Bump Microsoft.Extensions.AI.Abstractions from 10.5.0 to 10.5.1 - #17
Closed
dependabot[bot] wants to merge 1 commit into
Closed
Bump Microsoft.Extensions.AI.Abstractions from 10.5.0 to 10.5.1#17dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
--- updated-dependencies: - dependency-name: Microsoft.Extensions.AI.Abstractions dependency-version: 10.5.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
.NET
msanlisavas
added a commit
that referenced
this pull request
Sep 10, 2026
- Group Microsoft.Extensions.*: under central transitive pinning a partial bump fails restore with NU1109, as it did in #9. - Group xunit.v3 with xunit.runner.visualstudio, which release together. - Group minor and patch updates of the test tooling, and all GitHub Actions, which share the same three workflow files. - Ignore Microsoft.Extensions.AI.Abstractions and ModelContextProtocol. Both set the minimum version for AiAgentHub consumers: 10.5.1+ removed WebSearchToolResultContent.Results (dotnet/extensions#7503), and every ModelContextProtocol after 1.2.0 needs a higher Abstractions. Closing #17 on its own would only have ignored 10.5.1. - Ignore major updates of the Blazor WebAssembly packages while the sample targets net9.0 (10.x is net10.0-only, see #7).
msanlisavas
added a commit
that referenced
this pull request
Sep 10, 2026
…es (#25) Supersedes #18-#24 as one change, built and tested together; declines #17; configures Dependabot so updates stop piling up. Security (none of these was reported by Dependabot): - Microsoft.SourceLink.GitHub 10.0.203 -> 10.0.401. 10.0.203 pins Microsoft.Build.Tasks.Git 10.0.203 (GHSA-23fw-v26w-5fgq, CVE-2026-62900); the 10.0.2xx band has no patched release. Build-time only. - MockTests: WireMock.Net 2.4.0 -> WireMock.Net.Minimal 2.15.0. 2.4.0 and #19's 2.5.0 resolve Scriban.Signed 7.0.6 (GHSA-24c8-4792-22hx and others). Minimal also avoids JsonPath.Net/Json.More.Net (OSMF EULA), which WireMock.Net pulls in from 2.8.0. - Transitive pins for advisories published only on the upstream repos: Scriban.Signed 7.2.7 (GHSA-89cf-6hmv-8rxm) and SharpYaml 2.1.5 (GHSA-f5r6-g6gp-5xmf). Tests only; maintained by hand. Tests: xunit.v3 1.0.0 -> 3.2.2, xunit.runner.visualstudio 3.0.0 -> 3.1.5, Microsoft.NET.Test.Sdk 18.4.0 -> 18.10.0. Drops the unused, deprecated Verify.Xunit entry. Actions: checkout v6 -> v7, cache v4 -> v6, setup-dotnet v5 -> v6. Not taken: Microsoft.Extensions.AI.Abstractions 10.5.1 (#17). It removed WebSearchToolResultContent.Results (dotnet/extensions#7503), so raising the AiAgentHub/AiAgentHub.Mcp floor would break consumers whose provider SDK was built against 10.5.0 or earlier. Dependabot: group Microsoft.Extensions.* (a partial bump fails restore with NU1109, see #9), xunit.v3 with its VSTest adapter, minor/patch test tooling, the Blazor pair, and all GitHub Actions. Ignore Microsoft.Extensions.AI.Abstractions and ModelContextProtocol (published floors, raised by hand), Microsoft.Extensions.* majors (same reason), PublicApiAnalyzers majors (5.x fails the build with RS0016 on record members), and Blazor WebAssembly majors while the sample targets net9.0 (#7). open-pull-requests-limit raised to 10. Packed nuspec dependencies are unchanged.
Contributor
Author
|
Looks like Microsoft.Extensions.AI.Abstractions is no longer being updated by Dependabot, so this is no longer needed. |
dependabot
Bot
deleted the
dependabot/nuget/Microsoft.Extensions.AI.Abstractions-10.5.1
branch
September 10, 2026 10:01
Owner
|
For the record: not merged on purpose. 10.5.1 removed |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Updated Microsoft.Extensions.AI.Abstractions from 10.5.0 to 10.5.1.
Release notes
Sourced from Microsoft.Extensions.AI.Abstractions's releases.
10.5.1
Version 10.5.1 of the Microsoft.Extensions.AI packages stabilizes CodeInterpreter, WebSearch, and ImageGeneration tool content types. The release adds new experimental tool search and OpenAI request policy hooks. And the OpenTelemetry gen-ai semantic conventions are updated to align with v1.41.
The 'aiagent-webapi' project template in Microsoft.Agents.AI.ProjectTemplates is updated to align with v1.3.0 of Agent Framework, updating the OpenTelemetry dependencies within the template projects as well.
Packages in this release
Experimental API Changes
Now Stable
The following types previously emitted the
MEAI001experimental diagnostic and are now stable.CodeInterpreterToolCallContentCodeInterpreterToolResultContentWebSearchToolCallContentWebSearchToolResultContentImageGenerationToolCallContentImageGenerationToolResultContentHostedImageGenerationToolImageGenerationOptionsImageGenerationResponseFormat(theHostedenum value remains experimental)IImageGeneratorand the rest of the image generation infrastructure also remain experimentalNew Experimental APIs
The following new APIs emit the
MEAI001experimental diagnostic.HostedToolSearchToolwithDeferredToolsfor tool-search-driven deferred tool loading #7471OpenAIRequestPoliciesextension hook for appendingSystem.ClientModel.PipelinePolicyinstances to outgoing OpenAI requests #7495Breaking Changes to Experimental APIs
WebSearchToolResultContent.Resultswas renamed toOutputsas part of the stabilization in #7493, aligning withCodeInterpreterToolResultContent.Outputs. The originalResultsproperty was included in version 10.4.0 and 10.5.0; this is a binary breaking change and consumers need to update to consume the updated property.... (truncated)
Commits viewable in compare view.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)