Bump the nuget-all group with 9 updates by dependabot[bot] · Pull Request #524 · techhubms/techhub

dependabot · 2026-09-16T10:00:21Z

Updated Aspire.Hosting.AppHost from 13.5.3 to 13.5.4.

Release notes

Sourced from Aspire.Hosting.AppHost's releases.

13.5.4 What's New in Aspire 13.5.4

Patch release for Aspire 13.5 that fixes Kafka health-check resource leaks, DevTunnel errors with automatically selected regions, misleading Azure emulator dashboard entries, and unintended changes to generated starter apps, plus Homebrew compatibility and Radius API diagnostic updates.

🐛 Fixes

📨 Kafka health checks leaked producers and polling threads — Each AppHost health-check execution created a new Kafka producer without disposing it, accumulating background threads over time. Health checks now reuse a producer per Kafka resource and dispose it with the AppHost, while keeping multiple Kafka resources independently configured. Fixes #20091. (#20094, backport of #20092, @davidfowl)
🌐 DevTunnels could fail when the region was selected automatically — Tunnel setup and health checks now use the cluster-qualified tunnel ID returned by the DevTunnel CLI for port operations and access queries. This fixes failures when a bare tunnel ID cannot be resolved for those operations. Regression introduced in 13.3. Fixes #18790. (#19853, backport of #19230, @Vladipz)
☁️ Emulator-only AppHosts showed an unused Azure environment — The dashboard now hides the azure-environment resource when no Azure resources require cloud provisioning, instead of leaving it visible in Not started. It remains visible for apps that combine local emulators with resources requiring Azure provisioning. No AppHost changes are needed. Fixes #19617. (#19998, backport of #19843, @eerhardt)
🧩 Starter app generation could alter unrelated JavaScript values — Dynamic port replacement could also replace matching numeric literals in bundled JavaScript, including Bootstrap timing values. Port substitutions are now restricted to localhost: URLs, preserving the original library files while still configuring the requested ports. Fixes #20030. (#20110, backport of #20031, @bart-vmware, @JamesNK)
🍎 Updated the Aspire Homebrew cask for Homebrew 6.x — Replaced deprecated cask URL and post-install syntax with the supported equivalents, resolving compatibility issues with current Homebrew while preserving install-channel metadata. (#20119, backport of #19965, @askpt, @joperezr)
🧪 Radius cloud-provider callback interfaces now carry the experimental diagnostic — IAwsRadiusProviderBuilder and IAzureRadiusProviderBuilder are now marked with ASPIRERADIUS003, matching the existing WithAwsProvider and WithAzureProvider methods. Code referencing these interfaces directly must now acknowledge the same experimental API diagnostic. (#19874, @sebastienros)

Full Changelog: v13.5.3...v13.5.4

Full commit: 9c1b401dd67746739044f68959cbf4d3d7af93a6

Commits viewable in compare view.

Updated bunit from 2.10.3 to 2.11.3.

Release notes

Sourced from bunit's releases.

2.11.3

Fixed

InvokeOnSpacerBeforeVisible now uses 4 parameters on .NET 11.0. Reported by @vnbaaij in #1915. Fixed by @vnbaaij in #1919.
A JSInterop timeout elapsing while a result was set could crash the test host with InvalidOperationException: Nullable object must have a value. Reported by @calebcwells in #1920. Fixed by @linkdotnet.

Commits viewable in compare view.

Updated Dapper from 2.1.79 to 2.1.86.

Release notes

Sourced from Dapper's releases.

2.1.86 What's Changed

Point docs links at dapperlib.dev by @mgravell in Point docs links at dapperlib.dev DapperLib/Dapper#2222
Point PackageReleaseNotes at GitHub Releases by @mgravell in Point PackageReleaseNotes at GitHub Releases DapperLib/Dapper#2223
Pin the docs site config, and give it a favicon by @mgravell in Pin the docs site config, and give it a favicon DapperLib/Dapper#2224
DynamicParameters.AddParameters(IDbCommand): identity-free self-apply by @mgravell in DynamicParameters.AddParameters(IDbCommand): identity-free self-apply DapperLib/Dapper#2225
Re-enable DateOnly/TimeOnly support, fixing the defects that got it disabled by @mgravell in Re-enable DateOnly/TimeOnly support, fixing the defects that got it disabled DapperLib/Dapper#2228
Publish to nuget.org via Trusted Publishing (OIDC), and retire MyGet/AppVeyor by @mgravell in Publish to nuget.org via Trusted Publishing (OIDC), and retire MyGet/AppVeyor DapperLib/Dapper#2230

Full Changelog: DapperLib/Dapper@2.1.79...2.1.86

Commits viewable in compare view.

Updated FluentAssertions from 8.10.0 to 8.11.0.

Release notes

Sourced from FluentAssertions's releases.

8.11.0 What's Changed

New Contributors

@jpgomezv made their first contribution in Fix typo in exceptions page fluentassertions/fluentassertions#3317

Full Changelog: fluentassertions/fluentassertions@8.10.0...8.11.0

Commits viewable in compare view.

Updated Microsoft.Extensions.Http.Resilience from 10.9.0 to 10.10.0.

Release notes

Sourced from Microsoft.Extensions.Http.Resilience's releases.

10.10.0

This month's release focuses on AI package reliability: closing gaps in evaluation scoring, hardening OpenAI image-option handling, and removing the deprecated OpenAI Assistants API support.

Experimental API Changes

Removed Experimental APIs

OpenAI Assistants experimental APIs removed (was experimental under OPENAI001) #7724

What's Changed

AI

Remove OpenAI Assistants API support #7724 by @jozkee (co-authored by @Copilot)
Update OpenAI package version to 2.13.0 #7726 by @jozkee
OpenAI: Avoid null implicit conversions for image options #7727 by @jozkee (co-authored by @Copilot)

AI Evaluation

Fail closed when a quality metric has no valid score #7735 by @thaildhe172591
Validate path segments in Azure storage result store and response cache #7718 by @Lroca88

Repository Infrastructure Updates

Add TfxInstaller for publishing #7695 by @peterwaltonwork
Bump PowerShell from 7.6.4 to 7.6.5 #7702
[Infrastructure] Update vulnerable npm dependencies #7705 by @wtgodbe
Add Node installation for TfxInstaller #7703 by @peterwaltonwork
Publish VSIX using publish task instead of output #7711 by @peterwaltonwork
Bump dotnet-coverage from 18.9.0 to 18.10.0 #7708
Do not validate extension during publish step #7725 by @peterwaltonwork
Add skill for upgrading OpenAI #7728 by @jozkee
Fix source indexer stage #7694 by @jjonescz

Acknowledgements

@Lroca88 made their first contribution in #7718
@thaildhe172591 made their first contribution in #7735
@ANcpLua submitted issue #7665 (resolved by #7735)
@jeffhandley @peterwald @shyamnamboodiripad reviewed pull requests

Full Changelog: dotnet/extensions@v10.9.0...v10.10.0

Commits viewable in compare view.

Updated Microsoft.Extensions.ServiceDiscovery from 10.9.0 to 10.10.0.

Release notes

Sourced from Microsoft.Extensions.ServiceDiscovery's releases.

10.10.0

This month's release focuses on AI package reliability: closing gaps in evaluation scoring, hardening OpenAI image-option handling, and removing the deprecated OpenAI Assistants API support.

Experimental API Changes

Removed Experimental APIs

OpenAI Assistants experimental APIs removed (was experimental under OPENAI001) #7724

What's Changed

AI

Remove OpenAI Assistants API support #7724 by @jozkee (co-authored by @Copilot)
Update OpenAI package version to 2.13.0 #7726 by @jozkee
OpenAI: Avoid null implicit conversions for image options #7727 by @jozkee (co-authored by @Copilot)

AI Evaluation

Fail closed when a quality metric has no valid score #7735 by @thaildhe172591
Validate path segments in Azure storage result store and response cache #7718 by @Lroca88

Repository Infrastructure Updates

Add TfxInstaller for publishing #7695 by @peterwaltonwork
Bump PowerShell from 7.6.4 to 7.6.5 #7702
[Infrastructure] Update vulnerable npm dependencies #7705 by @wtgodbe
Add Node installation for TfxInstaller #7703 by @peterwaltonwork
Publish VSIX using publish task instead of output #7711 by @peterwaltonwork
Bump dotnet-coverage from 18.9.0 to 18.10.0 #7708
Do not validate extension during publish step #7725 by @peterwaltonwork
Add skill for upgrading OpenAI #7728 by @jozkee
Fix source indexer stage #7694 by @jjonescz

Acknowledgements

@Lroca88 made their first contribution in #7718
@thaildhe172591 made their first contribution in #7735
@ANcpLua submitted issue #7665 (resolved by #7735)
@jeffhandley @peterwald @shyamnamboodiripad reviewed pull requests

Full Changelog: dotnet/extensions@v10.9.0...v10.10.0

Commits viewable in compare view.

Updated Microsoft.Testing.Extensions.CodeCoverage from 18.11.0 to 18.11.2.

Release notes

Sourced from Microsoft.Testing.Extensions.CodeCoverage's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Polly from 8.7.0 to 8.8.0.

Release notes

Sourced from Polly's releases.

8.8.0 Highlights

Add EnableReloadsWithMonitor() accepting custom IOptionsMonitor by @arashzjahangiri in feat(extensions): add EnableReloads overload accepting custom IOptionsMonitor App-vNext/Polly#3140
Return null from FaultGenerator when no fault is generated by @dualfroz in Return null from FaultGenerator when no fault is generated App-vNext/Polly#3220

What's Changed

Update workflow timeout by @martincostello in Update workflow timeout App-vNext/Polly#3106
Set SOURCE_DATE_EPOCH by @martincostello in Set SOURCE_DATE_EPOCH App-vNext/Polly#3115
Use NUGET_API_KEY by @martincostello in Use NUGET_API_KEY App-vNext/Polly#3116
Test refactoring by @martincostello in Test refactoring App-vNext/Polly#3132
Avoid test flakiness by @martincostello in Avoid test flakiness App-vNext/Polly#3134
Group github/codeql-action updates by @martincostello in Group github/codeql-action updates App-vNext/Polly#3147
Fix wrong word in hedging documentation by @latent-9 in Fix wrong word in hedging documentation App-vNext/Polly#3191
OSMF sponsorship notice by @joelhulen in OSMF sponsorship App-vNext/Polly#3194
Fix XML doc comment on PipelineExecutedArguments by @JiuYue0820 in Fix XML doc comment on PipelineExecutedArguments App-vNext/Polly#3201
Update to xunit v3 by @martincostello in Update to xunit v3 App-vNext/Polly#3131
.NET 11 preparation by @martincostello in .NET 11 preparation App-vNext/Polly#3225
Fix flaky test by @martincostello in Fix flaky test App-vNext/Polly#3231

New Contributors

@arashzjahangiri made their first contribution in feat(extensions): add EnableReloads overload accepting custom IOptionsMonitor App-vNext/Polly#3140
@latent-9 made their first contribution in Fix wrong word in hedging documentation App-vNext/Polly#3191
@JiuYue0820 made their first contribution in Fix XML doc comment on PipelineExecutedArguments App-vNext/Polly#3201
@dualfroz made their first contribution in Return null from FaultGenerator when no fault is generated App-vNext/Polly#3220

Full Changelog: App-vNext/Polly@8.7.0...8.8.0

Commits viewable in compare view.

Updated xunit.v3.mtp-v2 from 4.0.0 to 4.0.1.

Release notes

Sourced from xunit.v3.mtp-v2's releases.

No release notes found for this version range.

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps Aspire.Hosting.AppHost from 13.5.3 to 13.5.4 Bumps bunit from 2.10.3 to 2.11.3 Bumps Dapper from 2.1.79 to 2.1.86 Bumps FluentAssertions from 8.10.0 to 8.11.0 Bumps Microsoft.Extensions.Http.Resilience from 10.9.0 to 10.10.0 Bumps Microsoft.Extensions.ServiceDiscovery from 10.9.0 to 10.10.0 Bumps Microsoft.Testing.Extensions.CodeCoverage from 18.11.0 to 18.11.2 Bumps Polly from 8.7.0 to 8.8.0 Bumps xunit.v3.mtp-v2 from 4.0.0 to 4.0.1 --- updated-dependencies: - dependency-name: Aspire.Hosting.AppHost dependency-version: 13.5.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-all - dependency-name: bunit dependency-version: 2.11.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-all - dependency-name: Dapper dependency-version: 2.1.86 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-all - dependency-name: FluentAssertions dependency-version: 8.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-all - dependency-name: Microsoft.Extensions.Http.Resilience dependency-version: 10.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-all - dependency-name: Microsoft.Extensions.ServiceDiscovery dependency-version: 10.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-all - dependency-name: Microsoft.Testing.Extensions.CodeCoverage dependency-version: 18.11.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-all - dependency-name: Polly dependency-version: 8.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-all - dependency-name: xunit.v3.mtp-v2 dependency-version: 4.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-all ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Sep 16, 2026

dependabot Bot requested review from rajbos and rvanmaanen as code owners September 16, 2026 10:00

dependabot Bot added dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code labels Sep 16, 2026

Navigation Menu

Uh oh!

Bump the nuget-all group with 9 updates - #524

Bump the nuget-all group with 9 updates#524
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/nuget-all-547b8b7e43

dependabot Bot commented on behalf of github Sep 16, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Sep 16, 2026

13.5.4

What's New in Aspire 13.5.4

🐛 Fixes

2.11.3

Fixed

2.1.86

What's Changed

8.11.0

What's Changed

New features

Improvements

Fixes

Documentation

Others

New Contributors

10.10.0

Experimental API Changes

Removed Experimental APIs

What's Changed

AI

AI Evaluation

Repository Infrastructure Updates

Acknowledgements

10.10.0

Experimental API Changes

Removed Experimental APIs

What's Changed

AI

AI Evaluation

Repository Infrastructure Updates

Acknowledgements

8.8.0

Highlights

What's Changed

New Contributors

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants