From c68d0b2b44285bd62d3e88eb7187467bf465a4d1 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 15 Jul 2026 16:34:49 +0000 Subject: [PATCH 1/2] Bump the nuget group with 9 updates Bumps FsCheck.Xunit.v3 from 3.3.2 to 3.3.3 Bumps Microsoft.Extensions.Http.Resilience from 10.2.0 to 10.8.0 Bumps Microsoft.Extensions.ServiceDiscovery from 10.2.0 to 10.8.0 Bumps Microsoft.VisualStudio.Threading.Analyzers from 17.14.15 to 18.7.23 Bumps OpenTelemetry.Exporter.OpenTelemetryProtocol from 1.15.3 to 1.16.0 Bumps OpenTelemetry.Extensions.Hosting from 1.15.3 to 1.16.0 Bumps OpenTelemetry.Instrumentation.AspNetCore from 1.15.2 to 1.16.0 Bumps OpenTelemetry.Instrumentation.Http from 1.15.1 to 1.16.0 Bumps OpenTelemetry.Instrumentation.Runtime from 1.15.1 to 1.16.0 --- updated-dependencies: - dependency-name: FsCheck.Xunit.v3 dependency-version: 3.3.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget - dependency-name: Microsoft.Extensions.Http.Resilience dependency-version: 10.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget - dependency-name: Microsoft.Extensions.ServiceDiscovery dependency-version: 10.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget - dependency-name: Microsoft.VisualStudio.Threading.Analyzers dependency-version: 18.7.23 dependency-type: direct:production update-type: version-update:semver-major dependency-group: nuget - dependency-name: OpenTelemetry.Exporter.OpenTelemetryProtocol dependency-version: 1.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget - dependency-name: OpenTelemetry.Extensions.Hosting dependency-version: 1.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget - dependency-name: OpenTelemetry.Instrumentation.AspNetCore dependency-version: 1.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget - dependency-name: OpenTelemetry.Instrumentation.Http dependency-version: 1.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget - dependency-name: OpenTelemetry.Instrumentation.Runtime dependency-version: 1.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget ... Signed-off-by: dependabot[bot] --- Directory.Packages.props | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) diff --git a/Directory.Packages.props b/Directory.Packages.props index 8125300..ee0eeed 100644 --- a/Directory.Packages.props +++ b/Directory.Packages.props @@ -24,22 +24,22 @@ - - - - - - - + + + + + + + - + - + From c2f126a4f7180007306eea9f38d74ad83e24d740 Mon Sep 17 00:00:00 2001 From: KaliCZ Date: Wed, 15 Jul 2026 22:28:09 +0200 Subject: [PATCH 2/2] Disable VSTHRD103: its by-name heuristic misfires on EF Core DbSet.Add MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Threading analyzers 18.x flag any sync call whose *Async twin exists. EF Core's DbSet.Add/AddRange are in-memory change tracking — the Async twins exist only for HiLo value generation — so the rule is noise here. Blocking waits stay covered by VSTHRD002, fire-and-forget by CS4014/VSTHRD110. Co-Authored-By: Claude Fable 5 --- .editorconfig | 3 +++ src/ProductReviews.AppHost/.editorconfig | 5 ++--- 2 files changed, 5 insertions(+), 3 deletions(-) diff --git a/.editorconfig b/.editorconfig index 377e9fd..cbd7fed 100644 --- a/.editorconfig +++ b/.editorconfig @@ -67,6 +67,9 @@ dotnet_diagnostic.CS4014.severity = error dotnet_diagnostic.VSTHRD110.severity = error # Don't force the Async suffix. dotnet_diagnostic.VSTHRD200.severity = none +# VSTHRD103 flags any sync call whose *Async twin exists — but EF Core's DbSet.Add/AddRange +# are in-memory change tracking (the Async twins exist only for HiLo value generation). +dotnet_diagnostic.VSTHRD103.severity = none # Pass CancellationToken when one is available. dotnet_diagnostic.CA2016.severity = error diff --git a/src/ProductReviews.AppHost/.editorconfig b/src/ProductReviews.AppHost/.editorconfig index 24240a0..b2143a4 100644 --- a/src/ProductReviews.AppHost/.editorconfig +++ b/src/ProductReviews.AppHost/.editorconfig @@ -1,7 +1,6 @@ # The AppHost's whole job is cross-resource orchestration: env callbacks await -# TaskCompletionSources produced elsewhere, and fire-and-forget provisioning logs to the -# console. The VSTHRD deadlock rules target JoinableTaskFactory contexts and misfire here. +# TaskCompletionSources produced elsewhere. The VSTHRD deadlock rules target +# JoinableTaskFactory contexts and misfire here. [*.cs] dotnet_diagnostic.VSTHRD002.severity = none dotnet_diagnostic.VSTHRD003.severity = none -dotnet_diagnostic.VSTHRD103.severity = none