Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 20, 2026

Updated Microsoft.AspNetCore.Mvc.Testing from 10.0.1 to 10.0.2.

Release notes

Sourced from Microsoft.AspNetCore.Mvc.Testing's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration from 10.0.1 to 10.0.2.

Release notes

Sourced from Microsoft.Extensions.Configuration's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.Binder from 10.0.1 to 10.0.2.

Release notes

Sourced from Microsoft.Extensions.Configuration.Binder's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.EnvironmentVariables from 10.0.1 to 10.0.2.

Release notes

Sourced from Microsoft.Extensions.Configuration.EnvironmentVariables's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.DependencyInjection from 10.0.1 to 10.0.2.

Release notes

Sourced from Microsoft.Extensions.DependencyInjection's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Diagnostics.Testing from 10.1.0 to 10.2.0.

Release notes

Sourced from Microsoft.Extensions.Diagnostics.Testing's releases.

10.2.0

What's Changed

New Contributors

Full Changelog: dotnet/extensions@v10.1...v10.2.0

Commits viewable in compare view.

Updated Microsoft.Extensions.Options from 10.0.1 to 10.0.2.

Release notes

Sourced from Microsoft.Extensions.Options's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Options.DataAnnotations from 10.0.1 to 10.0.2.

Release notes

Sourced from Microsoft.Extensions.Options.DataAnnotations's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.TimeProvider.Testing from 10.1.0 to 10.2.0.

Release notes

Sourced from Microsoft.Extensions.TimeProvider.Testing's releases.

10.2.0

What's Changed

New Contributors

Full Changelog: dotnet/extensions@v10.1...v10.2.0

Commits viewable in compare view.

Updated Microsoft.SemanticKernel from 1.68.0 to 1.69.0.

Release notes

Sourced from Microsoft.SemanticKernel's releases.

1.69.0

Changes:

  • 3b61c786c9b4f9a8224f39f647859fd51af4c902 .Net: Version 1.69.0 (#​13460)
  • 1e1fb14d68eb67151473fe8a8e0cc0aef9f57ba1 Python: Bump Python version to 1.39.2 for a release (#​13459)
  • f511c965c1145a6dc0b19f4958a06cdbde6244da Python: inversed the filter logic for InMemory vector stores (#​13457)
  • c97c3e6aa7b805c4e0d8d07db479e82eb6102f7e .Net: Bump .Net packages, minor versions only (#​13452)
  • adb71bc63b2c77604ab8403c33fb638cd7d7ac1c Python: Bump to v1.39.1 for a release (#​13455)
  • e68f09c710043d2191eb9e766beb06e56ec1405d Python: adding collection to all for oracle (#​13412)
  • e50ba67f004eda257a07841ff36bd6526dbfc238 Python: improve the filtering of in-memory vector stores (#​13440)
  • dc0eefd8a3eba67481f6026f4d5bfa2a4bc4df46 .Net: Skip and AzureAIInference chat completion tests (#​13451)
  • 4a09cbdedc9437bdee7cf73e02a17c216035ed98 .Net: Add FunctionChoiceBehavior support to Google Gemini connector (#​13256) [ #​12702 ]
  • 0a9ee4051212a67d0c2f142205c3fb3f27eb26b6 .Net: Update AWS Vulnerable Package Dependencies (#​13449)
See More
  • dc7c1c048488a8b611b5382d0d7efe05608a9fa0 Python: Updated Copilot Studio README (#​13432)
  • 4e0ccb9c4369c3f3c0d4129c1c5fe7e85f360443 .Net: Switch MEVD MongoDB Driver to v3.51 (#​13370) [ #​11652, #​12707, #​10291 ]
  • 43da976c9b42548088e51e326b7df90bdc57a056 Bump react and react-dom versions to be 19.2.1 (#​13408)
  • 4ac376749dcc98ac8f9b0081e574b0d34684a35f Fix C# 14 Contains translation for MEVD providers (#​13407) [ #​13263, #​13395 ]
  • 0195778be25892cba507fe593d5592b71c2adf68 Updating SECURITY.ms to latest version. (#​13406)

This list of changes was auto generated.

Commits viewable in compare view.

Updated Microsoft.SemanticKernel.Abstractions from 1.68.0 to 1.69.0.

Release notes

Sourced from Microsoft.SemanticKernel.Abstractions's releases.

1.69.0

Changes:

  • 3b61c786c9b4f9a8224f39f647859fd51af4c902 .Net: Version 1.69.0 (#​13460)
  • 1e1fb14d68eb67151473fe8a8e0cc0aef9f57ba1 Python: Bump Python version to 1.39.2 for a release (#​13459)
  • f511c965c1145a6dc0b19f4958a06cdbde6244da Python: inversed the filter logic for InMemory vector stores (#​13457)
  • c97c3e6aa7b805c4e0d8d07db479e82eb6102f7e .Net: Bump .Net packages, minor versions only (#​13452)
  • adb71bc63b2c77604ab8403c33fb638cd7d7ac1c Python: Bump to v1.39.1 for a release (#​13455)
  • e68f09c710043d2191eb9e766beb06e56ec1405d Python: adding collection to all for oracle (#​13412)
  • e50ba67f004eda257a07841ff36bd6526dbfc238 Python: improve the filtering of in-memory vector stores (#​13440)
  • dc0eefd8a3eba67481f6026f4d5bfa2a4bc4df46 .Net: Skip and AzureAIInference chat completion tests (#​13451)
  • 4a09cbdedc9437bdee7cf73e02a17c216035ed98 .Net: Add FunctionChoiceBehavior support to Google Gemini connector (#​13256) [ #​12702 ]
  • 0a9ee4051212a67d0c2f142205c3fb3f27eb26b6 .Net: Update AWS Vulnerable Package Dependencies (#​13449)
See More
  • dc7c1c048488a8b611b5382d0d7efe05608a9fa0 Python: Updated Copilot Studio README (#​13432)
  • 4e0ccb9c4369c3f3c0d4129c1c5fe7e85f360443 .Net: Switch MEVD MongoDB Driver to v3.51 (#​13370) [ #​11652, #​12707, #​10291 ]
  • 43da976c9b42548088e51e326b7df90bdc57a056 Bump react and react-dom versions to be 19.2.1 (#​13408)
  • 4ac376749dcc98ac8f9b0081e574b0d34684a35f Fix C# 14 Contains translation for MEVD providers (#​13407) [ #​13263, #​13395 ]
  • 0195778be25892cba507fe593d5592b71c2adf68 Updating SECURITY.ms to latest version. (#​13406)

This list of changes was auto generated.

Commits viewable in compare view.

Updated Microsoft.SemanticKernel.Connectors.AzureOpenAI from 1.68.0 to 1.69.0.

Release notes

Sourced from Microsoft.SemanticKernel.Connectors.AzureOpenAI's releases.

1.69.0

Changes:

  • 3b61c786c9b4f9a8224f39f647859fd51af4c902 .Net: Version 1.69.0 (#​13460)
  • 1e1fb14d68eb67151473fe8a8e0cc0aef9f57ba1 Python: Bump Python version to 1.39.2 for a release (#​13459)
  • f511c965c1145a6dc0b19f4958a06cdbde6244da Python: inversed the filter logic for InMemory vector stores (#​13457)
  • c97c3e6aa7b805c4e0d8d07db479e82eb6102f7e .Net: Bump .Net packages, minor versions only (#​13452)
  • adb71bc63b2c77604ab8403c33fb638cd7d7ac1c Python: Bump to v1.39.1 for a release (#​13455)
  • e68f09c710043d2191eb9e766beb06e56ec1405d Python: adding collection to all for oracle (#​13412)
  • e50ba67f004eda257a07841ff36bd6526dbfc238 Python: improve the filtering of in-memory vector stores (#​13440)
  • dc0eefd8a3eba67481f6026f4d5bfa2a4bc4df46 .Net: Skip and AzureAIInference chat completion tests (#​13451)
  • 4a09cbdedc9437bdee7cf73e02a17c216035ed98 .Net: Add FunctionChoiceBehavior support to Google Gemini connector (#​13256) [ #​12702 ]
  • 0a9ee4051212a67d0c2f142205c3fb3f27eb26b6 .Net: Update AWS Vulnerable Package Dependencies (#​13449)
See More
  • dc7c1c048488a8b611b5382d0d7efe05608a9fa0 Python: Updated Copilot Studio README (#​13432)
  • 4e0ccb9c4369c3f3c0d4129c1c5fe7e85f360443 .Net: Switch MEVD MongoDB Driver to v3.51 (#​13370) [ #​11652, #​12707, #​10291 ]
  • 43da976c9b42548088e51e326b7df90bdc57a056 Bump react and react-dom versions to be 19.2.1 (#​13408)
  • 4ac376749dcc98ac8f9b0081e574b0d34684a35f Fix C# 14 Contains translation for MEVD providers (#​13407) [ #​13263, #​13395 ]
  • 0195778be25892cba507fe593d5592b71c2adf68 Updating SECURITY.ms to latest version. (#​13406)

This list of changes was auto generated.

Commits viewable in compare view.

Updated Microsoft.SemanticKernel.Connectors.OpenAI from 1.68.0 to 1.69.0.

Release notes

Sourced from Microsoft.SemanticKernel.Connectors.OpenAI's releases.

1.69.0

Changes:

  • 3b61c786c9b4f9a8224f39f647859fd51af4c902 .Net: Version 1.69.0 (#​13460)
  • 1e1fb14d68eb67151473fe8a8e0cc0aef9f57ba1 Python: Bump Python version to 1.39.2 for a release (#​13459)
  • f511c965c1145a6dc0b19f4958a06cdbde6244da Python: inversed the filter logic for InMemory vector stores (#​13457)
  • c97c3e6aa7b805c4e0d8d07db479e82eb6102f7e .Net: Bump .Net packages, minor versions only (#​13452)
  • adb71bc63b2c77604ab8403c33fb638cd7d7ac1c Python: Bump to v1.39.1 for a release (#​13455)
  • e68f09c710043d2191eb9e766beb06e56ec1405d Python: adding collection to all for oracle (#​13412)
  • e50ba67f004eda257a07841ff36bd6526dbfc238 Python: improve the filtering of in-memory vector stores (#​13440)
  • dc0eefd8a3eba67481f6026f4d5bfa2a4bc4df46 .Net: Skip and AzureAIInference chat completion tests (#​13451)
  • 4a09cbdedc9437bdee7cf73e02a17c216035ed98 .Net: Add FunctionChoiceBehavior support to Google Gemini connector (#​13256) [ #​12702 ]
  • 0a9ee4051212a67d0c2f142205c3fb3f27eb26b6 .Net: Update AWS Vulnerable Package Dependencies (#​13449)
See More
  • dc7c1c048488a8b611b5382d0d7efe05608a9fa0 Python: Updated Copilot Studio README (#​13432)
  • 4e0ccb9c4369c3f3c0d4129c1c5fe7e85f360443 .Net: Switch MEVD MongoDB Driver to v3.51 (#​13370) [ #​11652, #​12707, #​10291 ]
  • 43da976c9b42548088e51e326b7df90bdc57a056 Bump react and react-dom versions to be 19.2.1 (#​13408)
  • 4ac376749dcc98ac8f9b0081e574b0d34684a35f Fix C# 14 Contains translation for MEVD providers (#​13407) [ #​13263, #​13395 ]
  • 0195778be25892cba507fe593d5592b71c2adf68 Updating SECURITY.ms to latest version. (#​13406)

This list of changes was auto generated.

Commits viewable in compare view.

Updated SonarAnalyzer.CSharp from 10.17.0.131074 to 10.18.0.131500.

Release notes

Sourced from SonarAnalyzer.CSharp's releases.

10.18

This releases focuses on fixing the false-positives that are raised on code making use of the new features in C# 14.

Improvement

  • NET-2921 - Fix passthrough calculation in ModelBuilder
  • NET-2903 - Remove manual extension methods
  • NET-2895 - Cleanup handling of ParameterList of primary constructors

Task

  • NET-2917 - Update RSPEC before 10.18 release

False Positive

  • NET-2898 - Fix S2583/S2589 FP: Extension Members
  • NET-2877 - Fix S2225 FP: Extension member
  • NET-2832 - Fix S3063 FP: NullConditionalOperator
  • NET-2825 - Fix S1144 FP: Partial events
  • NET-2821 - Fix S3264 FP: Partial events
  • NET-2805 - Fix S1144 FP: S1144 Is confused by Debugger Display attribute
  • NET-2748 - Fix S3459 FP: NullConditional Assignment
  • NET-2716 - Fix S2325 FP: Field Keyword
  • NET-2712 - Fix S2953 FP: Extension block member
  • NET-2707 - Fix S3877 FP: Equals method without IEquatable
  • NET-2684 - Fix S7039 FP/FN: Null-conditional assignment
  • NET-2672 - Fix S3928 FP: Extension block
  • NET-2671 - Fix S2970 FP: Null Conditional Assignment
  • NET-2668 - Fix S3398 FP: On private methods in C#​14 extensions classes
  • NET-2644 - Fix S1144 FP: Always raises on private methods in extension block
  • NET-2621 - Fix S2325 FP: Incorrectly reports on C# 14 extensions
  • NET-2620 - Fix S4545 FP: Extension Methods
  • NET-2391 - Fix S1121 FP: Extract (null-forgiving) assignment from expression
  • NET-1914 - Fix S3264 FP: when using +=

False Negative

Commits viewable in compare view.

Updated xunit.analyzers from 1.26.0 to 1.27.0.

Release notes

Sourced from xunit.analyzers's releases.

No release notes found for this version range.

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Summary by CodeRabbit

Release Notes

  • Chores
    • Updated core framework and dependency packages to the latest stable versions for improved stability and performance.
    • Enhanced development tooling with updated testing and analysis packages.

✏️ Tip: You can customize this high-level summary in your review settings.

Bumps Microsoft.AspNetCore.Mvc.Testing from 10.0.1 to 10.0.2
Bumps Microsoft.Extensions.Configuration from 10.0.1 to 10.0.2
Bumps Microsoft.Extensions.Configuration.Binder from 10.0.1 to 10.0.2
Bumps Microsoft.Extensions.Configuration.EnvironmentVariables from 10.0.1 to 10.0.2
Bumps Microsoft.Extensions.DependencyInjection from 10.0.1 to 10.0.2
Bumps Microsoft.Extensions.Diagnostics.Testing from 10.1.0 to 10.2.0
Bumps Microsoft.Extensions.Options from 10.0.1 to 10.0.2
Bumps Microsoft.Extensions.Options.DataAnnotations from 10.0.1 to 10.0.2
Bumps Microsoft.Extensions.TimeProvider.Testing from 10.1.0 to 10.2.0
Bumps Microsoft.SemanticKernel from 1.68.0 to 1.69.0
Bumps Microsoft.SemanticKernel.Abstractions from 1.68.0 to 1.69.0
Bumps Microsoft.SemanticKernel.Connectors.AzureOpenAI from 1.68.0 to 1.69.0
Bumps Microsoft.SemanticKernel.Connectors.OpenAI from 1.68.0 to 1.69.0
Bumps SonarAnalyzer.CSharp from 10.17.0.131074 to 10.18.0.131500
Bumps xunit.analyzers from 1.26.0 to 1.27.0

---
updated-dependencies:
- dependency-name: Microsoft.AspNetCore.Mvc.Testing
  dependency-version: 10.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: Microsoft.Extensions.Configuration
  dependency-version: 10.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: Microsoft.Extensions.Configuration.Binder
  dependency-version: 10.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: Microsoft.Extensions.Configuration.EnvironmentVariables
  dependency-version: 10.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: Microsoft.Extensions.DependencyInjection
  dependency-version: 10.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: Microsoft.Extensions.Diagnostics.Testing
  dependency-version: 10.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: Microsoft.Extensions.Options
  dependency-version: 10.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: Microsoft.Extensions.Options.DataAnnotations
  dependency-version: 10.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: Microsoft.Extensions.TimeProvider.Testing
  dependency-version: 10.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: Microsoft.SemanticKernel
  dependency-version: 1.69.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: Microsoft.SemanticKernel.Abstractions
  dependency-version: 1.69.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: Microsoft.SemanticKernel.Connectors.AzureOpenAI
  dependency-version: 1.69.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: Microsoft.SemanticKernel.Connectors.OpenAI
  dependency-version: 1.69.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: SonarAnalyzer.CSharp
  dependency-version: 10.18.0.131500
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: xunit.analyzers
  dependency-version: 1.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Jan 20, 2026
@coderabbitai
Copy link
Contributor

coderabbitai bot commented Jan 20, 2026

Walkthrough

Central package versions are updated across the project. Microsoft.Extensions packages are bumped to 10.0.2, while diagnostic and testing utilities are upgraded to 10.2.0. Semantic Kernel packages advance to 1.69.0, and code analysis tools receive minor updates.

Changes

Cohort / File(s) Summary
Microsoft.Extensions packages
Directory.Packages.props
AspNetCore.Mvc.Testing, Configuration, Configuration.Binder, Configuration.EnvironmentVariables, DependencyInjection, Options, and Options.DataAnnotations all updated from 10.0.1 → 10.0.2
Microsoft.Extensions diagnostic/testing
Directory.Packages.props
Diagnostics.Testing and TimeProvider.Testing updated from 10.1.0 → 10.2.0
Microsoft.SemanticKernel packages
Directory.Packages.props
Core package, Abstractions, Connectors.AzureOpenAI, and Connectors.OpenAI all updated from 1.68.0 → 1.69.0
Code analysis and testing tools
Directory.Packages.props
SonarAnalyzer.CSharp updated 10.17.0.131074 → 10.18.0.131500; xunit.analyzers updated 1.26.0 → 1.27.0

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Possibly related PRs

  • Update Dependencies #155: Performs overlapping dependency version bumps for Microsoft.SemanticKernel and SonarAnalyzer.CSharp packages.
  • Upgrade to .NET 10 #172: Updates the same package version declarations across Microsoft.Extensions.\*, Microsoft.SemanticKernel, and testing utilities in the central package configuration.

Poem

🐰 Hop, hop—dependencies take flight,
Semantic Kernels shine so bright,
Extensions tuned to version new,
Analysis tools refreshed too! ✨

🚥 Pre-merge checks | ✅ 3
✅ Passed checks (3 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title accurately describes the main change: bumping 15 package dependencies in the all-dependencies group, which is the sole focus of this pull request.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.


Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@sonarqubecloud
Copy link

@elzik
Copy link
Owner

elzik commented Jan 20, 2026

@coderabbitai review

@coderabbitai
Copy link
Contributor

coderabbitai bot commented Jan 20, 2026

✅ Actions performed

Review triggered.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

@elzik elzik merged commit 2db3d6c into main Jan 20, 2026
12 checks passed
@elzik elzik deleted the dependabot/nuget/all-dependencies-7bfb11673a branch January 20, 2026 21:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant