[yesbert]

What this changes

Updates 69 NuGet packages to their latest nuget.org versions with ./scripts/update-dependencies.sh. There are no major-version moves and no new prereleases; OpenTelemetry.Instrumentation.EntityFrameworkCore stays on its existing beta line.

Notable:

• Microsoft.Orleans.* 10.3.1 → 10.4.0. The packages now depend on Orleans ≥ 10.4.0, so prerequisites.md, the concepts page and llms.txt name 10.4.
• StackExchange.Redis 3.1.31 → 3.4.5. On 3.1.31, HardKillTimerTests crashed its separate host in 2 of 3 full runs with an access violation. The crash was in RESPite.Buffers.CycleBuffer.Commit, while the backlog thread wrote the SCRIPT LOAD of the Orleans Redis grain directory after a reconnect. Decouple async read loop's socket fill from parsing StackExchange/StackExchange.Redis#3251 reworks that buffer, including a lease that could point at another connection's memory.
• Microsoft.Extensions.* / ASP.NET Core / EF Core 10.0.11 → 10.0.13, Microsoft.Extensions resilience and service discovery 10.9.0 → 10.11.0, OpenTelemetry 1.18 → 1.20.1, Testcontainers 4.14 → 4.16, xunit.v3 4.0.2, and others.

The ecosystem check warns about partial alignment for Microsoft.Extensions.* and Serilog. That is expected: those packages release on different cadences.

No pins were held. security-audit.sh reports no vulnerabilities, and there were no audit suppressions to revalidate.

Why

The owner asked for a full dependency update and for the Redis crash to be investigated.

How it was verified

• ./scripts/local-gauntlet.sh passes, both before and after rebasing onto main (feat: let a host that hosts no reader wake the store readers #208, fix: keep the pool size a connection string names #209)
• Stratara.Orleans.IntegrationTests on the updated packages: 205/205.
• HardKillTimerTests three more times in a row: 3/3, with no RESPite stack in any run.
• Stratara.Outbox.RabbitMQ.IntegrationTests on Testcontainers 4.16: 87/87.

The crash was intermittent, so these runs are strong evidence rather than proof. Later full runs keep watching for the stack.

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.