feat(scripting): .NET file-based apps, .csx and .fsx support (#188) + CI pipeline split - #189
Merged
Conversation
Bumps the github-actions group with 2 updates: [actions/checkout](https://github.com/actions/checkout) and [taiki-e/install-action](https://github.com/taiki-e/install-action). Updates `actions/checkout` from 6.0.3 to 7.0.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/checkout/releases">actions/checkout's releases</a>.</em></p> <blockquote> <h2>v7.0.0</h2> <h2>What's Changed</h2> <ul> <li>block checking out fork pr for pull_request_target and workflow_run by <a href="https://github.com/aiqiaoy"><code>@aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2454">actions/checkout#2454</a></li> <li>Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2458">actions/checkout#2458</a></li> <li>Bump flatted from 3.3.1 to 3.4.2 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2460">actions/checkout#2460</a></li> <li>Bump js-yaml from 4.1.0 to 4.2.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2461">actions/checkout#2461</a></li> <li>Bump <code>@actions/core</code> and <code>@actions/tool-cache</code> and Remove uuid by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2459">actions/checkout#2459</a></li> <li>upgrade module to esm and update dependencies by <a href="https://github.com/aiqiaoy"><code>@aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2463">actions/checkout#2463</a></li> <li>Bump the minor-npm-dependencies group across 1 directory with 3 updates by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2462">actions/checkout#2462</a></li> <li>getting ready for checkout v7 release by <a href="https://github.com/aiqiaoy"><code>@aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2464">actions/checkout#2464</a></li> <li>update error wording by <a href="https://github.com/aiqiaoy"><code>@aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2467">actions/checkout#2467</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/aiqiaoy"><code>@aiqiaoy</code></a> made their first contribution in <a href="https://redirect.github.com/actions/checkout/pull/2454">actions/checkout#2454</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/checkout/compare/v6.0.3...v7.0.0">https://github.com/actions/checkout/compare/v6.0.3...v7.0.0</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/actions/checkout/blob/main/CHANGELOG.md">actions/checkout's changelog</a>.</em></p> <blockquote> <h1>Changelog</h1> <h2>v7.0.0</h2> <ul> <li>Block checking out fork PR for pull_request_target and workflow_run by <a href="https://github.com/aiqiaoy"><code>@aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2454">actions/checkout#2454</a></li> <li>Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2458">actions/checkout#2458</a></li> <li>Bump flatted from 3.3.1 to 3.4.2 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2460">actions/checkout#2460</a></li> <li>Bump js-yaml from 4.1.0 to 4.2.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2461">actions/checkout#2461</a></li> <li>Bump <code>@actions/core</code> and <code>@actions/tool-cache</code> and Remove uuid by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2459">actions/checkout#2459</a></li> <li>upgrade module to esm and update dependencies by <a href="https://github.com/aiqiaoy"><code>@aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2463">actions/checkout#2463</a></li> <li>Bump the minor-npm-dependencies group across 1 directory with 3 updates by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2462">actions/checkout#2462</a></li> </ul> <h2>v6.0.3</h2> <ul> <li>Fix checkout init for SHA-256 repositories by <a href="https://github.com/yaananth"><code>@yaananth</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2439">actions/checkout#2439</a></li> <li>fix: expand merge commit SHA regex and add SHA-256 test cases by <a href="https://github.com/yaananth"><code>@yaananth</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2414">actions/checkout#2414</a></li> </ul> <h2>v6.0.2</h2> <ul> <li>Fix tag handling: preserve annotations and explicit fetch-tags by <a href="https://github.com/ericsciple"><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2356">actions/checkout#2356</a></li> </ul> <h2>v6.0.1</h2> <ul> <li>Add worktree support for persist-credentials includeIf by <a href="https://github.com/ericsciple"><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2327">actions/checkout#2327</a></li> </ul> <h2>v6.0.0</h2> <ul> <li>Persist creds to a separate file by <a href="https://github.com/ericsciple"><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2286">actions/checkout#2286</a></li> <li>Update README to include Node.js 24 support details and requirements by <a href="https://github.com/salmanmkc"><code>@salmanmkc</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2248">actions/checkout#2248</a></li> </ul> <h2>v5.0.1</h2> <ul> <li>Port v6 cleanup to v5 by <a href="https://github.com/ericsciple"><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2301">actions/checkout#2301</a></li> </ul> <h2>v5.0.0</h2> <ul> <li>Update actions checkout to use node 24 by <a href="https://github.com/salmanmkc"><code>@salmanmkc</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2226">actions/checkout#2226</a></li> </ul> <h2>v4.3.1</h2> <ul> <li>Port v6 cleanup to v4 by <a href="https://github.com/ericsciple"><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2305">actions/checkout#2305</a></li> </ul> <h2>v4.3.0</h2> <ul> <li>docs: update README.md by <a href="https://github.com/motss"><code>@motss</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1971">actions/checkout#1971</a></li> <li>Add internal repos for checking out multiple repositories by <a href="https://github.com/mouismail"><code>@mouismail</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1977">actions/checkout#1977</a></li> <li>Documentation update - add recommended permissions to Readme by <a href="https://github.com/benwells"><code>@benwells</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2043">actions/checkout#2043</a></li> <li>Adjust positioning of user email note and permissions heading by <a href="https://github.com/joshmgross"><code>@joshmgross</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2044">actions/checkout#2044</a></li> <li>Update README.md by <a href="https://github.com/nebuk89"><code>@nebuk89</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2194">actions/checkout#2194</a></li> <li>Update CODEOWNERS for actions by <a href="https://github.com/TingluoHuang"><code>@TingluoHuang</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2224">actions/checkout#2224</a></li> <li>Update package dependencies by <a href="https://github.com/salmanmkc"><code>@salmanmkc</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2236">actions/checkout#2236</a></li> </ul> <h2>v4.2.2</h2> <ul> <li><code>url-helper.ts</code> now leverages well-known environment variables by <a href="https://github.com/jww3"><code>@jww3</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1941">actions/checkout#1941</a></li> <li>Expand unit test coverage for <code>isGhes</code> by <a href="https://github.com/jww3"><code>@jww3</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1946">actions/checkout#1946</a></li> </ul> <h2>v4.2.1</h2> <ul> <li>Check out other refs/* by commit if provided, fall back to ref by <a href="https://github.com/orhantoy"><code>@orhantoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1924">actions/checkout#1924</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/checkout/commit/9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0"><code>9c091bb</code></a> update error wording (<a href="https://redirect.github.com/actions/checkout/issues/2467">#2467</a>)</li> <li><a href="https://github.com/actions/checkout/commit/1044a6dea927916f2c38ba5aeffbc0a847b1221a"><code>1044a6d</code></a> getting ready for checkout v7 release (<a href="https://redirect.github.com/actions/checkout/issues/2464">#2464</a>)</li> <li><a href="https://github.com/actions/checkout/commit/f0282184c7ce73ab54c7e4ab5a617122602e575f"><code>f028218</code></a> Bump the minor-npm-dependencies group across 1 directory with 3 updates (<a href="https://redirect.github.com/actions/checkout/issues/2462">#2462</a>)</li> <li><a href="https://github.com/actions/checkout/commit/d914b262ffc244530a203ab40decab34c3abf34d"><code>d914b26</code></a> upgrade module to esm and update dependencies (<a href="https://redirect.github.com/actions/checkout/issues/2463">#2463</a>)</li> <li><a href="https://github.com/actions/checkout/commit/537c7ef99cef6e5ddb5e7ff5d16d14510503801d"><code>537c7ef</code></a> Bump <code>@actions/core</code> and <code>@actions/tool-cache</code> and Remove uuid (<a href="https://redirect.github.com/actions/checkout/issues/2459">#2459</a>)</li> <li><a href="https://github.com/actions/checkout/commit/130a169078a413d3a5246a393625e8e742f387f6"><code>130a169</code></a> Bump js-yaml from 4.1.0 to 4.2.0 (<a href="https://redirect.github.com/actions/checkout/issues/2461">#2461</a>)</li> <li><a href="https://github.com/actions/checkout/commit/7d09575332117a40b46e5e020664df234cd416f3"><code>7d09575</code></a> Bump flatted from 3.3.1 to 3.4.2 (<a href="https://redirect.github.com/actions/checkout/issues/2460">#2460</a>)</li> <li><a href="https://github.com/actions/checkout/commit/0f9f3aa320cb53abeb534aeb54048075d9697a0e"><code>0f9f3aa</code></a> Bump actions/publish-immutable-action (<a href="https://redirect.github.com/actions/checkout/issues/2458">#2458</a>)</li> <li><a href="https://github.com/actions/checkout/commit/f9e715a95fcd1f9253f77dd28f11e88d2d6460c7"><code>f9e715a</code></a> block checking out fork pr for pull_request_target and workflow_run (<a href="https://redirect.github.com/actions/checkout/issues/2454">#2454</a>)</li> <li>See full diff in <a href="https://github.com/actions/checkout/compare/df4cb1c069e1874edd31b4311f1884172cec0e10...9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0">compare view</a></li> </ul> </details> <br /> Updates `taiki-e/install-action` from 2.81.11 to 2.82.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/taiki-e/install-action/releases">taiki-e/install-action's releases</a>.</em></p> <blockquote> <h2>2.82.2</h2> <ul> <li> <p>Update <code>xh@latest</code> to 0.26.1.</p> </li> <li> <p>Update <code>uv@latest</code> to 0.11.23.</p> </li> <li> <p>Update <code>trivy@latest</code> to 0.71.2.</p> </li> <li> <p>Update <code>sccache@latest</code> to 0.16.0.</p> </li> </ul> <h2>2.82.1</h2> <ul> <li> <p>Update <code>vacuum@latest</code> to 0.29.4.</p> </li> <li> <p>Update <code>uv@latest</code> to 0.11.22.</p> </li> <li> <p>Update <code>osv-scanner@latest</code> to 2.4.0.</p> </li> <li> <p>Update <code>mise@latest</code> to 2026.6.11.</p> </li> <li> <p>Update <code>martin@latest</code> to 1.11.0.</p> </li> <li> <p>Update <code>just@latest</code> to 1.53.0.</p> </li> <li> <p>Update <code>cargo-zigbuild@latest</code> to 0.23.0.</p> </li> </ul> <h2>2.82.0</h2> <ul> <li> <p>Support <code>cargo-vet</code>. (<a href="https://redirect.github.com/taiki-e/install-action/pull/1908">#1908</a>, thanks <a href="https://github.com/jakewimmer"><code>@jakewimmer</code></a>)</p> </li> <li> <p>Support <code>cargo-crap</code>. (<a href="https://redirect.github.com/taiki-e/install-action/pull/1905">#1905</a>, thanks <a href="https://github.com/BartoszCiesla"><code>@BartoszCiesla</code></a>)</p> </li> <li> <p>Support <code>cargo-leptos</code>. (<a href="https://redirect.github.com/taiki-e/install-action/pull/1903">#1903</a>, thanks <a href="https://github.com/404Simon"><code>@404Simon</code></a>)</p> </li> <li> <p>Update <code>kingfisher@latest</code> to 1.103.0.</p> </li> <li> <p>Update <code>cargo-xwin@latest</code> to 0.23.0.</p> </li> <li> <p>Update <code>wasmtime@latest</code> to 45.0.2.</p> </li> <li> <p>Update <code>cargo-deny@latest</code> to 0.19.9.</p> </li> <li> <p>Update <code>prek@latest</code> to 0.4.5.</p> </li> <li> <p>Update <code>trivy@latest</code> to 0.71.1.</p> </li> <li> <p>Update <code>mise@latest</code> to 2026.6.10.</p> </li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md">taiki-e/install-action's changelog</a>.</em></p> <blockquote> <h1>Changelog</h1> <p>All notable changes to this project will be documented in this file.</p> <p>This project adheres to <a href="https://semver.org">Semantic Versioning</a>.</p> <!-- raw HTML omitted --> <h2>[Unreleased]</h2> <h2>[2.82.2] - 2026-06-21</h2> <ul> <li> <p>Update <code>xh@latest</code> to 0.26.1.</p> </li> <li> <p>Update <code>uv@latest</code> to 0.11.23.</p> </li> <li> <p>Update <code>trivy@latest</code> to 0.71.2.</p> </li> <li> <p>Update <code>sccache@latest</code> to 0.16.0.</p> </li> </ul> <h2>[2.82.1] - 2026-06-20</h2> <ul> <li> <p>Update <code>vacuum@latest</code> to 0.29.4.</p> </li> <li> <p>Update <code>uv@latest</code> to 0.11.22.</p> </li> <li> <p>Update <code>osv-scanner@latest</code> to 2.4.0.</p> </li> <li> <p>Update <code>mise@latest</code> to 2026.6.11.</p> </li> <li> <p>Update <code>martin@latest</code> to 1.11.0.</p> </li> <li> <p>Update <code>just@latest</code> to 1.53.0.</p> </li> <li> <p>Update <code>cargo-zigbuild@latest</code> to 0.23.0.</p> </li> </ul> <h2>[2.82.0] - 2026-06-17</h2> <ul> <li> <p>Support <code>cargo-vet</code>. (<a href="https://redirect.github.com/taiki-e/install-action/pull/1908">#1908</a>, thanks <a href="https://github.com/jakewimmer"><code>@jakewimmer</code></a>)</p> </li> <li> <p>Support <code>cargo-crap</code>. (<a href="https://redirect.github.com/taiki-e/install-action/pull/1905">#1905</a>, thanks <a href="https://github.com/BartoszCiesla"><code>@BartoszCiesla</code></a>)</p> </li> <li> <p>Support <code>cargo-leptos</code>. (<a href="https://redirect.github.com/taiki-e/install-action/pull/1903">#1903</a>, thanks <a href="https://github.com/404Simon"><code>@404Simon</code></a>)</p> </li> <li> <p>Update <code>kingfisher@latest</code> to 1.103.0.</p> </li> <li> <p>Update <code>cargo-xwin@latest</code> to 0.23.0.</p> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/taiki-e/install-action/commit/9e1e5806d4a4822de933115878265be9aaa786d9"><code>9e1e580</code></a> Release 2.82.2</li> <li><a href="https://github.com/taiki-e/install-action/commit/788896b6163ee187bf02f51161e573dbc028dba0"><code>788896b</code></a> Update zizmor manifest</li> <li><a href="https://github.com/taiki-e/install-action/commit/7631577b669c94d73e58cb9f217d0f56abd33a48"><code>7631577</code></a> Update <code>xh@latest</code> to 0.26.1</li> <li><a href="https://github.com/taiki-e/install-action/commit/e0f1a05cc9f43f4fd57d15fe7ee20ca5b78f65fc"><code>e0f1a05</code></a> Update <code>uv@latest</code> to 0.11.23</li> <li><a href="https://github.com/taiki-e/install-action/commit/3cda1e20d17fde3f9958653d219495e0591233ec"><code>3cda1e2</code></a> Update <code>trivy@latest</code> to 0.71.2</li> <li><a href="https://github.com/taiki-e/install-action/commit/11ac3210af3c20497864c3d27d4499b6a7108098"><code>11ac321</code></a> Update tombi manifest</li> <li><a href="https://github.com/taiki-e/install-action/commit/b5f9e335d3eaba5117342d9d9fda485aea29c524"><code>b5f9e33</code></a> Update <code>sccache@latest</code> to 0.16.0</li> <li><a href="https://github.com/taiki-e/install-action/commit/4e48cd5f5170589da6cad450be3e62ca61534cc1"><code>4e48cd5</code></a> Update cargo-tarpaulin manifest</li> <li><a href="https://github.com/taiki-e/install-action/commit/e0a923573389b28b6cefdbe8309332b471f55583"><code>e0a9235</code></a> Update cargo-rdme manifest</li> <li><a href="https://github.com/taiki-e/install-action/commit/8b3c737da4b541bf0fb5a3e0488ff20535badac9"><code>8b3c737</code></a> Release 2.82.1</li> <li>Additional commits viewable in <a href="https://github.com/taiki-e/install-action/compare/15449e3094499af05d8d964a1c884208e4b8b595...9e1e5806d4a4822de933115878265be9aaa786d9">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps the vscode-extension group in /editors/vscode with 8 updates: | Package | From | To | | --- | --- | --- | | [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) | `5.9.0` | `5.9.3` | | [vscode-languageclient](https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client) | `9.0.1` | `10.0.0` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.9.3` | `26.0.0` | | [@types/vscode](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/vscode) | `1.120.0` | `1.125.0` | | [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.61.1` | `8.62.0` | | [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.61.1` | `8.62.0` | | [@vscode/test-cli](https://github.com/Microsoft/vscode-test-cli) | `0.0.12` | `0.0.15` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.61.1` | `8.62.0` | Updates `fast-xml-parser` from 5.9.0 to 5.9.3 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/NaturalIntelligence/fast-xml-parser/releases">fast-xml-parser's releases</a>.</em></p> <blockquote> <h2>v5.9.3</h2> <h2>What's Changed</h2> <ul> <li>Harden GitHub Actions workflows by <a href="https://github.com/martincostello"><code>@martincostello</code></a> in <a href="https://redirect.github.com/NaturalIntelligence/fast-xml-parser/pull/841">NaturalIntelligence/fast-xml-parser#841</a></li> <li>GitHub Actions workflow fixes by <a href="https://github.com/martincostello"><code>@martincostello</code></a> in <a href="https://redirect.github.com/NaturalIntelligence/fast-xml-parser/pull/844">NaturalIntelligence/fast-xml-parser#844</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/martincostello"><code>@martincostello</code></a> made their first contribution in <a href="https://redirect.github.com/NaturalIntelligence/fast-xml-parser/pull/841">NaturalIntelligence/fast-xml-parser#841</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.9.2...v5.9.3">https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.9.2...v5.9.3</a></p> <h2>v5.9.2</h2> <p><strong>Full Changelog</strong>: <a href="https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.9.1...v5.9.2">https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.9.1...v5.9.2</a></p> <h2>v5.9.1</h2> <p><strong>Full Changelog</strong>: <a href="https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.9.0...v5.9.1">https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.9.0...v5.9.1</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md">fast-xml-parser's changelog</a>.</em></p> <blockquote> <p><!-- raw HTML omitted -->Note: If you find missing information about particular minor version, that version must have been changed without any functional change in this library.<!-- raw HTML omitted --></p> <p>Note: Due to some last quick changes on v4, detail of v4.5.3 & v4.5.4 are not updated here. v4.5.4x is the last tag of v4 in github repository. I'm extremely sorry for the confusion</p> <p>*<em>5.9.3 / 2026-06-19</em></p> <ul> <li>update strnum</li> </ul> <p>*<em>5.9.2 / 2026-06-17</em></p> <ul> <li>dummy release to test changes in github action</li> </ul> <p>*<em>5.9.1 / 2026-06-17</em></p> <ul> <li>dummy release to test release from github action</li> </ul> <p>*<em>5.9.0 / 2026-06-15</em></p> <ul> <li>update strnum to 2.3.0 <ul> <li>you can set hex, binary, enotation, infinity, unicode</li> </ul> </li> <li>validate unsafe HTML or XML data in doctype entities unsing 'is-unsafe' library. User can override rules by overriding EntityDecoder.</li> </ul> <p>*<em>5.8.0 / 2026-05-12</em></p> <ul> <li>integrate xml-naming to validate DOCTYPE entity name and notation name (using qname becaue of backward compatibility) <ul> <li>This will consider xml-version as well. '1.0' is default</li> </ul> </li> <li>update strnum to 2.3.0 <ul> <li>You can set octal and binary parsing which is bydeault off</li> </ul> </li> <li>update fast-xml-builder to 1.2.0 <ul> <li>can sanitize tag names if found invalid</li> <li>fix format output</li> </ul> </li> </ul> <p><strong>5.7.3 / 2006-05-05</strong></p> <ul> <li>fix: alwaysCreateTextNode should create text node when attributes are present for self closing node</li> <li>fix stop node expression when ns prefix is removed (found by <a href="https://github.com/iruizsalinas">iruizsalinas</a>)</li> <li>update XML Builder to 1.1.7</li> <li>mark addEntity deprecated</li> </ul> <p><strong>5.7.2 / 2026-04-25</strong></p> <ul> <li>allow numerical external entity for backward compatibility</li> <li>fix <a href="https://redirect.github.com/NaturalIntelligence/fast-xml-parser/issues/705">#705</a>: attributesGroupName working with preserveOrder</li> <li>fix <a href="https://redirect.github.com/NaturalIntelligence/fast-xml-parser/issues/817">#817</a>: stackoverflow when tag expression is very long</li> </ul> <p><strong>5.7.1 / 2026-04-20</strong></p> <ul> <li>fix typo in CJS typing file</li> </ul> <p><strong>5.7.0 / 2026-04-17</strong></p> <ul> <li>Use <code>@nodable/entities</code> v2.1.0 <ul> <li>breaking changes <ul> <li>single entity scan. You're not allowed to user entity value to form another entity name.</li> <li>you cant add numeric external entity</li> <li>entity error message when expantion limit is crossed might change</li> </ul> </li> </ul> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/NaturalIntelligence/fast-xml-parser/commit/93a09f108d6f457a84e607a6806a7bfd6abc3e55"><code>93a09f1</code></a> 5.9.3</li> <li><a href="https://github.com/NaturalIntelligence/fast-xml-parser/commit/9c1905edd7ea28db70770f758e293fcf079060c5"><code>9c1905e</code></a> update strnum</li> <li><a href="https://github.com/NaturalIntelligence/fast-xml-parser/commit/8d71292a9aaaa8f4a24294e636bd191cfbf4d8a7"><code>8d71292</code></a> GitHub Actions workflow fixes (<a href="https://redirect.github.com/NaturalIntelligence/fast-xml-parser/issues/844">#844</a>)</li> <li><a href="https://github.com/NaturalIntelligence/fast-xml-parser/commit/784a0442b697e1498e1f3c3fc1a057ad57424858"><code>784a044</code></a> Harden GitHub Actions workflows (<a href="https://redirect.github.com/NaturalIntelligence/fast-xml-parser/issues/841">#841</a>)</li> <li><a href="https://github.com/NaturalIntelligence/fast-xml-parser/commit/bf9b81a9ab952ce153281e119f99f9953f32bc76"><code>bf9b81a</code></a> 5.9.2</li> <li><a href="https://github.com/NaturalIntelligence/fast-xml-parser/commit/232abf54c793a950aeb63fd25934fc7f6008dc86"><code>232abf5</code></a> update publish action for better security</li> <li><a href="https://github.com/NaturalIntelligence/fast-xml-parser/commit/73411fa630cf85798397b3007b5db5bfff2d2d61"><code>73411fa</code></a> update checklist</li> <li><a href="https://github.com/NaturalIntelligence/fast-xml-parser/commit/d57e33bb9aa045813440244cca9d5be837671bba"><code>d57e33b</code></a> 5.9.1</li> <li><a href="https://github.com/NaturalIntelligence/fast-xml-parser/commit/3be603a51aac23e2054c92291e188fb30f427220"><code>3be603a</code></a> testing release from Github</li> <li><a href="https://github.com/NaturalIntelligence/fast-xml-parser/commit/b6c41ea401122dc97e3396066771672974622506"><code>b6c41ea</code></a> Add GitHub Actions workflow for npm publishing</li> <li>Additional commits viewable in <a href="https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.9.0...v5.9.3">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~GitHub%20Actions">GitHub Actions</a>, a new releaser for fast-xml-parser since your current version.</p> </details> <br /> Updates `vscode-languageclient` from 9.0.1 to 10.0.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/Microsoft/vscode-languageserver-node/releases">vscode-languageclient's releases</a>.</em></p> <blockquote> <h2>release/client/10.0.0</h2> <h2>Changes:</h2> <ul> <li><a href="https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client/issues/1786">#1786</a>: Shorten test dir path</li> </ul> <p>This list of changes was <a href="https://dev.azure.com/monacotools/Monaco/_build/results?buildId=444649&view=logs">auto generated</a>.</p> <h2>release/server/10.0.0</h2> <p>No release notes provided.</p> <h2>release/client/10.0.0-next.22</h2> <p>No release notes provided.</p> <h2>release/client/10.0.0-next.21</h2> <p>No release notes provided.</p> <h2>release/client/10.0.0-next.20</h2> <h2>Changes:</h2> <h3>Bugs:</h3> <ul> <li><a href="https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client/issues/1717">#1717</a>: Client requests textDocument/diagnostics before textDocument/didOpen</li> </ul> <h3>Others:</h3> <ul> <li><a href="https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client/issues/1723">#1723</a>: Fix client request order for textDocument/diagnostics</li> <li><a href="https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client/issues/1721">#1721</a>: Bump webpack from 5.103.0 to 5.105.0</li> <li><a href="https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client/issues/1715">#1715</a>: Update minimatch dependency to version 10.1.2</li> <li><a href="https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client/issues/1714">#1714</a>: Bump <code>@isaacs/brace-expansion</code> from 5.0.0 to 5.0.1 in /client</li> <li><a href="https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client/issues/1713">#1713</a>: Bump <code>@isaacs/brace-expansion</code> from 5.0.0 to 5.0.1 in /client-node-tests</li> <li><a href="https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client/issues/1712">#1712</a>: Format <code>metaModel.ts</code></li> <li><a href="https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client/issues/1711">#1711</a>: Bump lodash from 4.17.21 to 4.17.23</li> </ul> <!-- raw HTML omitted --> <ul> <li><a href="https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client/issues/1710">#1710</a>: Fix typo in type documentation</li> <li><a href="https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client/issues/1708">#1708</a>: Update to latest security block</li> <li><a href="https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client/issues/1707">#1707</a>: Bump qs from 6.13.1 to 6.14.1</li> <li><a href="https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client/issues/1705">#1705</a>: Merge next release into main</li> <li><a href="https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client/issues/1704">#1704</a>: Update lock files for next LSP release</li> </ul> <p>This list of changes was <a href="https://dev.azure.com/monacotools/Monaco/_build/results?buildId=404211&view=logs">auto generated</a>.<!-- raw HTML omitted --></p> <h2>release/client/10.0.0-next.19</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/microsoft/vscode-languageserver-node/commit/2cc5bf0d69cdc7bba0ed82273d5cb11fd046bc49"><code>2cc5bf0</code></a> Prepare 3.18 release</li> <li><a href="https://github.com/microsoft/vscode-languageserver-node/commit/b21577ca1bc02848c2030abe8f4187cd18ee299f"><code>b21577c</code></a> Merge next release into main (<a href="https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client/issues/1778">#1778</a>)</li> <li><a href="https://github.com/microsoft/vscode-languageserver-node/commit/c08bcae12eaaf70d2eb3489e52ce0ccdb82b005f"><code>c08bcae</code></a> Update dependencies and improve compatibility (<a href="https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client/issues/1775">#1775</a>)</li> <li><a href="https://github.com/microsoft/vscode-languageserver-node/commit/0a70e0d702845acb69fa487b519a3caf700b7535"><code>0a70e0d</code></a> Implement TextDocumentSnapshot for delay open notifications (<a href="https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client/issues/1773">#1773</a>)</li> <li><a href="https://github.com/microsoft/vscode-languageserver-node/commit/d4f8eae22e6a33ff63a7fb57e977142d60360bbe"><code>d4f8eae</code></a> Prevent pulling diagnostics on untitled documents (<a href="https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client/issues/1772">#1772</a>)</li> <li><a href="https://github.com/microsoft/vscode-languageserver-node/commit/f168f85ba0a5d0ac851db5fd3333427aa30126bd"><code>f168f85</code></a> Update documentation and fix lint errors (<a href="https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client/issues/1770">#1770</a>)</li> <li><a href="https://github.com/microsoft/vscode-languageserver-node/commit/2cf625f1583f2ef45f3e0728e2f1cba432a3cc9f"><code>2cf625f</code></a> Add optional MarkupContent support to diagnostics (<a href="https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client/issues/1766">#1766</a>)</li> <li><a href="https://github.com/microsoft/vscode-languageserver-node/commit/49c79657d5bd51ec84562424a276a06b056ddd60"><code>49c7965</code></a> Fixes <a href="https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client/issues/1751">#1751</a>: Prevent crash in forgetDocument when disposed (<a href="https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client/issues/1765">#1765</a>)</li> <li><a href="https://github.com/microsoft/vscode-languageserver-node/commit/e0365a7d1646f612e14fc98227ab277e249cb45c"><code>e0365a7</code></a> Fixes double application of edits during renaming (<a href="https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client/issues/1764">#1764</a>)</li> <li><a href="https://github.com/microsoft/vscode-languageserver-node/commit/5b1151dccda0ff1e704b5ed9bd85f07402e20674"><code>5b1151d</code></a> Bump brace-expansion from 5.0.3 to 5.0.6 in /client (<a href="https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client/issues/1762">#1762</a>)</li> <li>Additional commits viewable in <a href="https://github.com/Microsoft/vscode-languageserver-node/commits/release/client/10.0.0/client">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~microsoft1es">microsoft1es</a>, a new releaser for vscode-languageclient since your current version.</p> </details> <br /> Updates `@types/node` from 25.9.3 to 26.0.0 <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node">compare view</a></li> </ul> </details> <br /> Updates `@types/vscode` from 1.120.0 to 1.125.0 <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/vscode">compare view</a></li> </ul> </details> <br /> Updates `@typescript-eslint/eslint-plugin` from 8.61.1 to 8.62.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/releases">@typescript-eslint/eslint-plugin's releases</a>.</em></p> <blockquote> <h2>v8.62.0</h2> <h2>8.62.0 (2026-06-22)</h2> <h3>🚀 Features</h3> <ul> <li>remove redundant package.json "files" (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12444">#12444</a>)</li> </ul> <h3>🩹 Fixes</h3> <ul> <li>add "files" to rule-schema-to-typescript-types (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12441">#12441</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>Kirk Waiblinger <a href="https://github.com/kirkwaiblinger"><code>@kirkwaiblinger</code></a></li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.62.0">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md">@typescript-eslint/eslint-plugin's changelog</a>.</em></p> <blockquote> <h2>8.62.0 (2026-06-22)</h2> <h3>🚀 Features</h3> <ul> <li>remove redundant package.json "files" (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12444">#12444</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>Kirk Waiblinger <a href="https://github.com/kirkwaiblinger"><code>@kirkwaiblinger</code></a></li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.62.0">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/54e285728e5d8cb83fadb8041189f0c3b4ab436a"><code>54e2857</code></a> chore(release): publish 8.62.0</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/81e4c2654c3f4d923766a888691add2c45b5d64a"><code>81e4c26</code></a> feat: remove redundant package.json "files" (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin/issues/12444">#12444</a>)</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/b784054b6f8fbb51eb742304852b37b0436a8a58"><code>b784054</code></a> chore: use <code>stableTypeOrdering</code> compiler option (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin/issues/12427">#12427</a>)</li> <li>See full diff in <a href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.62.0/packages/eslint-plugin">compare view</a></li> </ul> </details> <br /> Updates `@typescript-eslint/parser` from 8.61.1 to 8.62.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/releases">@typescript-eslint/parser's releases</a>.</em></p> <blockquote> <h2>v8.62.0</h2> <h2>8.62.0 (2026-06-22)</h2> <h3>🚀 Features</h3> <ul> <li>remove redundant package.json "files" (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12444">#12444</a>)</li> </ul> <h3>🩹 Fixes</h3> <ul> <li>add "files" to rule-schema-to-typescript-types (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12441">#12441</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>Kirk Waiblinger <a href="https://github.com/kirkwaiblinger"><code>@kirkwaiblinger</code></a></li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.62.0">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md">@typescript-eslint/parser's changelog</a>.</em></p> <blockquote> <h2>8.62.0 (2026-06-22)</h2> <h3>🚀 Features</h3> <ul> <li>remove redundant package.json "files" (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12444">#12444</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>Kirk Waiblinger <a href="https://github.com/kirkwaiblinger"><code>@kirkwaiblinger</code></a></li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.62.0">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/54e285728e5d8cb83fadb8041189f0c3b4ab436a"><code>54e2857</code></a> chore(release): publish 8.62.0</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/81e4c2654c3f4d923766a888691add2c45b5d64a"><code>81e4c26</code></a> feat: remove redundant package.json "files" (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser/issues/12444">#12444</a>)</li> <li>See full diff in <a href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.62.0/packages/parser">compare view</a></li> </ul> </details> <br /> Updates `@vscode/test-cli` from 0.0.12 to 0.0.15 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/microsoft/vscode-test-cli/blob/main/CHANGELOG.md">@vscode/test-cli's changelog</a>.</em></p> <blockquote> <h1>Changelog</h1> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/Microsoft/vscode-test-cli/commits">compare view</a></li> </ul> </details> <br /> Updates `typescript-eslint` from 8.61.1 to 8.62.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/releases">typescript-eslint's releases</a>.</em></p> <blockquote> <h2>v8.62.0</h2> <h2>8.62.0 (2026-06-22)</h2> <h3>🚀 Features</h3> <ul> <li>remove redundant package.json "files" (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12444">#12444</a>)</li> </ul> <h3>🩹 Fixes</h3> <ul> <li>add "files" to rule-schema-to-typescript-types (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12441">#12441</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>Kirk Waiblinger <a href="https://github.com/kirkwaiblinger"><code>@kirkwaiblinger</code></a></li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.62.0">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md">typescript-eslint's changelog</a>.</em></p> <blockquote> <h2>8.62.0 (2026-06-22)</h2> <h3>🚀 Features</h3> <ul> <li>remove redundant package.json "files" (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12444">#12444</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>Kirk Waiblinger <a href="https://github.com/kirkwaiblinger"><code>@kirkwaiblinger</code></a></li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.62.0">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/54e285728e5d8cb83fadb8041189f0c3b4ab436a"><code>54e2857</code></a> chore(release): publish 8.62.0</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/81e4c2654c3f4d923766a888691add2c45b5d64a"><code>81e4c26</code></a> feat: remove redundant package.json "files" (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint/issues/12444">#12444</a>)</li> <li>See full diff in <a href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.62.0/packages/typescript-eslint">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Updated [FSharp.Core](https://github.com/dotnet/dotnet) from 10.1.204 to
10.1.301.
<details>
<summary>Release notes</summary>
_Sourced from [FSharp.Core's
releases](https://github.com/dotnet/dotnet/releases)._
No release notes found for this version range.
Commits viewable in [compare
view](https://github.com/dotnet/dotnet/commits).
</details>
Updated [Microsoft.Build.Framework](https://github.com/dotnet/msbuild)
from 17.11.48 to 18.7.1.
<details>
<summary>Release notes</summary>
_Sourced from [Microsoft.Build.Framework's
releases](https://github.com/dotnet/msbuild/releases)._
## 18.7.1
## What's Changed
* Fix TraceEngine file contention deadlock in multithreaded mode by
@JanProvaznik in https://github.com/dotnet/msbuild/pull/13446
* Remove duplicate test cases in MultithreadableTaskAnalyzer by
@Youssef1313 in https://github.com/dotnet/msbuild/pull/13483
* Ensure ThreadSafeTaskAnalyzer.Tests is considered as a unit test
project by @Youssef1313 in https://github.com/dotnet/msbuild/pull/13481
* Fix MSBuildTask0002 analyzer warnings in already-migrated tasks by
@JanProvaznik in https://github.com/dotnet/msbuild/pull/13466
* Fix race conditions in task host path resolution by @AR-May in
https://github.com/dotnet/msbuild/pull/13485
* Migrate ToolTask and Al task to TaskEnvironment API by @OvesN in
https://github.com/dotnet/msbuild/pull/13423
* Bump main to 18.7, add vs18.6 to merge flow by @MichalPavlik in
https://github.com/dotnet/msbuild/pull/13472
* Avoid allocations in GetHashCode implementations by @DustinCampbell
in https://github.com/dotnet/msbuild/pull/13475
* Add PATs rotation to agentic workflow(s) by @JanKrivanek in
https://github.com/dotnet/msbuild/pull/13496
* Fix ASP.NET WebSite projects to copy netstandard.dll facade when
required by @JanProvaznik in
https://github.com/dotnet/msbuild/pull/13058
* Migrate AspNetCompiler to TaskEnvironment API by @OvesN in
https://github.com/dotnet/msbuild/pull/13424
* Add review workflow by @JanKrivanek in
https://github.com/dotnet/msbuild/pull/13503
* Strengthen reviewer skill: add step-back analysis dimensions by
@JanProvaznik in https://github.com/dotnet/msbuild/pull/13504
* Add 'Request Speedometer Perf Run' to VS experimental insertion build
policies by @Copilot in https://github.com/dotnet/msbuild/pull/13505
* Remove duplicate @ prefix from issueAuthor in GitOps by @akoeplinger
in https://github.com/dotnet/msbuild/pull/13492
* Improve review aw by @JanKrivanek in
https://github.com/dotnet/msbuild/pull/13510
* Migrates unit tests to use RoslynCodeTaskFactory to enable running
tests under .NET Core by @jankratochvilcz in
https://github.com/dotnet/msbuild/pull/13500
* Fix cross-AppDomain TaskItem modifier cache regression by
@DustinCampbell in https://github.com/dotnet/msbuild/pull/13493
* Discourage review agent from approving PRs by @JanKrivanek in
https://github.com/dotnet/msbuild/pull/13512
* Stop trying to deploy ValueTuple by @rainersigwald in
https://github.com/dotnet/msbuild/pull/13507
* Ad-hoc re-sign bootstrap dotnet on macOS to prevent SIGKILL by
@jankratochvilcz in https://github.com/dotnet/msbuild/pull/13513
* RoslynCodeTaskFactory: Log MSB3753 when task class does not implement
ITask by @jankratochvilcz in
https://github.com/dotnet/msbuild/pull/13517
* Update gh-aw (upon mcp policy changes) by @JanKrivanek in
https://github.com/dotnet/msbuild/pull/13526
* Eliminate XmlChildNodes allocations in GetXmlNodeInnerContents by
@nareshjo in https://github.com/dotnet/msbuild/pull/13509
* Fix telemetry allocation regression: per-engine collector ownership by
@JanProvaznik in https://github.com/dotnet/msbuild/pull/13516
* Migrate to xunit.v3 by @Youssef1313 in
https://github.com/dotnet/msbuild/pull/13482
* Fix stray brace in HandleBuildCancel trace string causing MSB1025 by
@Copilot in https://github.com/dotnet/msbuild/pull/13535
* Bumping to 10.0.4 runtime packages by @MichalPavlik in
https://github.com/dotnet/msbuild/pull/13533
* Remove early return in GetCanonicalForm, always call System.IO.Path by
@OvesN in https://github.com/dotnet/msbuild/pull/13532
* Do not overwrite GetCopyToOutputDirectoryItemsDependsOn, just add new…
by @snechaev in https://github.com/dotnet/msbuild/pull/13474
* Migrate GetReferenceAssemblyPaths task to TaskEnvironment API by
@OvesN in https://github.com/dotnet/msbuild/pull/13495
* Stabilize ToolTaskThatTimeoutAndRetry test by @rainersigwald in
https://github.com/dotnet/msbuild/pull/13489
* [automated] Merge branch 'vs18.6' => 'main' by @github-actions[bot]
in https://github.com/dotnet/msbuild/pull/13506
* Add extra test assertions around tests by @Youssef1313 in
https://github.com/dotnet/msbuild/pull/13536
* Add static eval for repo skills/agents via skill-validator by
@JanKrivanek in https://github.com/dotnet/msbuild/pull/13537
* Migrate SGen task to Task environment API by @OvesN in
https://github.com/dotnet/msbuild/pull/13457
* Fix TerminalLogger assert failure for metaproj files and cached
project eval ID by @OvesN in
https://github.com/dotnet/msbuild/pull/13480
* Filter out approving review from pr-reviewer agent by @JanKrivanek in
https://github.com/dotnet/msbuild/pull/13553
* Use a unique task name per invocation to tabilize
RoslynCodeTaskFactory_ReuseCompilation test by @huulinhnguyen-dev in
https://github.com/dotnet/msbuild/pull/13551
* Brief doc on feedback/logging/data systems by @rainersigwald in
https://github.com/dotnet/msbuild/pull/13554
* Localized file check-in by OneLocBuild Task: Build definition ID 9434:
Build ID 13881982 by @dotnet-bot in
https://github.com/dotnet/msbuild/pull/13437
* Stage 3: Forward BuildProjectFile* callbacks from OOP TaskHost to
worker node by @JanProvaznik in
https://github.com/dotnet/msbuild/pull/13350
* Enable TaskHost Callbacks by default by @JanProvaznik in
https://github.com/dotnet/msbuild/pull/13579
* Remove unactionable info from reviewer agent by @JanKrivanek in
https://github.com/dotnet/msbuild/pull/13578
* Enlighten RequiresFramework35SP1Assembly task for multithreaded mode
by @jankratochvilcz in https://github.com/dotnet/msbuild/pull/13575
* Make SdkResolver-provided environment variables take precedence over
ambient environment by @Copilot in
https://github.com/dotnet/msbuild/pull/12655
* Add dotnet/skills marketplace and enable plugins by @Evangelink in
https://github.com/dotnet/msbuild/pull/13582
* The skills/agents check filters-in only touched files by @JanKrivanek
in https://github.com/dotnet/msbuild/pull/13586
* Fix skill-validation workflow failing when agents directory is deleted
by @JeremyKuhne in https://github.com/dotnet/msbuild/pull/13592
... (truncated)
## 18.6.3
## What's Changed
* Improve cross-platform node discovery for reuse with NodeMode
filtering by @Copilot in https://github.com/dotnet/msbuild/pull/13256
* Updated common types XSD to remove errors from redefining `Include`
attributes by @glektarssza in
https://github.com/dotnet/msbuild/pull/13284
* Update VersionPrefix to 18.6.0 + insertion flow by @MichalPavlik in
https://github.com/dotnet/msbuild/pull/13296
* Log warnings for skipped STR resource keys instead of failing the
build by @OvesN in https://github.com/dotnet/msbuild/pull/13291
* Isolate MSBuildTaskHost from the rest of MSBuild Codebase by
@DustinCampbell in https://github.com/dotnet/msbuild/pull/13232
* Improve error messages when ToolTask overrides exit code 0 to -1 due
to logged errors by @OvesN in
https://github.com/dotnet/msbuild/pull/13303
* Migrate Exec task to TaskEnvironment API by @Copilot in
https://github.com/dotnet/msbuild/pull/13171
* Enhance crash telemetry with richer diagnostics and EndBuild hang
detection by @YuliiaKovalova in
https://github.com/dotnet/msbuild/pull/13304
* [main] Update dependencies from nuget/nuget.client by
@dotnet-maestro[bot] in https://github.com/dotnet/msbuild/pull/13309
* [IBuildEngine callbacks] Stage 2: RequestCores/ReleaseCores by
@JanProvaznik in https://github.com/dotnet/msbuild/pull/13306
* Only get command line args names on modern .NET by @baronfel in
https://github.com/dotnet/msbuild/pull/13314
* Detect and correct worker node over-provisioning by @Copilot in
https://github.com/dotnet/msbuild/pull/13220
* Add App Host Support for MSBuild by @YuliiaKovalova in
https://github.com/dotnet/msbuild/pull/13175
* [main] Update dependencies from dotnet/arcade by @dotnet-maestro[bot]
in https://github.com/dotnet/msbuild/pull/13311
* Fix ObjectDisposedException in BuildsWhileBuildIsRunningOnServer test
by @Copilot in https://github.com/dotnet/msbuild/pull/13316
* Add PoC of pipelines check skill by @JanKrivanek in
https://github.com/dotnet/msbuild/pull/13242
* Fix CodeSign.MissingSigningCert for xsd/Update-MSBuildXsds.ps1 by
@JanProvaznik in https://github.com/dotnet/msbuild/pull/13320
* Fix task host launch regressions from apphost support by
@YuliiaKovalova in https://github.com/dotnet/msbuild/pull/13325
* Enlighten GetFrameworkPath and GetFrameworkSdkPath. by @AR-May in
https://github.com/dotnet/msbuild/pull/13282
* Add VMR codeflow health check to pipelines skill by @JanProvaznik in
https://github.com/dotnet/msbuild/pull/13326
* [main] Update dependencies from dotnet/roslyn by @dotnet-maestro[bot]
in https://github.com/dotnet/msbuild/pull/13281
* Fix GenerateResource to track all ResXFileRef linked files for
incremental builds by @OvesN in
https://github.com/dotnet/msbuild/pull/13327
* Add escape hatch for not sharing assemblies from tools directory by
@AR-May in https://github.com/dotnet/msbuild/pull/13305
* Add merge-dependency-updates skill for bot PR triage by @JanProvaznik
in https://github.com/dotnet/msbuild/pull/13331
* Add diagnostic data to crash/hang telemetry and move null-Project
check after RetrieveFromCache by @YuliiaKovalova in
https://github.com/dotnet/msbuild/pull/13332
* Update remote-host-object.md with SDK .tlb shipping and IDispatch
example by @YuliiaKovalova in
https://github.com/dotnet/msbuild/pull/13324
* [main] Update dependencies from dotnet/arcade by @dotnet-maestro[bot]
in https://github.com/dotnet/msbuild/pull/13341
* improve task migration skill by @JanProvaznik in
https://github.com/dotnet/msbuild/pull/13234
* Fix telemetry PII concerns: sanitize exceptions, project paths, and
custom names by @YuliiaKovalova in
https://github.com/dotnet/msbuild/pull/13344
* Use .exe.config when loading "as full Framework" by @rainersigwald in
https://github.com/dotnet/msbuild/pull/13349
* Fix RequestCores/ReleaseCores fallback in OOP TaskHost: throw
NotImplementedException instead of logging error by @JanProvaznik in
https://github.com/dotnet/msbuild/pull/13345
* Fixed indentation for
_GetCopyToOutputDirectoryItemsFromTransitiveProjectReferences by
@CEbbinghaus in https://github.com/dotnet/msbuild/pull/13358
* Fix Unix SessionId in handshake to enable cross-terminal node reuse by
@JakeRadMSFT in https://github.com/dotnet/msbuild/pull/13354
* Revert "Migrate Exec task to TaskEnvironment API" by @JanProvaznik in
https://github.com/dotnet/msbuild/pull/13367
* Look for apphost when considering node reuse by @rainersigwald in
https://github.com/dotnet/msbuild/pull/13368
* Move lots of shared code to Microsoft.Build.Framework by
@DustinCampbell in https://github.com/dotnet/msbuild/pull/13364
* [main] Source code updates from dotnet/dotnet by @dotnet-maestro[bot]
in https://github.com/dotnet/msbuild/pull/13353
* Fix ScheduleTimeRecord.AccumulatedTime hang during solution close by
@YuliiaKovalova in https://github.com/dotnet/msbuild/pull/13375
* Update runtime package references to 10.0.3 by @Copilot in
https://github.com/dotnet/msbuild/pull/13376
* [main] Source code updates from dotnet/dotnet by @dotnet-maestro[bot]
in https://github.com/dotnet/msbuild/pull/13378
* Fix ProjectImports.zip regression from shared FileUtilities statics by
@JanProvaznik in https://github.com/dotnet/msbuild/pull/13382
* Enrich EndBuild hang diagnostics with logging service and submission
state by @YuliiaKovalova in
https://github.com/dotnet/msbuild/pull/13385
* Enhance path normalization: add handling for consecutive directory
separators by @tommcdon in https://github.com/dotnet/msbuild/pull/13369
* Move task environment drivers to Framework. by @AR-May in
https://github.com/dotnet/msbuild/pull/13380
* Update MicrosoftBuildVersion in analyzer template by
@github-actions[bot] in https://github.com/dotnet/msbuild/pull/13298
* Replace ProjectCacheService null Project crash with diagnostic
telemetry by @YuliiaKovalova in
https://github.com/dotnet/msbuild/pull/13396
* Add agentic workflow to auto-close PRs older than 180 days by
@Copilot in https://github.com/dotnet/msbuild/pull/13400
* Localized file check-in by OneLocBuild Task: Build definition ID 9434:
Build ID 13575337 by @dotnet-bot in
https://github.com/dotnet/msbuild/pull/13394
* Respect MSBUILDPRESERVETOOLTEMPFILES in ProcessExit cleanup by
@DmitriyShepelev in https://github.com/dotnet/msbuild/pull/13395
... (truncated)
## 18.5.4
## What's Changed
* remove dead code by @SimaTian in
https://github.com/dotnet/msbuild/pull/13125
* Update VersionPrefix to 18.5.0 + insertion flow by @YuliiaKovalova in
https://github.com/dotnet/msbuild/pull/13134
* add multithreaded task migration agent skill by @JanProvaznik in
https://github.com/dotnet/msbuild/pull/13131
* Update MicrosoftBuildVersion in analyzer template by
@github-actions[bot] in https://github.com/dotnet/msbuild/pull/13139
* Migrate VerifyFileHash task to TaskEnvironment API by @Copilot in
https://github.com/dotnet/msbuild/pull/13112
* Migrate GetFileHash tasks to TaskEnvironment API by @Copilot in
https://github.com/dotnet/msbuild/pull/13111
* Diagram of VS/SDK component interactions by @rainersigwald in
https://github.com/dotnet/msbuild/pull/13127
* Fix package validation telemetry assembly resolution warnings by
@JanProvaznik in https://github.com/dotnet/msbuild/pull/13144
* Adds validation to throw MSB4259 when property references contain
leading or trailing whitespace outside of conditions. by
@huulinhnguyen-dev in https://github.com/dotnet/msbuild/pull/13076
* Localized file check-in by OneLocBuild Task: Build definition ID 9434:
Build ID 13203963 by @dotnet-bot in
https://github.com/dotnet/msbuild/pull/13151
* Add MSBuild app host design by @YuliiaKovalova in
https://github.com/dotnet/msbuild/pull/12857
* Add Stabilize-Release.ps1 script for release process by
@rainersigwald in https://github.com/dotnet/msbuild/pull/13146
* Fix chained item function empty result comparison in conditions by
@JanProvaznik in https://github.com/dotnet/msbuild/pull/12901
* [main] Update dependencies from dotnet/roslyn by @dotnet-maestro[bot]
in https://github.com/dotnet/msbuild/pull/13162
* [main] Update dependencies from dotnet/arcade by @dotnet-maestro[bot]
in https://github.com/dotnet/msbuild/pull/13160
* Localized file check-in by OneLocBuild Task: Build definition ID 9434:
Build ID 13217622 by @dotnet-bot in
https://github.com/dotnet/msbuild/pull/13163
* Fix items logged as type name during -getitem argument by @Copilot in
https://github.com/dotnet/msbuild/pull/13166
* Respect NetCoreSdkRoot property for TaskHostParameters by
@ViktorHofer in https://github.com/dotnet/msbuild/pull/13176
* Remove MachineIndependent configuration by @Copilot in
https://github.com/dotnet/msbuild/pull/13180
* Remove redundant #nullable disable from 153 files by @Copilot in
https://github.com/dotnet/msbuild/pull/13157
* Revert #13076 "Adds validation to throw MSB4259 when property
references contain leading or trailing whitespace outside of conditions.
by @JanProvaznik in https://github.com/dotnet/msbuild/pull/13184
* Convert MSBuild.sln to slnx format and upate refs by @ViktorHofer in
https://github.com/dotnet/msbuild/pull/13185
* Implement IMultiThreadableTask for Move task by @Copilot in
https://github.com/dotnet/msbuild/pull/13108
* Add hostservices translation support for clr 4 task host by
@YuliiaKovalova in https://github.com/dotnet/msbuild/pull/13154
* Handle null ProjectFile in InvalidProjectFileException by
@ViktorHofer in https://github.com/dotnet/msbuild/pull/13179
* Add $(LatestDotNetCoreForMSBuild) infrastructure for centralized
framework targeting by @Copilot in
https://github.com/dotnet/msbuild/pull/13189
* Fix TaskHost crash when task returns string[] with null elements by
@JanProvaznik in https://github.com/dotnet/msbuild/pull/13190
* Revert "Refactor Microsoft.IO usage" by @YuliiaKovalova in
https://github.com/dotnet/msbuild/pull/13194
* Allow null SdkResult from SdkResolver.Resolve by @rainersigwald in
https://github.com/dotnet/msbuild/pull/13197
* Skill to test changes using just-built MSBuild by @rainersigwald in
https://github.com/dotnet/msbuild/pull/13202
* Tell Copilot not to allow breaking changes by @rainersigwald in
https://github.com/dotnet/msbuild/pull/13200
* Make nologo switch accept boolean values to enable explicit logo
display control by @Copilot in
https://github.com/dotnet/msbuild/pull/12541
* Migrate Unzip task to use TaskEnvironment API by @Copilot in
https://github.com/dotnet/msbuild/pull/13109
* Migrate ZipDirectory task to TaskEnvironment API by @Copilot in
https://github.com/dotnet/msbuild/pull/13110
* Localized file check-in by OneLocBuild Task: Build definition ID 9434:
Build ID 13246767 by @dotnet-bot in
https://github.com/dotnet/msbuild/pull/13204
* Add .NET Standard compatibility warnings by @ViktorHofer in
https://github.com/dotnet/msbuild/pull/13187
* Make WriteCodeFragment task locale-independent for reproducible builds
by @Copilot in https://github.com/dotnet/msbuild/pull/13192
* Localized file check-in by OneLocBuild Task: Build definition ID 9434:
Build ID 13249478 by @dotnet-bot in
https://github.com/dotnet/msbuild/pull/13207
* Fix TerminalLogger IndexOutOfRangeException when replaying binlog with
fewer nodes by @Copilot in https://github.com/dotnet/msbuild/pull/12809
* Migrate DownloadFile task to use TaskEnvironment API by @Copilot in
https://github.com/dotnet/msbuild/pull/13113
* Add CI job for 2-stage build with -mt mode by @Copilot in
https://github.com/dotnet/msbuild/pull/13124
* Localize AbsolutePath validation messages by @JanProvaznik in
https://github.com/dotnet/msbuild/pull/13115
* Refactor FrameworkFileUtilities for better performance by @AR-May in
https://github.com/dotnet/msbuild/pull/13143
* Add agent instructions for MSBuild repository by @YuliiaKovalova in
https://github.com/dotnet/msbuild/pull/13198
* Add GetCanonicalForm to the AbsolutePath API by @AR-May in
https://github.com/dotnet/msbuild/pull/13088
* Shouldly 4.3.0 by @rainersigwald in
https://github.com/dotnet/msbuild/pull/13213
* Migrate WriteCodeFragment task to use TaskEnvironment API by @Copilot
in https://github.com/dotnet/msbuild/pull/13169
* Run the issue-labeler over pull requests using polling by @Copilot in
https://github.com/dotnet/msbuild/pull/13223
* [main] Update dependencies from dotnet/arcade by @dotnet-maestro[bot]
in https://github.com/dotnet/msbuild/pull/13225
... (truncated)
## 18.4.0
## What's Changed
* Fix terminal logger quiet mode to show project context for
warnings/errors by @Copilot in
https://github.com/dotnet/msbuild/pull/12930
* Replace OpenTelemetry with Microsoft.VisualStudio.Telemetry for VS by
@YuliiaKovalova in https://github.com/dotnet/msbuild/pull/12843
* Localized file check-in by OneLocBuild Task: Build definition ID 9434:
Build ID 13050856 by @dotnet-bot in
https://github.com/dotnet/msbuild/pull/12982
* [main] Source code updates from dotnet/dotnet by @dotnet-maestro[bot]
in https://github.com/dotnet/msbuild/pull/12979
* eliminate test data serialization warnings by @JanProvaznik in
https://github.com/dotnet/msbuild/pull/12983
* Add the feature flag that allows users to opt out automatic UTF8
console encoding by @GangWang01 in
https://github.com/dotnet/msbuild/pull/12637
* Polyfill clean up and source package organization by @DustinCampbell
in https://github.com/dotnet/msbuild/pull/12977
* Localized file check-in by OneLocBuild Task: Build definition ID 9434:
Build ID 13052367 by @dotnet-bot in
https://github.com/dotnet/msbuild/pull/12984
* Add documentation for enabling binlog collection via env var by
@YuliiaKovalova in https://github.com/dotnet/msbuild/pull/12805
* Support multiple binary logs from command line arguments by @Copilot
in https://github.com/dotnet/msbuild/pull/12706
* Add VcxprojReader.exe to ngenApplications by @YuliiaKovalova in
https://github.com/dotnet/msbuild/pull/12986
* Add HostServices support in Out-of-Process Task Host by
@YuliiaKovalova in https://github.com/dotnet/msbuild/pull/12753
* [main] Update dependencies from dotnet/roslyn by @dotnet-maestro[bot]
in https://github.com/dotnet/msbuild/pull/13002
* [main] Update dependencies from dotnet/arcade by @dotnet-maestro[bot]
in https://github.com/dotnet/msbuild/pull/13000
* Localized file check-in by OneLocBuild Task: Build definition ID 9434:
Build ID 13078382 by @dotnet-bot in
https://github.com/dotnet/msbuild/pull/13003
* Add telemetry tracking for task factory names and runtime usage by
@Copilot in https://github.com/dotnet/msbuild/pull/12989
* [main] Source code updates from dotnet/dotnet by @dotnet-maestro[bot]
in https://github.com/dotnet/msbuild/pull/12987
* Localized file check-in by OneLocBuild Task: Build definition ID 9434:
Build ID 13079827 by @dotnet-bot in
https://github.com/dotnet/msbuild/pull/13010
* Snap for VS 18.3 and update branding to VS 18.4 by @Copilot in
https://github.com/dotnet/msbuild/pull/13005
* [main] Source code updates from dotnet/dotnet by @dotnet-maestro[bot]
in https://github.com/dotnet/msbuild/pull/13012
* Add telemetry to categorize build failure reasons by @Copilot in
https://github.com/dotnet/msbuild/pull/13007
* Update MicrosoftBuildVersion in analyzer template by
@github-actions[bot] in https://github.com/dotnet/msbuild/pull/13011
* Update OptProf drop metadata configuration by @YuliiaKovalova in
https://github.com/dotnet/msbuild/pull/13020
* Fix MSB1025 error when using DistributedFileLogger (-dfl flag) by
@Copilot in https://github.com/dotnet/msbuild/pull/13036
* CmdLine parsing was extracted from XMake and the implementation is
visible to dotnet (attempt 2) by @MichalPavlik in
https://github.com/dotnet/msbuild/pull/12836
* Make task environment path absolutization not throw. by @AR-May in
https://github.com/dotnet/msbuild/pull/13035
* Fix flaky test TestTerminalLoggerTogetherWithOtherLoggers by @Copilot
in https://github.com/dotnet/msbuild/pull/13044
* Enlighten more tasks that require no change by @AR-May in
https://github.com/dotnet/msbuild/pull/13045
* [main] Update dependencies from dotnet/roslyn by @dotnet-maestro[bot]
in https://github.com/dotnet/msbuild/pull/13050
* [main] Update dependencies from dotnet/arcade by @dotnet-maestro[bot]
in https://github.com/dotnet/msbuild/pull/13048
* Add support for MSBUILD_LOGGING_ARGS by @YuliiaKovalova in
https://github.com/dotnet/msbuild/pull/12993
* Fix MSBuildEventSource by @dfederm in
https://github.com/dotnet/msbuild/pull/13030
* Localized file check-in by OneLocBuild Task: Build definition ID 9434:
Build ID 13124182 by @dotnet-bot in
https://github.com/dotnet/msbuild/pull/13053
* [main] Source code updates from dotnet/dotnet by @dotnet-maestro[bot]
in https://github.com/dotnet/msbuild/pull/13031
* Add incrementality tracking support and more detailed analysis of the
build errors reported by @YuliiaKovalova in
https://github.com/dotnet/msbuild/pull/13057
* [automated] Merge branch 'vs18.3' => 'main' by @github-actions[bot]
in https://github.com/dotnet/msbuild/pull/13055
* Enable com support for clr4 in task host by @YuliiaKovalova in
https://github.com/dotnet/msbuild/pull/13033
* Add 'rel/d18.3' to insertion target branch options by @ViktorHofer in
https://github.com/dotnet/msbuild/pull/13067
* add OriginalValue property to AbsolutePath by @JanProvaznik in
https://github.com/dotnet/msbuild/pull/13077
* [automated] Merge branch 'vs18.3' => 'main' by @github-actions[bot]
in https://github.com/dotnet/msbuild/pull/13074
* Localized file check-in by OneLocBuild Task: Build definition ID 9434:
Build ID 13137486 by @dotnet-bot in
https://github.com/dotnet/msbuild/pull/13075
* Refactor FileUtilities.cs and add methods for absolute paths. by
@AR-May in https://github.com/dotnet/msbuild/pull/13079
* Limit extended flag usage to NET and CLR4 runtimes by @YuliiaKovalova
in https://github.com/dotnet/msbuild/pull/13080
* [main] Update dependencies from nuget/nuget.client by
@dotnet-maestro[bot] in https://github.com/dotnet/msbuild/pull/13065
* Localized file check-in by OneLocBuild Task: Build definition ID 9434:
Build ID 13137926 by @dotnet-bot in
https://github.com/dotnet/msbuild/pull/13081
* Update to 10.0.1 references by @rainersigwald in
https://github.com/dotnet/msbuild/pull/13072
* Undo COM support in out of proc task host CLR4 by @YuliiaKovalova in
https://github.com/dotnet/msbuild/pull/13089
* Add Managed Identity for bootstrapper creation by @rainersigwald in
https://github.com/dotnet/msbuild/pull/13092
* Add warning MSB4280 when DOTNET_HOST_PATH is set to a directory by
@Copilot in https://github.com/dotnet/msbuild/pull/13091
... (truncated)
## 18.3.3
## What's Changed
* Streamline BuildGlobResultFromIncludeItem by @Erarndt in
https://github.com/dotnet/msbuild/pull/12178
* [main] Update dependencies from dotnet/roslyn by @dotnet-maestro[bot]
in https://github.com/dotnet/msbuild/pull/12576
* [main] Update dependencies from nuget/nuget.client by
@dotnet-maestro[bot] in https://github.com/dotnet/msbuild/pull/12573
* Add new project telemetry to telemetry documentation by @AR-May in
https://github.com/dotnet/msbuild/pull/12565
* [main] Update dependencies from dotnet/arcade by @dotnet-maestro[bot]
in https://github.com/dotnet/msbuild/pull/12574
* [main] Source code updates from dotnet/dotnet by @dotnet-maestro[bot]
in https://github.com/dotnet/msbuild/pull/12564
* Add 17.14->18.0->main automerges by @rainersigwald in
https://github.com/dotnet/msbuild/pull/12567
* Perf: Reimplement Lookup.Scope tables without ItemDictionary by
@ccastanedaucf in https://github.com/dotnet/msbuild/pull/12320
* Report line number in app.config error by @rainersigwald in
https://github.com/dotnet/msbuild/pull/12535
* Use Builder in ImmutableDictionary.SetItems extension by
@ccastanedaucf in https://github.com/dotnet/msbuild/pull/12402
* Thread-Safe Tasks spec by @AR-May in
https://github.com/dotnet/msbuild/pull/12111
* Branding for 18.1 by @AR-May in
https://github.com/dotnet/msbuild/pull/12586
* Fix Copy task case sensitivity issue on Unix systems by @Copilot in
https://github.com/dotnet/msbuild/pull/12147
* Add null check for environmentVariableProperties by @YuliiaKovalova
in https://github.com/dotnet/msbuild/pull/12594
* Clarify property tracking capabilities in documentation by
@YuliiaKovalova in https://github.com/dotnet/msbuild/pull/12600
* enable out of process execution of inline tasks by @JanProvaznik in
https://github.com/dotnet/msbuild/pull/11948
* [main] Update dependencies from dotnet/roslyn by @dotnet-maestro[bot]
in https://github.com/dotnet/msbuild/pull/12605
* [main] Update dependencies from dotnet/arcade by @dotnet-maestro[bot]
in https://github.com/dotnet/msbuild/pull/12604
* [automated] Merge branch 'vs18.0' => 'main' by @github-actions[bot]
in https://github.com/dotnet/msbuild/pull/12592
* Remove outdated logging + fix the test by @YuliiaKovalova in
https://github.com/dotnet/msbuild/pull/12607
* Move version label next to version prefix by @AR-May in
https://github.com/dotnet/msbuild/pull/12609
* Perf: Avoid unnecessary ProjectMetadataInstance allocations by
@ccastanedaucf in https://github.com/dotnet/msbuild/pull/12599
* Allow NodeProviderOutOfProcTaskHost to manage multiple nodes instead
of one per arch by @surayya-MS in
https://github.com/dotnet/msbuild/pull/12577
* Systematically use FileSystems abstraction instead of BCL file
operations by @Copilot in https://github.com/dotnet/msbuild/pull/12602
* Localized file check-in by OneLocBuild Task: Build definition ID 9434:
Build ID 12531490 by @dotnet-bot in
https://github.com/dotnet/msbuild/pull/12613
* Enable code coverage for Linux/Mac by @fhnaseer in
https://github.com/dotnet/msbuild/pull/11920
* Fix the crash when doing preprocess by @GangWang01 in
https://github.com/dotnet/msbuild/pull/12396
* Track subclasses of MSBuild tasks for telemetry by @Copilot in
https://github.com/dotnet/msbuild/pull/12623
* Update localization comment for main by @AR-May in
https://github.com/dotnet/msbuild/pull/12618
* Perf: Use struct for WorkUnitResult by @ccastanedaucf in
https://github.com/dotnet/msbuild/pull/12403
* Revert "Smaller thread stack size for copy threads" by @JanProvaznik
in https://github.com/dotnet/msbuild/pull/12626
* Localized file check-in by OneLocBuild Task: Build definition ID 9434:
Build ID 12551716 by @dotnet-bot in
https://github.com/dotnet/msbuild/pull/12628
* Localized file check-in by OneLocBuild Task: Build definition ID 9434:
Build ID 12558527 by @dotnet-bot in
https://github.com/dotnet/msbuild/pull/12629
* [main] Update dependencies from dotnet/arcade by @dotnet-maestro[bot]
in https://github.com/dotnet/msbuild/pull/12635
* [main] Update dependencies from nuget/nuget.client by
@dotnet-maestro[bot] in https://github.com/dotnet/msbuild/pull/12634
* Localized file check-in by OneLocBuild Task: Build definition ID 9434:
Build ID 12567344 by @dotnet-bot in
https://github.com/dotnet/msbuild/pull/12633
* allow a parameter to disable the live-updating nodes display by
@baronfel in https://github.com/dotnet/msbuild/pull/12581
* Drafts of build scenario and persistent-problems docs by
@rainersigwald in https://github.com/dotnet/msbuild/pull/11002
* Lookup.ExplicitModifications switch to concrete dictionary type for
enumerator. by @ttstanley in
https://github.com/dotnet/msbuild/pull/11985
* Add new multithreaded APIs by @AR-May in
https://github.com/dotnet/msbuild/pull/12625
* /mt implies inline task factories out of proc by @JanProvaznik in
https://github.com/dotnet/msbuild/pull/12614
* Fix bug with not passing scheduled node id to the task host task by
@AR-May in https://github.com/dotnet/msbuild/pull/12639
* Remove audit sources from NuGet.config by @akoeplinger in
https://github.com/dotnet/msbuild/pull/12641
* [main] Update dependencies from dotnet/arcade by @dotnet-maestro[bot]
in https://github.com/dotnet/msbuild/pull/12673
* [main] Update dependencies from dotnet/roslyn by @dotnet-maestro[bot]
in https://github.com/dotnet/msbuild/pull/12674
* Update codeflow metadata to fix backflow by @premun in
https://github.com/dotnet/msbuild/pull/12678
* Optimize for single capture case by @Erarndt in
https://github.com/dotnet/msbuild/pull/12569
* [automated] Merge branch 'vs18.0' => 'main' by @github-actions[bot]
in https://github.com/dotnet/msbuild/pull/12685
* Multithreaded task routing by @JanProvaznik in
https://github.com/dotnet/msbuild/pull/12617
... (truncated)
## 18.0.2
## What's Changed
* asking terminal for dimensions during every frame is expensive by
@SimaTian in https://github.com/dotnet/msbuild/pull/11504
* Fix the head parameter when search the created PRs by @JaynieBai in
https://github.com/dotnet/msbuild/pull/11569
* [main] Update dependencies from nuget/nuget.client by
@dotnet-maestro[bot] in https://github.com/dotnet/msbuild/pull/11552
* Fix test to take warning MSB5018 by @JaynieBai in
https://github.com/dotnet/msbuild/pull/11499
* Update tsa config by @AR-May in
https://github.com/dotnet/msbuild/pull/11578
* Switch to AwesomeAssertions by @rainersigwald in
https://github.com/dotnet/msbuild/pull/11577
* Update MicrosoftBuildVersion in analyzer template by
@github-actions[bot] in https://github.com/dotnet/msbuild/pull/11581
* Update branding to 17.15 by @maridematte in
https://github.com/dotnet/msbuild/pull/11582
* using virtual fuction instead of reflection by @SimaTian in
https://github.com/dotnet/msbuild/pull/11513
* Address some low-hanging fruit to use newer/better .NET features by
@stephentoub in https://github.com/dotnet/msbuild/pull/11448
* Delete .exp-insertions.yml by @JanProvaznik in
https://github.com/dotnet/msbuild/pull/11601
* Microsoft.Common.CurrentVersion.targets:
_SplitProjectReferencesByFileExistence DependsOn
AssignProjectConfiguration by @vikukush in
https://github.com/dotnet/msbuild/pull/11167
* [main] Update dependencies from dotnet/roslyn by @dotnet-maestro[bot]
in https://github.com/dotnet/msbuild/pull/11600
* [main] Update dependencies from dotnet/arcade by @dotnet-maestro[bot]
in https://github.com/dotnet/msbuild/pull/11587
* Add null check when iterating through TargetOutputs in terminal logger
by @mruxmohan4 in https://github.com/dotnet/msbuild/pull/11606
* [automated] Merge branch 'vs17.14' => 'main' by @github-actions[bot]
in https://github.com/dotnet/msbuild/pull/11572
* Assert instead of ! for nullable by @rainersigwald in
https://github.com/dotnet/msbuild/pull/11545
* Consolidate common IPC / named pipe code by @ccastanedaucf in
https://github.com/dotnet/msbuild/pull/11546
* [main] Update dependencies from dotnet/source-build-reference-packages
by @dotnet-maestro[bot] in https://github.com/dotnet/msbuild/pull/11592
* Update maintenance-packages versions by @carlossanlop in
https://github.com/dotnet/msbuild/pull/11457
* [main] Update dependencies from dotnet/roslyn by @dotnet-maestro[bot]
in https://github.com/dotnet/msbuild/pull/11615
* Update MicrosoftBuildVersion in analyzer template by
@github-actions[bot] in https://github.com/dotnet/msbuild/pull/11590
* Localized file check-in by OneLocBuild Task: Build definition ID 9434:
Build ID 11273384 by @dotnet-bot in
https://github.com/dotnet/msbuild/pull/11608
* Don't force shipping versions to be used in VMR builds by
@jkoritzinsky in https://github.com/dotnet/msbuild/pull/11625
* Fix url formatting in BuildCheck/Codes.md by @MaceWindu in
https://github.com/dotnet/msbuild/pull/11631
* `/documentation/specs/*.md` formatting/linting/cleanup by
@BenjaminBrienen in https://github.com/dotnet/msbuild/pull/11611
* Localized file check-in by OneLocBuild Task: Build definition ID 9434:
Build ID 11285593 by @dotnet-bot in
https://github.com/dotnet/msbuild/pull/11639
* [main] Update dependencies from nuget/nuget.client by
@dotnet-maestro[bot] in https://github.com/dotnet/msbuild/pull/11599
* add telemetry e2e test, address code quality issues by @JanProvaznik
in https://github.com/dotnet/msbuild/pull/11602
* Remove MSBuildRuntimeType conditions by @ViktorHofer in
https://github.com/dotnet/msbuild/pull/11641
* Set IDE0005 (Remove unnecessary using directives) severity to Warning
by @JaynieBai in https://github.com/dotnet/msbuild/pull/11643
* [main] Update dependencies from dotnet/roslyn by @dotnet-maestro[bot]
in https://github.com/dotnet/msbuild/pull/11646
* Remove RichCodeNavIndexer from .vsts-dotnet-ci.yml by @akoeplinger in
https://github.com/dotnet/msbuild/pull/11647
* [REVERT] 11546 refactor common pipe code by @YuliiaKovalova in
https://github.com/dotnet/msbuild/pull/11648
* [automated] Merge branch 'vs17.14' => 'main' by @github-actions[bot]
in https://github.com/dotnet/msbuild/pull/11651
* [main] Update dependencies from nuget/nuget.client by
@dotnet-maestro[bot] in https://github.com/dotnet/msbuild/pull/11645
* Implement ExecCliBuild build check to warn if the Exec task is used to
build a project by @IliaShuliatikov in
https://github.com/dotnet/msbuild/pull/11523
* Localized file check-in by OneLocBuild Task: Build definition ID 9434:
Build ID 11312841 by @dotnet-bot in
https://github.com/dotnet/msbuild/pull/11653
* Improve TargetFrameworkConfusionCheck by @stan-sz in
https://github.com/dotnet/msbuild/pull/11656
* [automated] Merge branch 'vs17.14' => 'main' by @github-actions[bot]
in https://github.com/dotnet/msbuild/pull/11664
* VS Telemetry design documentation by @JanProvaznik in
https://github.com/dotnet/msbuild/pull/11175
* [automated] Merge branch 'vs17.14' => 'main' by @github-actions[bot]
in https://github.com/dotnet/msbuild/pull/11667
* Localized file check-in by OneLocBuild Task: Build definition ID 9434:
Build ID 11332988 by @dotnet-bot in
https://github.com/dotnet/msbuild/pull/11675
* [main] Update dependencies from dotnet/source-build-reference-packages
by @dotnet-maestro[bot] in https://github.com/dotnet/msbuild/pull/11685
* [automated] Merge branch 'vs17.14' => 'main' by @github-actions[bot]
in https://github.com/dotnet/msbuild/pull/11682
* Add separate DeserializePacket() to INodePacketFactory by
@ccastanedaucf in https://github.com/dotnet/msbuild/pull/11650
* [main] Update dependencies from dotnet/roslyn by @dotnet-maestro[bot]
in https://github.com/dotnet/msbuild/pull/11695
* Update BuildCheck code BC0109 -> BC0302 by @YuliiaKovalova in
https://github.com/dotnet/msbuild/pull/11696
* [main] Update dependencies from nuget/nuget.client by
@dotnet-maestro[bot] in https://github.com/dotnet/msbuild/pull/11689
... (truncated)
## 17.14.28
## What's Changed
* [vs17.10] Update dependencies from dotnet/arcade by
@dotnet-maestro[bot] in https://github.com/dotnet/msbuild/pull/11586
* [vs17.11] Update dependencies from dotnet/arcade by
@dotnet-maestro[bot] in https://github.com/dotnet/msbuild/pull/11585
* [vs17.12] Update dependencies from dotnet/arcade by
@dotnet-maestro[bot] in https://github.com/dotnet/msbuild/pull/11589
* add preview suffix in experimental CI Builds, enable expinsert by
@JanProvaznik in https://github.com/dotnet/msbuild/pull/11534
* Add the check on version bump up by @GangWang01 in
https://github.com/dotnet/msbuild/pull/11469
* [automated] Merge branch 'vs17.8' => 'vs17.10' by
@github-actions[bot] in https://github.com/dotnet/msbuild/pull/11668
* [vs17.11] Update dependencies from dotnet/arcade by
@dotnet-maestro[bot] in https://github.com/dotnet/msbuild/pull/11691
* [vs17.8] Update dependencies from dotnet/arcade by
@dotnet-maestro[bot] in https://github.com/dotnet/msbuild/pull/11688
* [vs17.12] Update dependencies from dotnet/arcade by
@dotnet-maestro[bot] in https://github.com/dotnet/msbuild/pull/11694
* [automated] Merge branch 'vs17.10' => 'vs17.11' by
@github-actions[bot] in https://github.com/dotnet/msbuild/pull/11687
* [vs17.10] Update dependencies from dotnet/arcade by
@dotnet-maestro[bot] in https://github.com/dotnet/msbuild/pull/11693
* [vs17.8] Update dependencies from dotnet/arcade by
@dotnet-maestro[bot] in https://github.com/dotnet/msbuild/pull/11711
* [vs17.10] Update dependencies from dotnet/arcade by
@dotnet-maestro[bot] in https://github.com/dotnet/msbuild/pull/11713
* [vs17.11] Update dependencies from dotnet/arcade by
@dotnet-maestro[bot] in https://github.com/dotnet/msbuild/pull/11712
* [vs17.12] Update dependencies from dotnet/arcade by
@dotnet-maestro[bot] in https://github.com/dotnet/msbuild/pull/11716
* Make 16.11 pass build and release by @maridematte in
https://github.com/dotnet/msbuild/pull/11658
* [vs17.12] Merge tag v17.12.36 by @surayya-MS in
https://github.com/dotnet/msbuild/pull/11864
* [vs16.11] Merge tag v16.11.6 by @surayya-MS in
https://github.com/dotnet/msbuild/pull/11871
* [vs17.12] Fixing the contention condition caused by
RegisterResolversManifests by @github-actions[bot] in
https://github.com/dotnet/msbuild/pull/11612
* [vs17.8] Merge tag v17.8.29 by @surayya-MS in
https://github.com/dotnet/msbuild/pull/11866
* [vs17.10] Merge tag v17.10.29 by @surayya-MS in
https://github.com/dotnet/msbuild/pull/11865
* Fix invalid substitutionGroup in Microsoft.Build.CommonTypes by
@YuliiaKovalova in https://github.com/dotnet/msbuild/pull/11902
* Update VisualStudio.ChannelName to int.d17.14 by @YuliiaKovalova in
https://github.com/dotnet/msbuild/pull/11908
* Fix insertion target branches and schedule by @JanProvaznik in
https://github.com/dotnet/msbuild/pull/11909
* [vs17.8] Update dependencies from dotnet/arcade by
@dotnet-maestro[bot] in https://github.com/dotnet/msbuild/pull/11746
* [vs17.10] Update dependencies from dotnet/arcade by
@dotnet-maestro[bot] in https://github.com/dotnet/msbuild/pull/11750
* [vs17.11] Update dependencies from dotnet/arcade by
@dotnet-maestro[bot] in https://github.com/dotnet/msbuild/pull/11748
* [vs17.12] Update dependencies from dotnet/arcade by
@dotnet-maestro[bot] in https://github.com/dotnet/msbuild/pull/11901
* [vs17.14] Update dependencies from nuget/nuget.client by
@dotnet-maestro[bot] in https://github.com/dotnet/msbuild/pull/11790
* [automated] Merge branch 'vs17.8' => 'vs17.10' by
@github-actions[bot] in https://github.com/dotnet/msbuild/pull/11904
* [automated] Merge branch 'vs17.10' => 'vs17.11' by
@github-actions[bot] in https://github.com/dotnet/msbuild/pull/11905
* [automated] Merge branch 'vs17.11' => 'vs17.12' by
@github-actions[bot] in https://github.com/dotnet/msbuild/pull/11967
* [vs17.12] Update dependencies from dotnet/arcade by
@dotnet-maestro[bot] in https://github.com/dotnet/msbuild/pull/11982
* [vs17.8] Update dependencies from dotnet/arcade by
@dotnet-maestro[bot] in https://github.com/dotnet/msbuild/pull/11995
* [vs17.11] Update dependencies from dotnet/arcade by
@dotnet-maestro[bot] in https://github.com/dotnet/msbuild/pull/11996
* [vs17.10] Update dependencies from dotnet/arcade by
@dotnet-maestro[bot] in https://github.com/dotnet/msbuild/pull/11997
* [automated] Merge branch 'vs17.12' => 'vs17.14' by
@github-actions[bot] in https://github.com/dotnet/msbuild/pull/11991
* [vs17.14] Replace obsolete UCOMITypeInfo with recommended
System.Runtime.InteropServices.ComTypes.ITypeInfo by
@github-actions[bot] in https://github.com/dotnet/msbuild/pull/12012
* [vs17.14] Revert change in _SplitProjectReferencesByFileExistence by
@YuliiaKovalova in https://github.com/dotnet/msbuild/pull/12035
* Add the switch running OptProf tasks by @GangWang01 in
https://github.com/dotnet/msbuild/pull/12076
* [vs17.8] Update dependencies from dotnet/arcade by
@dotnet-maestro[bot] in https://github.com/dotnet/msbuild/pull/12086
* [vs17.12] Update dependencies from dotnet/arcade by
@dotnet-maestro[bot] in https://github.com/dotnet/msbuild/pull/12091
* [vs17.10] Update dependencies from dotnet/arcade by
@dotnet-maestro[bot] in https://github.com/dotnet/msbuild/pull/12089
* [vs17.14] Update dependencies from dotnet/arcade by
@dotnet-maestro[bot] in https://github.com/dotnet/msbuild/pull/12090
* [vs17.11] Update dependencies from dotnet/arcade by
@dotnet-maestro[bot] in https://github.com/dotnet/msbuild/pull/12088
* Override SkipApplyOptimizationData to true when disabling OptProf data
collection by @GangWang01 in
https://github.com/dotnet/msbuild/pull/12106
* [automated] Merge branch 'vs17.11' => 'vs17.12' by
@github-actions[bot] in https://github.com/dotnet/msbuild/pull/12103
* [automated] Merge branch 'vs17.12' => 'vs17.14' by
@github-actions[bot] in https://github.com/dotnet/msbuild/pull/12134
* Bump to NuGet 5.11.6 by @rainersigwald in
https://github.com/dotnet/msbuild/pull/12168
... (truncated)
## 17.14.8
## What's Changed
* [vs17.14] Binlog not produced for C++ project on Visual Studio Load
Fix by @surayya-MS in https://github.com/dotnet/msbuild/pull/11774
* [vs17.14] Merge tag v17.14.8 by @surayya-MS in
https://github.com/dotnet/msbuild/pull/11861
**Full Changelog**:
https://github.com/dotnet/msbuild/compare/v17.14.5...v17.14.8
## 17.14.5
## What's Changed
* [vs17.6] Dont ngen taskhost Fixes our lack of optprof data (#8737) by
@JanKrivanek in https://github.com/dotnet/msbuild/pull/8926
* [vs17.6] Bump version by @JanKrivanek in
https://github.com/dotnet/msbuild/pull/8932
* Update System.Security.Cryptography.Pkcs by @JanKrivanek in
https://github.com/dotnet/msbuild/pull/8977
* [vs17.8] Workaround for incorrect encoding of PUA range in GB18030 Uri
string by @sujitnayak in https://github.com/dotnet/msbuild/pull/9751
* [vs17.10] Check version bump on release branches' update by
@github-actions in https://github.com/dotnet/msbuild/pull/10041
* [release/vs17.6] Onboard 1es templates (#9924) by @surayya-MS in
https://github.com/dotnet/msbuild/pull/10053
* [automated] Merge branch 'vs17.6' => 'vs17.8' by @dotnet-maestro-bot
in https://github.com/dotnet/msbuild/pull/10056
* [automated] Merge branch 'vs17.9' => 'vs17.10' by @dotnet-maestro-bot
in https://github.com/dotnet/msbuild/pull/10081
* Disable localization for vs17.10 by @AR-May in
https://github.com/dotnet/msbuild/pull/10269
* Enable private feeds for release branch by @AR-May in
https://github.com/dotnet/msbuild/pull/10355
* [vs17.10] Update dependencies from dotnet/arcade by @dotnet-maestro
in https://github.com/dotnet/msbuild/pull/10809
* CG alert cleaning on VS17.10 by @GangWang01 in
https://github.com/dotnet/msbuild/pull/10724
* CG alert cleaning on VS17.8 by @GangWang01 in
https://github.com/dotnet/msbuild/pull/10725
* [vs17.10] Update dependencies from dotnet/arcade by @dotnet-maestro
in https://github.com/dotnet/msbuild/pull/10833
* [vs17.8] update arcade and fix build by @JanProvaznik in
https://github.com/dotnet/msbuild/pull/10838
* [vs17.8] Sync internal and public branches by @YuliiaKovalova in
https://github.com/dotnet/msbuild/pull/10858
* [vs17.10] Update dependencies from dotnet/arcade by @dotnet-maestro
in https://github.com/dotnet/msbuild/pull/10896
* [vs17.8] Update dependencies from dotnet/arcade by @dotnet-maestro in
https://github.com/dotnet/msbuild/pull/10894
* [vs17.8] Update dependencies from dotnet/arcade by @dotnet-maestro in
https://github.com/dotnet/msbuild/pull/10986
* [vs17.8] Update dependencies from dotnet/arcade by @dotnet-maestro in
https://github.com/dotnet/msbuild/pull/11030
* [vs17.8] Backport VS insertion pipeline YMLs by @github-actions in
https://github.com/dotnet/msbuild/pull/11066
* [17.8] Unblock opt-prof in release branches by @JanKrivanek in
https://github.com/dotnet/msbuild/pull/11112
* [vs17.8] Fix setting package versions in VS insertion by
@github-actions in https://github.com/dotnet/msbuild/pull/11103
* Update vs/msbuild version by @JanKrivanek in
https://github.com/dotnet/msbuild/pull/11115
* Update xcopy-msbuild version to 17.8.5 by @GangWang01 in
https://github.com/dotnet/msbuild/pull/11118
* Add inter-branch merge flow file by @GangWang01 in
https://github.com/dotnet/msbuild/pull/11123
* [vs17.8] Unblock OptProf build by @JanKrivanek in
https://github.com/dotnet/msbuild/pull/11121
* [vs17.10] Update dependencies from dotnet/arcade by @dotnet-maestro
in https://github.com/dotnet/msbuild/pull/10992
* 17.14 Branding by @JanKrivanek in
https://github.com/dotnet/msbuild/pull/11128
* Bump up System.Text.Json to 8.0.5 by @GangWang01 in
https://github.com/dotnet/msbuild/pull/11134
* [automated] Merge branch 'vs17.8' => 'vs17.10' by @github-actions in
https://github.com/dotnet/msbuild/pull/11124
* Update localization comment for main by @JanKrivanek in
https://github.com/dotnet/msbuild/pull/11138
* Option to avoid "fixing" \ in new TaskItem() by @maridematte in
https://github.com/dotnet/msbuild/pull/11120
* Disable packing in bootstrap build by @JanKrivanek in
https://github.com/dotnet/msbuild/pull/11133
* Fixing the contention condition caused by RegisterResolversManifests
by @SimaTian in https://github.com/dotnet/msbuild/pull/11079
* [vs17.10] Run tests even if version is not bumped by @github-actions
in https://github.com/dotnet/msbuild/pull/11059
* Update interbranch flow by @JanKrivanek in
https://github.com/dotnet/msbuild/pull/11139
* Localized file check-in by OneLocBuild Task: Build definition ID 9434:
Build ID 10720707 by @dotnet-bot in
https://github.com/dotnet/msbuild/pull/11154
* Fix ambiguous reference for ExceptionHandling class by @mthalman in
https://github.com/dotnet/msbuild/pull/11173
* [main] Update dependencies from dotnet/roslyn by @dotnet-maestro in
https://github.com/dotnet/msbuild/pull/11151
* [main] Update dependencies from nuget/nuget.client by @dotnet-maestro
in https://github.com/dotnet/msbuild/pull/11150
* telemetry onepager by @JanProvaznik in
https://github.com/dotnet/msbuild/pull/11013
* fix: Update json syntax of merge-flow config by @f-alizada in
https://github.com/dotnet/msbuild/pull/11190
* [main] Update dependencies from dotnet/source-build-reference-packages
by @dotnet-maestro in https://github.com/dotnet/msbuild/pull/11176
* Fix casing for UTF8Output propery by @baronfel in
https://github.com/dotnet/msbuild/pull/11179
* [main] Update dependencies from nuget/nuget.client by @dotnet-maestro
in https://github.com/dotnet/msbuild/pull/11186
* [main] Update dependencies from nuget/nuget.client by @dotnet-maestro
in https://github.com/dotnet/msbuild/pull/11198
* Prevent reading from .rsp file for worker nodes by @YuliiaKovalova in
https://github.com/dotnet/msbuild/pull/11170
* Handle the case for updated binding redirects by @YuliiaKovalova in
https://github.com/dotnet/msbuild/pull/11012
... (truncated)
## 17.14.0-preview-25177-05
[Release](https://github.com/dotnet/msbuild/releases/tag/v17.14.0-preview-25177-05)
## What's Changed
* null check logging mechanism before logging glob failure by
@JanProvaznik in https://github.com/dotnet/msbuild/pull/11537
* Update .NET Framework references to 9.0.0 by @rainersigwald in
https://github.com/dotnet/msbuild/pull/11145
* [CodeQL][SM03800] Remove unapproved usage of DSACryptoServiceProvider
by @sujitnayak in https://github.com/dotnet/msbuild/pull/11540
* Opt-in .sln parsing with Microsoft.VisualStudio.SolutionPersistence by
@surayya-MS in https://github.com/dotnet/msbuild/pull/11538
* Upgrade `Microsoft.VisualStudio.SolutionPersistence` to 1.0.52 by
@surayya-MS in https://github.com/dotnet/msbuild/pull/11549
* Load `before/after.{solutionName}.sln.targets` for .`slnx` by
@surayya-MS in https://github.com/dotnet/msbuild/pull/11535
* Fix building slnf with @ in the path by @surayya-MS in
https://github.com/dotnet/msbuild/pull/11421
* Update copy logic to use dedicated threads. by @Erarndt in
https://github.com/dotnet/msbuild/pull/11272
* Update merge flow 17.14 -> main by @maridematte in
https://github.com/dotnet/msbuild/pull/11559
* Update VS insertions for 17.14 by @maridematte in
https://github.com/dotnet/msbuild/pull/11558
* Remove deprecated 4.3.* System package references by @ViktorHofer in
https://github.com/dotnet/msbuild/pull/11555
* Fix entries in Version.Details.xml and make version overriding clearer
by @akoeplinger in https://github.com/dotnet/msbuild/pull/11561
* [main] Update dependencies from dotnet/roslyn by @dotnet-maestro in
https://github.com/dotnet/msbuild/pull/11553
* [automated] Merge branch 'vs17.14' => 'main' by @github-actions in
https://github.com/dotnet/msbuild/pull/11562
* [vs17.14] Remove deprecated 4.3.* System package references & fix
entries in Version.Details.xml by @github-actions in
https://github.com/dotnet/msbuild/pull/11571
* Don't ngen StringTools.net35 by @rainersigwald in
https://github.com/dotnet/msbuild/pull/11544
* asking terminal for dimensions during every frame is expensive by
@SimaTian in https://github.com/dotnet/msbuild/pull/11504
* Fix the head parameter when search the created PRs by @JaynieBai in
https://github.com/dotnet/msbuild/pull/11569
* [main] Update dependencies from nuget/nuget.client by @dotnet-maestro
in https://github.com/dotnet/msbuild/pull/11552
* Fix test to take warning MSB5018 by @JaynieBai in
https://github.com/dotnet/msbuild/pull/11499
* Update tsa config by @AR-May in
https://github.com/dotnet/msbuild/pull/11578
* Localized file check-in by OneLocBuild Task: Build definition ID 9434:
Build ID 11098688 by @dotnet-bot in
https://github.com/dotnet/msbuild/pull/11501
* Switch to AwesomeAssertions by @rainersigwald in
https://github.com/dotnet/msbuild/pull/11577
* Update MicrosoftBuildVersion in analyzer template by @github-actions
in https://github.com/dotnet/msbuild/pull/11581
* Update branding to 17.15 by @maridematte in
https://github.com/dotnet/msbuild/pull/11582
* using virtual fuction instead of reflection by @SimaTian in
https://github.com/dotnet/msbuild/pull/11513
* Address some low-hanging fruit to use newer/better .NET features by
@stephentoub in https://github.com/dotnet/msbuild/pull/11448
* [automated] Merge branch 'vs17.13' => 'vs17.14' by @github-actions in
https://github.com/dotnet/msbuild/pull/11584
* Delete .exp-insertions.yml by @JanProvaznik in
https://github.com/dotnet/msbuild/pull/11601
* Microsoft.Common.CurrentVersion.targets:
_SplitProjectReferencesByFileExistence DependsOn
AssignProjectConfiguration by @vikukush in
https://github.com/dotnet/msbuild/pull/11167
* [main] Update dependencies from dotnet/roslyn by @dotnet-maestro in
https://github.com/dotnet/msbuild/pull/11600
* Make SolutionParser package reference private by @maridematte in
https://github.com/dotnet/msbuild/pull/11603
* [main] Update dependencies from dotnet/arcade by @dotnet-maestro in
https://github.com/dotnet/msbuild/pull/11587
* Add null check when iterating through TargetOutputs in terminal logger
by @mruxmohan4 in https://github.com/dotnet/msbuild/pull/11606
* [automated] Merge branch 'vs17.14' => 'main' by @github-actions in
https://github.com/dotnet/msbuild/pull/11572
* Assert instead of ! for nullable by @rainersigwald in
https://github.com/dotnet/msbuild/pull/11545
* Consolidate common IPC / named pipe code by @ccastanedaucf in
https://github.com/dotnet/msbuild/pull/11546
* [main] Update dependencies from dotnet/source-build-reference-packages
by @dotnet-maestro in https://github.com/dotnet/msbuild/pull/11592
* Update maintenance-packages versions by @carlossanlop in
https://github.com/dotnet/msbuild/pull/11457
* [vs17.14] Microsoft.Common.CurrentVersion.targets:
_SplitProjectReferencesByFileExistence DependsOn
AssignProjectConfiguration by @github-actions in
https://github.com/dotnet/msbuild/pull/11620
* [main] Update dependencies from dotnet/roslyn by @dotnet-maestro in
https://github.com/dotnet/msbuild/pull/11615
* Pin samples/ProjectCachePlugin to released MSBuild by @rainersigwald
in https://github.com/dotnet/msbuild/pull/11563
* [vs17.14] Add null check when iterating through TargetOutputs in
terminal logger by @github-actions in
https://github.com/dotnet/msbuild/pull/11621
* Update MicrosoftBuildVersion in analyzer template by @github-actions
in https://github.com/dotnet/msbuild/pull/11590
* Localized file check-in by OneLocBuild Task: Build definition ID 9434:
Build ID 11273384 by @dotnet-bot in
https://github.com/dotnet/msbuild/pull/11608
* Don't force shipping versions to be used in VMR builds by
@jkoritzinsky in https://github.com/dotnet/msbuild/pull/11625
* Fix url formatting in BuildCheck/Codes.md by @MaceWindu in
https://github.com/dotnet/msbuild/pull/11631
... (truncated)
## 17.14.0-preview-25155-01
[Release](https://github.com/dotnet/core/releases/tag/v10.0.0-preview.2)
## What's Changed
* [vs17.6] Dont ngen taskhost Fixes our lack of optprof data (#8737) by
@JanKrivanek in https://github.com/dotnet/msbuild/pull/8926
* [vs17.6] Bump version by @JanKrivanek in
https://github.com/dotnet/msbuild/pull/8932
* Update System.Security.Cryptography.Pkcs by @JanKrivanek in
https://github.com/dotnet/msbuild/pull/8977
* [vs17.8] Workaround for incorrect encoding of PUA range in GB18030 Uri
string by @sujitnayak in https://github.com/dotnet/msbuild/pull/9751
* [release/vs17.6] Onboard 1es templates (#9924) by @surayya-MS in
https://github.com/dotnet/msbuild/pull/10053
* [automated] Merge branch 'vs17.6' => 'vs17.8' by @dotnet-maestro-bot
in https://github.com/dotnet/msbuild/pull/10056
* CG alert cleaning on VS17.8 by @GangWang01 in
https://github.com/dotnet/msbuild/pull/10725
* [vs17.8] update arcade and fix build by @JanProvaznik in
https://github.com/dotnet/msbuild/pull/10838
* [vs17.8] Sync internal and public branches by @YuliiaKovalova in
https://github.com/dotnet/msbuild/pull/10858
* [vs17.8] Update dependencies from dotnet/arcade by @dotnet-maestro in
https://github.com/dotnet/msbuild/pull/10894
* [vs17.8] Update dependencies from dotnet/arcade by @dotnet-maestro in
https://github.com/dotnet/msbuild/pull/10986
* [vs17.8] Update dependencies from dotnet/arcade by @dotnet-maestro in
https://github.com/dotnet/msbuild/pull/11030
* [vs17.8] Backport VS insertion pipeline YMLs by @github-actions in
https://github.com/dotnet/msbuild/pull/11066
* [17.8] Unblock opt-prof in release branches by @JanKrivanek in
https://github.com/dotnet/msbuild/pull/11112
* [vs17.8] Fix setting package versions in VS insertion by
@github-actions in https://github.com/dotnet/msbuild/pull/11103
* Update vs/msbuild version by @JanKrivanek in
https://github.com/dotnet/msbuild/pull/11115
* Update xcopy-msbuild version to 17.8.5 by @GangWang01 in
https://github.com/dotnet/msbuild/pull/11118
* Add inter-branch merge flow file by @GangWang01 in
https://github.com/dotnet/msbuild/pull/11123
* [vs17.8] Unblock OptProf build by @JanKrivanek in
https://github.com/dotnet/msbuild/pull/11121
* Bump up System.Text.Json to 8.0.5 by @GangWang01 in
https://github.com/dotnet/msbuild/pull/11134
* [vs17.8] Update dependencies from dotnet/arcade by @dotnet-maestro in
https://github.com/dotnet/msbuild/pull/11218
* [vs17.8] disallow inserting pkgs twice in VS insertion by
@JanProvaznik in https://github.com/dotnet/msbuild/pull/11152
* [vs17.8] Update dependencies from dotnet/arcade by @dotnet-maestro in
https://github.com/dotnet/msbuild/pull/11261
* Don't autocomplete servicing insertions by @JanProvaznik in
https://github.com/dotnet/msbuild/pull/11283
* [vs17.8] Select proper VS channel by @JanKrivanek in
https://github.com/dotnet/msbuild/pull/11246
* [vs17.8] Update dependencies from dotnet/arcade by @dotnet-maestro in
https://github.com/dotnet/msbuild/pull/11306
* [main] Update dependencies from dotnet/arcade by @dotnet-maestro in
https://github.com/dotnet/msbuild/pull/11367
* [vs17.12] Update dependencies from dotnet/arcade by @dotnet-maestro
in https://github.com/dotnet/msbuild/pull/11371
* [main] Update dependencies from nuget/nuget.client by @dotnet-maestro
in https://github.com/dotnet/msbuild/pull/11339
* [vs17.10] Update dependencies from dotnet/arcade by @dotnet-maestro
in https://github.com/dotnet/msbuild/pull/11408
* [vs17.11] Update dependencies from dotnet/arcade by @dotnet-maestro
in https://github.com/dotnet/msbuild/pull/11406
* [vs17.13] Update dependencies from dotnet/arcade by @dotnet-maestro
in https://github.com/dotnet/msbuild/pull/11407
* [vs17.12] Fix arcade tool restore by @JanProvaznik in
https://github.com/dotnet/msbuild/pull/11413
* [automated] Merge branch 'vs17.12' => 'vs17.13' by @github-actions in
https://github.com/dotnet/msbuild/pull/11419
* Prevent race condition in LoggingService by @YuliiaKovalova in
https://github.com/dotnet/msbuild/pull/11284
* [automated] Merge branch 'vs17.13' => 'main' by @github-actions in
https://github.com/dotnet/msbuild/pull/11422
* Bump `StyleCop.Analyzers` to `1.2.0-beta.556` by @xtqqczze in
https://github.com/dotnet/msbuild/pull/11398
* Avoid creation of temporary strings where possible by @Erarndt in
https://github.com/dotnet/msbuild/pull/11380
* Keep ActivityId correlations in ETW
by @rainersigwald in https://github.com/dotnet/msbuild/pull/10909
* [vs17.8] Update dependencies from dotnet/arcade by @dotnet-maestro in
https://github.com/dotnet/msbuild/pull/11404
* [9.0.1xx] Workaround for "MSB4166: Child node "1" exited prematurely
for build check by @YuliiaKovalova in
https://github.com/dotnet/msbuild/pull/11384
* Add EmbedInteropTypes to COMFileReference
by @rainersigwald in https://github.com/dotnet/msbuild/pull/11414
* [main] Update dependencies from dotnet/roslyn by @dotnet-maestro in
https://github.com/dotnet/msbuild/pull/11409
* [automated] Merge branch 'vs17.12' => 'vs17.13' by @github-actions in
https://github.com/dotnet/msbuild/pull/11424
* Port 1ES Pipeline Templates PR by @GangWang01 in
https://github.com/dotnet/msbuild/pull/11425
... (truncated)
## 17.14.0-preview-25110-01
[Release](https://github.com/dotnet/core/releases/tag/v10.0.0-preview.1)
## What's Changed
* [vs17.10] Check version bump on release branches' update by
@github-actions in https://github.com/dotnet/msbuild/pull/10041
* [automated] Merge branch 'vs17.9' => 'vs17.10' by @dotnet-maestro-bot
in https://github.com/dotnet/msbuild/pull/10081
* Disable localization for vs17.10 by @AR-May in
https://github.com/dotnet/msbuild/pull/10269
* Enable private feeds for release branch by @AR-May in
https://github.com/dotnet/msbuild/pull/10355
* [vs17.10] Update dependencies from dotnet/arcade by @dotnet-maestro
in https://github.com/dotnet/msbuild/pull/10809
* CG alert cleaning on VS17.10 by @GangWang01 in
https://github.com/dotnet/msbuild/pull/10724
* [vs17.10] Update dependencies from dotnet/arcade by @dotnet-maestro
in https://github.com/dotnet/msbuild/pull/10833
* [vs17.10] Update dependencies from dotnet/arcade by @dotnet-maestro
in https://github.com/dotnet/msbuild/pull/10896
* [vs17.10] Update dependencies from dotnet/arcade by @dotnet-maestro
in https://github.com/dotnet/msbuild/pull/10992
* 17.14 Branding by @JanKrivanek in
https://github.com/dotnet/msbuild/pull/11128
* [automated] Merge branch 'vs17.8' => 'vs17.10' by @github-actions in
https://github.com/dotnet/msbuild/pull/11124
* Update localization comment for main by @JanKrivanek in
https://github.com/dotnet/msbuild/pull/11138
* Option to avoid "fixing" \ in new TaskItem() by @maridematte in
https://github.com/dotnet/msbuild/pull/11120
* Disable packing in bootstrap build by @JanKrivanek in
https://github.com/dotnet/msbuild/pull/11133
* Fixing the contention condition caused by RegisterResolversManifests
by @SimaTian in https://github.com/dotnet/msbuild/pull/11079
* [vs17.10] Run tests even if version is not bumped by @github-actions
in https://github.com/dotnet/msbuild/pull/11059
* Update interbranch flow by @JanKrivanek in
https://github.com/dotnet/msbuild/pull/11139
* Localized file check-in by OneLocBuild Task: Build definition ID 9434:
Build ID 10720707 by @dotnet-bot in
https://github.com/dotnet/msbuild/pull/11154
* Fix ambiguous reference for ExceptionHandling class by @mthalman in
https://github.com/dotnet/msbuild/pull/11173
* [main] Update dependencies from dotnet/roslyn by @dotnet-maestro in
https://github.com/dotnet/msbuild/pull/11151
* [main] Update dependencies from nuget/nuget.client by @dotnet-maestro
in https://github.com/dotnet/msbuild/pull/11150
* telemetry onepager by @JanProvaznik in
https://github.com/dotnet/msbuild/pull/11013
* fix: Update json syntax of merge-flow config by @f-alizada in
https://github.com/dotnet/msbuild/pull/11190
* [main] Update dependencies from dotnet/source-build-reference-packages
by @dotnet-maestro in https://github.com/dotnet/msbuild/pull/11176
* Fix casing for UTF8Output propery by @baronfel in
https://github.com/dotnet/msbuild/pull/11179
* [main] Update dependencies from nuget/nuget.client by @dotnet-maestro
in https://github.com/dotnet/msbuild/pull/11186
* [main] Update dependencies from nuget/nuget.client by @dotnet-maestro
in https://github.com/dotnet/msbuild/pull/11198
* Prevent reading from .rsp file for worker nodes by @YuliiaKovalova in
https://github.com/dotnet/msbuild/pull/11170
* Handle the case for updated binding redirects by @YuliiaKovalova in
https://github.com/dotnet/msbuild/pull/11012
* Update ChangeWaves doc by @JanKrivanek in
https://github.com/dotnet/msbuild/pull/11174
* Add IntelliSense for testing properties by @Youssef1313 in
https://github.com/dotnet/msbuild/pull/11029
* enable experimentally inserting to release branches from UI by
@JanProvaznik in https://github.com/dotnet/msbuild/pull/11205
* Expose processes leveraged by BuildManager by @JanKrivanek in
https://github.com/dotnet/msbuild/pull/11146
* changing expander regex by @SimaTian in
https://github.com/dotnet/msbuild/pull/11210
* Add result for target stop event trace by @JaynieBai in
https://github.com/dotnet/msbuild/pull/11202
* Add more processes Logs for failed case
Microsoft.Build.UnitTests.Exec_Tests.Timeout by @JaynieBai in
https://github.com/dotnet/msbuild…
…the rust-zed group (#127) Bumps the rust-zed group in /editors/zed with 1 update: [quick-xml](https://github.com/tafia/quick-xml). Updates `quick-xml` from 0.40.1 to 0.41.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/tafia/quick-xml/releases">quick-xml's releases</a>.</em></p> <blockquote> <h2>v0.41.0 - Secuirity fixes</h2> <h2>What's Changed</h2> <h3>New Features</h3> <ul> <li><a href="https://redirect.github.com/tafia/quick-xml/issues/970">#970</a>: Add <code>NsReader::resolver_mut()</code> and <code>NamespaceResolver::{max_declarations_per_element, set_max_declarations_per_element}</code>.</li> </ul> <h3>Bug Fixes</h3> <ul> <li><a href="https://redirect.github.com/tafia/quick-xml/issues/969">#969</a>: <code>Attributes</code> (and anything that iterates <code>BytesStart::attributes()</code> with the default <code>with_checks(true)</code>) no longer takes O(N²) time on a start tag with a large number of attributes. Small tags keep the previous linear scan; larger ones switch to a 64-bit hash pre-filter, so the whole tag is O(N). The exact <code>AttrError::Duplicated(new, prev)</code> positions are unchanged.</li> <li><a href="https://redirect.github.com/tafia/quick-xml/issues/970">#970</a>: <code>NamespaceResolver::push</code> (and hence every <code>NsReader</code> <code>Start</code>/<code>Empty</code> event) now rejects a start tag that declares more than <code>DEFAULT_MAX_DECLARATIONS_PER_ELEMENT</code> (256) <code>xmlns</code> / <code>xmlns:*</code> namespace bindings, returning the new <code>NamespaceError::TooManyDeclarations</code>. Previously <code>push</code> allocated one <code>NamespaceBinding</code> per declaration with no upper bound, before the event was returned to the caller, so an <code>NsReader</code> consumer could not bound its memory exposure on untrusted input. The limit is configurable via <code>NamespaceResolver::set_max_declarations_per_element</code> (use <code>usize::MAX</code> to disable).</li> </ul> <p><a href="https://redirect.github.com/tafia/quick-xml/issues/969">#969</a>: <a href="https://redirect.github.com/tafia/quick-xml/issues/969">tafia/quick-xml#969</a> <a href="https://redirect.github.com/tafia/quick-xml/issues/970">#970</a>: <a href="https://redirect.github.com/tafia/quick-xml/issues/970">tafia/quick-xml#970</a></p> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/qifan-sailboat"><code>@qifan-sailboat</code></a> made their first contribution in <a href="https://redirect.github.com/tafia/quick-xml/pull/972">tafia/quick-xml#972</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/tafia/quick-xml/compare/v0.40.1...v0.41.0">https://github.com/tafia/quick-xml/compare/v0.40.1...v0.41.0</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/tafia/quick-xml/blob/master/Changelog.md">quick-xml's changelog</a>.</em></p> <blockquote> <h2>0.41.0 -- 2026-06-29</h2> <h3>New Features</h3> <ul> <li><a href="https://redirect.github.com/tafia/quick-xml/issues/970">#970</a>: Add <code>NsReader::resolver_mut()</code> and <code>NamespaceResolver::{max_declarations_per_element, set_max_declarations_per_element}</code>.</li> </ul> <h3>Bug Fixes</h3> <ul> <li><a href="https://redirect.github.com/tafia/quick-xml/issues/969">#969</a>: <code>Attributes</code> (and anything that iterates <code>BytesStart::attributes()</code> with the default <code>with_checks(true)</code>) no longer takes O(N²) time on a start tag with a large number of attributes. Small tags keep the previous linear scan; larger ones switch to a 64-bit hash pre-filter, so the whole tag is O(N). The exact <code>AttrError::Duplicated(new, prev)</code> positions are unchanged.</li> <li><a href="https://redirect.github.com/tafia/quick-xml/issues/970">#970</a>: <code>NamespaceResolver::push</code> (and hence every <code>NsReader</code> <code>Start</code>/<code>Empty</code> event) now rejects a start tag that declares more than <code>DEFAULT_MAX_DECLARATIONS_PER_ELEMENT</code> (256) <code>xmlns</code> / <code>xmlns:*</code> namespace bindings, returning the new <code>NamespaceError::TooManyDeclarations</code>. Previously <code>push</code> allocated one <code>NamespaceBinding</code> per declaration with no upper bound, before the event was returned to the caller, so an <code>NsReader</code> consumer could not bound its memory exposure on untrusted input. The limit is configurable via <code>NamespaceResolver::set_max_declarations_per_element</code> (use <code>usize::MAX</code> to disable).</li> </ul> <p><a href="https://redirect.github.com/tafia/quick-xml/issues/969">#969</a>: <a href="https://redirect.github.com/tafia/quick-xml/issues/969">tafia/quick-xml#969</a> <a href="https://redirect.github.com/tafia/quick-xml/issues/970">#970</a>: <a href="https://redirect.github.com/tafia/quick-xml/issues/970">tafia/quick-xml#970</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/tafia/quick-xml/commit/4deda08abeffdc188c269360229cf47e12a77a9f"><code>4deda08</code></a> Release 0.41.0</li> <li><a href="https://github.com/tafia/quick-xml/commit/1b3b73b4cc6e1e5c2f40fb1cb955d3bbe264368f"><code>1b3b73b</code></a> Remove unused argument to <code>check!</code></li> <li><a href="https://github.com/tafia/quick-xml/commit/07f3db8343cf152f5bc3483ef5b3164582489bea"><code>07f3db8</code></a> Fix O(N²) duplicate-attribute check in <code>Attributes</code> iterator</li> <li><a href="https://github.com/tafia/quick-xml/commit/7ca25266e94987210daa864889ab15c9332c8a2a"><code>7ca2526</code></a> Cap namespace declarations per element in <code>NamespaceResolver::push</code></li> <li>See full diff in <a href="https://github.com/tafia/quick-xml/compare/v0.40.1...v0.41.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…in the website group (#128) Bumps the website group in /website with 1 update: [@playwright/test](https://github.com/microsoft/playwright). Updates `@playwright/test` from 1.61.0 to 1.61.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/microsoft/playwright/releases">@playwright/test's releases</a>.</em></p> <blockquote> <h2>v1.61.1</h2> <h3>Bug Fixes</h3> <ul> <li><a href="https://redirect.github.com/microsoft/playwright/issues/41365">#41365</a> [Bug]: Expect.Extend matcher with same name as default matcher in same expect instance overrides default matchers implementation to custom matcher</li> <li><a href="https://redirect.github.com/microsoft/playwright/issues/41351">#41351</a> [Bug]: Playwright UI mode: apiRequestContext._wrapApiCall reports unexpected number of bytes (same test passes in headed mode)</li> <li><a href="https://redirect.github.com/microsoft/playwright/issues/41360">#41360</a> [Bug]: Trace viewer: message times in websockets are downscaled by 1000</li> <li><a href="https://redirect.github.com/microsoft/playwright/issues/41311">#41311</a> [Bug]: [Regression]: Sync loader throws "context.conditions?.includes is not a function" on Node 22.15</li> <li><a href="https://redirect.github.com/microsoft/playwright/issues/41371">#41371</a> [Regression]: Sync ESM loader (registerHooks) fails to resolve extensionless .ts subpath imports across pnpm workspace symlinks</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/microsoft/playwright/commit/39e3553a4f283a41134d75d7e404484bd9e6865a"><code>39e3553</code></a> cherry-pick(<a href="https://redirect.github.com/microsoft/playwright/issues/41399">#41399</a>): fix(test): load require-reached files as commonjs in syn...</li> <li><a href="https://github.com/microsoft/playwright/commit/4328122a0fa91df1be287f12d26f272f598ccca7"><code>4328122</code></a> chore: mark v1.61.1 (<a href="https://redirect.github.com/microsoft/playwright/issues/41404">#41404</a>)</li> <li><a href="https://github.com/microsoft/playwright/commit/2c29a94ed59a2dbb2cb2553ee7d1ba429f027826"><code>2c29a94</code></a> fix(tracing): stop recording websocket frames outside of chunks (<a href="https://redirect.github.com/microsoft/playwright/issues/41398">#41398</a>)</li> <li><a href="https://github.com/microsoft/playwright/commit/4324b1904199c58ae56d864390f5210df18e33f6"><code>4324b19</code></a> cherry-pick(<a href="https://redirect.github.com/microsoft/playwright/issues/41367">#41367</a>): fix(test): keep builtin expect matchers on base extend</li> <li><a href="https://github.com/microsoft/playwright/commit/041e7e30002e7c384e1918c29720b34c435145f4"><code>041e7e3</code></a> cherry-pick(<a href="https://redirect.github.com/microsoft/playwright/issues/41364">#41364</a>): fix(har): <code>WebSocket</code> message timestamps should be in mi...</li> <li><a href="https://github.com/microsoft/playwright/commit/b8a0fc33932399fc5cfcd211165cf16f8ca01d71"><code>b8a0fc3</code></a> cherry-pick(<a href="https://redirect.github.com/microsoft/playwright/issues/41309">#41309</a>, <a href="https://redirect.github.com/microsoft/playwright/issues/43149">#43149</a>): Revert "fix(firefox): treat `navigationCommitted...</li> <li><a href="https://github.com/microsoft/playwright/commit/b5a31759e6611397bf3afaaa6049a420a5f082bd"><code>b5a3175</code></a> cherry-pick(<a href="https://redirect.github.com/microsoft/playwright/issues/41319">#41319</a>): fix(loader): support other node versions</li> <li><a href="https://github.com/microsoft/playwright/commit/d4724a91b280ae1ee9a87c426e9d6a953c59756e"><code>d4724a9</code></a> cherry-pick(<a href="https://redirect.github.com/microsoft/playwright/issues/41290">#41290</a>): feat(docker): add Ubuntu 26.04 (Resolute Raccoon) image</li> <li>See full diff in <a href="https://github.com/microsoft/playwright/compare/v1.61.0...v1.61.1">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps the rust-host group with 3 updates: [lsp-server](https://github.com/rust-lang/rust-analyzer), [tree-sitter](https://github.com/tree-sitter/tree-sitter) and [anyhow](https://github.com/dtolnay/anyhow). Updates `lsp-server` from 0.7.9 to 0.8.0 <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/rust-lang/rust-analyzer/commits">compare view</a></li> </ul> </details> <br /> Updates `tree-sitter` from 0.26.9 to 0.26.10 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/tree-sitter/tree-sitter/releases">tree-sitter's releases</a>.</em></p> <blockquote> <h2>v0.26.10</h2> <h2>What's Changed</h2> <ul> <li>fix(lib): update doc comment for <code>ts_parser_parse</code> by <a href="https://github.com/WillLillis"><code>@WillLillis</code></a> in <a href="https://redirect.github.com/tree-sitter/tree-sitter/pull/5642">tree-sitter/tree-sitter#5642</a></li> <li>fix(lib): use correct TREE_SITTER_HIDE_SYMBOLS macro name in alloc.h by <a href="https://github.com/tree-sitter-ci-bot"><code>@tree-sitter-ci-bot</code></a>[bot] in <a href="https://redirect.github.com/tree-sitter/tree-sitter/pull/5643">tree-sitter/tree-sitter#5643</a></li> <li>fix(cli): improve soundness of cst range calculation by <a href="https://github.com/WillLillis"><code>@WillLillis</code></a> in <a href="https://redirect.github.com/tree-sitter/tree-sitter/pull/5650">tree-sitter/tree-sitter#5650</a></li> <li>fix(lib): Consider subtree lookahead bytes when determining whether the parser can reuse a node. by <a href="https://github.com/tree-sitter-ci-bot"><code>@tree-sitter-ci-bot</code></a>[bot] in <a href="https://redirect.github.com/tree-sitter/tree-sitter/pull/5656">tree-sitter/tree-sitter#5656</a></li> <li>fix(cli): display warning to user if parser test corpus dir isn't found by <a href="https://github.com/tree-sitter-ci-bot"><code>@tree-sitter-ci-bot</code></a>[bot] in <a href="https://redirect.github.com/tree-sitter/tree-sitter/pull/5669">tree-sitter/tree-sitter#5669</a></li> <li>fix: add DESCRIPTION to grammar Makefile template by <a href="https://github.com/WillLillis"><code>@WillLillis</code></a> in <a href="https://redirect.github.com/tree-sitter/tree-sitter/pull/5672">tree-sitter/tree-sitter#5672</a></li> <li>fix(cli): infinite loop in highlight test by <a href="https://github.com/WillLillis"><code>@WillLillis</code></a> in <a href="https://redirect.github.com/tree-sitter/tree-sitter/pull/5674">tree-sitter/tree-sitter#5674</a></li> <li>fix(lib): address strict aliasing violations in <code>TreeCursor</code> type by <a href="https://github.com/WillLillis"><code>@WillLillis</code></a> in <a href="https://redirect.github.com/tree-sitter/tree-sitter/pull/5693">tree-sitter/tree-sitter#5693</a></li> <li>build(deps): bump wasmtime-c-api to v36.0.12 by <a href="https://github.com/clason"><code>@clason</code></a> in <a href="https://redirect.github.com/tree-sitter/tree-sitter/pull/5709">tree-sitter/tree-sitter#5709</a></li> <li>fix(dsl): forbid invalid field names by <a href="https://github.com/WillLillis"><code>@WillLillis</code></a> in <a href="https://redirect.github.com/tree-sitter/tree-sitter/pull/5710">tree-sitter/tree-sitter#5710</a></li> <li>Fix issues with queries matching a parent node with anchored children (siblings) by <a href="https://github.com/tree-sitter-ci-bot"><code>@tree-sitter-ci-bot</code></a>[bot] in <a href="https://redirect.github.com/tree-sitter/tree-sitter/pull/5712">tree-sitter/tree-sitter#5712</a></li> <li>test(query): regression test for anchored siblings inside a parent by <a href="https://github.com/tree-sitter-ci-bot"><code>@tree-sitter-ci-bot</code></a>[bot] in <a href="https://redirect.github.com/tree-sitter/tree-sitter/pull/5716">tree-sitter/tree-sitter#5716</a></li> <li>release v0.26.10 by <a href="https://github.com/WillLillis"><code>@WillLillis</code></a> in <a href="https://redirect.github.com/tree-sitter/tree-sitter/pull/5717">tree-sitter/tree-sitter#5717</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/tree-sitter/tree-sitter/compare/v0.26.9...v0.26.10">https://github.com/tree-sitter/tree-sitter/compare/v0.26.9...v0.26.10</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/tree-sitter/tree-sitter/commit/3fc4cd21bca378f8acf8c823809de4706b1808f6"><code>3fc4cd2</code></a> release v0.26.10</li> <li><a href="https://github.com/tree-sitter/tree-sitter/commit/568aee0b7e2e93b6eb7c132c9fafc185203b0661"><code>568aee0</code></a> test(query): regression test for anchored siblings inside a parent</li> <li><a href="https://github.com/tree-sitter/tree-sitter/commit/2efce10fe988408a1b02de4527b3f6128bb68d0e"><code>2efce10</code></a> fix(query): skip passthrough steps when checking for fallible step splitting</li> <li><a href="https://github.com/tree-sitter/tree-sitter/commit/e8b96392919aeae84c52678be1489b9d507c568a"><code>e8b9639</code></a> fix(query): avoid overriding states not seeking immediate match with states s...</li> <li><a href="https://github.com/tree-sitter/tree-sitter/commit/576564d25a6944859d70925b6cb693843cafc2c7"><code>576564d</code></a> fix(query): take anchors between siblings into account for fallible step spli...</li> <li><a href="https://github.com/tree-sitter/tree-sitter/commit/fbf3049dc085b01c124308c0d61dba06cdc92a16"><code>fbf3049</code></a> fix(dsl): forbid invalid field names</li> <li><a href="https://github.com/tree-sitter/tree-sitter/commit/99bc36b857eccb3cb70d8734aaf7e2a83d672d60"><code>99bc36b</code></a> build(deps): bump wasmtime-c-api to v36.0.12</li> <li><a href="https://github.com/tree-sitter/tree-sitter/commit/1ef1048d0567cacc0b74ad1a911b95f3de2b8c47"><code>1ef1048</code></a> fix(build): use <code>std</code> helper rather than passing <code>-std=c11</code> flag</li> <li><a href="https://github.com/tree-sitter/tree-sitter/commit/a61be4ac277bc8cb4ffa8419759faec0562c46f3"><code>a61be4a</code></a> fix(lib): address strict aliasing violations in <code>TreeCursor</code> type</li> <li><a href="https://github.com/tree-sitter/tree-sitter/commit/be8f380ad47333e0df5a7b4f447485a6cd7f0fa7"><code>be8f380</code></a> fix(cli): highlight test did not properly check for spans on later rows</li> <li>Additional commits viewable in <a href="https://github.com/tree-sitter/tree-sitter/compare/v0.26.9...v0.26.10">compare view</a></li> </ul> </details> <br /> Updates `anyhow` from 1.0.102 to 1.0.103 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/dtolnay/anyhow/releases">anyhow's releases</a>.</em></p> <blockquote> <h2>1.0.103</h2> <ul> <li>Fix Stacked Borrows violation (UB) in <code>Error::downcast_mut</code> (<a href="https://redirect.github.com/dtolnay/anyhow/issues/451">#451</a>, <a href="https://redirect.github.com/dtolnay/anyhow/issues/452">#452</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/dtolnay/anyhow/commit/5bdb0e24db3994be119d42f18fe2d655e1f68f4a"><code>5bdb0e2</code></a> Release 1.0.103</li> <li><a href="https://github.com/dtolnay/anyhow/commit/e621bd35ddddcd8b2f39d80b9f5938583571a87d"><code>e621bd3</code></a> Merge pull request <a href="https://redirect.github.com/dtolnay/anyhow/issues/452">#452</a> from dtolnay/downcast</li> <li><a href="https://github.com/dtolnay/anyhow/commit/6e8c000690151cba99305092024535905b2be162"><code>6e8c000</code></a> Eliminate pointer->reference->pointer during downcast</li> <li><a href="https://github.com/dtolnay/anyhow/commit/67c4abd7718b6191768193993270abe8dcdd66bb"><code>67c4abd</code></a> Add regression test for issue 451</li> <li><a href="https://github.com/dtolnay/anyhow/commit/917a16932009c1957f53c2ea325663948add2153"><code>917a169</code></a> Update actions/upload-artifact@v6 -> v7</li> <li><a href="https://github.com/dtolnay/anyhow/commit/d9dc3faf78b8647fdb5b8c5b53abb85e05e13d42"><code>d9dc3fa</code></a> Update actions/checkout@v6 -> v7</li> <li><a href="https://github.com/dtolnay/anyhow/commit/841522b2aa09732fecee40804440d2c35c68c480"><code>841522b</code></a> Raise minimum tested compiler to rust 1.85</li> <li>See full diff in <a href="https://github.com/dtolnay/anyhow/compare/1.0.102...1.0.103">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps the github-actions group with 3 updates: [actions/setup-dotnet](https://github.com/actions/setup-dotnet), [actions/cache](https://github.com/actions/cache) and [taiki-e/install-action](https://github.com/taiki-e/install-action). Updates `actions/setup-dotnet` from 5.3.0 to 5.4.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/setup-dotnet/releases">actions/setup-dotnet's releases</a>.</em></p> <blockquote> <h2>v5.4.0</h2> <h2>What's Changed</h2> <h3>Enhancements</h3> <ul> <li>Improve global.json SDK version validation for rollForward by <a href="https://github.com/priyagupta108"><code>@priyagupta108</code></a> in <a href="https://redirect.github.com/actions/setup-dotnet/pull/742">actions/setup-dotnet#742</a></li> <li>Pin actions to commit SHAs in workflows by <a href="https://github.com/priya-kinthali"><code>@priya-kinthali</code></a> in <a href="https://redirect.github.com/actions/setup-dotnet/pull/744">actions/setup-dotnet#744</a></li> <li>Expand the CSC problem matcher to light up more errors on GitHub. by <a href="https://github.com/StephenCleary"><code>@StephenCleary</code></a> in <a href="https://redirect.github.com/actions/setup-dotnet/pull/717">actions/setup-dotnet#717</a></li> </ul> <h3>Documentation</h3> <ul> <li>Docs(action): Explicitly mark all optional inputs with required: false by <a href="https://github.com/kranthipoturaju"><code>@kranthipoturaju</code></a> in <a href="https://redirect.github.com/actions/setup-dotnet/pull/737">actions/setup-dotnet#737</a></li> </ul> <h3>Bug Fixes</h3> <ul> <li>Fix global.json creation command by <a href="https://github.com/michal2612"><code>@michal2612</code></a> in <a href="https://redirect.github.com/actions/setup-dotnet/pull/694">actions/setup-dotnet#694</a></li> </ul> <h3>Dependency Updates</h3> <ul> <li>Upgrade <code>@actions/cache</code> to 5.1.0, log cache write denied by <a href="https://github.com/jasongin"><code>@jasongin</code></a> in <a href="https://redirect.github.com/actions/setup-dotnet/pull/746">actions/setup-dotnet#746</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/jasongin"><code>@jasongin</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-dotnet/pull/746">actions/setup-dotnet#746</a></li> <li><a href="https://github.com/michal2612"><code>@michal2612</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-dotnet/pull/694">actions/setup-dotnet#694</a></li> <li><a href="https://github.com/kranthipoturaju"><code>@kranthipoturaju</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-dotnet/pull/737">actions/setup-dotnet#737</a></li> <li><a href="https://github.com/StephenCleary"><code>@StephenCleary</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-dotnet/pull/717">actions/setup-dotnet#717</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/setup-dotnet/compare/v5...v5.4.0">https://github.com/actions/setup-dotnet/compare/v5...v5.4.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/setup-dotnet/commit/26b0ec14cb23fa6904739307f278c14f94c95bf1"><code>26b0ec1</code></a> Expand the CSC problem matcher to light up more errors on GitHub. (<a href="https://redirect.github.com/actions/setup-dotnet/issues/717">#717</a>)</li> <li><a href="https://github.com/actions/setup-dotnet/commit/da5e5482f2d0700168cff080da45b50da8b60f0e"><code>da5e548</code></a> docs(action): explicitly mark all optional inputs with required: false (<a href="https://redirect.github.com/actions/setup-dotnet/issues/737">#737</a>)</li> <li><a href="https://github.com/actions/setup-dotnet/commit/9bd3b44355ba7c500f3d2e029636c6d29ac5caab"><code>9bd3b44</code></a> Improve readability of global.json creation command (<a href="https://redirect.github.com/actions/setup-dotnet/issues/694">#694</a>)</li> <li><a href="https://github.com/actions/setup-dotnet/commit/4406a635cd2be9c92689ea22b2f74ea57297088c"><code>4406a63</code></a> Bump <code>@actions/cache</code> to 5.1.0, log cache write denied (<a href="https://redirect.github.com/actions/setup-dotnet/issues/746">#746</a>)</li> <li><a href="https://github.com/actions/setup-dotnet/commit/dc3262dda80e97f1c7865b3b122e99240e30b738"><code>dc3262d</code></a> pin actions to commit SHAs in workflows (<a href="https://redirect.github.com/actions/setup-dotnet/issues/744">#744</a>)</li> <li><a href="https://github.com/actions/setup-dotnet/commit/95a3f8b067437dc9b2027a437f5dc3b4569ddd49"><code>95a3f8b</code></a> Validate global.json SDK version before rollForward optimization (<a href="https://redirect.github.com/actions/setup-dotnet/issues/742">#742</a>)</li> <li>See full diff in <a href="https://github.com/actions/setup-dotnet/compare/9a946fdbd5fb07b82b2f5a4466058b876ab72bb2...26b0ec14cb23fa6904739307f278c14f94c95bf1">compare view</a></li> </ul> </details> <br /> Updates `actions/cache` from 5.0.5 to 6.1.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/cache/releases">actions/cache's releases</a>.</em></p> <blockquote> <h2>v6.1.0</h2> <h2>What's Changed</h2> <ul> <li>Bump <code>@actions/cache</code> to v6.1.0 - handle read-only cache access by <a href="https://github.com/jasongin"><code>@jasongin</code></a> in <a href="https://redirect.github.com/actions/cache/pull/1768">actions/cache#1768</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/cache/compare/v6...v6.1.0">https://github.com/actions/cache/compare/v6...v6.1.0</a></p> <h2>v6.0.0</h2> <h2>What's Changed</h2> <ul> <li>Update packages, migrate to ESM by <a href="https://github.com/Samirat"><code>@Samirat</code></a> in <a href="https://redirect.github.com/actions/cache/pull/1760">actions/cache#1760</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/cache/compare/v5...v6.0.0">https://github.com/actions/cache/compare/v5...v6.0.0</a></p> <h2>v5.1.0</h2> <h2>What's Changed</h2> <ul> <li>Bump <code>@actions/cache</code> to v5.1.0 - handle read-only cache access by <a href="https://github.com/jasongin"><code>@jasongin</code></a> in <a href="https://redirect.github.com/actions/cache/pull/1775">actions/cache#1775</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/cache/compare/v5...v5.1.0">https://github.com/actions/cache/compare/v5...v5.1.0</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/actions/cache/blob/main/RELEASES.md">actions/cache's changelog</a>.</em></p> <blockquote> <h1>Releases</h1> <h2>How to prepare a release</h2> <blockquote> <p>[!NOTE] Relevant for maintainers with write access only.</p> </blockquote> <ol> <li>Switch to a new branch from <code>main</code>.</li> <li>Run <code>npm test</code> to ensure all tests are passing.</li> <li>Update the version in <a href="https://github.com/actions/cache/blob/main/package.json"><code>https://github.com/actions/cache/blob/main/package.json</code></a>.</li> <li>Run <code>npm run build</code> to update the compiled files.</li> <li>Update this <a href="https://github.com/actions/cache/blob/main/RELEASES.md"><code>https://github.com/actions/cache/blob/main/RELEASES.md</code></a> with the new version and changes in the <code>## Changelog</code> section.</li> <li>Run <code>licensed cache</code> to update the license report.</li> <li>Run <code>licensed status</code> and resolve any warnings by updating the <a href="https://github.com/actions/cache/blob/main/.licensed.yml"><code>https://github.com/actions/cache/blob/main/.licensed.yml</code></a> file with the exceptions.</li> <li>Commit your changes and push your branch upstream.</li> <li>Open a pull request against <code>main</code> and get it reviewed and merged.</li> <li>Draft a new release <a href="https://github.com/actions/cache/releases">https://github.com/actions/cache/releases</a> use the same version number used in <code>package.json</code> <ol> <li>Create a new tag with the version number.</li> <li>Auto generate release notes and update them to match the changes you made in <code>RELEASES.md</code>.</li> <li>Toggle the set as the latest release option.</li> <li>Publish the release.</li> </ol> </li> <li>Navigate to <a href="https://github.com/actions/cache/actions/workflows/release-new-action-version.yml">https://github.com/actions/cache/actions/workflows/release-new-action-version.yml</a> <ol> <li>There should be a workflow run queued with the same version number.</li> <li>Approve the run to publish the new version and update the major tags for this action.</li> </ol> </li> </ol> <h2>Changelog</h2> <h3>6.1.0</h3> <ul> <li>Bump <code>@actions/cache</code> to v6.1.0 to pick up <a href="https://redirect.github.com/actions/toolkit/pull/2435">actions/toolkit#2435 Handle cache write error due to read-only token</a></li> <li>Switch redundant "Cache save failed" warning to debug log in save-only</li> </ul> <h3>6.0.0</h3> <ul> <li>Updated <code>@actions/cache</code> to ^6.0.1, <code>@actions/core</code> to ^3.0.1, <code>@actions/exec</code> to ^3.0.0, <code>@actions/io</code> to ^3.0.2</li> <li>Migrated to ESM module system</li> <li>Upgraded Jest to v30 and test infrastructure to be ESM compatible</li> </ul> <h3>5.0.4</h3> <ul> <li>Bump <code>minimatch</code> to v3.1.5 (fixes ReDoS via globstar patterns)</li> <li>Bump <code>undici</code> to v6.24.1 (WebSocket decompression bomb protection, header validation fixes)</li> <li>Bump <code>fast-xml-parser</code> to v5.5.6</li> </ul> <h3>5.0.3</h3> <ul> <li>Bump <code>@actions/cache</code> to v5.0.5 (Resolves: <a href="https://github.com/actions/cache/security/dependabot/33">https://github.com/actions/cache/security/dependabot/33</a>)</li> <li>Bump <code>@actions/core</code> to v2.0.3</li> </ul> <h3>5.0.2</h3> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/cache/commit/55cc8345863c7cc4c66a329aec7e433d2d1c52a9"><code>55cc834</code></a> Merge pull request <a href="https://redirect.github.com/actions/cache/issues/1768">#1768</a> from jasongin/readonly-cache</li> <li><a href="https://github.com/actions/cache/commit/d8cd72f230726cdf4457ebb61ec1b593a8d12337"><code>d8cd72f</code></a> Bump <code>@actions/cache</code> to v6.1.0 - handle cache write error due to RO token</li> <li><a href="https://github.com/actions/cache/commit/2c8a9bd7457de244a408f35966fab2fb45fda9c8"><code>2c8a9bd</code></a> Merge pull request <a href="https://redirect.github.com/actions/cache/issues/1760">#1760</a> from actions/samirat/esm_migration_and_package_update</li> <li><a href="https://github.com/actions/cache/commit/e9b91fdc3fea7d79165fceb79042ef45c2d51023"><code>e9b91fd</code></a> Prettier fixes</li> <li><a href="https://github.com/actions/cache/commit/e4884b8ff7f92ef6b52c79eda480bbc86e685adb"><code>e4884b8</code></a> Rebuild dist</li> <li><a href="https://github.com/actions/cache/commit/10baf0191a3c426ea0fa4a3253a5c04233b6e18f"><code>10baf01</code></a> Fixed licenses</li> <li><a href="https://github.com/actions/cache/commit/e39b386c9004d72a15d864ade8c0b3a702d47a37"><code>e39b386</code></a> Fix test mock return order</li> <li><a href="https://github.com/actions/cache/commit/b6928203372a8571ff984c0c883ef3a1adfb0c06"><code>b692820</code></a> PR feedback</li> <li><a href="https://github.com/actions/cache/commit/60749128a44d25d3c520a489e576380cf00ff3f1"><code>6074912</code></a> Rebuild dist bundles as ESM to match type:module</li> <li><a href="https://github.com/actions/cache/commit/5a912e8b4af820fa082a0e75cfd2c782f8fbfe0e"><code>5a912e8</code></a> Fix lint and jest issues</li> <li>Additional commits viewable in <a href="https://github.com/actions/cache/compare/27d5ce7f107fe9357f9df03efb73ab90386fccae...55cc8345863c7cc4c66a329aec7e433d2d1c52a9">compare view</a></li> </ul> </details> <br /> Updates `taiki-e/install-action` from 2.82.2 to 2.82.6 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/taiki-e/install-action/releases">taiki-e/install-action's releases</a>.</em></p> <blockquote> <h2>2.82.6</h2> <ul> <li> <p>Update <code>vacuum@latest</code> to 0.29.7.</p> </li> <li> <p>Update <code>uv@latest</code> to 0.11.25.</p> </li> <li> <p>Update <code>syft@latest</code> to 1.46.0.</p> </li> <li> <p>Update <code>dprint@latest</code> to 0.55.0.</p> </li> <li> <p>Update <code>cargo-auditable@latest</code> to 0.7.5.</p> </li> </ul> <h2>2.82.5</h2> <ul> <li> <p>Update <code>wasmtime@latest</code> to 46.0.1.</p> </li> <li> <p>Update <code>wasm-bindgen@latest</code> to 0.2.126.</p> </li> <li> <p>Update <code>vacuum@latest</code> to 0.29.6.</p> </li> <li> <p>Update <code>mise@latest</code> to 2026.6.14.</p> </li> <li> <p>Update <code>cargo-rdme@latest</code> to 2.1.0.</p> </li> </ul> <h2>2.82.4</h2> <ul> <li> <p>Update <code>uv@latest</code> to 0.11.24.</p> </li> <li> <p>Update <code>mise@latest</code> to 2026.6.13.</p> </li> <li> <p>Update <code>just@latest</code> to 1.54.0.</p> </li> <li> <p>Update <code>biome@latest</code> to 2.5.1.</p> </li> </ul> <h2>2.82.3</h2> <ul> <li> <p>Update <code>zizmor@latest</code> to 1.26.1.</p> </li> <li> <p>Update <code>wasmtime@latest</code> to 46.0.0.</p> </li> <li> <p>Update <code>tombi@latest</code> to 1.1.5.</p> </li> <li> <p>Update <code>mise@latest</code> to 2026.6.12.</p> </li> <li> <p>Update <code>kingfisher@latest</code> to 1.104.0.</p> </li> <li> <p>Update <code>cargo-tarpaulin@latest</code> to 0.35.5.</p> </li> <li> <p>Update <code>cargo-nextest@latest</code> to 0.9.138.</p> </li> <li> <p>Update <code>cargo-crap@latest</code> to 0.3.0.</p> </li> <li> <p>Update <code>cargo-binstall@latest</code> to 1.20.1.</p> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md">taiki-e/install-action's changelog</a>.</em></p> <blockquote> <h1>Changelog</h1> <p>All notable changes to this project will be documented in this file.</p> <p>This project adheres to <a href="https://semver.org">Semantic Versioning</a>.</p> <!-- raw HTML omitted --> <h2>[Unreleased]</h2> <h2>[2.82.6] - 2026-06-29</h2> <ul> <li> <p>Update <code>vacuum@latest</code> to 0.29.7.</p> </li> <li> <p>Update <code>uv@latest</code> to 0.11.25.</p> </li> <li> <p>Update <code>syft@latest</code> to 1.46.0.</p> </li> <li> <p>Update <code>dprint@latest</code> to 0.55.0.</p> </li> <li> <p>Update <code>cargo-auditable@latest</code> to 0.7.5.</p> </li> </ul> <h2>[2.82.5] - 2026-06-26</h2> <ul> <li> <p>Update <code>wasmtime@latest</code> to 46.0.1.</p> </li> <li> <p>Update <code>wasm-bindgen@latest</code> to 0.2.126.</p> </li> <li> <p>Update <code>vacuum@latest</code> to 0.29.6.</p> </li> <li> <p>Update <code>mise@latest</code> to 2026.6.14.</p> </li> <li> <p>Update <code>cargo-rdme@latest</code> to 2.1.0.</p> </li> </ul> <h2>[2.82.4] - 2026-06-25</h2> <ul> <li> <p>Update <code>uv@latest</code> to 0.11.24.</p> </li> <li> <p>Update <code>mise@latest</code> to 2026.6.13.</p> </li> <li> <p>Update <code>just@latest</code> to 1.54.0.</p> </li> <li> <p>Update <code>biome@latest</code> to 2.5.1.</p> </li> </ul> <h2>[2.82.3] - 2026-06-24</h2> <ul> <li>Update <code>zizmor@latest</code> to 1.26.1.</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/taiki-e/install-action/commit/9bcaee1dcae34154180f412e2fa69355a7cda9f6"><code>9bcaee1</code></a> Release 2.82.6</li> <li><a href="https://github.com/taiki-e/install-action/commit/e43cd7ce2e2c5a6d08d652405a0ead8cda7bf2db"><code>e43cd7c</code></a> Update <code>vacuum@latest</code> to 0.29.7</li> <li><a href="https://github.com/taiki-e/install-action/commit/3761407ad0b5e4e5b42ccb62e48ffa2712e94703"><code>3761407</code></a> Update <code>uv@latest</code> to 0.11.25</li> <li><a href="https://github.com/taiki-e/install-action/commit/cb6ad0dba1ff078e589e75ae88bb03120688feef"><code>cb6ad0d</code></a> Update tombi manifest</li> <li><a href="https://github.com/taiki-e/install-action/commit/6022671c93f20efad71663e3adc06d63e7f1ec8a"><code>6022671</code></a> Update <code>syft@latest</code> to 1.46.0</li> <li><a href="https://github.com/taiki-e/install-action/commit/ab5aae8354703341b0939f4e6c1bb66372b446db"><code>ab5aae8</code></a> Update gungraun-runner manifest</li> <li><a href="https://github.com/taiki-e/install-action/commit/867613b49949fba1c8fe194d323c7c51b77b24d2"><code>867613b</code></a> Update editorconfig-checker manifest</li> <li><a href="https://github.com/taiki-e/install-action/commit/c5837ef63439ac9ebc0ecce97e23cca6a4a5aac4"><code>c5837ef</code></a> Update <code>dprint@latest</code> to 0.55.0</li> <li><a href="https://github.com/taiki-e/install-action/commit/7d41d74582778d0345db89bc1054e86f3802b6d2"><code>7d41d74</code></a> Update <code>cargo-auditable@latest</code> to 0.7.5</li> <li><a href="https://github.com/taiki-e/install-action/commit/bffeee26d4db9be238a4ea78d8826604ebcb594d"><code>bffeee2</code></a> Release 2.82.5</li> <li>Additional commits viewable in <a href="https://github.com/taiki-e/install-action/compare/9e1e5806d4a4822de933115878265be9aaa786d9...9bcaee1dcae34154180f412e2fa69355a7cda9f6">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…7 updates (#131) Bumps the vscode-extension group in /editors/vscode with 7 updates: | Package | From | To | | --- | --- | --- | | [vscode-languageclient](https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client) | `10.0.0` | `10.0.1` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.0.0` | `26.0.1` | | [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.62.0` | `8.62.1` | | [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.62.0` | `8.62.1` | | [eslint](https://github.com/eslint/eslint) | `10.5.0` | `10.6.0` | | [playwright](https://github.com/microsoft/playwright) | `1.61.0` | `1.61.1` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.62.0` | `8.62.1` | Updates `vscode-languageclient` from 10.0.0 to 10.0.1 <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/microsoft/vscode-languageserver-node/commit/bb5ee9298f3b0881df78c35e5762512d2c922484"><code>bb5ee92</code></a> Prepare 3.18.1 release</li> <li><a href="https://github.com/microsoft/vscode-languageserver-node/commit/b0a8ea15096b00d87a65f9ed3f36e5826de14d4c"><code>b0a8ea1</code></a> Make <code>TextDocumentContentFeature</code> a supported capability (<a href="https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client/issues/1796">#1796</a>)</li> <li><a href="https://github.com/microsoft/vscode-languageserver-node/commit/3c7721e8f929df1accb0a199c2e8f2e1055e0722"><code>3c7721e</code></a> Update dependency versions in lock files (<a href="https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client/issues/1788">#1788</a>)</li> <li><a href="https://github.com/microsoft/vscode-languageserver-node/commit/dc94993a5e9333f588e1720057c091de795e967a"><code>dc94993</code></a> Merge 3.18 release into main (<a href="https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client/issues/1787">#1787</a>)</li> <li>See full diff in <a href="https://github.com/Microsoft/vscode-languageserver-node/commits/release/client/10.0.1/client">compare view</a></li> </ul> </details> <br /> Updates `@types/node` from 26.0.0 to 26.0.1 <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node">compare view</a></li> </ul> </details> <br /> Updates `@typescript-eslint/eslint-plugin` from 8.62.0 to 8.62.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/releases">@typescript-eslint/eslint-plugin's releases</a>.</em></p> <blockquote> <h2>v8.62.1</h2> <h2>8.62.1 (2026-06-29)</h2> <h3>🩹 Fixes</h3> <ul> <li><strong>eslint-plugin:</strong> [prefer-optional-chain] use suggestion instead of autofix for trailing binary operator (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12328">#12328</a>)</li> <li><strong>eslint-plugin:</strong> [no-unnecessary-boolean-literal-compare] preserve boolean result in fixer for nullable true comparisons (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12365">#12365</a>)</li> <li><strong>eslint-plugin:</strong> [no-unnecessary-type-assertion] parenthesize object literal at left edge of expression statement (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12443">#12443</a>, <a href="https://redirect.github.com/typescript-eslint/typescript-eslint/issues/12418">#12418</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>Kirk Waiblinger <a href="https://github.com/kirkwaiblinger"><code>@kirkwaiblinger</code></a></li> <li>mdm317</li> <li>Patrick Aleite</li> <li>송재욱</li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.62.1">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md">@typescript-eslint/eslint-plugin's changelog</a>.</em></p> <blockquote> <h2>8.62.1 (2026-06-29)</h2> <h3>🩹 Fixes</h3> <ul> <li><strong>eslint-plugin:</strong> [no-unnecessary-type-assertion] parenthesize object literal at left edge of expression statement (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12443">#12443</a>, <a href="https://redirect.github.com/typescript-eslint/typescript-eslint/issues/12418">#12418</a>)</li> <li><strong>eslint-plugin:</strong> [no-unnecessary-boolean-literal-compare] preserve boolean result in fixer for nullable true comparisons (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12365">#12365</a>)</li> <li><strong>eslint-plugin:</strong> [prefer-optional-chain] use suggestion instead of autofix for trailing binary operator (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12328">#12328</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>Kirk Waiblinger <a href="https://github.com/kirkwaiblinger"><code>@kirkwaiblinger</code></a></li> <li>mdm317</li> <li>Patrick Aleite</li> <li>송재욱</li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.62.1">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/3ea32f4ba5e196c08c6da1095619d7f65ba4905e"><code>3ea32f4</code></a> chore(release): publish 8.62.1</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/4ecca6d3f9ee1ab6468c8e9d6810ccc1c2f6bcf9"><code>4ecca6d</code></a> fix(eslint-plugin): [no-unnecessary-type-assertion] parenthesize object liter...</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/f3a7ec78bf07b42a7e03f2091c98513e05310891"><code>f3a7ec7</code></a> chore(eslint-plugin-internal): [no-dynamic-tests] restrict where noFormat can...</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/301f350cd11fecce4940b5be8a2b1146a9c6d58b"><code>301f350</code></a> fix(eslint-plugin): [no-unnecessary-boolean-literal-compare] preserve boolean...</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/ebce2d40f83194599bc3022032ef4fa857977105"><code>ebce2d4</code></a> fix(eslint-plugin): [prefer-optional-chain] use suggestion instead of autofix...</li> <li>See full diff in <a href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.62.1/packages/eslint-plugin">compare view</a></li> </ul> </details> <br /> Updates `@typescript-eslint/parser` from 8.62.0 to 8.62.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/releases">@typescript-eslint/parser's releases</a>.</em></p> <blockquote> <h2>v8.62.1</h2> <h2>8.62.1 (2026-06-29)</h2> <h3>🩹 Fixes</h3> <ul> <li><strong>eslint-plugin:</strong> [prefer-optional-chain] use suggestion instead of autofix for trailing binary operator (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12328">#12328</a>)</li> <li><strong>eslint-plugin:</strong> [no-unnecessary-boolean-literal-compare] preserve boolean result in fixer for nullable true comparisons (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12365">#12365</a>)</li> <li><strong>eslint-plugin:</strong> [no-unnecessary-type-assertion] parenthesize object literal at left edge of expression statement (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12443">#12443</a>, <a href="https://redirect.github.com/typescript-eslint/typescript-eslint/issues/12418">#12418</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>Kirk Waiblinger <a href="https://github.com/kirkwaiblinger"><code>@kirkwaiblinger</code></a></li> <li>mdm317</li> <li>Patrick Aleite</li> <li>송재욱</li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.62.1">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md">@typescript-eslint/parser's changelog</a>.</em></p> <blockquote> <h2>8.62.1 (2026-06-29)</h2> <p>This was a version bump only for parser to align it with other projects, there were no code changes.</p> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.62.1">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/3ea32f4ba5e196c08c6da1095619d7f65ba4905e"><code>3ea32f4</code></a> chore(release): publish 8.62.1</li> <li>See full diff in <a href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.62.1/packages/parser">compare view</a></li> </ul> </details> <br /> Updates `eslint` from 10.5.0 to 10.6.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/eslint/eslint/releases">eslint's releases</a>.</em></p> <blockquote> <h2>v10.6.0</h2> <h2>Features</h2> <ul> <li><a href="https://github.com/eslint/eslint/commit/b1f910628e29a018c860e2352bc14cd07c853d67"><code>b1f9106</code></a> feat: detect Symbol() and BigInt() in no-constant-binary-expression (<a href="https://redirect.github.com/eslint/eslint/issues/20981">#20981</a>) (Taejin Kim)</li> <li><a href="https://github.com/eslint/eslint/commit/f291007cb73f55c09cf3c2aa3a405df379a5c594"><code>f291007</code></a> feat: add checkRelationalComparisons to no-constant-binary-expression (<a href="https://redirect.github.com/eslint/eslint/issues/20948">#20948</a>) (sethamus)</li> </ul> <h2>Bug Fixes</h2> <ul> <li><a href="https://github.com/eslint/eslint/commit/6b05784eb271ac98ca3e1e2a48c4b14bb588c786"><code>6b05784</code></a> fix: prefer-exponentiation-operator invalid autofix at statement start (<a href="https://redirect.github.com/eslint/eslint/issues/20997">#20997</a>) (Milos Djermanovic)</li> <li><a href="https://github.com/eslint/eslint/commit/bb9eb2ab28daf6e6dafc62daa6b5daf9c2b7046c"><code>bb9eb2a</code></a> fix: account for shadowed <code>Boolean</code> in <code>no-extra-boolean-cast</code> (<a href="https://redirect.github.com/eslint/eslint/issues/21013">#21013</a>) (den$)</li> <li><a href="https://github.com/eslint/eslint/commit/8fd8741009a3ed7845c89bfe2fb3eaa2119b2d15"><code>8fd8741</code></a> fix: don't report shadowed undefined in <code>radix</code> rule (<a href="https://redirect.github.com/eslint/eslint/issues/21011">#21011</a>) (Pixel)</li> <li><a href="https://github.com/eslint/eslint/commit/5784980ce8ba99556db98907895d82ef49cd0a27"><code>5784980</code></a> fix: don't report shadowed undefined in no-throw-literal (<a href="https://redirect.github.com/eslint/eslint/issues/21010">#21010</a>) (Pixel)</li> <li><a href="https://github.com/eslint/eslint/commit/9cd1e6de5bad487a9c713bdc9fda5af7ea0babcd"><code>9cd1e6d</code></a> fix: suppress invalid class suggestion in no-promise-executor-return (<a href="https://redirect.github.com/eslint/eslint/issues/21008">#21008</a>) (Pixel)</li> <li><a href="https://github.com/eslint/eslint/commit/d4eb2dc95f17cdf491edca91b7d9caf05b86253f"><code>d4eb2dc</code></a> fix: don't report shadowed undefined in prefer-promise-reject-errors (<a href="https://redirect.github.com/eslint/eslint/issues/21006">#21006</a>) (Pixel)</li> <li><a href="https://github.com/eslint/eslint/commit/23604646db6d987d01edb8aa5f4d2a88bd4c01d0"><code>2360464</code></a> fix: prefer-promise-reject-errors false positives for shadowed Promise (<a href="https://redirect.github.com/eslint/eslint/issues/21003">#21003</a>) (den$)</li> <li><a href="https://github.com/eslint/eslint/commit/63d52d28de705ec46f328d18166e8b7170b3f024"><code>63d52d2</code></a> fix: restore max-classes-per-file report range (<a href="https://redirect.github.com/eslint/eslint/issues/21002">#21002</a>) (Pixel)</li> <li><a href="https://github.com/eslint/eslint/commit/7feaff0cfb8d6a6260d3ea56887c9161daf8c700"><code>7feaff0</code></a> fix: callback detection logic for IIFEs in max-nested-callbacks (<a href="https://redirect.github.com/eslint/eslint/issues/20979">#20979</a>) (fnx)</li> <li><a href="https://github.com/eslint/eslint/commit/399a2ec81bcbcff2c67920db51d9276b20ac1025"><code>399a2ec</code></a> fix: don't report inner non-callbacks in <code>max-nested-callbacks</code> (<a href="https://redirect.github.com/eslint/eslint/issues/20995">#20995</a>) (Milos Djermanovic)</li> </ul> <h2>Documentation</h2> <ul> <li><a href="https://github.com/eslint/eslint/commit/a83683db1c27193c2ad333fc5c0aedcc8a293db7"><code>a83683d</code></a> docs: Update README (GitHub Actions Bot)</li> <li><a href="https://github.com/eslint/eslint/commit/f5449f96c2caabbc1a28b15211873e2f672f5ae5"><code>f5449f9</code></a> docs: document userland patterns for global assertionOptions in RuleT… (<a href="https://redirect.github.com/eslint/eslint/issues/20986">#20986</a>) (playgirl)</li> <li><a href="https://github.com/eslint/eslint/commit/bea49f7b2899ebf708482f977ef2ada41fd2c3f0"><code>bea49f7</code></a> docs: Update README (GitHub Actions Bot)</li> <li><a href="https://github.com/eslint/eslint/commit/e5f70f9b06683a887dd0d6dc1cc91a9c9bea816d"><code>e5f70f9</code></a> docs: update code-path diagrams (<a href="https://redirect.github.com/eslint/eslint/issues/20984">#20984</a>) (Tanuj Kanti)</li> <li><a href="https://github.com/eslint/eslint/commit/8890c2d40880b195b9167735c24ec0cc5de5eb96"><code>8890c2d</code></a> docs: add TypeScript config guidance for MCP server (<a href="https://redirect.github.com/eslint/eslint/issues/20796">#20796</a>) (Pierluigi Lenoci)</li> <li><a href="https://github.com/eslint/eslint/commit/3eb3d9b1b5edecc3fcae0519ddba0e3745e889e3"><code>3eb3d9b</code></a> docs: Update README (GitHub Actions Bot)</li> <li><a href="https://github.com/eslint/eslint/commit/c5bb59cf613dabafd550227b6adaa9327b1095f5"><code>c5bb59c</code></a> docs: Update README (GitHub Actions Bot)</li> <li><a href="https://github.com/eslint/eslint/commit/eb3c97c776731ce11b28cc99f0271f41b9994701"><code>eb3c97c</code></a> docs: fix grammar in prefer-const rule description (<a href="https://redirect.github.com/eslint/eslint/issues/20983">#20983</a>) (lumir)</li> </ul> <h2>Chores</h2> <ul> <li><a href="https://github.com/eslint/eslint/commit/6a42034a57a816b0a313720b3b9df09455bd0b5e"><code>6a42034</code></a> ci: run ecosystem tests on main branch (<a href="https://redirect.github.com/eslint/eslint/issues/20891">#20891</a>) (sethamus)</li> <li><a href="https://github.com/eslint/eslint/commit/3dbacdbb31673c87ca86ecafbb18712d8d1daed8"><code>3dbacdb</code></a> ci: bump actions/checkout from 6 to 7 (<a href="https://redirect.github.com/eslint/eslint/issues/21014">#21014</a>) (dependabot[bot])</li> <li><a href="https://github.com/eslint/eslint/commit/c3abfca7c96cc9a244f54eeb66e9971c59280354"><code>c3abfca</code></a> chore: correct JSDoc param types in html formatter (<a href="https://redirect.github.com/eslint/eslint/issues/21018">#21018</a>) (Minseon Kim)</li> <li><a href="https://github.com/eslint/eslint/commit/a8323209cdbefefd540c5beeaa51418d8ec40f9e"><code>a832320</code></a> ci: split ecosystem tests into separate jobs (<a href="https://redirect.github.com/eslint/eslint/issues/21001">#21001</a>) (xbinaryx)</li> <li><a href="https://github.com/eslint/eslint/commit/27166e78511db526688afc34bbfab1a458405f3f"><code>27166e7</code></a> chore: update ecosystem plugins (<a href="https://redirect.github.com/eslint/eslint/issues/21005">#21005</a>) (ESLint Bot)</li> <li><a href="https://github.com/eslint/eslint/commit/865d76e40107d4fa10a17fc3203b303eb8a88dc3"><code>865d76e</code></a> ci: bump pnpm/action-setup from 6.0.8 to 6.0.9 (<a href="https://redirect.github.com/eslint/eslint/issues/20989">#20989</a>) (dependabot[bot])</li> <li><a href="https://github.com/eslint/eslint/commit/27a88c9fa7c040f4cd39e5a5e6e2d02441c408ef"><code>27a88c9</code></a> chore: update dependency markdown-it to v14 in root (<a href="https://redirect.github.com/eslint/eslint/issues/20994">#20994</a>) (Milos Djermanovic)</li> <li><a href="https://github.com/eslint/eslint/commit/970cea62b295d931a4109abedeb21ba192d3f2be"><code>970cea6</code></a> chore: update dependency markdown-it to v14 (<a href="https://redirect.github.com/eslint/eslint/issues/20993">#20993</a>) (Milos Djermanovic)</li> <li><a href="https://github.com/eslint/eslint/commit/b482120bacb40204fbf16f3b20be7207057157a5"><code>b482120</code></a> chore: update dependency prettier to v3.8.4 (<a href="https://redirect.github.com/eslint/eslint/issues/20990">#20990</a>) (renovate[bot])</li> <li><a href="https://github.com/eslint/eslint/commit/6993fb3173da84999fc208507b93f523aa657448"><code>6993fb3</code></a> chore: update ecosystem plugins (<a href="https://redirect.github.com/eslint/eslint/issues/20985">#20985</a>) (ESLint Bot)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/eslint/eslint/commit/5d12a0419636abb71628b7e45063a943c454a7c7"><code>5d12a04</code></a> 10.6.0</li> <li><a href="https://github.com/eslint/eslint/commit/f7ca54b138c4ba7b8e65f83b7fe58cc8de50af8b"><code>f7ca54b</code></a> Build: changelog update for 10.6.0</li> <li><a href="https://github.com/eslint/eslint/commit/6a42034a57a816b0a313720b3b9df09455bd0b5e"><code>6a42034</code></a> ci: run ecosystem tests on main branch (<a href="https://redirect.github.com/eslint/eslint/issues/20891">#20891</a>)</li> <li><a href="https://github.com/eslint/eslint/commit/b1f910628e29a018c860e2352bc14cd07c853d67"><code>b1f9106</code></a> feat: detect Symbol() and BigInt() in no-constant-binary-expression (<a href="https://redirect.github.com/eslint/eslint/issues/20981">#20981</a>)</li> <li><a href="https://github.com/eslint/eslint/commit/3dbacdbb31673c87ca86ecafbb18712d8d1daed8"><code>3dbacdb</code></a> ci: bump actions/checkout from 6 to 7 (<a href="https://redirect.github.com/eslint/eslint/issues/21014">#21014</a>)</li> <li><a href="https://github.com/eslint/eslint/commit/c3abfca7c96cc9a244f54eeb66e9971c59280354"><code>c3abfca</code></a> chore: correct JSDoc param types in html formatter (<a href="https://redirect.github.com/eslint/eslint/issues/21018">#21018</a>)</li> <li><a href="https://github.com/eslint/eslint/commit/a83683db1c27193c2ad333fc5c0aedcc8a293db7"><code>a83683d</code></a> docs: Update README</li> <li><a href="https://github.com/eslint/eslint/commit/a8323209cdbefefd540c5beeaa51418d8ec40f9e"><code>a832320</code></a> ci: split ecosystem tests into separate jobs (<a href="https://redirect.github.com/eslint/eslint/issues/21001">#21001</a>)</li> <li><a href="https://github.com/eslint/eslint/commit/6b05784eb271ac98ca3e1e2a48c4b14bb588c786"><code>6b05784</code></a> fix: prefer-exponentiation-operator invalid autofix at statement start (<a href="https://redirect.github.com/eslint/eslint/issues/20997">#20997</a>)</li> <li><a href="https://github.com/eslint/eslint/commit/bb9eb2ab28daf6e6dafc62daa6b5daf9c2b7046c"><code>bb9eb2a</code></a> fix: account for shadowed <code>Boolean</code> in <code>no-extra-boolean-cast</code> (<a href="https://redirect.github.com/eslint/eslint/issues/21013">#21013</a>)</li> <li>Additional commits viewable in <a href="https://github.com/eslint/eslint/compare/v10.5.0...v10.6.0">compare view</a></li> </ul> </details> <br /> Updates `playwright` from 1.61.0 to 1.61.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/microsoft/playwright/releases">playwright's releases</a>.</em></p> <blockquote> <h2>v1.61.1</h2> <h3>Bug Fixes</h3> <ul> <li><a href="https://redirect.github.com/microsoft/playwright/issues/41365">#41365</a> [Bug]: Expect.Extend matcher with same name as default matcher in same expect instance overrides default matchers implementation to custom matcher</li> <li><a href="https://redirect.github.com/microsoft/playwright/issues/41351">#41351</a> [Bug]: Playwright UI mode: apiRequestContext._wrapApiCall reports unexpected number of bytes (same test passes in headed mode)</li> <li><a href="https://redirect.github.com/microsoft/playwright/issues/41360">#41360</a> [Bug]: Trace viewer: message times in websockets are downscaled by 1000</li> <li><a href="https://redirect.github.com/microsoft/playwright/issues/41311">#41311</a> [Bug]: [Regression]: Sync loader throws "context.conditions?.includes is not a function" on Node 22.15</li> <li><a href="https://redirect.github.com/microsoft/playwright/issues/41371">#41371</a> [Regression]: Sync ESM loader (registerHooks) fails to resolve extensionless .ts subpath imports across pnpm workspace symlinks</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/microsoft/playwright/commit/39e3553a4f283a41134d75d7e404484bd9e6865a"><code>39e3553</code></a> cherry-pick(<a href="https://redirect.github.com/microsoft/playwright/issues/41399">#41399</a>): fix(test): load require-reached files as commonjs in syn...</li> <li><a href="https://github.com/microsoft/playwright/commit/4328122a0fa91df1be287f12d26f272f598ccca7"><code>4328122</code></a> chore: mark v1.61.1 (<a href="https://redirect.github.com/microsoft/playwright/issues/41404">#41404</a>)</li> <li><a href="https://github.com/microsoft/playwright/commit/2c29a94ed59a2dbb2cb2553ee7d1ba429f027826"><code>2c29a94</code></a> fix(tracing): stop recording websocket frames outside of chunks (<a href="https://redirect.github.com/microsoft/playwright/issues/41398">#41398</a>)</li> <li><a href="https://github.com/microsoft/playwright/commit/4324b1904199c58ae56d864390f5210df18e33f6"><code>4324b19</code></a> cherry-pick(<a href="https://redirect.github.com/microsoft/playwright/issues/41367">#41367</a>): fix(test): keep builtin expect matchers on base extend</li> <li><a href="https://github.com/microsoft/playwright/commit/041e7e30002e7c384e1918c29720b34c435145f4"><code>041e7e3</code></a> cherry-pick(<a href="https://redirect.github.com/microsoft/playwright/issues/41364">#41364</a>): fix(har): <code>WebSocket</code> message timestamps should be in mi...</li> <li><a href="https://github.com/microsoft/playwright/commit/b8a0fc33932399fc5cfcd211165cf16f8ca01d71"><code>b8a0fc3</code></a> cherry-pick(<a href="https://redirect.github.com/microsoft/playwright/issues/41309">#41309</a>, <a href="https://redirect.github.com/microsoft/playwright/issues/43149">#43149</a>): Revert "fix(firefox): treat `navigationCommitted...</li> <li><a href="https://github.com/microsoft/playwright/commit/b5a31759e6611397bf3afaaa6049a420a5f082bd"><code>b5a3175</code></a> cherry-pick(<a href="https://redirect.github.com/microsoft/playwright/issues/41319">#41319</a>): fix(loader): support other node versions</li> <li><a href="https://github.com/microsoft/playwright/commit/d4724a91b280ae1ee9a87c426e9d6a953c59756e"><code>d4724a9</code></a> cherry-pick(<a href="https://redirect.github.com/microsoft/playwright/issues/41290">#41290</a>): feat(docker): add Ubuntu 26.04 (Resolute Raccoon) image</li> <li>See full diff in <a href="https://github.com/microsoft/playwright/compare/v1.61.0...v1.61.1">compare view</a></li> </ul> </details> <br /> Updates `typescript-eslint` from 8.62.0 to 8.62.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/releases">typescript-eslint's releases</a>.</em></p> <blockquote> <h2>v8.62.1</h2> <h2>8.62.1 (2026-06-29)</h2> <h3>🩹 Fixes</h3> <ul> <li><strong>eslint-plugin:</strong> [prefer-optional-chain] use suggestion instead of autofix for trailing binary operator (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12328">#12328</a>)</li> <li><strong>eslint-plugin:</strong> [no-unnecessary-boolean-literal-compare] preserve boolean result in fixer for nullable true comparisons (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12365">#12365</a>)</li> <li><strong>eslint-plugin:</strong> [no-unnecessary-type-assertion] parenthesize object literal at left edge of expression statement (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12443">#12443</a>, <a href="https://redirect.github.com/typescript-eslint/typescript-eslint/issues/12418">#12418</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>Kirk Waiblinger <a href="https://github.com/kirkwaiblinger"><code>@kirkwaiblinger</code></a></li> <li>mdm317</li> <li>Patrick Aleite</li> <li>송재욱</li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.62.1">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md">typescript-eslint's changelog</a>.</em></p> <blockquote> <h2>8.62.1 (2026-06-29)</h2> <p>This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.</p> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.62.1">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/3ea32f4ba5e196c08c6da1095619d7f65ba4905e"><code>3ea32f4</code></a> chore(release): publish 8.62.1</li> <li>See full diff in <a href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.62.1/packages/typescript-eslint">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…e website group (#136) Bumps the website group in /website with 1 update: [markdown-it](https://github.com/markdown-it/markdown-it). Updates `markdown-it` from 14.2.0 to 14.3.0 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/markdown-it/markdown-it/blob/master/CHANGELOG.md">markdown-it's changelog</a>.</em></p> <blockquote> <h2>[14.3.0] - 2026-07-02</h2> <h3>Changed</h3> <ul> <li>Reworked build pipeline & tools.</li> <li>Added source maps.</li> <li>Bumped <code>linkify-it</code> to 5.0.2.</li> </ul> <h3>Fixed</h3> <ul> <li>Preserve backslash-space hard line breaks, matching CommonMark 6.7, <a href="https://redirect.github.com/markdown-it/markdown-it/issues/1185">#1185</a>.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/markdown-it/markdown-it/commit/ff0ee084fc6b0d10fac049fa562bc2925b5cc723"><code>ff0ee08</code></a> 14.3.0 released</li> <li><a href="https://github.com/markdown-it/markdown-it/commit/52e2749ab25aaf841bf74b50560929aa93b8e14d"><code>52e2749</code></a> Bump linkify-it / vite deps</li> <li><a href="https://github.com/markdown-it/markdown-it/commit/56c2404e6d3e78632ce7b37a95f289fc04330c76"><code>56c2404</code></a> fix: keep backslash-space hard line break (CommonMark 6.7) (<a href="https://redirect.github.com/markdown-it/markdown-it/issues/1185">#1185</a>)</li> <li><a href="https://github.com/markdown-it/markdown-it/commit/0fbb18b23145158a39255f7476c781dbce320a16"><code>0fbb18b</code></a> Bump vite from 8.0.14 to 8.0.16 (<a href="https://redirect.github.com/markdown-it/markdown-it/issues/1181">#1181</a>)</li> <li><a href="https://github.com/markdown-it/markdown-it/commit/83450e2bc3836ad9f68f652e5685031e9dce4897"><code>83450e2</code></a> Rework benchmark deps and bump versions</li> <li><a href="https://github.com/markdown-it/markdown-it/commit/57a68632ce317593fe316b7131105b131691b90b"><code>57a6863</code></a> benchmark => tinybench</li> <li><a href="https://github.com/markdown-it/markdown-it/commit/7608db19a5b14f84b47b34cced43c574b1abfd0c"><code>7608db1</code></a> Update CI config</li> <li><a href="https://github.com/markdown-it/markdown-it/commit/9d8eb42a72e0e576125733acc7ae6154e8f6cb5a"><code>9d8eb42</code></a> Added package-lock and updated versions to latest possible</li> <li><a href="https://github.com/markdown-it/markdown-it/commit/0aee70db5e8284c84201d39d64c2b14228fd280a"><code>0aee70d</code></a> lint: enable <code>@stylistic/no-multi-spaces</code> rule</li> <li><a href="https://github.com/markdown-it/markdown-it/commit/88789854dc44db99b7736fd4349487dfda0d4067"><code>8878985</code></a> lint => neostandard</li> <li>Additional commits viewable in <a href="https://github.com/markdown-it/markdown-it/compare/14.2.0...14.3.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…-host group (#137) Bumps the rust-host group with 1 update: [crossbeam-channel](https://github.com/crossbeam-rs/crossbeam). Updates `crossbeam-channel` from 0.5.15 to 0.5.16 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/crossbeam-rs/crossbeam/releases">crossbeam-channel's releases</a>.</em></p> <blockquote> <h2>crossbeam-channel 0.5.16</h2> <ul> <li>Improve support for rust-analyzer auto-completion of code inside <code>select!</code>/<code>select_biased!</code> macro. (<a href="https://redirect.github.com/crossbeam-rs/crossbeam/issues/1240">#1240</a>)</li> <li>Make <code>never</code> const. (<a href="https://redirect.github.com/crossbeam-rs/crossbeam/issues/1250">#1250</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/crossbeam-rs/crossbeam/commit/9b56303b8aa9ff8ec5bbebb9d2da05e034977889"><code>9b56303</code></a> Prepare for the next release</li> <li><a href="https://github.com/crossbeam-rs/crossbeam/commit/a078b17b7319ab49e53720ebeed8fa8a539a8e18"><code>a078b17</code></a> ci: Sync config with main</li> <li><a href="https://github.com/crossbeam-rs/crossbeam/commit/508c29d3c27d7e27791244644dae2169a2f1678a"><code>508c29d</code></a> Remove crossbeam-skiplist which is not published from this branch from worksp...</li> <li><a href="https://github.com/crossbeam-rs/crossbeam/commit/6a20e57c492da6ba327b587bc5f38c7a4a3067ef"><code>6a20e57</code></a> tests: Fix mismatched_lifetime_syntaxes</li> <li><a href="https://github.com/crossbeam-rs/crossbeam/commit/c2d674f88af9501a0a939d8d4b0d52bdbc453ef9"><code>c2d674f</code></a> epoch: Fix rustdoc::invalid_rust_codeblocks</li> <li><a href="https://github.com/crossbeam-rs/crossbeam/commit/bd6563e2118a5f2e9eec0f9e16006d428b82ffb0"><code>bd6563e</code></a> Update no_atomic.rs</li> <li><a href="https://github.com/crossbeam-rs/crossbeam/commit/d3e1e364093763a40affe7ea3ff8368c7dc25ee9"><code>d3e1e36</code></a> Make CachePadded<T> have C repr to allow casting to and from T (<a href="https://redirect.github.com/crossbeam-rs/crossbeam/issues/1270">#1270</a>)</li> <li><a href="https://github.com/crossbeam-rs/crossbeam/commit/c0c466e5c3b5f177884e1df5f8f2c8c939c31aab"><code>c0c466e</code></a> channel: Use non-poison Mutex</li> <li><a href="https://github.com/crossbeam-rs/crossbeam/commit/8b3940f1063f2e0795e44d3f5dde973f08e2a50b"><code>8b3940f</code></a> Add missing word to docs (<a href="https://redirect.github.com/crossbeam-rs/crossbeam/issues/1208">#1208</a>)</li> <li><a href="https://github.com/crossbeam-rs/crossbeam/commit/df6eec0610f91de504a5834c9faa0de40e3aec83"><code>df6eec0</code></a> docs: Link <code>select_biased!</code> from <code>select!</code> macro (<a href="https://redirect.github.com/crossbeam-rs/crossbeam/issues/1202">#1202</a>)</li> <li>Additional commits viewable in <a href="https://github.com/crossbeam-rs/crossbeam/compare/crossbeam-channel-0.5.15...crossbeam-channel-0.5.16">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…5 updates (#138) Bumps the vscode-extension group in /editors/vscode with 5 updates: | Package | From | To | | --- | --- | --- | | [vscode-languageclient](https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client) | `10.0.1` | `10.1.0` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.0.1` | `26.1.0` | | [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.62.1` | `8.63.0` | | [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.62.1` | `8.63.0` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.62.1` | `8.63.0` | Updates `vscode-languageclient` from 10.0.1 to 10.1.0 <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/microsoft/vscode-languageserver-node/commit/20969f3e75cb3cd35c2bb794b1d15cc2dfbe4abb"><code>20969f3</code></a> Prepare new release</li> <li><a href="https://github.com/microsoft/vscode-languageserver-node/commit/0e5d41578ac5dab17e42d8d9dfbcd1c71122df86"><code>0e5d415</code></a> Reuse diagnostic collections and introduce a provider (<a href="https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client/issues/1814">#1814</a>)</li> <li><a href="https://github.com/microsoft/vscode-languageserver-node/commit/44e65e9d7dc3e827cbcfaf7dc01fa864541a36b6"><code>44e65e9</code></a> Prevent unnecessary diagnostic collection creation (<a href="https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client/issues/1812">#1812</a>)</li> <li><a href="https://github.com/microsoft/vscode-languageserver-node/commit/c3d6a760bc72f49d44368be1c8bd7b4f27c1b57c"><code>c3d6a76</code></a> Fix diagnostics issue after saving unsaved-but-named buffer (<a href="https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client/issues/1810">#1810</a>)</li> <li><a href="https://github.com/microsoft/vscode-languageserver-node/commit/1f326b1f321fdf70c4a81a22185ee42a1a3b2c15"><code>1f326b1</code></a> Clarify diagnostic collection naming (<a href="https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client/issues/1807">#1807</a>)</li> <li><a href="https://github.com/microsoft/vscode-languageserver-node/commit/edd4c12c1d85e3cfad8aebfa6cd4c31ef9e085a5"><code>edd4c12</code></a> Merge 3.18.1 release into main (<a href="https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client/issues/1805">#1805</a>)</li> <li><a href="https://github.com/microsoft/vscode-languageserver-node/commit/af9fdd224601aa44a4aab5313cc85757475fdf21"><code>af9fdd2</code></a> <a href="https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client/issues/1799">#1799</a>: Diagnostic pull request cancellation is still handled incorrectly (<a href="https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client/issues/1800">#1800</a>)</li> <li>See full diff in <a href="https://github.com/Microsoft/vscode-languageserver-node/commits/release/client/10.1.0/client">compare view</a></li> </ul> </details> <br /> Updates `@types/node` from 26.0.1 to 26.1.0 <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node">compare view</a></li> </ul> </details> <br /> Updates `@typescript-eslint/eslint-plugin` from 8.62.1 to 8.63.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/releases">@typescript-eslint/eslint-plugin's releases</a>.</em></p> <blockquote> <h2>v8.63.0</h2> <h2>8.63.0 (2026-07-06)</h2> <h3>🚀 Features</h3> <ul> <li><strong>eslint-plugin:</strong> [no-misused-promises] detect async usage of a sync dispose usage (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12426">#12426</a>)</li> </ul> <h3>🩹 Fixes</h3> <ul> <li><strong>eslint-plugin:</strong> [method-signature-style] suggest converting readonly function properties instead of emitting invalid syntax (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12447">#12447</a>, <a href="https://redirect.github.com/typescript-eslint/typescript-eslint/issues/12446">#12446</a>)</li> <li><strong>eslint-plugin:</strong> [no-unnecessary-type-assertion] handle optional-chained calls to overloaded functions (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12491">#12491</a>, <a href="https://redirect.github.com/typescript-eslint/typescript-eslint/issues/12485">#12485</a>)</li> <li><strong>eslint-plugin:</strong> [no-base-to-string] don't flag a shadowed String() call (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12492">#12492</a>)</li> <li><strong>scope-manager:</strong> export ClassStaticBlockScope (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12460">#12460</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>Evyatar Daud <a href="https://github.com/StyleShit"><code>@StyleShit</code></a></li> <li>Kristjan <a href="https://github.com/KristjanTammekivi"><code>@KristjanTammekivi</code></a></li> <li>Michael Naumov <a href="https://github.com/mnaoumov"><code>@mnaoumov</code></a></li> <li>Serhii Leniv <a href="https://github.com/Serhii-Leniv"><code>@Serhii-Leniv</code></a></li> <li>송재욱</li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.63.0">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md">@typescript-eslint/eslint-plugin's changelog</a>.</em></p> <blockquote> <h2>8.63.0 (2026-07-06)</h2> <h3>🚀 Features</h3> <ul> <li><strong>eslint-plugin:</strong> [no-misused-promises] detect async usage of a sync dispose usage (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12426">#12426</a>)</li> </ul> <h3>🩹 Fixes</h3> <ul> <li><strong>eslint-plugin:</strong> [no-base-to-string] don't flag a shadowed String() call (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12492">#12492</a>)</li> <li><strong>eslint-plugin:</strong> [no-unnecessary-type-assertion] handle optional-chained calls to overloaded functions (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12491">#12491</a>, <a href="https://redirect.github.com/typescript-eslint/typescript-eslint/issues/12485">#12485</a>)</li> <li><strong>eslint-plugin:</strong> [method-signature-style] suggest converting readonly function properties instead of emitting invalid syntax (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12447">#12447</a>, <a href="https://redirect.github.com/typescript-eslint/typescript-eslint/issues/12446">#12446</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>Evyatar Daud <a href="https://github.com/StyleShit"><code>@StyleShit</code></a></li> <li>Kristjan <a href="https://github.com/KristjanTammekivi"><code>@KristjanTammekivi</code></a></li> <li>Michael Naumov <a href="https://github.com/mnaoumov"><code>@mnaoumov</code></a></li> <li>Serhii Leniv <a href="https://github.com/Serhii-Leniv"><code>@Serhii-Leniv</code></a></li> <li>송재욱</li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.63.0">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/290cf6cdcc5ffb00c5b8f3e1e0e9f2fd8cc96374"><code>290cf6c</code></a> chore(release): publish 8.63.0</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/8d8fda638b9cb5874c5bfd8b13da7ec8b74dd0f8"><code>8d8fda6</code></a> feat(eslint-plugin): [no-misused-promises] detect async usage of a sync dispo...</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/fec4f4f0fb8fa7318c60ec59f59bf2b710314b34"><code>fec4f4f</code></a> fix(eslint-plugin): [no-base-to-string] don't flag a shadowed String() call (...</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/fb3da7974e00d119493a7170e34b76b2a9051f85"><code>fb3da79</code></a> fix(eslint-plugin): [no-unnecessary-type-assertion] handle optional-chained c...</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/dd020578ed417b844b1d03a70be42a126d51cbb5"><code>dd02057</code></a> docs: [no-base-to-string] clarify ignoredTypeNames description (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin/issues/12488">#12488</a>)</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/5b224e79c59897a5580540a561a492f83b6d8836"><code>5b224e7</code></a> docs: [ban-ts-comment] clarify that <code>@ts-expect-error</code> is allowed by default ...</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/a9a9d431017bd081a55f1d63d91c00ee901b7205"><code>a9a9d43</code></a> docs: [restrict-template-expressions] clarify <code>allowArray</code> option behavior (#...</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/091fe8241275300f022d521c2ac74f920b55a024"><code>091fe82</code></a> fix(eslint-plugin): [method-signature-style] suggest converting readonly func...</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/d5502f9367c90f0e599cef47b3e090a1de343d40"><code>d5502f9</code></a> docs: clarify consistent-type-imports guidance for verbatimModuleSyntax (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin/issues/12194">#12194</a>)</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/61a9dba6872ddcc996797c0fdfb9a3e3c825c3d2"><code>61a9dba</code></a> chore(eslint-plugin): switch auto-generated test cases to hand-written in pre...</li> <li>Additional commits viewable in <a href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.63.0/packages/eslint-plugin">compare view</a></li> </ul> </details> <br /> Updates `@typescript-eslint/parser` from 8.62.1 to 8.63.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/releases">@typescript-eslint/parser's releases</a>.</em></p> <blockquote> <h2>v8.63.0</h2> <h2>8.63.0 (2026-07-06)</h2> <h3>🚀 Features</h3> <ul> <li><strong>eslint-plugin:</strong> [no-misused-promises] detect async usage of a sync dispose usage (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12426">#12426</a>)</li> </ul> <h3>🩹 Fixes</h3> <ul> <li><strong>eslint-plugin:</strong> [method-signature-style] suggest converting readonly function properties instead of emitting invalid syntax (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12447">#12447</a>, <a href="https://redirect.github.com/typescript-eslint/typescript-eslint/issues/12446">#12446</a>)</li> <li><strong>eslint-plugin:</strong> [no-unnecessary-type-assertion] handle optional-chained calls to overloaded functions (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12491">#12491</a>, <a href="https://redirect.github.com/typescript-eslint/typescript-eslint/issues/12485">#12485</a>)</li> <li><strong>eslint-plugin:</strong> [no-base-to-string] don't flag a shadowed String() call (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12492">#12492</a>)</li> <li><strong>scope-manager:</strong> export ClassStaticBlockScope (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12460">#12460</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>Evyatar Daud <a href="https://github.com/StyleShit"><code>@StyleShit</code></a></li> <li>Kristjan <a href="https://github.com/KristjanTammekivi"><code>@KristjanTammekivi</code></a></li> <li>Michael Naumov <a href="https://github.com/mnaoumov"><code>@mnaoumov</code></a></li> <li>Serhii Leniv <a href="https://github.com/Serhii-Leniv"><code>@Serhii-Leniv</code></a></li> <li>송재욱</li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.63.0">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md">@typescript-eslint/parser's changelog</a>.</em></p> <blockquote> <h2>8.63.0 (2026-07-06)</h2> <p>This was a version bump only for parser to align it with other projects, there were no code changes.</p> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.63.0">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/290cf6cdcc5ffb00c5b8f3e1e0e9f2fd8cc96374"><code>290cf6c</code></a> chore(release): publish 8.63.0</li> <li>See full diff in <a href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.63.0/packages/parser">compare view</a></li> </ul> </details> <br /> Updates `typescript-eslint` from 8.62.1 to 8.63.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/releases">typescript-eslint's releases</a>.</em></p> <blockquote> <h2>v8.63.0</h2> <h2>8.63.0 (2026-07-06)</h2> <h3>🚀 Features</h3> <ul> <li><strong>eslint-plugin:</strong> [no-misused-promises] detect async usage of a sync dispose usage (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12426">#12426</a>)</li> </ul> <h3>🩹 Fixes</h3> <ul> <li><strong>eslint-plugin:</strong> [method-signature-style] suggest converting readonly function properties instead of emitting invalid syntax (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12447">#12447</a>, <a href="https://redirect.github.com/typescript-eslint/typescript-eslint/issues/12446">#12446</a>)</li> <li><strong>eslint-plugin:</strong> [no-unnecessary-type-assertion] handle optional-chained calls to overloaded functions (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12491">#12491</a>, <a href="https://redirect.github.com/typescript-eslint/typescript-eslint/issues/12485">#12485</a>)</li> <li><strong>eslint-plugin:</strong> [no-base-to-string] don't flag a shadowed String() call (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12492">#12492</a>)</li> <li><strong>scope-manager:</strong> export ClassStaticBlockScope (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12460">#12460</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>Evyatar Daud <a href="https://github.com/StyleShit"><code>@StyleShit</code></a></li> <li>Kristjan <a href="https://github.com/KristjanTammekivi"><code>@KristjanTammekivi</code></a></li> <li>Michael Naumov <a href="https://github.com/mnaoumov"><code>@mnaoumov</code></a></li> <li>Serhii Leniv <a href="https://github.com/Serhii-Leniv"><code>@Serhii-Leniv</code></a></li> <li>송재욱</li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.63.0">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md">typescript-eslint's changelog</a>.</em></p> <blockquote> <h2>8.63.0 (2026-07-06)</h2> <p>This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.</p> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.63.0">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/290cf6cdcc5ffb00c5b8f3e1e0e9f2fd8cc96374"><code>290cf6c</code></a> chore(release): publish 8.63.0</li> <li>See full diff in <a href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.63.0/packages/typescript-eslint">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps the github-actions group with 3 updates: [taiki-e/install-action](https://github.com/taiki-e/install-action), [github/codeql-action/init](https://github.com/github/codeql-action) and [github/codeql-action/analyze](https://github.com/github/codeql-action). Updates `taiki-e/install-action` from 2.82.6 to 2.82.10 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/taiki-e/install-action/releases">taiki-e/install-action's releases</a>.</em></p> <blockquote> <h2>2.82.10</h2> <ul> <li> <p>Update <code>tombi@latest</code> to 1.2.0.</p> </li> <li> <p>Update <code>cargo-nextest@latest</code> to 0.9.140.</p> </li> </ul> <h2>2.82.9</h2> <ul> <li> <p>Update <code>vacuum@latest</code> to 0.29.9.</p> </li> <li> <p>Update <code>prek@latest</code> to 0.4.8.</p> </li> <li> <p>Update <code>cargo-tarpaulin@latest</code> to 0.37.0.</p> </li> <li> <p>Update <code>cargo-leptos@latest</code> to 0.3.7.</p> </li> </ul> <h2>2.82.8</h2> <ul> <li> <p>Update <code>vacuum@latest</code> to 0.29.8.</p> </li> <li> <p>Update <code>uv@latest</code> to 0.11.26.</p> </li> <li> <p>Update <code>typos@latest</code> to 1.48.0.</p> </li> <li> <p>Update <code>trivy@latest</code> to 0.72.0.</p> </li> <li> <p>Update <code>tombi@latest</code> to 1.1.7.</p> </li> <li> <p>Update <code>prek@latest</code> to 0.4.6.</p> </li> <li> <p>Update <code>mise@latest</code> to 2026.7.0.</p> </li> <li> <p>Update <code>just@latest</code> to 1.55.1.</p> </li> <li> <p>Update <code>biome@latest</code> to 2.5.2.</p> </li> </ul> <h2>2.82.7</h2> <ul> <li> <p>Update <code>tombi@latest</code> to 1.1.6.</p> </li> <li> <p>Update <code>kingfisher@latest</code> to 1.105.0.</p> </li> <li> <p>Update <code>gungraun-runner@latest</code> to 0.19.3.</p> </li> <li> <p>Update <code>editorconfig-checker@latest</code> to 3.8.0.</p> </li> <li> <p>Update <code>dprint@latest</code> to 0.55.1.</p> </li> <li> <p>Update <code>cargo-tarpaulin@latest</code> to 0.36.0.</p> </li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md">taiki-e/install-action's changelog</a>.</em></p> <blockquote> <h1>Changelog</h1> <p>All notable changes to this project will be documented in this file.</p> <p>This project adheres to <a href="https://semver.org">Semantic Versioning</a>.</p> <!-- raw HTML omitted --> <h2>[Unreleased]</h2> <h2>[2.82.10] - 2026-07-07</h2> <ul> <li> <p>Update <code>tombi@latest</code> to 1.2.0.</p> </li> <li> <p>Update <code>cargo-nextest@latest</code> to 0.9.140.</p> </li> </ul> <h2>[2.82.9] - 2026-07-05</h2> <ul> <li> <p>Update <code>vacuum@latest</code> to 0.29.9.</p> </li> <li> <p>Update <code>prek@latest</code> to 0.4.8.</p> </li> <li> <p>Update <code>cargo-tarpaulin@latest</code> to 0.37.0.</p> </li> <li> <p>Update <code>cargo-leptos@latest</code> to 0.3.7.</p> </li> </ul> <h2>[2.82.8] - 2026-07-03</h2> <ul> <li> <p>Update <code>vacuum@latest</code> to 0.29.8.</p> </li> <li> <p>Update <code>uv@latest</code> to 0.11.26.</p> </li> <li> <p>Update <code>typos@latest</code> to 1.48.0.</p> </li> <li> <p>Update <code>trivy@latest</code> to 0.72.0.</p> </li> <li> <p>Update <code>tombi@latest</code> to 1.1.7.</p> </li> <li> <p>Update <code>prek@latest</code> to 0.4.6.</p> </li> <li> <p>Update <code>mise@latest</code> to 2026.7.0.</p> </li> <li> <p>Update <code>just@latest</code> to 1.55.1.</p> </li> <li> <p>Update <code>biome@latest</code> to 2.5.2.</p> </li> </ul> <h2>[2.82.7] - 2026-06-30</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/taiki-e/install-action/commit/50414676f9f5d50a65992c6dd2ed02641263226c"><code>5041467</code></a> Release 2.82.10</li> <li><a href="https://github.com/taiki-e/install-action/commit/99a7f87ef1e6f99c941052e455bae2424b27235f"><code>99a7f87</code></a> Update uv manifest</li> <li><a href="https://github.com/taiki-e/install-action/commit/3ab022bf4858764f3ce8bda3e6a945e6269eb922"><code>3ab022b</code></a> Update <code>tombi@latest</code> to 1.2.0</li> <li><a href="https://github.com/taiki-e/install-action/commit/f2df39bdf2bef4791037b2adc3809e6fe98d2104"><code>f2df39b</code></a> Update mdbook manifest</li> <li><a href="https://github.com/taiki-e/install-action/commit/1f59d6175c5e6a275739a4aa090c645bb134e001"><code>1f59d61</code></a> Update <code>cargo-nextest@latest</code> to 0.9.140</li> <li><a href="https://github.com/taiki-e/install-action/commit/4684b8405694ae9dd42c9f39ba901a70ae83f4a3"><code>4684b84</code></a> Release 2.82.9</li> <li><a href="https://github.com/taiki-e/install-action/commit/29fb1dbe52c0247f03f90f9dd43b08d3c603510b"><code>29fb1db</code></a> Update <code>vacuum@latest</code> to 0.29.9</li> <li><a href="https://github.com/taiki-e/install-action/commit/584230b16680bbb1ddef3c65a89568570fd36f69"><code>584230b</code></a> Update tombi manifest</li> <li><a href="https://github.com/taiki-e/install-action/commit/1872019a1c4268421e4c2d5f230285190a08b258"><code>1872019</code></a> Update <code>prek@latest</code> to 0.4.8</li> <li><a href="https://github.com/taiki-e/install-action/commit/3e817d29dde43a866e242560569eb7f418035f1a"><code>3e817d2</code></a> Update <code>cargo-tarpaulin@latest</code> to 0.37.0</li> <li>Additional commits viewable in <a href="https://github.com/taiki-e/install-action/compare/9bcaee1dcae34154180f412e2fa69355a7cda9f6...50414676f9f5d50a65992c6dd2ed02641263226c">compare view</a></li> </ul> </details> <br /> Updates `github/codeql-action/init` from 4.36.2 to 4.36.3 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/releases">github/codeql-action/init's releases</a>.</em></p> <blockquote> <h2>v4.36.3</h2> <p>No user facing changes.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action/init's changelog</a>.</em></p> <blockquote> <h1>CodeQL Action Changelog</h1> <p>See the <a href="https://github.com/github/codeql-action/releases">releases page</a> for the relevant changes to the CodeQL CLI and language packs.</p> <h2>[UNRELEASED]</h2> <p>No user facing changes.</p> <h2>4.36.3 - 01 Jul 2026</h2> <p>No user facing changes.</p> <h2>4.36.2 - 04 Jun 2026</h2> <ul> <li>Cache CodeQL CLI version information across Actions steps. <a href="https://redirect.github.com/github/codeql-action/pull/3943">#3943</a></li> <li>Reduce requests while waiting for analysis processing by using exponential backoff when polling SARIF processing status. <a href="https://redirect.github.com/github/codeql-action/pull/3937">#3937</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.6">2.25.6</a>. <a href="https://redirect.github.com/github/codeql-action/pull/3948">#3948</a></li> </ul> <h2>4.36.1 - 02 Jun 2026</h2> <p>No user facing changes.</p> <h2>4.36.0 - 22 May 2026</h2> <ul> <li><em>Breaking change</em>: Bump the minimum required CodeQL bundle version to 2.19.4. <a href="https://redirect.github.com/github/codeql-action/pull/3894">#3894</a></li> <li>Add support for SHA-256 Git object IDs. <a href="https://redirect.github.com/github/codeql-action/pull/3893">#3893</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.5">2.25.5</a>. <a href="https://redirect.github.com/github/codeql-action/pull/3926">#3926</a></li> </ul> <h2>4.35.5 - 15 May 2026</h2> <ul> <li>We have improved how the JavaScript bundles for the CodeQL Action are generated to avoid duplication across bundles and reduce the size of the repository by around 70%. This should have no effect on the runtime behaviour of the CodeQL Action. <a href="https://redirect.github.com/github/codeql-action/pull/3899">#3899</a></li> <li>For performance and accuracy reasons, <a href="https://redirect.github.com/github/roadmap/issues/1158">improved incremental analysis</a> will now only be enabled on a pull request when diff-informed analysis is also enabled for that run. If diff-informed analysis is unavailable (for example, because the PR diff ranges could not be computed), the action will fall back to a full analysis. <a href="https://redirect.github.com/github/codeql-action/pull/3791">#3791</a></li> <li>If multiple inputs are provided for the GitHub-internal <code>analysis-kinds</code> input, only <code>code-scanning</code> will be enabled. The <code>analysis-kinds</code> input is experimental, for GitHub-internal use only, and may change without notice at any time. <a href="https://redirect.github.com/github/codeql-action/pull/3892">#3892</a></li> <li>Added an experimental change which, when running a Code Scanning analysis for a PR with <a href="https://redirect.github.com/github/roadmap/issues/1158">improved incremental analysis</a> enabled, prefers CodeQL CLI versions that have a cached overlay-base database for the configured languages. This speeds up analysis for a repository when there is not yet a cached overlay-base database for the latest CLI version. We expect to roll this change out to everyone in May. <a href="https://redirect.github.com/github/codeql-action/pull/3880">#3880</a></li> </ul> <h2>4.35.4 - 07 May 2026</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.4">2.25.4</a>. <a href="https://redirect.github.com/github/codeql-action/pull/3881">#3881</a></li> </ul> <h2>4.35.3 - 01 May 2026</h2> <ul> <li><em>Upcoming breaking change</em>: Add a deprecation warning for customers using CodeQL version 2.19.3 and earlier. These versions of CodeQL were discontinued on 9 April 2026 alongside GitHub Enterprise Server 3.15, and will be unsupported by the next minor release of the CodeQL Action. <a href="https://redirect.github.com/github/codeql-action/pull/3837">#3837</a></li> <li>Configurations for private registries that use Cloudsmith or GCP OIDC are now accepted. <a href="https://redirect.github.com/github/codeql-action/pull/3850">#3850</a></li> <li>Best-effort connection tests for private registries now use <code>GET</code> requests instead of <code>HEAD</code> for better compatibility with various registry implementations. For NuGet feeds, the test is now always performed against the service index. <a href="https://redirect.github.com/github/codeql-action/pull/3853">#3853</a></li> <li>Fixed a bug where two diagnostics produced within the same millisecond could overwrite each other on disk, causing one of them to be lost. <a href="https://redirect.github.com/github/codeql-action/pull/3852">#3852</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.3">2.25.3</a>. <a href="https://redirect.github.com/github/codeql-action/pull/3865">#3865</a></li> </ul> <h2>4.35.2 - 15 Apr 2026</h2> <ul> <li>The undocumented TRAP cache cleanup feature that could be enabled using the <code>CODEQL_ACTION_CLEANUP_TRAP_CACHES</code> environment variable is deprecated and will be removed in May 2026. If you are affected by this, we recommend disabling TRAP caching by passing the <code>trap-caching: false</code> input to the <code>init</code> Action. <a href="https://redirect.github.com/github/codeql-action/pull/3795">#3795</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/github/codeql-action/commit/54f647b7e1bb85c95cddabcd46b0c578ec92bc1a"><code>54f647b</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/3984">#3984</a> from github/update-v4.36.3-1f34ec164</li> <li><a href="https://github.com/github/codeql-action/commit/e78819e05527766c3c5919e3177647e280c6cb83"><code>e78819e</code></a> Trigger checks</li> <li><a href="https://github.com/github/codeql-action/commit/2c9d3d63eb4941734e2d29468953529a56f5ff1c"><code>2c9d3d6</code></a> Update changelog for v4.36.3</li> <li><a href="https://github.com/github/codeql-action/commit/1f34ec16430d82636d18716acc7aaa6d843b35a9"><code>1f34ec1</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/3983">#3983</a> from github/mbg/repo-props/ff-for-config-file-prop</li> <li><a href="https://github.com/github/codeql-action/commit/d5f0145480025b49d8b08c3f6b36e6ad41a68c90"><code>d5f0145</code></a> Log when repository property has a value but is ignored</li> <li><a href="https://github.com/github/codeql-action/commit/f27f56386a3c745af8d7bbfb806098c714a5e32a"><code>f27f563</code></a> Add test for when the FF is off</li> <li><a href="https://github.com/github/codeql-action/commit/0025d0f2b5676fde748a0be9725dcce18dd9f986"><code>0025d0f</code></a> Use FF</li> <li><a href="https://github.com/github/codeql-action/commit/f7fa18f05d107ff6735857c3510fbff190c9a1eb"><code>f7fa18f</code></a> Add FF for config file repo property</li> <li><a href="https://github.com/github/codeql-action/commit/628fc3f124e68b0151f0d2a5d81e864ee1e42335"><code>628fc3f</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/3979">#3979</a> from github/henrymercer/overlay-db-cleanup-size-tele...</li> <li><a href="https://github.com/github/codeql-action/commit/9cfb67bab9b32441237f92d4ba29a7f3ccff259f"><code>9cfb67b</code></a> Add clarifying comments</li> <li>Additional commits viewable in <a href="https://github.com/github/codeql-action/compare/8aad20d150bbac5944a9f9d289da16a4b0d87c1e...54f647b7e1bb85c95cddabcd46b0c578ec92bc1a">compare view</a></li> </ul> </details> <br /> Updates `github/codeql-action/analyze` from 4.36.2 to 4.36.3 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/releases">github/codeql-action/analyze's releases</a>.</em></p> <blockquote> <h2>v4.36.3</h2> <p>No user facing changes.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action/analyze's changelog</a>.</em></p> <blockquote> <h1>CodeQL Action Changelog</h1> <p>See the <a href="https://github.com/github/codeql-action/releases">releases page</a> for the relevant changes to the CodeQL CLI and language packs.</p> <h2>[UNRELEASED]</h2> <p>No user facing changes.</p> <h2>4.36.3 - 01 Jul 2026</h2> <p>No user facing changes.</p> <h2>4.36.2 - 04 Jun 2026</h2> <ul> <li>Cache CodeQL CLI version information across Actions steps. <a href="https://redirect.github.com/github/codeql-action/pull/3943">#3943</a></li> <li>Reduce requests while waiting for analysis processing by using exponential backoff when polling SARIF processing status. <a href="https://redirect.github.com/github/codeql-action/pull/3937">#3937</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.6">2.25.6</a>. <a href="https://redirect.github.com/github/codeql-action/pull/3948">#3948</a></li> </ul> <h2>4.36.1 - 02 Jun 2026</h2> <p>No user facing changes.</p> <h2>4.36.0 - 22 May 2026</h2> <ul> <li><em>Breaking change</em>: Bump the minimum required CodeQL bundle version to 2.19.4. <a href="https://redirect.github.com/github/codeql-action/pull/3894">#3894</a></li> <li>Add support for SHA-256 Git object IDs. <a href="https://redirect.github.com/github/codeql-action/pull/3893">#3893</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.5">2.25.5</a>. <a href="https://redirect.github.com/github/codeql-action/pull/3926">#3926</a></li> </ul> <h2>4.35.5 - 15 May 2026</h2> <ul> <li>We have improved how the JavaScript bundles for the CodeQL Action are generated to avoid duplication across bundles and reduce the size of the repository by around 70%. This should have no effect on the runtime behaviour of the CodeQL Action. <a href="https://redirect.github.com/github/codeql-action/pull/3899">#3899</a></li> <li>For performance and accuracy reasons, <a href="https://redirect.github.com/github/roadmap/issues/1158">improved incremental analysis</a> will now only be enabled on a pull request when diff-informed analysis is also enabled for that run. If diff-informed analysis is unavailable (for example, because the PR diff ranges could not be computed), the action will fall back to a full analysis. <a href="https://redirect.github.com/github/codeql-action/pull/3791">#3791</a></li> <li>If multiple inputs are provided for the GitHub-internal <code>analysis-kinds</code> input, only <code>code-scanning</code> will be enabled. The <code>analysis-kinds</code> input is experimental, for GitHub-internal use only, and may change without notice at any time. <a href="https://redirect.github.com/github/codeql-action/pull/3892">#3892</a></li> <li>Added an experimental change which, when running a Code Scanning analysis for a PR with <a href="https://redirect.github.com/github/roadmap/issues/1158">improved incremental analysis</a> enabled, prefers CodeQL CLI versions that have a cached overlay-base database for the configured languages. This speeds up analysis for a repository when there is not yet a cached overlay-base database for the latest CLI version. We expect to roll this change out to everyone in May. <a href="https://redirect.github.com/github/codeql-action/pull/3880">#3880</a></li> </ul> <h2>4.35.4 - 07 May 2026</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.4">2.25.4</a>. <a href="https://redirect.github.com/github/codeql-action/pull/3881">#3881</a></li> </ul> <h2>4.35.3 - 01 May 2026</h2> <ul> <li><em>Upcoming breaking change</em>: Add a deprecation warning for customers using CodeQL version 2.19.3 and earlier. These versions of CodeQL were discontinued on 9 April 2026 alongside GitHub Enterprise Server 3.15, and will be unsupported by the next minor release of the CodeQL Action. <a href="https://redirect.github.com/github/codeql-action/pull/3837">#3837</a></li> <li>Configurations for private registries that use Cloudsmith or GCP OIDC are now accepted. <a href="https://redirect.github.com/github/codeql-action/pull/3850">#3850</a></li> <li>Best-effort connection tests for private registries now use <code>GET</code> requests instead of <code>HEAD</code> for better compatibility with various registry implementations. For NuGet feeds, the test is now always performed against the service index. <a href="https://redirect.github.com/github/codeql-action/pull/3853">#3853</a></li> <li>Fixed a bug where two diagnostics produced within the same millisecond could overwrite each other on disk, causing one of them to be lost. <a href="https://redirect.github.com/github/codeql-action/pull/3852">#3852</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.3">2.25.3</a>. <a href="https://redirect.github.com/github/codeql-action/pull/3865">#3865</a></li> </ul> <h2>4.35.2 - 15 Apr 2026</h2> <ul> <li>The undocumented TRAP cache cleanup feature that could be enabled using the <code>CODEQL_ACTION_CLEANUP_TRAP_CACHES</code> environment variable is deprecated and will be removed in May 2026. If you are affected by this, we recommend disabling TRAP caching by passing the <code>trap-caching: false</code> input to the <code>init</code> Action. <a href="https://redirect.github.com/github/codeql-action/pull/3795">#3795</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/github/codeql-action/commit/54f647b7e1bb85c95cddabcd46b0c578ec92bc1a"><code>54f647b</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/3984">#3984</a> from github/update-v4.36.3-1f34ec164</li> <li><a href="https://github.com/github/codeql-action/commit/e78819e05527766c3c5919e3177647e280c6cb83"><code>e78819e</code></a> Trigger checks</li> <li><a href="https://github.com/github/codeql-action/commit/2c9d3d63eb4941734e2d29468953529a56f5ff1c"><code>2c9d3d6</code></a> Update changelog for v4.36.3</li> <li><a href="https://github.com/github/codeql-action/commit/1f34ec16430d82636d18716acc7aaa6d843b35a9"><code>1f34ec1</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/3983">#3983</a> from github/mbg/repo-props/ff-for-config-file-prop</li> <li><a href="https://github.com/github/codeql-action/commit/d5f0145480025b49d8b08c3f6b36e6ad41a68c90"><code>d5f0145</code></a> Log when repository property has a value but is ignored</li> <li><a href="https://github.com/github/codeql-action/commit/f27f56386a3c745af8d7bbfb806098c714a5e32a"><code>f27f563</code></a> Add test for when the FF is off</li> <li><a href="https://github.com/github/codeql-action/commit/0025d0f2b5676fde748a0be9725dcce18dd9f986"><code>0025d0f</code></a> Use FF</li> <li><a href="https://github.com/github/codeql-action/commit/f7fa18f05d107ff6735857c3510fbff190c9a1eb"><code>f7fa18f</code></a> Add FF for config file repo property</li> <li><a href="https://github.com/github/codeql-action/commit/628fc3f124e68b0151f0d2a5d81e864ee1e42335"><code>628fc3f</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/3979">#3979</a> from github/henrymercer/overlay-db-cleanup-size-tele...</li> <li><a href="https://github.com/github/codeql-action/commit/9cfb67bab9b32441237f92d4ba29a7f3ccff259f"><code>9cfb67b</code></a> Add clarifying comments</li> <li>Additional commits viewable in <a href="https://github.com/github/codeql-action/compare/8aad20d150bbac5944a9f9d289da16a4b0d87c1e...54f647b7e1bb85c95cddabcd46b0c578ec92bc1a">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Updated [Microsoft.CodeAnalysis.Analyzers](https://github.com/dotnet/roslyn) from 5.3.0 to 5.6.0. <details> <summary>Release notes</summary> _Sourced from [Microsoft.CodeAnalysis.Analyzers's releases](https://github.com/dotnet/roslyn/releases)._ No release notes found for this version range. Commits viewable in [compare view](https://github.com/dotnet/roslyn/commits). </details> Updated [Microsoft.CodeAnalysis.BannedApiAnalyzers](https://github.com/dotnet/roslyn) from 3.3.4 to 5.6.0. <details> <summary>Release notes</summary> _Sourced from [Microsoft.CodeAnalysis.BannedApiAnalyzers's releases](https://github.com/dotnet/roslyn/releases)._ ## 5.0.4 [Release](https://github.com/dotnet/core/releases/tag/v5.0.4) ## 5.0.2 [Release Notes](https://github.com/dotnet/core/blob/master/release-notes/5.0/5.0.2/5.0.2.md) [Install Instructions](https://github.com/dotnet/core/blob/master/release-notes/5.0/5.0.2/5.0.2-install-instructions.md) # Repos * [Core](https://github.com/dotnet/core/releases/tag/v5.0.2) ## 5.0.1 [Release Notes](https://github.com/dotnet/core/blob/master/release-notes/5.0/5.0.1/5.0.1.md) [Install Instructions](https://github.com/dotnet/core/blob/master/release-notes/5.0/5.0.1/5.0.1-install-instructions.md) # Repo * [Core](https://github.com/dotnet/core/releases/tag/v5.0.1) ## 4.2.0-4.22266.5 [Release](https://github.com/dotnet/core/releases/tag/v7.0.0-preview.5) ## 4.2.0-3.22151.16 [Release](https://github.com/dotnet/core/releases/tag/v7.0.0-preview.2) ## 4.2.0-1.22108.11 [Release](https://github.com/dotnet/core/releases/tag/v7.0.0-preview.1) ## 4.0.0-2.21354.7 [Release](https://github.com/dotnet/core/releases/tag/v6.0.0-preview.6) ## 4.0.0-2.21254.26 [Release](https://github.com/dotnet/core/releases/tag/v6.0.0-preview.4) ## 4.0.0-1.21277.15 [Release](https://github.com/dotnet/core/releases/tag/v6.0.0-preview.5) ## 3.10.0-3.21201.20 [Release](https://github.com/dotnet/core/releases/tag/v6.0.0-preview.3) ## 3.10.0-2.21153.36 [Release](https://github.com/dotnet/core/releases/tag/v6.0.0-preview.2) ## 3.10.0-1.21102.26 [Release](https://github.com/dotnet/core/releases/tag/v6.0.0-preview.1) ## 3.7.0-3.20312.3 [Release Notes](https://github.com/dotnet/core/blob/master/release-notes/5.0/preview/5.0.0-preview.6.md) [Install Instructions](https://github.com/dotnet/core/blob/master/release-notes/5.0/preview/5.0.0-preview.6-install-instructions.md) # Repos * [Installer](https://github.com/dotnet/installer/releases/tag/v5.0.100-preview.6.20318.15) * [Windowsdesktop](https://github.com/dotnet/windowsdesktop/releases/tag/v5.0.0-preview.6.20308.1) * [Runtime](https://github.com/dotnet/runtime/releases/tag/v5.0.0-preview.6.20305.6) * [Aspnetcore](https://github.com/dotnet/aspnetcore/releases/tag/v5.0.0-preview.6.20312.15) * [templating](https://github.com/dotnet/templating/releases/tag/v5.0.0-preview.6.20309.2) * [SDK](https://github.com/dotnet/sdk/releases/tag/v5.0.100-preview.6.20318.5) * [winforms](https://github.com/dotnet/winforms/releases/tag/v5.0.0-preview.6.20306.1) * [WPF](https://github.com/dotnet/wpf/releases/tag/v5.0.0-preview.6.20306.1) * [Extensions](https://github.com/dotnet/extensions/releases/tag/v5.0.0-preview.6.20312.15) * [EF Core](https://github.com/dotnet/efcore/releases/tag/v5.0.0-preview.6.20312.4) * [Roslyn](https://github.com/dotnet/roslyn/releases/tag/v3.7.0-3.20312.3) * [Fsharp](https://github.com/dotnet/fsharp/releases/tag/v10.10.0-beta.20312.5) * [WebSDK](https://github.com/dotnet/websdk/releases/tag/v5.0.100-preview.6.20314.1) ## 3.7.0-3.20269.11 [Release Notes](https://github.com/dotnet/core/blob/master/release-notes/5.0/preview/5.0.0-preview.8.md) [Install Instructions](https://github.com/dotnet/core/blob/master/release-notes/5.0/preview/5.0.0-preview.8-install-instructions.md) # Repos * [Installer](https://github.com/dotnet/installer/releases/tag/v5.0.100-preview.8.20417.9) * [Windowsdesktop](https://github.com/dotnet/windowsdesktop/releases/tag/v5.0.0-preview.8.20411.6) * [Runtime](https://github.com/dotnet/runtime/releases/tag/v5.0.0-preview.8.20407.11) * [Aspnetcore](https://github.com/dotnet/aspnetcore/releases/tag/v5.0.0-preview.8.20414.8) * [templating](https://github.com/dotnet/templating/releases/tag/v5.0.0-preview.8.20371.3) * [SDK](https://github.com/dotnet/sdk/releases/tag/v5.0.100-preview.8.20417.14) * [winforms](https://github.com/dotnet/winforms/releases/tag/v5.0.0-preview.8.20410.2) * [WPF](https://github.com/dotnet/wpf/releases/tag/v5.0.0-preview.8.20411.7) * [WCF](https://github.com/dotnet/wcf/releases/tag/v1.2.0-preview1.20412.3) * [Extensions](https://github.com/dotnet/extensions/releases/tag/v5.0.0-preview.8.20414.8) * [EF Core](https://github.com/dotnet/efcore/releases/tag/v5.0.0-preview.8.20407.4) * [Roslyn](https://github.com/dotnet/roslyn/releases/tag/v3.7.0-3.20269.11) * [Fsharp](https://github.com/dotnet/fsharp/releases/tag/v11.0.0-beta.20417.1) * [MSBuild](https://github.com/dotnet/msbuild/releases/tag/v16.8.0-preview-20414-02) ## 3.7.0-2.20277.1 [Release Notes](https://github.com/dotnet/core/blob/master/release-notes/5.0/preview/5.0.0-preview.5.md) [Install Instructions](https://github.com/dotnet/core/blob/master/release-notes/5.0/preview/5.0.0-preview.5-install-instructions.md) # Repos * [Windowsdesktop](https://github.com/dotnet/windowsdesktop/releases/tag/v5.0.0-preview.5.20278.3) * [Runtime](https://github.com/dotnet/runtime/releases/tag/v5.0.0-preview.5.20278.1) * [Aspnetcore](https://github.com/dotnet/aspnetcore/releases/tag/v5.0.0-preview.5.20279.2) * [templating](https://github.com/dotnet/templating/releases/tag/v5.0.0-preview.6.20262.2) * [SDK](https://github.com/dotnet/sdk/releases/tag/v5.0.100-preview.5.20279.7) * [winforms](https://github.com/dotnet/winforms/releases/tag/v5.0.0-preview.5.20278.1) * [WPF](https://github.com/dotnet/wpf/releases/tag/v5.0.0-preview.5.20278.3) * [ASPNETCORE-Tooling](https://github.com/dotnet/aspnetcore-tooling/releases/tag/v5.0.0-preview.5.20278.2) * [Extensions](https://github.com/dotnet/extensions/releases/tag/v5.0.0-preview.5.20279.2) * [EF Core](https://github.com/dotnet/efcore/releases/tag/v5.0.0-preview.5.20278.2) * [Roslyn](https://github.com/dotnet/roslyn/releases/tag/v3.7.0-2.20277.1) * [Fsharp](https://github.com/dotnet/fsharp/releases/tag/v11.0.0-beta.20263.4) ## 3.6.0 [Release Notes](https://github.com/dotnet/core/blob/master/release-notes/5.0/preview/5.0.0-preview.2.md) [Install Instructions](https://github.com/dotnet/core/blob/master/release-notes/5.0/preview/5.0.0-preview.2-install-instructions.md) * [Installer](https://github.com/dotnet/installer/releases/tag/v5.0.100-preview.2.20176.6) * [Windowsdesktop](https://github.com/dotnet/windowsdesktop/releases/tag/v5.0.0-preview.2.20160.6) * [Runtime](https://github.com/dotnet/runtime/releases/tag/v5.0.0-preview.2.20160.6) * [Aspnetcore](https://github.com/dotnet/aspnetcore/releases/tag/v5.0.0-preview.2.20167.3) * [templating](https://github.com/dotnet/templating/releases/tag/v5.0.0-preview.2.20174.1) * [SDK](https://github.com/dotnet/sdk/releases/tag/v5.0.100-preview.2.20176.4) * [winforms](https://github.com/dotnet/winforms/releases/tag/v5.0.0-preview.2.20155.3) * [WPF](https://github.com/dotnet/wpf/releases/tag/v5.0.0-preview.2.20156.7) * [WCF](https://github.com/dotnet/wcf/releases/tag/v1.2.0-preview1.20104.1) * [standard](https://github.com/dotnet/standard/releases/tag/v2.2.0-prerelease.19564.1) * [blazor](https://github.com/dotnet/blazor/releases/tag/v3.2.0-preview1.20067.1) * [ASPNETCORE-Tooling](https://github.com/dotnet/aspnetcore-tooling/releases/tag/v5.0.0-preview.2.20160.3) * [EF Core](https://github.com/dotnet/efcore/releases/tag/v5.0.0-preview.2.20159.4) * [Extensions](https://github.com/dotnet/extensions/releases/tag/v5.0.0-preview.2.20160.3) * [roslyn](https://github.com/dotnet/roslyn/releases/tag/v3.6.0) * [fsharp ](https://github.com/dotnet/fsharp/releases/tag/v11.0.0) * [WebSDK](https://github.com/aspnet/websdk/releases/tag/v5.0.100-preview.2.20167.4) Commits viewable in [compare view](https://github.com/dotnet/roslyn/commits). </details> Updated Microsoft.CodeAnalysis.CSharp from 5.3.0 to 5.6.0. Updated [Microsoft.CodeAnalysis.CSharp.Features](https://github.com/dotnet/roslyn) from 5.3.0 to 5.6.0. <details> <summary>Release notes</summary> _Sourced from [Microsoft.CodeAnalysis.CSharp.Features's releases](https://github.com/dotnet/roslyn/releases)._ No release notes found for this version range. Commits viewable in [compare view](https://github.com/dotnet/roslyn/commits). </details> Updated [Microsoft.CodeAnalysis.CSharp.Workspaces](https://github.com/dotnet/roslyn) from 5.3.0 to 5.6.0. <details> <summary>Release notes</summary> _Sourced from [Microsoft.CodeAnalysis.CSharp.Workspaces's releases](https://github.com/dotnet/roslyn/releases)._ No release notes found for this version range. Commits viewable in [compare view](https://github.com/dotnet/roslyn/commits). </details> Updated [Microsoft.CodeAnalysis.Workspaces.MSBuild](https://github.com/dotnet/roslyn) from 5.3.0 to 5.6.0. <details> <summary>Release notes</summary> _Sourced from [Microsoft.CodeAnalysis.Workspaces.MSBuild's releases](https://github.com/dotnet/roslyn/releases)._ No release notes found for this version range. Commits viewable in [compare view](https://github.com/dotnet/roslyn/commits). </details> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps the github-actions group with 3 updates: [taiki-e/install-action](https://github.com/taiki-e/install-action), [github/codeql-action/init](https://github.com/github/codeql-action) and [github/codeql-action/analyze](https://github.com/github/codeql-action). Updates `taiki-e/install-action` from 2.82.10 to 2.82.11 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/taiki-e/install-action/releases">taiki-e/install-action's releases</a>.</em></p> <blockquote> <h2>2.82.11</h2> <ul> <li> <p>Update <code>wasm-tools@latest</code> to 1.253.0.</p> </li> <li> <p>Update <code>uv@latest</code> to 0.11.27.</p> </li> <li> <p>Update <code>mise@latest</code> to 2026.7.2.</p> </li> <li> <p>Update <code>mdbook@latest</code> to 0.5.4.</p> </li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md">taiki-e/install-action's changelog</a>.</em></p> <blockquote> <h1>Changelog</h1> <p>All notable changes to this project will be documented in this file.</p> <p>This project adheres to <a href="https://semver.org">Semantic Versioning</a>.</p> <!-- raw HTML omitted --> <h2>[Unreleased]</h2> <h2>[2.82.11] - 2026-07-08</h2> <ul> <li> <p>Update <code>wasm-tools@latest</code> to 1.253.0.</p> </li> <li> <p>Update <code>uv@latest</code> to 0.11.27.</p> </li> <li> <p>Update <code>mise@latest</code> to 2026.7.2.</p> </li> <li> <p>Update <code>mdbook@latest</code> to 0.5.4.</p> </li> </ul> <h2>[2.82.10] - 2026-07-07</h2> <ul> <li> <p>Update <code>tombi@latest</code> to 1.2.0.</p> </li> <li> <p>Update <code>cargo-nextest@latest</code> to 0.9.140.</p> </li> </ul> <h2>[2.82.9] - 2026-07-05</h2> <ul> <li> <p>Update <code>vacuum@latest</code> to 0.29.9.</p> </li> <li> <p>Update <code>prek@latest</code> to 0.4.8.</p> </li> <li> <p>Update <code>cargo-tarpaulin@latest</code> to 0.37.0.</p> </li> <li> <p>Update <code>cargo-leptos@latest</code> to 0.3.7.</p> </li> </ul> <h2>[2.82.8] - 2026-07-03</h2> <ul> <li> <p>Update <code>vacuum@latest</code> to 0.29.8.</p> </li> <li> <p>Update <code>uv@latest</code> to 0.11.26.</p> </li> <li> <p>Update <code>typos@latest</code> to 1.48.0.</p> </li> <li> <p>Update <code>trivy@latest</code> to 0.72.0.</p> </li> <li> <p>Update <code>tombi@latest</code> to 1.1.7.</p> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/taiki-e/install-action/commit/5ebac0d9522d786674368e47e92963ba13f2c376"><code>5ebac0d</code></a> Release 2.82.11</li> <li><a href="https://github.com/taiki-e/install-action/commit/0ef1b06f246983bfc9b14d94cff7855d90529e46"><code>0ef1b06</code></a> Update <code>wasm-tools@latest</code> to 1.253.0</li> <li><a href="https://github.com/taiki-e/install-action/commit/78ce37c0ce7da0b633b3ee9a800d18e6d4fb11e7"><code>78ce37c</code></a> Update <code>mise@latest</code> to 2026.7.2</li> <li><a href="https://github.com/taiki-e/install-action/commit/080cc5c6de6a4709eb3c099c56ad225fa3db5492"><code>080cc5c</code></a> Update wasm-tools manifest</li> <li><a href="https://github.com/taiki-e/install-action/commit/c870c7a1dbaa5d99671937765392df21151c7808"><code>c870c7a</code></a> Update <code>uv@latest</code> to 0.11.27</li> <li><a href="https://github.com/taiki-e/install-action/commit/dcc765d42b0daa9842059edfb11fda14143027e2"><code>dcc765d</code></a> Update <code>mise@latest</code> to 2026.7.1</li> <li><a href="https://github.com/taiki-e/install-action/commit/98fa0bac11003b6f1143fd1634b47d42624003b2"><code>98fa0ba</code></a> Update <code>mdbook@latest</code> to 0.5.4</li> <li><a href="https://github.com/taiki-e/install-action/commit/544756b7938b454b9339922116f9f21301cc8169"><code>544756b</code></a> Update martin manifest</li> <li><a href="https://github.com/taiki-e/install-action/commit/116765984988a711571bdb8292667a67de89b08e"><code>1167659</code></a> Update kingfisher manifest</li> <li><a href="https://github.com/taiki-e/install-action/commit/ca5e0a7228a263c12320511f1b10890972a12bbc"><code>ca5e0a7</code></a> Update biome manifest</li> <li>See full diff in <a href="https://github.com/taiki-e/install-action/compare/50414676f9f5d50a65992c6dd2ed02641263226c...5ebac0d9522d786674368e47e92963ba13f2c376">compare view</a></li> </ul> </details> <br /> Updates `github/codeql-action/init` from 4.36.3 to 4.37.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/releases">github/codeql-action/init's releases</a>.</em></p> <blockquote> <h2>v4.37.0</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.0">2.26.0</a>. <a href="https://redirect.github.com/github/codeql-action/pull/3995">#3995</a></li> <li>In addition to the existing input format, the <code>config-file</code> input for the <code>codeql-action/init</code> step will soon support a new <code>[owner/]repo[@ref][:path]</code> format. All components except the repository name are optional. If omitted, <code>owner</code> defaults to the same owner as the repository the analysis is running for, <code>ref</code> to <code>main</code>, and <code>path</code> to <code>.github/codeql-action.yaml</code>. Support for this format ships in this version of the CodeQL Action, but will only be enabled over the coming weeks. <a href="https://redirect.github.com/github/codeql-action/pull/3973">#3973</a></li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action/init's changelog</a>.</em></p> <blockquote> <h1>CodeQL Action Changelog</h1> <p>See the <a href="https://github.com/github/codeql-action/releases">releases page</a> for the relevant changes to the CodeQL CLI and language packs.</p> <h2>[UNRELEASED]</h2> <p>No user facing changes.</p> <h2>4.37.0 - 08 Jul 2026</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.0">2.26.0</a>. <a href="https://redirect.github.com/github/codeql-action/pull/3995">#3995</a></li> <li>In addition to the existing input format, the <code>config-file</code> input for the <code>codeql-action/init</code> step will soon support a new <code>[owner/]repo[@ref][:path]</code> format. All components except the repository name are optional. If omitted, <code>owner</code> defaults to the same owner as the repository the analysis is running for, <code>ref</code> to <code>main</code>, and <code>path</code> to <code>.github/codeql-action.yaml</code>. Support for this format ships in this version of the CodeQL Action, but will only be enabled over the coming weeks. <a href="https://redirect.github.com/github/codeql-action/pull/3973">#3973</a></li> </ul> <h2>4.36.3 - 01 Jul 2026</h2> <p>No user facing changes.</p> <h2>4.36.2 - 04 Jun 2026</h2> <ul> <li>Cache CodeQL CLI version information across Actions steps. <a href="https://redirect.github.com/github/codeql-action/pull/3943">#3943</a></li> <li>Reduce requests while waiting for analysis processing by using exponential backoff when polling SARIF processing status. <a href="https://redirect.github.com/github/codeql-action/pull/3937">#3937</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.6">2.25.6</a>. <a href="https://redirect.github.com/github/codeql-action/pull/3948">#3948</a></li> </ul> <h2>4.36.1 - 02 Jun 2026</h2> <p>No user facing changes.</p> <h2>4.36.0 - 22 May 2026</h2> <ul> <li><em>Breaking change</em>: Bump the minimum required CodeQL bundle version to 2.19.4. <a href="https://redirect.github.com/github/codeql-action/pull/3894">#3894</a></li> <li>Add support for SHA-256 Git object IDs. <a href="https://redirect.github.com/github/codeql-action/pull/3893">#3893</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.5">2.25.5</a>. <a href="https://redirect.github.com/github/codeql-action/pull/3926">#3926</a></li> </ul> <h2>4.35.5 - 15 May 2026</h2> <ul> <li>We have improved how the JavaScript bundles for the CodeQL Action are generated to avoid duplication across bundles and reduce the size of the repository by around 70%. This should have no effect on the runtime behaviour of the CodeQL Action. <a href="https://redirect.github.com/github/codeql-action/pull/3899">#3899</a></li> <li>For performance and accuracy reasons, <a href="https://redirect.github.com/github/roadmap/issues/1158">improved incremental analysis</a> will now only be enabled on a pull request when diff-informed analysis is also enabled for that run. If diff-informed analysis is unavailable (for example, because the PR diff ranges could not be computed), the action will fall back to a full analysis. <a href="https://redirect.github.com/github/codeql-action/pull/3791">#3791</a></li> <li>If multiple inputs are provided for the GitHub-internal <code>analysis-kinds</code> input, only <code>code-scanning</code> will be enabled. The <code>analysis-kinds</code> input is experimental, for GitHub-internal use only, and may change without notice at any time. <a href="https://redirect.github.com/github/codeql-action/pull/3892">#3892</a></li> <li>Added an experimental change which, when running a Code Scanning analysis for a PR with <a href="https://redirect.github.com/github/roadmap/issues/1158">improved incremental analysis</a> enabled, prefers CodeQL CLI versions that have a cached overlay-base database for the configured languages. This speeds up analysis for a repository when there is not yet a cached overlay-base database for the latest CLI version. We expect to roll this change out to everyone in May. <a href="https://redirect.github.com/github/codeql-action/pull/3880">#3880</a></li> </ul> <h2>4.35.4 - 07 May 2026</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.4">2.25.4</a>. <a href="https://redirect.github.com/github/codeql-action/pull/3881">#3881</a></li> </ul> <h2>4.35.3 - 01 May 2026</h2> <ul> <li><em>Upcoming breaking change</em>: Add a deprecation warning for customers using CodeQL version 2.19.3 and earlier. These versions of CodeQL were discontinued on 9 April 2026 alongside GitHub Enterprise Server 3.15, and will be unsupported by the next minor release of the CodeQL Action. <a href="https://redirect.github.com/github/codeql-action/pull/3837">#3837</a></li> <li>Configurations for private registries that use Cloudsmith or GCP OIDC are now accepted. <a href="https://redirect.github.com/github/codeql-action/pull/3850">#3850</a></li> <li>Best-effort connection tests for private registries now use <code>GET</code> requests instead of <code>HEAD</code> for better compatibility with various registry implementations. For NuGet feeds, the test is now always performed against the service index. <a href="https://redirect.github.com/github/codeql-action/pull/3853">#3853</a></li> <li>Fixed a bug where two diagnostics produced within the same millisecond could overwrite each other on disk, causing one of them to be lost. <a href="https://redirect.github.com/github/codeql-action/pull/3852">#3852</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/github/codeql-action/commit/99df26d4f13ea111d4ec1a7dddef6063f76b97e9"><code>99df26d</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/3996">#3996</a> from github/update-v4.37.0-c7c896d71</li> <li><a href="https://github.com/github/codeql-action/commit/31c27074fda95256cda077009907f8a6022dd7c0"><code>31c2707</code></a> Add changenote for <a href="https://redirect.github.com/github/codeql-action/issues/3973">#3973</a></li> <li><a href="https://github.com/github/codeql-action/commit/72df2181aac054d1f4b44264399d2aac12cf11c6"><code>72df218</code></a> Update changelog for v4.37.0</li> <li><a href="https://github.com/github/codeql-action/commit/c7c896d71b3055d36f2aff93b16bcc6c69923b91"><code>c7c896d</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/3995">#3995</a> from github/update-bundle/codeql-bundle-v2.26.0</li> <li><a href="https://github.com/github/codeql-action/commit/3f34ff0ea3f5153c96071437b7cbf71ea3757146"><code>3f34ff0</code></a> Add changelog note</li> <li><a href="https://github.com/github/codeql-action/commit/43bec09f1dc368b430cab4b5d69799bc904079d1"><code>43bec09</code></a> Update default bundle to codeql-bundle-v2.26.0</li> <li><a href="https://github.com/github/codeql-action/commit/f58f0d11ebf5dedd870fab2f999275f7602cfa46"><code>f58f0d1</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/3973">#3973</a> from github/mbg/repo-props/config-file-shorthands</li> <li><a href="https://github.com/github/codeql-action/commit/7dc37cbb5b3e37f0e1cd1f18b61e0ea849898fb8"><code>7dc37cb</code></a> Merge remote-tracking branch 'origin/main' into mbg/repo-props/config-file-sh...</li> <li><a href="https://github.com/github/codeql-action/commit/8e22350a7e28c34c82a5a499fc241923301c2c4f"><code>8e22350</code></a> Thread <code>ActionState</code> to <code>initConfig</code></li> <li><a href="https://github.com/github/codeql-action/commit/69c9e8c7d918cf2fee13b8b72fdde15883ff155b"><code>69c9e8c</code></a> Mark some <code>status-report</code> imports as <code>type</code>-only to avoid circular dependencies</li> <li>Additional commits viewable in <a href="https://github.com/github/codeql-action/compare/54f647b7e1bb85c95cddabcd46b0c578ec92bc1a...99df26d4f13ea111d4ec1a7dddef6063f76b97e9">compare view</a></li> </ul> </details> <br /> Updates `github/codeql-action/analyze` from 4.36.3 to 4.37.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/releases">github/codeql-action/analyze's releases</a>.</em></p> <blockquote> <h2>v4.37.0</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.0">2.26.0</a>. <a href="https://redirect.github.com/github/codeql-action/pull/3995">#3995</a></li> <li>In addition to the existing input format, the <code>config-file</code> input for the <code>codeql-action/init</code> step will soon support a new <code>[owner/]repo[@ref][:path]</code> format. All components except the repository name are optional. If omitted, <code>owner</code> defaults to the same owner as the repository the analysis is running for, <code>ref</code> to <code>main</code>, and <code>path</code> to <code>.github/codeql-action.yaml</code>. Support for this format ships in this version of the CodeQL Action, but will only be enabled over the coming weeks. <a href="https://redirect.github.com/github/codeql-action/pull/3973">#3973</a></li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action/analyze's changelog</a>.</em></p> <blockquote> <h1>CodeQL Action Changelog</h1> <p>See the <a href="https://github.com/github/codeql-action/releases">releases page</a> for the relevant changes to the CodeQL CLI and language packs.</p> <h2>[UNRELEASED]</h2> <p>No user facing changes.</p> <h2>4.37.0 - 08 Jul 2026</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.0">2.26.0</a>. <a href="https://redirect.github.com/github/codeql-action/pull/3995">#3995</a></li> <li>In addition to the existing input format, the <code>config-file</code> input for the <code>codeql-action/init</code> step will soon support a new <code>[owner/]repo[@ref][:path]</code> format. All components except the repository name are optional. If omitted, <code>owner</code> defaults to the same owner as the repository the analysis is running for, <code>ref</code> to <code>main</code>, and <code>path</code> to <code>.github/codeql-action.yaml</code>. Support for this format ships in this version of the CodeQL Action, but will only be enabled over the coming weeks. <a href="https://redirect.github.com/github/codeql-action/pull/3973">#3973</a></li> </ul> <h2>4.36.3 - 01 Jul 2026</h2> <p>No user facing changes.</p> <h2>4.36.2 - 04 Jun 2026</h2> <ul> <li>Cache CodeQL CLI version information across Actions steps. <a href="https://redirect.github.com/github/codeql-action/pull/3943">#3943</a></li> <li>Reduce requests while waiting for analysis processing by using exponential backoff when polling SARIF processing status. <a href="https://redirect.github.com/github/codeql-action/pull/3937">#3937</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.6">2.25.6</a>. <a href="https://redirect.github.com/github/codeql-action/pull/3948">#3948</a></li> </ul> <h2>4.36.1 - 02 Jun 2026</h2> <p>No user facing changes.</p> <h2>4.36.0 - 22 May 2026</h2> <ul> <li><em>Breaking change</em>: Bump the minimum required CodeQL bundle version to 2.19.4. <a href="https://redirect.github.com/github/codeql-action/pull/3894">#3894</a></li> <li>Add support for SHA-256 Git object IDs. <a href="https://redirect.github.com/github/codeql-action/pull/3893">#3893</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.5">2.25.5</a>. <a href="https://redirect.github.com/github/codeql-action/pull/3926">#3926</a></li> </ul> <h2>4.35.5 - 15 May 2026</h2> <ul> <li>We have improved how the JavaScript bundles for the CodeQL Action are generated to avoid duplication across bundles and reduce the size of the repository by around 70%. This should have no effect on the runtime behaviour of the CodeQL Action. <a href="https://redirect.github.com/github/codeql-action/pull/3899">#3899</a></li> <li>For performance and accuracy reasons, <a href="https://redirect.github.com/github/roadmap/issues/1158">improved incremental analysis</a> will now only be enabled on a pull request when diff-informed analysis is also enabled for that run. If diff-informed analysis is unavailable (for example, because the PR diff ranges could not be computed), the action will fall back to a full analysis. <a href="https://redirect.github.com/github/codeql-action/pull/3791">#3791</a></li> <li>If multiple inputs are provided for the GitHub-internal <code>analysis-kinds</code> input, only <code>code-scanning</code> will be enabled. The <code>analysis-kinds</code> input is experimental, for GitHub-internal use only, and may change without notice at any time. <a href="https://redirect.github.com/github/codeql-action/pull/3892">#3892</a></li> <li>Added an experimental change which, when running a Code Scanning analysis for a PR with <a href="https://redirect.github.com/github/roadmap/issues/1158">improved incremental analysis</a> enabled, prefers CodeQL CLI versions that have a cached overlay-base database for the configured languages. This speeds up analysis for a repository when there is not yet a cached overlay-base database for the latest CLI version. We expect to roll this change out to everyone in May. <a href="https://redirect.github.com/github/codeql-action/pull/3880">#3880</a></li> </ul> <h2>4.35.4 - 07 May 2026</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.4">2.25.4</a>. <a href="https://redirect.github.com/github/codeql-action/pull/3881">#3881</a></li> </ul> <h2>4.35.3 - 01 May 2026</h2> <ul> <li><em>Upcoming breaking change</em>: Add a deprecation warning for customers using CodeQL version 2.19.3 and earlier. These versions of CodeQL were discontinued on 9 April 2026 alongside GitHub Enterprise Server 3.15, and will be unsupported by the next minor release of the CodeQL Action. <a href="https://redirect.github.com/github/codeql-action/pull/3837">#3837</a></li> <li>Configurations for private registries that use Cloudsmith or GCP OIDC are now accepted. <a href="https://redirect.github.com/github/codeql-action/pull/3850">#3850</a></li> <li>Best-effort connection tests for private registries now use <code>GET</code> requests instead of <code>HEAD</code> for better compatibility with various registry implementations. For NuGet feeds, the test is now always performed against the service index. <a href="https://redirect.github.com/github/codeql-action/pull/3853">#3853</a></li> <li>Fixed a bug where two diagnostics produced within the same millisecond could overwrite each other on disk, causing one of them to be lost. <a href="https://redirect.github.com/github/codeql-action/pull/3852">#3852</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/github/codeql-action/commit/99df26d4f13ea111d4ec1a7dddef6063f76b97e9"><code>99df26d</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/3996">#3996</a> from github/update-v4.37.0-c7c896d71</li> <li><a href="https://github.com/github/codeql-action/commit/31c27074fda95256cda077009907f8a6022dd7c0"><code>31c2707</code></a> Add changenote for <a href="https://redirect.github.com/github/codeql-action/issues/3973">#3973</a></li> <li><a href="https://github.com/github/codeql-action/commit/72df2181aac054d1f4b44264399d2aac12cf11c6"><code>72df218</code></a> Update changelog for v4.37.0</li> <li><a href="https://github.com/github/codeql-action/commit/c7c896d71b3055d36f2aff93b16bcc6c69923b91"><code>c7c896d</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/3995">#3995</a> from github/update-bundle/codeql-bundle-v2.26.0</li> <li><a href="https://github.com/github/codeql-action/commit/3f34ff0ea3f5153c96071437b7cbf71ea3757146"><code>3f34ff0</code></a> Add changelog note</li> <li><a href="https://github.com/github/codeql-action/commit/43bec09f1dc368b430cab4b5d69799bc904079d1"><code>43bec09</code></a> Update default bundle to codeql-bundle-v2.26.0</li> <li><a href="https://github.com/github/codeql-action/commit/f58f0d11ebf5dedd870fab2f999275f7602cfa46"><code>f58f0d1</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/3973">#3973</a> from github/mbg/repo-props/config-file-shorthands</li> <li><a href="https://github.com/github/codeql-action/commit/7dc37cbb5b3e37f0e1cd1f18b61e0ea849898fb8"><code>7dc37cb</code></a> Merge remote-tracking branch 'origin/main' into mbg/repo-props/config-file-sh...</li> <li><a href="https://github.com/github/codeql-action/commit/8e22350a7e28c34c82a5a499fc241923301c2c4f"><code>8e22350</code></a> Thread <code>ActionState</code> to <code>initConfig</code></li> <li><a href="https://github.com/github/codeql-action/commit/69c9e8c7d918cf2fee13b8b72fdde15883ff155b"><code>69c9e8c</code></a> Mark some <code>status-report</code> imports as <code>type</code>-only to avoid circular dependencies</li> <li>Additional commits viewable in <a href="https://github.com/github/codeql-action/compare/54f647b7e1bb85c95cddabcd46b0c578ec92bc1a...99df26d4f13ea111d4ec1a7dddef6063f76b97e9">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Updated [MessagePack](https://github.com/MessagePack-CSharp/MessagePack-CSharp) from 3.1.7 to 3.1.8. <details> <summary>Release notes</summary> _Sourced from [MessagePack's releases](https://github.com/MessagePack-CSharp/MessagePack-CSharp/releases)._ No release notes found for this version range. Commits viewable in [compare view](https://github.com/MessagePack-CSharp/MessagePack-CSharp/commits). </details> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…scode in the vscode-extension group (#145) Bumps the vscode-extension group in /editors/vscode with 1 update: [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node). Updates `@types/node` from 26.1.0 to 26.1.1 <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps the rust-host group with 2 updates: [lsp-server](https://github.com/rust-lang/rust-analyzer) and [tree-sitter](https://github.com/tree-sitter/tree-sitter). Updates `lsp-server` from 0.8.0 to 0.9.0 <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/rust-lang/rust-analyzer/commits">compare view</a></li> </ul> </details> <br /> Updates `tree-sitter` from 0.26.10 to 0.26.11 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/tree-sitter/tree-sitter/releases">tree-sitter's releases</a>.</em></p> <blockquote> <h2>v0.26.11</h2> <h2>What's Changed</h2> <ul> <li>fix(deps): zig manifest for wasmtime is missing windows hashes by <a href="https://github.com/tree-sitter-ci-bot"><code>@tree-sitter-ci-bot</code></a>[bot] in <a href="https://redirect.github.com/tree-sitter/tree-sitter/pull/5720">tree-sitter/tree-sitter#5720</a></li> <li>fix(xtask): eliminate silent errors in zig fetch by <a href="https://github.com/WillLillis"><code>@WillLillis</code></a> in <a href="https://redirect.github.com/tree-sitter/tree-sitter/pull/5724">tree-sitter/tree-sitter#5724</a></li> <li>fix(query): short-circuit longest-match dedup for disjoint states by <a href="https://github.com/tree-sitter-ci-bot"><code>@tree-sitter-ci-bot</code></a>[bot] in <a href="https://redirect.github.com/tree-sitter/tree-sitter/pull/5726">tree-sitter/tree-sitter#5726</a></li> <li>fix(query): various anchor fixes by <a href="https://github.com/tree-sitter-ci-bot"><code>@tree-sitter-ci-bot</code></a>[bot] in <a href="https://redirect.github.com/tree-sitter/tree-sitter/pull/5727">tree-sitter/tree-sitter#5727</a></li> <li>Fix C++ compilation errors in array macros. by <a href="https://github.com/tree-sitter-ci-bot"><code>@tree-sitter-ci-bot</code></a>[bot] in <a href="https://redirect.github.com/tree-sitter/tree-sitter/pull/5735">tree-sitter/tree-sitter#5735</a></li> <li>fix(rust): address new clippy lints by <a href="https://github.com/WillLillis"><code>@WillLillis</code></a> in <a href="https://redirect.github.com/tree-sitter/tree-sitter/pull/5743">tree-sitter/tree-sitter#5743</a></li> <li>fix(generate): strip non-ASCII case folds by <a href="https://github.com/tree-sitter-ci-bot"><code>@tree-sitter-ci-bot</code></a>[bot] in <a href="https://redirect.github.com/tree-sitter/tree-sitter/pull/5744">tree-sitter/tree-sitter#5744</a></li> <li>fix(ci): re-set executable permission on release artifacts before zipping by <a href="https://github.com/clason"><code>@clason</code></a> in <a href="https://redirect.github.com/tree-sitter/tree-sitter/pull/5746">tree-sitter/tree-sitter#5746</a></li> <li>release v0.26.11 by <a href="https://github.com/clason"><code>@clason</code></a> in <a href="https://redirect.github.com/tree-sitter/tree-sitter/pull/5748">tree-sitter/tree-sitter#5748</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/tree-sitter/tree-sitter/compare/v0.26.10...v0.26.11">https://github.com/tree-sitter/tree-sitter/compare/v0.26.10...v0.26.11</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/tree-sitter/tree-sitter/commit/64402de2857cc197ecc4ca3bc144ea91fda7e72e"><code>64402de</code></a> release v0.26.11</li> <li><a href="https://github.com/tree-sitter/tree-sitter/commit/2194ac1a9c9fb8960b8471daade1da07aaeb2b0b"><code>2194ac1</code></a> fix(ci): re-set executable permission on release artifacts before zipping</li> <li><a href="https://github.com/tree-sitter/tree-sitter/commit/a2b8369c4a18373c08a8b7e742fac8b14674eefc"><code>a2b8369</code></a> fix(generate): strip non-ASCII case folds</li> <li><a href="https://github.com/tree-sitter/tree-sitter/commit/1ae3cc575388c8429a8991b8c9580946243598a7"><code>1ae3cc5</code></a> fix(rust): address new clippy lints</li> <li><a href="https://github.com/tree-sitter/tree-sitter/commit/90dd1a0cfbf6262483a9e5953a35659585129120"><code>90dd1a0</code></a> fix(templates): generated array macros do not compile with C++</li> <li><a href="https://github.com/tree-sitter/tree-sitter/commit/fa6222a0d37ecf2bfb4fccd31e857133f3e81930"><code>fa6222a</code></a> docs(queries): clarify behavior of first child anchor example</li> <li><a href="https://github.com/tree-sitter/tree-sitter/commit/77b741bb8309d6755797f942bf0ff1a9a74475a4"><code>77b741b</code></a> docs(queries): specify anchor behavior with quantifiers and groups</li> <li><a href="https://github.com/tree-sitter/tree-sitter/commit/1c21ff33d688c328a687e37a7f4215136b6e6dc6"><code>1c21ff3</code></a> fix(query): apply a trailing anchor when its optional node is skipped</li> <li><a href="https://github.com/tree-sitter/tree-sitter/commit/5756ced350638708becc00d7ccb2e8d171b4feae"><code>5756ced</code></a> fix(query): make an anchor after a zero-matched quantifier vacuous</li> <li><a href="https://github.com/tree-sitter/tree-sitter/commit/eca86a7a6c77c0a7124a59be712661256e361cbd"><code>eca86a7</code></a> fix(query): forbid an anchor at the end of a group</li> <li>Additional commits viewable in <a href="https://github.com/tree-sitter/tree-sitter/compare/v0.26.10...v0.26.11">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps the github-actions group with 2 updates: [actions/setup-node](https://github.com/actions/setup-node) and [taiki-e/install-action](https://github.com/taiki-e/install-action). Updates `actions/setup-node` from 6.4.0 to 7.0.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/setup-node/releases">actions/setup-node's releases</a>.</em></p> <blockquote> <h2>v7.0.0</h2> <h2>What's Changed</h2> <h3>Enhancements:</h3> <ul> <li>Add cache-primary-key and cache-matched-key as outputs by <a href="https://github.com/gowridurgad"><code>@gowridurgad</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1577">actions/setup-node#1577</a></li> <li>Migrate to ESM and upgrade dependencies by <a href="https://github.com/gowridurgad"><code>@gowridurgad</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1574">actions/setup-node#1574</a></li> </ul> <h3>Bug fixes:</h3> <ul> <li>Remove dummy NODE_AUTH_TOKEN export by <a href="https://github.com/gowridurgad"><code>@gowridurgad</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1558">actions/setup-node#1558</a></li> <li>Only use <code>mirrorToken</code> in <code>getManifest</code> if it's provided by <a href="https://github.com/deiga"><code>@deiga</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1548">actions/setup-node#1548</a></li> </ul> <h3>Documentation updates:</h3> <ul> <li>Add documentation for publishing to npm with Trusted Publisher (OIDC) by <a href="https://github.com/chiranjib-swain"><code>@chiranjib-swain</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1536">actions/setup-node#1536</a></li> <li>docs: Update restore-only cache documentation by <a href="https://github.com/priya-kinthali"><code>@priya-kinthali</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1550">actions/setup-node#1550</a></li> <li>docs: Update caching recommendations to mitigate cache poisoning risks by <a href="https://github.com/chiranjib-swain"><code>@chiranjib-swain</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1567">actions/setup-node#1567</a></li> </ul> <h3>Dependency update:</h3> <ul> <li>Upgrade <code>@actions/cache</code> to 5.1.0, log cache write denied by <a href="https://github.com/jasongin"><code>@jasongin</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1569">actions/setup-node#1569</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/chiranjib-swain"><code>@chiranjib-swain</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-node/pull/1536">actions/setup-node#1536</a></li> <li><a href="https://github.com/deiga"><code>@deiga</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-node/pull/1548">actions/setup-node#1548</a></li> <li><a href="https://github.com/jasongin"><code>@jasongin</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-node/pull/1569">actions/setup-node#1569</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/setup-node/compare/v6...v7.0.0">https://github.com/actions/setup-node/compare/v6...v7.0.0</a></p> <h2>v6.5.0</h2> <h2>What's Changed</h2> <ul> <li>Update <code>@actions/cache</code> to 5.1.0 and add security overrides for undici and fast-xml-parser by <a href="https://github.com/HarithaVattikuti"><code>@HarithaVattikuti</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1579">actions/setup-node#1579</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/setup-node/compare/v6.4.0...v6.5.0">https://github.com/actions/setup-node/compare/v6.4.0...v6.5.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/setup-node/commit/820762786026740c76f36085b0efc47a31fe5020"><code>8207627</code></a> Migrate to ESM and upgrade dependencies (<a href="https://redirect.github.com/actions/setup-node/issues/1574">#1574</a>)</li> <li><a href="https://github.com/actions/setup-node/commit/04be95cf3511ea51ebf9f224ddfb99cc7ab87cd4"><code>04be95c</code></a> Add cache-primary-key and cache-matched-key as outputs (<a href="https://redirect.github.com/actions/setup-node/issues/1577">#1577</a>)</li> <li><a href="https://github.com/actions/setup-node/commit/7c2c68d20d402ed6a201ada70a81341941093140"><code>7c2c68d</code></a> docs: Update caching recommendations to mitigate cache poisoning risks (<a href="https://redirect.github.com/actions/setup-node/issues/1567">#1567</a>)</li> <li><a href="https://github.com/actions/setup-node/commit/6a61c0375d66246de94630495909f12cf8dac84d"><code>6a61c03</code></a> Merge pull request <a href="https://redirect.github.com/actions/setup-node/issues/1569">#1569</a> from jasongin/update-actions-cache-5.1.0</li> <li><a href="https://github.com/actions/setup-node/commit/30eb73b41ded577900c1ebf968ef95cdf8f7434f"><code>30eb73b</code></a> Resolve high-severity audit issues</li> <li><a href="https://github.com/actions/setup-node/commit/4e1a87a501d0302f99e30e2748568adcb388d09f"><code>4e1a87a</code></a> Update dist</li> <li><a href="https://github.com/actions/setup-node/commit/360237f0c01778d0c17291f75c56d6feae4f7574"><code>360237f</code></a> Strict equality</li> <li><a href="https://github.com/actions/setup-node/commit/4f8aac5beb2f0854bc79651567a18c67eb0b9de3"><code>4f8aac5</code></a> Bump <code>@actions/cache</code> to 5.1.0, log cache write denied</li> <li><a href="https://github.com/actions/setup-node/commit/f4a67bbeca970f103397d3d2b9462cf787cd2980"><code>f4a67bb</code></a> Only use <code>mirrorToken</code> in <code>getManifest</code> if it's provided (<a href="https://redirect.github.com/actions/setup-node/issues/1548">#1548</a>)</li> <li><a href="https://github.com/actions/setup-node/commit/0355742c943ddb13ca8a6b700f824231caa91e75"><code>0355742</code></a> Remove dummy NODE_AUTH_TOKEN export (<a href="https://redirect.github.com/actions/setup-node/issues/1558">#1558</a>)</li> <li>Additional commits viewable in <a href="https://github.com/actions/setup-node/compare/48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e...820762786026740c76f36085b0efc47a31fe5020">compare view</a></li> </ul> </details> <br /> Updates `taiki-e/install-action` from 2.82.11 to 2.83.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/taiki-e/install-action/releases">taiki-e/install-action's releases</a>.</em></p> <blockquote> <h2>2.83.2</h2> <ul> <li> <p>Update <code>parse-dockerfile@latest</code> to 0.1.8.</p> </li> <li> <p>Update <code>mise@latest</code> to 2026.7.5.</p> </li> <li> <p>Update <code>just@latest</code> to 1.56.0.</p> </li> <li> <p>Update <code>gungraun-runner@latest</code> to 0.19.4.</p> </li> <li> <p>Update <code>cargo-neat@latest</code> to 0.4.1.</p> </li> </ul> <h2>2.83.1</h2> <ul> <li> <p>Update <code>rclone@latest</code> to 1.74.4.</p> </li> <li> <p>Update <code>mise@latest</code> to 2026.7.4.</p> </li> <li> <p>Update <code>cargo-deny@latest</code> to 0.20.2.</p> </li> </ul> <h2>2.83.0</h2> <ul> <li> <p>Support <code>cargo-about</code>. (<a href="https://redirect.github.com/taiki-e/install-action/pull/1924">#1924</a>, thanks <a href="https://github.com/ruffsl"><code>@ruffsl</code></a>)</p> </li> <li> <p>Update <code>uv@latest</code> to 0.11.28.</p> </li> <li> <p>Update <code>martin@latest</code> to 1.12.0.</p> </li> <li> <p>Update <code>kingfisher@latest</code> to 1.106.0.</p> </li> <li> <p>Update <code>biome@latest</code> to 2.5.3.</p> </li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md">taiki-e/install-action's changelog</a>.</em></p> <blockquote> <h1>Changelog</h1> <p>All notable changes to this project will be documented in this file.</p> <p>This project adheres to <a href="https://semver.org">Semantic Versioning</a>.</p> <!-- raw HTML omitted --> <h2>[Unreleased]</h2> <h2>[2.83.2] - 2026-07-12</h2> <ul> <li> <p>Update <code>parse-dockerfile@latest</code> to 0.1.8.</p> </li> <li> <p>Update <code>mise@latest</code> to 2026.7.5.</p> </li> <li> <p>Update <code>just@latest</code> to 1.56.0.</p> </li> <li> <p>Update <code>gungraun-runner@latest</code> to 0.19.4.</p> </li> <li> <p>Update <code>cargo-neat@latest</code> to 0.4.1.</p> </li> </ul> <h2>[2.83.1] - 2026-07-10</h2> <ul> <li> <p>Update <code>rclone@latest</code> to 1.74.4.</p> </li> <li> <p>Update <code>mise@latest</code> to 2026.7.4.</p> </li> <li> <p>Update <code>cargo-deny@latest</code> to 0.20.2.</p> </li> </ul> <h2>[2.83.0] - 2026-07-09</h2> <ul> <li> <p>Support <code>cargo-about</code>. (<a href="https://redirect.github.com/taiki-e/install-action/pull/1924">#1924</a>, thanks <a href="https://github.com/ruffsl"><code>@ruffsl</code></a>)</p> </li> <li> <p>Update <code>uv@latest</code> to 0.11.28.</p> </li> <li> <p>Update <code>martin@latest</code> to 1.12.0.</p> </li> <li> <p>Update <code>kingfisher@latest</code> to 1.106.0.</p> </li> <li> <p>Update <code>biome@latest</code> to 2.5.3.</p> </li> </ul> <h2>[2.82.11] - 2026-07-08</h2> <ul> <li> <p>Update <code>wasm-tools@latest</code> to 1.253.0.</p> </li> <li> <p>Update <code>uv@latest</code> to 0.11.27.</p> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/taiki-e/install-action/commit/43aecc8d72668fbcfe75c31400bc4f890f1c5853"><code>43aecc8</code></a> Release 2.83.2</li> <li><a href="https://github.com/taiki-e/install-action/commit/fca47892c74f4dffa1e86ad93eca31cf898c2541"><code>fca4789</code></a> Update prek manifest</li> <li><a href="https://github.com/taiki-e/install-action/commit/b41cc1f9ab348b9db341d8597853df93b08652f0"><code>b41cc1f</code></a> Update <code>parse-dockerfile@latest</code> to 0.1.8</li> <li><a href="https://github.com/taiki-e/install-action/commit/8d866f8ca86db77044d7d29639e24660d0b37b88"><code>8d866f8</code></a> Update <code>mise@latest</code> to 2026.7.5</li> <li><a href="https://github.com/taiki-e/install-action/commit/7ebe462223a33af951eed3c3ab1f754ddf2992e2"><code>7ebe462</code></a> Update <code>just@latest</code> to 1.56.0</li> <li><a href="https://github.com/taiki-e/install-action/commit/01ab5633b01b19988c158b5366d64947fd6cacce"><code>01ab563</code></a> Update <code>gungraun-runner@latest</code> to 0.19.4</li> <li><a href="https://github.com/taiki-e/install-action/commit/f164a682e7e0033cf72f1d5722d079fe82275c1e"><code>f164a68</code></a> Update <code>cargo-neat@latest</code> to 0.4.1</li> <li><a href="https://github.com/taiki-e/install-action/commit/2ca9b94c269419b7b0c711c09d0b21c4e1d51145"><code>2ca9b94</code></a> Release 2.83.1</li> <li><a href="https://github.com/taiki-e/install-action/commit/8598f86981150fb7f6511798af658bbf80a8ea46"><code>8598f86</code></a> Update parse-dockerfile manifest</li> <li><a href="https://github.com/taiki-e/install-action/commit/76cfe4de2d710e12bae93580164f20dff9fd96e9"><code>76cfe4d</code></a> Update <code>rclone@latest</code> to 1.74.4</li> <li>Additional commits viewable in <a href="https://github.com/taiki-e/install-action/compare/5ebac0d9522d786674368e47e92963ba13f2c376...43aecc8d72668fbcfe75c31400bc4f890f1c5853">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…6 updates (#148) Bumps the vscode-extension group in /editors/vscode with 6 updates: | Package | From | To | | --- | --- | --- | | [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) | `5.9.3` | `5.10.0` | | [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.63.0` | `8.64.0` | | [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.63.0` | `8.64.0` | | [eslint](https://github.com/eslint/eslint) | `10.6.0` | `10.7.0` | | [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.63.0` | `8.64.0` | Updates `fast-xml-parser` from 5.9.3 to 5.10.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/NaturalIntelligence/fast-xml-parser/releases">fast-xml-parser's releases</a>.</em></p> <blockquote> <h2>v5.10.0</h2> <h2>What's Changed</h2> <ul> <li>Bump actions/checkout from 6.0.3 to 7.0.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/NaturalIntelligence/fast-xml-parser/pull/849">NaturalIntelligence/fast-xml-parser#849</a></li> <li>Bump zizmorcore/zizmor-action from 0.5.6 to 0.5.7 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/NaturalIntelligence/fast-xml-parser/pull/848">NaturalIntelligence/fast-xml-parser#848</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.9.3...v5.10.0">https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.9.3...v5.10.0</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md">fast-xml-parser's changelog</a>.</em></p> <blockquote> <p><!-- raw HTML omitted -->Note: If you find missing information about particular minor version, that version must have been changed without any functional change in this library.<!-- raw HTML omitted --></p> <p>Note: Due to some last quick changes on v4, detail of v4.5.3 & v4.5.4 are not updated here. v4.5.4x is the last tag of v4 in github repository. I'm extremely sorry for the confusion</p> <p><strong>5.10.0 / 2026-07-11</strong></p> <ul> <li>upgrade: <ul> <li>xml-naming v0.3.0: cache support</li> <li>PEM v1.6.2: sibling bug fix</li> <li>is-unsafe v2.0.0: tree shaking</li> </ul> </li> </ul> <p>*<em>5.9.3 / 2026-06-19</em></p> <ul> <li>update strnum</li> </ul> <p>*<em>5.9.2 / 2026-06-17</em></p> <ul> <li>dummy release to test changes in github action</li> </ul> <p>*<em>5.9.1 / 2026-06-17</em></p> <ul> <li>dummy release to test release from github action</li> </ul> <p>*<em>5.9.0 / 2026-06-15</em></p> <ul> <li>update strnum to 2.3.0 <ul> <li>you can set hex, binary, enotation, infinity, unicode</li> </ul> </li> <li>validate unsafe HTML or XML data in doctype entities unsing 'is-unsafe' library. User can override rules by overriding EntityDecoder.</li> </ul> <p>*<em>5.8.0 / 2026-05-12</em></p> <ul> <li>integrate xml-naming to validate DOCTYPE entity name and notation name (using qname becaue of backward compatibility) <ul> <li>This will consider xml-version as well. '1.0' is default</li> </ul> </li> <li>update strnum to 2.3.0 <ul> <li>You can set octal and binary parsing which is bydeault off</li> </ul> </li> <li>update fast-xml-builder to 1.2.0 <ul> <li>can sanitize tag names if found invalid</li> <li>fix format output</li> </ul> </li> </ul> <p><strong>5.7.3 / 2006-05-05</strong></p> <ul> <li>fix: alwaysCreateTextNode should create text node when attributes are present for self closing node</li> <li>fix stop node expression when ns prefix is removed (found by <a href="https://github.com/iruizsalinas">iruizsalinas</a>)</li> <li>update XML Builder to 1.1.7</li> <li>mark addEntity deprecated</li> </ul> <p><strong>5.7.2 / 2026-04-25</strong></p> <ul> <li>allow numerical external entity for backward compatibility</li> <li>fix <a href="https://redirect.github.com/NaturalIntelligence/fast-xml-parser/issues/705">#705</a>: attributesGroupName working with preserveOrder</li> <li>fix <a href="https://redirect.github.com/NaturalIntelligence/fast-xml-parser/issues/817">#817</a>: stackoverflow when tag expression is very long</li> </ul> <p><strong>5.7.1 / 2026-04-20</strong></p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/NaturalIntelligence/fast-xml-parser/commit/296b3322916c40a70c77b88183cc8fc810fd544f"><code>296b332</code></a> 5.10.0</li> <li><a href="https://github.com/NaturalIntelligence/fast-xml-parser/commit/75f756558cf382e2dc6d61cca0e93854d546c42c"><code>75f7565</code></a> update package guide</li> <li><a href="https://github.com/NaturalIntelligence/fast-xml-parser/commit/2d8d1d0ab2c6607e3a2e107f8ed47f697f3cb3d3"><code>2d8d1d0</code></a> update details</li> <li><a href="https://github.com/NaturalIntelligence/fast-xml-parser/commit/e58e4dd7155694dfcd6d2a8d905eee95f9866ee9"><code>e58e4dd</code></a> upgrade: xml-naming v0.3.0, PEM v1.6.2, is-unsafe v2.0.0</li> <li><a href="https://github.com/NaturalIntelligence/fast-xml-parser/commit/545e491baf205116341103487db05a77beeccbac"><code>545e491</code></a> Bump zizmorcore/zizmor-action from 0.5.6 to 0.5.7 (<a href="https://redirect.github.com/NaturalIntelligence/fast-xml-parser/issues/848">#848</a>)</li> <li><a href="https://github.com/NaturalIntelligence/fast-xml-parser/commit/5ea8aa15783a81e4c3c36ce54d6d34b066d0409b"><code>5ea8aa1</code></a> Bump actions/checkout from 6.0.3 to 7.0.0 (<a href="https://redirect.github.com/NaturalIntelligence/fast-xml-parser/issues/849">#849</a>)</li> <li>See full diff in <a href="https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.9.3...v5.10.0">compare view</a></li> </ul> </details> <br /> Updates `@typescript-eslint/eslint-plugin` from 8.63.0 to 8.64.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/releases">@typescript-eslint/eslint-plugin's releases</a>.</em></p> <blockquote> <h2>v8.64.0</h2> <h2>8.64.0 (2026-07-13)</h2> <h3>🚀 Features</h3> <ul> <li>support parsing <code>import defer</code> (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12513">#12513</a>)</li> <li><strong>eslint-plugin:</strong> [no-loop-func] support <code>using</code> / <code>await using</code> declarations and deprecate the rule (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12500">#12500</a>)</li> <li><strong>typescript-estree:</strong> throw for invalid definite assignment in class properties (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12543">#12543</a>)</li> </ul> <h3>🩹 Fixes</h3> <ul> <li><strong>eslint-plugin:</strong> [require-array-sort-compare] handle constrained arrays (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12512">#12512</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>Evyatar Daud <a href="https://github.com/StyleShit"><code>@StyleShit</code></a></li> <li>송재욱</li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.64.0">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md">@typescript-eslint/eslint-plugin's changelog</a>.</em></p> <blockquote> <h2>8.64.0 (2026-07-13)</h2> <h3>🚀 Features</h3> <ul> <li><strong>eslint-plugin:</strong> [no-loop-func] support <code>using</code> / <code>await using</code> declarations and deprecate the rule (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12500">#12500</a>)</li> <li><strong>typescript-estree:</strong> throw for invalid definite assignment in class properties (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12543">#12543</a>)</li> </ul> <h3>🩹 Fixes</h3> <ul> <li><strong>eslint-plugin:</strong> [require-array-sort-compare] handle constrained arrays (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12512">#12512</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>Evyatar Daud <a href="https://github.com/StyleShit"><code>@StyleShit</code></a></li> <li>송재욱</li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.64.0">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/414d9abbf66f77796ab12ec7e75b07722e592832"><code>414d9ab</code></a> chore(release): publish 8.64.0</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/bcfe16fd2c4cbb12227168475172b46cd5788543"><code>bcfe16f</code></a> feat(eslint-plugin): [no-loop-func] support <code>using</code> / <code>await using</code> declarati...</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/5b5bfdeb8fd6b351c4366fb09d46ae35ec6eeea7"><code>5b5bfde</code></a> fix(eslint-plugin): [require-array-sort-compare] handle constrained arrays (#...</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/321856cdadeb369ce89c90327822399b1447e5f9"><code>321856c</code></a> chore: cleanup cspell config (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin/issues/12526">#12526</a>)</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/b418cf577f66e65ea1ddd02619fda3a5de9cb9e6"><code>b418cf5</code></a> feat(typescript-estree): throw for invalid definite assignment in class prope...</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/737de2b569c29327d2e19a81ebd95236bd854335"><code>737de2b</code></a> docs: align unified-signatures correct example parameter (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin/issues/12506">#12506</a>)</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/a63c17ab747b1f539c51ca066c0409a901677004"><code>a63c17a</code></a> docs: fix shadowed parameter name in unified-signatures example (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin/issues/12502">#12502</a>)</li> <li>See full diff in <a href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.64.0/packages/eslint-plugin">compare view</a></li> </ul> </details> <br /> Updates `@typescript-eslint/parser` from 8.63.0 to 8.64.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/releases">@typescript-eslint/parser's releases</a>.</em></p> <blockquote> <h2>v8.64.0</h2> <h2>8.64.0 (2026-07-13)</h2> <h3>🚀 Features</h3> <ul> <li>support parsing <code>import defer</code> (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12513">#12513</a>)</li> <li><strong>eslint-plugin:</strong> [no-loop-func] support <code>using</code> / <code>await using</code> declarations and deprecate the rule (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12500">#12500</a>)</li> <li><strong>typescript-estree:</strong> throw for invalid definite assignment in class properties (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12543">#12543</a>)</li> </ul> <h3>🩹 Fixes</h3> <ul> <li><strong>eslint-plugin:</strong> [require-array-sort-compare] handle constrained arrays (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12512">#12512</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>Evyatar Daud <a href="https://github.com/StyleShit"><code>@StyleShit</code></a></li> <li>송재욱</li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.64.0">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md">@typescript-eslint/parser's changelog</a>.</em></p> <blockquote> <h2>8.64.0 (2026-07-13)</h2> <p>This was a version bump only for parser to align it with other projects, there were no code changes.</p> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.64.0">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/414d9abbf66f77796ab12ec7e75b07722e592832"><code>414d9ab</code></a> chore(release): publish 8.64.0</li> <li>See full diff in <a href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.64.0/packages/parser">compare view</a></li> </ul> </details> <br /> Updates `eslint` from 10.6.0 to 10.7.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/eslint/eslint/releases">eslint's releases</a>.</em></p> <blockquote> <h2>v10.7.0</h2> <h2>Features</h2> <ul> <li><a href="https://github.com/eslint/eslint/commit/cf2a9bf2d982642f760370c15f1196f4658f4e27"><code>cf2a9bf</code></a> feat: add errorClassNames option to preserve-caught-error rule (<a href="https://redirect.github.com/eslint/eslint/issues/21032">#21032</a>) (sethamus)</li> <li><a href="https://github.com/eslint/eslint/commit/f8b873aae53610b80b5c1005606716e05ed3b91f"><code>f8b873a</code></a> feat: max-nested-callbacks option for constructor callbacks (<a href="https://redirect.github.com/eslint/eslint/issues/21063">#21063</a>) (fnx)</li> <li><a href="https://github.com/eslint/eslint/commit/557fde8bc633d26ea4fe287d4483f287e8e6080f"><code>557fde8</code></a> feat: support computed <code>Number.parseInt</code> member access in <code>radix</code> rule (<a href="https://redirect.github.com/eslint/eslint/issues/21041">#21041</a>) (Pixel)</li> <li><a href="https://github.com/eslint/eslint/commit/0b4a73b65808f5a8fd192f15db2bf5e47002b9f7"><code>0b4a73b</code></a> feat: add suggestions to no-compare-neg-zero (<a href="https://redirect.github.com/eslint/eslint/issues/21034">#21034</a>) (den$)</li> <li><a href="https://github.com/eslint/eslint/commit/96cdd427db5f26c6403fba92b0f7ae4556c595ec"><code>96cdd42</code></a> feat: report invalid signed numeric radix values in <code>radix</code> rule (<a href="https://redirect.github.com/eslint/eslint/issues/21030">#21030</a>) (Pixel)</li> </ul> <h2>Bug Fixes</h2> <ul> <li><a href="https://github.com/eslint/eslint/commit/3e7bf15e69e6d3a2c8832356bcc2e9903cc4eede"><code>3e7bf15</code></a> fix: apply <code>ignoreClassesWithImplements</code> to class expressions (<a href="https://redirect.github.com/eslint/eslint/issues/21069">#21069</a>) (Pixel)</li> <li><a href="https://github.com/eslint/eslint/commit/0d7d70cf013ec5bf1e4f5a0fcf7128bdf059b2d4"><code>0d7d70c</code></a> fix: insert cause outside wrapping parens in preserve-caught-error (<a href="https://redirect.github.com/eslint/eslint/issues/21062">#21062</a>) (Mahin Anowar)</li> <li><a href="https://github.com/eslint/eslint/commit/75ec753226010867270787b412f3dae412e421e6"><code>75ec753</code></a> fix: handle static template literals in <code>eqeqeq</code> rule (<a href="https://redirect.github.com/eslint/eslint/issues/21058">#21058</a>) (Pixel)</li> <li><a href="https://github.com/eslint/eslint/commit/b717a22e2408389a2ad40af66543e46390669eb6"><code>b717a22</code></a> fix: prevent <code>eqeqeq</code> null option from reporting non-equality operators (<a href="https://redirect.github.com/eslint/eslint/issues/21057">#21057</a>) (Pixel)</li> <li><a href="https://github.com/eslint/eslint/commit/e35b05f1961dcd691611bd68b6ff8a87072d6f76"><code>e35b05f</code></a> fix: avoid <code>no-invalid-regexp</code> false positive for shadowed RegExp (<a href="https://redirect.github.com/eslint/eslint/issues/21051">#21051</a>) (Pixel)</li> <li><a href="https://github.com/eslint/eslint/commit/a3172b69c7db63ea0321355543e3f527c7d8b76a"><code>a3172b6</code></a> fix: avoid <code>no-control-regex</code> false positive for shadowed RegExp (<a href="https://redirect.github.com/eslint/eslint/issues/21050">#21050</a>) (Pixel)</li> <li><a href="https://github.com/eslint/eslint/commit/d1f637eca27e523d613991c6bea5b8726b810e4c"><code>d1f637e</code></a> fix: parenthesize sequence expression operands in no-implicit-coercion (<a href="https://redirect.github.com/eslint/eslint/issues/21045">#21045</a>) (spokodev)</li> <li><a href="https://github.com/eslint/eslint/commit/8859bafb018e2b23b5110d52e491b69b94ad890a"><code>8859baf</code></a> fix: avoid prefer-numeric-literals false positive for shadowed globals (<a href="https://redirect.github.com/eslint/eslint/issues/21047">#21047</a>) (한국)</li> <li><a href="https://github.com/eslint/eslint/commit/a9e5961050676ef29dba9649dfcd7233d21760c7"><code>a9e5961</code></a> fix: use-isnan false positive on shadowed NaN/Number (<a href="https://redirect.github.com/eslint/eslint/issues/20958">#20958</a>) (sethamus)</li> <li><a href="https://github.com/eslint/eslint/commit/8a240a76108f30f2476e61a925e4d32d378cce5e"><code>8a240a7</code></a> fix: avoid false positives in <code>radix</code> rule for spread arguments (<a href="https://redirect.github.com/eslint/eslint/issues/21044">#21044</a>) (Pixel)</li> </ul> <h2>Documentation</h2> <ul> <li><a href="https://github.com/eslint/eslint/commit/c30d80801ca561bdf65c6c3eba4ee57dced278cf"><code>c30d808</code></a> docs: Update README (GitHub Actions Bot)</li> <li><a href="https://github.com/eslint/eslint/commit/5139800b23e77fdd1a76664e1b36f478942eae55"><code>5139800</code></a> docs: document ESLint migration codemods in v9 and v10 guides (<a href="https://redirect.github.com/eslint/eslint/issues/20980">#20980</a>) (Alex Bit)</li> <li><a href="https://github.com/eslint/eslint/commit/04174cbfaac1f9555400b5332d69056e6aab9cc6"><code>04174cb</code></a> docs: Update README (GitHub Actions Bot)</li> <li><a href="https://github.com/eslint/eslint/commit/026e1304080512bcddfd2af3557fff86474ff949"><code>026e130</code></a> docs: update semver policy for bug fixes (<a href="https://redirect.github.com/eslint/eslint/issues/21048">#21048</a>) (Milos Djermanovic)</li> <li><a href="https://github.com/eslint/eslint/commit/9d42fefb0e05ecd0b256c2ebed479fc868862f0c"><code>9d42fef</code></a> docs: Update README (GitHub Actions Bot)</li> <li><a href="https://github.com/eslint/eslint/commit/b23015955c8d6e6516076190730f538c86927f26"><code>b230159</code></a> docs: Update README (GitHub Actions Bot)</li> <li><a href="https://github.com/eslint/eslint/commit/0129972ba122e95bece6040fda44d20f6799246a"><code>0129972</code></a> docs: correct <code>**/.js</code> glob to <code>**/*.js</code> in config files guide (<a href="https://redirect.github.com/eslint/eslint/issues/21036">#21036</a>) (EduardF1)</li> </ul> <h2>Chores</h2> <ul> <li><a href="https://github.com/eslint/eslint/commit/948937986f2aa3cccb27a4c80694a85e5b0a5f64"><code>9489379</code></a> chore: update dependency <code>@eslint/eslintrc</code> to ^3.3.6 (<a href="https://redirect.github.com/eslint/eslint/issues/21076">#21076</a>) (renovate[bot])</li> <li><a href="https://github.com/eslint/eslint/commit/81a4774a928211bd0c01a06a1517736ece594522"><code>81a4774</code></a> chore: updates for v9.39.5 release (Jenkins)</li> <li><a href="https://github.com/eslint/eslint/commit/983541491393323d17717683f6a2e6dbef4bc3f4"><code>9835414</code></a> chore: enable <code>$ExpectType</code> annotations in all TypeScript files (<a href="https://redirect.github.com/eslint/eslint/issues/21071">#21071</a>) (Francesco Trotta)</li> <li><a href="https://github.com/eslint/eslint/commit/72adf6bd214c142b38aabb4b8f6f908079c5301a"><code>72adf6b</code></a> chore: restrict <code>markdownlint-cli2</code> updates in renovate (<a href="https://redirect.github.com/eslint/eslint/issues/21067">#21067</a>) (lumir)</li> <li><a href="https://github.com/eslint/eslint/commit/833ec10fd702644e94334edd3cd2aa313174a958"><code>833ec10</code></a> chore: update dependency prettier to v3.9.4 (<a href="https://redirect.github.com/eslint/eslint/issues/21061">#21061</a>) (renovate[bot])</li> <li><a href="https://github.com/eslint/eslint/commit/7ea106ddcb6af7db8f36d62a28dbaba94d33598e"><code>7ea106d</code></a> chore: update ecosystem plugins (<a href="https://redirect.github.com/eslint/eslint/issues/21059">#21059</a>) (ESLint Bot)</li> <li><a href="https://github.com/eslint/eslint/commit/8fb550e7c257fbdc4108fc8e63db43c1d914d472"><code>8fb550e</code></a> chore: add prettier update commit to <code>.git-blame-ignore-revs</code> (<a href="https://redirect.github.com/eslint/eslint/issues/21056">#21056</a>) (lumir)</li> <li><a href="https://github.com/eslint/eslint/commit/e4e11668ead6b950328c71e894563a13ef72bf84"><code>e4e1166</code></a> chore: update dependency prettier to v3.9.1 (<a href="https://redirect.github.com/eslint/eslint/issues/21055">#21055</a>) (renovate[bot])</li> <li><a href="https://github.com/eslint/eslint/commit/0493f53f3fcec4ed69a1808dffa153dcff1380d3"><code>0493f53</code></a> chore: update prettier to v3.9.0 (<a href="https://redirect.github.com/eslint/eslint/issues/21054">#21054</a>) (Pixel)</li> <li><a href="https://github.com/eslint/eslint/commit/1056a996c657b377dc16a58c28890d2940394408"><code>1056a99</code></a> chore: update dependency prettier to v3.8.5 (<a href="https://redirect.github.com/eslint/eslint/issues/21049">#21049</a>) (renovate[bot])</li> <li><a href="https://github.com/eslint/eslint/commit/4d4155df4a21d711e8dd21a467de085e770bad35"><code>4d4155d</code></a> ci: run ecosystem tests on pull requests (<a href="https://redirect.github.com/eslint/eslint/issues/21027">#21027</a>) (sethamus)</li> <li><a href="https://github.com/eslint/eslint/commit/993539fd45d3d01aad3fbc13963e2245fdf7ee0d"><code>993539f</code></a> chore: update dependency <code>@eslint/json</code> to ^2.0.1 (<a href="https://redirect.github.com/eslint/eslint/issues/21042">#21042</a>) (renovate[bot])</li> <li><a href="https://github.com/eslint/eslint/commit/53f8b69c15af7398c989071ee4788b88edd48bdd"><code>53f8b69</code></a> test: add error locations to <code>no-constant-binary-expression</code> (<a href="https://redirect.github.com/eslint/eslint/issues/21039">#21039</a>) (lumir)</li> <li><a href="https://github.com/eslint/eslint/commit/5ab71d52f9d860df04e626fcd819a36257f21f9e"><code>5ab71d5</code></a> refactor: clean up radix rule internals (<a href="https://redirect.github.com/eslint/eslint/issues/21015">#21015</a>) (Pixel)</li> <li><a href="https://github.com/eslint/eslint/commit/a80a9a461478838930c5545f840473840b26b0e6"><code>a80a9a4</code></a> chore: update ecosystem plugins (<a href="https://redirect.github.com/eslint/eslint/issues/21035">#21035</a>) (ESLint Bot)</li> <li><a href="https://github.com/eslint/eslint/commit/7c9a02933cf1c231237babb8a7a32150ab72e263"><code>7c9a029</code></a> ci: add Node.js 26 to CI (<a href="https://redirect.github.com/eslint/eslint/issues/20847">#20847</a>) (lumir)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/eslint/eslint/commit/fabd99bb74eedcb950df51ec3280414ff1d68d38"><code>fabd99b</code></a> 10.7.0</li> <li><a href="https://github.com/eslint/eslint/commit/37c5e75949ff2ae1f0085f547e35ce2bdf9d524d"><code>37c5e75</code></a> Build: changelog update for 10.7.0</li> <li><a href="https://github.com/eslint/eslint/commit/948937986f2aa3cccb27a4c80694a85e5b0a5f64"><code>9489379</code></a> chore: update dependency <code>@eslint/eslintrc</code> to ^3.3.6 (<a href="https://redirect.github.com/eslint/eslint/issues/21076">#21076</a>)</li> <li><a href="https://github.com/eslint/eslint/commit/81a4774a928211bd0c01a06a1517736ece594522"><code>81a4774</code></a> chore: updates for v9.39.5 release</li> <li><a href="https://github.com/eslint/eslint/commit/3e7bf15e69e6d3a2c8832356bcc2e9903cc4eede"><code>3e7bf15</code></a> fix: apply <code>ignoreClassesWithImplements</code> to class expressions (<a href="https://redirect.github.com/eslint/eslint/issues/21069">#21069</a>)</li> <li><a href="https://github.com/eslint/eslint/commit/983541491393323d17717683f6a2e6dbef4bc3f4"><code>9835414</code></a> chore: enable <code>$ExpectType</code> annotations in all TypeScript files (<a href="https://redirect.github.com/eslint/eslint/issues/21071">#21071</a>)</li> <li><a href="https://github.com/eslint/eslint/commit/cf2a9bf2d982642f760370c15f1196f4658f4e27"><code>cf2a9bf</code></a> feat: add errorClassNames option to preserve-caught-error rule (<a href="https://redirect.github.com/eslint/eslint/issues/21032">#21032</a>)</li> <li><a href="https://github.com/eslint/eslint/commit/c30d80801ca561bdf65c6c3eba4ee57dced278cf"><code>c30d808</code></a> docs: Update README</li> <li><a href="https://github.com/eslint/eslint/commit/f8b873aae53610b80b5c1005606716e05ed3b91f"><code>f8b873a</code></a> feat: max-nested-callbacks option for constructor callbacks (<a href="https://redirect.github.com/eslint/eslint/issues/21063">#21063</a>)</li> <li><a href="https://github.com/eslint/eslint/commit/72adf6bd214c142b38aabb4b8f6f908079c5301a"><code>72adf6b</code></a> chore: restrict <code>markdownlint-cli2</code> updates in renovate (<a href="https://redirect.github.com/eslint/eslint/issues/21067">#21067</a>)</li> <li>Additional commits viewable in <a href="https://github.com/eslint/eslint/compare/v10.6.0...v10.7.0">compare view</a></li> </ul> </details> <br /> Updates `typescript` from 6.0.3 to 7.0.2 <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/microsoft/TypeScript/commits">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~microsoft1es">microsoft1es</a>, a new releaser for typescript since your current version.</p> </details> <br /> Updates `typescript-eslint` from 8.63.0 to 8.64.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/releases">typescript-eslint's releases</a>.</em></p> <blockquote> <h2>v8.64.0</h2> <h2>8.64.0 (2026-07-13)</h2> <h3>🚀 Features</h3> <ul> <li>support parsing <code>import defer</code> (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12513">#12513</a>)</li> <li><strong>eslint-plugin:</strong> [no-loop-func] support <code>using</code> / <code>await using</code> declarations and deprecate the rule (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12500">#12500</a>)</li> <li><strong>typescript-estree:</strong> throw for invalid definite assignment in class properties (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12543">#12543</a>)</li> </ul> <h3>🩹 Fixes</h3> <ul> <li><strong>eslint-plugin:</strong> [require-array-sort-compare] handle constrained arrays (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12512">#12512</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>Evyatar Daud <a href="https://github.com/StyleShit"><code>@StyleShit</code></a></li> <li>송재욱</li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.64.0">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md">typescript-eslint's changelog</a>.</em></p> <blockquote> <h2>8.64.0 (2026-07-13)</h2> <p>This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.</p> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.64.0">GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning">versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases">releases</a> on our website.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/414d9abbf66f77796ab12ec7e75b07722e592832"><code>414d9ab</code></a> chore(release): publish 8.64.0</li> <li>See full diff in <a href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.64.0/packages/typescript-eslint">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Updated [Microsoft.NET.Test.Sdk](https://github.com/microsoft/vstest) from 18.7.0 to 18.8.0. <details> <summary>Release notes</summary> _Sourced from [Microsoft.NET.Test.Sdk's releases](https://github.com/microsoft/vstest/releases)._ ## 18.8.0 ## What's Changed * Migrate from Newtonsoft.Json to System.Text.Json / Jsonite (merge to main) by @nohwnd in microsoft/vstest#15687 - For more detail refer to https://devblogs.microsoft.com/dotnet/vs-test-is-removing-its-newtonsoft-json-dependency/ * Create source-only filter package by @Youssef1313 in microsoft/vstest#15638 - Package release is pending. * Add ARM64 msdia140.dll support to test platform packages by @nohwnd in microsoft/vstest#15692 * Fix mutex cleanup crash on macOS/Linux by @nohwnd in microsoft/vstest#15684 * Restrict artifact temp directory permissions on Unix by @nohwnd in microsoft/vstest#15729 * Add support for filtering uncategorized tests with TestCategory=None by @Evangelink in microsoft/vstest#15727 * Fix SCI binding failure in DTA hosts (main) by @nohwnd in microsoft/vstest#15724 * Fix HTML logger parallel file collision by @nohwnd in microsoft/vstest#15435 * Improve error message when testhost cannot be found by @nohwnd in microsoft/vstest#16053 * Fix HTML logger exception on invalid XML chars in test display names by @nohwnd in microsoft/vstest#16051 **Full Changelog**: microsoft/vstest@v18.7.0...v18.8.0 Commits viewable in [compare view](microsoft/vstest@v18.7.0...v18.8.0). </details> Updated [Serilog](https://github.com/serilog/serilog) from 4.3.1 to 4.4.0. <details> <summary>Release notes</summary> _Sourced from [Serilog's releases](https://github.com/serilog/serilog/releases)._ ## 4.4.0 ## What's Changed * Emit SelfLog warning when extra arguments are provided by @matantsach in serilog/serilog#2222 * dont WriteQuotedJsonString for null by @SimonCropp in serilog/serilog#2216 * Pin System.Security.Cryptography.Xml to 8.0.3 in tests by @ArieGato in serilog/serilog#2232 * Route optional interfaces through OptionalInterfaceForwardingSink for restricted sinks by @ArieGato in serilog/serilog#2234 * `SelfMetrics` by @nblumhardt in serilog/serilog#2237 ## New Contributors * @matantsach made their first contribution in serilog/serilog#2222 * @ArieGato made their first contribution in serilog/serilog#2232 **Full Changelog**: serilog/serilog@v4.3.1...v4.4.0 Commits viewable in [compare view](serilog/serilog@v4.3.1...v4.4.0). </details> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
--- updated-dependencies: - dependency-name: System.Security.Cryptography.Xml dependency-version: 10.0.10 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) from 5.10.0 to 5.10.1. - [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases) - [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md) - [Commits](NaturalIntelligence/fast-xml-parser@v5.10.0...v5.10.1) --- updated-dependencies: - dependency-name: fast-xml-parser dependency-version: 5.10.1 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [linkify-it](https://github.com/markdown-it/linkify-it) from 5.0.1 to 5.0.2. - [Changelog](https://github.com/markdown-it/linkify-it/blob/master/CHANGELOG.md) - [Commits](markdown-it/linkify-it@5.0.1...5.0.2) --- updated-dependencies: - dependency-name: linkify-it dependency-version: 5.0.2 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [fast-uri](https://github.com/fastify/fast-uri) from 3.1.2 to 3.1.4. - [Release notes](https://github.com/fastify/fast-uri/releases) - [Commits](fastify/fast-uri@v3.1.2...v3.1.4) --- updated-dependencies: - dependency-name: fast-uri dependency-version: 3.1.4 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [liquidjs](https://github.com/harttle/liquidjs) from 10.27.0 to 10.27.2. - [Release notes](https://github.com/harttle/liquidjs/releases) - [Changelog](https://github.com/harttle/liquidjs/blob/master/CHANGELOG.md) - [Commits](harttle/liquidjs@v10.27.0...v10.27.2) --- updated-dependencies: - dependency-name: liquidjs dependency-version: 10.27.2 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [quinn-proto](https://github.com/quinn-rs/quinn) from 0.11.14 to 0.11.16. - [Release notes](https://github.com/quinn-rs/quinn/releases) - [Commits](quinn-rs/quinn@quinn-proto-0.11.14...quinn-proto-0.11.16) --- updated-dependencies: - dependency-name: quinn-proto dependency-version: 0.11.16 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
…liquidjs-10.27.2' into fixes
…sp.Sidecar.FSharp/System.Security.Cryptography.Xml-10.0.10' into fixes
…vscode/fast-xml-parser-5.10.1' into fixes
…vscode/fast-uri-3.1.4' into fixes
…vscode/linkify-it-5.0.2' into fixes
The lockfile on `fixes` had drifted out of sync with package.json (lock carried typescript 7.0.2 / vscode-languageclient 10.1.0 while package.json declares ^6.0.3 / ^9.0.1), so `npm ci` failed outright. Rebuilt from main's known-good lock with the three dependabot bump patches applied, preserving their exact pins and integrity hashes: - fast-xml-parser 5.10.0 -> 5.10.1 - fast-uri 3.1.2 -> 3.1.4 (GHSA-v2hh-gcrm-f6hx) - linkify-it 5.0.1 -> 5.0.2 (mailto: DoS) `npm ci` now resolves cleanly (557 packages, matching main).
## TLDR Adds robust support for opening standalone `.cs` files (Single-File Mode) without requiring a containing `.csproj` or `.sln` file. ## Details - **Rust Host (`src/main.rs`)**: Updated the `init_workspace_for_file` lazy initialization logic to conditionally start only the relevant sidecar based on the opened file extension (e.g., launching only the C# sidecar for `.cs` files). Previously, it aggressively started both, causing the F# sidecar to crash when no `.fsproj` was found. - **C# Sidecar (`WorkspaceManager.cs`)**: Refactored `OpenCoreAsync` to gracefully fall through to a new `OpenSingleFileModeAsync` path when `SolutionLoader` fails to discover a project file. - **Single-File Logic (`WorkspaceManager.SingleFile.cs`)**: Implemented a new partial class that spins up an incredibly fast `AdhocWorkspace` to house the standalone file. - **BCL Metadata Fix (`SharpLsp.Sidecar.CSharp.csproj`)**: Added `Basic.Reference.Assemblies.Net100` as a dependency. Because the sidecar is shipped as a self-contained single-file executable, the standard `System.Runtime` metadata references were unavailable on disk for Roslyn to read via `CreateFromFile`. This package directly provides the .NET 10 metadata reference assemblies in-memory, fixing `CS0518` (System.Object not defined) and restoring full IntelliSense functionality. ## How Do The Automated Tests Prove It Works? - Added `WorkspaceManagerSingleFileTests.cs`, featuring the `OpenAsync_without_project_loads_single_file_mode` test case. - The test proves functionality by programmatically passing a directory that explicitly lacks a `.csproj` file into the `WorkspaceManager`. - The test verifies that `manager.IsLoaded` correctly evaluates to `true` (indicating successful fallback to Single-File Mode). - The test then invokes `manager.GetDiagnosticsAsync(sourcePath)` and asserts that it completes cleanly without returning any errors (proving that the AdhocWorkspace was successfully constructed and the BCL metadata references were properly loaded). --------- Co-authored-by: m.ashar@ssidecisions.com <m.ashar@ssidecisions.com>
…hecks Security updates ALWAYS target the default branch — GitHub ignores target-branch for them — so they could never route to dependabot-upgrades and instead piled up on main (6 open, oldest 8 days). main now carries required status checks, so `gh pr merge --auto` genuinely queues behind CI there. Adds a second job for base=main that enables auto-merge and lets GitHub release it only once those checks pass. Deliberately `--auto` with NO immediate-merge fallback, unlike the staging job: that fallback is only correct because the staging branch has no required checks; on main it would squash the bump in without waiting for CI. Majors are excluded via dependabot/fetch-metadata — a breaking bump reaching main unattended needs a human even when CI is green. Both jobs are now guarded on base.ref so they don't cross-fire.
Covers the bound and degradation paths introduced with .NET file-based app and .csx script support, and deletes dead code rather than shipping it uncovered. sidecar (C#) - Delete FileLevelDirectives.FindMisplaced/FirstCodeTokenStart. Nothing in the production path called them: a misplaced-directive detector with no consumer is dead code, and the diagnostics wiring is not written yet. Tracked as a single plan item so detector and consumer land together. tests - 7 new coarse e2e tests over WorkspaceManager single-file loading: the full #: directive vocabulary (sdk/package/project/property with both the name-only and name@version / name=value forms), graceful degradation on unknown directives and unresolvable includes, glob and recursive-glob #:include expansion, the 64-file closure bound, the 8-level #:include nesting bound, and the unsupported-extension load error. sharplsp-sidecar-csharp coverage 93.56% -> 95.08%, restoring the stored 95.0% ratchet rather than scraping past the 1pp tolerance. The threshold was not touched. docs - SCRIPTING-FILEBASED-PLAN.md: reword the misplaced-directive TODO now that the orphaned detector is gone. Also carries in-progress netcoredbg staging (Makefile, scripts/, THIRD-PARTY-NOTICES), VS Code debug wiring, the profiler flame-graph e2e test, and a Windows EOL normalisation helper for the scaffolding suite [DIST-CI-WIN-VSIX]. File-based app support originally proposed by @ashar-builds in #188.
…le binaries
Fixes the "required binaries are missing or version-mismatched" activation
failure users hit in the wild, which reported an unrelated directory
(a plugin folder that happened to be on PATH) as the missing location.
Two independent defects, both of which shipped silently.
1. Sidecar payload lost Microsoft.CodeAnalysis.CSharp.dll (regression)
Directory.Build.props declares Microsoft.CodeAnalysis.CSharp with
PrivateAssets="all" for analyzer support. NuGet treats such packages as
development dependencies and `dotnet publish` EXCLUDES them, so the C#
sidecar shipped without its own compiler layer and resolved Roslyn from
the machine SDK instead — crashing workspace/open with "Could not load
type ...WithElementSyntax" on any SDK whose Roslyn is older than the
bundled Features/Workspaces assemblies.
This was diagnosed and fixed before; the fix (a `PackageReference Update`
restoring full asset flow) was deleted on this branch. Restored, with the
rationale kept next to it so it does not get dropped a third time.
2. Staging could ship an apphost with no managed assembly
sharplsp-sidecar-<lang>(.exe) is a .NET apphost: a launcher whose only job
is to load SharpLsp.Sidecar.<lang>.dll beside it. Every copy/rename in
_stage-vsix-binary-only is best-effort (`2>/dev/null || true`), and a
publish raced by a concurrent rebuild yields an incomplete tree. The
result packages cleanly and passes CI, then dies on the user's machine:
shipwright runs `--version`, rejects the unusable `bundled` source, falls
through to the `path` source, and blames whatever PATH entry it tried last.
_stage-vsix-binary-only now runs each staged sidecar and fails the build if
it cannot start, so this can never reach a VSIX again.
Also scopes BannedSymbols.txt to the sidecars via sidecars/Directory.Build.props.
It was wired into the ROOT props, so RS0030 also bound every test fixture and
broke the Rust shards: tests/fixtures/ProfileTarget blocks with Thread.Sleep on
purpose so the sampling profiler has real blocked frames to capture, and
rewriting it to Task.Delay would change the flame graph the profiler e2e test
asserts on. The ban's own header says it governs the sidecars.
tests
- "bundled sidecars actually execute" spawns each staged sidecar and asserts
it starts and reports its version — the exact check shipwright performs.
The existing "sidecars are present" test only called fs.existsSync on the
apphost, so it passed against a payload that could not run at all; that is
why defect 2 was invisible. Verified failing first:
AssertionError: sharplsp-sidecar-csharp is staged but does not run
(exit 2147516570): The application to execute does not exist:
'bin\all\SharpLsp.Sidecar.CSharp.dll'
and passing after the fix, alongside the pre-existing Roslyn payload test.
Three unrelated CI failures, each with a distinct root cause.
rust e2e — call hierarchy without a sidecar
[SCRIPT-ROUTE-LAZY] changed what "no sidecar" means. Initializing without a
workspace root used to leave the sidecar manager as None, so the host
short-circuited every semantic request to `null`. A single file with no
project now starts its sidecar lazily on first didOpen, so the request
reaches the sidecar and returns `[]`.
LSP 3.17 types prepareCallHierarchy / incomingCalls / outgoingCalls as
`T[] | null`; both encode "no results" and no client can distinguish them.
These six tests now expect NullOrEmptyArray — the variant the other
no-sidecar feature tests in this suite already use — so they still pin what
matters: no error, no crash, no fabricated results. Rationale recorded in
the file so the change is not mistaken for a weakened assertion later.
real-repo fixtures — restore is not an audit
Serilog is pinned to v4.4.0, but NuGet's advisory database moves
independently. A newly published CVE against a transitive package raised
NU1903, and the upstream repo's own TreatWarningsAsErrors turned restore
into a hard failure — CI broke with no change on our side, on a repo we do
not control. Restore now passes -p:NuGetAudit=false. The fixture exists to
drive the LSP against real-world code, not to audit that code's
dependencies; this is the same normalisation as dropping its global.json.
The failure was also undebuggable: stdio:'pipe' captured NuGet's
diagnostics and the rethrow discarded them, leaving only "Command failed:
dotnet restore". They are now attached to the thrown error.
windows teardown — EPERM on temp cleanup
`fs.rmSync(dir, { recursive: true, force: true })` was duplicated at 19 call
sites. `force` only swallows ENOENT; it does NOT retry, so a directory whose
files are still open in a spawned child (dotnet, VBCSCompiler, a sidecar)
fails with EPERM and takes down an otherwise-passing suite. Node retries
exactly those codes given maxRetries/retryDelay.
Replaced all 19 with a single removeDirRecursive() helper carrying the retry
policy, rather than copying the options 19 times — a per-site copy is how
such a policy drifts.
[SCRIPT-ROUTE-LAZY] made the sidecar managers unconditional so a single file with no project can start one lazily on first didOpen. That silently redefined what the e2e suite's "no sidecar" meant: initializing without a workspace root still produced a server WITH sidecars, so 9 tests that pin the no-sidecar contract began seeing sidecar answers. The previous commit papered over part of this by relaxing call-hierarchy expectations from Null to NullOrEmptyArray. That was the wrong call and is reverted here. It would also not have covered test_semantic_tokens_full_repeated_without_sidecar, which sends the SAME request twice and asserts the answers match — it was failing because the response now depended on whether the lazy workspace/open had finished in between. Relaxing that assertion would have deleted a determinism guarantee to make a race look green. host - Config discovery falls back to the current directory when no workspace root is supplied. Opening one file inside a configured tree must not ignore that tree's sharplsp.toml just because the editor sent no workspace folder. This is correct on its own merits and is also the only switch that can truly remove the sidecars. tests - LspClient::start_without_sidecars() runs the server in a temp directory whose sharplsp.toml disables both sidecars, and owns that directory so it outlives the process. open_no_sidecar / assert_no_sidecar_request and the nine inline no-sidecar tests use it. - Every original assertion is restored, including the strict Null expectations and the repeated-request determinism check. No expectation was weakened. 320/320 e2e pass. (test_profiler_start_trace_latency asserts <1s and can lose that budget on a loaded machine; it passes in isolation at 0.33s.)
CodeQL flagged js/incomplete-sanitization (HIGH) at
scripts/vsix-test-chunks.mjs: `char.replace(/[.+^${}()|[\]\]/, "\$&")` is a
non-global regex used for escaping, so it replaces only the first occurrence.
The call is in fact safe — `for…of` yields exactly one code point, so there is
never a second occurrence to miss — but CodeQL cannot see that, and the finding
is not cosmetic: release.yml's CodeQL gate fails the release on any High or
Critical, so it blocks publishing outright.
Replaced the regex with a direct membership test against an explicit set of
metacharacters. Same output, no escaping-by-regex for the analysis to flag, and
one less regex — which CLAUDE.md prefers anyway.
_check-vsix-chunks still reports the identical partition:
36 VS Code suites: 7 Windows chunks, 3 excluded.
The previous commit inserted REGEXP_METACHARACTERS between the function's docstring and the function, leaving the doc attached to the constant instead. Moved it back and trimmed the constant's own doc to what it needs to say. Note the previous commit also reformatted the whole file: `scripts/` is not covered by the CI prettier gate (which is scoped to editors/vscode/src/**/*.ts), so this file had drifted from prettier style. Running --write over it produced a whitespace-only diff around the three-line logic change. Behaviour is unchanged — `matrix`, `files <chunk>` and `check` all produce identical output.
…ndition Last of the [SCRIPT-ROUTE-LAZY] fallout, and the one I missed because I verified only the lsp_e2e target — nuget_e2e is a separate binary with its own harness. nuget_unused_fsproj_routes_to_fsharp_sidecar asserted an error for an unloaded fsproj. That error used to come from there being no sidecar at all; now the F# sidecar starts lazily and answers `unused: []`, so the assertion failed. Worth noting what this exposes: the test never actually proved F# routing. With no sidecar, BOTH branches of pick_package_sidecar produced the same error, so the assertion held regardless of which one was chosen. Its sibling .csproj test still passes because the C# path errors where the F# path returns empty — an asymmetry between the two sidecars that was invisible while neither was running. Restored the intended precondition the same way as the rest: a sharplsp.toml in the test's existing temp dir disables both sidecars, and LspClient::start_in() runs the server there. The assertion is unchanged. All Rust targets pass: lsp_e2e 320, nuget_e2e 33, build_deps_file_e2e 1. (The two profiler timing tests fail only under parallel load on a busy machine; they pass serially, which is how CI runs them — RUST_TEST_THREADS=1.)
MelbourneDeveloper
added a commit
that referenced
this pull request
Aug 3, 2026
…ss dirs and multi-solution roots (#197) ## TLDR Restores C# semantic features (hover, completions, diagnostics) in workspace roots the sidecar previously refused to load — projectless directories and roots holding more than one solution — while keeping an ambiguous root a loud error rather than a silently mis-analyzed one, and upgrades the VS Code extension to the current SDK. ## Details Two independent defects left `WorkspaceManager._solution` null, after which every semantic request returns null for the whole session. Both surfaced as the same user-visible symptom — no hover — and both are fixed here. **1. A configured `csharp.solution_path` was parsed and then ignored (`src/config.rs`, `src/main.rs`).** `CSharpConfig::solution_path` was deserialized from `sharplsp.toml` but never read by any caller, so the host always sent the raw workspace root to the sidecar's `workspace/open`. When that root holds several `.sln`/`.slnx` files, `SolutionLoader.FindRecursiveMatch` deliberately returns null rather than guessing which one to load; `OpenCoreAsync` then fell through to `OpenProjectlessAsync(<directory>)`, whose `File.Exists` check fails on a directory, and the open aborted with the misleading `No .sln, .slnx, or .csproj found at or under '<root>'`. The SharpLsp repo itself has this shape. New `CSharpConfig::open_target(workspace_root)` resolves the path the sidecar should actually open: the configured solution when it names an existing file (absolute, or relative to the root), otherwise the workspace root so plain auto-discovery is unchanged. A configured-but-missing path logs a `warn!` and falls back rather than wedging the sidecar on a path that does not exist. `src/main.rs` passes the result to the C# `start_sidecar`; the F# sidecar still receives the root. New spec section `[WORKSPACE-SOLUTION-PATH]` documents the behaviour, and `sharplsp.example.toml` plus the English/Japanese/Chinese configuration docs now state that the setting is required for multi-solution roots. **2. A projectless directory aborted initialization permanently (`WorkspaceManager.cs`, `WorkspaceManager.SingleFile.cs`).** Opening a folder with no `.sln`/`.csproj` at all (a Desktop, a scratch directory) hit the same `OpenProjectlessAsync(<directory>)` failure, so the sidecar never started its health monitor. `OpenCoreAsync` now detects that the unresolved path is a directory, sets `_isProjectlessDirectory`, and returns success, deferring workspace creation. The first `UpdateDocumentTextAsync` for a file then lazily calls `OpenProjectlessAsync` with the real file path under a dedicated `_projectlessLoadLock`. `AddAdhocProject` switched to `_adhocWorkspace ??= new AdhocWorkspace()` so a second loose file adds a project instead of discarding the first one's. **2b. That deferral must not swallow an ambiguous root (`SolutionLoader.cs`, `WorkspaceManager.cs`).** `SolutionLoader` returns "no target" for two different reasons — the root holds no solution at all, *or* it holds several and discovery refused to guess. Deferring on both meant a real multi-solution repository was analyzed as loose files: no project reference resolves, so every cross-project type becomes a phantom "not found" diagnostic across the whole tree. `[SCRIPT-DEGRADE]` names that case explicitly ("**ambiguity, not absence** … must surface as an error asking the user to choose"), so the two must be told apart. New `SolutionLoader.FindAmbiguousSolutions` reports the competing solutions when — and only when — recursive discovery found more than one. `OpenCoreAsync` consults it before deferring: an ambiguous root fails with a message naming every candidate and the `csharp.solution_path` setting that resolves it, while a genuinely empty root still takes the deferred path. This also closes the `[SCRIPT-DEGRADE]` plan item "Distinguish 'absent' from 'ambiguous' in the error message". The spec's `[SCRIPT-DEGRADE]` section and three plan checkboxes are updated to describe the deferral, which previously contradicted the shipped code. **3. `MetadataDecompiler` file names were platform-dependent (`MetadataDecompiler.cs`).** `SanitizeFileName` had delegated `:` to `Path.GetInvalidFileNameChars()`, which on Unix returns only `{ '\0', '/' }` — so a `global::`-style display name kept its colons on Linux while losing them on Windows. The unsafe-character set is now an explicit `<>:,` + space list unioned with the platform's invalid characters, applied in a single pass, so a decompiled type yields a byte-identical file name on every OS. **4. VS Code SDK upgrade (`editors/vscode/`).** `engines.vscode` and `@types/vscode` `^1.99.0` → `^1.125.0`, and `@vscode/test-electron` `^3.0.0` → `^3.1.0`. `brace-expansion` overrides move to the patched `2.1.3`/`5.0.8` maintenance releases — both keys already existed in `main` at `2.0.3`/`5.0.7`, so this is a patch bump of an existing pin, not a new dependency. `createAnsiStrippingChannel` now returns a `LogOutputChannel` rather than a plain `OutputChannel`: it forwards `logLevel`/`onDidChangeLogLevel` as live getters (a snapshot would report a stale level forever) and strips ANSI from the five level-tagged log methods, which previously bypassed the filter entirely. It is split into `writeMethods`/`logMethods`/`lifecycleMethods` helpers to stay under the 20-line function limit, and `error` forwards an `Error` instance unchanged, sanitizing only string messages. `LogOutputChannel` extends `OutputChannel`, so this is a strict widening. **`vscode-languageclient` is deliberately left at `^9.0.1`.** Bumping it to `^10.1.0` was attempted and reverted: it breaks `sharplsp.restartServer`, and the client never returns to `Running`. A controlled A/B on one machine at one commit, varying only the VS Code dependency state, gave 60 passing / **2 failing** in ~2m on v10 versus **62 passing / 0 failing** in ~20s on v9. That is tracked as #195 with the reproduction and migration notes; the `LogOutputChannel` half of the migration is kept here so the re-attempt starts smaller. The requested SDK upgrade (the VS Code API surface) is fully delivered — `vscode-languageclient` is a separate library, not the SDK. ## How Do The Automated Tests Prove It Works? **`tests/e2e_modules/multi_solution.rs` — `test_full_stack_hover_uses_configured_solution_path_in_multi_solution_root`** is the coarse end-to-end proof for defect 1. Its fixture builds the exact ambiguous shape: `app/App.sln` and `other/Other.sln` in sibling subdirectories, each with a real restored `.csproj`, plus a `sharplsp.toml` naming `app/App.sln`. It drives a real `sharplsp` host and a real Roslyn sidecar over stdio, opens `app/App/Calculator.cs`, and polls `textDocument/hover` on the `Calculator` class name, asserting the returned contents mention `Calculator`. Against the pre-fix host this cannot pass: the root is sent verbatim, discovery finds two solutions and refuses to choose, and hover returns null until the 90-second poll expires. It is the assertion on real hover content — not a status code — that proves a solution actually loaded. **Five `src/config.rs` tests pin the resolution rules** that the e2e test exercises only one path through: `test_relative_solution_path_is_opened_not_workspace_root` (with a decoy second solution present, so it fails if the root is returned), `test_absolute_solution_path_is_opened`, and three fallback cases — empty, missing, and directory-valued `solution_path` — each asserting the workspace root is returned so auto-discovery is provably preserved. Written first, they failed with `left: <root>` / `right: <root>/app/App.sln` before `open_target` existed. **`WorkspaceManagerSingleFileTests`** covers defect 2. `Directory_without_project_or_root_file_succeeds_for_lazy_loading` asserts `workspace/open` on a projectless directory returns success *and* that `IsLoaded` stays false, so nothing claims a workspace exists before one does. `Independent_scripts_in_projectless_directory_are_lazily_loaded_simultaneously` then opens two loose files and asserts **both** report zero error diagnostics — that is what proves the second file adds a project rather than replacing the first, which the previous `_adhocWorkspace` reassignment would have done. **`Ambiguous_multi_solution_root_is_an_error_not_lazy_loading`** is the guard for 2b, and it distinguishes the two "no target" causes at the level that matters: it writes `app/App.sln` and `other/Other.sln` into one root, opens the root, and asserts the result is an error whose message contains both candidate names *and* the string `solution_path`. Asserting the message content, not merely `IsError`, is what proves the failure is actionable rather than the old misleading "no solution found" text. Written first, it failed on `Assert.True(result.IsError)` — the ambiguous root was loading lazily — and passes after the fix, with the whole 41-test `WorkspaceManagerSingleFileTests`/`SolutionLoaderTests`/`WorkspaceManagerDegenerateCoverageTests` set green. Critically, `Multiple_sln_in_subdirs_should_not_pick_arbitrary_one` is untouched and still passes: the sidecar's refusal to guess is preserved, and the fix is in surfacing the choice, not in weakening that refusal. **`MetadataDecompilerTests.DecompileTypeToFile_sanitizes_colons_identically_on_every_platform`** covers defect 3 by decompiling a real BCL type with the display name `global::System.Int32` and asserting the resulting file name equals exactly `global__System.Int32.cs`. Asserting the full name rather than merely the absence of a colon is what makes it a cross-platform contract: it fails on Ubuntu under the previous implementation while passing on Windows, which is precisely the divergence that shipped unnoticed. **`fsi-build-output-e2e.test.ts` — `createAnsiStrippingChannel strips ANSI from the level-tagged log methods`** covers the widened channel. Its `RecordingChannel` implements the full `LogOutputChannel` surface and captures what each of `trace`/`debug`/`info`/`warn`/`error` forwards, asserting the escape codes are gone from the recorded strings — so the added methods are proven to sanitize, not merely to exist and satisfy the compiler. It also asserts an `Error` argument survives intact and that `logLevel` delegates live rather than snapshotting. That test earned its keep immediately: the first version of it silently asserted nothing, because the ESC bytes were lost from the string literals and `stripAnsi` correctly leaves a bare `[2m` alone. It failed loudly against a correct implementation, which is how the missing bytes were caught; the literals now embed real ESC control bytes, matching the convention the neighbouring `stripAnsi` assertions already use. ### Gates run locally Every command `ci-lint.yml`, `ci-rust.yml`, `ci-dotnet.yml`, and `ci-vsix-windows.yml` run was executed on Windows against this branch: | Gate | Result | |---|---| | `_lint-rust` / `_lint-zed` (clippy `-D warnings`, fmt) | pass | | `csharpier check` / `_lint-dotnet` (`-warnaserror`) | pass, 0 warnings | | sidecar pack smoke (both sidecars) | pass | | prettier / eslint / `tsc --noEmit` / chunk check | pass | | Rust shards 1+2 | 651 tests, 651 passed | | Rust coverage gate | 95.88% vs 94.0% effective | | version contract (`--version`, `--version --json`) | pass | | `_test-dotnet` | 898 tests (466 C#, 340 F#, 92 Common), all passed | | VS Code chunks `lifecycle` / `lsp` / `profiler` / `explorer` | 62 / 63 / 60 / 167 passing, 0 failing | Two caveats, both pre-existing on `main` and neither touched by this branch: - **`VS Code (Windows) / explorer` is expected red in CI.** It also failed on #189 and #194 and is tracked as #191 (workspaceSymbols serving stale data after rename). It passes 167/167 locally, so the CI failure is runner-specific. Note that #194 merged with this check already failing, because `ci.yml` triggers only on PRs into `main` and #194 targeted a topic branch — the full pipeline never gated it. - The Common package's local line coverage (92.18%) sits under its 94.02% effective threshold **on Windows only**, because `IpcConnection/<ConnectUnixSocketAsync>` (70%), `IpcListener` (63.88%), and `MessageRouter/<HandleAsync>` (54.5%) are Linux transport paths that cannot execute there. `MetadataDecompiler`, the only Common file this branch touches, is at **100%**, and the Ubuntu `.NET / Sidecars` job clears the gate. --------- Co-authored-by: Muhammad Ashar <ashar.builds@gmail.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
TLDR
Adds first-class editor support for project-less .NET code — .NET 10 file-based apps (
.cswith#:directives), C# scripts (.csx) and F# scripts (.fsx) — and splits the monolithic CI workflow into five reusable, independently-gating pipelines.Builds on #188 by @ashar-builds, who first identified that SharpLsp hard-failed on a
.csfile with no.csproj. That diagnosis was correct; this PR redesigns the fix around the SDK's actual closure semantics and extends it to.csxand.fsx.Details
Scripting and file-based apps —
docs/specs/SCRIPTING-FILEBASED-SPEC.md(new, 363 lines)Full spec derived from the .NET file-based apps documentation, with hierarchical IDs (
[FILEBASED-*],[CSX-*],[FSX-*],[SCRIPT-*]) cross-referenced from every implementing file. Paired plan atdocs/plans/SCRIPTING-FILEBASED-PLAN.mdtracks what shipped vs. what is phase 2/3.FileLevelDirectives.cs(new) — parses all five#:directives (sdk,package,project,property,include) off the Roslyn CST, never by scanning text: Roslyn lexes#:asIgnoredDirectiveTriviaSyntaxand#!asShebangDirectiveTriviaSyntax. No regex, no string matching against source.[FILEBASED-DIRECTIVES]DocumentClosure.cs(new) — the closure of a file-based app is the root file plus its#:includegraph, not every.csin the directory.[SCRIPT-ANTIPATTERN]documents why the directory-scan approach is wrong: two independent apps in one folder would fight overMain. Supports literal, glob (*.cs) and recursive-glob (**/*.cs) includes, resolves.csx#loadgraphs, and terminates on cycles. Bounded at 64 files / 8 include levels, degrading with a logged issue rather than failing the load.WorkspaceManager.SingleFile.cs(new) — builds anAdhocWorkspaceper model:SourceCodeKind.Regularwith theFileBasedProgramfeature flag — without it Roslyn reports CS9314/CS9313 for the shebang and directives. Implicit usings are emitted as a synthetic generated document becauseCSharpCompilationOptions.Usingsis honoured only forSourceCodeKind.Script..csxparses asSourceCodeKind.Scriptper-document (kind does not inherit from project parse options), with Roslyn's ten default script imports and aSourceFileResolverrooted at the script directory, without which every#loadreports CS8099.AdhocWorkspaceis now disposed on reopen (was leaked).FSharpWorkspace.fs—.fsx/.fsscriptload throughFSharpChecker.GetProjectOptionsFromScriptinstead of hard-failing with "No .fsproj found". FCS computes the#loadclosure itself and definesINTERACTIVE/EDITINGbut notCOMPILED, so#if INTERACTIVEcode is live rather than greyed out.src/main.rs— fixes a latch bug where opening any unsupported document (a.md, a.json) setworkspace_initialized, permanently suppressing workspace init for the real code that followed. Addssidecar_for_pathso a document routes to the sidecar owning its language, plus health-check ordering for lazily-started sidecars.[SCRIPT-ROUTE-LAZY],[SCRIPT-ROUTE-TARGET],[SCRIPT-ROUTE-HEALTH]SolutionLoader.cs— gated on project extensions so a directory containing only a file-based app no longer reports a bogus "no project found" failure, and genuinely ambiguous multi-solution directories now error instead of picking arbitrarily.Known limit, documented in the plan: references are BCL-only (
Basic.Reference.Assemblies.Net100).#:packagesymbols do not bind until the synthesized-project + restore path lands.[FILEBASED-REFERENCES-FALLBACK]CI pipeline split —
[DIST-CI-LAYOUT]ci.yml(349 lines removed) split into five reusable workflows —ci-lint,ci-dotnet,ci-rust,ci-vsix,ci-vsix-windows— so a failure names the tier that broke instead of one opaque job.test-chunks.json+scripts/vsix-test-chunks.mjs— the 36 VS Code suites are partitioned into 7 Windows chunks.make _check-vsix-chunksfails the build if any suite belongs to no chunk, so a newly added suite cannot silently skip Windows coverage.[DIST-CI-WIN-VSIX]scripts/purge-path-binaries.sh— deletes any SharpLsp binary leaked onto the runner PATH, so the VS Code host can only resolve the freshly-staged bundled artifact. A dev copy on PATH silently substitutes itself for the artifact under test and turns a broken bundle green.[DIST-CI-SMOKE]Debugger bundling —
[DIST-DEBUGGER-BUNDLE]scripts/fetch-netcoredbg.shstages a platform-matchednetcoredbginto the VSIX at package time;debug.tsresolves the bundled adapter.THIRD-PARTY-NOTICES.md(new) carries the redistribution notices.New enforced lints
BannedSymbols.txt— activatesBannedApiAnalyzersRS0030 (error under-warnaserror) againstDateTime.Now/Today/DateTimeOffset.Now(timezone-dependent, non-reproducible in tests) andThread.Sleep(the sidecars are async end-to-end; blocking a pool thread risks starvation).clippy::print_stdout = "deny"— an LSP server speaks JSON-RPC over stdio, so a strayprintln!corrupts the protocol frame.print_stderris deliberately not denied; stderr is the editor's log panel and the correct sink for pre-tracingbootstrap errors.Also
Profiler flame-graph e2e test (
tests/e2e_modules/profiler.rs), dependabot group bumps, Windows EOL normalisation for the scaffolding suite.How Do The Automated Tests Prove It Works?
WorkspaceManagerSingleFileTests.cs— 15 coarse e2e tests, real files on disk, no mocks.These replace an inherited test that was vacuous:
GetDiagnosticsAsyncreturns a successResultcarrying a list, and returnsOk([])for an unknown document, so the originalAssert.False(diags.IsError)passed with zero references loaded. Every assertion below is on actual Roslyn binding output.FileBasedApp_resolves_bcl_symbols_with_no_errors— BCL symbols bind; asserts no CS0103/CS0246 rather than merely "no exception".FileBasedApp_shebang_produces_no_diagnostic— proves theFileBasedProgramfeature flag is live; without it this fails with CS9314.FileBasedApp_full_directive_header_produces_no_errors— exercises everyClassifyKeywordarm and bothSplitOnbranches:#:sdk,#:package Name@Version,#:package Name,#:property Name=Value,#:property Name,#:project.FileBasedApp_unresolvable_directives_still_bind_the_rest_of_the_file—#:frobnicate, an MSBuild-property include and a missing-file include degrade gracefully; asserts no CS0103, i.e. the rest of the file still binds.FileBasedApp_include_directive_pulls_referenced_file_into_closure,..._glob_include_pulls_every_match_into_the_closure,..._recursive_glob_include_reaches_nested_files— assert the included types actually resolve (One.V() + Two.V()compiles), not just that a path was collected.FileBasedApp_include_cycle_terminates— a mutually-including pair completes instead of hanging.FileBasedApp_closure_file_count_is_bounded— 70 files on disk, asserts exactly 64 in the closure plus the recorded "exceeded 64 files" issue.FileBasedApp_include_depth_is_bounded— a 12-deep chain records the nesting-limit issue.Two_file_based_apps_in_one_directory_do_not_collide— the regression that the directory-scan design would have shipped: twoMains in one folder.CsxScript_loads_with_script_semantics—#loadresolves and script-kind semantics apply; fails with "#load is only allowed in scripts" if per-documentSourceCodeKindregresses.Directory_without_project_or_root_file_is_an_error,Unsupported_document_is_a_load_error,Classify_maps_extensions_to_compilation_models.FSharpScriptTests.fs— 3 tests.standalone fsx loads without an fsproj(this hard-failed before),fsx load closure includes the loaded script(assertsLib.fsxandMain.fsxare in FCSSourceFiles),fsx defines INTERACTIVE and EDITING but not COMPILED(asserts onOtherOptions).Suite totals: 895 tests pass — 91 Common, 464 C#, 340 F#.
Coverage ratchet:
sharplsp-sidecar-csharp95.08%, above the stored 95.0% threshold. The new bound/degradation paths were covered by adding tests, and dead code (FindMisplaced/FirstCodeTokenStart— a detector with no consumer) was deleted rather than shipped uncovered. The threshold was not lowered.CI chunk gate:
make _check-vsix-chunksreports36 VS Code suites: 7 Windows chunks, 3 excludedand fails if that partition is ever incomplete.Local gates green:
cargo fmt,cargo clippy --all-targets -D warnings, zed clippy,csharpier check(92 files),dotnet build -warnaserror(0 warnings),prettier --check, eslint,tsc --noEmit.Closes #188.