Skip to content

Bump the dotnet-dependencies group with 5 updates#44

Closed
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/nuget/dotnet-dependencies-db80a21ce6
Closed

Bump the dotnet-dependencies group with 5 updates#44
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/nuget/dotnet-dependencies-db80a21ce6

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 5, 2026

Updated coverlet.collector from 6.0.4 to 10.0.0.

Release notes

Sourced from coverlet.collector's releases.

10.0.0

Improvements

  • Unique Report Filenames (coverlet.MTP and AzDO) #​1866
  • Add --coverlet-file-prefix option for unique report files #​1869
  • Introduce .NET 10 support #​1823

Fixed

  • Fix [BUG] Wrong branch rate on IAsyncEnumerable for generic type #​1836
  • Fix [BUG] Missing Coverage after moving to MTP #​1843
  • Fix [BUG] No coverage reported when targeting .NET Framework with 8.0.1 #​1842
  • Fix [BUG] Behavior changes between MTP and Legacy (msbuild) #​1878
  • Fix [BUG] Coverlet.MTP - Unable to load coverlet.mtp.appsettings.json #​1880
  • Fix [BUG] Coverlet.Collector produces empty report when Mediator.SourceGenerator is referenced #​1718 by https://github.com/yusyd
  • Fix [BUG] Crash during instrumentation (Methods using LibraryImport/DllImport have no body) #​1762

Maintenance

  • Add comprehensive async method tests and documentation for issue #​1864
  • Replace Tmds.ExecFunction Package in coverlet.core.coverage.tests #​1833
  • Add net9.0 and net10.0 targets #​1822

Diff between 8.0.1 and 10.0.0

8.0.1

Fixed

  • Fix [BUG] TypeInitializationException when targeting .NET Framework #​1818
  • Fix [BUG] coverlet.MTP build fails with CS0400 due to developmentDependency=true #​1827

Improvements

  • Additional improvements needed for .NET Framework instrumentation type import #​1825

Diff between 8.0.0 and 8.0.1

8.0.0

Special Thanks: A huge thank you to @​Bertk for driving the majority of the work in this release! 🎉

Fixed

Improvements

  • Coverlet MTP extension feature #​1788
  • Generate SBOM for nuget packages #​1752
  • Use multi targets projects for coverlet.collector, coverlet.msbuild.tasks packages #​1742
  • Use .NET 8.0 target framework for coverlet.core and remove Newtonsoft.Json #​1733
  • Use latest System.CommandLine version #​1660
  • Upgraded minimum required .NET SDK and runtime to .NET 8.0 LTS (Long Term Support) (Breaking Change)
  • Use xunit.v3 for tests and example code

Diff between 6.0.4 and 8.0.0

Commits viewable in compare view.

Updated Meziantou.Analyzer from 3.0.58 to 3.0.63.

Release notes

Sourced from Meziantou.Analyzer's releases.

3.0.63

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.63

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.62...3.0.63

3.0.62

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.62

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.61...3.0.62

3.0.61

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.61

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.60...3.0.61

3.0.60

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.60

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.59...3.0.60

3.0.59

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.59

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.58...3.0.59

Commits viewable in compare view.

Updated Microsoft.Extensions.DependencyInjection from 10.0.2 to 10.0.7.

Release notes

Sourced from Microsoft.Extensions.DependencyInjection's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Logging from 10.0.2 to 10.0.7.

Release notes

Sourced from Microsoft.Extensions.Logging's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Logging.Abstractions from 10.0.2 to 10.0.7.

Release notes

Sourced from Microsoft.Extensions.Logging.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps coverlet.collector from 6.0.4 to 10.0.0
Bumps Meziantou.Analyzer from 3.0.58 to 3.0.63
Bumps Microsoft.Extensions.DependencyInjection from 10.0.2 to 10.0.7
Bumps Microsoft.Extensions.Logging from 10.0.2 to 10.0.7
Bumps Microsoft.Extensions.Logging.Abstractions from 10.0.2 to 10.0.7

---
updated-dependencies:
- dependency-name: coverlet.collector
  dependency-version: 10.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dotnet-dependencies
- dependency-name: Meziantou.Analyzer
  dependency-version: 3.0.63
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-dependencies
- dependency-name: Microsoft.Extensions.DependencyInjection
  dependency-version: 10.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-dependencies
- dependency-name: Microsoft.Extensions.DependencyInjection
  dependency-version: 10.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-dependencies
- dependency-name: Microsoft.Extensions.Logging
  dependency-version: 10.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-dependencies
- dependency-name: Microsoft.Extensions.Logging.Abstractions
  dependency-version: 10.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file dotnet .NET related changes labels May 5, 2026
@dependabot dependabot Bot requested a review from Chris-Wolfgang as a code owner May 5, 2026 00:48
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file dotnet .NET related changes labels May 5, 2026
@Chris-Wolfgang
Copy link
Copy Markdown
Owner

Superseded by #47, which includes every bump from this PR plus dropping the duplicate Microsoft.Extensions.Logging and Microsoft.Extensions.DependencyInjection PackageReferences from the test csproj. That duplicate was the cause of the NU1605 downgrade error here — Dependabot bumped the src copies to 10.0.7 but left the test copies pinned at 10.0.2.

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 5, 2026

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot dependabot Bot deleted the dependabot/nuget/dotnet-dependencies-db80a21ce6 branch May 5, 2026 23:05
Chris-Wolfgang added a commit that referenced this pull request May 5, 2026
Includes all bumps from #44:
- Meziantou.Analyzer 3.0.58 -> 3.0.63 (Directory.Build.props)
- Microsoft.Extensions.Logging 10.0.2 -> 10.0.7 (src)
- Microsoft.Extensions.Logging.Abstractions 10.0.2 -> 10.0.7 (src)
- Microsoft.Extensions.DependencyInjection 10.0.7 added for net462 (src)
- coverlet.collector 6.0.4 -> 10.0.0 (tests)

Also drops the test csproj's redundant PackageReferences for
Microsoft.Extensions.Logging and Microsoft.Extensions.DependencyInjection.
The test project already gets both packages transitively via its
ProjectReference to the src project (Microsoft.Extensions.Logging brings
DependencyInjection along). The duplicate refs were the cause of the
NU1605 downgrade error that blocked #44 — Dependabot bumped the src
copies to 10.0.7 but left the test copies pinned at 10.0.2.

Verified locally: dotnet restore is clean, dotnet build -c Release
produces 0 warnings / 0 errors, dotnet test passes 52/52 across all
runnable TFMs (net462-net481, net6.0-net10.0). net5.0 reports "no test
available" which is the standard xunit-runner discovery quirk on that
legacy TFM, not a regression.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Chris-Wolfgang added a commit that referenced this pull request May 7, 2026
Includes all bumps from #44:
- Meziantou.Analyzer 3.0.58 -> 3.0.63 (Directory.Build.props)
- Microsoft.Extensions.Logging 10.0.2 -> 10.0.7 (src)
- Microsoft.Extensions.Logging.Abstractions 10.0.2 -> 10.0.7 (src)
- Microsoft.Extensions.DependencyInjection 10.0.7 added for net462 (src)
- coverlet.collector 6.0.4 -> 10.0.0 (tests)

Also drops the test csproj's redundant PackageReferences for
Microsoft.Extensions.Logging and Microsoft.Extensions.DependencyInjection.
The test project already gets both packages transitively via its
ProjectReference to the src project (Microsoft.Extensions.Logging brings
DependencyInjection along). The duplicate refs were the cause of the
NU1605 downgrade error that blocked #44 — Dependabot bumped the src
copies to 10.0.7 but left the test copies pinned at 10.0.2.

Verified locally: dotnet restore is clean, dotnet build -c Release
produces 0 warnings / 0 errors, dotnet test passes 52/52 across all
runnable TFMs (net462-net481, net6.0-net10.0). net5.0 reports "no test
available" which is the standard xunit-runner discovery quirk on that
legacy TFM, not a regression.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file dotnet .NET related changes

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant