Skip to content

Bump the all-other-nuget group with 2 updates#779

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/eng/skill-validator/src/all-other-nuget-b803b6bf8a
Open

Bump the all-other-nuget group with 2 updates#779
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/eng/skill-validator/src/all-other-nuget-b803b6bf8a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 17, 2026

Copy link
Copy Markdown
Contributor

Updated GitHub.Copilot.SDK from 0.3.0 to 1.0.1.

Release notes

Sourced from GitHub.Copilot.SDK's releases.

1.0.1

Installation

⚠️ Artifact versioning plan: Releases of this implementation track releases of the reference implementation. For each release of the reference implementation, there may follow a corresponding release of this implementation with the same number as the reference implementation. Release identifiers of the reference implementation are in the form vMaj.Min.Micro. For example v0.1.32. The corresponding maven version for the release will be Maj.Min.Micro-java.N, where Maj, Min and Micro are the corresponding numbers for the reference implementation release, and N is a monotonically increasing sequence number starting with 0 for each release. See the corresponding architectural decision record for more information in the docs/adr directory of the source code.

📦 [View on Maven Central]((central.sonatype.com/redacted)

📖 [Documentation]((github.github.io/redacted) · [Javadoc]((github.github.io/redacted)

Maven

<dependency>
    <groupId>com.github</groupId>
    <artifactId>copilot-sdk-java</artifactId>
    <version>1.0.1</version>
</dependency>

Gradle (Kotlin DSL)

implementation("com.github:copilot-sdk-java:1.0.1")

Gradle (Groovy DSL)

implementation 'com.github:copilot-sdk-java:1.0.1'

Feature: @​CopilotExperimental compile-time gate for experimental APIs

Experimental SDK APIs are now guarded by the @​CopilotExperimental annotation. Using them causes a compile error by default; opt in by annotating the consuming class or method with @​AllowCopilotExperimental, or pass -Acopilot.experimental.allowed=true to the Java compiler. (#​1601)

`@​AllowCopilotExperimental`
public class MyHandler {
    // may use `@​CopilotExperimental` APIs here
}

Feature: open-canvases snapshot on CopilotSession

CopilotSession.getOpenCanvases() now returns the live set of canvas instances open for the session, bringing the Java SDK to parity with the other SDK languages. The snapshot is seeded from the session create/resume response and kept current via session.canvas.opened and session.canvas.closed events. (#​1606)

List<OpenCanvasInstance> open = session.getOpenCanvases();

Other changes

... (truncated)

1.0.0

Installation

⚠️ Artifact versioning plan: Releases of this implementation track releases of the reference implementation. For each release of the reference implementation, there may follow a corresponding release of this implementation with the same number as the reference implementation. Release identifiers of the reference implementation are in the form vMaj.Min.Micro. For example v0.1.32. The corresponding maven version for the release will be Maj.Min.Micro-java.N, where Maj, Min and Micro are the corresponding numbers for the reference implementation release, and N is a monotonically increasing sequence number starting with 0 for each release. See the corresponding architectural decision record for more information in the docs/adr directory of the source code.

📦 View on Maven Central

📖 Documentation · Javadoc

Maven

<dependency>
    <groupId>com.github</groupId>
    <artifactId>copilot-sdk-java</artifactId>
    <version>1.0.0</version>
</dependency>

Gradle (Kotlin DSL)

implementation("com.github:copilot-sdk-java:1.0.0")

Gradle (Groovy DSL)

implementation 'com.github:copilot-sdk-java:1.0.0'

What's Changed

Full Changelog: github/copilot-sdk@java/v1.0.0-beta-12-java.1...java/v1.0.0

1.0.0-beta-12-java.1

Installation

⚠️ Artifact versioning plan: Releases of this implementation track releases of the reference implementation. For each release of the reference implementation, there may follow a corresponding release of this implementation with the same number as the reference implementation. Release identifiers of the reference implementation are in the form vMaj.Min.Micro. For example v0.1.32. The corresponding maven version for the release will be Maj.Min.Micro-java.N, where Maj, Min and Micro are the corresponding numbers for the reference implementation release, and N is a monotonically increasing sequence number starting with 0 for each release. See the corresponding architectural decision record for more information in the docs/adr directory of the source code.

📦 [View on Maven Central]((central.sonatype.com/redacted)

📖 [Documentation]((github.github.io/redacted) · [Javadoc]((github.github.io/redacted)

Maven

<dependency>
    <groupId>com.github</groupId>
    <artifactId>copilot-sdk-java</artifactId>
    <version>1.0.0-beta-12-java.1</version>
</dependency>

Gradle (Kotlin DSL)

implementation("com.github:copilot-sdk-java:1.0.0-beta-12-java.1")

Gradle (Groovy DSL)

implementation 'com.github:copilot-sdk-java:1.0.0-beta-12-java.1'

Feature: slash command responses accessible via RPC

Applications can now retrieve responses from slash commands. Previously the ability to invoke slash commands existed, but responses were not surfaced through the RPC layer. (#​1520)

// Send a slash command and receive its response via the session RPC
CompletableFuture<AssistantMessage> response = session.sendMessage("/my-command args");

Feature: session.mcp.apps.callTool returns JsonNode

session.mcp.apps.callTool() previously returned CompletableFuture<Void> due to a codegen gap; it now correctly returns CompletableFuture<JsonNode>, making the tool result accessible. (#​1523)

JsonNode result = session.rpc().mcp().apps().callTool(params).get();

Generated by Release Changelog Generator · ● 2.2M

1.0.0-beta-10-java.5

Installation

⚠️ Artifact versioning plan: Releases of this implementation track releases of the reference implementation. For each release of the reference implementation, there may follow a corresponding release of this implementation with the same number as the reference implementation. Release identifiers of the reference implementation are in the form vMaj.Min.Micro. For example v0.1.32. The corresponding maven version for the release will be Maj.Min.Micro-java.N, where Maj, Min and Micro are the corresponding numbers for the reference implementation release, and N is a monotonically increasing sequence number starting with 0 for each release. See the corresponding architectural decision record for more information in the docs/adr directory of the source code.

📦 [View on Maven Central]((central.sonatype.com/redacted)

Maven

<dependency>
    <groupId>com.github</groupId>
    <artifactId>copilot-sdk-java</artifactId>
    <version>1.0.0-beta-10-java.5</version>
</dependency>

Gradle (Kotlin DSL)

implementation("com.github:copilot-sdk-java:1.0.0-beta-10-java.5")

Gradle (Groovy DSL)

implementation 'com.github:copilot-sdk-java:1.0.0-beta-10-java.5'

Changes since java/v1.0.0-beta-10-java.4

  • improvement: add reflection-based Jackson round-trip test coverage for all generated event/type classes (#​1509)
  • improvement: fix JaCoCo coverage badge script to use correct generated-types package name (#​1499)
  • improvement: Java release pipeline improvements (#​1514)

New contributors

  • @​examon made their first contribution in #​1323

Full Changelog: github/copilot-sdk@java/v1.0.0-beta-10-java.4...java/v1.0.0-beta-10-java.5

Generated by Release Changelog Generator · ● 2.9M

1.0.0-beta-10-java.4

Installation

i️ Public Preview: This is the official Java SDK for GitHub Copilot. This repository treats the official .NET and Node.js SDKs for GitHub Copilot as reference implementations. These SDKs are all officially supported as GitHub open source projects. The Java implementation follows the backward compatibility guarantees offered by the reference implementations.

⚠️ Artifact versioning plan: Releases of this implementation track releases of the reference implementation. For each release of the reference implementation, there may follow a corresponding release of this implementation with the same number as the reference implementation. Release identifiers of the reference implementation are in the form vMaj.Min.Micro. For example v0.1.32. The corresponding maven version for the release will be Maj.Min.Micro-java.N, where Maj, Min and Micro are the corresponding numbers for the reference implementation release, and N is a monotonically increasing sequence number starting with 0 for each release. See the corresponding architectural decision record for more information in the docs/adr directory of the source code.

📦 View on Maven Central

Maven

<dependency>
    <groupId>com.github</groupId>
    <artifactId>copilot-sdk-java</artifactId>
    <version>1.0.0-beta-10-java.4</version>
</dependency>

Gradle (Kotlin DSL)

implementation("com.github:copilot-sdk-java:1.0.0-beta-10-java.4")

Gradle (Groovy DSL)

implementation 'com.github:copilot-sdk-java:1.0.0-beta-10-java.4'

Changes since java/v1.0.0-beta-10-java.3

  • improvement: fix release pipeline token permissions to enable publishing to Maven Central

Full Changelog: github/copilot-sdk@java/v1.0.0-beta-10-java.3...java/v1.0.0-beta-10-java.4

Generated by Release Changelog Generator · ● 2.7M

1.0.0-beta-10-java.3

Installation

ℹ️ Public Preview: This is the official Java SDK for GitHub Copilot. This repository treats the official .NET and Node.js SDKs for GitHub Copilot as reference implementations. These SDKs are all officially supported as GitHub open source projects. The Java implementation follows the backward compatibility guarantees offered by the reference implementations.

⚠️ Artifact versioning plan: Releases of this implementation track releases of the reference implementation. For each release of the reference implementation, there may follow a corresponding release of this implementation with the same number as the reference implementation. Release identifiers of the reference implementation are in the form vMaj.Min.Micro. For example v0.1.32. The corresponding maven version for the release will be Maj.Min.Micro-java.N, where Maj, Min and Micro are the corresponding numbers for the reference implementation release, and N is a monotonically increasing sequence number starting with 0 for each release. See the corresponding architectural decision record for more information in the docs/adr directory of the source code.

📦 View on Maven Central

Maven

<dependency>
    <groupId>com.github</groupId>
    <artifactId>copilot-sdk-java</artifactId>
    <version>1.0.0-beta-10-java.3</version>
</dependency>

Gradle (Kotlin DSL)

implementation("com.github:copilot-sdk-java:1.0.0-beta-10-java.3")

Gradle (Groovy DSL)

implementation 'com.github:copilot-sdk-java:1.0.0-beta-10-java.3'

Full Changelog: github/copilot-sdk@java/v1.0.0-beta-10-java.1...java/v1.0.0-beta-10-java.3

1.0.0-beta.12

What's Changed

New Contributors

Full Changelog: github/copilot-sdk@rust/v1.0.0-beta.10...rust/v1.0.0-beta.12

1.0.0-beta.10

What's Changed

New Contributors

Full Changelog: github/copilot-sdk@rust/v1.0.0-beta.9...rust/v1.0.0-beta.10

1.0.0-beta.9

What's Changed

New Contributors

Full Changelog: github/copilot-sdk@rust/v1.0.0-beta.8...rust/v1.0.0-beta.9

1.0.0-beta.8

What's Changed

Full Changelog: github/copilot-sdk@rust/v1.0.0-beta.7...rust/v1.0.0-beta.8

1.0.0-beta.7

What's Changed

Full Changelog: github/copilot-sdk@rust/v1.0.0-beta.6...rust/v1.0.0-beta.7

1.0.0-beta.6

What's Changed

1.0.0-beta.4

What's Changed

New Contributors

Full Changelog: github/copilot-sdk@rust-v0.1.0...rust/v1.0.0-beta.4

1.0.0-beta.3

Feature: mode handler APIs for plan approval and rate-limit recovery

Applications can now register callbacks for exitPlanMode.request and autoModeSwitch.request from the Copilot runtime, giving full control over plan-mode transitions and automatic model switching after rate-limit events. (#​1228)

const session = await client.createSession({
  onExitPlanMode: async (request) => ({ approved: true }),
  onAutoModeSwitch: (request) => "yes",
});
var session = await client.CreateSessionAsync(new SessionConfig
{
    OnExitPlanMode = (request, _) => Task.FromResult(new ExitPlanModeResult { Approved = true }),
    OnAutoModeSwitch = (request, _) => Task.FromResult(AutoModeSwitchResponse.Yes),
});
  • Python: on_exit_plan_mode / on_auto_mode_switch kwargs on create_session()
  • Go: ExitPlanModeHandler / AutoModeSwitchHandler fields on SessionConfig

Feature: SDK tracing diagnostics

The .NET, Python, and Rust SDKs now emit structured diagnostic logs covering CLI startup, TCP connection, JSON-RPC request timing, session lifecycle, and error paths. (#​1217)

var client = new CopilotClient(new CopilotClientOptions
{
    Logger = loggerFactory.CreateLogger<CopilotClient>(),
});

Python emits logs via stdlib logging under copilot.* loggers at DEBUG level. Rust uses tracing structured fields; wire up a tracing_subscriber as usual.

Feature: enableSessionTelemetry session option

A new enableSessionTelemetry option on SessionConfig and ResumeSessionConfig lets applications explicitly enable or disable the runtime's internal session telemetry. (#​1224)

const session = await client.createSession({ enableSessionTelemetry: true });
var session = await client.CreateSessionAsync(new SessionConfig { EnableSessionTelemetry = true });

Other changes

  • bugfix: [C#] session-event enums are now string-backed readonly structs, preventing deserialization failures when the runtime adds new enum values (#​1226)
    ... (truncated)

1.0.0-beta.2

Feature: remote session support

Applications can now enable remote session support across all SDKs, providing parity with the CLI's --remote flag. There are two complementary mechanisms: a client-level option that enables remote for all sessions, and per-session RPC methods to toggle remote on demand. (#​1192)

Always-on via client option:

const client = new CopilotClient({ remote: true });
session.on("session.info", (event) => {
  if (event.data.infoType === "remote") {
    console.log("Remote URL:", event.data.url);
  }
});
var client = new CopilotClient(new CopilotClientOptions { Remote = true });
session.OnSessionInfo += (e) => {
    if (e.InfoType == "remote")
        Console.WriteLine($"Remote URL: {e.Url}");
};

On-demand via RPC:

const result = await session.rpc.remote.enable();
console.log("Remote URL:", result.url);
await session.rpc.remote.disable();
var result = await session.Rpc.Remote.EnableAsync();
Console.WriteLine($"Remote URL: {result.Url}");
await session.Rpc.Remote.DisableAsync();
  • Python: await session.rpc.remote.enable() / session.rpc.remote.disable()
  • Go: session.RPC.Remote.Enable(ctx) / session.RPC.Remote.Disable(ctx)

Other changes

  • improvement: [Rust] align Rust SDK public surface with C#, Go, Python, and TypeScript — removes autoModeSwitch, exitPlanMode, disabled_mcp_servers; adds available_tools/disabled_skills to ResumeSessionConfig; expands tool results with binary payloads and MCP CallToolResult conversion (#​1212)
  • improvement: [Rust] internalize env_value_mode for cross-SDK parity — envValueMode is now always sent as "direct" on the wire, consistent with all other SDKs (#​1215)

Generated by Release Changelog Generator · ● 225.2K

1.0.0-beta.1

This is the first beta release of the Copilot SDK. The release includes all features we have committed to including in the upcoming General Availability (GA) release.

But note - we're not stopping here! Before GA, we still plan to add more top-requested features, as well as any critical bugfixes. We'll also carry out a final round of API reviews and will likely make further breaking changes to streamline naming before it locks down at 1.0.0.

Highlights of 1.0.0 Beta 1 include custom instruction directories, configurable data directories, TCP connection tokens for headless servers, and a more self-contained .NET distribution (eliminating third-party dependencies).

New features

Custom instruction directories

Sessions can now specify additional directories to search for custom instruction files via the instructionDirectories option on session create and resume config. This lets applications point the CLI at project-specific or team-shared instruction files beyond the default locations. (#​1190)

// TypeScript
const session = await client.createSession({
  onPermissionRequest: approveAll,
  instructionDirectories: [
    "/repo/.copilot/instructions",
    "/shared/team-instructions",
  ],
});
// C#
var session = await client.CreateSessionAsync(new() {
    OnPermissionRequest = PermissionHandler.ApproveAll,
    InstructionDirectories = ["/repo/.copilot/instructions", "/shared/team-instructions"],
});
  • Python: await client.create_session(on_permission_request=..., instruction_directories=["/repo/.copilot/instructions"])
  • Go: client.CreateSession(ctx, &copilot.SessionConfig{InstructionDirectories: []string{"/repo/.copilot/instructions"}})

TCP connection token

When the SDK spawns a CLI server in TCP mode, it now auto-generates a connection token to authenticate the handshake — closing the loopback listener to unauthorized connections by default. For applications connecting to an externally managed TCP server that requires a token, the new tcpConnectionToken client option lets you supply it explicitly. (#​1176)

// TypeScript
// After starting runtime with env var COPILOT_CONNECTION_TOKEN=<some_uuid>
const client = new CopilotClient({
  cliUrl: "localhost:3000",
  tcpConnectionToken: "<some_uuid>",
});
 ... (truncated)

Commits viewable in [compare view](https://github.com/github/copilot-sdk/compare/v0.3.0...java/v1.0.1).
</details>

Updated [MessagePack](https://github.com/MessagePack-CSharp/MessagePack-CSharp) from 2.5.301 to 3.1.7.

<details>
<summary>Release notes</summary>

_Sourced from [MessagePack's releases](https://github.com/MessagePack-CSharp/MessagePack-CSharp/releases)._

## 3.1.7

## What's Changed

* Add `scoped` to `MessagePackWriter.Write(ReadOnlySpan<T>)` methods by @​AArnott in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/2271
* Fix security issues in master by @​AArnott in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/2274

## Security release details

This release fixes 3 high severity and 9 moderate severity security vulnerabilities.

### High severity advisory fixes

- 26d4e743 GHSA-382j-8mxh-c7x2 Reject invalid DateTime ext lengths for CWE-789
- b9cb6050 GHSA-vh6j-jc39-fggf Use iteration for skipping msgpack structures for CWE-674
- 719e690a GHSA-hv8m-jj95-wg3x Bound LZ4 input reads for CWE-125

### Moderage severity advisory fixes

- 2b5a500a GHSA-v72x-2h86-7f8m Guard LZ4 decompression length for CWE-409
- f093bdc1 GHSA-qhmf-xw27-6rqr Reject nested typeless blocklist bypass for CWE-502
- f077798e GHSA-2f33-pr97-265q Default MVC input formatter to UntrustedData for CWE-1188
- 25a3493e GHSA-2x83-8g95-xh59 Limit untrusted ExpandoObject maps for CWE-407
- b414e6df GHSA-wfr3-xj75-pfwh Guard dynamic union depth for CWE-674
- 0555f07c GHSA-w567-gjr2-hm5j Validate Unity blit lengths for CWE-789
- 9b5783a7 GHSA-cxmj-83gh-fp49 Fix CWE-789 multidimensional array allocation validation
- f96fcf05 GHSA-q2h6-ghwm-5qm8 Use secure lookup comparer for CWE-407
- b3af7cf7 GHSA-cj9g-3mj2-g8vv Guard JSON conversion depth for CWE-674
- 66ad0894 GHSA-cj9g-3mj2-g8vv Avoid JSON separator recursion for CWE-674
- 082ba7da GHSA-cj9g-3mj2-g8vv Guard typeless JSON depth for CWE-674

### Fixes with no security advisory

- fb0fe9f0 Honor TypeFormatter options hooks for CWE-470
- c1c06a6f Fix WriteRawX methods to advance by written length
- 46c6a0fe Fix CWE-190 map header length overflow

**Full Changelog**: https://github.com/MessagePack-CSharp/MessagePack-CSharp/compare/v3.1.6...v3.1.7

## 3.1.6

## What's Changed
* Add several known unsafe 'gadgets' to the disallow list by @​AArnott in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/2270


**Full Changelog**: https://github.com/MessagePack-CSharp/MessagePack-CSharp/compare/v3.1.5...v3.1.6

## 3.1.5

## What's Changed
* Remove unneeded GetTypeInfo() calls by @​Bykiev in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/2206
* Use 'Write' instead of 'WriteInt32' for union type keys by @​VictorNicollet in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/2212
* Fix various disposable issues by @​Bykiev in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/2224
* fix: prevent StackOverflow in Equals with recursive generic constraints by @​khuongntrd in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/2226
* Add more types to the default disallow list of named types to be deserialized by @​AArnott in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/2256
* Fix release workflow by @​AArnott in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/2268
* ~~Fix Incorrect DateTimeOffset Serializer by @​T0PP1ng in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/2225~~
* Revert DateTimeOffset encoding change by @​AArnott in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/2262

## New Contributors
* @​Bykiev made their first contribution in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/2206
* @​VictorNicollet made their first contribution in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/2212
* @​T0PP1ng made their first contribution in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/2225
* @​khuongntrd made their first contribution in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/2226

**Full Changelog**: https://github.com/MessagePack-CSharp/MessagePack-CSharp/compare/v3.1.4...v3.1.5

## 3.1.4

## What's Changed
* Fix SkipClrVisibilityChecks to notice private fields in base classes by @​AArnott in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/2153
* Promote analyzers to AnalyzerReleases.Shipped.md by @​hanachiru in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/2169
* Add memory size check to `GetMemoryCheckResult` by @​AArnott in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/2172
* AccessModifier was added to generated code. by @​Nirklav in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/2185

## New Contributors
* @​hanachiru made their first contribution in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/2169

**Full Changelog**: https://github.com/MessagePack-CSharp/MessagePack-CSharp/compare/v3.1.3...v3.1.4

## 3.1.3

## What's Changed
* Fix stackoverflow on analyzer by @​neuecc in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/2150


**Full Changelog**: https://github.com/MessagePack-CSharp/MessagePack-CSharp/compare/v3.1.2...v3.1.3

## 3.1.2

## What's Changed
* Add missing recursion guard to `CodeAnalysisUtilities.GetTypeParameters` by @​AArnott in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/2123
* Remove FluentAssertions, Use Shouldly by @​neuecc in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/2124
* Fix issues about Double.MaxValue by @​guojiancong in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/2135
* GitHubActions, prevent run build-unity on external contributor by @​neuecc in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/2138
* Protects the generated resolver type metadata from trimmer by @​mayuki in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/2134
* Add PreserveAttribute to generic formatters for Unity IL2CPP by @​neuecc in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/2136
* Change ByteListFormatter behaviour to keep binary compatibility for List<byte> by @​neuecc in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/2139

## New Contributors
* @​guojiancong made their first contribution in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/2135

**Full Changelog**: https://github.com/MessagePack-CSharp/MessagePack-CSharp/compare/v3.1.1...v3.1.2

## 3.1.1

## What's Changed
* README.md: ÌntKey -> IntKey by @​stanoddly in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/2098
* allow DynamicGenericResolver to StandardResolver in DynamicAssembly.AvoidDynamicCode by @​neuecc in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/2105
* Remove PublicApiAnalyzers by @​neuecc in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/2104
* Fix source generator, don't generate when abstract/interface is not union by @​neuecc in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/2103
* enable analyze union / stop collect field when object marked SuppressSourceGeneration by @​neuecc in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/2106

## New Contributors
* @​stanoddly made their first contribution in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/2098

**Full Changelog**: https://github.com/MessagePack-CSharp/MessagePack-CSharp/compare/v3.1.0...v3.1.1

## 3.1.0

## What's Changed
* Relaxed the conditions in editor.config by @​neuecc in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/2088
* Add .NET 9 by @​neuecc in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/2090
* Add `Int128`, `UInt128`, `Rune`. `OrderedDictionary<T, V>`. `ReadOnlySet<T>` serialization support
* Check IsGenericType before call ConstructUnboundGenericType() by @​neuecc in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/2093
* Remove NerdBank.GitVersioning by @​neuecc in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/2094
* Current all apis to shipped.txt by @​neuecc in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/2095


**Full Changelog**: https://github.com/MessagePack-CSharp/MessagePack-CSharp/compare/v3.0.301...v3.1.0

## 3.0.301

## Note
Tag and Unity's version is 3.0.301 but published NuGet version is 3.0.308.
The version mismatch due to release process inconsistencies will be fixed in the next release.

## What's Changed
* Touch-ups to master by @​AArnott in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/2084
* Fix Source Generator doesnt work in Unity by @​neuecc in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/2087


**Full Changelog**: https://github.com/MessagePack-CSharp/MessagePack-CSharp/compare/v3.0.300...v3.0.301

## 3.0.300

Fixed version, [release notes see v3.0.3](https://github.com/MessagePack-CSharp/MessagePack-CSharp/releases/tag/v3.0.3).

## 3.0.238-rc.1

## What's Changed
* Fix simplified name for ValueTuple<T> by @​AlanLiu90 in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/2033
* Avoid crashing with stack overflow on recursive generic type parameter constraints by @​AArnott in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/2036


**Full Changelog**: https://github.com/MessagePack-CSharp/MessagePack-CSharp/compare/v3.0.233-rc.1...v3.0.238-rc.1



## 3.0.233-rc.1


## Changes

### Enhancements

* #​2013: Secure by default

### Fixes

* #​2031: Use generic type argument used for custom formatters
* #​2029: Apply scoped in more places
* #​2030: Support nesting formatters within generic data types
* #​2024: Source code generation fails for generic type with private member serialization
* #​2028: Avoid collecting fields with custom formatter recusively
* #​2023: Suppress MsgPack004 on private base members when only public is interesting
* #​2022: Ignore abstract implementations of `IMessagePackFormatter<T>`
* #​2012: MsgPack004 Analyzer triggering on not attributed private property on base class eventhough source generator shouldn't include private properties
* #​2017: MsgPack013 should not report diagnostics on abstract classes
* #​2021: Add `scoped` modifier to `in` parameters of `ref struct`
* #​2016: Avoid collecting members when it doesn't have [Key]
* #​2005: custom formatters code source generator error

### Others

* #​2032: Use simpler C# syntax for nullable value types


## 3.0.214-rc.1


## Changes:

* #​2015: Use a collision-resistant hash algorithm for untrusted data to address https://github.com/MessagePack-CSharp/MessagePack-CSharp/security/advisories/GHSA-4qm4-8hg2-g2xm
* #​2009: Build nuget package with semver v2

This list of changes was [auto generated](https://dev.azure.com/ils0086/MessagePack-CSharp/_build/results?buildId=2663&view=logs).

## 3.0.208-rc.1

## Breaking changes

* Drop .NET 6 support by @​AArnott in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1991

## Enhancements

* Lower language version requirement of source generated resolver by @​AlanLiu90 in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1926
* Add ignore case option to EnumAsStringFormatter by @​iguskov1810 in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1936
* Adjusted MsgPack004 to support records by @​N-Olbert in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1932 and  https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1946
* Add `MessagePackSerializer.Typeless.Deserialize` overload that takes `ReadOnlyMemory<byte>` by @​AArnott in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1959
* Make `CompositeResolverAttribute` much more useful by @​AArnott in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1968
* Add MsgPack014 analyzer and code fix by @​AArnott in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1969
* Reconcile AllowPrivate behavior by @​AArnott in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1990
* Add analyzers to help recognize breaking changes by @​AArnott in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/2003
* Add AOT formatter support for init properties and required members by @​AArnott in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1980
* Support formatters for CompositeResolverAttribute by @​AlanLiu90 in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1922

## Fixes

* Fix diagnostic and code fix for MsgPack011 on nesting types by @​AArnott in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1910
* Fix some source generator issues by @​AlanLiu90 in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1921
* Improve handling of array types in source generation by @​AArnott in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1960
* Honor key name overrides in source-generated formatters by @​AArnott in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1962
* MPC String Value From Key Attribute Fix by @​alimakki in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1963
* Update DynamicAssembly usage to honor different AssemblyLoadContext's by @​BertanAygun in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1978
* Fix pack to include analyzers (more reliably) by @​AArnott in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1994
* Migration improvements: deserializing constructors and less-frequent `partial` requirements by @​AArnott in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/2002
* Fix analyzers to not mis-interpret source generated formatters as user-defined by @​AArnott in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1982
* Fix embedded types being generated in resolver by @​AlanLiu90 in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/2000
* Fix handling of name collisions in type hierarchies by @​AArnott in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/2006
* Fix detecting duplicate keys by @​pkindruk in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1971

## Other changes

* Update test project to ensure default language version of generated code is C# 7.3 by @​AlanLiu90 in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1934
* Make source generation cancellable by @​AlanLiu90 in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1912
* Drop unused System.CodeDom package version by @​AArnott in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1965
* Fix AOT README anchor by @​alimakki in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1967
* Avoid GetSemanticModel in analyzer by @​AArnott in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1970
* Rename test class for improved discoverability by @​AArnott in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1984
* Replace DynamicMethod use with private-capable Ref.Emit by @​AArnott in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1981
* Reader/Writer touch-ups by @​AArnott in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1987
* Allow trimming of benchmarked frameworks by @​AArnott in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1988
* Build 3.0-rc.1 by @​AArnott in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/2004


## New Contributors
* @​N-Olbert made their first contribution in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1932
* @​iguskov1810 made their first contribution in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1936
* @​alimakki made their first contribution in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1963
 ... (truncated)

## 3.0.134-beta

## What's Changed
* Fix and improve generated formatters by @​AArnott in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1905
* Honor `ExcludeFormatterFromSourceGeneratedResolverAttribute` by suppressing certain warnings by @​AArnott in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1907


**Full Changelog**: https://github.com/MessagePack-CSharp/MessagePack-CSharp/compare/v3.0.129-beta...v3.0.134-beta

## 3.0.129-beta

## What's Changed
* Fix some source generator issues by @​AlanLiu90 in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1873
* Faster multi-element serialization for primitive types by @​pCYSl5EDgo in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1872
* Remove Unity related symbols from Nuget projects by @​pCYSl5EDgo in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1888
* Simd Accelerated bool[] deserialize by @​pCYSl5EDgo in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1890
* Avoid regenerating all formatters when only one object/union/enum changes by @​AlanLiu90 in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1884
* Fix UnsafeBlitFormatter for the case of endianess mismatch by @​pCYSl5EDgo in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1894
* Offer code fix for MsgPack011: `partial` modifier required by @​AArnott in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1893
* Build beta instead of alpha by @​AArnott in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1896
* Offer code fix to ignore unattribute members of MessagePackObject types by @​AArnott in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1898
* Fix UnsafeBlitFormatterBase by @​pCYSl5EDgo in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1900


**Full Changelog**: https://github.com/MessagePack-CSharp/MessagePack-CSharp/compare/v3.0.111-alpha...v3.0.129-beta

## 3.0.111-alpha

## What's Changed
* fixing issue with backing field naming and serialization failing by @​epitka in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1785
* Feature/1804 locate formatters only if has elements inside by @​nmi-relewise in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1805
* Enable ignoring fields by using [NonSerialized] by @​mookid8000 in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1808
* Reduce nuget dependencies by @​thompson-tomo in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1812
* Merge master and dependency updates into develop by @​AArnott in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1814
* Fix source generator handling of inaccessible custom formatters by @​AArnott in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1818
* Activate analyzers and source generator by default by @​AArnott in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1822
* Add `ExcludeFormatterFromSourceGeneratedResolverAttribute` by @​AArnott in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1824
* Raise perf tracking events when formatters are dynamically generated by @​AArnott in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1829
* Bump Microsoft.NET.StringTools from 17.9.5 to 17.10.4 by @​dependabot in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1840
* Eliminate `#if` regions related to unity by @​AArnott in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1825
* Preserve code comments when adding attributes to fields by @​AArnott in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1842
* Add .NET 8 target to mpc by @​AArnott in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1832
* Fix handling of formatters following the singleton pattern by @​AArnott in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1850
* Report missing `[MessagePackObject]` attribute for generic types  by @​AArnott in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1859
* Unity consumes messagepack as a nuget package instead of source by @​neuecc in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1734
* Allow writing to init property setters of generic classes on .NET 6+ by @​AArnott in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1879
* Fix issues about the equality of AnalyzerOptions and FormatterDescriptor by @​AlanLiu90 in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1874

## New Contributors
* @​epitka made their first contribution in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1785
* @​nmi-relewise made their first contribution in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1805
* @​mookid8000 made their first contribution in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1808
* @​thompson-tomo made their first contribution in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1812

**Full Changelog**: https://github.com/MessagePack-CSharp/MessagePack-CSharp/compare/v3.0.54-alpha...v3.0.111-alpha

## 3.0.54-alpha

## What's Changed

### High level

* `mpc` tool is gone. We use roslyn source generators now.
* Source generation is enabled by default. At runtime MessagePack v3 will look for these source generated formatters and avoid generating them dynamically if found.

### Pull requests

* Rollback package dependency versions for analyzers by @​AArnott in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1641
* move code depending on UnityEditor into separate assembly by @​NorbertNemec in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1649
* remove MessagePackWindow in Unity by @​neuecc in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1651
* Union type collect by @​Scormave in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1634
* Switch from MSBuild properties to an AdditionalFiles json file by @​AArnott in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1667
* Fix analyzer when only MessagePack.Annotations is referenced by @​AArnott in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1674
* Allow applying `[MessagePackFormatter]` on parameters by @​AArnott in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1678
* Revert "Allow applying `[MessagePackFormatter]` on parameters" by @​AArnott in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1679
* Allow applying `[MessagePackFormatter]` on parameters and return values by @​AArnott in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1680
* Remove `long` to `int` truncation of stream position by @​AArnott in https://github.com/MessagePack-CSharp/MessagePack-CSharp/pull/1685
* Fix releases links in README text by ...

_Des...

_Description has been truncated_

@dependabot
Bump the all-other-nuget group with 2 updates
fc34875 
Bumps GitHub.Copilot.SDK from 0.3.0 to 1.0.1
Bumps MessagePack from 2.5.301 to 3.1.7

---
updated-dependencies:
- dependency-name: GitHub.Copilot.SDK
  dependency-version: 1.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-other-nuget
- dependency-name: MessagePack
  dependency-version: 3.1.7
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-other-nuget
- dependency-name: GitHub.Copilot.SDK
  dependency-version: 1.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-other-nuget
- dependency-name: MessagePack
  dependency-version: 3.1.7
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-other-nuget
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Jun 17, 2026
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code labels Jun 17, 2026
@dependabot dependabot Bot mentioned this pull request Jun 17, 2026
Closed
@github-actions github-actions Bot added the pr-state/ready-for-eval PR is mergeable and awaiting evaluation label Jun 17, 2026
@github-actions

github-actions Bot commented Jun 17, 2026

Copy link
Copy Markdown
Contributor

❌ Evaluation did not complete (upstream job failed or was skipped). View workflow run

1 similar comment
@github-actions

github-actions Bot commented Jun 17, 2026

Copy link
Copy Markdown
Contributor

❌ Evaluation did not complete (upstream job failed or was skipped). View workflow run

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@ViktorHofer ViktorHofer Awaiting requested review from ViktorHofer ViktorHofer is a code owner

@JanKrivanek JanKrivanek Awaiting requested review from JanKrivanek JanKrivanek is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code pr-state/ready-for-eval PR is mergeable and awaiting evaluation

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants