[dependabot]

Updated Microsoft.Identity.Client from 4.91.1 to 4.92.0.

Release notes

Sourced from Microsoft.Identity.Client's releases.

4.92.0

New Features

• Added COSMIC_LOCATION as a regional auto-detection source, after REGION_NAME and before IMDS. #​6240
• Added ITokenCacheSnapshotProvider and TokenCacheSnapshot for process-local token-cache capture and restore without repeated JSON serialization. Use V3 serialization for persistence. #​6229

Bug Fixes

• Fixed certificate private-key attachment on .NET Framework 4.7.2 to support non-exportable CNG keys. #​6244
• Fixed managed identity KeyGuard attestation endpoint selection to use cloud-specific regional endpoints from IMDS compute metadata. #​6238
• Fixed Android broker request serialization by registering BrokerRequest in the source-generated JSON serializer context. #​6226

Changes

• Updated Microsoft.Identity.Client.NativeInterop from 0.20.6 to 0.20.7. #​6230
• Reduced OpenTelemetry metric-tag allocations using TagList and cached canonical tag-key sets. Custom enrichers should use noncanonical tag names. #​6227

Commits viewable in compare view.

Updated Microsoft.Identity.Client.Extensions.Msal from 4.91.1 to 4.92.0.

Release notes

Sourced from Microsoft.Identity.Client.Extensions.Msal's releases.

4.92.0

New Features

• Added COSMIC_LOCATION as a regional auto-detection source, after REGION_NAME and before IMDS. #​6240
• Added ITokenCacheSnapshotProvider and TokenCacheSnapshot for process-local token-cache capture and restore without repeated JSON serialization. Use V3 serialization for persistence. #​6229

Bug Fixes

• Fixed certificate private-key attachment on .NET Framework 4.7.2 to support non-exportable CNG keys. #​6244
• Fixed managed identity KeyGuard attestation endpoint selection to use cloud-specific regional endpoints from IMDS compute metadata. #​6238
• Fixed Android broker request serialization by registering BrokerRequest in the source-generated JSON serializer context. #​6226

Changes

• Updated Microsoft.Identity.Client.NativeInterop from 0.20.6 to 0.20.7. #​6230
• Reduced OpenTelemetry metric-tag allocations using TagList and cached canonical tag-key sets. Custom enrichers should use noncanonical tag names. #​6227

Commits viewable in compare view.

Updated Nullable.Extended.Analyzer from 1.17.0 to 1.19.0.

Release notes

Sourced from Nullable.Extended.Analyzer's releases.

1.19.0

• New: MCP server: The check_required tool
• New: MCP server: The annotate tool writes justification comments for null-forgiving operators, and replaces TODO: placeholders.
• Fix: MCP server: The configuration suggested by nuget.org no longer asks for the optional --root and --solution arguments.

1.18.2

• Fix: MCP server: Workspace folders reported by VS Code (file:///d%3A/...) were not converted to a valid local path.

1.18.1

• MCP server: No command line arguments are required any more, the server uses the workspace folder of the client. --root and --solution are optional overrides.
• MCP server: Log the working directory, arguments, and the root used for every call to stderr, to simplify troubleshooting.
• Fix: Add the missing icon, license and readme to the NuGet packages of the MCP server and the analyzer, and add a readme for the Visual Studio extension.

1.18.0

• New: Nullable.Extended.Mcp, an MCP server that finds unjustified null-forgiving operators in large solutions, see Documentation.
• Fix: Results of multi-targeted projects are merged again, a null-forgiving operator is required if it is required in any target framework.

1.17.1

• Performance improvements of the VS extension.

Commits viewable in compare view.

Updated xunit from 2.4.2 to 2.9.3.

Release notes

Sourced from xunit's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated xunit.runner.visualstudio from 2.4.3 to 2.8.2.

Release notes

Sourced from xunit.runner.visualstudio's releases.

No release notes found for this version range.

Commits viewable in compare view.

[Copilot]

🟡 Changes recommended

The System.CommandLine upgrade is incompatible with the CI-included sync test harness’s existing beta APIs and blocks compilation.

1 open issue

• Upgrade breaks test harness due to incompatible System.CommandLine APIs · New

What changed in this PR

Updates shared .NET dependencies and build tooling for the Copilot Studio extension’s language server and sync libraries.

Changes:

• Bumps centrally managed runtime, authentication, agent-model, and test packages.
• Adds explicit package references to sync, core, and smoke-test projects.
• Updates the MSBuild Traversal SDK.

File	Description
src/​Packages.props	Updates centrally managed dependency versions.
src/​LanguageServers/​PowerPlatformLS/​Impl.PullAgent/​Impl.PullAgent.csproj	Adds an explicit threading dependency.
src/​CopilotStudio.Sync/​CopilotStudio.Sync.csproj	Adds an explicit dependency-injection reference.
src/​CopilotStudio.Sync.Net48Smoke/​CopilotStudio.Sync.Net48Smoke.csproj	Adds immutable collections and JSON references.
src/​CopilotStudio.McsCore/​CopilotStudio.McsCore.csproj	Adds an explicit immutable collections reference.
global.json	Updates the MSBuild Traversal SDK version.

_{Review effort: Balanced}

[Copilot]

🟢 Approval recommended

The centralized NuGet dependency updates have no active review issues.

1 open issue

• Upgrade breaks test harness due to incompatible System.CommandLine APIs

_{Review effort: Balanced}

[Copilot]

🟢 Approval recommended

No active review issues are reported for the centralized .NET dependency updates.

1 open issue

• Upgrade breaks test harness due to incompatible System.CommandLine APIs

_{Review effort: Balanced}