Skip to content

Bump Dapr.AspNetCore from 1.15.3 to 1.18.4#1418

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/Dapr.AspNetCore-1.18.4
Closed

Bump Dapr.AspNetCore from 1.15.3 to 1.18.4#1418
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/Dapr.AspNetCore-1.18.4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 17, 2026

Copy link
Copy Markdown
Contributor

Updated Dapr.AspNetCore from 1.15.3 to 1.18.4.

Release notes

Sourced from Dapr.AspNetCore's releases.

1.18.4

What's Changed

Full Changelog: dapr/dotnet-sdk@v1.18.2...v1.18.4

1.18.2

What's Changed

Full Changelog: dapr/dotnet-sdk@v1.18.1...v1.18.2

1.18.1

What's Changed

Full Changelog: dapr/dotnet-sdk@v1.18.0...v1.18.1

What's Changed

General

  • ADDED Dapr.SecretsManagement package #​1794 to split secret management into its own client
  • ADDED Dapr.StateManagement package #​1806 to split state management into its own client
  • ADDED Rich backwards-compatibility support added to the SDK to better support runtime API maturation lifecycles #​1816
  • ADDED Serializer refactored from Dapr.Workflow to Dapr.Common #​1805 as a precursor to having common serialization across .NET SDK
  • ADDED Add optional parameter to configuration providers for non-blocking startup #​1844
  • UPDATED Making DaprDefaults public #​1845
  • FIXED Prevent race condition during GrpcProtocolHandler disposal #​1798

Actors

  • ADDED UnloadStateAsync implementation #​1750 to force actors to unload their currently cached in-memory state (no impact to persisted state). The next time GetStateAsync is called, the cache is repopulated as normal.

PubSub

  • FIXED Subscriber resilience: SubscribeAsync now throws DaprException when the sidecar is unavailable instead of failing silently #​1803

Metadata

  • ADDED Added new Dapr.Metadata package for retrieving strongly typed data from the Dapr Metadata API #​1846.
    To use, add Dapr.Metadata package from NuGet, register in DI with builder.Services.AddDaprMetadata() and simply inject IOptions<DaprMetadata>, IOptionsSnapshot<DaprMetadata> or IOptionsMonitor<DaprMetadata> and read the values out of the injected value.

Service Invocation

  • UPDATED InvokeMethodAsync family marked [Obsolete] aligning SDK with prior runtime guidance — recommended guidance is to use a native HTTP/gRPC client for service invocation #​1698.

Jobs

  • UPDATED Jobs API marked stable #​1804.
  • UPDATED Minimum-version tags adjusted to reflect broader test coverage (#​1811).

Workflows

  • ADDED Workflow history context propagation (#​1802)
  • UPDATED Combined Dapr.Workflow meta-project (#​1822) and automatic workflow/activity registration (#​1823)
    This means that there is no longer a need to install Dapr.Workflow.Versioning or Dapr.Workflow.Analyzers separately. All are bundled in the one Dapr.Workflow package, no refactoring necessary (though you might want to remove the stale packages).
  • UPDATED No longer logging connection closed exception when app closes #​1841
  • UPDATED Use server-blocking WaitForInstnace* RPCs instead of client polling #​1843
  • ADDED Timer origins and backwards-compatible optional timers (#​1790)
  • ADDED Add workflow analyzer diagnostics on versioning (#​1815
  • ADDED Expose name on workflow state #​1836
  • ADDED Support history propagation API #​1825, #​1833
  • ADDED Expose workflow name on state #​1836
  • FIXED Workflow patch ordering #​1807, #​1809
  • FIXED Trace propagation fix for downstream calls from workflow user activities #​1808
  • FIXED Addressing "no such instance exists" errors #​1818, #​1812
  • FIXED Fix workflow trace correlation #​1829
  • FIXED add missing FailureDetails property to proto converter #​1831

... (truncated)

1.18.0-rc02

What's Changed

Full Changelog: dapr/dotnet-sdk@v1.18.0-rc01...v1.18.0-rc02

1.18.0-rc01

What's Changed

New Features

Bug Fixes

Miscellaneous/Infrastructure

New Contributors

Full Changelog: dapr/dotnet-sdk@v1.17.9...v1.18.0-rc01

1.18.0-rc.7

What's Changed

New Contributors

Full Changelog: dapr/dotnet-sdk@v1.18.0-rc.4...v1.18.0-rc.7

1.18.0-rc.4

What's Changed

Full Changelog: dapr/dotnet-sdk@v1.18.0-rc.3...v1.18.0-rc.4

1.18.0-rc.3

What's Changed

Full Changelog: dapr/dotnet-sdk@v1.18.0-rc02...v1.18.0-rc.3

1.17.9

What's Changed

The CNCF gave Dapr access to GitHub Enterprise and with it, a bunch of LLM tokens, so I took the opportunity this week to give several of the different models an experimental spin and evaluate how well each one worked for different ideas I wanted to add to this project. Several of these PRs took several iterations to get right, but each is backed by unit and integration tests and I've personally reviewed every line of code that was merged into the SDK. I intend to keep experimenting with these capabilities and to keep contributing my own PRs, but I think LLMs represent an opportunity to augment software engineers' creativity and skill and look forward to iterating on new functionality in the SDK at a faster clip as a result.

Workflow Analyzer/Codefix Improvements:

Example Projects:

Improving Testing:

Infrastructure Changes:

New Contributors

Thank you to the new SDK contributors! I appreciate you taking the time to not only call out issues, but also submit a PR to improve this project!

Full Changelog: dapr/dotnet-sdk@v1.17.8...v1.17.9

1.17.8

What's Changed

More Test Validation

Full Changelog: dapr/dotnet-sdk@v1.17.7...v1.17.8

1.17.7

What's Changed

New Contributors

Full Changelog: dapr/dotnet-sdk@v1.17.6...v1.17.7

1.17.6

What's Changed

Full Changelog: dapr/dotnet-sdk@v1.17.5...v1.17.6

1.17.5

What's Changed

Full Changelog: dapr/dotnet-sdk@v1.17.4...v1.17.5

1.17.4

What's Changed

Full Changelog: dapr/dotnet-sdk@v1.17.3...v1.17.4

1.17.3

What's Changed

Full Changelog: dapr/dotnet-sdk@v1.17.2...v1.17.3

1.17.2

What's Changed

Full Changelog: dapr/dotnet-sdk@v1.17.1...v1.17.2

1.17.1

What's Changed

Full Changelog: dapr/dotnet-sdk@v1.17.0...v1.17.1

1.17.0

What's Changed

1.17.0-rc15

What's Changed

New Contributors

Full Changelog: dapr/dotnet-sdk@v1.17.0-rc14...v1.17.0-rc15

1.17.0-rc14

What's Changed

Full Changelog: dapr/dotnet-sdk@v1.17.0-rc13...v1.17.0-rc14

1.17.0-rc13

What's Changed

Full Changelog: dapr/dotnet-sdk@v1.17.0-rc12...v1.17.0-rc13

1.17.0-rc12

What's Changed

Full Changelog: dapr/dotnet-sdk@v1.17.0-rc11...v1.17.0-rc12

1.17.0-rc11

What's Changed

Full Changelog: dapr/dotnet-sdk@v1.17.0-rc10...v1.17.0-rc11

1.17.0-rc10

What's Changed

Full Changelog: dapr/dotnet-sdk@v1.17.0-rc08...v1.17.0-rc10

1.17.0-rc08

What's Changed

Full Changelog: dapr/dotnet-sdk@v1.17.0-rc07...v1.17.0-rc08

1.17.0-rc07

What's Changed

New Contributors

Full Changelog: dapr/dotnet-sdk@v1.17.0-rc06...v1.17.0-rc07

1.17.0-rc06

What's Changed

Full Changelog: dapr/dotnet-sdk@v1.17.0-rc04...v1.17.0-rc06

1.17.0-rc04

What's Changed

Full Changelog: dapr/dotnet-sdk@v1.17.0-rc03...v1.17.0-rc04

1.17.0-rc03

What's Changed

Testing Improvements

Infrastructure Changes

Full Changelog: dapr/dotnet-sdk@v1.17.0-rc02...v1.17.0-rc03

1.17.0-rc01

What's Changed

New Contributors

Full Changelog: dapr/dotnet-sdk@v1.16.1...v1.17.0-rc01

1.16.1

What's Changed

New Contributors

Full Changelog: dapr/dotnet-sdk@v1.16.0...v1.16.1

1.16.0

The v1.16 release of the Dapr .NET SDK delivers a set of targeted enhancements focused on developer productivity and runtime efficiency. Most notably, this version debuts Roslyn analyzers and accompanying code fixes that enforce best practices around SDK configuration and usage. This marks the beginning of a more guided and prescriptive development experience, reducing setup complexity and surfacing misconfigurations early.

Framework support has been consolidated with the depreciation of .NET 6 and 7, aligning the SDK with .NET 8 and 9. This shift enabled internal refactoring that improves performance and resource utilization across core components.

On the feature front, the SDK now supports the latest capabilities in the Dapr conversation API with tooling, as well as the overwrite flag for job scheduling. A critical bug affecting encryption and decryption of large files exceeding 4 GB has been resolved.

Dapr Workflows orchestrated using the .NET SDK are now considered stable, supporting both short-lived and long-running processes. Performance has been further improved through targeted optimizations, including new helper methods that enable deterministic parallelization with bounded concurrency.

Maintainer's Note

I wanted to share a special shout-out to everyone that participated in this release. Without your work to find and report issues in Discord or GitHub, spot documentation inconsistencies, request features, submit pull requests, review others' pull requests or even just use the various parts of the Dapr .NET SDK in your projects - I heartily appreciate the effort you've put into this project. The project wouldn't be what it is without your help. Thank you!

What's Changed

Please refer to the release notes here for the most accurate representation of what's changed.

New Contributors

Full Changelog: dapr/dotnet-sdk@v1.15.0...v1.16.0

1.16.0-rc18

What's Changed

Full Changelog: dapr/dotnet-sdk@v1.16.0-rc17...v1.16.0-rc18

1.16.0-rc17

What's Changed

Full Changelog: dapr/dotnet-sdk@v1.16.0-rc16...v1.16.0-rc17

1.16.0-rc16

What's Changed

Full Changelog: dapr/dotnet-sdk@v1.16.0-rc15...v1.16.0-rc16

1.16.0-rc13

What's Changed

Also (need to look up the PRs for in the release notes):

  • Metadata properly attaches to messages during bulk PubSub operations
  • Large files can be successfully encrypted and decrypted now in both Dapr.Client and the new Dapr.Cryptography package
  • Replacing [Obsolete] attributes on preview methods with [Experimental] - read more here since preview documentation isn't refreshed yet
  • Actor timer callbacks can return a Boolean to cancel future invocations automatically
  • Workflows can be started using DateTimeOffset in addition to DateTime
  • Added a helper method demonstrated here to process workflow activities in parallel with controlled concurrency similar to Parallel.ForEachAsync but in a workflow-safe manner
  • Adds initial support for A2A to SDK via Dapr.AI.A2a package
  • Jobs now supports overwrite flag

Finally, this release added analyzers and code fixes across Workflow, Actors and Jobs functionality to help eliminate some common errors seen in Discord. You can read more about this in the not-yet-published documentation here

New Contributors

Full Changelog: dapr/dotnet-sdk@v1.15.4...v1.16.0-rc13

1.16.0-rc03

What's Changed

  • The protos used by durabletask were slight inconsistent with those used by the Dapr runtime (as they used the latest from microsoft/durable-task). These have been updated acordingly.

Full Changelog: dapr/dotnet-sdk@v1.16.0-rc02...v1.16.0-rc03

1.16.0-rc02

This is a follow-up to the v1.16.0-rc01 prerelease build deployed last week and fixes another related set of issues that came to light after the outer timeout issue was discovered.

Like the rest of the 1.16 releases will be, this only supports the .NET 8 and .NET 9 targets and does not support .NET 6 or .NET 7. That said, like the previous 1.16.0-rc01 prerelease, this also excludes all the 1.16 feature releases and is fully compatible with the latest 1.15 Dapr runtime.

Please don't hesitate to reach out for assistance here or via our Dapr Discord channel if you have any questions about this.

What's Changed

Full Changelog: dapr/dotnet-sdk@v1.16.0-rc01...v1.16.0-rc02

1.16.0-rc01

This is an out-of-band patch release to address an issue raised with workflows timing out and reconnecting frequently when they're either idle or activities run for a long period of time.

It is released as a release candidate on the 1.16 series because it only supports .NET 8 and .NET 9 targets (which 1.16 will be limited to as well) and does not also include support for the .NET 6 and .NET 7 targets that 1.15 targets.

That said, none of the functionality currently being built out for the 1.16 release is included in this RC, but it does include all the patches up to the most recent 1.15 release, so if you're targeting .NET 8 or .NET 9, you should be able to safely consume this package without fear of significant changes more common to the main Dapr releases.

1.15.4

What's Changed

This release fixes a reported issue regarding issues connecting (and reconnecting) to the scheduler when using .NET 9 and Dapr.Workflows.

Full Changelog: dapr/dotnet-sdk@v1.15.3...v1.15.4

Commits viewable in compare view.

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot
Bump Dapr.AspNetCore from 1.15.3 to 1.18.4
db07b88 
---
updated-dependencies:
- dependency-name: Dapr.AspNetCore
  dependency-version: 1.18.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file skip-nuget-publish Skips publishing to NuGet when merging to the `main` branch. labels Jun 17, 2026
@github-actions

github-actions Bot commented Jun 17, 2026

Copy link
Copy Markdown
Contributor

🚀 Dogfood this PR with:

⚠️ WARNING: Do not do this without first carefully reviewing the code of this PR to satisfy yourself it is safe.

curl -fsSL https://raw.githubusercontent.com/CommunityToolkit/Aspire/main/eng/scripts/dogfood-pr.sh | bash -s -- 1418

Or

  • Run remotely in PowerShell:
iex "& { $(irm https://raw.githubusercontent.com/CommunityToolkit/Aspire/main/eng/scripts/dogfood-pr.ps1) } 1418"

@dependabot @github

dependabot Bot commented on behalf of github Jun 18, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/nuget/Dapr.AspNetCore-1.18.4 branch June 18, 2026 01:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file skip-nuget-publish Skips publishing to NuGet when merging to the `main` branch.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@aaronpowell