chore(deps): Bump the nuget-dependencies group with 5 updates#24
Merged
JerrettDavis merged 4 commits intoJul 21, 2026
Merged
Conversation
Bumps Microsoft.CodeAnalysis.Analyzers from 5.3.0 to 5.6.0 Bumps Microsoft.CodeAnalysis.CSharp from 5.3.0 to 5.6.0 Bumps Microsoft.Extensions.DependencyInjection.Abstractions from 10.0.9 to 10.0.10 Bumps Microsoft.SourceLink.GitHub from 10.0.300 to 10.0.301 Bumps Nerdbank.GitVersioning from 3.10.85 to 3.10.91 --- updated-dependencies: - dependency-name: Microsoft.CodeAnalysis.Analyzers dependency-version: 5.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-dependencies - dependency-name: Microsoft.CodeAnalysis.CSharp dependency-version: 5.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-dependencies - dependency-name: Microsoft.Extensions.DependencyInjection.Abstractions dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-dependencies - dependency-name: Microsoft.SourceLink.GitHub dependency-version: 10.0.301 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-dependencies - dependency-name: Nerdbank.GitVersioning dependency-version: 3.10.91 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
the
dependencies
…ore failure bin/ and obj/ directories were accidentally committed to source control despite being covered by .gitignore. The committed obj/*.nuget.g.props files bake in absolute Windows paths (e.g. C:\Program Files (x86)\Microsoft Visual Studio\Shared\NuGetPackages) from the original author's machine. On the Linux CodeQL runner, MSBuild's incremental restore trusts these stale, checked-in NuGet restore artifacts instead of regenerating them, and fails with MSB4018 when it can't find that Windows-only fallback package folder. Untrack all bin/ and obj/ directories (already ignored going forward per .gitignore) so every environment performs a fresh, platform-appropriate restore. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
… 5.6.0 The nuget-dependencies bump raised Microsoft.CodeAnalysis.CSharp/.Analyzers to 5.6.0 but left Microsoft.CodeAnalysis.CSharp.Workspaces pinned to 5.3.0, which requires CSharp = 5.3.0 exactly. This was previously masked because the committed (now-removed) obj/ restore artifacts let MSBuild skip a real restore; once those are gone, restore genuinely runs and hits NU1107. Bump Workspaces to 5.6.0 to match and resolve the conflict. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
…er changes Bumping Microsoft.CodeAnalysis.CSharp to 5.6.0 surfaced 5 pre-existing Inshiminator.Analyzers.Tests failures on net8.0/net10.0, all in ClockCodeFixTests (TimeProvider code-fix golden outputs): - DateTimeNow_AppliesTimeProviderCodeFix: Roslyn 5.6's Simplifier now reduces the code fix's fully-qualified `System.DateTime.SpecifyKind` / `System.DateTimeKind.Local` to `DateTime.SpecifyKind` / `DateTimeKind.Local` given the `using System;` already in scope. Functionally identical output, just less verbose. Updated the expected replacement string to match. - The other 4 (TimeProviderCodeFix_UsesDerivedFieldTypeWhenAddingConstructorParameter, TimeProviderCodeFix_UsesFullyQualifiedDerivedFieldTypeWhenNamespaceIsOutOfScope, TimeProviderCodeFix_UsesNamedArgumentWhenOptionalParameterPrecedesExistingTimeProviderParameter, TimeProviderCodeFix_ReusesTimeProviderFieldFromOtherPartialDeclaration): purely a line-ending difference. The formatter only reformats Formatter.Annotation-marked (freshly synthesized) spans, and its default newline for those spans changed between CodeAnalysis 5.3.0 (CRLF) and 5.6.0 (LF), while untouched source retained the test file's CRLF. No behavioral difference. Pinned end_of_line=crlf via an in-test .editorconfig in CSharpCodeFixVerifier so generated spans are deterministic across Roslyn versions, instead of hand-matching whatever newline convention Roslyn's internals default to next. Also fixed .github/workflows/ci.yml, which triggers on `branches: [ main ]` but this repo's default branch is `master` - so the `dotnet test` job (which already covers Inshiminator.Analyzers.Tests) has never actually run against PRs. This is why the CI on this PR appeared green (only the CodeQL workflow runs) despite these 5 broken tests. Corrected the trigger to `master` so this class of regression is caught going forward. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Updated Microsoft.CodeAnalysis.Analyzers from 5.3.0 to 5.6.0.
Release notes
Sourced from Microsoft.CodeAnalysis.Analyzers's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated Microsoft.CodeAnalysis.CSharp from 5.3.0 to 5.6.0.
Updated Microsoft.Extensions.DependencyInjection.Abstractions from 10.0.9 to 10.0.10.
Release notes
Sourced from Microsoft.Extensions.DependencyInjection.Abstractions's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated Microsoft.SourceLink.GitHub from 10.0.300 to 10.0.301.
Release notes
Sourced from Microsoft.SourceLink.GitHub's releases.
10.0.301
You can build .NET 10.0 from the repository by cloning the release tag
v10.0.301and following the build instructions in the main README.md.Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.
Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023
Commits viewable in compare view.
Updated Nerdbank.GitVersioning from 3.10.85 to 3.10.91.
Release notes
Sourced from Nerdbank.GitVersioning's releases.
3.10.91
What's Changed
Full Changelog: dotnet/Nerdbank.GitVersioning@v3.10.85...v3.10.91
Commits viewable in compare view.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions