From d8f0093a4b47ba3d701b6b83ef49f41196548f1b Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 25 Jun 2026 21:20:48 +0000 Subject: [PATCH 1/2] Bump Microsoft.VisualStudio.Threading.Analyzers from 17.14.15 to 18.7.23 --- updated-dependencies: - dependency-name: Microsoft.VisualStudio.Threading.Analyzers dependency-version: 18.7.23 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- src/sdks/dotnet/Directory.Packages.props | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/sdks/dotnet/Directory.Packages.props b/src/sdks/dotnet/Directory.Packages.props index 8b75fd15..fd737507 100644 --- a/src/sdks/dotnet/Directory.Packages.props +++ b/src/sdks/dotnet/Directory.Packages.props @@ -20,7 +20,7 @@ - + From a5e8df52a5f7d169a29a1b4d0b661b5d0eb109fa Mon Sep 17 00:00:00 2001 From: macalbert Date: Thu, 25 Jun 2026 23:29:05 +0200 Subject: [PATCH 2/2] test(sdk-dotnet): suppress VSTHRD103 in dotnet test project The Microsoft.VisualStudio.Threading.Analyzers 18.7.23 bump flags the E2E ConsumerExperienceTests sync-API calls (Env.Load/ResolveFile, builder Resolve/Inject) with VSTHRD103 and dotnet format auto-rewrites them to async, defeating tests that intentionally verify the synchronous surface. Suppress VSTHRD103 in the test project editorconfig only; production code keeps it. --- tests/sdks/dotnet/.editorconfig | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/tests/sdks/dotnet/.editorconfig b/tests/sdks/dotnet/.editorconfig index 09d6365a..a9a36817 100644 --- a/tests/sdks/dotnet/.editorconfig +++ b/tests/sdks/dotnet/.editorconfig @@ -263,3 +263,9 @@ csharp_prefer_static_anonymous_function = true:suggestion dotnet_diagnostic.xUnit1048.severity = error dotnet_diagnostic.xUnit1051.severity = suggestion dotnet_diagnostic.CA2016.severity = error + +# These E2E tests intentionally exercise the synchronous SDK API +# (e.g. Env.Load, Env.ResolveFile, builder.Resolve/Inject) to verify the +# sync-over-async surface works for consumers. Suppress VSTHRD103 so the +# analyzer does not flag (or auto-rewrite) these deliberate sync calls. +dotnet_diagnostic.VSTHRD103.severity = none