Skip to content

chore(deps): update dependency microsoft.net.test.sdk to v18 - #136

Open
renovate[bot] wants to merge 1 commit into
previewfrom
renovate/major-vstest-monorepo
Open

renovate[bot] wants to merge 1 commit into
previewfrom
renovate/major-vstest-monorepo

Conversation

@renovate

@renovate renovate Bot commented Jul 11, 2026 •

Copy link
Copy Markdown
Contributor

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
Microsoft.NET.Test.Sdk 17.12.0 → 18.12.0 age confidence

Release Notes

microsoft/vstest (Microsoft.NET.Test.Sdk)

v18.12.0

Security fix

This release includes the fix for CVE-2026-105544, an elevation of privilege vulnerability in the VSTest artifact post-processor. The post-processor could consume a forged executionComplete.json written by another local user, and then run attacker-controlled output handling.

Affected: Microsoft.TestPlatform.CLI 18.11.0 and earlier. Every version from 18.11.1 on is fixed, including 18.12.0.

Microsoft.TestPlatform.CLI is the VSTest build that we ship into the .NET SDK. The recommended way to get this fix is to update your .NET SDK to the latest patched version, see the advisory for the SDK versions.

The fix is also released in the Microsoft.TestPlatform.CLI package, for completeness. That package is rarely used directly. It is not a dependency of Microsoft.NET.Test.Sdk or Microsoft.TestPlatform, so those packages do not bring it in.

Details: #​16654 and dotnet/announcements#517

Using custom Docker images or Nano Server? See #​16652

What's Changed

Full Changelog: microsoft/vstest@v18.11.0...v18.12.0

v18.11.1

Security fix

This release fixes CVE-2026-105544, an elevation of privilege vulnerability in the VSTest artifact post-processor. The post-processor could consume a forged executionComplete.json written by another local user, and then run attacker-controlled output handling.

Affected: Microsoft.TestPlatform.CLI 18.11.0.
Fixed in: Microsoft.TestPlatform.CLI 18.11.1.

Microsoft.TestPlatform.CLI is the VSTest build that we ship into the .NET SDK. The recommended way to get this fix is to update your .NET SDK to the latest patched version, see the advisory for the SDK versions.

The fix is also released in the Microsoft.TestPlatform.CLI package, for completeness. That package is rarely used directly. It is not a dependency of Microsoft.NET.Test.Sdk or Microsoft.TestPlatform, so those packages do not bring it in.

Details: #​16654 and dotnet/announcements#517

Using custom Docker images or Nano Server? See #​16652

What's Changed

  • Security fix for CVE-2026-105544, see #​16654
  • Ship Microsoft.Diagnostics.NETCore.Client in Microsoft.TestPlatform and Portable packages by @​nohwnd in #​16632
  • Fix localized resource paths in CLI source-build packages by @​nohwnd in #​16643

Full Changelog: microsoft/vstest@v18.11.0...v18.11.1

v18.11.0

What's Changed

New Contributors

Full Changelog: microsoft/vstest@v18.10.1...v18.11.0

v18.10.2

Security fix

This release fixes CVE-2026-105544, an elevation of privilege vulnerability in the VSTest artifact post-processor. The post-processor could consume a forged executionComplete.json written by another local user, and then run attacker-controlled output handling.

Affected: Microsoft.TestPlatform.CLI 18.10.0 and 18.10.1.
Fixed in: Microsoft.TestPlatform.CLI 18.10.2.

Microsoft.TestPlatform.CLI is the VSTest build that we ship into the .NET SDK. The recommended way to get this fix is to update your .NET SDK to the latest patched version, see the advisory for the SDK versions.

The fix is also released in the Microsoft.TestPlatform.CLI package, for completeness. That package is rarely used directly. It is not a dependency of Microsoft.NET.Test.Sdk or Microsoft.TestPlatform, so those packages do not bring it in.

Details: #​16654 and dotnet/announcements#517

Using custom Docker images or Nano Server? See #​16652

What's Changed
  • Security fix for CVE-2026-105544, see #​16654

Full Changelog: microsoft/vstest@v18.10.1...v18.10.2

v18.10.1

What's Changed

Full Changelog: microsoft/vstest@v18.10.0...v18.10.1

v18.10.0

What's Changed

Full Changelog: microsoft/vstest@v18.9.0...v18.10.0

v18.9.0

What's Changed
  • Fix tilde/exclamation characters corrupted in TerminalLogger test output by @​nohwnd in #​16046
  • Make TranslationLayer Native AOT-compatible by @​drewnoakes in #​16045
  • Guard GenerateProgramFile target against UseWinUI/UseUwpTools evaluation order by @​nohwnd in #​16072
  • Add RequestingAssembly to AssemblyResolveEventArgs for binary compat by @​nohwnd in #​16076
  • Remove stale Microsoft.Extensions.FileSystemGlobbing binding redirect from testhost.x86 and datacollector by @​Evangelink in #​16082
  • Fix TRX attachment paths when LogFileName contains a subdirectory by @​nohwnd in #​15791
  • Fix missing dumps for .NET Framework child processes in NetClientHangDumper by @​nohwnd in #​16098
  • Fix data collection channels to use negotiated protocol version instead of V1 by @​nohwnd in #​16096
  • Fix race condition in BlameCollector: skip hang dump when testhost hasn't launched yet by @​nohwnd in #​16065
  • Replace TestSDKAutoGeneratedCode with ExcludeFromCodeCoverage in auto-generated Program files by @​nohwnd in #​16101
  • Include testhost process path in crash error messages by @​nohwnd in #​16108
  • Fix DataDriven test results being double-counted in TRX logger totals by @​nohwnd in #​15766
  • Fix datacollector crash visibility: replace Assert with throwable exceptions by @​nohwnd in #​16048
  • Add TreatErrorMessagesAsWarnings parameter to TRX logger by @​nohwnd in #​16106
  • Wait for testhost stderr to drain before reading its crash output by @​nohwnd in #​16128
  • Handle runtimeconfig.dev.json without additionalProbingPaths by @​tmat in #​16166
  • Suggest Microsoft.NET.Test.Sdk when a managed test project brings no testhost by @​nohwnd in #​16169
  • Fix x86 testhost loading mismatched x64 hostfxr (0x800700C1) when run via vstest.console.exe directly (#​16151) by @​azat-msft in #​16156
  • Preserve the real exception (type + stack trace) when a test run aborts in BaseRunTests by @​nohwnd in #​16167
New Contributors

Full Changelog: microsoft/vstest@v18.8.0...v18.9.0

v18.8.1

What's Changed
  • Fix protocol negotiation timeout when STJ reflection is disabled (18.8.1) by @​nohwnd in #​16281

Full Changelog: microsoft/vstest@v18.8.0...v18.8.1

v18.8.0

What's Changed

Full Changelog: microsoft/vstest@v18.7.0...v18.8.0

v18.7.1

Security fix

This release fixes CVE-2026-105544, an elevation of privilege vulnerability in the VSTest artifact post-processor. The post-processor could consume a forged executionComplete.json written by another local user, and then run attacker-controlled output handling.

Affected: Microsoft.TestPlatform.CLI 18.7.0.
Fixed in: Microsoft.TestPlatform.CLI 18.7.1.

Microsoft.TestPlatform.CLI is the VSTest build that we ship into the .NET SDK. The recommended way to get this fix is to update your .NET SDK to the latest patched version, see the advisory for the SDK versions.

The fix is also released in the Microsoft.TestPlatform.CLI package, for completeness. That package is rarely used directly. It is not a dependency of Microsoft.NET.Test.Sdk or Microsoft.TestPlatform, so those packages do not bring it in.

Details: #​16654 and dotnet/announcements#517

Using custom Docker images or Nano Server? See #​16652

What's Changed
  • Security fix for CVE-2026-105544, see #​16654

Full Changelog: microsoft/vstest@v18.7.0...v18.7.1

v18.7.0

What's Changed

New Contributors

Full Changelog: microsoft/vstest@v18.6.0...v18.7.0

v18.6.0

What's Changed

Changes to tests and infra

Full Changelog: microsoft/vstest@v18.5.1...v18.6.0

v18.5.1

What's Changed

Full Changelog: microsoft/vstest@v18.5.0...v18.5.1

v18.5.0

⚠️ Unlisted on Nuget, because of #​15718

What's Changed

Full Changelog: microsoft/vstest@v18.4.0...v18.5.0

v18.4.0

What's Changed

New Contributors

Full Changelog: microsoft/vstest@v18.3.0...v18.4.0

v18.3.0

What's Changed

Internal fixes and updates

New Contributors

v18.0.2

Security fix

This release fixes CVE-2026-105544, an elevation of privilege vulnerability in the VSTest artifact post-processor. The post-processor could consume a forged executionComplete.json written by another local user, and then run attacker-controlled output handling.

Affected: Microsoft.TestPlatform.CLI 18.0.0 and 18.0.1.
Fixed in: Microsoft.TestPlatform.CLI 18.0.2.

Microsoft.TestPlatform.CLI is the VSTest build that we ship into the .NET SDK. The recommended way to get this fix is to update your .NET SDK to the latest patched version, see the advisory for the SDK versions.

The fix is also released in the Microsoft.TestPlatform.CLI package, for completeness. That package is rarely used directly. It is not a dependency of Microsoft.NET.Test.Sdk or Microsoft.TestPlatform, so those packages do not bring it in.

Details: #​16654 and dotnet/announcements#517

Using custom Docker images or Nano Server? See [#​16652](https://redirect.git

[!IMPORTANT]
✂ PR body was truncated to here.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot requested a review from KinsonDigitalAdmin July 11, 2026 11:06
@github-project-automation github-project-automation Bot moved this to Backlog in KD-Team Jul 11, 2026
@renovate
renovate Bot force-pushed the renovate/major-vstest-monorepo branch 2 times, most recently from df91e3c to 68261fb Compare July 14, 2026 14:57
@renovate
renovate Bot force-pushed the renovate/major-vstest-monorepo branch from 68261fb to 8682976 Compare August 14, 2026 22:53
@renovate renovate Bot changed the title chore(deps): update dependency microsoft.net.test.sdk to v18 chore(deps): update dependency microsoft.net.test.sdk to v18 - autoclosed Sep 6, 2026
@renovate renovate Bot closed this Sep 6, 2026
@github-project-automation github-project-automation Bot moved this from Backlog to Done in KD-Team Sep 6, 2026
@renovate
renovate Bot deleted the renovate/major-vstest-monorepo branch September 6, 2026 04:37
@renovate renovate Bot changed the title chore(deps): update dependency microsoft.net.test.sdk to v18 - autoclosed chore(deps): update dependency microsoft.net.test.sdk to v18 Sep 7, 2026
@renovate renovate Bot reopened this Sep 7, 2026
@renovate
renovate Bot force-pushed the renovate/major-vstest-monorepo branch from 6f96641 to 8682976 Compare September 7, 2026 21:50
@github-project-automation github-project-automation Bot moved this from Done to In Progress in KD-Team Sep 7, 2026
@renovate
renovate Bot force-pushed the renovate/major-vstest-monorepo branch 2 times, most recently from 6f96641 to 84a6578 Compare September 9, 2026 17:48
@renovate
renovate Bot force-pushed the renovate/major-vstest-monorepo branch from 84a6578 to 2399644 Compare September 15, 2026 16:17
@renovate
renovate Bot force-pushed the renovate/major-vstest-monorepo branch from 2399644 to 2eecc28 Compare October 13, 2026 17:03
@renovate
renovate Bot force-pushed the renovate/major-vstest-monorepo branch from 2eecc28 to 78d814f Compare November 11, 2026 00:49
| datasource | package                | from    | to      |
| ---------- | ---------------------- | ------- | ------- |
| nuget      | Microsoft.NET.Test.Sdk | 17.12.0 | 18.12.0 |
@renovate
renovate Bot force-pushed the renovate/major-vstest-monorepo branch from 78d814f to ec0779b Compare November 11, 2026 20:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

Status: In Progress

Development

Successfully merging this pull request may close these issues.

0 participants