[Vincent Biret (baywet)]

Summary

Migrate the sample API, its integration tests and all sample clients to current tooling:

• .NET 11: API, tests and .NET client target net11.0. CI uses .NET 11, and also builds the .NET client when it or the workflow changes.
• OData removed from the sample API. The OData upgrade was blocked by an upstream incompatibility (Stable OData EDM 9.0.0 still breaks OpenAPI conversion with MissingMethodException (GetReturn) OpenAPI.NET.OData#937, fix in fix!: support Microsoft.OData.Edm 9 and drop .NET versions below 10 OpenAPI.NET.OData#940). Instead of waiting, the API now uses plain ASP.NET Core controllers, so this PR is no longer blocked on that fix.
• Clients regenerated with Kiota 1.38 (dotnet, Go, Java, TypeScript), with app code and Kiota dependencies updated.

API changes

• ToDoItemsController is a regular [ApiController]. Routes stay the same: GET/POST /ToDoItems, GET/PATCH/DELETE /ToDoItems/{id}.
• Filtering: the clients only used OData $select, which is uncommon in plain REST APIs. GET /ToDoItems now accepts an optional isComplete query parameter instead, and the client samples demo filtering with it.
• List response: a plain JSON array. No client used nextLink or the value wrapper beyond reading the items.
• PATCH: takes a ToDoItemUpdate model with nullable properties (replacing Delta<T>). Only the provided properties are applied.
• POST: returns 201 with a Location header.
• OpenAPI: the description is generated by Microsoft.AspNetCore.OpenApi, pinned to OpenAPI 3.1 (.NET 11 defaults to 3.2), and still served at /openapi/openapi.yaml.
  • Strict JSON number handling stops integers from being described as integer | string.
  • Response content types are explicit.
• Packages removed: Microsoft.AspNetCore.OData, Microsoft.OData.Core, Microsoft.OData.ModelBuilder, Microsoft.OpenApi.OData, Swashbuckle.AspNetCore and the direct Microsoft.OpenApi reference.

Client changes

Client	Changes
dotnet	Uses Microsoft.Kiota.Bundle (the generated client needs the multipart serializer) plus Microsoft.Kiota.Authentication.Azure 2.1.6.
Go	Kiota Go libraries updated to latest (abstractions 1.12.1, http 1.6.1, …), plus the multipart serializer. type maps to SetTypeEscaped.
Java	Kiota Java 1.10.5 with multipart serializer and jakarta.annotation-api 3.0.0. App code moved to the synchronous Kiota Java API. makesdk.bat was missing the generate verb. commons-text 1.15.0, junit-jupiter 6.1.3, azure-identity pinned to 1.19.0.
TypeScript	Kiota TS packages are ESM-only, so the project is now ESM (type: module, nodenext, output in dist/). Uses @microsoft/kiota-bundle (DefaultRequestAdapter) and the interface/factory model style. ts-node and isomorphic-fetch removed (Node has native fetch). @types/node added.

Integrated Dependabot branches

These branches were merged locally into this branch, preserving their commits. The original pull requests were not merged, closed or edited:

• Bump Microsoft.OData.Core from 8.4.4 to 9.0.0 #9360 — Microsoft.OData.Core 9.0.0. Superseded: the OData packages were later removed entirely.
• Bump Microsoft.Extensions.Configuration.Json from 10.0.4 to 11.0.0 #9359 — Microsoft.Extensions.Configuration.Json 11.0.0
• Bump Microsoft.Extensions.Configuration.Binder from 10.0.4 to 11.0.0 #9357 — Microsoft.Extensions.Configuration.Binder 11.0.0

These are references only, not closing keywords.

Local validation

• API tests: dotnet test passes 8/8 (.NET SDK 11.0.100). The tests now cover isComplete filtering, the Location header on create, and the OpenAPI document shape.
• Live run: ran the API locally and generated all four clients from https://localhost:7206/openapi/openapi.yaml.
• Client builds:
  • dotnet: build passes with 0 warnings.
  • Go: go build and go vet pass.
  • TypeScript: tsc passes and prettier is clean.
  • Java: gradle build passes (JDK 21, gradle:9-jdk21 container).
• Not run: the client apps against Entra (they require an interactive device-code sign-in).
• Outdated packages: dotnet list package --outdated reports no outdated packages for API, tests or client, and none are vulnerable. go list -m -u shows no outdated direct Go modules.
• npm majors not taken: npm outdated shows only major dev-tool bumps (TypeScript 7, ESLint 10), which are out of scope here.
• Formatting: dotnet format applied to changed C# files.

This checkout sits under another repository's configuration. Local SDK commands used -p:ManagePackageVersionsCentrally=false, and tests ran from outside the parent tree. These environment-specific overrides are not added to CI.