Skip to content

Bump Meziantou.Analyzer and 3 others#8

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/nuget-aac7a3bddf
Closed

Bump Meziantou.Analyzer and 3 others#8
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/nuget-aac7a3bddf

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 12, 2026

Copy link
Copy Markdown

Updated Meziantou.Analyzer from 3.0.121 to 3.0.123.

Release notes

Sourced from Meziantou.Analyzer's releases.

3.0.123

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.123

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.122...3.0.123

3.0.122

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.122

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.121...3.0.122

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.7.0 to 18.8.1.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.8.1

What's Changed

Full Changelog: microsoft/vstest@v18.8.0...v18.8.1

18.8.0

What's Changed

Full Changelog: microsoft/vstest@v18.7.0...v18.8.0

Commits viewable in compare view.

Updated ModelContextProtocol from 1.4.0 to 1.4.1.

Release notes

Sourced from ModelContextProtocol's releases.

1.4.1

This release backports a memory-leak fix for HTTP/SSE-based MCP servers. StreamableHttpServerTransport now releases its Server-Sent Events response stream reference as soon as a GET request ends, instead of holding it until the session is disposed via explicit DELETE or idle timeout. Long-lived SSE clients that disconnect without sending DELETE no longer pin the underlying Kestrel connection and its associated memory-pool buffers (~20 MiB per session), preventing the sustained memory growth that could accumulate under connect/disconnect churn.

What's Changed

  • Release SSE response stream reference when GET request ends #​1628 by @​halter73 (co-authored by @​joelmforsyth @​Copilot)

Acknowledgements

  • @​slomangino123 submitted issue #​766 (resolved by #​1628)

Full Changelog: modelcontextprotocol/csharp-sdk@v1.4.0...v1.4.1

Commits viewable in compare view.

Updated SonarAnalyzer.CSharp from 10.28.0.143324 to 10.29.0.143774.

Release notes

Sourced from SonarAnalyzer.CSharp's releases.

10.29.0.143774

Release notes - .NET Analyzers - 10.29

Feature

NET-3997 Move S6444 out of hotspot
NET-4060 Update RSPEC before 10.29 release

False Positive

NET-1626 Fix S6444 FP: REGEX_DEFAULT_MATCH_TIMEOUT

False Negative

NET-3920 Fix S2971 FN: Should raise on EntityFramework IQueryables
NET-3921 Fix S1155 FN: Should raise on EntityFramework IQueryables
NET-3922 Fix S3981 FN: Should raise on EntityFramework IQueryables
NET-3924 Fix S3169 FN: Should raise on EntityFramework IQueryables

Commits viewable in compare view.

Bumps Meziantou.Analyzer from 3.0.107 to 3.0.122
Bumps Microsoft.NET.Test.Sdk from 18.6.0 to 18.7.0
Bumps ModelContextProtocol from 1.4.0 to 1.4.1
Bumps SonarAnalyzer.CSharp from 10.27.0.140913 to 10.29.0.143774

---
updated-dependencies:
- dependency-name: Meziantou.Analyzer
  dependency-version: 3.0.122
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget
- dependency-name: ModelContextProtocol
  dependency-version: 1.4.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget
- dependency-name: SonarAnalyzer.CSharp
  dependency-version: 10.29.0.143774
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Jul 12, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jul 19, 2026

Copy link
Copy Markdown
Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Jul 19, 2026
@dependabot dependabot Bot changed the title Bump the nuget group with 4 updates Bump Meziantou.Analyzer and 3 others Jul 19, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants