Bump Akka.Hosting from 1.5.64 to 1.5.68

[dependabot]

Updated Akka.Hosting from 1.5.64 to 1.5.68.

Release notes

Sourced from Akka.Hosting's releases.

1.5.68

1.5.68 May 18th 2026

Security Fixes

• Resolve GHSA-g94r-2vxg-569j by bumping OpenTelemetry minimum to 1.10.0 - OpenTelemetry.Api 1.9.0 has a known moderate severity vulnerability. The minimum OpenTelemetry version floor has been raised from 1.9.0 to 1.10.0, and the Microsoft.Extensions.Logging floor has been raised to 9.0.0. Downstream consumers that previously resolved to the vulnerable OpenTelemetry.Api 1.9.0 will now pull the safe 1.10.0 release.

Bug Fixes

• Fix implicit-sender leak under xUnit v3 parallel execution in Akka.Hosting.TestKit - Under xUnit v3's default parallel-class scheduling, await continuations could resume on ThreadPool threads where a sibling test had pinned its actor cell, causing Tell() to use the wrong implicit sender and replies to land in the wrong TestActor's mailbox. A new wrapping SynchronizationContext preserves xUnit's scheduler while pinning the ambient actor cell across await continuations.
• Fix SynchronizationContext leak and TestActor startup race in Akka.Hosting.TestKit - Two compounding sources of flakiness in sequential xUnit v3 suites: (1) the ActorCellKeepingSynchronizationContext installed during host startup leaked out of the initialization callback and was inherited by subsequent tests, pinning continuations onto disposed ActorCells; (2) the TestActor created during host startup was intermittently terminated by a race with other /system actors starting concurrently. Fixed by bracketing the context installation with a save/restore and adding post-startup TestActor liveness verification with automatic re-creation.
• Fix cached TestProbe refs becoming stale after TestActor recovery in Akka.Hosting.TestKit - Actors created during WithActors could cache IRequiredActor<TestProbe>.ActorRef before recovery ran. Re-registering a new raw TestActor in ActorRegistry did not update those cached refs. TestProbe is now registered via a stable forwarding actor whose target is swapped atomically after recovery, ensuring all cached references remain valid.

1.5.67

1.5.67 April 26th 2026

New Features

• Add WithStrictSerialization helper — resolves issue #​734. Adds WithStrictSerialization(bool enabled = true) extension on AkkaConfigurationBuilder that sets akka.actor.serialization-settings.allow-unregistered-types = off, disabling the Newtonsoft.Json fallback and throwing SerializationException for unregistered types.

Updates

• Bump Akka version from 1.5.66 to 1.5.67 - Hotfix release reverting the Task.Yield() optimization in AsyncWriteJournal/SnapshotStore that broke the persistence plugin threading contract.

1.5.65

1.5.65 April 10th 2026

Updates

• Bump Akka version from 1.5.64 to 1.5.65

Commits viewable in compare view.

[Aaronontheweb]

@dependabot rebase