Bump AwesomeAssertions and 3 others by dependabot[bot] · Pull Request #450 · ptr727/Utilities

dependabot · 2026-08-29T17:46:52Z

Updated AwesomeAssertions from 9.5.0 to 9.6.0.

Release notes

Sourced from AwesomeAssertions's releases.

9.6.0 What's Changed

New Contributors

@aco-mreble made their first contribution in fix: upper and lower case issue AwesomeAssertions/AwesomeAssertions#591
... (truncated)

Commits viewable in compare view.

Pinned Microsoft.Extensions.Http.Resilience at 10.9.0.

Release notes

Sourced from Microsoft.Extensions.Http.Resilience's releases.

10.9.0

Version 10.9.0 is headlined by changes in these areas:

AI: New experimental routing APIs center on the abstract RoutingChatClient base class, with SemanticRoutingChatClient as a concrete semantic-routing implementation. Separately, the abstract FailoverChatClient specialization and its concrete OrderedFailoverChatClient implementation add failover routing.
AI Evaluation: The generated report gains redesigned Overview, Cases, History, and Comparison views.
ASP.NET Core and HTTP diagnostics: The release adds HTTP request latency log enrichment and fixes configuration binding, response-body logging, request-path redaction, and resilience package version handling.
Source-generated logging and service discovery: Fixes cover classification type qualification, thread-local state cleanup, and DNS query suffix handling.

Experimental API Changes

New Experimental APIs

New experimental API: HTTP request latency log enrichment (EXTEXP0013) #7602
New experimental API: Chat client routing and failover (MEAI001) #7662

What's Changed

AI (`Microsoft.Extensions.AI`, `Microsoft.Extensions.AI.Abstractions`, and `Microsoft.Extensions.AI.OpenAI`)

Add extensible chat client routing #7662 by @joshuajyue (co-authored by @Copilot)
Pass the request's options to the selected client #7685 by @joshuajyue (co-authored by @jozkee @Copilot)
AI.Abstractions: fix ExcludeFromSchema dropped under concurrent AIFunction creation #7677 by @jozkee (co-authored by @Copilot)
Cap OpenAI dependency version (b10f9c0) by @jeffhandley (co-authored by @Copilot)

Note: Microsoft.Extensions.AI.OpenAI constrains its dependency for OpenAI to 2.12.x, preventing OpenAI updates to 2.13.0+ due to an incompatibility. We expect to release Microsoft.Extensions.AI.OpenAI version 10.9.1 during the week of August 17 to address this issue.

HTTP Resilience and Diagnostics (`Microsoft.Extensions.Http.Resilience` and `Microsoft.Extensions.Http.Diagnostics`)

Fix Grpc.Net.ClientFactory version range check - Fixes #7565 #7566 by @Ghost93
Fix response body logging under debugger #7678 by @Rimobul
Redact outgoing path when route is unknown #7687 by @Rimobul
Fix HTTP client logging config binding #7691 by @Rimobul

ASP.NET Core Extensions (`Microsoft.AspNetCore.Diagnostics.Middleware`)

Rename HttpLatencyTelemetry extensions class and drop redundant TFM guard #7645 by @EasyL0ver (co-authored by @Copilot)
Add HTTP request latency log enricher (experimental) #7602 by @EasyL0ver (co-authored by @Copilot)

Logging Source Generator (`Microsoft.Gen.Logging`)

[Microsoft.Gen.Logging] Clear thread-local state when logging throws #7682 by @Rimobul
[Microsoft.Gen.Logging] Fully qualify classification types #7689 by @Rimobul

AI Evaluation (`Microsoft.Extensions.AI.Evaluation.Reporting`)

[Microsoft.Extensions.AI.Evaluation.Reporting] Evaluation report redesign #7609 by @grafanaKibana

Project Templates (`Microsoft.McpServer.ProjectTemplates`)

Remove MCP server project template #7680 by @jeffhandley (co-authored by @Copilot)

... (truncated)

10.8.4

This servicing update refreshes the .NET AI project templates ahead of the July 30, 2026 retirement of GitHub Models — removing the GitHub Models provider option and updating template dependencies.

As a result, both the AI Chat Web (aichatweb) and AI Agent Web API (aiagent-webapi) templates now require the AI service provider to be chosen explicitly via --provider; there is no longer a default. One of the following must be selected:

--provider azureopenai — Azure OpenAI
--provider ollama — Ollama (for local development)
--provider openai — OpenAI Platform

Packages in this release

Package	Version
Microsoft.Extensions.AI.Templates	10.8.4-preview.3.26379.3
Microsoft.Agents.AI.ProjectTemplates	1.13.0-preview.1.26379.3

What's Changed

Project templates

Removed the GitHub Models provider from the AI Chat Web and AI Agent Web API templates, ahead of GitHub Models being fully retired on July 30, 2026. The --provider option is now required with no default (#7667).
Updated AI template dependencies — bumped Aspire.Hosting.AppHost to 13.4.6 and CommunityToolkit.VectorData.SqliteVec to 1.0.0-preview.4 (aligned System.Linq.AsyncEnumerable to 10.0.9), replacing earlier workaround package pins (#7639).

Full Changelog

dotnet/extensions@v10.8.3...v10.8.4

10.8.3 Packages in this release

Package	Version
Microsoft.Extensions.AI	10.8.3
Microsoft.Extensions.AI.Abstractions	10.8.3
Microsoft.Extensions.AI.OpenAI	10.8.3

Experimental API Changes

Experimental API behavior updates

Updated serialization behavior for experimental ToolApprovalRequestContent.RequiresConfirmation so it no longer leaks into consumer source-generated AIContent JSON metadata unless approval APIs are intentionally used (#7659).

What's Changed

AI abstractions and serialization

Fixed MEAI001 leakage from RequiresConfirmation in source-generated AIContent contexts by using an internal JSON-included backing member while keeping the public experimental member ignored for source-generation metadata (#7659).

Test Improvements

Added stabilization regression coverage to verify consumer source-generated List<AIContent> contexts compile and round-trip without requiring MEAI001 suppression (#7659).

Full Changelog

dotnet/extensions@v10.8.2...v10.8.3

10.8.2

This servicing release updates Microsoft.Extensions.VectorData.ConformanceTests to 10.8.2 and includes targeted test framework migration fixes.

Packages in this release

Package	Version	Note
Microsoft.Extensions.VectorData.Abstractions	10.8.2	Published August 7, 2026
Microsoft.Extensions.VectorData.ConformanceTests	10.8.2

Update: August 7, 2026
The Microsoft.Extensions.VectorData.Abstractions package was initially excluded from this release by mistake. Because Microsoft.Extensions.VectorData.ConformanceTests has a dependency on Microsoft.Extensions.VectorData.Abstractions, that led to failures when updating to Microsoft.Extensions.VectorData.ConformanceTests 10.8.2.

Microsoft.Extensions.VectorData.Abstractions was published August 7, 2026 to resolve that issue.

What's Changed

AI

Move Microsoft.Extensions.VectorData.ConformanceTests to xUnit 3 #7636 by @adamsitnik (co-authored by @Copilot)

Acknowledgements

@roji reviewed pull requests

Full Changelog: dotnet/extensions@v10.8.1...v10.8.2

10.8.1

This servicing release updates the Microsoft.Extensions.AI, Microsoft.Extensions.AI.Abstractions, and Microsoft.Extensions.AI.OpenAI packages to 10.8.1 with two targeted fixes: correct tool-call/tool-result ordering when resuming approval-gated functions with service-managed chat history, and preservation of the OpenAI Responses reasoning item id for stateless (store=false) encrypted reasoning.

Packages in this release

Package	Version
Microsoft.Extensions.AI	10.8.1
Microsoft.Extensions.AI.Abstractions	10.8.1
Microsoft.Extensions.AI.OpenAI	10.8.1

What's Changed

AI

Fix FICC tool_calls/tool ordering with approvals and service-managed chat history #7617 by @westey-m
Roundtrip OpenAI Responses reasoning item id for stateless (store=false) encrypted reasoning #7629 by @rogerbarreto (co-authored by @tarekgh)

Acknowledgements

@jozkee reviewed pull requests

Full Changelog: dotnet/extensions@v10.8.0...v10.8.1

Commits viewable in compare view.

Pinned Microsoft.Extensions.Logging.Abstractions at 10.0.11.

Release notes

Sourced from Microsoft.Extensions.Logging.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.SourceLink.GitHub from 10.0.301 to 10.0.400.

Release notes

Sourced from Microsoft.SourceLink.GitHub's releases.

10.0.400

You can build .NET 10.0 from the repository by cloning the release tag v10.0.400 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

10.0.303

You can build .NET 10.0 from the repository by cloning the release tag v10.0.303 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

10.0.302

You can build .NET 10.0 from the repository by cloning the release tag v10.0.302 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps AwesomeAssertions from 9.5.0 to 9.6.0 Bumps Microsoft.Extensions.Http.Resilience from 10.8.0 to 10.9.0 Bumps Microsoft.Extensions.Logging.Abstractions from 10.0.10 to 10.0.11 Bumps Microsoft.SourceLink.GitHub from 10.0.301 to 10.0.400 --- updated-dependencies: - dependency-name: AwesomeAssertions dependency-version: 9.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-deps - dependency-name: Microsoft.Extensions.Http.Resilience dependency-version: 10.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-deps - dependency-name: Microsoft.Extensions.Logging.Abstractions dependency-version: 10.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-deps - dependency-name: Microsoft.SourceLink.GitHub dependency-version: 10.0.400 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-deps ... Signed-off-by: dependabot[bot] <support@github.com>

codecov · 2026-08-29T17:47:52Z

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 67.24%. Comparing base (8b47291) to head (1f61420).

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #450   +/-   ##
=======================================
  Coverage   67.24%   67.24%           
=======================================
  Files          13       13           
  Lines        1154     1154           
  Branches      106      106           
=======================================
  Hits          776      776           
  Misses        338      338           
  Partials       40       40

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

Updated [ptr727.Utilities](https://github.com/ptr727/Utilities) from 4.0.28 to 4.0.38. <details> <summary>Release notes</summary> _Sourced from [ptr727.Utilities's releases](https://github.com/ptr727/Utilities/releases)._ ## 4.0.38 ## What's Changed * Bump actions/checkout from 7.0.0 to 7.0.1 in the actions-deps group by @dependabot[bot] in ptr727/Utilities#432 * Bump DavidAnson/markdownlint-cli2-action from 24.1.0 to 24.2.0 in the actions-deps group by @dependabot[bot] in ptr727/Utilities#435 * Migrate Test Project to Native Microsoft.Testing.Platform by @ptr727 in ptr727/Utilities#448 * Bump AwesomeAssertions and 3 others by @dependabot[bot] in ptr727/Utilities#450 **Full Changelog**: ptr727/Utilities@4.0.28...4.0.38 Commits viewable in [compare view](ptr727/Utilities@4.0.28...4.0.38). </details> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=ptr727.Utilities&package-manager=nuget&previous-version=4.0.28&new-version=4.0.38)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Promotes the hub resync (#451) to `main`. ## Why this is a `promote/` branch rather than `develop` itself `main` carried its own copies of work `develop` had done independently: the Microsoft.Testing.Platform migration (#448 against #447) and an AwesomeAssertions bump (#450 against #449). Combined with the CRLF-to-LF renormalization, `develop -> main` conflicts on seven paths, and `develop`'s `required_linear_history` plus its PR ruleset forbid resolving them on `develop`. This is the documented remedy: resolve on a throwaway branch off `main`, then open that into `main`. ## The resolution is provably exactly `develop` Every conflict was resolved to `develop`'s side, and the result is byte-identical to `develop`'s tree: ```text merged tree 5035943 develop tree 5035943 ``` Each was confirmed lossless before `develop` was taken, per the documented check: | Path | Why taking `develop` drops nothing | | --- | --- | | `global.json` | Content-identical modulo EOL. `main` added it CRLF, `develop` renormalized it. | | `UtilitiesTests/UtilitiesTests.csproj` | Content-identical modulo EOL. | | `UtilitiesTests/ExtensionsTests.cs` | Content-identical modulo EOL. | | `Directory.Packages.props` | Differs in one line, the coverage extension, where `develop` is the newer 18.10.0 against `main`'s 18.9.0. | | `Utilities.slnx` | `main`'s extra entries are a duplicate `dependabot.yml`, a `Data/` folder naming three files this repository does not contain, and the two workflow tasks `develop` deleted because the hub now hosts them. Verified each path is absent on `develop`, and that `dependabot.yml` is still listed there under GitHub Actions. | | `.github/workflows/build-release-task.yml` | Deleted on `develop` per its `retire` disposition. | | `.github/workflows/validate-task.yml` | Deleted on `develop`, which now calls the hub-hosted validator by pin. | ## Verification Run against this branch's tree, not inferred from #451: ```text dotnet build 0 warnings, 0 errors dotnet csharpier check . 43 files, clean dotnet format style --verify-no-changes clean dotnet test (MTP + coverage) 183/183 passed markdownlint-cli2 '**/*.md' 48 files, 0 issues actionlint clean editorconfig-checker clean repo_gate.py eol, eol-coverage, sha-pin all clean prose_lint.py --diff origin/main clean ``` ## Merging The head is `promote/develop-to-main`, not `develop`, so the delete-`develop` trap does not apply here. Merge with a merge commit rather than a squash, per the `main` ruleset.  ## Summary by CodeRabbit - **New Features** - Added a `StringHistory` utility for retaining and rendering configurable first and last lines. - Added comprehensive repository architecture, operations, governance, and contribution guidance. - **CI/CD** - Updated validation, testing, and publishing workflows with clearer triggers, scoped permissions, and external workflow integration. - Removed obsolete release and validation workflow definitions. - **Documentation** - Added coding, testing, review, release, and workflow guidance. - **Style** - Standardized text line endings and formatting across the repository.

Updated [AwesomeAssertions](https://github.com/AwesomeAssertions/AwesomeAssertions) from 9.5.0 to 9.6.0. <details> <summary>Release notes</summary> _Sourced from [AwesomeAssertions's releases](https://github.com/AwesomeAssertions/AwesomeAssertions/releases)._ ## 9.6.0 ## What's Changed ### New features * Enable adding reportables to AssertionScope by @cbersch in AwesomeAssertions/AwesomeAssertions#551 * Add option ExcludingObsoleteMembers for structural comparison by @lg2de in AwesomeAssertions/AwesomeAssertions#558 ### Fixes * Fix duplicate matching rules by @lg2de in AwesomeAssertions/AwesomeAssertions#566 * Remove obsolete information from FailReason description by @cbersch in AwesomeAssertions/AwesomeAssertions#589 * fix: upper and lower case issue by @aco-mreble in AwesomeAssertions/AwesomeAssertions#591 ### Documentation * Extend design guidelines for API changes by @lg2de in AwesomeAssertions/AwesomeAssertions#547 * Add documentation to all public API by @lg2de in AwesomeAssertions/AwesomeAssertions#556 ### Others * Fix build due to vulnerabilities in System.Security.Cryptography.Xml by @lg2de in AwesomeAssertions/AwesomeAssertions#548 * Enable renovate updates for the Build project (Fallout) by @lg2de in AwesomeAssertions/AwesomeAssertions#549 * Use ignored temp directory for npm by @cbersch in AwesomeAssertions/AwesomeAssertions#554 * Fix navigation link to new assertion scopes doc by @cbersch in AwesomeAssertions/AwesomeAssertions#555 * Fixes visibility of some members by @lg2de in AwesomeAssertions/AwesomeAssertions#557 * Cleanup Build and Renovate by @lg2de in AwesomeAssertions/AwesomeAssertions#564 * Remove obsolete warning suppressions by @lg2de in AwesomeAssertions/AwesomeAssertions#608 * Code cleanup on CollectionAssertionSpecs by @lg2de in AwesomeAssertions/AwesomeAssertions#609 * Calculate NuGet version only when packaging is enabled by @lg2de in AwesomeAssertions/AwesomeAssertions#611 ### Dependencies * Enable automatic upgrade for all build project packages by @cbersch in AwesomeAssertions/AwesomeAssertions#550 * Fix verify settings while updating Verify.DiffPlex to 3.3.1 by @lg2de in AwesomeAssertions/AwesomeAssertions#586 * Fix test adapter updates by @cbersch in AwesomeAssertions/AwesomeAssertions#588 * Fix package updates of MTP by @lg2de in AwesomeAssertions/AwesomeAssertions#606 * Upgrade NUnit 4.x and NUnit3TestAdapter 6.x by @cbersch in AwesomeAssertions/AwesomeAssertions#587 * Remove obsolete reference to System.Reflection.Metadata by @lg2de in AwesomeAssertions/AwesomeAssertions#607 * Update to Fallout 10.4.0 by @lg2de in AwesomeAssertions/AwesomeAssertions#594 * Update actions/setup-dotnet action to v6 by @renovate[bot] in AwesomeAssertions/AwesomeAssertions#569 * Update dependency LibGit2Sharp to 0.32.0 by @renovate[bot] in AwesomeAssertions/AwesomeAssertions#563 * Update dependency Meziantou.Analyzer to 3.0.163 by @renovate[bot] in AwesomeAssertions/AwesomeAssertions#612 * Update dependency Microsoft.NET.Test.Sdk to 18.9.0 by @renovate[bot] in AwesomeAssertions/AwesomeAssertions#614 * Update dependency Microsoft.Testing.Extensions.CodeCoverage to 18.9.0 by @renovate[bot] in AwesomeAssertions/AwesomeAssertions#583 * Update dependency Microsoft.Testing.Extensions.TrxReport to 2.3.3 by @renovate[bot] in AwesomeAssertions/AwesomeAssertions#577 * Update mstest monorepo to 4.3.3 by @renovate[bot] in AwesomeAssertions/AwesomeAssertions#601 * Update dependency Nuget.Packaging to 7.6.0 by @renovate[bot] in AwesomeAssertions/AwesomeAssertions#578 * Update dependency Reflectify to 1.10.0 by @renovate[bot] in AwesomeAssertions/AwesomeAssertions#615 * Update dependency Roslynator.Analyzers to 4.16.1 by @renovate[bot] in AwesomeAssertions/AwesomeAssertions#613 * Update dependency SharpCompress to 0.50.4 by @renovate[bot] in AwesomeAssertions/AwesomeAssertions#596 * Update dependency TUnit to 1.63.0 by @renovate[bot] in AwesomeAssertions/AwesomeAssertions#579 * Update dependency Verify.XunitV3 to 31.28.0 by @renovate[bot] in AwesomeAssertions/AwesomeAssertions#580 ## New Contributors * @aco-mreble made their first contribution in AwesomeAssertions/AwesomeAssertions#591 ... (truncated) Commits viewable in [compare view](AwesomeAssertions/AwesomeAssertions@9.5.0...9.6.0). </details> Pinned [Microsoft.Extensions.Http.Resilience](https://github.com/dotnet/extensions) at 10.9.0. <details> <summary>Release notes</summary> _Sourced from [Microsoft.Extensions.Http.Resilience's releases](https://github.com/dotnet/extensions/releases)._ ## 10.9.0 Version 10.9.0 is headlined by changes in these areas: * **AI:** New experimental routing APIs center on the abstract `RoutingChatClient` base class, with `SemanticRoutingChatClient` as a concrete semantic-routing implementation. Separately, the abstract `FailoverChatClient` specialization and its concrete `OrderedFailoverChatClient` implementation add failover routing. * **AI Evaluation:** The generated report gains redesigned Overview, Cases, History, and Comparison views. * **ASP.NET Core and HTTP diagnostics:** The release adds HTTP request latency log enrichment and fixes configuration binding, response-body logging, request-path redaction, and resilience package version handling. * **Source-generated logging and service discovery:** Fixes cover classification type qualification, thread-local state cleanup, and DNS query suffix handling. ## Experimental API Changes ### New Experimental APIs * New experimental API: HTTP request latency log enrichment (`EXTEXP0013`) #7602 * New experimental API: Chat client routing and failover (`MEAI001`) #7662 ## What's Changed ### AI (`Microsoft.Extensions.AI`, `Microsoft.Extensions.AI.Abstractions`, and `Microsoft.Extensions.AI.OpenAI`) * Add extensible chat client routing #7662 by @joshuajyue (co-authored by @Copilot) * Pass the request's options to the selected client #7685 by @joshuajyue (co-authored by @jozkee @Copilot) * AI.Abstractions: fix ExcludeFromSchema dropped under concurrent AIFunction creation #7677 by @jozkee (co-authored by @Copilot) * Cap OpenAI dependency version ([b10f9c0](dotnet/extensions@b10f9c0)) by @jeffhandley (co-authored by @Copilot) **Note: Microsoft.Extensions.AI.OpenAI constrains its dependency for OpenAI to 2.12.x, preventing OpenAI updates to 2.13.0+ due to an incompatibility. We expect to release Microsoft.Extensions.AI.OpenAI version 10.9.1 during the week of August 17 to address this issue.** ### HTTP Resilience and Diagnostics (`Microsoft.Extensions.Http.Resilience` and `Microsoft.Extensions.Http.Diagnostics`) * Fix Grpc.Net.ClientFactory version range check - Fixes #7565 #7566 by @Ghost93 * Fix response body logging under debugger #7678 by @Rimobul * Redact outgoing path when route is unknown #7687 by @Rimobul * Fix HTTP client logging config binding #7691 by @Rimobul ### ASP.NET Core Extensions (`Microsoft.AspNetCore.Diagnostics.Middleware`) * Rename HttpLatencyTelemetry extensions class and drop redundant TFM guard #7645 by @EasyL0ver (co-authored by @Copilot) * Add HTTP request latency log enricher (experimental) #7602 by @EasyL0ver (co-authored by @Copilot) ### Logging Source Generator (`Microsoft.Gen.Logging`) * [Microsoft.Gen.Logging] Clear thread-local state when logging throws #7682 by @Rimobul * [Microsoft.Gen.Logging] Fully qualify classification types #7689 by @Rimobul ### AI Evaluation (`Microsoft.Extensions.AI.Evaluation.Reporting`) * [Microsoft.Extensions.AI.Evaluation.Reporting] Evaluation report redesign #7609 by @grafanaKibana ### Project Templates (`Microsoft.McpServer.ProjectTemplates`) * Remove MCP server project template #7680 by @jeffhandley (co-authored by @Copilot) ... (truncated) ## 10.8.4 This servicing update refreshes the .NET AI project templates ahead of the July 30, 2026 retirement of GitHub Models — removing the GitHub Models provider option and updating template dependencies. As a result, both the AI Chat Web (`aichatweb`) and AI Agent Web API (`aiagent-webapi`) templates now **require** the AI service provider to be chosen explicitly via `--provider`; there is no longer a default. One of the following must be selected: - `--provider azureopenai` — Azure OpenAI - `--provider ollama` — Ollama (for local development) - `--provider openai` — OpenAI Platform ## Packages in this release | Package | Version | |---|---| | Microsoft.Extensions.AI.Templates | 10.8.4-preview.3.26379.3 | | Microsoft.Agents.AI.ProjectTemplates | 1.13.0-preview.1.26379.3 | ## What's Changed ### Project templates - **Removed the GitHub Models provider** from the AI Chat Web and AI Agent Web API templates, ahead of [GitHub Models being fully retired on July 30, 2026](https://github.blog/changelog/2026-07-01-github-models-is-being-fully-retired-on-july-30-2026/). The `--provider` option is now required with no default ([#7667](dotnet/extensions#7667)). - Updated AI template dependencies — bumped `Aspire.Hosting.AppHost` to `13.4.6` and `CommunityToolkit.VectorData.SqliteVec` to `1.0.0-preview.4` (aligned `System.Linq.AsyncEnumerable` to `10.0.9`), replacing earlier workaround package pins ([#7639](dotnet/extensions#7639)). ## Full Changelog - dotnet/extensions@v10.8.3...v10.8.4 ## 10.8.3 ## Packages in this release | Package | Version | |---|---| | Microsoft.Extensions.AI | 10.8.3 | | Microsoft.Extensions.AI.Abstractions | 10.8.3 | | Microsoft.Extensions.AI.OpenAI | 10.8.3 | ## Experimental API Changes ### Experimental API behavior updates - Updated serialization behavior for experimental `ToolApprovalRequestContent.RequiresConfirmation` so it no longer leaks into consumer source-generated `AIContent` JSON metadata unless approval APIs are intentionally used ([#7659](dotnet/extensions#7659)). ## What's Changed ### AI abstractions and serialization - Fixed MEAI001 leakage from `RequiresConfirmation` in source-generated `AIContent` contexts by using an internal JSON-included backing member while keeping the public experimental member ignored for source-generation metadata ([#7659](dotnet/extensions#7659)). ## Test Improvements - Added stabilization regression coverage to verify consumer source-generated `List<AIContent>` contexts compile and round-trip without requiring MEAI001 suppression ([#7659](dotnet/extensions#7659)). ## Full Changelog - dotnet/extensions@v10.8.2...v10.8.3 ## 10.8.2 This servicing release updates Microsoft.Extensions.VectorData.ConformanceTests to 10.8.2 and includes targeted test framework migration fixes. ## Packages in this release | Package | Version | Note | |---------|---------|---------| | Microsoft.Extensions.VectorData.Abstractions | 10.8.2 | Published August 7, 2026 | | Microsoft.Extensions.VectorData.ConformanceTests | 10.8.2 | | **Update: August 7, 2026** The Microsoft.Extensions.VectorData.Abstractions package was initially excluded from this release by mistake. Because Microsoft.Extensions.VectorData.ConformanceTests has a dependency on Microsoft.Extensions.VectorData.Abstractions, that led to failures when updating to Microsoft.Extensions.VectorData.ConformanceTests 10.8.2. Microsoft.Extensions.VectorData.Abstractions was published August 7, 2026 to resolve that issue. ## What's Changed ### AI * Move Microsoft.Extensions.VectorData.ConformanceTests to xUnit 3 #7636 by @adamsitnik (co-authored by @Copilot) ## Acknowledgements * @roji reviewed pull requests **Full Changelog**: dotnet/extensions@v10.8.1...v10.8.2 ## 10.8.1 This servicing release updates the Microsoft.Extensions.AI, Microsoft.Extensions.AI.Abstractions, and Microsoft.Extensions.AI.OpenAI packages to 10.8.1 with two targeted fixes: correct tool-call/tool-result ordering when resuming approval-gated functions with service-managed chat history, and preservation of the OpenAI Responses reasoning item id for stateless (store=false) encrypted reasoning. ## Packages in this release | Package | Version | |---------|---------| | Microsoft.Extensions.AI | 10.8.1 | | Microsoft.Extensions.AI.Abstractions | 10.8.1 | | Microsoft.Extensions.AI.OpenAI | 10.8.1 | ## What's Changed ### AI * Fix FICC tool_calls/tool ordering with approvals and service-managed chat history #7617 by @westey-m * Roundtrip OpenAI Responses reasoning item id for stateless (store=false) encrypted reasoning #7629 by @rogerbarreto (co-authored by @tarekgh) ## Acknowledgements * @jozkee reviewed pull requests **Full Changelog**: dotnet/extensions@v10.8.0...v10.8.1 Commits viewable in [compare view](dotnet/extensions@v10.8.0...v10.9.0). </details> Pinned [Microsoft.Extensions.Logging.Abstractions](https://github.com/dotnet/dotnet) at 10.0.11. <details> <summary>Release notes</summary> _Sourced from [Microsoft.Extensions.Logging.Abstractions's releases](https://github.com/dotnet/dotnet/releases)._ No release notes found for this version range. Commits viewable in [compare view](https://github.com/dotnet/dotnet/commits). </details> Updated [Microsoft.SourceLink.GitHub](https://github.com/dotnet/dotnet) from 10.0.301 to 10.0.400. <details> <summary>Release notes</summary> _Sourced from [Microsoft.SourceLink.GitHub's releases](https://github.com/dotnet/dotnet/releases)._ ## 10.0.400 You can build .NET 10.0 from the repository by cloning the release tag `v10.0.400` and following the build instructions in the [main README.md](https://github.com/dotnet/dotnet/blob/v10.0.400/README.md#building). Alternatively, you can build from the sources attached to this release directly. More information on this process can be found in the [dotnet/dotnet repository](https://github.com/dotnet/dotnet/blob/v10.0.400/README.md#building-from-released-sources). Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023 ## 10.0.303 You can build .NET 10.0 from the repository by cloning the release tag `v10.0.303` and following the build instructions in the [main README.md](https://github.com/dotnet/dotnet/blob/v10.0.303/README.md#building). Alternatively, you can build from the sources attached to this release directly. More information on this process can be found in the [dotnet/dotnet repository](https://github.com/dotnet/dotnet/blob/v10.0.303/README.md#building-from-released-sources). Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023 ## 10.0.302 You can build .NET 10.0 from the repository by cloning the release tag `v10.0.302` and following the build instructions in the [main README.md](https://github.com/dotnet/dotnet/blob/v10.0.302/README.md#building). Alternatively, you can build from the sources attached to this release directly. More information on this process can be found in the [dotnet/dotnet repository](https://github.com/dotnet/dotnet/blob/v10.0.302/README.md#building-from-released-sources). Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023 Commits viewable in [compare view](dotnet/dotnet@v10.0.301...v10.0.400). </details> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details>

Promotes the hub resync (#451) to `main`. ## Why this is a `promote/` branch rather than `develop` itself `main` carried its own copies of work `develop` had done independently: the Microsoft.Testing.Platform migration (#448 against #447) and an AwesomeAssertions bump (#450 against #449). Combined with the CRLF-to-LF renormalization, `develop -> main` conflicts on seven paths, and `develop`'s `required_linear_history` plus its PR ruleset forbid resolving them on `develop`. This is the documented remedy: resolve on a throwaway branch off `main`, then open that into `main`. ## The resolution is provably exactly `develop` Every conflict was resolved to `develop`'s side, and the result is byte-identical to `develop`'s tree: ```text merged tree 5035943 develop tree 5035943 ``` Each was confirmed lossless before `develop` was taken, per the documented check: | Path | Why taking `develop` drops nothing | | --- | --- | | `global.json` | Content-identical modulo EOL. `main` added it CRLF, `develop` renormalized it. | | `UtilitiesTests/UtilitiesTests.csproj` | Content-identical modulo EOL. | | `UtilitiesTests/ExtensionsTests.cs` | Content-identical modulo EOL. | | `Directory.Packages.props` | Differs in one line, the coverage extension, where `develop` is the newer 18.10.0 against `main`'s 18.9.0. | | `Utilities.slnx` | `main`'s extra entries are a duplicate `dependabot.yml`, a `Data/` folder naming three files this repository does not contain, and the two workflow tasks `develop` deleted because the hub now hosts them. Verified each path is absent on `develop`, and that `dependabot.yml` is still listed there under GitHub Actions. | | `.github/workflows/build-release-task.yml` | Deleted on `develop` per its `retire` disposition. | | `.github/workflows/validate-task.yml` | Deleted on `develop`, which now calls the hub-hosted validator by pin. | ## Verification Run against this branch's tree, not inferred from #451: ```text dotnet build 0 warnings, 0 errors dotnet csharpier check . 43 files, clean dotnet format style --verify-no-changes clean dotnet test (MTP + coverage) 183/183 passed markdownlint-cli2 '**/*.md' 48 files, 0 issues actionlint clean editorconfig-checker clean repo_gate.py eol, eol-coverage, sha-pin all clean prose_lint.py --diff origin/main clean ``` ## Merging The head is `promote/develop-to-main`, not `develop`, so the delete-`develop` trap does not apply here. Merge with a merge commit rather than a squash, per the `main` ruleset.  ## Summary by CodeRabbit - **New Features** - Added a `StringHistory` utility for retaining and rendering configurable first and last lines. - Added comprehensive repository architecture, operations, governance, and contribution guidance. - **CI/CD** - Updated validation, testing, and publishing workflows with clearer triggers, scoped permissions, and external workflow integration. - Removed obsolete release and validation workflow definitions. - **Documentation** - Added coding, testing, review, release, and workflow guidance. - **Style** - Standardized text line endings and formatting across the repository.

Updated [AwesomeAssertions](https://github.com/AwesomeAssertions/AwesomeAssertions) from 9.5.0 to 9.6.0. <details> <summary>Release notes</summary> _Sourced from [AwesomeAssertions's releases](https://github.com/AwesomeAssertions/AwesomeAssertions/releases)._ ## 9.6.0 ## What's Changed ### New features * Enable adding reportables to AssertionScope by @cbersch in AwesomeAssertions/AwesomeAssertions#551 * Add option ExcludingObsoleteMembers for structural comparison by @lg2de in AwesomeAssertions/AwesomeAssertions#558 ### Fixes * Fix duplicate matching rules by @lg2de in AwesomeAssertions/AwesomeAssertions#566 * Remove obsolete information from FailReason description by @cbersch in AwesomeAssertions/AwesomeAssertions#589 * fix: upper and lower case issue by @aco-mreble in AwesomeAssertions/AwesomeAssertions#591 ### Documentation * Extend design guidelines for API changes by @lg2de in AwesomeAssertions/AwesomeAssertions#547 * Add documentation to all public API by @lg2de in AwesomeAssertions/AwesomeAssertions#556 ### Others * Fix build due to vulnerabilities in System.Security.Cryptography.Xml by @lg2de in AwesomeAssertions/AwesomeAssertions#548 * Enable renovate updates for the Build project (Fallout) by @lg2de in AwesomeAssertions/AwesomeAssertions#549 * Use ignored temp directory for npm by @cbersch in AwesomeAssertions/AwesomeAssertions#554 * Fix navigation link to new assertion scopes doc by @cbersch in AwesomeAssertions/AwesomeAssertions#555 * Fixes visibility of some members by @lg2de in AwesomeAssertions/AwesomeAssertions#557 * Cleanup Build and Renovate by @lg2de in AwesomeAssertions/AwesomeAssertions#564 * Remove obsolete warning suppressions by @lg2de in AwesomeAssertions/AwesomeAssertions#608 * Code cleanup on CollectionAssertionSpecs by @lg2de in AwesomeAssertions/AwesomeAssertions#609 * Calculate NuGet version only when packaging is enabled by @lg2de in AwesomeAssertions/AwesomeAssertions#611 ### Dependencies * Enable automatic upgrade for all build project packages by @cbersch in AwesomeAssertions/AwesomeAssertions#550 * Fix verify settings while updating Verify.DiffPlex to 3.3.1 by @lg2de in AwesomeAssertions/AwesomeAssertions#586 * Fix test adapter updates by @cbersch in AwesomeAssertions/AwesomeAssertions#588 * Fix package updates of MTP by @lg2de in AwesomeAssertions/AwesomeAssertions#606 * Upgrade NUnit 4.x and NUnit3TestAdapter 6.x by @cbersch in AwesomeAssertions/AwesomeAssertions#587 * Remove obsolete reference to System.Reflection.Metadata by @lg2de in AwesomeAssertions/AwesomeAssertions#607 * Update to Fallout 10.4.0 by @lg2de in AwesomeAssertions/AwesomeAssertions#594 * Update actions/setup-dotnet action to v6 by @renovate[bot] in AwesomeAssertions/AwesomeAssertions#569 * Update dependency LibGit2Sharp to 0.32.0 by @renovate[bot] in AwesomeAssertions/AwesomeAssertions#563 * Update dependency Meziantou.Analyzer to 3.0.163 by @renovate[bot] in AwesomeAssertions/AwesomeAssertions#612 * Update dependency Microsoft.NET.Test.Sdk to 18.9.0 by @renovate[bot] in AwesomeAssertions/AwesomeAssertions#614 * Update dependency Microsoft.Testing.Extensions.CodeCoverage to 18.9.0 by @renovate[bot] in AwesomeAssertions/AwesomeAssertions#583 * Update dependency Microsoft.Testing.Extensions.TrxReport to 2.3.3 by @renovate[bot] in AwesomeAssertions/AwesomeAssertions#577 * Update mstest monorepo to 4.3.3 by @renovate[bot] in AwesomeAssertions/AwesomeAssertions#601 * Update dependency Nuget.Packaging to 7.6.0 by @renovate[bot] in AwesomeAssertions/AwesomeAssertions#578 * Update dependency Reflectify to 1.10.0 by @renovate[bot] in AwesomeAssertions/AwesomeAssertions#615 * Update dependency Roslynator.Analyzers to 4.16.1 by @renovate[bot] in AwesomeAssertions/AwesomeAssertions#613 * Update dependency SharpCompress to 0.50.4 by @renovate[bot] in AwesomeAssertions/AwesomeAssertions#596 * Update dependency TUnit to 1.63.0 by @renovate[bot] in AwesomeAssertions/AwesomeAssertions#579 * Update dependency Verify.XunitV3 to 31.28.0 by @renovate[bot] in AwesomeAssertions/AwesomeAssertions#580 ## New Contributors * @aco-mreble made their first contribution in AwesomeAssertions/AwesomeAssertions#591 ... (truncated) Commits viewable in [compare view](AwesomeAssertions/AwesomeAssertions@9.5.0...9.6.0). </details> Pinned [Microsoft.Extensions.Http.Resilience](https://github.com/dotnet/extensions) at 10.9.0. <details> <summary>Release notes</summary> _Sourced from [Microsoft.Extensions.Http.Resilience's releases](https://github.com/dotnet/extensions/releases)._ ## 10.9.0 Version 10.9.0 is headlined by changes in these areas: * **AI:** New experimental routing APIs center on the abstract `RoutingChatClient` base class, with `SemanticRoutingChatClient` as a concrete semantic-routing implementation. Separately, the abstract `FailoverChatClient` specialization and its concrete `OrderedFailoverChatClient` implementation add failover routing. * **AI Evaluation:** The generated report gains redesigned Overview, Cases, History, and Comparison views. * **ASP.NET Core and HTTP diagnostics:** The release adds HTTP request latency log enrichment and fixes configuration binding, response-body logging, request-path redaction, and resilience package version handling. * **Source-generated logging and service discovery:** Fixes cover classification type qualification, thread-local state cleanup, and DNS query suffix handling. ## Experimental API Changes ### New Experimental APIs * New experimental API: HTTP request latency log enrichment (`EXTEXP0013`) #7602 * New experimental API: Chat client routing and failover (`MEAI001`) #7662 ## What's Changed ### AI (`Microsoft.Extensions.AI`, `Microsoft.Extensions.AI.Abstractions`, and `Microsoft.Extensions.AI.OpenAI`) * Add extensible chat client routing #7662 by @joshuajyue (co-authored by @Copilot) * Pass the request's options to the selected client #7685 by @joshuajyue (co-authored by @jozkee @Copilot) * AI.Abstractions: fix ExcludeFromSchema dropped under concurrent AIFunction creation #7677 by @jozkee (co-authored by @Copilot) * Cap OpenAI dependency version ([b10f9c0](dotnet/extensions@b10f9c0)) by @jeffhandley (co-authored by @Copilot) **Note: Microsoft.Extensions.AI.OpenAI constrains its dependency for OpenAI to 2.12.x, preventing OpenAI updates to 2.13.0+ due to an incompatibility. We expect to release Microsoft.Extensions.AI.OpenAI version 10.9.1 during the week of August 17 to address this issue.** ### HTTP Resilience and Diagnostics (`Microsoft.Extensions.Http.Resilience` and `Microsoft.Extensions.Http.Diagnostics`) * Fix Grpc.Net.ClientFactory version range check - Fixes #7565 #7566 by @Ghost93 * Fix response body logging under debugger #7678 by @Rimobul * Redact outgoing path when route is unknown #7687 by @Rimobul * Fix HTTP client logging config binding #7691 by @Rimobul ### ASP.NET Core Extensions (`Microsoft.AspNetCore.Diagnostics.Middleware`) * Rename HttpLatencyTelemetry extensions class and drop redundant TFM guard #7645 by @EasyL0ver (co-authored by @Copilot) * Add HTTP request latency log enricher (experimental) #7602 by @EasyL0ver (co-authored by @Copilot) ### Logging Source Generator (`Microsoft.Gen.Logging`) * [Microsoft.Gen.Logging] Clear thread-local state when logging throws #7682 by @Rimobul * [Microsoft.Gen.Logging] Fully qualify classification types #7689 by @Rimobul ### AI Evaluation (`Microsoft.Extensions.AI.Evaluation.Reporting`) * [Microsoft.Extensions.AI.Evaluation.Reporting] Evaluation report redesign #7609 by @grafanaKibana ### Project Templates (`Microsoft.McpServer.ProjectTemplates`) * Remove MCP server project template #7680 by @jeffhandley (co-authored by @Copilot) ... (truncated) ## 10.8.4 This servicing update refreshes the .NET AI project templates ahead of the July 30, 2026 retirement of GitHub Models — removing the GitHub Models provider option and updating template dependencies. As a result, both the AI Chat Web (`aichatweb`) and AI Agent Web API (`aiagent-webapi`) templates now **require** the AI service provider to be chosen explicitly via `--provider`; there is no longer a default. One of the following must be selected: - `--provider azureopenai` — Azure OpenAI - `--provider ollama` — Ollama (for local development) - `--provider openai` — OpenAI Platform ## Packages in this release | Package | Version | |---|---| | Microsoft.Extensions.AI.Templates | 10.8.4-preview.3.26379.3 | | Microsoft.Agents.AI.ProjectTemplates | 1.13.0-preview.1.26379.3 | ## What's Changed ### Project templates - **Removed the GitHub Models provider** from the AI Chat Web and AI Agent Web API templates, ahead of [GitHub Models being fully retired on July 30, 2026](https://github.blog/changelog/2026-07-01-github-models-is-being-fully-retired-on-july-30-2026/). The `--provider` option is now required with no default ([#7667](dotnet/extensions#7667)). - Updated AI template dependencies — bumped `Aspire.Hosting.AppHost` to `13.4.6` and `CommunityToolkit.VectorData.SqliteVec` to `1.0.0-preview.4` (aligned `System.Linq.AsyncEnumerable` to `10.0.9`), replacing earlier workaround package pins ([#7639](dotnet/extensions#7639)). ## Full Changelog - dotnet/extensions@v10.8.3...v10.8.4 ## 10.8.3 ## Packages in this release | Package | Version | |---|---| | Microsoft.Extensions.AI | 10.8.3 | | Microsoft.Extensions.AI.Abstractions | 10.8.3 | | Microsoft.Extensions.AI.OpenAI | 10.8.3 | ## Experimental API Changes ### Experimental API behavior updates - Updated serialization behavior for experimental `ToolApprovalRequestContent.RequiresConfirmation` so it no longer leaks into consumer source-generated `AIContent` JSON metadata unless approval APIs are intentionally used ([#7659](dotnet/extensions#7659)). ## What's Changed ### AI abstractions and serialization - Fixed MEAI001 leakage from `RequiresConfirmation` in source-generated `AIContent` contexts by using an internal JSON-included backing member while keeping the public experimental member ignored for source-generation metadata ([#7659](dotnet/extensions#7659)). ## Test Improvements - Added stabilization regression coverage to verify consumer source-generated `List<AIContent>` contexts compile and round-trip without requiring MEAI001 suppression ([#7659](dotnet/extensions#7659)). ## Full Changelog - dotnet/extensions@v10.8.2...v10.8.3 ## 10.8.2 This servicing release updates Microsoft.Extensions.VectorData.ConformanceTests to 10.8.2 and includes targeted test framework migration fixes. ## Packages in this release | Package | Version | Note | |---------|---------|---------| | Microsoft.Extensions.VectorData.Abstractions | 10.8.2 | Published August 7, 2026 | | Microsoft.Extensions.VectorData.ConformanceTests | 10.8.2 | | **Update: August 7, 2026** The Microsoft.Extensions.VectorData.Abstractions package was initially excluded from this release by mistake. Because Microsoft.Extensions.VectorData.ConformanceTests has a dependency on Microsoft.Extensions.VectorData.Abstractions, that led to failures when updating to Microsoft.Extensions.VectorData.ConformanceTests 10.8.2. Microsoft.Extensions.VectorData.Abstractions was published August 7, 2026 to resolve that issue. ## What's Changed ### AI * Move Microsoft.Extensions.VectorData.ConformanceTests to xUnit 3 #7636 by @adamsitnik (co-authored by @Copilot) ## Acknowledgements * @roji reviewed pull requests **Full Changelog**: dotnet/extensions@v10.8.1...v10.8.2 ## 10.8.1 This servicing release updates the Microsoft.Extensions.AI, Microsoft.Extensions.AI.Abstractions, and Microsoft.Extensions.AI.OpenAI packages to 10.8.1 with two targeted fixes: correct tool-call/tool-result ordering when resuming approval-gated functions with service-managed chat history, and preservation of the OpenAI Responses reasoning item id for stateless (store=false) encrypted reasoning. ## Packages in this release | Package | Version | |---------|---------| | Microsoft.Extensions.AI | 10.8.1 | | Microsoft.Extensions.AI.Abstractions | 10.8.1 | | Microsoft.Extensions.AI.OpenAI | 10.8.1 | ## What's Changed ### AI * Fix FICC tool_calls/tool ordering with approvals and service-managed chat history #7617 by @westey-m * Roundtrip OpenAI Responses reasoning item id for stateless (store=false) encrypted reasoning #7629 by @rogerbarreto (co-authored by @tarekgh) ## Acknowledgements * @jozkee reviewed pull requests **Full Changelog**: dotnet/extensions@v10.8.0...v10.8.1 Commits viewable in [compare view](dotnet/extensions@v10.8.0...v10.9.0). </details> Pinned [Microsoft.Extensions.Logging.Abstractions](https://github.com/dotnet/dotnet) at 10.0.11. <details> <summary>Release notes</summary> _Sourced from [Microsoft.Extensions.Logging.Abstractions's releases](https://github.com/dotnet/dotnet/releases)._ No release notes found for this version range. Commits viewable in [compare view](https://github.com/dotnet/dotnet/commits). </details> Updated [Microsoft.SourceLink.GitHub](https://github.com/dotnet/dotnet) from 10.0.301 to 10.0.400. <details> <summary>Release notes</summary> _Sourced from [Microsoft.SourceLink.GitHub's releases](https://github.com/dotnet/dotnet/releases)._ ## 10.0.400 You can build .NET 10.0 from the repository by cloning the release tag `v10.0.400` and following the build instructions in the [main README.md](https://github.com/dotnet/dotnet/blob/v10.0.400/README.md#building). Alternatively, you can build from the sources attached to this release directly. More information on this process can be found in the [dotnet/dotnet repository](https://github.com/dotnet/dotnet/blob/v10.0.400/README.md#building-from-released-sources). Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023 ## 10.0.303 You can build .NET 10.0 from the repository by cloning the release tag `v10.0.303` and following the build instructions in the [main README.md](https://github.com/dotnet/dotnet/blob/v10.0.303/README.md#building). Alternatively, you can build from the sources attached to this release directly. More information on this process can be found in the [dotnet/dotnet repository](https://github.com/dotnet/dotnet/blob/v10.0.303/README.md#building-from-released-sources). Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023 ## 10.0.302 You can build .NET 10.0 from the repository by cloning the release tag `v10.0.302` and following the build instructions in the [main README.md](https://github.com/dotnet/dotnet/blob/v10.0.302/README.md#building). Alternatively, you can build from the sources attached to this release directly. More information on this process can be found in the [dotnet/dotnet repository](https://github.com/dotnet/dotnet/blob/v10.0.302/README.md#building-from-released-sources). Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023 Commits viewable in [compare view](dotnet/dotnet@v10.0.301...v10.0.400). </details> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details>

Promotes the hub resync (#451) to `main`. ## Why this is a `promote/` branch rather than `develop` itself `main` carried its own copies of work `develop` had done independently: the Microsoft.Testing.Platform migration (#448 against #447) and an AwesomeAssertions bump (#450 against #449). Combined with the CRLF-to-LF renormalization, `develop -> main` conflicts on seven paths, and `develop`'s `required_linear_history` plus its PR ruleset forbid resolving them on `develop`. This is the documented remedy: resolve on a throwaway branch off `main`, then open that into `main`. ## The resolution is provably exactly `develop` Every conflict was resolved to `develop`'s side, and the result is byte-identical to `develop`'s tree: ```text merged tree 5035943 develop tree 5035943 ``` Each was confirmed lossless before `develop` was taken, per the documented check: | Path | Why taking `develop` drops nothing | | --- | --- | | `global.json` | Content-identical modulo EOL. `main` added it CRLF, `develop` renormalized it. | | `UtilitiesTests/UtilitiesTests.csproj` | Content-identical modulo EOL. | | `UtilitiesTests/ExtensionsTests.cs` | Content-identical modulo EOL. | | `Directory.Packages.props` | Differs in one line, the coverage extension, where `develop` is the newer 18.10.0 against `main`'s 18.9.0. | | `Utilities.slnx` | `main`'s extra entries are a duplicate `dependabot.yml`, a `Data/` folder naming three files this repository does not contain, and the two workflow tasks `develop` deleted because the hub now hosts them. Verified each path is absent on `develop`, and that `dependabot.yml` is still listed there under GitHub Actions. | | `.github/workflows/build-release-task.yml` | Deleted on `develop` per its `retire` disposition. | | `.github/workflows/validate-task.yml` | Deleted on `develop`, which now calls the hub-hosted validator by pin. | ## Verification Run against this branch's tree, not inferred from #451: ```text dotnet build 0 warnings, 0 errors dotnet csharpier check . 43 files, clean dotnet format style --verify-no-changes clean dotnet test (MTP + coverage) 183/183 passed markdownlint-cli2 '**/*.md' 48 files, 0 issues actionlint clean editorconfig-checker clean repo_gate.py eol, eol-coverage, sha-pin all clean prose_lint.py --diff origin/main clean ``` ## Merging The head is `promote/develop-to-main`, not `develop`, so the delete-`develop` trap does not apply here. Merge with a merge commit rather than a squash, per the `main` ruleset.  ## Summary by CodeRabbit - **New Features** - Added a `StringHistory` utility for retaining and rendering configurable first and last lines. - Added comprehensive repository architecture, operations, governance, and contribution guidance. - **CI/CD** - Updated validation, testing, and publishing workflows with clearer triggers, scoped permissions, and external workflow integration. - Removed obsolete release and validation workflow definitions. - **Documentation** - Added coding, testing, review, release, and workflow guidance. - **Style** - Standardized text line endings and formatting across the repository.

dependabot Bot added .NET Pull requests that update .net code dependencies Pull requests that update a dependency file labels Aug 29, 2026

ptr727-codegen Bot enabled auto-merge August 29, 2026 17:47

ptr727-codegen Bot merged commit eb80a36 into main Aug 29, 2026
9 checks passed

dependabot Bot deleted the dependabot/nuget/main/nuget-deps-5740d8e490 branch August 29, 2026 17:47

This was referenced Aug 29, 2026

Bump the nuget-deps group with 1 update ptr727/LanguageTags#330

Merged

Bump the nuget-deps group with 1 update ptr727/LanguageTags#331

Merged

ptr727 mentioned this pull request Aug 30, 2026

Promote Develop to Main #453

Merged

This was referenced Aug 31, 2026

Bump the nuget-deps group with 1 update ptr727/PhotoCleaner#100

Merged

Bump the nuget-deps group with 1 update ptr727/PhotoCleaner#101

Merged

Navigation Menu

Bump AwesomeAssertions and 3 others - #450

Bump AwesomeAssertions and 3 others#450
ptr727-codegen[bot] merged 1 commit into
mainfrom
dependabot/nuget/main/nuget-deps-5740d8e490

dependabot Bot commented on behalf of github Aug 29, 2026

Uh oh!

Uh oh!

codecov Bot commented Aug 29, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Aug 29, 2026

9.6.0

What's Changed

New features

Fixes

Documentation

Others

Dependencies

New Contributors

10.9.0

Experimental API Changes

New Experimental APIs

What's Changed

AI (Microsoft.Extensions.AI, Microsoft.Extensions.AI.Abstractions, and Microsoft.Extensions.AI.OpenAI)

HTTP Resilience and Diagnostics (Microsoft.Extensions.Http.Resilience and Microsoft.Extensions.Http.Diagnostics)

ASP.NET Core Extensions (Microsoft.AspNetCore.Diagnostics.Middleware)

Logging Source Generator (Microsoft.Gen.Logging)

AI Evaluation (Microsoft.Extensions.AI.Evaluation.Reporting)

Project Templates (Microsoft.McpServer.ProjectTemplates)

10.8.4

Packages in this release

What's Changed

Project templates

Full Changelog

10.8.3

Packages in this release

Experimental API Changes

Experimental API behavior updates

What's Changed

AI abstractions and serialization

Test Improvements

Full Changelog

10.8.2

Packages in this release

What's Changed

AI

Acknowledgements

10.8.1

Packages in this release

What's Changed

AI

Acknowledgements

10.0.400

10.0.303

10.0.302

Uh oh!

Uh oh!

codecov Bot commented Aug 29, 2026

Codecov Report

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

AI (`Microsoft.Extensions.AI`, `Microsoft.Extensions.AI.Abstractions`, and `Microsoft.Extensions.AI.OpenAI`)

HTTP Resilience and Diagnostics (`Microsoft.Extensions.Http.Resilience` and `Microsoft.Extensions.Http.Diagnostics`)

ASP.NET Core Extensions (`Microsoft.AspNetCore.Diagnostics.Middleware`)

Logging Source Generator (`Microsoft.Gen.Logging`)

AI Evaluation (`Microsoft.Extensions.AI.Evaluation.Reporting`)

Project Templates (`Microsoft.McpServer.ProjectTemplates`)