Skip to content

Bump the minor-and-patch group with 10 updates - #3

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/nuget/minor-and-patch-3de2ac854f
Open

Bump the minor-and-patch group with 10 updates#3
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/nuget/minor-and-patch-3de2ac854f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 11, 2026

Copy link
Copy Markdown
Contributor

Updated Microsoft.Extensions.DependencyInjection from 10.0.12 to 10.0.15.

Release notes

Sourced from Microsoft.Extensions.DependencyInjection's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Logging from 10.0.12 to 10.0.15.

Release notes

Sourced from Microsoft.Extensions.Logging's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Logging.Debug from 10.0.12 to 10.0.15.

Release notes

Sourced from Microsoft.Extensions.Logging.Debug's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.ML.OnnxRuntime from 1.30.0 to 1.31.1.

Release notes

Sourced from Microsoft.ML.OnnxRuntime's releases.

1.31.1

ONNX Runtime 1.31.1 is a patch release that fixes an OpenVINO-enabled Python build regression and corrects WASM Debug external-data tests. These notes cover changes since ONNX Runtime 1.31.0.

Highlights

  • Fixed a provider-info namespace mismatch that caused compilation failures when building with both OpenVINO and Python enabled (#​33327).
  • Fixed WASM Debug test failures by skipping file-backed external-data cases unsupported by the WASM test module, while retaining compile-output checks, buffer-destination coverage, and native test coverage. This is a test-only change and does not change runtime behavior (#​33226).

Contributors

Thanks to our 3 human contributors for this release!

@​eserscor, @​mustjab, @​tianleiwu

Full Changelog: rel-1.31.0...rel-1.31.1

Release highlights were prepared with AI assistance.

1.31.0

ONNX Runtime 1.31.0 stabilizes model-package and EPContext data APIs, improves CPU model loading and quantized MoE inference, expands device-based execution-provider selection, and strengthens model-loading and runtime reliability. These notes cover changes since ONNX Runtime 1.30.0. CUDA and WebGPU kernel updates are summarized here; detailed provider notes are covered by their separate plugin EP releases.

Highlights

  • Promoted the model-package API and EPContext data callbacks to stable C and C++ APIs, with EPContext callback support added across language bindings (#​33166, #​32265).
  • Reduced CPU session-initialization overhead by parallelizing eligible weight prepacking, and accelerated block-wise INT4/INT8 QMoE experts with MLAS QNBit kernels and grouped expert dispatch (#​31691, #​32644, #​32668).
  • Added x86 FP16 LayerNorm/RMSNorm acceleration, Arm KleidiAI SVE2.1 FP16 GEMM support, and additional RISC-V vector kernels (#​32715, #​32670, #​32710).
  • Enabled CoreML participation in device-based EP selection, including Apple Neural Engine selection through PREFER_NPU (#​31975).
  • Added workspace-memory accounting and verification for constrained-memory graph partitioning, alongside broader model, graph, and tensor validation (#​31962, #​32189).

Announcements & Compatibility

  • CUDA Plugin EP v0.3.0 and WebGPU Plugin EP v0.5.0 are matched with ONNX Runtime 1.31.0. For contrib-op compatibility, core and the plugin must use the same contributed-operator schemas; building both from the same ONNX Runtime revision is recommended. Schema mismatches can cause incorrect execution or crashes and may not be detected during plugin registration.
  • GatherBlockQuantized behavior change: out-of-range indices now produce zero output slices across CPU, CUDA, and WebGPU for both integer and floating-point quantized formats. This deliberately differs from ONNX Gather error semantics (#​32480).
  • Experimental API migration: model-package consumers should use OrtApi::GetModelPackageApi and the stable OrtModelPackageApi table. EPContext callback registration now uses stable APIs; the corresponding experimental lookup entries were removed. The stable native callback contract carries callback/state pointers, with payload limits enforced by application callbacks, bindings, or EPs rather than a native read-options policy (#​33166, #​32265).
  • ACL EP is deprecated and will be removed in a future release. Source builds using --use_acl now receive a deprecation warning (#​32564).
  • The ONNX dependency remains at 1.22.0. The initial ONNX 1.23 integration was reverted pending upstream fixes; this release does not ship that integration's new opset or FLOAT6 support (#​33073).
  • Supported native builds now default to 1DS telemetry. Windows TraceLogging remains selectable with --use_windows_telemetry or onnxruntime_USE_WINDOWS_TELEMETRY=ON; telemetry can be disabled with --no_telemetry (#​32384).

New Features

Core APIs & Runtime

  • Stabilized the model-package C and C++ APIs for loading packages, selecting compatible model variants, and creating sessions (#​33166).
  • Stabilized named EPContext data read/write callbacks for application-managed storage. Added EP support negotiation so registered callbacks do not silently fall back to filesystem I/O (#​32265).
  • Extended the Compile API to write external initializers and EP context data to buffers, enabling in-memory compilation workflows for models larger than 2 GB (#​31347).
  • Added workspace-memory accounting, source reporting, and post-partition reservation verification. Set session.strict_workspace_verification=1 to fail initialization on workspace declaration overruns or nonzero orphaned reservations; strict verification is not supported for ORT-format model loads (#​31962, #​32189).
  • Added the opt-in source-build option onnxruntime_DISABLE_DEVICE_DISCOVERY=ON to skip platform accelerator probing and report only the CPU device (#​32592).

Shared Contrib Operators

These updates affect core operator schemas and cross-provider behavior, not only the separately released GPU plugins.

  • Extended EngramGate and NGramHashMapping for Qwen4-Exp, and added VarlenNGramHashMapping for packed DeepSeek Engram batching with request-local history. Packed hashing also supports Qwen4-Exp head offsets, EOS resets, and segment boundaries (#​32285, #​32358, #​32467).
  • Added the activation attribute to GatedRMSNorm for SiLU, its Swish alias, and Sigmoid gating across CPU, CUDA, and WebGPU. SiLU remains the default (#​32512).
  • Added weightless hyper-connection operators BranchwiseRMSNorm, ScaledSiLU, HyperConnectionPreMix, and HyperConnectionPostMix, with CPU, CUDA, and WebGPU implementations (#​32687).
  • Extended GatherBlockQuantized to FP8/FP4 data, full-axis blocks, and scale broadcasting, and improved CPU UINT8 dequantization. See the out-of-range-index behavior change above (#​32480, #​32621).

Plugin Execution Provider Infrastructure

  • Added support for statically linked plugin EPs, with a static WebGPU plugin build configuration (#​32395).
  • Preserved caller streams in single-tensor plugin data transfers and handled null plugin allocator returns (#​32666, #​32683).
  • Deduplicated AutoEP custom-op domains and corrected EP assignment reporting after NHWC layout transformation (#​32711, #​33184).
  • Added reference guidance for compiled-model compatibility validation, including multi-device scenarios (#​29168).

Execution Provider Updates

CUDA EP

CUDA updates include sparse attention and packed continuous batching, expanded paged speculative decoding, INT2 and mixed-width QMoE execution, opt-in MatMul auto-tuning, improved MXFP4 support on Blackwell consumer GPUs, and reliability fixes.
... (truncated)

1.30.1

This is a patch release on top of v1.30.0, containing targeted model-validation and memory-safety fixes, improved Plugin EP data transfers, and build and packaging fixes.

Highlights

Bug Fixes

  • Hardened contrib-op shape inference with additional rank, attribute, initializer, and overflow validation for CausalConvWithState, GatedDeltaNet, GroupQueryAttention, and SparseAttention (#​32607).
  • Prevented out-of-bounds reads in EmbedLayerNormalization shape inference with scalar beta, ConvTransposeWithDynamicPads, and shape-inference input-data lookup (#​32610, #​32679, #​32681).
  • Rejected malformed graphs containing inputs to zero-input operator schemas or subgraphs on non-control-flow nodes (#​32633, #​32641).
  • Prevented an out-of-bounds read during session initialization when a Loop or Scan body input is also an initializer, rejecting the invalid graph instead of crashing (#​32609).
  • Fixed a heap buffer overflow caused by reusing packed sub-byte tensor storage for a larger full-byte tensor (#​32611).
  • Preserved the caller's execution stream in Plugin EP single-tensor data transfers, allowing asynchronous copies to receive the supplied stream while retaining synchronous-copy behavior (#​32666).

Build and Packaging

  • Fixed Windows build-tools setup to use system-trusted certificates and improved proxy handling (#​33142).
  • Selected Python 3.12 explicitly before package validation in the combined packaging stage (#​33561).
  • Restricted FP8 XQA test cases to supported GPU compute capabilities (#​32559).

Contributors

Thanks to our 8 contributors for this release!

@​adrastogi, @​bbernhar, @​eserscor, @​miaobin, @​shiyi9801, @​tianleiwu, @​wangw-1991, @​xiaofeihan1

Full Changelog: v1.30.0...v1.30.1

These release notes were drafted with AI assistance.

Commits viewable in compare view.

Updated Microsoft.Testing.Extensions.CodeCoverage from 18.11.2 to 18.12.0.

Release notes

Sourced from Microsoft.Testing.Extensions.CodeCoverage's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.WindowsAppSDK from 2.5.1 to 2.6.5.

Release notes

Sourced from Microsoft.WindowsAppSDK's releases.

2.6.5

Windows App SDK 2.6.5 delivers targeted fixes for rendering, window composition, system backdrops, and packaged app installation.

Bug fixes

Bug fix Runtime Compatibility Change
Fixed rendering corruption that could occur on systems with multiple graphics adapters or monitors. N/A, rendering-region fix
Fixed an E_NOINTERFACE crash when enabling the System Composition Engine on Windows builds that lack the required interfaces. The runtime now uses the lifted compositor on those builds. N/A, operating system capability detection fix
Fixed an issue where window backgrounds and GDI controls could become unexpectedly transparent on Windows 10, including apps hosting XAML islands. N/A, window composition ABI fix
Reverted the system backdrop change introduced in 2.6.4 to address wrong-thread exceptions. System backdrops for content islands and XAML windows are not supported when using the System Composition Engine in this release. N/A, revert of a previously contained change
Fixed an issue where app-extension registration metadata generation returned E_NOTIMPL, which could prevent packaged apps from installing. N/A, missing implementation fix

For details, see the full Windows App SDK 2.6.5 release notes.

Try it out

Getting started

To get started using Windows App SDK to develop Windows apps, check out the following documentation:

2.6.4

Windows App SDK 2.6.4 removes the Limited Access Feature requirement for the Language Model APIs, updates ONNX Runtime to 1.27.1, and includes reliability fixes across WinUI 3, app lifecycle, notifications, DispatcherQueue, Content, composition, and Windows AI.

What's new in WinAppSDK 2.6.4:

  • Language Model APIs no longer require a Limited Access Feature unlock. Apps can call the Language Model APIs without first unlocking the Language Model Limited Access Feature. Apps using earlier Windows App SDK versions must continue to follow the LAF requirements for their target Windows versions.
  • Updated ONNX Runtime. The version of ONNX Runtime has been updated to 1.27.1. See ONNX Runtime versions for more info.

Bug fixes:

Bug Fix Runtime Compatibility Change
Fixed an access violation crash that could occur during app shutdown when a text control, such as a TextBox or RichEditBox, was still alive while the XAML core was being torn down. CCoreServices_InputServicesTeardownOrder
Fixed an issue where AppInstance.GetInstances could fail with E_INVALIDARG while enumerating application instances. AppLifecycle_GetInstancesProcessHandleFix
Fixed a crash when calling some AppNotificationManager and AppInstance APIs. AppNotification_AppInstance_FixStackOverflowCrash
Fixed an issue where self-contained apps could fail to load Microsoft.WindowsAppRuntime.Insights.Resource.dll when using the VersionInfo APIs or registering an AppNotification callback (microsoft/WindowsAppSDK#​6071, microsoft/WindowsAppSDK#​6387). VersionInfo_MissingInsightsResourceDll
Fixed an issue where an unhandled exception in a DispatcherQueue callback could produce a crash dump with only the HRESULT, omitting the app's original exception type, message, and stack trace. DispatcherQueue_CaptureCallbackErrorContext
Fixed the same crash dump issue for unhandled exceptions in DispatcherQueueTimer.Tick event handlers. DispatcherQueueTimer_CaptureTickErrorContext
Fixed an issue where a failure while creating a ContentIsland or other Content object immediately terminated the app. The original error is now returned to the calling code instead. ContentIsland_InitializationFailureCleanup
Fixed system backdrop support for lifted content islands and XAML windows when using the System Composition Engine. SwitcherSystemBackdropBrushSupport
Fixed projection of compatible Windows.UI.Composition objects into Microsoft.UI.Composition, preserving object identity, when using the System Composition Engine. SwitcherColdWrappingWUCToMUC
Fixed a crash in ItemsView when the target of StartBringItemIntoView was collapsed or recycled before the scroll completed (microsoft/microsoft-ui-xaml#​11865). ItemsView_InvalidBringIntoViewAnchor
Fixed a crash that could occur when a WebView2 control received focus while still initializing and its parent window was temporarily disabled when initialization finished. WebView2_HandleMoveFocusInvalidArgument
Improved diagnosability for Windows AI model initialization APIs. AIFabric_Tip_APIClassName_ReasonName
Fixed false IntelliSense errors on XAML-generated members, such as InitializeComponent and x:Name fields, in WinUI 3 C# projects edited in VS Code with C# Dev Kit. To opt out, set the EnableWinUIDesignTimeGeneratedXamlCompileItems property to false. N/A, build .targets change

To see everything that's new and changed, see the full Windows App SDK 2.6.4 release notes.

Try it out

  • Download the 2.6.4 NuGet package to use WinAppSDK 2.6 in your app.
  • Download and update the WinUI Gallery to see the WinUI 3 updates firsthand.

Getting started

To get started using Windows App SDK to develop Windows apps, check out the following documentation:

2.5.4-exp

Windows App SDK 2.5 Experimental is the latest experimental release, adding new Windows AI capabilities, code-based theme resource bindings and DataTemplate construction, the new TableView and Chart controls, and expanded WinUI 3 inking support. It follows Windows App SDK 2.5.1 stable and brings forward the changes from that release alongside the experimental-only additions below.

What's new in WinAppSDK 2.5 Experimental:

  • Windows AI device selection. New AIComputeDevice APIs let apps choose the default, CPU, or NPU execution device for text recognition. App Content Index image indexing can use the same preference for OCR through ContentRegionImageOptions.PreferredTextRecognizerDevice.
  • AI Speech and language model updates. New speech recognition factories improve model configuration and creation, while updated audio, streaming, and continuous recognition APIs expand speech scenarios. Language model APIs now expose model identity, low-rank adapter compatibility, and response statuses for game mode and low video memory.
  • Theme resource binding from code. The experimental FrameworkElement.SetThemeResourceBinding API lets apps create the equivalent of a {ThemeResource} binding programmatically.
  • Delegate-based DataTemplate construction. A new experimental DataTemplate constructor accepts an app-provided delegate that creates the template's element subtree.
  • TableView control. The experimental TableView control is now available in the public WinMDs, with grouping, templated group headers, sorting and filtering, resizable columns, and optional cell and header tooltips.
  • Chart control. A new experimental WinUI 3 Chart control presents Cartesian data as line, area, and bar series, with configurable axes, legends, labels, and markers.
  • WinUI 3 inking updates. New InkPresenter.ActivateCustomDrying and InkSynchronizer APIs let apps render committed ink themselves, and InkToolbar now targets an InkPresenter directly.

Bugs fixed:

  • Fixed an access violation that could occur when reading InkPresenter.StrokeContainer while custom drying was active.
  • Fixed InkCanvas presenter sizing under a RenderTransform.
  • Fixed a WinUI resource-tracking issue that could cause memory usage to grow when apps repeatedly created visual-state storyboards or resolved static or theme resources.
  • Improved cleanup of unreachable native WinUI objects in .NET apps after tab or page teardown.

To see everything that's new and changed, see the full Windows App SDK 2.5 Experimental release notes.

Try it out

Getting started

To get started using Windows App SDK to develop Windows apps, check out the following documentation:

Commits viewable in compare view.

Updated NAudio.Core from 2.3.0 to 2.4.0.

Release notes

Sourced from NAudio.Core's releases.

2.4.0

  • Added DeviceCount and GetCapabilities static methods to WaveOutEvent so output
    devices can be enumerated without referencing NAudio.WinForms (#​1331, #​777)
  • Fixed WASAPI and Media Foundation interop under Unity's Mono runtime, which marshalled
    formatted class parameters as COM interfaces; they are now explicitly marked
    [MarshalAs(UnmanagedType.LPStruct)] (#​1414)

Commits viewable in compare view.

Updated NAudio.Wasapi from 2.3.0 to 2.4.0.

Release notes

Sourced from NAudio.Wasapi's releases.

2.4.0

  • Added DeviceCount and GetCapabilities static methods to WaveOutEvent so output
    devices can be enumerated without referencing NAudio.WinForms (#​1331, #​777)
  • Fixed WASAPI and Media Foundation interop under Unity's Mono runtime, which marshalled
    formatted class parameters as COM interfaces; they are now explicitly marked
    [MarshalAs(UnmanagedType.LPStruct)] (#​1414)

Commits viewable in compare view.

Updated Polly.Core from 8.7.0 to 8.9.1.

Release notes

Sourced from Polly.Core's releases.

8.9.1

What's Changed

Full Changelog: App-vNext/Polly@8.9.0...8.9.1

8.9.0

What's Changed

Full Changelog: App-vNext/Polly@8.8.1...8.9.0

8.8.1

Highlights

What's Changed

New Contributors

Full Changelog: App-vNext/Polly@8.8.0...8.8.1

8.8.0

Highlights

What's Changed

New Contributors

Full Changelog: App-vNext/Polly@8.7.0...8.8.0

Commits viewable in compare view.

Updated xunit.v3 from 4.0.1 to 4.0.3.

Release notes

Sourced from xunit.v3's releases.

No release notes found for this version range.

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the minor-and-patch group with 10 updates
a24765d 
Bumps Microsoft.Extensions.DependencyInjection from 10.0.12 to 10.0.15
Bumps Microsoft.Extensions.Logging from 10.0.12 to 10.0.15
Bumps Microsoft.Extensions.Logging.Debug from 10.0.12 to 10.0.15
Bumps Microsoft.ML.OnnxRuntime from 1.30.0 to 1.31.1
Bumps Microsoft.Testing.Extensions.CodeCoverage from 18.11.2 to 18.12.0
Bumps Microsoft.WindowsAppSDK from 2.5.1 to 2.6.5
Bumps NAudio.Core from 2.3.0 to 2.4.0
Bumps NAudio.Wasapi from 2.3.0 to 2.4.0
Bumps Polly.Core from 8.7.0 to 8.9.1
Bumps xunit.v3 from 4.0.1 to 4.0.3

---
updated-dependencies:
- dependency-name: Microsoft.Extensions.DependencyInjection
  dependency-version: 10.0.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: Microsoft.Extensions.Logging
  dependency-version: 10.0.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: Microsoft.Extensions.Logging.Debug
  dependency-version: 10.0.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: Microsoft.ML.OnnxRuntime
  dependency-version: 1.31.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: Microsoft.Testing.Extensions.CodeCoverage
  dependency-version: 18.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: Microsoft.WindowsAppSDK
  dependency-version: 2.6.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: NAudio.Core
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: NAudio.Wasapi
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: Polly.Core
  dependency-version: 8.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: xunit.v3
  dependency-version: 4.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code labels Nov 11, 2026
@sonarqubecloud

sonarqubecloud Bot commented Nov 11, 2026

Copy link
Copy Markdown

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants