Bump the minor-and-patch group with 4 updates

[dependabot]

Updated ModelContextProtocol from 2.1.0 to 2.2.0.

Release notes

Sourced from ModelContextProtocol's releases.

2.2.0

This release adds hybrid stateful/stateless HTTP serving so clients using the 2025-11-25 and 2026-07-28 protocol revisions can share an endpoint, and fixes a malformed header-decoding edge case.

What's Changed

• Add HttpServerSessionMode for hybrid stateful/stateless HTTP serving #​1796 by @​saicharanpardhu (co-authored by @​Copilot @​jeffhandley)
• Fix McpHeaderEncoder.DecodeValue throwing on the degenerate base64 wrapper #​1805 by @​latent-9

Test Improvements

• Fix duplicated word in test comment #​1809 by @​latent-9

Repository Infrastructure Updates

• Enable package validation for the MCP extension packages #​1793 by @​jeffhandley (co-authored by @​Copilot)
• Add a release-manager agent that orchestrates the release skills #​1794 by @​jeffhandley (co-authored by @​Copilot)
• Bump Anthropic from 12.39.0 to 12.40.0 #​1808
• Bump @​hono/node-server from 1.19.14 to 2.1.0 in the npm_and_yarn group across 1 directory #​1812
• Fix dead relative link to versioning docs in bump-version skill #​1807 by @​latent-9

Acknowledgements

• @​latent-9 made their first contribution in #​1807
• @​saicharanpardhu made their first contribution in #​1796
• @​saicharanpardhu submitted issue #​1777 (resolved by #​1796)
• @​jeffhandley @​tarekgh @​halter73 reviewed pull requests

Full Changelog: modelcontextprotocol/csharp-sdk@v2.1.0...v2.2.0

[!NOTE]
These release notes were drafted with GitHub Copilot and reviewed before publishing.

Commits viewable in compare view.

Updated ModelContextProtocol.AspNetCore from 2.1.0 to 2.2.0.

Updated SQLitePCLRaw.lib.e_sqlite3 from 2.1.12 to 2.1.13.

Release notes

Sourced from SQLitePCLRaw.lib.e_sqlite3's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Temporalio from 1.17.0 to 1.18.0.

Release notes

Sourced from Temporalio's releases.

1.18.0

Notable Changes

💥 Breaking Changes

• Removed the unused NexusHandlerFailureException; Nexus handler failures are represented by
  NexusRpc.Handlers.HandlerException. The SDK-created TemporalNexusClient implementation is now
  internal; Nexus operation handlers continue to receive its public ITemporalNexusClient
  interface.
• By default, workers now proactively validate outbound payload/memo sizes before sending: a field
  over the warn threshold is logged ([TMPRL1103] at
  WARN) but still sent, while a task completion over the error limit is failed retryably
  ([TMPRL1103] at ERROR) instead of sent. Previously these reached the server, which terminated
  the workflow or failed the activity non-retryably; failing retryably instead lets a corrected
  workflow or activity be redeployed and recover. Tune warn thresholds via
  TemporalConnectionOptions.PayloadLimits. If you use a proxy between the worker and server that
  alters the size of payloads (e.g. compression, encryption, external storage), it is advised that
  you disable size enforcement by setting DisablePayloadErrorLimit to true on the worker.
• Activity failures now include the latest heartbeat details atomically instead of force-flushing a throttled heartbeat first. Temporal Server 1.16.0 or newer is required to guarantee those details are preserved on failure; workers warn when the server does not advertise support.

Added

• Added experimental SDK payload converter support for values and target types that expose
  Temporal transfer type conversion hooks. This lets hook-aware types delegate
  their wire representation to the configured payload converter, preserving SDK
  behavior such as serialization contexts.
• Added TemporalWorkerOptions.MaxEagerActivityReservationsPerWorkflowTask to configure the
  maximum number of activity slots reserved for eager execution per workflow task. Configured
  values must be positive; use DisableEagerActivityExecution to disable eager execution.
• Added WorkflowEnvironment.CreateFromEnvConfigAsync for creating test workflow environments from
  client environment configuration.
• Added the experimental TemporalWorkerOptions.PatchActivationCallback, allowing workers to
  decide whether a first non-replay Workflow.Patched call should activate a patch during rolling
  deployments.
• Support standalone activities as Nexus operations. ITemporalNexusClient.StartActivityAsync
  backs a Nexus operation with a standalone activity (async only). Cancellation of
  activity-execution operations can be customized by overriding
  TemporalOperationHandler<TInput, TResult>.CancelActivityExecutionAsync.
• Worker heartbeats now report the hosting .NET runtime and its version. Set the new
  TemporalRuntimeOptions.DisableEnvironmentInfo to omit all runtime, hosting, and platform
  information from heartbeats.
• Workers are now automatically enrolled into poller autoscaling when the namespace advertises the
  poller_autoscaling_auto_enroll capability. This only applies to poller types left at their
  default (the worker set neither a fixed poller count nor a poller behavior); explicitly
  configured pollers are left unchanged.
• Workers now log a [TMPRL1104] warning when a workflow task takes longer than 5 seconds. Set TEMPORAL_WORKFLOW_TASK_DURATION_WARN_SECONDS to change the threshold.

Changed

• Nexus support for calling operations from workflows and handling workflow-backed operations with
  WorkflowRunOperationHandler is now generally available (GA). Standalone Nexus Operation and TemporalOperationHandler,
  ... (truncated)

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml