Skip to content

chore(deps): Bump the nuget-dependencies group with 5 updates#80

Merged
JerrettDavis merged 1 commit into
mainfrom
dependabot/nuget/nuget-dependencies-8c27c686f7
Jul 13, 2026
Merged

chore(deps): Bump the nuget-dependencies group with 5 updates#80
JerrettDavis merged 1 commit into
mainfrom
dependabot/nuget/nuget-dependencies-8c27c686f7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 13, 2026

Copy link
Copy Markdown
Contributor

Updated Meziantou.Analyzer from 3.0.119 to 3.0.122.

Release notes

Sourced from Meziantou.Analyzer's releases.

3.0.122

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.122

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.121...3.0.122

3.0.121

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.121

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.120...3.0.121

3.0.120

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.120

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.119...3.0.120

Commits viewable in compare view.

Updated Microsoft.SemanticKernel from 1.77.0 to 1.78.0.

Release notes

Sourced from Microsoft.SemanticKernel's releases.

1.78.0

Changes:

  • 35ba23e1b3092271c778ca057afe1a796e16e70e .Net: Update package version to 1.78.0 (#​14142)
  • e6c9673684ca03621885083faff1644e1f42695e .Net: Disable automatic HTTP redirects in HttpPlugin and WebFileDownloadPlugin default clients (#​14132)
  • f25753be0a126138d2eea39b0ca2985252dde25a Bump Scriban from 7.2.0 to 7.2.5 to fix NU1902 vulnerability (#​14133)
  • dfc5227227352e7cf4b11de1d9b8e49ebc7b43ff .Net: Update .NET SDK to 10.0.301 (#​14119)
  • cf9af8b966841e8f16d528bd0f2c69c51213b68d .Net: Bump axios to 1.16.0 and form-data to 4.0.6 in /dotnet/samples/Demos/ProcessFrameworkWithSignalR (#​13858)
See More
  • e99c633fba9e4005bdb9b90a1f5441945b781040 .Net: Harden file path validation in Core, Document, and Web plugins (#​14118)
  • 99d1953e935bd88a4cc993cbad9485703734f1b5 Bump axios from 1.13.2 to 1.16.0 in /dotnet/samples/Demos/ProcessFrameworkWithSignalR/src/ProcessFramework.Aspire.SignalR.ReactFrontend (#​14044) [ #​10795, #​10822, #​10825, #​10729, #​7378, #​10745, #​10810, #​10802, #​6485, #​10680, #​6897, #​10794, #​10800, #​6241, #​10708, #​10819, #​7149, #​10772, #​10806, #​7260, #​10787, #​10724, #​7276, #​7414, #​6389, #​6460, #​10833, #​10588, #​7419, #​10820, #​10791, #​10796, #​10821, #​10782, #​10759, #​10804, #​10785, #​10813, #​10814, #​10790, #​10834 ]
  • 82f244233b89d38bf5e424ca409caa46f14490e6 .Net: Update SK to use MEVD packages and move MEVD projects out of main solution (#​14117)
  • 8ce2bcc07f0ce5e56052ffd4abd0332cc8fc08e5 .Net: Bump Aspire.Hosting.Azure.CognitiveServices from 13.0.0 to 13.3.0 (#​13996)
  • 20be253d7b4a41c8943f36addd8b6365bdcf7299 .Net: Bump esbuild, @​vitejs/plugin-react, vite, and transitive lockfile deps in /dotnet/samples/Demos/ProcessFrameworkWithSignalR/src/ProcessFramework.Aspire.SignalR.ReactFrontend (#​14070)
  • 445fd0ea5364622d30069510f639032ecea6eaff .Net: Bump Aspire.Azure.Search.Documents from 9.5.1 to 13.3.0 (#​13994)
  • 367c75f4ff972e7a2281dcae4bd74800c5eef9eb .Net: Bump minimatch from 3.1.2 to 3.1.5 in /dotnet/samples/Demos/ProcessWithCloudEvents/ProcessWithCloudEvents.Client (#​13604)
  • 6209c77fd52d6ff99d7797d66639055b36a91ae3 .Net: Bump @​babel/core from 7.26.10 to 7.29.7 in /dotnet/samples/Demos/ProcessWithCloudEvents/ProcessWithCloudEvents.Client (#​14083) [ #​18014, #​18001, #​17998, #​17992, #​17974, #​17923, #​17931, #​17915, #​17788, #​17739, #​17606, #​17592, #​17589 ]
  • 1ad0b7501bd9c8f8dfbafb7c1aa69fab1ba4cd28 Bump Aspire.Hosting.AppHost from 13.0.0 to 13.3.0 (#​13995)
  • 56422ada8aa95702aab5c969805c3395dd2f5022 .Net: Bump follow-redirects from 1.15.11 to 1.16.0 in /dotnet/samples/Demos/ProcessFrameworkWithSignalR/src/ProcessFramework.Aspire.SignalR.ReactFrontend (#​13877)
  • a5e8f9b43230675c86dcb7c3ff5021914537f8be .Net: Bump form-data from 4.0.5 to 4.0.6 in /dotnet/samples/Demos/ProcessFrameworkWithSignalR/src/ProcessFramework.Aspire.SignalR.ReactFrontend (#​14082)
  • 7fd75c3c73ac84106ce2883bae32b50c99378e40 .Net: fix: prevent duplicate "null" in JSON Schema type arrays for nullable parameters (#​13635) [ #​13527 ]
  • f8c757b218cfe70cd9bc0d921eb0828d290cbe56 Fix MessagePack high severity vulnerability (#​14079)

This list of changes was auto generated.

Commits viewable in compare view.

Updated Microsoft.SemanticKernel.Connectors.OpenAI from 1.77.0 to 1.78.0.

Release notes

Sourced from Microsoft.SemanticKernel.Connectors.OpenAI's releases.

1.78.0

Changes:

  • 35ba23e1b3092271c778ca057afe1a796e16e70e .Net: Update package version to 1.78.0 (#​14142)
  • e6c9673684ca03621885083faff1644e1f42695e .Net: Disable automatic HTTP redirects in HttpPlugin and WebFileDownloadPlugin default clients (#​14132)
  • f25753be0a126138d2eea39b0ca2985252dde25a Bump Scriban from 7.2.0 to 7.2.5 to fix NU1902 vulnerability (#​14133)
  • dfc5227227352e7cf4b11de1d9b8e49ebc7b43ff .Net: Update .NET SDK to 10.0.301 (#​14119)
  • cf9af8b966841e8f16d528bd0f2c69c51213b68d .Net: Bump axios to 1.16.0 and form-data to 4.0.6 in /dotnet/samples/Demos/ProcessFrameworkWithSignalR (#​13858)
See More
  • e99c633fba9e4005bdb9b90a1f5441945b781040 .Net: Harden file path validation in Core, Document, and Web plugins (#​14118)
  • 99d1953e935bd88a4cc993cbad9485703734f1b5 Bump axios from 1.13.2 to 1.16.0 in /dotnet/samples/Demos/ProcessFrameworkWithSignalR/src/ProcessFramework.Aspire.SignalR.ReactFrontend (#​14044) [ #​10795, #​10822, #​10825, #​10729, #​7378, #​10745, #​10810, #​10802, #​6485, #​10680, #​6897, #​10794, #​10800, #​6241, #​10708, #​10819, #​7149, #​10772, #​10806, #​7260, #​10787, #​10724, #​7276, #​7414, #​6389, #​6460, #​10833, #​10588, #​7419, #​10820, #​10791, #​10796, #​10821, #​10782, #​10759, #​10804, #​10785, #​10813, #​10814, #​10790, #​10834 ]
  • 82f244233b89d38bf5e424ca409caa46f14490e6 .Net: Update SK to use MEVD packages and move MEVD projects out of main solution (#​14117)
  • 8ce2bcc07f0ce5e56052ffd4abd0332cc8fc08e5 .Net: Bump Aspire.Hosting.Azure.CognitiveServices from 13.0.0 to 13.3.0 (#​13996)
  • 20be253d7b4a41c8943f36addd8b6365bdcf7299 .Net: Bump esbuild, @​vitejs/plugin-react, vite, and transitive lockfile deps in /dotnet/samples/Demos/ProcessFrameworkWithSignalR/src/ProcessFramework.Aspire.SignalR.ReactFrontend (#​14070)
  • 445fd0ea5364622d30069510f639032ecea6eaff .Net: Bump Aspire.Azure.Search.Documents from 9.5.1 to 13.3.0 (#​13994)
  • 367c75f4ff972e7a2281dcae4bd74800c5eef9eb .Net: Bump minimatch from 3.1.2 to 3.1.5 in /dotnet/samples/Demos/ProcessWithCloudEvents/ProcessWithCloudEvents.Client (#​13604)
  • 6209c77fd52d6ff99d7797d66639055b36a91ae3 .Net: Bump @​babel/core from 7.26.10 to 7.29.7 in /dotnet/samples/Demos/ProcessWithCloudEvents/ProcessWithCloudEvents.Client (#​14083) [ #​18014, #​18001, #​17998, #​17992, #​17974, #​17923, #​17931, #​17915, #​17788, #​17739, #​17606, #​17592, #​17589 ]
  • 1ad0b7501bd9c8f8dfbafb7c1aa69fab1ba4cd28 Bump Aspire.Hosting.AppHost from 13.0.0 to 13.3.0 (#​13995)
  • 56422ada8aa95702aab5c969805c3395dd2f5022 .Net: Bump follow-redirects from 1.15.11 to 1.16.0 in /dotnet/samples/Demos/ProcessFrameworkWithSignalR/src/ProcessFramework.Aspire.SignalR.ReactFrontend (#​13877)
  • a5e8f9b43230675c86dcb7c3ff5021914537f8be .Net: Bump form-data from 4.0.5 to 4.0.6 in /dotnet/samples/Demos/ProcessFrameworkWithSignalR/src/ProcessFramework.Aspire.SignalR.ReactFrontend (#​14082)
  • 7fd75c3c73ac84106ce2883bae32b50c99378e40 .Net: fix: prevent duplicate "null" in JSON Schema type arrays for nullable parameters (#​13635) [ #​13527 ]
  • f8c757b218cfe70cd9bc0d921eb0828d290cbe56 Fix MessagePack high severity vulnerability (#​14079)

This list of changes was auto generated.

Commits viewable in compare view.

Updated Nerdbank.GitVersioning from 3.10.85 to 3.10.91.

Release notes

Sourced from Nerdbank.GitVersioning's releases.

3.10.91

What's Changed

Full Changelog: dotnet/Nerdbank.GitVersioning@v3.10.85...v3.10.91

Commits viewable in compare view.

Updated PatternKit.Core from 0.147.8 to 0.147.10.

Release notes

Sourced from PatternKit.Core's releases.

0.147.10

What's Changed

Full Changelog: JerrettDavis/PatternKit@v0.147.9...v0.147.10

0.147.9

What's Changed

Full Changelog: JerrettDavis/PatternKit@v0.147.8...v0.147.9

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps Meziantou.Analyzer from 3.0.119 to 3.0.122
Bumps Microsoft.SemanticKernel from 1.77.0 to 1.78.0
Bumps Microsoft.SemanticKernel.Connectors.OpenAI from 1.77.0 to 1.78.0
Bumps Nerdbank.GitVersioning from 3.10.85 to 3.10.91
Bumps PatternKit.Core from 0.147.8 to 0.147.10

---
updated-dependencies:
- dependency-name: Meziantou.Analyzer
  dependency-version: 3.0.122
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-dependencies
- dependency-name: Microsoft.SemanticKernel
  dependency-version: 1.78.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-dependencies
- dependency-name: Microsoft.SemanticKernel.Connectors.OpenAI
  dependency-version: 1.78.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-dependencies
- dependency-name: Nerdbank.GitVersioning
  dependency-version: 3.10.91
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-dependencies
- dependency-name: PatternKit.Core
  dependency-version: 0.147.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@github-actions

Copy link
Copy Markdown

⚠️ Deprecation Warning: The deny-licenses option is deprecated for possible removal in the next major release. For more information, see issue 997.

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Scanned Files

None

@github-actions

Copy link
Copy Markdown

Test Results

243 tests   217 ✅  8s ⏱️
  8 suites   26 💤
  8 files      0 ❌

Results for commit 976c31a.

@github-actions

Copy link
Copy Markdown

Code Coverage

Summary
  Generated on: 07/13/2026 - 11:35:05
  Coverage date: 07/13/2026 - 11:34:57 - 07/13/2026 - 11:35:02
  Parser: MultiReport (8x Cobertura)
  Assemblies: 7
  Classes: 59
  Files: 56
  Line coverage: 74.5%
  Covered lines: 1339
  Uncovered lines: 457
  Coverable lines: 1796
  Total lines: 5078
  Branch coverage: 59.5% (492 of 826)
  Covered branches: 492
  Total branches: 826
  Method coverage: 85.2% (225 of 264)
  Full method coverage: 71.5% (189 of 264)
  Covered methods: 225
  Fully covered methods: 189
  Total methods: 264

JD.SemanticKernel.Extensions.Compaction                                          98.1%
  JD.SemanticKernel.Extensions.Compaction.CompactionFilter                        100%
  JD.SemanticKernel.Extensions.Compaction.CompactionOptions                       100%
  JD.SemanticKernel.Extensions.Compaction.ContextPercentageTrigger               87.5%
  JD.SemanticKernel.Extensions.Compaction.HierarchicalSummarizationStrategy      97.7%
  JD.SemanticKernel.Extensions.Compaction.ServiceCollectionExtensions             100%
  JD.SemanticKernel.Extensions.Compaction.TokenEstimator                          100%
  JD.SemanticKernel.Extensions.Compaction.TokenThresholdTrigger                   100%

JD.SemanticKernel.Extensions.Hooks                                               76.5%
  JD.SemanticKernel.Extensions.Hooks.CommandHookExecutor                            0%
  JD.SemanticKernel.Extensions.Hooks.ExtensionEvent                               100%
  JD.SemanticKernel.Extensions.Hooks.ExtensionEventBus                            100%
  JD.SemanticKernel.Extensions.Hooks.HookBuilder                                  100%
  JD.SemanticKernel.Extensions.Hooks.HookDefinition                               100%
  JD.SemanticKernel.Extensions.Hooks.HookParser                                  83.9%
  JD.SemanticKernel.Extensions.Hooks.KernelBuilderExtensions                     32.2%
  JD.SemanticKernel.Extensions.Hooks.SkHookFilter                                 100%
  JD.SemanticKernel.Extensions.Hooks.SkPromptHookFilter                           100%

JD.SemanticKernel.Extensions.Mcp                                                 60.4%
  JD.SemanticKernel.Extensions.Mcp.Discovery.ClaudeCodeMcpDiscoveryProvider       100%
  JD.SemanticKernel.Extensions.Mcp.Discovery.ClaudeDesktopMcpDiscoveryProvider    4.3%
  JD.SemanticKernel.Extensions.Mcp.Discovery.CodexMcpDiscoveryProvider           18.1%
  JD.SemanticKernel.Extensions.Mcp.Discovery.CopilotMcpDiscoveryProvider          4.7%
  JD.SemanticKernel.Extensions.Mcp.Discovery.FileMcpDiscoveryProvider            92.8%
  JD.SemanticKernel.Extensions.Mcp.Discovery.JdCanonicalMcpDiscoveryProvider     93.1%
  JD.SemanticKernel.Extensions.Mcp.Discovery.McpConfigParser                     73.9%
  JD.SemanticKernel.Extensions.Mcp.Discovery.VsCodeMcpDiscoveryProvider          86.6%
  JD.SemanticKernel.Extensions.Mcp.KernelBuilderMcpExtensions                       0%
  JD.SemanticKernel.Extensions.Mcp.KernelIntegration.McpKernelPluginFactory         0%
  JD.SemanticKernel.Extensions.Mcp.McpClientRegistry                                0%
  JD.SemanticKernel.Extensions.Mcp.McpInvocationResult                            100%
  JD.SemanticKernel.Extensions.Mcp.McpServerDefinition                            100%
  JD.SemanticKernel.Extensions.Mcp.McpToolDefinition                              100%
  JD.SemanticKernel.Extensions.Mcp.McpToolParameter                              93.3%
  JD.SemanticKernel.Extensions.Mcp.Registry.McpRegistry                           100%
  JD.SemanticKernel.Extensions.Mcp.Transport.HttpMcpClient                       87.6%
  JD.SemanticKernel.Extensions.Mcp.Transport.McpResponseParser                   90.3%
  JD.SemanticKernel.Extensions.Mcp.Transport.StdioMcpClient                      56.5%

JD.SemanticKernel.Extensions.Memory                                              94.5%
  JD.SemanticKernel.Extensions.Memory.InMemoryBackend                            96.1%
  JD.SemanticKernel.Extensions.Memory.MemoryRecord                                100%
  JD.SemanticKernel.Extensions.Memory.MemoryResult                                100%
  JD.SemanticKernel.Extensions.Memory.MemorySearchOptions                         100%
  JD.SemanticKernel.Extensions.Memory.MmrReranker                                96.9%
  JD.SemanticKernel.Extensions.Memory.QueryExpander                               100%
  JD.SemanticKernel.Extensions.Memory.SemanticMemory                             92.5%
  JD.SemanticKernel.Extensions.Memory.SemanticMemoryOptions                       100%
  JD.SemanticKernel.Extensions.Memory.ServiceCollectionExtensions                76.9%
  JD.SemanticKernel.Extensions.Memory.TemporalDecayScorer                         100%

JD.SemanticKernel.Extensions.Memory.Sqlite                                       94.9%
  JD.SemanticKernel.Extensions.Memory.Sqlite.ServiceCollectionExtensions          100%
  JD.SemanticKernel.Extensions.Memory.Sqlite.SqliteMemoryBackend                 94.7%

JD.SemanticKernel.Extensions.Plugins                                             74.5%
  JD.SemanticKernel.Extensions.Plugins.KernelBuilderExtensions                      0%
  JD.SemanticKernel.Extensions.Plugins.LoadedPlugin                               100%
  JD.SemanticKernel.Extensions.Plugins.PluginDependencyResolver                   100%
  JD.SemanticKernel.Extensions.Plugins.PluginLoader                              96.8%
  JD.SemanticKernel.Extensions.Plugins.PluginLoadOptions                            0%
  JD.SemanticKernel.Extensions.Plugins.PluginManifest                             100%

JD.SemanticKernel.Extensions.Skills                                              84.1%
  JD.SemanticKernel.Extensions.Skills.KernelBuilderExtensions                       0%
  JD.SemanticKernel.Extensions.Skills.SkillDefinition                             100%
  JD.SemanticKernel.Extensions.Skills.SkillKernelFunction                         100%
  JD.SemanticKernel.Extensions.Skills.SkillLoader                                 100%
  JD.SemanticKernel.Extensions.Skills.SkillLoadOptions                              0%
  JD.SemanticKernel.Extensions.Skills.SkillParser                                97.2%

@JerrettDavis JerrettDavis merged commit b02741b into main Jul 13, 2026
12 checks passed
@dependabot dependabot Bot deleted the dependabot/nuget/nuget-dependencies-8c27c686f7 branch July 13, 2026 23:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant