Currently upgrading roslyn bits for dotnet/razor is a manual process and it used to be a straightforward upgrade as seen in #8443. In contrast dotnet/runtime has it automatically using bot to upgrade dotnet/runtime#85460
The PR #8492 made changes to add explicit dependencies and explicit properties that match those dependencies into the repo. This is required for source-build to work correctly.
Currently getting the dependencies and resolution aren't very straightforward and upgrading roslyn bits causing version downgrades, needs further investigation.
cc @NikolaMilosavljevic