Update all non-major dependencies

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update
AWSSDK.S3	4.0.18.7 → 4.0.102.4					nuget	patch
ErrorOr	2.0.1 → 2.1.1					nuget	minor
FastEndpoints (source)	8.0.1 → 8.3.0					nuget	minor
FastEndpoints.Generator (source)	8.0.1 → 8.3.0					nuget	minor
FastEndpoints.Security (source)	8.0.1 → 8.3.0					nuget	minor
FastEndpoints.Swagger (source)	8.0.1 → 8.3.0					nuget	minor
FastEndpoints.Testing (source)	8.0.1 → 8.3.0					nuget	minor
HtmlSanitizer	9.0.892 → 9.2.1039					nuget	minor
Microsoft.AspNetCore.Authentication.JwtBearer (source)	10.0.3 → 10.0.11					nuget	patch
Microsoft.AspNetCore.Identity.EntityFrameworkCore (source)	10.0.3 → 10.0.11					nuget	patch
Microsoft.AspNetCore.OpenApi (source)	10.0.3 → 10.0.11					nuget	patch
Microsoft.AspNetCore.OutputCaching.StackExchangeRedis (source)	10.0.3 → 10.0.11					nuget	patch
Microsoft.EntityFrameworkCore.InMemory (source)	10.0.3 → 10.0.11					nuget	patch
Microsoft.EntityFrameworkCore.Tools (source)	10.0.3 → 10.0.11					nuget	patch
Microsoft.Extensions.Caching.Hybrid (source)	10.3.0 → 10.9.0					nuget	minor
Microsoft.Extensions.Caching.StackExchangeRedis (source)	10.0.3 → 10.0.11					nuget	patch
Microsoft.Extensions.Http.Resilience (source)	10.3.0 → 10.9.0					nuget	minor
Microsoft.Extensions.TimeProvider.Testing (source)	10.3.0 → 10.9.0					nuget	minor
Microsoft.NET.Test.Sdk	18.3.0 → 18.9.0					nuget	minor
MinecraftRenderer	0.4.2 → 0.9.0					nuget	minor
Npgsql	10.0.1 → 10.0.3					nuget	patch
Npgsql.EntityFrameworkCore.PostgreSQL	10.0.0 → 10.0.3					nuget	patch
OpenTelemetry.Extensions.Hosting (source)	1.15.0 → 1.18.0					nuget	minor
Pyroscope (source)	0.14.1 → 0.15.0					nuget	minor
Pyroscope.OpenTelemetry (source)	0.4.0 → 0.5.1					nuget	minor
Quartz.Extensions.Hosting (source)	3.16.1 → 3.20.0					nuget	minor
Refit	10.0.1 → 10.2.0					nuget	minor
Refit.HttpClientFactory	10.0.1 → 10.2.0					nuget	minor
Scalar.AspNetCore (source)	2.13.1 → 2.17.2					nuget	minor
SkyblockRepo	0.4.3 → 0.5.2					nuget	minor
StackExchange.Redis (source)	2.11.8 → 2.13.17					nuget	minor
Swashbuckle.AspNetCore	10.1.4 → 10.2.3					nuget	minor
Swashbuckle.AspNetCore.Annotations	10.1.4 → 10.2.3					nuget	minor
System.Linq.Async	7.0.0 → 7.0.1					nuget	patch
System.Threading.RateLimiting (source)	10.0.3 → 10.0.11					nuget	patch
Testcontainers.PostgreSql (source)	4.10.0 → 4.14.0					nuget	minor
ZLinq	1.5.5 → 1.5.6					nuget	patch
coverlet.collector	8.0.0 → 8.0.1					nuget	patch
dotnet-ef (source)	10.0.1 → 10.0.11					nuget	patch
prom/prometheus	v3.5.0 → v3.14.0						minor
pyroscope/pyroscope-dotnet	0.13.0-glibc → 0.14.5-glibc					stage	minor
redis (source)	8.4-alpine → 8.10-alpine						minor

---

Release Notes

aws/aws-sdk-net (AWSSDK.S3)

v4.0.102

v4.0.101

v4.0.100

v4.0.25

v4.0.24

v4.0.23

v4.0.22

v4.0.21

v4.0.20

v4.0.19

error-or/error-or (ErrorOr)

v2.1.1

Added

• #​94, #​95 Added missing async versions of FailIf methods

  publicasyncTask<ErrorOr<TValue>>FailIfAsync(Func<TValue,Task<bool>>onValue,Errorerror)

  publicstaticasyncTask<ErrorOr<TValue>>FailIf<TValue>(thisTask<ErrorOr<TValue>>errorOr,Func<TValue,bool>onValue,Errorerror)

  publicstaticasyncTask<ErrorOr<TValue>>FailIfAsync<TValue>(thisTask<ErrorOr<TValue>>errorOr,Func<TValue,Task<bool>>onValue,Errorerror)

• #​104 Support for .NET 8 was added

• #​109, #​111 Added FailIf method overloads that allow to use value in error definition using Func<TValue, Error> error builder

  publicErrorOr<TValue>FailIf(Func<TValue,bool>onValue,Func<TValue,Error>errorBuilder)

  publicasyncTask<ErrorOr<TValue>>FailIfAsync(Func<TValue,Task<bool>>onValue,Func<TValue,Task<Error>>errorBuilder)

  publicstaticasyncTask<ErrorOr<TValue>>FailIf<TValue>(thisTask<ErrorOr<TValue>>errorOr,Func<TValue,bool>onValue,Func<TValue,Error>errorBuilder)

  publicstaticasyncTask<ErrorOr<TValue>>FailIfAsync<TValue>(thisTask<ErrorOr<TValue>>errorOr,Func<TValue,Task<bool>>onValue,Func<TValue,Task<Error>>errorBuilder)

  Value can now be used to build the error:

  ErrorOr<int>result=errorOrInt.FailIf(num =>num>3,(num)=>Error.Failure(description:$"{num} is greater than 3"));

• #​117 Added ElseDo and ElseDoAsync methods

  Actions returning no result can now be called when IsError is true.

  ErrorOr<string>foo=result.Else(errors =>Error.Unexpected()).ElseDo(error =>Console.WriteLine(error.FirstError.Description));

  ErrorOr<string>foo=awaitresult.ElseDoAsync(HandleErrorAsync);

• #​122 Added ToErrorOrAsync method

  Values in Task can now be easily converted to ErrorOr.

  ErrorOr<int>result=awaitTask.FromResult(5).ToErrorOrAsync();

• #​129 Added missing ErrorOrFactory.From methods

  Now following calls from README.md are available

  ErrorOr<int>result=ErrorOrFactory.From<int>(Error.Unexpected());ErrorOr<int>result=ErrorOrFactory.From<int>([Error.Validation(),Error.Validation()]);

  Following call is now obsolete

  ErrorOr<int>errorOrPerson=ErrorOr<int>.From([Error.Validation(),Error.Validation()]);

• #​133 Added missing collection expression support

  Now following call from README.md is available

  ErrorOr<int>result=[Error.Validation(),Error.Validation()];

• #​134 Added FromAsync and missing ToErrorOrAsync methods

  Added support for FromAsync methods.

  publicasyncTak<ErrorOr<int>>GetValueAsync(){returnawaitErrorOrFactory.FromAsync(5);}

  publicasyncTak<ErrorOr<int>>SingleErrorToErrorOrAsync(){returnawaitErrorOrFactory.FromAsync<int>(Error.Unexpected());}

  publicasyncTak<ErrorOr<int>>MultipleErrorsToErrorOrAsync(){returnawaitErrorOrFactory.FromAsync([Error.Validation(description:"Invalid Name"),Error.Validation(description:"Invalid Last Name")]);}

  Added support for ToErrorOrAsync methods from errors:

  Task<Error>errorTask=Task.FromResult(Error.Validation());ErrorOr<int>result=errorTask.ToErrorOrAsync<int>();

  List<Error>errors=[Error.Unauthorized(),Error.Validation()];Task<List<Error>>errorsTask=Task.FromResult(errors);ErrorOr<int>result=awaiterrorsTask.ToErrorOrAsync<int>();

• #​149 Added Else/ElseAsync overloads returning ErrorOr

• #​152 Added ThenEnsure and ThenEnsureAsync methods.

  They are similar to ThenDo and ThenDoAsync, but they receive a function that can return errors.
  If no errors are returned, the original value is preserved and the ensure function's success value is ignored.

• #​159 Added IsSuccess property to ErrorOr

• #​158 Added support for serialization via IErrorOr interface without direct access to Value property. The IRecordable base interface provides a way to obtain a serialized representation of the current state.

  voidLog(IErrorOrresult){Console.WriteLine(result.GetRecording(serializer));}

  IRecordingSerializer<TOutput> interface can be implemented to provide concrete serialization strategy, for exaple JSON serialization:

  usingSystem.Text.Json;usingSystem.Text.Json.Serialization;usingErrorOr;publicclassSystemTextJsonRecordingSerializer:IRecordingSerializer<string>{privatestaticreadonlyJsonSerializerOptionsJsonOptions=new(){WriteIndented=true,Converters={newJsonStringEnumConverter()},DefaultIgnoreCondition=JsonIgnoreCondition.Never,};publicstringSerializeValue<TValue>(TValuevalue)=>JsonSerializer.Serialize(value,JsonOptions);publicstringSerializeErrors(List<Error>errors)=>JsonSerializer.Serialize(errors,JsonOptions);}

• #​179 Support for .NET 10 was added

Fixed

• #​85, #​97ErrorOr turned into Value Object by reimplementing Equals and GetHashCode methods

  New dependency was introduced to Microsoft.Bcl.HashCode and development dependency was introduced to Nullable

• #​178 Initializing ErrorOr<T> with empty or null error collection results with unexpected error.

Optimized

• #​98, #​99 Memory consumption optimized by moving static empty errors lists from generic struct into non-generic class

Refactored

• #​154 Modernized NuGet publish workflow

mganss/HtmlSanitizer (HtmlSanitizer)

v9.2.1039: 9.2.1039

Fix attribute bypass in SanitizeDom(string) wrapper elements

v9.2.995: 9.2.995

• AngleSharp dependency updated from 1.7.0 to 1.7.1 (4515e1f)
• Sanitization enhancements for URI attributes
  • Added cite and longdesc attributes to URL sanitization (e47862e)
  • Enhanced sanitization of srcdoc content and attributes holding URI lists (edb2633)
• CSS/style handling improvements
  • Added sanitization of CSS declarations in style elements with type="" attribute (0592f1e)
  • Fixed sanitization of CSS @font-face and @import at-rules (1d33413)
• Bug fixes
  • Fixed resolved URI check validation (7f379ef)
  • Fixed CSS variable-in-shorthand sanitization (b8e9844)
  • Fixed issue #​629 (e0deb7b)
  • Multiple SonarCloud code quality issues resolved (ec1e786, 2d95200)
• Test improvements
  • Refactored test suite for style element sanitization (0592f1e)
  • Improved performance of ThreadTest (0ab33ba)
• Documentation
  • Added XML code usage examples for HtmlSanitizerOptions properties (#​632)

v9.1.982: 9.1.982

Fix multiple enumeration of URLs (fixes #​625)

v9.1.981: 9.1.981

Update NuGet packages

v9.1.974: 9.1.974

Add FilterCssRule event (fixes #​622)

v9.1.973: 9.1.973

Update to AngleSharp 1.6.0 and AngleSharp.Css 1.0.0

dotnet/dotnet (Microsoft.AspNetCore.Authentication.JwtBearer)

v10.0.11

v10.0.10

v10.0.9

v10.0.8

v10.0.7

v10.0.6

v10.0.5

v10.0.4

dotnet/extensions (Microsoft.Extensions.Caching.Hybrid)

v10.9.0

Version 10.9.0 is headlined by changes in these areas:

• AI: New experimental routing APIs center on the abstract RoutingChatClient base class, with SemanticRoutingChatClient as a concrete semantic-routing implementation. Separately, the abstract FailoverChatClient specialization and its concrete OrderedFailoverChatClient implementation add failover routing.
• AI Evaluation: The generated report gains redesigned Overview, Cases, History, and Comparison views.
• ASP.NET Core and HTTP diagnostics: The release adds HTTP request latency log enrichment and fixes configuration binding, response-body logging, request-path redaction, and resilience package version handling.
• Source-generated logging and service discovery: Fixes cover classification type qualification, thread-local state cleanup, and DNS query suffix handling.

Experimental API Changes

New Experimental APIs

• New experimental API: HTTP request latency log enrichment (EXTEXP0013) #​7602
• New experimental API: Chat client routing and failover (MEAI001) #​7662

What's Changed

AI (Microsoft.Extensions.AI, Microsoft.Extensions.AI.Abstractions, and Microsoft.Extensions.AI.OpenAI)

• Add extensible chat client routing #​7662 by @​joshuajyue (co-authored by @​Copilot)
• Pass the request's options to the selected client #​7685 by @​joshuajyue (co-authored by @​jozkee@​Copilot)
• AI.Abstractions: fix ExcludeFromSchema dropped under concurrent AIFunction creation #​7677 by @​jozkee (co-authored by @​Copilot)
• Cap OpenAI dependency version (b10f9c0) by @​jeffhandley (co-authored by @​Copilot)

Note: Microsoft.Extensions.AI.OpenAI constrains its dependency for OpenAI to 2.12.x, preventing OpenAI updates to 2.13.0+ due to an incompatibility. We expect to release Microsoft.Extensions.AI.OpenAI version 10.9.1 during the week of August 17 to address this issue.

HTTP Resilience and Diagnostics (Microsoft.Extensions.Http.Resilience and Microsoft.Extensions.Http.Diagnostics)

• Fix Grpc.Net.ClientFactory version range check - Fixes #​7565#​7566 by @​Ghost93
• Fix response body logging under debugger #​7678 by @​Rimobul
• Redact outgoing path when route is unknown #​7687 by @​Rimobul
• Fix HTTP client logging config binding #​7691 by @​Rimobul

ASP.NET Core Extensions (Microsoft.AspNetCore.Diagnostics.Middleware)

• Rename HttpLatencyTelemetry extensions class and drop redundant TFM guard #​7645 by @​EasyL0ver (co-authored by @​Copilot)
• Add HTTP request latency log enricher (experimental) #​7602 by @​EasyL0ver (co-authored by @​Copilot)

Logging Source Generator (Microsoft.Gen.Logging)

• [Microsoft.Gen.Logging] Clear thread-local state when logging throws #​7682 by @​Rimobul
• [Microsoft.Gen.Logging] Fully qualify classification types #​7689 by @​Rimobul

AI Evaluation (Microsoft.Extensions.AI.Evaluation.Reporting)

• [Microsoft.Extensions.AI.Evaluation.Reporting] Evaluation report redesign #​7609 by @​grafanaKibana

Project Templates (Microsoft.McpServer.ProjectTemplates)

• Remove MCP server project template #​7680 by @​jeffhandley (co-authored by @​Copilot)

Note: The MCP server project template was migrated to the dotnet/aspnetcore repository, and it is now included in the .NET 10 and .NET 11 SDKs.

Service Discovery (Microsoft.Extensions.ServiceDiscovery.Dns)

• Fix DNS SRV provider ignoring query suffix #​7688 by @​Rimobul (co-authored by @​Copilot)

Test Improvements

• Update Microsoft.Data.SqlClient test dependency (aaea3c8) by @​jeffhandley (co-authored by @​Copilot)

Repository Infrastructure Updates

• [main] Update dependencies from dotnet/arcade #​7621
• Merge release/10.8 into main #​7632 by @​jeffhandley (co-authored by @​jozkee@​Copilot)
• Add agentic workflows that keep Microsoft.Extensions.AI aligned with OpenTelemetry GenAI semantic-conventions #​7611 by @​jeffhandley (co-authored by @​Copilot)
• Bump brace-expansion, eslint and tfx-cli in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7648
• Add a release-manager agent for the dotnet/extensions release process #​7643 by @​jeffhandley (co-authored by @​Copilot)
• Bump CommunityToolkit.VectorData package baselines to 1.0.0 / 1.0.0-preview #​7651 by @​adamsitnik (co-authored by @​Copilot)
• Incorporate servicing release experience into release-manager playbooks #​7656 by @​jeffhandley (co-authored by @​Copilot)
• Bump dotnet-reportgenerator-globaltool from 5.5.10 to 5.5.11 #​7666
• Bump adm-zip and azure-pipelines-task-lib in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript/azure-devops-report/tasks/PublishAIEvaluationReport #​7652
• Bump postcss from 8.5.15 to 8.5.23 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7660
• Bump PowerShell from 7.6.3 to 7.6.4 #​7650
• [main] Update dependencies from dotnet/arcade #​7644
• [release-manager] Require package dependency closure for releases #​7693 by @​jeffhandley (co-authored by @​Copilot)
• Optionally allow official builds to publish VSIX extension. #​7692 by @​peterwald
• [main] Update dependencies from dotnet/arcade #​7690

Acknowledgements

• @​EasyL0ver made their first contribution in #​7602
• @​Ghost93 made their first contribution in #​7566
• @​grafanaKibana made their first contribution in #​7609
• @​Rimobul made their first contribution in #​7678
• @​joshuajyue made their first contribution in #​7662
• @​Ghost93 submitted issue #​7565 (resolved by #​7566)
• @​grafanaKibana submitted issue #​7593 (resolved by #​7609)
• @​jredgard submitted issue #​7675 (resolved by #​7677)
• @​viorelbuligadev submitted issue #​7649 (resolved by #​7678)
• @​joshuajyue submitted issue #​7647 (resolved by #​7662)
• @​jboelter submitted issue #​7634 (resolved by #​7682)
• @​dmeeze submitted issue #​7157 (resolved by #​7689)
• @​ssmelov submitted issue #​7536 (resolved by #​7687)
• @​Marcus-Kanon submitted issue #​7551 (resolved by #​7691)
• @​vermilion submitted issue #​7175 (resolved by #​7688)
• @​evgenyfedorov2@​wtgodbe@​shyamnamboodiripad@​dariusclay@​iliar-turdushev@​mariamgerges@​PranavSenthilnathan@​rafal-mz@​tannergooding@​tarekgh reviewed pull requests

Full Changelog: dotnet/extensions@v10.8.4...v10.9.0

Packages in this release

Package	Version
Microsoft.AspNetCore.Testing	10.9.0
Microsoft.Extensions.AI.Abstractions	10.9.0
Microsoft.Extensions.AI.Evaluation.Console	10.9.0
Microsoft.Extensions.AI.Templates	10.9.0-preview.3.26411.16
Microsoft.Extensions.AmbientMetadata.Application	10.9.0
Microsoft.Extensions.AmbientMetadata.Build	10.9.0
Microsoft.Extensions.AuditReports	10.9.0
Microsoft.Extensions.Caching.Hybrid	10.9.0
Microsoft.Extensions.Compliance.Abstractions	10.9.0
Microsoft.Extensions.DataIngestion.Abstractions	10.9.0-preview.1.26411.16
Microsoft.Extensions.DependencyInjection.AutoActivation	10.9.0
Microsoft.Extensions.Diagnostics.ExceptionSummarization	10.9.0
Microsoft.Extensions.ObjectPool.DependencyInjection	10.9.0
Microsoft.Extensions.Options.Contextual	10.9.0-preview.1.26411.16
Microsoft.Extensions.ServiceDiscovery.Abstractions	10.9.0
Microsoft.Extensions.StaticAnalysis	10.9.0
Microsoft.Extensions.TimeProvider.Testing	10.9.0
Microsoft.Extensions.AI	10.9.0
Microsoft.Extensions.AI.Evaluation	10.9.0
Microsoft.Extensions.AI.OpenAI	10.9.0
Microsoft.Extensions.AsyncState	10.9.0
Microsoft.Extensions.Compliance.Redaction	10.9.0
Microsoft.Extensions.Compliance.Testing	10.9.0
Microsoft.Extensions.DataIngestion.Markdig	10.9.0-preview.1.26411.16
Microsoft.Extensions.DataIngestion.MarkItDown	10.9.0-preview.1.26411.16
Microsoft.Extensions.ServiceDiscovery	10.9.0
Microsoft.Extensions.Telemetry.Abstractions	10.9.0
Microsoft.Extensions.VectorData.Abstractions	10.9.0
Microsoft.AspNetCore.AsyncState	10.9.0
Microsoft.AspNetCore.HeaderParsing	10.9.0
Microsoft.Extensions.AI.Evaluation.NLP	10.9.0-preview.1.26411.16
Microsoft.Extensions.AI.Evaluation.Quality	10.9.0
Microsoft.Extensions.AI.Evaluation.Reporting	10.9.0
Microsoft.Extensions.AI.Evaluation.Safety	10.9.0-preview.1.26411.16
Microsoft.Extensions.DataIngestion	10.9.0-preview.1.26411.16
Microsoft.Extensions.Diagnostics.HealthChecks.Common	10.9.0
Microsoft.Extensions.Diagnostics.Probes	10.9.0-preview.1.26411.16
Microsoft.Extensions.Diagnostics.ResourceMonitoring	10.9.0
Microsoft.Extensions.Diagnostics.Testing	10.9.0
Microsoft.Extensions.Resilience	10.9.0
Microsoft.Extensions.ServiceDiscovery.Dns	10.9.0
Microsoft.Extensions.ServiceDiscovery.Yarp	10.9.0
Microsoft.Extensions.Telemetry	10.9.0
Microsoft.Extensions.VectorData.ConformanceTests	10.9.0
Microsoft.AspNetCore.Diagnostics.Middleware	10.9.0
Microsoft.Extensions.AI.Evaluation.Reporting.Azure	10.9.0
Microsoft.Extensions.Diagnostics.HealthChecks.ResourceUtilization	10.9.0
Microsoft.Extensions.Diagnostics.ResourceMonitoring.Kubernetes	10.9.0
Microsoft.Extensions.Hosting.Testing	10.9.0-preview.1.26411.16
Microsoft.Extensions.Http.Diagnostics	10.9.0
Microsoft.Extensions.Http.Resilience	10.9.0

The Microsoft.Agents.AI.ProjectTemplates package is not included in this release.

v10.8.0

This release adds new experimental APIs to Microsoft.Extensions.AI.Abstractions and updates the OpenAI dependency to 2.12.0, alongside documentation, test, and repository maintenance.

Experimental API Changes

N

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update
AWSSDK.S3	4.0.18.7 → 4.0.102.4					nuget	patch
ErrorOr	2.0.1 → 2.1.1					nuget	minor
FastEndpoints (source)	8.0.1 → 8.3.0					nuget	minor
FastEndpoints.Generator (source)	8.0.1 → 8.3.0					nuget	minor
FastEndpoints.Security (source)	8.0.1 → 8.3.0					nuget	minor
FastEndpoints.Swagger (source)	8.0.1 → 8.3.0					nuget	minor
FastEndpoints.Testing (source)	8.0.1 → 8.3.0					nuget	minor
HtmlSanitizer	9.0.892 → 9.2.1039					nuget	minor
Microsoft.AspNetCore.Authentication.JwtBearer (source)	10.0.3 → 10.0.11					nuget	patch
Microsoft.AspNetCore.Identity.EntityFrameworkCore (source)	10.0.3 → 10.0.11					nuget	patch
Microsoft.AspNetCore.OpenApi (source)	10.0.3 → 10.0.11					nuget	patch
Microsoft.AspNetCore.OutputCaching.StackExchangeRedis (source)	10.0.3 → 10.0.11					nuget	patch
Microsoft.EntityFrameworkCore.InMemory (source)	10.0.3 → 10.0.11					nuget	patch
Microsoft.EntityFrameworkCore.Tools (source)	10.0.3 → 10.0.11					nuget	patch
Microsoft.Extensions.Caching.Hybrid (source)	10.3.0 → 10.9.0					nuget	minor
Microsoft.Extensions.Caching.StackExchangeRedis (source)	10.0.3 → 10.0.11					nuget	patch
Microsoft.Extensions.Http.Resilience (source)	10.3.0 → 10.9.0					nuget	minor
Microsoft.Extensions.TimeProvider.Testing (source)	10.3.0 → 10.9.0					nuget	minor
Microsoft.NET.Test.Sdk	18.3.0 → 18.9.0					nuget	minor
MinecraftRenderer	0.4.2 → 0.9.0					nuget	minor
Npgsql	10.0.1 → 10.0.3					nuget	patch
Npgsql.EntityFrameworkCore.PostgreSQL	10.0.0 → 10.0.3					nuget	patch
OpenTelemetry.Extensions.Hosting (source)	1.15.0 → 1.18.0					nuget	minor
Pyroscope (source)	0.14.1 → 0.15.0					nuget	minor
Pyroscope.OpenTelemetry (source)	0.4.0 → 0.5.1					nuget	minor
Quartz.Extensions.Hosting (source)	3.16.1 → 3.20.0					nuget	minor
Refit	10.0.1 → 10.2.0					nuget	minor
Refit.HttpClientFactory	10.0.1 → 10.2.0					nuget	minor
Scalar.AspNetCore (source)	2.13.1 → 2.17.2					nuget	minor
SkyblockRepo	0.4.3 → 0.5.2					nuget	minor
StackExchange.Redis (source)	2.11.8 → 2.13.17					nuget	minor
Swashbuckle.AspNetCore	10.1.4 → 10.2.3					nuget	minor
Swashbuckle.AspNetCore.Annotations	10.1.4 → 10.2.3					nuget	minor
System.Linq.Async	7.0.0 → 7.0.1					nuget	patch
System.Threading.RateLimiting (source)	10.0.3 → 10.0.11					nuget	patch
Testcontainers.PostgreSql (source)	4.10.0 → 4.14.0					nuget	minor
ZLinq	1.5.5 → 1.5.6					nuget	patch
coverlet.collector	8.0.0 → 8.0.1					nuget	patch
dotnet-ef (source)	10.0.1 → 10.0.11					nuget	patch
prom/prometheus	v3.5.0 → v3.14.0						minor
pyroscope/pyroscope-dotnet	0.13.0-glibc → 0.14.5-glibc					stage	minor
redis (source)	8.4-alpine → 8.10-alpine						minor

---

Release Notes

aws/aws-sdk-net (AWSSDK.S3)

v4.0.102

v4.0.101

v4.0.100

v4.0.25

v4.0.24

v4.0.23

v4.0.22

v4.0.21

v4.0.20

v4.0.19

error-or/error-or (ErrorOr)

v2.1.1

Added

• #​94, #​95 Added missing async versions of FailIf methods

  publicasyncTask<ErrorOr<TValue>>FailIfAsync(Func<TValue,Task<bool>>onValue,Errorerror)

  publicstaticasyncTask<ErrorOr<TValue>>FailIf<TValue>(thisTask<ErrorOr<TValue>>errorOr,Func<TValue,bool>onValue,Errorerror)

  publicstaticasyncTask<ErrorOr<TValue>>FailIfAsync<TValue>(thisTask<ErrorOr<TValue>>errorOr,Func<TValue,Task<bool>>onValue,Errorerror)

• #​104 Support for .NET 8 was added

• #​109, #​111 Added FailIf method overloads that allow to use value in error definition using Func<TValue, Error> error builder

  publicErrorOr<TValue>FailIf(Func<TValue,bool>onValue,Func<TValue,Error>errorBuilder)

  publicasyncTask<ErrorOr<TValue>>FailIfAsync(Func<TValue,Task<bool>>onValue,Func<TValue,Task<Error>>errorBuilder)

  publicstaticasyncTask<ErrorOr<TValue>>FailIf<TValue>(thisTask<ErrorOr<TValue>>errorOr,Func<TValue,bool>onValue,Func<TValue,Error>errorBuilder)

  publicstaticasyncTask<ErrorOr<TValue>>FailIfAsync<TValue>(thisTask<ErrorOr<TValue>>errorOr,Func<TValue,Task<bool>>onValue,Func<TValue,Task<Error>>errorBuilder)

  Value can now be used to build the error:

  ErrorOr<int>result=errorOrInt.FailIf(num =>num>3,(num)=>Error.Failure(description:$"{num} is greater than 3"));

• #​117 Added ElseDo and ElseDoAsync methods

  Actions returning no result can now be called when IsError is true.

  ErrorOr<string>foo=result.Else(errors =>Error.Unexpected()).ElseDo(error =>Console.WriteLine(error.FirstError.Description));

  ErrorOr<string>foo=awaitresult.ElseDoAsync(HandleErrorAsync);

• #​122 Added ToErrorOrAsync method

  Values in Task can now be easily converted to ErrorOr.

  ErrorOr<int>result=awaitTask.FromResult(5).ToErrorOrAsync();

• #​129 Added missing ErrorOrFactory.From methods

  Now following calls from README.md are available

  ErrorOr<int>result=ErrorOrFactory.From<int>(Error.Unexpected());ErrorOr<int>result=ErrorOrFactory.From<int>([Error.Validation(),Error.Validation()]);

  Following call is now obsolete

  ErrorOr<int>errorOrPerson=ErrorOr<int>.From([Error.Validation(),Error.Validation()]);

• #​133 Added missing collection expression support

  Now following call from README.md is available

  ErrorOr<int>result=[Error.Validation(),Error.Validation()];

• #​134 Added FromAsync and missing ToErrorOrAsync methods

  Added support for FromAsync methods.

  publicasyncTak<ErrorOr<int>>GetValueAsync(){returnawaitErrorOrFactory.FromAsync(5);}

  publicasyncTak<ErrorOr<int>>SingleErrorToErrorOrAsync(){returnawaitErrorOrFactory.FromAsync<int>(Error.Unexpected());}

  publicasyncTak<ErrorOr<int>>MultipleErrorsToErrorOrAsync(){returnawaitErrorOrFactory.FromAsync([Error.Validation(description:"Invalid Name"),Error.Validation(description:"Invalid Last Name")]);}

  Added support for ToErrorOrAsync methods from errors:

  Task<Error>errorTask=Task.FromResult(Error.Validation());ErrorOr<int>result=errorTask.ToErrorOrAsync<int>();

  List<Error>errors=[Error.Unauthorized(),Error.Validation()];Task<List<Error>>errorsTask=Task.FromResult(errors);ErrorOr<int>result=awaiterrorsTask.ToErrorOrAsync<int>();

• #​149 Added Else/ElseAsync overloads returning ErrorOr

• #​152 Added ThenEnsure and ThenEnsureAsync methods.

  They are similar to ThenDo and ThenDoAsync, but they receive a function that can return errors.
  If no errors are returned, the original value is preserved and the ensure function's success value is ignored.

• #​159 Added IsSuccess property to ErrorOr

• #​158 Added support for serialization via IErrorOr interface without direct access to Value property. The IRecordable base interface provides a way to obtain a serialized representation of the current state.

  voidLog(IErrorOrresult){Console.WriteLine(result.GetRecording(serializer));}

  IRecordingSerializer<TOutput> interface can be implemented to provide concrete serialization strategy, for exaple JSON serialization:

  usingSystem.Text.Json;usingSystem.Text.Json.Serialization;usingErrorOr;publicclassSystemTextJsonRecordingSerializer:IRecordingSerializer<string>{privatestaticreadonlyJsonSerializerOptionsJsonOptions=new(){WriteIndented=true,Converters={newJsonStringEnumConverter()},DefaultIgnoreCondition=JsonIgnoreCondition.Never,};publicstringSerializeValue<TValue>(TValuevalue)=>JsonSerializer.Serialize(value,JsonOptions);publicstringSerializeErrors(List<Error>errors)=>JsonSerializer.Serialize(errors,JsonOptions);}

• #​179 Support for .NET 10 was added

Fixed

• #​85, #​97ErrorOr turned into Value Object by reimplementing Equals and GetHashCode methods

  New dependency was introduced to Microsoft.Bcl.HashCode and development dependency was introduced to Nullable

• #​178 Initializing ErrorOr<T> with empty or null error collection results with unexpected error.

Optimized

• #​98, #​99 Memory consumption optimized by moving static empty errors lists from generic struct into non-generic class

Refactored

• #​154 Modernized NuGet publish workflow

mganss/HtmlSanitizer (HtmlSanitizer)

v9.2.1039: 9.2.1039

Fix attribute bypass in SanitizeDom(string) wrapper elements

v9.2.995: 9.2.995

• AngleSharp dependency updated from 1.7.0 to 1.7.1 (4515e1f)
• Sanitization enhancements for URI attributes
  • Added cite and longdesc attributes to URL sanitization (e47862e)
  • Enhanced sanitization of srcdoc content and attributes holding URI lists (edb2633)
• CSS/style handling improvements
  • Added sanitization of CSS declarations in style elements with type="" attribute (0592f1e)
  • Fixed sanitization of CSS @font-face and @import at-rules (1d33413)
• Bug fixes
  • Fixed resolved URI check validation (7f379ef)
  • Fixed CSS variable-in-shorthand sanitization (b8e9844)
  • Fixed issue #​629 (e0deb7b)
  • Multiple SonarCloud code quality issues resolved (ec1e786, 2d95200)
• Test improvements
  • Refactored test suite for style element sanitization (0592f1e)
  • Improved performance of ThreadTest (0ab33ba)
• Documentation
  • Added XML code usage examples for HtmlSanitizerOptions properties (#​632)

v9.1.982: 9.1.982

Fix multiple enumeration of URLs (fixes #​625)

v9.1.981: 9.1.981

Update NuGet packages

v9.1.974: 9.1.974

Add FilterCssRule event (fixes #​622)

v9.1.973: 9.1.973

Update to AngleSharp 1.6.0 and AngleSharp.Css 1.0.0

dotnet/dotnet (Microsoft.AspNetCore.Authentication.JwtBearer)

v10.0.11

v10.0.10

v10.0.9

v10.0.8

v10.0.7

v10.0.6

v10.0.5

v10.0.4

dotnet/extensions (Microsoft.Extensions.Caching.Hybrid)

v10.9.0

Version 10.9.0 is headlined by changes in these areas:

• AI: New experimental routing APIs center on the abstract RoutingChatClient base class, with SemanticRoutingChatClient as a concrete semantic-routing implementation. Separately, the abstract FailoverChatClient specialization and its concrete OrderedFailoverChatClient implementation add failover routing.
• AI Evaluation: The generated report gains redesigned Overview, Cases, History, and Comparison views.
• ASP.NET Core and HTTP diagnostics: The release adds HTTP request latency log enrichment and fixes configuration binding, response-body logging, request-path redaction, and resilience package version handling.
• Source-generated logging and service discovery: Fixes cover classification type qualification, thread-local state cleanup, and DNS query suffix handling.

Experimental API Changes

New Experimental APIs

• New experimental API: HTTP request latency log enrichment (EXTEXP0013) #​7602
• New experimental API: Chat client routing and failover (MEAI001) #​7662

What's Changed

AI (Microsoft.Extensions.AI, Microsoft.Extensions.AI.Abstractions, and Microsoft.Extensions.AI.OpenAI)

• Add extensible chat client routing #​7662 by @​joshuajyue (co-authored by @​Copilot)
• Pass the request's options to the selected client #​7685 by @​joshuajyue (co-authored by @​jozkee@​Copilot)
• AI.Abstractions: fix ExcludeFromSchema dropped under concurrent AIFunction creation #​7677 by @​jozkee (co-authored by @​Copilot)
• Cap OpenAI dependency version (b10f9c0) by @​jeffhandley (co-authored by @​Copilot)

Note: Microsoft.Extensions.AI.OpenAI constrains its dependency for OpenAI to 2.12.x, preventing OpenAI updates to 2.13.0+ due to an incompatibility. We expect to release Microsoft.Extensions.AI.OpenAI version 10.9.1 during the week of August 17 to address this issue.

HTTP Resilience and Diagnostics (Microsoft.Extensions.Http.Resilience and Microsoft.Extensions.Http.Diagnostics)

• Fix Grpc.Net.ClientFactory version range check - Fixes #​7565#​7566 by @​Ghost93
• Fix response body logging under debugger #​7678 by @​Rimobul
• Redact outgoing path when route is unknown #​7687 by @​Rimobul
• Fix HTTP client logging config binding #​7691 by @​Rimobul

ASP.NET Core Extensions (Microsoft.AspNetCore.Diagnostics.Middleware)

• Rename HttpLatencyTelemetry extensions class and drop redundant TFM guard #​7645 by @​EasyL0ver (co-authored by @​Copilot)
• Add HTTP request latency log enricher (experimental) #​7602 by @​EasyL0ver (co-authored by @​Copilot)

Logging Source Generator (Microsoft.Gen.Logging)

• [Microsoft.Gen.Logging] Clear thread-local state when logging throws #​7682 by @​Rimobul
• [Microsoft.Gen.Logging] Fully qualify classification types #​7689 by @​Rimobul

AI Evaluation (Microsoft.Extensions.AI.Evaluation.Reporting)

• [Microsoft.Extensions.AI.Evaluation.Reporting] Evaluation report redesign #​7609 by @​grafanaKibana

Project Templates (Microsoft.McpServer.ProjectTemplates)

• Remove MCP server project template #​7680 by @​jeffhandley (co-authored by @​Copilot)

Note: The MCP server project template was migrated to the dotnet/aspnetcore repository, and it is now included in the .NET 10 and .NET 11 SDKs.

Service Discovery (Microsoft.Extensions.ServiceDiscovery.Dns)

• Fix DNS SRV provider ignoring query suffix #​7688 by @​Rimobul (co-authored by @​Copilot)

Test Improvements

• Update Microsoft.Data.SqlClient test dependency (aaea3c8) by @​jeffhandley (co-authored by @​Copilot)

Repository Infrastructure Updates

• [main] Update dependencies from dotnet/arcade #​7621
• Merge release/10.8 into main #​7632 by @​jeffhandley (co-authored by @​jozkee@​Copilot)
• Add agentic workflows that keep Microsoft.Extensions.AI aligned with OpenTelemetry GenAI semantic-conventions #​7611 by @​jeffhandley (co-authored by @​Copilot)
• Bump brace-expansion, eslint and tfx-cli in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7648
• Add a release-manager agent for the dotnet/extensions release process #​7643 by @​jeffhandley (co-authored by @​Copilot)
• Bump CommunityToolkit.VectorData package baselines to 1.0.0 / 1.0.0-preview #​7651 by @​adamsitnik (co-authored by @​Copilot)
• Incorporate servicing release experience into release-manager playbooks #​7656 by @​jeffhandley (co-authored by @​Copilot)
• Bump dotnet-reportgenerator-globaltool from 5.5.10 to 5.5.11 #​7666
• Bump adm-zip and azure-pipelines-task-lib in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript/azure-devops-report/tasks/PublishAIEvaluationReport #​7652
• Bump postcss from 8.5.15 to 8.5.23 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7660
• Bump PowerShell from 7.6.3 to 7.6.4 #​7650
• [main] Update dependencies from dotnet/arcade #​7644
• [release-manager] Require package dependency closure for releases #​7693 by @​jeffhandley (co-authored by @​Copilot)
• Optionally allow official builds to publish VSIX extension. #​7692 by @​peterwald
• [main] Update dependencies from dotnet/arcade #​7690

Acknowledgements

• @​EasyL0ver made their first contribution in #​7602
• @​Ghost93 made their first contribution in #​7566
• @​grafanaKibana made their first contribution in #​7609
• @​Rimobul made their first contribution in #​7678
• @​joshuajyue made their first contribution in #​7662
• @​Ghost93 submitted issue #​7565 (resolved by #​7566)
• @​grafanaKibana submitted issue #​7593 (resolved by #​7609)
• @​jredgard submitted issue #​7675 (resolved by #​7677)
• @​viorelbuligadev submitted issue #​7649 (resolved by #​7678)
• @​joshuajyue submitted issue #​7647 (resolved by #​7662)
• @​jboelter submitted issue #​7634 (resolved by #​7682)
• @​dmeeze submitted issue #​7157 (resolved by #​7689)
• @​ssmelov submitted issue #​7536 (resolved by #​7687)
• @​Marcus-Kanon submitted issue #​7551 (resolved by #​7691)
• @​vermilion submitted issue #​7175 (resolved by #​7688)
• @​evgenyfedorov2@​wtgodbe@​shyamnamboodiripad@​dariusclay@​iliar-turdushev@​mariamgerges@​PranavSenthilnathan@​rafal-mz@​tannergooding@​tarekgh reviewed pull requests

Full Changelog: dotnet/extensions@v10.8.4...v10.9.0

Packages in this release

Package	Version
Microsoft.AspNetCore.Testing	10.9.0
Microsoft.Extensions.AI.Abstractions	10.9.0
Microsoft.Extensions.AI.Evaluation.Console	10.9.0
Microsoft.Extensions.AI.Templates	10.9.0-preview.3.26411.16
Microsoft.Extensions.AmbientMetadata.Application	10.9.0
Microsoft.Extensions.AmbientMetadata.Build	10.9.0
Microsoft.Extensions.AuditReports	10.9.0
Microsoft.Extensions.Caching.Hybrid	10.9.0
Microsoft.Extensions.Compliance.Abstractions	10.9.0
Microsoft.Extensions.DataIngestion.Abstractions	10.9.0-preview.1.26411.16
Microsoft.Extensions.DependencyInjection.AutoActivation	10.9.0
Microsoft.Extensions.Diagnostics.ExceptionSummarization	10.9.0
Microsoft.Extensions.ObjectPool.DependencyInjection	10.9.0
Microsoft.Extensions.Options.Contextual	10.9.0-preview.1.26411.16
Microsoft.Extensions.ServiceDiscovery.Abstractions	10.9.0
Microsoft.Extensions.StaticAnalysis	10.9.0
Microsoft.Extensions.TimeProvider.Testing	10.9.0
Microsoft.Extensions.AI	10.9.0
Microsoft.Extensions.AI.Evaluation	10.9.0
Microsoft.Extensions.AI.OpenAI	10.9.0
Microsoft.Extensions.AsyncState	10.9.0
Microsoft.Extensions.Compliance.Redaction	10.9.0
Microsoft.Extensions.Compliance.Testing	10.9.0
Microsoft.Extensions.DataIngestion.Markdig	10.9.0-preview.1.26411.16
Microsoft.Extensions.DataIngestion.MarkItDown	10.9.0-preview.1.26411.16
Microsoft.Extensions.ServiceDiscovery	10.9.0
Microsoft.Extensions.Telemetry.Abstractions	10.9.0
Microsoft.Extensions.VectorData.Abstractions	10.9.0
Microsoft.AspNetCore.AsyncState	10.9.0
Microsoft.AspNetCore.HeaderParsing	10.9.0
Microsoft.Extensions.AI.Evaluation.NLP	10.9.0-preview.1.26411.16
Microsoft.Extensions.AI.Evaluation.Quality	10.9.0
Microsoft.Extensions.AI.Evaluation.Reporting	10.9.0
Microsoft.Extensions.AI.Evaluation.Safety	10.9.0-preview.1.26411.16
Microsoft.Extensions.DataIngestion	10.9.0-preview.1.26411.16
Microsoft.Extensions.Diagnostics.HealthChecks.Common	10.9.0
Microsoft.Extensions.Diagnostics.Probes	10.9.0-preview.1.26411.16
Microsoft.Extensions.Diagnostics.ResourceMonitoring	10.9.0
Microsoft.Extensions.Diagnostics.Testing	10.9.0
Microsoft.Extensions.Resilience	10.9.0
Microsoft.Extensions.ServiceDiscovery.Dns	10.9.0
Microsoft.Extensions.ServiceDiscovery.Yarp	10.9.0
Microsoft.Extensions.Telemetry	10.9.0
Microsoft.Extensions.VectorData.ConformanceTests	10.9.0
Microsoft.AspNetCore.Diagnostics.Middleware	10.9.0
Microsoft.Extensions.AI.Evaluation.Reporting.Azure	10.9.0
Microsoft.Extensions.Diagnostics.HealthChecks.ResourceUtilization	10.9.0
Microsoft.Extensions.Diagnostics.ResourceMonitoring.Kubernetes	10.9.0
Microsoft.Extensions.Hosting.Testing	10.9.0-preview.1.26411.16
Microsoft.Extensions.Http.Diagnostics	10.9.0
Microsoft.Extensions.Http.Resilience	10.9.0

The Microsoft.Agents.AI.ProjectTemplates package is not included in this release.

v10.8.0

This release adds new experimental APIs to Microsoft.Extensions.AI.Abstractions and updates the OpenAI dependency to 2.12.0, alongside documentation, test, and repository maintenance.

Experimental API Changes

N

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update
AWSSDK.S3	4.0.18.7 → 4.0.102.4					nuget	patch
ErrorOr	2.0.1 → 2.1.1					nuget	minor
FastEndpoints (source)	8.0.1 → 8.3.0					nuget	minor
FastEndpoints.Generator (source)	8.0.1 → 8.3.0					nuget	minor
FastEndpoints.Security (source)	8.0.1 → 8.3.0					nuget	minor
FastEndpoints.Swagger (source)	8.0.1 → 8.3.0					nuget	minor
FastEndpoints.Testing (source)	8.0.1 → 8.3.0					nuget	minor
HtmlSanitizer	9.0.892 → 9.2.1039					nuget	minor
Microsoft.AspNetCore.Authentication.JwtBearer (source)	10.0.3 → 10.0.11					nuget	patch
Microsoft.AspNetCore.Identity.EntityFrameworkCore (source)	10.0.3 → 10.0.11					nuget	patch
Microsoft.AspNetCore.OpenApi (source)	10.0.3 → 10.0.11					nuget	patch
Microsoft.AspNetCore.OutputCaching.StackExchangeRedis (source)	10.0.3 → 10.0.11					nuget	patch
Microsoft.EntityFrameworkCore.InMemory (source)	10.0.3 → 10.0.11					nuget	patch
Microsoft.EntityFrameworkCore.Tools (source)	10.0.3 → 10.0.11					nuget	patch
Microsoft.Extensions.Caching.Hybrid (source)	10.3.0 → 10.9.0					nuget	minor
Microsoft.Extensions.Caching.StackExchangeRedis (source)	10.0.3 → 10.0.11					nuget	patch
Microsoft.Extensions.Http.Resilience (source)	10.3.0 → 10.9.0					nuget	minor
Microsoft.Extensions.TimeProvider.Testing (source)	10.3.0 → 10.9.0					nuget	minor
Microsoft.NET.Test.Sdk	18.3.0 → 18.9.0					nuget	minor
MinecraftRenderer	0.4.2 → 0.9.0					nuget	minor
Npgsql	10.0.1 → 10.0.3					nuget	patch
Npgsql.EntityFrameworkCore.PostgreSQL	10.0.0 → 10.0.3					nuget	patch
OpenTelemetry.Extensions.Hosting (source)	1.15.0 → 1.18.0					nuget	minor
Pyroscope (source)	0.14.1 → 0.15.0					nuget	minor
Pyroscope.OpenTelemetry (source)	0.4.0 → 0.5.1					nuget	minor
Quartz.Extensions.Hosting (source)	3.16.1 → 3.20.0					nuget	minor
Refit	10.0.1 → 10.2.0					nuget	minor
Refit.HttpClientFactory	10.0.1 → 10.2.0					nuget	minor
Scalar.AspNetCore (source)	2.13.1 → 2.17.2					nuget	minor
SkyblockRepo	0.4.3 → 0.5.2					nuget	minor
StackExchange.Redis (source)	2.11.8 → 2.13.17					nuget	minor
Swashbuckle.AspNetCore	10.1.4 → 10.2.3					nuget	minor
Swashbuckle.AspNetCore.Annotations	10.1.4 → 10.2.3					nuget	minor
System.Linq.Async	7.0.0 → 7.0.1					nuget	patch
System.Threading.RateLimiting (source)	10.0.3 → 10.0.11					nuget	patch
Testcontainers.PostgreSql (source)	4.10.0 → 4.14.0					nuget	minor
ZLinq	1.5.5 → 1.5.6					nuget	patch
coverlet.collector	8.0.0 → 8.0.1					nuget	patch
dotnet-ef (source)	10.0.1 → 10.0.11					nuget	patch
prom/prometheus	v3.5.0 → v3.14.0						minor
pyroscope/pyroscope-dotnet	0.13.0-glibc → 0.14.5-glibc					stage	minor
redis (source)	8.4-alpine → 8.10-alpine						minor

---

Release Notes

aws/aws-sdk-net (AWSSDK.S3)

v4.0.102

v4.0.101

v4.0.100

v4.0.25

v4.0.24

v4.0.23

v4.0.22

v4.0.21

v4.0.20

v4.0.19

error-or/error-or (ErrorOr)

v2.1.1

Added

• #​94, #​95 Added missing async versions of FailIf methods

  publicasyncTask<ErrorOr<TValue>>FailIfAsync(Func<TValue,Task<bool>>onValue,Errorerror)

  publicstaticasyncTask<ErrorOr<TValue>>FailIf<TValue>(thisTask<ErrorOr<TValue>>errorOr,Func<TValue,bool>onValue,Errorerror)

  publicstaticasyncTask<ErrorOr<TValue>>FailIfAsync<TValue>(thisTask<ErrorOr<TValue>>errorOr,Func<TValue,Task<bool>>onValue,Errorerror)

• #​104 Support for .NET 8 was added

• #​109, #​111 Added FailIf method overloads that allow to use value in error definition using Func<TValue, Error> error builder

  publicErrorOr<TValue>FailIf(Func<TValue,bool>onValue,Func<TValue,Error>errorBuilder)

  publicasyncTask<ErrorOr<TValue>>FailIfAsync(Func<TValue,Task<bool>>onValue,Func<TValue,Task<Error>>errorBuilder)

  publicstaticasyncTask<ErrorOr<TValue>>FailIf<TValue>(thisTask<ErrorOr<TValue>>errorOr,Func<TValue,bool>onValue,Func<TValue,Error>errorBuilder)

  publicstaticasyncTask<ErrorOr<TValue>>FailIfAsync<TValue>(thisTask<ErrorOr<TValue>>errorOr,Func<TValue,Task<bool>>onValue,Func<TValue,Task<Error>>errorBuilder)

  Value can now be used to build the error:

  ErrorOr<int>result=errorOrInt.FailIf(num =>num>3,(num)=>Error.Failure(description:$"{num} is greater than 3"));

• #​117 Added ElseDo and ElseDoAsync methods

  Actions returning no result can now be called when IsError is true.

  ErrorOr<string>foo=result.Else(errors =>Error.Unexpected()).ElseDo(error =>Console.WriteLine(error.FirstError.Description));

  ErrorOr<string>foo=awaitresult.ElseDoAsync(HandleErrorAsync);

• #​122 Added ToErrorOrAsync method

  Values in Task can now be easily converted to ErrorOr.

  ErrorOr<int>result=awaitTask.FromResult(5).ToErrorOrAsync();

• #​129 Added missing ErrorOrFactory.From methods

  Now following calls from README.md are available

  ErrorOr<int>result=ErrorOrFactory.From<int>(Error.Unexpected());ErrorOr<int>result=ErrorOrFactory.From<int>([Error.Validation(),Error.Validation()]);

  Following call is now obsolete

  ErrorOr<int>errorOrPerson=ErrorOr<int>.From([Error.Validation(),Error.Validation()]);

• #​133 Added missing collection expression support

  Now following call from README.md is available

  ErrorOr<int>result=[Error.Validation(),Error.Validation()];

• #​134 Added FromAsync and missing ToErrorOrAsync methods

  Added support for FromAsync methods.

  publicasyncTak<ErrorOr<int>>GetValueAsync(){returnawaitErrorOrFactory.FromAsync(5);}

  publicasyncTak<ErrorOr<int>>SingleErrorToErrorOrAsync(){returnawaitErrorOrFactory.FromAsync<int>(Error.Unexpected());}

  publicasyncTak<ErrorOr<int>>MultipleErrorsToErrorOrAsync(){returnawaitErrorOrFactory.FromAsync([Error.Validation(description:"Invalid Name"),Error.Validation(description:"Invalid Last Name")]);}

  Added support for ToErrorOrAsync methods from errors:

  Task<Error>errorTask=Task.FromResult(Error.Validation());ErrorOr<int>result=errorTask.ToErrorOrAsync<int>();

  List<Error>errors=[Error.Unauthorized(),Error.Validation()];Task<List<Error>>errorsTask=Task.FromResult(errors);ErrorOr<int>result=awaiterrorsTask.ToErrorOrAsync<int>();

• #​149 Added Else/ElseAsync overloads returning ErrorOr

• #​152 Added ThenEnsure and ThenEnsureAsync methods.

  They are similar to ThenDo and ThenDoAsync, but they receive a function that can return errors.
  If no errors are returned, the original value is preserved and the ensure function's success value is ignored.

• #​159 Added IsSuccess property to ErrorOr

• #​158 Added support for serialization via IErrorOr interface without direct access to Value property. The IRecordable base interface provides a way to obtain a serialized representation of the current state.

  voidLog(IErrorOrresult){Console.WriteLine(result.GetRecording(serializer));}

  IRecordingSerializer<TOutput> interface can be implemented to provide concrete serialization strategy, for exaple JSON serialization:

  usingSystem.Text.Json;usingSystem.Text.Json.Serialization;usingErrorOr;publicclassSystemTextJsonRecordingSerializer:IRecordingSerializer<string>{privatestaticreadonlyJsonSerializerOptionsJsonOptions=new(){WriteIndented=true,Converters={newJsonStringEnumConverter()},DefaultIgnoreCondition=JsonIgnoreCondition.Never,};publicstringSerializeValue<TValue>(TValuevalue)=>JsonSerializer.Serialize(value,JsonOptions);publicstringSerializeErrors(List<Error>errors)=>JsonSerializer.Serialize(errors,JsonOptions);}

• #​179 Support for .NET 10 was added

Fixed

• #​85, #​97ErrorOr turned into Value Object by reimplementing Equals and GetHashCode methods

  New dependency was introduced to Microsoft.Bcl.HashCode and development dependency was introduced to Nullable

• #​178 Initializing ErrorOr<T> with empty or null error collection results with unexpected error.

Optimized

• #​98, #​99 Memory consumption optimized by moving static empty errors lists from generic struct into non-generic class

Refactored

• #​154 Modernized NuGet publish workflow

mganss/HtmlSanitizer (HtmlSanitizer)

v9.2.1039: 9.2.1039

Fix attribute bypass in SanitizeDom(string) wrapper elements

v9.2.995: 9.2.995

• AngleSharp dependency updated from 1.7.0 to 1.7.1 (4515e1f)
• Sanitization enhancements for URI attributes
  • Added cite and longdesc attributes to URL sanitization (e47862e)
  • Enhanced sanitization of srcdoc content and attributes holding URI lists (edb2633)
• CSS/style handling improvements
  • Added sanitization of CSS declarations in style elements with type="" attribute (0592f1e)
  • Fixed sanitization of CSS @font-face and @import at-rules (1d33413)
• Bug fixes
  • Fixed resolved URI check validation (7f379ef)
  • Fixed CSS variable-in-shorthand sanitization (b8e9844)
  • Fixed issue #​629 (e0deb7b)
  • Multiple SonarCloud code quality issues resolved (ec1e786, 2d95200)
• Test improvements
  • Refactored test suite for style element sanitization (0592f1e)
  • Improved performance of ThreadTest (0ab33ba)
• Documentation
  • Added XML code usage examples for HtmlSanitizerOptions properties (#​632)

v9.1.982: 9.1.982

Fix multiple enumeration of URLs (fixes #​625)

v9.1.981: 9.1.981

Update NuGet packages

v9.1.974: 9.1.974

Add FilterCssRule event (fixes #​622)

v9.1.973: 9.1.973

Update to AngleSharp 1.6.0 and AngleSharp.Css 1.0.0

dotnet/dotnet (Microsoft.AspNetCore.Authentication.JwtBearer)

v10.0.11

v10.0.10

v10.0.9

v10.0.8

v10.0.7

v10.0.6

v10.0.5

v10.0.4

dotnet/extensions (Microsoft.Extensions.Caching.Hybrid)

v10.9.0

Version 10.9.0 is headlined by changes in these areas:

• AI: New experimental routing APIs center on the abstract RoutingChatClient base class, with SemanticRoutingChatClient as a concrete semantic-routing implementation. Separately, the abstract FailoverChatClient specialization and its concrete OrderedFailoverChatClient implementation add failover routing.
• AI Evaluation: The generated report gains redesigned Overview, Cases, History, and Comparison views.
• ASP.NET Core and HTTP diagnostics: The release adds HTTP request latency log enrichment and fixes configuration binding, response-body logging, request-path redaction, and resilience package version handling.
• Source-generated logging and service discovery: Fixes cover classification type qualification, thread-local state cleanup, and DNS query suffix handling.

Experimental API Changes

New Experimental APIs

• New experimental API: HTTP request latency log enrichment (EXTEXP0013) #​7602
• New experimental API: Chat client routing and failover (MEAI001) #​7662

What's Changed

AI (Microsoft.Extensions.AI, Microsoft.Extensions.AI.Abstractions, and Microsoft.Extensions.AI.OpenAI)

• Add extensible chat client routing #​7662 by @​joshuajyue (co-authored by @​Copilot)
• Pass the request's options to the selected client #​7685 by @​joshuajyue (co-authored by @​jozkee@​Copilot)
• AI.Abstractions: fix ExcludeFromSchema dropped under concurrent AIFunction creation #​7677 by @​jozkee (co-authored by @​Copilot)
• Cap OpenAI dependency version (b10f9c0) by @​jeffhandley (co-authored by @​Copilot)

Note: Microsoft.Extensions.AI.OpenAI constrains its dependency for OpenAI to 2.12.x, preventing OpenAI updates to 2.13.0+ due to an incompatibility. We expect to release Microsoft.Extensions.AI.OpenAI version 10.9.1 during the week of August 17 to address this issue.

HTTP Resilience and Diagnostics (Microsoft.Extensions.Http.Resilience and Microsoft.Extensions.Http.Diagnostics)

• Fix Grpc.Net.ClientFactory version range check - Fixes #​7565#​7566 by @​Ghost93
• Fix response body logging under debugger #​7678 by @​Rimobul
• Redact outgoing path when route is unknown #​7687 by @​Rimobul
• Fix HTTP client logging config binding #​7691 by @​Rimobul

ASP.NET Core Extensions (Microsoft.AspNetCore.Diagnostics.Middleware)

• Rename HttpLatencyTelemetry extensions class and drop redundant TFM guard #​7645 by @​EasyL0ver (co-authored by @​Copilot)
• Add HTTP request latency log enricher (experimental) #​7602 by @​EasyL0ver (co-authored by @​Copilot)

Logging Source Generator (Microsoft.Gen.Logging)

• [Microsoft.Gen.Logging] Clear thread-local state when logging throws #​7682 by @​Rimobul
• [Microsoft.Gen.Logging] Fully qualify classification types #​7689 by @​Rimobul

AI Evaluation (Microsoft.Extensions.AI.Evaluation.Reporting)

• [Microsoft.Extensions.AI.Evaluation.Reporting] Evaluation report redesign #​7609 by @​grafanaKibana

Project Templates (Microsoft.McpServer.ProjectTemplates)

• Remove MCP server project template #​7680 by @​jeffhandley (co-authored by @​Copilot)

Note: The MCP server project template was migrated to the dotnet/aspnetcore repository, and it is now included in the .NET 10 and .NET 11 SDKs.

Service Discovery (Microsoft.Extensions.ServiceDiscovery.Dns)

• Fix DNS SRV provider ignoring query suffix #​7688 by @​Rimobul (co-authored by @​Copilot)

Test Improvements

• Update Microsoft.Data.SqlClient test dependency (aaea3c8) by @​jeffhandley (co-authored by @​Copilot)

Repository Infrastructure Updates

• [main] Update dependencies from dotnet/arcade #​7621
• Merge release/10.8 into main #​7632 by @​jeffhandley (co-authored by @​jozkee@​Copilot)
• Add agentic workflows that keep Microsoft.Extensions.AI aligned with OpenTelemetry GenAI semantic-conventions #​7611 by @​jeffhandley (co-authored by @​Copilot)
• Bump brace-expansion, eslint and tfx-cli in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7648
• Add a release-manager agent for the dotnet/extensions release process #​7643 by @​jeffhandley (co-authored by @​Copilot)
• Bump CommunityToolkit.VectorData package baselines to 1.0.0 / 1.0.0-preview #​7651 by @​adamsitnik (co-authored by @​Copilot)
• Incorporate servicing release experience into release-manager playbooks #​7656 by @​jeffhandley (co-authored by @​Copilot)
• Bump dotnet-reportgenerator-globaltool from 5.5.10 to 5.5.11 #​7666
• Bump adm-zip and azure-pipelines-task-lib in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript/azure-devops-report/tasks/PublishAIEvaluationReport #​7652
• Bump postcss from 8.5.15 to 8.5.23 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7660
• Bump PowerShell from 7.6.3 to 7.6.4 #​7650
• [main] Update dependencies from dotnet/arcade #​7644
• [release-manager] Require package dependency closure for releases #​7693 by @​jeffhandley (co-authored by @​Copilot)
• Optionally allow official builds to publish VSIX extension. #​7692 by @​peterwald
• [main] Update dependencies from dotnet/arcade #​7690

Acknowledgements

• @​EasyL0ver made their first contribution in #​7602
• @​Ghost93 made their first contribution in #​7566
• @​grafanaKibana made their first contribution in #​7609
• @​Rimobul made their first contribution in #​7678
• @​joshuajyue made their first contribution in #​7662
• @​Ghost93 submitted issue #​7565 (resolved by #​7566)
• @​grafanaKibana submitted issue #​7593 (resolved by #​7609)
• @​jredgard submitted issue #​7675 (resolved by #​7677)
• @​viorelbuligadev submitted issue #​7649 (resolved by #​7678)
• @​joshuajyue submitted issue #​7647 (resolved by #​7662)
• @​jboelter submitted issue #​7634 (resolved by #​7682)
• @​dmeeze submitted issue #​7157 (resolved by #​7689)
• @​ssmelov submitted issue #​7536 (resolved by #​7687)
• @​Marcus-Kanon submitted issue #​7551 (resolved by #​7691)
• @​vermilion submitted issue #​7175 (resolved by #​7688)
• @​evgenyfedorov2@​wtgodbe@​shyamnamboodiripad@​dariusclay@​iliar-turdushev@​mariamgerges@​PranavSenthilnathan@​rafal-mz@​tannergooding@​tarekgh reviewed pull requests

Full Changelog: dotnet/extensions@v10.8.4...v10.9.0

Packages in this release

Package	Version
Microsoft.AspNetCore.Testing	10.9.0
Microsoft.Extensions.AI.Abstractions	10.9.0
Microsoft.Extensions.AI.Evaluation.Console	10.9.0
Microsoft.Extensions.AI.Templates	10.9.0-preview.3.26411.16
Microsoft.Extensions.AmbientMetadata.Application	10.9.0
Microsoft.Extensions.AmbientMetadata.Build	10.9.0
Microsoft.Extensions.AuditReports	10.9.0
Microsoft.Extensions.Caching.Hybrid	10.9.0
Microsoft.Extensions.Compliance.Abstractions	10.9.0
Microsoft.Extensions.DataIngestion.Abstractions	10.9.0-preview.1.26411.16
Microsoft.Extensions.DependencyInjection.AutoActivation	10.9.0
Microsoft.Extensions.Diagnostics.ExceptionSummarization	10.9.0
Microsoft.Extensions.ObjectPool.DependencyInjection	10.9.0
Microsoft.Extensions.Options.Contextual	10.9.0-preview.1.26411.16
Microsoft.Extensions.ServiceDiscovery.Abstractions	10.9.0
Microsoft.Extensions.StaticAnalysis	10.9.0
Microsoft.Extensions.TimeProvider.Testing	10.9.0
Microsoft.Extensions.AI	10.9.0
Microsoft.Extensions.AI.Evaluation	10.9.0
Microsoft.Extensions.AI.OpenAI	10.9.0
Microsoft.Extensions.AsyncState	10.9.0
Microsoft.Extensions.Compliance.Redaction	10.9.0
Microsoft.Extensions.Compliance.Testing	10.9.0
Microsoft.Extensions.DataIngestion.Markdig	10.9.0-preview.1.26411.16
Microsoft.Extensions.DataIngestion.MarkItDown	10.9.0-preview.1.26411.16
Microsoft.Extensions.ServiceDiscovery	10.9.0
Microsoft.Extensions.Telemetry.Abstractions	10.9.0
Microsoft.Extensions.VectorData.Abstractions	10.9.0
Microsoft.AspNetCore.AsyncState	10.9.0
Microsoft.AspNetCore.HeaderParsing	10.9.0
Microsoft.Extensions.AI.Evaluation.NLP	10.9.0-preview.1.26411.16
Microsoft.Extensions.AI.Evaluation.Quality	10.9.0
Microsoft.Extensions.AI.Evaluation.Reporting	10.9.0
Microsoft.Extensions.AI.Evaluation.Safety	10.9.0-preview.1.26411.16
Microsoft.Extensions.DataIngestion	10.9.0-preview.1.26411.16
Microsoft.Extensions.Diagnostics.HealthChecks.Common	10.9.0
Microsoft.Extensions.Diagnostics.Probes	10.9.0-preview.1.26411.16
Microsoft.Extensions.Diagnostics.ResourceMonitoring	10.9.0
Microsoft.Extensions.Diagnostics.Testing	10.9.0
Microsoft.Extensions.Resilience	10.9.0
Microsoft.Extensions.ServiceDiscovery.Dns	10.9.0
Microsoft.Extensions.ServiceDiscovery.Yarp	10.9.0
Microsoft.Extensions.Telemetry	10.9.0
Microsoft.Extensions.VectorData.ConformanceTests	10.9.0
Microsoft.AspNetCore.Diagnostics.Middleware	10.9.0
Microsoft.Extensions.AI.Evaluation.Reporting.Azure	10.9.0
Microsoft.Extensions.Diagnostics.HealthChecks.ResourceUtilization	10.9.0
Microsoft.Extensions.Diagnostics.ResourceMonitoring.Kubernetes	10.9.0
Microsoft.Extensions.Hosting.Testing	10.9.0-preview.1.26411.16
Microsoft.Extensions.Http.Diagnostics	10.9.0
Microsoft.Extensions.Http.Resilience	10.9.0

The Microsoft.Agents.AI.ProjectTemplates package is not included in this release.

v10.8.0

This release adds new experimental APIs to Microsoft.Extensions.AI.Abstractions and updates the OpenAI dependency to 2.12.0, alongside documentation, test, and repository maintenance.

Experimental API Changes

N

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update
AWSSDK.S3	4.0.18.7 → 4.0.102.4					nuget	patch
ErrorOr	2.0.1 → 2.1.1					nuget	minor
FastEndpoints (source)	8.0.1 → 8.3.0					nuget	minor
FastEndpoints.Generator (source)	8.0.1 → 8.3.0					nuget	minor
FastEndpoints.Security (source)	8.0.1 → 8.3.0					nuget	minor
FastEndpoints.Swagger (source)	8.0.1 → 8.3.0					nuget	minor
FastEndpoints.Testing (source)	8.0.1 → 8.3.0					nuget	minor
HtmlSanitizer	9.0.892 → 9.2.1039					nuget	minor
Microsoft.AspNetCore.Authentication.JwtBearer (source)	10.0.3 → 10.0.11					nuget	patch
Microsoft.AspNetCore.Identity.EntityFrameworkCore (source)	10.0.3 → 10.0.11					nuget	patch
Microsoft.AspNetCore.OpenApi (source)	10.0.3 → 10.0.11					nuget	patch
Microsoft.AspNetCore.OutputCaching.StackExchangeRedis (source)	10.0.3 → 10.0.11					nuget	patch
Microsoft.EntityFrameworkCore.InMemory (source)	10.0.3 → 10.0.11					nuget	patch
Microsoft.EntityFrameworkCore.Tools (source)	10.0.3 → 10.0.11					nuget	patch
Microsoft.Extensions.Caching.Hybrid (source)	10.3.0 → 10.9.0					nuget	minor
Microsoft.Extensions.Caching.StackExchangeRedis (source)	10.0.3 → 10.0.11					nuget	patch
Microsoft.Extensions.Http.Resilience (source)	10.3.0 → 10.9.0					nuget	minor
Microsoft.Extensions.TimeProvider.Testing (source)	10.3.0 → 10.9.0					nuget	minor
Microsoft.NET.Test.Sdk	18.3.0 → 18.9.0					nuget	minor
MinecraftRenderer	0.4.2 → 0.9.0					nuget	minor
Npgsql	10.0.1 → 10.0.3					nuget	patch
Npgsql.EntityFrameworkCore.PostgreSQL	10.0.0 → 10.0.3					nuget	patch
OpenTelemetry.Extensions.Hosting (source)	1.15.0 → 1.18.0					nuget	minor
Pyroscope (source)	0.14.1 → 0.15.0					nuget	minor
Pyroscope.OpenTelemetry (source)	0.4.0 → 0.5.1					nuget	minor
Quartz.Extensions.Hosting (source)	3.16.1 → 3.20.0					nuget	minor
Refit	10.0.1 → 10.2.0					nuget	minor
Refit.HttpClientFactory	10.0.1 → 10.2.0					nuget	minor
Scalar.AspNetCore (source)	2.13.1 → 2.17.2					nuget	minor
SkyblockRepo	0.4.3 → 0.5.2					nuget	minor
StackExchange.Redis (source)	2.11.8 → 2.13.17					nuget	minor
Swashbuckle.AspNetCore	10.1.4 → 10.2.3					nuget	minor
Swashbuckle.AspNetCore.Annotations	10.1.4 → 10.2.3					nuget	minor
System.Linq.Async	7.0.0 → 7.0.1					nuget	patch
System.Threading.RateLimiting (source)	10.0.3 → 10.0.11					nuget	patch
Testcontainers.PostgreSql (source)	4.10.0 → 4.14.0					nuget	minor
ZLinq	1.5.5 → 1.5.6					nuget	patch
coverlet.collector	8.0.0 → 8.0.1					nuget	patch
dotnet-ef (source)	10.0.1 → 10.0.11					nuget	patch
prom/prometheus	v3.5.0 → v3.14.0						minor
pyroscope/pyroscope-dotnet	0.13.0-glibc → 0.14.5-glibc					stage	minor
redis (source)	8.4-alpine → 8.10-alpine						minor

---

Release Notes

aws/aws-sdk-net (AWSSDK.S3)

v4.0.102

v4.0.101

v4.0.100

v4.0.25

v4.0.24

v4.0.23

v4.0.22

v4.0.21

v4.0.20

v4.0.19

error-or/error-or (ErrorOr)

v2.1.1

Added

• #​94, #​95 Added missing async versions of FailIf methods

  publicasyncTask<ErrorOr<TValue>>FailIfAsync(Func<TValue,Task<bool>>onValue,Errorerror)

  publicstaticasyncTask<ErrorOr<TValue>>FailIf<TValue>(thisTask<ErrorOr<TValue>>errorOr,Func<TValue,bool>onValue,Errorerror)

  publicstaticasyncTask<ErrorOr<TValue>>FailIfAsync<TValue>(thisTask<ErrorOr<TValue>>errorOr,Func<TValue,Task<bool>>onValue,Errorerror)

• #​104 Support for .NET 8 was added

• #​109, #​111 Added FailIf method overloads that allow to use value in error definition using Func<TValue, Error> error builder

  publicErrorOr<TValue>FailIf(Func<TValue,bool>onValue,Func<TValue,Error>errorBuilder)

  publicasyncTask<ErrorOr<TValue>>FailIfAsync(Func<TValue,Task<bool>>onValue,Func<TValue,Task<Error>>errorBuilder)

  publicstaticasyncTask<ErrorOr<TValue>>FailIf<TValue>(thisTask<ErrorOr<TValue>>errorOr,Func<TValue,bool>onValue,Func<TValue,Error>errorBuilder)

  publicstaticasyncTask<ErrorOr<TValue>>FailIfAsync<TValue>(thisTask<ErrorOr<TValue>>errorOr,Func<TValue,Task<bool>>onValue,Func<TValue,Task<Error>>errorBuilder)

  Value can now be used to build the error:

  ErrorOr<int>result=errorOrInt.FailIf(num =>num>3,(num)=>Error.Failure(description:$"{num} is greater than 3"));

• #​117 Added ElseDo and ElseDoAsync methods

  Actions returning no result can now be called when IsError is true.

  ErrorOr<string>foo=result.Else(errors =>Error.Unexpected()).ElseDo(error =>Console.WriteLine(error.FirstError.Description));

  ErrorOr<string>foo=awaitresult.ElseDoAsync(HandleErrorAsync);

• #​122 Added ToErrorOrAsync method

  Values in Task can now be easily converted to ErrorOr.

  ErrorOr<int>result=awaitTask.FromResult(5).ToErrorOrAsync();

• #​129 Added missing ErrorOrFactory.From methods

  Now following calls from README.md are available

  ErrorOr<int>result=ErrorOrFactory.From<int>(Error.Unexpected());ErrorOr<int>result=ErrorOrFactory.From<int>([Error.Validation(),Error.Validation()]);

  Following call is now obsolete

  ErrorOr<int>errorOrPerson=ErrorOr<int>.From([Error.Validation(),Error.Validation()]);

• #​133 Added missing collection expression support

  Now following call from README.md is available

  ErrorOr<int>result=[Error.Validation(),Error.Validation()];

• #​134 Added FromAsync and missing ToErrorOrAsync methods

  Added support for FromAsync methods.

  publicasyncTak<ErrorOr<int>>GetValueAsync(){returnawaitErrorOrFactory.FromAsync(5);}

  publicasyncTak<ErrorOr<int>>SingleErrorToErrorOrAsync(){returnawaitErrorOrFactory.FromAsync<int>(Error.Unexpected());}

  publicasyncTak<ErrorOr<int>>MultipleErrorsToErrorOrAsync(){returnawaitErrorOrFactory.FromAsync([Error.Validation(description:"Invalid Name"),Error.Validation(description:"Invalid Last Name")]);}

  Added support for ToErrorOrAsync methods from errors:

  Task<Error>errorTask=Task.FromResult(Error.Validation());ErrorOr<int>result=errorTask.ToErrorOrAsync<int>();

  List<Error>errors=[Error.Unauthorized(),Error.Validation()];Task<List<Error>>errorsTask=Task.FromResult(errors);ErrorOr<int>result=awaiterrorsTask.ToErrorOrAsync<int>();

• #​149 Added Else/ElseAsync overloads returning ErrorOr

• #​152 Added ThenEnsure and ThenEnsureAsync methods.

  They are similar to ThenDo and ThenDoAsync, but they receive a function that can return errors.
  If no errors are returned, the original value is preserved and the ensure function's success value is ignored.

• #​159 Added IsSuccess property to ErrorOr

• #​158 Added support for serialization via IErrorOr interface without direct access to Value property. The IRecordable base interface provides a way to obtain a serialized representation of the current state.

  voidLog(IErrorOrresult){Console.WriteLine(result.GetRecording(serializer));}

  IRecordingSerializer<TOutput> interface can be implemented to provide concrete serialization strategy, for exaple JSON serialization:

  usingSystem.Text.Json;usingSystem.Text.Json.Serialization;usingErrorOr;publicclassSystemTextJsonRecordingSerializer:IRecordingSerializer<string>{privatestaticreadonlyJsonSerializerOptionsJsonOptions=new(){WriteIndented=true,Converters={newJsonStringEnumConverter()},DefaultIgnoreCondition=JsonIgnoreCondition.Never,};publicstringSerializeValue<TValue>(TValuevalue)=>JsonSerializer.Serialize(value,JsonOptions);publicstringSerializeErrors(List<Error>errors)=>JsonSerializer.Serialize(errors,JsonOptions);}

• #​179 Support for .NET 10 was added

Fixed

• #​85, #​97ErrorOr turned into Value Object by reimplementing Equals and GetHashCode methods

  New dependency was introduced to Microsoft.Bcl.HashCode and development dependency was introduced to Nullable

• #​178 Initializing ErrorOr<T> with empty or null error collection results with unexpected error.

Optimized

• #​98, #​99 Memory consumption optimized by moving static empty errors lists from generic struct into non-generic class

Refactored

• #​154 Modernized NuGet publish workflow

mganss/HtmlSanitizer (HtmlSanitizer)

v9.2.1039: 9.2.1039

Fix attribute bypass in SanitizeDom(string) wrapper elements

v9.2.995: 9.2.995

• AngleSharp dependency updated from 1.7.0 to 1.7.1 (4515e1f)
• Sanitization enhancements for URI attributes
  • Added cite and longdesc attributes to URL sanitization (e47862e)
  • Enhanced sanitization of srcdoc content and attributes holding URI lists (edb2633)
• CSS/style handling improvements
  • Added sanitization of CSS declarations in style elements with type="" attribute (0592f1e)
  • Fixed sanitization of CSS @font-face and @import at-rules (1d33413)
• Bug fixes
  • Fixed resolved URI check validation (7f379ef)
  • Fixed CSS variable-in-shorthand sanitization (b8e9844)
  • Fixed issue #​629 (e0deb7b)
  • Multiple SonarCloud code quality issues resolved (ec1e786, 2d95200)
• Test improvements
  • Refactored test suite for style element sanitization (0592f1e)
  • Improved performance of ThreadTest (0ab33ba)
• Documentation
  • Added XML code usage examples for HtmlSanitizerOptions properties (#​632)

v9.1.982: 9.1.982

Fix multiple enumeration of URLs (fixes #​625)

v9.1.981: 9.1.981

Update NuGet packages

v9.1.974: 9.1.974

Add FilterCssRule event (fixes #​622)

v9.1.973: 9.1.973

Update to AngleSharp 1.6.0 and AngleSharp.Css 1.0.0

dotnet/dotnet (Microsoft.AspNetCore.Authentication.JwtBearer)

v10.0.11

v10.0.10

v10.0.9

v10.0.8

v10.0.7

v10.0.6

v10.0.5

v10.0.4

dotnet/extensions (Microsoft.Extensions.Caching.Hybrid)

v10.9.0

Version 10.9.0 is headlined by changes in these areas:

• AI: New experimental routing APIs center on the abstract RoutingChatClient base class, with SemanticRoutingChatClient as a concrete semantic-routing implementation. Separately, the abstract FailoverChatClient specialization and its concrete OrderedFailoverChatClient implementation add failover routing.
• AI Evaluation: The generated report gains redesigned Overview, Cases, History, and Comparison views.
• ASP.NET Core and HTTP diagnostics: The release adds HTTP request latency log enrichment and fixes configuration binding, response-body logging, request-path redaction, and resilience package version handling.
• Source-generated logging and service discovery: Fixes cover classification type qualification, thread-local state cleanup, and DNS query suffix handling.

Experimental API Changes

New Experimental APIs

• New experimental API: HTTP request latency log enrichment (EXTEXP0013) #​7602
• New experimental API: Chat client routing and failover (MEAI001) #​7662

What's Changed

AI (Microsoft.Extensions.AI, Microsoft.Extensions.AI.Abstractions, and Microsoft.Extensions.AI.OpenAI)

• Add extensible chat client routing #​7662 by @​joshuajyue (co-authored by @​Copilot)
• Pass the request's options to the selected client #​7685 by @​joshuajyue (co-authored by @​jozkee@​Copilot)
• AI.Abstractions: fix ExcludeFromSchema dropped under concurrent AIFunction creation #​7677 by @​jozkee (co-authored by @​Copilot)
• Cap OpenAI dependency version (b10f9c0) by @​jeffhandley (co-authored by @​Copilot)

Note: Microsoft.Extensions.AI.OpenAI constrains its dependency for OpenAI to 2.12.x, preventing OpenAI updates to 2.13.0+ due to an incompatibility. We expect to release Microsoft.Extensions.AI.OpenAI version 10.9.1 during the week of August 17 to address this issue.

HTTP Resilience and Diagnostics (Microsoft.Extensions.Http.Resilience and Microsoft.Extensions.Http.Diagnostics)

• Fix Grpc.Net.ClientFactory version range check - Fixes #​7565#​7566 by @​Ghost93
• Fix response body logging under debugger #​7678 by @​Rimobul
• Redact outgoing path when route is unknown #​7687 by @​Rimobul
• Fix HTTP client logging config binding #​7691 by @​Rimobul

ASP.NET Core Extensions (Microsoft.AspNetCore.Diagnostics.Middleware)

• Rename HttpLatencyTelemetry extensions class and drop redundant TFM guard #​7645 by @​EasyL0ver (co-authored by @​Copilot)
• Add HTTP request latency log enricher (experimental) #​7602 by @​EasyL0ver (co-authored by @​Copilot)

Logging Source Generator (Microsoft.Gen.Logging)

• [Microsoft.Gen.Logging] Clear thread-local state when logging throws #​7682 by @​Rimobul
• [Microsoft.Gen.Logging] Fully qualify classification types #​7689 by @​Rimobul

AI Evaluation (Microsoft.Extensions.AI.Evaluation.Reporting)

• [Microsoft.Extensions.AI.Evaluation.Reporting] Evaluation report redesign #​7609 by @​grafanaKibana

Project Templates (Microsoft.McpServer.ProjectTemplates)

• Remove MCP server project template #​7680 by @​jeffhandley (co-authored by @​Copilot)

Note: The MCP server project template was migrated to the dotnet/aspnetcore repository, and it is now included in the .NET 10 and .NET 11 SDKs.

Service Discovery (Microsoft.Extensions.ServiceDiscovery.Dns)

• Fix DNS SRV provider ignoring query suffix #​7688 by @​Rimobul (co-authored by @​Copilot)

Test Improvements

• Update Microsoft.Data.SqlClient test dependency (aaea3c8) by @​jeffhandley (co-authored by @​Copilot)

Repository Infrastructure Updates

• [main] Update dependencies from dotnet/arcade #​7621
• Merge release/10.8 into main #​7632 by @​jeffhandley (co-authored by @​jozkee@​Copilot)
• Add agentic workflows that keep Microsoft.Extensions.AI aligned with OpenTelemetry GenAI semantic-conventions #​7611 by @​jeffhandley (co-authored by @​Copilot)
• Bump brace-expansion, eslint and tfx-cli in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7648
• Add a release-manager agent for the dotnet/extensions release process #​7643 by @​jeffhandley (co-authored by @​Copilot)
• Bump CommunityToolkit.VectorData package baselines to 1.0.0 / 1.0.0-preview #​7651 by @​adamsitnik (co-authored by @​Copilot)
• Incorporate servicing release experience into release-manager playbooks #​7656 by @​jeffhandley (co-authored by @​Copilot)
• Bump dotnet-reportgenerator-globaltool from 5.5.10 to 5.5.11 #​7666
• Bump adm-zip and azure-pipelines-task-lib in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript/azure-devops-report/tasks/PublishAIEvaluationReport #​7652
• Bump postcss from 8.5.15 to 8.5.23 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7660
• Bump PowerShell from 7.6.3 to 7.6.4 #​7650
• [main] Update dependencies from dotnet/arcade #​7644
• [release-manager] Require package dependency closure for releases #​7693 by @​jeffhandley (co-authored by @​Copilot)
• Optionally allow official builds to publish VSIX extension. #​7692 by @​peterwald
• [main] Update dependencies from dotnet/arcade #​7690

Acknowledgements

• @​EasyL0ver made their first contribution in #​7602
• @​Ghost93 made their first contribution in #​7566
• @​grafanaKibana made their first contribution in #​7609
• @​Rimobul made their first contribution in #​7678
• @​joshuajyue made their first contribution in #​7662
• @​Ghost93 submitted issue #​7565 (resolved by #​7566)
• @​grafanaKibana submitted issue #​7593 (resolved by #​7609)
• @​jredgard submitted issue #​7675 (resolved by #​7677)
• @​viorelbuligadev submitted issue #​7649 (resolved by #​7678)
• @​joshuajyue submitted issue #​7647 (resolved by #​7662)
• @​jboelter submitted issue #​7634 (resolved by #​7682)
• @​dmeeze submitted issue #​7157 (resolved by #​7689)
• @​ssmelov submitted issue #​7536 (resolved by #​7687)
• @​Marcus-Kanon submitted issue #​7551 (resolved by #​7691)
• @​vermilion submitted issue #​7175 (resolved by #​7688)
• @​evgenyfedorov2@​wtgodbe@​shyamnamboodiripad@​dariusclay@​iliar-turdushev@​mariamgerges@​PranavSenthilnathan@​rafal-mz@​tannergooding@​tarekgh reviewed pull requests

Full Changelog: dotnet/extensions@v10.8.4...v10.9.0

Packages in this release

Package	Version
Microsoft.AspNetCore.Testing	10.9.0
Microsoft.Extensions.AI.Abstractions	10.9.0
Microsoft.Extensions.AI.Evaluation.Console	10.9.0
Microsoft.Extensions.AI.Templates	10.9.0-preview.3.26411.16
Microsoft.Extensions.AmbientMetadata.Application	10.9.0
Microsoft.Extensions.AmbientMetadata.Build	10.9.0
Microsoft.Extensions.AuditReports	10.9.0
Microsoft.Extensions.Caching.Hybrid	10.9.0
Microsoft.Extensions.Compliance.Abstractions	10.9.0
Microsoft.Extensions.DataIngestion.Abstractions	10.9.0-preview.1.26411.16
Microsoft.Extensions.DependencyInjection.AutoActivation	10.9.0
Microsoft.Extensions.Diagnostics.ExceptionSummarization	10.9.0
Microsoft.Extensions.ObjectPool.DependencyInjection	10.9.0
Microsoft.Extensions.Options.Contextual	10.9.0-preview.1.26411.16
Microsoft.Extensions.ServiceDiscovery.Abstractions	10.9.0
Microsoft.Extensions.StaticAnalysis	10.9.0
Microsoft.Extensions.TimeProvider.Testing	10.9.0
Microsoft.Extensions.AI	10.9.0
Microsoft.Extensions.AI.Evaluation	10.9.0
Microsoft.Extensions.AI.OpenAI	10.9.0
Microsoft.Extensions.AsyncState	10.9.0
Microsoft.Extensions.Compliance.Redaction	10.9.0
Microsoft.Extensions.Compliance.Testing	10.9.0
Microsoft.Extensions.DataIngestion.Markdig	10.9.0-preview.1.26411.16
Microsoft.Extensions.DataIngestion.MarkItDown	10.9.0-preview.1.26411.16
Microsoft.Extensions.ServiceDiscovery	10.9.0
Microsoft.Extensions.Telemetry.Abstractions	10.9.0
Microsoft.Extensions.VectorData.Abstractions	10.9.0
Microsoft.AspNetCore.AsyncState	10.9.0
Microsoft.AspNetCore.HeaderParsing	10.9.0
Microsoft.Extensions.AI.Evaluation.NLP	10.9.0-preview.1.26411.16
Microsoft.Extensions.AI.Evaluation.Quality	10.9.0
Microsoft.Extensions.AI.Evaluation.Reporting	10.9.0
Microsoft.Extensions.AI.Evaluation.Safety	10.9.0-preview.1.26411.16
Microsoft.Extensions.DataIngestion	10.9.0-preview.1.26411.16
Microsoft.Extensions.Diagnostics.HealthChecks.Common	10.9.0
Microsoft.Extensions.Diagnostics.Probes	10.9.0-preview.1.26411.16
Microsoft.Extensions.Diagnostics.ResourceMonitoring	10.9.0
Microsoft.Extensions.Diagnostics.Testing	10.9.0
Microsoft.Extensions.Resilience	10.9.0
Microsoft.Extensions.ServiceDiscovery.Dns	10.9.0
Microsoft.Extensions.ServiceDiscovery.Yarp	10.9.0
Microsoft.Extensions.Telemetry	10.9.0
Microsoft.Extensions.VectorData.ConformanceTests	10.9.0
Microsoft.AspNetCore.Diagnostics.Middleware	10.9.0
Microsoft.Extensions.AI.Evaluation.Reporting.Azure	10.9.0
Microsoft.Extensions.Diagnostics.HealthChecks.ResourceUtilization	10.9.0
Microsoft.Extensions.Diagnostics.ResourceMonitoring.Kubernetes	10.9.0
Microsoft.Extensions.Hosting.Testing	10.9.0-preview.1.26411.16
Microsoft.Extensions.Http.Diagnostics	10.9.0
Microsoft.Extensions.Http.Resilience	10.9.0

The Microsoft.Agents.AI.ProjectTemplates package is not included in this release.

v10.8.0

This release adds new experimental APIs to Microsoft.Extensions.AI.Abstractions and updates the OpenAI dependency to 2.12.0, alongside documentation, test, and repository maintenance.

Experimental API Changes

N

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update
AWSSDK.S3	4.0.18.7 → 4.0.102.4					nuget	patch
ErrorOr	2.0.1 → 2.1.1					nuget	minor
FastEndpoints (source)	8.0.1 → 8.3.0					nuget	minor
FastEndpoints.Generator (source)	8.0.1 → 8.3.0					nuget	minor
FastEndpoints.Security (source)	8.0.1 → 8.3.0					nuget	minor
FastEndpoints.Swagger (source)	8.0.1 → 8.3.0					nuget	minor
FastEndpoints.Testing (source)	8.0.1 → 8.3.0					nuget	minor
HtmlSanitizer	9.0.892 → 9.2.1039					nuget	minor
Microsoft.AspNetCore.Authentication.JwtBearer (source)	10.0.3 → 10.0.11					nuget	patch
Microsoft.AspNetCore.Identity.EntityFrameworkCore (source)	10.0.3 → 10.0.11					nuget	patch
Microsoft.AspNetCore.OpenApi (source)	10.0.3 → 10.0.11					nuget	patch
Microsoft.AspNetCore.OutputCaching.StackExchangeRedis (source)	10.0.3 → 10.0.11					nuget	patch
Microsoft.EntityFrameworkCore.InMemory (source)	10.0.3 → 10.0.11					nuget	patch
Microsoft.EntityFrameworkCore.Tools (source)	10.0.3 → 10.0.11					nuget	patch
Microsoft.Extensions.Caching.Hybrid (source)	10.3.0 → 10.9.0					nuget	minor
Microsoft.Extensions.Caching.StackExchangeRedis (source)	10.0.3 → 10.0.11					nuget	patch
Microsoft.Extensions.Http.Resilience (source)	10.3.0 → 10.9.0					nuget	minor
Microsoft.Extensions.TimeProvider.Testing (source)	10.3.0 → 10.9.0					nuget	minor
Microsoft.NET.Test.Sdk	18.3.0 → 18.9.0					nuget	minor
MinecraftRenderer	0.4.2 → 0.9.0					nuget	minor
Npgsql	10.0.1 → 10.0.3					nuget	patch
Npgsql.EntityFrameworkCore.PostgreSQL	10.0.0 → 10.0.3					nuget	patch
OpenTelemetry.Extensions.Hosting (source)	1.15.0 → 1.18.0					nuget	minor
Pyroscope (source)	0.14.1 → 0.15.0					nuget	minor
Pyroscope.OpenTelemetry (source)	0.4.0 → 0.5.1					nuget	minor
Quartz.Extensions.Hosting (source)	3.16.1 → 3.20.0					nuget	minor
Refit	10.0.1 → 10.2.0					nuget	minor
Refit.HttpClientFactory	10.0.1 → 10.2.0					nuget	minor
Scalar.AspNetCore (source)	2.13.1 → 2.17.2					nuget	minor
SkyblockRepo	0.4.3 → 0.5.2					nuget	minor
StackExchange.Redis (source)	2.11.8 → 2.13.17					nuget	minor
Swashbuckle.AspNetCore	10.1.4 → 10.2.3					nuget	minor
Swashbuckle.AspNetCore.Annotations	10.1.4 → 10.2.3					nuget	minor
System.Linq.Async	7.0.0 → 7.0.1					nuget	patch
System.Threading.RateLimiting (source)	10.0.3 → 10.0.11					nuget	patch
Testcontainers.PostgreSql (source)	4.10.0 → 4.14.0					nuget	minor
ZLinq	1.5.5 → 1.5.6					nuget	patch
coverlet.collector	8.0.0 → 8.0.1					nuget	patch
dotnet-ef (source)	10.0.1 → 10.0.11					nuget	patch
prom/prometheus	v3.5.0 → v3.14.0						minor
pyroscope/pyroscope-dotnet	0.13.0-glibc → 0.14.5-glibc					stage	minor
redis (source)	8.4-alpine → 8.10-alpine						minor

---

Release Notes

aws/aws-sdk-net (AWSSDK.S3)

v4.0.102

v4.0.101

v4.0.100

v4.0.25

v4.0.24

v4.0.23

v4.0.22

v4.0.21

v4.0.20

v4.0.19

error-or/error-or (ErrorOr)

v2.1.1

Added

• #​94, #​95 Added missing async versions of FailIf methods

  publicasyncTask<ErrorOr<TValue>>FailIfAsync(Func<TValue,Task<bool>>onValue,Errorerror)

  publicstaticasyncTask<ErrorOr<TValue>>FailIf<TValue>(thisTask<ErrorOr<TValue>>errorOr,Func<TValue,bool>onValue,Errorerror)

  publicstaticasyncTask<ErrorOr<TValue>>FailIfAsync<TValue>(thisTask<ErrorOr<TValue>>errorOr,Func<TValue,Task<bool>>onValue,Errorerror)

• #​104 Support for .NET 8 was added

• #​109, #​111 Added FailIf method overloads that allow to use value in error definition using Func<TValue, Error> error builder

  publicErrorOr<TValue>FailIf(Func<TValue,bool>onValue,Func<TValue,Error>errorBuilder)

  publicasyncTask<ErrorOr<TValue>>FailIfAsync(Func<TValue,Task<bool>>onValue,Func<TValue,Task<Error>>errorBuilder)

  publicstaticasyncTask<ErrorOr<TValue>>FailIf<TValue>(thisTask<ErrorOr<TValue>>errorOr,Func<TValue,bool>onValue,Func<TValue,Error>errorBuilder)

  publicstaticasyncTask<ErrorOr<TValue>>FailIfAsync<TValue>(thisTask<ErrorOr<TValue>>errorOr,Func<TValue,Task<bool>>onValue,Func<TValue,Task<Error>>errorBuilder)

  Value can now be used to build the error:

  ErrorOr<int>result=errorOrInt.FailIf(num =>num>3,(num)=>Error.Failure(description:$"{num} is greater than 3"));

• #​117 Added ElseDo and ElseDoAsync methods

  Actions returning no result can now be called when IsError is true.

  ErrorOr<string>foo=result.Else(errors =>Error.Unexpected()).ElseDo(error =>Console.WriteLine(error.FirstError.Description));

  ErrorOr<string>foo=awaitresult.ElseDoAsync(HandleErrorAsync);

• #​122 Added ToErrorOrAsync method

  Values in Task can now be easily converted to ErrorOr.

  ErrorOr<int>result=awaitTask.FromResult(5).ToErrorOrAsync();

• #​129 Added missing ErrorOrFactory.From methods

  Now following calls from README.md are available

  ErrorOr<int>result=ErrorOrFactory.From<int>(Error.Unexpected());ErrorOr<int>result=ErrorOrFactory.From<int>([Error.Validation(),Error.Validation()]);

  Following call is now obsolete

  ErrorOr<int>errorOrPerson=ErrorOr<int>.From([Error.Validation(),Error.Validation()]);

• #​133 Added missing collection expression support

  Now following call from README.md is available

  ErrorOr<int>result=[Error.Validation(),Error.Validation()];

• #​134 Added FromAsync and missing ToErrorOrAsync methods

  Added support for FromAsync methods.

  publicasyncTak<ErrorOr<int>>GetValueAsync(){returnawaitErrorOrFactory.FromAsync(5);}

  publicasyncTak<ErrorOr<int>>SingleErrorToErrorOrAsync(){returnawaitErrorOrFactory.FromAsync<int>(Error.Unexpected());}

  publicasyncTak<ErrorOr<int>>MultipleErrorsToErrorOrAsync(){returnawaitErrorOrFactory.FromAsync([Error.Validation(description:"Invalid Name"),Error.Validation(description:"Invalid Last Name")]);}

  Added support for ToErrorOrAsync methods from errors:

  Task<Error>errorTask=Task.FromResult(Error.Validation());ErrorOr<int>result=errorTask.ToErrorOrAsync<int>();

  List<Error>errors=[Error.Unauthorized(),Error.Validation()];Task<List<Error>>errorsTask=Task.FromResult(errors);ErrorOr<int>result=awaiterrorsTask.ToErrorOrAsync<int>();

• #​149 Added Else/ElseAsync overloads returning ErrorOr

• #​152 Added ThenEnsure and ThenEnsureAsync methods.

  They are similar to ThenDo and ThenDoAsync, but they receive a function that can return errors.
  If no errors are returned, the original value is preserved and the ensure function's success value is ignored.

• #​159 Added IsSuccess property to ErrorOr

• #​158 Added support for serialization via IErrorOr interface without direct access to Value property. The IRecordable base interface provides a way to obtain a serialized representation of the current state.

  voidLog(IErrorOrresult){Console.WriteLine(result.GetRecording(serializer));}

  IRecordingSerializer<TOutput> interface can be implemented to provide concrete serialization strategy, for exaple JSON serialization:

  usingSystem.Text.Json;usingSystem.Text.Json.Serialization;usingErrorOr;publicclassSystemTextJsonRecordingSerializer:IRecordingSerializer<string>{privatestaticreadonlyJsonSerializerOptionsJsonOptions=new(){WriteIndented=true,Converters={newJsonStringEnumConverter()},DefaultIgnoreCondition=JsonIgnoreCondition.Never,};publicstringSerializeValue<TValue>(TValuevalue)=>JsonSerializer.Serialize(value,JsonOptions);publicstringSerializeErrors(List<Error>errors)=>JsonSerializer.Serialize(errors,JsonOptions);}

• #​179 Support for .NET 10 was added

Fixed

• #​85, #​97ErrorOr turned into Value Object by reimplementing Equals and GetHashCode methods

  New dependency was introduced to Microsoft.Bcl.HashCode and development dependency was introduced to Nullable

• #​178 Initializing ErrorOr<T> with empty or null error collection results with unexpected error.

Optimized

• #​98, #​99 Memory consumption optimized by moving static empty errors lists from generic struct into non-generic class

Refactored

• #​154 Modernized NuGet publish workflow

mganss/HtmlSanitizer (HtmlSanitizer)

v9.2.1039: 9.2.1039

Fix attribute bypass in SanitizeDom(string) wrapper elements

v9.2.995: 9.2.995

• AngleSharp dependency updated from 1.7.0 to 1.7.1 (4515e1f)
• Sanitization enhancements for URI attributes
  • Added cite and longdesc attributes to URL sanitization (e47862e)
  • Enhanced sanitization of srcdoc content and attributes holding URI lists (edb2633)
• CSS/style handling improvements
  • Added sanitization of CSS declarations in style elements with type="" attribute (0592f1e)
  • Fixed sanitization of CSS @font-face and @import at-rules (1d33413)
• Bug fixes
  • Fixed resolved URI check validation (7f379ef)
  • Fixed CSS variable-in-shorthand sanitization (b8e9844)
  • Fixed issue #​629 (e0deb7b)
  • Multiple SonarCloud code quality issues resolved (ec1e786, 2d95200)
• Test improvements
  • Refactored test suite for style element sanitization (0592f1e)
  • Improved performance of ThreadTest (0ab33ba)
• Documentation
  • Added XML code usage examples for HtmlSanitizerOptions properties (#​632)

v9.1.982: 9.1.982

Fix multiple enumeration of URLs (fixes #​625)

v9.1.981: 9.1.981

Update NuGet packages

v9.1.974: 9.1.974

Add FilterCssRule event (fixes #​622)

v9.1.973: 9.1.973

Update to AngleSharp 1.6.0 and AngleSharp.Css 1.0.0

dotnet/dotnet (Microsoft.AspNetCore.Authentication.JwtBearer)

v10.0.11

v10.0.10

v10.0.9

v10.0.8

v10.0.7

v10.0.6

v10.0.5

v10.0.4

dotnet/extensions (Microsoft.Extensions.Caching.Hybrid)

v10.9.0

Version 10.9.0 is headlined by changes in these areas:

• AI: New experimental routing APIs center on the abstract RoutingChatClient base class, with SemanticRoutingChatClient as a concrete semantic-routing implementation. Separately, the abstract FailoverChatClient specialization and its concrete OrderedFailoverChatClient implementation add failover routing.
• AI Evaluation: The generated report gains redesigned Overview, Cases, History, and Comparison views.
• ASP.NET Core and HTTP diagnostics: The release adds HTTP request latency log enrichment and fixes configuration binding, response-body logging, request-path redaction, and resilience package version handling.
• Source-generated logging and service discovery: Fixes cover classification type qualification, thread-local state cleanup, and DNS query suffix handling.

Experimental API Changes

New Experimental APIs

• New experimental API: HTTP request latency log enrichment (EXTEXP0013) #​7602
• New experimental API: Chat client routing and failover (MEAI001) #​7662

What's Changed

AI (Microsoft.Extensions.AI, Microsoft.Extensions.AI.Abstractions, and Microsoft.Extensions.AI.OpenAI)

• Add extensible chat client routing #​7662 by @​joshuajyue (co-authored by @​Copilot)
• Pass the request's options to the selected client #​7685 by @​joshuajyue (co-authored by @​jozkee@​Copilot)
• AI.Abstractions: fix ExcludeFromSchema dropped under concurrent AIFunction creation #​7677 by @​jozkee (co-authored by @​Copilot)
• Cap OpenAI dependency version (b10f9c0) by @​jeffhandley (co-authored by @​Copilot)

Note: Microsoft.Extensions.AI.OpenAI constrains its dependency for OpenAI to 2.12.x, preventing OpenAI updates to 2.13.0+ due to an incompatibility. We expect to release Microsoft.Extensions.AI.OpenAI version 10.9.1 during the week of August 17 to address this issue.

HTTP Resilience and Diagnostics (Microsoft.Extensions.Http.Resilience and Microsoft.Extensions.Http.Diagnostics)

• Fix Grpc.Net.ClientFactory version range check - Fixes #​7565#​7566 by @​Ghost93
• Fix response body logging under debugger #​7678 by @​Rimobul
• Redact outgoing path when route is unknown #​7687 by @​Rimobul
• Fix HTTP client logging config binding #​7691 by @​Rimobul

ASP.NET Core Extensions (Microsoft.AspNetCore.Diagnostics.Middleware)

• Rename HttpLatencyTelemetry extensions class and drop redundant TFM guard #​7645 by @​EasyL0ver (co-authored by @​Copilot)
• Add HTTP request latency log enricher (experimental) #​7602 by @​EasyL0ver (co-authored by @​Copilot)

Logging Source Generator (Microsoft.Gen.Logging)

• [Microsoft.Gen.Logging] Clear thread-local state when logging throws #​7682 by @​Rimobul
• [Microsoft.Gen.Logging] Fully qualify classification types #​7689 by @​Rimobul

AI Evaluation (Microsoft.Extensions.AI.Evaluation.Reporting)

• [Microsoft.Extensions.AI.Evaluation.Reporting] Evaluation report redesign #​7609 by @​grafanaKibana

Project Templates (Microsoft.McpServer.ProjectTemplates)

• Remove MCP server project template #​7680 by @​jeffhandley (co-authored by @​Copilot)

Note: The MCP server project template was migrated to the dotnet/aspnetcore repository, and it is now included in the .NET 10 and .NET 11 SDKs.

Service Discovery (Microsoft.Extensions.ServiceDiscovery.Dns)

• Fix DNS SRV provider ignoring query suffix #​7688 by @​Rimobul (co-authored by @​Copilot)

Test Improvements

• Update Microsoft.Data.SqlClient test dependency (aaea3c8) by @​jeffhandley (co-authored by @​Copilot)

Repository Infrastructure Updates

• [main] Update dependencies from dotnet/arcade #​7621
• Merge release/10.8 into main #​7632 by @​jeffhandley (co-authored by @​jozkee@​Copilot)
• Add agentic workflows that keep Microsoft.Extensions.AI aligned with OpenTelemetry GenAI semantic-conventions #​7611 by @​jeffhandley (co-authored by @​Copilot)
• Bump brace-expansion, eslint and tfx-cli in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7648
• Add a release-manager agent for the dotnet/extensions release process #​7643 by @​jeffhandley (co-authored by @​Copilot)
• Bump CommunityToolkit.VectorData package baselines to 1.0.0 / 1.0.0-preview #​7651 by @​adamsitnik (co-authored by @​Copilot)
• Incorporate servicing release experience into release-manager playbooks #​7656 by @​jeffhandley (co-authored by @​Copilot)
• Bump dotnet-reportgenerator-globaltool from 5.5.10 to 5.5.11 #​7666
• Bump adm-zip and azure-pipelines-task-lib in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript/azure-devops-report/tasks/PublishAIEvaluationReport #​7652
• Bump postcss from 8.5.15 to 8.5.23 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7660
• Bump PowerShell from 7.6.3 to 7.6.4 #​7650
• [main] Update dependencies from dotnet/arcade #​7644
• [release-manager] Require package dependency closure for releases #​7693 by @​jeffhandley (co-authored by @​Copilot)
• Optionally allow official builds to publish VSIX extension. #​7692 by @​peterwald
• [main] Update dependencies from dotnet/arcade #​7690

Acknowledgements

• @​EasyL0ver made their first contribution in #​7602
• @​Ghost93 made their first contribution in #​7566
• @​grafanaKibana made their first contribution in #​7609
• @​Rimobul made their first contribution in #​7678
• @​joshuajyue made their first contribution in #​7662
• @​Ghost93 submitted issue #​7565 (resolved by #​7566)
• @​grafanaKibana submitted issue #​7593 (resolved by #​7609)
• @​jredgard submitted issue #​7675 (resolved by #​7677)
• @​viorelbuligadev submitted issue #​7649 (resolved by #​7678)
• @​joshuajyue submitted issue #​7647 (resolved by #​7662)
• @​jboelter submitted issue #​7634 (resolved by #​7682)
• @​dmeeze submitted issue #​7157 (resolved by #​7689)
• @​ssmelov submitted issue #​7536 (resolved by #​7687)
• @​Marcus-Kanon submitted issue #​7551 (resolved by #​7691)
• @​vermilion submitted issue #​7175 (resolved by #​7688)
• @​evgenyfedorov2@​wtgodbe@​shyamnamboodiripad@​dariusclay@​iliar-turdushev@​mariamgerges@​PranavSenthilnathan@​rafal-mz@​tannergooding@​tarekgh reviewed pull requests

Full Changelog: dotnet/extensions@v10.8.4...v10.9.0

Packages in this release

Package	Version
Microsoft.AspNetCore.Testing	10.9.0
Microsoft.Extensions.AI.Abstractions	10.9.0
Microsoft.Extensions.AI.Evaluation.Console	10.9.0
Microsoft.Extensions.AI.Templates	10.9.0-preview.3.26411.16
Microsoft.Extensions.AmbientMetadata.Application	10.9.0
Microsoft.Extensions.AmbientMetadata.Build	10.9.0
Microsoft.Extensions.AuditReports	10.9.0
Microsoft.Extensions.Caching.Hybrid	10.9.0
Microsoft.Extensions.Compliance.Abstractions	10.9.0
Microsoft.Extensions.DataIngestion.Abstractions	10.9.0-preview.1.26411.16
Microsoft.Extensions.DependencyInjection.AutoActivation	10.9.0
Microsoft.Extensions.Diagnostics.ExceptionSummarization	10.9.0
Microsoft.Extensions.ObjectPool.DependencyInjection	10.9.0
Microsoft.Extensions.Options.Contextual	10.9.0-preview.1.26411.16
Microsoft.Extensions.ServiceDiscovery.Abstractions	10.9.0
Microsoft.Extensions.StaticAnalysis	10.9.0
Microsoft.Extensions.TimeProvider.Testing	10.9.0
Microsoft.Extensions.AI	10.9.0
Microsoft.Extensions.AI.Evaluation	10.9.0
Microsoft.Extensions.AI.OpenAI	10.9.0
Microsoft.Extensions.AsyncState	10.9.0
Microsoft.Extensions.Compliance.Redaction	10.9.0
Microsoft.Extensions.Compliance.Testing	10.9.0
Microsoft.Extensions.DataIngestion.Markdig	10.9.0-preview.1.26411.16
Microsoft.Extensions.DataIngestion.MarkItDown	10.9.0-preview.1.26411.16
Microsoft.Extensions.ServiceDiscovery	10.9.0
Microsoft.Extensions.Telemetry.Abstractions	10.9.0
Microsoft.Extensions.VectorData.Abstractions	10.9.0
Microsoft.AspNetCore.AsyncState	10.9.0
Microsoft.AspNetCore.HeaderParsing	10.9.0
Microsoft.Extensions.AI.Evaluation.NLP	10.9.0-preview.1.26411.16
Microsoft.Extensions.AI.Evaluation.Quality	10.9.0
Microsoft.Extensions.AI.Evaluation.Reporting	10.9.0
Microsoft.Extensions.AI.Evaluation.Safety	10.9.0-preview.1.26411.16
Microsoft.Extensions.DataIngestion	10.9.0-preview.1.26411.16
Microsoft.Extensions.Diagnostics.HealthChecks.Common	10.9.0
Microsoft.Extensions.Diagnostics.Probes	10.9.0-preview.1.26411.16
Microsoft.Extensions.Diagnostics.ResourceMonitoring	10.9.0
Microsoft.Extensions.Diagnostics.Testing	10.9.0
Microsoft.Extensions.Resilience	10.9.0
Microsoft.Extensions.ServiceDiscovery.Dns	10.9.0
Microsoft.Extensions.ServiceDiscovery.Yarp	10.9.0
Microsoft.Extensions.Telemetry	10.9.0
Microsoft.Extensions.VectorData.ConformanceTests	10.9.0
Microsoft.AspNetCore.Diagnostics.Middleware	10.9.0
Microsoft.Extensions.AI.Evaluation.Reporting.Azure	10.9.0
Microsoft.Extensions.Diagnostics.HealthChecks.ResourceUtilization	10.9.0
Microsoft.Extensions.Diagnostics.ResourceMonitoring.Kubernetes	10.9.0
Microsoft.Extensions.Hosting.Testing	10.9.0-preview.1.26411.16
Microsoft.Extensions.Http.Diagnostics	10.9.0
Microsoft.Extensions.Http.Resilience	10.9.0

The Microsoft.Agents.AI.ProjectTemplates package is not included in this release.

v10.8.0

This release adds new experimental APIs to Microsoft.Extensions.AI.Abstractions and updates the OpenAI dependency to 2.12.0, alongside documentation, test, and repository maintenance.

Experimental API Changes

N

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update
AWSSDK.S3	4.0.18.7 → 4.0.102.4					nuget	patch
ErrorOr	2.0.1 → 2.1.1					nuget	minor
FastEndpoints (source)	8.0.1 → 8.3.0					nuget	minor
FastEndpoints.Generator (source)	8.0.1 → 8.3.0					nuget	minor
FastEndpoints.Security (source)	8.0.1 → 8.3.0					nuget	minor
FastEndpoints.Swagger (source)	8.0.1 → 8.3.0					nuget	minor
FastEndpoints.Testing (source)	8.0.1 → 8.3.0					nuget	minor
HtmlSanitizer	9.0.892 → 9.2.1039					nuget	minor
Microsoft.AspNetCore.Authentication.JwtBearer (source)	10.0.3 → 10.0.11					nuget	patch
Microsoft.AspNetCore.Identity.EntityFrameworkCore (source)	10.0.3 → 10.0.11					nuget	patch
Microsoft.AspNetCore.OpenApi (source)	10.0.3 → 10.0.11					nuget	patch
Microsoft.AspNetCore.OutputCaching.StackExchangeRedis (source)	10.0.3 → 10.0.11					nuget	patch
Microsoft.EntityFrameworkCore.InMemory (source)	10.0.3 → 10.0.11					nuget	patch
Microsoft.EntityFrameworkCore.Tools (source)	10.0.3 → 10.0.11					nuget	patch
Microsoft.Extensions.Caching.Hybrid (source)	10.3.0 → 10.9.0					nuget	minor
Microsoft.Extensions.Caching.StackExchangeRedis (source)	10.0.3 → 10.0.11					nuget	patch
Microsoft.Extensions.Http.Resilience (source)	10.3.0 → 10.9.0					nuget	minor
Microsoft.Extensions.TimeProvider.Testing (source)	10.3.0 → 10.9.0					nuget	minor
Microsoft.NET.Test.Sdk	18.3.0 → 18.9.0					nuget	minor
MinecraftRenderer	0.4.2 → 0.9.0					nuget	minor
Npgsql	10.0.1 → 10.0.3					nuget	patch
Npgsql.EntityFrameworkCore.PostgreSQL	10.0.0 → 10.0.3					nuget	patch
OpenTelemetry.Extensions.Hosting (source)	1.15.0 → 1.18.0					nuget	minor
Pyroscope (source)	0.14.1 → 0.15.0					nuget	minor
Pyroscope.OpenTelemetry (source)	0.4.0 → 0.5.1					nuget	minor
Quartz.Extensions.Hosting (source)	3.16.1 → 3.20.0					nuget	minor
Refit	10.0.1 → 10.2.0					nuget	minor
Refit.HttpClientFactory	10.0.1 → 10.2.0					nuget	minor
Scalar.AspNetCore (source)	2.13.1 → 2.17.2					nuget	minor
SkyblockRepo	0.4.3 → 0.5.2					nuget	minor
StackExchange.Redis (source)	2.11.8 → 2.13.17					nuget	minor
Swashbuckle.AspNetCore	10.1.4 → 10.2.3					nuget	minor
Swashbuckle.AspNetCore.Annotations	10.1.4 → 10.2.3					nuget	minor
System.Linq.Async	7.0.0 → 7.0.1					nuget	patch
System.Threading.RateLimiting (source)	10.0.3 → 10.0.11					nuget	patch
Testcontainers.PostgreSql (source)	4.10.0 → 4.14.0					nuget	minor
ZLinq	1.5.5 → 1.5.6					nuget	patch
coverlet.collector	8.0.0 → 8.0.1					nuget	patch
dotnet-ef (source)	10.0.1 → 10.0.11					nuget	patch
prom/prometheus	v3.5.0 → v3.14.0						minor
pyroscope/pyroscope-dotnet	0.13.0-glibc → 0.14.5-glibc					stage	minor
redis (source)	8.4-alpine → 8.10-alpine						minor

---

Release Notes

aws/aws-sdk-net (AWSSDK.S3)

v4.0.102

v4.0.101

v4.0.100

v4.0.25

v4.0.24

v4.0.23

v4.0.22

v4.0.21

v4.0.20

v4.0.19

error-or/error-or (ErrorOr)

v2.1.1

Added

• #​94, #​95 Added missing async versions of FailIf methods

  publicasyncTask<ErrorOr<TValue>>FailIfAsync(Func<TValue,Task<bool>>onValue,Errorerror)

  publicstaticasyncTask<ErrorOr<TValue>>FailIf<TValue>(thisTask<ErrorOr<TValue>>errorOr,Func<TValue,bool>onValue,Errorerror)

  publicstaticasyncTask<ErrorOr<TValue>>FailIfAsync<TValue>(thisTask<ErrorOr<TValue>>errorOr,Func<TValue,Task<bool>>onValue,Errorerror)

• #​104 Support for .NET 8 was added

• #​109, #​111 Added FailIf method overloads that allow to use value in error definition using Func<TValue, Error> error builder

  publicErrorOr<TValue>FailIf(Func<TValue,bool>onValue,Func<TValue,Error>errorBuilder)

  publicasyncTask<ErrorOr<TValue>>FailIfAsync(Func<TValue,Task<bool>>onValue,Func<TValue,Task<Error>>errorBuilder)

  publicstaticasyncTask<ErrorOr<TValue>>FailIf<TValue>(thisTask<ErrorOr<TValue>>errorOr,Func<TValue,bool>onValue,Func<TValue,Error>errorBuilder)

  publicstaticasyncTask<ErrorOr<TValue>>FailIfAsync<TValue>(thisTask<ErrorOr<TValue>>errorOr,Func<TValue,Task<bool>>onValue,Func<TValue,Task<Error>>errorBuilder)

  Value can now be used to build the error:

  ErrorOr<int>result=errorOrInt.FailIf(num =>num>3,(num)=>Error.Failure(description:$"{num} is greater than 3"));

• #​117 Added ElseDo and ElseDoAsync methods

  Actions returning no result can now be called when IsError is true.

  ErrorOr<string>foo=result.Else(errors =>Error.Unexpected()).ElseDo(error =>Console.WriteLine(error.FirstError.Description));

  ErrorOr<string>foo=awaitresult.ElseDoAsync(HandleErrorAsync);

• #​122 Added ToErrorOrAsync method

  Values in Task can now be easily converted to ErrorOr.

  ErrorOr<int>result=awaitTask.FromResult(5).ToErrorOrAsync();

• #​129 Added missing ErrorOrFactory.From methods

  Now following calls from README.md are available

  ErrorOr<int>result=ErrorOrFactory.From<int>(Error.Unexpected());ErrorOr<int>result=ErrorOrFactory.From<int>([Error.Validation(),Error.Validation()]);

  Following call is now obsolete

  ErrorOr<int>errorOrPerson=ErrorOr<int>.From([Error.Validation(),Error.Validation()]);

• #​133 Added missing collection expression support

  Now following call from README.md is available

  ErrorOr<int>result=[Error.Validation(),Error.Validation()];

• #​134 Added FromAsync and missing ToErrorOrAsync methods

  Added support for FromAsync methods.

  publicasyncTak<ErrorOr<int>>GetValueAsync(){returnawaitErrorOrFactory.FromAsync(5);}

  publicasyncTak<ErrorOr<int>>SingleErrorToErrorOrAsync(){returnawaitErrorOrFactory.FromAsync<int>(Error.Unexpected());}

  publicasyncTak<ErrorOr<int>>MultipleErrorsToErrorOrAsync(){returnawaitErrorOrFactory.FromAsync([Error.Validation(description:"Invalid Name"),Error.Validation(description:"Invalid Last Name")]);}

  Added support for ToErrorOrAsync methods from errors:

  Task<Error>errorTask=Task.FromResult(Error.Validation());ErrorOr<int>result=errorTask.ToErrorOrAsync<int>();

  List<Error>errors=[Error.Unauthorized(),Error.Validation()];Task<List<Error>>errorsTask=Task.FromResult(errors);ErrorOr<int>result=awaiterrorsTask.ToErrorOrAsync<int>();

• #​149 Added Else/ElseAsync overloads returning ErrorOr

• #​152 Added ThenEnsure and ThenEnsureAsync methods.

  They are similar to ThenDo and ThenDoAsync, but they receive a function that can return errors.
  If no errors are returned, the original value is preserved and the ensure function's success value is ignored.

• #​159 Added IsSuccess property to ErrorOr

• #​158 Added support for serialization via IErrorOr interface without direct access to Value property. The IRecordable base interface provides a way to obtain a serialized representation of the current state.

  voidLog(IErrorOrresult){Console.WriteLine(result.GetRecording(serializer));}

  IRecordingSerializer<TOutput> interface can be implemented to provide concrete serialization strategy, for exaple JSON serialization:

  usingSystem.Text.Json;usingSystem.Text.Json.Serialization;usingErrorOr;publicclassSystemTextJsonRecordingSerializer:IRecordingSerializer<string>{privatestaticreadonlyJsonSerializerOptionsJsonOptions=new(){WriteIndented=true,Converters={newJsonStringEnumConverter()},DefaultIgnoreCondition=JsonIgnoreCondition.Never,};publicstringSerializeValue<TValue>(TValuevalue)=>JsonSerializer.Serialize(value,JsonOptions);publicstringSerializeErrors(List<Error>errors)=>JsonSerializer.Serialize(errors,JsonOptions);}

• #​179 Support for .NET 10 was added

Fixed

• #​85, #​97ErrorOr turned into Value Object by reimplementing Equals and GetHashCode methods

  New dependency was introduced to Microsoft.Bcl.HashCode and development dependency was introduced to Nullable

• #​178 Initializing ErrorOr<T> with empty or null error collection results with unexpected error.

Optimized

• #​98, #​99 Memory consumption optimized by moving static empty errors lists from generic struct into non-generic class

Refactored

• #​154 Modernized NuGet publish workflow

mganss/HtmlSanitizer (HtmlSanitizer)

v9.2.1039: 9.2.1039

Fix attribute bypass in SanitizeDom(string) wrapper elements

v9.2.995: 9.2.995

• AngleSharp dependency updated from 1.7.0 to 1.7.1 (4515e1f)
• Sanitization enhancements for URI attributes
  • Added cite and longdesc attributes to URL sanitization (e47862e)
  • Enhanced sanitization of srcdoc content and attributes holding URI lists (edb2633)
• CSS/style handling improvements
  • Added sanitization of CSS declarations in style elements with type="" attribute (0592f1e)
  • Fixed sanitization of CSS @font-face and @import at-rules (1d33413)
• Bug fixes
  • Fixed resolved URI check validation (7f379ef)
  • Fixed CSS variable-in-shorthand sanitization (b8e9844)
  • Fixed issue #​629 (e0deb7b)
  • Multiple SonarCloud code quality issues resolved (ec1e786, 2d95200)
• Test improvements
  • Refactored test suite for style element sanitization (0592f1e)
  • Improved performance of ThreadTest (0ab33ba)
• Documentation
  • Added XML code usage examples for HtmlSanitizerOptions properties (#​632)

v9.1.982: 9.1.982

Fix multiple enumeration of URLs (fixes #​625)

v9.1.981: 9.1.981

Update NuGet packages

v9.1.974: 9.1.974

Add FilterCssRule event (fixes #​622)

v9.1.973: 9.1.973

Update to AngleSharp 1.6.0 and AngleSharp.Css 1.0.0

dotnet/dotnet (Microsoft.AspNetCore.Authentication.JwtBearer)

v10.0.11

v10.0.10

v10.0.9

v10.0.8

v10.0.7

v10.0.6

v10.0.5

v10.0.4

dotnet/extensions (Microsoft.Extensions.Caching.Hybrid)

v10.9.0

Version 10.9.0 is headlined by changes in these areas:

• AI: New experimental routing APIs center on the abstract RoutingChatClient base class, with SemanticRoutingChatClient as a concrete semantic-routing implementation. Separately, the abstract FailoverChatClient specialization and its concrete OrderedFailoverChatClient implementation add failover routing.
• AI Evaluation: The generated report gains redesigned Overview, Cases, History, and Comparison views.
• ASP.NET Core and HTTP diagnostics: The release adds HTTP request latency log enrichment and fixes configuration binding, response-body logging, request-path redaction, and resilience package version handling.
• Source-generated logging and service discovery: Fixes cover classification type qualification, thread-local state cleanup, and DNS query suffix handling.

Experimental API Changes

New Experimental APIs

• New experimental API: HTTP request latency log enrichment (EXTEXP0013) #​7602
• New experimental API: Chat client routing and failover (MEAI001) #​7662

What's Changed

AI (Microsoft.Extensions.AI, Microsoft.Extensions.AI.Abstractions, and Microsoft.Extensions.AI.OpenAI)

• Add extensible chat client routing #​7662 by @​joshuajyue (co-authored by @​Copilot)
• Pass the request's options to the selected client #​7685 by @​joshuajyue (co-authored by @​jozkee@​Copilot)
• AI.Abstractions: fix ExcludeFromSchema dropped under concurrent AIFunction creation #​7677 by @​jozkee (co-authored by @​Copilot)
• Cap OpenAI dependency version (b10f9c0) by @​jeffhandley (co-authored by @​Copilot)

Note: Microsoft.Extensions.AI.OpenAI constrains its dependency for OpenAI to 2.12.x, preventing OpenAI updates to 2.13.0+ due to an incompatibility. We expect to release Microsoft.Extensions.AI.OpenAI version 10.9.1 during the week of August 17 to address this issue.

HTTP Resilience and Diagnostics (Microsoft.Extensions.Http.Resilience and Microsoft.Extensions.Http.Diagnostics)

• Fix Grpc.Net.ClientFactory version range check - Fixes #​7565#​7566 by @​Ghost93
• Fix response body logging under debugger #​7678 by @​Rimobul
• Redact outgoing path when route is unknown #​7687 by @​Rimobul
• Fix HTTP client logging config binding #​7691 by @​Rimobul

ASP.NET Core Extensions (Microsoft.AspNetCore.Diagnostics.Middleware)

• Rename HttpLatencyTelemetry extensions class and drop redundant TFM guard #​7645 by @​EasyL0ver (co-authored by @​Copilot)
• Add HTTP request latency log enricher (experimental) #​7602 by @​EasyL0ver (co-authored by @​Copilot)

Logging Source Generator (Microsoft.Gen.Logging)

• [Microsoft.Gen.Logging] Clear thread-local state when logging throws #​7682 by @​Rimobul
• [Microsoft.Gen.Logging] Fully qualify classification types #​7689 by @​Rimobul

AI Evaluation (Microsoft.Extensions.AI.Evaluation.Reporting)

• [Microsoft.Extensions.AI.Evaluation.Reporting] Evaluation report redesign #​7609 by @​grafanaKibana

Project Templates (Microsoft.McpServer.ProjectTemplates)

• Remove MCP server project template #​7680 by @​jeffhandley (co-authored by @​Copilot)

Note: The MCP server project template was migrated to the dotnet/aspnetcore repository, and it is now included in the .NET 10 and .NET 11 SDKs.

Service Discovery (Microsoft.Extensions.ServiceDiscovery.Dns)

• Fix DNS SRV provider ignoring query suffix #​7688 by @​Rimobul (co-authored by @​Copilot)

Test Improvements

• Update Microsoft.Data.SqlClient test dependency (aaea3c8) by @​jeffhandley (co-authored by @​Copilot)

Repository Infrastructure Updates

• [main] Update dependencies from dotnet/arcade #​7621
• Merge release/10.8 into main #​7632 by @​jeffhandley (co-authored by @​jozkee@​Copilot)
• Add agentic workflows that keep Microsoft.Extensions.AI aligned with OpenTelemetry GenAI semantic-conventions #​7611 by @​jeffhandley (co-authored by @​Copilot)
• Bump brace-expansion, eslint and tfx-cli in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7648
• Add a release-manager agent for the dotnet/extensions release process #​7643 by @​jeffhandley (co-authored by @​Copilot)
• Bump CommunityToolkit.VectorData package baselines to 1.0.0 / 1.0.0-preview #​7651 by @​adamsitnik (co-authored by @​Copilot)
• Incorporate servicing release experience into release-manager playbooks #​7656 by @​jeffhandley (co-authored by @​Copilot)
• Bump dotnet-reportgenerator-globaltool from 5.5.10 to 5.5.11 #​7666
• Bump adm-zip and azure-pipelines-task-lib in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript/azure-devops-report/tasks/PublishAIEvaluationReport #​7652
• Bump postcss from 8.5.15 to 8.5.23 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7660
• Bump PowerShell from 7.6.3 to 7.6.4 #​7650
• [main] Update dependencies from dotnet/arcade #​7644
• [release-manager] Require package dependency closure for releases #​7693 by @​jeffhandley (co-authored by @​Copilot)
• Optionally allow official builds to publish VSIX extension. #​7692 by @​peterwald
• [main] Update dependencies from dotnet/arcade #​7690

Acknowledgements

• @​EasyL0ver made their first contribution in #​7602
• @​Ghost93 made their first contribution in #​7566
• @​grafanaKibana made their first contribution in #​7609
• @​Rimobul made their first contribution in #​7678
• @​joshuajyue made their first contribution in #​7662
• @​Ghost93 submitted issue #​7565 (resolved by #​7566)
• @​grafanaKibana submitted issue #​7593 (resolved by #​7609)
• @​jredgard submitted issue #​7675 (resolved by #​7677)
• @​viorelbuligadev submitted issue #​7649 (resolved by #​7678)
• @​joshuajyue submitted issue #​7647 (resolved by #​7662)
• @​jboelter submitted issue #​7634 (resolved by #​7682)
• @​dmeeze submitted issue #​7157 (resolved by #​7689)
• @​ssmelov submitted issue #​7536 (resolved by #​7687)
• @​Marcus-Kanon submitted issue #​7551 (resolved by #​7691)
• @​vermilion submitted issue #​7175 (resolved by #​7688)
• @​evgenyfedorov2@​wtgodbe@​shyamnamboodiripad@​dariusclay@​iliar-turdushev@​mariamgerges@​PranavSenthilnathan@​rafal-mz@​tannergooding@​tarekgh reviewed pull requests

Full Changelog: dotnet/extensions@v10.8.4...v10.9.0

Packages in this release

Package	Version
Microsoft.AspNetCore.Testing	10.9.0
Microsoft.Extensions.AI.Abstractions	10.9.0
Microsoft.Extensions.AI.Evaluation.Console	10.9.0
Microsoft.Extensions.AI.Templates	10.9.0-preview.3.26411.16
Microsoft.Extensions.AmbientMetadata.Application	10.9.0
Microsoft.Extensions.AmbientMetadata.Build	10.9.0
Microsoft.Extensions.AuditReports	10.9.0
Microsoft.Extensions.Caching.Hybrid	10.9.0
Microsoft.Extensions.Compliance.Abstractions	10.9.0
Microsoft.Extensions.DataIngestion.Abstractions	10.9.0-preview.1.26411.16
Microsoft.Extensions.DependencyInjection.AutoActivation	10.9.0
Microsoft.Extensions.Diagnostics.ExceptionSummarization	10.9.0
Microsoft.Extensions.ObjectPool.DependencyInjection	10.9.0
Microsoft.Extensions.Options.Contextual	10.9.0-preview.1.26411.16
Microsoft.Extensions.ServiceDiscovery.Abstractions	10.9.0
Microsoft.Extensions.StaticAnalysis	10.9.0
Microsoft.Extensions.TimeProvider.Testing	10.9.0
Microsoft.Extensions.AI	10.9.0
Microsoft.Extensions.AI.Evaluation	10.9.0
Microsoft.Extensions.AI.OpenAI	10.9.0
Microsoft.Extensions.AsyncState	10.9.0
Microsoft.Extensions.Compliance.Redaction	10.9.0
Microsoft.Extensions.Compliance.Testing	10.9.0
Microsoft.Extensions.DataIngestion.Markdig	10.9.0-preview.1.26411.16
Microsoft.Extensions.DataIngestion.MarkItDown	10.9.0-preview.1.26411.16
Microsoft.Extensions.ServiceDiscovery	10.9.0
Microsoft.Extensions.Telemetry.Abstractions	10.9.0
Microsoft.Extensions.VectorData.Abstractions	10.9.0
Microsoft.AspNetCore.AsyncState	10.9.0
Microsoft.AspNetCore.HeaderParsing	10.9.0
Microsoft.Extensions.AI.Evaluation.NLP	10.9.0-preview.1.26411.16
Microsoft.Extensions.AI.Evaluation.Quality	10.9.0
Microsoft.Extensions.AI.Evaluation.Reporting	10.9.0
Microsoft.Extensions.AI.Evaluation.Safety	10.9.0-preview.1.26411.16
Microsoft.Extensions.DataIngestion	10.9.0-preview.1.26411.16
Microsoft.Extensions.Diagnostics.HealthChecks.Common	10.9.0
Microsoft.Extensions.Diagnostics.Probes	10.9.0-preview.1.26411.16
Microsoft.Extensions.Diagnostics.ResourceMonitoring	10.9.0
Microsoft.Extensions.Diagnostics.Testing	10.9.0
Microsoft.Extensions.Resilience	10.9.0
Microsoft.Extensions.ServiceDiscovery.Dns	10.9.0
Microsoft.Extensions.ServiceDiscovery.Yarp	10.9.0
Microsoft.Extensions.Telemetry	10.9.0
Microsoft.Extensions.VectorData.ConformanceTests	10.9.0
Microsoft.AspNetCore.Diagnostics.Middleware	10.9.0
Microsoft.Extensions.AI.Evaluation.Reporting.Azure	10.9.0
Microsoft.Extensions.Diagnostics.HealthChecks.ResourceUtilization	10.9.0
Microsoft.Extensions.Diagnostics.ResourceMonitoring.Kubernetes	10.9.0
Microsoft.Extensions.Hosting.Testing	10.9.0-preview.1.26411.16
Microsoft.Extensions.Http.Diagnostics	10.9.0
Microsoft.Extensions.Http.Resilience	10.9.0

The Microsoft.Agents.AI.ProjectTemplates package is not included in this release.

v10.8.0

This release adds new experimental APIs to Microsoft.Extensions.AI.Abstractions and updates the OpenAI dependency to 2.12.0, alongside documentation, test, and repository maintenance.

Experimental API Changes

N

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update
AWSSDK.S3	4.0.18.7 → 4.0.102.4					nuget	patch
ErrorOr	2.0.1 → 2.1.1					nuget	minor
FastEndpoints (source)	8.0.1 → 8.3.0					nuget	minor
FastEndpoints.Generator (source)	8.0.1 → 8.3.0					nuget	minor
FastEndpoints.Security (source)	8.0.1 → 8.3.0					nuget	minor
FastEndpoints.Swagger (source)	8.0.1 → 8.3.0					nuget	minor
FastEndpoints.Testing (source)	8.0.1 → 8.3.0					nuget	minor
HtmlSanitizer	9.0.892 → 9.2.1039					nuget	minor
Microsoft.AspNetCore.Authentication.JwtBearer (source)	10.0.3 → 10.0.11					nuget	patch
Microsoft.AspNetCore.Identity.EntityFrameworkCore (source)	10.0.3 → 10.0.11					nuget	patch
Microsoft.AspNetCore.OpenApi (source)	10.0.3 → 10.0.11					nuget	patch
Microsoft.AspNetCore.OutputCaching.StackExchangeRedis (source)	10.0.3 → 10.0.11					nuget	patch
Microsoft.EntityFrameworkCore.InMemory (source)	10.0.3 → 10.0.11					nuget	patch
Microsoft.EntityFrameworkCore.Tools (source)	10.0.3 → 10.0.11					nuget	patch
Microsoft.Extensions.Caching.Hybrid (source)	10.3.0 → 10.9.0					nuget	minor
Microsoft.Extensions.Caching.StackExchangeRedis (source)	10.0.3 → 10.0.11					nuget	patch
Microsoft.Extensions.Http.Resilience (source)	10.3.0 → 10.9.0					nuget	minor
Microsoft.Extensions.TimeProvider.Testing (source)	10.3.0 → 10.9.0					nuget	minor
Microsoft.NET.Test.Sdk	18.3.0 → 18.9.0					nuget	minor
MinecraftRenderer	0.4.2 → 0.9.0					nuget	minor
Npgsql	10.0.1 → 10.0.3					nuget	patch
Npgsql.EntityFrameworkCore.PostgreSQL	10.0.0 → 10.0.3					nuget	patch
OpenTelemetry.Extensions.Hosting (source)	1.15.0 → 1.18.0					nuget	minor
Pyroscope (source)	0.14.1 → 0.15.0					nuget	minor
Pyroscope.OpenTelemetry (source)	0.4.0 → 0.5.1					nuget	minor
Quartz.Extensions.Hosting (source)	3.16.1 → 3.20.0					nuget	minor
Refit	10.0.1 → 10.2.0					nuget	minor
Refit.HttpClientFactory	10.0.1 → 10.2.0					nuget	minor
Scalar.AspNetCore (source)	2.13.1 → 2.17.2					nuget	minor
SkyblockRepo	0.4.3 → 0.5.2					nuget	minor
StackExchange.Redis (source)	2.11.8 → 2.13.17					nuget	minor
Swashbuckle.AspNetCore	10.1.4 → 10.2.3					nuget	minor
Swashbuckle.AspNetCore.Annotations	10.1.4 → 10.2.3					nuget	minor
System.Linq.Async	7.0.0 → 7.0.1					nuget	patch
System.Threading.RateLimiting (source)	10.0.3 → 10.0.11					nuget	patch
Testcontainers.PostgreSql (source)	4.10.0 → 4.14.0					nuget	minor
ZLinq	1.5.5 → 1.5.6					nuget	patch
coverlet.collector	8.0.0 → 8.0.1					nuget	patch
dotnet-ef (source)	10.0.1 → 10.0.11					nuget	patch
prom/prometheus	v3.5.0 → v3.14.0						minor
pyroscope/pyroscope-dotnet	0.13.0-glibc → 0.14.5-glibc					stage	minor
redis (source)	8.4-alpine → 8.10-alpine						minor

---

Release Notes

aws/aws-sdk-net (AWSSDK.S3)

v4.0.102

v4.0.101

v4.0.100

v4.0.25

v4.0.24

v4.0.23

v4.0.22

v4.0.21

v4.0.20

v4.0.19

error-or/error-or (ErrorOr)

v2.1.1

Added

• #​94, #​95 Added missing async versions of FailIf methods

  publicasyncTask<ErrorOr<TValue>>FailIfAsync(Func<TValue,Task<bool>>onValue,Errorerror)

  publicstaticasyncTask<ErrorOr<TValue>>FailIf<TValue>(thisTask<ErrorOr<TValue>>errorOr,Func<TValue,bool>onValue,Errorerror)

  publicstaticasyncTask<ErrorOr<TValue>>FailIfAsync<TValue>(thisTask<ErrorOr<TValue>>errorOr,Func<TValue,Task<bool>>onValue,Errorerror)

• #​104 Support for .NET 8 was added

• #​109, #​111 Added FailIf method overloads that allow to use value in error definition using Func<TValue, Error> error builder

  publicErrorOr<TValue>FailIf(Func<TValue,bool>onValue,Func<TValue,Error>errorBuilder)

  publicasyncTask<ErrorOr<TValue>>FailIfAsync(Func<TValue,Task<bool>>onValue,Func<TValue,Task<Error>>errorBuilder)

  publicstaticasyncTask<ErrorOr<TValue>>FailIf<TValue>(thisTask<ErrorOr<TValue>>errorOr,Func<TValue,bool>onValue,Func<TValue,Error>errorBuilder)

  publicstaticasyncTask<ErrorOr<TValue>>FailIfAsync<TValue>(thisTask<ErrorOr<TValue>>errorOr,Func<TValue,Task<bool>>onValue,Func<TValue,Task<Error>>errorBuilder)

  Value can now be used to build the error:

  ErrorOr<int>result=errorOrInt.FailIf(num =>num>3,(num)=>Error.Failure(description:$"{num} is greater than 3"));

• #​117 Added ElseDo and ElseDoAsync methods

  Actions returning no result can now be called when IsError is true.

  ErrorOr<string>foo=result.Else(errors =>Error.Unexpected()).ElseDo(error =>Console.WriteLine(error.FirstError.Description));

  ErrorOr<string>foo=awaitresult.ElseDoAsync(HandleErrorAsync);

• #​122 Added ToErrorOrAsync method

  Values in Task can now be easily converted to ErrorOr.

  ErrorOr<int>result=awaitTask.FromResult(5).ToErrorOrAsync();

• #​129 Added missing ErrorOrFactory.From methods

  Now following calls from README.md are available

  ErrorOr<int>result=ErrorOrFactory.From<int>(Error.Unexpected());ErrorOr<int>result=ErrorOrFactory.From<int>([Error.Validation(),Error.Validation()]);

  Following call is now obsolete

  ErrorOr<int>errorOrPerson=ErrorOr<int>.From([Error.Validation(),Error.Validation()]);

• #​133 Added missing collection expression support

  Now following call from README.md is available

  ErrorOr<int>result=[Error.Validation(),Error.Validation()];

• #​134 Added FromAsync and missing ToErrorOrAsync methods

  Added support for FromAsync methods.

  publicasyncTak<ErrorOr<int>>GetValueAsync(){returnawaitErrorOrFactory.FromAsync(5);}

  publicasyncTak<ErrorOr<int>>SingleErrorToErrorOrAsync(){returnawaitErrorOrFactory.FromAsync<int>(Error.Unexpected());}

  publicasyncTak<ErrorOr<int>>MultipleErrorsToErrorOrAsync(){returnawaitErrorOrFactory.FromAsync([Error.Validation(description:"Invalid Name"),Error.Validation(description:"Invalid Last Name")]);}

  Added support for ToErrorOrAsync methods from errors:

  Task<Error>errorTask=Task.FromResult(Error.Validation());ErrorOr<int>result=errorTask.ToErrorOrAsync<int>();

  List<Error>errors=[Error.Unauthorized(),Error.Validation()];Task<List<Error>>errorsTask=Task.FromResult(errors);ErrorOr<int>result=awaiterrorsTask.ToErrorOrAsync<int>();

• #​149 Added Else/ElseAsync overloads returning ErrorOr

• #​152 Added ThenEnsure and ThenEnsureAsync methods.

  They are similar to ThenDo and ThenDoAsync, but they receive a function that can return errors.
  If no errors are returned, the original value is preserved and the ensure function's success value is ignored.

• #​159 Added IsSuccess property to ErrorOr

• #​158 Added support for serialization via IErrorOr interface without direct access to Value property. The IRecordable base interface provides a way to obtain a serialized representation of the current state.

  voidLog(IErrorOrresult){Console.WriteLine(result.GetRecording(serializer));}

  IRecordingSerializer<TOutput> interface can be implemented to provide concrete serialization strategy, for exaple JSON serialization:

  usingSystem.Text.Json;usingSystem.Text.Json.Serialization;usingErrorOr;publicclassSystemTextJsonRecordingSerializer:IRecordingSerializer<string>{privatestaticreadonlyJsonSerializerOptionsJsonOptions=new(){WriteIndented=true,Converters={newJsonStringEnumConverter()},DefaultIgnoreCondition=JsonIgnoreCondition.Never,};publicstringSerializeValue<TValue>(TValuevalue)=>JsonSerializer.Serialize(value,JsonOptions);publicstringSerializeErrors(List<Error>errors)=>JsonSerializer.Serialize(errors,JsonOptions);}

• #​179 Support for .NET 10 was added

Fixed

• #​85, #​97ErrorOr turned into Value Object by reimplementing Equals and GetHashCode methods

  New dependency was introduced to Microsoft.Bcl.HashCode and development dependency was introduced to Nullable

• #​178 Initializing ErrorOr<T> with empty or null error collection results with unexpected error.

Optimized

• #​98, #​99 Memory consumption optimized by moving static empty errors lists from generic struct into non-generic class

Refactored

• #​154 Modernized NuGet publish workflow

mganss/HtmlSanitizer (HtmlSanitizer)

v9.2.1039: 9.2.1039

Fix attribute bypass in SanitizeDom(string) wrapper elements

v9.2.995: 9.2.995

• AngleSharp dependency updated from 1.7.0 to 1.7.1 (4515e1f)
• Sanitization enhancements for URI attributes
  • Added cite and longdesc attributes to URL sanitization (e47862e)
  • Enhanced sanitization of srcdoc content and attributes holding URI lists (edb2633)
• CSS/style handling improvements
  • Added sanitization of CSS declarations in style elements with type="" attribute (0592f1e)
  • Fixed sanitization of CSS @font-face and @import at-rules (1d33413)
• Bug fixes
  • Fixed resolved URI check validation (7f379ef)
  • Fixed CSS variable-in-shorthand sanitization (b8e9844)
  • Fixed issue #​629 (e0deb7b)
  • Multiple SonarCloud code quality issues resolved (ec1e786, 2d95200)
• Test improvements
  • Refactored test suite for style element sanitization (0592f1e)
  • Improved performance of ThreadTest (0ab33ba)
• Documentation
  • Added XML code usage examples for HtmlSanitizerOptions properties (#​632)

v9.1.982: 9.1.982

Fix multiple enumeration of URLs (fixes #​625)

v9.1.981: 9.1.981

Update NuGet packages

v9.1.974: 9.1.974

Add FilterCssRule event (fixes #​622)

v9.1.973: 9.1.973

Update to AngleSharp 1.6.0 and AngleSharp.Css 1.0.0

dotnet/dotnet (Microsoft.AspNetCore.Authentication.JwtBearer)

v10.0.11

v10.0.10

v10.0.9

v10.0.8

v10.0.7

v10.0.6

v10.0.5

v10.0.4

dotnet/extensions (Microsoft.Extensions.Caching.Hybrid)

v10.9.0

Version 10.9.0 is headlined by changes in these areas:

• AI: New experimental routing APIs center on the abstract RoutingChatClient base class, with SemanticRoutingChatClient as a concrete semantic-routing implementation. Separately, the abstract FailoverChatClient specialization and its concrete OrderedFailoverChatClient implementation add failover routing.
• AI Evaluation: The generated report gains redesigned Overview, Cases, History, and Comparison views.
• ASP.NET Core and HTTP diagnostics: The release adds HTTP request latency log enrichment and fixes configuration binding, response-body logging, request-path redaction, and resilience package version handling.
• Source-generated logging and service discovery: Fixes cover classification type qualification, thread-local state cleanup, and DNS query suffix handling.

Experimental API Changes

New Experimental APIs

• New experimental API: HTTP request latency log enrichment (EXTEXP0013) #​7602
• New experimental API: Chat client routing and failover (MEAI001) #​7662

What's Changed

AI (Microsoft.Extensions.AI, Microsoft.Extensions.AI.Abstractions, and Microsoft.Extensions.AI.OpenAI)

• Add extensible chat client routing #​7662 by @​joshuajyue (co-authored by @​Copilot)
• Pass the request's options to the selected client #​7685 by @​joshuajyue (co-authored by @​jozkee@​Copilot)
• AI.Abstractions: fix ExcludeFromSchema dropped under concurrent AIFunction creation #​7677 by @​jozkee (co-authored by @​Copilot)
• Cap OpenAI dependency version (b10f9c0) by @​jeffhandley (co-authored by @​Copilot)

Note: Microsoft.Extensions.AI.OpenAI constrains its dependency for OpenAI to 2.12.x, preventing OpenAI updates to 2.13.0+ due to an incompatibility. We expect to release Microsoft.Extensions.AI.OpenAI version 10.9.1 during the week of August 17 to address this issue.

HTTP Resilience and Diagnostics (Microsoft.Extensions.Http.Resilience and Microsoft.Extensions.Http.Diagnostics)

• Fix Grpc.Net.ClientFactory version range check - Fixes #​7565#​7566 by @​Ghost93
• Fix response body logging under debugger #​7678 by @​Rimobul
• Redact outgoing path when route is unknown #​7687 by @​Rimobul
• Fix HTTP client logging config binding #​7691 by @​Rimobul

ASP.NET Core Extensions (Microsoft.AspNetCore.Diagnostics.Middleware)

• Rename HttpLatencyTelemetry extensions class and drop redundant TFM guard #​7645 by @​EasyL0ver (co-authored by @​Copilot)
• Add HTTP request latency log enricher (experimental) #​7602 by @​EasyL0ver (co-authored by @​Copilot)

Logging Source Generator (Microsoft.Gen.Logging)

• [Microsoft.Gen.Logging] Clear thread-local state when logging throws #​7682 by @​Rimobul
• [Microsoft.Gen.Logging] Fully qualify classification types #​7689 by @​Rimobul

AI Evaluation (Microsoft.Extensions.AI.Evaluation.Reporting)

• [Microsoft.Extensions.AI.Evaluation.Reporting] Evaluation report redesign #​7609 by @​grafanaKibana

Project Templates (Microsoft.McpServer.ProjectTemplates)

• Remove MCP server project template #​7680 by @​jeffhandley (co-authored by @​Copilot)

Note: The MCP server project template was migrated to the dotnet/aspnetcore repository, and it is now included in the .NET 10 and .NET 11 SDKs.

Service Discovery (Microsoft.Extensions.ServiceDiscovery.Dns)

• Fix DNS SRV provider ignoring query suffix #​7688 by @​Rimobul (co-authored by @​Copilot)

Test Improvements

• Update Microsoft.Data.SqlClient test dependency (aaea3c8) by @​jeffhandley (co-authored by @​Copilot)

Repository Infrastructure Updates

• [main] Update dependencies from dotnet/arcade #​7621
• Merge release/10.8 into main #​7632 by @​jeffhandley (co-authored by @​jozkee@​Copilot)
• Add agentic workflows that keep Microsoft.Extensions.AI aligned with OpenTelemetry GenAI semantic-conventions #​7611 by @​jeffhandley (co-authored by @​Copilot)
• Bump brace-expansion, eslint and tfx-cli in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7648
• Add a release-manager agent for the dotnet/extensions release process #​7643 by @​jeffhandley (co-authored by @​Copilot)
• Bump CommunityToolkit.VectorData package baselines to 1.0.0 / 1.0.0-preview #​7651 by @​adamsitnik (co-authored by @​Copilot)
• Incorporate servicing release experience into release-manager playbooks #​7656 by @​jeffhandley (co-authored by @​Copilot)
• Bump dotnet-reportgenerator-globaltool from 5.5.10 to 5.5.11 #​7666
• Bump adm-zip and azure-pipelines-task-lib in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript/azure-devops-report/tasks/PublishAIEvaluationReport #​7652
• Bump postcss from 8.5.15 to 8.5.23 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7660
• Bump PowerShell from 7.6.3 to 7.6.4 #​7650
• [main] Update dependencies from dotnet/arcade #​7644
• [release-manager] Require package dependency closure for releases #​7693 by @​jeffhandley (co-authored by @​Copilot)
• Optionally allow official builds to publish VSIX extension. #​7692 by @​peterwald
• [main] Update dependencies from dotnet/arcade #​7690

Acknowledgements

• @​EasyL0ver made their first contribution in #​7602
• @​Ghost93 made their first contribution in #​7566
• @​grafanaKibana made their first contribution in #​7609
• @​Rimobul made their first contribution in #​7678
• @​joshuajyue made their first contribution in #​7662
• @​Ghost93 submitted issue #​7565 (resolved by #​7566)
• @​grafanaKibana submitted issue #​7593 (resolved by #​7609)
• @​jredgard submitted issue #​7675 (resolved by #​7677)
• @​viorelbuligadev submitted issue #​7649 (resolved by #​7678)
• @​joshuajyue submitted issue #​7647 (resolved by #​7662)
• @​jboelter submitted issue #​7634 (resolved by #​7682)
• @​dmeeze submitted issue #​7157 (resolved by #​7689)
• @​ssmelov submitted issue #​7536 (resolved by #​7687)
• @​Marcus-Kanon submitted issue #​7551 (resolved by #​7691)
• @​vermilion submitted issue #​7175 (resolved by #​7688)
• @​evgenyfedorov2@​wtgodbe@​shyamnamboodiripad@​dariusclay@​iliar-turdushev@​mariamgerges@​PranavSenthilnathan@​rafal-mz@​tannergooding@​tarekgh reviewed pull requests

Full Changelog: dotnet/extensions@v10.8.4...v10.9.0

Packages in this release

Package	Version
Microsoft.AspNetCore.Testing	10.9.0
Microsoft.Extensions.AI.Abstractions	10.9.0
Microsoft.Extensions.AI.Evaluation.Console	10.9.0
Microsoft.Extensions.AI.Templates	10.9.0-preview.3.26411.16
Microsoft.Extensions.AmbientMetadata.Application	10.9.0
Microsoft.Extensions.AmbientMetadata.Build	10.9.0
Microsoft.Extensions.AuditReports	10.9.0
Microsoft.Extensions.Caching.Hybrid	10.9.0
Microsoft.Extensions.Compliance.Abstractions	10.9.0
Microsoft.Extensions.DataIngestion.Abstractions	10.9.0-preview.1.26411.16
Microsoft.Extensions.DependencyInjection.AutoActivation	10.9.0
Microsoft.Extensions.Diagnostics.ExceptionSummarization	10.9.0
Microsoft.Extensions.ObjectPool.DependencyInjection	10.9.0
Microsoft.Extensions.Options.Contextual	10.9.0-preview.1.26411.16
Microsoft.Extensions.ServiceDiscovery.Abstractions	10.9.0
Microsoft.Extensions.StaticAnalysis	10.9.0
Microsoft.Extensions.TimeProvider.Testing	10.9.0
Microsoft.Extensions.AI	10.9.0
Microsoft.Extensions.AI.Evaluation	10.9.0
Microsoft.Extensions.AI.OpenAI	10.9.0
Microsoft.Extensions.AsyncState	10.9.0
Microsoft.Extensions.Compliance.Redaction	10.9.0
Microsoft.Extensions.Compliance.Testing	10.9.0
Microsoft.Extensions.DataIngestion.Markdig	10.9.0-preview.1.26411.16
Microsoft.Extensions.DataIngestion.MarkItDown	10.9.0-preview.1.26411.16
Microsoft.Extensions.ServiceDiscovery	10.9.0
Microsoft.Extensions.Telemetry.Abstractions	10.9.0
Microsoft.Extensions.VectorData.Abstractions	10.9.0
Microsoft.AspNetCore.AsyncState	10.9.0
Microsoft.AspNetCore.HeaderParsing	10.9.0
Microsoft.Extensions.AI.Evaluation.NLP	10.9.0-preview.1.26411.16
Microsoft.Extensions.AI.Evaluation.Quality	10.9.0
Microsoft.Extensions.AI.Evaluation.Reporting	10.9.0
Microsoft.Extensions.AI.Evaluation.Safety	10.9.0-preview.1.26411.16
Microsoft.Extensions.DataIngestion	10.9.0-preview.1.26411.16
Microsoft.Extensions.Diagnostics.HealthChecks.Common	10.9.0
Microsoft.Extensions.Diagnostics.Probes	10.9.0-preview.1.26411.16
Microsoft.Extensions.Diagnostics.ResourceMonitoring	10.9.0
Microsoft.Extensions.Diagnostics.Testing	10.9.0
Microsoft.Extensions.Resilience	10.9.0
Microsoft.Extensions.ServiceDiscovery.Dns	10.9.0
Microsoft.Extensions.ServiceDiscovery.Yarp	10.9.0
Microsoft.Extensions.Telemetry	10.9.0
Microsoft.Extensions.VectorData.ConformanceTests	10.9.0
Microsoft.AspNetCore.Diagnostics.Middleware	10.9.0
Microsoft.Extensions.AI.Evaluation.Reporting.Azure	10.9.0
Microsoft.Extensions.Diagnostics.HealthChecks.ResourceUtilization	10.9.0
Microsoft.Extensions.Diagnostics.ResourceMonitoring.Kubernetes	10.9.0
Microsoft.Extensions.Hosting.Testing	10.9.0-preview.1.26411.16
Microsoft.Extensions.Http.Diagnostics	10.9.0
Microsoft.Extensions.Http.Resilience	10.9.0

The Microsoft.Agents.AI.ProjectTemplates package is not included in this release.

v10.8.0

This release adds new experimental APIs to Microsoft.Extensions.AI.Abstractions and updates the OpenAI dependency to 2.12.0, alongside documentation, test, and repository maintenance.

Experimental API Changes

N

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update
AWSSDK.S3	4.0.18.7 → 4.0.102.4					nuget	patch
ErrorOr	2.0.1 → 2.1.1					nuget	minor
FastEndpoints (source)	8.0.1 → 8.3.0					nuget	minor
FastEndpoints.Generator (source)	8.0.1 → 8.3.0					nuget	minor
FastEndpoints.Security (source)	8.0.1 → 8.3.0					nuget	minor
FastEndpoints.Swagger (source)	8.0.1 → 8.3.0					nuget	minor
FastEndpoints.Testing (source)	8.0.1 → 8.3.0					nuget	minor
HtmlSanitizer	9.0.892 → 9.2.1039					nuget	minor
Microsoft.AspNetCore.Authentication.JwtBearer (source)	10.0.3 → 10.0.11					nuget	patch
Microsoft.AspNetCore.Identity.EntityFrameworkCore (source)	10.0.3 → 10.0.11					nuget	patch
Microsoft.AspNetCore.OpenApi (source)	10.0.3 → 10.0.11					nuget	patch
Microsoft.AspNetCore.OutputCaching.StackExchangeRedis (source)	10.0.3 → 10.0.11					nuget	patch
Microsoft.EntityFrameworkCore.InMemory (source)	10.0.3 → 10.0.11					nuget	patch
Microsoft.EntityFrameworkCore.Tools (source)	10.0.3 → 10.0.11					nuget	patch
Microsoft.Extensions.Caching.Hybrid (source)	10.3.0 → 10.9.0					nuget	minor
Microsoft.Extensions.Caching.StackExchangeRedis (source)	10.0.3 → 10.0.11					nuget	patch
Microsoft.Extensions.Http.Resilience (source)	10.3.0 → 10.9.0					nuget	minor
Microsoft.Extensions.TimeProvider.Testing (source)	10.3.0 → 10.9.0					nuget	minor
Microsoft.NET.Test.Sdk	18.3.0 → 18.9.0					nuget	minor
MinecraftRenderer	0.4.2 → 0.9.0					nuget	minor
Npgsql	10.0.1 → 10.0.3					nuget	patch
Npgsql.EntityFrameworkCore.PostgreSQL	10.0.0 → 10.0.3					nuget	patch
OpenTelemetry.Extensions.Hosting (source)	1.15.0 → 1.18.0					nuget	minor
Pyroscope (source)	0.14.1 → 0.15.0					nuget	minor
Pyroscope.OpenTelemetry (source)	0.4.0 → 0.5.1					nuget	minor
Quartz.Extensions.Hosting (source)	3.16.1 → 3.20.0					nuget	minor
Refit	10.0.1 → 10.2.0					nuget	minor
Refit.HttpClientFactory	10.0.1 → 10.2.0					nuget	minor
Scalar.AspNetCore (source)	2.13.1 → 2.17.2					nuget	minor
SkyblockRepo	0.4.3 → 0.5.2					nuget	minor
StackExchange.Redis (source)	2.11.8 → 2.13.17					nuget	minor
Swashbuckle.AspNetCore	10.1.4 → 10.2.3					nuget	minor
Swashbuckle.AspNetCore.Annotations	10.1.4 → 10.2.3					nuget	minor
System.Linq.Async	7.0.0 → 7.0.1					nuget	patch
System.Threading.RateLimiting (source)	10.0.3 → 10.0.11					nuget	patch
Testcontainers.PostgreSql (source)	4.10.0 → 4.14.0					nuget	minor
ZLinq	1.5.5 → 1.5.6					nuget	patch
coverlet.collector	8.0.0 → 8.0.1					nuget	patch
dotnet-ef (source)	10.0.1 → 10.0.11					nuget	patch
prom/prometheus	v3.5.0 → v3.14.0						minor
pyroscope/pyroscope-dotnet	0.13.0-glibc → 0.14.5-glibc					stage	minor
redis (source)	8.4-alpine → 8.10-alpine						minor

---

Release Notes

aws/aws-sdk-net (AWSSDK.S3)

v4.0.102

v4.0.101

v4.0.100

v4.0.25

v4.0.24

v4.0.23

v4.0.22

v4.0.21

v4.0.20

v4.0.19

error-or/error-or (ErrorOr)

v2.1.1

Added

• #​94, #​95 Added missing async versions of FailIf methods

  publicasyncTask<ErrorOr<TValue>>FailIfAsync(Func<TValue,Task<bool>>onValue,Errorerror)

  publicstaticasyncTask<ErrorOr<TValue>>FailIf<TValue>(thisTask<ErrorOr<TValue>>errorOr,Func<TValue,bool>onValue,Errorerror)

  publicstaticasyncTask<ErrorOr<TValue>>FailIfAsync<TValue>(thisTask<ErrorOr<TValue>>errorOr,Func<TValue,Task<bool>>onValue,Errorerror)

• #​104 Support for .NET 8 was added

• #​109, #​111 Added FailIf method overloads that allow to use value in error definition using Func<TValue, Error> error builder

  publicErrorOr<TValue>FailIf(Func<TValue,bool>onValue,Func<TValue,Error>errorBuilder)

  publicasyncTask<ErrorOr<TValue>>FailIfAsync(Func<TValue,Task<bool>>onValue,Func<TValue,Task<Error>>errorBuilder)

  publicstaticasyncTask<ErrorOr<TValue>>FailIf<TValue>(thisTask<ErrorOr<TValue>>errorOr,Func<TValue,bool>onValue,Func<TValue,Error>errorBuilder)

  publicstaticasyncTask<ErrorOr<TValue>>FailIfAsync<TValue>(thisTask<ErrorOr<TValue>>errorOr,Func<TValue,Task<bool>>onValue,Func<TValue,Task<Error>>errorBuilder)

  Value can now be used to build the error:

  ErrorOr<int>result=errorOrInt.FailIf(num =>num>3,(num)=>Error.Failure(description:$"{num} is greater than 3"));

• #​117 Added ElseDo and ElseDoAsync methods

  Actions returning no result can now be called when IsError is true.

  ErrorOr<string>foo=result.Else(errors =>Error.Unexpected()).ElseDo(error =>Console.WriteLine(error.FirstError.Description));

  ErrorOr<string>foo=awaitresult.ElseDoAsync(HandleErrorAsync);

• #​122 Added ToErrorOrAsync method

  Values in Task can now be easily converted to ErrorOr.

  ErrorOr<int>result=awaitTask.FromResult(5).ToErrorOrAsync();

• #​129 Added missing ErrorOrFactory.From methods

  Now following calls from README.md are available

  ErrorOr<int>result=ErrorOrFactory.From<int>(Error.Unexpected());ErrorOr<int>result=ErrorOrFactory.From<int>([Error.Validation(),Error.Validation()]);

  Following call is now obsolete

  ErrorOr<int>errorOrPerson=ErrorOr<int>.From([Error.Validation(),Error.Validation()]);

• #​133 Added missing collection expression support

  Now following call from README.md is available

  ErrorOr<int>result=[Error.Validation(),Error.Validation()];

• #​134 Added FromAsync and missing ToErrorOrAsync methods

  Added support for FromAsync methods.

  publicasyncTak<ErrorOr<int>>GetValueAsync(){returnawaitErrorOrFactory.FromAsync(5);}

  publicasyncTak<ErrorOr<int>>SingleErrorToErrorOrAsync(){returnawaitErrorOrFactory.FromAsync<int>(Error.Unexpected());}

  publicasyncTak<ErrorOr<int>>MultipleErrorsToErrorOrAsync(){returnawaitErrorOrFactory.FromAsync([Error.Validation(description:"Invalid Name"),Error.Validation(description:"Invalid Last Name")]);}

  Added support for ToErrorOrAsync methods from errors:

  Task<Error>errorTask=Task.FromResult(Error.Validation());ErrorOr<int>result=errorTask.ToErrorOrAsync<int>();

  List<Error>errors=[Error.Unauthorized(),Error.Validation()];Task<List<Error>>errorsTask=Task.FromResult(errors);ErrorOr<int>result=awaiterrorsTask.ToErrorOrAsync<int>();

• #​149 Added Else/ElseAsync overloads returning ErrorOr

• #​152 Added ThenEnsure and ThenEnsureAsync methods.

  They are similar to ThenDo and ThenDoAsync, but they receive a function that can return errors.
  If no errors are returned, the original value is preserved and the ensure function's success value is ignored.

• #​159 Added IsSuccess property to ErrorOr

• #​158 Added support for serialization via IErrorOr interface without direct access to Value property. The IRecordable base interface provides a way to obtain a serialized representation of the current state.

  voidLog(IErrorOrresult){Console.WriteLine(result.GetRecording(serializer));}

  IRecordingSerializer<TOutput> interface can be implemented to provide concrete serialization strategy, for exaple JSON serialization:

  usingSystem.Text.Json;usingSystem.Text.Json.Serialization;usingErrorOr;publicclassSystemTextJsonRecordingSerializer:IRecordingSerializer<string>{privatestaticreadonlyJsonSerializerOptionsJsonOptions=new(){WriteIndented=true,Converters={newJsonStringEnumConverter()},DefaultIgnoreCondition=JsonIgnoreCondition.Never,};publicstringSerializeValue<TValue>(TValuevalue)=>JsonSerializer.Serialize(value,JsonOptions);publicstringSerializeErrors(List<Error>errors)=>JsonSerializer.Serialize(errors,JsonOptions);}

• #​179 Support for .NET 10 was added

Fixed

• #​85, #​97ErrorOr turned into Value Object by reimplementing Equals and GetHashCode methods

  New dependency was introduced to Microsoft.Bcl.HashCode and development dependency was introduced to Nullable

• #​178 Initializing ErrorOr<T> with empty or null error collection results with unexpected error.

Optimized

• #​98, #​99 Memory consumption optimized by moving static empty errors lists from generic struct into non-generic class

Refactored

• #​154 Modernized NuGet publish workflow

mganss/HtmlSanitizer (HtmlSanitizer)

v9.2.1039: 9.2.1039

Fix attribute bypass in SanitizeDom(string) wrapper elements

v9.2.995: 9.2.995

• AngleSharp dependency updated from 1.7.0 to 1.7.1 (4515e1f)
• Sanitization enhancements for URI attributes
  • Added cite and longdesc attributes to URL sanitization (e47862e)
  • Enhanced sanitization of srcdoc content and attributes holding URI lists (edb2633)
• CSS/style handling improvements
  • Added sanitization of CSS declarations in style elements with type="" attribute (0592f1e)
  • Fixed sanitization of CSS @font-face and @import at-rules (1d33413)
• Bug fixes
  • Fixed resolved URI check validation (7f379ef)
  • Fixed CSS variable-in-shorthand sanitization (b8e9844)
  • Fixed issue #​629 (e0deb7b)
  • Multiple SonarCloud code quality issues resolved (ec1e786, 2d95200)
• Test improvements
  • Refactored test suite for style element sanitization (0592f1e)
  • Improved performance of ThreadTest (0ab33ba)
• Documentation
  • Added XML code usage examples for HtmlSanitizerOptions properties (#​632)

v9.1.982: 9.1.982

Fix multiple enumeration of URLs (fixes #​625)

v9.1.981: 9.1.981

Update NuGet packages

v9.1.974: 9.1.974

Add FilterCssRule event (fixes #​622)

v9.1.973: 9.1.973

Update to AngleSharp 1.6.0 and AngleSharp.Css 1.0.0

dotnet/dotnet (Microsoft.AspNetCore.Authentication.JwtBearer)

v10.0.11

v10.0.10

v10.0.9

v10.0.8

v10.0.7

v10.0.6

v10.0.5

v10.0.4

dotnet/extensions (Microsoft.Extensions.Caching.Hybrid)

v10.9.0

Version 10.9.0 is headlined by changes in these areas:

• AI: New experimental routing APIs center on the abstract RoutingChatClient base class, with SemanticRoutingChatClient as a concrete semantic-routing implementation. Separately, the abstract FailoverChatClient specialization and its concrete OrderedFailoverChatClient implementation add failover routing.
• AI Evaluation: The generated report gains redesigned Overview, Cases, History, and Comparison views.
• ASP.NET Core and HTTP diagnostics: The release adds HTTP request latency log enrichment and fixes configuration binding, response-body logging, request-path redaction, and resilience package version handling.
• Source-generated logging and service discovery: Fixes cover classification type qualification, thread-local state cleanup, and DNS query suffix handling.

Experimental API Changes

New Experimental APIs

• New experimental API: HTTP request latency log enrichment (EXTEXP0013) #​7602
• New experimental API: Chat client routing and failover (MEAI001) #​7662

What's Changed

AI (Microsoft.Extensions.AI, Microsoft.Extensions.AI.Abstractions, and Microsoft.Extensions.AI.OpenAI)

• Add extensible chat client routing #​7662 by @​joshuajyue (co-authored by @​Copilot)
• Pass the request's options to the selected client #​7685 by @​joshuajyue (co-authored by @​jozkee@​Copilot)
• AI.Abstractions: fix ExcludeFromSchema dropped under concurrent AIFunction creation #​7677 by @​jozkee (co-authored by @​Copilot)
• Cap OpenAI dependency version (b10f9c0) by @​jeffhandley (co-authored by @​Copilot)

Note: Microsoft.Extensions.AI.OpenAI constrains its dependency for OpenAI to 2.12.x, preventing OpenAI updates to 2.13.0+ due to an incompatibility. We expect to release Microsoft.Extensions.AI.OpenAI version 10.9.1 during the week of August 17 to address this issue.

HTTP Resilience and Diagnostics (Microsoft.Extensions.Http.Resilience and Microsoft.Extensions.Http.Diagnostics)

• Fix Grpc.Net.ClientFactory version range check - Fixes #​7565#​7566 by @​Ghost93
• Fix response body logging under debugger #​7678 by @​Rimobul
• Redact outgoing path when route is unknown #​7687 by @​Rimobul
• Fix HTTP client logging config binding #​7691 by @​Rimobul

ASP.NET Core Extensions (Microsoft.AspNetCore.Diagnostics.Middleware)

• Rename HttpLatencyTelemetry extensions class and drop redundant TFM guard #​7645 by @​EasyL0ver (co-authored by @​Copilot)
• Add HTTP request latency log enricher (experimental) #​7602 by @​EasyL0ver (co-authored by @​Copilot)

Logging Source Generator (Microsoft.Gen.Logging)

• [Microsoft.Gen.Logging] Clear thread-local state when logging throws #​7682 by @​Rimobul
• [Microsoft.Gen.Logging] Fully qualify classification types #​7689 by @​Rimobul

AI Evaluation (Microsoft.Extensions.AI.Evaluation.Reporting)

• [Microsoft.Extensions.AI.Evaluation.Reporting] Evaluation report redesign #​7609 by @​grafanaKibana

Project Templates (Microsoft.McpServer.ProjectTemplates)

• Remove MCP server project template #​7680 by @​jeffhandley (co-authored by @​Copilot)

Note: The MCP server project template was migrated to the dotnet/aspnetcore repository, and it is now included in the .NET 10 and .NET 11 SDKs.

Service Discovery (Microsoft.Extensions.ServiceDiscovery.Dns)

• Fix DNS SRV provider ignoring query suffix #​7688 by @​Rimobul (co-authored by @​Copilot)

Test Improvements

• Update Microsoft.Data.SqlClient test dependency (aaea3c8) by @​jeffhandley (co-authored by @​Copilot)

Repository Infrastructure Updates

• [main] Update dependencies from dotnet/arcade #​7621
• Merge release/10.8 into main #​7632 by @​jeffhandley (co-authored by @​jozkee@​Copilot)
• Add agentic workflows that keep Microsoft.Extensions.AI aligned with OpenTelemetry GenAI semantic-conventions #​7611 by @​jeffhandley (co-authored by @​Copilot)
• Bump brace-expansion, eslint and tfx-cli in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7648
• Add a release-manager agent for the dotnet/extensions release process #​7643 by @​jeffhandley (co-authored by @​Copilot)
• Bump CommunityToolkit.VectorData package baselines to 1.0.0 / 1.0.0-preview #​7651 by @​adamsitnik (co-authored by @​Copilot)
• Incorporate servicing release experience into release-manager playbooks #​7656 by @​jeffhandley (co-authored by @​Copilot)
• Bump dotnet-reportgenerator-globaltool from 5.5.10 to 5.5.11 #​7666
• Bump adm-zip and azure-pipelines-task-lib in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript/azure-devops-report/tasks/PublishAIEvaluationReport #​7652
• Bump postcss from 8.5.15 to 8.5.23 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7660
• Bump PowerShell from 7.6.3 to 7.6.4 #​7650
• [main] Update dependencies from dotnet/arcade #​7644
• [release-manager] Require package dependency closure for releases #​7693 by @​jeffhandley (co-authored by @​Copilot)
• Optionally allow official builds to publish VSIX extension. #​7692 by @​peterwald
• [main] Update dependencies from dotnet/arcade #​7690

Acknowledgements

• @​EasyL0ver made their first contribution in #​7602
• @​Ghost93 made their first contribution in #​7566
• @​grafanaKibana made their first contribution in #​7609
• @​Rimobul made their first contribution in #​7678
• @​joshuajyue made their first contribution in #​7662
• @​Ghost93 submitted issue #​7565 (resolved by #​7566)
• @​grafanaKibana submitted issue #​7593 (resolved by #​7609)
• @​jredgard submitted issue #​7675 (resolved by #​7677)
• @​viorelbuligadev submitted issue #​7649 (resolved by #​7678)
• @​joshuajyue submitted issue #​7647 (resolved by #​7662)
• @​jboelter submitted issue #​7634 (resolved by #​7682)
• @​dmeeze submitted issue #​7157 (resolved by #​7689)
• @​ssmelov submitted issue #​7536 (resolved by #​7687)
• @​Marcus-Kanon submitted issue #​7551 (resolved by #​7691)
• @​vermilion submitted issue #​7175 (resolved by #​7688)
• @​evgenyfedorov2@​wtgodbe@​shyamnamboodiripad@​dariusclay@​iliar-turdushev@​mariamgerges@​PranavSenthilnathan@​rafal-mz@​tannergooding@​tarekgh reviewed pull requests

Full Changelog: dotnet/extensions@v10.8.4...v10.9.0

Packages in this release

Package	Version
Microsoft.AspNetCore.Testing	10.9.0
Microsoft.Extensions.AI.Abstractions	10.9.0
Microsoft.Extensions.AI.Evaluation.Console	10.9.0
Microsoft.Extensions.AI.Templates	10.9.0-preview.3.26411.16
Microsoft.Extensions.AmbientMetadata.Application	10.9.0
Microsoft.Extensions.AmbientMetadata.Build	10.9.0
Microsoft.Extensions.AuditReports	10.9.0
Microsoft.Extensions.Caching.Hybrid	10.9.0
Microsoft.Extensions.Compliance.Abstractions	10.9.0
Microsoft.Extensions.DataIngestion.Abstractions	10.9.0-preview.1.26411.16
Microsoft.Extensions.DependencyInjection.AutoActivation	10.9.0
Microsoft.Extensions.Diagnostics.ExceptionSummarization	10.9.0
Microsoft.Extensions.ObjectPool.DependencyInjection	10.9.0
Microsoft.Extensions.Options.Contextual	10.9.0-preview.1.26411.16
Microsoft.Extensions.ServiceDiscovery.Abstractions	10.9.0
Microsoft.Extensions.StaticAnalysis	10.9.0
Microsoft.Extensions.TimeProvider.Testing	10.9.0
Microsoft.Extensions.AI	10.9.0
Microsoft.Extensions.AI.Evaluation	10.9.0
Microsoft.Extensions.AI.OpenAI	10.9.0
Microsoft.Extensions.AsyncState	10.9.0
Microsoft.Extensions.Compliance.Redaction	10.9.0
Microsoft.Extensions.Compliance.Testing	10.9.0
Microsoft.Extensions.DataIngestion.Markdig	10.9.0-preview.1.26411.16
Microsoft.Extensions.DataIngestion.MarkItDown	10.9.0-preview.1.26411.16
Microsoft.Extensions.ServiceDiscovery	10.9.0
Microsoft.Extensions.Telemetry.Abstractions	10.9.0
Microsoft.Extensions.VectorData.Abstractions	10.9.0
Microsoft.AspNetCore.AsyncState	10.9.0
Microsoft.AspNetCore.HeaderParsing	10.9.0
Microsoft.Extensions.AI.Evaluation.NLP	10.9.0-preview.1.26411.16
Microsoft.Extensions.AI.Evaluation.Quality	10.9.0
Microsoft.Extensions.AI.Evaluation.Reporting	10.9.0
Microsoft.Extensions.AI.Evaluation.Safety	10.9.0-preview.1.26411.16
Microsoft.Extensions.DataIngestion	10.9.0-preview.1.26411.16
Microsoft.Extensions.Diagnostics.HealthChecks.Common	10.9.0
Microsoft.Extensions.Diagnostics.Probes	10.9.0-preview.1.26411.16
Microsoft.Extensions.Diagnostics.ResourceMonitoring	10.9.0
Microsoft.Extensions.Diagnostics.Testing	10.9.0
Microsoft.Extensions.Resilience	10.9.0
Microsoft.Extensions.ServiceDiscovery.Dns	10.9.0
Microsoft.Extensions.ServiceDiscovery.Yarp	10.9.0
Microsoft.Extensions.Telemetry	10.9.0
Microsoft.Extensions.VectorData.ConformanceTests	10.9.0
Microsoft.AspNetCore.Diagnostics.Middleware	10.9.0
Microsoft.Extensions.AI.Evaluation.Reporting.Azure	10.9.0
Microsoft.Extensions.Diagnostics.HealthChecks.ResourceUtilization	10.9.0
Microsoft.Extensions.Diagnostics.ResourceMonitoring.Kubernetes	10.9.0
Microsoft.Extensions.Hosting.Testing	10.9.0-preview.1.26411.16
Microsoft.Extensions.Http.Diagnostics	10.9.0
Microsoft.Extensions.Http.Resilience	10.9.0

The Microsoft.Agents.AI.ProjectTemplates package is not included in this release.

v10.8.0

This release adds new experimental APIs to Microsoft.Extensions.AI.Abstractions and updates the OpenAI dependency to 2.12.0, alongside documentation, test, and repository maintenance.

Experimental API Changes

N

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.