Bump Microsoft.Extensions.Http.Resilience from 10.2.0 to 10.5.0#1011
Merged
intellitect-bot merged 1 commit intomainfrom Apr 23, 2026
Merged
Conversation
--- updated-dependencies: - dependency-name: Microsoft.Extensions.Http.Resilience dependency-version: 10.5.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
intellitect-bot
approved these changes
Apr 23, 2026
BenjaminMichaelis
pushed a commit
that referenced
this pull request
Apr 25, 2026
Updated [Microsoft.Extensions.Http.Resilience](https://github.com/dotnet/extensions) from 10.2.0 to 10.5.0. <details> <summary>Release notes</summary> _Sourced from [Microsoft.Extensions.Http.Resilience's releases](https://github.com/dotnet/extensions/releases)._ ## 10.5.0 HTTP Logging Middleware APIs in `Microsoft.AspNetCore.Diagnostics.Middleware` are now stable. This release also transfers `Microsoft.Extensions.VectorData.Abstractions` and `Microsoft.Extensions.VectorData.ConformanceTests` from the [Semantic Kernel](https://github.com/microsoft/semantic-kernel) repository into dotnet/extensions, jumping from 10.1.0 to 10.5.0 for consistent versioning. The release also delivers fixes across the AI libraries, AI Evaluation, and Service Discovery. ## Breaking Changes 1. **Rename `VectorStoreVectorAttribute` constructor parameter #7460** * The `Dimensions` parameter was renamed to `dimensions` (lowercase). This is a source-breaking change only — binary compatibility is preserved. * If you use the named argument syntax `new VectorStoreVectorAttribute(Dimensions: 1536)`, update it to `new VectorStoreVectorAttribute(dimensions: 1536)`. ## Experimental API Changes ### Now Stable * HTTP Logging Middleware APIs are now stable (previously `EXTEXP0013`): `AddHttpLogEnricher<T>`, `IHttpLogEnricher`, and `RequestHeadersLogEnricherOptions.HeadersDataClasses` #7380 ## What's Changed ### AI * Fix OpenAIResponsesChatClient to respect "store":false in responses #7417 by @stephentoub * Fix InvalidOperationException in CoalesceWebSearchToolCallContent #7419 by @stephentoub * Handle F# optional parameters in AIFunctionFactory schema generation #7439 by @eiriktsarpalis * Fix ComputerCallResponseItem using Item.Id instead of CallId #7446 by @jozkee * Fix HostedFileContent with image MIME type sent as input_file instead of input_image #7438 by @stephentoub (co-authored by @copilot) * Guard Activity.Current restore with null check in OpenTelemetry streaming clients #7443 by @stephentoub (co-authored by @copilot) * Enable stateless mode in remote MCP server template (released as v1.2.0 on 2026-04-01) #7441 by @jeffhandley ### Vector Data * Move Microsoft.Extensions.VectorData.Abstractions over from Semantic Kernel #7434 by @roji * Rename VectorStoreVectorAttribute dimensions constructor parameter #7460 by @roji ### AI Evaluation * Add Path Validation for DiskBasedResponseCache and DiskBasedResultStore #7397 by @peterwald * Update brace-expansion for CVE-2026-33750 #7457 by @SamMonoRT ### ASP.NET Core Extensions * Removing experimental attribute from Http logging middleware #7380 by @mariamgerges ### Service Discovery * Implement RFC6761 reserved DNS names handling #6924 by @rzikm ## Documentation Updates * Remove per-library CHANGELOG.md files #7413 by @jeffhandley ## Test Improvements ... (truncated) ## 10.4.1 This release of the Microsoft.Extensions.AI packages adds new experimental APIs for Realtime client sessions and Text-to-Speech, along with OpenTelemetry and middleware improvements. ## Packages in this release | Package | Version | |---------|---------| | Microsoft.Extensions.AI.Abstractions | 10.4.1 | | Microsoft.Extensions.AI | 10.4.1 | | Microsoft.Extensions.AI.OpenAI | 10.4.1 | ## Experimental API Changes ### New Experimental APIs * New experimental API: Realtime Client Sessions #7285 and #7399 * New experimental API: Text-to-Speech Client #7381 ### Changes to Experimental APIs * Hosted File Download Stream: write-path methods now explicitly throw `NotSupportedException` #7394 ## What's Changed ### AI * Add `ITextToSpeechClient` abstraction, middleware, and OpenAI implementation #7381 by @stephentoub * Realtime Client Proposal #7285 by @tarekgh * Add `VoiceActivityDetection` options to realtime session abstractions #7399 by @tarekgh * Make `UriContent` `mediaType` parameter optional with inference from URI file extension #7398 by @stephentoub (co-authored by @Copilot) * Emit `gen_ai.client.operation.exception` via `ILogger LoggerMessage` on OpenTelemetry instrumentation classes #7379 by @stephentoub (co-authored by @Copilot) * Support `invoke_workflow` as an equivalent parent span to `invoke_agent` in `FunctionInvokingChatClient` #7382 by @stephentoub (co-authored by @Copilot) * Make `HostedFileDownloadStream` explicitly read-only #7394 by @stephentoub (co-authored by @Copilot) ## Documentation Updates * Document JSON schema derivation for return types in AIFunctionFactory #7400 by @stephentoub (co-authored by @Copilot) ## Test Improvements * Fix test warnings #7369 by @jozkee * Add tests for JSON deserialization of serializable types #7373 by @stephentoub (co-authored by @Copilot) ## Repository Infrastructure Updates * Update Package Validation Baseline to 10.4.0 #7389 by @jeffhandley (co-authored by @Copilot) * Update ModelContextProtocol libraries to version 1.0.0 #7340 by @stephentoub (co-authored by @Copilot) ## Acknowledgements * @eiriktsarpalis @ericstj @CodeBlanch @lmolkova @adamsitnik @joperezr reviewed pull requests ... (truncated) ## 10.4.0 This release advances the AI abstractions with new hosted file, web search, and reasoning content types, stabilizes MCP and tool approval APIs, adds streaming latency metrics to OpenTelemetry instrumentation, and delivers bug fixes across caching, data ingestion, and resource monitoring. ## Experimental API Changes ### Now Stable * MCP Server Tool Content and Function Call Approval APIs are now stable (previously `MEAI001`) #7299 * `FakeLogCollector.GetLogsAsync(CancellationToken)` is now stable (previously `EXTEXP0003`) #7332 ### New Experimental APIs * New experimental `AddExtendedHttpClientLogging` overloads with `wrapHandlersPipeline` parameter (`EXTEXP0013`) #7231 ### Removed Experimental APIs * AI Tool Reduction experimental APIs removed (was experimental under `MEAI001`) #7353 ## What's Changed ### AI * Add IHostedFileClient and friends #7269 by @stephentoub * Add web search tool call content #7276 by @stephentoub (co-authored by @Copilot) * Surface OpenAI-compatible reasoning_content as TextReasoningContent #7295 by @stephentoub * MCP/Approvals/Tool Contents stabilization #7299 by @jozkee * Implement time_to_first_chunk and time_per_output_chunk streaming metrics in OpenTelemetryChatClient #7325 by @stephentoub (co-authored by @Copilot) * Add openai.api.type telemetry attribute to OpenAI IChatClient implementations #7316 by @stephentoub (co-authored by @Copilot) * Update OpenTelemetry Gen AI semantic conventions to v1.40 #7322 by @stephentoub (co-authored by @Copilot) * Fix tool definitions emission regardless of sensitivity setting #7346 by @stephentoub (co-authored by @Copilot) * Honor [Required] attribute in AI function parameter JSON schema generation #7272 by @stephentoub (co-authored by @Copilot) * AddAIContentType automatically registers content type against every base in the inheritance chain up to AIContent #7358 by @jozkee (co-authored by @Copilot) * Auto-mark server-handled FunctionCallContent as InformationalOnly #7314 by @stephentoub (co-authored by @Copilot) * Map ReasoningEffort.None and ExtraHigh to none and xhigh in OpenAI IChatClient implementations #7319 by @stephentoub (co-authored by @Copilot) * Handle DynamicMethod reflection limitations in AIFunctionFactory #7287 by @stephentoub (co-authored by @Copilot) * Fix Activity.Current nulled during streaming tool invocation #7321 by @flaviocdc (co-authored by @Copilot) * Handle FunctionCallOutputResponseItem in streaming response conversion #7307 by @stephentoub (co-authored by @Copilot) * Fix serialization of response continuation tokens #7356 by @stephentoub * Remove AI Tool Reduction experimental APIs #7353 by @stephentoub (co-authored by @Copilot) * Update OpenAI to 2.9.1 #7349 by @stephentoub ### Telemetry and Observability * Introduce support for the Gauge metric type #7203 by @rainsxng * Update logging source generator to support generic methods #7331 by @svick (co-authored by @Copilot) * Update logging source generator to match runtime PR #124589 (ref readonly/params/scoped) #7333 by @svick (co-authored by @Copilot) * Promote FakeLogCollector.GetLogsAsync(CancellationToken) from experimental to stable #7332 by @Demo30 * Remove obsolete CS1591 warning suppression from generated file preamble #7308 by @luissena ### HTTP Resilience and Diagnostics ... (truncated) ## 10.3.0 ## Experimental API Changes ### Now Stable * **`IChatReducer` interface** — graduated from experimental to stable. The interface is now stable; concrete implementations (`MessageCountingChatReducer`, `SummarizingChatReducer`, `ReducingChatClient`) remain experimental. #7235 by @jeffhandley * **`FunctionCallContent` and `FunctionResultContent` unsealed** — changed from `sealed class` to `class`, enabling derivation. #7229 by @stephentoub (co-authored by @Copilot) ### Breaking Changes to Experimental APIs * **Experimental diagnostic ID reorganization** — the blanket `MEAI001` diagnostic ID was split into feature-specific constants. OpenAI-specific experimental APIs now use `OPENAI001`, `OPENAI002`, or `SCME0001` instead of `MEAI001`. Consumers who suppressed `MEAI001` for OpenAI APIs may need to suppress `OPENAI001`/`OPENAI002` instead. #7116 by @jeffhandley (co-authored by @Copilot), #7235 by @jeffhandley ### New Experimental APIs * **Chat reduction implementations** — `MessageCountingChatReducer`, `SummarizingChatReducer`, `ReducingChatClient`, and `UseChatReducer` builder extension. #7235 by @jeffhandley * **OpenAI Responses/Assistants/Realtime/Image/Audio integrations** — assigned feature-specific experimental diagnostic IDs (`OPENAI001`, `OPENAI002`). #7235 by @jeffhandley * **`ImageGenerationToolCallContent` and `ImageGenerationToolResultContent`** — added to JSON serialization infrastructure. #7275 by @stephentoub (co-authored by @Copilot) ## What's Changed ### AI * Add ReasoningOptions to ChatOptions #7252 by @stephentoub (co-authored by @Copilot) * Add LoadFromAsync and SaveToAsync helper methods to DataContent #7159 by @stephentoub (co-authored by @Copilot) * Add FunctionCallContent.InformationalOnly property #7126, #7262 by @stephentoub (co-authored by @Copilot) * Add server tool call support to OpenTelemetryChatClient per semantic conventions #7240 by @stephentoub (co-authored by @Copilot) * Add ImageGenerationToolCallContent and ImageGenerationToolResultContent to JSON serialization infrastructure #7275 by @stephentoub (co-authored by @Copilot) * Add logging to FunctionInvokingChatClient for approval flow, error handling, and loop control #7228 by @stephentoub (co-authored by @Copilot) * Allow FunctionResultContent pass-through when CallId matches #7229 by @stephentoub (co-authored by @Copilot) * Remove AIFunctionDeclaration tools on last iteration in FunctionInvokingChatClient #7207 by @stephentoub (co-authored by @Copilot) * Propagate CachedInputTokenCount in OpenTelemetry telemetry #7234 by @stephentoub (co-authored by @Copilot) * Categorize MEAI001 experimental APIs #7116 by @jeffhandley (co-authored by @Copilot) * MEAI: Update Experimental / Preview Features #7235 by @jeffhandley * ToChatResponse: Merge AdditionalProperties into ChatMessage instead of ChatResponse #7194 by @stephentoub (co-authored by @Copilot) * Fix FunctionInvokingChatClient to respect ChatOptions.Tools modifications by function tools #7218 by @stephentoub (co-authored by @Copilot) * Fix FunctionInvokingChatClient invoke_agent span detection with exact match or space delimiter #7224 by @stephentoub (co-authored by @Copilot) * Fix approval request/response correlation in FunctionInvokingChatClient #7261 by @stephentoub (co-authored by @Copilot) * Fix DataUriParser to default to text/plain;charset=US-ASCII per RFC 2397 #7247 by @stephentoub (co-authored by @Copilot) * Fix NRT resolution for AIFunction parameters #7200 by @eiriktsarpalis * Preserve extra JSON schema properties in ToolJson serialization #7250 by @stephentoub (co-authored by @Copilot) * Fix token metric unit to use UCUM format {token} #7241 by @stephentoub * Fix OpenAI responses streaming to preserve encrypted reasoning content #7266 by @stephentoub * Update OpenAIResponsesChatClient to handle streaming code interpreter content #7267 by @stephentoub ### Diagnostics, Health Checks, and Resource Monitoring * [5752] FakeLogCollector waiting capabilities #6228 by @Demo30 * Bring new cpu.requests formula from Kubernetes #7239 by @amadeuszl ### Service Discovery ... (truncated) Commits viewable in [compare view](dotnet/extensions@v10.2.0...v10.5.0). </details> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Updated Microsoft.Extensions.Http.Resilience from 10.2.0 to 10.5.0.
Release notes
Sourced from Microsoft.Extensions.Http.Resilience's releases.
10.5.0
HTTP Logging Middleware APIs in
Microsoft.AspNetCore.Diagnostics.Middlewareare now stable. This release also transfersMicrosoft.Extensions.VectorData.AbstractionsandMicrosoft.Extensions.VectorData.ConformanceTestsfrom the Semantic Kernel repository into dotnet/extensions, jumping from 10.1.0 to 10.5.0 for consistent versioning. The release also delivers fixes across the AI libraries, AI Evaluation, and Service Discovery.Breaking Changes
VectorStoreVectorAttributeconstructor parameter #7460Dimensionsparameter was renamed todimensions(lowercase). This is a source-breaking change only — binary compatibility is preserved.new VectorStoreVectorAttribute(Dimensions: 1536), update it tonew VectorStoreVectorAttribute(dimensions: 1536).Experimental API Changes
Now Stable
EXTEXP0013):AddHttpLogEnricher<T>,IHttpLogEnricher, andRequestHeadersLogEnricherOptions.HeadersDataClasses#7380What's Changed
AI
Vector Data
AI Evaluation
ASP.NET Core Extensions
Service Discovery
Documentation Updates
Test Improvements
... (truncated)
10.4.1
This release of the Microsoft.Extensions.AI packages adds new experimental APIs for Realtime client sessions and Text-to-Speech, along with OpenTelemetry and middleware improvements.
Packages in this release
Experimental API Changes
New Experimental APIs
Changes to Experimental APIs
NotSupportedException#7394What's Changed
AI
ITextToSpeechClientabstraction, middleware, and OpenAI implementation #7381 by @stephentoubVoiceActivityDetectionoptions to realtime session abstractions #7399 by @tarekghUriContentmediaTypeparameter optional with inference from URI file extension #7398 by @stephentoub (co-authored by @Copilot)gen_ai.client.operation.exceptionviaILogger LoggerMessageon OpenTelemetry instrumentation classes #7379 by @stephentoub (co-authored by @Copilot)invoke_workflowas an equivalent parent span toinvoke_agentinFunctionInvokingChatClient#7382 by @stephentoub (co-authored by @Copilot)HostedFileDownloadStreamexplicitly read-only #7394 by @stephentoub (co-authored by @Copilot)Documentation Updates
Test Improvements
Repository Infrastructure Updates
Acknowledgements
... (truncated)
10.4.0
This release advances the AI abstractions with new hosted file, web search, and reasoning content types, stabilizes MCP and tool approval APIs, adds streaming latency metrics to OpenTelemetry instrumentation, and delivers bug fixes across caching, data ingestion, and resource monitoring.
Experimental API Changes
Now Stable
MEAI001) #7299FakeLogCollector.GetLogsAsync(CancellationToken)is now stable (previouslyEXTEXP0003) #7332New Experimental APIs
AddExtendedHttpClientLoggingoverloads withwrapHandlersPipelineparameter (EXTEXP0013) #7231Removed Experimental APIs
MEAI001) #7353What's Changed
AI
Telemetry and Observability
HTTP Resilience and Diagnostics
... (truncated)
10.3.0
Experimental API Changes
Now Stable
IChatReducerinterface — graduated from experimental to stable. The interface is now stable; concrete implementations (MessageCountingChatReducer,SummarizingChatReducer,ReducingChatClient) remain experimental. #7235 by @jeffhandleyFunctionCallContentandFunctionResultContentunsealed — changed fromsealed classtoclass, enabling derivation. #7229 by @stephentoub (co-authored by @Copilot)Breaking Changes to Experimental APIs
MEAI001diagnostic ID was split into feature-specific constants. OpenAI-specific experimental APIs now useOPENAI001,OPENAI002, orSCME0001instead ofMEAI001. Consumers who suppressedMEAI001for OpenAI APIs may need to suppressOPENAI001/OPENAI002instead. #7116 by @jeffhandley (co-authored by @Copilot), #7235 by @jeffhandleyNew Experimental APIs
MessageCountingChatReducer,SummarizingChatReducer,ReducingChatClient, andUseChatReducerbuilder extension. #7235 by @jeffhandleyOPENAI001,OPENAI002). #7235 by @jeffhandleyImageGenerationToolCallContentandImageGenerationToolResultContent— added to JSON serialization infrastructure. #7275 by @stephentoub (co-authored by @Copilot)What's Changed
AI
Diagnostics, Health Checks, and Resource Monitoring
Service Discovery
... (truncated)
Commits viewable in compare view.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)