Skip to content

deps: Bump the production-dependencies group with 11 updates #6

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
wants to merge 1 commit into from
Closed

deps: Bump the production-dependencies group with 11 updates #6

wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 15, 2025 •
edited
Loading

Updated BenchmarkDotNet from 0.13.12 to 0.15.4.

Release notes

Sourced from BenchmarkDotNet's releases.

0.15.4

Full changelog: https://benchmarkdotnet.org/changelog/v0.15.4.html

Highlights

Allow override method/property for ParamsSource (#​2832)

0.15.3

Full changelog: https://benchmarkdotnet.org/changelog/v0.15.3.html

Highlights

Improvements:

  • Naot instruction set support for .NET 10+, migrate to ISA groupings in CPU summary #​2828
  • Support benchmark filtering for TestAdapter #​2662 #​2788
  • Support non-primitive external types in ArgumentsSource #​2820
  • Enable MSBuild parallel build via --nodeReuse:false #​2693 #​2814
  • Improve CPU detection #​2747 #​2749
  • Enable assembly signing for debug build #​2774

Deprecations:

Bug fixes:

  • Fix InvalidOperationException in diagnosers #​2758 #​2805
  • Fix file detection in NativeMemoryProfiler #​2794 #​2795
  • Fix long file paths issue in EtwProfiler #​2807 #​2808
  • Fix log duplications in TestAdapter #​2790
  • Fix x86 disassembler error for net462 #​2792
  • Fix IsNetCore and IsNativeAOT for single-file apps without AOT #​2799
  • Fix density plot generation in RPlotExporter for latest version of R #​2809

0.15.2

Full changelog: https://benchmarkdotnet.org/changelog/v0.15.2.html

Highlights

  • The most significant update in this release is the enhanced accuracy of the memory diagnoser (#​2562). This improvement resolves the issue of incorrectly reported memory allocations (#​1542, #​2582).
  • We have introduced a new feature that allows users to sort benchmark jobs in numerical order (#​2768, #​2770).
  • Benchmark validation has been improved (#​2771).
  • An issue with non-persistent auto-generated JobId has been fixed (#​2777).

0.15.1

Full changelog: https://benchmarkdotnet.org/changelog/v0.15.1.html

Highlights

0.15.0

Full changelog: https://benchmarkdotnet.org/changelog/v0.15.0.html

0.14.0

Full changelog: https://benchmarkdotnet.org/changelog/v0.14.0.html

Highlights

  • Introduce BenchmarkDotNet.Diagnostics.dotMemory #​2549: memory allocation profile of your benchmarks using dotMemory, see @​BenchmarkDotNet.Samples.IntroDotMemoryDiagnoser
  • Introduce BenchmarkDotNet.Exporters.Plotting #​2560: plotting via ScottPlot (initial version)
  • Multiple bugfixes
  • The default build toolchains have been updated to pass IntermediateOutputPath, OutputPath, and OutDir properties to the dotnet build command. This change forces all build outputs to be placed in a new directory generated by BenchmarkDotNet, and fixes many issues that have been reported with builds. You can also access these paths in your own .csproj and .props from those properties if you need to copy custom files to the output.

Bug fixes

  • Fixed multiple build-related bugs including passing MsBuildArguments and .Net 8's UseArtifactsOutput.

Breaking Changes

  • DotNetCliBuilder removed retryFailedBuildWithNoDeps constructor option.
  • DotNetCliCommand removed RetryFailedBuildWithNoDeps property and BuildNoRestoreNoDependencies() and PublishNoBuildAndNoRestore() methods (replaced with PublishNoRestore()).

Commits viewable in compare view.

Updated DotNet.ReproducibleBuilds from 1.1.1 to 1.2.39.

Release notes

Sourced from DotNet.ReproducibleBuilds's releases.

1.2.39

Additions

Removals

Changed

Tidying up

New Contributors

Full Changelog: dotnet/reproducible-builds@v1.2.25...v1.2.39

1.2.25

This release is designed to be a "cleanup" release that we can use as a solid foundation to build on. We've cleared the backlog of PRs and resolved several issues. Two changes of note:

  • The minimum required SDK version is now .NET 8
  • The RepositoryBranch logic introduced in v1.2.4 has been refactored to align with the values provided by Source Link in .NET 9

Removals

What's changed

Tidying up

New Contributors

Full Changelog: dotnet/reproducible-builds@v1.2.4...v1.2.25

1.2.4

At long last we've have a new release of the DotNet.ReproducibleBuilds and DotNet.ReproducibleBuilds.Isolated packages! We've dusted off the cobwebs and worked through some infrastructure and permissions issues, and now have the ability to reliably release new versions of the packages again. This is due in no small part to the help of our brand new maintainer - welcome to @​MattKotsenas! He and I will be working together to develop a plan for this repo going forward, and I'm very excited to welcome him to the maintainer team.

This release has a few new features and one feature removal due to obsoletion.

Additions

  • Set the DisableImplicitLibraryPacks property to true to prevent using packages from the .NET SDK's built-in package sources. #​21 (Thanks @​cmeeren!)
  • Populate the RepositoryBranch property if other Repository Metadata has been requested to be made public. #​27 (Thanks @​kzu!)

Removals

  • No longer include the .NET Framework reference assembly packages, because the .NET SDK does this now. #​33 (Thanks @​MattKotsenas!)

Infrastructure

We have simplified the packaging of the repo to be more straightforward, using dotnet pack as expected these days.

Commits viewable in compare view.

Updated FluentAssertions from 6.12.0 to 8.7.1.

Release notes

Sourced from FluentAssertions's releases.

8.7.1

What's Changed

Others

Full Changelog: fluentassertions/fluentassertions@8.7.0...8.7.1

8.7.0

What's Changed

New features

Others

Full Changelog: fluentassertions/fluentassertions@8.6.0...8.7.0

8.6.0

What's Changed

Improvements

Others

New Contributors

Full Changelog: fluentassertions/fluentassertions@8.5.0...8.6.0

8.5.0

What's Changed

New features

Fixes

Others

Full Changelog: fluentassertions/fluentassertions@8.4.0...8.5.0

8.4.0

What's Changed

Improvements

Others

New Contributors

Full Changelog: fluentassertions/fluentassertions@8.3.0...8.4.0

8.3.0

What's Changed

Improvements

Others

Full Changelog: fluentassertions/fluentassertions@8.2.0...8.3.0

8.2.0

What's Changed

Improvements

Fixes

Others

Full Changelog: fluentassertions/fluentassertions@8.1.1...8.2.0

8.1.1

What's Changed

Fixes

Full Changelog: fluentassertions/fluentassertions@8.1.0...8.1.1

8.1.0

What's Changed

Improvements

Fixes

Documentation

Others

New Contributors

Full Changelog: fluentassertions/fluentassertions@8.0.1...8.1.0

8.0.1

What's Changed

Improvements

Others

Full Changelog: fluentassertions/fluentassertions@8.0.0...8.0.1

8.0.0

What's Changed

License change

Breaking Changes

New features

Improvements

8.0.0-rc.2

What's Changed

Fixes

Others

Full Changelog: fluentassertions/fluentassertions@8.0.0-rc.1...8.0.0-rc.2

8.0.0-rc.1

What's Changed

Breaking Changes

Fixes

Documentation

Others

8.0.0-alpha.1

What's Changed

Others

Full Changelog: fluentassertions/fluentassertions@7.0.0-alpha.6...8.0.0-alpha.1

7.2.0

What's Changed

Improvements

Fixes

Others

Full Changelog: fluentassertions/fluentassertions@7.1.0...7.2.0

7.1.0

What's Changed

Improvements

Others

Full Changelog: fluentassertions/fluentassertions@7.0.0...7.1.0

7.0.0

What's Changed

Breaking Changes

Fixes

Documentation

Others

New Contributors

Full Changelog: fluentassertions/fluentassertions@6.12.2...7.0.0

6.12.2

What's Changed

Others

Full Changelog: fluentassertions/fluentassertions@6.12.1...6.12.2

6.12.1

What's Changed

Improvements

  • Improve BeEmpty() and BeNullOrEmpty() performance for IEnumerable<T>, by materializing only the first item - #​2530

Fixes

  • Fixed formatting error when checking nullable DateTimeOffset with BeWithin(...).Before(...) - #​2312
  • BeEquivalentTo will now find and can map subject properties that are implemented through an explicitly-implemented interface - #​2152
  • Fixed that the because and becauseArgs were not passed down the equivalency tree - #​2318
  • BeEquivalentTo can again compare a non-generic IDictionary with a generic one - #​2358
  • Fixed that the FormattingOptions were not respected in inner AssertionScope - #​2329
  • Capitalize true and false in failure messages and make them formattable to a custom BooleanFormatter - #​2390, #​2393
  • Improved the failure message for NotBeOfType when wrapped in an AssertionScope and the subject is null - #​2399
  • Improved the failure message for BeWritable/BeReadable when wrapped in an AssertionScope and the subject is read-only/write-only - #​2399
  • Improved the failure message for ThrowExactly[Async] when wrapped in an AssertionScope and no exception is thrown - #​2398
  • Improved the failure message for [Not]HaveExplicitProperty when wrapped in an AssertionScope and not implementing the interface - #​2403
  • Improved the failure message for [Not]HaveExplicitMethod when wrapped in an AssertionScope and not implementing the interface - #​2403
  • Changed BeEquivalentTo to exclude private protected members from the comparison - #​2417
  • Fixed using BeEquivalentTo on an empty ArraySegment - #​2445, #​2511
  • BeEquivalentTo with a custom comparer can now handle null values - #​2489
  • Ensured that nested calls to AssertionScope(context) create a chained context - #​2607
  • One overload of the AssertionScope constructor would not create an actual scope associated with the thread - #​2607
  • Fixed ThrowWithinAsync not respecting OperationCanceledException - #​2614
  • Fixed using BeEquivalentTo with an IEqualityComparer targeting nullable types - #​2648

Full Changelog: fluentassertions/fluentassertions@6.12.0...6.12.1

Commits viewable in compare view.

Updated Microsoft.Bcl.AsyncInterfaces from 8.0.0 to 9.0.10.

Release notes

Sourced from Microsoft.Bcl.AsyncInterfaces's releases.

9.0.10

Release

What's Changed

Full Changelog: dotnet/runtime@v9.0.9...v9.0.10

9.0.9

Release

What's Changed

Full Changelog: dotnet/runtime@v9.0.8...v9.0.9

9.0.8

Release

What's Changed

Full Changelog: dotnet/runtime@v9.0.7...v9.0.8

9.0.7

Release

What's Changed

Description has been truncated

@dependabot dependabot bot added dependencies Pull requests that update a dependency file nuget Pull requests that update NuGet dependencies labels Oct 15, 2025
@jas88
Copy link
Owner

jas88 commented Oct 17, 2025

@dependabot rebase

@dependabot
deps: Bump the production-dependencies group with 11 updates
f4d9fd5 
Bumps BenchmarkDotNet from 0.13.12 to 0.15.4
Bumps DotNet.ReproducibleBuilds from 1.1.1 to 1.2.39
Bumps FluentAssertions from 6.12.0 to 8.7.1
Bumps Microsoft.Bcl.AsyncInterfaces from 8.0.0 to 9.0.10
Bumps Microsoft.Bcl.HashCode from 1.1.1 to 6.0.0
Bumps Microsoft.Build.NoTargets from 3.7.0 to 3.7.134
Bumps Microsoft.CodeAnalysis.Analyzers from 3.3.4 to 3.11.0
Bumps Microsoft.CodeAnalysis.CSharp from 4.4.0 to 4.14.0
Bumps System.Buffers from 4.5.1 to 4.6.1
Bumps System.Memory from 4.5.5 to 4.6.3
Bumps System.Runtime.CompilerServices.Unsafe from 6.0.0 to 6.1.2

---
updated-dependencies:
- dependency-name: BenchmarkDotNet
  dependency-version: 0.15.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: DotNet.ReproducibleBuilds
  dependency-version: 1.2.39
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: FluentAssertions
  dependency-version: 8.7.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: Microsoft.Bcl.AsyncInterfaces
  dependency-version: 9.0.10
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: Microsoft.Bcl.HashCode
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: Microsoft.Build.NoTargets
  dependency-version: 3.7.134
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: Microsoft.CodeAnalysis.Analyzers
  dependency-version: 3.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: Microsoft.CodeAnalysis.CSharp
  dependency-version: 4.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: System.Buffers
  dependency-version: 4.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: System.Memory
  dependency-version: 4.6.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: System.Runtime.CompilerServices.Unsafe
  dependency-version: 6.1.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/nuget/production-dependencies-95522f2d8e branch from 2a936a0 to f4d9fd5 Compare October 17, 2025 18:05
@dependabot Dependabot
Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 17, 2025

Looks like these dependencies are no longer updatable, so this is no longer needed.

@dependabot dependabot bot closed this Oct 17, 2025
@dependabot dependabot bot deleted the dependabot/nuget/production-dependencies-95522f2d8e branch October 17, 2025 18:05
@github-actions GitHub Actions
Copy link

⚠️ Deprecation Warning: The deny-licenses option is deprecated for possible removal in the next major release. For more information, see issue 997.

Dependency Review

The following issues were found:
  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 1 package(s) with unknown licenses.
See the Details below.

License Issues

tests/CsvHandler.Tests/CsvHandler.Tests.csproj

PackageVersionLicenseIssue Type
FluentAssertions8.7.1NullUnknown License
Denied Licenses: GPL-2.0, GPL-3.0, LGPL-2.0, LGPL-2.1, LGPL-3.0, AGPL-3.0

OpenSSF Scorecard

Scorecard details
PackageVersionScoreDetails
nuget/Microsoft.CodeAnalysis.Analyzers 3.11.0 🟢 3.8
Details
CheckScoreReason
Token-Permissions⚠️ -1No tokens found
Dangerous-Workflow⚠️ -1no workflows found
Packaging⚠️ -1packaging workflow not detected
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ -1no dependencies found
Maintained🟢 51 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 5
Code-Review⚠️ 0Found 0/1 approved changesets -- score normalized to 0
SAST⚠️ 0no SAST tool detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License⚠️ 0license file not detected
Vulnerabilities🟢 100 existing vulnerabilities detected
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ -1no releases found
Security-Policy⚠️ 0security policy file not detected
Branch-Protection⚠️ -1internal error: error during GetBranch(release/7.0.1xx): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration
nuget/Microsoft.CodeAnalysis.CSharp 4.14.0 🟢 6.2
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained🟢 1030 commit(s) and 20 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Vulnerabilities🟢 100 existing vulnerabilities detected
Binary-Artifacts⚠️ 0binaries present in source code
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Pinned-Dependencies🟢 8dependency not pinned by hash detected -- score normalized to 8
nuget/Microsoft.Bcl.AsyncInterfaces 9.0.10 🟢 5.6
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 30 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Code-Review🟢 10all changesets reviewed
License🟢 10license file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Branch-Protection🟢 5branch protection is not maximal on development and all release branches
Signed-Releases⚠️ -1no releases found
Fuzzing⚠️ 0project is not fuzzed
Binary-Artifacts⚠️ 0binaries present in source code
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Pinned-Dependencies⚠️ 2dependency not pinned by hash detected -- score normalized to 2
Vulnerabilities🟢 100 existing vulnerabilities detected
nuget/Microsoft.Bcl.HashCode 6.0.0 UnknownUnknown
nuget/System.Buffers 4.6.1 UnknownUnknown
nuget/System.Memory 4.6.3 UnknownUnknown
nuget/System.Runtime.CompilerServices.Unsafe 6.1.2 UnknownUnknown
nuget/BenchmarkDotNet 0.15.4 🟢 5.8
Details
CheckScoreReason
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Code-Review🟢 7Found 22/30 approved changesets -- score normalized to 7
Maintained🟢 1017 commit(s) and 18 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Vulnerabilities🟢 100 existing vulnerabilities detected
Binary-Artifacts🟢 9binaries present in source code
Pinned-Dependencies⚠️ 1dependency not pinned by hash detected -- score normalized to 1
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Security-Policy⚠️ 0security policy file not detected
Packaging🟢 10packaging workflow detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
nuget/FluentAssertions 8.7.1 🟢 4.7
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 9 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow⚠️ 0dangerous workflow patterns detected
Packaging⚠️ -1packaging workflow not detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Code-Review🟢 6Found 11/16 approved changesets -- score normalized to 6
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts🟢 10no binaries found in the repo
Security-Policy⚠️ 0security policy file not detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 9license file detected
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Vulnerabilities🟢 100 existing vulnerabilities detected
SAST🟢 10SAST tool detected
nuget/System.Memory 4.6.3 UnknownUnknown
nuget/System.Runtime.CompilerServices.Unsafe 6.1.2 UnknownUnknown

Scanned Files

  • src/CsvHandler.SourceGenerator/CsvHandler.SourceGenerator.csproj
  • src/CsvHandler/CsvHandler.csproj
  • tests/CsvHandler.Tests/CsvHandler.Tests.csproj

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

@jas88 jas88

Labels

dependencies Pull requests that update a dependency file nuget Pull requests that update NuGet dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@jas88