Skip to content

Bump the csharp group with 14 updates#58

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/nuget/dot-config/csharp-319070ef62
Closed

Bump the csharp group with 14 updates#58
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/nuget/dot-config/csharp-319070ef62

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 1, 2026 •
edited
Loading

Updated coverlet.collector from 8.0.1 to 10.0.0.

Release notes

Sourced from coverlet.collector's releases.

10.0.0

Improvements

  • Unique Report Filenames (coverlet.MTP and AzDO) #​1866
  • Add --coverlet-file-prefix option for unique report files #​1869
  • Introduce .NET 10 support #​1823

Fixed

  • Fix [BUG] Wrong branch rate on IAsyncEnumerable for generic type #​1836
  • Fix [BUG] Missing Coverage after moving to MTP #​1843
  • Fix [BUG] No coverage reported when targeting .NET Framework with 8.0.1 #​1842
  • Fix [BUG] Behavior changes between MTP and Legacy (msbuild) #​1878
  • Fix [BUG] Coverlet.MTP - Unable to load coverlet.mtp.appsettings.json #​1880
  • Fix [BUG] Coverlet.Collector produces empty report when Mediator.SourceGenerator is referenced #​1718 by https://github.com/yusyd
  • Fix [BUG] Crash during instrumentation (Methods using LibraryImport/DllImport have no body) #​1762

Maintenance

  • Add comprehensive async method tests and documentation for issue #​1864
  • Replace Tmds.ExecFunction Package in coverlet.core.coverage.tests #​1833
  • Add net9.0 and net10.0 targets #​1822

Diff between 8.0.1 and 10.0.0

Commits viewable in compare view.

Updated coverlet.msbuild from 8.0.1 to 10.0.0.

Release notes

Sourced from coverlet.msbuild's releases.

10.0.0

Improvements

  • Unique Report Filenames (coverlet.MTP and AzDO) #​1866
  • Add --coverlet-file-prefix option for unique report files #​1869
  • Introduce .NET 10 support #​1823

Fixed

  • Fix [BUG] Wrong branch rate on IAsyncEnumerable for generic type #​1836
  • Fix [BUG] Missing Coverage after moving to MTP #​1843
  • Fix [BUG] No coverage reported when targeting .NET Framework with 8.0.1 #​1842
  • Fix [BUG] Behavior changes between MTP and Legacy (msbuild) #​1878
  • Fix [BUG] Coverlet.MTP - Unable to load coverlet.mtp.appsettings.json #​1880
  • Fix [BUG] Coverlet.Collector produces empty report when Mediator.SourceGenerator is referenced #​1718 by https://github.com/yusyd
  • Fix [BUG] Crash during instrumentation (Methods using LibraryImport/DllImport have no body) #​1762

Maintenance

  • Add comprehensive async method tests and documentation for issue #​1864
  • Replace Tmds.ExecFunction Package in coverlet.core.coverage.tests #​1833
  • Add net9.0 and net10.0 targets #​1822

Diff between 8.0.1 and 10.0.0

Commits viewable in compare view.

Updated dotnet-reportgenerator-globaltool from 5.5.4 to 5.5.7.

Release notes

Sourced from dotnet-reportgenerator-globaltool's releases.

5.5.7

Changes:

  • #​783: Reduce memory usage for large code files

This release requires .NET Framework 4.7 or .NET 8.0/9.0/10.0

5.5.6

Changes:

This release requires .NET Framework 4.7 or .NET 8.0/9.0/10.0

5.5.5

Changes:

This release requires .NET Framework 4.7 or .NET 8.0/9.0/10.0

Commits viewable in compare view.

Updated m-ringler.cpmupdatetool from 0.1.1 to 0.1.2.

Release notes

Sourced from m-ringler.cpmupdatetool's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.ML.OnnxRuntime from 1.24.4 to 1.25.1.

Release notes

Sourced from Microsoft.ML.OnnxRuntime's releases.

1.25.1

n.b. This changelog is LLM generated. Only the contributor listing has been verified.

ONNX Runtime Release 1.25.1

📢 Announcements & Breaking Changes

ONNX Op Updates

  • Enhanced ONNX operator support with new opset versions: Reshape (opset 25), Transpose (opset 24) (#​27752)

✨ New Features

📊 New ONNX Ops & Model Support

  • LinearAttention and CausalConvState operators for Qwen3.5 model support (#​27907)
  • RotaryEmbedding (RotEMB) and RMSNorm operators added (#​27752)
  • Linear Attention signature support (#​27842)

🌐 Web & JavaScript

WebGPU EP

  • Qwen3.5 model support on WebGPU execution provider (#​27996)
  • QMoE 1-token decode path optimization — fused operations to reduce GPU dispatches for improved performance (#​27998)

🐛 Bug Fixes

Core Runtime Fixes

  • Improved filesystem error messages during Linux device discovery for better debugging experience (#​27289)
  • Fixed missing include for SetRawDataInTensorProto in NVIDIA TensorRT RTX tests (#​28065)

🙏 Contributors

Thanks to our 7 contributors for this release:
@​guschmue, @​sanaa-hamel-microsoft, @​apsonawane, @​eserscor, @​ishwar-raut1, @​qjia7, @​theHamsta

Full Changelog: microsoft/onnxruntime@v1.25.0...v1.25.1

1.25.0

📢 Announcements & Breaking Changes

Build & Platform

  • C++20 is now required to build ONNX Runtime from source. Minimum toolchains: MSVC 19.29+, GCC 10+, Clang 10+. Users of prebuilt packages are unaffected. (#​27178)
  • CUDA minimum version raised to 12.0 — CUDA 11.x is no longer supported. Users pinned to CUDA 11.x should stay on ORT 1.24.x or upgrade their CUDA toolkit/driver. (#​27570)
  • ONNX upgraded to 1.21.0 (#​27601)
  • sympy is now an optional dependency for Python builds. (#​27200)

Execution Provider Changes

  • ArmNN EP has been removed. Users should remove any --use_armnn build flags and migrate to the MLAS/KleidiAI-backed CPU EP or QNN EP for Qualcomm hardware. (#​27447)

API Version

🔒 Security Fixes

  • Fixed potential integer truncation leading to heap out-of-bounds read/write (#​27544)
  • Addressed Pad Reflect vulnerability (#​27652)
  • Security fix for transpose optimizer (#​27555)
  • Upgraded minimatch 3.1.2 → 3.1.4 for CVE-2026-27904 (#​27667)
  • Hardened shell command handling for constant strings (#​27840)
  • Added validation of onnx::TensorProto data size before allocation (#​27547)
  • Cleaned up external data path validation (#​27539)
  • Fixed misaligned address reads for tensor attributes from raw data buffers (#​27312)
  • Fixed CPU Attention overflow issue (#​27822)
  • Fixed CPU LRN integer overflow issues (#​27886)
  • Additional input validation hardening:

✨ New Features

🔌 Execution Provider Plugin API & CUDA Plugin EP

... (truncated)

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.3.0 to 18.5.1.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.5.1

What's Changed

Full Changelog: microsoft/vstest@v18.5.0...v18.5.1

18.5.0

⚠️ Unlisted on Nuget, because of #​15718

What's Changed

Full Changelog: microsoft/vstest@v18.4.0...v18.5.0

18.4.0

What's Changed

New Contributors

Full Changelog: microsoft/vstest@v18.3.0...v18.4.0

Commits viewable in compare view.

Updated Microsoft.SourceLink.GitHub from 10.0.201 to 10.0.203.

Release notes

Sourced from Microsoft.SourceLink.GitHub's releases.

10.0.203

You can build .NET 10.0 from the repository by cloning the release tag v10.0.203 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

10.0.202

You can build .NET 10.0 from the repository by cloning the release tag v10.0.202 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

Commits viewable in compare view.

Updated OpenCvSharp4 from 4.13.0.20260330 to 4.13.0.20260427.

Release notes

Sourced from OpenCvSharp4's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated OpenCvSharp4.runtime.win.slim from 4.13.0.20260330 to 4.13.0.20260427.

Release notes

Sourced from OpenCvSharp4.runtime.win.slim's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated System.CommandLine from 2.0.5 to 2.0.7.

Release notes

Sourced from System.CommandLine's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated System.IO.Abstractions from 22.1.0 to 22.1.1.

Release notes

Sourced from System.IO.Abstractions's releases.

22.1.1

What's Changed

Commits viewable in compare view.

Updated System.IO.Abstractions.TestingHelpers from 22.1.0 to 22.1.1.

Release notes

Sourced from System.IO.Abstractions.TestingHelpers's releases.

22.1.1

What's Changed

Commits viewable in compare view.

Updated System.Numerics.Tensors from 10.0.5 to 10.0.7.

Release notes

Sourced from System.Numerics.Tensors's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Verify.XunitV3 from 31.15.0 to 31.16.2.

Release notes

Sourced from Verify.XunitV3's releases.

31.16.2

  • #​1714 Unexpected empty.nupkg in output directory
  • #​1721 XUnit V3: Adds attachment with colon in filename - GitHub artifacts upload fails
  • #​1723 Strip solution dir prefix from XunitV3 attachment names

31.16.1

  • #​1718 Handle eof and missing ihdr in png decoder

31.16.0

  • #​1704 Add ScrubNumericIds
  • #​1707 Minor micro-optimizations for Verify project.
  • #​1708 Add Target comparer and avoid string allocations.
  • #​1709 ApplyForPropertyValue returns string instead of CharSpan
  • #​1710 In-place sort instead of LINQ OrderByDescending
  • #​1711 Remove unnecessary ToString() in VerifyJsonWriter
  • #​1716 add Png ssim comparer
  • #​1717 Throw on null assembly in TryGetType for bad plugin assembly

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the csharp group with 14 updates
61a53f1 
Bumps coverlet.collector from 8.0.1 to 10.0.0
Bumps coverlet.msbuild from 8.0.1 to 10.0.0
Bumps dotnet-reportgenerator-globaltool from 5.5.4 to 5.5.7
Bumps m-ringler.cpmupdatetool from 0.1.1 to 0.1.2
Bumps Microsoft.ML.OnnxRuntime from 1.24.4 to 1.25.1
Bumps Microsoft.NET.Test.Sdk from 18.3.0 to 18.5.1
Bumps Microsoft.SourceLink.GitHub from 10.0.201 to 10.0.203
Bumps OpenCvSharp4 from 4.13.0.20260330 to 4.13.0.20260427
Bumps OpenCvSharp4.runtime.win.slim from 4.13.0.20260330 to 4.13.0.20260427
Bumps System.CommandLine from 2.0.5 to 2.0.7
Bumps System.IO.Abstractions from 22.1.0 to 22.1.1
Bumps System.IO.Abstractions.TestingHelpers from 22.1.0 to 22.1.1
Bumps System.Numerics.Tensors from 10.0.5 to 10.0.7
Bumps Verify.XunitV3 from 31.15.0 to 31.16.2

---
updated-dependencies:
- dependency-name: coverlet.collector
  dependency-version: 10.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: csharp
- dependency-name: coverlet.msbuild
  dependency-version: 10.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: csharp
- dependency-name: dotnet-reportgenerator-globaltool
  dependency-version: 5.5.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: csharp
- dependency-name: m-ringler.cpmupdatetool
  dependency-version: 0.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: csharp
- dependency-name: Microsoft.ML.OnnxRuntime
  dependency-version: 1.25.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: csharp
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: csharp
- dependency-name: Microsoft.SourceLink.GitHub
  dependency-version: 10.0.203
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: csharp
- dependency-name: OpenCvSharp4
  dependency-version: 4.13.0.20260427
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: csharp
- dependency-name: OpenCvSharp4.runtime.win.slim
  dependency-version: 4.13.0.20260427
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: csharp
- dependency-name: System.CommandLine
  dependency-version: 2.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: csharp
- dependency-name: System.IO.Abstractions
  dependency-version: 22.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: csharp
- dependency-name: System.IO.Abstractions.TestingHelpers
  dependency-version: 22.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: csharp
- dependency-name: System.Numerics.Tensors
  dependency-version: 10.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: csharp
- dependency-name: Verify.XunitV3
  dependency-version: 31.16.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: csharp
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels May 1, 2026
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 1, 2026

Looks like these dependencies are no longer updatable, so this is no longer needed.

@dependabot dependabot Bot closed this May 1, 2026
@dependabot dependabot Bot deleted the dependabot/nuget/dot-config/csharp-319070ef62 branch May 1, 2026 14:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants