Skip to content

Bump the nuget-root-patch-minor group with 4 updates#58

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/src/CodexSessionManager.App/nuget-root-patch-minor-e0712f3407
Closed

Bump the nuget-root-patch-minor group with 4 updates#58
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/src/CodexSessionManager.App/nuget-root-patch-minor-e0712f3407

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Apr 20, 2026

Copy link
Copy Markdown
Contributor

Updated CommunityToolkit.Mvvm from 8.3.2 to 8.4.2.

Release notes

Sourced from CommunityToolkit.Mvvm's releases.

8.4.2

What's Changed

Full Changelog: CommunityToolkit/dotnet@v8.4.1...v8.4.2

8.4.1

This release of the .NET Community Toolkit updates the MVVM Toolkit analyzers and source generator to Roslyn 5.0, so they can work with C# 14 out of the box. This means that [ObservableProperty] on partial properties no longer needs preview language version 🎉

What's Changed 🆕

New Contributors

Full Changelog: CommunityToolkit/dotnet@v8.4.0...v8.4.1

8.4.0

What's Changed 🆕

New Contributors

Full Changelog: CommunityToolkit/dotnet@v8.3.2...v8.4.0

8.4.0-preview3

What's Changed 🆕

New Contributors

Full Changelog: CommunityToolkit/dotnet@v8.3.2...v8.4.0-preview3

Commits viewable in compare view.

Updated coverlet.msbuild from 6.0.0 to 6.0.4.

Release notes

Sourced from coverlet.msbuild's releases.

6.0.4

Fixed

  • Fix empty coverage report when using include and exclude filters #​1726

Diff between 6.0.3 and 6.0.4

6.0.3

Fixed

Improvements

  • Cache the regex used in InstrumentationHelper #​1693
  • Enable dotnetTool integration tests for linux #​660

Diff between 6.0.2 and 6.0.3

6.0.2

Fixed

  • Threshold-stat triggers error #​1634
  • Fixed coverlet collector 6.0.1 requires dotnet sdk 8 #​1625
  • Type initializer errors after updating from 6.0.0 to 6.0.1 #​1629
  • Exception when multiple exclude-by-attribute filters specified #​1624

Improvements

  • More concise options to specify multiple parameters in coverlet.console #​1624

Diff between 6.0.1 and 6.0.2

6.0.1

Fixed

Improvements

Diff between 6.0.0 and 6.0.1

Commits viewable in compare view.

Updated Microsoft.Data.Sqlite from 10.0.5 to 10.0.6.

Release notes

Sourced from Microsoft.Data.Sqlite's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.3.0 to 18.4.0.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.4.0

What's Changed

New Contributors

Full Changelog: microsoft/vstest@v18.3.0...v18.4.0

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Summary by cubic

Upgrade core NuGet packages to improve MVVM tooling and test reliability. Adds C# 14-ready analyzers, fixes coverage reporting, and pulls in the latest SQLite patch.

  • Dependencies
    • CommunityToolkit.Mvvm: 8.3.2 → 8.4.2 — Roslyn 5.0/C# 14 support for analyzers and generators; miscellaneous fixes.
    • coverlet.msbuild: 6.0.0 → 6.0.4 — fixes empty reports with include/exclude filters and other stability improvements.
    • Microsoft.Data.Sqlite: 10.0.5 → 10.0.6 — patch update.
    • Microsoft.NET.Test.Sdk: 18.3.0 → 18.4.0 — fixes .NET 10 trait regression; adds LoongArch64 support.

Written for commit 2655db9. Summary will update on new commits.

Bumps CommunityToolkit.Mvvm from 8.3.2 to 8.4.2
Bumps coverlet.msbuild from 6.0.0 to 6.0.4
Bumps Microsoft.Data.Sqlite from 10.0.5 to 10.0.6
Bumps Microsoft.NET.Test.Sdk from 18.3.0 to 18.4.0

---
updated-dependencies:
- dependency-name: CommunityToolkit.Mvvm
  dependency-version: 8.4.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-root-patch-minor
- dependency-name: coverlet.msbuild
  dependency-version: 6.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-root-patch-minor
- dependency-name: coverlet.msbuild
  dependency-version: 6.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-root-patch-minor
- dependency-name: coverlet.msbuild
  dependency-version: 6.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-root-patch-minor
- dependency-name: Microsoft.Data.Sqlite
  dependency-version: 10.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-root-patch-minor
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-root-patch-minor
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-root-patch-minor
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-root-patch-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Apr 20, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: area:ci, type:chore. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Apr 20, 2026
@dependabot dependabot Bot requested a review from Prekzursil as a code owner April 20, 2026 21:56
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Apr 20, 2026
@codeant-ai

codeant-ai Bot commented Apr 20, 2026

Copy link
Copy Markdown

Skipping PR review because a bot author is detected.

If you want to trigger CodeAnt AI, comment @codeant-ai review to trigger a manual review.

@deepsource-io

deepsource-io Bot commented Apr 20, 2026

Copy link
Copy Markdown

DeepSource Code Review

We reviewed changes in 73b353c...2655db9 on this pull request. Below is the summary for the review, and you can see the individual issues we found as inline review comments.

See full review on DeepSource ↗

PR Report Card

Overall Grade   Security  

Reliability  

Complexity  

Hygiene  

Code Review Summary

Analyzer Status Updated (UTC) Details
Terraform Apr 20, 2026 9:56p.m. Review ↗
SQL Apr 20, 2026 9:56p.m. Review ↗
Rust Apr 20, 2026 9:56p.m. Review ↗
Shell Apr 20, 2026 9:56p.m. Review ↗
Ruby Apr 20, 2026 9:56p.m. Review ↗
PHP Apr 20, 2026 9:56p.m. Review ↗
Kotlin Apr 20, 2026 9:56p.m. Review ↗
Java Apr 20, 2026 9:56p.m. Review ↗
C & C++ Apr 20, 2026 9:56p.m. Review ↗
Go Apr 20, 2026 9:56p.m. Review ↗
Swift Apr 20, 2026 9:56p.m. Review ↗
Scala Apr 20, 2026 9:56p.m. Review ↗
Python Apr 20, 2026 9:56p.m. Review ↗
JavaScript Apr 20, 2026 9:56p.m. Review ↗
Docker Apr 20, 2026 9:56p.m. Review ↗
C# Apr 20, 2026 9:56p.m. Review ↗
Ansible Apr 20, 2026 9:56p.m. Review ↗
Secrets Apr 20, 2026 9:56p.m. Review ↗

Important

AI Review is run only on demand for your team. We're only showing results of static analysis review right now. To trigger AI Review, comment @deepsourcebot review on this thread.

@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedcommunitytoolkit.mvvm@​8.3.2 ⏵ 8.4.21001009010080
Updatedmicrosoft.data.sqlite@​10.0.5 ⏵ 10.0.610010090100100
Updatedmicrosoft.net.test.sdk@​18.3.0 ⏵ 18.4.010010090100100
Updatedcoverlet.msbuild@​6.0.0 ⏵ 6.0.4100 +64100100 +11100100

View full report

@codacy-production

Copy link
Copy Markdown

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

TIP This summary will be updated as you push new changes. Give us feedback

@cubic-dev-ai cubic-dev-ai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No issues found across 6 files

@dependabot @github

dependabot Bot commented on behalf of github Apr 27, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #59.

@dependabot dependabot Bot closed this Apr 27, 2026
@dependabot dependabot Bot deleted the dependabot/nuget/src/CodexSessionManager.App/nuget-root-patch-minor-e0712f3407 branch April 27, 2026 23:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants