Bump the nuget-dependencies group with 14 updates

[dependabot]

Updated Avalonia from 12.1.2 to 12.1.4.

Release notes

Sourced from Avalonia's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Avalonia.Controls.ColorPicker from 12.1.2 to 12.1.4.

Release notes

Sourced from Avalonia.Controls.ColorPicker's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Avalonia.Fonts.Inter from 12.1.2 to 12.1.4.

Release notes

Sourced from Avalonia.Fonts.Inter's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Avalonia.Themes.Fluent from 12.1.2 to 12.1.4.

Release notes

Sourced from Avalonia.Themes.Fluent's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated coverlet.collector from 10.0.1 to 10.1.0.

Release notes

Sourced from coverlet.collector's releases.

10.1.0

Improvements

• Publish Microsoft.Testing.Platform coverage messages from coverlet.MTP #​2019
• Implement dynamic exclusion filters for assemblies (Coverlet.MTP) #​1946
• Replace legacy .sln files with modern .slnx format #​1966
• coverlet.console: add trace diagnostics and actionable warnings for instrumentation/hit/empty-result failures #​2005
• Relax auto-property skip logic and improve coverage for records #​1941

Fixed

• Fix coverlet.MTP does not collect coverage on the .NET Framework portion of a large project #​1980 #​1967
• Fix Regression in branch coverage for lambda expressions #​1938
• Fix When using "is" with "or" in pattern matching, branch coverage is lower than normal #​1979
• Fix silent zero coverage on .NET Framework since 8.0.0 #​1985 by @​tobiwae
• Fix Race condition between ProcessExit hit-file write and out-of-proc coverage read causes EndOfStreamException #​1987 #​1988 by @​bkoelman
• Fix Regression TypeInitializationException when targeting .NET Framework - Could not load type 'System.Collections.Concurrent.ConcurrentBag #​2010
• Fix use --config-file CLI arg in coverlet.MTP #​2030 by alexthornton1
• Fix silently empty coverage for shared-framework assemblies missing from compileLibraries #​2032 by @​Eljees

Diff between 10.0.1 and 10.1.0

Commits viewable in compare view.

Updated Microsoft.Extensions.AI.OpenAI from 10.10.0 to 10.11.0.

Release notes

Sourced from Microsoft.Extensions.AI.OpenAI's releases.

10.11.0

.NET Extensions 10.11.0

This release adds optional scope capture for buffered logs and updates experimental HTTP latency enrichment APIs. It also includes fixes for AI streaming and function invocation, evaluation reports, HybridCache invalidation, and logging.

Experimental API Changes

New Experimental APIs

• Optional logging-scope capture for global and per-request log buffering through GlobalLogBufferingOptions.IncludeScopes and PerRequestLogBufferingOptions.IncludeScopes (EXTEXP0003) #​7813

Breaking Changes to Experimental APIs

• Incoming HTTP latency log enrichment: AddHttpLatencyTelemetry is renamed to AddHttpServerLatencyTelemetry and moves from HttpLatencyTelemetryServiceCollectionExtensions to HttpLoggingServiceCollectionExtensions. It remains experimental under EXTEXP0013 in this release. #​7730

What's Changed

AI

• Yield final image when streaming with HostedImageGenerationTool #​7774 by @​iamAdarshh
• Make the default tool-rejection message state that the decision is final #​7784 by @​manjunathshiva
• AI: Remove obsolete OpenAI JsonPatch workaround #​7815 by @​jozkee (co-authored by @​Copilot)
• Ignore empty model IDs in streaming responses #​7816 by @​valkiara
• Honor FunctionInvocationContext.Terminate when the function throws #​7801 by @​gjz22
• Fix ChatResponseUpdate.Clone dropping ContinuationToken #​7699 by @​dfedoryshchev
• Decode non-base64 data URIs in DataContent to the octets they encode #​7798 by @​Laurianti

AI Evaluation

• [M.E.AI.Evaluation.Reporting] Fix context and metric interpretation visualization #​7738 by @​grafanaKibana
• Fix tokenizer attaching punctuation to number tokens #​7766 by @​tahakocal
• Order iteration results numerically #​7769 by @​tahakocal
• Score GLEU against the best matching reference #​7768 by @​tahakocal

Telemetry and Observability

• Optionally preserve logging scopes in buffered log records #​7813 by @​evgenyfedorov2 (co-authored by @​Copilot)
• Fix OOM from unbounded enumeration of ExtendedLogger tag joiners #​7819 by @​evgenyfedorov2 (co-authored by @​Copilot)
• Fix log buffering race by removing the rule selector cache #​7803 by @​evgenyfedorov2 (co-authored by @​Copilot)

ASP.NET Core Extensions

• Rename AddHttpLatencyTelemetry to AddHttpServerLatencyTelemetry (API-approved shape) #​7730 by @​EasyL0ver (co-authored by @​Copilot)
• Fix ArgumentNullException in per-request log buffering at the end of a request #​7811 by @​evgenyfedorov2 (co-authored by @​Copilot)

AI Project Templates

• Align aichatweb local vector-store keys with Guid record keys #​7804 by @​jongalloway (co-authored by @​adamsitnik @​Copilot)

Caching

... (truncated)

10.10.1

This release fixes two OpenAI integration issues: a TypeLoadException on tool-carrying Responses API calls and a streaming crash against third-party OpenAI-compatible endpoints, by upgrading the OpenAI SDK to 2.14.0.

Packages in this release

Package	Version
Microsoft.Extensions.AI.OpenAI	10.10.1
Microsoft.Extensions.AI.Abstractions	10.10.1

What's Changed

AI

• Upgrade OpenAI SDK to 2.14.0 #​7761 by @​zxyao145

Acknowledgements

• @​zxyao145 made their first contribution in #​7761
• @​zxyao145 submitted issue #​7760 (resolved by #​7761)
• @​jozkee @​wtgodbe reviewed pull requests

Full Changelog: dotnet/extensions@v10.10.0...v10.10.1

Commits viewable in compare view.

Updated Microsoft.Extensions.DependencyInjection.Abstractions from 10.0.12 to 10.0.13.

Release notes

Sourced from Microsoft.Extensions.DependencyInjection.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Logging.Abstractions from 10.0.12 to 10.0.13.

Release notes

Sourced from Microsoft.Extensions.Logging.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.10.0 to 18.11.0.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.11.0

What's Changed

• Fix TRX logger mangling astral-plane (non-BMP) characters by @​azat-msft in Fix TRX logger mangling astral-plane (non-BMP) characters microsoft/vstest#16318
• Disable the MTP testhost by default by @​nohwnd in Disable the MTP testhost by default microsoft/vstest#16337
• Fix OS-blind apphost probe in MTP bridge on Unix (regression from #​16201) by @​azat-msft in Fix OS-blind apphost probe in MTP bridge on Unix (regression from #16201) microsoft/vstest#16336
• Retarget the MTP client onto Microsoft.Testing.Platform.ServerMode.Client.Sources by @​nohwnd in Retarget the MTP client onto Microsoft.Testing.Platform.ServerMode.Client.Sources microsoft/vstest#16300
• Pass arguments to PowerShell with -File instead of -command by @​nohwnd in Pass arguments to PowerShell with -File instead of -command microsoft/vstest#16363
• Respect console logger verbosity from a settings file by @​nohwnd in Respect console logger verbosity from a settings file microsoft/vstest#16044
• Fix backslash normalization in VSTestCLIRunSettings on Unix by @​nohwnd in [fix] Fix backslash normalization in VSTestCLIRunSettings on Unix microsoft/vstest#15795
• Docs: fix typo explicitely -> explicitly by @​vaibhav8a in docs: fix typo explicitely -> explicitly microsoft/vstest#16397
• Copy acceptance test diagnostic logs into the test results directory by @​nohwnd in Copy acceptance test diagnostic logs into the test results directory microsoft/vstest#16403

New Contributors

• @​vaibhav8a made their first contribution in docs: fix typo explicitely -> explicitly microsoft/vstest#16397

Full Changelog: microsoft/vstest@v18.10.1...v18.11.0

18.10.1

What's Changed

• Isolate code coverage files in published output by @​azat-msft in [rel/18.10] Isolate code coverage files in published output microsoft/vstest#16476

Full Changelog: microsoft/vstest@v18.10.0...v18.10.1

Commits viewable in compare view.

Updated OllamaSharp from 5.4.30 to 5.5.0.

Release notes

Sourced from OllamaSharp's releases.

5.5.0

What's Changed

What's Changed

• Add SystemOne by @​mili-tan in Add SystemOne awaescher/OllamaSharp#396

Full Changelog: awaescher/OllamaSharp@5.4.30...5.5.0

Commits viewable in compare view.

Updated PdfPig.Rendering.Skia from 0.1.16.4 to 0.1.16.6.

Release notes

Sourced from PdfPig.Rendering.Skia's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated QRCoder from 1.8.0 to 1.8.1.

Release notes

Sourced from QRCoder's releases.

1.8.1

What's Changed

• a couple places where ArtQRCode creates a short lived Bitmap but neve… by @​danFbach in a couple places where ArtQRCode creates a short lived Bitmap but neve… Shane32/QRCoder#695
• Minor performance improvement in BitmapByteQRCode + clarify padding calculation by @​KrisVandermotten in Minor performance improvement in BitmapByteQRCode + clarify padding calculation Shane32/QRCoder#698
• Cleanup and optimize CalculateGeneratorPolynom by @​KrisVandermotten in Cleanup and optimize CalculateGeneratorPolynom Shane32/QRCoder#702
• Optimize AlignmentPatterns by @​KrisVandermotten in Optimize AlignmentPatterns Shane32/QRCoder#699
• Some cleanup (and minor optimizations) in BitmapByteQRCode by @​KrisVandermotten in Some cleanup (and minor optimizations) in BitmapByteQRCode Shane32/QRCoder#703
• Optimizations in mask patterns by @​KrisVandermotten in Optimizations in mask patterns Shane32/QRCoder#706

New Contributors

• @​danFbach made their first contribution in a couple places where ArtQRCode creates a short lived Bitmap but neve… Shane32/QRCoder#695
• @​KrisVandermotten made their first contribution in Minor performance improvement in BitmapByteQRCode + clarify padding calculation Shane32/QRCoder#698

Full Changelog: Shane32/QRCoder@v1.8.0...v1.8.1

Commits viewable in compare view.

Updated QuestPDF from 2026.8.0 to 2026.9.1.

Release notes

Sourced from QuestPDF's releases.

2026.9.1

• Updated Skia to m154.
• Updated qpdf to 12.4.1.
• Fixed an issue where garbage collection could corrupt PDF tag attributes during concurrent PDF generation (found and fixed by @​Lurtz7 in Keep PDF/UA attribute strings alive until the document is closed (fixes stale-pointer corruption and crashes in document_close) QuestPDF/QuestPDF#1483),
• Improved PDF/UA-1 compatibility when generating ZUGFeRD and Factur-X invoices.
• Fixed an issue in the DocumentOperation API where DocumentAttachmentRelationship.Supplement was incorrectly mapped to /Alternative.
• Improved handling of stream-writing exceptions during PDF generation.
• The ShowInCompanion API now automatically starts the Companion App if it is not already running (requires Companion App 2026.9.0 or newer).
• Improved exception messages related to Settings.ThrowOnMissingFontFamilies, Settings.ThrowOnMissingTextGlyphs, and Settings.UseSystemFonts.
• Reduced connection time to the Companion App on Windows.
• Added missing license files for dependencies.

2026.9.0

This release is dedicated to text handling improvements

QuestPDF 2026.9.0 improves font management to make document rendering more predictable across development machines, CI, containers, and cloud environments.

Fonts installed on the operating system vary between machines. A document that looks correct during development may use different fallback fonts, display placeholder glyphs, or lose text after deployment. To help catch these problems before a PDF reaches its recipient, QuestPDF now excludes system fonts by default and validates font availability and glyph coverage during document generation.

Upgrading to 2026.9.0

Deploy the required font files with your application and reference them by the family names stored in those files. Fonts in the application directory are registered automatically; you can also register them explicitly through FontManager. Use FontManager.GetRegisteredFonts() to inspect the available family names.

Please compare previous settings with the new defaults:

// previous behavior:
QuestPDF.Settings.UseSystemFonts = true;
QuestPDF.Settings.ThrowOnMissingFontFamilies = false;
QuestPDF.Settings.ThrowOnMissingTextGlyphs = false;
QuestPDF.Settings.EnableDetailedLayoutErrors = false;

// current behavior:
QuestPDF.Settings.UseSystemFonts = false;
QuestPDF.Settings.ThrowOnMissingFontFamilies = true;
QuestPDF.Settings.ThrowOnMissingTextGlyphs = true;
QuestPDF.Settings.EnableDetailedLayoutErrors = true;

Also review the deployment and API changes below. Renamed APIs remain available under their previous names, marked as obsolete with compiler warnings.

Covering additional languages

QuestPDF includes the bundled Lato font, which covers Latin, Greek, and Cyrillic scripts. For other scripts, such as Chinese, Japanese, Korean, Arabic, Hebrew, Thai, or emoji, we recommend additionally deploying the free, open-source Google Noto font family, registering it with FontManager, and configuring it as a font fallback in the default text style of the document.

// at application startup
FontManager.RegisterFontsFromDirectory("Fonts/Noto");

// in the document
Document.Create(document => 
{
    document.Page(page => 
    {
        page.DefaultTextStyle(style => style.FontFamily("Lato", "Noto Sans", "Noto Sans CJK SC", "Noto Emoji"));
    });
});

⚠️ Breaking changes

... (truncated)

Commits viewable in compare view.

Updated xunit.runner.visualstudio from 4.0.0 to 4.0.1.

Release notes

Sourced from xunit.runner.visualstudio's releases.

4.0.1

Release notes: https://xunit.net/releases/visualstudio/4.0.1

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions