Bump the nuget-dependencies group with 8 updates

[dependabot]

Updated DemaConsulting.ApiMark.MSBuild from 0.5.1 to 0.5.3.

Release notes

Sourced from DemaConsulting.ApiMark.MSBuild's releases.

0.5.3

Build Report

Version Information

Field	Value
Version	0.5.3
Commit Hash	1f285d799e78e387db43e8361b0a29310b8e16dc
Previous Version	0.5.2
Previous Commit Hash	9fb4de4ffd3d39b3432ea048ffeaef8e14e3e202

Changes

• #​48 - Render compile-time constant values in C# and C++ emitters
• #​49 - Fix orphaned requirement and bound clang subprocess timeout

Bugs Fixed

• N/A

Dependency Updates

• N/A

0.5.2

Build Report

Version Information

Field	Value
Version	0.5.2
Commit Hash	9fb4de4ffd3d39b3432ea048ffeaef8e14e3e202
Previous Version	0.5.1
Previous Commit Hash	7c484310edd424fc1c0c48fdcedd71a5f439aeaa

Changes

• #​46 - Exclude compiler-generated nested types at --visibility All
• #​47 - Exclude compiler-generated implicit default constructors from --enforce-docs

Bugs Fixed

• N/A

Dependency Updates

• N/A

Commits viewable in compare view.

Updated DemaConsulting.CanvasNet from 0.1.0-beta.3 to 0.1.0-beta.8.

Release notes

Sourced from DemaConsulting.CanvasNet's releases.

0.1.0-beta.8

Build Report

Version Information

Field	Value
Version	0.1.0-beta.8
Commit Hash	762cb3fc4ed5871f7ae31b35adafdf119d208821
Previous Version	0.1.0-beta.7
Previous Commit Hash	3498c3ed17ed69013b19b4dcbbc8b6add77439b3

Changes

• #​36 - Fix: resolve AGL underscore ligature glyph names (f_i/f_l/f_f/...)

Bugs Fixed

• N/A

Dependency Updates

• N/A

0.1.0-beta.7

Build Report

Version Information

Field	Value
Version	0.1.0-beta.7
Commit Hash	3498c3ed17ed69013b19b4dcbbc8b6add77439b3
Previous Version	0.1.0-beta.6
Previous Commit Hash	3c033187b39e22f53136683650c08c244ce1b292

Changes

• #​35 - Fix Type1/CFF simple-font glyph lookup for custom /Differences names

Bugs Fixed

• N/A

Dependency Updates

• N/A

0.1.0-beta.6

Build Report

Version Information

Field	Value
Version	0.1.0-beta.6
Commit Hash	3c033187b39e22f53136683650c08c244ce1b292
Previous Version	0.1.0-beta.5
Previous Commit Hash	c9baf307b3a9aa56ec44c04903a3830f71ee6e22

Changes

• #​32 - Pack NuGet output to a flat packages folder
• #​34 - Fix PDF linear-scan crash and add configurable render background

Bugs Fixed

• N/A

Dependency Updates

• N/A

0.1.0-beta.5

Build Report

Version Information

Field	Value
Version	0.1.0-beta.5
Commit Hash	c9baf307b3a9aa56ec44c04903a3830f71ee6e22
Previous Version	0.1.0-beta.4
Previous Commit Hash	3700a829f17e3bb012024ef8816d106f74e0f7cd

Changes

• #​30 - Split SVG codec into DemaConsulting.CanvasNet.Svg package
• #​31 - Add PDF document rendering support (DemaConsulting.CanvasNet.Pdf)

Bugs Fixed

• N/A

Dependency Updates

• N/A

0.1.0-beta.4

Build Report

Version Information

Field	Value
Version	0.1.0-beta.4
Commit Hash	3700a829f17e3bb012024ef8816d106f74e0f7cd
Previous Version	0.1.0-beta.3
Previous Commit Hash	c23538789d009c34333f509039a15c86415203c6

Changes

• #​20 - Fix CodeQL and SonarCloud findings repo-wide
• #​21 - Clean up README: shorten feature bullets, add block comments to examples
• #​22 - Add GIF frame count to ImageInfo
• #​23 - Add SVG marker, filter, and font-weight/style matching support
• #​24 - Split SvgCodec.cs into partial-class files under Codecs/Svg/
• #​25 - Split Jpeg/Png/Tiff/Gif codecs into partial-class files
• #​26 - Implement group-level SVG filtering (g/symbol/use)
• #​29 - SVG rendering completeness: preserveAspectRatio, clipPath/mask, patterns, image, full filter primitives, CSS styling, feBlend

Bugs Fixed

• N/A

Dependency Updates

• #​27 - Build(deps): Bump github/codeql-action from 4.38.1 to 4.38.2 in the github-actions-dependencies group
• #​28 - Bump the nuget-dependencies group with 3 updates

Commits viewable in compare view.

Updated demaconsulting.pandoctool from 3.11.0 to 3.12.0.

Release notes

Sourced from demaconsulting.pandoctool's releases.

3.12.0

What's Changed

• Bump the nuget-dependencies group with 1 update by @​dependabot[bot] in Bump the nuget-dependencies group with 1 update PandocTool#24

Full Changelog: demaconsulting/PandocTool@3.10.1...3.12.0

Commits viewable in compare view.

Updated Microsoft.Agents.AI from 1.22.0 to 1.23.0.

Release notes

Sourced from Microsoft.Agents.AI's releases.

1.23.0

Changes:

• be01deccaf3dd7b85e03620145bc1a757c857827 .NET: Add origin pinning to Foundry toolbox MCP client (#​8721)
• 0d6d2bb6b0b58f3aabdf170320ab90fc300d4c99 .NET: fix: declarative workflow http variables (#​8797)
• 2024d4df4c4dd01b904fb9daaf56f5759801654a .NET: Fix workflow topology edge multiplicity comparison (#​8656)
• 37ce872a85fed62cedfd7fffa2e0bd43f7d32b92 .NET: Store created external input messages (#​8606)
• 1370903bd8e6eb8871781cd1fcc74f674c022e0b .NET: [BREAKING] Better support tool changes between runs (#​8754)

See More

• 3f1f3b50b57ccabe7725f8a60539622d5f1ca7b4 .NET: Propagate TextSearchProvider caller cancellation (#​8796)
• 238d7e2e9bb9b469be172460e612c89840aad1cc .NET: Validate Foundry client headers before transport (#​8715)
• c804f32c983df56bacc9a8698fde9d50edc2df3e .NET: [BREAKING] Bump Azure.AI.Projects to 3.0.0-beta.3, OpenAI to 2.14.0, and MEAI to 10.10.1 (#​8730) [ dotnet/extensions#​7760, dotnet/extensions#​7761 ]
• 93cf98a042c0f4eb8e1e180beeab9474bcd96811 .NET: Update AGUI SDK packages to 1.0.0 (#​8769)
• 109234952ad417b0e9368beed633e438eb2e389d Clarify CodeAct guest packages and host network access (#​8781)
• 6f1522a50b66f117da34cc25ea299ba24a528b15 Temporarily skip OpenAI integration tests while the CI API key is invalid (#​8767)
• 2c46deb91e70ea6d7bbc99263147e0f470d52546 .NET: Clarify hosting authentication, authorization, and isolation guidance (#​8677)
• 024dd9908bc19fa42f070cfaf7c3775c2b17f09b .NET/Python: Improve MCP skill resource validation (#​8690)
• 8ff549d3f7219bac0a405621616ed72090ba13b9 .NET: Correct InvokeAzureAgent response output (#​8605)
• 5ee3e87d6768eadb7c4cf91507659a6069850692 .NET: Remove redundant NuGet configuration (#​8719)
• 622737258c73f730adca5130b7b82fbc03ff8838 Set better expecations for contributors (#​8706)
• 30b9b8e06766b2038e366d32979357c2fc4b9def .NET: Only consume stored approval state when the run succeeds (#​8692)
• 834eb7ff12c83aadee56d468e3b01b4f0fc4084c fix(dotnet): persist function results as user messages (#​8655)
• 0bbb7245d408b6b7209eca58609ca53a52a66cec .NET: [BREAKING] fix: use allow list for configuration keys (#​8200)
• a638ce136ed6e0457877373b0e377e1f1d33277d .NET: Fix forwarded request-port type validation (#​8657)
• 76ccf3c44cee748aa582c446a7218f91289f2aac fix(dotnet): forward declarative Azure agent version (#​8658)
• 11b8b80a2c904a36603c4445df5ddb07a55e6817 Use review App permissions for repair reactions (#​8669)
• 74e8fe6da942ee991819ea861de1841243d7c0e1 Use the workflow token for fix-ci evidence (#​8667)
• 173978ee93e0ffa5ef4ebdbfe2e94cd6f8e8a996 .NET: Add function replace support for function middleware (#​8615)
• bf93c539d247a9df6f66055b711a3015438c8dce .NET: [BREAKING] Enforce approval response binding consistently (#​8641)
• 646e116a4099a6dc0f689ff2dd8b41b31ba2bdae .NET: [BREAKING] Fix DevUI approval continuation (#​8423) [ #​6006 ]
• 925f4f2c6c494eba2779f7f79de1ca95958f6d8a .NET: ci/dotnet vscode configuration (#​8537)
• ec7114ffc8656a9b5c56be252f0411d22887c896 .NET: fix: a bug where invoke function tool could bypass approval (#​8403)
• c5a8c8d37d7cf15b493fb838084f4954be6b0223 fix(core): distinguish absent tool call arguments from parse failures (#​8609)
• 17b349f2150d5b90649998a32a067db07319649a docs(core): fix positional invocations in detect_media_type_from_base64 docstrings (#​8614)
• eb74c8cceba97bc037413dcf25cfcf1aeab77634 fix(core): ensure add_usage_details returns copies and filters non-ints consistently (#​8613)
• 02bd1ba1de43ca8d1206a5c61e86ffc0d6f44b12 fix(ag-ui): allow text events when response_format is a json schema dictionary (#​8604)
• 7b626709dbce2c170030c388cea9e611738e5be5 ci: removes workflow based PR limit to use GitHub native feature (#​8603)
• bb53fe15a8375426a98763bd43eed64762af3f07 test(ollama): narrow pytest.raises blocks to wrap only get_response in error tests (#​8611)
• 894b0f6f0bd2d59202ef04d5898302e05cbb7264 samples: add McpDocsResearch declarative workflow showcasing agent-level MCP pattern (#​6054)
• 42c22c001761340f47b279e89a4e06aedb5549d9 Bump GitHub.Copilot.SDK to 1.0.1 and forward session config properties (incl. per-session GitHubToken) (#​5735) [ #​6381 ]

This list of changes was auto generated.

Commits viewable in compare view.

Updated Microsoft.Agents.AI.GitHub.Copilot from 1.22.0 to 1.23.0.

Release notes

Sourced from Microsoft.Agents.AI.GitHub.Copilot's releases.

1.23.0

Changes:

• be01deccaf3dd7b85e03620145bc1a757c857827 .NET: Add origin pinning to Foundry toolbox MCP client (#​8721)
• 0d6d2bb6b0b58f3aabdf170320ab90fc300d4c99 .NET: fix: declarative workflow http variables (#​8797)
• 2024d4df4c4dd01b904fb9daaf56f5759801654a .NET: Fix workflow topology edge multiplicity comparison (#​8656)
• 37ce872a85fed62cedfd7fffa2e0bd43f7d32b92 .NET: Store created external input messages (#​8606)
• 1370903bd8e6eb8871781cd1fcc74f674c022e0b .NET: [BREAKING] Better support tool changes between runs (#​8754)

See More

• 3f1f3b50b57ccabe7725f8a60539622d5f1ca7b4 .NET: Propagate TextSearchProvider caller cancellation (#​8796)
• 238d7e2e9bb9b469be172460e612c89840aad1cc .NET: Validate Foundry client headers before transport (#​8715)
• c804f32c983df56bacc9a8698fde9d50edc2df3e .NET: [BREAKING] Bump Azure.AI.Projects to 3.0.0-beta.3, OpenAI to 2.14.0, and MEAI to 10.10.1 (#​8730) [ dotnet/extensions#​7760, dotnet/extensions#​7761 ]
• 93cf98a042c0f4eb8e1e180beeab9474bcd96811 .NET: Update AGUI SDK packages to 1.0.0 (#​8769)
• 109234952ad417b0e9368beed633e438eb2e389d Clarify CodeAct guest packages and host network access (#​8781)
• 6f1522a50b66f117da34cc25ea299ba24a528b15 Temporarily skip OpenAI integration tests while the CI API key is invalid (#​8767)
• 2c46deb91e70ea6d7bbc99263147e0f470d52546 .NET: Clarify hosting authentication, authorization, and isolation guidance (#​8677)
• 024dd9908bc19fa42f070cfaf7c3775c2b17f09b .NET/Python: Improve MCP skill resource validation (#​8690)
• 8ff549d3f7219bac0a405621616ed72090ba13b9 .NET: Correct InvokeAzureAgent response output (#​8605)
• 5ee3e87d6768eadb7c4cf91507659a6069850692 .NET: Remove redundant NuGet configuration (#​8719)
• 622737258c73f730adca5130b7b82fbc03ff8838 Set better expecations for contributors (#​8706)
• 30b9b8e06766b2038e366d32979357c2fc4b9def .NET: Only consume stored approval state when the run succeeds (#​8692)
• 834eb7ff12c83aadee56d468e3b01b4f0fc4084c fix(dotnet): persist function results as user messages (#​8655)
• 0bbb7245d408b6b7209eca58609ca53a52a66cec .NET: [BREAKING] fix: use allow list for configuration keys (#​8200)
• a638ce136ed6e0457877373b0e377e1f1d33277d .NET: Fix forwarded request-port type validation (#​8657)
• 76ccf3c44cee748aa582c446a7218f91289f2aac fix(dotnet): forward declarative Azure agent version (#​8658)
• 11b8b80a2c904a36603c4445df5ddb07a55e6817 Use review App permissions for repair reactions (#​8669)
• 74e8fe6da942ee991819ea861de1841243d7c0e1 Use the workflow token for fix-ci evidence (#​8667)
• 173978ee93e0ffa5ef4ebdbfe2e94cd6f8e8a996 .NET: Add function replace support for function middleware (#​8615)
• bf93c539d247a9df6f66055b711a3015438c8dce .NET: [BREAKING] Enforce approval response binding consistently (#​8641)
• 646e116a4099a6dc0f689ff2dd8b41b31ba2bdae .NET: [BREAKING] Fix DevUI approval continuation (#​8423) [ #​6006 ]
• 925f4f2c6c494eba2779f7f79de1ca95958f6d8a .NET: ci/dotnet vscode configuration (#​8537)
• ec7114ffc8656a9b5c56be252f0411d22887c896 .NET: fix: a bug where invoke function tool could bypass approval (#​8403)
• c5a8c8d37d7cf15b493fb838084f4954be6b0223 fix(core): distinguish absent tool call arguments from parse failures (#​8609)
• 17b349f2150d5b90649998a32a067db07319649a docs(core): fix positional invocations in detect_media_type_from_base64 docstrings (#​8614)
• eb74c8cceba97bc037413dcf25cfcf1aeab77634 fix(core): ensure add_usage_details returns copies and filters non-ints consistently (#​8613)
• 02bd1ba1de43ca8d1206a5c61e86ffc0d6f44b12 fix(ag-ui): allow text events when response_format is a json schema dictionary (#​8604)
• 7b626709dbce2c170030c388cea9e611738e5be5 ci: removes workflow based PR limit to use GitHub native feature (#​8603)
• bb53fe15a8375426a98763bd43eed64762af3f07 test(ollama): narrow pytest.raises blocks to wrap only get_response in error tests (#​8611)
• 894b0f6f0bd2d59202ef04d5898302e05cbb7264 samples: add McpDocsResearch declarative workflow showcasing agent-level MCP pattern (#​6054)
• 42c22c001761340f47b279e89a4e06aedb5549d9 Bump GitHub.Copilot.SDK to 1.0.1 and forward session config properties (incl. per-session GitHubToken) (#​5735) [ #​6381 ]

This list of changes was auto generated.

Commits viewable in compare view.

Updated OllamaSharp from 5.4.30 to 5.5.0.

Release notes

Sourced from OllamaSharp's releases.

5.5.0

What's Changed

What's Changed

• Add SystemOne by @​mili-tan in Add SystemOne awaescher/OllamaSharp#396

Full Changelog: awaescher/OllamaSharp@5.4.30...5.5.0

Commits viewable in compare view.

Updated Polyfill from 11.4.1 to 11.4.2.

Release notes

Sourced from Polyfill's releases.

11.4.2

• #​614 Write no byte order mark from File async writers given no encoding

Commits viewable in compare view.

Updated SonarAnalyzer.CSharp from 10.34.0.3385 to 10.35.0.4138.

Release notes

Sourced from SonarAnalyzer.CSharp's releases.

10.35.0.4138

Release notes - .NET Analyzers - 10.35

Feature

NET-1313 Improve S3267: Suggest other LINQ methods instead of always Where
NET-4549 Update RSPEC before 10.35 release

False Positive

NET-87 Fix S6667 FP: Add an exception when rethrowing the exception
NET-1559 Fix S6966 FP: FluentValidation ValidateAndThrow should not be proposed
NET-3964 Fix S125 FP: Do not raise on comments that resemble code but are not
NET-4294 Fix S107 FP: Should not raise on constructors of dependency-injection managed types
NET-4310 Fix S8747 FP: Do not raise when data is backfilled via UpdateData
NET-4315 Fix S3453 FP: Should not raise on classes with static members and non-static nested types
NET-4415 Fix S8969 FP: redundant null-forgiving operator raised on ref-loop variables reassigned each iteration
NET-4466 Fix S6966 FP: Do not suggest a non-awaitable overload resolved via speculative rebind
NET-4546 Fix S6669 FP: overridden "format" rule parameter is ignored
NET-4556 Fix S1128 FP: SafeVisit abort silently drops necessary usings
NET-4634 Fix S9022 FP: Generic identity pass-through wrapper not implementing IEnumerable misclassified as a reshaping boundary
NET-4639 Fix S8717 FP: EF6 and EF Core referenced in the same compilation (in-progress migration)

False Negative

NET-4256 Fix S9022 FN: Include on owned-type navigation not detected as redundant
NET-4532 Fix S9022/S9023 FN: rule stays silent when the Include is used in a comparison, cast, or other common expression
NET-4541 Fix S5542 FN: Detect weak RSA signature padding

Bug

NET-4571 Fix AD0001: NRE in DoNotOverwriteCollectionElements
NET-4587 Fix AD0001: ArgumentNullException in ReleaseCorrectReaderWriterLockBase (S7131)
NET-4588 Fix AD0001: ArgumentNullException in FirstSingleShouldBeUsedOnNonEmptyCollectionBase (S7130)
NET-4636 Fix S6966 AD0001: NullReferenceException on null-conditional calls followed by an indexer

Maintenance

NET-4370 Drop backward compatibility with S4NET below 5.2
NET-4540 Update MSTest to 4.4.0
NET-4550 Bump version to 10.35
NET-4555 Update SonarSource/sonar-scanner-engine monorepo to v13.11.0.5929
NET-4558 Create SLCORE ticket instead of SLVSCODE and SLI on release
NET-4579 ShimLayer Generator: Remove old BasicBlock and ControlFlowBranch
NET-4580 Update dependency Microsoft.NET.Test.Sdk to 18.10.0
NET-4596 Update dependency org.codehaus.mojo:build-helper-maven-plugin to v3.6.2
NET-4597 Update dependency Verify.MSTest to 32.0.1
NET-4622 Update SonarSource/sonar-scanner-engine monorepo to v13.13.0.6016
NET-4628 Update dependency Microsoft.NET.Test.Sdk to 18.10.1
NET-4631 Update MSTest to 4.4.1
NET-4632 Harden S1144: internal-type usage scan no longer trusts partial SafeVisit walks
NET-4637 Update protocolbuffers/protobuf monorepo to v4.36.2
NET-4663 Restore sonar-csharp-enterprise-plugin minsize to 6200000

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions