Skip to content

Bump the minor-and-patch group with 8 updates#4777

Open
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/nuget/minor-and-patch-f7506dea11
Open

Bump the minor-and-patch group with 8 updates#4777
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/nuget/minor-and-patch-f7506dea11

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 13, 2026

Copy link
Copy Markdown
Contributor

Updated Google.Protobuf from 3.35.0 to 3.35.1.

Updated Microsoft.Build.Framework from 18.6.3 to 18.7.1.

Updated Microsoft.Build.Utilities.Core from 18.6.3 to 18.7.1.

Updated Microsoft.Extensions.DependencyInjection.Abstractions from 10.0.0 to 10.0.9.

Updated Microsoft.Extensions.Logging.Abstractions from 10.0.0 to 10.0.9.

Updated Microsoft.Extensions.Options from 10.0.0 to 10.0.9.

Updated Microsoft.Extensions.TimeProvider.Testing from 10.6.0 to 10.7.0.

Updated NUnit.Analyzers from 4.13.0 to 4.14.0.

Pinned Microsoft.CodeAnalysis.CSharp at 5.0.0 and configured Dependabot to ignore future updates for this package.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Bumps Google.Protobuf from 3.35.0 to 3.35.1
Bumps Microsoft.Build.Framework from 18.6.3 to 18.7.1
Bumps Microsoft.Build.Utilities.Core from 18.6.3 to 18.7.1
Bumps Microsoft.CodeAnalysis.CSharp from 5.0.0 to 5.3.0
Bumps Microsoft.Extensions.DependencyInjection.Abstractions from 10.0.0 to 10.0.9
Bumps Microsoft.Extensions.Logging.Abstractions from 10.0.0 to 10.0.9
Bumps Microsoft.Extensions.Options from 10.0.0 to 10.0.9
Bumps Microsoft.Extensions.TimeProvider.Testing from 10.6.0 to 10.7.0
Bumps NUnit.Analyzers from 4.13.0 to 4.14.0

---
updated-dependencies:
- dependency-name: Google.Protobuf
  dependency-version: 3.35.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: Microsoft.Build.Framework
  dependency-version: 18.7.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: Microsoft.Build.Utilities.Core
  dependency-version: 18.7.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: Microsoft.CodeAnalysis.CSharp
  dependency-version: 5.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: Microsoft.Extensions.DependencyInjection.Abstractions
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: Microsoft.Extensions.Logging.Abstractions
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: Microsoft.Extensions.Options
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: Microsoft.Extensions.TimeProvider.Testing
  dependency-version: 10.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: NUnit.Analyzers
  dependency-version: 4.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Comment thread Directory.Packages.props Outdated

<!-- 5.0.0 to maintain compatibility with .NET SDK 10.0.10x -->
<PackageVersion Include="Microsoft.CodeAnalysis.CSharp" Version="5.0.0" />
<PackageVersion Include="Microsoft.CodeAnalysis.CSharp" Version="5.3.0" />

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This should stay at 5.0.0 see the comment above. @copilot is there a way to prevent dependabot[bot] to keep trying to update this package, we need to stick to the old version.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Fixed in 8f5afb7. I pinned Microsoft.CodeAnalysis.CSharp back to 5.0.0 and added a Dependabot ignore entry in .github/dependabot.yml, so future NuGet update PRs should skip that package.

@CLAassistant

Copy link
Copy Markdown

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
You have signed the CLA already but the status is still pending? Let us recheck it.

Copilot AI changed the title Bump the minor-and-patch group with 9 updates Bump the minor-and-patch group with 8 updates Jun 13, 2026
Copilot AI requested a review from pepone June 13, 2026 06:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants