Bump the dotnet-dependencies group with 1 update

[dependabot]

Updated Microsoft.Orleans.Server from 10.2.2 to 10.3.1.

Release notes

Sourced from Microsoft.Orleans.Server's releases.

10.3.1

The most significant change in this release over 10.3.0 is the format used by the version contract compatibility analyzers. The other changes are test and docs fixes.

What's Changed

• Enable DefaultDeny network isolation for CI by @​ReubenBond in Enable DefaultDeny network isolation for CI dotnet/orleans#10850
• docs: add placement hint guidance by @​ReubenBond in docs: add placement hint guidance dotnet/orleans#10844
• fix(test): propagate xUnit cancellation by @​ReubenBond in fix(test): propagate xUnit cancellation dotnet/orleans#10845
• fix(codegen): suppress warnings in generated source by @​ReubenBond in fix(codegen): suppress warnings in generated source dotnet/orleans#10854
• test(codegen): pass cancellation token to diagnostics by @​ReubenBond in test(codegen): pass cancellation token to diagnostics dotnet/orleans#10878
• ci: add trusted coverage report validation by @​ReubenBond in ci: add trusted coverage report validation dotnet/orleans#10882
• fix(test): remove activation-local reminder waits by @​ReubenBond in fix(test): remove activation-local reminder waits dotnet/orleans#10855
• test(dashboard): cover hosting and routing behavior by @​ReubenBond in test(dashboard): cover hosting and routing behavior dotnet/orleans#10885
• test(streaming): cover JSON converter read contracts by @​ReubenBond in test(streaming): cover JSON converter read contracts dotnet/orleans#10884
• test(testing): cover TestingHost failure diagnostics by @​ReubenBond in test(testing): cover TestingHost failure diagnostics dotnet/orleans#10883
• test(analyzers): raise compiler tooling coverage by @​ReubenBond in test(analyzers): raise compiler tooling coverage dotnet/orleans#10894
• test(azure): cover queue JSON validation by @​ReubenBond in test(azure): cover queue JSON validation dotnet/orleans#10876
• refactor(codegen): remove unused method signature comparer by @​ReubenBond in refactor(codegen): remove unused method signature comparer dotnet/orleans#10874
• test(runtime): cover ring range collection invariants by @​ReubenBond in test(runtime): cover ring range collection invariants dotnet/orleans#10879
• test(serialization): cover multidimensional array copying by @​ReubenBond in test(serialization): cover multidimensional array copying dotnet/orleans#10880
• test(transactions): verify consistency histories by @​ReubenBond in test(transactions): verify consistency histories dotnet/orleans#10875
• test(adonet): raise relational provider coverage above 90% by @​ReubenBond in test(adonet): raise relational provider coverage above 90% dotnet/orleans#10892
• test(reminders): harden lifecycle synchronization by @​ReubenBond in test(reminders): harden lifecycle synchronization dotnet/orleans#10891
• fix(test): remove placement timeout race by @​ReubenBond in fix(test): remove placement timeout race dotnet/orleans#10898
• fix(testing): isolate reminder event continuations by @​ReubenBond in fix(testing): isolate reminder event continuations dotnet/orleans#10899
• test(reminders): add lifecycle conformance scenarios by @​ReubenBond in test(reminders): add lifecycle conformance scenarios dotnet/orleans#10896
• fix(test): keep observer cancellation targets alive by @​ReubenBond in fix(test): keep observer cancellation targets alive dotnet/orleans#10897
• fix(test): retry SQL Server deadlock victims by @​ReubenBond in fix(test): retry SQL Server deadlock victims dotnet/orleans#10901
• test(reminders): enable provider failover coverage by @​ReubenBond in test(reminders): enable provider failover coverage dotnet/orleans#10895
• feat(analyzers): regenerate Orleans contracts project-wide by @​ReubenBond in feat(analyzers): regenerate Orleans contracts project-wide dotnet/orleans#10869
• fix(analyzers): clarify Orleans contract identities by @​ReubenBond in fix(analyzers): clarify Orleans contract identities dotnet/orleans#10910

Full Changelog: dotnet/orleans@v10.3.0...v10.3.1

10.3.0

Orleans 10.3.0

Orleans 10.3.0 expands the platform across clustering, streaming, persistence, integrations, serialization, and developer tooling while delivering a broad reliability and performance pass. Major outcomes include stronger distributed-directory and membership behavior, new streaming and storage providers, hardened transactions and durable jobs, incremental source generation, safer JSON storage deserialization, and new application templates. Alongside these features and fixes, the release optimizes key runtime paths, comprehensively refreshes the docs, strengthens testing and CI, and updates dependencies and repository maintenance.

Compatibility notes

[!IMPORTANT]
Review these changes before upgrading. This release contains three intentionally behavior-changing updates.

• Default JSON storage serializer type allow-list (#​10268). The default Newtonsoft.Json-based Orleans storage serializer now resolves $type metadata only for types permitted by Orleans' configured type filters and manifest. Existing wire data remains readable when its types are allowed; [GenerateSerializer] types and standard permitted BCL types continue to work without changes. If persisted, streamed, or transactional JSON contains other types, reads now fail with an actionable JsonSerializationException. Prefer registering those types through TypeManifestOptions.AllowedTypes, [GenerateSerializer], ITypeNameFilter, or ITypeFilter; OrleansJsonSerializerOptions.AllowAllTypes = true restores the former permissive JSON behavior when a narrowly scoped allow-list is not practical.
• Updated RPC semantic convention keys (#​10354). Orleans activities now emit the current OpenTelemetry RPC key rpc.system.name; Orleans-specific service, target, and source metadata move to orleans.rpc.service, orleans.rpc.target_id, and orleans.rpc.source_id. The runtime-side rpc.method value is now qualified as <interface>/<method>, and affected ActivitySource versions are incremented. Update dashboards, alerts, collectors, and queries which depend on the legacy rpc.system, rpc.service, rpc.orleans.target_id, or rpc.orleans.source_id keys or the previous method value.
• Grain context configured before construction (#​10565). Orleans now deterministically applies IConfigureGrainContext actions before grain construction, so constructors can observe fully configured context state. Custom IGrainContextActivator implementations must migrate from CreateContext(GrainAddress) to CreateContext(GrainAddress, IConfigureGrainContext[]) and apply the supplied configurators before constructing the grain. Stateless-worker configurators continue to apply to the outer stateless-worker context.

Highlights

Runtime, clustering & resilience

• Distributed-directory rolling upgrades now have durable handoffs, cancellation-aware operations, stronger single-activation guarantees, and improved recovery and startup behavior (#​10309, #​10323, #​10339, #​9958, #​10500, #​10533, #​10613, #​10625).
• Membership fault detection gains connection liveness checks, adaptive probe timeouts, retained local health history, and local-stall detection (#​9978, #​10510, #​10502, #​9979).
• Reminder delivery, reconciliation, rebalancing, shutdown state, placement compatibility caching, and resilience policies received substantial correctness and efficiency improvements (#​10296, #​10430, #​10612, #​10819, #​10838, #​10311, #​10313, #​10614, #​10573, #​10596, #​10314, #​10597, #​10599, #​9819).

Streaming

• New AWS Kinesis support, SQS data adapters with FIFO support, Event Hubs Aspire integration, grain-backed checkpointing, and generalized Azure Table checkpointing broaden deployment choices (#​8967, #​8723, #​9328, #​10345, #​10355).
• Persistent streams now flow cancellation; stateless workers can consume streams; Azure Queue migration supports compact JSON; and stream telemetry includes richer tags (#​10383, #​10657, #​10507, #​8631).
• Redis implicit subscriptions, SQL Server queue commits, ADO.NET handoffs, batched acknowledgements, implicit rewind handling, and memory/Event Hubs hot paths were hardened or optimized (#​10423, #​10572, #​10536, #​10574, #​10655, #​10662, #​10550, #​10767).

Storage, persistence, journaling, durable jobs & transactions

• New Azure Table and Redis journal providers, DynamoDB transactional storage, file-based grain storage, and a System.Text.Json grain storage serializer expand persistence options (#​10254, #​9823, #​9616, #​9537, #​10806, #​9505).
• Transactions receive extensive conflict, recovery, retry, isolation, cancellation, and diagnostics hardening across providers (#​10372, #​10376, #​10382, #​10375, #​10374, #​10385, #​10545, #​10743).
• Persistent state is now concurrency-safe and cancellation-aware, while journaling snapshot operations and durable-job retry/rescheduling semantics are more robust (#​10255, #​10641, #​10800, #​10681, #​10349, #​10547, #​10716, #​10679).

Providers & integrations

• Google Cloud Firestore providers, Cosmos DB custom document IDs and partition keys, ADO.NET DbDataSource support, and improved Azure, ZooKeeper, Redis, NATS, and relational-provider behavior extend and stabilize integrations (#​8462, #​8699, #​10326, #​10429, #​10381, #​10437, #​10835, #​10422, #​10505, #​10276).
• SQL Server, PostgreSQL, and MySQL clustering add the missing defunct-silo cleanup query (#​8811, #​9125, #​8896).

Serialization, code generation & analyzers

• The source generator is now incremental, generates provider metadata at build time, avoids runtime provider scanning, and supports record-parameter field IDs and custom grain-call return types (#​10035, #​10493, #​10566, #​10495, #​10682).
• Serialization reduces codec and buffer allocations, adds type/assembly allow-list helpers, and clarifies type-trust configuration (#​10301, #​10340, #​10668, #​10228, #​10424).
• Analyzers detect RPC contract changes and provide improved diagnostic guidance (#​10337, #​10832).

Developer experience, templates, samples & docs

• New Orleans application templates and a basic clustering sample make it easier to start and validate applications (#​10646, #​10690, #​10622).
• Connection middleware abstractions and framing helpers provide new transport extension points (#​10136, #​10433).
• The docs were comprehensively reorganized and modernized across onboarding, architecture, grains, hosting, operations, security, observability, persistence, streaming, testing, deployment, migration, and production guidance (#​10331, #​10332, #​10334, #​10335, #​10327, #​10328, #​10333, #​10330, #​10336, #​10329, #​10675, #​10746).
• Test infrastructure moved to xUnit v3 and Microsoft.Testing.Platform, with provider conformance kits, published test results, coverage reporting, and extensive reliability improvements (#​10722, #​10726, #​10490, #​10785, #​10730, #​10733, #​10842, #​10438, #​10738).
  ... (truncated)

10.3.0-rc.1

What's Changed

• ci: enable GitHub autobaseline for nightly-main pipeline by @​ReubenBond in ci: enable GitHub autobaseline for nightly-main pipeline dotnet/orleans#10297
• fix(reminders): prevent ticks after unregister by @​ReubenBond in fix(reminders): prevent ticks after unregister dotnet/orleans#10296
• feat(streaming): make SequentialItem serializable by @​ReubenBond in feat(streaming): make SequentialItem serializable dotnet/orleans#10302
• Add Azure Table journal storage provider by @​danielmeza in Add Azure Table journal storage provider dotnet/orleans#10254
• fix(serialization): defer interface collection codec dependencies by @​ReubenBond in fix(serialization): defer interface collection codec dependencies dotnet/orleans#10301
• perf(codegen): migrate to incremental source generator by @​ReubenBond in perf(codegen): migrate to incremental source generator dotnet/orleans#10035
• test: use InProcessTestClusterBuilder in Azure stream reliability tests by @​ReubenBond in test: use InProcessTestClusterBuilder in Azure stream reliability tests dotnet/orleans#10222
• chore(deps): bump dompurify from 3.4.11 to 3.4.12 in /src/Dashboard/Orleans.Dashboard.App by @​dependabot[bot] in chore(deps): bump dompurify from 3.4.11 to 3.4.12 in /src/Dashboard/Orleans.Dashboard.App dotnet/orleans#10303
• test: observe grain directory convergence in liveness tests by @​ReubenBond in test: observe grain directory convergence in liveness tests dotnet/orleans#10299
• docs: require conventional commit format for PR titles by @​ReubenBond in docs: require conventional commit format for PR titles dotnet/orleans#10310
• fix(serialization)!: enforce type allow-list in default JSON storage serializer by @​ReubenBond in fix(serialization)!: enforce type allow-list in default JSON storage serializer dotnet/orleans#10268
• feat(serialization): add type and assembly allow-list helpers by @​ReubenBond in feat(serialization): add type and assembly allow-list helpers dotnet/orleans#10228
• fix(testing): track reminder schedules per owner by @​ReubenBond in fix(testing): track reminder schedules per owner dotnet/orleans#10312
• refactor: enable nullable reference types across Orleans by @​ReubenBond in refactor: enable nullable reference types across Orleans dotnet/orleans#10291
• fix: eliminate rebalancer waiter timeout race by @​ReubenBond in fix: eliminate rebalancer waiter timeout race dotnet/orleans#10311
• fix(directory): support rolling upgrades to distributed directory by @​ReubenBond in fix(directory): support rolling upgrades to distributed directory dotnet/orleans#10309
• test: fix grain directory nullability diagnostics by @​ReubenBond in test: fix grain directory nullability diagnostics dotnet/orleans#10315
• fix: clean up rebalancer diagnostic waiters by @​ReubenBond in fix: clean up rebalancer diagnostic waiters dotnet/orleans#10313
• perf(reminders): drop reminders that are not due soon by @​ReubenBond in perf(reminders): drop reminders that are not due soon dotnet/orleans#10259
• perf: cache compatible placement silos by @​ReubenBond in perf: cache compatible placement silos dotnet/orleans#10314
• fix(directory): cancel snapshot pulls from departed silos by @​ReubenBond in fix(directory): cancel snapshot pulls from departed silos dotnet/orleans#10318
• feat(streaming): add telemetry tags to stream metrics by @​oising in feat(streaming): add telemetry tags to stream metrics dotnet/orleans#8631
• test: wait for grain call before checking cancellation by @​ReubenBond in test: wait for grain call before checking cancellation dotnet/orleans#10319
• test(streaming): cover eventhub checkpoint flush on shutdown by @​ReubenBond in test(streaming): cover eventhub checkpoint flush on shutdown dotnet/orleans#10321
• feat(cosmos): support custom document IDs and partition keys by @​ReubenBond in feat(cosmos): support custom document IDs and partition keys dotnet/orleans#8699
• fix(directory): make rolling upgrade handoffs durable by @​ReubenBond in fix(directory): make rolling upgrade handoffs durable dotnet/orleans#10323
• fix: scope reminder test clock to reminder service by @​ReubenBond in fix: scope reminder test clock to reminder service dotnet/orleans#10317
• feat(cosmos): add configuration support for grain storage by @​ReubenBond in feat(cosmos): add configuration support for grain storage dotnet/orleans#10326
• feat(directory): add cancellation-aware operations by @​ReubenBond in feat(directory): add cancellation-aware operations dotnet/orleans#10339
• fix(directory): stabilize rolling upgrade handoff test by @​ReubenBond in fix(directory): stabilize rolling upgrade handoff test dotnet/orleans#10341
• fix(serialization): cap codec allocations by @​ReubenBond in fix(serialization): cap codec allocations dotnet/orleans#10340
• perf(runtime): reduce activation collection sorting allocations by @​ReubenBond in perf(runtime): reduce activation collection sorting allocations dotnet/orleans#10342
• fix(directory): strengthen single-activation guarantees by @​ledjon-behluli in fix(directory): strengthen single-activation guarantees dotnet/orleans#9958
• chore(deps): bump postcss from 8.5.15 to 8.5.25 in /src/Dashboard/Orleans.Dashboard.App by @​dependabot[bot] in chore(deps): bump postcss from 8.5.15 to 8.5.25 in /src/Dashboard/Orleans.Dashboard.App dotnet/orleans#10305
• docs: add Orleans 10 migration guides by @​ReubenBond in docs: add Orleans 10 migration guides dotnet/orleans#10329
• docs: modernize deployment and operations guidance by @​ReubenBond in docs: modernize deployment and operations guidance dotnet/orleans#10327
• docs: modernize grain programming guidance by @​ReubenBond in docs: modernize grain programming guidance dotnet/orleans#10334
• fix(docs): correct timer migration link by @​ReubenBond in fix(docs): correct timer migration link dotnet/orleans#10347
• fix(testing): wait for async cleanup timer rearm by @​ReubenBond in fix(testing): wait for async cleanup timer rearm dotnet/orleans#10348
• chore(deps-dev): bump fast-uri from 3.1.4 to 3.1.5 in /docs/site by @​dependabot[bot] in chore(deps-dev): bump fast-uri from 3.1.4 to 3.1.5 in /docs/site dotnet/orleans#10343
• fix(durablejobs): preserve job state across retries by @​ReubenBond in fix(durablejobs): preserve job state across retries dotnet/orleans#10349
• feat: add connection middleware abstractions and framing helpers by @​wenwangcode in feat: add connection middleware abstractions and framing helpers dotnet/orleans#10136
• docs: modernize security and observability guidance by @​ReubenBond in docs: modernize security and observability guidance dotnet/orleans#10328
• docs: restore migration reference links by @​ReubenBond in docs: restore migration reference links dotnet/orleans#10352
• docs: restore authoritative grain references by @​ReubenBond in docs: restore authoritative grain references dotnet/orleans#10353
• docs: modernize hosting and configuration guidance by @​ReubenBond in docs: modernize hosting and configuration guidance dotnet/orleans#10335
• docs: expand Orleans architecture documentation by @​ReubenBond in docs: expand Orleans architecture documentation dotnet/orleans#10332
• refactor(streaming): remove unused implicit subscriber grain factory by @​ReubenBond in refactor(streaming): remove unused implicit subscriber grain factory dotnet/orleans#10322
• docs: modernize Orleans onboarding by @​ReubenBond in docs: modernize Orleans onboarding dotnet/orleans#10331
  ... (truncated)

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions