Bump the nuget group with 6 updates

[dependabot]

Updated Aspire.Hosting.Testing from 13.1.3 to 13.2.1.

Release notes

Sourced from Aspire.Hosting.Testing's releases.

13.2.1

🐛 Bug Fixes

• 🖥️ CLI bundles for ARM & musl — win-arm64, linux-arm64, and linux-musl-x64 bundles now correctly include DCP instead of silently producing broken installs (#​15529)
• ⚡ aspire new in VS Code — Fixed a race where the workspace switch severed the CLI terminal before the agent init prompt could complete (#​15553)
• 🔗 Dashboard resource URLs — The describe command no longer produces broken dashboard links with a stray /login?t=... in the path (#​15495)
• 🌍 Guest AppHost env vars — Launch profile environment variables are now correctly forwarded to guest AppHosts (#​15637)
• 📦 Legacy settings migration — .aspire/settings.json → aspire.config.json migration was silently skipped in some scenarios; now works reliably (#​15526)
• 🔧 TypeScript AppHost restore — Fixed config resolution during TS AppHost restore (#​15625)
• 🎭 Playwright CLI on Windows — aspire agent init now correctly installs playwright-cli on Windows (#​15559)
• 📌 Emulator stability — Pinned Kusto emulator image and improved Cosmos DB emulator reliability (#​15504)

✨ Improvements

• 🏗️ Brownfield TypeScript aspire init — Running aspire init in existing JS/TS projects now smartly merges package.json — scripts, dependencies, and engines — with semver-aware conflict handling (#​15123)
• 🎯 Endpoint filtering — New ExcludeReferenceEndpoint property lets you filter specific endpoints from WithReference (#​15586)
• 🌐 More polyglot ATS APIs — Exported additional hosting APIs for TypeScript and Go AppHost authoring (#​15557)
• 🔍 Short trace ID support — The dashboard now resolves short trace IDs in addition to full-length ones (#​15613)
• ⚠️ Aspire.Hosting.NodeJs deprecated — Use Aspire.Hosting.JavaScript instead; the old package no longer appears in aspire add (#​15686)

13.2.0

Aspire 13.2

Aspire 13.2 brings major CLI enhancements, a new TypeScript AppHost (preview), dashboard data export/import, Microsoft Foundry integration, and multi-language improvements — all focused on making local development more streamlined for developers and AI coding agents
alike.

Highlights

• 🛠️ CLI overhaul — New commands including aspire start/stop/ps for detached mode, aspire describe for resource monitoring, aspire doctor for environment diagnostics, aspire secret for managing user secrets, aspire docs for browsing documentation from the terminal,
  and aspire agent (renamed from aspire mcp) for AI agent integration.
• 🌐 TypeScript AppHost (preview) — Write your apphost in TypeScript with createBuilder(), using the same app model concepts as C#. Full VS Code extension support included.
• 🧩 VS Code extension — Dedicated Aspire Activity Bar panel with live resource state, inline CodeLens with health status and actions, gutter decorations, and a new Getting Started walkthrough.
• 📊 Dashboard improvements — Bulk telemetry export/import, export environment variables as .env files, a new telemetry HTTP API, set parameters directly from the dashboard, and improved resource graph layout.
• 🤖 Microsoft Foundry — Replaces Azure AI Foundry integration with broader Aspire.Hosting.Foundry support including hosted agents and model deployments.
• 🔒 Azure Virtual Network & Private Endpoints — New Aspire.Hosting.Azure.Network integration for defining VNets, subnets, NAT gateways, NSGs, and private endpoints directly in your apphost.
• 🐳 Docker Compose publishing — Generate docker-compose.yaml from your app model with AddDockerComposeEnvironment.
• 📦 New integrations — Azure Data Lake Storage, MongoDB EF Core (Aspire.MongoDB.EntityFrameworkCore), Bun support for JS resources, and Certbot for automated SSL certificates.
• ⚡ App model — WithMcpServer for declaring MCP endpoints, rebuild command for project resources, contextual endpoint resolution, and improved secret/certificate handling.

⚠️ Breaking changes

Notable breaking changes include service discovery env vars now using endpoint scheme instead of name, aspire.config.json replacing split config files, AIFoundry → Foundry rename, WithSecretBuildArg → WithBuildSecret, and updated default Azure credential behavior.
See the full list of breaking changes.

📖 Learn more

For the full details on everything in this release, check out the What's new in Aspire 13.2 documentation.

Thank you to all the community contributors who helped make this release happen! 💜

Commits viewable in compare view.

Updated Autofac.Extensions.DependencyInjection from 10.0.0 to 11.0.0.

Release notes

Sourced from Autofac.Extensions.DependencyInjection's releases.

11.0.0

Breaking Changes

• Drop .NET 6 and .NET 7 targeting.
• Add .NET 10 target.
• Change the AnyKey support to use the new native support for AnyKey in core Autofac - this removes some of the custom internals used to support keyed services and moves that to core Autofac.

Other Changes

• Updated benchmark suite to test more scenarios.
• Executed some targeted performance improvements in the "glue" that maps M.E.DI behaviors to Autofac.
• Updated Autofac dependency to v9.1.0.

Full Changelog: autofac/Autofac.Extensions.DependencyInjection@v10.0.0...v11.0.0

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.3.0 to 18.4.0.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.4.0

What's Changed

• Add LoongArch64 support by @​stdmnpkg in Add LoongArch64 support microsoft/vstest#15359

• Refactor Condition evaluation by @​Youssef1313 in Refactor Condition evaluation microsoft/vstest#15357

• Adding info on extensions points part 1 by @​nohwnd in Adding info on extensions points part 1 microsoft/vstest#15360

• Add option to ask for uploading code QL before the standard window ends by @​nohwnd in Add option to ask for uploading code QL before the standard window ends microsoft/vstest#15373

• Update runtime versions by @​nohwnd in Update runtime versions microsoft/vstest#15372

• Fix .NET 10 regression for traits by @​Youssef1313 in Fix .NET 10 regression for traits microsoft/vstest#15370

• Update target frameworks to net10.0 and net11.0 by @​dotnet-maestro[bot] in Update target frameworks to net10.0 and net11.0 microsoft/vstest#15349

• Fix names in pipeline matrix so we don't have to align them by @​nohwnd in Fix names in pipeline matrix so we don't have to align them microsoft/vstest#15365

• Update SECURITY.md by @​Youssef1313 in Update SECURITY.md microsoft/vstest#15342

New Contributors

• @​stdmnpkg made their first contribution in Add LoongArch64 support microsoft/vstest#15359

Full Changelog: microsoft/vstest@v18.3.0...v18.4.0

Commits viewable in compare view.

Updated OpenTelemetry.Exporter.OpenTelemetryProtocol from 1.15.0 to 1.15.1.

Release notes

Sourced from OpenTelemetry.Exporter.OpenTelemetryProtocol's releases.

1.15.1

For highlights and announcements pertaining to this release see: Release Notes > 1.15.1.

The following changes are from the previous release 1.15.0.

• NuGet: OpenTelemetry v1.15.1

  • Fixed Tracer.StartSpan() leaving the new span as Activity.Current when
    the previous activity was stopped by another thread during span creation.
    (#​6257)

  • Fixed OverflowException in TraceIdRatioBasedSampler when trace ID bytes
    produced long.MinValue.
    ([#​6928])

  • Fixed precision issues when using Histogram<float> with custom
    HistogramBucketBoundaries.
    (#​6866)

  • Fixed a thread-safety issue in LogRecordSharedPool.Rent().
    (#​6833)

  • Fixed observable instruments (ObservableCounter, ObservableUpDownCounter,
    ObservableGauge) continuing to export stale data points after a callback
    stops reporting a series.
    (#​5950)

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Api v1.15.1

  • Breaking change: The Baggage API implements the latest Baggage API
    specification,
    which disallows empty baggage names and treats baggage names and values as case
    sensitive.
    (#​6931)

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Api.ProviderBuilderExtensions v1.15.1

  No notable changes.

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Exporter.Console v1.15.1

  No notable changes.

  See CHANGELOG for details.

... (truncated)

1.15.1-beta.1

The following changes are from the previous release 1.15.0-beta.1.

• NuGet: OpenTelemetry.Exporter.Prometheus.AspNetCore v1.15.1-beta.1

  • Updated OpenTelemetry core component version(s) to 1.15.1.
    (#​7010)

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Exporter.Prometheus.HttpListener v1.15.1-beta.1

  • Updated OpenTelemetry core component version(s) to 1.15.1.
    (#​7010)

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Shims.OpenTracing v1.15.1-beta.1

  • This package is deprecated and it will stop receiving any updates in
    March 2027. Use the OpenTelemetry API and SDK directly instead of the OpenTracing
    shims.
    (#​6976)

  • Updated OpenTelemetry core component version(s) to 1.15.1.
    (#​7010)

  See CHANGELOG for details.

Commits viewable in compare view.

Updated OpenTelemetry.Extensions.Hosting from 1.15.0 to 1.15.1.

Release notes

Sourced from OpenTelemetry.Extensions.Hosting's releases.

1.15.1

For highlights and announcements pertaining to this release see: Release Notes > 1.15.1.

The following changes are from the previous release 1.15.0.

• NuGet: OpenTelemetry v1.15.1

  • Fixed Tracer.StartSpan() leaving the new span as Activity.Current when
    the previous activity was stopped by another thread during span creation.
    (#​6257)

  • Fixed OverflowException in TraceIdRatioBasedSampler when trace ID bytes
    produced long.MinValue.
    ([#​6928])

  • Fixed precision issues when using Histogram<float> with custom
    HistogramBucketBoundaries.
    (#​6866)

  • Fixed a thread-safety issue in LogRecordSharedPool.Rent().
    (#​6833)

  • Fixed observable instruments (ObservableCounter, ObservableUpDownCounter,
    ObservableGauge) continuing to export stale data points after a callback
    stops reporting a series.
    (#​5950)

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Api v1.15.1

  • Breaking change: The Baggage API implements the latest Baggage API
    specification,
    which disallows empty baggage names and treats baggage names and values as case
    sensitive.
    (#​6931)

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Api.ProviderBuilderExtensions v1.15.1

  No notable changes.

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Exporter.Console v1.15.1

  No notable changes.

  See CHANGELOG for details.

... (truncated)

1.15.1-beta.1

The following changes are from the previous release 1.15.0-beta.1.

• NuGet: OpenTelemetry.Exporter.Prometheus.AspNetCore v1.15.1-beta.1

  • Updated OpenTelemetry core component version(s) to 1.15.1.
    (#​7010)

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Exporter.Prometheus.HttpListener v1.15.1-beta.1

  • Updated OpenTelemetry core component version(s) to 1.15.1.
    (#​7010)

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Shims.OpenTracing v1.15.1-beta.1

  • This package is deprecated and it will stop receiving any updates in
    March 2027. Use the OpenTelemetry API and SDK directly instead of the OpenTracing
    shims.
    (#​6976)

  • Updated OpenTelemetry core component version(s) to 1.15.1.
    (#​7010)

  See CHANGELOG for details.

Commits viewable in compare view.

Updated Swashbuckle.AspNetCore.ReDoc from 10.1.5 to 10.1.7.

Release notes

Sourced from Swashbuckle.AspNetCore.ReDoc's releases.

10.1.7

What's Changed

• Support custom data type for DataTypeAttribute by @​tayfunyuksel in Support custom data type for DataTypeAttribute domaindrivendev/Swashbuckle.AspNetCore#3868

New Contributors

• @​tayfunyuksel made their first contribution in Support custom data type for DataTypeAttribute domaindrivendev/Swashbuckle.AspNetCore#3868

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.6...v10.1.7

10.1.6

What's Changed

• Fix handling of duplicate enum values for dictionaries by @​martincostello in Fix handling of duplicate enum values for dictionaries domaindrivendev/Swashbuckle.AspNetCore#3839
• Log exception when app fails to start in CLI by @​ODukhno in Log exception when app fails to start in CLI domaindrivendev/Swashbuckle.AspNetCore#3853
• Fix missing OpenAPI 3.1 $ref properties by @​martincostello in Fix missing OpenAPI 3.1 $ref properties domaindrivendev/Swashbuckle.AspNetCore#3859
• Add description for OpenAPI schema references by @​martincostello in Add description for OpenAPI schema references domaindrivendev/Swashbuckle.AspNetCore#3860

New Contributors

• @​ODukhno made their first contribution in Log exception when app fails to start in CLI domaindrivendev/Swashbuckle.AspNetCore#3853

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.5...v10.1.6

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[cloudflare-workers-and-pages]

Deploying bones with    Cloudflare Pages

Latest commit:	790946b
Status:	✅  Deploy successful!
Preview URL:	https://4956c633.bones-4nm.pages.dev
Branch Preview URL:	https://dependabot-nuget-core-bones-ek8w.bones-4nm.pages.dev

View logs

[dependabot]

Superseded by #298.