MEVD packages and move MEVD projects out of main solution (#14117)
8ce2bcc07f0ce5e56052ffd4abd0332cc8fc08e5 .Net: Bump Aspire.Hosting.Azure.CognitiveServices from 13.0.0 to 13.3.0 (#13996)
20be253d7b4a41c8943f36addd8b6365bdcf7299 .Net: Bump esbuild, @vitejs/plugin-react, vite, and transitive lockfile deps in /dotnet/samples/Demos/ProcessFrameworkWithSignalR/src/ProcessFramework.Aspire.SignalR.ReactFrontend (#14070)
445fd0ea5364622d30069510f639032ecea6eaff .Net: Bump Aspire.Azure.Search.Documents from 9.5.1 to 13.3.0 (#13994)
367c75f4ff972e7a2281dcae4bd74800c5eef9eb .Net: Bump minimatch from 3.1.2 to 3.1.5 in /dotnet/samples/Demos/ProcessWithCloudEvents/ProcessWithCloudEvents.Client (#13604)
6209c77fd52d6ff99d7797d66639055b36a91ae3 .Net: Bump @babel/core from 7.26.10 to 7.29.7 in /dotnet/samples/Demos/ProcessWithCloudEvents/ProcessWithCloudEvents.Client (#14083) [ #18014, #18001, #17998, #17992, #17974, #17923, #17931, #17915, #17788, #17739, #17606, #17592, #17589 ]
1ad0b7501bd9c8f8dfbafb7c1aa69fab1ba4cd28 Bump Aspire.Hosting.AppHost from 13.0.0 to 13.3.0 (#13995)
56422ada8aa95702aab5c969805c3395dd2f5022 .Net: Bump follow-redirects from 1.15.11 to 1.16.0 in /dotnet/samples/Demos/ProcessFrameworkWithSignalR/src/ProcessFramework.Aspire.SignalR.ReactFrontend (#13877)
a5e8f9b43230675c86dcb7c3ff5021914537f8be .Net: Bump form-data from 4.0.5 to 4.0.6 in /dotnet/samples/Demos/ProcessFrameworkWithSignalR/src/ProcessFramework.Aspire.SignalR.ReactFrontend (#14082)
7fd75c3c73ac84106ce2883bae32b50c99378e40 .Net: fix: prevent duplicate "null" in JSON Schema type arrays for nullable parameters (#13635) [ #13527 ]
f8c757b218cfe70cd9bc0d921eb0828d290cbe56 Fix MessagePack high severity vulnerability (#14079)

This list of changes was auto generated.

Commits viewable in compare view.

Updated Microsoft.SemanticKernel.Connectors.OpenAI from 1.77.0 to 1.78.0.

Release notes

Sourced from Microsoft.SemanticKernel.Connectors.OpenAI's releases.

1.78.0 Changes:

35ba23e1b3092271c778ca057afe1a796e16e70e .Net: Update package version to 1.78.0 (#14142)
e6c9673684ca03621885083faff1644e1f42695e .Net: Disable automatic HTTP redirects in HttpPlugin and WebFileDownloadPlugin default clients (#14132)
f25753be0a126138d2eea39b0ca2985252dde25a Bump Scriban from 7.2.0 to 7.2.5 to fix NU1902 vulnerability (#14133)
dfc5227227352e7cf4b11de1d9b8e49ebc7b43ff .Net: Update .NET SDK to 10.0.301 (#14119)
cf9af8b966841e8f16d528bd0f2c69c51213b68d .Net: Bump axios to 1.16.0 and form-data to 4.0.6 in /dotnet/samples/Demos/ProcessFrameworkWithSignalR (#13858)

See More

e99c633fba9e4005bdb9b90a1f5441945b781040 .Net: Harden file path validation in Core, Document, and Web plugins (#14118)
99d1953e935bd88a4cc993cbad9485703734f1b5 Bump axios from 1.13.2 to 1.16.0 in /dotnet/samples/Demos/ProcessFrameworkWithSignalR/src/ProcessFramework.Aspire.SignalR.ReactFrontend (#14044) [ #10795, #10822, #10825, #10729, #7378, #10745, #10810, #10802, #6485, #10680, #6897, #10794, #10800, #6241, #10708, #10819, #7149, #10772, #10806, #7260, #10787, #10724, #7276, #7414, #6389, #6460, #10833, #10588, #7419, #10820, #10791, #10796, #10821, #10782, #10759, #10804, #10785, #10813, #10814, #10790, #10834 ]
82f244233b89d38bf5e424ca409caa46f14490e6 .Net: Update SK to use MEVD packages and move MEVD projects out of main solution (#14117)
8ce2bcc07f0ce5e56052ffd4abd0332cc8fc08e5 .Net: Bump Aspire.Hosting.Azure.CognitiveServices from 13.0.0 to 13.3.0 (#13996)
20be253d7b4a41c8943f36addd8b6365bdcf7299 .Net: Bump esbuild, @vitejs/plugin-react, vite, and transitive lockfile deps in /dotnet/samples/Demos/ProcessFrameworkWithSignalR/src/ProcessFramework.Aspire.SignalR.ReactFrontend (#14070)
445fd0ea5364622d30069510f639032ecea6eaff .Net: Bump Aspire.Azure.Search.Documents from 9.5.1 to 13.3.0 (#13994)
367c75f4ff972e7a2281dcae4bd74800c5eef9eb .Net: Bump minimatch from 3.1.2 to 3.1.5 in /dotnet/samples/Demos/ProcessWithCloudEvents/ProcessWithCloudEvents.Client (#13604)
6209c77fd52d6ff99d7797d66639055b36a91ae3 .Net: Bump @babel/core from 7.26.10 to 7.29.7 in /dotnet/samples/Demos/ProcessWithCloudEvents/ProcessWithCloudEvents.Client (#14083) [ #18014, #18001, #17998, #17992, #17974, #17923, #17931, #17915, #17788, #17739, #17606, #17592, #17589 ]
1ad0b7501bd9c8f8dfbafb7c1aa69fab1ba4cd28 Bump Aspire.Hosting.AppHost from 13.0.0 to 13.3.0 (#13995)
56422ada8aa95702aab5c969805c3395dd2f5022 .Net: Bump follow-redirects from 1.15.11 to 1.16.0 in /dotnet/samples/Demos/ProcessFrameworkWithSignalR/src/ProcessFramework.Aspire.SignalR.ReactFrontend (#13877)
a5e8f9b43230675c86dcb7c3ff5021914537f8be .Net: Bump form-data from 4.0.5 to 4.0.6 in /dotnet/samples/Demos/ProcessFrameworkWithSignalR/src/ProcessFramework.Aspire.SignalR.ReactFrontend (#14082)
7fd75c3c73ac84106ce2883bae32b50c99378e40 .Net: fix: prevent duplicate "null" in JSON Schema type arrays for nullable parameters (#13635) [ #13527 ]
f8c757b218cfe70cd9bc0d921eb0828d290cbe56 Fix MessagePack high severity vulnerability (#14079)

This list of changes was auto generated.

Commits viewable in compare view.

Updated MudBlazor from 9.6.0 to 9.7.0.

Release notes

Sourced from MudBlazor's releases.

9.7.0 What's Changed

New Contributors

@ar-schraml made their first contribution in MudTabs: Add lazy loading option when using KeepPanelsAlive MudBlazor/MudBlazor#13370
@BekAllaev made their first contribution in MudSelect: Set display to block to fix height disparity MudBlazor/MudBlazor#13293
@Abdulstar made their first contribution in MudTd, MudTr, MudTh: Support @oncontextmenu:preventDefault MudBlazor/MudBlazor#13260
@Steve-XYZ made their first contribution in MudTable: Fix nested group checkbox state after expansion MudBlazor/MudBlazor#13410
@EduardF1 made their first contribution in MudStepper: Prevent title overflow with CenterLabels in horizontal mode MudBlazor/MudBlazor#13255
@roian6 made their first contribution in MudProgressLinear: Fix striped animation loop jump MudBlazor/MudBlazor#13447

Full Changelog: MudBlazor/MudBlazor@v9.6.0...v9.7.0

Commits viewable in compare view.

Updated Nerdbank.GitVersioning from 3.10.85 to 3.10.91.

Release notes

Sourced from Nerdbank.GitVersioning's releases.

3.10.91 What's Changed

Retry file operations on access denied errors by @AArnott in Retry file operations on access denied errors dotnet/Nerdbank.GitVersioning#1408

Full Changelog: dotnet/Nerdbank.GitVersioning@v3.10.85...v3.10.91

Commits viewable in compare view.

Updated SQLitePCLRaw.lib.e_sqlite3 from 3.50.3 to 3.53.3.

Release notes

Sourced from SQLitePCLRaw.lib.e_sqlite3's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated StackExchange.Redis from 3.0.11 to 3.0.17.

Release notes

Sourced from StackExchange.Redis's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Telegram.Bot from 22.10.1 to 22.10.1.1.

Release notes

Sourced from Telegram.Bot's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated TinyBDD.Xunit from 0.19.27 to 0.19.28.

Release notes

Sourced from TinyBDD.Xunit's releases.

0.19.28 What's Changed

chore(deps): Bump the github-actions-dependencies group with 2 updates by @dependabot[bot] in chore(deps): Bump the github-actions-dependencies group with 2 updates TinyBDD#93

Full Changelog: JerrettDavis/TinyBDD@v0.19.27...v0.19.28

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps AWSSDK.SecretsManager from 4.0.100.2 to 4.0.100.3 Bumps Azure.Messaging.ServiceBus from 7.20.1 to 7.20.2 Bumps JD.SemanticKernel.Connectors.ClaudeCode from 1.0.40 to 1.0.42 Bumps JD.SemanticKernel.Connectors.GitHubCopilot from 0.1.70 to 0.1.71 Bumps JD.SemanticKernel.Connectors.OpenAICodex from 0.1.36 to 0.1.38 Bumps JD.SemanticKernel.Extensions from 0.1.109 to 0.1.111 Bumps JD.SemanticKernel.Extensions.Mcp from 0.1.109 to 0.1.111 Bumps Meziantou.Analyzer from 3.0.119 to 3.0.122 Bumps Microsoft.OpenApi from 2.9.0 to 2.10.0 Bumps Microsoft.SemanticKernel from 1.77.0 to 1.78.0 Bumps Microsoft.SemanticKernel.Abstractions from 1.77.0 to 1.78.0 Bumps Microsoft.SemanticKernel.Connectors.AzureOpenAI from 1.77.0 to 1.78.0 Bumps Microsoft.SemanticKernel.Connectors.OpenAI from 1.77.0 to 1.78.0 Bumps MudBlazor from 9.6.0 to 9.7.0 Bumps Nerdbank.GitVersioning from 3.10.85 to 3.10.91 Bumps SQLitePCLRaw.lib.e_sqlite3 from 3.50.3 to 3.53.3 Bumps StackExchange.Redis from 3.0.11 to 3.0.17 Bumps Telegram.Bot from 22.10.1 to 22.10.1.1 Bumps TinyBDD.Xunit from 0.19.27 to 0.19.28 --- updated-dependencies: - dependency-name: AWSSDK.SecretsManager dependency-version: 4.0.100.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-dependencies - dependency-name: Azure.Messaging.ServiceBus dependency-version: 7.20.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-dependencies - dependency-name: JD.SemanticKernel.Connectors.ClaudeCode dependency-version: 1.0.42 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-dependencies - dependency-name: JD.SemanticKernel.Connectors.GitHubCopilot dependency-version: 0.1.71 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-dependencies - dependency-name: JD.SemanticKernel.Connectors.OpenAICodex dependency-version: 0.1.38 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-dependencies - dependency-name: JD.SemanticKernel.Extensions dependency-version: 0.1.111 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-dependencies - dependency-name: JD.SemanticKernel.Extensions.Mcp dependency-version: 0.1.111 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-dependencies - dependency-name: Meziantou.Analyzer dependency-version: 3.0.122 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-dependencies - dependency-name: Microsoft.OpenApi dependency-version: 2.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-dependencies - dependency-name: Microsoft.SemanticKernel dependency-version: 1.78.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-dependencies - dependency-name: Microsoft.SemanticKernel.Connectors.AzureOpenAI dependency-version: 1.78.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-dependencies - dependency-name: Microsoft.SemanticKernel.Connectors.OpenAI dependency-version: 1.78.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-dependencies - dependency-name: Microsoft.SemanticKernel.Abstractions dependency-version: 1.78.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-dependencies - dependency-name: Microsoft.SemanticKernel.Connectors.AzureOpenAI dependency-version: 1.78.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-dependencies - dependency-name: Microsoft.SemanticKernel.Connectors.OpenAI dependency-version: 1.78.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-dependencies - dependency-name: MudBlazor dependency-version: 9.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-dependencies - dependency-name: Nerdbank.GitVersioning dependency-version: 3.10.91 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-dependencies - dependency-name: SQLitePCLRaw.lib.e_sqlite3 dependency-version: 3.53.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-dependencies - dependency-name: StackExchange.Redis dependency-version: 3.0.17 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-dependencies - dependency-name: Telegram.Bot dependency-version: 22.10.1.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-dependencies - dependency-name: TinyBDD.Xunit dependency-version: 0.19.28 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-07-13T11:36:00Z

⚠️ Deprecation Warning: The deny-licenses option is deprecated for possible removal in the next major release. For more information, see issue 997.

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Scanned Files

None

github-actions · 2026-07-13T11:44:23Z

Code Coverage

Summary
  Generated on: 07/13/2026 - 11:44:16
  Coverage date: 07/13/2026 - 11:42:14 - 07/13/2026 - 11:44:07
  Parser: MultiReport (7x Cobertura)
  Assemblies: 23
  Classes: 1067
  Files: 591
  Line coverage: 74.7%
  Covered lines: 36844
  Uncovered lines: 12470
  Coverable lines: 49314
  Total lines: 97285
  Branch coverage: 61.8% (13914 of 22512)
  Covered branches: 13914
  Total branches: 22512
  Method coverage: 86.3% (6312 of 7308)
  Full method coverage: 74.1% (5420 of 7308)
  Covered methods: 6312
  Fully covered methods: 5420
  Total methods: 7308

github-actions · 2026-07-13T11:47:53Z

Test Results

7 641 tests 7 622 ✅ 2m 54s ⏱️
7 suites 19 💤
7 files 0 ❌

Results for commit 54214e3.

dependabot Bot added the dependencies label Jul 13, 2026

dependabot Bot requested a review from JerrettDavis as a code owner July 13, 2026 11:26

dependabot Bot added the dependencies label Jul 13, 2026

github-actions Bot added the size/s label Jul 13, 2026

JerrettDavis merged commit a1e81bd into main Jul 13, 2026
15 checks passed

dependabot Bot deleted the dependabot/nuget/nuget-dependencies-a1e65d713a branch July 13, 2026 23:14

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): Bump the nuget-dependencies group with 19 updates#559

chore(deps): Bump the nuget-dependencies group with 19 updates#559
JerrettDavis merged 1 commit into
mainfrom
dependabot/nuget/nuget-dependencies-a1e65d713a

dependabot Bot commented on behalf of github Jul 13, 2026

Uh oh!

github-actions Bot commented Jul 13, 2026

Uh oh!

github-actions Bot commented Jul 13, 2026

Uh oh!

github-actions Bot commented Jul 13, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Jul 13, 2026

7.20.2

7.20.2 (2026-07-08)

Acknowledgments

Bugs Fixed

Other Changes

1.0.42

What's Changed

0.1.38

What's Changed

0.1.37

What's Changed

0.1.111

What's Changed

0.1.110

What's Changed

0.1.111

What's Changed

0.1.110

What's Changed

3.0.122

What's Changed

3.0.121

What's Changed

3.0.120

What's Changed

2.10.0

2.10.0 (2026-07-03)

Features

Bug Fixes

1.78.0

Changes:

1.78.0

Changes:

1.78.0

Changes:

1.78.0

Changes:

9.7.0

What's Changed

Breaking Changes

New Features

Bug Fixes

Other Changes

New Contributors

3.10.91

What's Changed

0.19.28

What's Changed

Uh oh!

github-actions Bot commented Jul 13, 2026

Dependency Review

Scanned Files

Uh oh!

github-actions Bot commented Jul 13, 2026

Code Coverage

Uh oh!

github-actions Bot commented Jul 13, 2026

Test Results

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant