From 6742feb68dd8726ccdb12d97c83b6a4aae22dc23 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 19 Oct 2026 09:13:41 +0000
Subject: [PATCH] deps: Bump the nuget-dependencies group with 6 updates

Bumps DemaConsulting.NuGet.Caching from 1.4.0 to 1.4.1
Bumps demaconsulting.reviewmark from 1.3.1 to 1.4.0
Bumps dotnet-sonarscanner from 11.3.0 to 12.0.0
Bumps Microsoft.CodeAnalysis.NetAnalyzers from 10.0.401 to 10.0.402
Bumps Microsoft.NET.Test.Sdk from 18.10.1 to 18.11.0
Bumps Microsoft.SourceLink.GitHub from 10.0.401 to 10.0.402

---
updated-dependencies:
- dependency-name: DemaConsulting.NuGet.Caching
  dependency-version: 1.4.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-dependencies
- dependency-name: demaconsulting.reviewmark
  dependency-version: 1.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-dependencies
- dependency-name: dotnet-sonarscanner
  dependency-version: 12.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-dependencies
- dependency-name: Microsoft.CodeAnalysis.NetAnalyzers
  dependency-version: 10.0.402
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-dependencies
- dependency-name: Microsoft.CodeAnalysis.NetAnalyzers
  dependency-version: 10.0.402
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-dependencies
- dependency-name: Microsoft.CodeAnalysis.NetAnalyzers
  dependency-version: 10.0.402
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-dependencies
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-dependencies
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-dependencies
- dependency-name: Microsoft.SourceLink.GitHub
  dependency-version: 10.0.402
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .config/dotnet-tools.json                                   | 4 ++--
 src/DemaConsulting.SpdxTool/DemaConsulting.SpdxTool.csproj  | 6 +++---
 .../DemaConsulting.SpdxTool.Targets.Tests.csproj            | 4 ++--
 .../DemaConsulting.SpdxTool.Tests.csproj                    | 4 ++--
 4 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/.config/dotnet-tools.json b/.config/dotnet-tools.json
index 49bce67..58ec61a 100644
--- a/.config/dotnet-tools.json
+++ b/.config/dotnet-tools.json
@@ -52,7 +52,7 @@
       "rollForward": false
     },
     "demaconsulting.reviewmark": {
-      "version": "1.3.1",
+      "version": "1.4.0",
       "commands": [
         "reviewmark"
       ],
@@ -73,7 +73,7 @@
       "rollForward": false
     },
     "dotnet-sonarscanner": {
-      "version": "11.3.0",
+      "version": "12.0.0",
       "commands": [
         "dotnet-sonarscanner"
       ],
diff --git a/src/DemaConsulting.SpdxTool/DemaConsulting.SpdxTool.csproj b/src/DemaConsulting.SpdxTool/DemaConsulting.SpdxTool.csproj
index e5efaf1..08bb4b1 100644
--- a/src/DemaConsulting.SpdxTool/DemaConsulting.SpdxTool.csproj
+++ b/src/DemaConsulting.SpdxTool/DemaConsulting.SpdxTool.csproj
@@ -49,7 +49,7 @@
   <!-- Runtime Dependencies -->
   <ItemGroup>
     <PackageReference Include="DemaConsulting.SpdxModel" Version="2.7.0" />
-    <PackageReference Include="DemaConsulting.NuGet.Caching" Version="1.4.0" />
+    <PackageReference Include="DemaConsulting.NuGet.Caching" Version="1.4.1" />
     <PackageReference Include="DemaConsulting.TestResults" Version="1.10.0" />
     <PackageReference Include="YamlDotNet" Version="18.1.0" />
   </ItemGroup>
@@ -57,7 +57,7 @@
   <!-- Build Tool Dependencies -->
   <ItemGroup>
     <PackageReference Include="Microsoft.Sbom.Targets" Version="4.1.13" PrivateAssets="All" />
-    <PackageReference Include="Microsoft.SourceLink.GitHub" Version="10.0.401" PrivateAssets="All" />
+    <PackageReference Include="Microsoft.SourceLink.GitHub" Version="10.0.402" PrivateAssets="All" />
     <PackageReference Include="Polyfill" Version="11.4.5" PrivateAssets="All" />
   </ItemGroup>
 
@@ -68,7 +68,7 @@
            in packages that consume this tool.
          - IncludeAssets lists all asset types (including 'analyzers' and 'buildtransitive') to ensure
            Roslyn analyzers and MSBuild targets are fully activated during the build. -->
-    <PackageReference Include="Microsoft.CodeAnalysis.NetAnalyzers" Version="10.0.401">
+    <PackageReference Include="Microsoft.CodeAnalysis.NetAnalyzers" Version="10.0.402">
       <PrivateAssets>all</PrivateAssets>
       <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
     </PackageReference>
diff --git a/test/DemaConsulting.SpdxTool.Targets.Tests/DemaConsulting.SpdxTool.Targets.Tests.csproj b/test/DemaConsulting.SpdxTool.Targets.Tests/DemaConsulting.SpdxTool.Targets.Tests.csproj
index 89179d6..7a9fdb1 100644
--- a/test/DemaConsulting.SpdxTool.Targets.Tests/DemaConsulting.SpdxTool.Targets.Tests.csproj
+++ b/test/DemaConsulting.SpdxTool.Targets.Tests/DemaConsulting.SpdxTool.Targets.Tests.csproj
@@ -22,7 +22,7 @@
   <!-- Test Framework Dependencies -->
   <ItemGroup>
     <PackageReference Include="coverlet.MTP" Version="10.1.0" />
-    <PackageReference Include="Microsoft.NET.Test.Sdk" Version="18.10.1" />
+    <PackageReference Include="Microsoft.NET.Test.Sdk" Version="18.11.0" />
     <PackageReference Include="Microsoft.Testing.Extensions.TrxReport" Version="2.5.1" />
     <PackageReference Include="xunit.runner.visualstudio" Version="4.0.1">
       <PrivateAssets>all</PrivateAssets>
@@ -33,7 +33,7 @@
 
   <!-- Code Analysis Dependencies -->
   <ItemGroup>
-    <PackageReference Include="Microsoft.CodeAnalysis.NetAnalyzers" Version="10.0.401">
+    <PackageReference Include="Microsoft.CodeAnalysis.NetAnalyzers" Version="10.0.402">
       <PrivateAssets>all</PrivateAssets>
       <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
     </PackageReference>
diff --git a/test/DemaConsulting.SpdxTool.Tests/DemaConsulting.SpdxTool.Tests.csproj b/test/DemaConsulting.SpdxTool.Tests/DemaConsulting.SpdxTool.Tests.csproj
index da32a5f..22f3cda 100644
--- a/test/DemaConsulting.SpdxTool.Tests/DemaConsulting.SpdxTool.Tests.csproj
+++ b/test/DemaConsulting.SpdxTool.Tests/DemaConsulting.SpdxTool.Tests.csproj
@@ -29,7 +29,7 @@
   <!-- coverlet.collector: PrivateAssets=all prevents transitive exposure; IncludeAssets controls what is consumed -->
   <ItemGroup>
     <PackageReference Include="coverlet.MTP" Version="10.1.0" />
-    <PackageReference Include="Microsoft.NET.Test.Sdk" Version="18.10.1" />
+    <PackageReference Include="Microsoft.NET.Test.Sdk" Version="18.11.0" />
     <PackageReference Include="Microsoft.Testing.Extensions.TrxReport" Version="2.5.1" />
     <PackageReference Include="xunit.runner.visualstudio" Version="4.0.1">
       <PrivateAssets>all</PrivateAssets>
@@ -40,7 +40,7 @@
 
   <!-- Code Analysis Dependencies -->
   <ItemGroup>
-    <PackageReference Include="Microsoft.CodeAnalysis.NetAnalyzers" Version="10.0.401">
+    <PackageReference Include="Microsoft.CodeAnalysis.NetAnalyzers" Version="10.0.402">
       <PrivateAssets>all</PrivateAssets>
       <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
     </PackageReference>