chore(deps): update dotnet monorepo

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update	Pending
Microsoft.AspNetCore.Authentication.JwtBearer (source)	10.0.0 → 10.0.9					nuget	patch	10.0.10
Microsoft.AspNetCore.Authentication.OpenIdConnect (source)	10.0.0 → 10.0.9					nuget	patch	10.0.10
Microsoft.AspNetCore.Components.QuickGrid (source)	10.0.0 → 10.0.9					nuget	patch	10.0.10
Microsoft.AspNetCore.Components.Web (source)	10.0.0 → 10.0.9					nuget	patch	10.0.10
Microsoft.AspNetCore.Identity.EntityFrameworkCore (source)	10.0.0 → 10.0.9					nuget	patch	10.0.10
Microsoft.AspNetCore.Identity.UI (source)	10.0.0 → 10.0.9					nuget	patch	10.0.10
Microsoft.AspNetCore.Mvc.Testing (source)	10.0.0 → 10.0.9					nuget	patch	10.0.10
Microsoft.AspNetCore.OpenApi (source)	10.0.0 → 10.0.9					nuget	patch	10.0.10
Microsoft.AspNetCore.TestHost (source)	10.0.0 → 10.0.9					nuget	patch	10.0.10
Microsoft.EntityFrameworkCore.Tools (source)	10.0.0 → 10.0.9					nuget	patch	10.0.10
Microsoft.Extensions.ApiDescription.Server (source)	10.0.0 → 10.0.9					nuget	patch	10.0.10
Microsoft.Extensions.Configuration.Abstractions (source)	10.0.0 → 10.0.9					nuget	patch	10.0.10
Microsoft.Extensions.Http.Resilience (source)	10.0.0 → 10.7.0					nuget	minor	10.8.0
Microsoft.Extensions.Identity.Stores (source)	10.0.0 → 10.0.9					nuget	patch	10.0.10
Microsoft.Extensions.Logging.Abstractions (source)	10.0.0 → 10.0.9					nuget	patch	10.0.10
Microsoft.Extensions.Options (source)	10.0.0 → 10.0.9					nuget	patch	10.0.10
Microsoft.Extensions.ServiceDiscovery (source)	10.0.0 → 10.7.0					nuget	minor	10.8.0
Microsoft.Extensions.ServiceDiscovery.Yarp (source)	10.0.0 → 10.7.0					nuget	minor	10.8.0
Microsoft.Maui.Controls	9.0.40 → 9.0.120					nuget	patch
Microsoft.Maui.Controls.Compatibility	9.0.40 → 9.0.120					nuget	patch
Microsoft.Maui.Controls.Maps	9.0.40 → 9.0.120					nuget	patch
Microsoft.VisualStudio.Web.CodeGeneration.Design	8.0.0-rc.1.23461.3 → 8.0.23					nuget	patch
dotnet-sdk	10.0.101 → 10.0.301					dotnet-sdk	patch	10.0.302

---

Release Notes

dotnet/dotnet (Microsoft.AspNetCore.Authentication.JwtBearer)

v10.0.9

v10.0.8

v10.0.7

v10.0.6

v10.0.5

v10.0.4

v10.0.3

v10.0.2

v10.0.1

dotnet/extensions (Microsoft.Extensions.Http.Resilience)

v10.7.0

v10.7.0 graduates the Microsoft.Extensions.Diagnostics.ResourceMonitoring.Kubernetes package to stable. The package registers a Kubernetes-aware ResourceQuotaProvider that reads the pod's CPU and memory requests and limits and exposes them to Microsoft.Extensions.Diagnostics.ResourceMonitoring as baseline and maximum quotas, which then feed the request and limit dimensions of the published resource utilization metrics. The companion ResourceQuota and ResourceQuotaProvider types in Microsoft.Extensions.Diagnostics.ResourceMonitoring graduate to stable in the same change so that consumers can implement custom quota providers without taking an experimental dependency.

On the AI side, Microsoft.Extensions.AI.OpenAI moves to OpenAI 2.11.0 and fixes a deserialization bug in ToolJson.AdditionalProperties so that JSON Schema additionalProperties values shaped as sub-schema objects (for example {"type":"string"}) are preserved instead of throwing during deserialization. HostedFileContent.SizeInBytes and HostedFileContent.CreatedAt graduate to stable since both values are consistently available across hosted-file providers, while Purpose and Scope remain experimental as provider-shaped vocabulary. FunctionInvokingChatClient drops a backward-compat path that auto-marked ToolApprovalResponseContent entries with InformationalOnly: true; consumers that need to continue accepting sessions serialized before #​7468 can use the sample ApprovalHistoryNormalizingChatClient middleware added in the test project.

Experimental API Changes

Now Stable

• Microsoft.Extensions.Diagnostics.ResourceMonitoring.Kubernetes package is now stable #​7253
• Resource Monitoring ResourceQuota and ResourceQuotaProvider APIs are now stable (previously EXTEXP0008) #​7253
• HostedFileContent.SizeInBytes and HostedFileContent.CreatedAt are now stable (previously MEAI001) #​7513

What's Changed

AI

• Graduate HostedFileContent.SizeInBytes and HostedFileContent.CreatedAt #​7513 by @​jozkee (co-authored by @​Copilot)
• Remove backward-compat InformationalOnly case from FICC; suggest middleware workaround #​7538 by @​jozkee (co-authored by @​Copilot)
• Upgrade OpenAI package from 2.10.0 to 2.11.0 #​7544 by @​jozkee (co-authored by @​Copilot)
• Fix ToolJson.AdditionalProperties to accept sub-schema objects #​7546 by @​jozkee (co-authored by @​Copilot)

Diagnostics, Health Checks, and Resource Monitoring

• Move Microsoft.Extensions.Diagnostics.ResourceMonitoring.Kubernetes to stable #​7253 by @​amadeuszl (co-authored by @​Copilot)

Repository Infrastructure Updates

• [main] Update dependencies from dotnet/arcade #​7521
• Bump dotnet-reportgenerator-globaltool from 5.5.9 to 5.5.10 #​7522
• Bump dotnet-coverage from 18.6.2 to 18.7.0 #​7530
• Bump PowerShell from 7.6.1 to 7.6.2 #​7531
• Bump qs from 6.15.1 to 6.15.2 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7532
• [main] Update dependencies from dotnet/arcade #​7534
• Bump tmp from 0.2.5 to 0.2.6 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7537

Acknowledgements

• @​ericstj submitted issue #​7509 (resolved by #​7544)
• @​scottt732 submitted issue #​7540 (resolved by #​7546)
• @​DeagleGross @​wtgodbe @​dariusclay @​evgenyfedorov2 @​peterwald @​PranavSenthilnathan @​shyamnamboodiripad @​stephentoub @​tarekgh reviewed pull requests

Full Changelog: dotnet/extensions@v10.6.0...v10.7.0

v10.6.0

Version 10.6.0 stabilizes the response continuation token and background-response APIs in Microsoft.Extensions.AI.Abstractions. Most other AI work for May shipped in 10.5.1; this monthly release rolls those changes up alongside dependency updates and a small Resource Monitoring cleanup.

Experimental API Changes

Now Stable

• ResponseContinuationToken and background-response APIs are now stable (previously MEAI001) #​7512

What's Changed

AI

• Stabilize ResponseContinuationToken / background-response APIs #​7512 by @​jozkee (co-authored by @​Copilot)

Repository Infrastructure Updates

• Update version to 10.6.0 #​7458 by @​jeffhandley
• [main] Update dependencies from dotnet/arcade #​7451
• Bump follow-redirects from 1.15.11 to 1.16.0 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript/azure-devops-report/tasks/PublishAIEvaluationReport #​7469
• Merge release/10.5 into main #​7470 by @​jeffhandley
• Bump microsoft.visualstudio.slngen.tool from 12.0.13 to 12.0.32 #​7484
• Bump postcss from 8.5.9 to 8.5.12 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7494
• Bump dotnet-reportgenerator-globaltool from 5.5.7 to 5.5.9 #​7504
• Rename release-notes skill to write-release-notes #​7511 by @​jeffhandley (co-authored by @​Copilot)

Acknowledgements

• @​wtgodbe @​tarekgh @​peterwald @​JeremyLikness @​eiriktsarpalis @​ericstj @​evgenyfedorov2 reviewed pull requests

Full Changelog: dotnet/extensions@v10.5.2...v10.6.0

v10.5.0

HTTP Logging Middleware APIs in Microsoft.AspNetCore.Diagnostics.Middleware are now stable. This release also transfers Microsoft.Extensions.VectorData.Abstractions and Microsoft.Extensions.VectorData.ConformanceTests from the Semantic Kernel repository into dotnet/extensions, jumping from 10.1.0 to 10.5.0 for consistent versioning. The release also delivers fixes across the AI libraries, AI Evaluation, and Service Discovery.

Breaking Changes

1. Rename VectorStoreVectorAttribute constructor parameter #​7460
   • The Dimensions parameter was renamed to dimensions (lowercase). This is a source-breaking change only — binary compatibility is preserved.
   • If you use the named argument syntax new VectorStoreVectorAttribute(Dimensions: 1536), update it to new VectorStoreVectorAttribute(dimensions: 1536).

Experimental API Changes

Now Stable

• HTTP Logging Middleware APIs are now stable (previously EXTEXP0013): AddHttpLogEnricher<T>, IHttpLogEnricher, and RequestHeadersLogEnricherOptions.HeadersDataClasses #​7380

What's Changed

AI

• Fix OpenAIResponsesChatClient to respect "store":false in responses #​7417 by @​stephentoub
• Fix InvalidOperationException in CoalesceWebSearchToolCallContent #​7419 by @​stephentoub
• Handle F# optional parameters in AIFunctionFactory schema generation #​7439 by @​eiriktsarpalis
• Fix ComputerCallResponseItem using Item.Id instead of CallId #​7446 by @​jozkee
• Fix HostedFileContent with image MIME type sent as input_file instead of input_image #​7438 by @​stephentoub (co-authored by @​copilot)
• Guard Activity.Current restore with null check in OpenTelemetry streaming clients #​7443 by @​stephentoub (co-authored by @​copilot)
• Enable stateless mode in remote MCP server template (released as v1.2.0 on 2026-04-01) #​7441 by @​jeffhandley

Vector Data

• Move Microsoft.Extensions.VectorData.Abstractions over from Semantic Kernel #​7434 by @​roji
• Rename VectorStoreVectorAttribute dimensions constructor parameter #​7460 by @​roji

AI Evaluation

• Add Path Validation for DiskBasedResponseCache and DiskBasedResultStore #​7397 by @​peterwald
• Update brace-expansion for CVE-2026-33750 #​7457 by @​SamMonoRT

ASP.NET Core Extensions

• Removing experimental attribute from Http logging middleware #​7380 by @​mariamgerges

Service Discovery

• Implement RFC6761 reserved DNS names handling #​6924 by @​rzikm

Documentation Updates

• Remove per-library CHANGELOG.md files #​7413 by @​jeffhandley

Test Improvements

• Fix SqliteVectorStoreWriterTests hang: reduce test record count and use conditional MaxTopCount #​7360 by @​stephentoub (co-authored by @​copilot)

Repository Infrastructure Updates

• Bump minimatch and azure-pipelines-task-lib in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7361
• Remove stale user-level .npmrc instead of npmAuthenticate #​7366 by @​ilonatommy
• [main] Update dependencies from dotnet/arcade #​7374
• Use env vars in build.ps1 to bypass stale agent npm config #​7376 by @​ilonatommy
• Add a Release-Notes skill #​7390 by @​jeffhandley
• Enable CFSClean* policies for extensions-ci-official pipeline #​7403 by @​mmitche
• Fix CG alerts for Microsoft.Bcl.Memory #​7418 by @​wtgodbe
• Bump flatted from 3.3.3 to 3.4.2 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7421
• [main] Update dependencies from dotnet/arcade #​7422
• Bump picomatch from 2.3.1 to 2.3.2 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7427
• Bump picomatch in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7429
• Stop using Mariner 2 images #​7431 by @​wtgodbe
• [main] Update dependencies from dotnet/arcade #​7435
• Bump brace-expansion from 1.1.12 to 1.1.13 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7440
• Bump lodash from 4.17.23 to 4.18.1 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7455
• Bump vite from 6.4.1 to 6.4.2 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7456
• Correctly publish MEVD.ConformanceTests as nuget packages #​7459 by @​roji
• Update ApiChief baselines for MEAI and MEVD #​7461 by @​jeffhandley
• Upgrade to OpenAI 2.10.0 #​7450 by @​stephentoub
• Use shared DiagnosticIds constants for MEVD experimental APIs #​7462 by @​jeffhandley

Acknowledgements

• @​shyamnamboodiripad @​rogerbarreto @​ReubenBond @​evgenyfedorov2 @​tarekgh reviewed pull requests

Full Changelog: dotnet/extensions@v10.4.1...v10.5.0

v10.4.0

This release advances the AI abstractions with new hosted file, web search, and reasoning content types, stabilizes MCP and tool approval APIs, adds streaming latency metrics to OpenTelemetry instrumentation, and delivers bug fixes across caching, data ingestion, and resource monitoring.

Experimental API Changes

Now Stable

• MCP Server Tool Content and Function Call Approval APIs are now stable (previously MEAI001) #​7299
• FakeLogCollector.GetLogsAsync(CancellationToken) is now stable (previously EXTEXP0003) #​7332

New Experimental APIs

• New experimental AddExtendedHttpClientLogging overloads with wrapHandlersPipeline parameter (EXTEXP0013) #​7231

Removed Experimental APIs

• AI Tool Reduction experimental APIs removed (was experimental under MEAI001) #​7353

What's Changed

AI

• Add IHostedFileClient and friends #​7269 by @​stephentoub
• Add web search tool call content #​7276 by @​stephentoub (co-authored by @​Copilot)
• Surface OpenAI-compatible reasoning_content as TextReasoningContent #​7295 by @​stephentoub
• MCP/Approvals/Tool Contents stabilization #​7299 by @​jozkee
• Implement time_to_first_chunk and time_per_output_chunk streaming metrics in OpenTelemetryChatClient #​7325 by @​stephentoub (co-authored by @​Copilot)
• Add openai.api.type telemetry attribute to OpenAI IChatClient implementations #​7316 by @​stephentoub (co-authored by @​Copilot)
• Update OpenTelemetry Gen AI semantic conventions to v1.40 #​7322 by @​stephentoub (co-authored by @​Copilot)
• Fix tool definitions emission regardless of sensitivity setting #​7346 by @​stephentoub (co-authored by @​Copilot)
• Honor [Required] attribute in AI function parameter JSON schema generation #​7272 by @​stephentoub (co-authored by @​Copilot)
• AddAIContentType automatically registers content type against every base in the inheritance chain up to AIContent #​7358 by @​jozkee (co-authored by @​Copilot)
• Auto-mark server-handled FunctionCallContent as InformationalOnly #​7314 by @​stephentoub (co-authored by @​Copilot)
• Map ReasoningEffort.None and ExtraHigh to none and xhigh in OpenAI IChatClient implementations #​7319 by @​stephentoub (co-authored by @​Copilot)
• Handle DynamicMethod reflection limitations in AIFunctionFactory #​7287 by @​stephentoub (co-authored by @​Copilot)
• Fix Activity.Current nulled during streaming tool invocation #​7321 by @​flaviocdc (co-authored by @​Copilot)
• Handle FunctionCallOutputResponseItem in streaming response conversion #​7307 by @​stephentoub (co-authored by @​Copilot)
• Fix serialization of response continuation tokens #​7356 by @​stephentoub
• Remove AI Tool Reduction experimental APIs #​7353 by @​stephentoub (co-authored by @​Copilot)
• Update OpenAI to 2.9.1 #​7349 by @​stephentoub

Telemetry and Observability

• Introduce support for the Gauge metric type #​7203 by @​rainsxng
• Update logging source generator to support generic methods #​7331 by @​svick (co-authored by @​Copilot)
• Update logging source generator to match runtime PR #​124589 (ref readonly/params/scoped) #​7333 by @​svick (co-authored by @​Copilot)
• Promote FakeLogCollector.GetLogsAsync(CancellationToken) from experimental to stable #​7332 by @​Demo30
• Remove obsolete CS1591 warning suppression from generated file preamble #​7308 by @​luissena

HTTP Resilience and Diagnostics

• Expose wrapHandlersPipeline parameter in AddExtendedHttpClientLogging API #​7231 by @​rainsxng (co-authored by @​Copilot)

Diagnostics, Health Checks, and Resource Monitoring

• Add scaling to [0, 100] for LinuxUtilizationProvider #​7289 by @​amadeuszl

Data Ingestion

• Fix infinite loop in GetPreExistingChunksIdsAsync when records exceed MaxTopCount #​7311 by @​adamsitnik (co-authored by @​Copilot)

Caching

• Fix buffer copying for HybridCachePayload. #​7343 by @​cincuranet

Test Improvements

• Fix flaky LinuxResourceHealthCheckTests by isolating MeterListener with ReferenceEquals #​7302 by @​stephentoub (co-authored by @​Copilot)
• Fix flaky resource monitoring test #​7303 by @​stephentoub
• Fix flaky HttpRequestBuffering_DoesNotBufferDisabledOrOversizedLogs test #​7304 by @​stephentoub (co-authored by @​Copilot)
• Fix race condition in FakeLogCollector async enumeration test #​7300 by @​stephentoub (co-authored by @​Copilot)
• Fix cgroupv1 acceptance test to explicitly register the v1 parser #​7296 by @​stephentoub (co-authored by @​Copilot)

Repository Infrastructure Updates

• Update McpServer project template to ModelContextProtocol 1.1.0 #​7338 by @​jeffhandley (co-authored by @​Copilot)
• Update aiagent-webapi template to latest Agent Framework versions (rc1/260219) #​7339 by @​jeffhandley (co-authored by @​Copilot)
• Update SDK and dotnet version to 10.0.103 #​7326 by @​wtgodbe
• Introduce an ApiChief skill to streamline updating API baselines #​7281 by @​jeffhandley (co-authored by @​Copilot)
• Update ApiChief script to use the net10.0 artifacts #​7280 by @​jeffhandley
• Replace Windows queue image references from vs2022preview to vs2022 in pipeline YAML #​7347 by @​wtgodbe (co-authored by @​Copilot)
• Update public pipeline pool images to fix broken builds #​7292 by @​joperezr
• Use smaller windows.vs2022.amd64.open pool image #​7298 by @​joperezr
• Remove main-to-dev inter-branch merge automation #​7315 by @​joperezr (co-authored by @​Copilot)
• Updating FakeLogCollector API baselines #​7334 by @​Demo30
• Run the issue-labeler over pull requests using polling #​7273 by @​jeffhandley (co-authored by @​Copilot)
• Add npmAuthenticate task to fix npm E401 errors on CI agents #​7364 by @​ilonatommy (co-authored by @​Copilot)
• Pass sourceIndexBuildCommand through to SourceIndex #​7348 by @​wtgodbe
• Bump qs from 6.14.1 to 6.14.2 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7301
• Bump rollup from 4.40.0 to 4.59.0 #​7345

Acknowledgements

• @​luissena made their first contribution in #​7308
• @​flaviocdc made their first contribution in #​7321
• @​bryjen submitted issue #​7271 (resolved by #​7272)
• @​vsantele submitted issue #​7306 (resolved by #​7307)
• @​evgenyfedorov2 @​eiriktsarpalis @​tarekgh @​ericstj @​iliar-turdushev @​rogerbarreto @​shyamnamboodiripad @​DeagleGross @​MihaZupan @​akoeplinger @​mattleibow @​rafal-mz @​roji @​rosebyte reviewed pull requests

Full Changelog: dotnet/extensions@v10.3.0...v10.4.0

v10.3.0

What's Changed

• Bump version to 10.3.0 for next development cycle by @​Copilot in #​7197
• Fix race condition in UnreliableL2Tests.WriteFailureInvisible by @​Copilot in #​7075
• Set Microsoft.McpServer.ProjectTemplates version to align with MCP packages by @​jeffhandley in #​7170
• ToChatResponse: Merge AdditionalProperties into ChatMessage instead of ChatResponse by @​Copilot in #​7194
• Fix NRT resolution for AIFunction parameters. by @​eiriktsarpalis in #​7200
• Bump mdast-util-to-hast from 13.2.0 to 13.2.1 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript by @​dependabot[bot] in #​7198
• Add .npmrc next to package.json and add lockfile for PublishAIEvaluationReport by @​akoeplinger in #​7108
• Bump qs from 6.14.0 to 6.14.1 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript by @​dependabot[bot] in #​7189
• Bump js-yaml from 4.1.0 to 4.1.1 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript by @​dependabot[bot] in #​7054
• Bump validator from 13.15.20 to 13.15.23 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript by @​dependabot[bot] in #​7103
• Update AI changelogs by @​stephentoub in #​7206
• Merge changes from internal after 10.2 release by @​joperezr in #​7205
• Merge changes from release/10.2 to main by @​joperezr in #​7209
• Categorize MEAI001 experimental APIs by @​Copilot in #​7116
• [main] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​7212
• Update Package Validation Baseline to 10.2.0 by @​Copilot in #​7208
• Enable package validation for M.E.AmbientMetadata.Build by @​evgenyfedorov2 in #​7213
• [5752] FakeLogCollector waiting capabilities by @​Demo30 in #​6228
• Set network isolation policy for extensions-ci by @​wtgodbe in #​7221
• Fix FunctionInvokingChatClient invoke_agent span detection with exact match or space delimiter by @​Copilot in #​7224
• Add Ordinal into ordering by @​cincuranet in #​7225
• Remove AIFunctionDeclaration tools on last iteration in FunctionInvokingChatClient by @​Copilot in #​7207
• Remove unnecessary description tags by @​gewarren in #​7226
• Fix FunctionInvokingChatClient to respect ChatOptions.Tools modifications by function tools by @​Copilot in #​7218
• Add LoadFromAsync and SaveToAsync helper methods to DataContent by @​Copilot in #​7159
• Bump lodash from 4.17.21 to 4.17.23 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript by @​dependabot[bot] in #​7227
• Add logging to FunctionInvokingChatClient for approval flow, error handling, and loop control by @​Copilot in #​7228
• [main] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​7230
• Allow FunctionResultContent pass-through when CallId matches by @​Copilot in #​7229
• Propagate CachedInputTokenCount in OpenTelemetry telemetry by @​Copilot in #​7234
• Add InvocationRequired property to FunctionCallContent by @​Copilot in #​7126
• Escape the JSON data before embedding in Evaluation reports by @​peterwald in #​7238
• Update mcpserver template to ModelContextProtocol 0.7.0-preview.1 by @​Copilot in #​7236
• Update aiagent-webapi template to Agent Framework 1.0.0-preview.260127.1 by @​Copilot in #​7237
• Fix token metric unit to use UCUM format {token} by @​stephentoub in #​7241
• Add server tool call support to OpenTelemetryChatClient per semantic conventions by @​Copilot in #​7240
• Preserve extra JSON schema properties in ToolJson serialization by @​Copilot in #​7250
• Bring new cpu.requests formula from Kubernetes by @​amadeuszl in #​7239
• Update M.E.AI changelogs with recent changes by [@​stephentoub](https://red

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (in timezone Europe/Madrid)

• Branch creation
  • Between 12:00 AM and 03:59 AM (* 0-3 * * *)
• Automerge
  • Between 12:00 AM and 03:59 AM (* 0-3 * * *)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: src/Basket.API/packages.lock.json, src/eShop.AppHost/packages.lock.json, tests/Basket.UnitTests/packages.lock.json, src/Catalog.API/packages.lock.json, tests/Catalog.FunctionalTests/packages.lock.json, src/ClientApp/packages.lock.json, tests/ClientApp.UnitTests/packages.lock.json, src/EventBus/packages.lock.json, src/EventBusRabbitMQ/packages.lock.json, src/OrderProcessor/packages.lock.json, src/Ordering.API/packages.lock.json, tests/Ordering.FunctionalTests/packages.lock.json, tests/Ordering.UnitTests/packages.lock.json, src/PaymentProcessor/packages.lock.json, src/WebApp/packages.lock.json, src/Webhooks.API/packages.lock.json, src/IntegrationEventLogEF/packages.lock.json, src/Ordering.Infrastructure/packages.lock.json, src/HybridApp/packages.lock.json, src/Identity.API/packages.lock.json, src/Ordering.Domain/packages.lock.json, src/WebAppComponents/packages.lock.json, src/WebhookClient/packages.lock.json, src/eShop.ServiceDefaults/packages.lock.json

  Determining projects to restore...
/opt/containerbase/tools/dotnet/sdk/10.0.301/Sdks/Microsoft.NET.Sdk/targets/Microsoft.NET.Sdk.ImportWorkloads.targets(38,5): error NETSDK1147: To build this project, the following workloads must be installed: maui-tizen [/tmp/renovate/repos/github/Pinguteca/eShop/tests/ClientApp.UnitTests/ClientApp.UnitTests.csproj]
/opt/containerbase/tools/dotnet/sdk/10.0.301/Sdks/Microsoft.NET.Sdk/targets/Microsoft.NET.Sdk.ImportWorkloads.targets(38,5): error NETSDK1147: To install these workloads, run the following command: dotnet workload restore [/tmp/renovate/repos/github/Pinguteca/eShop/tests/ClientApp.UnitTests/ClientApp.UnitTests.csproj]

File name: src/Basket.API/packages.lock.json, src/eShop.AppHost/packages.lock.json, tests/Basket.UnitTests/packages.lock.json, src/Catalog.API/packages.lock.json, tests/Catalog.FunctionalTests/packages.lock.json, src/ClientApp/packages.lock.json, tests/ClientApp.UnitTests/packages.lock.json, src/EventBus/packages.lock.json, src/EventBusRabbitMQ/packages.lock.json, src/OrderProcessor/packages.lock.json, src/Ordering.API/packages.lock.json, tests/Ordering.FunctionalTests/packages.lock.json, tests/Ordering.UnitTests/packages.lock.json, src/PaymentProcessor/packages.lock.json, src/WebApp/packages.lock.json, src/Webhooks.API/packages.lock.json, src/IntegrationEventLogEF/packages.lock.json, src/Ordering.Infrastructure/packages.lock.json, src/HybridApp/packages.lock.json, src/Identity.API/packages.lock.json, src/Ordering.Domain/packages.lock.json, src/WebAppComponents/packages.lock.json, src/WebhookClient/packages.lock.json, src/eShop.ServiceDefaults/packages.lock.json

  Determining projects to restore...
/opt/containerbase/tools/dotnet/sdk/10.0.301/Sdks/Microsoft.NET.Sdk/targets/Microsoft.NET.Sdk.ImportWorkloads.targets(38,5): error NETSDK1147: To build this project, the following workloads must be installed: maui-tizen [/tmp/renovate/repos/github/Pinguteca/eShop/tests/ClientApp.UnitTests/ClientApp.UnitTests.csproj]
/opt/containerbase/tools/dotnet/sdk/10.0.301/Sdks/Microsoft.NET.Sdk/targets/Microsoft.NET.Sdk.ImportWorkloads.targets(38,5): error NETSDK1147: To install these workloads, run the following command: dotnet workload restore [/tmp/renovate/repos/github/Pinguteca/eShop/tests/ClientApp.UnitTests/ClientApp.UnitTests.csproj]

File name: tests/ClientApp.UnitTests/packages.lock.json

  Determining projects to restore...
/opt/containerbase/tools/dotnet/sdk/10.0.301/Sdks/Microsoft.NET.Sdk/targets/Microsoft.NET.Sdk.ImportWorkloads.targets(38,5): error NETSDK1147: To build this project, the following workloads must be installed: maui-tizen [/tmp/renovate/repos/github/Pinguteca/eShop/tests/ClientApp.UnitTests/ClientApp.UnitTests.csproj]
/opt/containerbase/tools/dotnet/sdk/10.0.301/Sdks/Microsoft.NET.Sdk/targets/Microsoft.NET.Sdk.ImportWorkloads.targets(38,5): error NETSDK1147: To install these workloads, run the following command: dotnet workload restore [/tmp/renovate/repos/github/Pinguteca/eShop/tests/ClientApp.UnitTests/ClientApp.UnitTests.csproj]

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	nuget/​microsoft.maui.controls@​9.0.120
	nuget/​microsoft.maui.controls.compatibility@​9.0.120
	nuget/​microsoft.maui.controls.maps@​9.0.120
	nuget/​microsoft.extensions.identity.stores@​10.0.9
	nuget/​microsoft.aspnetcore.mvc.testing@​10.0.9
	nuget/​microsoft.aspnetcore.testhost@​10.0.9

View full report

[socket-security]

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert  (click "▶" to expand/collapse)
Warn		License policy violation: nuget microsoft.extensions.caching.abstractions License: GPL-2.0-or-later WITH Classpath-exception-2.0 - The applicable license policy does not permit this license (5) (THIRD-PARTY-NOTICES.TXT) License: NIST-Software - The applicable license policy does not permit this license (5) (THIRD-PARTY-NOTICES.TXT) From: tests/Basket.UnitTests/Basket.UnitTests.csproj → nuget/microsoft.extensions.identity.stores@10.0.9 → nuget/microsoft.extensions.caching.abstractions@10.0.9 ℹ Read more on: This package | This alert | What is a license policy violation? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore nuget/microsoft.extensions.caching.abstractions@10.0.9. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		License policy violation: nuget microsoft.extensions.configuration.abstractions License: GPL-2.0-or-later WITH Classpath-exception-2.0 - The applicable license policy does not permit this license (5) (THIRD-PARTY-NOTICES.TXT) License: NIST-Software - The applicable license policy does not permit this license (5) (THIRD-PARTY-NOTICES.TXT) From: tests/Basket.UnitTests/Basket.UnitTests.csproj → nuget/microsoft.extensions.identity.stores@10.0.9 → nuget/microsoft.aspnetcore.mvc.testing@10.0.9 → nuget/asp.versioning.http.client@8.1.0 → nuget/aspire.hosting.postgresql@13.0.1 → nuget/microsoft.extensions.configuration.abstractions@10.0.9 ℹ Read more on: This package | This alert | What is a license policy violation? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore nuget/microsoft.extensions.configuration.abstractions@10.0.9. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		License policy violation: nuget microsoft.extensions.configuration.abstractions License: GPL-2.0-or-later WITH Classpath-exception-2.0 - The applicable license policy does not permit this license (5) (THIRD-PARTY-NOTICES.TXT) From: tests/ClientApp.UnitTests/ClientApp.UnitTests.csproj → nuget/microsoft.maui.controls@9.0.120 → nuget/microsoft.maui.controls.compatibility@9.0.120 → nuget/microsoft.extensions.configuration.abstractions@9.0.9 ℹ Read more on: This package | This alert | What is a license policy violation? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore nuget/microsoft.extensions.configuration.abstractions@9.0.9. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		License policy violation: nuget microsoft.extensions.configuration.binder License: GPL-2.0-or-later WITH Classpath-exception-2.0 - The applicable license policy does not permit this license (5) (THIRD-PARTY-NOTICES.TXT) License: NIST-Software - The applicable license policy does not permit this license (5) (THIRD-PARTY-NOTICES.TXT) From: tests/Basket.UnitTests/Basket.UnitTests.csproj → nuget/microsoft.extensions.identity.stores@10.0.9 → nuget/microsoft.aspnetcore.mvc.testing@10.0.9 → nuget/asp.versioning.http.client@8.1.0 → nuget/aspire.hosting.postgresql@13.0.1 → nuget/microsoft.extensions.configuration.binder@10.0.9 ℹ Read more on: This package | This alert | What is a license policy violation? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore nuget/microsoft.extensions.configuration.binder@10.0.9. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		License policy violation: nuget microsoft.extensions.configuration.commandline License: GPL-2.0-or-later WITH Classpath-exception-2.0 - The applicable license policy does not permit this license (5) (THIRD-PARTY-NOTICES.TXT) License: NIST-Software - The applicable license policy does not permit this license (5) (THIRD-PARTY-NOTICES.TXT) From: tests/Basket.UnitTests/Basket.UnitTests.csproj → nuget/microsoft.aspnetcore.mvc.testing@10.0.9 → nuget/aspire.hosting.postgresql@13.0.1 → nuget/microsoft.extensions.configuration.commandline@10.0.9 ℹ Read more on: This package | This alert | What is a license policy violation? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore nuget/microsoft.extensions.configuration.commandline@10.0.9. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		License policy violation: nuget microsoft.extensions.configuration.environmentvariables License: GPL-2.0-or-later WITH Classpath-exception-2.0 - The applicable license policy does not permit this license (5) (THIRD-PARTY-NOTICES.TXT) License: NIST-Software - The applicable license policy does not permit this license (5) (THIRD-PARTY-NOTICES.TXT) From: tests/Basket.UnitTests/Basket.UnitTests.csproj → nuget/microsoft.aspnetcore.mvc.testing@10.0.9 → nuget/aspire.hosting.postgresql@13.0.1 → nuget/microsoft.extensions.configuration.environmentvariables@10.0.9 ℹ Read more on: This package | This alert | What is a license policy violation? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore nuget/microsoft.extensions.configuration.environmentvariables@10.0.9. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		License policy violation: nuget microsoft.extensions.configuration.fileextensions License: GPL-2.0-or-later WITH Classpath-exception-2.0 - The applicable license policy does not permit this license (5) (THIRD-PARTY-NOTICES.TXT) License: NIST-Software - The applicable license policy does not permit this license (5) (THIRD-PARTY-NOTICES.TXT) From: tests/Basket.UnitTests/Basket.UnitTests.csproj → nuget/microsoft.aspnetcore.mvc.testing@10.0.9 → nuget/aspire.hosting.postgresql@13.0.1 → nuget/microsoft.extensions.configuration.fileextensions@10.0.9 ℹ Read more on: This package | This alert | What is a license policy violation? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore nuget/microsoft.extensions.configuration.fileextensions@10.0.9. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		License policy violation: nuget microsoft.extensions.configuration.json License: GPL-2.0-or-later WITH Classpath-exception-2.0 - The applicable license policy does not permit this license (5) (THIRD-PARTY-NOTICES.TXT) License: NIST-Software - The applicable license policy does not permit this license (5) (THIRD-PARTY-NOTICES.TXT) From: tests/Basket.UnitTests/Basket.UnitTests.csproj → nuget/microsoft.aspnetcore.mvc.testing@10.0.9 → nuget/aspire.hosting.postgresql@13.0.1 → nuget/microsoft.extensions.configuration.json@10.0.9 ℹ Read more on: This package | This alert | What is a license policy violation? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore nuget/microsoft.extensions.configuration.json@10.0.9. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		License policy violation: nuget microsoft.extensions.configuration.usersecrets License: GPL-2.0-or-later WITH Classpath-exception-2.0 - The applicable license policy does not permit this license (5) (THIRD-PARTY-NOTICES.TXT) License: NIST-Software - The applicable license policy does not permit this license (5) (THIRD-PARTY-NOTICES.TXT) From: tests/Basket.UnitTests/Basket.UnitTests.csproj → nuget/microsoft.aspnetcore.mvc.testing@10.0.9 → nuget/aspire.hosting.postgresql@13.0.1 → nuget/microsoft.extensions.configuration.usersecrets@10.0.9 ℹ Read more on: This package | This alert | What is a license policy violation? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore nuget/microsoft.extensions.configuration.usersecrets@10.0.9. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		License policy violation: nuget microsoft.extensions.configuration License: GPL-2.0-or-later WITH Classpath-exception-2.0 - The applicable license policy does not permit this license (5) (THIRD-PARTY-NOTICES.TXT) License: NIST-Software - The applicable license policy does not permit this license (5) (THIRD-PARTY-NOTICES.TXT) From: tests/Basket.UnitTests/Basket.UnitTests.csproj → nuget/microsoft.extensions.identity.stores@10.0.9 → nuget/microsoft.aspnetcore.mvc.testing@10.0.9 → nuget/asp.versioning.http.client@8.1.0 → nuget/aspire.hosting.postgresql@13.0.1 → nuget/microsoft.extensions.configuration@10.0.9 ℹ Read more on: This package | This alert | What is a license policy violation? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore nuget/microsoft.extensions.configuration@10.0.9. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		License policy violation: nuget microsoft.extensions.configuration License: GPL-2.0-or-later WITH Classpath-exception-2.0 - The applicable license policy does not permit this license (5) (THIRD-PARTY-NOTICES.TXT) From: tests/ClientApp.UnitTests/ClientApp.UnitTests.csproj → nuget/microsoft.maui.controls@9.0.120 → nuget/microsoft.maui.controls.compatibility@9.0.120 → nuget/microsoft.extensions.configuration@9.0.9 ℹ Read more on: This package | This alert | What is a license policy violation? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore nuget/microsoft.extensions.configuration@9.0.9. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		License policy violation: nuget microsoft.extensions.dependencyinjection.abstractions License: GPL-2.0-or-later WITH Classpath-exception-2.0 - The applicable license policy does not permit this license (5) (THIRD-PARTY-NOTICES.TXT) License: NIST-Software - The applicable license policy does not permit this license (5) (THIRD-PARTY-NOTICES.TXT) From: tests/Basket.UnitTests/Basket.UnitTests.csproj → nuget/microsoft.extensions.identity.stores@10.0.9 → nuget/microsoft.aspnetcore.mvc.testing@10.0.9 → nuget/microsoft.extensions.logging@8.0.0 → nuget/asp.versioning.http.client@8.1.0 → nuget/aspire.hosting.postgresql@13.0.1 → nuget/microsoft.extensions.dependencyinjection.abstractions@10.0.9 ℹ Read more on: This package | This alert | What is a license policy violation? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore nuget/microsoft.extensions.dependencyinjection.abstractions@10.0.9. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		License policy violation: nuget microsoft.extensions.dependencyinjection.abstractions License: GPL-2.0-or-later WITH Classpath-exception-2.0 - The applicable license policy does not permit this license (5) (THIRD-PARTY-NOTICES.TXT) From: tests/ClientApp.UnitTests/ClientApp.UnitTests.csproj → nuget/microsoft.maui.controls@9.0.120 → nuget/microsoft.maui.controls.compatibility@9.0.120 → nuget/microsoft.extensions.dependencyinjection.abstractions@9.0.9 ℹ Read more on: This package | This alert | What is a license policy violation? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore nuget/microsoft.extensions.dependencyinjection.abstractions@9.0.9. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		License policy violation: nuget microsoft.extensions.dependencyinjection License: GPL-2.0-or-later WITH Classpath-exception-2.0 - The applicable license policy does not permit this license (5) (THIRD-PARTY-NOTICES.TXT) License: NIST-Software - The applicable license policy does not permit this license (5) (THIRD-PARTY-NOTICES.TXT) From: tests/Basket.UnitTests/Basket.UnitTests.csproj → nuget/microsoft.extensions.identity.stores@10.0.9 → nuget/microsoft.aspnetcore.mvc.testing@10.0.9 → nuget/microsoft.extensions.logging@8.0.0 → nuget/asp.versioning.http.client@8.1.0 → nuget/aspire.hosting.postgresql@13.0.1 → nuget/microsoft.extensions.dependencyinjection@10.0.9 ℹ Read more on: This package | This alert | What is a license policy violation? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore nuget/microsoft.extensions.dependencyinjection@10.0.9. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		License policy violation: nuget microsoft.extensions.dependencyinjection License: GPL-2.0-or-later WITH Classpath-exception-2.0 - The applicable license policy does not permit this license (5) (THIRD-PARTY-NOTICES.TXT) From: tests/ClientApp.UnitTests/ClientApp.UnitTests.csproj → nuget/microsoft.maui.controls@9.0.120 → nuget/microsoft.maui.controls.compatibility@9.0.120 → nuget/microsoft.extensions.dependencyinjection@9.0.9 ℹ Read more on: This package | This alert | What is a license policy violation? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore nuget/microsoft.extensions.dependencyinjection@9.0.9. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		License policy violation: nuget microsoft.extensions.dependencymodel License: GPL-2.0-or-later WITH Classpath-exception-2.0 - The applicable license policy does not permit this license (5) (THIRD-PARTY-NOTICES.TXT) License: NIST-Software - The applicable license policy does not permit this license (5) (THIRD-PARTY-NOTICES.TXT) From: tests/Basket.UnitTests/Basket.UnitTests.csproj → nuget/microsoft.aspnetcore.mvc.testing@10.0.9 → nuget/microsoft.extensions.dependencymodel@10.0.9 ℹ Read more on: This package | This alert | What is a license policy violation? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore nuget/microsoft.extensions.dependencymodel@10.0.9. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		License policy violation: nuget microsoft.extensions.diagnostics.abstractions License: GPL-2.0-or-later WITH Classpath-exception-2.0 - The applicable license policy does not permit this license (5) (THIRD-PARTY-NOTICES.TXT) License: NIST-Software - The applicable license policy does not permit this license (5) (THIRD-PARTY-NOTICES.TXT) From: tests/Basket.UnitTests/Basket.UnitTests.csproj → nuget/microsoft.extensions.identity.stores@10.0.9 → nuget/microsoft.aspnetcore.mvc.testing@10.0.9 → nuget/asp.versioning.http.client@8.1.0 → nuget/aspire.hosting.postgresql@13.0.1 → nuget/microsoft.extensions.diagnostics.abstractions@10.0.9 ℹ Read more on: This package | This alert | What is a license policy violation? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore nuget/microsoft.extensions.diagnostics.abstractions@10.0.9. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		License policy violation: nuget microsoft.extensions.diagnostics License: GPL-2.0-or-later WITH Classpath-exception-2.0 - The applicable license policy does not permit this license (5) (THIRD-PARTY-NOTICES.TXT) License: NIST-Software - The applicable license policy does not permit this license (5) (THIRD-PARTY-NOTICES.TXT) From: tests/Basket.UnitTests/Basket.UnitTests.csproj → nuget/microsoft.extensions.identity.stores@10.0.9 → nuget/microsoft.aspnetcore.mvc.testing@10.0.9 → nuget/asp.versioning.http.client@8.1.0 → nuget/aspire.hosting.postgresql@13.0.1 → nuget/microsoft.extensions.diagnostics@10.0.9 ℹ Read more on: This package | This alert | What is a license policy violation? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore nuget/microsoft.extensions.diagnostics@10.0.9. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		License policy violation: nuget microsoft.extensions.fileproviders.abstractions License: GPL-2.0-or-later WITH Classpath-exception-2.0 - The applicable license policy does not permit this license (5) (THIRD-PARTY-NOTICES.TXT) License: NIST-Software - The applicable license policy does not permit this license (5) (THIRD-PARTY-NOTICES.TXT) From: tests/Basket.UnitTests/Basket.UnitTests.csproj → nuget/microsoft.aspnetcore.mvc.testing@10.0.9 → nuget/aspire.hosting.postgresql@13.0.1 → nuget/microsoft.extensions.fileproviders.abstractions@10.0.9 ℹ Read more on: This package | This alert | What is a license policy violation? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore nuget/microsoft.extensions.fileproviders.abstractions@10.0.9. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		License policy violation: nuget microsoft.extensions.fileproviders.physical License: GPL-2.0-or-later WITH Classpath-exception-2.0 - The applicable license policy does not permit this license (5) (THIRD-PARTY-NOTICES.TXT) License: NIST-Software - The applicable license policy does not permit this license (5) (THIRD-PARTY-NOTICES.TXT) From: tests/Basket.UnitTests/Basket.UnitTests.csproj → nuget/microsoft.aspnetcore.mvc.testing@10.0.9 → nuget/aspire.hosting.postgresql@13.0.1 → nuget/microsoft.extensions.fileproviders.physical@10.0.9 ℹ Read more on: This package | This alert | What is a license policy violation? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore nuget/microsoft.extensions.fileproviders.physical@10.0.9. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		License policy violation: nuget microsoft.extensions.filesystemglobbing License: GPL-2.0-or-later WITH Classpath-exception-2.0 - The applicable license policy does not permit this license (5) (THIRD-PARTY-NOTICES.TXT) License: NIST-Software - The applicable license policy does not permit this license (5) (THIRD-PARTY-NOTICES.TXT) From: tests/Basket.UnitTests/Basket.UnitTests.csproj → nuget/microsoft.aspnetcore.mvc.testing@10.0.9 → nuget/aspire.hosting.postgresql@13.0.1 → nuget/microsoft.extensions.filesystemglobbing@10.0.9 ℹ Read more on: This package | This alert | What is a license policy violation? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore nuget/microsoft.extensions.filesystemglobbing@10.0.9. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		License policy violation: nuget microsoft.extensions.hosting.abstractions License: GPL-2.0-or-later WITH Classpath-exception-2.0 - The applicable license policy does not permit this license (5) (THIRD-PARTY-NOTICES.TXT) License: NIST-Software - The applicable license policy does not permit this license (5) (THIRD-PARTY-NOTICES.TXT) From: tests/Basket.UnitTests/Basket.UnitTests.csproj → nuget/microsoft.aspnetcore.mvc.testing@10.0.9 → nuget/aspire.hosting.postgresql@13.0.1 → nuget/microsoft.extensions.hosting.abstractions@10.0.9 ℹ Read more on: This package | This alert | What is a license policy violation? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore nuget/microsoft.extensions.hosting.abstractions@10.0.9. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		License policy violation: nuget microsoft.extensions.hosting License: GPL-2.0-or-later WITH Classpath-exception-2.0 - The applicable license policy does not permit this license (5) (THIRD-PARTY-NOTICES.TXT) License: NIST-Software - The applicable license policy does not permit this license (5) (THIRD-PARTY-NOTICES.TXT) From: tests/Basket.UnitTests/Basket.UnitTests.csproj → nuget/microsoft.aspnetcore.mvc.testing@10.0.9 → nuget/aspire.hosting.postgresql@13.0.1 → nuget/microsoft.extensions.hosting@10.0.9 ℹ Read more on: This package | This alert | What is a license policy violation? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore nuget/microsoft.extensions.hosting@10.0.9. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
See 38 more rows in the dashboard

View full report

[cocogitto-bot]

✔️ d679a87...0e07e42 - Conventional commits check succeeded.

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.