Skip to content

deps: Bump the dotnet-microsoft group with 9 updates - #481

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/nuget/dotnet-microsoft-bc8e3e1913
Open

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/nuget/dotnet-microsoft-bc8e3e1913

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 2, 2026

Copy link
Copy Markdown
Contributor

Updated Grpc.Core.Api from 2.84.0 to 2.85.0.

Release notes

Sourced from Grpc.Core.Api's releases.

2.85.0

What's Changed

Full Changelog: grpc/grpc-dotnet@v2.84.0...v2.85.0

Commits viewable in compare view.

Updated Grpc.Net.Client from 2.84.0 to 2.85.0.

Release notes

Sourced from Grpc.Net.Client's releases.

2.85.0

What's Changed

Full Changelog: grpc/grpc-dotnet@v2.84.0...v2.85.0

Commits viewable in compare view.

Updated Grpc.Tools from 2.84.0 to 2.85.0.

Release notes

Sourced from Grpc.Tools's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore from 10.0.13 to 10.0.14.

Release notes

Sourced from Microsoft.EntityFrameworkCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Relational from 10.0.13 to 10.0.14.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Relational's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Sqlite from 10.0.13 to 10.0.14.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Sqlite's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Hosting from 10.0.13 to 10.0.14.

Release notes

Sourced from Microsoft.Extensions.Hosting's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Identity.Client from 4.91.1 to 4.92.0.

Release notes

Sourced from Microsoft.Identity.Client's releases.

4.92.0

New Features

  • Added COSMIC_LOCATION as a regional auto-detection source, after REGION_NAME and before IMDS. #​6240
  • Added ITokenCacheSnapshotProvider and TokenCacheSnapshot for process-local token-cache capture and restore without repeated JSON serialization. Use V3 serialization for persistence. #​6229

Bug Fixes

  • Fixed certificate private-key attachment on .NET Framework 4.7.2 to support non-exportable CNG keys. #​6244
  • Fixed managed identity KeyGuard attestation endpoint selection to use cloud-specific regional endpoints from IMDS compute metadata. #​6238
  • Fixed Android broker request serialization by registering BrokerRequest in the source-generated JSON serializer context. #​6226

Changes

  • Updated Microsoft.Identity.Client.NativeInterop from 0.20.6 to 0.20.7. #​6230
  • Reduced OpenTelemetry metric-tag allocations using TagList and cached canonical tag-key sets. Custom enrichers should use noncanonical tag names. #​6227

Commits viewable in compare view.

Updated Microsoft.Identity.Client.Extensions.Msal from 4.91.1 to 4.92.0.

Release notes

Sourced from Microsoft.Identity.Client.Extensions.Msal's releases.

4.92.0

New Features

  • Added COSMIC_LOCATION as a regional auto-detection source, after REGION_NAME and before IMDS. #​6240
  • Added ITokenCacheSnapshotProvider and TokenCacheSnapshot for process-local token-cache capture and restore without repeated JSON serialization. Use V3 serialization for persistence. #​6229

Bug Fixes

  • Fixed certificate private-key attachment on .NET Framework 4.7.2 to support non-exportable CNG keys. #​6244
  • Fixed managed identity KeyGuard attestation endpoint selection to use cloud-specific regional endpoints from IMDS compute metadata. #​6238
  • Fixed Android broker request serialization by registering BrokerRequest in the source-generated JSON serializer context. #​6226

Changes

  • Updated Microsoft.Identity.Client.NativeInterop from 0.20.6 to 0.20.7. #​6230
  • Reduced OpenTelemetry metric-tag allocations using TagList and cached canonical tag-key sets. Custom enrichers should use noncanonical tag names. #​6227

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps Grpc.Core.Api from 2.84.0 to 2.85.0
Bumps Grpc.Net.Client from 2.84.0 to 2.85.0
Bumps Grpc.Tools from 2.84.0 to 2.85.0
Bumps Microsoft.EntityFrameworkCore from 10.0.13 to 10.0.14
Bumps Microsoft.EntityFrameworkCore.Relational from 10.0.13 to 10.0.14
Bumps Microsoft.EntityFrameworkCore.Sqlite from 10.0.13 to 10.0.14
Bumps Microsoft.Extensions.Hosting from 10.0.13 to 10.0.14
Bumps Microsoft.Identity.Client from 4.91.1 to 4.92.0
Bumps Microsoft.Identity.Client.Extensions.Msal from 4.91.1 to 4.92.0

---
updated-dependencies:
- dependency-name: Grpc.Core.Api
  dependency-version: 2.85.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet-microsoft
- dependency-name: Grpc.Net.Client
  dependency-version: 2.85.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet-microsoft
- dependency-name: Grpc.Tools
  dependency-version: 2.85.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet-microsoft
- dependency-name: Microsoft.EntityFrameworkCore
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-microsoft
- dependency-name: Microsoft.EntityFrameworkCore.Relational
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-microsoft
- dependency-name: Microsoft.EntityFrameworkCore.Sqlite
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-microsoft
- dependency-name: Microsoft.Extensions.Hosting
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-microsoft
- dependency-name: Microsoft.Identity.Client
  dependency-version: 4.92.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet-microsoft
- dependency-name: Microsoft.Identity.Client.Extensions.Msal
  dependency-version: 4.92.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet-microsoft
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Nov 2, 2026
@dependabot @github

dependabot Bot commented on behalf of github Nov 2, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: nuget. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@codecov

codecov Bot commented Nov 2, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

@sonarqubecloud

sonarqubecloud Bot commented Nov 2, 2026

Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants