Skip to content

.NET: Bump the aspire group with 2 updates - #10175

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/dotnet/aspire-1778fd901d
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/dotnet/aspire-1778fd901d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 8, 2026

Copy link
Copy Markdown
Contributor

Updated Aspire.Hosting from 13.6.3 to 13.6.4.

Release notes

Sourced from Aspire.Hosting's releases.

13.6.4

What's New in Aspire 13.6.4

Patch release for Aspire 13.6 that improves resource startup reliability, fixes Azure publishing with parameterized enum properties in TypeScript AppHosts, and tightens CLI diagnostic log permissions on Unix.

🐛 Fixes

  • 🖥️ Resources could fail to start after a DCP create request timed out — AppHost now checks whether a resource was created before retrying a timed-out or HTTP 504 request, avoiding a premature FailedToStart state when DCP completed the operation. API operations default to a 40-second timeout with an additional 20-second allowance before the first successful operation, and resource creation has a two-minute recovery budget. These limits can be configured through DcpPublisher:KubernetesApiTimeout, DcpPublisher:KubernetesInitializationAdditionalTimeout, and DcpPublisher:KubernetesCreateRecoveryTimeout. Established watch and log streams are not limited by these operation timeouts. Addresses startup timeouts reported in 13.6. Fixes #​20691. (#​20868, backport of #​20752, @​danegsta)

  • ☁️ TypeScript AppHosts could fail to publish parameterized Azure enum properties — Assigning a bicep().parameter(...) expression to an enum-valued provisioning property, such as an Azure Storage SKU name, now works instead of failing with a type-assignment error. Type checking for literal values and incompatible expression types is preserved. Fixes a scenario introduced with the Azure provisioning proxy feature in 13.6. (#​20767, backport of #​20557, @​sebastienros)

  • 🔒 CLI diagnostic logs now use owner-only permissions on Unix — Log files are restricted to owner read/write access (0600), including reused files, and the dedicated Aspire logs directory uses owner-only access (0700), repairing existing permissions when needed. Newly created custom log directories also use 0700; existing custom parent directories and Windows permission behavior are unchanged. Diagnostic logs can contain sensitive data, including dashboard login URLs, so review them before sharing. (#​21282, backport of #​21276, @​mitchdenny)


Full Changelog: v13.6.3...v13.6.4

Full commit: c89352703f78ae46de90fbf751ed8b52b77b89bf

Commits viewable in compare view.

Updated CommunityToolkit.Aspire.OllamaSharp from 13.6.0 to 13.6.1.

Release notes

Sourced from CommunityToolkit.Aspire.OllamaSharp's releases.

13.6.1

Small servicing release. Main one is bumping to Aspire 13.6.4 which means we don't have the MessagePack error when building.

A few small changes on other package and container versions, as well as expanding what Floci supports.

What's Changed

New Contributors

Full Changelog: CommunityToolkit/Aspire@v13.6.0...v13.6.1

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps Aspire.Hosting from 13.6.3 to 13.6.4
Bumps CommunityToolkit.Aspire.OllamaSharp from 13.6.0 to 13.6.1

---
updated-dependencies:
- dependency-name: Aspire.Hosting
  dependency-version: 13.6.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: aspire
- dependency-name: CommunityToolkit.Aspire.OllamaSharp
  dependency-version: 13.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: aspire
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the .NET Usage: [Issues, PRs], Target: .Net label Nov 8, 2026
@dependabot dependabot Bot added the dependencies Usage: [Issues, PRs], Target: dependencies in the project label Nov 8, 2026
Copilot AI balanced review requested due to automatic review settings November 8, 2026 08:57
@dependabot
dependabot Bot deployed to github-app-auth November 8, 2026 08:57 Active
@dependabot
dependabot Bot deployed to github-app-auth November 8, 2026 08:57 Active
@github-actions github-actions Bot changed the title Bump the aspire group with 2 updates .NET: Bump the aspire group with 2 updates Nov 8, 2026

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Note

Copilot could not run the full agentic suite for this review because it was automatically requested on a bot-authored pull request. Request a review from Copilot under Reviewers to retry with the full agentic suite. Improved support for bot-authored pull requests is coming soon.

Copilot review overview

1 open issue
What changed in this PR

Updates centrally-managed .NET package versions to pick up the latest Aspire SDK patch and a CommunityToolkit Aspire patch.

Changes:

  • Bump AspireAppHostSdkVersion from 13.6.3 to 13.6.4
  • Bump CommunityToolkit.Aspire.OllamaSharp from 13.6.0 to 13.6.1
File Description
dotnet/​Directory.Packages.props Updates centralized package version pins for Aspire and CommunityToolkit Aspire.

Review effort: Lite

<PackageVersion Include="Aspire.Hosting.Azure.CognitiveServices" Version="$(AspireAppHostSdkVersion)" />
<PackageVersion Include="Aspire.Microsoft.Azure.Cosmos" Version="$(AspireAppHostSdkVersion)" />
<PackageVersion Include="CommunityToolkit.Aspire.OllamaSharp" Version="13.6.0" />
<PackageVersion Include="CommunityToolkit.Aspire.OllamaSharp" Version="13.6.1" />

This branch was successfully deployed

1 active deployment
github-app-auth — 417880fe Deployed Nov 8, 2026 by dependabot[bot] via team_check #8954
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Usage: [Issues, PRs], Target: dependencies in the project .NET Usage: [Issues, PRs], Target: .Net

Projects

None yet

Development

Successfully merging this pull request may close these issues.

A single timed-out or 504 DCP Create call permanently fails the resource (FailedToStart); not retried since 13.6.0

1 participant