Update dotnet monorepo (major)

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@microsoft/signalr (source)	^8.0.0 → ^10.0.0
Microsoft.AspNetCore.Identity.EntityFrameworkCore (source)	9.0.4 → 10.0.2
Microsoft.AspNetCore.Mvc.NewtonsoftJson (source)	9.0.4 → 10.0.2
Microsoft.AspNetCore.Mvc.Razor.RuntimeCompilation (source)	9.0.4 → 10.0.2
Microsoft.AspNetCore.OpenApi (source)	9.0.4 → 10.0.2
Microsoft.AspNetCore.SignalR.Client (source)	9.0.4 → 10.0.2
Microsoft.AspNetCore.SignalR.Common (source)	9.0.4 → 10.0.2
Microsoft.AspNetCore.SignalR.StackExchangeRedis (source)	9.0.4 → 10.0.2
Microsoft.Bcl.Numerics (source)	9.0.4 → 10.0.2
Microsoft.CodeAnalysis.CSharp	4.13.0 → 5.0.0
Microsoft.Extensions.ApiDescription.Server (source)	9.0.4 → 10.0.2
Microsoft.Extensions.Caching.StackExchangeRedis (source)	9.0.4 → 10.0.2
Microsoft.Extensions.Configuration (source)	9.0.4 → 10.0.2
Microsoft.Extensions.Configuration.Json (source)	9.0.4 → 10.0.2
Microsoft.Extensions.Configuration.UserSecrets (source)	9.0.4 → 10.0.2
Microsoft.Extensions.DependencyInjection (source)	9.0.4 → 10.0.2
Microsoft.Extensions.FileProviders.Embedded (source)	9.0.4 → 10.0.2
Microsoft.Extensions.FileProviders.Physical (source)	9.0.4 → 10.0.2
Microsoft.Extensions.Hosting (source)	9.0.4 → 10.0.2
Microsoft.Extensions.Http (source)	9.0.4 → 10.0.2
Microsoft.Extensions.Http.Resilience (source)	9.4.0 → 10.2.0
Microsoft.Extensions.Logging (source)	9.0.4 → 10.0.2
Microsoft.Extensions.Logging.Console (source)	9.0.4 → 10.0.2
Microsoft.Extensions.Options (source)	9.0.4 → 10.0.2
Microsoft.Extensions.Options.ConfigurationExtensions (source)	9.0.4 → 10.0.2
Microsoft.Extensions.Primitives (source)	9.0.4 → 10.0.2
Microsoft.Extensions.ServiceDiscovery (source)	9.3.0 → 10.2.0
Microsoft.Extensions.ServiceDiscovery.Abstractions (source)	9.3.0 → 10.2.0
Microsoft.Extensions.ServiceDiscovery.Dns (source)	9.3.0 → 10.2.0
Microsoft.Extensions.ServiceDiscovery.Yarp (source)	9.3.0 → 10.2.0
Microsoft.Maui.Essentials	9.0.60 → 10.0.31
Microsoft.SourceLink.GitHub	8.0.0 → 10.0.102
Microsoft.XmlSerializer.Generator (source)	9.0.4 → 10.0.2
System.Composition (source)	9.0.4 → 10.0.2
System.Configuration.ConfigurationManager (source)	9.0.4 → 10.0.2
System.Diagnostics.EventLog (source)	9.0.4 → 10.0.2
System.Diagnostics.PerformanceCounter (source)	9.0.4 → 10.0.2
System.Drawing.Common (source)	9.0.4 → 10.0.2
System.IO.Hashing (source)	9.0.4 → 10.0.2
System.IO.Pipelines (source)	9.0.4 → 10.0.2
System.Management (source)	9.0.4 → 10.0.2
System.Net.Http.Json (source)	9.0.4 → 10.0.2
System.Security.Cryptography.ProtectedData (source)	9.0.4 → 10.0.2
System.Text.Json (source)	9.0.4 → 10.0.2

---

Release Notes

dotnet/aspnetcore (@​microsoft/signalr)

v10.0.0: .NET 10.0

Compare Source

Release

What's Changed

• [release/10.0] [Blazor] Increment MaxItemCount when OverscanCount > MaxItemCount by @​github-actions[bot] in #​63767
• [release/10.0] Load handler DLL with load dir on the path by @​github-actions[bot] in #​63781
• [automated] Merge branch 'release/10.0-rc2' => 'release/10.0' by @​github-actions[bot] in #​63802
• [release/10.0] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in #​63806
• [release/10.0] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in #​63837
• [release/10.0] Update dependencies from dotnet/extensions by @​dotnet-maestro[bot] in #​63861
• [release/10.0] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in #​63853
• [release/10.0] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in #​63880
• [release/10.0] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in #​63890
• [release/10.0] Fix ANCM Install path for WOW64 by @​wtgodbe in #​63899
• [release/10.0] Loc update by @​wtgodbe in #​63907
• [release/10.0] Add loc strings for license hyperlinks by @​github-actions[bot] in #​63908
• [release/10.0] Fix fetch request in data-enhance-nav="false" for same-page anchors by @​github-actions[bot] in #​63915
• [release/10.0] Update dependencies from dnceng/internal/dotnet-optimization by @​dotnet-maestro[bot] in #​63930
• [release/10.0] Exclude Microsoft.Extensions.FileProviders.Embedded from pruning by @​github-actions[bot] in #​63939
• [release/10.0] (http2): Lower WINDOWS_UPDATE received on (half)closed stream to stream abortion by @​github-actions[bot] in #​63885
• [release/10.0] Fix formatting for hosting bundle helptext by @​github-actions[bot] in #​63948
• [release/10.0] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in #​63959
• [release/10.0] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in #​63983
• [release/10.0] Fix hot reload for Blazor route changes by @​github-actions[bot] in #​63976
• [release/10.0] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in #​64000
• [release/10.0] [Blazor][HotReload] Capture the execution context before calling RenderRootComponentsOnHotReload by @​github-actions[bot] in #​63847
• [release/10.0] Pages that are re-executed should allow interactivity by @​github-actions[bot] in #​63978
• [release/10.0] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in #​64022
• [release/10.0] Localized file check-in by OneLocBuild Task: Build definition ID 1159: Build ID 2814832 by @​github-actions[bot] in #​64030
• [release/10.0] Fix chunked request parsing by @​github-actions[bot] in #​64038
• [release/10.0] Add UrlFormat to ObsoleteAttribute for ASPDEPR diagnostics by @​github-actions[bot] in #​64018
• [release/10.0] Allow UserStore to update passkey name by @​github-actions[bot] in #​64014
• [release/10.0] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in #​64043
• [release/10.0] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in #​64070
• [release/10.0] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in #​64080

Full Changelog: dotnet/aspnetcore@v10.0.0-rc.2.25502.107...v10.0.0

v9.0.6

Compare Source

Bug Fixes

• Forwarded Headers Middleware: Ignore X-Forwarded-Headers from Unknown Proxy (#​61622)
  The Forwarded Headers Middleware now ignores X-Forwarded-Headers sent from unknown proxies. This change improves security by ensuring that only trusted proxies can influence forwarded header values, preventing potential spoofing or misrouting issues.

Dependency Updates

• Bump src/submodules/googletest from 52204f7 to 04ee1b4 (#​61762)
  Updates the GoogleTest submodule to a newer commit, bringing in the latest improvements and bug fixes from the upstream project.
• Update dependencies from dotnet/arcade (#​61714)
  Updates internal build and infrastructure dependencies from the dotnet/arcade repository, ensuring compatibility and access to the latest build tools.
• Update dependencies from dotnet/extensions (#​61571)
  Refreshes dependencies from the dotnet/extensions repository, incorporating the latest features and fixes from the extensions libraries.
• Update dependencies from dotnet/extensions (#​61877)
  Further updates dependencies from dotnet/extensions, ensuring the project benefits from recent improvements and bug fixes.
• Update dependencies from dotnet/arcade (#​61892)
  Additional updates to build and infrastructure dependencies from dotnet/arcade, maintaining up-to-date tooling and build processes.

Miscellaneous

• Update branding to 9.0.6 (#​61831)
  Updates the project version and branding to 9.0.6, reflecting the new release and ensuring version consistency across the codebase.
• Merging internal commits for release/9.0 (#​61925)
  Incorporates various internal commits into the release/9.0 branch, ensuring that all relevant changes are included in this release.

---

This summary is generated and may contain inaccuracies. For complete details, please review the linked pull requests.

Full Changelog: v9.0.5...v9.0.6

v8.0.17

Compare Source

Bug Fixes

• Forwarded Headers Middleware: Ignore X-Forwarded-Headers from Unknown Proxy (#​61623)
  The Forwarded Headers Middleware now ignores X-Forwarded-Headers sent from unknown proxies. This change improves security by ensuring that only trusted proxies can influence the forwarded headers, preventing potential spoofing or misrouting of requests.

Dependency Updates

• Update dependencies from dotnet/arcade (#​61832)
  This update brings in the latest changes from the dotnet/arcade repository, ensuring that ASP.NET Core benefits from recent improvements, bug fixes, and security patches in the shared build infrastructure.

• Bump src/submodules/googletest from 52204f7 to 04ee1b4 (#​61761)
  The GoogleTest submodule has been updated to a newer commit, providing the latest testing features, bug fixes, and performance improvements for the project's C++ test components.

Miscellaneous

• Update branding to 8.0.17 (#​61830)
  The project version branding has been updated to reflect the new 8.0.17 release, ensuring consistency across build outputs and documentation.

• Merging internal commits for release/8.0 (#​61924)
  This change merges various internal commits into the release/8.0 branch, incorporating minor fixes, documentation updates, and other non-user-facing improvements to keep the release branch up to date.

---

This summary is generated and may contain inaccuracies. For complete details, please review the linked pull requests.

Full Changelog: dotnet/aspnetcore@v8.0.16...v8.0.17

dotnet/dotnet (Microsoft.AspNetCore.Identity.EntityFrameworkCore)

v10.0.2

v10.0.1

v9.0.7: .NET 9.0.7

You can build .NET 9.0 from the repository by cloning the release tag v9.0.7 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

v9.0.6: .NET 9.0.6

You can build .NET 9.0 from the repository by cloning the release tag v9.0.6 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

v9.0.5: .NET 9.0.5

You can build .NET 9.0 from the repository by cloning the release tag v9.0.5 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

dotnet/extensions (Microsoft.Extensions.Http.Resilience)

v10.2.0

What's Changed

• Bump version to 10.2.0 for next development cycle by @​Copilot in #​7105
• Add unit parameter to metric source generator by @​mariamgerges in #​7099
• [main] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​7111
• Fix expected conversation length in SummarizingChatReducer integration tests by @​MackinnonBuck in #​7119
• Fix build status badge in README.md by @​akoeplinger in #​7118
• Update AI changelogs for 10.1.0 by @​stephentoub in #​7123
• Merging internal changes into release/10.1 branch by @​joperezr in #​7127
• Bump glob from 11.0.1 to 11.1.0 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript by @​dependabot[bot] in #​7052
• Fix markdown parser crash on inline HTML elements by @​Copilot in #​7131
• Fix IndexOutOfRangeException when parsing markdown tables without trailing pipes by @​Copilot in #​7133
• Merging changes from release/10.1 into main by @​joperezr in #​7128
• Remove nuget.exe by @​ericstj in #​7138
• Augment UsageDetails with cached / reasoning token counts by @​stephentoub in #​7122
• Expose ctors for setting AdditionalProperties on Hosted tools by @​stephentoub in #​7120
• Update to OpenAI 2.8.0 by @​stephentoub in #​7136
• Add DocumentTokenChunker by @​KrystofS in #​7093
• Skip tests by default in internal rolling builds by @​Copilot in #​7151
• Fix FunctionApprovalResponseContent to message mapping by @​PederHP in #​7152
• [main] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​7155
• Add support for custom headers in HostedMcpServerTool by @​echapmanFromBunnings in #​7053
• AmbientMetadata.Build - release to GA by @​evgenyfedorov2 in #​7161
• Overhaul project template builds and testing by @​jeffhandley in #​7113
• Update Microsoft.Agents.AI.ProjectTemplates to latest Agent Framework by @​jeffhandley in #​7167
• Introduce local vs. remote mcpserver template option by @​jeffhandley in #​7168
• Fix rolling build pipeline by @​jeffhandley in #​7171
• Add Reason property to FunctionApprovalResponseContent for custom rejection messages by @​Copilot in #​7140
• [main] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​7180
• Fix ToChatResponse to use first appropriate CreatedAt instead of last by @​Copilot in #​7193
• Add support for InputImageUrl via reflection in OpenAIResponsesChatClient by @​Copilot in #​7195

New Contributors

• @​mariamgerges made their first contribution in #​7099
• @​akoeplinger made their first contribution in #​7118
• @​PederHP made their first contribution in #​7152
• @​echapmanFromBunnings made their first contribution in #​7053

Full Changelog: dotnet/extensions@v10.1...v10.2.0

v10.0.0

What's Changed

• Give FunctionInvokingChatClient span a more OTELy name by @​verdie-g in #​6911
• Update repository branding from 9.10 to 10.0 by @​Copilot in #​6907
• Clean up local function names in AIFunctionFactory by @​Copilot in #​6909
• Update OpenTelemetryChatClient to output data on all tools by @​stephentoub in #​6906
• Update ToChatResponse{Async} to also factor in AuthorName by @​stephentoub in #​6910
• add support for background responses by @​SergeyMenshykh in #​6854
• Fix METGEN004 error message: print return type in ErrorInvalidMethodReturnType by @​eduherminio in #​6905
• Fix OpenTelemetryChatClient failing on unknown content types by @​stephentoub in #​6915
• Add support for Connector ID and other follow ups by @​jozkee in #​6881
• Update AI lib changelogs by @​stephentoub in #​6920
• Merge internal changes by @​joperezr in #​6921
• Add Workstream, Stage, and PackageValidationBaselineVersion metadata to ServiceDiscovery libraries by @​Copilot in #​6919
• Add back Uri ctor to HostedMcpServerTool by @​jozkee in #​6926
• Set DisableNETStandardCompatErrors in ServiceDiscovery libraries by @​eerhardt in #​6927
• Update Package validation baseline version to 9.10.0 by @​Copilot in #​6922
• [main] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​6802
• Extend service discovery to support Consul-based DNS lookups: by @​bart-vmware in #​6914
• Update AsOpenAIResponseItems to roundtrip User AIContent ResponseItems by @​stephentoub in #​6931
• Special-case AIContent returned from AIFunctionFactory.Create AIFunctions to not be serialized by @​stephentoub in #​6935
• Preserve function content in SummarizingChatReducer by @​MackinnonBuck in #​6908
• Tool reduction by @​MackinnonBuck in #​6781
• Fix coalescing of TextReasoningContent with ProtectedData by @​stephentoub in #​6936
• Doc updates by @​gewarren in #​6930
• Support DisplayNameAttribute for name resolution in AI libraries by @​Copilot in #​6942
• Fix EquivalenceEvaluator MaxOutputTokens to meet Azure OpenAI minimum requirement by @​Copilot in #​6948
• Support DefaultValueAttribute in AIFunctionFactory parameter handling by @​Copilot in #​6947
• Bump vite from 6.3.6 to 6.4.1 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript by @​dependabot[bot] in #​6938
• Introduce Microsoft.Extensions.DataIngestion.Abstractions by @​adamsitnik in #​6949
• Update to latest schema version (accepted by MCP registry) by @​joelverhagen in #​6956
• Introduce IngestionChunkWriter build on top of MEVD by @​adamsitnik in #​6951
• Update AI Chat Web dependencies by @​MackinnonBuck in #​6955
• Add AITool -> OpenAI.Responses.ResponseTool conversion utility by @​rogerbarreto in #​6958
• Update AI changelogs for 9.10.1 by @​stephentoub in #​6950
• Add Name property to OtelMessage to store ChatMessage.AuthorName per OpenTelemetry semantic conventions by @​Copilot in #​6953
• Fix serialization of UserInputRequest/ResponseContent by @​stephentoub in #​6962
• Expose building blocks for external service discovery implementations by @​bart-vmware in #​6946
• Bump validator from 13.15.0 to 13.15.20 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript by @​dependabot[bot] in #​6974
• Add eng/sdl-tsa-vars.config for TSA integration by @​Copilot in #​6980
• Add CodeInterpreterToolCall/ResultContent content types by @​stephentoub in #​6964
• Update to 1.38 of the otel genai standard convention by @​stephentoub in #​6981
• Introduce set of built-in Enrichers by @​adamsitnik in #​6957
• Allow ChatOptions.ConversationId to be an OpenAI conversation ID with Responses by @​stephentoub in #​6960
• Fix warning breaking official build, enable warningAsError in all pipelines by @​ericstj in #​6988
• Introduce HeaderChunker by @​adamsitnik in #​6979
• Introduce Markdown readers by @​adamsitnik in #​6969
• Add usage telemetry for aieval dotnet tool by @​shyamnamboodiripad in #​6773
• Update to OpenAI 2.6.0 by @​stephentoub in #​6996
• Don't specify MaxOutputTokens for EquivalenceEvaluator by @​shyamnamboodiripad in #​7006
• Fix Assert.Throws to validate parameter names by @​stephentoub in #​7007
• [MEDI] Remove collection key type workaround by @​adamsitnik in #​7010
• Enable binskim to extract packages by @​ericstj in #​6989
• Added net10.0 targeting to all packages and flowed RC2 dependency versions. by @​joperezr in #​6995
• [MEDI] Pipeline by @​adamsitnik in #​6993
• Add Semantic Similarity chunker by @​KrystofS in #​6994

New Contributors

• @​SergeyMenshykh made their first contribution in #​6854
• @​bart-vmware made their first contribution in #​6914

Full Changelog: dotnet/extensions@v9.10.0...v10.0.0

v9.10.0

What's Changed

• Branding updates for 9.10 by @​Copilot in #​6769
• Doc improvements by @​gewarren in #​6794
• Bump vite from 6.3.5 to 6.3.6 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript by @​dependabot[bot] in #​6793
• Updated changelogs for AI libs by @​stephentoub in #​6787
• Update MCP server template by @​jeffkl in #​6772
• Add support for using ConversationID for AzureOpenAI and OpenAI by @​ViveliDuCh in #​6770
• Merging internal commits by @​joperezr in #​6801
• Merge changes from release/9.9 branch by @​joperezr in #​6803
• Support keyed HybridCache with keyed DistributedCaches and named options by @​kelly-yinn in #​6694
• Inventory as code by @​wtgodbe in #​6820
• Increase output token limit for EquivalenceEvaluator by @​shyamnamboodiripad in #​6835
• Fix KeyNotFoundException on HttpRequestLatencyListener.OnEventWritten for uknown event sources by @​ssmelov in #​6821
• Add project name normalization to match aspire's code generator logic by @​ViveliDuCh in #​6818
• Disable really noisy analyzers, part 1 by @​stephentoub in #​6837
• Fix KeyNotFoundException in HttpRequestLatencyListener.OnEventWritten by @​pentp in #​6823
• Update global.json to use .NET 9.0.0 stable instead of RC 1 by @​Copilot in #​6846
• Add measures and tags with mediator object to the HttpClientLatencyLogEnricher by @​rainsxng in #​6783
• Add comprehensive .github/copilot-instructions.md for dotnet/extensions repository by @​Copilot in #​6792
• Update to .NET 10 SDK by @​eerhardt in #​6863
• Update Microsoft.Extensions.AI changelog files with current NuGet versions by @​Copilot in #​6849
• Fix GenerateImagesAsync_SingleImageGeneration integration test by @​stephentoub in #​6843
• Re-enable IDE0032 by @​stephentoub in #​6866
• Add OpenTelemetrySpeechToTextClient and friends by @​stephentoub in #​6845
• Update ModelContextProtocol version in MCP template by @​MackinnonBuck in #​6870
• Scope Ollama resilience settings to Web/Program.cs and restore ServiceDefaults by @​ViveliDuCh in #​6850
• Update Aspire by @​Varorbc in #​6858
• Update MCP template for new registry specification by @​Copilot in #​6796
• Add support for HostApplicationBuilder in AmbientMetadata extension by @​eduherminio in #​6867
• Fix mcpserver test baselines by @​jeffhandley in #​6874
• Move Microsoft.Extensions.ServiceDiscovery to dotnet/extensions by @​eerhardt in #​6868
• Add copy constructors to option types (ChatOptions, etc.) by @​stephentoub in #​6882
• Fix ChatMessage.CreatedAt being always overwritten by the latest timestamp. by @​Copilot in #​6885
• Small doc fixes by @​gewarren in #​6887
• Update AI changelogs with some recent additions by @​stephentoub in #​6886
• Fix Assistants IChatClient handling of unrelated tool calls in history by @​stephentoub in #​6891
• Fix duplication between OpenAI Assistants pre-configured tools by @​stephentoub in #​6896
• Update MCP Server Template to adhere to 2025-09-29 server.json schema by @​joelverhagen in #​6888
• Remove Azure.AI.OpenAI dependency from templates and tests by @​Copilot in #​6873
• Remove UnsafeRelaxedJsonEscaping by @​peterwald in #​6899
• Fix bug to yield remaining buffered FCC by @​westey-m in [#​6903](https://redirect.github.com/dotnet/extensions/pull/690

---

Configuration

📅 Schedule: Branch creation - "before 1am,before 5am,before 9am" in timezone Asia/Shanghai, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.