Bump the dotnet group with 5 updates

[dependabot]

Updated Microsoft.Extensions.AI from 10.8.3 to 10.9.0.

Release notes

Sourced from Microsoft.Extensions.AI's releases.

10.9.0

Version 10.9.0 is headlined by changes in these areas:

• AI: New experimental routing APIs center on the abstract RoutingChatClient base class, with SemanticRoutingChatClient as a concrete semantic-routing implementation. Separately, the abstract FailoverChatClient specialization and its concrete OrderedFailoverChatClient implementation add failover routing.
• AI Evaluation: The generated report gains redesigned Overview, Cases, History, and Comparison views.
• ASP.NET Core and HTTP diagnostics: The release adds HTTP request latency log enrichment and fixes configuration binding, response-body logging, request-path redaction, and resilience package version handling.
• Source-generated logging and service discovery: Fixes cover classification type qualification, thread-local state cleanup, and DNS query suffix handling.

Experimental API Changes

New Experimental APIs

• New experimental API: HTTP request latency log enrichment (EXTEXP0013) #​7602
• New experimental API: Chat client routing and failover (MEAI001) #​7662

What's Changed

AI (Microsoft.Extensions.AI, Microsoft.Extensions.AI.Abstractions, and Microsoft.Extensions.AI.OpenAI)

• Add extensible chat client routing #​7662 by @​joshuajyue (co-authored by @​Copilot)
• Pass the request's options to the selected client #​7685 by @​joshuajyue (co-authored by @​jozkee @​Copilot)
• AI.Abstractions: fix ExcludeFromSchema dropped under concurrent AIFunction creation #​7677 by @​jozkee (co-authored by @​Copilot)
• Cap OpenAI dependency version (b10f9c0) by @​jeffhandley (co-authored by @​Copilot)

Note: Microsoft.Extensions.AI.OpenAI constrains its dependency for OpenAI to 2.12.x, preventing OpenAI updates to 2.13.0+ due to an incompatibility. We expect to release Microsoft.Extensions.AI.OpenAI version 10.9.1 during the week of August 17 to address this issue.

HTTP Resilience and Diagnostics (Microsoft.Extensions.Http.Resilience and Microsoft.Extensions.Http.Diagnostics)

• Fix Grpc.Net.ClientFactory version range check - Fixes #​7565 #​7566 by @​Ghost93
• Fix response body logging under debugger #​7678 by @​Rimobul
• Redact outgoing path when route is unknown #​7687 by @​Rimobul
• Fix HTTP client logging config binding #​7691 by @​Rimobul

ASP.NET Core Extensions (Microsoft.AspNetCore.Diagnostics.Middleware)

• Rename HttpLatencyTelemetry extensions class and drop redundant TFM guard #​7645 by @​EasyL0ver (co-authored by @​Copilot)
• Add HTTP request latency log enricher (experimental) #​7602 by @​EasyL0ver (co-authored by @​Copilot)

Logging Source Generator (Microsoft.Gen.Logging)

• [Microsoft.Gen.Logging] Clear thread-local state when logging throws #​7682 by @​Rimobul
• [Microsoft.Gen.Logging] Fully qualify classification types #​7689 by @​Rimobul

AI Evaluation (Microsoft.Extensions.AI.Evaluation.Reporting)

• [Microsoft.Extensions.AI.Evaluation.Reporting] Evaluation report redesign #​7609 by @​grafanaKibana

Project Templates (Microsoft.McpServer.ProjectTemplates)

• Remove MCP server project template #​7680 by @​jeffhandley (co-authored by @​Copilot)

... (truncated)

10.8.4

This servicing update refreshes the .NET AI project templates ahead of the July 30, 2026 retirement of GitHub Models — removing the GitHub Models provider option and updating template dependencies.

As a result, both the AI Chat Web (aichatweb) and AI Agent Web API (aiagent-webapi) templates now require the AI service provider to be chosen explicitly via --provider; there is no longer a default. One of the following must be selected:

• --provider azureopenai — Azure OpenAI
• --provider ollama — Ollama (for local development)
• --provider openai — OpenAI Platform

Packages in this release

Package	Version
Microsoft.Extensions.AI.Templates	10.8.4-preview.3.26379.3
Microsoft.Agents.AI.ProjectTemplates	1.13.0-preview.1.26379.3

What's Changed

Project templates

• Removed the GitHub Models provider from the AI Chat Web and AI Agent Web API templates, ahead of GitHub Models being fully retired on July 30, 2026. The --provider option is now required with no default (#​7667).
• Updated AI template dependencies — bumped Aspire.Hosting.AppHost to 13.4.6 and CommunityToolkit.VectorData.SqliteVec to 1.0.0-preview.4 (aligned System.Linq.AsyncEnumerable to 10.0.9), replacing earlier workaround package pins (#​7639).

Full Changelog

• dotnet/extensions@v10.8.3...v10.8.4

Commits viewable in compare view.

Updated Microsoft.Extensions.Caching.Memory from 10.0.10 to 10.0.11.

Release notes

Sourced from Microsoft.Extensions.Caching.Memory's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated OllamaSharp from 5.4.27 to 5.4.30.

Release notes

Sourced from OllamaSharp's releases.

5.4.30

What's Changed

What's Changed

• Preserve message identity in MEAI chat streams (#​359) by @​awaescher in Preserve message identity in MEAI chat streams (#359) awaescher/OllamaSharp#393

Full Changelog: awaescher/OllamaSharp@5.4.29...5.4.30

5.4.29

What's Changed

What's Changed

• Map embedding context size from MEAI options (#​377) by @​awaescher in Map embedding context size from MEAI options (#377) awaescher/OllamaSharp#392

Full Changelog: awaescher/OllamaSharp@5.4.28...5.4.29

5.4.28

What's Changed

What's Changed

• Fix model selection when unloading a model (#​386) by @​awaescher in Fix model selection when unloading a model (#386) awaescher/OllamaSharp#391

Full Changelog: awaescher/OllamaSharp@5.4.27...5.4.28

Commits viewable in compare view.

Updated OpenTelemetry.Exporter.Console from 1.17.0 to 1.18.0.

Release notes

Sourced from OpenTelemetry.Exporter.Console's releases.

1.18.0

For highlights and announcements pertaining to this release see: Release Notes > 1.18.0.

The following changes are from the previous release 1.17.0.

• NuGet: OpenTelemetry v1.18.0

  • Fixed self-diagnostics log lines being silently dropped when an event message or parameter contained enough 3-byte UTF-8 characters to overflow the internal buffer estimate. Such content is now truncated.
    (#​7543)

  • Fixed activity creation throwing when multiple tracer providers return a sampler attribute with the same key.
    (#​7558)

  • Added the otel.sdk.processor.log.processed SDK self-observability metric.
    (#​7486)

  • Added the otel.sdk.processor.span.processed SDK self-observability metric.
    (#​7598)

  • BatchActivityExportProcessor and SimpleActivityExportProcessor no longer forward spans to the exporter once Shutdown has been called, and BatchActivityExportProcessor.Shutdown now waits for in-flight OnEnd calls to finish enqueueing before flushing.
    (#​7598)

  • Fix logger, meter and tracer providers leaking background threads if an exception is thrown by their constructor after resource creation.
    (#​7615)

  • CircularBufferBuckets.Copy optimized to use bulk array copies.
    (#​7670)

  • Restored configured MaxScale after delta exponential histogram collection.
    (#​7671)

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Api v1.18.0

  • Avoid formatting exceptions and creating exception attributes when RecordException is called on a span that is not recorded.
    (#​7669)

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Api.ProviderBuilderExtensions v1.18.0

  No notable changes.

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Exporter.Console v1.18.0

  • Added support for serializing attribute values that are key/value lists (IEnumerable<KeyValuePair<string, object?>>). These attributes will be serialized as JSON objects.
    (#​7015)

... (truncated)

1.18.0-rc.1

The following changes are from the previous release 1.17.0.

• NuGet: OpenTelemetry v1.18.0-rc.1

  • Fixed self-diagnostics log lines being silently dropped when an event message or parameter contained enough 3-byte UTF-8 characters to overflow the internal buffer estimate. Such content is now truncated.
    (#​7543)

  • Fixed activity creation throwing when multiple tracer providers return a sampler attribute with the same key.
    (#​7558)

  • Added the otel.sdk.processor.log.processed SDK self-observability metric.
    (#​7486)

  • Added the otel.sdk.processor.span.processed SDK self-observability metric.
    (#​7598)

  • BatchActivityExportProcessor and SimpleActivityExportProcessor no longer forward spans to the exporter once Shutdown has been called, and BatchActivityExportProcessor.Shutdown now waits for in-flight OnEnd calls to finish enqueueing before flushing.
    (#​7598)

  • Fix logger, meter and tracer providers leaking background threads if an exception is thrown by their constructor after resource creation.
    (#​7615)

  • CircularBufferBuckets.Copy optimized to use bulk array copies.
    (#​7670)

  • Restored configured MaxScale after delta exponential histogram collection.
    (#​7671)

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Api v1.18.0-rc.1

  • Avoid formatting exceptions and creating exception attributes when RecordException is called on a span that is not recorded.
    (#​7669)

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Api.ProviderBuilderExtensions v1.18.0-rc.1

  No notable changes.

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Exporter.Console v1.18.0-rc.1

  • Added support for serializing attribute values that are key/value lists (IEnumerable<KeyValuePair<string, object?>>). These attributes will be serialized as JSON objects.
    (#​7015)

  See CHANGELOG for details.

... (truncated)

1.18.0-beta.1

The following changes are from the previous release 1.17.0-beta.1.

• NuGet: OpenTelemetry.Exporter.Prometheus.AspNetCore v1.18.0-beta.1

  • Fix concurrent scrapes returning an empty response under contention. Now the exporter will return an HTTP 500 error instead.
    (#​7571)

  • Waiting for concurrent scrapes to finish before collecting no longer blocks, which could stall concurrent scrapes being waited on.
    (#​7571)

  • Fixed the interaction between PrometheusAspNetCoreOptions.TranslationStrategy and content negotiation. The configured strategy is now applied before content negotiation, instead of the negotiated escaping scheme replacing the strategy's, and the Content-Type header now reports the escaping scheme that was applied rather than the one that was negotiated.
    (#​7610)

  • Fixed metric values and histogram bucket bounds being written with 17 significant digits instead of their shortest round-trippable representation.
    (#​7589)

  • Fixed the canonical representation used for histogram le and summary quantile label values falling back to 17 significant digits incorrectly.
    (#​7589)

  • Fixed a race where a slow scrape could return an HTTP 200 instead of 408.
    (#​7615)

  • Updated OpenTelemetry core component version(s) to 1.18.0.
    (#​7674)

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Exporter.Prometheus.HttpListener v1.18.0-beta.1

  • Fix concurrent scrapes returning an empty response under contention. Now the exporter will return an HTTP 500 error instead.
    (#​7571)

  • Waiting for concurrent scrapes to finish before collecting no longer blocks, which could stall concurrent scrapes being waited on.
    (#​7571)

  • A scrape which is still collecting when the listener is disposed now returns an HTTP 503 response.
    (#​7587)

  • Shutting down the listener no longer waits indefinitely for its request processing loop to stop, and no longer throws if the loop faulted.
    (#​7587)

  • Fixed the interaction between PrometheusHttpListenerOptions.TranslationStrategy and content negotiation. The configured strategy is now applied before content negotiation, instead of the negotiated escaping scheme replacing the strategy's, and the Content-Type header now reports the escaping scheme that was applied rather than the one that was negotiated.
    (#​7610)

  • Fixed metric values and histogram bucket bounds being written with 17 significant digits instead of their shortest round-trippable representation.
    (#​7589)

  • Fixed the canonical representation used for histogram le and summary quantile label values falling back to 17 significant digits incorrectly.
    (#​7589)

... (truncated)

Commits viewable in compare view.

Updated System.Threading.RateLimiting from 10.0.10 to 10.0.11.

Release notes

Sourced from System.Threading.RateLimiting's releases.

No release notes found for this version range.

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

---

Summary by cubic

Bumps Microsoft.Extensions.AI, Microsoft.Extensions.Caching.Memory, OllamaSharp, OpenTelemetry.Exporter.Console, and System.Threading.RateLimiting in the AI docs snippets to their latest versions. The snippet code itself is unchanged.

Notable upstream changes

• Microsoft.Extensions.AI 10.9.0 adds experimental chat routing and failover APIs.
• OpenTelemetry.Exporter.Console 1.18.0 serializes key/value list attribute values as JSON objects.
• OllamaSharp 5.4.30 fixes model selection, embedding context size, and message identity.

^{Written for commit d4efa49. Summary will update on new commits.}