Bump bunit and 10 others by dependabot[bot] · Pull Request #44 · gbaudrit/agentstration

dependabot · 2026-08-21T09:18:53Z

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

Updated bunit from 2.8.6 to 2.9.0.

Release notes

Sourced from bunit's releases.

2.9.0

Changed

Update to stable package of AngleSharp.Css

Commits viewable in compare view.

Pinned Microsoft.Agents.AI at 1.18.0.

Release notes

Sourced from Microsoft.Agents.AI's releases.

1.18.0 What's Changed

.NET: [Experimental] Extend A2A task store with isolation key scoping by @SergeyMenshykh in .NET: [Experimental] Extend A2A task store with isolation key scoping microsoft/agent-framework#7504
.NET: Add CodeQL suppression for DevUI proxy validation by @SergeyMenshykh in .NET: Add CodeQL suppression for DevUI proxy validation microsoft/agent-framework#7505
.NET: Bound the tool-approval auto-approval loop (#7472) by @atty57 in .NET: Bound the tool-approval auto-approval loop (#7472) microsoft/agent-framework#7474
.NET: Harden file skill discovery by @SergeyMenshykh in .NET: Harden file skill discovery microsoft/agent-framework#7540
.NET: Give a hosted agent a single source of conversation history by @rogerbarreto in .NET: Give a hosted agent a single source of conversation history microsoft/agent-framework#7525
.NET: Aggregate usage across looping agents and chat clients by @westey-m in .NET: Aggregate usage across looping agents and chat clients microsoft/agent-framework#7539
.NET: Store executable function calls bypassed by declaration-only tool calls by @westey-m in .NET: Store executable function calls bypassed by declaration-only tool calls microsoft/agent-framework#7388
.NET: [BREAKING] Rename to AgentIsolationKeyProvider by @SergeyMenshykh in .NET: [BREAKING] Rename to AgentIsolationKeyProvider microsoft/agent-framework#7567
.NET: Improve string parsing in declarative workflows by @peibekwe in .NET: Improve string parsing in declarative workflows microsoft/agent-framework#7535
.NET: Add Cosmos NoSQL vector memory sample by @nos-redacted in .NET: Add Cosmos NoSQL vector memory sample microsoft/agent-framework#7552
.NET: Fix misleading workflow protocol attribute diagnostics by @peibekwe in .NET: Fix misleading workflow protocol attribute diagnostics microsoft/agent-framework#7609
.NET: Prevent telemetry serialization failures from failing workflows by @peibekwe in .NET: Prevent telemetry serialization failures from failing workflows microsoft/agent-framework#7612
.NET: Add Options for Hosted Agent to Allow Backend Storage by @rogerbarreto in .NET: Add Options for Hosted Agent to Allow Backend Storage microsoft/agent-framework#7572
.NET: Add BackgroundAgentsProvider.ReleaseSessionAsync to cancel and release per-session background tasks by @westey-m in .NET: Add BackgroundAgentsProvider.ReleaseSessionAsync to cancel and release per-session background tasks microsoft/agent-framework#7602
.NET: Remove clear and package source mapping from nuget.config to allow user level config inheritance by @westey-m in .NET: Remove clear and package source mapping from nuget.config to allow user level config inheritance microsoft/agent-framework#7646
.NET: Fix IDE0039 by using local functions in samples by @rogerbarreto in .NET: Fix IDE0039 by using local functions in samples microsoft/agent-framework#7666
.NET: Allow agents to opt into concurrent tool invocation by @ump45nose in .NET: Allow agents to opt into concurrent tool invocation microsoft/agent-framework#7650
.NET: Add Foundry hosted session and user identity pass-through by @rogerbarreto in .NET: Add Foundry hosted session and user identity pass-through microsoft/agent-framework#7648
.NET: Add Cosmos chat history retrieval API by @ilia-sokolov in .NET: Add Cosmos chat history retrieval API microsoft/agent-framework#7412
.NET: Fix declarative workflows deep research sample by @peibekwe in .NET: Fix declarative workflows deep research sample microsoft/agent-framework#7674
.NET: Update version for 1.18.0 release by @SergeyMenshykh in .NET: Update version for 1.18.0 release microsoft/agent-framework#7713
.NET: Fix release build analyzer failures by @SergeyMenshykh in .NET: Fix release build analyzer failures microsoft/agent-framework#7721

New Contributors

@nos-redacted made their first contribution in .NET: Add Cosmos NoSQL vector memory sample microsoft/agent-framework#7552
@luisangelrod made their first contribution in Python: Ignore non-project workspace glob matches microsoft/agent-framework#7509
@uuzzrm made their first contribution in Python: Preserve Mistral prompt-cache usage details microsoft/agent-framework#7597
@chinmayv095 made their first contribution in Python: fix(redis): honour a max_messages retention limit of zero microsoft/agent-framework#7470
@ump45nose made their first contribution in .NET: Allow agents to opt into concurrent tool invocation microsoft/agent-framework#7650
@ilia-sokolov made their first contribution in .NET: Add Cosmos chat history retrieval API microsoft/agent-framework#7412
@LobsterQBA made their first contribution in Python: Surface A2A preview consent URLs microsoft/agent-framework#7606
@weed33834 made their first contribution in Python: fix(workflows): preserve all trace contexts in FanInEdgeRunner aggregation microsoft/agent-framework#7557

Full Changelog: microsoft/agent-framework@dotnet-1.17.0...dotnet-1.18.0

1.17.0 What's Changed

.NET and Python: Extract Durable Task and Azure Functions integrations by @cgillum in .NET and Python: Extract Durable Task and Azure Functions integrations microsoft/agent-framework#7465
.NET: Fix Handoff orchestration sample not responding to user input by @peibekwe in .NET: Fix Handoff orchestration sample not responding to user input microsoft/agent-framework#7442
.NET: Fail declarative workflows when an agent returns an error by @peibekwe in .NET: Fail declarative workflows when an agent returns an error microsoft/agent-framework#7497
.NET: Updating version for dotnet release 1.17.0 by @peibekwe in .NET: Updating version for dotnet release 1.17.0 microsoft/agent-framework#7514

Commits viewable in compare view.

Updated Microsoft.AspNetCore.OpenApi from 10.0.10 to 10.0.11.

Release notes

Sourced from Microsoft.AspNetCore.OpenApi's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.SignalR.Client from 10.0.10 to 10.0.11.

Release notes

Sourced from Microsoft.AspNetCore.SignalR.Client's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.AI from 10.8.3 to 10.9.0.

Release notes

Sourced from Microsoft.Extensions.AI's releases.

10.9.0

Version 10.9.0 is headlined by changes in these areas:

AI: New experimental routing APIs center on the abstract RoutingChatClient base class, with SemanticRoutingChatClient as a concrete semantic-routing implementation. Separately, the abstract FailoverChatClient specialization and its concrete OrderedFailoverChatClient implementation add failover routing.
AI Evaluation: The generated report gains redesigned Overview, Cases, History, and Comparison views.
ASP.NET Core and HTTP diagnostics: The release adds HTTP request latency log enrichment and fixes configuration binding, response-body logging, request-path redaction, and resilience package version handling.
Source-generated logging and service discovery: Fixes cover classification type qualification, thread-local state cleanup, and DNS query suffix handling.

Experimental API Changes

New Experimental APIs

New experimental API: HTTP request latency log enrichment (EXTEXP0013) #7602
New experimental API: Chat client routing and failover (MEAI001) #7662

What's Changed

AI (`Microsoft.Extensions.AI`, `Microsoft.Extensions.AI.Abstractions`, and `Microsoft.Extensions.AI.OpenAI`)

Add extensible chat client routing #7662 by @joshuajyue (co-authored by @Copilot)
Pass the request's options to the selected client #7685 by @joshuajyue (co-authored by @jozkee @Copilot)
AI.Abstractions: fix ExcludeFromSchema dropped under concurrent AIFunction creation #7677 by @jozkee (co-authored by @Copilot)
Cap OpenAI dependency version (b10f9c0) by @jeffhandley (co-authored by @Copilot)

Note: Microsoft.Extensions.AI.OpenAI constrains its dependency for OpenAI to 2.12.x, preventing OpenAI updates to 2.13.0+ due to an incompatibility. We expect to release Microsoft.Extensions.AI.OpenAI version 10.9.1 during the week of August 17 to address this issue.

HTTP Resilience and Diagnostics (`Microsoft.Extensions.Http.Resilience` and `Microsoft.Extensions.Http.Diagnostics`)

Fix Grpc.Net.ClientFactory version range check - Fixes #7565 #7566 by @Ghost93
Fix response body logging under debugger #7678 by @Rimobul
Redact outgoing path when route is unknown #7687 by @Rimobul
Fix HTTP client logging config binding #7691 by @Rimobul

ASP.NET Core Extensions (`Microsoft.AspNetCore.Diagnostics.Middleware`)

Rename HttpLatencyTelemetry extensions class and drop redundant TFM guard #7645 by @EasyL0ver (co-authored by @Copilot)
Add HTTP request latency log enricher (experimental) #7602 by @EasyL0ver (co-authored by @Copilot)

Logging Source Generator (`Microsoft.Gen.Logging`)

[Microsoft.Gen.Logging] Clear thread-local state when logging throws #7682 by @Rimobul
[Microsoft.Gen.Logging] Fully qualify classification types #7689 by @Rimobul

AI Evaluation (`Microsoft.Extensions.AI.Evaluation.Reporting`)

[Microsoft.Extensions.AI.Evaluation.Reporting] Evaluation report redesign #7609 by @grafanaKibana

Project Templates (`Microsoft.McpServer.ProjectTemplates`)

Remove MCP server project template #7680 by @jeffhandley (co-authored by @Copilot)

... (truncated)

10.8.4

This servicing update refreshes the .NET AI project templates ahead of the July 30, 2026 retirement of GitHub Models — removing the GitHub Models provider option and updating template dependencies.

As a result, both the AI Chat Web (aichatweb) and AI Agent Web API (aiagent-webapi) templates now require the AI service provider to be chosen explicitly via --provider; there is no longer a default. One of the following must be selected:

--provider azureopenai — Azure OpenAI
--provider ollama — Ollama (for local development)
--provider openai — OpenAI Platform

Packages in this release

Package	Version
Microsoft.Extensions.AI.Templates	10.8.4-preview.3.26379.3
Microsoft.Agents.AI.ProjectTemplates	1.13.0-preview.1.26379.3

What's Changed

Project templates

Removed the GitHub Models provider from the AI Chat Web and AI Agent Web API templates, ahead of GitHub Models being fully retired on July 30, 2026. The --provider option is now required with no default (#7667).
Updated AI template dependencies — bumped Aspire.Hosting.AppHost to 13.4.6 and CommunityToolkit.VectorData.SqliteVec to 1.0.0-preview.4 (aligned System.Linq.AsyncEnumerable to 10.0.9), replacing earlier workaround package pins (#7639).

Full Changelog

dotnet/extensions@v10.8.3...v10.8.4

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.Binder from 10.0.10 to 10.0.11.

Release notes

Sourced from Microsoft.Extensions.Configuration.Binder's releases.

No release notes found for this version range.

Commits viewable in compare view.

Pinned Microsoft.Extensions.DependencyInjection.Abstractions at 10.0.11.

Release notes

Sourced from Microsoft.Extensions.DependencyInjection.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Http from 10.0.10 to 10.0.11.

Release notes

Sourced from Microsoft.Extensions.Http's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Logging.Abstractions from 10.0.10 to 10.0.11.

Release notes

Sourced from Microsoft.Extensions.Logging.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Pinned ModelContextProtocol at 2.2.0.

Release notes

Sourced from ModelContextProtocol's releases.

2.2.0

This release adds hybrid stateful/stateless HTTP serving so clients using the 2025-11-25 and 2026-07-28 protocol revisions can share an endpoint, and fixes a malformed header-decoding edge case.

What's Changed

Add HttpServerSessionMode for hybrid stateful/stateless HTTP serving #1796 by @saicharanpardhu (co-authored by @Copilot @jeffhandley)
Fix McpHeaderEncoder.DecodeValue throwing on the degenerate base64 wrapper #1805 by @latent-9

Test Improvements

Fix duplicated word in test comment #1809 by @latent-9

Repository Infrastructure Updates

Enable package validation for the MCP extension packages #1793 by @jeffhandley (co-authored by @Copilot)
Add a release-manager agent that orchestrates the release skills #1794 by @jeffhandley (co-authored by @Copilot)
Bump Anthropic from 12.39.0 to 12.40.0 #1808
Bump @hono/node-server from 1.19.14 to 2.1.0 in the npm_and_yarn group across 1 directory #1812
Fix dead relative link to versioning docs in bump-version skill #1807 by @latent-9

Acknowledgements

@latent-9 made their first contribution in #1807
@saicharanpardhu made their first contribution in #1796
@saicharanpardhu submitted issue #1777 (resolved by #1796)
@jeffhandley @tarekgh @halter73 reviewed pull requests

Full Changelog: modelcontextprotocol/csharp-sdk@v2.1.0...v2.2.0

[!NOTE]
These release notes were drafted with GitHub Copilot and reviewed before publishing.

2.1.0

This release adds an opt-in subscriptions/listen handler for custom server-side notification streams, improves HTTP transport fallback reliability, and expands guidance and samples for telemetry and binary resources.

What's Changed

Keep AutoDetect channel open after provisional SSE failure #1768 by @PranavSenthilnathan
Preserve HTTP status codes across target frameworks #1767 by @PranavSenthilnathan
Fall back to initialize when server/discover fails at the HTTP layer #1766 by @rbstp
Add public subscriptions/listen server handler (SEP-2575) #1775 by @tarekgh

Documentation Updates

Add README for the InMemoryTransport sample #1769 by @AkbarDizaji
Add Application Insights telemetry example #1778 by @lntutor
Clarify client handling of embedded binary tool resources #1762 by @luisangelrod

Test Improvements

Speed up CLI argument escaping tests #1773 by @PranavSenthilnathan

Repository Infrastructure Updates

Clarify AI disclosure format with a > [!NOTE] alert example #1771 by @PranavSenthilnathan (co-authored by @Copilot)
Bump the npm_and_yarn group across 1 directory with 6 updates #1787
Avoid reading Configuration in Directory.Build.props #1776 by @lntutor
Bump danielpalme/ReportGenerator-GitHub-Action from 5.5.10 to 5.5.11 #1784

Acknowledgements

@AkbarDizaji made their first contribution in #1769
@luisangelrod made their first contribution in #1762
@rbstp submitted issue #1765 (resolved by #1766)
@TomasHubelbauer submitted issue #1026 (resolved by #1778)
@Youssef1313 submitted issue #995 (resolved by #1766)
@eng-marani submitted issue #1261 (resolved by #1762)
@jeffhandley @tarekgh @halter73 @PranavSenthilnathan reviewed pull requests

Full Changelog: modelcontextprotocol/csharp-sdk@v2.0.0...v2.1.0

Commits viewable in compare view.

Updated ModelContextProtocol.AspNetCore from 2.0.0 to 2.2.0.

Release notes

Sourced from ModelContextProtocol.AspNetCore's releases.

2.2.0

This release adds hybrid stateful/stateless HTTP serving so clients using the 2025-11-25 and 2026-07-28 protocol revisions can share an endpoint, and fixes a malformed header-decoding edge case.

What's Changed

Add HttpServerSessionMode for hybrid stateful/stateless HTTP serving #1796 by @saicharanpardhu (co-authored by @Copilot @jeffhandley)
Fix McpHeaderEncoder.DecodeValue throwing on the degenerate base64 wrapper #1805 by @latent-9

Test Improvements

Fix duplicated word in test comment #1809 by @latent-9

Repository Infrastructure Updates

Enable package validation for the MCP extension packages #1793 by @jeffhandley (co-authored by @Copilot)
Add a release-manager agent that orchestrates the release skills #1794 by @jeffhandley (co-authored by @Copilot)
Bump Anthropic from 12.39.0 to 12.40.0 #1808
Bump @hono/node-server from 1.19.14 to 2.1.0 in the npm_and_yarn group across 1 directory #1812
Fix dead relative link to versioning docs in bump-version skill #1807 by @latent-9

Acknowledgements

@latent-9 made their first contribution in #1807
@saicharanpardhu made their first contribution in #1796
@saicharanpardhu submitted issue #1777 (resolved by #1796)
@jeffhandley @tarekgh @halter73 reviewed pull requests

Full Changelog: modelcontextprotocol/csharp-sdk@v2.1.0...v2.2.0

[!NOTE]
These release notes were drafted with GitHub Copilot and reviewed before publishing.

2.1.0

This release adds an opt-in subscriptions/listen handler for custom server-side notification streams, improves HTTP transport fallback reliability, and expands guidance and samples for telemetry and binary resources.

What's Changed

Keep AutoDetect channel open after provisional SSE failure #1768 by @PranavSenthilnathan
Preserve HTTP status codes across target frameworks #1767 by @PranavSenthilnathan
Fall back to initialize when server/discover fails at the HTTP layer #1766 by @rbstp
Add public subscriptions/listen server handler (SEP-2575) #1775 by @tarekgh

Documentation Updates

Add README for the InMemoryTransport sample #1769 by @AkbarDizaji
Add Application Insights telemetry example #1778 by @lntutor
Clarify client handling of embedded binary tool resources #1762 by @luisangelrod

Test Improvements

Speed up CLI argument escaping tests #1773 by @PranavSenthilnathan

Repository Infrastructure Updates

Clarify AI disclosure format with a > [!NOTE] alert example #1771 by @PranavSenthilnathan (co-authored by @Copilot)
Bump the npm_and_yarn group across 1 directory with 6 updates #1787
Avoid reading Configuration in Directory.Build.props #1776 by @lntutor
Bump danielpalme/ReportGenerator-GitHub-Action from 5.5.10 to 5.5.11 #1784

Acknowledgements

@AkbarDizaji made their first contribution in #1769
@luisangelrod made their first contribution in #1762
@rbstp submitted issue #1765 (resolved by #1766)
@TomasHubelbauer submitted issue #1026 (resolved by #1778)
@Youssef1313 submitted issue #995 (resolved by #1766)
@eng-marani submitted issue #1261 (resolved by #1762)
@jeffhandley @tarekgh @halter73 @PranavSenthilnathan reviewed pull requests

Full Changelog: modelcontextprotocol/csharp-sdk@v2.0.0...v2.1.0

Commits viewable in compare view.

github-advanced-security · 2026-08-21T09:22:11Z

You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.

What Enabling Code Scanning Means:

The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
You will be able to see the analysis results for the pull request's branch on this overview once the scans have completed and the checks have passed.

For more information about GitHub Code Scanning, check out the documentation.

Bumps bunit from 2.8.6 to 2.9.0 Bumps Microsoft.Agents.AI from 1.16.0 to 1.18.0 Bumps Microsoft.AspNetCore.OpenApi from 10.0.10 to 10.0.11 Bumps Microsoft.AspNetCore.SignalR.Client from 10.0.10 to 10.0.11 Bumps Microsoft.Extensions.AI from 10.8.3 to 10.9.0 Bumps Microsoft.Extensions.Configuration.Binder from 10.0.10 to 10.0.11 Bumps Microsoft.Extensions.DependencyInjection.Abstractions from 10.0.10 to 10.0.11 Bumps Microsoft.Extensions.Http from 10.0.10 to 10.0.11 Bumps Microsoft.Extensions.Logging.Abstractions from 10.0.10 to 10.0.11 Bumps ModelContextProtocol from 2.0.0 to 2.2.0 Bumps ModelContextProtocol.AspNetCore from 2.0.0 to 2.2.0 --- updated-dependencies: - dependency-name: bunit dependency-version: 2.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-and-patch - dependency-name: Microsoft.Agents.AI dependency-version: 1.18.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-and-patch - dependency-name: Microsoft.AspNetCore.OpenApi dependency-version: 10.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-minor-and-patch - dependency-name: Microsoft.AspNetCore.SignalR.Client dependency-version: 10.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-minor-and-patch - dependency-name: Microsoft.Extensions.AI dependency-version: 10.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-and-patch - dependency-name: Microsoft.Extensions.AI dependency-version: 10.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-and-patch - dependency-name: Microsoft.Extensions.Configuration.Binder dependency-version: 10.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-minor-and-patch - dependency-name: Microsoft.Extensions.DependencyInjection.Abstractions dependency-version: 10.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-minor-and-patch - dependency-name: Microsoft.Extensions.Http dependency-version: 10.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-minor-and-patch - dependency-name: Microsoft.Extensions.Logging.Abstractions dependency-version: 10.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-minor-and-patch - dependency-name: Microsoft.Extensions.Logging.Abstractions dependency-version: 10.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-minor-and-patch - dependency-name: ModelContextProtocol dependency-version: 2.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-and-patch - dependency-name: ModelContextProtocol dependency-version: 2.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-and-patch - dependency-name: ModelContextProtocol.AspNetCore dependency-version: 2.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-and-patch - dependency-name: ModelContextProtocol.AspNetCore dependency-version: 2.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-08-24T05:37:53Z