Skip to content

Bump Microsoft.Build.Framework from 17.11.48 to 18.7.1#983

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/Microsoft.Build.Framework-18.7.1
Closed

Bump Microsoft.Build.Framework from 17.11.48 to 18.7.1#983
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/Microsoft.Build.Framework-18.7.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 19, 2026

Copy link
Copy Markdown
Contributor

Updated Microsoft.Build.Framework from 17.11.48 to 18.7.1.

Release notes

Sourced from Microsoft.Build.Framework's releases.

18.7.1

What's Changed

18.6.3

What's Changed

18.5.4

What's Changed

18.4.0

What's Changed

18.3.3

What's Changed

18.0.2

What's Changed

17.14.28

What's Changed

17.14.8

What's Changed

Full Changelog: dotnet/msbuild@v17.14.5...v17.14.8

17.14.5

What's Changed

17.14.0-preview-25177-05

Release

What's Changed

17.14.0-preview-25155-01

Release

What's Changed

17.14.0-preview-25110-01

Release

What's Changed

17.13.9

What's Changed

  • Localized file check-in by OneLocBuild Task:...

Description has been truncated

---
updated-dependencies:
- dependency-name: Microsoft.Build.Framework
  dependency-version: 18.7.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Jun 19, 2026
@darylmcd

Copy link
Copy Markdown
Owner

Closing: this bumps only Microsoft.Build.Framework to 18.7.1 while the rest of the MSBuild family (Microsoft.Build, Microsoft.Build.Tasks.Core, Microsoft.Build.Utilities.Core) stays pinned at 17.11.48 in Directory.Packages.props. The split pulls transitive Microsoft.NET.StringTools@18.7.1 and trips MSBuildLocator's MSBL001 (build fails). The MSBuild family is intentionally pinned together at 17.11.48 and coupled to the Microsoft.CodeAnalysis 5.3.0 / MSBuildLocator 1.11.2 toolchain (see comments in Directory.Packages.props). An isolated major bump is not desired; a coordinated MSBuild-stack upgrade would be a separate deliberate change. Adding a dependabot ignore rule for Microsoft.Build.* majors to stop this recurring.

@darylmcd darylmcd closed this Jun 20, 2026
@darylmcd darylmcd deleted the dependabot/nuget/Microsoft.Build.Framework-18.7.1 branch June 20, 2026 02:12
@dependabot @github

dependabot Bot commented on behalf of github Jun 20, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@darylmcd

Copy link
Copy Markdown
Owner

Follow-up on the ignore-rule mentioned above. Not opening a separate PR right now since the repo has active in-flight work (#996) sharing the self-hosted runner — capturing the exact change here for you to land when convenient. Add under the existing nuget block in .github/dependabot.yml:

    ignore:
      # MSBuild family is pinned together at 17.11.48 in Directory.Packages.props
      # (coupled to Microsoft.Build.Locator + the CodeAnalysis 5.3.0 toolchain) to
      # satisfy MSBuildLocator's MSBL001. Major bumps must be coordinated manually.
      - dependency-name: "Microsoft.Build"
        update-types: ["version-update:semver-major"]
      - dependency-name: "Microsoft.Build.Framework"
        update-types: ["version-update:semver-major"]
      - dependency-name: "Microsoft.Build.Tasks.Core"
        update-types: ["version-update:semver-major"]
      - dependency-name: "Microsoft.Build.Utilities.Core"
        update-types: ["version-update:semver-major"]

This blocks only automated major bumps of the four core MSBuild packages; minor/patch and Microsoft.Build.Locator updates still flow normally.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant