chore(deps): Bump the analyzers group with 3 updates by dependabot[bot] · Pull Request #86 · poli-page/sdk-csharp

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

10.0.401

Release

What's Changed

[release/10.0.4xx] Source code updates from dotnet/sdk by @dotnet-maestro[bot] in [release/10.0.4xx] Source code updates from dotnet/sdk dotnet/dotnet#8011
[release/10.0.4xx] Source code updates from dotnet/sdk by @dotnet-maestro[bot] in [release/10.0.4xx] Source code updates from dotnet/sdk dotnet/dotnet#8037
[release/10.0.4xx] Source code updates from dotnet/sdk by @dotnet-maestro[bot] in [release/10.0.4xx] Source code updates from dotnet/sdk dotnet/dotnet#8038
Update Source-Build SDK Diff Tests Baselines and Exclusions by @dotnet-sb-bot in Update Source-Build SDK Diff Tests Baselines and Exclusions dotnet/dotnet#7754
[release/10.0.4xx] Source code updates from dotnet/arcade by @dotnet-maestro[bot] in [release/10.0.4xx] Source code updates from dotnet/arcade dotnet/dotnet#8101
[release/10.0.4xx] Source code updates from dotnet/source-build-assets by @dotnet-maestro[bot] in [release/10.0.4xx] Source code updates from dotnet/source-build-assets dotnet/dotnet#8104
[release/10.0.4xx] Source code updates from dotnet/msbuild by @dotnet-maestro[bot] in [release/10.0.4xx] Source code updates from dotnet/msbuild dotnet/dotnet#8142
[release/10.0.4xx] Source code updates from dotnet/sdk by @dotnet-maestro[bot] in [release/10.0.4xx] Source code updates from dotnet/sdk dotnet/dotnet#8132
[release/10.0.4xx] Source code updates from dotnet/source-build-assets by @dotnet-maestro[bot] in [release/10.0.4xx] Source code updates from dotnet/source-build-assets dotnet/dotnet#8127
[release/10.0.4xx] Source code updates from dotnet/arcade by @dotnet-maestro[bot] in [release/10.0.4xx] Source code updates from dotnet/arcade dotnet/dotnet#8156
[release/10.0.4xx] Source code updates from dotnet/roslyn by @dotnet-maestro[bot] in [release/10.0.4xx] Source code updates from dotnet/roslyn dotnet/dotnet#8148
[release/10.0.4xx] Source code updates from dotnet/sdk by @dotnet-maestro[bot] in [release/10.0.4xx] Source code updates from dotnet/sdk dotnet/dotnet#8176
[release/10.0.4xx] Source code updates from dotnet/arcade by @dotnet-maestro[bot] in [release/10.0.4xx] Source code updates from dotnet/arcade dotnet/dotnet#8171
[release/10.0.4xx] Source code updates from dotnet/scenario-tests by @dotnet-maestro[bot] in [release/10.0.4xx] Source code updates from dotnet/scenario-tests dotnet/dotnet#8092
[release/10.0.4xx] Fix IdentityModel shared-components source build by @mthalman in [release/10.0.4xx] Fix IdentityModel shared-components source build dotnet/dotnet#8189
[release/10.0.4xx] Source code updates from nuget/nuget.client by @dotnet-maestro[bot] in [release/10.0.4xx] Source code updates from nuget/nuget.client dotnet/dotnet#8201
[release/10.0.4xx] Allow submodule changes when reseting submodules by @github-actions[bot] in [release/10.0.4xx] Allow submodule changes when reseting submodules dotnet/dotnet#8223
[release/10.0.4xx] Source code updates from dotnet/roslyn by @dotnet-maestro[bot] in [release/10.0.4xx] Source code updates from dotnet/roslyn dotnet/dotnet#8215
[release/10.0.4xx] Source code updates from dotnet/arcade by @dotnet-maestro[bot] in [release/10.0.4xx] Source code updates from dotnet/arcade dotnet/dotnet#8210
[release/10.0.4xx] Cloak SignatureCycle2 binary from VMR by @mthalman in [release/10.0.4xx] Cloak SignatureCycle2 binary from VMR dotnet/dotnet#8226
[release/10.0.4xx] Ignore spurious SBoM warnings by @akoeplinger in [release/10.0.4xx] Ignore spurious SBoM warnings dotnet/dotnet#8165
[release/10.0.4xx] Source code updates from dotnet/arcade by @dotnet-maestro[bot] in [release/10.0.4xx] Source code updates from dotnet/arcade dotnet/dotnet#8231
Update to the 10.0.11 August runtimes from build 324376 by @mthalman in Update to the 10.0.11 August runtimes from build 324376 dotnet/dotnet#8259
Merging internal commits for release/10.0.4xx by @dotnet-bot in Merging internal commits for release/10.0.4xx dotnet/dotnet#8242
[release/10.0.4xx] Source code updates from dotnet/arcade by @dotnet-maestro[bot] in [release/10.0.4xx] Source code updates from dotnet/arcade dotnet/dotnet#8278
[release/10.0.4xx] Source code updates from dotnet/arcade by @dotnet-maestro[bot] in [release/10.0.4xx] Source code updates from dotnet/arcade dotnet/dotnet#8304
[release/10.0.4xx] Source code updates from dotnet/roslyn by @dotnet-maestro[bot] in [release/10.0.4xx] Source code updates from dotnet/roslyn dotnet/dotnet#8347
[release/10.0.4xx] Remove duplicate dependency from scenario-tests by @dkurepa in [release/10.0.4xx] Remove duplicate dependency from scenario-tests dotnet/dotnet#8350
[release/10.0.4xx] Source code updates from dotnet/sourcelink by @dotnet-maestro[bot] in [release/10.0.4xx] Source code updates from dotnet/sourcelink dotnet/dotnet#8344
[release/10.0.4xx] Source code updates from dotnet/templating by @dotnet-maestro[bot] in [release/10.0.4xx] Source code updates from dotnet/templating dotnet/dotnet#8354
[release/10.0.4xx] Fix SignCheckExclusionsFile.txt to allow signed hotreload .js file by @github-actions[bot] in [release/10.0.4xx] Fix SignCheckExclusionsFile.txt to allow signed hotreload .js file dotnet/dotnet#8383
[release/10.0.4xx] Remove TSA bug filing from pipelines by @akoeplinger in [release/10.0.4xx] Remove TSA bug filing from pipelines dotnet/dotnet#8389
[release/10.0.4xx] Source code updates from dotnet/arcade by @dotnet-maestro[bot] in [release/10.0.4xx] Source code updates from dotnet/arcade dotnet/dotnet#8396
[release/10.0.4xx] [release/10.0.1xx] Update binskim lastModifiedDate in PipelineAutobaseliningConfig.yml by @github-actions[bot] in [release/10.0.4xx] [release/10.0.1xx] Update binskim lastModifiedDate in PipelineAutobaseliningConfig.yml dotnet/dotnet#8408
[release/10.0.4xx] Fix SignCheckExclusionsFile.txt for .js in source-build artifacts by @github-actions[bot] in [release/10.0.4xx] Fix SignCheckExclusionsFile.txt for .js in source-build artifacts dotnet/dotnet#8405
[release/10.0.4xx] Source code updates from dotnet/templating by @dotnet-maestro[bot] in [release/10.0.4xx] Source code updates from dotnet/templating dotnet/dotnet#8419
[release/10.0.4xx] Source code updates from dotnet/templating by @dotnet-maestro[bot] in [release/10.0.4xx] Source code updates from dotnet/templating dotnet/dotnet#8422
[release/10.0.4xx] Source code updates from dotnet/msbuild by @dotnet-maestro[bot] in [release/10.0.4xx] Source code updates from dotnet/msbuild dotnet/dotnet#8429
[release/10.0.4xx] Source code updates from dotnet/source-build-assets by @dotnet-maestro[bot] in [release/10.0.4xx] Source code updates from dotnet/source-build-assets dotnet/dotnet#8313
[release/10.0.4xx] Source code updates from dotnet/templating by @dotnet-maestro[bot] in [release/10.0.4xx] Source code updates from dotnet/templating dotnet/dotnet#8452
[release/10.0.4xx] Source code updates from dotnet/source-build-assets by @dotnet-maestro[bot] in [release/10.0.4xx] Source code updates from dotnet/source-build-assets dotnet/dotnet#8453
[release/10.0.4xx] Source code updates from dotnet/msbuild by @dotnet-maestro[bot] in [release/10.0.4xx] Source code updates from dotnet/msbuild dotnet/dotnet#8469
[release/10.0.4xx] Source code updates from dotnet/fsharp by @dotnet-maestro[bot] in [release/10.0.4xx] Source code updates from dotnet/fsharp dotnet/dotnet#8521
[release/10.0.4xx] Source code updates from dotnet/arcade by @dotnet-maestro[bot] in [release/10.0.4xx] Source code updates from dotnet/arcade dotnet/dotnet#8574
[release/10.0.4xx] Bump patch version to 10.0.401 by @vseanreesermsft in [release/10.0.4xx] Bump patch version to 10.0.401 dotnet/dotnet#8577

... (truncated)

Commits viewable in compare view.

Updated Roslynator.Analyzers from 5.0.0 to 5.0.1.

Release notes

Sourced from Roslynator.Analyzers's releases.

5.0.1

Fixed

Set Visual Studio extension InstallationTarget to API version [17.14,) so Marketplace publish succeeds (VsixPub0029; API 18.0 is experimental). Installable on Visual Studio 2022 17.14+ and Visual Studio 2026 (VS 2026 extension compatibility).
[CLI] Reference the compiled output of referenced projects that cannot be loaded into the workspace (for example F# projects), so their types are no longer reported as missing (CS0103/CS0246) during analysis (PR)
[CLI] Fix loading of analyzers that reference System.Composition on the .NET 10 SDK (PR)
Fix code fix for RCS1233 to add parentheses when the new &&/|| expression is an operand of an operator with higher precedence (e.g. a && b | c is now fixed to a && (b || c)) (PR)

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will c...

Description has been truncated

Bumps Meziantou.Analyzer from 3.0.177 to 3.0.312 Bumps Microsoft.CodeAnalysis.NetAnalyzers from 10.0.400 to 10.0.402 Bumps Roslynator.Analyzers from 5.0.0 to 5.0.1 --- updated-dependencies: - dependency-name: Meziantou.Analyzer dependency-version: 3.0.312 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: analyzers - dependency-name: Microsoft.CodeAnalysis.NetAnalyzers dependency-version: 10.0.402 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: analyzers - dependency-name: Roslynator.Analyzers dependency-version: 5.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: analyzers ... Signed-off-by: dependabot[bot] <support@github.com>

coderabbitai · 2026-10-19T05:16:36Z

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository: poli-page/sdk-csharp/.coderabbit.yaml
Review profile: CHILL
Plan: Advanced
Run ID: 16c15601-c5d6-45d1-be2b-b2ec6bd93f06

📥 Commits

Reviewing files that changed from the base of the PR and between 9238d47 and 338964b.

📒 Files selected for processing: 1

Directory.Packages.props

Included review availability: This review used your included allowance. Your plan provides up to 10 included reviews per hour; 5 remain after this review.

📝 Walkthrough

The central package declarations update the pinned versions of three analyzer packages: Microsoft.CodeAnalysis.NetAnalyzers, Meziantou.Analyzer, and Roslynator.Analyzers.

Changes: Analyzer package versions

Layer / File(s)	Summary
Update analyzer package pins `Directory.Packages.props`	The centrally managed versions of Microsoft.CodeAnalysis.NetAnalyzers, Meziantou.Analyzer, and Roslynator.Analyzers were updated to 10.0.402, 3.0.312, and 5.0.1, respectively.

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~5 minutes

Change: Other

Merge Risk: ⚪ Minimal · up to 33896

No specific regression has been identified in these analyzer updates. The PR appears mergeable, subject to the usual restore and build checks.

### Architecture Summary

Architecture risk: 🔵 Low · up to 33896

The change affects 1 system.

Changed systems: Directory.Packages.props

Architecture concerns
No architecture-level concerns identified.

Review details

Systems and components

observed — Directory.Packages.props (service) was modified; 1 changed file maps to changed impact.

Before / after behavior

observed — Modified behavior in Directory.Packages.props: Updated the pinned versions of Microsoft.CodeAnalysis.NetAnalyzers from 10.0.400 to 10.0.402, Meziantou.Analyzer from 3.0.177 to 3.0.312, and Roslynator.Analyzers from 5.0.0 to 5.0.1.

Pre-merge checks: 4

Check name	Status	Explanation
Title check		The title clearly identifies a dependency update for three analyzer packages, which matches the main changeset.
Description check		The description documents the three analyzer dependency updates and includes relevant release notes, so it is directly related to the changeset.
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

Commit to this branch
Create a new PR

Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

_{Comment @coderabbitai help to get the list of available commands.}

Mickael45 · 2026-10-22T08:47:58Z

Included in #90.

dependabot · 2026-10-22T08:48:03Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Oct 19, 2026

Mickael45 mentioned this pull request Oct 22, 2026

chore(deps): consolidate open Dependabot bumps (#79, #80, #83, #84, #85, #86, #87) #90

Merged

Mickael45 closed this Oct 22, 2026

dependabot Bot deleted the dependabot/nuget/analyzers-d85903deaa branch October 22, 2026 08:48

Navigation Menu

Repository navigation

chore(deps): Bump the analyzers group with 3 updates - #86

chore(deps): Bump the analyzers group with 3 updates#86
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/analyzers-d85903deaa

dependabot Bot commented on behalf of github Oct 19, 2026 •

edited

Loading

Uh oh!

coderabbitai Bot commented Oct 19, 2026 •

edited

Loading

Uh oh!

Mickael45 commented Oct 22, 2026

Uh oh!

dependabot Bot commented on behalf of github Oct 22, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Oct 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

3.0.312

What's Changed

3.0.311

What's Changed

3.0.310

What's Changed

3.0.309

What's Changed

3.0.308

What's Changed

3.0.307

What's Changed

3.0.306

What's Changed

3.0.305

What's Changed

3.0.304

What's Changed

3.0.303

What's Changed

3.0.302

What's Changed

3.0.301

What's Changed

3.0.300

What's Changed

3.0.299

What's Changed

3.0.298

What's Changed

3.0.297

What's Changed

3.0.296

What's Changed

3.0.295

What's Changed

New Contributors

3.0.294

What's Changed

3.0.293

What's Changed

3.0.292

What's Changed

New Contributors

3.0.291

What's Changed

3.0.290

What's Changed

3.0.289

What's Changed

3.0.288

What's Changed

3.0.287

What's Changed

3.0.286

What's Changed

3.0.285

What's Changed

3.0.284

What's Changed

3.0.283

What's Changed

3.0.282

What's Changed

3.0.281

What's Changed

3.0.280

What's Changed

3.0.279

What's Changed

3.0.278

What's Changed

3.0.277

What's Changed

3.0.276

What's Changed

3.0.275

dependabot Bot commented on behalf of github Oct 19, 2026 •

edited

Loading