deps: Bump the dotnet-dependencies group with 14 updates

[dependabot]

Updated Avalonia from 11.3.13 to 11.3.15.

Release notes

Sourced from Avalonia's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Avalonia.Desktop from 11.3.13 to 11.3.15.

Release notes

Sourced from Avalonia.Desktop's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Avalonia.Fonts.Inter from 11.3.13 to 11.3.15.

Release notes

Sourced from Avalonia.Fonts.Inter's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Avalonia.Themes.Fluent from 11.3.13 to 11.3.15.

Release notes

Sourced from Avalonia.Themes.Fluent's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Dock.Avalonia from 11.3.11.22 to 11.3.12.1.

Release notes

Sourced from Dock.Avalonia's releases.

11.3.12.1

Full Changelog: wieslawsoltes/Dock@v11.3.12...v11.3.12.1

11.3.12

What's Changed

• Drop Runtime netstandard2.0 Support from Dock by @​wieslawsoltes in Drop Runtime netstandard2.0 Support from Dock wieslawsoltes/Dock#1074
• fix: honor global.json in docs workflow by @​wieslawsoltes in fix: honor global.json in docs workflow wieslawsoltes/Dock#1076
• Use Avalonia-generated InitializeComponent by @​wieslawsoltes in Use Avalonia-generated InitializeComponent wieslawsoltes/Dock#1075
• Defer document and tool content materialization to the next dispatcher frame by @​wieslawsoltes in Defer document and tool content materialization to the next dispatcher frame wieslawsoltes/Dock#1086

Full Changelog: wieslawsoltes/Dock@v11.3.11.22...v11.3.12

11.3.12-preview.1

What's Changed

• Drop Runtime netstandard2.0 Support from Dock by @​wieslawsoltes in Drop Runtime netstandard2.0 Support from Dock wieslawsoltes/Dock#1074
• fix: honor global.json in docs workflow by @​wieslawsoltes in fix: honor global.json in docs workflow wieslawsoltes/Dock#1076
• Use Avalonia-generated InitializeComponent by @​wieslawsoltes in Use Avalonia-generated InitializeComponent wieslawsoltes/Dock#1075
• Defer document and tool content materialization to the next dispatcher frame by @​wieslawsoltes in Defer document and tool content materialization to the next dispatcher frame wieslawsoltes/Dock#1086

Full Changelog: wieslawsoltes/Dock@v11.3.11.22...v11.3.12-preview.1

Commits viewable in compare view.

Updated Dock.Model.Mvvm from 11.3.11.22 to 11.3.12.1.

Release notes

Sourced from Dock.Model.Mvvm's releases.

11.3.12.1

Full Changelog: wieslawsoltes/Dock@v11.3.12...v11.3.12.1

11.3.12

What's Changed

• Drop Runtime netstandard2.0 Support from Dock by @​wieslawsoltes in Drop Runtime netstandard2.0 Support from Dock wieslawsoltes/Dock#1074
• fix: honor global.json in docs workflow by @​wieslawsoltes in fix: honor global.json in docs workflow wieslawsoltes/Dock#1076
• Use Avalonia-generated InitializeComponent by @​wieslawsoltes in Use Avalonia-generated InitializeComponent wieslawsoltes/Dock#1075
• Defer document and tool content materialization to the next dispatcher frame by @​wieslawsoltes in Defer document and tool content materialization to the next dispatcher frame wieslawsoltes/Dock#1086

Full Changelog: wieslawsoltes/Dock@v11.3.11.22...v11.3.12

11.3.12-preview.1

What's Changed

• Drop Runtime netstandard2.0 Support from Dock by @​wieslawsoltes in Drop Runtime netstandard2.0 Support from Dock wieslawsoltes/Dock#1074
• fix: honor global.json in docs workflow by @​wieslawsoltes in fix: honor global.json in docs workflow wieslawsoltes/Dock#1076
• Use Avalonia-generated InitializeComponent by @​wieslawsoltes in Use Avalonia-generated InitializeComponent wieslawsoltes/Dock#1075
• Defer document and tool content materialization to the next dispatcher frame by @​wieslawsoltes in Defer document and tool content materialization to the next dispatcher frame wieslawsoltes/Dock#1086

Full Changelog: wieslawsoltes/Dock@v11.3.11.22...v11.3.12-preview.1

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.Binder from 10.0.5 to 10.0.8.

Release notes

Sourced from Microsoft.Extensions.Configuration.Binder's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.FileSystemGlobbing from 10.0.5 to 10.0.8.

Release notes

Sourced from Microsoft.Extensions.FileSystemGlobbing's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Hosting from 10.0.5 to 10.0.8.

Release notes

Sourced from Microsoft.Extensions.Hosting's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.3.0 to 18.5.1.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.5.1

What's Changed

• Fix System.Collections.Immutable binding mismatch in Common.dll (rel/18.5) by @​nohwnd in Fix System.Collections.Immutable binding mismatch in Common.dll (rel/18.5) microsoft/vstest#15720
• Port verify-binding-redirects.ps1 to rel/18.5 by @​nohwnd in Port verify-binding-redirects.ps1 to rel/18.5 microsoft/vstest#15719
• Bump to 18.5.1 by @​nohwnd in Bump to 18.5.1 microsoft/vstest#15721

Full Changelog: microsoft/vstest@v18.5.0...v18.5.1

18.5.0

⚠️ Unlisted on Nuget, because of #​15718

What's Changed

• Add runtime configs by @​nohwnd in Add runtime configs microsoft/vstest#15377
• Add net8.0 target for TranslationLayer by @​nohwnd in Add net8.0 target for TranslationLayer microsoft/vstest#15375
• Determine architecture of remote process on windows by @​nohwnd in Determine architecture of remote process on windows microsoft/vstest#15396
• Updating System.Collections.Immutable package reference to version 9.0.0 by @​MSLukeWest in Updating System.Collections.Immutable package reference to version 9.0.0 microsoft/vstest#15392
• Dump via netcore tool on windows by @​nohwnd in Dump via netcore tool on windows microsoft/vstest#15397
• Fix answer file splitting by @​nohwnd in Fix answer file splitting microsoft/vstest#15381
• Run tests against vsix runner by @​nohwnd in Run tests against vsix runner microsoft/vstest#15419

Full Changelog: microsoft/vstest@v18.4.0...v18.5.0

18.4.0

What's Changed

• Add LoongArch64 support by @​stdmnpkg in Add LoongArch64 support microsoft/vstest#15359

• Refactor Condition evaluation by @​Youssef1313 in Refactor Condition evaluation microsoft/vstest#15357

• Adding info on extensions points part 1 by @​nohwnd in Adding info on extensions points part 1 microsoft/vstest#15360

• Add option to ask for uploading code QL before the standard window ends by @​nohwnd in Add option to ask for uploading code QL before the standard window ends microsoft/vstest#15373

• Update runtime versions by @​nohwnd in Update runtime versions microsoft/vstest#15372

• Fix .NET 10 regression for traits by @​Youssef1313 in Fix .NET 10 regression for traits microsoft/vstest#15370

• Update target frameworks to net10.0 and net11.0 by @​dotnet-maestro[bot] in Update target frameworks to net10.0 and net11.0 microsoft/vstest#15349

• Fix names in pipeline matrix so we don't have to align them by @​nohwnd in Fix names in pipeline matrix so we don't have to align them microsoft/vstest#15365

• Update SECURITY.md by @​Youssef1313 in Update SECURITY.md microsoft/vstest#15342

New Contributors

• @​stdmnpkg made their first contribution in Add LoongArch64 support microsoft/vstest#15359

Full Changelog: microsoft/vstest@v18.3.0...v18.4.0

Commits viewable in compare view.

Updated ModelContextProtocol from 1.2.0 to 1.3.0.

Release notes

Sourced from ModelContextProtocol's releases.

1.3.0

v1.3.0 focuses on improved transport diagnostics and security-focused documentation. The new public ClientTransportClosedException gives stdio and HTTP clients structured access to transport closure details (exit codes, process IDs, stderr tails, HTTP status codes) without parsing exception messages. Two reliability fixes harden the stdio process pipeline (preventing host crashes from user StandardErrorLines callbacks) and correct the stateless HTTP transport's capability advertisement. New conceptual documentation covers role/identity propagation in tool execution, allowed-hosts and CORS guidance for HTTP servers, and aligns the docs information architecture with the MCP specification structure.

What's Changed

• Make ClientTransportClosedException public and unify transport exception handling #​1467 by @​stephentoub (co-authored by @​halter73 @​Copilot)
  • As part of this unification, SSE/HTTP client connection failures from McpClient.CreateAsync(...) now surface as IOException (the new ClientTransportClosedException derives from IOException) rather than InvalidOperationException. Caller-triggered OperationCanceledException is also no longer wrapped, matching standard async cancellation semantics.
• Fix process crash when testing Stderr #​1449 by @​ericstj (co-authored by @​Copilot)
• Fix stateless HTTP transport advertising listChanged capability #​1509 by @​jayaraman-venkatesan

Documentation Updates

• docs: align docs IA with MCP specification structure #​1481 by @​jeffhandley (co-authored by @​mikekistler @​Copilot)
• Document recommended pattern for role/identity propagation in MCP tool execution #​1497 by @​jeffhandley (co-authored by @​halter73 @​mikekistler @​Copilot)
• Document and demonstrate allowed hosts and CORS policy guidance #​1554 by @​jeffhandley (co-authored by @​halter73 @​mikekistler @​Copilot)

Test Improvements

• Fix flaky OutgoingFilter_MultipleFilters_ExecuteInOrder test #​1488 by @​ericstj (co-authored by @​Copilot)

Repository Infrastructure Updates

• Bump the opentelemetry-testing group with 5 updates #​1478
• Bump actions/deploy-pages from 4.0.5 to 5.0.0 #​1477
• Bump actions/download-artifact from 8.0.0 to 8.0.1 #​1437
• Bump actions/setup-dotnet from 5.1.0 to 5.2.0 #​1418
• Bump actions/setup-node from 6.2.0 to 6.3.0 #​1419
• Bump the testing-frameworks group with 1 update #​1459
• Bump the npm_and_yarn group across 1 directory with 2 updates #​1410
• Switch to custom CodeQL workflow #​1489 by @​jeffhandley
• Block Release Publishing workflow from automatically running on forks #​1450 by @​jeffhandley (co-authored by @​Copilot)
• Bump actions/checkout from 4 to 6 #​1504
• Add testing guidelines, update copilot instructions for tests #​1507 by @​ericstj
• Bump OpenTelemetry and 3 others #​1514
• Bump the opentelemetry-testing group with 6 updates #​1533
• Bump actions/setup-node from 6.3.0 to 6.4.0 #​1522
• Bump actions/upload-pages-artifact from 4.0.0 to 5.0.0 #​1511
• Bump the npm_and_yarn group across 1 directory with 5 updates #​1500
• Bump Anthropic from 12.9.0 to 12.11.0 #​1506
• Bump actions/upload-artifact from 7.0.0 to 7.0.1 #​1512
• Bump danielpalme/ReportGenerator-GitHub-Action from 5.5.4 to 5.5.5 #​1521
• Bump the testing-frameworks group with 2 updates #​1523
• Bump the other-testing group with 2 updates #​1534
• Bump Microsoft.Extensions.AI from 10.4.1 to 10.5.0 #​1525
• Remove extraneous labels from dependabot.yml #​1535 by @​mikekistler
• Bump Anthropic from 12.11.0 to 12.17.0 #​1544
• Fix dev container configuration to work in codespaces #​1555 by @​mikekistler
• Bump Microsoft.NET.Test.Sdk from 18.4.0 to 18.5.1 #​1543
• Bump the npm_and_yarn group across 1 directory with 3 updates #​1565
• Bump Microsoft.Extensions.AI.Abstractions from 10.5.0 to 10.5.2 #​1561

... (truncated)

Commits viewable in compare view.

Updated SharpCompress from 0.47.4 to 0.48.1.

Release notes

Sourced from SharpCompress's releases.

0.48.1

What's Changed

• release test cleanup by @​adamhathcock in release test cleanup adamhathcock/sharpcompress#1322
• Fix GZip write async by @​adamhathcock in Fix GZip write async adamhathcock/sharpcompress#1320

Full Changelog: adamhathcock/sharpcompress@0.48.0...0.48.1

0.48.0

Getting some fixes out to prep for bigger release - async writing might still not work on non-async streams

What's Changed

• Fix SevenZipArchive.IsSolidAsync() always returning false by @​Copilot in Fix SevenZipArchive.IsSolidAsync() always returning false adamhathcock/sharpcompress#1284
• Fix sync methods called in async RAR unpacker paths (Unpack29Async, U… by @​adamhathcock in Fix sync methods called in async RAR unpacker paths (Unpack29Async, U… adamhathcock/sharpcompress#1306
• Reported Zip Slip fix adamhathcock/sharpcompress#1313

Full Changelog: adamhathcock/sharpcompress@0.47.4...0.48.0

Commits viewable in compare view.

Updated Spectre.Console from 0.55.0 to 0.55.2.

Release notes

Sourced from Spectre.Console's releases.

0.55.2

What's Changed

• Support variation selectors, ZWJ sequences and surrogate pairs in length calculation by @​fabsenet in support variation selectors, ZWJ sequences and surrogate pairs in length calculation spectreconsole/spectre.console#2082
• Add default value to selection prompt and multiselection prompt by @​AntekOlszewski in add default value to selection prompt and multiselection prompt spectreconsole/spectre.console#2079

New Contributors

• @​fabsenet made their first contribution in support variation selectors, ZWJ sequences and surrogate pairs in length calculation spectreconsole/spectre.console#2082

Full Changelog: spectreconsole/spectre.console@0.55.1...0.55.2

0.55.1

What's Changed

• Add tests to verify public API by @​patriksvensson in Add tests to verify public API spectreconsole/spectre.console#2073
• use StringComparer.OrdinalIgnoreCase as default comparer for TextPrompt by @​AntekOlszewski in use StringComparer.OrdinalIgnoreCase as default comparer for TextPrompt spectreconsole/spectre.console#2077
• Fix markup link rendering regression by @​patriksvensson in Fix markup link rendering regression spectreconsole/spectre.console#2084
• Add VS16 suffix to non-presentation emojis by @​patriksvensson in Add VS16 suffix to non-presentation emojis spectreconsole/spectre.console#2087
• Ensure rendered exceptions take up minimal space by @​patriksvensson in Ensure rendered exceptions take up minimal space spectreconsole/spectre.console#2089
• Fix link parsing to terminate properly by @​zhuman in Fix link parsing to terminate properly spectreconsole/spectre.console#2091

New Contributors

• @​zhuman made their first contribution in Fix link parsing to terminate properly spectreconsole/spectre.console#2091

Full Changelog: spectreconsole/spectre.console@0.55.0...0.55.1

Commits viewable in compare view.

Updated System.CommandLine from 2.0.5 to 2.0.8.

Release notes

Sourced from System.CommandLine's releases.

No release notes found for this version range.

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: nuget. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.