Skip to content

Bump the nuget-dependencies group with 25 updates - #74

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/dot-config/nuget-dependencies-7d934b71cc
Open

Bump the nuget-dependencies group with 25 updates#74
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/dot-config/nuget-dependencies-7d934b71cc

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 14, 2026

Copy link
Copy Markdown
Contributor

Updated Dapper from 2.1.79 to 2.1.86.

Release notes

Sourced from Dapper's releases.

2.1.86

What's Changed

Full Changelog: DapperLib/Dapper@2.1.79...2.1.86

Commits viewable in compare view.

Updated Dapper.AOT from 1.0.52 to 1.1.0.

Release notes

Sourced from Dapper.AOT's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated dotnet-reportgenerator-globaltool from 5.5.10 to 5.5.11.

Release notes

Sourced from dotnet-reportgenerator-globaltool's releases.

5.5.11

Changes:

  • #​786 Improved HTML table layout for Firefox
  • #​785 Changed hover color for table rows in HTML reports to improve readability in dark mode

This release requires .NET Framework 4.7 or .NET 8.0/9.0/10.0

Commits viewable in compare view.

Updated Imposter from 0.1.9 to 0.1.11.

Release notes

Sourced from Imposter's releases.

0.1.11

Features

  • Interface-specific setup views (#​57, closes #​5) — imposter.For(default(IParentInterface)) returns a view exposing hidden and inherited members under their original names instead of suffixed names like Value_1. Views forward to the existing builders with no allocations or reflection, share all setup state and history, and the suffixed members remain available for compatibility. Thanks @​gabisonia!

  • CallCount() for incremental verification (#​57) — the method verification interface now exposes the raw invocation count, using the same history counting as Called(Count.*) including argument and generic-type matching. Reading the count never registers a setup, advances sequences, or clears history.

Fixes

  • Sealed overrides no longer break generation (#​56) — generating an imposter for a class with a sealed override property, indexer, or event (or a class inheriting one) produced CS0239. Sealed members are now excluded from override generation while other virtual members keep their setup APIs. Thanks @​gabisonia!

Supply chain

  • First attested release: the nupkg carries GitHub build provenance and the sigstore bundle ships as a release asset (#​54).
  • GitHub Actions pinned by commit SHA (#​50), workflow token permissions hardened (#​47), docs dependencies hash-locked (#​51), Dependabot enabled (#​48), SECURITY.md added (#​52).

0.1.10

Fixes

  • Explicit mode now supports void methods (#​37) — in ImposterMode.Explicit there was no way to set the result generator for a void method, so a configured void call could not complete successfully. Void methods now get a default result generator.

  • Parameters named after C# keywords no longer break generation (#​38) — a parameter such as TEvent @​event produced ~100 compile errors in the generated file. Emitted identifiers are now escaped, so verbatim names round-trip correctly.

Other

  • Fixed a typo in the NuGet package description (#​43).

Commits viewable in compare view.

Updated Microsoft.Data.Sqlite from 11.0.0-preview.5.26302.115 to 11.0.0-rc.1.26425.128.

Release notes

Sourced from Microsoft.Data.Sqlite's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration from 10.0.9 to 10.0.12.

Release notes

Sourced from Microsoft.Extensions.Configuration's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.Binder from 10.0.9 to 10.0.12.

Release notes

Sourced from Microsoft.Extensions.Configuration.Binder's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.DependencyInjection from 10.0.9 to 10.0.12.

Release notes

Sourced from Microsoft.Extensions.DependencyInjection's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Hosting from 10.0.9 to 10.0.12.

Release notes

Sourced from Microsoft.Extensions.Hosting's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Options.ConfigurationExtensions from 10.0.9 to 10.0.12.

Release notes

Sourced from Microsoft.Extensions.Options.ConfigurationExtensions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.TimeProvider.Testing from 10.7.0 to 10.10.0.

Release notes

Sourced from Microsoft.Extensions.TimeProvider.Testing's releases.

10.10.0

This month's release focuses on AI package reliability: closing gaps in evaluation scoring, hardening OpenAI image-option handling, and removing the deprecated OpenAI Assistants API support.

Experimental API Changes

Removed Experimental APIs

  • OpenAI Assistants experimental APIs removed (was experimental under OPENAI001) #​7724

What's Changed

AI

  • Remove OpenAI Assistants API support #​7724 by @​jozkee (co-authored by @​Copilot)
  • Update OpenAI package version to 2.13.0 #​7726 by @​jozkee
  • OpenAI: Avoid null implicit conversions for image options #​7727 by @​jozkee (co-authored by @​Copilot)

AI Evaluation

  • Fail closed when a quality metric has no valid score #​7735 by @​thaildhe172591
  • Validate path segments in Azure storage result store and response cache #​7718 by @​Lroca88

Repository Infrastructure Updates

  • Add TfxInstaller for publishing #​7695 by @​peterwaltonwork
  • Bump PowerShell from 7.6.4 to 7.6.5 #​7702
  • [Infrastructure] Update vulnerable npm dependencies #​7705 by @​wtgodbe
  • Add Node installation for TfxInstaller #​7703 by @​peterwaltonwork
  • Publish VSIX using publish task instead of output #​7711 by @​peterwaltonwork
  • Bump dotnet-coverage from 18.9.0 to 18.10.0 #​7708
  • Do not validate extension during publish step #​7725 by @​peterwaltonwork
  • Add skill for upgrading OpenAI #​7728 by @​jozkee
  • Fix source indexer stage #​7694 by @​jjonescz

Acknowledgements

  • @​Lroca88 made their first contribution in #​7718
  • @​thaildhe172591 made their first contribution in #​7735
  • @​ANcpLua submitted issue #​7665 (resolved by #​7735)
  • @​jeffhandley @​peterwald @​shyamnamboodiripad reviewed pull requests

Full Changelog: dotnet/extensions@v10.9.0...v10.10.0

10.9.0

Version 10.9.0 is headlined by changes in these areas:

  • AI: New experimental routing APIs center on the abstract RoutingChatClient base class, with SemanticRoutingChatClient as a concrete semantic-routing implementation. Separately, the abstract FailoverChatClient specialization and its concrete OrderedFailoverChatClient implementation add failover routing.
  • AI Evaluation: The generated report gains redesigned Overview, Cases, History, and Comparison views.
  • ASP.NET Core and HTTP diagnostics: The release adds HTTP request latency log enrichment and fixes configuration binding, response-body logging, request-path redaction, and resilience package version handling.
  • Source-generated logging and service discovery: Fixes cover classification type qualification, thread-local state cleanup, and DNS query suffix handling.

Experimental API Changes

New Experimental APIs

  • New experimental API: HTTP request latency log enrichment (EXTEXP0013) #​7602
  • New experimental API: Chat client routing and failover (MEAI001) #​7662

What's Changed

AI (Microsoft.Extensions.AI, Microsoft.Extensions.AI.Abstractions, and Microsoft.Extensions.AI.OpenAI)

  • Add extensible chat client routing #​7662 by @​joshuajyue (co-authored by @​Copilot)
  • Pass the request's options to the selected client #​7685 by @​joshuajyue (co-authored by @​jozkee @​Copilot)
  • AI.Abstractions: fix ExcludeFromSchema dropped under concurrent AIFunction creation #​7677 by @​jozkee (co-authored by @​Copilot)
  • Cap OpenAI dependency version (b10f9c0) by @​jeffhandley (co-authored by @​Copilot)

Note: Microsoft.Extensions.AI.OpenAI constrains its dependency for OpenAI to 2.12.x, preventing OpenAI updates to 2.13.0+ due to an incompatibility. We expect to release Microsoft.Extensions.AI.OpenAI version 10.9.1 during the week of August 17 to address this issue.

HTTP Resilience and Diagnostics (Microsoft.Extensions.Http.Resilience and Microsoft.Extensions.Http.Diagnostics)

  • Fix Grpc.Net.ClientFactory version range check - Fixes #​7565 #​7566 by @​Ghost93
  • Fix response body logging under debugger #​7678 by @​Rimobul
  • Redact outgoing path when route is unknown #​7687 by @​Rimobul
  • Fix HTTP client logging config binding #​7691 by @​Rimobul

ASP.NET Core Extensions (Microsoft.AspNetCore.Diagnostics.Middleware)

  • Rename HttpLatencyTelemetry extensions class and drop redundant TFM guard #​7645 by @​EasyL0ver (co-authored by @​Copilot)
  • Add HTTP request latency log enricher (experimental) #​7602 by @​EasyL0ver (co-authored by @​Copilot)

Logging Source Generator (Microsoft.Gen.Logging)

  • [Microsoft.Gen.Logging] Clear thread-local state when logging throws #​7682 by @​Rimobul
  • [Microsoft.Gen.Logging] Fully qualify classification types #​7689 by @​Rimobul

AI Evaluation (Microsoft.Extensions.AI.Evaluation.Reporting)

  • [Microsoft.Extensions.AI.Evaluation.Reporting] Evaluation report redesign #​7609 by @​grafanaKibana

Project Templates (Microsoft.McpServer.ProjectTemplates)

  • Remove MCP server project template #​7680 by @​jeffhandley (co-authored by @​Copilot)

... (truncated)

10.8.4

This servicing update refreshes the .NET AI project templates ahead of the July 30, 2026 retirement of GitHub Models — removing the GitHub Models provider option and updating template dependencies.

As a result, both the AI Chat Web (aichatweb) and AI Agent Web API (aiagent-webapi) templates now require the AI service provider to be chosen explicitly via --provider; there is no longer a default. One of the following must be selected:

  • --provider azureopenai — Azure OpenAI
  • --provider ollama — Ollama (for local development)
  • --provider openai — OpenAI Platform

Packages in this release

Package Version
Microsoft.Extensions.AI.Templates 10.8.4-preview.3.26379.3
Microsoft.Agents.AI.ProjectTemplates 1.13.0-preview.1.26379.3

What's Changed

Project templates

  • Removed the GitHub Models provider from the AI Chat Web and AI Agent Web API templates, ahead of GitHub Models being fully retired on July 30, 2026. The --provider option is now required with no default (#​7667).
  • Updated AI template dependencies — bumped Aspire.Hosting.AppHost to 13.4.6 and CommunityToolkit.VectorData.SqliteVec to 1.0.0-preview.4 (aligned System.Linq.AsyncEnumerable to 10.0.9), replacing earlier workaround package pins (#​7639).

Full Changelog

10.8.3

Packages in this release

Package Version
Microsoft.Extensions.AI 10.8.3
Microsoft.Extensions.AI.Abstractions 10.8.3
Microsoft.Extensions.AI.OpenAI 10.8.3

Experimental API Changes

Experimental API behavior updates

  • Updated serialization behavior for experimental ToolApprovalRequestContent.RequiresConfirmation so it no longer leaks into consumer source-generated AIContent JSON metadata unless approval APIs are intentionally used (#​7659).

What's Changed

AI abstractions and serialization

  • Fixed MEAI001 leakage from RequiresConfirmation in source-generated AIContent contexts by using an internal JSON-included backing member while keeping the public experimental member ignored for source-generation metadata (#​7659).

Test Improvements

  • Added stabilization regression coverage to verify consumer source-generated List<AIContent> contexts compile and round-trip without requiring MEAI001 suppression (#​7659).

Full Changelog

10.8.2

This servicing release updates Microsoft.Extensions.VectorData.ConformanceTests to 10.8.2 and includes targeted test framework migration fixes.

Packages in this release

Package Version Note
Microsoft.Extensions.VectorData.Abstractions 10.8.2 Published August 7, 2026
Microsoft.Extensions.VectorData.ConformanceTests 10.8.2

Update: August 7, 2026
The Microsoft.Extensions.VectorData.Abstractions package was initially excluded from this release by mistake. Because Microsoft.Extensions.VectorData.ConformanceTests has a dependency on Microsoft.Extensions.VectorData.Abstractions, that led to failures when updating to Microsoft.Extensions.VectorData.ConformanceTests 10.8.2.

Microsoft.Extensions.VectorData.Abstractions was published August 7, 2026 to resolve that issue.

What's Changed

AI

  • Move Microsoft.Extensions.VectorData.ConformanceTests to xUnit 3 #​7636 by @​adamsitnik (co-authored by @​Copilot)

Acknowledgements

  • @​roji reviewed pull requests

Full Changelog: dotnet/extensions@v10.8.1...v10.8.2

10.8.1

This servicing release updates the Microsoft.Extensions.AI, Microsoft.Extensions.AI.Abstractions, and Microsoft.Extensions.AI.OpenAI packages to 10.8.1 with two targeted fixes: correct tool-call/tool-result ordering when resuming approval-gated functions with service-managed chat history, and preservation of the OpenAI Responses reasoning item id for stateless (store=false) encrypted reasoning.

Packages in this release

Package Version
Microsoft.Extensions.AI 10.8.1
Microsoft.Extensions.AI.Abstractions 10.8.1
Microsoft.Extensions.AI.OpenAI 10.8.1

What's Changed

AI

  • Fix FICC tool_calls/tool ordering with approvals and service-managed chat history #​7617 by @​westey-m
  • Roundtrip OpenAI Responses reasoning item id for stateless (store=false) encrypted reasoning #​7629 by @​rogerbarreto (co-authored by @​tarekgh)

Acknowledgements

  • @​jozkee reviewed pull requests

Full Changelog: dotnet/extensions@v10.8.0...v10.8.1

10.8.0

This release adds new experimental APIs to Microsoft.Extensions.AI.Abstractions and updates the OpenAI dependency to 2.12.0, alongside documentation, test, and repository maintenance.

Experimental API Changes

New Experimental APIs

  • New experimental API: AIFunctionNameAttribute and AIParameterNameAttribute #​7610 by @​jozkee (co-authored by @​jeffhandley @​Copilot)
  • New experimental API: ToolApprovalRequestContent.RequiresConfirmation (MEAI001) #​7549 by @​javiercn (co-authored by @​Copilot)

What's Changed

AI

  • Upgrade OpenAI dependency to 2.12.0 #​7608 by @​jozkee (co-authored by @​Copilot)
  • Auto-detect audio format in OpenAISpeechToTextClient #​7575 by @​jozkee (co-authored by @​Copilot)
  • Fix ImageGeneratingChatClient duplicating preceding content and dropping following content #​7624 by @​jozkee (co-authored by @​Copilot)

Vector Data

  • Make all test methods virtual in VectorData.ConformanceTests #​7606 by @​adamsitnik (co-authored by @​Copilot)

Documentation Updates

  • Remove links to ai-samples repo #​7574 by @​gewarren
  • Fix up docs with Copilot (MEVD) #​7597 by @​gewarren
  • Fix up docs with Copilot (M.E.ServiceDiscovery) #​7598 by @​gewarren (co-authored by @​Copilot)
  • Fix up docs with Copilot (MEAI) #​7600 by @​gewarren
  • Fix up docs with Copilot #​7601 by @​gewarren

Test Improvements

  • Fix flaky StampedeTests and harden related test waits #​7572 by @​jeffhandley (co-authored by @​Copilot)
  • Fix SQLitePCLRaw.lib.e_sqlite3 vulnerability by replacing SemanticKernel connectors with CommunityToolkit #​7579 by @​adamsitnik (co-authored by @​Copilot)
  • Removing SemanticKernel Connectors dependency and replacing it #​7584 by @​adamsitnik (co-authored by @​Copilot)
  • Migrate to xUnit v3 #​7607 by @​adamsitnik (co-authored by @​shyamnamboodiripad @​Copilot)

Repository Infrastructure Updates

  • Update OTel GenAI conventions skill for standalone semconv-genai repo #​7519 by @​jeffhandley (co-authored by @​Copilot)
  • Bump dotnet-coverage from 18.7.0 to 18.8.0 #​7552
  • [main] Update dependencies from dotnet/arcade #​7559
  • Fix transitive MessagePack vulnerability in AI template AppHost projects #​7561 by @​adamsitnik (co-authored by @​Copilot)
  • Bump esbuild, @​vitejs/plugin-react and vite in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7564
  • Bump tmp from 0.2.6 to 0.2.7 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7569
  • Bump js-yaml from 4.1.1 to 4.2.0 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7570
  • Bump PowerShell from 7.6.2 to 7.6.3 #​7576
  • Remove duplicate 'WebAPI' classification from template #​7577 by @​danroth27
  • [main] Update dependencies from dotnet/arcade #​7590
  • Eliminate redundant Correctness CI stage by merging into Build #​7594 by @​adamsitnik (co-authored by @​Copilot)
  • Update Agent Framework to 1.13.0 #​7613 by @​jeffhandley (co-authored by @​Copilot)
    ... (truncated)

Commits viewable in compare view.

Updated Microsoft.IdentityModel.JsonWebTokens from 8.19.1 to 8.22.0.

Release notes

Sourced from Microsoft.IdentityModel.JsonWebTokens's releases.

8.22.0

What's Changed

Full Changelog: AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet@8.21.0...8.22.0

8.21.0

Performance Improvements

  • Add JsonWebToken header-replacement path to avoid re-parsing payload. See PR #​3553.
  • Add claims dictionary preallocation. See PR #​3550.

Bug Fixes

  • Fix CI build failures: remove unused log message and add missing DPoP API entries. See PR #​3551.

8.19.2

What's Changed

Full Changelog: AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet@8.19.1...8.19.2

Commits viewable in compare view.

Updated Microsoft.Testing.Extensions.CodeCoverage from 18.8.0 to 18.11.2.

Release notes

Sourced from Microsoft.Testing.Extensions.CodeCoverage's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated MinVer from 7.0.0 to 8.0.0.

Release notes

Sourced from MinVer's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated minver-cli from 7.0.0 to 8.0.0.

Release notes

Sourced from minver-cli's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Roslynator.Analyzers from 4.15.0 to 5.0.0.

Release notes

Sourced from Roslynator.Analyzers's releases.

5.0.0

Added

  • Add roslyn5.0 NuGet package flavor (analyzers/dotnet/roslyn5.0/cs) (PR)

Breaking

  • Enable nullable annotations on Roslynator.Common and Roslynator.Workspaces.Common (#​1817)
    • Source-breaking for projects that compile against this surface with nullable reference types enabled.
  • [Testing Framework] Lower Roslyn dependency of testing packages to 3.8.0 so that the Roslyn version is determined by the consumer's own Microsoft.CodeAnalysis.* reference instead of being forced to a fixed version (PR)
    • Roslynator.Testing.Common, Roslynator.Testing.CSharp, Roslynator.Testing.CSharp.Xunit and Roslynator.Testing.CSharp.MSTest now depend on Microsoft.CodeAnalysis.* >= 3.8.0 (previously >= 4.14.0).
    • Roslynator.Testing.Common no longer depends on Roslynator.Core.
    • Action required: a test project that previously relied on the testing framework to pull in Roslyn 4.14.0 should now add its own reference, e.g. <PackageReference Include="Microsoft.CodeAnalysis.CSharp.Workspaces" Version="4.14.0" />. The chosen version raises the maximum C# language version the parser can accept; test sources still parse at CSharpParseOptions.Default unless you set parse options / LanguageVersion (for example LanguageVersion.Latest).
    • Action required: a test project that used Roslynator.Core types via the old transitive dependency must now add an explicit Roslynator.Core package reference.

Changed

  • Bump Roslyn to 5.0.0 (PR)
    • CLI targets Roslyn 5.0.0
    • Solution build and tests use Roslyn 5.0.0 by default (the testing packages floor at 3.8.0; see Breaking)
  • Replace Visual Studio 2022 extension with Roslynator 2026 for Visual Studio 2026 ([18.0,19.0)) (PR)
    • Extension ships refactorings and compiler diagnostic code fixes; analyzers via NuGet
    • Roslynator 2022 remains available as the last 4.x VSIX
  • Visual Studio Code extension ships refactorings and compiler diagnostic code fixes only (PR)
    • Analyzers require Roslynator NuGet packages
    • Requires OmniSharp with Roslyn 5.x (C# extension 1.39.15+; set dotnet.server.useOmnisharp to true)

Removed

  • Remove leftover implementations of obsolete analyzers (XML descriptors remain). Enable the successor rules instead: RCS0014 → RCS0061, RCS0022 → RCS0021, RCS0038 → RCS0015, RCS0043 → RCS0020, RCS0047 → RCS0053, RCS1008/RCS1009/RCS1010/RCS1012/RCS1176/RCS1177 → RCS1264, RCS1035 → RCS1260, RCS1036 → RCS0063, RCS1038/RCS1040/RCS1041/RCS1066/RCS1072/RCS1091/RCS1106 → RCS1259, RCS1063/RCS1064/RCS1065 → RCS1252, RCS1100/RCS1101 → RCS1253, RCS1237 → RCS1254.
  • Remove SyntaxInverter (Roslynator.CSharp.Workspaces). Use SyntaxLogicalInverter.
  • Remove unused obsolete DiagnosticCategories constants and make the type internal.
  • Remove unused ROS0001/ROS0002 diagnostic IDs.
  • Remove obsolete constructors/properties from the testing package (DiagnosticTestData, CompilerDiagnosticFixTestData, RefactoringTestData).
  • Remove legacy config keys roslynator.max_line_length, roslynator.prefix_field_identifier_with_underscore, and roslynator_suppress_unity_script_methods. Use roslynator_max_line_length, roslynator_prefix_field_identifier_with_underscore, and roslynator_unity_code_analysis.enabled.
  • [CLI] Remove obsolete command generate-doc-root. Use generate-doc --root-file-path instead.
  • Remove bundled analyzers from Visual Studio extension (PR)
  • Remove bundled analyzers from Visual Studio Code extension (PR)
    • Use Roslynator NuGet packages for diagnostics
  • Remove AnalyzersOptionsPage from Visual Studio extension (PR)
  • Drop support for Visual Studio 2022 VSIX (PR)
    • Pin last 4.x release (Roslynator 2022) or use NuGet packages on Visual Studio 2022

Fixed

  • Fix analyzers RCS1263 and RCS1139 for C# 14 extension block documentation (PR)

4.16.1

Fixed

  • Fix analyzer RCS1060 to not report a file that contains only multiple partial declarations of the same type (PR)
  • Fix analyzer RCS1231 to not suggest in for ref struct parameters (#​1725) (PR)
  • Fix analyzer RCS1260 false positive for omit_when_single_line on multi-line object/collection initializers (#​1439) (PR)
  • Fix analyzer RCS0036 to report blank lines between single-line declarations in records (PR)
  • Fix analyzer RCS1046 to report async void methods without Async suffix (PR)
  • Fix analyzer RCS1265 to not report catch clauses with a when filter (PR)
  • Fix analyzer RCS0034 for types with a primary constructor and multiple constraint clauses (PR)
  • Fix analyzer RCS1231 to not report CancellationToken in sync methods returning Task (PR)
  • [CLI] Fix GitLab output format to use relative paths, forward slashes, and 1-based line numbers (PR)
  • [CLI] Fix generate-doc to omit internal interfaces from type declarations and the Implements section (PR)

4.16.0

Added

  • [CLI] Suppress error code from Roslynator when it detects issues in code but runs successfully (PR by @​mdrybak)

Fixed

Commits viewable in compare view.

Updated Roslynator.CodeAnalysis.Analyzers from 4.15.0 to 5.0.0.

Release notes

Sourced from Roslynator.CodeAnalysis.Analyzers's releases.

5.0.0

Added

  • Add roslyn5.0 NuGet package flavor (analyzers/dotnet/roslyn5.0/cs) (PR)

Breaking

  • Enable nullable annotations on Roslynator.Common and Roslynator.Workspaces.Common (#​1817)
    • Source-breaking for projects that compile against this surface with nullable reference types enabled.
  • [Testing Framework] Lower Roslyn dependency of testing packages to 3.8.0 so that the Roslyn version is determined by the consumer's own Microsoft.CodeAnalysis.* reference instead of being forced to a fixed version (PR)
    • Roslynator.Testing.Common, Roslynator.Testing.CSharp, Roslynator.Testing.CSharp.Xunit and Roslynator.Testing.CSharp.MSTest now depend on Microsoft.CodeAnalysis.* >= 3.8.0 (previously >= 4.14.0).
    • Roslynator.Testing.Common no longer depends on Roslynator.Core.
    • Action required: a test project that previously relied on the testing framework to pull in Roslyn 4.14.0 should now add its own reference, e.g. <PackageReference Include="Microsoft.CodeAnalysis.CSharp.Workspaces" Version="4.14.0" />. The chosen version raises the maximum C# language version the parser can accept; test sources still parse at CSharpParseOptions.Default unless you set parse options / LanguageVersion (for example LanguageVersion.Latest).
    • Action required: a test project that used Roslynator.Core types via the old transitive dependency must now add an explicit Roslynator.Core package reference.

Changed

  • Bump Roslyn to 5.0.0 (PR)
    • CLI targets Roslyn 5.0.0
    • Solution build and tests use Roslyn 5.0.0 by default (the testing packages floor at 3.8.0; see Breaking)
  • Replace Visual Studio 2022 extension with Roslynator 2026 for Visual Studio 2026 ([18.0,19.0)) (PR)
    • Extension ships refactorings and compiler diagnostic code fixes; analyzers via NuGet
    • Roslynator 2022 remains available as the last 4.x VSIX
  • Visual Studio Code extension ships refactorings and compiler diagnostic code fixes only (PR)
    • Analyzers require Roslynator NuGet packages
    • Requires OmniSharp with Roslyn 5.x (C# extension 1.39.15+; set dotnet.server.useOmnisharp to true)

Removed

  • Remove leftover implementations of obsolete analyzers (XML descriptors remain). Enable the successor rules instead: RCS0014 → RCS0061, RCS0022 → RCS0021, RCS0038 → RCS0015, RCS0043 → RCS0020, RCS0047 → RCS0053, RCS1008/RCS1009/RCS1010/RCS1012/RCS1176/RCS1177 → RCS1264, RCS1035 → RCS1260, RCS1036 → RCS0063, RCS1038/RCS1040/RCS1041/RCS1066/RCS1072/RCS1091/RCS1106 → RCS1259, RCS1063/RCS1064/RCS1065 → RCS1252, RCS1100/RCS1101 → RCS1253, RCS1237 → RCS1254.
  • Remove SyntaxInverter (Roslynator.CSharp.Workspaces). Use SyntaxLogicalInverter.
  • Remove unused obsolete DiagnosticCategories constants and make the type internal.
  • Remove unused ROS0001/ROS0002 diagnostic IDs.
  • Remove obsolete constructors/properties from the testing package (DiagnosticTestData, CompilerDiagnosticFixTestData, RefactoringTestData).
  • Remove legacy config keys roslynator.max_line_length, roslynator.prefix_field_identifier_with_underscore, and roslynator_suppress_unity_script_methods. Use roslynator_max_line_length, roslynator_prefix_field_identifier_with_underscore, and roslynator_unity_code_analysis.enabled.
  • [CLI] Remove obsolete command generate-doc-root. Use generate-doc --root-file-path instead.
  • Remove bundled analyzers from Visual Studio extension (PR)
  • Remove bundled analyzers from Visual Studio Code extension (PR)
    • Use Roslynator NuGet packages for diagnostics
  • Remove AnalyzersOptionsPage from Visual Studio extension (PR)
  • Drop support for Visual Studio 2022 VSIX (PR)
    • Pin last 4.x release (Roslynator 2022) or use NuGet packages on Visual Studio 2022

Fixed

  • Fix analyzers RCS1263 and RCS1139 for C# 14 extension block documentation (PR)

4.16.1

Fixed

  • Fix analyzer RCS1060 to not report a file that contains only multiple partial declarations of the same type (PR)
  • Fix analyzer RCS1231 to not suggest in for ref struct parameters (#​1725) (PR)
  • Fix analyzer RCS1260 false positive for omit_when_single_line on multi-line object/collection initializers (#​1439) (PR)
  • Fix analyzer RCS0036 to report blank lines between single-line declarations in records (PR)
  • Fix analyzer RCS1046 to report async void methods without Async suffix (PR)
  • Fix analyzer RCS1265 to not report catch clauses with a when filter (PR)
  • Fix analyzer RCS0034 for types with a primary constructor and multiple constraint clauses (PR)
  • Fix analyzer RCS1231 to not report CancellationToken in sync methods returning Task (PR)
  • [CLI] Fix GitLab output format to use relative paths, forward slashes, and 1-based line numbers (PR)
  • [CLI] Fix generate-doc to omit internal interfaces from type declarations and the Implements section (PR)

4.16.0

Added

  • [CLI] Suppress error code from Roslynator when it detects issues in code but runs successfully (PR by @​mdrybak)

Fixed

Commits viewable in compare view.

Updated Serilog from 4.3.1 to 4.4.0.

Release notes

Sourced from Serilog's releases.

4.4.0

What's Changed

New Contributors

Full Changelog: serilog/serilog@v4.3.1...v4.4.0

Commits viewable in compare view.

Updated Spectre.Console from 0.57.1 to 0.57.2.

Release notes

Sourced from Spectre.Console's releases.

0.57.2

What's Change

Full Changelog: spectreconsole/spectre.console@0.57.1...0.57.2

Commits viewable in compare view.

Updated Stanza.TerminalGui from 0.1.1-preview.1 to 0.1.1-preview.2.

Release notes

Sourced from Stanza.TerminalGui's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated System.IdentityModel.Tokens.Jwt from 8.19.1 to 8.22.0.

Release notes

Sourced from System.IdentityModel.Tokens.Jwt's releases.

8.22.0

What's Changed

Full Changelog: AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet@8.21.0...8.22.0

8.21.0

Performance Improvements

  • Add JsonWebToken header-replacement path to avoid re-parsing payload. See PR #​3553.
  • Add claims dictionary preallocation. See PR #​3550.

Bug Fixes

  • Fix CI build failures: remove unused log message and add missing DPoP API entries. See PR #​3551.

8.19.2

What's Changed

Full Changelog: AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet@8.19.1...8.19.2

Commits viewable in compare view.

Updated Terminal.Gui from 2.4.11 to 2.5.0.

Release notes

Sourced from Terminal.Gui's releases.

2.5.0

Breaking changes

This is a minor bump because v2 still accepts planned API breaks. Apps that compiled against 2.4.17 may need source changes.

  1. View.Text is no longer virtual (#​5371 / #​5366)

    • Use OnTextChanging(string proposedValue) / TextChanging to validate or cancel.
    • Use OnTextChanged() for post-change sync.
    • TextField uses View.Text directly (no new hider).

  2. IAcceptTarget moved to Terminal.Gui.Input (#​5395 / #​5369)

    • Add using Terminal.Gui.Input;.

  3. Legacy ConfigurationManager removed (#​5416 / #​4367)

    • Replacement: TuiConfigurationBuilder and Settings POCOs (ButtonSettings.Current, etc.).
    • config.json is nested only. Convert old flat-key files with Tools/MigrateConfig.
    • Types marked [Obsolete] in 2.4.17 (#​5411) are gone.

See docfx/docs/breaking-changes-2.5.0.md and the configuration deep dive.

Highlights

  • Editable NumericUpDown
  • TableView horizontal scrolling for wide content
  • Native ANSI size detection; platform detection cleanup
  • SynchronizationContext fix
  • Kitty protocol: preserve repeated legacy input after detection
  • DropDownList: hide active popover on DeRegister (#​5635)
  • NativeAOT: RuneJsonConverter no longer trips IL2026 (#​5659)

What's Changed

2.5.0-beta.1

Breaking changes

This is a beta pre-release of a minor bump. v2 still accepts planned API breaks. Apps that compiled against 2.4.17 may need source changes.

  1. View.Text is no longer virtual (#​5371 / #​5366)

    • Use OnTextChanging(string proposedValue) / TextChanging to validate or cancel.
    • Use OnTextChanged() for post-change sync.
    • TextField uses View.Text directly (no new hider).

  2. IAcceptTarget moved to Terminal.Gui.Input (#​5395 / #​5369)

    • Add using Terminal.Gui.Input;.

  3. Legacy ConfigurationManager removed (#​5416 / #​4367)

    • Replacement: TuiConfigurationBuilder and Settings POCOs (ButtonSettings.Current, etc.).
    • config.json is nested only. Convert old flat-key files with Tools/MigrateConfig.
    • Types marked [Obsolete] in 2.4.17 (#​5411) are gone.

See Breaking changes 2.5.0 and Migrating ConfigurationManager to TuiConfigurationBuilder.

Highlights

  • Editable NumericUpDown
  • TableView horizontal scrolling for wide content
  • Native ANSI size detection; platform detection cleanup
  • SynchronizationContext fix
  • Kitty protocol: preserve repeated legacy input after detection
  • DropDownList: hide active popover on DeRegister (stale cells, #​5635)
  • NativeAOT: RuneJsonConverter no longer trips IL2026

Auto-generated

Breaking Changes

What's Changed

2.4.17

What's Changed

Full Changelog: tui-cs/Terminal.Gui@v2.4.16...v2.4.17

2.4.16

What's Changed

Full Changelog: tui-cs/Terminal.Gui@v2.4.15...v2.4.16

2.4.15

Release v2.4.15

Stable release from main. Promotes the validated v2.4.14-beta.1 content to stable, including the ConfigurationManager → MEC migration (#​5411) with the code-review fixes (flat-key/scalar-Theme MEC binding and the MecThemeManager static-event leak).

  • Version: 2.4.15
  • Type: stable

The package is published to NuGet.org via the publish workflow.

2.4.14-beta.1

What's Changed

Full Changelog: tui-cs/Terminal.Gui@v2.4.13...v2.4.14-beta.1

2.4.13

What's Changed

Full Changelog: tui-cs/Terminal.Gui@v2.4.12...v2.4.13

2.4.12

What's Changed

Full Changelog: tui-cs/Terminal.Gui@v2.4.11...v2.4.12

Commits viewable in compare view.

Updated TUnit from 1.56.35 to 1.67.0.

Release notes

Sourced from TUnit's releases.

1.67.0

What's Changed

Other Changes

Dependencies

New Contributors

1.66.27

What's Changed

Other Changes

Dependencies

Full Changelog: thomhurst/TUnit@v1.66.16...v1.66.27

1.66.16

What's Changed

Other Changes

Description has been truncated

@dependabot
Bump the nuget-dependencies group with 25 updates
60da8e9 
Bumps Dapper from 2.1.79 to 2.1.86
Bumps Dapper.AOT from 1.0.52 to 1.1.0
Bumps dotnet-reportgenerator-globaltool from 5.5.10 to 5.5.11
Bumps Imposter from 0.1.9 to 0.1.11
Bumps Microsoft.Data.Sqlite from 11.0.0-preview.5.26302.115 to 11.0.0-rc.1.26425.128
Bumps Microsoft.Extensions.Configuration from 10.0.9 to 10.0.12
Bumps Microsoft.Extensions.Configuration.Binder from 10.0.9 to 10.0.12
Bumps Microsoft.Extensions.DependencyInjection from 10.0.9 to 10.0.12
Bumps Microsoft.Extensions.Hosting from 10.0.9 to 10.0.12
Bumps Microsoft.Extensions.Options.ConfigurationExtensions from 10.0.9 to 10.0.12
Bumps Microsoft.Extensions.TimeProvider.Testing from 10.7.0 to 10.10.0
Bumps Microsoft.IdentityModel.JsonWebTokens from 8.19.1 to 8.22.0
Bumps Microsoft.Testing.Extensions.CodeCoverage from 18.8.0 to 18.11.2
Bumps MinVer from 7.0.0 to 8.0.0
Bumps minver-cli from 7.0.0 to 8.0.0
Bumps Roslynator.Analyzers from 4.15.0 to 5.0.0
Bumps Roslynator.CodeAnalysis.Analyzers from 4.15.0 to 5.0.0
Bumps Serilog from 4.3.1 to 4.4.0
Bumps Spectre.Console from 0.57.1 to 0.57.2
Bumps Stanza.TerminalGui from 0.1.1-preview.1 to 0.1.1-preview.2
Bumps System.IdentityModel.Tokens.Jwt from 8.19.1 to 8.22.0
Bumps Terminal.Gui from 2.4.11 to 2.5.0
Bumps TUnit from 1.56.35 to 1.67.0
Bumps Vogen from 8.0.5 to 8.0.7
Bumps Xdg.Directories from 0.1.2 to 0.2.0

---
updated-dependencies:
- dependency-name: Dapper
  dependency-version: 2.1.86
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-dependencies
- dependency-name: Dapper.AOT
  dependency-version: 1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-dependencies
- dependency-name: dotnet-reportgenerator-globaltool
  dependency-version: 5.5.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-dependencies
- dependency-name: Imposter
  dependency-version: 0.1.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-dependencies
- dependency-name: Microsoft.Data.Sqlite
  dependency-version: 11.0.0-rc.1.26425.128
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-dependencies
- dependency-name: Microsoft.Extensions.Configuration
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-dependencies
- dependency-name: Microsoft.Extensions.Configuration.Binder
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-dependencies
- dependency-name: Microsoft.Extensions.DependencyInjection
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-dependencies
- dependency-name: Microsoft.Extensions.Hosting
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-dependencies
- dependency-name: Microsoft.Extensions.Options.ConfigurationExtensions
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-dependencies
- dependency-name: Microsoft.Extensions.TimeProvider.Testing
  dependency-version: 10.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-dependencies
- dependency-name: Microsoft.IdentityModel.JsonWebTokens
  dependency-version: 8.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-dependencies
- dependency-name: Microsoft.Testing.Extensions.CodeCoverage
  dependency-version: 18.11.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-dependencies
- dependency-name: MinVer
  dependency-version: 8.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-dependencies
- dependency-name: minver-cli
  dependency-version: 8.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-dependencies
- dependency-name: Roslynator.Analyzers
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-dependencies
- dependency-name: Roslynator.CodeAnalysis.Analyzers
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-dependencies
- dependency-name: Serilog
  dependency-version: 4.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-dependencies
- dependency-name: Spectre.Console
  dependency-version: 0.57.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-dependencies
- dependency-name: Stanza.TerminalGui
  dependency-version: 0.1.1-preview.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-dependencies
- dependency-name: System.IdentityModel.Tokens.Jwt
  dependency-version: 8.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-dependencies
- dependency-name: Terminal.Gui
  dependency-version: 2.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-dependencies
- dependency-name: TUnit
  dependency-version: 1.67.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-dependencies
- dependency-name: Vogen
  dependency-version: 8.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-dependencies
- dependency-name: Xdg.Directories
  dependency-version: 0.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Sep 14, 2026
@dependabot dependabot Bot mentioned this pull request Sep 14, 2026
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants