chore(deps): update microsoft.extensions#5905
Conversation
thomhurst
added
dependencies
![claude[bot]](https://avatars.githubusercontent.com/in/1236702?s=60&v=4){kind=small}
There was a problem hiding this comment.
Dependency Update Review
This is a clean, automated Renovate dependency update. No issues found.
Changes Overview
| Package | Change | Type |
|---|---|---|
| 10.0.7 → 10.0.8 | patch | |
| 10.0.7 → 10.0.8 | patch | |
| 10.0.7 → 10.0.8 | patch | |
Microsoft.Extensions.Http.Resilience |
10.5.0 → 10.6.0 | minor |
Microsoft.Extensions.ServiceDiscovery |
10.5.0 → 10.6.0 | minor |
Observations
Consistency — Updates are applied uniformly across Directory.Packages.props, per-project overrides, templates, and examples. No stale references left behind.
Multi-targeting pattern — The TUnit.Logging.Microsoft and TUnit.Mocks.Logging projects correctly preserve their VersionOverride values (8.0.0 / 9.0.0 per target framework) while bumping the base Version attribute. This matches the existing multi-targeting strategy.
Security note — The Microsoft.Extensions.Http.Resilience 10.6.0 release includes an indirect fix for CVE-2026-33750 (brace-expansion), making this update worthwhile beyond routine maintenance.
LGTM. Safe to merge via the configured squash auto-merge.
There was a problem hiding this comment.
Dependency Update Review
This is a clean, automated Renovate dependency update. No issues found.
Changes Overview
| Package | Change | Type |
|---|---|---|
| Microsoft.Extensions.DependencyInjection | 10.0.7 → 10.0.8 | patch |
| Microsoft.Extensions.Logging | 10.0.7 → 10.0.8 | patch |
| Microsoft.Extensions.Logging.Abstractions | 10.0.7 → 10.0.8 | patch |
| Microsoft.Extensions.Http.Resilience | 10.5.0 → 10.6.0 | minor |
| Microsoft.Extensions.ServiceDiscovery | 10.5.0 → 10.6.0 | minor |
Observations
Consistency — Updates are applied uniformly across Directory.Packages.props, per-project overrides, templates, and examples. No stale references left behind.
Multi-targeting pattern — The TUnit.Logging.Microsoft and TUnit.Mocks.Logging projects correctly preserve their VersionOverride values (8.0.0 / 9.0.0 per target framework) while bumping the base Version attribute. This matches the existing multi-targeting strategy.
Security note — The Microsoft.Extensions.Http.Resilience 10.6.0 release includes an indirect fix for CVE-2026-33750 (brace-expansion), making this update worthwhile beyond routine maintenance.
LGTM. Safe to merge via the configured squash auto-merge.
Up to standards ✅🟢 Issues
|
| Metric | Results |
|---|---|
| Complexity | 0 |
NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.
2 participants
This PR contains the following updates:
10.0.7→10.0.810.5.0→10.6.010.0.7→10.0.810.0.7→10.0.810.5.0→10.6.0Release Notes
dotnet/extensions (Microsoft.Extensions.Http.Resilience)
v10.6.0What's Changed
Directory.SetCurrentDirectoryand anchor cwd assertions to absolute paths by @Copilot in #7487New Contributors
Full Changelog: dotnet/extensions@v10.5.0...v10.6.0
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Mend Renovate.