Skip to content

Bump the dependencies group with 10 updates#38

Open
dependabot[bot] wants to merge 1 commit intodevelopfrom
dependabot/nuget/dependencies-d73ff26f95
Open

Bump the dependencies group with 10 updates#38
dependabot[bot] wants to merge 1 commit intodevelopfrom
dependabot/nuget/dependencies-d73ff26f95

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot bot commented on behalf of github Apr 10, 2026 •
edited
Loading

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

Updated coverlet.collector from 6.0.4 to 8.0.1.

Release notes

Sourced from coverlet.collector's releases.

8.0.1

Fixed

  • Fix [BUG] TypeInitializationException when targeting .NET Framework #​1818
  • Fix [BUG] coverlet.MTP build fails with CS0400 due to developmentDependency=true #​1827

Improvements

  • Additional improvements needed for .NET Framework instrumentation type import #​1825

Diff between 8.0.0 and 8.0.1

8.0.0

Special Thanks: A huge thank you to @​Bertk for driving the majority of the work in this release! 🎉

Fixed

Improvements

  • Coverlet MTP extension feature #​1788
  • Generate SBOM for nuget packages #​1752
  • Use multi targets projects for coverlet.collector, coverlet.msbuild.tasks packages #​1742
  • Use .NET 8.0 target framework for coverlet.core and remove Newtonsoft.Json #​1733
  • Use latest System.CommandLine version #​1660
  • Upgraded minimum required .NET SDK and runtime to .NET 8.0 LTS (Long Term Support) (Breaking Change)
  • Use xunit.v3 for tests and example code

Diff between 6.0.4 and 8.0.0

Commits viewable in compare view.

Updated coverlet.msbuild from 6.0.4 to 8.0.1.

Release notes

Sourced from coverlet.msbuild's releases.

8.0.1

Fixed

  • Fix [BUG] TypeInitializationException when targeting .NET Framework #​1818
  • Fix [BUG] coverlet.MTP build fails with CS0400 due to developmentDependency=true #​1827

Improvements

  • Additional improvements needed for .NET Framework instrumentation type import #​1825

Diff between 8.0.0 and 8.0.1

8.0.0

Special Thanks: A huge thank you to @​Bertk for driving the majority of the work in this release! 🎉

Fixed

Improvements

  • Coverlet MTP extension feature #​1788
  • Generate SBOM for nuget packages #​1752
  • Use multi targets projects for coverlet.collector, coverlet.msbuild.tasks packages #​1742
  • Use .NET 8.0 target framework for coverlet.core and remove Newtonsoft.Json #​1733
  • Use latest System.CommandLine version #​1660
  • Upgraded minimum required .NET SDK and runtime to .NET 8.0 LTS (Long Term Support) (Breaking Change)
  • Use xunit.v3 for tests and example code

Diff between 6.0.4 and 8.0.0

Commits viewable in compare view.

Updated GitHubActionsTestLogger from 3.0.1 to 3.0.3.

Release notes

Sourced from GitHubActionsTestLogger's releases.

3.0.3

What's Changed

Full Changelog: Tyrrrz/GitHubActionsTestLogger@3.0.2...3.0.3

3.0.2

What's Changed

New Contributors

Full Changelog: Tyrrrz/GitHubActionsTestLogger@3.0.1...3.0.2

Commits viewable in compare view.

Updated Meziantou.Analyzer from 3.0.18 to 3.0.46.

Release notes

Sourced from Meziantou.Analyzer's releases.

3.0.46

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.46

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.45...3.0.46

3.0.45

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.45

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.44...3.0.45

3.0.44

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.44

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.43...3.0.44

3.0.43

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.43

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.42...3.0.43

3.0.42

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.42

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.41...3.0.42

3.0.41

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.41

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.40...3.0.41

3.0.40

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.40

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.39...3.0.40

3.0.39

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.39

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.38...3.0.39

3.0.38

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.38

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.37...3.0.38

3.0.37

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.37

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.36...3.0.37

3.0.36

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.36

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.35...3.0.36

3.0.35

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.35

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.34...3.0.35

3.0.34

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.34

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.33...3.0.34

3.0.33

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.33

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.32...3.0.33

3.0.32

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.32

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.31...3.0.32

3.0.31

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.31

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.30...3.0.31

3.0.30

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.30

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.29...3.0.30

3.0.29

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.29

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.28...3.0.29

3.0.28

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.28

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.27...3.0.28

3.0.27

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.27

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.26...3.0.27

3.0.26

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.26

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.25...3.0.26

3.0.25

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.25

Full Changelog: meziantou/Meziantou.Analyzer@3.0.24...3.0.25

3.0.24

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.24

Full Changelog: meziantou/Meziantou.Analyzer@3.0.23...3.0.24

3.0.23

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.23

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.22...3.0.23

3.0.22

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.22

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.21...3.0.22

3.0.21

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.21

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.20...3.0.21

3.0.20

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.20

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.19...3.0.20

3.0.19

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.19

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.18...3.0.19

Commits viewable in compare view.

Updated Microsoft.Bcl.Cryptography from 10.0.3 to 10.0.5.

Release notes

Sourced from Microsoft.Bcl.Cryptography's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Logging.Console from 10.0.3 to 10.0.5.

Release notes

Sourced from Microsoft.Extensions.Logging.Console's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated MSTest from 4.1.0 to 4.2.1.

Release notes

Sourced from MSTest's releases.

4.2.1

See the release notes here

Commits viewable in compare view.

Updated SonarAnalyzer.CSharp from 10.20.0.135146 to 10.23.0.137933.

Release notes

Sourced from SonarAnalyzer.CSharp's releases.

10.23

This release brings a bunch of fixes! Enjoy.

Bug Fixes

  • NET-3557 - Fix SE AD0001 when SyntaxTreeOptionsProvider is null
  • NET-3519 - Fix AD0001: NRE in PropertiesAccessCorrectField

False Positives

  • NET-3532 - Fix S2583 FP: Any called two times
  • NET-3468 - Fix S1144 FP: Erroneously flagged Add() method used in Collection Initializer
  • NET-3454 - Fix S3267 FP: ref struct in foreach body cannot be captured in LINQ lambda
  • NET-3164 - Fix S125 FP: Improve semicolon heuristic
  • NET-2559 - Fix S5944 FP: When method name is also a class name of generic argument
  • NET-2438 - Fix S1067 FP: Do not raise an issue inside Equals() implementation
  • NET-1565 - Fix S1192 FP: Shouldn't raise on Dapper parameters
  • NET-1168 - Fix S1172 FP: When parameter conditionally used in local function
  • NET-52 - Fix S4017 FP: Do not raise when implementing abstract class/interface

False Negatives

  • NET-1642 - Fix S3415, S2701, S2699, S2187 FN: Support NUnit 4.0
  • NET-348 - Fix S4144 FN: Methods with generic return types

10.22

Hello everyone,
This release brings 4 new rules to help developers transition to C# 14, and a bunch of false positive fixes.

New rules

  • NET-3361 - New rule S8381: "scoped" should be escaped when used as a type name in lambda parameters
  • NET-3359 - New rule S8368: "extension" identifiers should be escaped to avoid contextual keyword conflicts
  • NET-3347 - New rule S8380: Return types named "partial" should be escaped with "@"
  • NET-3345 - New rule S8367: Identifiers should not conflict with the "field" keyword in C# 14?

False Positive

  • NET-3443 - Fix S1940 FP: for floating point numbers that can be NaN "!(a <= b)" is not the same as "a > b"
  • NET-3001 - Fix S3063 FP: Concatenation with identifier
  • NET-1569 - Fix S5944 FP: AddressOf(MethodName) in Return statement
  • NET-3445 - Fix T0029 FP: Inside target-typed new
  • NET-2817 - Fix T0029 FP: Ident for collection expression members
  • NET-2024 - Fix T0029 FP: Inside array initializer
  • NET-3341 - Fix T0029 FP: After member access
  • NET-3462 - Fix T0042 FP: Inside constructors and collection initializers
  • NET-3426 - Fix T0042: Raw string in collection initializer
  • NET-2888 - Fix T0042 FP: Returned from method
  • NET-2874 - Fix T0042 FP: Raw string in ternary

Bugs

  • NET-3386 - Fix S4583 AD0001: BeginInvoke callback declared in separate file

Other

  • NET-3385 - S2612: Rule type changed from Security Hotspot to Vulnerability

10.21

### Bug

  • NET-3376 - Fix S6930 AD0001: Issue on template / code files for blazor
  • NET-3367 - Fix S4830 AD0001: CertificateValidationCheck Syntax node is not within syntax tree

Feature

  • NET-3260 - Fix broken links in S6960 RSPEC

False Positive

  • NET-2886 - Fix T0015 FP: In constructor
  • NET-1678 - Fix S4275 FP: with property overload

Commits viewable in compare view.

Updated System.Formats.Asn1 from 10.0.3 to 10.0.5.

Release notes

Sourced from System.Formats.Asn1's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Testcontainers from 4.10.0 to 4.11.0.

Release notes

Sourced from Testcontainers's releases.

4.11.0

What's Changed

Thanks to all contributors. Once again, really great contributions from everyone 🤝.

The NuGet packages for this release have been attested for supply chain security using actions/attest. This confirms the integrity and provenance of the artifacts and helps ensure they can be trusted: #​21198535.

Please be aware that we have changed the supported and underlying image used for the Cosmos DB module. The latest tag only supports certain environments and provides a limited set of features. Microsoft has introduced a new implementation, vnext-preview, which receives more updates and features. Due to the limitations of the latest tag, we decided to replace it with vnext-preview. You find more information about the image here: https://github.com/Azure/azure-cosmos-db-emulator-docker.

⚠️ Breaking Changes

  • feat(CosmosDb): Update base image from latest to vnext-preview (#​1324) @​NelsonBN

🚀 Features

  • feat(CosmosDb): Update base image from latest to vnext-preview (#​1324) @​NelsonBN
  • feat: Add typed WithResourceMapping(...) overloads (#​1497) @​cimnine
  • feat: Add Seq module (#​1276) @​montanehamilton
  • feat(PostgreSql): Add WithSsl builder API (#​1529) @​ozkanpakdil
  • feat: Add Temporal module (#​1635) @​bgener
  • feat: Add module connection string provider (#​1632) @​HofmeisterAn
  • fead: Add default container connection string provider (#​1630) @​HofmeisterAn
  • feat(ServiceBus): Add method to get HTTP connection string (#​1622) @​NelsonBN

🐛 Bug Fixes

  • fix(MongoDb): Wait for post-init startup readiness before replica set initiation (#​1656) @​HofmeisterAn
  • fix(Seq): Assert connection string provider (#​1645) @​HofmeisterAn
  • fix(EventHubs): Ignore runtime property to support reuse (#​1644) @​franciscosamuel
  • fix(ServiceBus): Ignore runtime property to support reuse (#​1643) @​franciscosamuel
  • fix(ResourceReaper): Set wait strategy (#​1634) @​HofmeisterAn
  • fix(ServiceBus): Workaround health API timeout (#​1625) @​HofmeisterAn
  • fix: Do not set console buffer width (ConsoleLogger) (#​1623) @​HofmeisterAn
  • fix(EventHubs): Workaround health API timeout (#​1624) @​HofmeisterAn

📖 Documentation

  • docs(CosmosDb): Replace unsupported tag 'latest' with 'vnext-preview' (#​1660) @​HofmeisterAn
  • docs(Redis): Add example (#​1641) @​HofmeisterAn

🧹 Housekeeping

  • chore(examples): Enable NuGet restore lock mode (#​1659) @​HofmeisterAn
  • chore: Pin image digest (#​1658) @​HofmeisterAn
  • fix: Run OpenSSF Scorecard only on default branch (#​1657) @​HofmeisterAn
  • chore: Remove Git LFS tracking for .snk (#​1655) @​HofmeisterAn
  • feat: Enable Dependabot for NuGet (repo) (#​1654) @​HofmeisterAn
  • feat: Enable Dependabot for NuGet (src) (#​1653) @​HofmeisterAn
  • fix: Replace branch protection with ruleset (#​1652) @​HofmeisterAn
  • fix: Do not enforce policies for admins (#​1651) @​HofmeisterAn
  • fix: Remove missing labels from Dependabot (#​1650) @​HofmeisterAn
    ... (truncated)

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the dependencies group with 10 updates
817d938 
Bumps coverlet.collector from 6.0.4 to 8.0.1
Bumps coverlet.msbuild from 6.0.4 to 8.0.1
Bumps GitHubActionsTestLogger from 3.0.1 to 3.0.3
Bumps Meziantou.Analyzer from 3.0.18 to 3.0.46
Bumps Microsoft.Bcl.Cryptography from 10.0.3 to 10.0.5
Bumps Microsoft.Extensions.Logging.Console from 10.0.3 to 10.0.5
Bumps MSTest from 4.1.0 to 4.2.1
Bumps SonarAnalyzer.CSharp from 10.20.0.135146 to 10.23.0.137933
Bumps System.Formats.Asn1 from 10.0.3 to 10.0.5
Bumps Testcontainers from 4.10.0 to 4.11.0

---
updated-dependencies:
- dependency-name: coverlet.collector
  dependency-version: 8.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: coverlet.msbuild
  dependency-version: 8.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: GitHubActionsTestLogger
  dependency-version: 3.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: Meziantou.Analyzer
  dependency-version: 3.0.46
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: Microsoft.Bcl.Cryptography
  dependency-version: 10.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: Microsoft.Extensions.Logging.Console
  dependency-version: 10.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: MSTest
  dependency-version: 4.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: SonarAnalyzer.CSharp
  dependency-version: 10.23.0.137933
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: System.Formats.Asn1
  dependency-version: 10.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: Testcontainers
  dependency-version: 4.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added .NET Pull requests that update .net code dependencies Pull requests that update a dependency file labels Apr 10, 2026
@dependabot dependabot bot requested a review from Rob-Hague as a code owner April 10, 2026 21:38
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Apr 10, 2026
@dependabot dependabot bot mentioned this pull request Apr 10, 2026
Closed
@dependabot dependabot bot added the .NET Pull requests that update .net code label Apr 10, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@Rob-Hague Rob-Hague Awaiting requested review from Rob-Hague Rob-Hague is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .net code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants