Update dotnet monorepo

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@microsoft/signalr (source)	8.0.7 → 8.0.29
Microsoft.AspNetCore.Identity.EntityFrameworkCore (source)	9.0.4 → 9.0.19
Microsoft.AspNetCore.Mvc.NewtonsoftJson (source)	9.0.4 → 9.0.19
Microsoft.AspNetCore.Mvc.Razor.RuntimeCompilation (source)	9.0.4 → 9.0.19
Microsoft.AspNetCore.OpenApi (source)	9.0.4 → 9.0.19
Microsoft.AspNetCore.SignalR.Client (source)	9.0.4 → 9.0.19
Microsoft.AspNetCore.SignalR.Common (source)	9.0.4 → 9.0.19
Microsoft.AspNetCore.SignalR.StackExchangeRedis (source)	9.0.4 → 9.0.19
Microsoft.Bcl.Numerics (source)	9.0.4 → 9.0.19
Microsoft.CodeAnalysis.Analyzers	4.14.0 → 5.9.0
Microsoft.CodeAnalysis.CSharp	4.13.0 → 4.14.0
Microsoft.Extensions.ApiDescription.Server (source)	9.0.4 → 9.0.19
Microsoft.Extensions.Caching.StackExchangeRedis (source)	9.0.4 → 9.0.19
Microsoft.Extensions.Configuration (source)	9.0.4 → 9.0.19
Microsoft.Extensions.Configuration.Json (source)	9.0.4 → 9.0.19
Microsoft.Extensions.Configuration.UserSecrets (source)	9.0.4 → 9.0.19
Microsoft.Extensions.DependencyInjection (source)	9.0.4 → 9.0.19
Microsoft.Extensions.FileProviders.Embedded (source)	9.0.4 → 9.0.19
Microsoft.Extensions.FileProviders.Physical (source)	9.0.4 → 9.0.19
Microsoft.Extensions.Hosting (source)	9.0.4 → 9.0.19
Microsoft.Extensions.Http (source)	9.0.4 → 9.0.19
Microsoft.Extensions.Http.Resilience (source)	9.4.0 → 9.10.0
Microsoft.Extensions.Logging (source)	9.0.4 → 9.0.19
Microsoft.Extensions.Logging.Console (source)	9.0.4 → 9.0.19
Microsoft.Extensions.Options (source)	9.0.4 → 9.0.19
Microsoft.Extensions.Options.ConfigurationExtensions (source)	9.0.4 → 9.0.19
Microsoft.Extensions.Primitives (source)	9.0.4 → 9.0.19
Microsoft.Extensions.ServiceDiscovery (source)	9.3.0 → 9.5.2
Microsoft.Extensions.ServiceDiscovery.Abstractions (source)	9.3.0 → 9.5.2
Microsoft.Extensions.ServiceDiscovery.Dns (source)	9.3.0 → 9.5.2
Microsoft.Extensions.ServiceDiscovery.Yarp (source)	9.3.0 → 9.5.2
Microsoft.Maui.Essentials	9.0.60 → 9.0.120
Microsoft.XmlSerializer.Generator (source)	9.0.4 → 9.0.19
System.Composition (source)	9.0.4 → 9.0.19
System.Configuration.ConfigurationManager (source)	9.0.4 → 9.0.19
System.Diagnostics.EventLog (source)	9.0.4 → 9.0.19
System.Diagnostics.PerformanceCounter (source)	9.0.4 → 9.0.19
System.Drawing.Common (source)	9.0.4 → 9.0.19
System.IO.Hashing (source)	9.0.4 → 9.0.19
System.IO.Pipelines (source)	9.0.4 → 9.0.19
System.Management (source)	9.0.4 → 9.0.19
System.Net.Http.Json (source)	9.0.4 → 9.0.19
System.Security.Cryptography.ProtectedData (source)	9.0.4 → 9.0.19
System.Text.Json (source)	9.0.4 → 9.0.19

---

Release Notes

dotnet/aspnetcore (@​microsoft/signalr)

v8.0.29: .NET 8.0.29

Compare Source

Release

What's Changed

• Update branding to 8.0.29 by @​vseanreesermsft in #​66982
• [release/8.0] (deps): Bump src/submodules/googletest from d72f9c8 to a721f1b by @​dependabot[bot] in #​66973
• [release/8.0] Update System.Security.Cryptography.Xml in RepoTasks by @​wtgodbe in #​66766
• [release/8.0] Update dependencies from dotnet/source-build-externals by @​dotnet-maestro[bot] in #​66699
• [release/8.0] Update dependencies from dotnet/source-build-assets by @​dotnet-maestro[bot] in #​66664
• [release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​66946
• [release/8.0] Add 1ES Unofficial pipeline for Components E2E tests by @​wtgodbe in #​66989
• Merging internal commits for release/8.0 by @​vseanreesermsft in #​67105
• [release/8.0] Update npm dependencies by @​wtgodbe in #​67144
• [release/8.0] Update Microsoft Identity Web package versions to 3.15.1 by @​wtgodbe in #​67164
• [release/8.0] (deps): Bump src/submodules/googletest from a721f1b to 7140cd4 by @​dependabot[bot] in #​67222
• [release/8.0] Backport docker image fix by @​wtgodbe in #​67279
• [release/8.0] Reject ASCII control characters in cookie auth return URLs by @​github-actions[bot] in #​67157

Full Changelog: dotnet/aspnetcore@v8.0.28...v8.0.29

v8.0.17

Compare Source

Bug Fixes

• Forwarded Headers Middleware: Ignore X-Forwarded-Headers from Unknown Proxy (#​61623)
  The Forwarded Headers Middleware now ignores X-Forwarded-Headers sent from unknown proxies. This change improves security by ensuring that only trusted proxies can influence the forwarded headers, preventing potential spoofing or misrouting of requests.

Dependency Updates

• Update dependencies from dotnet/arcade (#​61832)
  This update brings in the latest changes from the dotnet/arcade repository, ensuring that ASP.NET Core benefits from recent improvements, bug fixes, and security patches in the shared build infrastructure.

• Bump src/submodules/googletest from 52204f7 to 04ee1b4 (#​61761)
  The GoogleTest submodule has been updated to a newer commit, providing the latest testing features, bug fixes, and performance improvements for the project's C++ test components.

Miscellaneous

• Update branding to 8.0.17 (#​61830)
  The project version branding has been updated to reflect the new 8.0.17 release, ensuring consistency across build outputs and documentation.

• Merging internal commits for release/8.0 (#​61924)
  This change merges various internal commits into the release/8.0 branch, incorporating minor fixes, documentation updates, and other non-user-facing improvements to keep the release branch up to date.

---

This summary is generated and may contain inaccuracies. For complete details, please review the linked pull requests.

Full Changelog: dotnet/aspnetcore@v8.0.16...v8.0.17

dotnet/dotnet (Microsoft.AspNetCore.Identity.EntityFrameworkCore)

v9.0.7: .NET 9.0.7

You can build .NET 9.0 from the repository by cloning the release tag v9.0.7 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

v9.0.6: .NET 9.0.6

You can build .NET 9.0 from the repository by cloning the release tag v9.0.6 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

v9.0.5: .NET 9.0.5

You can build .NET 9.0 from the repository by cloning the release tag v9.0.5 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

dotnet/extensions (Microsoft.Extensions.Http.Resilience)

v9.10.0

What's Changed

• Branding updates for 9.10 by @​Copilot in #​6769
• Doc improvements by @​gewarren in #​6794
• Bump vite from 6.3.5 to 6.3.6 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript by @​dependabot[bot] in #​6793
• Updated changelogs for AI libs by @​stephentoub in #​6787
• Update MCP server template by @​jeffkl in #​6772
• Add support for using ConversationID for AzureOpenAI and OpenAI by @​ViveliDuCh in #​6770
• Merging internal commits by @​joperezr in #​6801
• Merge changes from release/9.9 branch by @​joperezr in #​6803
• Support keyed HybridCache with keyed DistributedCaches and named options by @​kelly-yinn in #​6694
• Inventory as code by @​wtgodbe in #​6820
• Increase output token limit for EquivalenceEvaluator by @​shyamnamboodiripad in #​6835
• Fix KeyNotFoundException on HttpRequestLatencyListener.OnEventWritten for uknown event sources by @​ssmelov in #​6821
• Add project name normalization to match aspire's code generator logic by @​ViveliDuCh in #​6818
• Disable really noisy analyzers, part 1 by @​stephentoub in #​6837
• Fix KeyNotFoundException in HttpRequestLatencyListener.OnEventWritten by @​pentp in #​6823
• Update global.json to use .NET 9.0.0 stable instead of RC 1 by @​Copilot in #​6846
• Add measures and tags with mediator object to the HttpClientLatencyLogEnricher by @​rainsxng in #​6783
• Add comprehensive .github/copilot-instructions.md for dotnet/extensions repository by @​Copilot in #​6792
• Update to .NET 10 SDK by @​eerhardt in #​6863
• Update Microsoft.Extensions.AI changelog files with current NuGet versions by @​Copilot in #​6849
• Fix GenerateImagesAsync_SingleImageGeneration integration test by @​stephentoub in #​6843
• Re-enable IDE0032 by @​stephentoub in #​6866
• Add OpenTelemetrySpeechToTextClient and friends by @​stephentoub in #​6845
• Update ModelContextProtocol version in MCP template by @​MackinnonBuck in #​6870
• Scope Ollama resilience settings to Web/Program.cs and restore ServiceDefaults by @​ViveliDuCh in #​6850
• Update Aspire by @​Varorbc in #​6858
• Update MCP template for new registry specification by @​Copilot in #​6796
• Add support for HostApplicationBuilder in AmbientMetadata extension by @​eduherminio in #​6867
• Fix mcpserver test baselines by @​jeffhandley in #​6874
• Move Microsoft.Extensions.ServiceDiscovery to dotnet/extensions by @​eerhardt in #​6868
• Add copy constructors to option types (ChatOptions, etc.) by @​stephentoub in #​6882
• Fix ChatMessage.CreatedAt being always overwritten by the latest timestamp. by @​Copilot in #​6885
• Small doc fixes by @​gewarren in #​6887
• Update AI changelogs with some recent additions by @​stephentoub in #​6886
• Fix Assistants IChatClient handling of unrelated tool calls in history by @​stephentoub in #​6891
• Fix duplication between OpenAI Assistants pre-configured tools by @​stephentoub in #​6896
• Update MCP Server Template to adhere to 2025-09-29 server.json schema by @​joelverhagen in #​6888
• Remove Azure.AI.OpenAI dependency from templates and tests by @​Copilot in #​6873
• Remove UnsafeRelaxedJsonEscaping by @​peterwald in #​6899
• Fix bug to yield remaining buffered FCC by @​westey-m in #​6903
• Fix serialization of [Experimental] AIContent-derived types by @​stephentoub in #​6900

New Contributors

• @​westey-m made their first contribution in #​6745
• @​jeffkl made their first contribution in #​6772
• @​ViveliDuCh made their first contribution in #​6770
• @​kelly-yinn made their first contribution in #​6694
• @​ssmelov made their first contribution in #​6821
• @​Varorbc made their first contribution in #​6858

Full Changelog: dotnet/extensions@v9.9.0...v9.10.0

v9.9.0

Highlights

AI

• Abstractions for remote MCP servers; response/approval flow support via new experimental types
• Function approvals via new experimental types (e.g., ApprovalRequiredAIFunction, user input/approval request & response content).
• Reasoning text streaming for OpenAI Responses ChatClient streaming.
• AIFunction split into a base class to improve extensibility.
• IChatReducer moved to Microsoft.Extensions.AI.Abstractions.
• Updated to OpenAI 2.4.0 and genai standard convention 1.37.
• Coalescing logic now treats ChatMessage.Role changes as new messages.
• GetResponseAsync<T> now reads only the last message (bug fix).
• OpenTelemetry ChatClient/EmbeddingGenerator logs raw additional properties (no key mangling).
• Fixed empty annotated text chunk handling in streaming with OpenAI Assistants.

Telemetry & Diagnostics

• HTTP diagnostics log query string params with proper redaction (emitted on url.query).
• server.address telemetry emits host only (per OpenTelemetry semantic conventions).
• Heuristics added to detect well-known model hosts.
• Resource monitoring can consider Environment.CpuUsage.

New Contributors

• @​ykumashev made their first contribution in #​6696

Full Changelog: dotnet/extensions@v9.8.0...v9.9.0

v9.8.0

What's Changed

• Align EventId generation with M.E.Logging source-gen by @​xakep139 in #​6566
• Add resiliency mechanism to CPU and memory utilization checks by @​amadeuszl in #​6528
• Suppress flaky test until fixed by @​joelverhagen in #​6568
• Create a project template for an MCP server by @​joelverhagen in #​6547
• Use dnx instead of dotnet tool exec in MCP server template README by @​joelverhagen in #​6571
• Add reporting tests that show NLP results. by @​peterwald in #​6574
• Branding updates for 9.8.0 by @​joperezr in #​6573
• Fix ConfigureEvaluationTests.ps1 script when $ConfigRoot is not supplied by @​peterwald in #​6575
• Refactor Resource Monitoring by @​evgenyfedorov2 in #​6554
• Update McpServer template for 0.3.0-preview.2 by @​stephentoub in #​6578
• Add container.cpu.time metric by @​evgenyfedorov2 in #​5806
• Add netstandard2.0 compatibility to Microsoft.Extensions.Diagnostics.Testing and dependencies by @​bdovaz in #​6219
• Add netstandard2.0 compatibility to Microsoft.Extensions.Telemetry and dependencies by @​bdovaz in #​6218
• Simplify Http.Diagnostics by @​pentp in #​6174
• Add netstandard2.0 compatibility to Microsoft.Extensions.Http.Resilience and dependencies by @​bdovaz in #​6582
• Ingore null loggers returned by LogProviders in ELoggerFactory by @​petrroll in #​6585
• Merging changes from internal by @​joperezr in #​6588
• [Logging] Fixes LogProperties and LogPropertyIgnore attributes to work if an object being logged resides in a different assembly than the logging method by @​iliar-turdushev in #​6600
• Add memory usage metric by @​evgenyfedorov2 in #​6586
• Add schema version to server.json in MCP template by @​joelverhagen in #​6606
• Merge release/9.7 into main by @​joperezr in #​6589
• Update MCP server template readme to show both VS Code and Visual Studio notes by @​Copilot in #​6591
• Update Azure Open AI package referenced by eval integration tests by @​shyamnamboodiripad in #​6609
• Target .NET 8 for more stable runtime requirement by @​joelverhagen in #​6617
• Add support for new Azure AI Foundry project type for Safety evals by @​shyamnamboodiripad in #​6621
• M.E.AI.AzureAIInference - Azure.AI.Inference Package Bump by @​rogerbarreto in #​6624
• Add DataContent.Name property by @​stephentoub in #​6616
• Fix handling of multiple responses messages by @​stephentoub in #​6627
• Expose additional chat model conversion helpers by @​stephentoub in #​6629
• [main] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​6633
• [Http.Resilience] The DisableFor method should try to retrieve the request object from the resilience context by @​iliar-turdushev in #​6618
• Bump Package validation baseline version to 9.7.0 by @​Copilot in #​6650
• Fix internal package version detection for project templates by @​MackinnonBuck in #​6651
• Remove Microsoft.Extensions.AI.Ollama by @​MackinnonBuck in #​6655
• Fix M.E.AI package refs by @​stephentoub in #​6654
• Add [Description] to DataContent.Uri by @​stephentoub in #​6615
• Fix duplicate solution file when creating an AI Chat Web app from VS by @​MackinnonBuck in #​6653
• Add ChatMessage.CreatedAt by @​stephentoub in #​6657
• Add TextContent.Annotations by @​stephentoub in #​6619
• Add FunctionInvokingChatClient.AdditionalTools by @​stephentoub in #​6661
• Fix unintentional test env var change by @​stephentoub in #​6660
• Add more openai conversion helpers by @​stephentoub in #​6662
• Add OriginalRepoCommitHash to assemblies by @​BrennanConroy in #​6667
• Include a trivial items keyword if missing. by @​eiriktsarpalis in #​6669
• Add resolution of function parameter level data annotation attributes. by @​eiriktsarpalis in #​6671
• Fix issue with NetSourceIndexStage1 for dependency conflict versions by @​joperezr in #​6672
• Expose streaming conversion utility methods by @​stephentoub in #​6636
• Couple of fixes for MEAI.Evaluation by @​shyamnamboodiripad in #​6673
• Fix one more version conflict on the docs transport package by @​joperezr in #​6675
• Introduce metadata to identify built-in evaluation metrics by @​shyamnamboodiripad in #​6674
• [main] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​6679
• Emit {OriginalFormat} in HttpClient logger by @​iliar-turdushev in #​6682
• Update to OpenAI 2.3.0 by @​stephentoub in #​6684
• Remove AdjustTime from experimental by @​amadeuszl in #​6668
• Allow custom filtering logic for FakeLogger by @​Demo30 in #​5848
• Mark packages as stable and update to .NET Servicing versions by @​joperezr in #​6700
• [release/9.8] Backport several AI-related PRs by @​stephentoub in #​6703
• [release/9.8] Update Azure.AI.OpenAI by @​github-actions[bot] in #​6710
• [release/9.8] Add support for text-to-image by @​ericstj in #​6711
• [release/9.8] Use Azure hosting integrations in Aspire AI Chat Web template by @​MackinnonBuck in #​6712
• [release/9.8] Add middleware for reducing chat history by @​github-actions[bot] in #​6713

New Contributors

• @​joelverhagen made their first contribution in #​6568
• @​bdovaz made their first contribution in #​6219
• @​petrroll made their first contribution in #​6585

Full Changelog: dotnet/extensions@v9.7.0...v9.8.0

v9.7.0

What's Changed

• Branding updates for 9.7 by @​joperezr in #​6495
• Fix name of genai input/output tokens tag by @​stephentoub in #​6494
• [main] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​6503
• Improve handling of RawRepresentation in OpenAI{Response}ChatClient by @​stephentoub in #​6500
• Bring back AsIChatClient for OpenAI AssistantClient by @​stephentoub in #​6501
• Add resiliency to Resource Monitoring in Linux by @​amadeuszl in #​6489
• Merging changes from the internal fork by @​joperezr in #​6508
• Workaround OpenAI assistant's RunCreationOption's tools override by @​stephentoub in #​6512
• Add ChatOptions.Instructions by @​stephentoub in #​6505
• Introduce evaluators for agentic workflows by @​shyamnamboodiripad in #​6514
• Allow a CachingChatClient to control per-request caching by @​stephentoub in #​6524
• Tweak OpenAI JSON schema transforms by @​stephentoub in #​6523
• Merging changes from release/9.6 branch by @​joperezr in #​6516
• Augment AIJsonUtilities.CreateJsonSchema for more types and annotations by @​stephentoub in #​6540
• Added conversions from AIFunction to various OpenAI tools by @​KrzysztofCwalina in #​6539
• Add SpeechToTextResponse.Usage by @​stephentoub in #​6546
• Implement BLEU score evaluation for NLP tests by @​peterwald in #​6537
• [main] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​6553
• #​5962 Change to early return of OS instead of throwing by @​juliankock in #​5963
• Mark log sampling & buffering API as stable by @​evgenyfedorov2 in #​6534
• Update GenAI otel impl for v1.35 by @​stephentoub in #​6557
• Implement GLEU and F1 NLP evaluators by @​peterwald in #​6555
• Update tokenizer algorithm to use is [..] by @​peterwald in #​6561
• Rename some constants to match convention by @​shyamnamboodiripad in #​6562
• Add DistributedCachingChatClient/EmbeddingGenerator.AdditionalCacheKeyValues by @​stephentoub in #​6558

New Contributors

• @​KrzysztofCwalina made their first contribution in #​6539
• @​juliankock made their first contribution in #​5963

Full Changelog: dotnet/extensions@v9.6.0...v9.7.0

v9.6.0

What's Changed

• Branding updates for 9.6.0 by @​joperezr in #​6399
• Add log buffering info to README.md by @​evgenyfedorov2 in #​6403
• Fix dynamic config update for log buffering by @​evgenyfedorov2 in #​6435
• Remove unused select param from CreateRecordsForDocumentAsync by @​jongalloway in #​6341
• Merge internal changes by @​joperezr in #​6437
• Reduce per-lookup overhead from key validation in HybridCache by @​MihaZupan in #​6441
• [main] Update dependencies from dotnet/arcade by @​dotnet-maestro in #​6443
• Merge release/9.5 into main by @​joperezr in #​6448
• Fix up comments in eval API json files by @​shyamnamboodiripad in #​6452
• Remove preview tag on Azure DevOps extension by @​peterwald in #​6456
• Bump PackageValidation against 9.5.0 and enable for stable MEAI packages by @​joperezr in #​6458
• Fix paramref tag by @​gewarren in #​6459
• [main] Update dependencies from dotnet/arcade by @​dotnet-maestro in #​6462
• Add a script to diff the contents of folders that match a specific pattern across two branches by @​shyamnamboodiripad in #​6453
• Remove title and description keywords from root-level schemas in AIFunctionFactory. by @​eiriktsarpalis in #​6465
• Replace JSON vector store with SQLite by @​MackinnonBuck in #​6438
• Update chat template Microsoft.SemanticKernel dependency to 1.53.0 by @​MackinnonBuck in #​6470
• Update chat template external dependencies by @​MackinnonBuck in #​6471
• Exclude provider URI from cache key computation by default by @​shyamnamboodiripad in [#​6473](https://red

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (in timezone Asia/Shanghai)

• Branch creation
  • "before 1am,before 5am,before 9am"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.