Skip to content

Bump the nuget-dependencies group with 3 updates#184

Merged
Malcolmnixon merged 1 commit into
mainfrom
dependabot/nuget/src/DemaConsulting.BuildMark/nuget-dependencies-04896dc0aa
May 25, 2026
Merged

Bump the nuget-dependencies group with 3 updates#184
Malcolmnixon merged 1 commit into
mainfrom
dependabot/nuget/src/DemaConsulting.BuildMark/nuget-dependencies-04896dc0aa

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 25, 2026

Updated Polyfill from 10.6.0 to 10.7.0.

Release notes

Sourced from Polyfill's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated SonarAnalyzer.CSharp from 10.25.0.139117 to 10.26.0.140279.

Release notes

Sourced from SonarAnalyzer.CSharp's releases.

10.26.0.140279

Release notes - .NET Analyzers - 10.26

Feature

NET-3694 Update RSPEC before 10.26 release

False Positive

NET-2346 Fix S1854 FP: Variable used after another assignment in finally
NET-2347 Fix S1168 FP: Do not report on value types
NET-3698 Fix S1210 FP: file-scoped types should be exempt

False Negative

NET-1265 Fix S2930 FN: raise issues on non-disposed RegistryKeys
NET-2685 Fix S3604 FN: Field Keyword, Partial Constructors, NullConditional Assignment
NET-2812 Fix S4275 FN: Field Keyword
NET-2999 Fix S6672 FN: Mismatch in primary constructor is not recognized

Commits viewable in compare view.

Updated YamlDotNet from 17.1.0 to 18.0.0.

Release notes

Sourced from YamlDotNet's releases.

18.0.0

What's Changed

  • Add a parse method wrapper and caching to fix AoT compilation by @​EdwardCooke in Add a parse method wrapper and caching to fix AoT compilation aaubry/YamlDotNet#1103
    BREAKING CHANGE This is a breaking change in the TypeInspectorSkeleton class and the ITypeInspector interface by adding 2 methods . Quick fix to resolve those breaking changes in your own custom TypeInspector is to return false on the HasParseMethod method and return null or throw an exception on the Parse method.

Full Changelog: aaubry/YamlDotNet@v17.1.0...v18.0.0

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps Polyfill from 10.6.0 to 10.7.0
Bumps SonarAnalyzer.CSharp from 10.25.0.139117 to 10.26.0.140279
Bumps YamlDotNet from 17.1.0 to 18.0.0

---
updated-dependencies:
- dependency-name: Polyfill
  dependency-version: 10.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-dependencies
- dependency-name: SonarAnalyzer.CSharp
  dependency-version: 10.26.0.140279
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-dependencies
- dependency-name: SonarAnalyzer.CSharp
  dependency-version: 10.26.0.140279
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-dependencies
- dependency-name: YamlDotNet
  dependency-version: 18.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 25, 2026

Labels

The following labels could not be found: nuget. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot added the dependencies Dependency updates label May 25, 2026
@Malcolmnixon Malcolmnixon merged commit 274e671 into main May 25, 2026
15 checks passed
@Malcolmnixon Malcolmnixon deleted the dependabot/nuget/src/DemaConsulting.BuildMark/nuget-dependencies-04896dc0aa branch May 25, 2026 22:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Dependency updates

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant