Bump the nuget-all group with 11 updates

[dependabot]

Updated Microsoft.AspNetCore.OpenApi from 10.0.9 to 10.0.10.

Release notes

Sourced from Microsoft.AspNetCore.OpenApi's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Azure.Functions.Worker.Extensions.DurableTask from 1.17.1 to 1.18.0.

Release notes

Sourced from Microsoft.Azure.Functions.Worker.Extensions.DurableTask's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Azure.Functions.Worker.Extensions.DurableTask.AzureManaged from 1.9.0 to 1.10.0.

Release notes

Sourced from Microsoft.Azure.Functions.Worker.Extensions.DurableTask.AzureManaged's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Azure.Functions.Worker.Extensions.Http.AspNetCore from 2.1.0 to 2.1.1.

Release notes

Sourced from Microsoft.Azure.Functions.Worker.Extensions.Http.AspNetCore's releases.

2.1.1

What's Changed

Microsoft.Azure.Functions.Worker.Extensions.Http.AspNetCore 2.1.1

• Fix response cookie duplication in ASP.NET Core integration by giving IHeaderDictionary indexer setters replace semantics, including removing the header when assigned StringValues.Empty (#​3353)
• Pass cancellation tokens (RequestAborted / CancellationToken) through to WaitAsync calls so cancelled HTTP
  requests propagate promptly instead of waiting for timeout (#​3415)
• Fix intermittent InvalidOperationException due to race condition between SetResult call on TCS and HTTP request cancellation/timeout (#​3415)

Commits viewable in compare view.

Updated Microsoft.Azure.Functions.Worker.Sdk from 2.0.7 to 2.1.0.

Release notes

Sourced from Microsoft.Azure.Functions.Worker.Sdk's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.AI.OpenAI from 10.7.0 to 10.8.3.

Release notes

Sourced from Microsoft.Extensions.AI.OpenAI's releases.

10.8.3

Packages in this release

Package	Version
Microsoft.Extensions.AI	10.8.3
Microsoft.Extensions.AI.Abstractions	10.8.3
Microsoft.Extensions.AI.OpenAI	10.8.3

Experimental API Changes

Experimental API behavior updates

• Updated serialization behavior for experimental ToolApprovalRequestContent.RequiresConfirmation so it no longer leaks into consumer source-generated AIContent JSON metadata unless approval APIs are intentionally used (#​7659).

What's Changed

AI abstractions and serialization

• Fixed MEAI001 leakage from RequiresConfirmation in source-generated AIContent contexts by using an internal JSON-included backing member while keeping the public experimental member ignored for source-generation metadata (#​7659).

Test Improvements

• Added stabilization regression coverage to verify consumer source-generated List<AIContent> contexts compile and round-trip without requiring MEAI001 suppression (#​7659).

Full Changelog

• dotnet/extensions@v10.8.2...v10.8.3

10.8.2

This servicing release updates Microsoft.Extensions.VectorData.ConformanceTests to 10.8.2 and includes targeted test framework migration fixes.

Packages in this release

Package	Version
Microsoft.Extensions.VectorData.ConformanceTests	10.8.2

What's Changed

AI

• Move Microsoft.Extensions.VectorData.ConformanceTests to xUnit 3 #​7636 by @​adamsitnik (co-authored by @​Copilot)

Acknowledgements

• @​roji reviewed pull requests

Full Changelog: dotnet/extensions@v10.8.1...v10.8.2

10.8.1

This servicing release updates the Microsoft.Extensions.AI, Microsoft.Extensions.AI.Abstractions, and Microsoft.Extensions.AI.OpenAI packages to 10.8.1 with two targeted fixes: correct tool-call/tool-result ordering when resuming approval-gated functions with service-managed chat history, and preservation of the OpenAI Responses reasoning item id for stateless (store=false) encrypted reasoning.

Packages in this release

Package	Version
Microsoft.Extensions.AI	10.8.1
Microsoft.Extensions.AI.Abstractions	10.8.1
Microsoft.Extensions.AI.OpenAI	10.8.1

What's Changed

AI

• Fix FICC tool_calls/tool ordering with approvals and service-managed chat history #​7617 by @​westey-m
• Roundtrip OpenAI Responses reasoning item id for stateless (store=false) encrypted reasoning #​7629 by @​rogerbarreto (co-authored by @​tarekgh)

Acknowledgements

• @​jozkee reviewed pull requests

Full Changelog: dotnet/extensions@v10.8.0...v10.8.1

10.8.0

This release adds new experimental APIs to Microsoft.Extensions.AI.Abstractions and updates the OpenAI dependency to 2.12.0, alongside documentation, test, and repository maintenance.

Experimental API Changes

New Experimental APIs

• New experimental API: AIFunctionNameAttribute and AIParameterNameAttribute #​7610 by @​jozkee (co-authored by @​jeffhandley @​Copilot)
• New experimental API: ToolApprovalRequestContent.RequiresConfirmation (MEAI001) #​7549 by @​javiercn (co-authored by @​Copilot)

What's Changed

AI

• Upgrade OpenAI dependency to 2.12.0 #​7608 by @​jozkee (co-authored by @​Copilot)
• Auto-detect audio format in OpenAISpeechToTextClient #​7575 by @​jozkee (co-authored by @​Copilot)
• Fix ImageGeneratingChatClient duplicating preceding content and dropping following content #​7624 by @​jozkee (co-authored by @​Copilot)

Vector Data

• Make all test methods virtual in VectorData.ConformanceTests #​7606 by @​adamsitnik (co-authored by @​Copilot)

Documentation Updates

• Remove links to ai-samples repo #​7574 by @​gewarren
• Fix up docs with Copilot (MEVD) #​7597 by @​gewarren
• Fix up docs with Copilot (M.E.ServiceDiscovery) #​7598 by @​gewarren (co-authored by @​Copilot)
• Fix up docs with Copilot (MEAI) #​7600 by @​gewarren
• Fix up docs with Copilot #​7601 by @​gewarren

Test Improvements

• Fix flaky StampedeTests and harden related test waits #​7572 by @​jeffhandley (co-authored by @​Copilot)
• Fix SQLitePCLRaw.lib.e_sqlite3 vulnerability by replacing SemanticKernel connectors with CommunityToolkit #​7579 by @​adamsitnik (co-authored by @​Copilot)
• Removing SemanticKernel Connectors dependency and replacing it #​7584 by @​adamsitnik (co-authored by @​Copilot)
• Migrate to xUnit v3 #​7607 by @​adamsitnik (co-authored by @​shyamnamboodiripad @​Copilot)

Repository Infrastructure Updates

• Update OTel GenAI conventions skill for standalone semconv-genai repo #​7519 by @​jeffhandley (co-authored by @​Copilot)
• Bump dotnet-coverage from 18.7.0 to 18.8.0 #​7552
• [main] Update dependencies from dotnet/arcade #​7559
• Fix transitive MessagePack vulnerability in AI template AppHost projects #​7561 by @​adamsitnik (co-authored by @​Copilot)
• Bump esbuild, @​vitejs/plugin-react and vite in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7564
• Bump tmp from 0.2.6 to 0.2.7 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7569
• Bump js-yaml from 4.1.1 to 4.2.0 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7570
• Bump PowerShell from 7.6.2 to 7.6.3 #​7576
• Remove duplicate 'WebAPI' classification from template #​7577 by @​danroth27
• [main] Update dependencies from dotnet/arcade #​7590
• Eliminate redundant Correctness CI stage by merging into Build #​7594 by @​adamsitnik (co-authored by @​Copilot)
• Update Agent Framework to 1.13.0 #​7613 by @​jeffhandley (co-authored by @​Copilot)
  ... (truncated)

Commits viewable in compare view.

Updated Microsoft.Extensions.DependencyInjection from 10.0.9 to 10.0.10.

Release notes

Sourced from Microsoft.Extensions.DependencyInjection's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Hosting from 10.0.9 to 10.0.10.

Release notes

Sourced from Microsoft.Extensions.Hosting's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Logging from 10.0.9 to 10.0.10.

Release notes

Sourced from Microsoft.Extensions.Logging's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Logging.Console from 10.0.9 to 10.0.10.

Release notes

Sourced from Microsoft.Extensions.Logging.Console's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated StackExchange.Redis from 3.0.11 to 3.1.0.

Release notes

Sourced from StackExchange.Redis's releases.

No release notes found for this version range.

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[Copilot]

Pull request overview

Note

Copilot could not run the full agentic suite for this review because it was automatically requested on a bot-authored pull request. Request a review from Copilot under Reviewers to retry with the full agentic suite. Improved support for bot-authored pull requests is coming soon.

Updates sample .NET project dependencies to newer patch/minor versions (Microsoft.Extensions.* and Azure Functions Durable Task-related packages), likely for bug fixes and security/compatibility alignment.

Changes:

• Bump Microsoft.Extensions.* packages from 10.0.9 to 10.0.10 across multiple worker/client samples.
• Update Azure Functions isolated worker packages (DurableTask extensions + Worker SDK) to newer versions (e.g., 1.18.0, 1.10.0, 2.1.0).
• Refresh a few additional dependencies in specific samples (e.g., OpenAPI, Redis, Extensions.AI.OpenAI).

Reviewed changes

Copilot reviewed 28 out of 28 changed files in this pull request and generated 2 comments.

Show a summary per file

File	Description
samples/scenarios/WorkItemFilteringSplitActivities/src/ValidatorWorker/ValidatorWorker.csproj	Bumps Microsoft.Extensions.* patch versions.
samples/scenarios/WorkItemFilteringSplitActivities/src/ShipperWorker/ShipperWorker.csproj	Bumps Microsoft.Extensions.* patch versions.
samples/scenarios/WorkItemFilteringSplitActivities/src/OrchestratorWorker/OrchestratorWorker.csproj	Bumps Microsoft.Extensions.* patch versions.
samples/scenarios/WorkItemFilteringSplitActivities/src/Client/Client.csproj	Bumps logging console package patch version.
samples/scenarios/DocumentProcessingOnAKS/Worker/Worker.csproj	Bumps hosting + logging console patch versions.
samples/scenarios/DocumentProcessingOnAKS/Client/Client.csproj	Bumps hosting + logging console patch versions.
samples/scenarios/AutoscalingInACA/Worker/Worker.csproj	Bumps hosting + logging console patch versions.
samples/scenarios/AutoscalingInACA/Client/Client.csproj	Bumps logging console package patch version.
samples/durable-task-sdks/dotnet/ScheduleWebApp/ScheduleWebApp.csproj	Bumps Microsoft.Extensions.Logging* patch versions.
samples/durable-task-sdks/dotnet/OrchestrationVersioning/OrchestrationVersioning.csproj	Bumps logging console package patch version.
samples/durable-task-sdks/dotnet/FunctionChaining/Worker/Worker.csproj	Bumps hosting + logging console patch versions.
samples/durable-task-sdks/dotnet/FunctionChaining/Client/Client.csproj	Bumps logging console package patch version.
samples/durable-task-sdks/dotnet/ExportHistoryWebApp/ExportHistoryWebApp.csproj	Bumps logging console package patch version.
samples/durable-task-sdks/dotnet/EntitiesSample/AccountTransferBackend.csproj	Bumps logging console package patch version.
samples/durable-task-sdks/dotnet/DtsWithAspire/Worker/Worker.csproj	Bumps hosting + logging console patch versions.
samples/durable-task-sdks/dotnet/DtsWithAspire/Client/Client.csproj	Bumps Microsoft.AspNetCore.OpenApi patch version.
samples/durable-task-sdks/dotnet/AspNetWebApp/AspNetWebApp.csproj	Bumps logging console package patch version.
samples/durable-functions/dotnet/WorkItemFiltering/WorkItemFiltering.csproj	Updates DurableTask extensions + Functions Worker SDK versions.
samples/durable-functions/dotnet/WorkItemFiltering.AppB/AppB.csproj	Updates DurableTask extensions + Functions Worker SDK versions.
samples/durable-functions/dotnet/Saga/DurableFunctionsSaga.csproj	Updates DurableTask extensions, Functions Worker SDK, and Microsoft.Extensions.* patch versions.
samples/durable-functions/dotnet/PdfSummarizer/pdf-summarizer-dotnet.csproj	Updates DurableTask extensions + Functions Worker SDK + Http.AspNetCore patch version.
samples/durable-functions/dotnet/OrderProcessor/OrderProcessor.csproj	Updates DurableTask extensions + Functions Worker SDK + Http.AspNetCore patch version.
samples/durable-functions/dotnet/LargePayloadFanOutFanIn/LargePayloadFanOutFanIn.csproj	Updates DurableTask extensions + Functions Worker SDK + Http.AspNetCore patch version.
samples/durable-functions/dotnet/LargePayload/LargePayload.csproj	Updates DurableTask extensions + Functions Worker SDK + Http.AspNetCore patch version.
samples/durable-functions/dotnet/CustomExceptionPropertyProvider/CustomExceptionPropertyProvider.csproj	Updates DurableTask.AzureManaged + Functions Worker SDK versions.
samples/durable-functions/dotnet/AzureFunctionsAndDtsWithAspire/AzureFunctions/AzureFunctions.csproj	Updates DurableTask extensions + Functions Worker SDK + Http.AspNetCore patch version.
samples/durable-functions/dotnet/AiAgentTravelPlanOrchestrator/TravelPlannerFunctions.csproj	Updates DurableTask.AzureManaged + Functions Worker SDK + Http.AspNetCore patch version.
samples/durable-functions/dotnet/AgentDirectedWorkflows/AgentDirectedWorkflows.csproj	Updates DurableTask extensions + Functions Worker SDK + Redis + Extensions.AI.OpenAI versions.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.