build: Bump Akka.Hosting, Akka.Streams.TestKit and Akka.TestKit.Xunit

[dependabot]

Pinned Akka.Hosting at 1.5.67.

Release notes

Sourced from Akka.Hosting's releases.

1.5.67

1.5.67 April 26th 2026

New Features

• Add WithStrictSerialization helper — resolves issue #​734. Adds WithStrictSerialization(bool enabled = true) extension on AkkaConfigurationBuilder that sets akka.actor.serialization-settings.allow-unregistered-types = off, disabling the Newtonsoft.Json fallback and throwing SerializationException for unregistered types.

Updates

• Bump Akka version from 1.5.66 to 1.5.67 - Hotfix release reverting the Task.Yield() optimization in AsyncWriteJournal/SnapshotStore that broke the persistence plugin threading contract.

Commits viewable in compare view.

Updated Akka.Streams.TestKit from 1.5.65 to 1.5.67.

Release notes

Sourced from Akka.Streams.TestKit's releases.

1.5.67

1.5.67 April 25th, 2026

Akka.NET v1.5.67 is a hotfix release that reverts a breaking change to the persistence plugin contract introduced in v1.5.66.

Akka.Persistence: Revert async WriteMessagesAsync/SaveAsync dispatch (#​8163)

v1.5.66 added Task.Yield() inside AsyncWriteJournal.ExecuteBatch and SnapshotStore to move persistence plugin WriteMessagesAsync/SaveAsync calls off the actor thread. While this improved throughput in benchmarks, it silently broke the implicit contract that persistence plugins rely on — that the synchronous preamble of these methods executes in actor context.

This caused failures in plugins that:

• Access Self inside WriteMessagesAsync (e.g. Akka.Persistence.Sql, Akka.Persistence.EventStore) — throws NotSupportedException off the actor thread
• Use non-thread-safe collections for write tracking (e.g. Dictionary<string, Task>) — concurrent access from actor thread and thread pool causes InvalidOperationException
• Send messages to subscribers after writes complete (e.g. Akka.Persistence.Redis) — accesses shared actor state off-thread

This release removes the Task.Yield() calls and restores the original dispatch behavior. A future version may reintroduce this optimization with a more targeted approach that preserves the plugin threading contract.

If you are on v1.5.66, upgrade to v1.5.67 immediately if you use any third-party persistence plugin.

COMMITS	LOC+	LOC-	AUTHOR
1	3	17	Aaron Stannard

Changes:

• 2f057e49852313996cc196000a917b1cbaf67588 Update RELEASE_NOTES.md for 1.5.67 release
• 46371dd4c04fc8bdd2a9eba574a5ed79e1b083b2 revert(persistence): remove Task.Yield() from AsyncWriteJournal and SnapshotStore (#​8163)

This list of changes was auto generated.

1.5.66

1.5.66 April 24th, 2026

Akka.NET v1.5.66 is a significant release with persistence bug fixes, major Akka.Streams improvements including OpenTelemetry trace propagation and non-blocking materialized values, and new serialization security controls.

Akka.Streams: OpenTelemetry Trace Context Propagation

Akka.Streams now propagates System.Diagnostics.Activity trace context end-to-end through stream graphs, including across async stage boundaries, fan-in merges, and fan-out broadcasts. This enables full distributed tracing visibility into stream pipelines when using OpenTelemetry.

For full documentation, see: https://getakka.net/articles/streams/stream-tracing.html

• Akka.Streams: end-to-end OpenTelemetry trace context propagation

Akka.Streams: Non-Blocking Materialized-Value TaskCompletionSource

All TaskCompletionSource instances used for materialized values across Akka.Streams now use TaskCreationOptions.RunContinuationsAsynchronously, eliminating potential deadlocks and thread-pool starvation when continuations run synchronously on completion.

• Non-blocking materialized-value TaskCompletionSource

Akka.Persistence

• Redesign MemoryJournal and MemorySnapshotStore with channel-based drain-on-read pattern
• Ensure WriteMessagesAsync/SaveAsync is called asynchronously

Akka.Core

• Filter link-local (APIPA) addresses from DNS resolution results
• Fix multi-node adapter output race

New Features

• Add allow-unregistered-types serialization setting — when set to false, FindSerializerForType throws SerializationException if no explicit serializer binding exists, rather than falling back to the default serializer.
• Widen ActorTaskScheduler(ActorCell) ctor to protected internal

Documentation

• Surface serialization security guidance on remoting security page
• Replace TBD XML doc placeholders in Scheduler and Stash

4 contributors since release 1.5.65

COMMITS	LOC+	LOC-	AUTHOR
18	3962	991	Aaron Stannard
8	1627	1952	Gregorius Soedharmo
6	214	177	Matt Kotsenas
1	55	39	schdooz

To see the full set of changes in Akka.NET v1.5.66, click here.

Changes:

• ed4bd3b22a8e936c3dc61645911a43d6a56ea651 fix(api-approval): update Net.verified.txt files to match v1.5.66 API surface [ #​8158, #​8184, #​8160 ]
• db7d0c61403b21023ee4b1f97abe37bfabbf6090 Update RELEASE_NOTES.md for 1.5.66 release
  ... (truncated)

Commits viewable in compare view.

Updated Akka.TestKit.Xunit from 1.5.65 to 1.5.67.

Release notes

Sourced from Akka.TestKit.Xunit's releases.

1.5.67

1.5.67 April 25th, 2026

Akka.NET v1.5.67 is a hotfix release that reverts a breaking change to the persistence plugin contract introduced in v1.5.66.

Akka.Persistence: Revert async WriteMessagesAsync/SaveAsync dispatch (#​8163)

v1.5.66 added Task.Yield() inside AsyncWriteJournal.ExecuteBatch and SnapshotStore to move persistence plugin WriteMessagesAsync/SaveAsync calls off the actor thread. While this improved throughput in benchmarks, it silently broke the implicit contract that persistence plugins rely on — that the synchronous preamble of these methods executes in actor context.

This caused failures in plugins that:

• Access Self inside WriteMessagesAsync (e.g. Akka.Persistence.Sql, Akka.Persistence.EventStore) — throws NotSupportedException off the actor thread
• Use non-thread-safe collections for write tracking (e.g. Dictionary<string, Task>) — concurrent access from actor thread and thread pool causes InvalidOperationException
• Send messages to subscribers after writes complete (e.g. Akka.Persistence.Redis) — accesses shared actor state off-thread

This release removes the Task.Yield() calls and restores the original dispatch behavior. A future version may reintroduce this optimization with a more targeted approach that preserves the plugin threading contract.

If you are on v1.5.66, upgrade to v1.5.67 immediately if you use any third-party persistence plugin.

COMMITS	LOC+	LOC-	AUTHOR
1	3	17	Aaron Stannard

Changes:

• 2f057e49852313996cc196000a917b1cbaf67588 Update RELEASE_NOTES.md for 1.5.67 release
• 46371dd4c04fc8bdd2a9eba574a5ed79e1b083b2 revert(persistence): remove Task.Yield() from AsyncWriteJournal and SnapshotStore (#​8163)

This list of changes was auto generated.

1.5.66

1.5.66 April 24th, 2026

Akka.NET v1.5.66 is a significant release with persistence bug fixes, major Akka.Streams improvements including OpenTelemetry trace propagation and non-blocking materialized values, and new serialization security controls.

Akka.Streams: OpenTelemetry Trace Context Propagation

Akka.Streams now propagates System.Diagnostics.Activity trace context end-to-end through stream graphs, including across async stage boundaries, fan-in merges, and fan-out broadcasts. This enables full distributed tracing visibility into stream pipelines when using OpenTelemetry.

For full documentation, see: https://getakka.net/articles/streams/stream-tracing.html

• Akka.Streams: end-to-end OpenTelemetry trace context propagation

Akka.Streams: Non-Blocking Materialized-Value TaskCompletionSource

All TaskCompletionSource instances used for materialized values across Akka.Streams now use TaskCreationOptions.RunContinuationsAsynchronously, eliminating potential deadlocks and thread-pool starvation when continuations run synchronously on completion.

• Non-blocking materialized-value TaskCompletionSource

Akka.Persistence

• Redesign MemoryJournal and MemorySnapshotStore with channel-based drain-on-read pattern
• Ensure WriteMessagesAsync/SaveAsync is called asynchronously

Akka.Core

• Filter link-local (APIPA) addresses from DNS resolution results
• Fix multi-node adapter output race

New Features

• Add allow-unregistered-types serialization setting — when set to false, FindSerializerForType throws SerializationException if no explicit serializer binding exists, rather than falling back to the default serializer.
• Widen ActorTaskScheduler(ActorCell) ctor to protected internal

Documentation

• Surface serialization security guidance on remoting security page
• Replace TBD XML doc placeholders in Scheduler and Stash

4 contributors since release 1.5.65

COMMITS	LOC+	LOC-	AUTHOR
18	3962	991	Aaron Stannard
8	1627	1952	Gregorius Soedharmo
6	214	177	Matt Kotsenas
1	55	39	schdooz

To see the full set of changes in Akka.NET v1.5.66, click here.

Changes:

• ed4bd3b22a8e936c3dc61645911a43d6a56ea651 fix(api-approval): update Net.verified.txt files to match v1.5.66 API surface [ #​8158, #​8184, #​8160 ]
• db7d0c61403b21023ee4b1f97abe37bfabbf6090 Update RELEASE_NOTES.md for 1.5.66 release
  ... (truncated)

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions