Skip to content

build: Bump the nuget-deps group with 13 updates - #690

Open
dependabot[bot] wants to merge 1 commit into
dependabotchangesfrom
dependabot/nuget/App/backend-api/Microsoft.GS.DPS.Host/dependabotchanges/nuget-deps-9dc73420db
Open

build: Bump the nuget-deps group with 13 updates#690
dependabot[bot] wants to merge 1 commit into
dependabotchangesfrom
dependabot/nuget/App/backend-api/Microsoft.GS.DPS.Host/dependabotchanges/nuget-deps-9dc73420db

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 1, 2026

Copy link
Copy Markdown
Contributor

Updated AutoMapper from 16.1.1 to 16.2.0.

Release notes

Sourced from AutoMapper's releases.

16.2.0

What's Changed

New Contributors

Full Changelog: LuckyPennySoftware/AutoMapper@v15.1.1...v16.2.0

Commits viewable in compare view.

Updated Azure.Data.AppConfiguration from 1.9.0 to 1.11.0.

Release notes

Sourced from Azure.Data.AppConfiguration's releases.

1.11.0

1.11.0 (2026-07-23)

Features Added

  • Improved authentication in sovereign clouds (such as Bleu) when using a TokenCredential. Previously, if you did not set ConfigurationClientOptions.Audience, the client fell back to the Azure Public Cloud audience and authentication could fail. The client now infers the correct Microsoft Entra audience from your App Configuration endpoint, so no additional configuration is required. Public, Azure China, and Azure US Government endpoints continue to work as before, and you can still set Audience explicitly to override the inferred value.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration from 10.0.8 to 10.0.10.

Release notes

Sourced from Microsoft.Extensions.Configuration's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.AzureAppConfiguration from 8.5.0 to 8.6.0.

Release notes

Sourced from Microsoft.Extensions.Configuration.AzureAppConfiguration's releases.

8.6.0

What's Changed

Full Changelog: Azure/AppConfiguration-DotnetProvider@8.5.0...8.6.0

8.6.0-preview

What's Changed

Full Changelog: Azure/AppConfiguration-DotnetProvider@8.5.0-preview...8.6.0-preview

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.Json from 10.0.8 to 10.0.10.

Release notes

Sourced from Microsoft.Extensions.Configuration.Json's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Options from 10.0.8 to 10.0.10.

Release notes

Sourced from Microsoft.Extensions.Options's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Maui.Graphics from 10.0.70 to 10.0.90.

Release notes

Sourced from Microsoft.Maui.Graphics's releases.

10.0.90

.NET MAUI 10.0.90 Release Notes

.NET MAUI 10.0.90 introduces significant improvements across all platforms with focus on quality, performance, and developer experience. This release includes 231 commits with various improvements, bug fixes, and enhancements.

Activityindicator

Ai Agents

Animation

API

Blazor

Border

... (truncated)

10.0.80

.NET MAUI 10.0.80 Release Notes

.NET MAUI 10.0.80 introduces significant improvements across all platforms with focus on quality, performance, and developer experience. This release includes 112 commits with various improvements, bug fixes, and enhancements.

Ai Agents

Button

CollectionView

... (truncated)

10.0.71

What's Changed

Full Changelog: dotnet/maui@10.0.70...10.0.71

Commits viewable in compare view.

Updated Microsoft.Maui.Graphics.Skia from 10.0.70 to 10.0.90.

Release notes

Sourced from Microsoft.Maui.Graphics.Skia's releases.

10.0.90

.NET MAUI 10.0.90 Release Notes

.NET MAUI 10.0.90 introduces significant improvements across all platforms with focus on quality, performance, and developer experience. This release includes 231 commits with various improvements, bug fixes, and enhancements.

Activityindicator

Ai Agents

Animation

API

Blazor

Border

... (truncated)

10.0.80

.NET MAUI 10.0.80 Release Notes

.NET MAUI 10.0.80 introduces significant improvements across all platforms with focus on quality, performance, and developer experience. This release includes 112 commits with various improvements, bug fixes, and enhancements.

Ai Agents

Button

CollectionView

... (truncated)

10.0.71

What's Changed

Full Changelog: dotnet/maui@10.0.70...10.0.71

Commits viewable in compare view.

Updated Microsoft.SemanticKernel from 1.77.0 to 1.78.0.

Release notes

Sourced from Microsoft.SemanticKernel's releases.

1.78.0

Changes:

  • 35ba23e1b3092271c778ca057afe1a796e16e70e .Net: Update package version to 1.78.0 (#​14142)
  • e6c9673684ca03621885083faff1644e1f42695e .Net: Disable automatic HTTP redirects in HttpPlugin and WebFileDownloadPlugin default clients (#​14132)
  • f25753be0a126138d2eea39b0ca2985252dde25a Bump Scriban from 7.2.0 to 7.2.5 to fix NU1902 vulnerability (#​14133)
  • dfc5227227352e7cf4b11de1d9b8e49ebc7b43ff .Net: Update .NET SDK to 10.0.301 (#​14119)
  • cf9af8b966841e8f16d528bd0f2c69c51213b68d .Net: Bump axios to 1.16.0 and form-data to 4.0.6 in /dotnet/samples/Demos/ProcessFrameworkWithSignalR (#​13858)
See More
  • e99c633fba9e4005bdb9b90a1f5441945b781040 .Net: Harden file path validation in Core, Document, and Web plugins (#​14118)
  • 99d1953e935bd88a4cc993cbad9485703734f1b5 Bump axios from 1.13.2 to 1.16.0 in /dotnet/samples/Demos/ProcessFrameworkWithSignalR/src/ProcessFramework.Aspire.SignalR.ReactFrontend (#​14044) [ #​10795, #​10822, #​10825, #​10729, #​7378, #​10745, #​10810, #​10802, #​6485, #​10680, #​6897, #​10794, #​10800, #​6241, #​10708, #​10819, #​7149, #​10772, #​10806, #​7260, #​10787, #​10724, #​7276, #​7414, #​6389, #​6460, #​10833, #​10588, #​7419, #​10820, #​10791, #​10796, #​10821, #​10782, #​10759, #​10804, #​10785, #​10813, #​10814, #​10790, #​10834 ]
  • 82f244233b89d38bf5e424ca409caa46f14490e6 .Net: Update SK to use MEVD packages and move MEVD projects out of main solution (#​14117)
  • 8ce2bcc07f0ce5e56052ffd4abd0332cc8fc08e5 .Net: Bump Aspire.Hosting.Azure.CognitiveServices from 13.0.0 to 13.3.0 (#​13996)
  • 20be253d7b4a41c8943f36addd8b6365bdcf7299 .Net: Bump esbuild, @​vitejs/plugin-react, vite, and transitive lockfile deps in /dotnet/samples/Demos/ProcessFrameworkWithSignalR/src/ProcessFramework.Aspire.SignalR.ReactFrontend (#​14070)
  • 445fd0ea5364622d30069510f639032ecea6eaff .Net: Bump Aspire.Azure.Search.Documents from 9.5.1 to 13.3.0 (#​13994)
  • 367c75f4ff972e7a2281dcae4bd74800c5eef9eb .Net: Bump minimatch from 3.1.2 to 3.1.5 in /dotnet/samples/Demos/ProcessWithCloudEvents/ProcessWithCloudEvents.Client (#​13604)
  • 6209c77fd52d6ff99d7797d66639055b36a91ae3 .Net: Bump @​babel/core from 7.26.10 to 7.29.7 in /dotnet/samples/Demos/ProcessWithCloudEvents/ProcessWithCloudEvents.Client (#​14083) [ #​18014, #​18001, #​17998, #​17992, #​17974, #​17923, #​17931, #​17915, #​17788, #​17739, #​17606, #​17592, #​17589 ]
  • 1ad0b7501bd9c8f8dfbafb7c1aa69fab1ba4cd28 Bump Aspire.Hosting.AppHost from 13.0.0 to 13.3.0 (#​13995)
  • 56422ada8aa95702aab5c969805c3395dd2f5022 .Net: Bump follow-redirects from 1.15.11 to 1.16.0 in /dotnet/samples/Demos/ProcessFrameworkWithSignalR/src/ProcessFramework.Aspire.SignalR.ReactFrontend (#​13877)
  • a5e8f9b43230675c86dcb7c3ff5021914537f8be .Net: Bump form-data from 4.0.5 to 4.0.6 in /dotnet/samples/Demos/ProcessFrameworkWithSignalR/src/ProcessFramework.Aspire.SignalR.ReactFrontend (#​14082)
  • 7fd75c3c73ac84106ce2883bae32b50c99378e40 .Net: fix: prevent duplicate "null" in JSON Schema type arrays for nullable parameters (#​13635) [ #​13527 ]
  • f8c757b218cfe70cd9bc0d921eb0828d290cbe56 Fix MessagePack high severity vulnerability (#​14079)

This list of changes was auto generated.

Commits viewable in compare view.

Updated MongoDB.Bson from 3.9.0 to 3.10.0.

Release notes

Sourced from MongoDB.Bson's releases.

3.10.0

This is the general availability release for the 3.10.0 version of the driver.

[!IMPORTANT]

In-Use Encryption String (renamed from Text) API GA

The GA API requires mongodb server version 9.0. The preview API can continue to be used with pre-9.0 server versions.

The main new features in 3.10.0 include:

  • CSHARP-6017: Support LINQ LeftJoin for joins and includes
  • CSHARP-3791: Allow hint for unacknowledged writes using OP_MSG when supported by the server
  • CSHARP-5826: Add $top, $bottom, $topN and $bottomN expression operators
  • CSHARP-6024: Support ReadOnlySet Serialization
  • CSHARP-6020: Add builders for the doesNotAffect field for in, range, equals and compound Atlas Search operators
  • CSHARP-4216: Support $topN and similar accumulators in $setWindowFields
  • CSHARP-5750: Add support for new QE prefix/substring/suffix aggregation expression operators
  • CSHARP-5495: Support $concatArrays and $setUnion aggregation accumulators
  • CSHARP-6041: Add $setWindowFields support for the $minMaxScaler window operator
  • CSHARP-6091: Support checked arithmetic operators in LINQ translation
  • CSHARP-5984: Add QE prefix+suffix GA and rename API to string
  • CSHARP-6105: Add QE substring GA
  • CSHARP-5693: Allow Instantiated MongoClients to Send Client Metadata On-Demand

Improvements:

  • CSHARP-6094: Use minimum supported wire version for CompatibilityLevel when null
  • CSHARP-5964: Investigate a way to read into BsonBinaryData property if it's missed in the stored document
  • CSHARP-6093: Compile one-shot LINQ eval lambdas with preferInterpretation
  • CSHARP-6096: Optimize AsyncCursor<> disposal to consume less resources

Fixes:

  • CSHARP-5816: Insonsistent behavior of EnsureNoMemberMapConflicts for discriminator convention
  • CSHARP-5740: Remove duplicate read concern for operations in snapshot sessions
  • CSHARP-5846: Global GuidSerializer settings ignored for object-typed properties
  • CSHARP-5658: Queries using Equals with different types throw
  • CSHARP-6066: FilteredMongoCollectionBase.FindOneAndUpdate throws NullReferenceException when options is null
  • CSHARP-6080: Pool clear with closeInUseConnections leaks raw ObjectDisposedException to the application instead of a retryable connection error

Maintenance:

  • CSHARP-5746: Update $lookup prose test for MONGOCRYPT-793
  • CSHARP-6062: Add empty permissions section to PR workflow
  • CSHARP-6007: Mark Server version 4.2 as EOL from driver's PoV (Min server version as 4.4, minWireVersion as 9)
  • CSHARP-5992: Add LINQ translation benchmark suite
  • CSHARP-6030: Add case and diacritic sensitivity prose tests for text explicit encryption
  • CSHARP-5943: Add per-area AGENTS.md files and reviewer sub-agents
  • CSHARP-6071: Script to create a local Docker container with a single replica set
  • CSHARP-6100: Clarify status and semver treatment for shipped IWM driver APIs

The full list of issues resolved in this release is available at CSHARP JIRA project.
... (truncated)

Commits viewable in compare view.

Updated MongoDB.Driver from 3.9.0 to 3.10.0.

Release notes

Sourced from MongoDB.Driver's releases.

3.10.0

This is the general availability release for the 3.10.0 version of the driver.

[!IMPORTANT]

In-Use Encryption String (renamed from Text) API GA

The GA API requires mongodb server version 9.0. The preview API can continue to be used with pre-9.0 server versions.

The main new features in 3.10.0 include:

  • CSHARP-6017: Support LINQ LeftJoin for joins and includes
  • CSHARP-3791: Allow hint for unacknowledged writes using OP_MSG when supported by the server
  • CSHARP-5826: Add $top, $bottom, $topN and $bottomN expression operators
  • CSHARP-6024: Support ReadOnlySet Serialization
  • CSHARP-6020: Add builders for the doesNotAffect field for in, range, equals and compound Atlas Search operators
  • CSHARP-4216: Support $topN and similar accumulators in $setWindowFields
  • CSHARP-5750: Add support for new QE prefix/substring/suffix aggregation expression operators
  • CSHARP-5495: Support $concatArrays and $setUnion aggregation accumulators
  • CSHARP-6041: Add $setWindowFields support for the $minMaxScaler window operator
  • CSHARP-6091: Support checked arithmetic operators in LINQ translation
  • CSHARP-5984: Add QE prefix+suffix GA and rename API to string
  • CSHARP-6105: Add QE substring GA
  • CSHARP-5693: Allow Instantiated MongoClients to Send Client Metadata On-Demand

Improvements:

  • CSHARP-6094: Use minimum supported wire version for CompatibilityLevel when null
  • CSHARP-5964: Investigate a way to read into BsonBinaryData property if it's missed in the stored document
  • CSHARP-6093: Compile one-shot LINQ eval lambdas with preferInterpretation
  • CSHARP-6096: Optimize AsyncCursor<> disposal to consume less resources

Fixes:

  • CSHARP-5816: Insonsistent behavior of EnsureNoMemberMapConflicts for discriminator convention
  • CSHARP-5740: Remove duplicate read concern for operations in snapshot sessions
  • CSHARP-5846: Global GuidSerializer settings ignored for object-typed properties
  • CSHARP-5658: Queries using Equals with different types throw
  • CSHARP-6066: FilteredMongoCollectionBase.FindOneAndUpdate throws NullReferenceException when options is null
  • CSHARP-6080: Pool clear with closeInUseConnections leaks raw ObjectDisposedException to the application instead of a retryable connection error

Maintenance:

  • CSHARP-5746: Update $lookup prose test for MONGOCRYPT-793
  • CSHARP-6062: Add empty permissions section to PR workflow
  • CSHARP-6007: Mark Server version 4.2 as EOL from driver's PoV (Min server version as 4.4, minWireVersion as 9)
  • CSHARP-5992: Add LINQ translation benchmark suite
  • CSHARP-6030: Add case and diacritic sensitivity prose tests for text explicit encryption
  • CSHARP-5943: Add per-area AGENTS.md files and reviewer sub-agents
  • CSHARP-6071: Script to create a local Docker container with a single replica set
  • CSHARP-6100: Clarify status and semver treatment for shipped IWM driver APIs

The full list of issues resolved in this release is available at CSHARP JIRA project.
... (truncated)

Commits viewable in compare view.

Updated SkiaSharp.NativeAssets.Linux from 3.119.4 to 4.151.0.

Updated Swashbuckle.AspNetCore from 10.2.1 to 10.2.3.

Release notes

Sourced from Swashbuckle.AspNetCore's releases.

10.2.3

What's Changed

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.2.2...v10.2.3

10.2.2

What's Changed

New Contributors

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.2.1...v10.2.2

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build: Bump the nuget-deps group with 13 updates
10104d0 
Bumps AutoMapper from 16.1.1 to 16.2.0
Bumps Azure.Data.AppConfiguration from 1.9.0 to 1.11.0
Bumps Microsoft.Extensions.Configuration from 10.0.8 to 10.0.10
Bumps Microsoft.Extensions.Configuration.AzureAppConfiguration from 8.5.0 to 8.6.0
Bumps Microsoft.Extensions.Configuration.Json from 10.0.8 to 10.0.10
Bumps Microsoft.Extensions.Options from 10.0.8 to 10.0.10
Bumps Microsoft.Maui.Graphics from 10.0.70 to 10.0.90
Bumps Microsoft.Maui.Graphics.Skia from 10.0.70 to 10.0.90
Bumps Microsoft.SemanticKernel from 1.77.0 to 1.78.0
Bumps MongoDB.Bson from 3.9.0 to 3.10.0
Bumps MongoDB.Driver from 3.9.0 to 3.10.0
Bumps SkiaSharp.NativeAssets.Linux from 3.119.4 to 4.151.0
Bumps Swashbuckle.AspNetCore from 10.2.1 to 10.2.3

---
updated-dependencies:
- dependency-name: AutoMapper
  dependency-version: 16.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-deps
- dependency-name: Azure.Data.AppConfiguration
  dependency-version: 1.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-deps
- dependency-name: Microsoft.Extensions.Configuration
  dependency-version: 10.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-deps
- dependency-name: Microsoft.Extensions.Configuration.AzureAppConfiguration
  dependency-version: 8.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-deps
- dependency-name: Microsoft.Extensions.Configuration.Json
  dependency-version: 10.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-deps
- dependency-name: Microsoft.Extensions.Options
  dependency-version: 10.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-deps
- dependency-name: Microsoft.Maui.Graphics
  dependency-version: 10.0.90
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-deps
- dependency-name: Microsoft.Maui.Graphics.Skia
  dependency-version: 10.0.90
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-deps
- dependency-name: Microsoft.SemanticKernel
  dependency-version: 1.78.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-deps
- dependency-name: MongoDB.Bson
  dependency-version: 3.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-deps
- dependency-name: MongoDB.Driver
  dependency-version: 3.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-deps
- dependency-name: SkiaSharp.NativeAssets.Linux
  dependency-version: 4.151.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-deps
- dependency-name: Swashbuckle.AspNetCore
  dependency-version: 10.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added .NET Pull requests that update .net code dependencies Pull requests that update a dependency file labels Aug 1, 2026
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file .NET Pull requests that update .net code labels Aug 1, 2026
This was referenced Aug 1, 2026
Closed
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@Avijit-Microsoft Avijit-Microsoft Awaiting requested review from Avijit-Microsoft Avijit-Microsoft is a code owner
@Roopan-Microsoft Roopan-Microsoft Awaiting requested review from Roopan-Microsoft Roopan-Microsoft is a code owner
@Prajwal-Microsoft Prajwal-Microsoft Awaiting requested review from Prajwal-Microsoft Prajwal-Microsoft is a code owner
@Vinay-Microsoft Vinay-Microsoft Awaiting requested review from Vinay-Microsoft Vinay-Microsoft is a code owner
@aniaroramsft aniaroramsft Awaiting requested review from aniaroramsft aniaroramsft is a code owner
@toherman-msft toherman-msft Awaiting requested review from toherman-msft toherman-msft is a code owner
@nchandhi nchandhi Awaiting requested review from nchandhi nchandhi is a code owner
@dgp10801 dgp10801 Awaiting requested review from dgp10801 dgp10801 is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .net code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants