Skip to content

Bump Microsoft.CodeAnalysis.CSharp and 6 others - #9

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/src/i26.Core.Generators/microsoft-7dc39a1377
Closed

Bump Microsoft.CodeAnalysis.CSharp and 6 others#9
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/src/i26.Core.Generators/microsoft-7dc39a1377

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 12, 2026 •
edited
Loading

Copy link
Copy Markdown

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

Updated Microsoft.CodeAnalysis.CSharp from 4.8.0 to 5.6.0.

Release notes

Sourced from Microsoft.CodeAnalysis.CSharp's releases.

5.0.4

Release

5.0.2

Release Notes
Install Instructions

Repos

5.0.1

Release Notes
Install Instructions

Repo

Commits viewable in compare view.

Updated Microsoft.Data.Sqlite from 9.0.6 to 10.0.11.

Release notes

Sourced from Microsoft.Data.Sqlite's releases.

10.0.0-preview.6.25358.103

You can build .NET 10.0 Preview 6 from the repository by cloning the release tag v10.0.0-preview.6.25358.103 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

10.0.0-preview.5.25277.114

You can build .NET 10.0 Preview 5 from the repository by cloning the release tag v10.0.0-preview.5.25277.114 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

10.0.0-preview.4.25258.110

You can build .NET 10.0 Preview 4 from the repository by cloning the release tag v10.0.0-preview.4.25258.110 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

10.0.0-preview.3.25171.5

You can build .NET 10.0 Preview 3 from the repository by cloning the release tag v10.0.0-preview.3.25171.5 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

10.0.0-preview.2.25163.2

You can build .NET 10.0 Preview 2 from the repository by cloning the release tag v10.0.0-preview.2.25163.2 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

10.0.0-preview.1.25080.5

You can build .NET 10.0 Preview 1 from the repository by cloning the release tag v10.0.0-preview.1.25080.5 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.119

You can build .NET 9.0 from the repository by cloning the release tag v9.0.119 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.118

You can build .NET 9.0 from the repository by cloning the release tag v9.0.118 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached is a PGP signature for the GitHub generated tarball. You can find the public key at https://dot.net/release-key-2023

9.0.117

You can build .NET 9.0 from the repository by cloning the release tag v9.0.117 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.116

You can build .NET 9.0 from the repository by cloning the release tag v9.0.116 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.115

You can build .NET 9.0 from the repository by cloning the release tag v9.0.115 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.114

You can build .NET 9.0 from the repository by cloning the release tag v9.0.114 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached is the PGP signature for the GitHub generated tarball. You can find the public key at https://dot.net/release-key-2023

9.0.113

You can build .NET 9.0 from the repository by cloning the release tag v9.0.113 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.112

You can build .NET 9.0 from the repository by cloning the release tag v9.0.112 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.111

You can build .NET 9.0 from the repository by cloning the release tag v9.0.111 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.110

You can build .NET 9.0 from the repository by cloning the release tag v9.0.110 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.109

You can build .NET 9.0 from the repository by cloning the release tag v9.0.109 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.101

You can build .NET 9.0 from the repository by cloning the release tag v9.0.101 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

9.0.7

You can build .NET 9.0 from the repository by cloning the release tag v9.0.7 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Relational from 9.0.6 to 9.0.19.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Relational's releases.

9.0.19

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.18...v9.0.19

9.0.18

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.17...v9.0.18

9.0.17

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.16...v9.0.17

9.0.16

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.15...v9.0.16

9.0.15

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.14...v9.0.15

9.0.14

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.13...v9.0.14

9.0.13

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.12...v9.0.13

9.0.12

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.11...v9.0.12

9.0.11

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.10...v9.0.11

9.0.10

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.9...v9.0.10

9.0.9

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.8...v9.0.9

9.0.7

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.6...v9.0.7

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Sqlite from 9.0.6 to 9.0.19.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Sqlite's releases.

9.0.19

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.18...v9.0.19

9.0.18

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.17...v9.0.18

9.0.17

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.16...v9.0.17

9.0.16

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.15...v9.0.16

9.0.15

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.14...v9.0.15

9.0.14

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.13...v9.0.14

9.0.13

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.12...v9.0.13

9.0.12

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.11...v9.0.12

9.0.11

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.10...v9.0.11

9.0.10

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.9...v9.0.10

9.0.9

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.8...v9.0.9

9.0.7

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.6...v9.0.7

Commits viewable in compare view.

Updated Microsoft.Extensions.DependencyInjection from 9.0.6 to 10.0.11.

Release notes

Sourced from Microsoft.Extensions.DependencyInjection's releases.

10.0.0-preview.6.25358.103

You can build .NET 10.0 Preview 6 from the repository by cloning the release tag v10.0.0-preview.6.25358.103 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

10.0.0-preview.5.25277.114

You can build .NET 10.0 Preview 5 from the repository by cloning the release tag v10.0.0-preview.5.25277.114 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

10.0.0-preview.4.25258.110

You can build .NET 10.0 Preview 4 from the repository by cloning the release tag v10.0.0-preview.4.25258.110 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

10.0.0-preview.3.25171.5

You can build .NET 10.0 Preview 3 from the repository by cloning the release tag v10.0.0-preview.3.25171.5 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the [dotnet/dotnet repository](https://github.com/dotnet/dotnet/blob/v10...

Description has been truncated

@dependabot dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Aug 12, 2026
@dependabot dependabot Bot mentioned this pull request Aug 12, 2026
Closed
@dependabot
Bump Microsoft.CodeAnalysis.CSharp and 6 others
968d924 
Bumps Microsoft.CodeAnalysis.CSharp from 4.8.0 to 5.6.0
Bumps Microsoft.Data.Sqlite from 9.0.6 to 10.0.11
Bumps Microsoft.EntityFrameworkCore.Relational from 9.0.6 to 9.0.19
Bumps Microsoft.EntityFrameworkCore.Sqlite from 9.0.6 to 9.0.19
Bumps Microsoft.Extensions.DependencyInjection from 9.0.6 to 10.0.11
Bumps Microsoft.Extensions.DependencyInjection.Abstractions from 9.0.6 to 10.0.11
Bumps Microsoft.NET.Test.Sdk from 17.14.1 to 18.8.1

---
updated-dependencies:
- dependency-name: Microsoft.CodeAnalysis.CSharp
  dependency-version: 5.6.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: microsoft
- dependency-name: Microsoft.Data.Sqlite
  dependency-version: 10.0.11
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: microsoft
- dependency-name: Microsoft.EntityFrameworkCore.Relational
  dependency-version: 9.0.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: microsoft
- dependency-name: Microsoft.EntityFrameworkCore.Sqlite
  dependency-version: 9.0.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: microsoft
- dependency-name: Microsoft.Extensions.DependencyInjection
  dependency-version: 10.0.11
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: microsoft
- dependency-name: Microsoft.Extensions.DependencyInjection.Abstractions
  dependency-version: 10.0.11
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: microsoft
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.8.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: microsoft
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.8.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: microsoft
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.8.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: microsoft
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.8.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: microsoft
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.8.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: microsoft
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump the microsoft group with 7 updates Bump Microsoft.CodeAnalysis.CSharp and 6 others Aug 12, 2026
@dependabot
dependabot Bot force-pushed the dependabot/nuget/src/i26.Core.Generators/microsoft-7dc39a1377 branch from f2df8a3 to 968d924 Compare August 12, 2026 11:04
@dependabot @github

dependabot Bot commented on behalf of github Aug 12, 2026

Copy link
Copy Markdown
Author

Looks like these dependencies are no longer being updated by Dependabot, so this is no longer needed.

@dependabot dependabot Bot closed this Aug 12, 2026
@dependabot
dependabot Bot deleted the dependabot/nuget/src/i26.Core.Generators/microsoft-7dc39a1377 branch August 12, 2026 14:57
@tiago-bitten

tiago-bitten commented Aug 12, 2026

Copy link
Copy Markdown
Owner

Closing this one: the Roslyn bump cannot be taken at all, and the two runtime bumps in here are per-framework decisions rather than version bumps.

Microsoft.CodeAnalysis.CSharp 4.8 → 5.6 moves the floor of the source generator. A generator compiled against Roslyn 5.6 does not load in an older compiler — csc reports CS9057, skips it, and the consumer gets errors about the members it never wrote. That is every .NET 8 and .NET 9 SDK (Roslyn 4.8 through 4.14), so [TypedId] would quietly stop working for them. And it buys nothing: the generator uses ForAttributeWithMetadataName and RegisterSourceOutput, which are the 4.3 API, and forward compatibility is already exercised — CI builds with the .NET 10 SDK, Roslyn 5.9, against the 4.8-compiled generator.

The bump also only reached src/i26.Core.Generators and left tests/i26.Core.Generators.Tests on 4.8, which is the CS1705 this build failed with.

Microsoft.Extensions.DependencyInjection.Abstractions 8.0.2 → 10.0.11 and Microsoft.EntityFrameworkCore.Relational 8.0.13 → 9.0.19 were applied to the net8.0 conditions. References here are pinned per target framework so a net8 consumer is not dragged to a newer runtime library, and that is not something this bot can see: the same reference appears once per condition and the newest version is offered for all of them.

.github/dependabot.yml now ignores major and minor updates for Microsoft.CodeAnalysis*, Microsoft.Extensions.* and Microsoft.EntityFrameworkCore.*, and takes the last two out of the microsoft group. Patches inside each line still arrive on their own; which line a framework sits on stays a decision made by hand. NuGetAudit still fails the build on an advisory against any of them.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@tiago-bitten