Skip to content

Bump the dependencies group with 9 updates#1782

Open
dependabot[bot] wants to merge 1 commit intodevelopfrom
dependabot/nuget/dependencies-dae1256a2e
Open

Bump the dependencies group with 9 updates#1782
dependabot[bot] wants to merge 1 commit intodevelopfrom
dependabot/nuget/dependencies-dae1256a2e

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 2, 2026

Updated coverlet.collector from 6.0.4 to 8.0.1.

Release notes

Sourced from coverlet.collector's releases.

8.0.1

Fixed

  • Fix [BUG] TypeInitializationException when targeting .NET Framework #​1818
  • Fix [BUG] coverlet.MTP build fails with CS0400 due to developmentDependency=true #​1827

Improvements

  • Additional improvements needed for .NET Framework instrumentation type import #​1825

Diff between 8.0.0 and 8.0.1

8.0.0

Special Thanks: A huge thank you to @​Bertk for driving the majority of the work in this release! 🎉

Fixed

Improvements

  • Coverlet MTP extension feature #​1788
  • Generate SBOM for nuget packages #​1752
  • Use multi targets projects for coverlet.collector, coverlet.msbuild.tasks packages #​1742
  • Use .NET 8.0 target framework for coverlet.core and remove Newtonsoft.Json #​1733
  • Use latest System.CommandLine version #​1660
  • Upgraded minimum required .NET SDK and runtime to .NET 8.0 LTS (Long Term Support) (Breaking Change)
  • Use xunit.v3 for tests and example code

Diff between 6.0.4 and 8.0.0

Commits viewable in compare view.

Updated coverlet.msbuild from 6.0.4 to 8.0.1.

Release notes

Sourced from coverlet.msbuild's releases.

8.0.1

Fixed

  • Fix [BUG] TypeInitializationException when targeting .NET Framework #​1818
  • Fix [BUG] coverlet.MTP build fails with CS0400 due to developmentDependency=true #​1827

Improvements

  • Additional improvements needed for .NET Framework instrumentation type import #​1825

Diff between 8.0.0 and 8.0.1

8.0.0

Special Thanks: A huge thank you to @​Bertk for driving the majority of the work in this release! 🎉

Fixed

Improvements

  • Coverlet MTP extension feature #​1788
  • Generate SBOM for nuget packages #​1752
  • Use multi targets projects for coverlet.collector, coverlet.msbuild.tasks packages #​1742
  • Use .NET 8.0 target framework for coverlet.core and remove Newtonsoft.Json #​1733
  • Use latest System.CommandLine version #​1660
  • Upgraded minimum required .NET SDK and runtime to .NET 8.0 LTS (Long Term Support) (Breaking Change)
  • Use xunit.v3 for tests and example code

Diff between 6.0.4 and 8.0.0

Commits viewable in compare view.

Updated GitHubActionsTestLogger from 3.0.1 to 3.0.3.

Release notes

Sourced from GitHubActionsTestLogger's releases.

3.0.3

What's Changed

Full Changelog: Tyrrrz/GitHubActionsTestLogger@3.0.2...3.0.3

3.0.2

What's Changed

New Contributors

Full Changelog: Tyrrrz/GitHubActionsTestLogger@3.0.1...3.0.2

Commits viewable in compare view.

Updated Meziantou.Analyzer from 3.0.18 to 3.0.43.

Release notes

Sourced from Meziantou.Analyzer's releases.

3.0.43

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.43

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.42...3.0.43

3.0.42

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.42

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.41...3.0.42

3.0.41

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.41

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.40...3.0.41

3.0.40

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.40

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.39...3.0.40

3.0.39

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.39

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.38...3.0.39

3.0.38

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.38

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.37...3.0.38

3.0.37

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.37

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.36...3.0.37

3.0.36

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.36

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.35...3.0.36

3.0.35

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.35

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.34...3.0.35

3.0.34

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.34

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.33...3.0.34

3.0.33

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.33

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.32...3.0.33

3.0.32

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.32

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.31...3.0.32

3.0.31

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.31

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.30...3.0.31

3.0.30

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.30

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.29...3.0.30

3.0.29

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.29

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.28...3.0.29

3.0.28

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.28

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.27...3.0.28

3.0.27

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.27

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.26...3.0.27

3.0.26

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.26

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.25...3.0.26

3.0.25

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.25

Full Changelog: meziantou/Meziantou.Analyzer@3.0.24...3.0.25

3.0.24

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.24

Full Changelog: meziantou/Meziantou.Analyzer@3.0.23...3.0.24

3.0.23

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.23

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.22...3.0.23

3.0.22

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.22

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.21...3.0.22

3.0.21

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.21

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.20...3.0.21

3.0.20

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.20

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.19...3.0.20

3.0.19

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.19

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.18...3.0.19

Commits viewable in compare view.

Updated Microsoft.Bcl.Cryptography from 10.0.3 to 10.0.5.

Release notes

Sourced from Microsoft.Bcl.Cryptography's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Logging.Console from 10.0.3 to 10.0.5.

Release notes

Sourced from Microsoft.Extensions.Logging.Console's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated SonarAnalyzer.CSharp from 10.20.0.135146 to 10.22.0.136894.

Release notes

Sourced from SonarAnalyzer.CSharp's releases.

10.22

Hello everyone,
This release brings 4 new rules to help developers transition to C# 14, and a bunch of false positive fixes.

New rules

  • NET-3361 - New rule S8381: "scoped" should be escaped when used as a type name in lambda parameters
  • NET-3359 - New rule S8368: "extension" identifiers should be escaped to avoid contextual keyword conflicts
  • NET-3347 - New rule S8380: Return types named "partial" should be escaped with "@"
  • NET-3345 - New rule S8367: Identifiers should not conflict with the "field" keyword in C# 14?

False Positive

  • NET-3443 - Fix S1940 FP: for floating point numbers that can be NaN "!(a <= b)" is not the same as "a > b"
  • NET-3001 - Fix S3063 FP: Concatenation with identifier
  • NET-1569 - Fix S5944 FP: AddressOf(MethodName) in Return statement
  • NET-3445 - Fix T0029 FP: Inside target-typed new
  • NET-2817 - Fix T0029 FP: Ident for collection expression members
  • NET-2024 - Fix T0029 FP: Inside array initializer
  • NET-3341 - Fix T0029 FP: After member access
  • NET-3462 - Fix T0042 FP: Inside constructors and collection initializers
  • NET-3426 - Fix T0042: Raw string in collection initializer
  • NET-2888 - Fix T0042 FP: Returned from method
  • NET-2874 - Fix T0042 FP: Raw string in ternary

Bugs

  • NET-3386 - Fix S4583 AD0001: BeginInvoke callback declared in separate file

Other

  • NET-3385 - S2612: Rule type changed from Security Hotspot to Vulnerability

10.21

### Bug

  • NET-3376 - Fix S6930 AD0001: Issue on template / code files for blazor
  • NET-3367 - Fix S4830 AD0001: CertificateValidationCheck Syntax node is not within syntax tree

Feature

  • NET-3260 - Fix broken links in S6960 RSPEC

False Positive

  • NET-2886 - Fix T0015 FP: In constructor
  • NET-1678 - Fix S4275 FP: with property overload

Commits viewable in compare view.

Updated System.Formats.Asn1 from 10.0.3 to 10.0.5.

Release notes

Sourced from System.Formats.Asn1's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Testcontainers from 4.10.0 to 4.11.0.

Release notes

Sourced from Testcontainers's releases.

4.11.0

What's Changed

Thanks to all contributors. Once again, really great contributions from everyone 🤝.

The NuGet packages for this release have been attested for supply chain security using actions/attest. This confirms the integrity and provenance of the artifacts and helps ensure they can be trusted: #​21198535.

Please be aware that we have changed the supported and underlying image used for the Cosmos DB module. The latest tag only supports certain environments and provides a limited set of features. Microsoft has introduced a new implementation, vnext-preview, which receives more updates and features. Due to the limitations of the latest tag, we decided to replace it with vnext-preview. You find more information about the image here: https://github.com/Azure/azure-cosmos-db-emulator-docker.

⚠️ Breaking Changes

  • feat(CosmosDb): Update base image from latest to vnext-preview (#​1324) @​NelsonBN

🚀 Features

  • feat(CosmosDb): Update base image from latest to vnext-preview (#​1324) @​NelsonBN
  • feat: Add typed WithResourceMapping(...) overloads (#​1497) @​cimnine
  • feat: Add Seq module (#​1276) @​montanehamilton
  • feat(PostgreSql): Add WithSsl builder API (#​1529) @​ozkanpakdil
  • feat: Add Temporal module (#​1635) @​bgener
  • feat: Add module connection string provider (#​1632) @​HofmeisterAn
  • fead: Add default container connection string provider (#​1630) @​HofmeisterAn
  • feat(ServiceBus): Add method to get HTTP connection string (#​1622) @​NelsonBN

🐛 Bug Fixes

  • fix(MongoDb): Wait for post-init startup readiness before replica set initiation (#​1656) @​HofmeisterAn
  • fix(Seq): Assert connection string provider (#​1645) @​HofmeisterAn
  • fix(EventHubs): Ignore runtime property to support reuse (#​1644) @​franciscosamuel
  • fix(ServiceBus): Ignore runtime property to support reuse (#​1643) @​franciscosamuel
  • fix(ResourceReaper): Set wait strategy (#​1634) @​HofmeisterAn
  • fix(ServiceBus): Workaround health API timeout (#​1625) @​HofmeisterAn
  • fix: Do not set console buffer width (ConsoleLogger) (#​1623) @​HofmeisterAn
  • fix(EventHubs): Workaround health API timeout (#​1624) @​HofmeisterAn

📖 Documentation

  • docs(CosmosDb): Replace unsupported tag 'latest' with 'vnext-preview' (#​1660) @​HofmeisterAn
  • docs(Redis): Add example (#​1641) @​HofmeisterAn

🧹 Housekeeping

  • chore(examples): Enable NuGet restore lock mode (#​1659) @​HofmeisterAn
  • chore: Pin image digest (#​1658) @​HofmeisterAn
  • fix: Run OpenSSF Scorecard only on default branch (#​1657) @​HofmeisterAn
  • chore: Remove Git LFS tracking for .snk (#​1655) @​HofmeisterAn
  • feat: Enable Dependabot for NuGet (repo) (#​1654) @​HofmeisterAn
  • feat: Enable Dependabot for NuGet (src) (#​1653) @​HofmeisterAn
  • fix: Replace branch protection with ruleset (#​1652) @​HofmeisterAn
  • fix: Do not enforce policies for admins (#​1651) @​HofmeisterAn
  • fix: Remove missing labels from Dependabot (#​1650) @​HofmeisterAn
    ... (truncated)

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the dependencies group with 9 updates
7d30dbe 
Bumps coverlet.collector from 6.0.4 to 8.0.1
Bumps coverlet.msbuild from 6.0.4 to 8.0.1
Bumps GitHubActionsTestLogger from 3.0.1 to 3.0.3
Bumps Meziantou.Analyzer from 3.0.18 to 3.0.43
Bumps Microsoft.Bcl.Cryptography from 10.0.3 to 10.0.5
Bumps Microsoft.Extensions.Logging.Console from 10.0.3 to 10.0.5
Bumps SonarAnalyzer.CSharp from 10.20.0.135146 to 10.22.0.136894
Bumps System.Formats.Asn1 from 10.0.3 to 10.0.5
Bumps Testcontainers from 4.10.0 to 4.11.0

---
updated-dependencies:
- dependency-name: coverlet.collector
  dependency-version: 8.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: coverlet.msbuild
  dependency-version: 8.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: GitHubActionsTestLogger
  dependency-version: 3.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: Meziantou.Analyzer
  dependency-version: 3.0.43
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: Microsoft.Bcl.Cryptography
  dependency-version: 10.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: Microsoft.Extensions.Logging.Console
  dependency-version: 10.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: SonarAnalyzer.CSharp
  dependency-version: 10.22.0.136894
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: System.Formats.Asn1
  dependency-version: 10.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: Testcontainers
  dependency-version: 4.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added .NET Pull requests that update .net code dependencies Pull requests that update a dependency file labels Apr 2, 2026
@dependabot dependabot bot added dependencies Pull requests that update a dependency file .NET Pull requests that update .net code labels Apr 2, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@drieseng drieseng Awaiting requested review from drieseng drieseng is a code owner

@WojciechNagorski WojciechNagorski Awaiting requested review from WojciechNagorski WojciechNagorski is a code owner

@Rob-Hague Rob-Hague Awaiting requested review from Rob-Hague Rob-Hague is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .net code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants