.NET: ci: update Microsoft.CodeAnalysis.NetAnalyzers and Microsoft.VisualStudio.Threading.Analyzers versions

[Vincent Biret (baywet)]

Updates Threading and Net Analazers because we're on outdated versions that cause a lot of false positives

[Copilot]

🟡 Changes recommended

Two CPM-disabled sample projects retain explicit references to both outdated analyzer versions.

Once you've addressed the issues Copilot identified, you can request another Copilot review.

Pull request overview

Updates repository-wide .NET analyzer versions to reduce false positives.

Changes:

• Updates .NET analyzers to 10.0.400.
• Updates threading analyzers to 18.7.23.

File summaries

File	Description
dotnet/Directory.Packages.props	Updates centrally managed analyzer versions.

Review details

Suppressed comments (1)

dotnet/Directory.Packages.props:168

• This central bump does not reach the two CPM-disabled sample projects: AgentWithRAG_Step05_Neo4jGraphRAG.csproj:34 and AgentWithMemory_Step06_MemoryUsingAgentMemory.csproj:60 remove this inherited reference and still re-add version 17.14.15. They will continue using the analyzer version called out as outdated, so their explicit pins should also be updated to 18.7.23.

    <PackageVersion Include="Microsoft.VisualStudio.Threading.Analyzers" Version="18.7.23" />

• Files reviewed: 1/1 changed files
• Comments generated: 1
• Review effort level: Balanced

---

💡 Add a code-review agent skill for context-aware, tailored reviews. Learn more in the docs.

[github-actions]

MAF Automated Review — Iteration 1

Result: No findings
Scope: full PR (1 commit(s)): 37fc801b2231
Model: gpt-5.6-sol-fast

Overview

The PR updates two centrally managed, build-time-only analyzer packages while retaining private-assets isolation and existing analyzer enforcement in CI. Central package management and full-solution warning-as-error builds constrain compatibility risk, and the change introduces no runtime, public API, persistence, or security surface. No Critical, High, or Medium defect was established.

Reviewed the supplied pull-request change set across correctness, security/reliability, architecture, and failure behavior.
No publishable findings remained after source verification for this scope.

[github-code-quality]

Code Coverage Overview

Languages: C#

C# / code-coverage/dotnet

The overall line coverage in commit 82a23ba in the deps/threading-analy... branch is 84%. Line coverage data for the main branch is not yet available.

Show a line coverage summary of the most covered files.

File	main	deps/threading-analy... 82a23ba	+/-
/home/runner/wo...valConverter.cs	—	100%	—
/home/runner/wo...entsProvider.cs	—	99%	—
/home/runner/wo...nticAnalyzer.cs	—	94%	—
/home/runner/wo...tClientAgent.cs	—	91%	—
/home/runner/wo...putConverter.cs	—	90%	—
/home/runner/wo...kflowBuilder.cs	—	90%	—
/home/runner/wo...kflowSession.cs	—	87%	—
/home/runner/wo...SkillsSource.cs	—	86%	—
/home/runner/wo...onExtensions.cs	—	81%	—
/home/runner/wo...ctionVisitor.cs	—	70%	—

---

_{Updated September 09, 2026 12:30 UTC}