From dc23ac8b5afe300378e203d3fdcf1eadf2fcba68 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 20 Apr 2026 08:05:01 +0000
Subject: [PATCH] Bump the nuget-dependencies group with 5 updates

Bumps coverlet.collector from 8.0.1 to 10.0.0
Bumps demaconsulting.sarifmark from 1.3.0 to 1.3.2
Bumps Microsoft.CodeAnalysis.NetAnalyzers from 10.0.201 to 10.0.202
Bumps Microsoft.Extensions.FileSystemGlobbing from 10.0.5 to 10.0.6
Bumps Microsoft.SourceLink.GitHub from 10.0.201 to 10.0.202

---
updated-dependencies:
- dependency-name: coverlet.collector
  dependency-version: 10.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-dependencies
- dependency-name: demaconsulting.sarifmark
  dependency-version: 1.3.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-dependencies
- dependency-name: Microsoft.CodeAnalysis.NetAnalyzers
  dependency-version: 10.0.202
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-dependencies
- dependency-name: Microsoft.CodeAnalysis.NetAnalyzers
  dependency-version: 10.0.202
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-dependencies
- dependency-name: Microsoft.Extensions.FileSystemGlobbing
  dependency-version: 10.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-dependencies
- dependency-name: Microsoft.SourceLink.GitHub
  dependency-version: 10.0.202
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .config/dotnet-tools.json                                   | 2 +-
 .../DemaConsulting.ReviewMark.csproj                        | 6 +++---
 .../DemaConsulting.ReviewMark.Tests.csproj                  | 4 ++--
 3 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/.config/dotnet-tools.json b/.config/dotnet-tools.json
index 00e3dfa..3c19818 100644
--- a/.config/dotnet-tools.json
+++ b/.config/dotnet-tools.json
@@ -21,7 +21,7 @@
       ]
     },
     "demaconsulting.sarifmark": {
-      "version": "1.3.0",
+      "version": "1.3.2",
       "commands": [
         "sarifmark"
       ]
diff --git a/src/DemaConsulting.ReviewMark/DemaConsulting.ReviewMark.csproj b/src/DemaConsulting.ReviewMark/DemaConsulting.ReviewMark.csproj
index 4102603..da9f504 100644
--- a/src/DemaConsulting.ReviewMark/DemaConsulting.ReviewMark.csproj
+++ b/src/DemaConsulting.ReviewMark/DemaConsulting.ReviewMark.csproj
@@ -51,13 +51,13 @@
     <PackageReference Include="DemaConsulting.TestResults" Version="1.7.0" />
     <PackageReference Include="PDFsharp" Version="6.2.4" />
     <PackageReference Include="YamlDotNet" Version="17.0.1" />
-    <PackageReference Include="Microsoft.Extensions.FileSystemGlobbing" Version="10.0.5" />
+    <PackageReference Include="Microsoft.Extensions.FileSystemGlobbing" Version="10.0.6" />
   </ItemGroup>
 
   <!-- Build Tool Dependencies -->
   <ItemGroup>
     <PackageReference Include="Microsoft.Sbom.Targets" Version="4.1.5" PrivateAssets="All" />
-    <PackageReference Include="Microsoft.SourceLink.GitHub" Version="10.0.201" PrivateAssets="All" />
+    <PackageReference Include="Microsoft.SourceLink.GitHub" Version="10.0.202" PrivateAssets="All" />
     <PackageReference Include="Polyfill" Version="10.3.0" PrivateAssets="All" />
   </ItemGroup>
 
@@ -68,7 +68,7 @@
            in packages that consume this tool.
          - IncludeAssets lists all asset types (including 'analyzers' and 'buildtransitive') to ensure
            Roslyn analyzers and MSBuild targets are fully activated during the build. -->
-    <PackageReference Include="Microsoft.CodeAnalysis.NetAnalyzers" Version="10.0.201">
+    <PackageReference Include="Microsoft.CodeAnalysis.NetAnalyzers" Version="10.0.202">
       <PrivateAssets>all</PrivateAssets>
       <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
     </PackageReference>
diff --git a/test/DemaConsulting.ReviewMark.Tests/DemaConsulting.ReviewMark.Tests.csproj b/test/DemaConsulting.ReviewMark.Tests/DemaConsulting.ReviewMark.Tests.csproj
index 872747d..99c5219 100644
--- a/test/DemaConsulting.ReviewMark.Tests/DemaConsulting.ReviewMark.Tests.csproj
+++ b/test/DemaConsulting.ReviewMark.Tests/DemaConsulting.ReviewMark.Tests.csproj
@@ -29,7 +29,7 @@
          - PrivateAssets="all" keeps this test-coverage tool out of any consuming project's dependencies.
          - IncludeAssets lists all asset types (including 'build' and 'buildtransitive') to ensure the
            data collector MSBuild targets are activated so coverage is collected during test runs. -->
-    <PackageReference Include="coverlet.collector" Version="8.0.1">
+    <PackageReference Include="coverlet.collector" Version="10.0.0">
       <PrivateAssets>all</PrivateAssets>
       <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
     </PackageReference>
@@ -46,7 +46,7 @@
            in any project that references this test project.
          - IncludeAssets lists all asset types (including 'analyzers' and 'buildtransitive') to ensure
            Roslyn analyzers and MSBuild targets are fully activated during the build. -->
-    <PackageReference Include="Microsoft.CodeAnalysis.NetAnalyzers" Version="10.0.201">
+    <PackageReference Include="Microsoft.CodeAnalysis.NetAnalyzers" Version="10.0.202">
       <PrivateAssets>all</PrivateAssets>
       <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
     </PackageReference>