Update all non-major dependencies

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update	Pending
AWSSDK.S3	4.0.18.7 → 4.0.20.3					nuget	patch	4.0.21 (+1)
FastEndpoints (source)	8.0.1 → 8.1.0					nuget	minor
FastEndpoints.Generator (source)	8.0.1 → 8.1.0					nuget	minor
FastEndpoints.Security (source)	8.0.1 → 8.1.0					nuget	minor
FastEndpoints.Swagger (source)	8.0.1 → 8.1.0					nuget	minor
FastEndpoints.Testing (source)	8.0.1 → 8.1.0					nuget	minor
Microsoft.AspNetCore.Authentication.JwtBearer (source)	10.0.3 → 10.0.5					nuget	patch
Microsoft.AspNetCore.Identity.EntityFrameworkCore (source)	10.0.3 → 10.0.5					nuget	patch
Microsoft.AspNetCore.OpenApi (source)	10.0.3 → 10.0.5					nuget	patch
Microsoft.AspNetCore.OutputCaching.StackExchangeRedis (source)	10.0.3 → 10.0.5					nuget	patch
Microsoft.EntityFrameworkCore.InMemory (source)	10.0.3 → 10.0.5					nuget	patch
Microsoft.EntityFrameworkCore.Tools (source)	10.0.3 → 10.0.5					nuget	patch
Microsoft.Extensions.Caching.Hybrid (source)	10.3.0 → 10.4.0					nuget	minor
Microsoft.Extensions.Caching.StackExchangeRedis (source)	10.0.3 → 10.0.5					nuget	patch
Microsoft.Extensions.Http.Resilience (source)	10.3.0 → 10.4.0					nuget	minor
Microsoft.Extensions.TimeProvider.Testing (source)	10.3.0 → 10.4.0					nuget	minor
Npgsql	10.0.1 → 10.0.2					nuget	patch
Npgsql.EntityFrameworkCore.PostgreSQL	10.0.0 → 10.0.1					nuget	patch
OpenTelemetry.Extensions.Hosting (source)	1.15.0 → 1.15.1					nuget	patch	1.15.2
Pyroscope (source)	0.14.1 → 0.14.4					nuget	patch
Quartz.Extensions.Hosting (source)	3.16.1 → 3.17.1					nuget	minor
Refit	10.0.1 → 10.1.6					nuget	minor
Refit.HttpClientFactory	10.0.1 → 10.1.6					nuget	minor
Scalar.AspNetCore (source)	2.13.1 → 2.13.20					nuget	patch
StackExchange.Redis (source)	2.11.8 → 2.12.14					nuget	minor
Swashbuckle.AspNetCore	10.1.4 → 10.1.7					nuget	patch
Swashbuckle.AspNetCore.Annotations	10.1.4 → 10.1.7					nuget	patch
System.Threading.RateLimiting (source)	10.0.3 → 10.0.5					nuget	patch
Testcontainers.PostgreSql (source)	4.10.0 → 4.11.0					nuget	minor
coverlet.collector	8.0.0 → 8.0.1					nuget	patch
dotnet-ef (source)	10.0.1 → 10.0.5					nuget	patch
dotnet-sdk	10.0.0 → 10.0.201					dotnet-sdk	patch
prom/prometheus	v3.5.0 → v3.11.0						minor	v3.11.1
pyroscope/pyroscope-dotnet	0.13.0-glibc → 0.14.4-glibc					stage	minor
redis	8.4-alpine → 8.6-alpine						minor

---

Release Notes

aws/aws-sdk-net (AWSSDK.S3)

v4.0.20

v4.0.19

dotnet/dotnet (Microsoft.AspNetCore.Authentication.JwtBearer)

v10.0.5

v10.0.4

dotnet/extensions (Microsoft.Extensions.Caching.Hybrid)

v10.4.0

This release advances the AI abstractions with new hosted file, web search, and reasoning content types, stabilizes MCP and tool approval APIs, adds streaming latency metrics to OpenTelemetry instrumentation, and delivers bug fixes across caching, data ingestion, and resource monitoring.

Experimental API Changes

Now Stable

• MCP Server Tool Content and Function Call Approval APIs are now stable (previously MEAI001) #​7299
• FakeLogCollector.GetLogsAsync(CancellationToken) is now stable (previously EXTEXP0003) #​7332

New Experimental APIs

• New experimental AddExtendedHttpClientLogging overloads with wrapHandlersPipeline parameter (EXTEXP0013) #​7231

Removed Experimental APIs

• AI Tool Reduction experimental APIs removed (was experimental under MEAI001) #​7353

What's Changed

AI

• Add IHostedFileClient and friends #​7269 by @​stephentoub
• Add web search tool call content #​7276 by @​stephentoub (co-authored by @​Copilot)
• Surface OpenAI-compatible reasoning_content as TextReasoningContent #​7295 by @​stephentoub
• MCP/Approvals/Tool Contents stabilization #​7299 by @​jozkee
• Implement time_to_first_chunk and time_per_output_chunk streaming metrics in OpenTelemetryChatClient #​7325 by @​stephentoub (co-authored by @​Copilot)
• Add openai.api.type telemetry attribute to OpenAI IChatClient implementations #​7316 by @​stephentoub (co-authored by @​Copilot)
• Update OpenTelemetry Gen AI semantic conventions to v1.40 #​7322 by @​stephentoub (co-authored by @​Copilot)
• Fix tool definitions emission regardless of sensitivity setting #​7346 by @​stephentoub (co-authored by @​Copilot)
• Honor [Required] attribute in AI function parameter JSON schema generation #​7272 by @​stephentoub (co-authored by @​Copilot)
• AddAIContentType automatically registers content type against every base in the inheritance chain up to AIContent #​7358 by @​jozkee (co-authored by @​Copilot)
• Auto-mark server-handled FunctionCallContent as InformationalOnly #​7314 by @​stephentoub (co-authored by @​Copilot)
• Map ReasoningEffort.None and ExtraHigh to none and xhigh in OpenAI IChatClient implementations #​7319 by @​stephentoub (co-authored by @​Copilot)
• Handle DynamicMethod reflection limitations in AIFunctionFactory #​7287 by @​stephentoub (co-authored by @​Copilot)
• Fix Activity.Current nulled during streaming tool invocation #​7321 by @​flaviocdc (co-authored by @​Copilot)
• Handle FunctionCallOutputResponseItem in streaming response conversion #​7307 by @​stephentoub (co-authored by @​Copilot)
• Fix serialization of response continuation tokens #​7356 by @​stephentoub
• Remove AI Tool Reduction experimental APIs #​7353 by @​stephentoub (co-authored by @​Copilot)
• Update OpenAI to 2.9.1 #​7349 by @​stephentoub

Telemetry and Observability

• Introduce support for the Gauge metric type #​7203 by @​rainsxng
• Update logging source generator to support generic methods #​7331 by @​svick (co-authored by @​Copilot)
• Update logging source generator to match runtime PR #​124589 (ref readonly/params/scoped) #​7333 by @​svick (co-authored by @​Copilot)
• Promote FakeLogCollector.GetLogsAsync(CancellationToken) from experimental to stable #​7332 by @​Demo30
• Remove obsolete CS1591 warning suppression from generated file preamble #​7308 by @​luissena

HTTP Resilience and Diagnostics

• Expose wrapHandlersPipeline parameter in AddExtendedHttpClientLogging API #​7231 by @​rainsxng (co-authored by @​Copilot)

Diagnostics, Health Checks, and Resource Monitoring

• Add scaling to [0, 100] for LinuxUtilizationProvider #​7289 by @​amadeuszl

Data Ingestion

• Fix infinite loop in GetPreExistingChunksIdsAsync when records exceed MaxTopCount #​7311 by @​adamsitnik (co-authored by @​Copilot)

Caching

• Fix buffer copying for HybridCachePayload. #​7343 by @​cincuranet

Test Improvements

• Fix flaky LinuxResourceHealthCheckTests by isolating MeterListener with ReferenceEquals #​7302 by @​stephentoub (co-authored by @​Copilot)
• Fix flaky resource monitoring test #​7303 by @​stephentoub
• Fix flaky HttpRequestBuffering_DoesNotBufferDisabledOrOversizedLogs test #​7304 by @​stephentoub (co-authored by @​Copilot)
• Fix race condition in FakeLogCollector async enumeration test #​7300 by @​stephentoub (co-authored by @​Copilot)
• Fix cgroupv1 acceptance test to explicitly register the v1 parser #​7296 by @​stephentoub (co-authored by @​Copilot)

Repository Infrastructure Updates

• Update McpServer project template to ModelContextProtocol 1.1.0 #​7338 by @​jeffhandley (co-authored by @​Copilot)
• Update aiagent-webapi template to latest Agent Framework versions (rc1/260219) #​7339 by @​jeffhandley (co-authored by @​Copilot)
• Update SDK and dotnet version to 10.0.103 #​7326 by @​wtgodbe
• Introduce an ApiChief skill to streamline updating API baselines #​7281 by @​jeffhandley (co-authored by @​Copilot)
• Update ApiChief script to use the net10.0 artifacts #​7280 by @​jeffhandley
• Replace Windows queue image references from vs2022preview to vs2022 in pipeline YAML #​7347 by @​wtgodbe (co-authored by @​Copilot)
• Update public pipeline pool images to fix broken builds #​7292 by @​joperezr
• Use smaller windows.vs2022.amd64.open pool image #​7298 by @​joperezr
• Remove main-to-dev inter-branch merge automation #​7315 by @​joperezr (co-authored by @​Copilot)
• Updating FakeLogCollector API baselines #​7334 by @​Demo30
• Run the issue-labeler over pull requests using polling #​7273 by @​jeffhandley (co-authored by @​Copilot)
• Add npmAuthenticate task to fix npm E401 errors on CI agents #​7364 by @​ilonatommy (co-authored by @​Copilot)
• Pass sourceIndexBuildCommand through to SourceIndex #​7348 by @​wtgodbe
• Bump qs from 6.14.1 to 6.14.2 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7301
• Bump rollup from 4.40.0 to 4.59.0 #​7345

Acknowledgements

• @​luissena made their first contribution in #​7308
• @​flaviocdc made their first contribution in #​7321
• @​bryjen submitted issue #​7271 (resolved by #​7272)
• @​vsantele submitted issue #​7306 (resolved by #​7307)
• @​evgenyfedorov2 @​eiriktsarpalis @​tarekgh @​ericstj @​iliar-turdushev @​rogerbarreto @​shyamnamboodiripad @​DeagleGross @​MihaZupan @​akoeplinger @​mattleibow @​rafal-mz @​roji @​rosebyte reviewed pull requests

Full Changelog: dotnet/extensions@v10.3.0...v10.4.0

npgsql/npgsql (Npgsql)

v10.0.2

v10.0.2 contains several minor bug fixes.

Milestone issues

Full Changelog: npgsql/npgsql@v10.0.1...v10.0.2

open-telemetry/opentelemetry-dotnet (OpenTelemetry.Extensions.Hosting)

v1.15.1

Release details: 1.15.1

• Breaking change: The Baggage API now disallows empty baggage names and
  treats baggage names and values as case sensitive, aligning with the latest
  Baggage API specification.
• Various bug fixes across OpenTelemetry.Api and OpenTelemetry SDK,
  including fixes for thread-safety, sampler edge cases, metrics precision,
  and observable instrument lifecycle handling.

quartznet/quartznet (Quartz.Extensions.Hosting)

v3.17.1

Highlights

Jenkins-style H (hash) token for cron expressions

Quartz.NET now supports the H (hash) token in cron expressions, inspired by Jenkins. The H token resolves to a deterministic value based on the trigger's identity, spreading job execution times to avoid the thundering herd problem when many triggers share the same schedule.

Supported forms: H, H(min-max), H/step, H(min-max)/step

// Runs at a consistent but spread-out minute each hour
trigger = TriggerBuilder.Create()
    .WithIdentity("myTrigger", "myGroup")
    .WithCronSchedule("0 H * * * ?")
    .Build();

// Runs every 15 minutes, starting at a hash-determined offset
trigger = TriggerBuilder.Create()
    .WithIdentity("myTrigger", "myGroup")
    .WithCronSchedule("0 H/15 * * * ?")
    .Build();

The hash seed is automatically derived from the trigger's identity (name + group) when using TriggerBuilder, or can be provided explicitly. See the cron trigger documentation for full details.

Structured logging history plugins

New StructuredLoggingJobHistoryPlugin and StructuredLoggingTriggerHistoryPlugin provide first-class support for structured logging frameworks like Serilog and NLog. Unlike the existing logging plugins that use index-based format placeholders ({0}, {1}), these use named MEL-style message template parameters ({JobName}, {TriggerGroup}, etc.), making log output queryable in structured logging sinks and avoiding template cache memory leaks.

quartz.plugin.jobHistory.type = Quartz.Plugin.History.StructuredLoggingJobHistoryPlugin, Quartz.Plugins
quartz.plugin.triggerHistory.type = Quartz.Plugin.History.StructuredLoggingTriggerHistoryPlugin, Quartz.Plugins

Message templates are fully configurable via standard Quartz property configuration.

Bug Fixes

• Fix triggers getting permanently stuck in ACQUIRED state — Triggers could become permanently stuck if the scheduler crashed or was killed between acquiring a trigger and firing it. (#​2980)
• Fix StoreCalendar overriding paused trigger state — Storing a calendar with updateTriggers: true no longer resets paused triggers back to normal state. (#​2968)
• Fix DoCheckin not retrying transient database errors — Cluster checkin now properly retries on transient database failures instead of silently failing. (#​2970)
• Fix Dashboard /_blazor endpoint conflict — The Quartz Dashboard no longer conflicts with host applications that also use Blazor. (#​2975)
• Fix spurious ERROR log on zombie transaction rollback — Rolling back a zombie transaction no longer logs a misleading ERROR. (#​2978)

Full Changelog: quartznet/quartznet@v3.17.0...v3.17.1

v3.17.0

This is a major bug-fix release with 40+ fixes spanning trigger state management, clustering reliability, DST handling, misfire accuracy, and scheduler lifecycle. An optional database schema migration improves misfire handling.

Highlights

Optional database migration: MISFIRE_ORIG_FIRE_TIME column

A new optional column MISFIRE_ORIG_FIRE_TIME on QRTZ_TRIGGERS enables correct ScheduledFireTimeUtc for misfired triggers when using "fire now" misfire policies. Without it, ScheduledFireTimeUtc equals FireTimeUtc for misfired triggers (the pre-existing behavior). RAMJobStore does not require this migration.

Migration script: database/schema_30_add_misfire_orig_fire_time.sql (covers SQL Server, PostgreSQL, MySQL, SQLite, Oracle, Firebird)

Clustering and concurrency fixes

• Fix DisallowConcurrentExecution jobs running simultaneously in cluster (#​2697)
• Fix false cluster recovery causing DisallowConcurrentExecution violation (#​2915)
• Fix triggers stuck in BLOCKED state for DisallowConcurrentExecution jobs (#​2822)
• Fix FIRED_TRIGGERS not cleaned up on job deletion mid-execution (#​1696)
• Handle transient database exceptions (deadlocks) with automatic retry (#​2883, #​2952)
• Fix PostgreSQL transaction abort error on lock contention (#​2884)
• Fix SQLite "database is locked" errors with dedicated semaphore (#​2323)
• Add MySQL FORCE INDEX hints for slow trigger acquisition queries (#​547)

Trigger state and fire time accuracy

• Fix GetTriggerState returning Complete instead of Blocked for executing triggers (#​2255)
• Fix RAMJobStore.TriggersFired skipping triggers causing wrong trigger/job execution (#​1386)
• Fix ScheduledFireTimeUtc returning wrong value after misfire (#​2899)
• Fix PreviousFireTimeUtc reset to null on restart with OverWriteExistingData=true (#​1834)
• Fix SimpleTrigger first fire time wrong when created long before scheduling (#​2455)
• Fix CronTrigger double-firing when rescheduled with old StartTimeUtc (#​2909)
• Fix recovery trigger missing original JobData (#​2083)
• Fix misfired blocked triggers not being deleted from database (#​1646)
• Fix DoNothing misfire policy skipping fire times within threshold (#​2912)

DST and time handling

• Fix DailyTimeIntervalTrigger extra fire during DST fall-back (#​2917)
• Fix DailyTimeIntervalTrigger mutating StartTimeUtc during fire time computation (#​2906)
• Fix DailyTimeIntervalTrigger RepeatCount to apply per day (#​1633)
• Fix scheduler thread stuck after system clock jumps backward (#​1508)
• Fix ComputeFireTimesBetween modifying trigger StartTimeUtc (#​2722)

Scheduler lifecycle and threading

• Fix scheduler hang on shutdown: replace Monitor.Wait with async SemaphoreSlim (#​2877)
• Fix shutdown deadlock (#​2830)
• Release acquired triggers on shutdown instead of leaking them (#​2881)
• Fix DedicatedThreadPool threads leaking on scheduler shutdown (#​1357)
• Use dedicated thread for scheduler loop to prevent missed triggers under high CPU (#​781)

Job execution

• Fix RefireImmediately with JobChainingJobListener firing chain prematurely (#​663)
• Fix AsyncLocal flow from IJobFactory.NewJob to IJob.Execute (#​1528)
• Add IJobDetail property to JobExecutionException (#​1442)

API and configuration

• Fix idleWaitTime of zero silently ignored instead of throwing (#​1394)
• Fix AddJob/AddTrigger ambiguous references without removing overloads (#​2795)
• Fix PauseJobs/ResumeJob interaction bug in RAMJobStore (#​761)
• Fix RemoteScheduler ignoring local quartz.scheduler.instanceName (#​313)
• Restore DB trigger fields for custom (blob) triggers (#​2949)

Dashboard

• Fix dashboard CSS 404 in API-only projects (#​2886)

---

What's Changed

• Add IJobDetail property to JobExecutionException by @​lahma in #​2869
• Fix ComputeFireTimesBetween modifying trigger StartTimeUtc by @​lahma in #​2870
• Convert integration tests to use Testcontainers.NET by @​lahma in #​2873
• docs: document RequiresAspNetWebAssets for API-only apps (.NET 10+) by @​lahma in #​2875
• Fix DoCheckin lock returner warning and ReferenceEquals comparisons by @​lahma in #​2876
• Fix scheduler hang on shutdown: replace Monitor.Wait with async SemaphoreSlim by @​lahma in #​2877
• Release acquired triggers on shutdown instead of leaking them by @​lahma in #​2881
• Port: Handle transient database exceptions with automatic retry (3.x) by @​lahma in #​2883
• Port PostgreSQL transaction abort fix to 3.x (#​2829) by @​lahma in #​2884
• Port DST fall-back infinite trigger fix to 3.x (#​2865) by @​lahma in #​2885
• Fix dashboard CSS 404 in API-only projects (#​2886) by @​lahma in #​2887
• Port shutdown deadlock fix to 3.x (#​2830) by @​lahma in #​2889
• Use dedicated thread for scheduler loop to prevent missed triggers under high CPU (#​781) by @​lahma in #​2895
• Fix triggers stuck in BLOCKED state for DisallowConcurrentExecution jobs by @​Copilot in #​2822
• Split integration tests into per-database CI workflows by @​lahma in #​2900
• Fix ScheduledFireTimeUtc returning wrong value after misfire by @​lahma in #​2899
• Remove docker folder and docker-compose.yml by @​lahma in #​2904
• Fix recovery trigger missing original JobData (#​2083) by @​lahma in #​2905
• Fix CronTrigger double-firing when rescheduled with old StartTimeUtc by @​lahma in #​2909
• Fix DailyTimeIntervalTrigger mutating StartTimeUtc during fire time computation by @​lahma in #​2906
• Fix DisallowConcurrentExecution jobs running simultaneously in cluster by @​lahma in #​2908
• Fix DoNothing misfire policy skipping fire times within threshold by @​lahma in #​2912
• Fix false cluster recovery causing DisallowConcurrentExecution violation by @​lahma in #​2915
• Fix DailyTimeIntervalTrigger RepeatCount to apply per day (#​1633) by @​lahma in #​2918
• Add DST spring-forward tests for daily, monthly, and EU timezone intervals by @​lahma in #​2919
• Fix DailyTimeIntervalTrigger extra fire during DST fall-back by @​lahma in #​2917
• Fix SQLite database is locked errors (#​2323) by @​lahma in #​2923
• Fix PauseJobs/ResumeJob interaction bug in RAMJobStore by @​lahma in #​2893
• Add MySQL FORCE INDEX hints for slow trigger queries by @​lahma in #​2894
• Fix misfired blocked triggers not being deleted from database by @​Copilot in #​2820
• Fix AddJob/AddTrigger ambiguous references without removing overloads (#​2795) by @​lahma in #​2925
• Add CronExpression DST regression tests (#​2156) by @​lahma in #​2927
• Fix scheduler thread stuck after system clock jumps backward (#​1508) by @​lahma in #​2929
• Fix AsyncLocal flow from IJobFactory.NewJob to IJob.Execute (#​1528) by @​lahma in #​2930
• Fix RAMJobStore.TriggersFired skipping triggers causing wrong job execution (#​1386) by @​lahma in #​2933
• Enable NUnit parallel test fixture execution by @​lahma in #​2936
• Fix GetTriggerState returning Complete instead of Blocked for executing triggers (#​2255) by @​lahma in #​2935
• Fix unit tests failing on DST transition days by @​lahma in #​2941
• Fix RefireImmediately with JobChainingJobListener firing chain prematurely (#​663) by @​lahma in [#​

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.