Skip to content

Bump the nuget-dependencies group with 9 updates - #57

Merged
Malcolmnixon merged 4 commits into
mainfrom
dependabot/nuget/src/DemaConsulting.SysML2Tools.Core/nuget-dependencies-ce699a4861
Aug 19, 2026
Merged

Bump the nuget-dependencies group with 9 updates#57
Malcolmnixon merged 4 commits into
mainfrom
dependabot/nuget/src/DemaConsulting.SysML2Tools.Core/nuget-dependencies-ce699a4861

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 17, 2026

Copy link
Copy Markdown
Contributor

Updated Microsoft.CodeAnalysis.NetAnalyzers from 10.0.302 to 10.0.400.

Release notes

Sourced from Microsoft.CodeAnalysis.NetAnalyzers's releases.

10.0.400

You can build .NET 10.0 from the repository by cloning the release tag v10.0.400 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

10.0.303

You can build .NET 10.0 from the repository by cloning the release tag v10.0.303 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

Commits viewable in compare view.

Updated Microsoft.Extensions.FileSystemGlobbing from 10.0.10 to 10.0.11.

Release notes

Sourced from Microsoft.Extensions.FileSystemGlobbing's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.8.1 to 18.9.0.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.9.0

What's Changed

New Contributors

Full Changelog: microsoft/vstest@v18.8.0...v18.9.0

Commits viewable in compare view.

Updated Microsoft.SourceLink.GitHub from 10.0.301 to 10.0.400.

Release notes

Sourced from Microsoft.SourceLink.GitHub's releases.

10.0.400

You can build .NET 10.0 from the repository by cloning the release tag v10.0.400 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

10.0.303

You can build .NET 10.0 from the repository by cloning the release tag v10.0.303 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

10.0.302

You can build .NET 10.0 from the repository by cloning the release tag v10.0.302 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

Commits viewable in compare view.

Updated Polyfill from 11.0.2 to 11.2.0.

Release notes

Sourced from Polyfill's releases.

11.2.0

11.1.0

  • #​573 Add Span min max
  • #​574 Add ConditionalWeakTable.Remove(key, out value) polyfill
  • #​575 Add BitOperations.IsPow2 polyfills
  • #​576 Add ConditionalWeakTable.Remove(key, out value) polyfill
  • #​577 Add BitOperations.IsPow2 polyfill (#​575)

Commits viewable in compare view.

Updated SkiaSharp.NativeAssets.Linux.NoDependencies from 4.150.0 to 4.151.1.

Updated SonarAnalyzer.CSharp from 10.31.0.145097 to 10.32.0.713.

Release notes

Sourced from SonarAnalyzer.CSharp's releases.

10.32.0.713

Release notes - .NET Analyzers - 10.32

Feature

NET-4132 Implement rule S9022: Redundant "Include" calls should be removed
NET-4215 Implement rule S9118: Default values should be compatible with their entity property type
NET-4240 Update RSPEC before 10.32 release

False Positive

NET-1322 Fix S2857 FP: Do not raise in constant string interpolation when string is in square brackets
NET-1468 Fix S6966 FP: should not raise when inside lock
NET-1598 Fix S1125 FP: dynamic and custom nullable structs with conversion to bool are compliant
NET-4233 Fix S8733 FP: AsSplitQuery/AsSingleQuery set in a different statement than the colliding Includes goes undetected
NET-4297 Fix S8717 FP: EFCore DBFirst Scaffold

Commits viewable in compare view.

Updated xunit.runner.visualstudio from 3.1.5 to 4.0.0.

Release notes

Sourced from xunit.runner.visualstudio's releases.

4.0.0

Release notes: https://xunit.net/releases/visualstudio/4.0.0

4.0.0-pre.5

Release notes: https://xunit.net/releases/visualstudio/4.0.0-pre.5

4.0.0-pre.4

Release notes: https://xunit.net/releases/visualstudio/4.0.0-pre.4

4.0.0-pre.3

Release notes: https://xunit.net/releases/visualstudio/4.0.0-pre.3

Commits viewable in compare view.

Updated xunit.v3 from 3.2.2 to 4.0.0.

Release notes

Sourced from xunit.v3's releases.

No release notes found for this version range.

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the nuget-dependencies group with 9 updates
19c2cd3 
Bumps Microsoft.CodeAnalysis.NetAnalyzers from 10.0.302 to 10.0.400
Bumps Microsoft.Extensions.FileSystemGlobbing from 10.0.10 to 10.0.11
Bumps Microsoft.NET.Test.Sdk from 18.8.1 to 18.9.0
Bumps Microsoft.SourceLink.GitHub from 10.0.301 to 10.0.400
Bumps Polyfill from 11.0.2 to 11.2.0
Bumps SkiaSharp.NativeAssets.Linux.NoDependencies from 4.150.0 to 4.151.1
Bumps SonarAnalyzer.CSharp from 10.31.0.145097 to 10.32.0.713
Bumps xunit.runner.visualstudio from 3.1.5 to 4.0.0
Bumps xunit.v3 from 3.2.2 to 4.0.0

---
updated-dependencies:
- dependency-name: Microsoft.CodeAnalysis.NetAnalyzers
  dependency-version: 10.0.400
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-dependencies
- dependency-name: Microsoft.CodeAnalysis.NetAnalyzers
  dependency-version: 10.0.400
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-dependencies
- dependency-name: Microsoft.CodeAnalysis.NetAnalyzers
  dependency-version: 10.0.400
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-dependencies
- dependency-name: Microsoft.CodeAnalysis.NetAnalyzers
  dependency-version: 10.0.400
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-dependencies
- dependency-name: Microsoft.Extensions.FileSystemGlobbing
  dependency-version: 10.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-dependencies
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-dependencies
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-dependencies
- dependency-name: Microsoft.SourceLink.GitHub
  dependency-version: 10.0.400
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-dependencies
- dependency-name: Microsoft.SourceLink.GitHub
  dependency-version: 10.0.400
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-dependencies
- dependency-name: Polyfill
  dependency-version: 11.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-dependencies
- dependency-name: Polyfill
  dependency-version: 11.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-dependencies
- dependency-name: SkiaSharp.NativeAssets.Linux.NoDependencies
  dependency-version: 4.151.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-dependencies
- dependency-name: SonarAnalyzer.CSharp
  dependency-version: 10.32.0.713
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-dependencies
- dependency-name: SonarAnalyzer.CSharp
  dependency-version: 10.32.0.713
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-dependencies
- dependency-name: SonarAnalyzer.CSharp
  dependency-version: 10.32.0.713
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-dependencies
- dependency-name: SonarAnalyzer.CSharp
  dependency-version: 10.32.0.713
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-dependencies
- dependency-name: xunit.runner.visualstudio
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-dependencies
- dependency-name: xunit.runner.visualstudio
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-dependencies
- dependency-name: xunit.v3
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-dependencies
- dependency-name: xunit.v3
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added .NET Pull requests that update .NET code dependencies Dependency updates labels Aug 17, 2026
Malcolm Nixon and others added 3 commits August 18, 2026 15:33
Malcolm Nixon Malcolm Nixon
Fix xunit.v3 4.0.0 / Microsoft.Testing.Platform migration issues
b60bde7 
- Add global.json to select the Microsoft.Testing.Platform test runner
- Replace coverlet.collector (VSTest-only) with coverlet.MTP, and add
  Microsoft.Testing.Extensions.TrxReport for TRX reporting under MTP
- Update CI workflow dotnet test invocation to use --coverlet,
  --coverlet-output-format opencover, and --report-trx instead of the
  removed --collect/--logger trx VSTest options

Mirrors the fix applied in demaconsulting/VersionMark#107 for the same
xunit.v3 4.0.0 dependency bump.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Malcolm Nixon Malcolm Nixon
Pin SkiaSharp.NativeAssets.Linux.NoDependencies to 4.150.0
7586241 
Dependabot bumped the Linux native asset package alone to 4.151.1 while
the managed SkiaSharp package (pulled in transitively via
DemaConsulting.Rendering.Skia) remained pinned at 4.150.0. SkiaSharp
enforces a matching native/managed version range at startup, so the
mismatch threw:

  System.InvalidOperationException: The version of the native
  libSkiaSharp library (151.0) is incompatible with this version of
  SkiaSharp. Supported versions of the native libSkiaSharp library are
  in the range [150.0, 151.0).

Pinning the Linux native asset back to 4.150.0 restores parity with the
Windows/macOS native asset packages and the managed SkiaSharp version.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Malcolm Nixon Malcolm Nixon
Remove explicit SkiaSharp native asset references from test project
c9c4290 
DemaConsulting.Rendering.Skia already depends unconditionally on
SkiaSharp.NativeAssets.Win32/Linux.NoDependencies/macOS, so the test
project inherits matching, self-consistent native asset versions
transitively - no explicit PackageReference is needed.

Explicitly re-declaring these packages let Dependabot bump the Linux
native asset independently of the version resolved transitively via
Rendering.Skia's own SkiaSharp dependency, causing the native/managed
version mismatch fixed in the previous commit. Removing the explicit
references eliminates this whole class of bug going forward.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@Malcolmnixon
Malcolmnixon merged commit d15e64c into main Aug 19, 2026
9 checks passed
@Malcolmnixon
Malcolmnixon deleted the dependabot/nuget/src/DemaConsulting.SysML2Tools.Core/nuget-dependencies-ce699a4861 branch August 19, 2026 00:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Dependency updates .NET Pull requests that update .NET code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@Malcolmnixon