Skip to content

chore(deps): update all non-major dependencies - #481

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch
Open

chore(deps): update all non-major dependencies#481
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch

Conversation

@renovate

@renovate renovate Bot commented Aug 21, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update
MSTest 4.3.3 → 4.5.3 age confidence nuget patch
Microsoft.NET.Test.Sdk 17.14.1 → 17.14.2 age confidence nuget patch
actions/download-artifact v8.0.1 → v8.0.2 age confidence action patch
actions/upload-artifact v7.0.1 → v7.0.2 age confidence action patch
codecov/codecov-action v7.0.0 → v7.1.1 age confidence action minor
csharpier 1.3.0 → 1.4.0 age confidence nuget minor
dotnet-reportgenerator-globaltool 5.5.11 → 5.6.0 age confidence nuget minor
github/codeql-action v4.37.7 → v4.39.3 age confidence action minor
hk 1.56.0 → 1.58.1 age confidence tools minor
jdx/mise-action v4.2.5 → v4.3.0 age confidence action minor
verify.tool 0.8.0 → 0.9.2 age confidence nuget minor
zizmor 1.29.0 → 1.32.0 age confidence tools minor

Release Notes

microsoft/testfx (MSTest)

v4.5.3

See MSTest 4.5.3 release notes here.

See Microsoft.Testing.Platform (MTP) 2.5.3 release notes here.

v4.5.2

See MSTest release notes here.

See Microsoft.Testing.Platform (MTP) release notes here.

actions/download-artifact

v8.0.2

Compare Source

What's Changed

New Contributors

Full Changelog: actions/download-artifact@v8.0.1...v8.0.2

actions/upload-artifact

v7.0.2

Compare Source

What's Changed

  • Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.
  • Updates @​actions/artifact to v6.3.1.

New Contributors

Full Changelog: actions/upload-artifact@v7.0.1...v7.0.2

codecov/codecov-action

v7.1.1

Compare Source

What's Changed

Full Changelog: codecov/codecov-action@v7.1.0...v7.1.1

v7.1.0

Compare Source

What's Changed

Full Changelog: codecov/codecov-action@v7.0.0...v7.1.0

belav/csharpier (csharpier)

v1.4.0

Compare Source

Breaking Changes

Drop support for net8.0 and net9.0 #​1888

CSharpier and CSharpier.MsBuild now target net10.0 and net11.0. CSharpier.Core targets net10.0, net11.0 and netstandard2.0.

What's Changed

Feature: Support for .NET 11 and C# 15 #​1888

CSharpier now supports the new syntax in C# 15.

public union Pet(Cat, Dog, Bird);

public closed record GateState;

HashSet<string> set = [with(StringComparer.OrdinalIgnoreCase), "Hello", "HELLO", "hello"];

outer:
for (int row = 0; row < grid.Height; row++)
{
    for (int column = 0; column < grid.Width; column++)
    {
        if (grid[row, column].IsBlocked)
        {
            continue outer;
        }

        if (grid[row, column].IsGoal)
        {
            break outer;
        }
    }
}
Feature: Avoid chopping single trailing lambda #​1865

When the last argument is a lambda with a block body, and the arguments up to and including the => fit on one line, CSharpier now keeps them on the same line as the method name.

// input & expected output
logging.AddFile(Path.Combine(AppDomain.CurrentDomain.BaseDirectory, "server{0}.log"), o =>
{
    o.MaxRollingFiles = 1;
});

// 1.3.0
logging.AddFile(
    Path.Combine(AppDomain.CurrentDomain.BaseDirectory, "server{0}.log"),
    o =>
    {
        o.MaxRollingFiles = 1;
    }
);
Feature: Keep the left side of a null-coalescing operator on the same line as the variable #​1913

When an assignment or return containing ?? is too long, CSharpier now keeps the left value on the same line as the variable instead of breaking after the =.

// input & expected output
string baz = "qux"
    ?? throw new InvalidOperationException(
        "Lorem ipsum dolor sit amet, consectetur adipiscing elit. Maecenas ultricies eros turpis. Cras diam libero, interdum id elementum ut, interdum sed justo."
    );

var confirmEmailUrl = linkGenerator.GetUriByName(
    context,
    confirmEmailEndpointName,
    routeValues____________________
) ?? fallback;

// 1.3.0
string baz =
    "qux"
    ?? throw new InvalidOperationException(
        "Lorem ipsum dolor sit amet, consectetur adipiscing elit. Maecenas ultricies eros turpis. Cras diam libero, interdum id elementum ut, interdum sed justo."
    );

var confirmEmailUrl =
    linkGenerator.GetUriByName(context, confirmEmailEndpointName, routeValues____________________)
    ?? fallback;
Feature: Support csharpier-ignore ranges in using directives #​1856

Using directives within a csharpier-ignore-start and csharpier-ignore-end range are no longer sorted or formatted.

// input
using D;
using C;

// csharpier-ignore-start

using B;

using A;

// csharpier-ignore-end

// expected output
using C;
using D;

// csharpier-ignore-start

using B;

using A;

// csharpier-ignore-end

// 1.3.0
using A;
// csharpier-ignore-start

using B;
using C;
using D;

// csharpier-ignore-end
Feature: Improve performance of CLI when passing in files/folders #​1893

CSharpier now resolves ignore files and configuration files once per run instead of once for each path passed to it. This speeds up tools such as pre-commit hooks that pass a list of staged files.

# check every .cs file in the CSharpier repo passed as a list of files
dotnet csharpier check "@filelist.txt"

# 1.3.0 - about 60s

# 1.4.0 - about 1.7s
Fix: False formatting validation failure with inconsistent whitespace in using directives #​1929

CSharpier reported Failed formatting validation when a using directive contained extra whitespace.

// input
using System;
using  System.Diagnostics;
class C {}

// expected output
using System;
using System.Diagnostics;

class C { }
Fix: Blank lines removed from csharpier-ignore methods that have attributes #​1925

CSharpier was removing blank lines within a method that had an attribute and a csharpier-ignore comment.

// input & expected output
public class ClassName
{
    [SomeAttribute]
    // csharpier-ignore
    public void SomeMethodWithLines()
    {
        var someVariable = someLongValue____________________________________________ + someLongValue____________________________________________;

        return;
    }
}

// 1.3.0
public class ClassName
{
    [SomeAttribute]
    // csharpier-ignore
    public void SomeMethodWithLines()
    {
        var someVariable = someLongValue____________________________________________ + someLongValue____________________________________________;
        return;
    }
}
Fix: Leading comment causes short invocation chain to break #​1921
// input & expected output
// some comment
((int)Value.One).Should().Be(1);

// 1.3.0
// some comment
((int)Value.One)
    .Should()
    .Be(1);
Fix: Leading comment causes with expression to break #​1882
// input & expected output
// some comment
someRecord = someRecord with { Property = "Value" };

// 1.3.0
// some comment
someRecord = someRecord with
{
    Property = "Value",
};
Fix: XmlFormatter fails under Native AOT #​1920

XmlFormatter always serialized the AST, which uses reflection based JSON serialization. This threw an InvalidOperationException when CSharpier.Core was used in a Native AOT application. The AST is now only serialized when IncludeAST is set, the same as CSharpFormatter.

// threw an InvalidOperationException in 1.3.0 when published with <PublishAot>true</PublishAot>
Console.WriteLine(XmlFormatter.Format("<a><b/></a>").Code);
Fix: XAML formatting inserts a line break between adjacent inline elements #​1912

CSharpier no longer inserts a new line between adjacent elements unless there is already whitespace between them. Inserting whitespace changes the rendered text for elements such as a xaml TextBlock.

<!-- input -->
<TextBlock><Run>Sub</Run><Run>total</Run></TextBlock>
<TextBlock>
  <Run>Sub</Run><Run>total</Run>
</TextBlock>

<!-- expected output -->
<TextBlock><Run>Sub</Run><Run>total</Run></TextBlock>
<TextBlock><Run>Sub</Run><Run>total</Run></TextBlock>

<!-- 1.3.0 -->
<TextBlock>
  <Run>Sub</Run>
  <Run>total</Run>
</TextBlock>
<TextBlock>
  <Run>Sub</Run>
  <Run>total</Run>
</TextBlock>

CSharpier also respects xml:space="preserve" when using ignore whitespace handling. See details

Fix: Blank line after #endif is removed and then added back on the next run #​1908

CSharpier was removing the blank line after an #endif that ended with an active member, and adding it back on the next format.

// input
class ClassName
{

#if SYMBOL
#else
    void MethodName1() { }

#endif
    void MethodName2() { }
}

// expected output
class ClassName
{

#if SYMBOL
#else
    void MethodName1() { }

#endif

    void MethodName2() { }
}

// 1.3.0
class ClassName
{

#if SYMBOL
#else
    void MethodName1() { }

#endif
    void MethodName2() { }
}
Fix: Xml formatter inserts a blank line before a closing tag when the last children are a comment and text #​1905
<!-- input & expected output -->
<NoWarn>
  <!-- comment -->
  CS1234;
</NoWarn>

<!-- 1.3.0 -->
<NoWarn>
  <!-- comment -->
  CS1234;

</NoWarn>
Fix: Error when .gitignore contains the macOS Icon[\r] pattern #​1887

The pattern used to ignore the Icon\r files that macOS creates in folders could not be parsed and caused CSharpier to fail. CSharpier now skips that line when reading a .gitignore.


# .gitignore where [\r] is a literal carriage return
Bin
Icon[\r]
Obj
Fix: dotnet csharpier fails when CSharpier is installed globally #​1883

The documentation has been updated to explain that a global install is run with csharpier instead of dotnet csharpier. This is a limitation of how dotnet runs global tools, see dotnet/sdk#14626.

dotnet tool install -g csharpier
csharpier --version

Full Changelog: belav/csharpier@1.3.0...1.4.0

danielpalme/ReportGenerator (dotnet-reportgenerator-globaltool)

v5.6.0: ReportGenerator_5.6.0

Compare Source

Changes:

This release requires .NET Framework 4.7 or .NET 8.0/9.0/10.0/11.0

v5.5.12: ReportGenerator_5.5.12

Compare Source

Changes:

This release requires .NET Framework 4.7 or .NET 8.0/9.0/10.0

github/codeql-action

v4.39.3

Compare Source

  • Fixed diff-informed alert filtering incorrectly removing alerts in changed files whose paths contain spaces, special characters, or non-ASCII characters. #​4283

v4.39.2

Compare Source

  • Update default CodeQL bundle version to 2.27.4. #​4284
  • Upcoming breaking change: CodeQL version 2.22.3 and earlier were discontinued on 16 October 2026 alongside GitHub Enterprise Server 3.18, and will be unsupported by the next minor release of the CodeQL Action. Added a deprecation warning for customers using these versions of CodeQL. #​4266
  • Starting with macOS 27 and Xcode 27, traced analyses are unsupported. See this blog post for more information. The CodeQL Action will now try to identify if a workflow is about to perform a traced analysis on version 27 or above of macOS or Xcode. If so, the CodeQL Action will emit a corresponding warning that will also be visible on the Tool Status Page. This check will be rolled out following this release of the CodeQL Action. #​4221
  • The undocumented TRAP cache cleanup feature that could be enabled using the CODEQL_ACTION_CLEANUP_TRAP_CACHES environment variable has been removed, as announced in the release notes for CodeQL Action 4.35.2. The analyze Action now warns if this environment variable is set. If you used TRAP cache cleanup to limit Actions cache usage, we recommend disabling TRAP caching by passing the trap-caching: false input to the init Action. #​4243

v4.39.1

Compare Source

v4.39.0

Compare Source

  • Breaking change: Bump the minimum required CodeQL bundle version to 2.20.7. #​4205
  • The codeql-action/analyze step now validates that a correct argument for the checkout_path input has been provided. The checkout_path input must be set to the path where the repository that is being analyzed is checked out at on the runner, if that path is something other than the workspace root. If the path does not point to a repository checkout or is different from the path that was used by codeql-action/init, then the CodeQL Action now produces a warning. #​4148
  • Resolved an issue with third-party caching implementations that prevented caches from being restored correctly. #​4206
  • The codeql-action/start-proxy step that is used in Code Scanning Default Setup now finds CodeQL releases using the same logic as codeql-action/init. This primarily benefits customers who are using GitHub instances other than github.com where the codeql-action/start-proxy step may previously have been unable to locate recent releases and ended up using outdated versions of the private registry authentication proxy as a result. #​4198

v4.38.3

Compare Source

  • Upcoming breaking change: CodeQL version 2.21.2 and earlier were discontinued on 24 September 2026 alongside GitHub Enterprise Server 3.17, and will be unsupported by the next minor release of the CodeQL Action. Added a deprecation warning for customers using these versions of CodeQL. #​4188
  • Update default CodeQL bundle version to 2.27.2. #​4203
  • Fixed a bug where the decision of whether to use a per-language bundle did not account for custom configurations that reference queries outside of compiled CodeQL packs. This issue was caught during internal testing and did not affect any customer repositories. We will resume the roll out of per-language bundles in the coming weeks. #​4184

v4.38.2

Compare Source

v4.38.1

Compare Source

  • The CodeQL Action now has experimental support for CodeQL releases for which per-language bundles are available. Per-language bundles support analysis for a single language and are therefore smaller than the combined bundles that allow analysis for all supported languages. As a result, per-language bundles take up less space on disk and are faster to download. We expect to roll this change out to everyone in the coming weeks. #​4146

v4.38.0

Compare Source

  • On GitHub-hosted runners, the CodeQL Action now deletes unused CodeQL bundles from the toolcache before downloading a different bundle, which frees up disk space for the analysis. We expect to roll this change out to everyone in September. #​4124
  • The CodeQL Action now supports CodeQL releases that are compatible with Linux Arm64 and downloads the native linux-arm64 CodeQL bundle when available. #​4072
  • Update default CodeQL bundle version to 2.27.0. #​4129

v4.37.9

Compare Source

v4.37.8

Compare Source

No user facing changes.

jdx/hk (hk)

v1.58.1

Compare Source

📚 Documentation
🔍 Other Changes

v1.58.0

Compare Source

🚀 Features
🐛 Bug Fixes
📚 Documentation
⚡ Performance
🎨 Styling
🧪 Testing
🛡️ Security
🔍 Other Changes
📦️ Dependency Updates
New Contributors

v1.57.0

Compare Source

🚀 Features
🐛 Bug Fixes
📚 Documentation
🛡️ Security
🔍 Other Changes
📦️ Dependency Updates
New Contributors

v1.56.1

Compare Source

🚜 Refactor
📚 Documentation
📦️ Dependency Updates
jdx/mise-action

v4.3.0: : Install age-filtered mise releases

Compare Source

A small release that adds an opt-in way to hold back from installing brand-new mise releases.

Added
minimum_release_age input (#​604 by @​jdx)

When version is omitted, you can now set minimum_release_age to install the newest stable, non-draft mise release that is older than a given cutoff — a simple way to avoid picking up a mise release the moment it ships (closes #​603).

- uses: jdx/mise-action@v4
  with:
    minimum_release_age: 7d

It accepts relative durations (24h, 7d, 6mo, 1y) as well as absolute ISO dates and timestamps. Age-filtered versions are resolved from the GitHub Releases API (the CDN only serves the latest binary) and downloaded by their exact version. If mise is already present on disk, an age-filtered run updates it to the resolved version rather than keeping the existing binary. An explicit version always takes precedence over minimum_release_age, and invalid dates fail fast.

Full Changelog: jdx/mise-action@v4.2.5...v4.3.0

patriksvensson/verify.terminal (verify.tool)

v0.9.2

Compare Source

v0.9.1

Compare Source

v0.9.0

Compare Source

zizmorcore/zizmor (zizmor)

v1.32.0

Compare Source

Sponsorship is appreciated!

New Features 🌈🔗

  • zizmor now has experimental support for GitHub Actions workflow lockfiles. Please see the limitations documentation for more information about the current implementation and its limitations (#​2463)

Enhancements 🌱🔗

  • zizmor's input collection is now "root-aware" by default, meaning that invocations like zizmor . will no longer collect inputs unless they would actually be used by GitHub Actions, etc. This should eliminate spurious findings from (e.g.) workflow definitions in vendored directories. See the input collection documentation for more information. (#​2454)

  • zizmor's LSP now honors the didChangeWorkspaceFolders event (#​2461)

  • zizmor's LSP now audits pre-commit inputs (#​2485)

  • zizmor now provides Windows ARM64 wheels on PyPI (#​2424)

    Many thanks to @​ndabas for proposing and implementing this improvement!

Bug Fixes 🐛🔗

  • Fixed a bug where the bot-conditions audit did not properly flag if: condition of jobs that call a reusable workflow (#​2457)

  • Fixed a bug where the obfuscation audit would incorrectly flag (and suggest an incorrect auto-fix for) expressions that constant-reduce to other expressions (#​2483)

  • Fixed a bug where the template-injection audit did not flag attacker-controllable contexts wrapped in fromJSON(...), such as fromJSON(toJSON(github.event.issue.title)) (#​2495)

  • Fixed a bug where the template-injection audit did not flag attacker-controllable contexts in the values of case(...), such as case(cond, github.event.issue.title, 'x') ([#​2504](https://redirect.github.

[!IMPORTANT]
✂ PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@codecov-commenter

codecov-commenter commented Aug 21, 2026 •
edited
Loading

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 86.55%. Comparing base (f439e0d) to head (441b7ee).

Additional details and impacted files 
@@           Coverage Diff           @@
##             main     #481   +/-   ##
=======================================
  Coverage   86.55%   86.55%           
=======================================
  Files         261      261           
  Lines       12648    12648           
  Branches     1236     1236           
=======================================
  Hits        10947    10947           
  Misses       1359     1359           
  Partials      342      342

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@renovate renovate Bot changed the title chore(deps): update github/codeql-action action to v4.37.8 chore(deps): update github/codeql-action action to v4.37.9 Aug 26, 2026
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 0f953f3 to dfbdeed Compare August 27, 2026 00:39
@renovate renovate Bot changed the title chore(deps): update github/codeql-action action to v4.37.9 chore(deps): update all non-major dependencies Aug 27, 2026
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 14 times, most recently from 3372261 to c247113 Compare September 3, 2026 01:04
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 8 times, most recently from 3e3ec13 to 9e33cb9 Compare September 9, 2026 19:32
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 1f4c3c2 to 91f7d91 Compare September 15, 2026 02:21
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from 5e21f42 to 9aceb8f Compare September 25, 2026 13:11
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 13 times, most recently from eb7bc66 to 2c95717 Compare October 12, 2026 14:50
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from 13a5ce1 to 5943940 Compare October 21, 2026 18:25
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from b12ddf5 to 2339921 Compare October 30, 2026 07:57
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from f34e7f0 to 1448416 Compare November 4, 2026 19:18
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from bf0747d to dc33b1b Compare November 11, 2026 03:29
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from dc33b1b to 441b7ee Compare November 11, 2026 21:59

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@codecov-commenter