Skip to content

Bump the dotnet-dependencies group with 9 updates - #154

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/dotnet-dependencies-782fa16661
Open

Bump the dotnet-dependencies group with 9 updates#154
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/dotnet-dependencies-782fa16661

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 6, 2026

Copy link
Copy Markdown
Contributor

Updated Meziantou.Analyzer from 3.0.117 to 3.0.139.

Release notes

Sourced from Meziantou.Analyzer's releases.

3.0.139

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.139

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.138...3.0.139

3.0.138

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.138

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.137...3.0.138

3.0.137

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.137

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.136...3.0.137

3.0.136

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.136

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.135...3.0.136

3.0.135

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.135

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.134...3.0.135

3.0.134

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.134

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.133...3.0.134

3.0.133

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.133

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.132...3.0.133

3.0.132

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.132

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.130...3.0.132

3.0.131

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.131

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.129...3.0.131

3.0.130

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.130

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.129...3.0.130

3.0.129

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.129

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.128...3.0.129

3.0.128

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.128

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.127...3.0.128

3.0.127

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.127

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.126...3.0.127

3.0.126

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.126

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.125...3.0.126

3.0.125

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.125

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.124...3.0.125

3.0.124

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.124

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.123...3.0.124

3.0.123

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.123

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.122...3.0.123

3.0.122

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.122

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.121...3.0.122

3.0.121

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.121

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.120...3.0.121

3.0.120

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.120

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.119...3.0.120

3.0.119

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.119

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.118...3.0.119

3.0.118

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.118

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.117...3.0.118

Commits viewable in compare view.

Updated Microsoft.Extensions.FileSystemGlobbing from 10.0.9 to 10.0.10.

Release notes

Sourced from Microsoft.Extensions.FileSystemGlobbing's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Hosting from 10.0.9 to 10.0.10.

Release notes

Sourced from Microsoft.Extensions.Hosting's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.7.0 to 18.8.1.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.8.1

What's Changed

Full Changelog: microsoft/vstest@v18.8.0...v18.8.1

18.8.0

What's Changed

Full Changelog: microsoft/vstest@v18.7.0...v18.8.0

Commits viewable in compare view.

Updated Microsoft.SourceLink.GitHub from 10.0.300 to 10.0.301.

Release notes

Sourced from Microsoft.SourceLink.GitHub's releases.

10.0.301

You can build .NET 10.0 from the repository by cloning the release tag v10.0.301 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

Commits viewable in compare view.

Updated NSubstitute from 5.3.0 to 6.0.0.

Release notes

Sourced from NSubstitute's releases.

6.0.0

ℹ️ No changes from Release Candidate 1.

NSubstitute v6.0.0

From RC1 notes:

  • [NEW] ArgMatchers.Matching predicate matcher as an alternative to Is(Expression<Predicate<T>>. (.NET6 and above.)
  • [UPDATE] Improved support for custom argument matchers. Arg.Is now accepts arg matchers.
  • [UPDATE][BREAKING] Update target frameworks: .NET8, .NET Standard 2.0
  • [UPDATE][BREAKING] Remove legacy obsolete API
  • [UPDATE][BREAKING] Mark as obsolete api CompatArg with pre c# 7.0 support
  • [UPDATE][BREAKING] Nullability is enabled for public api for .NET 8+ TFMs
  • [UPDATE] Migrate documentation to docfx platform and update samples to NUnit 4
  • [NEW] Added NuGet Package README file.

Full change list

6.0.0-rc.1

NSubstitute v6.0.0 Release Candidate 1

Due to the large number of changes in this release, we wanted to start with a release candidate to ensure we've correctly captured breaking changes.

  • [NEW] ArgMatchers.Matching predicate matcher as an alternative to Is(Expression<Predicate<T>>. (.NET6 and above.)
  • [UPDATE] Improved support for custom argument matchers. Arg.Is now accepts arg matchers.
  • [UPDATE][BREAKING] Update target frameworks: .NET8, .NET Standard 2.0
  • [UPDATE][BREAKING] Remove legacy obsolete API
  • [UPDATE][BREAKING] Mark as obsolete api CompatArg with pre c# 7.0 support
  • [UPDATE][BREAKING] Nullability is enabled for public api for .NET 8+ TFMs
  • [UPDATE] Migrate documentation to docfx platform and update samples to NUnit 4
  • [NEW] Added NuGet Package README file.

Full change list

Commits viewable in compare view.

Updated Serilog from 4.3.1 to 4.4.0.

Release notes

Sourced from Serilog's releases.

4.4.0

What's Changed

New Contributors

Full Changelog: serilog/serilog@v4.3.1...v4.4.0

Commits viewable in compare view.

Updated SonarAnalyzer.CSharp from 10.28.0.143324 to 10.31.0.145097.

Release notes

Sourced from SonarAnalyzer.CSharp's releases.

10.31.0.145097

Release notes - .NET Analyzers - 10.31

Feature

NET-3865 Implement S8733: Potential Cartesian Explosion
NET-3875 Implement rule S8718: Client-evaluated default values should use database functions
NET-4087 Use shared secret exclusion patterns in hardcoded secrets rules
NET-4211 Update RSPEC before 10.31 release

False Positive

NET-1922 S1144 FP: When registering a service with Microsoft.Extensions.DependencyInjecion framework
NET-3928 Fix S3267 FP: Should not raise on EntityFramework IQueryables
NET-4205 Fix S1244 FP: should not raise on NaN check via x.Equals(double.NaN)

10.30.0.144632

Release notes - .NET Analyzers - 10.30

Feature

NET-1536 Implement rule S8970: Null-forgiving operators should not be used when nullable warnings are disabled
NET-3436 Implement rule S8949: Use the overload that accepts a CancellationToken
NET-3810 Fix: Protobuf Importer logs debug on excluded files
NET-3877 Implement rule S8747: Migrations should not narrow column types without converting existing data
NET-4091 Implement rule S8969: Null-forgiving operators should not be redundant
NET-4120 Update RSPEC before 10.30 release

False Positive

NET-1541 Fix S3459 FP: support classes marked with [AutoConstructor] attribute
NET-1583 Fix S6967 FP: Raises when model has no validation attributes
NET-1840 Fix S3903 FP: top-level statements and partial Program in separate file
NET-4059 Improve precision of S8949 (CancellationTokenShouldBeUsed) - umbrella
NET-4191 Fix S3169 FP: Should not raise in Azure Cosmos

False Negative

NET-3819 Fix S1244 FN: Should report on Double.Equals

Bug

NET-4107 Fix S4026 Race Condition

10.29.0.143774

Release notes - .NET Analyzers - 10.29

Feature

NET-3997 Move S6444 out of hotspot
NET-4060 Update RSPEC before 10.29 release

False Positive

NET-1626 Fix S6444 FP: REGEX_DEFAULT_MATCH_TIMEOUT

False Negative

NET-3920 Fix S2971 FN: Should raise on EntityFramework IQueryables
NET-3921 Fix S1155 FN: Should raise on EntityFramework IQueryables
NET-3922 Fix S3981 FN: Should raise on EntityFramework IQueryables
NET-3924 Fix S3169 FN: Should raise on EntityFramework IQueryables

Commits viewable in compare view.

Updated System.Configuration.ConfigurationManager from 10.0.9 to 10.0.10.

Release notes

Sourced from System.Configuration.ConfigurationManager's releases.

No release notes found for this version range.

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps Meziantou.Analyzer from 3.0.117 to 3.0.139
Bumps Microsoft.Extensions.FileSystemGlobbing from 10.0.9 to 10.0.10
Bumps Microsoft.Extensions.Hosting from 10.0.9 to 10.0.10
Bumps Microsoft.NET.Test.Sdk from 18.7.0 to 18.8.1
Bumps Microsoft.SourceLink.GitHub from 10.0.300 to 10.0.301
Bumps NSubstitute from 5.3.0 to 6.0.0
Bumps Serilog from 4.3.1 to 4.4.0
Bumps SonarAnalyzer.CSharp from 10.28.0.143324 to 10.31.0.145097
Bumps System.Configuration.ConfigurationManager from 10.0.9 to 10.0.10

---
updated-dependencies:
- dependency-name: Meziantou.Analyzer
  dependency-version: 3.0.139
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-dependencies
- dependency-name: Microsoft.Extensions.FileSystemGlobbing
  dependency-version: 10.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-dependencies
- dependency-name: Microsoft.Extensions.Hosting
  dependency-version: 10.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-dependencies
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet-dependencies
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet-dependencies
- dependency-name: Microsoft.SourceLink.GitHub
  dependency-version: 10.0.301
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-dependencies
- dependency-name: NSubstitute
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dotnet-dependencies
- dependency-name: Serilog
  dependency-version: 4.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet-dependencies
- dependency-name: SonarAnalyzer.CSharp
  dependency-version: 10.31.0.145097
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet-dependencies
- dependency-name: System.Configuration.ConfigurationManager
  dependency-version: 10.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Aug 6, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants