[dependabot]

Updated Basic.Reference.Assemblies.Net100 from 1.8.12 to 1.8.13.

Release notes

Sourced from Basic.Reference.Assemblies.Net100's releases.

1.8.13

Create release 1.8.13

Commits viewable in compare view.

Updated FsCheck from 3.5.0 to 3.6.0.

Release notes

Sourced from FsCheck's releases.

3.6.0

Additionally target netstandard2.1 and net8.0.
Added generators and shrinkers for System.Index and System.Range (#​621), Memory<T>, ReadOnlyMemory<T>, ReadOnlySequence<T>, ValueTask and ValueTask<T> in netstandard2.1.
Added generators and shrinkers for System.Half, Int128, UInt128, DateOnly, TimeOnly and Rune in net8.0.
Added NullableRef<T> to conveniently generate nulls for reference types (#​610).

Commits viewable in compare view.

Updated Microsoft.Extensions.AI from 10.10.0 to 10.11.0.

Release notes

Sourced from Microsoft.Extensions.AI's releases.

10.11.0

.NET Extensions 10.11.0

This release adds optional scope capture for buffered logs and updates experimental HTTP latency enrichment APIs. It also includes fixes for AI streaming and function invocation, evaluation reports, HybridCache invalidation, and logging.

Experimental API Changes

New Experimental APIs

• Optional logging-scope capture for global and per-request log buffering through GlobalLogBufferingOptions.IncludeScopes and PerRequestLogBufferingOptions.IncludeScopes (EXTEXP0003) #​7813

Breaking Changes to Experimental APIs

• Incoming HTTP latency log enrichment: AddHttpLatencyTelemetry is renamed to AddHttpServerLatencyTelemetry and moves from HttpLatencyTelemetryServiceCollectionExtensions to HttpLoggingServiceCollectionExtensions. It remains experimental under EXTEXP0013 in this release. #​7730

What's Changed

AI

• Yield final image when streaming with HostedImageGenerationTool #​7774 by @​iamAdarshh
• Make the default tool-rejection message state that the decision is final #​7784 by @​manjunathshiva
• AI: Remove obsolete OpenAI JsonPatch workaround #​7815 by @​jozkee (co-authored by @​Copilot)
• Ignore empty model IDs in streaming responses #​7816 by @​valkiara
• Honor FunctionInvocationContext.Terminate when the function throws #​7801 by @​gjz22
• Fix ChatResponseUpdate.Clone dropping ContinuationToken #​7699 by @​dfedoryshchev
• Decode non-base64 data URIs in DataContent to the octets they encode #​7798 by @​Laurianti

AI Evaluation

• [M.E.AI.Evaluation.Reporting] Fix context and metric interpretation visualization #​7738 by @​grafanaKibana
• Fix tokenizer attaching punctuation to number tokens #​7766 by @​tahakocal
• Order iteration results numerically #​7769 by @​tahakocal
• Score GLEU against the best matching reference #​7768 by @​tahakocal

Telemetry and Observability

• Optionally preserve logging scopes in buffered log records #​7813 by @​evgenyfedorov2 (co-authored by @​Copilot)
• Fix OOM from unbounded enumeration of ExtendedLogger tag joiners #​7819 by @​evgenyfedorov2 (co-authored by @​Copilot)
• Fix log buffering race by removing the rule selector cache #​7803 by @​evgenyfedorov2 (co-authored by @​Copilot)

ASP.NET Core Extensions

• Rename AddHttpLatencyTelemetry to AddHttpServerLatencyTelemetry (API-approved shape) #​7730 by @​EasyL0ver (co-authored by @​Copilot)
• Fix ArgumentNullException in per-request log buffering at the end of a request #​7811 by @​evgenyfedorov2 (co-authored by @​Copilot)

AI Project Templates

• Align aichatweb local vector-store keys with Guid record keys #​7804 by @​jongalloway (co-authored by @​adamsitnik @​Copilot)

Caching

... (truncated)

10.10.1

This release fixes two OpenAI integration issues: a TypeLoadException on tool-carrying Responses API calls and a streaming crash against third-party OpenAI-compatible endpoints, by upgrading the OpenAI SDK to 2.14.0.

Packages in this release

Package	Version
Microsoft.Extensions.AI.OpenAI	10.10.1
Microsoft.Extensions.AI.Abstractions	10.10.1

What's Changed

AI

• Upgrade OpenAI SDK to 2.14.0 #​7761 by @​zxyao145

Acknowledgements

• @​zxyao145 made their first contribution in #​7761
• @​zxyao145 submitted issue #​7760 (resolved by #​7761)
• @​jozkee @​wtgodbe reviewed pull requests

Full Changelog: dotnet/extensions@v10.10.0...v10.10.1

Commits viewable in compare view.

Updated ModelContextProtocol from 2.2.0 to 2.3.0.

Release notes

Sourced from ModelContextProtocol's releases.

2.3.0

This release improves HTTP discovery, OAuth, protocol interoperability, and shutdown reliability, preserves registration order for server primitives, and exposes a TimeProvider for deterministic client timeout tests. It also corrects optional server-identity handling; applications reading McpClient.ServerInfo should adopt nullable handling.

Breaking Changes

Refer to the C# SDK Versioning documentation for details on versioning and breaking change policies.

1. McpClient.ServerInfo is nullable — #​1903
   • Its return annotation changes from Implementation to Implementation?. Existing non-nullable assignments or dereferences can produce nullable warnings and fail warnings-as-errors builds.
   • On 2026-07-28 connections, ServerInfo is null when the server omits optional identity metadata from server/discover. Legacy initialize still requires serverInfo. Reading the property before connecting still throws InvalidOperationException.
   • Migrate with a null check or a fallback such as client.ServerInfo?.Name ?? "Unknown server". Self-reported identity must not be used for security decisions.
   • This corrective source-compatibility change is intentionally included in 2.3.0.

What's Changed

• Correct protocol-version telemetry for stateless server spans #​1810 by @​luisangelrod
• Preserve HTTP errors and correct discovery fallback handling #​1791 by @​PranavSenthilnathan (co-authored by @​Copilot)
• Make modern Streamable HTTP status mapping deterministic #​1837 by @​jstar0
  • Modern responses wait for the first protocol message before sending headers; long-running silent handlers may need progress output or an appropriate HTTP timeout. Legacy eager-header behavior is preserved.
• Accept opaque legacy metadata and correct request-scoped capabilities and discovery advertisement #​1852 by @​halter73 (co-authored by @​Copilot)
• Avoid redundant SSE fallback after discovery is rejected with 400 or 404 #​1855 by @​scottt732
• Close server stdin before waiting for graceful stdio process exit #​1838 by @​luisangelrod
• Preserve insertion order when listing server tools, prompts, and resources #​1924 by @​PederHP (co-authored by Claude Opus 5.5)
• Allow missing optional server identity in discovery and make ServerInfo nullable #​1903 by @​Coding-Professional
• Include JSON parse details in Streamable HTTP 400 responses #​1844 by @​ump45nose
• Exclude OAuth from DiscoverProbeTimeout, expose McpClientOptions.TimeProvider for deterministic timeout tests, and default SSE to legacy initialization #​1719 by @​halter73 (co-authored by @​Copilot)
  • OAuth remains subject to the overall InitializationTimeout and caller cancellation; it is excluded only from the short discovery-probe budget.
  • Modern discovery over SSE requires both explicit HttpTransportMode.Sse and ProtocolVersion = "2026-07-28"; pinning the version with AutoDetect is not equivalent.
• Preserve numeric progress tokens in RequestOptions serialization #​1832 by @​dfedoryshchev
• Dispose legacy SSE POST responses to release connections deterministically #​1841 by @​yalcinfu22 (co-authored by Claude Fable 5)

Documentation Updates

• Document standing support for new MCP specification revisions #​1826 by @​halter73 (co-authored by @​Copilot)

Test Improvements

• Stabilize discovery-capable test connections while retaining initialization deadlines #​1943 by @​tarekgh

Repository Infrastructure Updates

• Add a source selector for manual documentation publishes #​1828 by @​jeffhandley (co-authored by @​Copilot)
• Update SourceLink's private build dependency to resolve a vulnerable Git dependency #​1873 by @​halter73 (co-authored by @​Copilot)
• Correct obsolete McpServerFactory references in Copilot instructions #​1892 by @​Zir0-93
• Update Microsoft.Extensions.AI and AI.Abstractions to 10.11.0 and align shared System dependencies to 10.0.13 #​1940

Acknowledgements

• @​scottt732 made their first contribution in #​1855
• @​Zir0-93 made their first contribution in #​1892
• @​Coding-Professional made their first contribution in #​1903
  ... (truncated)

Commits viewable in compare view.

Updated protobuf-net from 3.4.30 to 3.4.40.

Release notes

Sourced from protobuf-net's releases.

3.4.40

What's Changed

• Contract-first codegen: opt-out of unknown-field preservation (PreserveUnknownFields) by @​mgravell in Contract-first codegen: opt-out of unknown-field preservation (PreserveUnknownFields) protobuf-net/protobuf-net#1368
• Fix StreamProtoReader pool state corruption after interrupted fixed-length deserialization by @​PauloHMattos in Fix StreamProtoReader pool state corruption after interrupted fixed-length deserialization protobuf-net/protobuf-net#1376

Maintenance

• Drop the explicit Microsoft.SourceLink.GitHub reference by @​mgravell in Drop the explicit Microsoft.SourceLink.GitHub reference protobuf-net/protobuf-net#1355
• Bump Grpc.Net.Client from 2.83.0 to 2.84.0 by @​dependabot[bot] in Bump Grpc.Net.Client from 2.83.0 to 2.84.0 protobuf-net/protobuf-net#1363
• Bump actions/upload-artifact from 7.0.1 to 7.0.2 by @​dependabot[bot] in Bump actions/upload-artifact from 7.0.1 to 7.0.2 protobuf-net/protobuf-net#1369
• Bump NodaTime from 3.3.3 to 3.3.5 by @​dependabot[bot] in Bump NodaTime from 3.3.3 to 3.3.5 protobuf-net/protobuf-net#1366
• Bump ICSharpCode.Decompiler from 11.0.0.9375 to 11.1.0.9782 by @​dependabot[bot] in Bump ICSharpCode.Decompiler from 11.0.0.9375 to 11.1.0.9782 protobuf-net/protobuf-net#1364
• Bump the microsoft group with 11 updates by @​dependabot[bot] in Bump the microsoft group with 11 updates protobuf-net/protobuf-net#1370
• AotGrpcSmoke: don't generate the documentation file (fixes main CI) by @​mgravell in AotGrpcSmoke: don't generate the documentation file (fixes main CI) protobuf-net/protobuf-net#1377

Full Changelog: protobuf-net/protobuf-net@3.4.30...3.4.40

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!