Bump libphonenumber-csharp and 47 others

[dependabot]

Updated libphonenumber-csharp from 9.0.35 to 9.0.37.

Release notes

Sourced from libphonenumber-csharp's releases.

9.0.37

libphonenumber-csharp 9.0.37 · libphonenumber-csharp.extensions 9.0.37 · upstream v9.0.37

What's Changed

• fix: pin the release tag to the commit just pushed by @​twcclegg in fix: pin the release tag to the commit just pushed twcclegg/libphonenumber-csharp#369
• Modernization: stack-overflow fix, frozen collections, drop net9.0, centralized build config by @​twcclegg in Modernization: stack-overflow fix, frozen collections, drop net9.0, centralized build config twcclegg/libphonenumber-csharp#370
• build(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 by @​dependabot[bot] in build(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 twcclegg/libphonenumber-csharp#371
• Add offline geocoder benchmarks, and fix the crash they exposed by @​twcclegg in Add offline geocoder benchmarks, and fix the crash they exposed twcclegg/libphonenumber-csharp#372
• Cache NuGet packages, enable lock files and package validation by @​twcclegg in Cache NuGet packages, enable lock files and package validation twcclegg/libphonenumber-csharp#373
• Read the flyweight map buffer from an array instead of a stream by @​twcclegg in Read the flyweight map buffer from an array instead of a stream twcclegg/libphonenumber-csharp#376
• Raise analysis on the library, and fix what it found by @​twcclegg in Raise analysis on the library, and fix what it found twcclegg/libphonenumber-csharp#374
• Filter the benchmark job, drop netframework4.8, pin nuget sources by @​twcclegg in Filter the benchmark job, drop netframework4.8, pin nuget sources twcclegg/libphonenumber-csharp#377
• Check the public surface survives hostile input by @​twcclegg in Check the public surface survives hostile input twcclegg/libphonenumber-csharp#379
• Measure the parse, validate and format phases separately by @​twcclegg in Measure the parse, validate and format phases separately twcclegg/libphonenumber-csharp#378
• Benchmark the input shapes callers actually supply by @​twcclegg in Benchmark the input shapes callers actually supply twcclegg/libphonenumber-csharp#381
• Match slices without materialising them when parsing by @​twcclegg in Match slices without materialising them when parsing twcclegg/libphonenumber-csharp#382
• Capture every extension alternative into one named group by @​twcclegg in Capture every extension alternative into one named group twcclegg/libphonenumber-csharp#383
• Skip the match groups when stripping a national prefix by @​twcclegg in Skip the match groups when stripping a national prefix twcclegg/libphonenumber-csharp#384
• Strip the national prefix without materialising a match by @​twcclegg in Strip the national prefix without materialising a match twcclegg/libphonenumber-csharp#385
• Don't render the country calling code test to strings by @​twcclegg in Don't render the country calling code test to strings twcclegg/libphonenumber-csharp#386
• fix: ship symbols in a .snupkg instead of embedding them in the assembly by @​twcclegg in fix: ship symbols in a .snupkg instead of embedding them in the assembly twcclegg/libphonenumber-csharp#390

Full Changelog: twcclegg/libphonenumber-csharp@v9.0.36...v9.0.37

9.0.36

libphonenumber-csharp 9.0.36 · libphonenumber-csharp.extensions 9.0.36 · upstream v9.0.36

What's Changed

• feat: add opt-in java/proto check overrides to the metadata update script by @​wmundev in feat: add opt-in java/proto check overrides to the metadata update script twcclegg/libphonenumber-csharp#359
• feat: run compatible workflows on ARM64 runners for potentially quicker build times by @​wmundev in feat: run compatible workflows on ARM64 runners for potentially quicker build times twcclegg/libphonenumber-csharp#360
• build(deps): bump actions/setup-dotnet from 5.3.0 to 6.0.0 by @​dependabot[bot] in build(deps): bump actions/setup-dotnet from 5.3.0 to 6.0.0 twcclegg/libphonenumber-csharp#362
• fix: port v9.0.36 upstream java changes by @​twcclegg in fix: port v9.0.36 upstream java changes twcclegg/libphonenumber-csharp#363
• build(deps): bump github/codeql-action/analyze from 4.36.2 to 4.37.3 by @​dependabot[bot] in build(deps): bump github/codeql-action/analyze from 4.36.2 to 4.37.3 twcclegg/libphonenumber-csharp#361
• Bump the phonenumbers_demo_tests_minor_patch_updates group with 2 updates by @​dependabot[bot] in Bump the phonenumbers_demo_tests_minor_patch_updates group with 2 updates twcclegg/libphonenumber-csharp#365
• build(deps): bump actions/cache/restore from 5.0.5 to 6.1.0 by @​dependabot[bot] in build(deps): bump actions/cache/restore from 5.0.5 to 6.1.0 twcclegg/libphonenumber-csharp#367
• build(deps): bump actions/checkout from 7.0.0 to 7.0.1 by @​dependabot[bot] in build(deps): bump actions/checkout from 7.0.0 to 7.0.1 twcclegg/libphonenumber-csharp#366
• Remove AppVeyor by @​twcclegg in Remove AppVeyor twcclegg/libphonenumber-csharp#368

Full Changelog: twcclegg/libphonenumber-csharp@v9.0.35...v9.0.36

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Authentication.JwtBearer from 10.0.10 to 10.0.11.

Release notes

Sourced from Microsoft.AspNetCore.Authentication.JwtBearer's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Mvc.Testing from 10.0.10 to 10.0.11.

Release notes

Sourced from Microsoft.AspNetCore.Mvc.Testing's releases.

No release notes found for this version range.

Commits viewable in compare view.

Pinned Microsoft.EntityFrameworkCore at 10.0.11.

Release notes

Sourced from Microsoft.EntityFrameworkCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Design from 10.0.10 to 10.0.11.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Design's releases.

No release notes found for this version range.

Commits viewable in compare view.

Pinned Microsoft.EntityFrameworkCore.Tools at 10.0.11.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Tools's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Caching.Hybrid from 10.4.0 to 10.9.0.

Release notes

Sourced from Microsoft.Extensions.Caching.Hybrid's releases.

10.9.0

Version 10.9.0 is headlined by changes in these areas:

• AI: New experimental routing APIs center on the abstract RoutingChatClient base class, with SemanticRoutingChatClient as a concrete semantic-routing implementation. Separately, the abstract FailoverChatClient specialization and its concrete OrderedFailoverChatClient implementation add failover routing.
• AI Evaluation: The generated report gains redesigned Overview, Cases, History, and Comparison views.
• ASP.NET Core and HTTP diagnostics: The release adds HTTP request latency log enrichment and fixes configuration binding, response-body logging, request-path redaction, and resilience package version handling.
• Source-generated logging and service discovery: Fixes cover classification type qualification, thread-local state cleanup, and DNS query suffix handling.

Experimental API Changes

New Experimental APIs

• New experimental API: HTTP request latency log enrichment (EXTEXP0013) #​7602
• New experimental API: Chat client routing and failover (MEAI001) #​7662

What's Changed

AI (Microsoft.Extensions.AI, Microsoft.Extensions.AI.Abstractions, and Microsoft.Extensions.AI.OpenAI)

• Add extensible chat client routing #​7662 by @​joshuajyue (co-authored by @​Copilot)
• Pass the request's options to the selected client #​7685 by @​joshuajyue (co-authored by @​jozkee @​Copilot)
• AI.Abstractions: fix ExcludeFromSchema dropped under concurrent AIFunction creation #​7677 by @​jozkee (co-authored by @​Copilot)
• Cap OpenAI dependency version (b10f9c0) by @​jeffhandley (co-authored by @​Copilot)

Note: Microsoft.Extensions.AI.OpenAI constrains its dependency for OpenAI to 2.12.x, preventing OpenAI updates to 2.13.0+ due to an incompatibility. We expect to release Microsoft.Extensions.AI.OpenAI version 10.9.1 during the week of August 17 to address this issue.

HTTP Resilience and Diagnostics (Microsoft.Extensions.Http.Resilience and Microsoft.Extensions.Http.Diagnostics)

• Fix Grpc.Net.ClientFactory version range check - Fixes #​7565 #​7566 by @​Ghost93
• Fix response body logging under debugger #​7678 by @​Rimobul
• Redact outgoing path when route is unknown #​7687 by @​Rimobul
• Fix HTTP client logging config binding #​7691 by @​Rimobul

ASP.NET Core Extensions (Microsoft.AspNetCore.Diagnostics.Middleware)

• Rename HttpLatencyTelemetry extensions class and drop redundant TFM guard #​7645 by @​EasyL0ver (co-authored by @​Copilot)
• Add HTTP request latency log enricher (experimental) #​7602 by @​EasyL0ver (co-authored by @​Copilot)

Logging Source Generator (Microsoft.Gen.Logging)

• [Microsoft.Gen.Logging] Clear thread-local state when logging throws #​7682 by @​Rimobul
• [Microsoft.Gen.Logging] Fully qualify classification types #​7689 by @​Rimobul

AI Evaluation (Microsoft.Extensions.AI.Evaluation.Reporting)

• [Microsoft.Extensions.AI.Evaluation.Reporting] Evaluation report redesign #​7609 by @​grafanaKibana

Project Templates (Microsoft.McpServer.ProjectTemplates)

• Remove MCP server project template #​7680 by @​jeffhandley (co-authored by @​Copilot)

... (truncated)

10.8.4

This servicing update refreshes the .NET AI project templates ahead of the July 30, 2026 retirement of GitHub Models — removing the GitHub Models provider option and updating template dependencies.

As a result, both the AI Chat Web (aichatweb) and AI Agent Web API (aiagent-webapi) templates now require the AI service provider to be chosen explicitly via --provider; there is no longer a default. One of the following must be selected:

• --provider azureopenai — Azure OpenAI
• --provider ollama — Ollama (for local development)
• --provider openai — OpenAI Platform

Packages in this release

Package	Version
Microsoft.Extensions.AI.Templates	10.8.4-preview.3.26379.3
Microsoft.Agents.AI.ProjectTemplates	1.13.0-preview.1.26379.3

What's Changed

Project templates

• Removed the GitHub Models provider from the AI Chat Web and AI Agent Web API templates, ahead of GitHub Models being fully retired on July 30, 2026. The --provider option is now required with no default (#​7667).
• Updated AI template dependencies — bumped Aspire.Hosting.AppHost to 13.4.6 and CommunityToolkit.VectorData.SqliteVec to 1.0.0-preview.4 (aligned System.Linq.AsyncEnumerable to 10.0.9), replacing earlier workaround package pins (#​7639).

Full Changelog

• dotnet/extensions@v10.8.3...v10.8.4

10.8.3

Packages in this release

Package	Version
Microsoft.Extensions.AI	10.8.3
Microsoft.Extensions.AI.Abstractions	10.8.3
Microsoft.Extensions.AI.OpenAI	10.8.3

Experimental API Changes

Experimental API behavior updates

• Updated serialization behavior for experimental ToolApprovalRequestContent.RequiresConfirmation so it no longer leaks into consumer source-generated AIContent JSON metadata unless approval APIs are intentionally used (#​7659).

What's Changed

AI abstractions and serialization

• Fixed MEAI001 leakage from RequiresConfirmation in source-generated AIContent contexts by using an internal JSON-included backing member while keeping the public experimental member ignored for source-generation metadata (#​7659).

Test Improvements

• Added stabilization regression coverage to verify consumer source-generated List<AIContent> contexts compile and round-trip without requiring MEAI001 suppression (#​7659).

Full Changelog

• dotnet/extensions@v10.8.2...v10.8.3

10.8.2

This servicing release updates Microsoft.Extensions.VectorData.ConformanceTests to 10.8.2 and includes targeted test framework migration fixes.

Packages in this release

Package	Version	Note
Microsoft.Extensions.VectorData.Abstractions	10.8.2	Published August 7, 2026
Microsoft.Extensions.VectorData.ConformanceTests	10.8.2

Update: August 7, 2026
The Microsoft.Extensions.VectorData.Abstractions package was initially excluded from this release by mistake. Because Microsoft.Extensions.VectorData.ConformanceTests has a dependency on Microsoft.Extensions.VectorData.Abstractions, that led to failures when updating to Microsoft.Extensions.VectorData.ConformanceTests 10.8.2.

Microsoft.Extensions.VectorData.Abstractions was published August 7, 2026 to resolve that issue.

What's Changed

AI

• Move Microsoft.Extensions.VectorData.ConformanceTests to xUnit 3 #​7636 by @​adamsitnik (co-authored by @​Copilot)

Acknowledgements

• @​roji reviewed pull requests

Full Changelog: dotnet/extensions@v10.8.1...v10.8.2

10.8.1

This servicing release updates the Microsoft.Extensions.AI, Microsoft.Extensions.AI.Abstractions, and Microsoft.Extensions.AI.OpenAI packages to 10.8.1 with two targeted fixes: correct tool-call/tool-result ordering when resuming approval-gated functions with service-managed chat history, and preservation of the OpenAI Responses reasoning item id for stateless (store=false) encrypted reasoning.

Packages in this release

Package	Version
Microsoft.Extensions.AI	10.8.1
Microsoft.Extensions.AI.Abstractions	10.8.1
Microsoft.Extensions.AI.OpenAI	10.8.1

What's Changed

AI

• Fix FICC tool_calls/tool ordering with approvals and service-managed chat history #​7617 by @​westey-m
• Roundtrip OpenAI Responses reasoning item id for stateless (store=false) encrypted reasoning #​7629 by @​rogerbarreto (co-authored by @​tarekgh)

Acknowledgements

• @​jozkee reviewed pull requests

Full Changelog: dotnet/extensions@v10.8.0...v10.8.1

10.8.0

This release adds new experimental APIs to Microsoft.Extensions.AI.Abstractions and updates the OpenAI dependency to 2.12.0, alongside documentation, test, and repository maintenance.

Experimental API Changes

New Experimental APIs

• New experimental API: AIFunctionNameAttribute and AIParameterNameAttribute #​7610 by @​jozkee (co-authored by @​jeffhandley @​Copilot)
• New experimental API: ToolApprovalRequestContent.RequiresConfirmation (MEAI001) #​7549 by @​javiercn (co-authored by @​Copilot)

What's Changed

AI

• Upgrade OpenAI dependency to 2.12.0 #​7608 by @​jozkee (co-authored by @​Copilot)
• Auto-detect audio format in OpenAISpeechToTextClient #​7575 by @​jozkee (co-authored by @​Copilot)
• Fix ImageGeneratingChatClient duplicating preceding content and dropping following content #​7624 by @​jozkee (co-authored by @​Copilot)

Vector Data

• Make all test methods virtual in VectorData.ConformanceTests #​7606 by @​adamsitnik (co-authored by @​Copilot)

Documentation Updates

• Remove links to ai-samples repo #​7574 by @​gewarren
• Fix up docs with Copilot (MEVD) #​7597 by @​gewarren
• Fix up docs with Copilot (M.E.ServiceDiscovery) #​7598 by @​gewarren (co-authored by @​Copilot)
• Fix up docs with Copilot (MEAI) #​7600 by @​gewarren
• Fix up docs with Copilot #​7601 by @​gewarren

Test Improvements

• Fix flaky StampedeTests and harden related test waits #​7572 by @​jeffhandley (co-authored by @​Copilot)
• Fix SQLitePCLRaw.lib.e_sqlite3 vulnerability by replacing SemanticKernel connectors with CommunityToolkit #​7579 by @​adamsitnik (co-authored by @​Copilot)
• Removing SemanticKernel Connectors dependency and replacing it #​7584 by @​adamsitnik (co-authored by @​Copilot)
• Migrate to xUnit v3 #​7607 by @​adamsitnik (co-authored by @​shyamnamboodiripad @​Copilot)

Repository Infrastructure Updates

• Update OTel GenAI conventions skill for standalone semconv-genai repo #​7519 by @​jeffhandley (co-authored by @​Copilot)
• Bump dotnet-coverage from 18.7.0 to 18.8.0 #​7552
• [main] Update dependencies from dotnet/arcade #​7559
• Fix transitive MessagePack vulnerability in AI template AppHost projects #​7561 by @​adamsitnik (co-authored by @​Copilot)
• Bump esbuild, @​vitejs/plugin-react and vite in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7564
• Bump tmp from 0.2.6 to 0.2.7 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7569
• Bump js-yaml from 4.1.1 to 4.2.0 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7570
• Bump PowerShell from 7.6.2 to 7.6.3 #​7576
• Remove duplicate 'WebAPI' classification from template #​7577 by @​danroth27
• [main] Update dependencies from dotnet/arcade #​7590
• Eliminate redundant Correctness CI stage by merging into Build #​7594 by @​adamsitnik (co-authored by @​Copilot)
• Update Agent Framework to 1.13.0 #​7613 by @​jeffhandley (co-authored by @​Copilot)
  ... (truncated)

10.7.0

v10.7.0 graduates the Microsoft.Extensions.Diagnostics.ResourceMonitoring.Kubernetes package to stable. The package registers a Kubernetes-aware ResourceQuotaProvider that reads the pod's CPU and memory requests and limits and exposes them to Microsoft.Extensions.Diagnostics.ResourceMonitoring as baseline and maximum quotas, which then feed the request and limit dimensions of the published resource utilization metrics. The companion ResourceQuota and ResourceQuotaProvider types in Microsoft.Extensions.Diagnostics.ResourceMonitoring graduate to stable in the same change so that consumers can implement custom quota providers without taking an experimental dependency.

On the AI side, Microsoft.Extensions.AI.OpenAI moves to OpenAI 2.11.0 and fixes a deserialization bug in ToolJson.AdditionalProperties so that JSON Schema additionalProperties values shaped as sub-schema objects (for example {"type":"string"}) are preserved instead of throwing during deserialization. HostedFileContent.SizeInBytes and HostedFileContent.CreatedAt graduate to stable since both values are consistently available across hosted-file providers, while Purpose and Scope remain experimental as provider-shaped vocabulary. FunctionInvokingChatClient drops a backward-compat path that auto-marked ToolApprovalResponseContent entries with InformationalOnly: true; consumers that need to continue accepting sessions serialized before #​7468 can use the sample ApprovalHistoryNormalizingChatClient middleware added in the test project.

Experimental API Changes

Now Stable

• Microsoft.Extensions.Diagnostics.ResourceMonitoring.Kubernetes package is now stable #​7253
• Resource Monitoring ResourceQuota and ResourceQuotaProvider APIs are now stable (previously EXTEXP0008) #​7253
• HostedFileContent.SizeInBytes and HostedFileContent.CreatedAt are now stable (previously MEAI001) #​7513

What's Changed

AI

• Graduate HostedFileContent.SizeInBytes and HostedFileContent.CreatedAt #​7513 by @​jozkee (co-authored by @​Copilot)
• Remove backward-compat InformationalOnly case from FICC; suggest middleware workaround #​7538 by @​jozkee (co-authored by @​Copilot)
• Upgrade OpenAI package from 2.10.0 to 2.11.0 #​7544 by @​jozkee (co-authored by @​Copilot)
• Fix ToolJson.AdditionalProperties to accept sub-schema objects #​7546 by @​jozkee (co-authored by @​Copilot)

Diagnostics, Health Checks, and Resource Monitoring

• Move Microsoft.Extensions.Diagnostics.ResourceMonitoring.Kubernetes to stable #​7253 by @​amadeuszl (co-authored by @​Copilot)

Repository Infrastructure Updates

• [main] Update dependencies from dotnet/arcade #​7521
• Bump dotnet-reportgenerator-globaltool from 5.5.9 to 5.5.10 #​7522
• Bump dotnet-coverage from 18.6.2 to 18.7.0 #​7530
• Bump PowerShell from 7.6.1 to 7.6.2 #​7531
• Bump qs from 6.15.1 to 6.15.2 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7532
• [main] Update dependencies from dotnet/arcade #​7534
• Bump tmp from 0.2.5 to 0.2.6 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7537

Acknowledgements

• @​ericstj submitted issue #​7509 (resolved by #​7544)
• @​scottt732 submitted issue #​7540 (resolved by #​7546)
• @​DeagleGross @​wtgodbe @​dariusclay @​evgenyfedorov2 @​peterwald @​PranavSenthilnathan @​shyamnamboodiripad @​stephentoub @​tarekgh reviewed pull requests

Full Changelog: dotnet/extensions@v10.6.0...v10.7.0

10.6.0

Version 10.6.0 stabilizes the response continuation token and background-response APIs in Microsoft.Extensions.AI.Abstractions. Most other AI work for May shipped in 10.5.1; this monthly release rolls those changes up alongside dependency updates and a small Resource Monitoring cleanup.

Experimental API Changes

Now Stable

• ResponseContinuationToken and background-response APIs are now stable (previously MEAI001) #​7512

What's Changed

AI

• Stabilize ResponseContinuationToken / background-response APIs #​7512 by @​jozkee (co-authored by @​Copilot)

Repository Infrastructure Updates

• Update version to 10.6.0 #​7458 by @​jeffhandley
• [main] Update dependencies from dotnet/arcade #​7451
• Bump follow-redirects from 1.15.11 to 1.16.0 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript/azure-devops-report/tasks/PublishAIEvaluationReport #​7469
• Merge release/10.5 into main #​7470 by @​jeffhandley
• Bump microsoft.visualstudio.slngen.tool from 12.0.13 to 12.0.32 #​7484
• Bump postcss from 8.5.9 to 8.5.12 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7494
• Bump dotnet-reportgenerator-globaltool from 5.5.7 to 5.5.9 #​7504
• Rename release-notes skill to write-release-notes #​7511 by @​jeffhandley (co-authored by @​Copilot)

Acknowledgements

• @​wtgodbe @​tarekgh @​peterwald @​JeremyLikness @​eiriktsarpalis @​ericstj @​evgenyfedorov2 reviewed pull requests

Full Changelog: dotnet/extensions@v10.5.2...v10.6.0

10.5.2

This patch release ships a single fix to Microsoft.Extensions.VectorData.Abstractions, correcting StorageName resolution when external serialization is enabled. Microsoft.Extensions.VectorData.ConformanceTests, Microsoft.Extensions.AI.Abstractions, Microsoft.Extensions.AI, and Microsoft.Extensions.AI.OpenAI are published alongside it for version coherency — they contain no code changes from 10.5.1.

Packages in this release

Package	Version
Microsoft.Extensions.VectorData.Abstractions	10.5.2
Microsoft.Extensions.VectorData.ConformanceTests	10.5.2
Microsoft.Extensions.AI.Abstractions	10.5.2
Microsoft.Extensions.AI	10.5.2
Microsoft.Extensions.AI.OpenAI	10.5.2

What's Changed

Microsoft.Extensions.VectorData.Abstractions

• Minor fixes to MEVD.Abstractions: correct StorageName behavior when external serialization is enabled, and disable a warning for net462. (by @​roji in #​7475)

Full Changelog: dotnet/extensions@v10.5.1...v10.5.2

10.5.1

Version 10.5.1 of the Microsoft.Extensions.AI packages stabilizes CodeInterpreter, WebSearch, and ImageGeneration tool content types. The release adds new experimental tool search and OpenAI request policy hooks. And the OpenTelemetry gen-ai semantic conventions are updated to align with v1.41.

The 'aiagent-webapi' project template in Microsoft.Agents.AI.ProjectTemplates is updated to align with v1.3.0 of Agent Framework, updating the OpenTelemetry dependencies within the template projects as well.

Packages in this release

Package	Version
Microsoft.Extensions.AI	10.5.1
Microsoft.Extensions.AI.Abstractions	10.5.1
Microsoft.Extensions.AI.OpenAI	10.5.1
Microsoft.Extensions.AI.Templates	10.5.1-preview.3.26251.3
Microsoft.Agents.AI.ProjectTemplates	1.3.0-preview.1.26251.3

Experimental API Changes

Now Stable

The following types previously emitted the MEAI001 experimental diagnostic and are now stable.

• CodeInterpreter and WebSearch tool content types are now stable #​7493
  • CodeInterpreterToolCallContent
  • CodeInterpreterToolResultContent
  • WebSearchToolCallContent
  • WebSearchToolResultContent
• ImageGeneration tool content types and tool are now stable #​7476
  • ImageGenerationToolCallContent
  • ImageGenerationToolResultContent
  • HostedImageGenerationTool
  • ImageGenerationOptions
  • ImageGenerationResponseFormat (the Hosted enum value remains experimental)
  • IImageGenerator and the rest of the image generation infrastructure also remain experimental

New Experimental APIs

The following new APIs emit the MEAI001 experimental diagnostic.

• New experimental API: HostedToolSearchTool with DeferredTools for tool-search-driven deferred tool loading #​7471
• New experimental API: OpenAIRequestPolicies extension hook for appending System.ClientModel.PipelinePolicy instances to outgoing OpenAI requests #​7495

Breaking Changes to Experimental APIs

• WebSearchToolResultContent.Results was renamed to Outputs as part of the stabilization in #​7493, aligning with CodeInterpreterToolResultContent.Outputs. The original Results property was included in version 10.4.0 and 10.5.0; this is a binary breaking change and consumers need to update to consume the updated property.

  WebSearchToolResultContent content = ...;
  - IList<AIContent>? items = content.Results;
  + IList<AIContent>? items = content.Outputs;

... (truncated)

10.5.0

HTTP Logging Middleware APIs in Microsoft.AspNetCore.Diagnostics.Middleware are now stable. This release also transfers Microsoft.Extensions.VectorData.Abstractions and Microsoft.Extensions.VectorData.ConformanceTests from the Semantic Kernel repository into dotnet/extensions, jumping from 10.1.0 to 10.5.0 for consistent versioning. The release also delivers fixes across the AI libraries, AI Evaluation, and Service Discovery.

Breaking Changes

1. Rename VectorStoreVectorAttribute constructor parameter #​7460
   • The Dimensions parameter was renamed to dimensions (lowercase). This is a source-breaking change only — binary compatibility is preserved.
   • If you use the named argument syntax new VectorStoreVectorAttribute(Dimensions: 1536), update it to new VectorStoreVectorAttribute(dimensions: 1536).

Experimental API Changes

Now Stable

• HTTP Logging Middleware APIs are now stable (previously EXTEXP0013): AddHttpLogEnricher<T>, IHttpLogEnricher, and RequestHeadersLogEnricherOptions.HeadersDataClasses #​7380

What's Changed

AI

• Fix OpenAIResponsesChatClient to respect "store":false in responses #​7417 by @​stephentoub
• Fix InvalidOperationException in CoalesceWebSearchToolCallContent #​7419 by @​stephentoub
• Handle F# optional parameters in AIFunctionFactory schema generation #​7439 by @​eiriktsarpalis
• Fix ComputerCallResponseItem using Item.Id instead of CallId #​7446 by @​jozkee
• Fix HostedFileContent with image MIME type sent as input_file instead of input_image #​7438 by @​stephentoub (co-authored by @​copilot)
• Guard Activity.Current restore with null check in OpenTelemetry streaming clients #​7443 by @​stephentoub (co-authored by @​copilot)
• Enable stateless mode in remote MCP server template (released as v1.2.0 on 2026-04-01) #​7441 by @​jeffhandley

Vector Data

• Move Microsoft.Extensions.VectorData.Abstractions over from Semantic Kernel #​7434 by @​roji
• Rename VectorStoreVectorAttribute dimensions constructor parameter #​7460 by @​roji

AI Evaluation

• Add Path Validation for DiskBasedResponseCache and DiskBasedResultStore #​7397 by @​peterwald
• Update brace-expansion for CVE-2026-33750 #​7457 by @​SamMonoRT

ASP.NET Core Extensions

• Removing experimental attribute from Http logging middleware #​7380 by @​mariamgerges

Service Discovery

• Implement RFC6761 reserved DNS names handling #​6924 by @​rzikm

Documentation Updates

• Remove per-library CHANGELOG.md files #​7413 by @​jeffhandley

Test Improvements

... (truncated)

10.4.1

This release of the Microsoft.Extensions.AI packages adds new experimental APIs for Realtime client sessions and Text-to-Speech, along with OpenTelemetry and middleware improvements.

Packages in this release

Package	Version
Microsoft.Extensions.AI.Abstractions	10.4.1
Microsoft.Extensions.AI	10.4.1
Microsoft.Extensions.AI.OpenAI	10.4.1

Experimental API Changes

New Experimental APIs

• New experimental API: Realtime Client Sessions #​7285 and #​7399
• New experimental API: Text-to-Speech Client #​7381

Changes to Experimental APIs

• Hosted File Download Stream: write-path methods now explicitly throw NotSupportedException #​7394

What's Changed

AI

• Add ITextToSpeechClient abstraction, middleware, and OpenAI implementation #​7381 by @​stephentoub
• Realtime Client Proposal #​7285 by @​tarekgh
• Add VoiceActivityDetection options to realtime session abstractions #​7399 by @​tarekgh
• Make UriContent mediaType parameter optional with inference from URI file extension #​7398 by @​stephentoub (co-authored by @​Copilot)
• Emit gen_ai.client.operation.exception via ILogger LoggerMessage on OpenTelemetry instrumentation classes #​7379 by @​stephentoub (co-authored by @​Copilot)
• Support invoke_workflow as an equivalent parent span to invoke_agent in FunctionInvokingChatClient #​7382 by @​stephentoub (co-authored by @​Copilot)
• Make HostedFileDownloadStream explicitly read-only #​7394 by @​stephentoub (co-authored by @​Copilot)

Documentation Updates

• Document JSON schema derivation for return types in AIFunctionFactory #​7400 by @​stephentoub (co-authored by @​Copilot)

Test Improvements

• Fix test warnings #​7369 by @​jozkee
• Add tests for JSON deserialization of serializable types #​7373 by @​stephentoub (co-authored by @​Copilot)

Repository Infrastructure Updates

• Update Package Validation Baseline to 10.4.0 #​7389 by @​jeffhandley (co-authored by @​Copilot)
• Update ModelContextProtocol libraries to version 1.0.0 #​7340 by @​stephentoub (co-authored by @​Copilot)

Acknowledgements

• @​eiriktsarpalis @​ericstj @​CodeBlanch @​lmolkova @​adamsitnik @​joperezr reviewed pull requests
  ... (truncated)

Commits viewable in compare view.

Pinned Microsoft.Extensions.Caching.Hybrid at 10.9.0.

Release notes

Sourced from Microsoft.Extensions.Caching.Hybrid's releases.

10.9.0

Version 10.9.0 is headlined by changes in these areas:

• AI: New experimental routing APIs center on the abstract RoutingChatClient base class, with SemanticRoutingChatClient as a concrete semantic-routing implementation. Separately, the abstract FailoverChatClient specialization and its concrete OrderedFailoverChatClient implementation add failover routing.
• AI Evaluation: The generated report gains redesigned Overview, Cases, History, and Comparison views.
• ASP.NET Core and HTTP diagnostics: The release adds HTTP request latency log enrichment and fixes configuration binding, response-body logging, request-path redaction, and resilience package version handling.
• Source-generated logging and service discovery: Fixes cover classification type qualification, thread-local state cleanup, and DNS query suffix handling.

Experimental API Changes

New Experimental APIs

• New experimental API: HTTP request latency log enrichment (EXTEXP0013) #​7602
• New experimental API: Chat client routing and failover (MEAI001) #​7662

What's Changed

AI (Microsoft.Extensions.AI, Microsoft.Extensions.AI.Abstractions, and Microsoft.Extensions.AI.OpenAI)

• Add extensible chat client routing #​7662 by @​joshuajyue (co-authored by @​Copilot)
• Pass the request's options to the selected client #​7685 by @​joshuajyue (co-authored by @​jozkee @​Copilot)
• AI.Abstractions: fix ExcludeFromSchema dropped under concurrent AIFunction creation #​7677 by @​jozkee (co-authored by @​Copilot)
• Cap OpenAI dependency version (b10f9c0) by @​jeffhandley (co-authored by @​Copilot)

Note: Microsoft.Extensions.AI.OpenAI constrains its dependency for OpenAI to 2.12.x, preventing OpenAI updates to 2.13.0+ due to an incompatibility. We expect to release Microsoft.Extensions.AI.OpenAI version 10.9.1 during the week of August 17 to address this issue.

HTTP Resilience and Diagnostics (Microsoft.Extensions.Http.Resilience and Microsoft.Extensions.Http.Diagnostics)

• Fix Grpc.Net.ClientFactory version range check - Fixes #​7565 #​7566 by @​Ghost93
• Fix response body logging under debugger #​7678 by @​Rimobul
• Redact outgoing path when route is unknown #​7687 by @​Rimobul
• Fix HTTP client logging config binding #​7691 by @​Rimobul

ASP.NET Core Extensions (Microsoft.AspNetCore.Diagnostics.Middleware)

• Rename HttpLatencyTelemetry extensions class and drop redundant TFM guard #​7645 by @​EasyL0ver (co-authored by @​Copilot)
• Add HTTP request latency log enricher (experimental) #​7602 by @​EasyL0ver (co-authored by @​Copilot)

Logging Source Generator (Microsoft.Gen.Logging)

• [Microsoft.Gen.Logging] Clear thread-local state when logging throws #​7682 by @​Rimobul
• [Microsoft.Gen.Logging] Fully qualify classification types #​7689 by @​Rimobul

AI Evaluation (Microsoft.Extensions.AI.Evaluation.Reporting)

• [Microsoft.Extensions.AI.Evaluation.Reporting] Evaluation report redesign #​7609 by @​grafanaKibana

Project Templates (Microsoft.McpServer.ProjectTemplates)

• Remove MCP server project template #​7680 by @​jeffhandley (co-authored by @​Copilot)

... (truncated)

10.8.4

This servicing update refreshes the .NET AI project templates ahead of the July 30, 2026 retirement of GitHub Models — removing the GitHub Models provider option and updating template dependencies.

As a result, both the AI Chat Web (aichatweb) and AI Agent Web API (aiagent-webapi) templates now require the AI service provider to be chosen explicitly via --provider; there is no longer a default. One of the following must be selected:

• --provider azureopenai — Azure OpenAI
• --provider ollama — Ollama (for local development)
• --provider openai — OpenAI Platform

Packages in this release

Package	Version
Microsoft.Extensions.AI.Templates	10.8.4-preview.3.26379.3
Microsoft.Agents.AI.ProjectTemplates	1.13.0-preview.1.26379.3

What's Changed

Project templates

• Removed the GitHub Models provider from the AI Chat Web and AI Agent Web API templates, ahead of GitHub Models being fully retired on July 30, 2026. The --provider option is now required with no default (#​7667).
• Updated AI template dependencies — bumped Aspire.Hosting.AppHost to 13.4.6 and CommunityToolkit.VectorData.SqliteVec to 1.0.0-preview.4 (aligned System.Linq.AsyncEnumerable to 10.0.9), replacing earlier workaround package pins (#​7639).

Full Changelog

• dotnet/extensions@v10.8.3...v10.8.4

10.8.3

Packages in this release

Package	Version
Microsoft.Extensions.AI	10.8.3
Microsoft.Extensions.AI.Abstractions	10.8.3
Microsoft.Extensions.AI.OpenAI	10.8.3

Experimental API Changes

Experimental API behavior updates

• Updated serialization behavior for experimental ToolApprovalRequestContent.RequiresConfirmation so it no longer leaks into consumer source-generated AIContent JSON metadata unless approval APIs are intentionally used (#​7659).

What's Changed

AI abstractions and serialization

• Fixed MEAI001 leakage from RequiresConfirmation in source-generated AIContent contexts by using an internal JSON-included backing member while keeping the public experimental member ignored for source-generation metadata (#​7659).

Test Improvements

• Added stabilization regression coverage to verify consumer source-generated List<AIContent> contexts compile and round-trip without requiring MEAI001 suppression (#​7659).

Full Changelog

• dotnet/extensions@v10.8.2...v10.8.3

10.8.2

This servicing release updates Microsoft.Extensions.VectorData.ConformanceTests to 10.8.2 and includes targeted test framework migration fixes.

Packages in this release

Package	Version	Note
Microsoft.Extensions.VectorData.Abstractions	10.8.2	Published August 7, 2026
Microsoft.Extensions.VectorData.ConformanceTests	10.8.2

Update: August 7, 2026
The Microsoft.Extensions.VectorData.Abstractions package was initially excluded from this release by mistake. Because Microsoft.Extensions.VectorData.ConformanceTests has a dependency on Microsoft.Extensions.VectorData.Abstractions, that led to failures when updating to Microsoft.Extensions.VectorData.ConformanceTests 10.8.2.

Microsoft.Extensions.VectorData.Abstractions was published August 7, 2026 to resolve that issue.

What's Changed

AI

• Move Microsoft.Extensions.VectorData.ConformanceTests to xUnit 3 #​7636 by @​adamsitnik (co-authored by @​Copilot)

Acknowledgements

• @​roji reviewed pull requests

Full Changelog: dotnet/extensions@v10.8.1...v10.8.2

10.8.1

This servicing release updates the Microsoft.Extensions.AI, Microsoft.Extensions.AI.Abstractions, and Microsoft.Extensions.AI.OpenAI packages to 10.8.1 with two targeted fixes: correct tool-call/tool-result ordering when resuming approval-gated functions with service-managed chat history, and preservation of the OpenAI Responses reasoning item id for stateless (store=false) encrypted reasoning.

Packages in this release

Package	Version
Microsoft.Extensions.AI	10.8.1
Microsoft.Extensions.AI.Abstractions	10.8.1
Microsoft.Extensions.AI.OpenAI	10.8.1

What's Changed

AI

• Fix FICC tool_calls/tool ordering with approvals and service-managed chat history #​7617 by @​westey-m
• Roundtrip OpenAI Responses reasoning item id for stateless (store=false) encrypted reasoning #​7629 by @​rogerbarreto (co-authored by @​tarekgh)

Acknowledgements

• @​jozkee reviewed pull requests

Full Changelog: dotnet/extensions@v10.8.0...v10.8.1

10.8.0

This release adds new experimental APIs to Microsoft.Extensions.AI.Abstractions and updates the OpenAI dependency to 2.12.0, alongside documentation, test, and repository maintenance.

Experimental API Changes

New Experimental APIs

• New experimental API: AIFunctionNameAttribute and AIParameterNameAttribute #​7610 by @​jozkee (co-authored by @​jeffhandley @​Copilot)
• New experimental API: ToolApprovalRequestContent.RequiresConfirmation (MEAI001) #​7549 by @​javiercn (co-authored by @​Copilot)

What's Changed

AI

• Upgrade OpenAI dependency to 2.12.0 #​7608 by @​jozkee (co-authored by @​Copilot)
• Auto-detect audio format in OpenAISpeechToTextClient #​7575 by @​jozkee (co-authored by @​Copilot)
• Fix ImageGeneratingChatClient duplicating preceding content and dropping following content #​7624 by @​jozkee (co-authored by @​Copilot)

Vector Data

• Make all test methods virtual in VectorData.ConformanceTests #​7606 by @​adamsitnik (co-authored by @​Copilot)

Documentation Updates

• Remove links to ai-samples repo #​7574 by @​gewarren
• Fix up docs with Copilot (MEVD) #​7597 by @​gewarren
• Fix up docs with Copilot (M.E.ServiceDiscovery) #​7598 by @​gewarren (co-authored by @​Copilot)
• Fix up docs with Copilot (MEAI) #​7600 by @​gewarren
• Fix up docs with Copilot #​7601 by @​gewarren

Test Improvements

• Fix flaky StampedeTests and harden related test waits #​7572 by @​jeffhandley (co-authored by @​Copilot)
• Fix SQLitePCLRaw.lib.e_sqlite3 vulnerability by replacing SemanticKernel connectors with CommunityToolkit #​7579 by @​adamsitnik (co-authored by @​Copilot)
• Removing SemanticKernel Connectors dependency and replacing it #​7584 by @​adamsitnik (co-authored by @​Copilot)
• Migrate to xUnit v3 #​7607 by @​adamsitnik (co-authored by @​shyamnamboodiripad @​Copilot)

Repository Infrastructure Updates

• Update OTel GenAI conventions skill for standalone semconv-genai repo #​7519 by @​jeffhandley (co-authored by @​Copilot)
• Bump dotnet-coverage from 18.7.0 to 18.8.0 #​7552
• [main] Update dependencies from dotnet/arcade #​7559
• Fix transitive MessagePack vulnerability in AI template AppHost projects #​7561 by @​adamsitnik (co-authored by @​Copilot)
• Bump esbuild, @​vitejs/plugin-react and vite in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7564
• Bump tmp from 0.2.6 to 0.2.7 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7569
• Bump js-yaml from 4.1.1 to 4.2.0 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7570
• Bump PowerShell from 7.6.2 to 7.6.3 #​7576
• Remove duplicate 'WebAPI' classification from template #​7577 by @​danroth27
• [main] Update dependencies from dotnet/arcade #​7590
• Eliminate redundant Correctness CI stage by merging into Build #​7594 by @​adamsitnik (co-authored by @​Copilot)
• Update Agent Framework to 1.13.0 #​7613 by @​jeffhandley (co-authored by @​Copilot)
  ... (truncated)

10.7.0

v10.7.0 graduates the Microsoft.Extensions.Diagnostics.ResourceMonitoring.Kubernetes package to stable. The package registers a Kubernetes-aware ResourceQuotaProvider that reads the pod's CPU and memory requests and limits and exposes them to Microsoft.Extensions.Diagnostics.ResourceMonitoring as baseline and maximum quotas, which then feed the request and limit dimensions of the published resource utilization metrics. The companion ResourceQuota and ResourceQuotaProvider types in Microsoft.Extensions.Diagnostics.ResourceMonitoring graduate to stable in the same change so that consumers can implement custom quota providers without taking an experimental dependency.

On the AI side, Microsoft.Extensions.AI.OpenAI moves to OpenAI 2.11.0 and fixes a deserialization bug in ToolJson.AdditionalProperties so that JSON Schema additionalProperties values shaped as sub-schema objects (for example {"type":"string"}) are preserved instead of throwing during deserialization. HostedFileContent.SizeInBytes and HostedFileContent.CreatedAt graduate to stable since both values are consistently available across hosted-file providers, while Purpose and Scope remain experimental as provider-shaped vocabulary. FunctionInvokingChatClient drops a backward-compat path that auto-marked ToolApprovalResponseContent entries with InformationalOnly: true; consumers that need to continue accepting sessions serialized before #​7468 can use the sample ApprovalHistoryNormalizingChatClient middleware added in the test project.

Experimental API Changes

Now Stable

• Microsoft.Extensions.Diagnostics.ResourceMonitoring.Kubernetes package is now stable #​7253
• Resource Monitoring ResourceQuota and ResourceQuotaProvider APIs are now stable (previously EXTEXP0008) #​7253
• HostedFileContent.SizeInBytes and HostedFileContent.CreatedAt are now stable (previously MEAI001) #​7513

What's Changed

AI

• Graduate HostedFileContent.SizeInBytes and HostedFileContent.CreatedAt #​7513 by @​jozkee (co-authored by @​Copilot)
• Remove backward-compat InformationalOnly case from FICC; suggest middleware workaround #​7538 by @​jozkee (co-authored by @​Copilot)
• Upgrade OpenAI package from 2.10.0 to 2.11.0 #​7544 by @​jozkee (co-authored by @​Copilot)
• Fix ToolJson.AdditionalProperties to accept sub-schema objects #​7546 by @​jozkee (co-authored by @​Copilot)

Diagnostics, Health Checks, and Resource Monitoring

• Move Microsoft.Extensions.Diagnostics.ResourceMonitoring.Kubernetes to stable #​7253 by @​amadeuszl (co-authored by @​Copilot)

Repository Infrastructure Updates

• [main] Update dependencies from dotnet/arcade #​7521
• Bump dotnet-reportgenerator-globaltool from 5.5.9 to 5.5.10 #​7522
• Bump dotnet-coverage from 18.6.2 to 18.7.0 #​7530
• Bump PowerShell from 7.6.1 to 7.6.2 #​7531
• Bump qs from 6.15.1 to 6.15.2 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7532
• [main] Update dependencies from dotnet/arcade #​7534
• Bump tmp from 0.2.5 to 0.2.6 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7537

Acknowledgements

• @​ericstj submitted issue #​7509 (resolved by #​7544)
• @​scottt732 submitted issue #​7540 (resolved by #​7546)
• @​DeagleGross @​wtgodbe @​dariusclay @​evgenyfedorov2 @​peterwald @​PranavSenthilnathan @​shyamnamboodiripad @​stephentoub @​tarekgh reviewed pull requests

Full Changelog: dotnet/extensions@v10.6.0...v10.7.0

Commits viewable in compare view.

Updated Microsoft.Extensions.Caching.Memory from 10.0.10 to 10.0.11.

Release notes

Sourced from Microsoft.Extensions.Caching.Memory's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration from 10.0.10 to 10.0.11.

Release notes

Sourced from Microsoft.Extensions.Configuration's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.Abstractions from 10.0.10 to 10.0.11.

Release notes

Sourced from Microsoft.Extensions.Configuration.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.Binder from 10.0.10 to 10.0.11.

Release notes

Sourced from Microsoft.Extensions.Configuration.Binder's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.EnvironmentVariables from 10.0.10 to 10.0.11.

Release notes

Sourced from Microsoft.Extensions.Configuration.EnvironmentVariables's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.UserSecrets from 10.0.10 to 10.0.11.

Release notes

Sourced from Microsoft.Extensions.Configuration.UserSecrets's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.DependencyInjection from 10.0.10 to 10.0.11.

Release notes

Sourced from Microsoft.Extensions.DependencyInjection's releases.

No release notes found for this version range.

Commits viewable in compare view.

Pinned Microsoft.Extensions.DependencyInjection.Abstractions at 10.0.11.

Release notes

Sourced from Microsoft.Extensions.DependencyInjection.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Pinned Microsoft.Extensions.Diagnostics.HealthChecks at 9.0.19.

Release notes

Sourced from Microsoft.Extensions.Diagnostics.HealthChecks's releases.

9.0.19

Release

What's Changed

• [release/9.0] Update branding to 9.0.19 by @​dotnet-bot in [release/9.0] Update branding to 9.0.19 dotnet/aspnetcore#67623
• [release/9.0] (deps): Bump src/submodules/MessagePack-CSharp from 9614e6f to 365965f by @​dependabot[bot] in [release/9.0] (deps): Bump src/submodules/MessagePack-CSharp from 9614e6f to 365965f dotnet/aspnetcore#67527
• [release/9.0] (deps): Bump src/submodules/googletest from 7140cd4 to 973323e by @​dependabot[bot] in [release/9.0] (deps): Bump src/submodules/googletest from 7140cd4 to 973323e dotnet/aspnetcore#67526
• [release/9.0] Update dependencies from dotnet/source-build-assets by @​dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/source-build-assets dotnet/aspnetcore#67328
• [release/9.0] Update CI pipeline to use Windows 2022 image by @​github-actions[bot] in [release/9.0] Update CI pipeline to use Windows 2022 image dotnet/aspnetcore#67287
• [release/9.0] Update npm dependencies by @​wtgodbe in [release/9.0] Update npm dependencies dotnet/aspnetcore#67277
• [release/9.0] Update Selenium and Playwright versions to match main by @​wtgodbe in [release/9.0] Update Selenium and Playwright versions to match main dotnet/aspnetcore#67274
• [release/9.0] Update Node.js version from 20.x to 24.x by @​wtgodbe in [release/9.0] Update Node.js version from 20.x to 24.x dotnet/aspnetcore#67242
• [release/9.0] improve CI flakiness by @​wtgodbe in [release/9.0] improve CI flakiness dotnet/aspnetcore#67646
• [release/9.0] (deps): Bump src/submodules/googletest from 973323e to 3064a60 by @​dependabot[bot] in [release/9.0] (deps): Bump src/submodules/googletest from 973323e to 3064a60 dotnet/aspnetcore#67652
• Merging internal commits for release/9.0 by @​dotnet-bot in Merging internal commits for release/9.0 dotnet/aspnetcore#67795
• Use build identity for internal feeds instead of expired dn-bot-dnceng-artifact-feeds-rw PAT (release/9.0) by @​missymessa in Use build identity for internal feeds instead of expired dn-bot-dnceng-artifact-feeds-rw PAT (release/9.0) dotnet/aspnetcore#67853
• Use System.AccessToken for internal feed auth on release/9.0 by @​missymessa in Use System.AccessToken for internal feed auth on release/9.0 dotnet/aspnetcore#67859

Full Changelog: dotnet/aspnetcore@v9.0.18...v9.0.19

9.0.18

Release

What's Changed

• Update branding to 9.0.18 by @​vseanreesermsft in Update branding to 9.0.18 dotnet/aspnetcore#66983
• [release/9.0] (deps): Bump src/submodules/googletest from d72f9c8 to a721f1b by @​dependabot[bot] in [release/9.0] (deps): Bump src/submodules/googletest from d72f9c8 to a721f1b dotnet/aspnetcore#66974
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#66717
• [release/9.0] Update dependencies from dotnet/extensions by @​dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/extensions dotnet/aspnetcore#66640
• [release/9.0] Update dependencies from dotnet/source-build-assets by @​dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/source-build-assets dotnet/aspnetcore#66992
• [release/9.0] Add 1ES Unofficial pipeline for Components E2E tests by @​wtgodbe in [release/9.0] Add 1ES Unofficial pipeline for Components E2E tests dotnet/aspnetcore#66988
• [release/9.0] Bump Crypto.Xml to 8.0.3 for RepoTasks by @​wtgodbe in [release/9.0] Bump Crypto.Xml to 8.0.3 for RepoTasks dotnet/aspnetcore#66765
• Merging internal commits for release/9.0 by @​vseanreesermsft in Merging internal commits for release/9.0 dotnet/aspnetcore#67104
• [release/9.0] Update npm dependencies by @​wtgodbe in [release/9.0] Update npm dependencies dotnet/aspnetcore#67143
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#67057
• [release/9.0] Update Microsoft Identity Web package versions to 3.15.1 by @​wtgodbe in [release/9.0] Update Microsoft Identity Web package versions to 3.15.1 dotnet/aspnetcore#67163
• [release/9.0] (deps): Bump src/submodules/googletest from a721f1b to 7140cd4 by @​dependabot[bot] in [release/9.0] (deps): Bump src/submodules/googletest from a721f1b to 7140cd4 dotnet/aspnetcore#67217
• [release/9.0] Update dependencies from dotnet/source-build-assets by @​dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/source-build-assets dotnet/aspnetcore#67113
• [release/9.0] Reject ASCII control characters in cookie auth return URLs by @​github-actions[bot] in [release/9.0] Reject ASCII control characters in cookie auth return URLs dotnet/aspnetcore#67156

Full Changelog: dotnet/aspnetcore@v9.0.17...v9.0.18

9.0.17

Release

What's Changed

• Update branding to 9.0.17 by @​vseanreesermsft in Update branding to 9.0.17 dotnet/aspnetcore#66590
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#66482
• [release/9.0] Update dependencies from dotnet/extensions by @​dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/extensions dotnet/aspnetcore#66371
• Merging internal commits for release/9.0 by @​vseanreesermsft in Merging internal commits for release/9.0 dotnet/aspnetcore#66661

Full Changelog: dotnet/aspnetcore@v9.0.16...v9.0.17

9.0.16

Release

What's Changed

• [release/9.0] Update branding to 9.0.16 by @​vseanreesermsft in [release/9.0] Update branding to 9.0.16 dotnet/aspnetcore#66206
• [release/9.0] Update NPM dependencies by @​wtgodbe in [release/9.0] Update NPM dependencies dotnet/aspnetcore#66051
• [release/9.0] Move off of dead-lettered Windows preview helix queue by @​wtgodbe in [release/9.0] Move off of dead-lettered Windows preview helix queue dotnet/aspnetcore#66219
• [release/9.0] (deps): Bump src/submodules/googletest from 73a63ea to d72f9c8 by @​dependabot[bot] in [release/9.0] (deps): Bump src/submodules/googletest from 73a63ea to d72f9c8 dotnet/aspnetcore#66088
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#65906
• [release/9.0] Fix lodash CVE by adding npm override for >=4.18.0 by @​wtgodbe in [release/9.0] Fix lodash CVE by adding npm override for >=4.18.0 dotnet/aspnetcore#66224
• [release/9.0] Update dependencies from dotnet/extensions by @​dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/extensions dotnet/aspnetcore#65907
• [release/9.0] Update azure/msal-browser by @​github-actions[bot] in [release/9.0] Update azure/msal-browser dotnet/aspnetcore#66234
• [release/9.0] Stop overwriting Arcade default MicrosoftTemplateEngineAuthoringTasks… by @​wtgodbe in [release/9.0] Stop overwriting Arcade default MicrosoftTemplateEngineAuthoringTasks… dotnet/aspnetcore#66235
• [release/9.0] Use source-build-assets repo by @​NikolaMilosavljevic in [release/9.0] Use source-build-assets repo dotnet/aspnetcore#66278
• [release/9.0] Update dependencies from dotnet/extensions by @​dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/extensions dotnet/aspnetcore#66288
• Merging internal commits for release/9.0 by @​vseanreesermsft in Merging internal commits for release/9.0 dotnet/aspnetcore#66316

Full Changelog: dotnet/aspnetcore@v9.0.15...v9.0.16

9.0.15

Release

What's Changed

• [release/9.0] Update branding to 9.0.15 by @​vseanreesermsft in [release/9.0] Update branding to 9.0.15 dotnet/aspnetcore#65634
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#65439
• [release/9.0] Update dependencies from dotnet/extensions by @​dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/extensions dotnet/aspnetcore#65438
• [release/9.0] (deps): Bump src/submodules/googletest from 56efe39 to 73a63ea by @​dependabot[bot] in [release/9.0] (deps): Bump src/submodules/googletest from 56efe39 to 73a63ea dotnet/aspnetcore#65587
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#65706
• Merging internal commits for release/9.0 by @​vseanreesermsft in Merging internal commits for release/9.0 dotnet/aspnetcore#65731

Full Changelog: dotnet/aspnetcore@v9.0.14...v9.0.15

9.0.14

Release

What's Changed

• Update branding to 9.0.14 by @​vseanreesermsft in Update branding to 9.0.14 dotnet/aspnetcore#65294
• [release/9.0] (deps): Bump src/submodules/googletest from 9156d4c to 56efe39 by @​dependabot[bot] in [release/9.0] (deps): Bump src/submodules/googletest from 9156d4c to 56efe39 dotnet/aspnetcore#65290
• [release/9.0] Remove package baseline by @​Copilot in [release/9.0] Remove package baseline dotnet/aspnetcore#65208
• [release/9.0] Set network isolation policy for aspnetcore-ci by @​github-actions[bot] in [release/9.0] Set network isolation policy for aspnetcore-ci dotnet/aspnetcore#65172
• [release/9.0] Package dotnet-getdocument from current TFM into top-level by @​wtgodbe in [release/9.0] Package dotnet-getdocument from current TFM into top-level dotnet/aspnetcore#65164
• [release/9.0] Fix URL format for JDK download on linux by @​github-actions[bot] in [release/9.0] Fix URL format for JDK download on linux dotnet/aspnetcore#65075
• [release/9.0] Disable parallel restore for Grpc JsonTranscoding by @​github-actions[bot] in [release/9.0] Disable parallel restore for Grpc JsonTranscoding dotnet/aspnetcore#65072
• [release/9.0] Update Ubuntu queue to 22.04 by @​wtgodbe in [release/9.0] Update Ubuntu queue to 22.04 dotnet/aspnetcore#65298
• [release/9.0] Update dependencies from dotnet/extensions by @​dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/extensions dotnet/aspnetcore#65117
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#65089
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#65365
• [release/9.0] Update dependencies from dotnet/extensions by @​dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/extensions dotnet/aspnetcore#65364
• [release/9.0] Disable parallel restore for linker tests by @​github-actions[bot] in [release/9.0] Disable parallel restore for linker tests dotnet/aspnetcore#65374
• Merging internal commits for release/9.0 by @​vseanreesermsft in Merging internal commits for release/9.0 dotnet/aspnetcore#65381
• [release/9.0] Switch to non-preview 2022 queue by @​github-actions[bot] in [release/9.0] Switch to non-preview 2022 queue dotnet/aspnetcore#65412

Full Changelog: dotnet/aspnetcore@v9.0.13...v9.0.14

9.0.13

Release

What's Changed

• Update branding to 9.0.13 by @​vseanreesermsft in Update branding to 9.0.13 dotnet/aspnetcore#64938
• [release/9.0] (deps): Bump src/submodules/googletest from 1b96fa1 to 9156d4c by @​dependabot[bot] in [release/9.0] (deps): Bump src/submodules/googletest from 1b96fa1 to 9156d4c dotnet/aspnetcore#64908
• [release/9.0] Pass container image correctly for source-build job in official build by @​akoeplinger in [release/9.0] Pass container image correctly for source-build job in official build dotnet/aspnetcore#64781
• [release/9.0] Update dependencies from dotnet/extensions by @​dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/extensions dotnet/aspnetcore#64686
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#64685
• [release/9.0] Update gradle by @​github-actions[bot] in [release/9.0] Update gradle dotnet/aspnetcore#64980
• Backport #​64657: Use shallow clones for CI jobs by @​Copilot in Backport #64657: Use shallow clones for CI jobs dotnet/aspnetcore#64677
• [release/9.0] Update dependencies from dotnet/extensions by @​dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/extensions dotnet/aspnetcore#65012
• [release/9.0] Add .slnx fallback for TestHost content root discovery by @​Copilot in [release/9.0] Add .slnx fallback for TestHost content root discovery dotnet/aspnetcore#64953
• Merging internal commits for release/9.0 by @​vseanreesermsft in Merging internal commits for release/9.0 dotnet/aspnetcore#65046

Full Changelog: dotnet/aspnetcore@v9.0.12...v9.0.13)

9.0.12

Release

What's Changed

• Update branding to 9.0.12 by @​vseanreesermsft in Update branding to 9.0.12 dotnet/aspnetcore#64248
• Update Microsoft.Build versions to 17.8.43 by @​MackinnonBuck in Update Microsoft.Build versions to 17.8.43 dotnet/aspnetcore#64277
• [release/9.0] (deps): Bump src/submodules/googletest from 9706f75 to 6ec14df by @​dependabot[bot] in [release/9.0] (deps): Bump src/submodules/googletest from 9706f75 to 6ec14df dotnet/aspnetcore#64230
• [release/9.0] Update dependencies from dotnet/extensions by @​dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/extensions dotnet/aspnetcore#64111
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#64065
• [release/9.0] Upgrade to MacOS 15 for CI by @​wtgodbe in [release/9.0] Upgrade to MacOS 15 for CI dotnet/aspnetcore#64310
• Merging internal commits for release/9.0 by @​vseanreesermsft in Merging internal commits for release/9.0 dotnet/aspnetcore#64312
• [release/9.0] Don't use netcoreapp2.1 in dotnet-get-document by @​wtgodbe in [release/9.0] Don't use netcoreapp2.1 in dotnet-get-document dotnet/aspnetcore#64351
• [release/9.0] AppContext for HttpSys CBT hardening by @​BrennanConroy in [release/9.0] AppContext for HttpSys CBT hardening dotnet/aspnetcore#64297
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#64350
• [release/9.0] Update dependencies from dotnet/extensions by @​dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/extensions dotnet/aspnetcore#64388
• [release/9.0] Delete signalr-daily-tests.yml by @​github-actions[bot] in [release/9.0] Delete signalr-daily-tests.yml dotnet/aspnetcore#64589
• [release/9.0] (deps): Bump src/submodules/googletest from 6ec14df to 1b96fa1 by @​dependabot[bot] in [release/9.0] (deps): Bump src/submodules/googletest from 6ec14df to 1b96fa1 dotnet/aspnetcore#64580
• [release/9.0] Update dependencies from dotnet/extensions by @​dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/extensions dotnet/aspnetcore#64503

Full Changelog: dotnet/aspnetcore@v9.0.11...v9.0.12

9.0.11

Release

What's Changed

• Update branding to 9.0.11 by @​vseanreesermsft in Update branding to 9.0.11 dotnet/aspnetcore#63950
• [release/9.0] Update dependencies from dotnet/extensions by @​dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/extensions dotnet/aspnetcore#63677
• [release/9.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#63678
• [release/9.0] (deps): Bump src/submodules/googletest from eb2d85e to 9706f75 by @​dependabot[bot] in [release/9.0] (deps): Bump src/submodules/googletest from eb2d85e to 9706f75 dotnet/aspnetcore#63894
• [release/9.0] Fixed devtools url used for debug with chrome and edge by @​github-actions[bot] in [release/9.0] Fixed devtools url used for debug with chrome and edge dotnet/aspnetcore#61948
• [release/9.0] (http2): Lower WINDOWS_UPDATE received on (half)closed stream to stream abortion by @​DeagleGross in [release/9.0] (http2): Lower WINDOWS_UPDATE received on (half)closed stream to stream abortion dotnet/aspnetcore#63934
• [release/9.0] Re-quarantine ServerRoutingTest.NavigationLock_OverlappingNavigationsCancelExistingNavigations_HistoryNavigation by @​github-actions[bot] in [release/9.0] Re-quarantine ServerRoutingTest.NavigationLock_OverlappingNavigationsCancelExistingNavigations_HistoryNavigation dotnet/aspnetcore#63956
• [release/9.0] Fix nginx install on mac, linux by @​wtgodbe in [release/9.0] Fix nginx install on mac, linux dotnet/aspnetcore#63966
• [Hot Reload] Do not attempt to apply empty deltas. by @​tmat in [Hot Reload] Do not attempt to apply empty deltas. dotnet/aspnetcore#63979
• Merging internal commits for release/9.0 by @​vseanreesermsft in Merging internal commits for release/9.0 dotnet/aspnetcore#64036
• Revert log level severity for unknown proxy in ForwardedHeadersMiddleware by @​BrennanConroy in Revert log level severity for unknown proxy in ForwardedHeadersMiddleware dotnet/aspnetcore#64091
• Set timeoutInMinutes to 0 for Windows build job by @​vseanreesermsft in https://github...

Description has been truncated

[github-actions]

⚠️ This PR needs a label so we know which states it affects. Add one of:

• co — Colorado only
• dc — DC only
• all states — applies everywhere (use this for infra/platform changes that aren't state-specific)

While you're at it, a type label (feature, bugfix, chore, refactor, …) helps too — most are auto-applied from your branch name, see .github/labeler.yml if yours wasn't.

[github-actions]

⚠️ This PR needs a label so we know which states it affects. Add one of:

• co — Colorado only
• dc — DC only
• all states — applies everywhere (use this for infra/platform changes that aren't state-specific)

While you're at it, a type label (feature, bugfix, chore, refactor, …) helps too — most are auto-applied from your branch name, see .github/labeler.yml if yours wasn't.

[datadog-engineering-non-production]

⚠️ Warnings

❌ Your PR has failed checks. Please review the issues below and take necessary action before merging.

🚦 6 Pipeline jobs failed

Playwright E2E | Pa11y Accessibility Tests — 🔧 Needs a code fix, caused by this PR

View in Datadog · View in GitHub Actions

Failed to restore dependencies due to inconsistent packages lock file and detected package downgrade for Microsoft.Extensions.Options.ConfigurationExtensions.

Playwright E2E | Playwright Integration E2E (DC) — 🔧 Needs a code fix, caused by this PR

View in Datadog · View in GitHub Actions

Failed to restore dependencies due to inconsistent packages lock file and detected package downgrade for Microsoft.Extensions.Options.ConfigurationExtensions from 10.0.11 to 10.0.10.

State CI | co - Build & Test — 🔧 Needs a code fix, caused by this PR

View in Datadog · View in GitHub Actions

Failed to restore project dependencies due to inconsistent packages lock file; detected package downgrade from Microsoft.Extensions.Options.ConfigurationExtensions 10.0.11 to 10.0.10.

View all 6 failed jobs.

📋 Copy fix prompt

CI on my pull request is failing. Help me find and fix the root cause of each failing job below — they were flagged as caused by changes in this PR, so focus on the diff. For each job, explain the failure and propose a fix.

Before you start, set up the Datadog software-delivery tooling so you can
query the CI data yourself:

1. Check whether you already have the Datadog software-delivery MCP tools
   (e.g. a `search_datadog_ci_pipeline_events` tool) and the `unblock-pr` skill.
2. If either is missing, STOP and ask me for permission before installing
   anything. Do not install or run anything until I have said yes.
3. Only with my explicit approval, set up the Datadog software-delivery MCP
   server and skills by following:
     https://docs.datadoghq.com/getting_started/software_delivery_mcp_tools/
   then restart so the skill is picked up.
4. If I decline, skip all of the above and work from the context below alone.

Then run /unblock-pr — it will pull the CI data itself. The job context below is what we already know.

If /unblock-pr is not available — because I declined the setup above, or it did not install — work from the context below instead.

Datadog has already classified this failure as caused by changes in this PR.
Take that as given and work the fix:

1. Locate the change. Diff this branch against its base and find the change
   that produces this error. Explain the mechanism, don't just name a file:
     git fetch origin && git diff $(git merge-base origin/main HEAD)...HEAD
2. Reproduce it locally. Run the failing job's command or test before
   proposing anything.
3. Propose the smallest fix that addresses the root cause — not a workaround,
   not a broadened assertion, not a disabled or skipped test.
4. Re-run the same command to confirm, and say exactly what you ran.
5. If the failure turns out to be intermittent rather than deterministic, say
   so plainly instead of "fixing" it — that is a flaky test, and patching it
   hides the problem.

If the right move is to re-run the job rather than change code, use the job
link in the context below. For GitHub Actions: `gh run rerun <run-id> --failed`,
where the run ID is the number after `/runs/` in that URL (not the trailing
number, which is the job ID).

Branch: dependabot/nuget/dot-config/nuget-minor-patch-f17d7198fb

Playwright E2E | Pa11y Accessibility Tests
Commit: fb17b8bb897d58f38dda42e35d852a12c45d2275
Error (code / build):
Failed to restore dependencies due to inconsistent packages lock file and detected package downgrade for Microsoft.Extensions.Options.ConfigurationExtensions.
CI job: https://github.com/codeforamerica/sebt-self-service-portal/actions/runs/33533224138/job/99941232216

Playwright E2E | Playwright Integration E2E (DC)
Commit: fb17b8bb897d58f38dda42e35d852a12c45d2275
Error (code / build):
Failed to restore dependencies due to inconsistent packages lock file and detected package downgrade for Microsoft.Extensions.Options.ConfigurationExtensions from 10.0.11 to 10.0.10.
CI job: https://github.com/codeforamerica/sebt-self-service-portal/actions/runs/33533224138/job/99941232219

State CI | co - Build & Test
Commit: fb17b8bb897d58f38dda42e35d852a12c45d2275
Error (code / build):
Failed to restore project dependencies due to inconsistent packages lock file; detected package downgrade from Microsoft.Extensions.Options.ConfigurationExtensions 10.0.11 to 10.0.10.
CI job: https://github.com/codeforamerica/sebt-self-service-portal/actions/runs/33533224084/job/99941234280

Useful? React with 👍 / 👎

_{This comment will be updated automatically if new data arrives.
🔗 Commit SHA: fb17b8b | Docs | View more details | Give us feedback!}