Update .NET Packages

[dependencyupdates]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
Microsoft.AspNetCore.Authentication.JwtBearer (source)	10.0.8 → 10.0.9
Microsoft.AspNetCore.Authentication.OpenIdConnect (source)	10.0.8 → 10.0.9
Microsoft.AspNetCore.Mvc.Testing (source)	10.0.8 → 10.0.9
Microsoft.AspNetCore.SignalR.Client (source)	10.0.8 → 10.0.9
Microsoft.Extensions.Caching.Memory (source)	10.0.8 → 10.0.9
Microsoft.Extensions.DependencyInjection (source)	10.0.8 → 10.0.9
Microsoft.Extensions.DependencyModel (source)	10.0.8 → 10.0.9
Microsoft.Extensions.Hosting (source)	10.0.8 → 10.0.9
Microsoft.Extensions.Hosting.Abstractions (source)	10.0.8 → 10.0.9
Microsoft.Extensions.Hosting.WindowsServices (source)	10.0.8 → 10.0.9
Microsoft.Extensions.Logging.Abstractions (source)	10.0.8 → 10.0.9
Microsoft.Extensions.Logging.Console (source)	10.0.8 → 10.0.9
Microsoft.Extensions.TimeProvider.Testing (source)	10.6.0 → 10.7.0
System.Configuration.ConfigurationManager (source)	10.0.8 → 10.0.9
System.Diagnostics.PerformanceCounter (source)	10.0.8 → 10.0.9
System.DirectoryServices.AccountManagement (source)	10.0.8 → 10.0.9
System.Formats.Cbor (source)	10.0.8 → 10.0.9
System.IO.Hashing (source)	10.0.8 → 10.0.9
System.Management (source)	10.0.8 → 10.0.9
System.Reflection.MetadataLoadContext (source)	10.0.8 → 10.0.9
System.Security.Cryptography.Pkcs (source)	10.0.8 → 10.0.9
System.ServiceProcess.ServiceController (source)	10.0.8 → 10.0.9
System.Threading.RateLimiting (source)	10.0.8 → 10.0.9

---

Release Notes

dotnet/extensions (Microsoft.Extensions.TimeProvider.Testing)

v10.7.0

v10.7.0 graduates the Microsoft.Extensions.Diagnostics.ResourceMonitoring.Kubernetes package to stable. The package registers a Kubernetes-aware ResourceQuotaProvider that reads the pod's CPU and memory requests and limits and exposes them to Microsoft.Extensions.Diagnostics.ResourceMonitoring as baseline and maximum quotas, which then feed the request and limit dimensions of the published resource utilization metrics. The companion ResourceQuota and ResourceQuotaProvider types in Microsoft.Extensions.Diagnostics.ResourceMonitoring graduate to stable in the same change so that consumers can implement custom quota providers without taking an experimental dependency.

On the AI side, Microsoft.Extensions.AI.OpenAI moves to OpenAI 2.11.0 and fixes a deserialization bug in ToolJson.AdditionalProperties so that JSON Schema additionalProperties values shaped as sub-schema objects (for example {"type":"string"}) are preserved instead of throwing during deserialization. HostedFileContent.SizeInBytes and HostedFileContent.CreatedAt graduate to stable since both values are consistently available across hosted-file providers, while Purpose and Scope remain experimental as provider-shaped vocabulary. FunctionInvokingChatClient drops a backward-compat path that auto-marked ToolApprovalResponseContent entries with InformationalOnly: true; consumers that need to continue accepting sessions serialized before #​7468 can use the sample ApprovalHistoryNormalizingChatClient middleware added in the test project.

Experimental API Changes

Now Stable

• Microsoft.Extensions.Diagnostics.ResourceMonitoring.Kubernetes package is now stable #​7253
• Resource Monitoring ResourceQuota and ResourceQuotaProvider APIs are now stable (previously EXTEXP0008) #​7253
• HostedFileContent.SizeInBytes and HostedFileContent.CreatedAt are now stable (previously MEAI001) #​7513

What's Changed

AI

• Graduate HostedFileContent.SizeInBytes and HostedFileContent.CreatedAt #​7513 by @​jozkee (co-authored by @​Copilot)
• Remove backward-compat InformationalOnly case from FICC; suggest middleware workaround #​7538 by @​jozkee (co-authored by @​Copilot)
• Upgrade OpenAI package from 2.10.0 to 2.11.0 #​7544 by @​jozkee (co-authored by @​Copilot)
• Fix ToolJson.AdditionalProperties to accept sub-schema objects #​7546 by @​jozkee (co-authored by @​Copilot)

Diagnostics, Health Checks, and Resource Monitoring

• Move Microsoft.Extensions.Diagnostics.ResourceMonitoring.Kubernetes to stable #​7253 by @​amadeuszl (co-authored by @​Copilot)

Repository Infrastructure Updates

• [main] Update dependencies from dotnet/arcade #​7521
• Bump dotnet-reportgenerator-globaltool from 5.5.9 to 5.5.10 #​7522
• Bump dotnet-coverage from 18.6.2 to 18.7.0 #​7530
• Bump PowerShell from 7.6.1 to 7.6.2 #​7531
• Bump qs from 6.15.1 to 6.15.2 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7532
• [main] Update dependencies from dotnet/arcade #​7534
• Bump tmp from 0.2.5 to 0.2.6 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7537

Acknowledgements

• @​ericstj submitted issue #​7509 (resolved by #​7544)
• @​scottt732 submitted issue #​7540 (resolved by #​7546)
• @​DeagleGross @​wtgodbe @​dariusclay @​evgenyfedorov2 @​peterwald @​PranavSenthilnathan @​shyamnamboodiripad @​stephentoub @​tarekgh reviewed pull requests

Full Changelog: dotnet/extensions@v10.6.0...v10.7.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

Commands to ignore dependencies

You can trigger dependency actions by commenting on this PR:

• @particularbot ignore this major version
• @particularbot ignore this minor version
• @particularbot ignore this dependency