Skip to content

Bump the dotnet-dependencies group with 6 updates - #243

Merged
Chris-Wolfgang merged 1 commit into
mainfrom
dependabot/nuget/dotnet-dependencies-7b5a6a0ce5
Jul 25, 2026
Merged

Bump the dotnet-dependencies group with 6 updates#243
Chris-Wolfgang merged 1 commit into
mainfrom
dependabot/nuget/dotnet-dependencies-7b5a6a0ce5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 25, 2026

Copy link
Copy Markdown
Contributor

Updated Meziantou.Analyzer from 3.0.119 to 3.0.125.

Release notes

Sourced from Meziantou.Analyzer's releases.

3.0.125

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.125

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.124...3.0.125

3.0.124

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.124

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.123...3.0.124

3.0.123

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.123

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.122...3.0.123

3.0.122

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.122

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.121...3.0.122

3.0.121

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.121

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.120...3.0.121

3.0.120

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.120

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.119...3.0.120

Commits viewable in compare view.

Updated Microsoft.Bcl.AsyncInterfaces from 10.0.9 to 10.0.10.

Release notes

Sourced from Microsoft.Bcl.AsyncInterfaces's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Bcl.Memory from 10.0.9 to 10.0.10.

Release notes

Sourced from Microsoft.Bcl.Memory's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.SourceLink.GitHub from 10.0.300 to 10.0.301.

Release notes

Sourced from Microsoft.SourceLink.GitHub's releases.

10.0.301

You can build .NET 10.0 from the repository by cloning the release tag v10.0.301 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

Commits viewable in compare view.

Updated SonarAnalyzer.CSharp from 10.28.0.143324 to 10.30.0.144632.

Release notes

Sourced from SonarAnalyzer.CSharp's releases.

10.30.0.144632

Release notes - .NET Analyzers - 10.30

Feature

NET-1536 Implement rule S8970: Null-forgiving operators should not be used when nullable warnings are disabled
NET-3436 Implement rule S8949: Use the overload that accepts a CancellationToken
NET-3810 Fix: Protobuf Importer logs debug on excluded files
NET-3877 Implement rule S8747: Migrations should not narrow column types without converting existing data
NET-4091 Implement rule S8969: Null-forgiving operators should not be redundant
NET-4120 Update RSPEC before 10.30 release

False Positive

NET-1541 Fix S3459 FP: support classes marked with [AutoConstructor] attribute
NET-1583 Fix S6967 FP: Raises when model has no validation attributes
NET-1840 Fix S3903 FP: top-level statements and partial Program in separate file
NET-4059 Improve precision of S8949 (CancellationTokenShouldBeUsed) - umbrella
NET-4191 Fix S3169 FP: Should not raise in Azure Cosmos

False Negative

NET-3819 Fix S1244 FN: Should report on Double.Equals

Bug

NET-4107 Fix S4026 Race Condition

10.29.0.143774

Release notes - .NET Analyzers - 10.29

Feature

NET-3997 Move S6444 out of hotspot
NET-4060 Update RSPEC before 10.29 release

False Positive

NET-1626 Fix S6444 FP: REGEX_DEFAULT_MATCH_TIMEOUT

False Negative

NET-3920 Fix S2971 FN: Should raise on EntityFramework IQueryables
NET-3921 Fix S1155 FN: Should raise on EntityFramework IQueryables
NET-3922 Fix S3981 FN: Should raise on EntityFramework IQueryables
NET-3924 Fix S3169 FN: Should raise on EntityFramework IQueryables

Commits viewable in compare view.

Updated Wolfgang.Etl.Abstractions from 0.15.0 to 0.17.0.

Release notes

Sourced from Wolfgang.Etl.Abstractions's releases.

0.17.0

What's Changed

Full Changelog: Chris-Wolfgang/ETL-Abstractions@v0.16.1...v0.17.0

0.16.1

Patch release: maintenance, testing, and supply-chain hardening. No API or
behavioural change — the compiled assembly is identical to 0.16.0; consumers can
upgrade without any code change and without a binding redirect (AssemblyVersion
remains 1.0.0.0).

Added

  • Verified Native-AOT and trim compatibility — a PublishAot + PublishTrimmed
    smoke consumer is published for linux-x64 and run on every PR, so AOT/trim
    regressions are caught before they reach a consumer's published app.
  • Verified globalization / CultureInfo invariance — the suite now runs under
    tr-TR, de-DE, zh-CN, ar-SA, and ja-JP in addition to en-US.
  • Architecture Decision Records under docs/adr/, a
    migration-guide convention under docs/migrations/, and a "Release path &
    compromise scope" appendix in SECURITY.md.

Security

  • ABI-compatibility gate: Package Validation now fails the pack if a non-major
    release breaks binary/API compatibility against the previously published version.
  • All GitHub Actions are pinned to commit SHAs, and a workflow-security audit
    (zizmor + actionlint) runs on every PR to keep them pinned and hardened.

0.16.0

What's Changed

Full Changelog: Chris-Wolfgang/ETL-Abstractions@v0.15.0...v0.16.0

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the dotnet-dependencies group with 6 updates
57732ec 
Bumps Meziantou.Analyzer from 3.0.119 to 3.0.125
Bumps Microsoft.Bcl.AsyncInterfaces from 10.0.9 to 10.0.10
Bumps Microsoft.Bcl.Memory from 10.0.9 to 10.0.10
Bumps Microsoft.SourceLink.GitHub from 10.0.300 to 10.0.301
Bumps SonarAnalyzer.CSharp from 10.28.0.143324 to 10.30.0.144632
Bumps Wolfgang.Etl.Abstractions from 0.15.0 to 0.17.0

---
updated-dependencies:
- dependency-name: Meziantou.Analyzer
  dependency-version: 3.0.125
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-dependencies
- dependency-name: Microsoft.Bcl.AsyncInterfaces
  dependency-version: 10.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-dependencies
- dependency-name: Microsoft.Bcl.Memory
  dependency-version: 10.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-dependencies
- dependency-name: Microsoft.SourceLink.GitHub
  dependency-version: 10.0.301
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-dependencies
- dependency-name: SonarAnalyzer.CSharp
  dependency-version: 10.30.0.144632
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet-dependencies
- dependency-name: Wolfgang.Etl.Abstractions
  dependency-version: 0.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 25, 2026
@dependabot
dependabot Bot requested a review from Chris-Wolfgang as a code owner July 25, 2026 02:48
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 25, 2026
@Chris-Wolfgang
Chris-Wolfgang merged commit ed30888 into main Jul 25, 2026
8 checks passed
@Chris-Wolfgang
Chris-Wolfgang deleted the dependabot/nuget/dotnet-dependencies-7b5a6a0ce5 branch July 25, 2026 16:05
Chris-Wolfgang added a commit that referenced this pull request Jul 26, 2026
@Chris-Wolfgang @claude
ci: don't revert main's #243 analyzer bumps in the bundle
5312f24 
main is ahead of vNext on Directory.Build.props (Meziantou 3.0.123→
3.0.125, SonarAnalyzer 10.29→10.30 via dependabot group bump #243).
The bundle carried vNext's older copy, which would have downgraded
those analyzers on main. Restore Directory.Build.props to main's
version so the bundle introduces zero reversions; vNext's copy is
reconciled by the main→vNext merge that clears #246's guard.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Chris-Wolfgang added a commit that referenced this pull request Jul 26, 2026
@Chris-Wolfgang @claude
deps: reconcile 0.10.1 up to Abstractions 0.17.0 (match main)
70e3831 
main advanced to Wolfgang.Etl.Abstractions 0.17.0 + two analyzer bumps
(Meziantou 3.0.125, SonarAnalyzer 10.30.0.144632) via dependabot group
bump #243, merged after vNext branched. Bump vNext to match so the
vNext→main release merge (#246) neither downgrades main nor ships 0.10.1
against a stale 0.16.0. Still a PATCH: no public API/behaviour change,
PackageValidation baseline stays 0.10.0. CHANGELOG updated accordingly.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This was referenced Jul 29, 2026
Closed
Closed
Closed
Closed
This was referenced Aug 5, 2026
Closed
Merged
Closed
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@Chris-Wolfgang Chris-Wolfgang Awaiting requested review from Chris-Wolfgang Chris-Wolfgang is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@Chris-Wolfgang