Skip to content

feat(scripting): .NET file-based apps, .csx and .fsx support (#188) + CI pipeline split - #189

Merged
MelbourneDeveloper merged 48 commits into
mainfrom
fixes
Jul 28, 2026
Merged

feat(scripting): .NET file-based apps, .csx and .fsx support (#188) + CI pipeline split#189
MelbourneDeveloper merged 48 commits into
mainfrom
fixes

Conversation

@MelbourneDeveloper

Copy link
Copy Markdown
Collaborator

TLDR

Adds first-class editor support for project-less .NET code — .NET 10 file-based apps (.cs with #: directives), C# scripts (.csx) and F# scripts (.fsx) — and splits the monolithic CI workflow into five reusable, independently-gating pipelines.

Builds on #188 by @ashar-builds, who first identified that SharpLsp hard-failed on a .cs file with no .csproj. That diagnosis was correct; this PR redesigns the fix around the SDK's actual closure semantics and extends it to .csx and .fsx.

Details

Scripting and file-based apps — docs/specs/SCRIPTING-FILEBASED-SPEC.md (new, 363 lines)

Full spec derived from the .NET file-based apps documentation, with hierarchical IDs ([FILEBASED-*], [CSX-*], [FSX-*], [SCRIPT-*]) cross-referenced from every implementing file. Paired plan at docs/plans/SCRIPTING-FILEBASED-PLAN.md tracks what shipped vs. what is phase 2/3.

FileLevelDirectives.cs (new) — parses all five #: directives (sdk, package, project, property, include) off the Roslyn CST, never by scanning text: Roslyn lexes #: as IgnoredDirectiveTriviaSyntax and #! as ShebangDirectiveTriviaSyntax. No regex, no string matching against source. [FILEBASED-DIRECTIVES]

DocumentClosure.cs (new) — the closure of a file-based app is the root file plus its #:include graph, not every .cs in the directory. [SCRIPT-ANTIPATTERN] documents why the directory-scan approach is wrong: two independent apps in one folder would fight over Main. Supports literal, glob (*.cs) and recursive-glob (**/*.cs) includes, resolves .csx #load graphs, and terminates on cycles. Bounded at 64 files / 8 include levels, degrading with a logged issue rather than failing the load.

WorkspaceManager.SingleFile.cs (new) — builds an AdhocWorkspace per model:

  • File-based apps parse as SourceCodeKind.Regular with the FileBasedProgram feature flag — without it Roslyn reports CS9314/CS9313 for the shebang and directives. Implicit usings are emitted as a synthetic generated document because CSharpCompilationOptions.Usings is honoured only for SourceCodeKind.Script.
  • .csx parses as SourceCodeKind.Script per-document (kind does not inherit from project parse options), with Roslyn's ten default script imports and a SourceFileResolver rooted at the script directory, without which every #load reports CS8099.
  • The previous AdhocWorkspace is now disposed on reopen (was leaked).

FSharpWorkspace.fs.fsx/.fsscript load through FSharpChecker.GetProjectOptionsFromScript instead of hard-failing with "No .fsproj found". FCS computes the #load closure itself and defines INTERACTIVE/EDITING but not COMPILED, so #if INTERACTIVE code is live rather than greyed out.

src/main.rs — fixes a latch bug where opening any unsupported document (a .md, a .json) set workspace_initialized, permanently suppressing workspace init for the real code that followed. Adds sidecar_for_path so a document routes to the sidecar owning its language, plus health-check ordering for lazily-started sidecars. [SCRIPT-ROUTE-LAZY], [SCRIPT-ROUTE-TARGET], [SCRIPT-ROUTE-HEALTH]

SolutionLoader.cs — gated on project extensions so a directory containing only a file-based app no longer reports a bogus "no project found" failure, and genuinely ambiguous multi-solution directories now error instead of picking arbitrarily.

Known limit, documented in the plan: references are BCL-only (Basic.Reference.Assemblies.Net100). #:package symbols do not bind until the synthesized-project + restore path lands. [FILEBASED-REFERENCES-FALLBACK]

CI pipeline split — [DIST-CI-LAYOUT]

ci.yml (349 lines removed) split into five reusable workflows — ci-lint, ci-dotnet, ci-rust, ci-vsix, ci-vsix-windows — so a failure names the tier that broke instead of one opaque job.

  • test-chunks.json + scripts/vsix-test-chunks.mjs — the 36 VS Code suites are partitioned into 7 Windows chunks. make _check-vsix-chunks fails the build if any suite belongs to no chunk, so a newly added suite cannot silently skip Windows coverage. [DIST-CI-WIN-VSIX]
  • scripts/purge-path-binaries.sh — deletes any SharpLsp binary leaked onto the runner PATH, so the VS Code host can only resolve the freshly-staged bundled artifact. A dev copy on PATH silently substitutes itself for the artifact under test and turns a broken bundle green. [DIST-CI-SMOKE]

Debugger bundling — [DIST-DEBUGGER-BUNDLE]

scripts/fetch-netcoredbg.sh stages a platform-matched netcoredbg into the VSIX at package time; debug.ts resolves the bundled adapter. THIRD-PARTY-NOTICES.md (new) carries the redistribution notices.

New enforced lints

  • BannedSymbols.txt — activates BannedApiAnalyzers RS0030 (error under -warnaserror) against DateTime.Now/Today/DateTimeOffset.Now (timezone-dependent, non-reproducible in tests) and Thread.Sleep (the sidecars are async end-to-end; blocking a pool thread risks starvation).
  • clippy::print_stdout = "deny" — an LSP server speaks JSON-RPC over stdio, so a stray println! corrupts the protocol frame. print_stderr is deliberately not denied; stderr is the editor's log panel and the correct sink for pre-tracing bootstrap errors.

Also

Profiler flame-graph e2e test (tests/e2e_modules/profiler.rs), dependabot group bumps, Windows EOL normalisation for the scaffolding suite.

How Do The Automated Tests Prove It Works?

WorkspaceManagerSingleFileTests.cs — 15 coarse e2e tests, real files on disk, no mocks.

These replace an inherited test that was vacuous: GetDiagnosticsAsync returns a success Result carrying a list, and returns Ok([]) for an unknown document, so the original Assert.False(diags.IsError) passed with zero references loaded. Every assertion below is on actual Roslyn binding output.

  • FileBasedApp_resolves_bcl_symbols_with_no_errors — BCL symbols bind; asserts no CS0103/CS0246 rather than merely "no exception".
  • FileBasedApp_shebang_produces_no_diagnostic — proves the FileBasedProgram feature flag is live; without it this fails with CS9314.
  • FileBasedApp_full_directive_header_produces_no_errors — exercises every ClassifyKeyword arm and both SplitOn branches: #:sdk, #:package Name@Version, #:package Name, #:property Name=Value, #:property Name, #:project.
  • FileBasedApp_unresolvable_directives_still_bind_the_rest_of_the_file#:frobnicate, an MSBuild-property include and a missing-file include degrade gracefully; asserts no CS0103, i.e. the rest of the file still binds.
  • FileBasedApp_include_directive_pulls_referenced_file_into_closure, ..._glob_include_pulls_every_match_into_the_closure, ..._recursive_glob_include_reaches_nested_files — assert the included types actually resolve (One.V() + Two.V() compiles), not just that a path was collected.
  • FileBasedApp_include_cycle_terminates — a mutually-including pair completes instead of hanging.
  • FileBasedApp_closure_file_count_is_bounded — 70 files on disk, asserts exactly 64 in the closure plus the recorded "exceeded 64 files" issue.
  • FileBasedApp_include_depth_is_bounded — a 12-deep chain records the nesting-limit issue.
  • Two_file_based_apps_in_one_directory_do_not_collide — the regression that the directory-scan design would have shipped: two Mains in one folder.
  • CsxScript_loads_with_script_semantics#load resolves and script-kind semantics apply; fails with "#load is only allowed in scripts" if per-document SourceCodeKind regresses.
  • Directory_without_project_or_root_file_is_an_error, Unsupported_document_is_a_load_error, Classify_maps_extensions_to_compilation_models.

FSharpScriptTests.fs — 3 tests. standalone fsx loads without an fsproj (this hard-failed before), fsx load closure includes the loaded script (asserts Lib.fsx and Main.fsx are in FCS SourceFiles), fsx defines INTERACTIVE and EDITING but not COMPILED (asserts on OtherOptions).

Suite totals: 895 tests pass — 91 Common, 464 C#, 340 F#.

Coverage ratchet: sharplsp-sidecar-csharp 95.08%, above the stored 95.0% threshold. The new bound/degradation paths were covered by adding tests, and dead code (FindMisplaced/FirstCodeTokenStart — a detector with no consumer) was deleted rather than shipped uncovered. The threshold was not lowered.

CI chunk gate: make _check-vsix-chunks reports 36 VS Code suites: 7 Windows chunks, 3 excluded and fails if that partition is ever incomplete.

Local gates green: cargo fmt, cargo clippy --all-targets -D warnings, zed clippy, csharpier check (92 files), dotnet build -warnaserror (0 warnings), prettier --check, eslint, tsc --noEmit.

Closes #188.

dependabot Bot and others added 30 commits June 23, 2026 12:15
Bumps the github-actions group with 2 updates:
[actions/checkout](https://github.com/actions/checkout) and
[taiki-e/install-action](https://github.com/taiki-e/install-action).

Updates `actions/checkout` from 6.0.3 to 7.0.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/checkout/releases">actions/checkout's
releases</a>.</em></p>
<blockquote>
<h2>v7.0.0</h2>
<h2>What's Changed</h2>
<ul>
<li>block checking out fork pr for pull_request_target and workflow_run
by <a href="https://github.com/aiqiaoy"><code>@​aiqiaoy</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2454">actions/checkout#2454</a></li>
<li>Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the
minor-actions-dependencies group across 1 directory by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/actions/checkout/pull/2458">actions/checkout#2458</a></li>
<li>Bump flatted from 3.3.1 to 3.4.2 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/actions/checkout/pull/2460">actions/checkout#2460</a></li>
<li>Bump js-yaml from 4.1.0 to 4.2.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/actions/checkout/pull/2461">actions/checkout#2461</a></li>
<li>Bump <code>@​actions/core</code> and
<code>@​actions/tool-cache</code> and Remove uuid by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/actions/checkout/pull/2459">actions/checkout#2459</a></li>
<li>upgrade module to esm and update dependencies by <a
href="https://github.com/aiqiaoy"><code>@​aiqiaoy</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2463">actions/checkout#2463</a></li>
<li>Bump the minor-npm-dependencies group across 1 directory with 3
updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/actions/checkout/pull/2462">actions/checkout#2462</a></li>
<li>getting ready for checkout v7 release by <a
href="https://github.com/aiqiaoy"><code>@​aiqiaoy</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2464">actions/checkout#2464</a></li>
<li>update error wording by <a
href="https://github.com/aiqiaoy"><code>@​aiqiaoy</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2467">actions/checkout#2467</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/aiqiaoy"><code>@​aiqiaoy</code></a> made
their first contribution in <a
href="https://redirect.github.com/actions/checkout/pull/2454">actions/checkout#2454</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/checkout/compare/v6.0.3...v7.0.0">https://github.com/actions/checkout/compare/v6.0.3...v7.0.0</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/actions/checkout/blob/main/CHANGELOG.md">actions/checkout's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<h2>v7.0.0</h2>
<ul>
<li>Block checking out fork PR for pull_request_target and workflow_run
by <a href="https://github.com/aiqiaoy"><code>@​aiqiaoy</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2454">actions/checkout#2454</a></li>
<li>Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the
minor-actions-dependencies group across 1 directory by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/actions/checkout/pull/2458">actions/checkout#2458</a></li>
<li>Bump flatted from 3.3.1 to 3.4.2 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/actions/checkout/pull/2460">actions/checkout#2460</a></li>
<li>Bump js-yaml from 4.1.0 to 4.2.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/actions/checkout/pull/2461">actions/checkout#2461</a></li>
<li>Bump <code>@​actions/core</code> and
<code>@​actions/tool-cache</code> and Remove uuid by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/actions/checkout/pull/2459">actions/checkout#2459</a></li>
<li>upgrade module to esm and update dependencies by <a
href="https://github.com/aiqiaoy"><code>@​aiqiaoy</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2463">actions/checkout#2463</a></li>
<li>Bump the minor-npm-dependencies group across 1 directory with 3
updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/actions/checkout/pull/2462">actions/checkout#2462</a></li>
</ul>
<h2>v6.0.3</h2>
<ul>
<li>Fix checkout init for SHA-256 repositories by <a
href="https://github.com/yaananth"><code>@​yaananth</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2439">actions/checkout#2439</a></li>
<li>fix: expand merge commit SHA regex and add SHA-256 test cases by <a
href="https://github.com/yaananth"><code>@​yaananth</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2414">actions/checkout#2414</a></li>
</ul>
<h2>v6.0.2</h2>
<ul>
<li>Fix tag handling: preserve annotations and explicit fetch-tags by <a
href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2356">actions/checkout#2356</a></li>
</ul>
<h2>v6.0.1</h2>
<ul>
<li>Add worktree support for persist-credentials includeIf by <a
href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2327">actions/checkout#2327</a></li>
</ul>
<h2>v6.0.0</h2>
<ul>
<li>Persist creds to a separate file by <a
href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2286">actions/checkout#2286</a></li>
<li>Update README to include Node.js 24 support details and requirements
by <a href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a>
in <a
href="https://redirect.github.com/actions/checkout/pull/2248">actions/checkout#2248</a></li>
</ul>
<h2>v5.0.1</h2>
<ul>
<li>Port v6 cleanup to v5 by <a
href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2301">actions/checkout#2301</a></li>
</ul>
<h2>v5.0.0</h2>
<ul>
<li>Update actions checkout to use node 24 by <a
href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2226">actions/checkout#2226</a></li>
</ul>
<h2>v4.3.1</h2>
<ul>
<li>Port v6 cleanup to v4 by <a
href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2305">actions/checkout#2305</a></li>
</ul>
<h2>v4.3.0</h2>
<ul>
<li>docs: update README.md by <a
href="https://github.com/motss"><code>@​motss</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1971">actions/checkout#1971</a></li>
<li>Add internal repos for checking out multiple repositories by <a
href="https://github.com/mouismail"><code>@​mouismail</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1977">actions/checkout#1977</a></li>
<li>Documentation update - add recommended permissions to Readme by <a
href="https://github.com/benwells"><code>@​benwells</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2043">actions/checkout#2043</a></li>
<li>Adjust positioning of user email note and permissions heading by <a
href="https://github.com/joshmgross"><code>@​joshmgross</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2044">actions/checkout#2044</a></li>
<li>Update README.md by <a
href="https://github.com/nebuk89"><code>@​nebuk89</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2194">actions/checkout#2194</a></li>
<li>Update CODEOWNERS for actions by <a
href="https://github.com/TingluoHuang"><code>@​TingluoHuang</code></a>
in <a
href="https://redirect.github.com/actions/checkout/pull/2224">actions/checkout#2224</a></li>
<li>Update package dependencies by <a
href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2236">actions/checkout#2236</a></li>
</ul>
<h2>v4.2.2</h2>
<ul>
<li><code>url-helper.ts</code> now leverages well-known environment
variables by <a href="https://github.com/jww3"><code>@​jww3</code></a>
in <a
href="https://redirect.github.com/actions/checkout/pull/1941">actions/checkout#1941</a></li>
<li>Expand unit test coverage for <code>isGhes</code> by <a
href="https://github.com/jww3"><code>@​jww3</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1946">actions/checkout#1946</a></li>
</ul>
<h2>v4.2.1</h2>
<ul>
<li>Check out other refs/* by commit if provided, fall back to ref by <a
href="https://github.com/orhantoy"><code>@​orhantoy</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1924">actions/checkout#1924</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/checkout/commit/9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0"><code>9c091bb</code></a>
update error wording (<a
href="https://redirect.github.com/actions/checkout/issues/2467">#2467</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/1044a6dea927916f2c38ba5aeffbc0a847b1221a"><code>1044a6d</code></a>
getting ready for checkout v7 release (<a
href="https://redirect.github.com/actions/checkout/issues/2464">#2464</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/f0282184c7ce73ab54c7e4ab5a617122602e575f"><code>f028218</code></a>
Bump the minor-npm-dependencies group across 1 directory with 3 updates
(<a
href="https://redirect.github.com/actions/checkout/issues/2462">#2462</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/d914b262ffc244530a203ab40decab34c3abf34d"><code>d914b26</code></a>
upgrade module to esm and update dependencies (<a
href="https://redirect.github.com/actions/checkout/issues/2463">#2463</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/537c7ef99cef6e5ddb5e7ff5d16d14510503801d"><code>537c7ef</code></a>
Bump <code>@​actions/core</code> and <code>@​actions/tool-cache</code>
and Remove uuid (<a
href="https://redirect.github.com/actions/checkout/issues/2459">#2459</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/130a169078a413d3a5246a393625e8e742f387f6"><code>130a169</code></a>
Bump js-yaml from 4.1.0 to 4.2.0 (<a
href="https://redirect.github.com/actions/checkout/issues/2461">#2461</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/7d09575332117a40b46e5e020664df234cd416f3"><code>7d09575</code></a>
Bump flatted from 3.3.1 to 3.4.2 (<a
href="https://redirect.github.com/actions/checkout/issues/2460">#2460</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/0f9f3aa320cb53abeb534aeb54048075d9697a0e"><code>0f9f3aa</code></a>
Bump actions/publish-immutable-action (<a
href="https://redirect.github.com/actions/checkout/issues/2458">#2458</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/f9e715a95fcd1f9253f77dd28f11e88d2d6460c7"><code>f9e715a</code></a>
block checking out fork pr for pull_request_target and workflow_run (<a
href="https://redirect.github.com/actions/checkout/issues/2454">#2454</a>)</li>
<li>See full diff in <a
href="https://github.com/actions/checkout/compare/df4cb1c069e1874edd31b4311f1884172cec0e10...9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0">compare
view</a></li>
</ul>
</details>
<br />

Updates `taiki-e/install-action` from 2.81.11 to 2.82.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/taiki-e/install-action/releases">taiki-e/install-action's
releases</a>.</em></p>
<blockquote>
<h2>2.82.2</h2>
<ul>
<li>
<p>Update <code>xh@latest</code> to 0.26.1.</p>
</li>
<li>
<p>Update <code>uv@latest</code> to 0.11.23.</p>
</li>
<li>
<p>Update <code>trivy@latest</code> to 0.71.2.</p>
</li>
<li>
<p>Update <code>sccache@latest</code> to 0.16.0.</p>
</li>
</ul>
<h2>2.82.1</h2>
<ul>
<li>
<p>Update <code>vacuum@latest</code> to 0.29.4.</p>
</li>
<li>
<p>Update <code>uv@latest</code> to 0.11.22.</p>
</li>
<li>
<p>Update <code>osv-scanner@latest</code> to 2.4.0.</p>
</li>
<li>
<p>Update <code>mise@latest</code> to 2026.6.11.</p>
</li>
<li>
<p>Update <code>martin@latest</code> to 1.11.0.</p>
</li>
<li>
<p>Update <code>just@latest</code> to 1.53.0.</p>
</li>
<li>
<p>Update <code>cargo-zigbuild@latest</code> to 0.23.0.</p>
</li>
</ul>
<h2>2.82.0</h2>
<ul>
<li>
<p>Support <code>cargo-vet</code>. (<a
href="https://redirect.github.com/taiki-e/install-action/pull/1908">#1908</a>,
thanks <a
href="https://github.com/jakewimmer"><code>@​jakewimmer</code></a>)</p>
</li>
<li>
<p>Support <code>cargo-crap</code>. (<a
href="https://redirect.github.com/taiki-e/install-action/pull/1905">#1905</a>,
thanks <a
href="https://github.com/BartoszCiesla"><code>@​BartoszCiesla</code></a>)</p>
</li>
<li>
<p>Support <code>cargo-leptos</code>. (<a
href="https://redirect.github.com/taiki-e/install-action/pull/1903">#1903</a>,
thanks <a
href="https://github.com/404Simon"><code>@​404Simon</code></a>)</p>
</li>
<li>
<p>Update <code>kingfisher@latest</code> to 1.103.0.</p>
</li>
<li>
<p>Update <code>cargo-xwin@latest</code> to 0.23.0.</p>
</li>
<li>
<p>Update <code>wasmtime@latest</code> to 45.0.2.</p>
</li>
<li>
<p>Update <code>cargo-deny@latest</code> to 0.19.9.</p>
</li>
<li>
<p>Update <code>prek@latest</code> to 0.4.5.</p>
</li>
<li>
<p>Update <code>trivy@latest</code> to 0.71.1.</p>
</li>
<li>
<p>Update <code>mise@latest</code> to 2026.6.10.</p>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md">taiki-e/install-action's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<p>All notable changes to this project will be documented in this
file.</p>
<p>This project adheres to <a href="https://semver.org">Semantic
Versioning</a>.</p>
<!-- raw HTML omitted -->
<h2>[Unreleased]</h2>
<h2>[2.82.2] - 2026-06-21</h2>
<ul>
<li>
<p>Update <code>xh@latest</code> to 0.26.1.</p>
</li>
<li>
<p>Update <code>uv@latest</code> to 0.11.23.</p>
</li>
<li>
<p>Update <code>trivy@latest</code> to 0.71.2.</p>
</li>
<li>
<p>Update <code>sccache@latest</code> to 0.16.0.</p>
</li>
</ul>
<h2>[2.82.1] - 2026-06-20</h2>
<ul>
<li>
<p>Update <code>vacuum@latest</code> to 0.29.4.</p>
</li>
<li>
<p>Update <code>uv@latest</code> to 0.11.22.</p>
</li>
<li>
<p>Update <code>osv-scanner@latest</code> to 2.4.0.</p>
</li>
<li>
<p>Update <code>mise@latest</code> to 2026.6.11.</p>
</li>
<li>
<p>Update <code>martin@latest</code> to 1.11.0.</p>
</li>
<li>
<p>Update <code>just@latest</code> to 1.53.0.</p>
</li>
<li>
<p>Update <code>cargo-zigbuild@latest</code> to 0.23.0.</p>
</li>
</ul>
<h2>[2.82.0] - 2026-06-17</h2>
<ul>
<li>
<p>Support <code>cargo-vet</code>. (<a
href="https://redirect.github.com/taiki-e/install-action/pull/1908">#1908</a>,
thanks <a
href="https://github.com/jakewimmer"><code>@​jakewimmer</code></a>)</p>
</li>
<li>
<p>Support <code>cargo-crap</code>. (<a
href="https://redirect.github.com/taiki-e/install-action/pull/1905">#1905</a>,
thanks <a
href="https://github.com/BartoszCiesla"><code>@​BartoszCiesla</code></a>)</p>
</li>
<li>
<p>Support <code>cargo-leptos</code>. (<a
href="https://redirect.github.com/taiki-e/install-action/pull/1903">#1903</a>,
thanks <a
href="https://github.com/404Simon"><code>@​404Simon</code></a>)</p>
</li>
<li>
<p>Update <code>kingfisher@latest</code> to 1.103.0.</p>
</li>
<li>
<p>Update <code>cargo-xwin@latest</code> to 0.23.0.</p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/taiki-e/install-action/commit/9e1e5806d4a4822de933115878265be9aaa786d9"><code>9e1e580</code></a>
Release 2.82.2</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/788896b6163ee187bf02f51161e573dbc028dba0"><code>788896b</code></a>
Update zizmor manifest</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/7631577b669c94d73e58cb9f217d0f56abd33a48"><code>7631577</code></a>
Update <code>xh@latest</code> to 0.26.1</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/e0f1a05cc9f43f4fd57d15fe7ee20ca5b78f65fc"><code>e0f1a05</code></a>
Update <code>uv@latest</code> to 0.11.23</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/3cda1e20d17fde3f9958653d219495e0591233ec"><code>3cda1e2</code></a>
Update <code>trivy@latest</code> to 0.71.2</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/11ac3210af3c20497864c3d27d4499b6a7108098"><code>11ac321</code></a>
Update tombi manifest</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/b5f9e335d3eaba5117342d9d9fda485aea29c524"><code>b5f9e33</code></a>
Update <code>sccache@latest</code> to 0.16.0</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/4e48cd5f5170589da6cad450be3e62ca61534cc1"><code>4e48cd5</code></a>
Update cargo-tarpaulin manifest</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/e0a923573389b28b6cefdbe8309332b471f55583"><code>e0a9235</code></a>
Update cargo-rdme manifest</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/8b3c737da4b541bf0fb5a3e0488ff20535badac9"><code>8b3c737</code></a>
Release 2.82.1</li>
<li>Additional commits viewable in <a
href="https://github.com/taiki-e/install-action/compare/15449e3094499af05d8d964a1c884208e4b8b595...9e1e5806d4a4822de933115878265be9aaa786d9">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps the vscode-extension group in /editors/vscode with 8 updates:

| Package | From | To |
| --- | --- | --- |
|
[fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser)
| `5.9.0` | `5.9.3` |
|
[vscode-languageclient](https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client)
| `9.0.1` | `10.0.0` |
|
[@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node)
| `25.9.3` | `26.0.0` |
|
[@types/vscode](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/vscode)
| `1.120.0` | `1.125.0` |
|
[@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin)
| `8.61.1` | `8.62.0` |
|
[@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser)
| `8.61.1` | `8.62.0` |
| [@vscode/test-cli](https://github.com/Microsoft/vscode-test-cli) |
`0.0.12` | `0.0.15` |
|
[typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint)
| `8.61.1` | `8.62.0` |

Updates `fast-xml-parser` from 5.9.0 to 5.9.3
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/NaturalIntelligence/fast-xml-parser/releases">fast-xml-parser's
releases</a>.</em></p>
<blockquote>
<h2>v5.9.3</h2>
<h2>What's Changed</h2>
<ul>
<li>Harden GitHub Actions workflows by <a
href="https://github.com/martincostello"><code>@​martincostello</code></a>
in <a
href="https://redirect.github.com/NaturalIntelligence/fast-xml-parser/pull/841">NaturalIntelligence/fast-xml-parser#841</a></li>
<li>GitHub Actions workflow fixes by <a
href="https://github.com/martincostello"><code>@​martincostello</code></a>
in <a
href="https://redirect.github.com/NaturalIntelligence/fast-xml-parser/pull/844">NaturalIntelligence/fast-xml-parser#844</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/martincostello"><code>@​martincostello</code></a>
made their first contribution in <a
href="https://redirect.github.com/NaturalIntelligence/fast-xml-parser/pull/841">NaturalIntelligence/fast-xml-parser#841</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.9.2...v5.9.3">https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.9.2...v5.9.3</a></p>
<h2>v5.9.2</h2>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.9.1...v5.9.2">https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.9.1...v5.9.2</a></p>
<h2>v5.9.1</h2>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.9.0...v5.9.1">https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.9.0...v5.9.1</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md">fast-xml-parser's
changelog</a>.</em></p>
<blockquote>
<p><!-- raw HTML omitted -->Note: If you find missing information about
particular minor version, that version must have been changed without
any functional change in this library.<!-- raw HTML omitted --></p>
<p>Note: Due to some last quick changes on v4, detail of v4.5.3 &amp;
v4.5.4 are not updated here. v4.5.4x is the last tag of v4 in github
repository. I'm extremely sorry for the confusion</p>
<p>*<em>5.9.3 / 2026-06-19</em></p>
<ul>
<li>update strnum</li>
</ul>
<p>*<em>5.9.2 / 2026-06-17</em></p>
<ul>
<li>dummy release to test changes in github action</li>
</ul>
<p>*<em>5.9.1 / 2026-06-17</em></p>
<ul>
<li>dummy release to test release from github action</li>
</ul>
<p>*<em>5.9.0 / 2026-06-15</em></p>
<ul>
<li>update strnum to 2.3.0
<ul>
<li>you can set hex, binary, enotation, infinity, unicode</li>
</ul>
</li>
<li>validate unsafe HTML or XML data in doctype entities unsing
'is-unsafe' library.
User can override rules by overriding EntityDecoder.</li>
</ul>
<p>*<em>5.8.0 / 2026-05-12</em></p>
<ul>
<li>integrate xml-naming to validate DOCTYPE entity name and notation
name (using qname becaue of backward compatibility)
<ul>
<li>This will consider xml-version as well. '1.0' is default</li>
</ul>
</li>
<li>update strnum to 2.3.0
<ul>
<li>You can set octal and binary parsing which is bydeault off</li>
</ul>
</li>
<li>update fast-xml-builder to 1.2.0
<ul>
<li>can sanitize tag names if found invalid</li>
<li>fix format output</li>
</ul>
</li>
</ul>
<p><strong>5.7.3 / 2006-05-05</strong></p>
<ul>
<li>fix: alwaysCreateTextNode should create text node when attributes
are present for self closing node</li>
<li>fix stop node expression when ns prefix is removed (found by <a
href="https://github.com/iruizsalinas">iruizsalinas</a>)</li>
<li>update XML Builder to 1.1.7</li>
<li>mark addEntity deprecated</li>
</ul>
<p><strong>5.7.2 / 2026-04-25</strong></p>
<ul>
<li>allow numerical external entity for backward compatibility</li>
<li>fix <a
href="https://redirect.github.com/NaturalIntelligence/fast-xml-parser/issues/705">#705</a>:
attributesGroupName working with preserveOrder</li>
<li>fix <a
href="https://redirect.github.com/NaturalIntelligence/fast-xml-parser/issues/817">#817</a>:
stackoverflow when tag expression is very long</li>
</ul>
<p><strong>5.7.1 / 2026-04-20</strong></p>
<ul>
<li>fix typo in CJS typing file</li>
</ul>
<p><strong>5.7.0 / 2026-04-17</strong></p>
<ul>
<li>Use <code>@nodable/entities</code> v2.1.0
<ul>
<li>breaking changes
<ul>
<li>single entity scan. You're not allowed to user entity value to form
another entity name.</li>
<li>you cant add numeric external entity</li>
<li>entity error message when expantion limit is crossed might
change</li>
</ul>
</li>
</ul>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/NaturalIntelligence/fast-xml-parser/commit/93a09f108d6f457a84e607a6806a7bfd6abc3e55"><code>93a09f1</code></a>
5.9.3</li>
<li><a
href="https://github.com/NaturalIntelligence/fast-xml-parser/commit/9c1905edd7ea28db70770f758e293fcf079060c5"><code>9c1905e</code></a>
update strnum</li>
<li><a
href="https://github.com/NaturalIntelligence/fast-xml-parser/commit/8d71292a9aaaa8f4a24294e636bd191cfbf4d8a7"><code>8d71292</code></a>
GitHub Actions workflow fixes (<a
href="https://redirect.github.com/NaturalIntelligence/fast-xml-parser/issues/844">#844</a>)</li>
<li><a
href="https://github.com/NaturalIntelligence/fast-xml-parser/commit/784a0442b697e1498e1f3c3fc1a057ad57424858"><code>784a044</code></a>
Harden GitHub Actions workflows (<a
href="https://redirect.github.com/NaturalIntelligence/fast-xml-parser/issues/841">#841</a>)</li>
<li><a
href="https://github.com/NaturalIntelligence/fast-xml-parser/commit/bf9b81a9ab952ce153281e119f99f9953f32bc76"><code>bf9b81a</code></a>
5.9.2</li>
<li><a
href="https://github.com/NaturalIntelligence/fast-xml-parser/commit/232abf54c793a950aeb63fd25934fc7f6008dc86"><code>232abf5</code></a>
update publish action for better security</li>
<li><a
href="https://github.com/NaturalIntelligence/fast-xml-parser/commit/73411fa630cf85798397b3007b5db5bfff2d2d61"><code>73411fa</code></a>
update checklist</li>
<li><a
href="https://github.com/NaturalIntelligence/fast-xml-parser/commit/d57e33bb9aa045813440244cca9d5be837671bba"><code>d57e33b</code></a>
5.9.1</li>
<li><a
href="https://github.com/NaturalIntelligence/fast-xml-parser/commit/3be603a51aac23e2054c92291e188fb30f427220"><code>3be603a</code></a>
testing release from Github</li>
<li><a
href="https://github.com/NaturalIntelligence/fast-xml-parser/commit/b6c41ea401122dc97e3396066771672974622506"><code>b6c41ea</code></a>
Add GitHub Actions workflow for npm publishing</li>
<li>Additional commits viewable in <a
href="https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.9.0...v5.9.3">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~GitHub%20Actions">GitHub Actions</a>, a new
releaser for fast-xml-parser since your current version.</p>
</details>
<br />

Updates `vscode-languageclient` from 9.0.1 to 10.0.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/Microsoft/vscode-languageserver-node/releases">vscode-languageclient's
releases</a>.</em></p>
<blockquote>
<h2>release/client/10.0.0</h2>
<h2>Changes:</h2>
<ul>
<li><a
href="https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client/issues/1786">#1786</a>:
Shorten test dir path</li>
</ul>
<p>This list of changes was <a
href="https://dev.azure.com/monacotools/Monaco/_build/results?buildId=444649&amp;view=logs">auto
generated</a>.</p>
<h2>release/server/10.0.0</h2>
<p>No release notes provided.</p>
<h2>release/client/10.0.0-next.22</h2>
<p>No release notes provided.</p>
<h2>release/client/10.0.0-next.21</h2>
<p>No release notes provided.</p>
<h2>release/client/10.0.0-next.20</h2>
<h2>Changes:</h2>
<h3>Bugs:</h3>
<ul>
<li><a
href="https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client/issues/1717">#1717</a>:
Client requests textDocument/diagnostics before
textDocument/didOpen</li>
</ul>
<h3>Others:</h3>
<ul>
<li><a
href="https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client/issues/1723">#1723</a>:
Fix client request order for textDocument/diagnostics</li>
<li><a
href="https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client/issues/1721">#1721</a>:
Bump webpack from 5.103.0 to 5.105.0</li>
<li><a
href="https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client/issues/1715">#1715</a>:
Update minimatch dependency to version 10.1.2</li>
<li><a
href="https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client/issues/1714">#1714</a>:
Bump <code>@​isaacs/brace-expansion</code> from 5.0.0 to 5.0.1 in
/client</li>
<li><a
href="https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client/issues/1713">#1713</a>:
Bump <code>@​isaacs/brace-expansion</code> from 5.0.0 to 5.0.1 in
/client-node-tests</li>
<li><a
href="https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client/issues/1712">#1712</a>:
Format <code>metaModel.ts</code></li>
<li><a
href="https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client/issues/1711">#1711</a>:
Bump lodash from 4.17.21 to 4.17.23</li>
</ul>
<!-- raw HTML omitted -->
<ul>
<li><a
href="https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client/issues/1710">#1710</a>:
Fix typo in type documentation</li>
<li><a
href="https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client/issues/1708">#1708</a>:
Update to latest security block</li>
<li><a
href="https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client/issues/1707">#1707</a>:
Bump qs from 6.13.1 to 6.14.1</li>
<li><a
href="https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client/issues/1705">#1705</a>:
Merge next release into main</li>
<li><a
href="https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client/issues/1704">#1704</a>:
Update lock files for next LSP release</li>
</ul>
<p>This list of changes was <a
href="https://dev.azure.com/monacotools/Monaco/_build/results?buildId=404211&amp;view=logs">auto
generated</a>.<!-- raw HTML omitted --></p>
<h2>release/client/10.0.0-next.19</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/microsoft/vscode-languageserver-node/commit/2cc5bf0d69cdc7bba0ed82273d5cb11fd046bc49"><code>2cc5bf0</code></a>
Prepare 3.18 release</li>
<li><a
href="https://github.com/microsoft/vscode-languageserver-node/commit/b21577ca1bc02848c2030abe8f4187cd18ee299f"><code>b21577c</code></a>
Merge next release into main (<a
href="https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client/issues/1778">#1778</a>)</li>
<li><a
href="https://github.com/microsoft/vscode-languageserver-node/commit/c08bcae12eaaf70d2eb3489e52ce0ccdb82b005f"><code>c08bcae</code></a>
Update dependencies and improve compatibility (<a
href="https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client/issues/1775">#1775</a>)</li>
<li><a
href="https://github.com/microsoft/vscode-languageserver-node/commit/0a70e0d702845acb69fa487b519a3caf700b7535"><code>0a70e0d</code></a>
Implement TextDocumentSnapshot for delay open notifications (<a
href="https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client/issues/1773">#1773</a>)</li>
<li><a
href="https://github.com/microsoft/vscode-languageserver-node/commit/d4f8eae22e6a33ff63a7fb57e977142d60360bbe"><code>d4f8eae</code></a>
Prevent pulling diagnostics on untitled documents (<a
href="https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client/issues/1772">#1772</a>)</li>
<li><a
href="https://github.com/microsoft/vscode-languageserver-node/commit/f168f85ba0a5d0ac851db5fd3333427aa30126bd"><code>f168f85</code></a>
Update documentation and fix lint errors (<a
href="https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client/issues/1770">#1770</a>)</li>
<li><a
href="https://github.com/microsoft/vscode-languageserver-node/commit/2cf625f1583f2ef45f3e0728e2f1cba432a3cc9f"><code>2cf625f</code></a>
Add optional MarkupContent support to diagnostics (<a
href="https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client/issues/1766">#1766</a>)</li>
<li><a
href="https://github.com/microsoft/vscode-languageserver-node/commit/49c79657d5bd51ec84562424a276a06b056ddd60"><code>49c7965</code></a>
Fixes <a
href="https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client/issues/1751">#1751</a>:
Prevent crash in forgetDocument when disposed (<a
href="https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client/issues/1765">#1765</a>)</li>
<li><a
href="https://github.com/microsoft/vscode-languageserver-node/commit/e0365a7d1646f612e14fc98227ab277e249cb45c"><code>e0365a7</code></a>
Fixes double application of edits during renaming (<a
href="https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client/issues/1764">#1764</a>)</li>
<li><a
href="https://github.com/microsoft/vscode-languageserver-node/commit/5b1151dccda0ff1e704b5ed9bd85f07402e20674"><code>5b1151d</code></a>
Bump brace-expansion from 5.0.3 to 5.0.6 in /client (<a
href="https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client/issues/1762">#1762</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/Microsoft/vscode-languageserver-node/commits/release/client/10.0.0/client">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~microsoft1es">microsoft1es</a>, a new
releaser for vscode-languageclient since your current version.</p>
</details>
<br />

Updates `@types/node` from 25.9.3 to 26.0.0
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node">compare
view</a></li>
</ul>
</details>
<br />

Updates `@types/vscode` from 1.120.0 to 1.125.0
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/vscode">compare
view</a></li>
</ul>
</details>
<br />

Updates `@typescript-eslint/eslint-plugin` from 8.61.1 to 8.62.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/releases">@​typescript-eslint/eslint-plugin's
releases</a>.</em></p>
<blockquote>
<h2>v8.62.0</h2>
<h2>8.62.0 (2026-06-22)</h2>
<h3>🚀 Features</h3>
<ul>
<li>remove redundant package.json &quot;files&quot; (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12444">#12444</a>)</li>
</ul>
<h3>🩹 Fixes</h3>
<ul>
<li>add &quot;files&quot; to rule-schema-to-typescript-types (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12441">#12441</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>Kirk Waiblinger <a
href="https://github.com/kirkwaiblinger"><code>@​kirkwaiblinger</code></a></li>
</ul>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.62.0">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md">@​typescript-eslint/eslint-plugin's
changelog</a>.</em></p>
<blockquote>
<h2>8.62.0 (2026-06-22)</h2>
<h3>🚀 Features</h3>
<ul>
<li>remove redundant package.json &quot;files&quot; (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12444">#12444</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>Kirk Waiblinger <a
href="https://github.com/kirkwaiblinger"><code>@​kirkwaiblinger</code></a></li>
</ul>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.62.0">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/54e285728e5d8cb83fadb8041189f0c3b4ab436a"><code>54e2857</code></a>
chore(release): publish 8.62.0</li>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/81e4c2654c3f4d923766a888691add2c45b5d64a"><code>81e4c26</code></a>
feat: remove redundant package.json &quot;files&quot; (<a
href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin/issues/12444">#12444</a>)</li>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/b784054b6f8fbb51eb742304852b37b0436a8a58"><code>b784054</code></a>
chore: use <code>stableTypeOrdering</code> compiler option (<a
href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin/issues/12427">#12427</a>)</li>
<li>See full diff in <a
href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.62.0/packages/eslint-plugin">compare
view</a></li>
</ul>
</details>
<br />

Updates `@typescript-eslint/parser` from 8.61.1 to 8.62.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/releases">@​typescript-eslint/parser's
releases</a>.</em></p>
<blockquote>
<h2>v8.62.0</h2>
<h2>8.62.0 (2026-06-22)</h2>
<h3>🚀 Features</h3>
<ul>
<li>remove redundant package.json &quot;files&quot; (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12444">#12444</a>)</li>
</ul>
<h3>🩹 Fixes</h3>
<ul>
<li>add &quot;files&quot; to rule-schema-to-typescript-types (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12441">#12441</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>Kirk Waiblinger <a
href="https://github.com/kirkwaiblinger"><code>@​kirkwaiblinger</code></a></li>
</ul>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.62.0">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md">@​typescript-eslint/parser's
changelog</a>.</em></p>
<blockquote>
<h2>8.62.0 (2026-06-22)</h2>
<h3>🚀 Features</h3>
<ul>
<li>remove redundant package.json &quot;files&quot; (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12444">#12444</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>Kirk Waiblinger <a
href="https://github.com/kirkwaiblinger"><code>@​kirkwaiblinger</code></a></li>
</ul>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.62.0">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/54e285728e5d8cb83fadb8041189f0c3b4ab436a"><code>54e2857</code></a>
chore(release): publish 8.62.0</li>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/81e4c2654c3f4d923766a888691add2c45b5d64a"><code>81e4c26</code></a>
feat: remove redundant package.json &quot;files&quot; (<a
href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser/issues/12444">#12444</a>)</li>
<li>See full diff in <a
href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.62.0/packages/parser">compare
view</a></li>
</ul>
</details>
<br />

Updates `@vscode/test-cli` from 0.0.12 to 0.0.15
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/microsoft/vscode-test-cli/blob/main/CHANGELOG.md">@​vscode/test-cli's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/Microsoft/vscode-test-cli/commits">compare
view</a></li>
</ul>
</details>
<br />

Updates `typescript-eslint` from 8.61.1 to 8.62.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/releases">typescript-eslint's
releases</a>.</em></p>
<blockquote>
<h2>v8.62.0</h2>
<h2>8.62.0 (2026-06-22)</h2>
<h3>🚀 Features</h3>
<ul>
<li>remove redundant package.json &quot;files&quot; (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12444">#12444</a>)</li>
</ul>
<h3>🩹 Fixes</h3>
<ul>
<li>add &quot;files&quot; to rule-schema-to-typescript-types (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12441">#12441</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>Kirk Waiblinger <a
href="https://github.com/kirkwaiblinger"><code>@​kirkwaiblinger</code></a></li>
</ul>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.62.0">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md">typescript-eslint's
changelog</a>.</em></p>
<blockquote>
<h2>8.62.0 (2026-06-22)</h2>
<h3>🚀 Features</h3>
<ul>
<li>remove redundant package.json &quot;files&quot; (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12444">#12444</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>Kirk Waiblinger <a
href="https://github.com/kirkwaiblinger"><code>@​kirkwaiblinger</code></a></li>
</ul>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.62.0">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/54e285728e5d8cb83fadb8041189f0c3b4ab436a"><code>54e2857</code></a>
chore(release): publish 8.62.0</li>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/81e4c2654c3f4d923766a888691add2c45b5d64a"><code>81e4c26</code></a>
feat: remove redundant package.json &quot;files&quot; (<a
href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint/issues/12444">#12444</a>)</li>
<li>See full diff in <a
href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.62.0/packages/typescript-eslint">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Updated [FSharp.Core](https://github.com/dotnet/dotnet) from 10.1.204 to
10.1.301.

<details>
<summary>Release notes</summary>

_Sourced from [FSharp.Core's
releases](https://github.com/dotnet/dotnet/releases)._

No release notes found for this version range.

Commits viewable in [compare
view](https://github.com/dotnet/dotnet/commits).
</details>

Updated [Microsoft.Build.Framework](https://github.com/dotnet/msbuild)
from 17.11.48 to 18.7.1.

<details>
<summary>Release notes</summary>

_Sourced from [Microsoft.Build.Framework's
releases](https://github.com/dotnet/msbuild/releases)._

## 18.7.1

## What's Changed
* Fix TraceEngine file contention deadlock in multithreaded mode by
@​JanProvaznik in https://github.com/dotnet/msbuild/pull/13446
* Remove duplicate test cases in MultithreadableTaskAnalyzer by
@​Youssef1313 in https://github.com/dotnet/msbuild/pull/13483
* Ensure ThreadSafeTaskAnalyzer.Tests is considered as a unit test
project by @​Youssef1313 in https://github.com/dotnet/msbuild/pull/13481
* Fix MSBuildTask0002 analyzer warnings in already-migrated tasks by
@​JanProvaznik in https://github.com/dotnet/msbuild/pull/13466
* Fix race conditions in task host path resolution by @​AR-May in
https://github.com/dotnet/msbuild/pull/13485
* Migrate ToolTask and Al task to TaskEnvironment API by @​OvesN in
https://github.com/dotnet/msbuild/pull/13423
* Bump main to 18.7, add vs18.6 to merge flow by @​MichalPavlik in
https://github.com/dotnet/msbuild/pull/13472
* Avoid allocations in GetHashCode implementations by @​DustinCampbell
in https://github.com/dotnet/msbuild/pull/13475
* Add PATs rotation to agentic workflow(s) by @​JanKrivanek in
https://github.com/dotnet/msbuild/pull/13496
* Fix ASP.NET WebSite projects to copy netstandard.dll facade when
required by @​JanProvaznik in
https://github.com/dotnet/msbuild/pull/13058
* Migrate AspNetCompiler to TaskEnvironment API by @​OvesN in
https://github.com/dotnet/msbuild/pull/13424
* Add review workflow by @​JanKrivanek in
https://github.com/dotnet/msbuild/pull/13503
* Strengthen reviewer skill: add step-back analysis dimensions by
@​JanProvaznik in https://github.com/dotnet/msbuild/pull/13504
* Add 'Request Speedometer Perf Run' to VS experimental insertion build
policies by @​Copilot in https://github.com/dotnet/msbuild/pull/13505
* Remove duplicate @ prefix from issueAuthor in GitOps by @​akoeplinger
in https://github.com/dotnet/msbuild/pull/13492
* Improve review aw by @​JanKrivanek in
https://github.com/dotnet/msbuild/pull/13510
* Migrates unit tests to use RoslynCodeTaskFactory to enable running
tests under .NET Core by @​jankratochvilcz in
https://github.com/dotnet/msbuild/pull/13500
* Fix cross-AppDomain TaskItem modifier cache regression by
@​DustinCampbell in https://github.com/dotnet/msbuild/pull/13493
* Discourage review agent from approving PRs by @​JanKrivanek in
https://github.com/dotnet/msbuild/pull/13512
* Stop trying to deploy ValueTuple by @​rainersigwald in
https://github.com/dotnet/msbuild/pull/13507
* Ad-hoc re-sign bootstrap dotnet on macOS to prevent SIGKILL by
@​jankratochvilcz in https://github.com/dotnet/msbuild/pull/13513
* RoslynCodeTaskFactory: Log MSB3753 when task class does not implement
ITask by @​jankratochvilcz in
https://github.com/dotnet/msbuild/pull/13517
* Update gh-aw (upon mcp policy changes) by @​JanKrivanek in
https://github.com/dotnet/msbuild/pull/13526
* Eliminate XmlChildNodes allocations in GetXmlNodeInnerContents by
@​nareshjo in https://github.com/dotnet/msbuild/pull/13509
* Fix telemetry allocation regression: per-engine collector ownership by
@​JanProvaznik in https://github.com/dotnet/msbuild/pull/13516
* Migrate to xunit.v3 by @​Youssef1313 in
https://github.com/dotnet/msbuild/pull/13482
* Fix stray brace in HandleBuildCancel trace string causing MSB1025 by
@​Copilot in https://github.com/dotnet/msbuild/pull/13535
* Bumping to 10.0.4 runtime packages by @​MichalPavlik in
https://github.com/dotnet/msbuild/pull/13533
* Remove early return in GetCanonicalForm, always call System.IO.Path by
@​OvesN in https://github.com/dotnet/msbuild/pull/13532
* Do not overwrite GetCopyToOutputDirectoryItemsDependsOn, just add new…
by @​snechaev in https://github.com/dotnet/msbuild/pull/13474
* Migrate GetReferenceAssemblyPaths task to TaskEnvironment API by
@​OvesN in https://github.com/dotnet/msbuild/pull/13495
* Stabilize ToolTaskThatTimeoutAndRetry test by @​rainersigwald in
https://github.com/dotnet/msbuild/pull/13489
* [automated] Merge branch 'vs18.6' => 'main' by @​github-actions[bot]
in https://github.com/dotnet/msbuild/pull/13506
* Add extra test assertions around tests by @​Youssef1313 in
https://github.com/dotnet/msbuild/pull/13536
* Add static eval for repo skills/agents via skill-validator by
@​JanKrivanek in https://github.com/dotnet/msbuild/pull/13537
* Migrate SGen task to Task environment API by @​OvesN in
https://github.com/dotnet/msbuild/pull/13457
* Fix TerminalLogger assert failure for metaproj files and cached
project eval ID by @​OvesN in
https://github.com/dotnet/msbuild/pull/13480
* Filter out approving review from pr-reviewer agent by @​JanKrivanek in
https://github.com/dotnet/msbuild/pull/13553
* Use a unique task name per invocation to tabilize
RoslynCodeTaskFactory_ReuseCompilation test by @​huulinhnguyen-dev in
https://github.com/dotnet/msbuild/pull/13551
* Brief doc on feedback/logging/data systems by @​rainersigwald in
https://github.com/dotnet/msbuild/pull/13554
* Localized file check-in by OneLocBuild Task: Build definition ID 9434:
Build ID 13881982 by @​dotnet-bot in
https://github.com/dotnet/msbuild/pull/13437
* Stage 3: Forward BuildProjectFile* callbacks from OOP TaskHost to
worker node by @​JanProvaznik in
https://github.com/dotnet/msbuild/pull/13350
* Enable TaskHost Callbacks by default by @​JanProvaznik in
https://github.com/dotnet/msbuild/pull/13579
* Remove unactionable info from reviewer agent by @​JanKrivanek in
https://github.com/dotnet/msbuild/pull/13578
* Enlighten RequiresFramework35SP1Assembly task for multithreaded mode
by @​jankratochvilcz in https://github.com/dotnet/msbuild/pull/13575
* Make SdkResolver-provided environment variables take precedence over
ambient environment by @​Copilot in
https://github.com/dotnet/msbuild/pull/12655
* Add dotnet/skills marketplace and enable plugins by @​Evangelink in
https://github.com/dotnet/msbuild/pull/13582
* The skills/agents check filters-in only touched files by @​JanKrivanek
in https://github.com/dotnet/msbuild/pull/13586
* Fix skill-validation workflow failing when agents directory is deleted
by @​JeremyKuhne in https://github.com/dotnet/msbuild/pull/13592
 ... (truncated)

## 18.6.3

## What's Changed
* Improve cross-platform node discovery for reuse with NodeMode
filtering by @​Copilot in https://github.com/dotnet/msbuild/pull/13256
* Updated common types XSD to remove errors from redefining `Include`
attributes by @​glektarssza in
https://github.com/dotnet/msbuild/pull/13284
* Update VersionPrefix to 18.6.0 + insertion flow by @​MichalPavlik in
https://github.com/dotnet/msbuild/pull/13296
* Log warnings for skipped STR resource keys instead of failing the
build by @​OvesN in https://github.com/dotnet/msbuild/pull/13291
* Isolate MSBuildTaskHost from the rest of MSBuild Codebase by
@​DustinCampbell in https://github.com/dotnet/msbuild/pull/13232
* Improve error messages when ToolTask overrides exit code 0 to -1 due
to logged errors by @​OvesN in
https://github.com/dotnet/msbuild/pull/13303
* Migrate Exec task to TaskEnvironment API by @​Copilot in
https://github.com/dotnet/msbuild/pull/13171
* Enhance crash telemetry with richer diagnostics and EndBuild hang
detection by @​YuliiaKovalova in
https://github.com/dotnet/msbuild/pull/13304
* [main] Update dependencies from nuget/nuget.client by
@​dotnet-maestro[bot] in https://github.com/dotnet/msbuild/pull/13309
* [IBuildEngine callbacks] Stage 2: RequestCores/ReleaseCores by
@​JanProvaznik in https://github.com/dotnet/msbuild/pull/13306
* Only get command line args names on modern .NET by @​baronfel in
https://github.com/dotnet/msbuild/pull/13314
* Detect and correct worker node over-provisioning by @​Copilot in
https://github.com/dotnet/msbuild/pull/13220
* Add App Host Support for MSBuild by @​YuliiaKovalova in
https://github.com/dotnet/msbuild/pull/13175
* [main] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot]
in https://github.com/dotnet/msbuild/pull/13311
* Fix ObjectDisposedException in BuildsWhileBuildIsRunningOnServer test
by @​Copilot in https://github.com/dotnet/msbuild/pull/13316
* Add PoC of pipelines check skill by @​JanKrivanek in
https://github.com/dotnet/msbuild/pull/13242
* Fix CodeSign.MissingSigningCert for xsd/Update-MSBuildXsds.ps1 by
@​JanProvaznik in https://github.com/dotnet/msbuild/pull/13320
* Fix task host launch regressions from apphost support by
@​YuliiaKovalova in https://github.com/dotnet/msbuild/pull/13325
* Enlighten GetFrameworkPath and GetFrameworkSdkPath. by @​AR-May in
https://github.com/dotnet/msbuild/pull/13282
* Add VMR codeflow health check to pipelines skill by @​JanProvaznik in
https://github.com/dotnet/msbuild/pull/13326
* [main] Update dependencies from dotnet/roslyn by @​dotnet-maestro[bot]
in https://github.com/dotnet/msbuild/pull/13281
* Fix GenerateResource to track all ResXFileRef linked files for
incremental builds by @​OvesN in
https://github.com/dotnet/msbuild/pull/13327
* Add escape hatch for not sharing assemblies from tools directory by
@​AR-May in https://github.com/dotnet/msbuild/pull/13305
* Add merge-dependency-updates skill for bot PR triage by @​JanProvaznik
in https://github.com/dotnet/msbuild/pull/13331
* Add diagnostic data to crash/hang telemetry and move null-Project
check after RetrieveFromCache by @​YuliiaKovalova in
https://github.com/dotnet/msbuild/pull/13332
* Update remote-host-object.md with SDK .tlb shipping and IDispatch
example by @​YuliiaKovalova in
https://github.com/dotnet/msbuild/pull/13324
* [main] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot]
in https://github.com/dotnet/msbuild/pull/13341
* improve task migration skill by @​JanProvaznik in
https://github.com/dotnet/msbuild/pull/13234
* Fix telemetry PII concerns: sanitize exceptions, project paths, and
custom names by @​YuliiaKovalova in
https://github.com/dotnet/msbuild/pull/13344
* Use .exe.config when loading "as full Framework" by @​rainersigwald in
https://github.com/dotnet/msbuild/pull/13349
* Fix RequestCores/ReleaseCores fallback in OOP TaskHost: throw
NotImplementedException instead of logging error by @​JanProvaznik in
https://github.com/dotnet/msbuild/pull/13345
* Fixed indentation for
_GetCopyToOutputDirectoryItemsFromTransitiveProjectReferences by
@​CEbbinghaus in https://github.com/dotnet/msbuild/pull/13358
* Fix Unix SessionId in handshake to enable cross-terminal node reuse by
@​JakeRadMSFT in https://github.com/dotnet/msbuild/pull/13354
* Revert "Migrate Exec task to TaskEnvironment API" by @​JanProvaznik in
https://github.com/dotnet/msbuild/pull/13367
* Look for apphost when considering node reuse by @​rainersigwald in
https://github.com/dotnet/msbuild/pull/13368
* Move lots of shared code to Microsoft.Build.Framework by
@​DustinCampbell in https://github.com/dotnet/msbuild/pull/13364
* [main] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot]
in https://github.com/dotnet/msbuild/pull/13353
* Fix ScheduleTimeRecord.AccumulatedTime hang during solution close by
@​YuliiaKovalova in https://github.com/dotnet/msbuild/pull/13375
* Update runtime package references to 10.0.3 by @​Copilot in
https://github.com/dotnet/msbuild/pull/13376
* [main] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot]
in https://github.com/dotnet/msbuild/pull/13378
* Fix ProjectImports.zip regression from shared FileUtilities statics by
@​JanProvaznik in https://github.com/dotnet/msbuild/pull/13382
* Enrich EndBuild hang diagnostics with logging service and submission
state by @​YuliiaKovalova in
https://github.com/dotnet/msbuild/pull/13385
* Enhance path normalization: add handling for consecutive directory
separators by @​tommcdon in https://github.com/dotnet/msbuild/pull/13369
* Move task environment drivers to Framework. by @​AR-May in
https://github.com/dotnet/msbuild/pull/13380
* Update MicrosoftBuildVersion in analyzer template by
@​github-actions[bot] in https://github.com/dotnet/msbuild/pull/13298
* Replace ProjectCacheService null Project crash with diagnostic
telemetry by @​YuliiaKovalova in
https://github.com/dotnet/msbuild/pull/13396
* Add agentic workflow to auto-close PRs older than 180 days by
@​Copilot in https://github.com/dotnet/msbuild/pull/13400
* Localized file check-in by OneLocBuild Task: Build definition ID 9434:
Build ID 13575337 by @​dotnet-bot in
https://github.com/dotnet/msbuild/pull/13394
* Respect MSBUILDPRESERVETOOLTEMPFILES in ProcessExit cleanup by
@​DmitriyShepelev in https://github.com/dotnet/msbuild/pull/13395
 ... (truncated)

## 18.5.4

## What's Changed
* remove dead code by @​SimaTian in
https://github.com/dotnet/msbuild/pull/13125
* Update VersionPrefix to 18.5.0 + insertion flow by @​YuliiaKovalova in
https://github.com/dotnet/msbuild/pull/13134
* add multithreaded task migration agent skill by @​JanProvaznik in
https://github.com/dotnet/msbuild/pull/13131
* Update MicrosoftBuildVersion in analyzer template by
@​github-actions[bot] in https://github.com/dotnet/msbuild/pull/13139
* Migrate VerifyFileHash task to TaskEnvironment API by @​Copilot in
https://github.com/dotnet/msbuild/pull/13112
* Migrate GetFileHash tasks to TaskEnvironment API by @​Copilot in
https://github.com/dotnet/msbuild/pull/13111
* Diagram of VS/SDK component interactions by @​rainersigwald in
https://github.com/dotnet/msbuild/pull/13127
* Fix package validation telemetry assembly resolution warnings by
@​JanProvaznik in https://github.com/dotnet/msbuild/pull/13144
* Adds validation to throw MSB4259 when property references contain
leading or trailing whitespace outside of conditions. by
@​huulinhnguyen-dev in https://github.com/dotnet/msbuild/pull/13076
* Localized file check-in by OneLocBuild Task: Build definition ID 9434:
Build ID 13203963 by @​dotnet-bot in
https://github.com/dotnet/msbuild/pull/13151
* Add MSBuild app host design by @​YuliiaKovalova in
https://github.com/dotnet/msbuild/pull/12857
* Add Stabilize-Release.ps1 script for release process by
@​rainersigwald in https://github.com/dotnet/msbuild/pull/13146
* Fix chained item function empty result comparison in conditions by
@​JanProvaznik in https://github.com/dotnet/msbuild/pull/12901
* [main] Update dependencies from dotnet/roslyn by @​dotnet-maestro[bot]
in https://github.com/dotnet/msbuild/pull/13162
* [main] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot]
in https://github.com/dotnet/msbuild/pull/13160
* Localized file check-in by OneLocBuild Task: Build definition ID 9434:
Build ID 13217622 by @​dotnet-bot in
https://github.com/dotnet/msbuild/pull/13163
* Fix items logged as type name during -getitem argument by @​Copilot in
https://github.com/dotnet/msbuild/pull/13166
* Respect NetCoreSdkRoot property for TaskHostParameters by
@​ViktorHofer in https://github.com/dotnet/msbuild/pull/13176
* Remove MachineIndependent configuration by @​Copilot in
https://github.com/dotnet/msbuild/pull/13180
* Remove redundant #nullable disable from 153 files by @​Copilot in
https://github.com/dotnet/msbuild/pull/13157
* Revert #​13076 "Adds validation to throw MSB4259 when property
references contain leading or trailing whitespace outside of conditions.
by @​JanProvaznik in https://github.com/dotnet/msbuild/pull/13184
* Convert MSBuild.sln to slnx format and upate refs by @​ViktorHofer in
https://github.com/dotnet/msbuild/pull/13185
* Implement IMultiThreadableTask for Move task by @​Copilot in
https://github.com/dotnet/msbuild/pull/13108
* Add hostservices translation support for clr 4 task host by
@​YuliiaKovalova in https://github.com/dotnet/msbuild/pull/13154
* Handle null ProjectFile in InvalidProjectFileException by
@​ViktorHofer in https://github.com/dotnet/msbuild/pull/13179
* Add $(LatestDotNetCoreForMSBuild) infrastructure for centralized
framework targeting by @​Copilot in
https://github.com/dotnet/msbuild/pull/13189
* Fix TaskHost crash when task returns string[] with null elements by
@​JanProvaznik in https://github.com/dotnet/msbuild/pull/13190
* Revert "Refactor Microsoft.IO usage" by @​YuliiaKovalova in
https://github.com/dotnet/msbuild/pull/13194
* Allow null SdkResult from SdkResolver.Resolve by @​rainersigwald in
https://github.com/dotnet/msbuild/pull/13197
* Skill to test changes using just-built MSBuild by @​rainersigwald in
https://github.com/dotnet/msbuild/pull/13202
* Tell Copilot not to allow breaking changes by @​rainersigwald in
https://github.com/dotnet/msbuild/pull/13200
* Make nologo switch accept boolean values to enable explicit logo
display control by @​Copilot in
https://github.com/dotnet/msbuild/pull/12541
* Migrate Unzip task to use TaskEnvironment API by @​Copilot in
https://github.com/dotnet/msbuild/pull/13109
* Migrate ZipDirectory task to TaskEnvironment API by @​Copilot in
https://github.com/dotnet/msbuild/pull/13110
* Localized file check-in by OneLocBuild Task: Build definition ID 9434:
Build ID 13246767 by @​dotnet-bot in
https://github.com/dotnet/msbuild/pull/13204
* Add .NET Standard compatibility warnings by @​ViktorHofer in
https://github.com/dotnet/msbuild/pull/13187
* Make WriteCodeFragment task locale-independent for reproducible builds
by @​Copilot in https://github.com/dotnet/msbuild/pull/13192
* Localized file check-in by OneLocBuild Task: Build definition ID 9434:
Build ID 13249478 by @​dotnet-bot in
https://github.com/dotnet/msbuild/pull/13207
* Fix TerminalLogger IndexOutOfRangeException when replaying binlog with
fewer nodes by @​Copilot in https://github.com/dotnet/msbuild/pull/12809
* Migrate DownloadFile task to use TaskEnvironment API by @​Copilot in
https://github.com/dotnet/msbuild/pull/13113
* Add CI job for 2-stage build with -mt mode by @​Copilot in
https://github.com/dotnet/msbuild/pull/13124
* Localize AbsolutePath validation messages by @​JanProvaznik in
https://github.com/dotnet/msbuild/pull/13115
* Refactor FrameworkFileUtilities for better performance by @​AR-May in
https://github.com/dotnet/msbuild/pull/13143
* Add agent instructions for MSBuild repository by @​YuliiaKovalova in
https://github.com/dotnet/msbuild/pull/13198
* Add GetCanonicalForm to the AbsolutePath API by @​AR-May in
https://github.com/dotnet/msbuild/pull/13088
* Shouldly 4.3.0 by @​rainersigwald in
https://github.com/dotnet/msbuild/pull/13213
* Migrate WriteCodeFragment task to use TaskEnvironment API by @​Copilot
in https://github.com/dotnet/msbuild/pull/13169
* Run the issue-labeler over pull requests using polling by @​Copilot in
https://github.com/dotnet/msbuild/pull/13223
* [main] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot]
in https://github.com/dotnet/msbuild/pull/13225
 ... (truncated)

## 18.4.0

## What's Changed
* Fix terminal logger quiet mode to show project context for
warnings/errors by @​Copilot in
https://github.com/dotnet/msbuild/pull/12930
* Replace OpenTelemetry with Microsoft.VisualStudio.Telemetry for VS by
@​YuliiaKovalova in https://github.com/dotnet/msbuild/pull/12843
* Localized file check-in by OneLocBuild Task: Build definition ID 9434:
Build ID 13050856 by @​dotnet-bot in
https://github.com/dotnet/msbuild/pull/12982
* [main] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot]
in https://github.com/dotnet/msbuild/pull/12979
* eliminate test data serialization warnings by @​JanProvaznik in
https://github.com/dotnet/msbuild/pull/12983
* Add the feature flag that allows users to opt out automatic UTF8
console encoding by @​GangWang01 in
https://github.com/dotnet/msbuild/pull/12637
* Polyfill clean up and source package organization by @​DustinCampbell
in https://github.com/dotnet/msbuild/pull/12977
* Localized file check-in by OneLocBuild Task: Build definition ID 9434:
Build ID 13052367 by @​dotnet-bot in
https://github.com/dotnet/msbuild/pull/12984
* Add documentation for enabling binlog collection via env var by
@​YuliiaKovalova in https://github.com/dotnet/msbuild/pull/12805
* Support multiple binary logs from command line arguments by @​Copilot
in https://github.com/dotnet/msbuild/pull/12706
* Add VcxprojReader.exe to ngenApplications by @​YuliiaKovalova in
https://github.com/dotnet/msbuild/pull/12986
* Add HostServices support in Out-of-Process Task Host by
@​YuliiaKovalova in https://github.com/dotnet/msbuild/pull/12753
* [main] Update dependencies from dotnet/roslyn by @​dotnet-maestro[bot]
in https://github.com/dotnet/msbuild/pull/13002
* [main] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot]
in https://github.com/dotnet/msbuild/pull/13000
* Localized file check-in by OneLocBuild Task: Build definition ID 9434:
Build ID 13078382 by @​dotnet-bot in
https://github.com/dotnet/msbuild/pull/13003
* Add telemetry tracking for task factory names and runtime usage by
@​Copilot in https://github.com/dotnet/msbuild/pull/12989
* [main] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot]
in https://github.com/dotnet/msbuild/pull/12987
* Localized file check-in by OneLocBuild Task: Build definition ID 9434:
Build ID 13079827 by @​dotnet-bot in
https://github.com/dotnet/msbuild/pull/13010
* Snap for VS 18.3 and update branding to VS 18.4 by @​Copilot in
https://github.com/dotnet/msbuild/pull/13005
* [main] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot]
in https://github.com/dotnet/msbuild/pull/13012
* Add telemetry to categorize build failure reasons by @​Copilot in
https://github.com/dotnet/msbuild/pull/13007
* Update MicrosoftBuildVersion in analyzer template by
@​github-actions[bot] in https://github.com/dotnet/msbuild/pull/13011
* Update OptProf drop metadata configuration by @​YuliiaKovalova in
https://github.com/dotnet/msbuild/pull/13020
* Fix MSB1025 error when using DistributedFileLogger (-dfl flag) by
@​Copilot in https://github.com/dotnet/msbuild/pull/13036
* CmdLine parsing was extracted from XMake and the implementation is
visible to dotnet (attempt 2) by @​MichalPavlik in
https://github.com/dotnet/msbuild/pull/12836
* Make task environment path absolutization not throw. by @​AR-May in
https://github.com/dotnet/msbuild/pull/13035
* Fix flaky test TestTerminalLoggerTogetherWithOtherLoggers by @​Copilot
in https://github.com/dotnet/msbuild/pull/13044
* Enlighten more tasks that require no change by @​AR-May in
https://github.com/dotnet/msbuild/pull/13045
* [main] Update dependencies from dotnet/roslyn by @​dotnet-maestro[bot]
in https://github.com/dotnet/msbuild/pull/13050
* [main] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot]
in https://github.com/dotnet/msbuild/pull/13048
* Add support for MSBUILD_LOGGING_ARGS by @​YuliiaKovalova in
https://github.com/dotnet/msbuild/pull/12993
* Fix MSBuildEventSource by @​dfederm in
https://github.com/dotnet/msbuild/pull/13030
* Localized file check-in by OneLocBuild Task: Build definition ID 9434:
Build ID 13124182 by @​dotnet-bot in
https://github.com/dotnet/msbuild/pull/13053
* [main] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot]
in https://github.com/dotnet/msbuild/pull/13031
* Add incrementality tracking support and more detailed analysis of the
build errors reported by @​YuliiaKovalova in
https://github.com/dotnet/msbuild/pull/13057
* [automated] Merge branch 'vs18.3' => 'main' by @​github-actions[bot]
in https://github.com/dotnet/msbuild/pull/13055
* Enable com support for clr4 in task host by @​YuliiaKovalova in
https://github.com/dotnet/msbuild/pull/13033
* Add 'rel/d18.3' to insertion target branch options by @​ViktorHofer in
https://github.com/dotnet/msbuild/pull/13067
* add OriginalValue property to AbsolutePath by @​JanProvaznik in
https://github.com/dotnet/msbuild/pull/13077
* [automated] Merge branch 'vs18.3' => 'main' by @​github-actions[bot]
in https://github.com/dotnet/msbuild/pull/13074
* Localized file check-in by OneLocBuild Task: Build definition ID 9434:
Build ID 13137486 by @​dotnet-bot in
https://github.com/dotnet/msbuild/pull/13075
* Refactor FileUtilities.cs and add methods for absolute paths. by
@​AR-May in https://github.com/dotnet/msbuild/pull/13079
* Limit extended flag usage to NET and CLR4 runtimes by @​YuliiaKovalova
in https://github.com/dotnet/msbuild/pull/13080
* [main] Update dependencies from nuget/nuget.client by
@​dotnet-maestro[bot] in https://github.com/dotnet/msbuild/pull/13065
* Localized file check-in by OneLocBuild Task: Build definition ID 9434:
Build ID 13137926 by @​dotnet-bot in
https://github.com/dotnet/msbuild/pull/13081
* Update to 10.0.1 references by @​rainersigwald in
https://github.com/dotnet/msbuild/pull/13072
* Undo COM support in out of proc task host CLR4 by @​YuliiaKovalova in
https://github.com/dotnet/msbuild/pull/13089
* Add Managed Identity for bootstrapper creation by @​rainersigwald in
https://github.com/dotnet/msbuild/pull/13092
* Add warning MSB4280 when DOTNET_HOST_PATH is set to a directory by
@​Copilot in https://github.com/dotnet/msbuild/pull/13091
 ... (truncated)

## 18.3.3

## What's Changed
* Streamline BuildGlobResultFromIncludeItem by @​Erarndt in
https://github.com/dotnet/msbuild/pull/12178
* [main] Update dependencies from dotnet/roslyn by @​dotnet-maestro[bot]
in https://github.com/dotnet/msbuild/pull/12576
* [main] Update dependencies from nuget/nuget.client by
@​dotnet-maestro[bot] in https://github.com/dotnet/msbuild/pull/12573
* Add new project telemetry to telemetry documentation by @​AR-May in
https://github.com/dotnet/msbuild/pull/12565
* [main] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot]
in https://github.com/dotnet/msbuild/pull/12574
* [main] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot]
in https://github.com/dotnet/msbuild/pull/12564
* Add 17.14->18.0->main automerges by @​rainersigwald in
https://github.com/dotnet/msbuild/pull/12567
* Perf: Reimplement Lookup.Scope tables without ItemDictionary by
@​ccastanedaucf in https://github.com/dotnet/msbuild/pull/12320
* Report line number in app.config error by @​rainersigwald in
https://github.com/dotnet/msbuild/pull/12535
* Use Builder in ImmutableDictionary.SetItems extension by
@​ccastanedaucf in https://github.com/dotnet/msbuild/pull/12402
* Thread-Safe Tasks spec by @​AR-May in
https://github.com/dotnet/msbuild/pull/12111
* Branding for 18.1 by @​AR-May in
https://github.com/dotnet/msbuild/pull/12586
* Fix Copy task case sensitivity issue on Unix systems by @​Copilot in
https://github.com/dotnet/msbuild/pull/12147
* Add null check for environmentVariableProperties by @​YuliiaKovalova
in https://github.com/dotnet/msbuild/pull/12594
* Clarify property tracking capabilities in documentation by
@​YuliiaKovalova in https://github.com/dotnet/msbuild/pull/12600
* enable out of process execution of inline tasks by @​JanProvaznik in
https://github.com/dotnet/msbuild/pull/11948
* [main] Update dependencies from dotnet/roslyn by @​dotnet-maestro[bot]
in https://github.com/dotnet/msbuild/pull/12605
* [main] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot]
in https://github.com/dotnet/msbuild/pull/12604
* [automated] Merge branch 'vs18.0' => 'main' by @​github-actions[bot]
in https://github.com/dotnet/msbuild/pull/12592
* Remove outdated logging + fix the test by @​YuliiaKovalova in
https://github.com/dotnet/msbuild/pull/12607
* Move version label next to version prefix by @​AR-May in
https://github.com/dotnet/msbuild/pull/12609
* Perf: Avoid unnecessary ProjectMetadataInstance allocations by
@​ccastanedaucf in https://github.com/dotnet/msbuild/pull/12599
* Allow NodeProviderOutOfProcTaskHost to manage multiple nodes instead
of one per arch by @​surayya-MS in
https://github.com/dotnet/msbuild/pull/12577
* Systematically use FileSystems abstraction instead of BCL file
operations by @​Copilot in https://github.com/dotnet/msbuild/pull/12602
* Localized file check-in by OneLocBuild Task: Build definition ID 9434:
Build ID 12531490 by @​dotnet-bot in
https://github.com/dotnet/msbuild/pull/12613
* Enable code coverage for Linux/Mac by @​fhnaseer in
https://github.com/dotnet/msbuild/pull/11920
* Fix the crash when doing preprocess by @​GangWang01 in
https://github.com/dotnet/msbuild/pull/12396
* Track subclasses of MSBuild tasks for telemetry by @​Copilot in
https://github.com/dotnet/msbuild/pull/12623
* Update localization comment for main by @​AR-May in
https://github.com/dotnet/msbuild/pull/12618
* Perf: Use struct for WorkUnitResult by @​ccastanedaucf in
https://github.com/dotnet/msbuild/pull/12403
* Revert "Smaller thread stack size for copy threads" by @​JanProvaznik
in https://github.com/dotnet/msbuild/pull/12626
* Localized file check-in by OneLocBuild Task: Build definition ID 9434:
Build ID 12551716 by @​dotnet-bot in
https://github.com/dotnet/msbuild/pull/12628
* Localized file check-in by OneLocBuild Task: Build definition ID 9434:
Build ID 12558527 by @​dotnet-bot in
https://github.com/dotnet/msbuild/pull/12629
* [main] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot]
in https://github.com/dotnet/msbuild/pull/12635
* [main] Update dependencies from nuget/nuget.client by
@​dotnet-maestro[bot] in https://github.com/dotnet/msbuild/pull/12634
* Localized file check-in by OneLocBuild Task: Build definition ID 9434:
Build ID 12567344 by @​dotnet-bot in
https://github.com/dotnet/msbuild/pull/12633
* allow a parameter to disable the live-updating nodes display by
@​baronfel in https://github.com/dotnet/msbuild/pull/12581
* Drafts of build scenario and persistent-problems docs by
@​rainersigwald in https://github.com/dotnet/msbuild/pull/11002
* Lookup.ExplicitModifications switch to concrete dictionary type for
enumerator. by @​ttstanley in
https://github.com/dotnet/msbuild/pull/11985
* Add new multithreaded APIs by @​AR-May in
https://github.com/dotnet/msbuild/pull/12625
* /mt implies inline task factories out of proc by @​JanProvaznik in
https://github.com/dotnet/msbuild/pull/12614
* Fix bug with not passing scheduled node id to the task host task by
@​AR-May in https://github.com/dotnet/msbuild/pull/12639
* Remove audit sources from NuGet.config by @​akoeplinger in
https://github.com/dotnet/msbuild/pull/12641
* [main] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot]
in https://github.com/dotnet/msbuild/pull/12673
* [main] Update dependencies from dotnet/roslyn by @​dotnet-maestro[bot]
in https://github.com/dotnet/msbuild/pull/12674
* Update codeflow metadata to fix backflow by @​premun in
https://github.com/dotnet/msbuild/pull/12678
* Optimize for single capture case by @​Erarndt in
https://github.com/dotnet/msbuild/pull/12569
* [automated] Merge branch 'vs18.0' => 'main' by @​github-actions[bot]
in https://github.com/dotnet/msbuild/pull/12685
* Multithreaded task routing by @​JanProvaznik in
https://github.com/dotnet/msbuild/pull/12617
 ... (truncated)

## 18.0.2

## What's Changed
* asking terminal for dimensions during every frame is expensive by
@​SimaTian in https://github.com/dotnet/msbuild/pull/11504
* Fix the head parameter when search the created PRs by @​JaynieBai in
https://github.com/dotnet/msbuild/pull/11569
* [main] Update dependencies from nuget/nuget.client by
@​dotnet-maestro[bot] in https://github.com/dotnet/msbuild/pull/11552
* Fix test to take warning MSB5018 by @​JaynieBai in
https://github.com/dotnet/msbuild/pull/11499
* Update tsa config by @​AR-May in
https://github.com/dotnet/msbuild/pull/11578
* Switch to AwesomeAssertions by @​rainersigwald in
https://github.com/dotnet/msbuild/pull/11577
* Update MicrosoftBuildVersion in analyzer template by
@​github-actions[bot] in https://github.com/dotnet/msbuild/pull/11581
* Update branding to 17.15 by @​maridematte in
https://github.com/dotnet/msbuild/pull/11582
* using virtual fuction instead of reflection by @​SimaTian in
https://github.com/dotnet/msbuild/pull/11513
* Address some low-hanging fruit to use newer/better .NET features by
@​stephentoub in https://github.com/dotnet/msbuild/pull/11448
* Delete .exp-insertions.yml by @​JanProvaznik in
https://github.com/dotnet/msbuild/pull/11601
* Microsoft.Common.CurrentVersion.targets:
_SplitProjectReferencesByFileExistence DependsOn
AssignProjectConfiguration by @​vikukush in
https://github.com/dotnet/msbuild/pull/11167
* [main] Update dependencies from dotnet/roslyn by @​dotnet-maestro[bot]
in https://github.com/dotnet/msbuild/pull/11600
* [main] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot]
in https://github.com/dotnet/msbuild/pull/11587
* Add null check when iterating through TargetOutputs in terminal logger
by @​mruxmohan4 in https://github.com/dotnet/msbuild/pull/11606
* [automated] Merge branch 'vs17.14' => 'main' by @​github-actions[bot]
in https://github.com/dotnet/msbuild/pull/11572
* Assert instead of ! for nullable by @​rainersigwald in
https://github.com/dotnet/msbuild/pull/11545
* Consolidate common IPC / named pipe code by @​ccastanedaucf in
https://github.com/dotnet/msbuild/pull/11546
* [main] Update dependencies from dotnet/source-build-reference-packages
by @​dotnet-maestro[bot] in https://github.com/dotnet/msbuild/pull/11592
* Update maintenance-packages versions by @​carlossanlop in
https://github.com/dotnet/msbuild/pull/11457
* [main] Update dependencies from dotnet/roslyn by @​dotnet-maestro[bot]
in https://github.com/dotnet/msbuild/pull/11615
* Update MicrosoftBuildVersion in analyzer template by
@​github-actions[bot] in https://github.com/dotnet/msbuild/pull/11590
* Localized file check-in by OneLocBuild Task: Build definition ID 9434:
Build ID 11273384 by @​dotnet-bot in
https://github.com/dotnet/msbuild/pull/11608
* Don't force shipping versions to be used in VMR builds by
@​jkoritzinsky in https://github.com/dotnet/msbuild/pull/11625
* Fix url formatting in BuildCheck/Codes.md by @​MaceWindu in
https://github.com/dotnet/msbuild/pull/11631
* `/documentation/specs/*.md` formatting/linting/cleanup by
@​BenjaminBrienen in https://github.com/dotnet/msbuild/pull/11611
* Localized file check-in by OneLocBuild Task: Build definition ID 9434:
Build ID 11285593 by @​dotnet-bot in
https://github.com/dotnet/msbuild/pull/11639
* [main] Update dependencies from nuget/nuget.client by
@​dotnet-maestro[bot] in https://github.com/dotnet/msbuild/pull/11599
* add telemetry e2e test, address code quality issues by @​JanProvaznik
in https://github.com/dotnet/msbuild/pull/11602
* Remove MSBuildRuntimeType conditions by @​ViktorHofer in
https://github.com/dotnet/msbuild/pull/11641
* Set IDE0005 (Remove unnecessary using directives) severity to Warning
by @​JaynieBai in https://github.com/dotnet/msbuild/pull/11643
* [main] Update dependencies from dotnet/roslyn by @​dotnet-maestro[bot]
in https://github.com/dotnet/msbuild/pull/11646
* Remove RichCodeNavIndexer from .vsts-dotnet-ci.yml by @​akoeplinger in
https://github.com/dotnet/msbuild/pull/11647
* [REVERT] 11546 refactor common pipe code by @​YuliiaKovalova in
https://github.com/dotnet/msbuild/pull/11648
* [automated] Merge branch 'vs17.14' => 'main' by @​github-actions[bot]
in https://github.com/dotnet/msbuild/pull/11651
* [main] Update dependencies from nuget/nuget.client by
@​dotnet-maestro[bot] in https://github.com/dotnet/msbuild/pull/11645
* Implement ExecCliBuild build check to warn if the Exec task is used to
build a project by @​IliaShuliatikov in
https://github.com/dotnet/msbuild/pull/11523
* Localized file check-in by OneLocBuild Task: Build definition ID 9434:
Build ID 11312841 by @​dotnet-bot in
https://github.com/dotnet/msbuild/pull/11653
* Improve TargetFrameworkConfusionCheck by @​stan-sz in
https://github.com/dotnet/msbuild/pull/11656
* [automated] Merge branch 'vs17.14' => 'main' by @​github-actions[bot]
in https://github.com/dotnet/msbuild/pull/11664
* VS Telemetry design documentation by @​JanProvaznik in
https://github.com/dotnet/msbuild/pull/11175
* [automated] Merge branch 'vs17.14' => 'main' by @​github-actions[bot]
in https://github.com/dotnet/msbuild/pull/11667
* Localized file check-in by OneLocBuild Task: Build definition ID 9434:
Build ID 11332988 by @​dotnet-bot in
https://github.com/dotnet/msbuild/pull/11675
* [main] Update dependencies from dotnet/source-build-reference-packages
by @​dotnet-maestro[bot] in https://github.com/dotnet/msbuild/pull/11685
* [automated] Merge branch 'vs17.14' => 'main' by @​github-actions[bot]
in https://github.com/dotnet/msbuild/pull/11682
* Add separate DeserializePacket() to INodePacketFactory by
@​ccastanedaucf in https://github.com/dotnet/msbuild/pull/11650
* [main] Update dependencies from dotnet/roslyn by @​dotnet-maestro[bot]
in https://github.com/dotnet/msbuild/pull/11695
* Update BuildCheck code BC0109 -> BC0302 by @​YuliiaKovalova in
https://github.com/dotnet/msbuild/pull/11696
* [main] Update dependencies from nuget/nuget.client by
@​dotnet-maestro[bot] in https://github.com/dotnet/msbuild/pull/11689
 ... (truncated)

## 17.14.28

## What's Changed
* [vs17.10] Update dependencies from dotnet/arcade by
@​dotnet-maestro[bot] in https://github.com/dotnet/msbuild/pull/11586
* [vs17.11] Update dependencies from dotnet/arcade by
@​dotnet-maestro[bot] in https://github.com/dotnet/msbuild/pull/11585
* [vs17.12] Update dependencies from dotnet/arcade by
@​dotnet-maestro[bot] in https://github.com/dotnet/msbuild/pull/11589
* add preview suffix in experimental CI Builds, enable expinsert by
@​JanProvaznik in https://github.com/dotnet/msbuild/pull/11534
* Add the check on version bump up by @​GangWang01 in
https://github.com/dotnet/msbuild/pull/11469
* [automated] Merge branch 'vs17.8' => 'vs17.10' by
@​github-actions[bot] in https://github.com/dotnet/msbuild/pull/11668
* [vs17.11] Update dependencies from dotnet/arcade by
@​dotnet-maestro[bot] in https://github.com/dotnet/msbuild/pull/11691
* [vs17.8] Update dependencies from dotnet/arcade by
@​dotnet-maestro[bot] in https://github.com/dotnet/msbuild/pull/11688
* [vs17.12] Update dependencies from dotnet/arcade by
@​dotnet-maestro[bot] in https://github.com/dotnet/msbuild/pull/11694
* [automated] Merge branch 'vs17.10' => 'vs17.11' by
@​github-actions[bot] in https://github.com/dotnet/msbuild/pull/11687
* [vs17.10] Update dependencies from dotnet/arcade by
@​dotnet-maestro[bot] in https://github.com/dotnet/msbuild/pull/11693
* [vs17.8] Update dependencies from dotnet/arcade by
@​dotnet-maestro[bot] in https://github.com/dotnet/msbuild/pull/11711
* [vs17.10] Update dependencies from dotnet/arcade by
@​dotnet-maestro[bot] in https://github.com/dotnet/msbuild/pull/11713
* [vs17.11] Update dependencies from dotnet/arcade by
@​dotnet-maestro[bot] in https://github.com/dotnet/msbuild/pull/11712
* [vs17.12] Update dependencies from dotnet/arcade by
@​dotnet-maestro[bot] in https://github.com/dotnet/msbuild/pull/11716
* Make 16.11 pass build and release by @​maridematte in
https://github.com/dotnet/msbuild/pull/11658
* [vs17.12] Merge tag v17.12.36 by @​surayya-MS in
https://github.com/dotnet/msbuild/pull/11864
* [vs16.11] Merge tag v16.11.6 by @​surayya-MS in
https://github.com/dotnet/msbuild/pull/11871
* [vs17.12] Fixing the contention condition caused by
RegisterResolversManifests by @​github-actions[bot] in
https://github.com/dotnet/msbuild/pull/11612
* [vs17.8] Merge tag v17.8.29 by @​surayya-MS in
https://github.com/dotnet/msbuild/pull/11866
* [vs17.10] Merge tag v17.10.29 by @​surayya-MS in
https://github.com/dotnet/msbuild/pull/11865
* Fix invalid substitutionGroup in Microsoft.Build.CommonTypes by
@​YuliiaKovalova in https://github.com/dotnet/msbuild/pull/11902
* Update VisualStudio.ChannelName to int.d17.14 by @​YuliiaKovalova in
https://github.com/dotnet/msbuild/pull/11908
* Fix insertion target branches and schedule by @​JanProvaznik in
https://github.com/dotnet/msbuild/pull/11909
* [vs17.8] Update dependencies from dotnet/arcade by
@​dotnet-maestro[bot] in https://github.com/dotnet/msbuild/pull/11746
* [vs17.10] Update dependencies from dotnet/arcade by
@​dotnet-maestro[bot] in https://github.com/dotnet/msbuild/pull/11750
* [vs17.11] Update dependencies from dotnet/arcade by
@​dotnet-maestro[bot] in https://github.com/dotnet/msbuild/pull/11748
* [vs17.12] Update dependencies from dotnet/arcade by
@​dotnet-maestro[bot] in https://github.com/dotnet/msbuild/pull/11901
* [vs17.14] Update dependencies from nuget/nuget.client by
@​dotnet-maestro[bot] in https://github.com/dotnet/msbuild/pull/11790
* [automated] Merge branch 'vs17.8' => 'vs17.10' by
@​github-actions[bot] in https://github.com/dotnet/msbuild/pull/11904
* [automated] Merge branch 'vs17.10' => 'vs17.11' by
@​github-actions[bot] in https://github.com/dotnet/msbuild/pull/11905
* [automated] Merge branch 'vs17.11' => 'vs17.12' by
@​github-actions[bot] in https://github.com/dotnet/msbuild/pull/11967
* [vs17.12] Update dependencies from dotnet/arcade by
@​dotnet-maestro[bot] in https://github.com/dotnet/msbuild/pull/11982
* [vs17.8] Update dependencies from dotnet/arcade by
@​dotnet-maestro[bot] in https://github.com/dotnet/msbuild/pull/11995
* [vs17.11] Update dependencies from dotnet/arcade by
@​dotnet-maestro[bot] in https://github.com/dotnet/msbuild/pull/11996
* [vs17.10] Update dependencies from dotnet/arcade by
@​dotnet-maestro[bot] in https://github.com/dotnet/msbuild/pull/11997
* [automated] Merge branch 'vs17.12' => 'vs17.14' by
@​github-actions[bot] in https://github.com/dotnet/msbuild/pull/11991
* [vs17.14] Replace obsolete UCOMITypeInfo with recommended
System.Runtime.InteropServices.ComTypes.ITypeInfo by
@​github-actions[bot] in https://github.com/dotnet/msbuild/pull/12012
* [vs17.14] Revert change in _SplitProjectReferencesByFileExistence by
@​YuliiaKovalova in https://github.com/dotnet/msbuild/pull/12035
* Add the switch running OptProf tasks by @​GangWang01 in
https://github.com/dotnet/msbuild/pull/12076
* [vs17.8] Update dependencies from dotnet/arcade by
@​dotnet-maestro[bot] in https://github.com/dotnet/msbuild/pull/12086
* [vs17.12] Update dependencies from dotnet/arcade by
@​dotnet-maestro[bot] in https://github.com/dotnet/msbuild/pull/12091
* [vs17.10] Update dependencies from dotnet/arcade by
@​dotnet-maestro[bot] in https://github.com/dotnet/msbuild/pull/12089
* [vs17.14] Update dependencies from dotnet/arcade by
@​dotnet-maestro[bot] in https://github.com/dotnet/msbuild/pull/12090
* [vs17.11] Update dependencies from dotnet/arcade by
@​dotnet-maestro[bot] in https://github.com/dotnet/msbuild/pull/12088
* Override SkipApplyOptimizationData to true when disabling OptProf data
collection by @​GangWang01 in
https://github.com/dotnet/msbuild/pull/12106
* [automated] Merge branch 'vs17.11' => 'vs17.12' by
@​github-actions[bot] in https://github.com/dotnet/msbuild/pull/12103
* [automated] Merge branch 'vs17.12' => 'vs17.14' by
@​github-actions[bot] in https://github.com/dotnet/msbuild/pull/12134
* Bump to NuGet 5.11.6 by @​rainersigwald in
https://github.com/dotnet/msbuild/pull/12168
 ... (truncated)

## 17.14.8

## What's Changed
* [vs17.14] Binlog not produced for C++ project on Visual Studio Load
Fix by @​surayya-MS in https://github.com/dotnet/msbuild/pull/11774
* [vs17.14] Merge tag v17.14.8 by @​surayya-MS in
https://github.com/dotnet/msbuild/pull/11861


**Full Changelog**:
https://github.com/dotnet/msbuild/compare/v17.14.5...v17.14.8

## 17.14.5

## What's Changed
* [vs17.6] Dont ngen taskhost Fixes our lack of optprof data (#​8737) by
@​JanKrivanek in https://github.com/dotnet/msbuild/pull/8926
* [vs17.6] Bump version by @​JanKrivanek in
https://github.com/dotnet/msbuild/pull/8932
* Update System.Security.Cryptography.Pkcs by @​JanKrivanek in
https://github.com/dotnet/msbuild/pull/8977
* [vs17.8] Workaround for incorrect encoding of PUA range in GB18030 Uri
string by @​sujitnayak in https://github.com/dotnet/msbuild/pull/9751
* [vs17.10] Check version bump on release branches' update by
@​github-actions in https://github.com/dotnet/msbuild/pull/10041
* [release/vs17.6] Onboard 1es templates (#​9924) by @​surayya-MS in
https://github.com/dotnet/msbuild/pull/10053
* [automated] Merge branch 'vs17.6' => 'vs17.8' by @​dotnet-maestro-bot
in https://github.com/dotnet/msbuild/pull/10056
* [automated] Merge branch 'vs17.9' => 'vs17.10' by @​dotnet-maestro-bot
in https://github.com/dotnet/msbuild/pull/10081
* Disable localization for vs17.10 by @​AR-May in
https://github.com/dotnet/msbuild/pull/10269
* Enable private feeds for release branch by @​AR-May in
https://github.com/dotnet/msbuild/pull/10355
* [vs17.10] Update dependencies from dotnet/arcade by @​dotnet-maestro
in https://github.com/dotnet/msbuild/pull/10809
* CG alert cleaning on VS17.10 by @​GangWang01 in
https://github.com/dotnet/msbuild/pull/10724
* CG alert cleaning on VS17.8 by @​GangWang01 in
https://github.com/dotnet/msbuild/pull/10725
* [vs17.10] Update dependencies from dotnet/arcade by @​dotnet-maestro
in https://github.com/dotnet/msbuild/pull/10833
* [vs17.8] update arcade and fix build by @​JanProvaznik in
https://github.com/dotnet/msbuild/pull/10838
* [vs17.8] Sync internal and public branches by @​YuliiaKovalova in
https://github.com/dotnet/msbuild/pull/10858
* [vs17.10] Update dependencies from dotnet/arcade by @​dotnet-maestro
in https://github.com/dotnet/msbuild/pull/10896
* [vs17.8] Update dependencies from dotnet/arcade by @​dotnet-maestro in
https://github.com/dotnet/msbuild/pull/10894
* [vs17.8] Update dependencies from dotnet/arcade by @​dotnet-maestro in
https://github.com/dotnet/msbuild/pull/10986
* [vs17.8] Update dependencies from dotnet/arcade by @​dotnet-maestro in
https://github.com/dotnet/msbuild/pull/11030
* [vs17.8] Backport VS insertion pipeline YMLs by @​github-actions in
https://github.com/dotnet/msbuild/pull/11066
* [17.8] Unblock opt-prof in release branches by @​JanKrivanek in
https://github.com/dotnet/msbuild/pull/11112
* [vs17.8] Fix setting package versions in VS insertion by
@​github-actions in https://github.com/dotnet/msbuild/pull/11103
* Update vs/msbuild version by @​JanKrivanek in
https://github.com/dotnet/msbuild/pull/11115
* Update xcopy-msbuild version to 17.8.5 by @​GangWang01 in
https://github.com/dotnet/msbuild/pull/11118
* Add inter-branch merge flow file by @​GangWang01 in
https://github.com/dotnet/msbuild/pull/11123
* [vs17.8] Unblock OptProf build by @​JanKrivanek in
https://github.com/dotnet/msbuild/pull/11121
* [vs17.10] Update dependencies from dotnet/arcade by @​dotnet-maestro
in https://github.com/dotnet/msbuild/pull/10992
* 17.14 Branding by @​JanKrivanek in
https://github.com/dotnet/msbuild/pull/11128
* Bump up System.Text.Json to 8.0.5 by @​GangWang01 in
https://github.com/dotnet/msbuild/pull/11134
* [automated] Merge branch 'vs17.8' => 'vs17.10' by @​github-actions in
https://github.com/dotnet/msbuild/pull/11124
* Update localization comment for main by @​JanKrivanek in
https://github.com/dotnet/msbuild/pull/11138
* Option to avoid "fixing" \ in new TaskItem() by @​maridematte in
https://github.com/dotnet/msbuild/pull/11120
* Disable packing in bootstrap build by @​JanKrivanek in
https://github.com/dotnet/msbuild/pull/11133
* Fixing the contention condition caused by RegisterResolversManifests
by @​SimaTian in https://github.com/dotnet/msbuild/pull/11079
* [vs17.10] Run tests even if version is not bumped by @​github-actions
in https://github.com/dotnet/msbuild/pull/11059
* Update interbranch flow by @​JanKrivanek in
https://github.com/dotnet/msbuild/pull/11139
* Localized file check-in by OneLocBuild Task: Build definition ID 9434:
Build ID 10720707 by @​dotnet-bot in
https://github.com/dotnet/msbuild/pull/11154
* Fix ambiguous reference for ExceptionHandling class by @​mthalman in
https://github.com/dotnet/msbuild/pull/11173
* [main] Update dependencies from dotnet/roslyn by @​dotnet-maestro in
https://github.com/dotnet/msbuild/pull/11151
* [main] Update dependencies from nuget/nuget.client by @​dotnet-maestro
in https://github.com/dotnet/msbuild/pull/11150
* telemetry onepager by @​JanProvaznik in
https://github.com/dotnet/msbuild/pull/11013
* fix: Update json syntax of merge-flow config by @​f-alizada in
https://github.com/dotnet/msbuild/pull/11190
* [main] Update dependencies from dotnet/source-build-reference-packages
by @​dotnet-maestro in https://github.com/dotnet/msbuild/pull/11176
* Fix casing for UTF8Output propery by @​baronfel in
https://github.com/dotnet/msbuild/pull/11179
* [main] Update dependencies from nuget/nuget.client by @​dotnet-maestro
in https://github.com/dotnet/msbuild/pull/11186
* [main] Update dependencies from nuget/nuget.client by @​dotnet-maestro
in https://github.com/dotnet/msbuild/pull/11198
* Prevent reading from .rsp file for worker nodes by @​YuliiaKovalova in
https://github.com/dotnet/msbuild/pull/11170
* Handle the case for updated binding redirects by @​YuliiaKovalova in
https://github.com/dotnet/msbuild/pull/11012
 ... (truncated)

## 17.14.0-preview-25177-05


[Release](https://github.com/dotnet/msbuild/releases/tag/v17.14.0-preview-25177-05)

## What's Changed
* null check logging mechanism before logging glob failure by
@​JanProvaznik in https://github.com/dotnet/msbuild/pull/11537
* Update .NET Framework references to 9.0.0 by @​rainersigwald in
https://github.com/dotnet/msbuild/pull/11145
* [CodeQL][SM03800] Remove unapproved usage of DSACryptoServiceProvider
by @​sujitnayak in https://github.com/dotnet/msbuild/pull/11540
* Opt-in .sln parsing with Microsoft.VisualStudio.SolutionPersistence by
@​surayya-MS in https://github.com/dotnet/msbuild/pull/11538
* Upgrade `Microsoft.VisualStudio.SolutionPersistence` to 1.0.52 by
@​surayya-MS in https://github.com/dotnet/msbuild/pull/11549
* Load `before/after.{solutionName}.sln.targets` for .`slnx` by
@​surayya-MS in https://github.com/dotnet/msbuild/pull/11535
* Fix building slnf with @ in the path by @​surayya-MS in
https://github.com/dotnet/msbuild/pull/11421
* Update copy logic to use dedicated threads. by @​Erarndt in
https://github.com/dotnet/msbuild/pull/11272
* Update merge flow 17.14 -> main by @​maridematte in
https://github.com/dotnet/msbuild/pull/11559
* Update VS insertions for 17.14 by @​maridematte in
https://github.com/dotnet/msbuild/pull/11558
* Remove deprecated 4.3.* System package references by @​ViktorHofer in
https://github.com/dotnet/msbuild/pull/11555
* Fix entries in Version.Details.xml and make version overriding clearer
by @​akoeplinger in https://github.com/dotnet/msbuild/pull/11561
* [main] Update dependencies from dotnet/roslyn by @​dotnet-maestro in
https://github.com/dotnet/msbuild/pull/11553
* [automated] Merge branch 'vs17.14' => 'main' by @​github-actions in
https://github.com/dotnet/msbuild/pull/11562
* [vs17.14] Remove deprecated 4.3.* System package references & fix
entries in Version.Details.xml by @​github-actions in
https://github.com/dotnet/msbuild/pull/11571
* Don't ngen StringTools.net35 by @​rainersigwald in
https://github.com/dotnet/msbuild/pull/11544
* asking terminal for dimensions during every frame is expensive by
@​SimaTian in https://github.com/dotnet/msbuild/pull/11504
* Fix the head parameter when search the created PRs by @​JaynieBai in
https://github.com/dotnet/msbuild/pull/11569
* [main] Update dependencies from nuget/nuget.client by @​dotnet-maestro
in https://github.com/dotnet/msbuild/pull/11552
* Fix test to take warning MSB5018 by @​JaynieBai in
https://github.com/dotnet/msbuild/pull/11499
* Update tsa config by @​AR-May in
https://github.com/dotnet/msbuild/pull/11578
* Localized file check-in by OneLocBuild Task: Build definition ID 9434:
Build ID 11098688 by @​dotnet-bot in
https://github.com/dotnet/msbuild/pull/11501
* Switch to AwesomeAssertions by @​rainersigwald in
https://github.com/dotnet/msbuild/pull/11577
* Update MicrosoftBuildVersion in analyzer template by @​github-actions
in https://github.com/dotnet/msbuild/pull/11581
* Update branding to 17.15 by @​maridematte in
https://github.com/dotnet/msbuild/pull/11582
* using virtual fuction instead of reflection by @​SimaTian in
https://github.com/dotnet/msbuild/pull/11513
* Address some low-hanging fruit to use newer/better .NET features by
@​stephentoub in https://github.com/dotnet/msbuild/pull/11448
* [automated] Merge branch 'vs17.13' => 'vs17.14' by @​github-actions in
https://github.com/dotnet/msbuild/pull/11584
* Delete .exp-insertions.yml by @​JanProvaznik in
https://github.com/dotnet/msbuild/pull/11601
* Microsoft.Common.CurrentVersion.targets:
_SplitProjectReferencesByFileExistence DependsOn
AssignProjectConfiguration by @​vikukush in
https://github.com/dotnet/msbuild/pull/11167
* [main] Update dependencies from dotnet/roslyn by @​dotnet-maestro in
https://github.com/dotnet/msbuild/pull/11600
* Make SolutionParser package reference private by @​maridematte in
https://github.com/dotnet/msbuild/pull/11603
* [main] Update dependencies from dotnet/arcade by @​dotnet-maestro in
https://github.com/dotnet/msbuild/pull/11587
* Add null check when iterating through TargetOutputs in terminal logger
by @​mruxmohan4 in https://github.com/dotnet/msbuild/pull/11606
* [automated] Merge branch 'vs17.14' => 'main' by @​github-actions in
https://github.com/dotnet/msbuild/pull/11572
* Assert instead of ! for nullable by @​rainersigwald in
https://github.com/dotnet/msbuild/pull/11545
* Consolidate common IPC / named pipe code by @​ccastanedaucf in
https://github.com/dotnet/msbuild/pull/11546
* [main] Update dependencies from dotnet/source-build-reference-packages
by @​dotnet-maestro in https://github.com/dotnet/msbuild/pull/11592
* Update maintenance-packages versions by @​carlossanlop in
https://github.com/dotnet/msbuild/pull/11457
* [vs17.14] Microsoft.Common.CurrentVersion.targets:
_SplitProjectReferencesByFileExistence DependsOn
AssignProjectConfiguration by @​github-actions in
https://github.com/dotnet/msbuild/pull/11620
* [main] Update dependencies from dotnet/roslyn by @​dotnet-maestro in
https://github.com/dotnet/msbuild/pull/11615
* Pin samples/ProjectCachePlugin to released MSBuild by @​rainersigwald
in https://github.com/dotnet/msbuild/pull/11563
* [vs17.14] Add null check when iterating through TargetOutputs in
terminal logger by @​github-actions in
https://github.com/dotnet/msbuild/pull/11621
* Update MicrosoftBuildVersion in analyzer template by @​github-actions
in https://github.com/dotnet/msbuild/pull/11590
* Localized file check-in by OneLocBuild Task: Build definition ID 9434:
Build ID 11273384 by @​dotnet-bot in
https://github.com/dotnet/msbuild/pull/11608
* Don't force shipping versions to be used in VMR builds by
@​jkoritzinsky in https://github.com/dotnet/msbuild/pull/11625
* Fix url formatting in BuildCheck/Codes.md by @​MaceWindu in
https://github.com/dotnet/msbuild/pull/11631
 ... (truncated)

## 17.14.0-preview-25155-01

[Release](https://github.com/dotnet/core/releases/tag/v10.0.0-preview.2)

## What's Changed
* [vs17.6] Dont ngen taskhost Fixes our lack of optprof data (#​8737) by
@​JanKrivanek in https://github.com/dotnet/msbuild/pull/8926
* [vs17.6] Bump version by @​JanKrivanek in
https://github.com/dotnet/msbuild/pull/8932
* Update System.Security.Cryptography.Pkcs by @​JanKrivanek in
https://github.com/dotnet/msbuild/pull/8977
* [vs17.8] Workaround for incorrect encoding of PUA range in GB18030 Uri
string by @​sujitnayak in https://github.com/dotnet/msbuild/pull/9751
* [release/vs17.6] Onboard 1es templates (#​9924) by @​surayya-MS in
https://github.com/dotnet/msbuild/pull/10053
* [automated] Merge branch 'vs17.6' => 'vs17.8' by @​dotnet-maestro-bot
in https://github.com/dotnet/msbuild/pull/10056
* CG alert cleaning on VS17.8 by @​GangWang01 in
https://github.com/dotnet/msbuild/pull/10725
* [vs17.8] update arcade and fix build by @​JanProvaznik in
https://github.com/dotnet/msbuild/pull/10838
* [vs17.8] Sync internal and public branches by @​YuliiaKovalova in
https://github.com/dotnet/msbuild/pull/10858
* [vs17.8] Update dependencies from dotnet/arcade by @​dotnet-maestro in
https://github.com/dotnet/msbuild/pull/10894
* [vs17.8] Update dependencies from dotnet/arcade by @​dotnet-maestro in
https://github.com/dotnet/msbuild/pull/10986
* [vs17.8] Update dependencies from dotnet/arcade by @​dotnet-maestro in
https://github.com/dotnet/msbuild/pull/11030
* [vs17.8] Backport VS insertion pipeline YMLs by @​github-actions in
https://github.com/dotnet/msbuild/pull/11066
* [17.8] Unblock opt-prof in release branches by @​JanKrivanek in
https://github.com/dotnet/msbuild/pull/11112
* [vs17.8] Fix setting package versions in VS insertion by
@​github-actions in https://github.com/dotnet/msbuild/pull/11103
* Update vs/msbuild version by @​JanKrivanek in
https://github.com/dotnet/msbuild/pull/11115
* Update xcopy-msbuild version to 17.8.5 by @​GangWang01 in
https://github.com/dotnet/msbuild/pull/11118
* Add inter-branch merge flow file by @​GangWang01 in
https://github.com/dotnet/msbuild/pull/11123
* [vs17.8] Unblock OptProf build by @​JanKrivanek in
https://github.com/dotnet/msbuild/pull/11121
* Bump up System.Text.Json to 8.0.5 by @​GangWang01 in
https://github.com/dotnet/msbuild/pull/11134
* [vs17.8] Update dependencies from dotnet/arcade by @​dotnet-maestro in
https://github.com/dotnet/msbuild/pull/11218
* [vs17.8] disallow inserting pkgs twice in VS insertion by
@​JanProvaznik in https://github.com/dotnet/msbuild/pull/11152
* [vs17.8] Update dependencies from dotnet/arcade by @​dotnet-maestro in
https://github.com/dotnet/msbuild/pull/11261
* Don't autocomplete servicing insertions by @​JanProvaznik in
https://github.com/dotnet/msbuild/pull/11283
* [vs17.8] Select proper VS channel by @​JanKrivanek in
https://github.com/dotnet/msbuild/pull/11246
* [vs17.8] Update dependencies from dotnet/arcade by @​dotnet-maestro in
https://github.com/dotnet/msbuild/pull/11306
* [main] Update dependencies from dotnet/arcade by @​dotnet-maestro in
https://github.com/dotnet/msbuild/pull/11367
* [vs17.12] Update dependencies from dotnet/arcade by @​dotnet-maestro
in https://github.com/dotnet/msbuild/pull/11371
* [main] Update dependencies from nuget/nuget.client by @​dotnet-maestro
in https://github.com/dotnet/msbuild/pull/11339
* [vs17.10] Update dependencies from dotnet/arcade by @​dotnet-maestro
in https://github.com/dotnet/msbuild/pull/11408
* [vs17.11] Update dependencies from dotnet/arcade by @​dotnet-maestro
in https://github.com/dotnet/msbuild/pull/11406
* [vs17.13] Update dependencies from dotnet/arcade by @​dotnet-maestro
in https://github.com/dotnet/msbuild/pull/11407
* [vs17.12] Fix arcade tool restore by @​JanProvaznik in
https://github.com/dotnet/msbuild/pull/11413
* [automated] Merge branch 'vs17.12' => 'vs17.13' by @​github-actions in
https://github.com/dotnet/msbuild/pull/11419
* Prevent race condition in LoggingService by @​YuliiaKovalova in
https://github.com/dotnet/msbuild/pull/11284
* [automated] Merge branch 'vs17.13' => 'main' by @​github-actions in
https://github.com/dotnet/msbuild/pull/11422
* Bump `StyleCop.Analyzers` to `1.2.0-beta.556` by @​xtqqczze in
https://github.com/dotnet/msbuild/pull/11398
* Avoid creation of temporary strings where possible by @​Erarndt in
https://github.com/dotnet/msbuild/pull/11380
* Keep ActivityId correlations in ETW
 by @​rainersigwald in https://github.com/dotnet/msbuild/pull/10909
* [vs17.8] Update dependencies from dotnet/arcade by @​dotnet-maestro in
https://github.com/dotnet/msbuild/pull/11404
* [9.0.1xx] Workaround for "MSB4166: Child node "1" exited prematurely
for build check by @​YuliiaKovalova in
https://github.com/dotnet/msbuild/pull/11384
* Add EmbedInteropTypes to COMFileReference
 by @​rainersigwald in https://github.com/dotnet/msbuild/pull/11414
* [main] Update dependencies from dotnet/roslyn by @​dotnet-maestro in
https://github.com/dotnet/msbuild/pull/11409
* [automated] Merge branch 'vs17.12' => 'vs17.13' by @​github-actions in
https://github.com/dotnet/msbuild/pull/11424
* Port 1ES Pipeline Templates PR by @​GangWang01 in
https://github.com/dotnet/msbuild/pull/11425
 ... (truncated)

## 17.14.0-preview-25110-01

[Release](https://github.com/dotnet/core/releases/tag/v10.0.0-preview.1)

## What's Changed
* [vs17.10] Check version bump on release branches' update by
@​github-actions in https://github.com/dotnet/msbuild/pull/10041
* [automated] Merge branch 'vs17.9' => 'vs17.10' by @​dotnet-maestro-bot
in https://github.com/dotnet/msbuild/pull/10081
* Disable localization for vs17.10 by @​AR-May in
https://github.com/dotnet/msbuild/pull/10269
* Enable private feeds for release branch by @​AR-May in
https://github.com/dotnet/msbuild/pull/10355
* [vs17.10] Update dependencies from dotnet/arcade by @​dotnet-maestro
in https://github.com/dotnet/msbuild/pull/10809
* CG alert cleaning on VS17.10 by @​GangWang01 in
https://github.com/dotnet/msbuild/pull/10724
* [vs17.10] Update dependencies from dotnet/arcade by @​dotnet-maestro
in https://github.com/dotnet/msbuild/pull/10833
* [vs17.10] Update dependencies from dotnet/arcade by @​dotnet-maestro
in https://github.com/dotnet/msbuild/pull/10896
* [vs17.10] Update dependencies from dotnet/arcade by @​dotnet-maestro
in https://github.com/dotnet/msbuild/pull/10992
* 17.14 Branding by @​JanKrivanek in
https://github.com/dotnet/msbuild/pull/11128
* [automated] Merge branch 'vs17.8' => 'vs17.10' by @​github-actions in
https://github.com/dotnet/msbuild/pull/11124
* Update localization comment for main by @​JanKrivanek in
https://github.com/dotnet/msbuild/pull/11138
* Option to avoid "fixing" \ in new TaskItem() by @​maridematte in
https://github.com/dotnet/msbuild/pull/11120
* Disable packing in bootstrap build by @​JanKrivanek in
https://github.com/dotnet/msbuild/pull/11133
* Fixing the contention condition caused by RegisterResolversManifests
by @​SimaTian in https://github.com/dotnet/msbuild/pull/11079
* [vs17.10] Run tests even if version is not bumped by @​github-actions
in https://github.com/dotnet/msbuild/pull/11059
* Update interbranch flow by @​JanKrivanek in
https://github.com/dotnet/msbuild/pull/11139
* Localized file check-in by OneLocBuild Task: Build definition ID 9434:
Build ID 10720707 by @​dotnet-bot in
https://github.com/dotnet/msbuild/pull/11154
* Fix ambiguous reference for ExceptionHandling class by @​mthalman in
https://github.com/dotnet/msbuild/pull/11173
* [main] Update dependencies from dotnet/roslyn by @​dotnet-maestro in
https://github.com/dotnet/msbuild/pull/11151
* [main] Update dependencies from nuget/nuget.client by @​dotnet-maestro
in https://github.com/dotnet/msbuild/pull/11150
* telemetry onepager by @​JanProvaznik in
https://github.com/dotnet/msbuild/pull/11013
* fix: Update json syntax of merge-flow config by @​f-alizada in
https://github.com/dotnet/msbuild/pull/11190
* [main] Update dependencies from dotnet/source-build-reference-packages
by @​dotnet-maestro in https://github.com/dotnet/msbuild/pull/11176
* Fix casing for UTF8Output propery by @​baronfel in
https://github.com/dotnet/msbuild/pull/11179
* [main] Update dependencies from nuget/nuget.client by @​dotnet-maestro
in https://github.com/dotnet/msbuild/pull/11186
* [main] Update dependencies from nuget/nuget.client by @​dotnet-maestro
in https://github.com/dotnet/msbuild/pull/11198
* Prevent reading from .rsp file for worker nodes by @​YuliiaKovalova in
https://github.com/dotnet/msbuild/pull/11170
* Handle the case for updated binding redirects by @​YuliiaKovalova in
https://github.com/dotnet/msbuild/pull/11012
* Update ChangeWaves doc by @​JanKrivanek in
https://github.com/dotnet/msbuild/pull/11174
* Add IntelliSense for testing properties by @​Youssef1313 in
https://github.com/dotnet/msbuild/pull/11029
* enable experimentally inserting to release branches from UI by
@​JanProvaznik in https://github.com/dotnet/msbuild/pull/11205
* Expose processes leveraged by BuildManager by @​JanKrivanek in
https://github.com/dotnet/msbuild/pull/11146
* changing expander regex by @​SimaTian in
https://github.com/dotnet/msbuild/pull/11210
* Add result for target stop event trace by @​JaynieBai in
https://github.com/dotnet/msbuild/pull/11202
* Add more processes Logs for failed case
Microsoft.Build.UnitTests.Exec_Tests.Timeout by @​JaynieBai in
https://github.com/dotnet/msbuild…
…the rust-zed group (#127)

Bumps the rust-zed group in /editors/zed with 1 update:
[quick-xml](https://github.com/tafia/quick-xml).

Updates `quick-xml` from 0.40.1 to 0.41.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/tafia/quick-xml/releases">quick-xml's
releases</a>.</em></p>
<blockquote>
<h2>v0.41.0 - Secuirity fixes</h2>
<h2>What's Changed</h2>
<h3>New Features</h3>
<ul>
<li><a
href="https://redirect.github.com/tafia/quick-xml/issues/970">#970</a>:
Add <code>NsReader::resolver_mut()</code> and
<code>NamespaceResolver::{max_declarations_per_element,
set_max_declarations_per_element}</code>.</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li><a
href="https://redirect.github.com/tafia/quick-xml/issues/969">#969</a>:
<code>Attributes</code> (and anything that iterates
<code>BytesStart::attributes()</code> with the default
<code>with_checks(true)</code>) no longer takes O(N²) time on a start
tag with a large number of attributes. Small tags keep the previous
linear scan; larger ones switch to a 64-bit hash pre-filter, so the
whole tag is O(N). The exact <code>AttrError::Duplicated(new,
prev)</code> positions are unchanged.</li>
<li><a
href="https://redirect.github.com/tafia/quick-xml/issues/970">#970</a>:
<code>NamespaceResolver::push</code> (and hence every
<code>NsReader</code> <code>Start</code>/<code>Empty</code> event) now
rejects a start tag that declares more than
<code>DEFAULT_MAX_DECLARATIONS_PER_ELEMENT</code> (256)
<code>xmlns</code> / <code>xmlns:*</code> namespace bindings, returning
the new <code>NamespaceError::TooManyDeclarations</code>. Previously
<code>push</code> allocated one <code>NamespaceBinding</code> per
declaration with no upper bound, before the event was returned to the
caller, so an <code>NsReader</code> consumer could not bound its memory
exposure on untrusted input. The limit is configurable via
<code>NamespaceResolver::set_max_declarations_per_element</code> (use
<code>usize::MAX</code> to disable).</li>
</ul>
<p><a
href="https://redirect.github.com/tafia/quick-xml/issues/969">#969</a>:
<a
href="https://redirect.github.com/tafia/quick-xml/issues/969">tafia/quick-xml#969</a>
<a
href="https://redirect.github.com/tafia/quick-xml/issues/970">#970</a>:
<a
href="https://redirect.github.com/tafia/quick-xml/issues/970">tafia/quick-xml#970</a></p>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/qifan-sailboat"><code>@​qifan-sailboat</code></a>
made their first contribution in <a
href="https://redirect.github.com/tafia/quick-xml/pull/972">tafia/quick-xml#972</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/tafia/quick-xml/compare/v0.40.1...v0.41.0">https://github.com/tafia/quick-xml/compare/v0.40.1...v0.41.0</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/tafia/quick-xml/blob/master/Changelog.md">quick-xml's
changelog</a>.</em></p>
<blockquote>
<h2>0.41.0 -- 2026-06-29</h2>
<h3>New Features</h3>
<ul>
<li><a
href="https://redirect.github.com/tafia/quick-xml/issues/970">#970</a>:
Add <code>NsReader::resolver_mut()</code> and
<code>NamespaceResolver::{max_declarations_per_element,
set_max_declarations_per_element}</code>.</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li><a
href="https://redirect.github.com/tafia/quick-xml/issues/969">#969</a>:
<code>Attributes</code> (and anything that iterates
<code>BytesStart::attributes()</code>
with the default <code>with_checks(true)</code>) no longer takes O(N²)
time on a start
tag with a large number of attributes. Small tags keep the previous
linear
scan; larger ones switch to a 64-bit hash pre-filter, so the whole tag
is
O(N). The exact <code>AttrError::Duplicated(new, prev)</code> positions
are unchanged.</li>
<li><a
href="https://redirect.github.com/tafia/quick-xml/issues/970">#970</a>:
<code>NamespaceResolver::push</code> (and hence every
<code>NsReader</code> <code>Start</code>/<code>Empty</code>
event) now rejects a start tag that declares more than
<code>DEFAULT_MAX_DECLARATIONS_PER_ELEMENT</code> (256)
<code>xmlns</code> / <code>xmlns:*</code> namespace
bindings, returning the new
<code>NamespaceError::TooManyDeclarations</code>. Previously
<code>push</code> allocated one <code>NamespaceBinding</code> per
declaration with no upper bound,
before the event was returned to the caller, so an <code>NsReader</code>
consumer could
not bound its memory exposure on untrusted input. The limit is
configurable
via <code>NamespaceResolver::set_max_declarations_per_element</code>
(use <code>usize::MAX</code>
to disable).</li>
</ul>
<p><a
href="https://redirect.github.com/tafia/quick-xml/issues/969">#969</a>:
<a
href="https://redirect.github.com/tafia/quick-xml/issues/969">tafia/quick-xml#969</a>
<a
href="https://redirect.github.com/tafia/quick-xml/issues/970">#970</a>:
<a
href="https://redirect.github.com/tafia/quick-xml/issues/970">tafia/quick-xml#970</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/tafia/quick-xml/commit/4deda08abeffdc188c269360229cf47e12a77a9f"><code>4deda08</code></a>
Release 0.41.0</li>
<li><a
href="https://github.com/tafia/quick-xml/commit/1b3b73b4cc6e1e5c2f40fb1cb955d3bbe264368f"><code>1b3b73b</code></a>
Remove unused argument to <code>check!</code></li>
<li><a
href="https://github.com/tafia/quick-xml/commit/07f3db8343cf152f5bc3483ef5b3164582489bea"><code>07f3db8</code></a>
Fix O(N²) duplicate-attribute check in <code>Attributes</code>
iterator</li>
<li><a
href="https://github.com/tafia/quick-xml/commit/7ca25266e94987210daa864889ab15c9332c8a2a"><code>7ca2526</code></a>
Cap namespace declarations per element in
<code>NamespaceResolver::push</code></li>
<li>See full diff in <a
href="https://github.com/tafia/quick-xml/compare/v0.40.1...v0.41.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=quick-xml&package-manager=cargo&previous-version=0.40.1&new-version=0.41.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…in the website group (#128)

Bumps the website group in /website with 1 update:
[@playwright/test](https://github.com/microsoft/playwright).

Updates `@playwright/test` from 1.61.0 to 1.61.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/microsoft/playwright/releases">@​playwright/test's
releases</a>.</em></p>
<blockquote>
<h2>v1.61.1</h2>
<h3>Bug Fixes</h3>
<ul>
<li><a
href="https://redirect.github.com/microsoft/playwright/issues/41365">#41365</a>
[Bug]: Expect.Extend matcher with same name as default matcher in same
expect instance overrides default matchers implementation to custom
matcher</li>
<li><a
href="https://redirect.github.com/microsoft/playwright/issues/41351">#41351</a>
[Bug]: Playwright UI mode: apiRequestContext._wrapApiCall reports
unexpected number of bytes (same test passes in headed mode)</li>
<li><a
href="https://redirect.github.com/microsoft/playwright/issues/41360">#41360</a>
[Bug]: Trace viewer: message times in websockets are downscaled by
1000</li>
<li><a
href="https://redirect.github.com/microsoft/playwright/issues/41311">#41311</a>
[Bug]: [Regression]: Sync loader throws
&quot;context.conditions?.includes is not a function&quot; on Node
22.15</li>
<li><a
href="https://redirect.github.com/microsoft/playwright/issues/41371">#41371</a>
[Regression]: Sync ESM loader (registerHooks) fails to resolve
extensionless .ts subpath imports across pnpm workspace symlinks</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/microsoft/playwright/commit/39e3553a4f283a41134d75d7e404484bd9e6865a"><code>39e3553</code></a>
cherry-pick(<a
href="https://redirect.github.com/microsoft/playwright/issues/41399">#41399</a>):
fix(test): load require-reached files as commonjs in syn...</li>
<li><a
href="https://github.com/microsoft/playwright/commit/4328122a0fa91df1be287f12d26f272f598ccca7"><code>4328122</code></a>
chore: mark v1.61.1 (<a
href="https://redirect.github.com/microsoft/playwright/issues/41404">#41404</a>)</li>
<li><a
href="https://github.com/microsoft/playwright/commit/2c29a94ed59a2dbb2cb2553ee7d1ba429f027826"><code>2c29a94</code></a>
fix(tracing): stop recording websocket frames outside of chunks (<a
href="https://redirect.github.com/microsoft/playwright/issues/41398">#41398</a>)</li>
<li><a
href="https://github.com/microsoft/playwright/commit/4324b1904199c58ae56d864390f5210df18e33f6"><code>4324b19</code></a>
cherry-pick(<a
href="https://redirect.github.com/microsoft/playwright/issues/41367">#41367</a>):
fix(test): keep builtin expect matchers on base extend</li>
<li><a
href="https://github.com/microsoft/playwright/commit/041e7e30002e7c384e1918c29720b34c435145f4"><code>041e7e3</code></a>
cherry-pick(<a
href="https://redirect.github.com/microsoft/playwright/issues/41364">#41364</a>):
fix(har): <code>WebSocket</code> message timestamps should be in
mi...</li>
<li><a
href="https://github.com/microsoft/playwright/commit/b8a0fc33932399fc5cfcd211165cf16f8ca01d71"><code>b8a0fc3</code></a>
cherry-pick(<a
href="https://redirect.github.com/microsoft/playwright/issues/41309">#41309</a>,
<a
href="https://redirect.github.com/microsoft/playwright/issues/43149">#43149</a>):
Revert &quot;fix(firefox): treat `navigationCommitted...</li>
<li><a
href="https://github.com/microsoft/playwright/commit/b5a31759e6611397bf3afaaa6049a420a5f082bd"><code>b5a3175</code></a>
cherry-pick(<a
href="https://redirect.github.com/microsoft/playwright/issues/41319">#41319</a>):
fix(loader): support other node versions</li>
<li><a
href="https://github.com/microsoft/playwright/commit/d4724a91b280ae1ee9a87c426e9d6a953c59756e"><code>d4724a9</code></a>
cherry-pick(<a
href="https://redirect.github.com/microsoft/playwright/issues/41290">#41290</a>):
feat(docker): add Ubuntu 26.04 (Resolute Raccoon) image</li>
<li>See full diff in <a
href="https://github.com/microsoft/playwright/compare/v1.61.0...v1.61.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@playwright/test&package-manager=npm_and_yarn&previous-version=1.61.0&new-version=1.61.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps the rust-host group with 3 updates:
[lsp-server](https://github.com/rust-lang/rust-analyzer),
[tree-sitter](https://github.com/tree-sitter/tree-sitter) and
[anyhow](https://github.com/dtolnay/anyhow).

Updates `lsp-server` from 0.7.9 to 0.8.0
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/rust-lang/rust-analyzer/commits">compare
view</a></li>
</ul>
</details>
<br />

Updates `tree-sitter` from 0.26.9 to 0.26.10
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/tree-sitter/tree-sitter/releases">tree-sitter's
releases</a>.</em></p>
<blockquote>
<h2>v0.26.10</h2>
<h2>What's Changed</h2>
<ul>
<li>fix(lib): update doc comment for <code>ts_parser_parse</code> by <a
href="https://github.com/WillLillis"><code>@​WillLillis</code></a> in <a
href="https://redirect.github.com/tree-sitter/tree-sitter/pull/5642">tree-sitter/tree-sitter#5642</a></li>
<li>fix(lib): use correct TREE_SITTER_HIDE_SYMBOLS macro name in alloc.h
by <a
href="https://github.com/tree-sitter-ci-bot"><code>@​tree-sitter-ci-bot</code></a>[bot]
in <a
href="https://redirect.github.com/tree-sitter/tree-sitter/pull/5643">tree-sitter/tree-sitter#5643</a></li>
<li>fix(cli): improve soundness of cst range calculation by <a
href="https://github.com/WillLillis"><code>@​WillLillis</code></a> in <a
href="https://redirect.github.com/tree-sitter/tree-sitter/pull/5650">tree-sitter/tree-sitter#5650</a></li>
<li>fix(lib): Consider subtree lookahead bytes when determining whether
the parser can reuse a node. by <a
href="https://github.com/tree-sitter-ci-bot"><code>@​tree-sitter-ci-bot</code></a>[bot]
in <a
href="https://redirect.github.com/tree-sitter/tree-sitter/pull/5656">tree-sitter/tree-sitter#5656</a></li>
<li>fix(cli): display warning to user if parser test corpus dir isn't
found by <a
href="https://github.com/tree-sitter-ci-bot"><code>@​tree-sitter-ci-bot</code></a>[bot]
in <a
href="https://redirect.github.com/tree-sitter/tree-sitter/pull/5669">tree-sitter/tree-sitter#5669</a></li>
<li>fix: add DESCRIPTION to grammar Makefile template by <a
href="https://github.com/WillLillis"><code>@​WillLillis</code></a> in <a
href="https://redirect.github.com/tree-sitter/tree-sitter/pull/5672">tree-sitter/tree-sitter#5672</a></li>
<li>fix(cli): infinite loop in highlight test by <a
href="https://github.com/WillLillis"><code>@​WillLillis</code></a> in <a
href="https://redirect.github.com/tree-sitter/tree-sitter/pull/5674">tree-sitter/tree-sitter#5674</a></li>
<li>fix(lib): address strict aliasing violations in
<code>TreeCursor</code> type by <a
href="https://github.com/WillLillis"><code>@​WillLillis</code></a> in <a
href="https://redirect.github.com/tree-sitter/tree-sitter/pull/5693">tree-sitter/tree-sitter#5693</a></li>
<li>build(deps): bump wasmtime-c-api to v36.0.12 by <a
href="https://github.com/clason"><code>@​clason</code></a> in <a
href="https://redirect.github.com/tree-sitter/tree-sitter/pull/5709">tree-sitter/tree-sitter#5709</a></li>
<li>fix(dsl): forbid invalid field names by <a
href="https://github.com/WillLillis"><code>@​WillLillis</code></a> in <a
href="https://redirect.github.com/tree-sitter/tree-sitter/pull/5710">tree-sitter/tree-sitter#5710</a></li>
<li>Fix issues with queries matching a parent node with anchored
children (siblings) by <a
href="https://github.com/tree-sitter-ci-bot"><code>@​tree-sitter-ci-bot</code></a>[bot]
in <a
href="https://redirect.github.com/tree-sitter/tree-sitter/pull/5712">tree-sitter/tree-sitter#5712</a></li>
<li>test(query): regression test for anchored siblings inside a parent
by <a
href="https://github.com/tree-sitter-ci-bot"><code>@​tree-sitter-ci-bot</code></a>[bot]
in <a
href="https://redirect.github.com/tree-sitter/tree-sitter/pull/5716">tree-sitter/tree-sitter#5716</a></li>
<li>release v0.26.10 by <a
href="https://github.com/WillLillis"><code>@​WillLillis</code></a> in <a
href="https://redirect.github.com/tree-sitter/tree-sitter/pull/5717">tree-sitter/tree-sitter#5717</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/tree-sitter/tree-sitter/compare/v0.26.9...v0.26.10">https://github.com/tree-sitter/tree-sitter/compare/v0.26.9...v0.26.10</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/tree-sitter/tree-sitter/commit/3fc4cd21bca378f8acf8c823809de4706b1808f6"><code>3fc4cd2</code></a>
release v0.26.10</li>
<li><a
href="https://github.com/tree-sitter/tree-sitter/commit/568aee0b7e2e93b6eb7c132c9fafc185203b0661"><code>568aee0</code></a>
test(query): regression test for anchored siblings inside a parent</li>
<li><a
href="https://github.com/tree-sitter/tree-sitter/commit/2efce10fe988408a1b02de4527b3f6128bb68d0e"><code>2efce10</code></a>
fix(query): skip passthrough steps when checking for fallible step
splitting</li>
<li><a
href="https://github.com/tree-sitter/tree-sitter/commit/e8b96392919aeae84c52678be1489b9d507c568a"><code>e8b9639</code></a>
fix(query): avoid overriding states not seeking immediate match with
states s...</li>
<li><a
href="https://github.com/tree-sitter/tree-sitter/commit/576564d25a6944859d70925b6cb693843cafc2c7"><code>576564d</code></a>
fix(query): take anchors between siblings into account for fallible step
spli...</li>
<li><a
href="https://github.com/tree-sitter/tree-sitter/commit/fbf3049dc085b01c124308c0d61dba06cdc92a16"><code>fbf3049</code></a>
fix(dsl): forbid invalid field names</li>
<li><a
href="https://github.com/tree-sitter/tree-sitter/commit/99bc36b857eccb3cb70d8734aaf7e2a83d672d60"><code>99bc36b</code></a>
build(deps): bump wasmtime-c-api to v36.0.12</li>
<li><a
href="https://github.com/tree-sitter/tree-sitter/commit/1ef1048d0567cacc0b74ad1a911b95f3de2b8c47"><code>1ef1048</code></a>
fix(build): use <code>std</code> helper rather than passing
<code>-std=c11</code> flag</li>
<li><a
href="https://github.com/tree-sitter/tree-sitter/commit/a61be4ac277bc8cb4ffa8419759faec0562c46f3"><code>a61be4a</code></a>
fix(lib): address strict aliasing violations in <code>TreeCursor</code>
type</li>
<li><a
href="https://github.com/tree-sitter/tree-sitter/commit/be8f380ad47333e0df5a7b4f447485a6cd7f0fa7"><code>be8f380</code></a>
fix(cli): highlight test did not properly check for spans on later
rows</li>
<li>Additional commits viewable in <a
href="https://github.com/tree-sitter/tree-sitter/compare/v0.26.9...v0.26.10">compare
view</a></li>
</ul>
</details>
<br />

Updates `anyhow` from 1.0.102 to 1.0.103
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/dtolnay/anyhow/releases">anyhow's
releases</a>.</em></p>
<blockquote>
<h2>1.0.103</h2>
<ul>
<li>Fix Stacked Borrows violation (UB) in
<code>Error::downcast_mut</code> (<a
href="https://redirect.github.com/dtolnay/anyhow/issues/451">#451</a>,
<a
href="https://redirect.github.com/dtolnay/anyhow/issues/452">#452</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/dtolnay/anyhow/commit/5bdb0e24db3994be119d42f18fe2d655e1f68f4a"><code>5bdb0e2</code></a>
Release 1.0.103</li>
<li><a
href="https://github.com/dtolnay/anyhow/commit/e621bd35ddddcd8b2f39d80b9f5938583571a87d"><code>e621bd3</code></a>
Merge pull request <a
href="https://redirect.github.com/dtolnay/anyhow/issues/452">#452</a>
from dtolnay/downcast</li>
<li><a
href="https://github.com/dtolnay/anyhow/commit/6e8c000690151cba99305092024535905b2be162"><code>6e8c000</code></a>
Eliminate pointer-&gt;reference-&gt;pointer during downcast</li>
<li><a
href="https://github.com/dtolnay/anyhow/commit/67c4abd7718b6191768193993270abe8dcdd66bb"><code>67c4abd</code></a>
Add regression test for issue 451</li>
<li><a
href="https://github.com/dtolnay/anyhow/commit/917a16932009c1957f53c2ea325663948add2153"><code>917a169</code></a>
Update actions/upload-artifact@v6 -&gt; v7</li>
<li><a
href="https://github.com/dtolnay/anyhow/commit/d9dc3faf78b8647fdb5b8c5b53abb85e05e13d42"><code>d9dc3fa</code></a>
Update actions/checkout@v6 -&gt; v7</li>
<li><a
href="https://github.com/dtolnay/anyhow/commit/841522b2aa09732fecee40804440d2c35c68c480"><code>841522b</code></a>
Raise minimum tested compiler to rust 1.85</li>
<li>See full diff in <a
href="https://github.com/dtolnay/anyhow/compare/1.0.102...1.0.103">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps the github-actions group with 3 updates:
[actions/setup-dotnet](https://github.com/actions/setup-dotnet),
[actions/cache](https://github.com/actions/cache) and
[taiki-e/install-action](https://github.com/taiki-e/install-action).

Updates `actions/setup-dotnet` from 5.3.0 to 5.4.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/setup-dotnet/releases">actions/setup-dotnet's
releases</a>.</em></p>
<blockquote>
<h2>v5.4.0</h2>
<h2>What's Changed</h2>
<h3>Enhancements</h3>
<ul>
<li>Improve global.json SDK version validation for rollForward by <a
href="https://github.com/priyagupta108"><code>@​priyagupta108</code></a>
in <a
href="https://redirect.github.com/actions/setup-dotnet/pull/742">actions/setup-dotnet#742</a></li>
<li>Pin actions to commit SHAs in workflows by <a
href="https://github.com/priya-kinthali"><code>@​priya-kinthali</code></a>
in <a
href="https://redirect.github.com/actions/setup-dotnet/pull/744">actions/setup-dotnet#744</a></li>
<li>Expand the CSC problem matcher to light up more errors on GitHub. by
<a
href="https://github.com/StephenCleary"><code>@​StephenCleary</code></a>
in <a
href="https://redirect.github.com/actions/setup-dotnet/pull/717">actions/setup-dotnet#717</a></li>
</ul>
<h3>Documentation</h3>
<ul>
<li>Docs(action): Explicitly mark all optional inputs with required:
false by <a
href="https://github.com/kranthipoturaju"><code>@​kranthipoturaju</code></a>
in <a
href="https://redirect.github.com/actions/setup-dotnet/pull/737">actions/setup-dotnet#737</a></li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>Fix global.json creation command by <a
href="https://github.com/michal2612"><code>@​michal2612</code></a> in <a
href="https://redirect.github.com/actions/setup-dotnet/pull/694">actions/setup-dotnet#694</a></li>
</ul>
<h3>Dependency Updates</h3>
<ul>
<li>Upgrade <code>@​actions/cache</code> to 5.1.0, log cache write
denied by <a
href="https://github.com/jasongin"><code>@​jasongin</code></a> in <a
href="https://redirect.github.com/actions/setup-dotnet/pull/746">actions/setup-dotnet#746</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/jasongin"><code>@​jasongin</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/setup-dotnet/pull/746">actions/setup-dotnet#746</a></li>
<li><a
href="https://github.com/michal2612"><code>@​michal2612</code></a> made
their first contribution in <a
href="https://redirect.github.com/actions/setup-dotnet/pull/694">actions/setup-dotnet#694</a></li>
<li><a
href="https://github.com/kranthipoturaju"><code>@​kranthipoturaju</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/setup-dotnet/pull/737">actions/setup-dotnet#737</a></li>
<li><a
href="https://github.com/StephenCleary"><code>@​StephenCleary</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/setup-dotnet/pull/717">actions/setup-dotnet#717</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/setup-dotnet/compare/v5...v5.4.0">https://github.com/actions/setup-dotnet/compare/v5...v5.4.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/setup-dotnet/commit/26b0ec14cb23fa6904739307f278c14f94c95bf1"><code>26b0ec1</code></a>
Expand the CSC problem matcher to light up more errors on GitHub. (<a
href="https://redirect.github.com/actions/setup-dotnet/issues/717">#717</a>)</li>
<li><a
href="https://github.com/actions/setup-dotnet/commit/da5e5482f2d0700168cff080da45b50da8b60f0e"><code>da5e548</code></a>
docs(action): explicitly mark all optional inputs with required: false
(<a
href="https://redirect.github.com/actions/setup-dotnet/issues/737">#737</a>)</li>
<li><a
href="https://github.com/actions/setup-dotnet/commit/9bd3b44355ba7c500f3d2e029636c6d29ac5caab"><code>9bd3b44</code></a>
Improve readability of global.json creation command (<a
href="https://redirect.github.com/actions/setup-dotnet/issues/694">#694</a>)</li>
<li><a
href="https://github.com/actions/setup-dotnet/commit/4406a635cd2be9c92689ea22b2f74ea57297088c"><code>4406a63</code></a>
Bump <code>@​actions/cache</code> to 5.1.0, log cache write denied (<a
href="https://redirect.github.com/actions/setup-dotnet/issues/746">#746</a>)</li>
<li><a
href="https://github.com/actions/setup-dotnet/commit/dc3262dda80e97f1c7865b3b122e99240e30b738"><code>dc3262d</code></a>
pin actions to commit SHAs in workflows (<a
href="https://redirect.github.com/actions/setup-dotnet/issues/744">#744</a>)</li>
<li><a
href="https://github.com/actions/setup-dotnet/commit/95a3f8b067437dc9b2027a437f5dc3b4569ddd49"><code>95a3f8b</code></a>
Validate global.json SDK version before rollForward optimization (<a
href="https://redirect.github.com/actions/setup-dotnet/issues/742">#742</a>)</li>
<li>See full diff in <a
href="https://github.com/actions/setup-dotnet/compare/9a946fdbd5fb07b82b2f5a4466058b876ab72bb2...26b0ec14cb23fa6904739307f278c14f94c95bf1">compare
view</a></li>
</ul>
</details>
<br />

Updates `actions/cache` from 5.0.5 to 6.1.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/cache/releases">actions/cache's
releases</a>.</em></p>
<blockquote>
<h2>v6.1.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Bump <code>@​actions/cache</code> to v6.1.0 - handle read-only cache
access by <a
href="https://github.com/jasongin"><code>@​jasongin</code></a> in <a
href="https://redirect.github.com/actions/cache/pull/1768">actions/cache#1768</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/cache/compare/v6...v6.1.0">https://github.com/actions/cache/compare/v6...v6.1.0</a></p>
<h2>v6.0.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Update packages, migrate to ESM by <a
href="https://github.com/Samirat"><code>@​Samirat</code></a> in <a
href="https://redirect.github.com/actions/cache/pull/1760">actions/cache#1760</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/cache/compare/v5...v6.0.0">https://github.com/actions/cache/compare/v5...v6.0.0</a></p>
<h2>v5.1.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Bump <code>@​actions/cache</code> to v5.1.0 - handle read-only cache
access by <a
href="https://github.com/jasongin"><code>@​jasongin</code></a> in <a
href="https://redirect.github.com/actions/cache/pull/1775">actions/cache#1775</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/cache/compare/v5...v5.1.0">https://github.com/actions/cache/compare/v5...v5.1.0</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/actions/cache/blob/main/RELEASES.md">actions/cache's
changelog</a>.</em></p>
<blockquote>
<h1>Releases</h1>
<h2>How to prepare a release</h2>
<blockquote>
<p>[!NOTE]
Relevant for maintainers with write access only.</p>
</blockquote>
<ol>
<li>Switch to a new branch from <code>main</code>.</li>
<li>Run <code>npm test</code> to ensure all tests are passing.</li>
<li>Update the version in <a
href="https://github.com/actions/cache/blob/main/package.json"><code>https://github.com/actions/cache/blob/main/package.json</code></a>.</li>
<li>Run <code>npm run build</code> to update the compiled files.</li>
<li>Update this <a
href="https://github.com/actions/cache/blob/main/RELEASES.md"><code>https://github.com/actions/cache/blob/main/RELEASES.md</code></a>
with the new version and changes in the <code>## Changelog</code>
section.</li>
<li>Run <code>licensed cache</code> to update the license report.</li>
<li>Run <code>licensed status</code> and resolve any warnings by
updating the <a
href="https://github.com/actions/cache/blob/main/.licensed.yml"><code>https://github.com/actions/cache/blob/main/.licensed.yml</code></a>
file with the exceptions.</li>
<li>Commit your changes and push your branch upstream.</li>
<li>Open a pull request against <code>main</code> and get it reviewed
and merged.</li>
<li>Draft a new release <a
href="https://github.com/actions/cache/releases">https://github.com/actions/cache/releases</a>
use the same version number used in <code>package.json</code>
<ol>
<li>Create a new tag with the version number.</li>
<li>Auto generate release notes and update them to match the changes you
made in <code>RELEASES.md</code>.</li>
<li>Toggle the set as the latest release option.</li>
<li>Publish the release.</li>
</ol>
</li>
<li>Navigate to <a
href="https://github.com/actions/cache/actions/workflows/release-new-action-version.yml">https://github.com/actions/cache/actions/workflows/release-new-action-version.yml</a>
<ol>
<li>There should be a workflow run queued with the same version
number.</li>
<li>Approve the run to publish the new version and update the major tags
for this action.</li>
</ol>
</li>
</ol>
<h2>Changelog</h2>
<h3>6.1.0</h3>
<ul>
<li>Bump <code>@actions/cache</code> to v6.1.0 to pick up <a
href="https://redirect.github.com/actions/toolkit/pull/2435">actions/toolkit#2435
Handle cache write error due to read-only token</a></li>
<li>Switch redundant &quot;Cache save failed&quot; warning to debug log
in save-only</li>
</ul>
<h3>6.0.0</h3>
<ul>
<li>Updated <code>@actions/cache</code> to ^6.0.1,
<code>@actions/core</code> to ^3.0.1, <code>@actions/exec</code> to
^3.0.0, <code>@actions/io</code> to ^3.0.2</li>
<li>Migrated to ESM module system</li>
<li>Upgraded Jest to v30 and test infrastructure to be ESM
compatible</li>
</ul>
<h3>5.0.4</h3>
<ul>
<li>Bump <code>minimatch</code> to v3.1.5 (fixes ReDoS via globstar
patterns)</li>
<li>Bump <code>undici</code> to v6.24.1 (WebSocket decompression bomb
protection, header validation fixes)</li>
<li>Bump <code>fast-xml-parser</code> to v5.5.6</li>
</ul>
<h3>5.0.3</h3>
<ul>
<li>Bump <code>@actions/cache</code> to v5.0.5 (Resolves: <a
href="https://github.com/actions/cache/security/dependabot/33">https://github.com/actions/cache/security/dependabot/33</a>)</li>
<li>Bump <code>@actions/core</code> to v2.0.3</li>
</ul>
<h3>5.0.2</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/cache/commit/55cc8345863c7cc4c66a329aec7e433d2d1c52a9"><code>55cc834</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/cache/issues/1768">#1768</a>
from jasongin/readonly-cache</li>
<li><a
href="https://github.com/actions/cache/commit/d8cd72f230726cdf4457ebb61ec1b593a8d12337"><code>d8cd72f</code></a>
Bump <code>@​actions/cache</code> to v6.1.0 - handle cache write error
due to RO token</li>
<li><a
href="https://github.com/actions/cache/commit/2c8a9bd7457de244a408f35966fab2fb45fda9c8"><code>2c8a9bd</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/cache/issues/1760">#1760</a>
from actions/samirat/esm_migration_and_package_update</li>
<li><a
href="https://github.com/actions/cache/commit/e9b91fdc3fea7d79165fceb79042ef45c2d51023"><code>e9b91fd</code></a>
Prettier fixes</li>
<li><a
href="https://github.com/actions/cache/commit/e4884b8ff7f92ef6b52c79eda480bbc86e685adb"><code>e4884b8</code></a>
Rebuild dist</li>
<li><a
href="https://github.com/actions/cache/commit/10baf0191a3c426ea0fa4a3253a5c04233b6e18f"><code>10baf01</code></a>
Fixed licenses</li>
<li><a
href="https://github.com/actions/cache/commit/e39b386c9004d72a15d864ade8c0b3a702d47a37"><code>e39b386</code></a>
Fix test mock return order</li>
<li><a
href="https://github.com/actions/cache/commit/b6928203372a8571ff984c0c883ef3a1adfb0c06"><code>b692820</code></a>
PR feedback</li>
<li><a
href="https://github.com/actions/cache/commit/60749128a44d25d3c520a489e576380cf00ff3f1"><code>6074912</code></a>
Rebuild dist bundles as ESM to match type:module</li>
<li><a
href="https://github.com/actions/cache/commit/5a912e8b4af820fa082a0e75cfd2c782f8fbfe0e"><code>5a912e8</code></a>
Fix lint and jest issues</li>
<li>Additional commits viewable in <a
href="https://github.com/actions/cache/compare/27d5ce7f107fe9357f9df03efb73ab90386fccae...55cc8345863c7cc4c66a329aec7e433d2d1c52a9">compare
view</a></li>
</ul>
</details>
<br />

Updates `taiki-e/install-action` from 2.82.2 to 2.82.6
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/taiki-e/install-action/releases">taiki-e/install-action's
releases</a>.</em></p>
<blockquote>
<h2>2.82.6</h2>
<ul>
<li>
<p>Update <code>vacuum@latest</code> to 0.29.7.</p>
</li>
<li>
<p>Update <code>uv@latest</code> to 0.11.25.</p>
</li>
<li>
<p>Update <code>syft@latest</code> to 1.46.0.</p>
</li>
<li>
<p>Update <code>dprint@latest</code> to 0.55.0.</p>
</li>
<li>
<p>Update <code>cargo-auditable@latest</code> to 0.7.5.</p>
</li>
</ul>
<h2>2.82.5</h2>
<ul>
<li>
<p>Update <code>wasmtime@latest</code> to 46.0.1.</p>
</li>
<li>
<p>Update <code>wasm-bindgen@latest</code> to 0.2.126.</p>
</li>
<li>
<p>Update <code>vacuum@latest</code> to 0.29.6.</p>
</li>
<li>
<p>Update <code>mise@latest</code> to 2026.6.14.</p>
</li>
<li>
<p>Update <code>cargo-rdme@latest</code> to 2.1.0.</p>
</li>
</ul>
<h2>2.82.4</h2>
<ul>
<li>
<p>Update <code>uv@latest</code> to 0.11.24.</p>
</li>
<li>
<p>Update <code>mise@latest</code> to 2026.6.13.</p>
</li>
<li>
<p>Update <code>just@latest</code> to 1.54.0.</p>
</li>
<li>
<p>Update <code>biome@latest</code> to 2.5.1.</p>
</li>
</ul>
<h2>2.82.3</h2>
<ul>
<li>
<p>Update <code>zizmor@latest</code> to 1.26.1.</p>
</li>
<li>
<p>Update <code>wasmtime@latest</code> to 46.0.0.</p>
</li>
<li>
<p>Update <code>tombi@latest</code> to 1.1.5.</p>
</li>
<li>
<p>Update <code>mise@latest</code> to 2026.6.12.</p>
</li>
<li>
<p>Update <code>kingfisher@latest</code> to 1.104.0.</p>
</li>
<li>
<p>Update <code>cargo-tarpaulin@latest</code> to 0.35.5.</p>
</li>
<li>
<p>Update <code>cargo-nextest@latest</code> to 0.9.138.</p>
</li>
<li>
<p>Update <code>cargo-crap@latest</code> to 0.3.0.</p>
</li>
<li>
<p>Update <code>cargo-binstall@latest</code> to 1.20.1.</p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md">taiki-e/install-action's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<p>All notable changes to this project will be documented in this
file.</p>
<p>This project adheres to <a href="https://semver.org">Semantic
Versioning</a>.</p>
<!-- raw HTML omitted -->
<h2>[Unreleased]</h2>
<h2>[2.82.6] - 2026-06-29</h2>
<ul>
<li>
<p>Update <code>vacuum@latest</code> to 0.29.7.</p>
</li>
<li>
<p>Update <code>uv@latest</code> to 0.11.25.</p>
</li>
<li>
<p>Update <code>syft@latest</code> to 1.46.0.</p>
</li>
<li>
<p>Update <code>dprint@latest</code> to 0.55.0.</p>
</li>
<li>
<p>Update <code>cargo-auditable@latest</code> to 0.7.5.</p>
</li>
</ul>
<h2>[2.82.5] - 2026-06-26</h2>
<ul>
<li>
<p>Update <code>wasmtime@latest</code> to 46.0.1.</p>
</li>
<li>
<p>Update <code>wasm-bindgen@latest</code> to 0.2.126.</p>
</li>
<li>
<p>Update <code>vacuum@latest</code> to 0.29.6.</p>
</li>
<li>
<p>Update <code>mise@latest</code> to 2026.6.14.</p>
</li>
<li>
<p>Update <code>cargo-rdme@latest</code> to 2.1.0.</p>
</li>
</ul>
<h2>[2.82.4] - 2026-06-25</h2>
<ul>
<li>
<p>Update <code>uv@latest</code> to 0.11.24.</p>
</li>
<li>
<p>Update <code>mise@latest</code> to 2026.6.13.</p>
</li>
<li>
<p>Update <code>just@latest</code> to 1.54.0.</p>
</li>
<li>
<p>Update <code>biome@latest</code> to 2.5.1.</p>
</li>
</ul>
<h2>[2.82.3] - 2026-06-24</h2>
<ul>
<li>Update <code>zizmor@latest</code> to 1.26.1.</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/taiki-e/install-action/commit/9bcaee1dcae34154180f412e2fa69355a7cda9f6"><code>9bcaee1</code></a>
Release 2.82.6</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/e43cd7ce2e2c5a6d08d652405a0ead8cda7bf2db"><code>e43cd7c</code></a>
Update <code>vacuum@latest</code> to 0.29.7</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/3761407ad0b5e4e5b42ccb62e48ffa2712e94703"><code>3761407</code></a>
Update <code>uv@latest</code> to 0.11.25</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/cb6ad0dba1ff078e589e75ae88bb03120688feef"><code>cb6ad0d</code></a>
Update tombi manifest</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/6022671c93f20efad71663e3adc06d63e7f1ec8a"><code>6022671</code></a>
Update <code>syft@latest</code> to 1.46.0</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/ab5aae8354703341b0939f4e6c1bb66372b446db"><code>ab5aae8</code></a>
Update gungraun-runner manifest</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/867613b49949fba1c8fe194d323c7c51b77b24d2"><code>867613b</code></a>
Update editorconfig-checker manifest</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/c5837ef63439ac9ebc0ecce97e23cca6a4a5aac4"><code>c5837ef</code></a>
Update <code>dprint@latest</code> to 0.55.0</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/7d41d74582778d0345db89bc1054e86f3802b6d2"><code>7d41d74</code></a>
Update <code>cargo-auditable@latest</code> to 0.7.5</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/bffeee26d4db9be238a4ea78d8826604ebcb594d"><code>bffeee2</code></a>
Release 2.82.5</li>
<li>Additional commits viewable in <a
href="https://github.com/taiki-e/install-action/compare/9e1e5806d4a4822de933115878265be9aaa786d9...9bcaee1dcae34154180f412e2fa69355a7cda9f6">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…7 updates (#131)

Bumps the vscode-extension group in /editors/vscode with 7 updates:

| Package | From | To |
| --- | --- | --- |
|
[vscode-languageclient](https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client)
| `10.0.0` | `10.0.1` |
|
[@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node)
| `26.0.0` | `26.0.1` |
|
[@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin)
| `8.62.0` | `8.62.1` |
|
[@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser)
| `8.62.0` | `8.62.1` |
| [eslint](https://github.com/eslint/eslint) | `10.5.0` | `10.6.0` |
| [playwright](https://github.com/microsoft/playwright) | `1.61.0` |
`1.61.1` |
|
[typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint)
| `8.62.0` | `8.62.1` |

Updates `vscode-languageclient` from 10.0.0 to 10.0.1
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/microsoft/vscode-languageserver-node/commit/bb5ee9298f3b0881df78c35e5762512d2c922484"><code>bb5ee92</code></a>
Prepare 3.18.1 release</li>
<li><a
href="https://github.com/microsoft/vscode-languageserver-node/commit/b0a8ea15096b00d87a65f9ed3f36e5826de14d4c"><code>b0a8ea1</code></a>
Make <code>TextDocumentContentFeature</code> a supported capability (<a
href="https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client/issues/1796">#1796</a>)</li>
<li><a
href="https://github.com/microsoft/vscode-languageserver-node/commit/3c7721e8f929df1accb0a199c2e8f2e1055e0722"><code>3c7721e</code></a>
Update dependency versions in lock files (<a
href="https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client/issues/1788">#1788</a>)</li>
<li><a
href="https://github.com/microsoft/vscode-languageserver-node/commit/dc94993a5e9333f588e1720057c091de795e967a"><code>dc94993</code></a>
Merge 3.18 release into main (<a
href="https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client/issues/1787">#1787</a>)</li>
<li>See full diff in <a
href="https://github.com/Microsoft/vscode-languageserver-node/commits/release/client/10.0.1/client">compare
view</a></li>
</ul>
</details>
<br />

Updates `@types/node` from 26.0.0 to 26.0.1
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node">compare
view</a></li>
</ul>
</details>
<br />

Updates `@typescript-eslint/eslint-plugin` from 8.62.0 to 8.62.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/releases">@​typescript-eslint/eslint-plugin's
releases</a>.</em></p>
<blockquote>
<h2>v8.62.1</h2>
<h2>8.62.1 (2026-06-29)</h2>
<h3>🩹 Fixes</h3>
<ul>
<li><strong>eslint-plugin:</strong> [prefer-optional-chain] use
suggestion instead of autofix for trailing binary operator (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12328">#12328</a>)</li>
<li><strong>eslint-plugin:</strong>
[no-unnecessary-boolean-literal-compare] preserve boolean result in
fixer for nullable true comparisons (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12365">#12365</a>)</li>
<li><strong>eslint-plugin:</strong> [no-unnecessary-type-assertion]
parenthesize object literal at left edge of expression statement (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12443">#12443</a>,
<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/issues/12418">#12418</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>Kirk Waiblinger <a
href="https://github.com/kirkwaiblinger"><code>@​kirkwaiblinger</code></a></li>
<li>mdm317</li>
<li>Patrick Aleite</li>
<li>송재욱</li>
</ul>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.62.1">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md">@​typescript-eslint/eslint-plugin's
changelog</a>.</em></p>
<blockquote>
<h2>8.62.1 (2026-06-29)</h2>
<h3>🩹 Fixes</h3>
<ul>
<li><strong>eslint-plugin:</strong> [no-unnecessary-type-assertion]
parenthesize object literal at left edge of expression statement (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12443">#12443</a>,
<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/issues/12418">#12418</a>)</li>
<li><strong>eslint-plugin:</strong>
[no-unnecessary-boolean-literal-compare] preserve boolean result in
fixer for nullable true comparisons (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12365">#12365</a>)</li>
<li><strong>eslint-plugin:</strong> [prefer-optional-chain] use
suggestion instead of autofix for trailing binary operator (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12328">#12328</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>Kirk Waiblinger <a
href="https://github.com/kirkwaiblinger"><code>@​kirkwaiblinger</code></a></li>
<li>mdm317</li>
<li>Patrick Aleite</li>
<li>송재욱</li>
</ul>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.62.1">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/3ea32f4ba5e196c08c6da1095619d7f65ba4905e"><code>3ea32f4</code></a>
chore(release): publish 8.62.1</li>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/4ecca6d3f9ee1ab6468c8e9d6810ccc1c2f6bcf9"><code>4ecca6d</code></a>
fix(eslint-plugin): [no-unnecessary-type-assertion] parenthesize object
liter...</li>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/f3a7ec78bf07b42a7e03f2091c98513e05310891"><code>f3a7ec7</code></a>
chore(eslint-plugin-internal): [no-dynamic-tests] restrict where
noFormat can...</li>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/301f350cd11fecce4940b5be8a2b1146a9c6d58b"><code>301f350</code></a>
fix(eslint-plugin): [no-unnecessary-boolean-literal-compare] preserve
boolean...</li>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/ebce2d40f83194599bc3022032ef4fa857977105"><code>ebce2d4</code></a>
fix(eslint-plugin): [prefer-optional-chain] use suggestion instead of
autofix...</li>
<li>See full diff in <a
href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.62.1/packages/eslint-plugin">compare
view</a></li>
</ul>
</details>
<br />

Updates `@typescript-eslint/parser` from 8.62.0 to 8.62.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/releases">@​typescript-eslint/parser's
releases</a>.</em></p>
<blockquote>
<h2>v8.62.1</h2>
<h2>8.62.1 (2026-06-29)</h2>
<h3>🩹 Fixes</h3>
<ul>
<li><strong>eslint-plugin:</strong> [prefer-optional-chain] use
suggestion instead of autofix for trailing binary operator (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12328">#12328</a>)</li>
<li><strong>eslint-plugin:</strong>
[no-unnecessary-boolean-literal-compare] preserve boolean result in
fixer for nullable true comparisons (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12365">#12365</a>)</li>
<li><strong>eslint-plugin:</strong> [no-unnecessary-type-assertion]
parenthesize object literal at left edge of expression statement (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12443">#12443</a>,
<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/issues/12418">#12418</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>Kirk Waiblinger <a
href="https://github.com/kirkwaiblinger"><code>@​kirkwaiblinger</code></a></li>
<li>mdm317</li>
<li>Patrick Aleite</li>
<li>송재욱</li>
</ul>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.62.1">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md">@​typescript-eslint/parser's
changelog</a>.</em></p>
<blockquote>
<h2>8.62.1 (2026-06-29)</h2>
<p>This was a version bump only for parser to align it with other
projects, there were no code changes.</p>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.62.1">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/3ea32f4ba5e196c08c6da1095619d7f65ba4905e"><code>3ea32f4</code></a>
chore(release): publish 8.62.1</li>
<li>See full diff in <a
href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.62.1/packages/parser">compare
view</a></li>
</ul>
</details>
<br />

Updates `eslint` from 10.5.0 to 10.6.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/eslint/eslint/releases">eslint's
releases</a>.</em></p>
<blockquote>
<h2>v10.6.0</h2>
<h2>Features</h2>
<ul>
<li><a
href="https://github.com/eslint/eslint/commit/b1f910628e29a018c860e2352bc14cd07c853d67"><code>b1f9106</code></a>
feat: detect Symbol() and BigInt() in no-constant-binary-expression (<a
href="https://redirect.github.com/eslint/eslint/issues/20981">#20981</a>)
(Taejin Kim)</li>
<li><a
href="https://github.com/eslint/eslint/commit/f291007cb73f55c09cf3c2aa3a405df379a5c594"><code>f291007</code></a>
feat: add checkRelationalComparisons to no-constant-binary-expression
(<a
href="https://redirect.github.com/eslint/eslint/issues/20948">#20948</a>)
(sethamus)</li>
</ul>
<h2>Bug Fixes</h2>
<ul>
<li><a
href="https://github.com/eslint/eslint/commit/6b05784eb271ac98ca3e1e2a48c4b14bb588c786"><code>6b05784</code></a>
fix: prefer-exponentiation-operator invalid autofix at statement start
(<a
href="https://redirect.github.com/eslint/eslint/issues/20997">#20997</a>)
(Milos Djermanovic)</li>
<li><a
href="https://github.com/eslint/eslint/commit/bb9eb2ab28daf6e6dafc62daa6b5daf9c2b7046c"><code>bb9eb2a</code></a>
fix: account for shadowed <code>Boolean</code> in
<code>no-extra-boolean-cast</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/21013">#21013</a>)
(den$)</li>
<li><a
href="https://github.com/eslint/eslint/commit/8fd8741009a3ed7845c89bfe2fb3eaa2119b2d15"><code>8fd8741</code></a>
fix: don't report shadowed undefined in <code>radix</code> rule (<a
href="https://redirect.github.com/eslint/eslint/issues/21011">#21011</a>)
(Pixel)</li>
<li><a
href="https://github.com/eslint/eslint/commit/5784980ce8ba99556db98907895d82ef49cd0a27"><code>5784980</code></a>
fix: don't report shadowed undefined in no-throw-literal (<a
href="https://redirect.github.com/eslint/eslint/issues/21010">#21010</a>)
(Pixel)</li>
<li><a
href="https://github.com/eslint/eslint/commit/9cd1e6de5bad487a9c713bdc9fda5af7ea0babcd"><code>9cd1e6d</code></a>
fix: suppress invalid class suggestion in no-promise-executor-return (<a
href="https://redirect.github.com/eslint/eslint/issues/21008">#21008</a>)
(Pixel)</li>
<li><a
href="https://github.com/eslint/eslint/commit/d4eb2dc95f17cdf491edca91b7d9caf05b86253f"><code>d4eb2dc</code></a>
fix: don't report shadowed undefined in prefer-promise-reject-errors (<a
href="https://redirect.github.com/eslint/eslint/issues/21006">#21006</a>)
(Pixel)</li>
<li><a
href="https://github.com/eslint/eslint/commit/23604646db6d987d01edb8aa5f4d2a88bd4c01d0"><code>2360464</code></a>
fix: prefer-promise-reject-errors false positives for shadowed Promise
(<a
href="https://redirect.github.com/eslint/eslint/issues/21003">#21003</a>)
(den$)</li>
<li><a
href="https://github.com/eslint/eslint/commit/63d52d28de705ec46f328d18166e8b7170b3f024"><code>63d52d2</code></a>
fix: restore max-classes-per-file report range (<a
href="https://redirect.github.com/eslint/eslint/issues/21002">#21002</a>)
(Pixel)</li>
<li><a
href="https://github.com/eslint/eslint/commit/7feaff0cfb8d6a6260d3ea56887c9161daf8c700"><code>7feaff0</code></a>
fix: callback detection logic for IIFEs in max-nested-callbacks (<a
href="https://redirect.github.com/eslint/eslint/issues/20979">#20979</a>)
(fnx)</li>
<li><a
href="https://github.com/eslint/eslint/commit/399a2ec81bcbcff2c67920db51d9276b20ac1025"><code>399a2ec</code></a>
fix: don't report inner non-callbacks in
<code>max-nested-callbacks</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/20995">#20995</a>)
(Milos Djermanovic)</li>
</ul>
<h2>Documentation</h2>
<ul>
<li><a
href="https://github.com/eslint/eslint/commit/a83683db1c27193c2ad333fc5c0aedcc8a293db7"><code>a83683d</code></a>
docs: Update README (GitHub Actions Bot)</li>
<li><a
href="https://github.com/eslint/eslint/commit/f5449f96c2caabbc1a28b15211873e2f672f5ae5"><code>f5449f9</code></a>
docs: document userland patterns for global assertionOptions in RuleT…
(<a
href="https://redirect.github.com/eslint/eslint/issues/20986">#20986</a>)
(playgirl)</li>
<li><a
href="https://github.com/eslint/eslint/commit/bea49f7b2899ebf708482f977ef2ada41fd2c3f0"><code>bea49f7</code></a>
docs: Update README (GitHub Actions Bot)</li>
<li><a
href="https://github.com/eslint/eslint/commit/e5f70f9b06683a887dd0d6dc1cc91a9c9bea816d"><code>e5f70f9</code></a>
docs: update code-path diagrams (<a
href="https://redirect.github.com/eslint/eslint/issues/20984">#20984</a>)
(Tanuj Kanti)</li>
<li><a
href="https://github.com/eslint/eslint/commit/8890c2d40880b195b9167735c24ec0cc5de5eb96"><code>8890c2d</code></a>
docs: add TypeScript config guidance for MCP server (<a
href="https://redirect.github.com/eslint/eslint/issues/20796">#20796</a>)
(Pierluigi Lenoci)</li>
<li><a
href="https://github.com/eslint/eslint/commit/3eb3d9b1b5edecc3fcae0519ddba0e3745e889e3"><code>3eb3d9b</code></a>
docs: Update README (GitHub Actions Bot)</li>
<li><a
href="https://github.com/eslint/eslint/commit/c5bb59cf613dabafd550227b6adaa9327b1095f5"><code>c5bb59c</code></a>
docs: Update README (GitHub Actions Bot)</li>
<li><a
href="https://github.com/eslint/eslint/commit/eb3c97c776731ce11b28cc99f0271f41b9994701"><code>eb3c97c</code></a>
docs: fix grammar in prefer-const rule description (<a
href="https://redirect.github.com/eslint/eslint/issues/20983">#20983</a>)
(lumir)</li>
</ul>
<h2>Chores</h2>
<ul>
<li><a
href="https://github.com/eslint/eslint/commit/6a42034a57a816b0a313720b3b9df09455bd0b5e"><code>6a42034</code></a>
ci: run ecosystem tests on main branch (<a
href="https://redirect.github.com/eslint/eslint/issues/20891">#20891</a>)
(sethamus)</li>
<li><a
href="https://github.com/eslint/eslint/commit/3dbacdbb31673c87ca86ecafbb18712d8d1daed8"><code>3dbacdb</code></a>
ci: bump actions/checkout from 6 to 7 (<a
href="https://redirect.github.com/eslint/eslint/issues/21014">#21014</a>)
(dependabot[bot])</li>
<li><a
href="https://github.com/eslint/eslint/commit/c3abfca7c96cc9a244f54eeb66e9971c59280354"><code>c3abfca</code></a>
chore: correct JSDoc param types in html formatter (<a
href="https://redirect.github.com/eslint/eslint/issues/21018">#21018</a>)
(Minseon Kim)</li>
<li><a
href="https://github.com/eslint/eslint/commit/a8323209cdbefefd540c5beeaa51418d8ec40f9e"><code>a832320</code></a>
ci: split ecosystem tests into separate jobs (<a
href="https://redirect.github.com/eslint/eslint/issues/21001">#21001</a>)
(xbinaryx)</li>
<li><a
href="https://github.com/eslint/eslint/commit/27166e78511db526688afc34bbfab1a458405f3f"><code>27166e7</code></a>
chore: update ecosystem plugins (<a
href="https://redirect.github.com/eslint/eslint/issues/21005">#21005</a>)
(ESLint Bot)</li>
<li><a
href="https://github.com/eslint/eslint/commit/865d76e40107d4fa10a17fc3203b303eb8a88dc3"><code>865d76e</code></a>
ci: bump pnpm/action-setup from 6.0.8 to 6.0.9 (<a
href="https://redirect.github.com/eslint/eslint/issues/20989">#20989</a>)
(dependabot[bot])</li>
<li><a
href="https://github.com/eslint/eslint/commit/27a88c9fa7c040f4cd39e5a5e6e2d02441c408ef"><code>27a88c9</code></a>
chore: update dependency markdown-it to v14 in root (<a
href="https://redirect.github.com/eslint/eslint/issues/20994">#20994</a>)
(Milos Djermanovic)</li>
<li><a
href="https://github.com/eslint/eslint/commit/970cea62b295d931a4109abedeb21ba192d3f2be"><code>970cea6</code></a>
chore: update dependency markdown-it to v14 (<a
href="https://redirect.github.com/eslint/eslint/issues/20993">#20993</a>)
(Milos Djermanovic)</li>
<li><a
href="https://github.com/eslint/eslint/commit/b482120bacb40204fbf16f3b20be7207057157a5"><code>b482120</code></a>
chore: update dependency prettier to v3.8.4 (<a
href="https://redirect.github.com/eslint/eslint/issues/20990">#20990</a>)
(renovate[bot])</li>
<li><a
href="https://github.com/eslint/eslint/commit/6993fb3173da84999fc208507b93f523aa657448"><code>6993fb3</code></a>
chore: update ecosystem plugins (<a
href="https://redirect.github.com/eslint/eslint/issues/20985">#20985</a>)
(ESLint Bot)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/eslint/eslint/commit/5d12a0419636abb71628b7e45063a943c454a7c7"><code>5d12a04</code></a>
10.6.0</li>
<li><a
href="https://github.com/eslint/eslint/commit/f7ca54b138c4ba7b8e65f83b7fe58cc8de50af8b"><code>f7ca54b</code></a>
Build: changelog update for 10.6.0</li>
<li><a
href="https://github.com/eslint/eslint/commit/6a42034a57a816b0a313720b3b9df09455bd0b5e"><code>6a42034</code></a>
ci: run ecosystem tests on main branch (<a
href="https://redirect.github.com/eslint/eslint/issues/20891">#20891</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/b1f910628e29a018c860e2352bc14cd07c853d67"><code>b1f9106</code></a>
feat: detect Symbol() and BigInt() in no-constant-binary-expression (<a
href="https://redirect.github.com/eslint/eslint/issues/20981">#20981</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/3dbacdbb31673c87ca86ecafbb18712d8d1daed8"><code>3dbacdb</code></a>
ci: bump actions/checkout from 6 to 7 (<a
href="https://redirect.github.com/eslint/eslint/issues/21014">#21014</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/c3abfca7c96cc9a244f54eeb66e9971c59280354"><code>c3abfca</code></a>
chore: correct JSDoc param types in html formatter (<a
href="https://redirect.github.com/eslint/eslint/issues/21018">#21018</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/a83683db1c27193c2ad333fc5c0aedcc8a293db7"><code>a83683d</code></a>
docs: Update README</li>
<li><a
href="https://github.com/eslint/eslint/commit/a8323209cdbefefd540c5beeaa51418d8ec40f9e"><code>a832320</code></a>
ci: split ecosystem tests into separate jobs (<a
href="https://redirect.github.com/eslint/eslint/issues/21001">#21001</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/6b05784eb271ac98ca3e1e2a48c4b14bb588c786"><code>6b05784</code></a>
fix: prefer-exponentiation-operator invalid autofix at statement start
(<a
href="https://redirect.github.com/eslint/eslint/issues/20997">#20997</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/bb9eb2ab28daf6e6dafc62daa6b5daf9c2b7046c"><code>bb9eb2a</code></a>
fix: account for shadowed <code>Boolean</code> in
<code>no-extra-boolean-cast</code> (<a
href="https://redirect.github.com/eslint/eslint/issues/21013">#21013</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/eslint/eslint/compare/v10.5.0...v10.6.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `playwright` from 1.61.0 to 1.61.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/microsoft/playwright/releases">playwright's
releases</a>.</em></p>
<blockquote>
<h2>v1.61.1</h2>
<h3>Bug Fixes</h3>
<ul>
<li><a
href="https://redirect.github.com/microsoft/playwright/issues/41365">#41365</a>
[Bug]: Expect.Extend matcher with same name as default matcher in same
expect instance overrides default matchers implementation to custom
matcher</li>
<li><a
href="https://redirect.github.com/microsoft/playwright/issues/41351">#41351</a>
[Bug]: Playwright UI mode: apiRequestContext._wrapApiCall reports
unexpected number of bytes (same test passes in headed mode)</li>
<li><a
href="https://redirect.github.com/microsoft/playwright/issues/41360">#41360</a>
[Bug]: Trace viewer: message times in websockets are downscaled by
1000</li>
<li><a
href="https://redirect.github.com/microsoft/playwright/issues/41311">#41311</a>
[Bug]: [Regression]: Sync loader throws
&quot;context.conditions?.includes is not a function&quot; on Node
22.15</li>
<li><a
href="https://redirect.github.com/microsoft/playwright/issues/41371">#41371</a>
[Regression]: Sync ESM loader (registerHooks) fails to resolve
extensionless .ts subpath imports across pnpm workspace symlinks</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/microsoft/playwright/commit/39e3553a4f283a41134d75d7e404484bd9e6865a"><code>39e3553</code></a>
cherry-pick(<a
href="https://redirect.github.com/microsoft/playwright/issues/41399">#41399</a>):
fix(test): load require-reached files as commonjs in syn...</li>
<li><a
href="https://github.com/microsoft/playwright/commit/4328122a0fa91df1be287f12d26f272f598ccca7"><code>4328122</code></a>
chore: mark v1.61.1 (<a
href="https://redirect.github.com/microsoft/playwright/issues/41404">#41404</a>)</li>
<li><a
href="https://github.com/microsoft/playwright/commit/2c29a94ed59a2dbb2cb2553ee7d1ba429f027826"><code>2c29a94</code></a>
fix(tracing): stop recording websocket frames outside of chunks (<a
href="https://redirect.github.com/microsoft/playwright/issues/41398">#41398</a>)</li>
<li><a
href="https://github.com/microsoft/playwright/commit/4324b1904199c58ae56d864390f5210df18e33f6"><code>4324b19</code></a>
cherry-pick(<a
href="https://redirect.github.com/microsoft/playwright/issues/41367">#41367</a>):
fix(test): keep builtin expect matchers on base extend</li>
<li><a
href="https://github.com/microsoft/playwright/commit/041e7e30002e7c384e1918c29720b34c435145f4"><code>041e7e3</code></a>
cherry-pick(<a
href="https://redirect.github.com/microsoft/playwright/issues/41364">#41364</a>):
fix(har): <code>WebSocket</code> message timestamps should be in
mi...</li>
<li><a
href="https://github.com/microsoft/playwright/commit/b8a0fc33932399fc5cfcd211165cf16f8ca01d71"><code>b8a0fc3</code></a>
cherry-pick(<a
href="https://redirect.github.com/microsoft/playwright/issues/41309">#41309</a>,
<a
href="https://redirect.github.com/microsoft/playwright/issues/43149">#43149</a>):
Revert &quot;fix(firefox): treat `navigationCommitted...</li>
<li><a
href="https://github.com/microsoft/playwright/commit/b5a31759e6611397bf3afaaa6049a420a5f082bd"><code>b5a3175</code></a>
cherry-pick(<a
href="https://redirect.github.com/microsoft/playwright/issues/41319">#41319</a>):
fix(loader): support other node versions</li>
<li><a
href="https://github.com/microsoft/playwright/commit/d4724a91b280ae1ee9a87c426e9d6a953c59756e"><code>d4724a9</code></a>
cherry-pick(<a
href="https://redirect.github.com/microsoft/playwright/issues/41290">#41290</a>):
feat(docker): add Ubuntu 26.04 (Resolute Raccoon) image</li>
<li>See full diff in <a
href="https://github.com/microsoft/playwright/compare/v1.61.0...v1.61.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `typescript-eslint` from 8.62.0 to 8.62.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/releases">typescript-eslint's
releases</a>.</em></p>
<blockquote>
<h2>v8.62.1</h2>
<h2>8.62.1 (2026-06-29)</h2>
<h3>🩹 Fixes</h3>
<ul>
<li><strong>eslint-plugin:</strong> [prefer-optional-chain] use
suggestion instead of autofix for trailing binary operator (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12328">#12328</a>)</li>
<li><strong>eslint-plugin:</strong>
[no-unnecessary-boolean-literal-compare] preserve boolean result in
fixer for nullable true comparisons (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12365">#12365</a>)</li>
<li><strong>eslint-plugin:</strong> [no-unnecessary-type-assertion]
parenthesize object literal at left edge of expression statement (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12443">#12443</a>,
<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/issues/12418">#12418</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>Kirk Waiblinger <a
href="https://github.com/kirkwaiblinger"><code>@​kirkwaiblinger</code></a></li>
<li>mdm317</li>
<li>Patrick Aleite</li>
<li>송재욱</li>
</ul>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.62.1">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md">typescript-eslint's
changelog</a>.</em></p>
<blockquote>
<h2>8.62.1 (2026-06-29)</h2>
<p>This was a version bump only for typescript-eslint to align it with
other projects, there were no code changes.</p>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.62.1">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/3ea32f4ba5e196c08c6da1095619d7f65ba4905e"><code>3ea32f4</code></a>
chore(release): publish 8.62.1</li>
<li>See full diff in <a
href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.62.1/packages/typescript-eslint">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…e website group (#136)

Bumps the website group in /website with 1 update:
[markdown-it](https://github.com/markdown-it/markdown-it).

Updates `markdown-it` from 14.2.0 to 14.3.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/markdown-it/markdown-it/blob/master/CHANGELOG.md">markdown-it's
changelog</a>.</em></p>
<blockquote>
<h2>[14.3.0] - 2026-07-02</h2>
<h3>Changed</h3>
<ul>
<li>Reworked build pipeline &amp; tools.</li>
<li>Added source maps.</li>
<li>Bumped <code>linkify-it</code> to 5.0.2.</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Preserve backslash-space hard line breaks, matching CommonMark 6.7,
<a
href="https://redirect.github.com/markdown-it/markdown-it/issues/1185">#1185</a>.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/markdown-it/markdown-it/commit/ff0ee084fc6b0d10fac049fa562bc2925b5cc723"><code>ff0ee08</code></a>
14.3.0 released</li>
<li><a
href="https://github.com/markdown-it/markdown-it/commit/52e2749ab25aaf841bf74b50560929aa93b8e14d"><code>52e2749</code></a>
Bump linkify-it / vite deps</li>
<li><a
href="https://github.com/markdown-it/markdown-it/commit/56c2404e6d3e78632ce7b37a95f289fc04330c76"><code>56c2404</code></a>
fix: keep backslash-space hard line break (CommonMark 6.7) (<a
href="https://redirect.github.com/markdown-it/markdown-it/issues/1185">#1185</a>)</li>
<li><a
href="https://github.com/markdown-it/markdown-it/commit/0fbb18b23145158a39255f7476c781dbce320a16"><code>0fbb18b</code></a>
Bump vite from 8.0.14 to 8.0.16 (<a
href="https://redirect.github.com/markdown-it/markdown-it/issues/1181">#1181</a>)</li>
<li><a
href="https://github.com/markdown-it/markdown-it/commit/83450e2bc3836ad9f68f652e5685031e9dce4897"><code>83450e2</code></a>
Rework benchmark deps and bump versions</li>
<li><a
href="https://github.com/markdown-it/markdown-it/commit/57a68632ce317593fe316b7131105b131691b90b"><code>57a6863</code></a>
benchmark =&gt; tinybench</li>
<li><a
href="https://github.com/markdown-it/markdown-it/commit/7608db19a5b14f84b47b34cced43c574b1abfd0c"><code>7608db1</code></a>
Update CI config</li>
<li><a
href="https://github.com/markdown-it/markdown-it/commit/9d8eb42a72e0e576125733acc7ae6154e8f6cb5a"><code>9d8eb42</code></a>
Added package-lock and updated versions to latest possible</li>
<li><a
href="https://github.com/markdown-it/markdown-it/commit/0aee70db5e8284c84201d39d64c2b14228fd280a"><code>0aee70d</code></a>
lint: enable <code>@​stylistic/no-multi-spaces</code> rule</li>
<li><a
href="https://github.com/markdown-it/markdown-it/commit/88789854dc44db99b7736fd4349487dfda0d4067"><code>8878985</code></a>
lint =&gt; neostandard</li>
<li>Additional commits viewable in <a
href="https://github.com/markdown-it/markdown-it/compare/14.2.0...14.3.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=markdown-it&package-manager=npm_and_yarn&previous-version=14.2.0&new-version=14.3.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…-host group (#137)

Bumps the rust-host group with 1 update:
[crossbeam-channel](https://github.com/crossbeam-rs/crossbeam).

Updates `crossbeam-channel` from 0.5.15 to 0.5.16
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/crossbeam-rs/crossbeam/releases">crossbeam-channel's
releases</a>.</em></p>
<blockquote>
<h2>crossbeam-channel 0.5.16</h2>
<ul>
<li>Improve support for rust-analyzer auto-completion of code inside
<code>select!</code>/<code>select_biased!</code> macro. (<a
href="https://redirect.github.com/crossbeam-rs/crossbeam/issues/1240">#1240</a>)</li>
<li>Make <code>never</code> const. (<a
href="https://redirect.github.com/crossbeam-rs/crossbeam/issues/1250">#1250</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/crossbeam-rs/crossbeam/commit/9b56303b8aa9ff8ec5bbebb9d2da05e034977889"><code>9b56303</code></a>
Prepare for the next release</li>
<li><a
href="https://github.com/crossbeam-rs/crossbeam/commit/a078b17b7319ab49e53720ebeed8fa8a539a8e18"><code>a078b17</code></a>
ci: Sync config with main</li>
<li><a
href="https://github.com/crossbeam-rs/crossbeam/commit/508c29d3c27d7e27791244644dae2169a2f1678a"><code>508c29d</code></a>
Remove crossbeam-skiplist which is not published from this branch from
worksp...</li>
<li><a
href="https://github.com/crossbeam-rs/crossbeam/commit/6a20e57c492da6ba327b587bc5f38c7a4a3067ef"><code>6a20e57</code></a>
tests: Fix mismatched_lifetime_syntaxes</li>
<li><a
href="https://github.com/crossbeam-rs/crossbeam/commit/c2d674f88af9501a0a939d8d4b0d52bdbc453ef9"><code>c2d674f</code></a>
epoch: Fix rustdoc::invalid_rust_codeblocks</li>
<li><a
href="https://github.com/crossbeam-rs/crossbeam/commit/bd6563e2118a5f2e9eec0f9e16006d428b82ffb0"><code>bd6563e</code></a>
Update no_atomic.rs</li>
<li><a
href="https://github.com/crossbeam-rs/crossbeam/commit/d3e1e364093763a40affe7ea3ff8368c7dc25ee9"><code>d3e1e36</code></a>
Make CachePadded&lt;T&gt; have C repr to allow casting to and from T (<a
href="https://redirect.github.com/crossbeam-rs/crossbeam/issues/1270">#1270</a>)</li>
<li><a
href="https://github.com/crossbeam-rs/crossbeam/commit/c0c466e5c3b5f177884e1df5f8f2c8c939c31aab"><code>c0c466e</code></a>
channel: Use non-poison Mutex</li>
<li><a
href="https://github.com/crossbeam-rs/crossbeam/commit/8b3940f1063f2e0795e44d3f5dde973f08e2a50b"><code>8b3940f</code></a>
Add missing word to docs (<a
href="https://redirect.github.com/crossbeam-rs/crossbeam/issues/1208">#1208</a>)</li>
<li><a
href="https://github.com/crossbeam-rs/crossbeam/commit/df6eec0610f91de504a5834c9faa0de40e3aec83"><code>df6eec0</code></a>
docs: Link <code>select_biased!</code> from <code>select!</code> macro
(<a
href="https://redirect.github.com/crossbeam-rs/crossbeam/issues/1202">#1202</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/crossbeam-rs/crossbeam/compare/crossbeam-channel-0.5.15...crossbeam-channel-0.5.16">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=crossbeam-channel&package-manager=cargo&previous-version=0.5.15&new-version=0.5.16)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…5 updates (#138)

Bumps the vscode-extension group in /editors/vscode with 5 updates:

| Package | From | To |
| --- | --- | --- |
|
[vscode-languageclient](https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client)
| `10.0.1` | `10.1.0` |
|
[@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node)
| `26.0.1` | `26.1.0` |
|
[@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin)
| `8.62.1` | `8.63.0` |
|
[@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser)
| `8.62.1` | `8.63.0` |
|
[typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint)
| `8.62.1` | `8.63.0` |

Updates `vscode-languageclient` from 10.0.1 to 10.1.0
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/microsoft/vscode-languageserver-node/commit/20969f3e75cb3cd35c2bb794b1d15cc2dfbe4abb"><code>20969f3</code></a>
Prepare new release</li>
<li><a
href="https://github.com/microsoft/vscode-languageserver-node/commit/0e5d41578ac5dab17e42d8d9dfbcd1c71122df86"><code>0e5d415</code></a>
Reuse diagnostic collections and introduce a provider (<a
href="https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client/issues/1814">#1814</a>)</li>
<li><a
href="https://github.com/microsoft/vscode-languageserver-node/commit/44e65e9d7dc3e827cbcfaf7dc01fa864541a36b6"><code>44e65e9</code></a>
Prevent unnecessary diagnostic collection creation (<a
href="https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client/issues/1812">#1812</a>)</li>
<li><a
href="https://github.com/microsoft/vscode-languageserver-node/commit/c3d6a760bc72f49d44368be1c8bd7b4f27c1b57c"><code>c3d6a76</code></a>
Fix diagnostics issue after saving unsaved-but-named buffer (<a
href="https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client/issues/1810">#1810</a>)</li>
<li><a
href="https://github.com/microsoft/vscode-languageserver-node/commit/1f326b1f321fdf70c4a81a22185ee42a1a3b2c15"><code>1f326b1</code></a>
Clarify diagnostic collection naming (<a
href="https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client/issues/1807">#1807</a>)</li>
<li><a
href="https://github.com/microsoft/vscode-languageserver-node/commit/edd4c12c1d85e3cfad8aebfa6cd4c31ef9e085a5"><code>edd4c12</code></a>
Merge 3.18.1 release into main (<a
href="https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client/issues/1805">#1805</a>)</li>
<li><a
href="https://github.com/microsoft/vscode-languageserver-node/commit/af9fdd224601aa44a4aab5313cc85757475fdf21"><code>af9fdd2</code></a>
<a
href="https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client/issues/1799">#1799</a>:
Diagnostic pull request cancellation is still handled incorrectly (<a
href="https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/client/issues/1800">#1800</a>)</li>
<li>See full diff in <a
href="https://github.com/Microsoft/vscode-languageserver-node/commits/release/client/10.1.0/client">compare
view</a></li>
</ul>
</details>
<br />

Updates `@types/node` from 26.0.1 to 26.1.0
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node">compare
view</a></li>
</ul>
</details>
<br />

Updates `@typescript-eslint/eslint-plugin` from 8.62.1 to 8.63.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/releases">@​typescript-eslint/eslint-plugin's
releases</a>.</em></p>
<blockquote>
<h2>v8.63.0</h2>
<h2>8.63.0 (2026-07-06)</h2>
<h3>🚀 Features</h3>
<ul>
<li><strong>eslint-plugin:</strong> [no-misused-promises] detect async
usage of a sync dispose usage (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12426">#12426</a>)</li>
</ul>
<h3>🩹 Fixes</h3>
<ul>
<li><strong>eslint-plugin:</strong> [method-signature-style] suggest
converting readonly function properties instead of emitting invalid
syntax (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12447">#12447</a>,
<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/issues/12446">#12446</a>)</li>
<li><strong>eslint-plugin:</strong> [no-unnecessary-type-assertion]
handle optional-chained calls to overloaded functions (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12491">#12491</a>,
<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/issues/12485">#12485</a>)</li>
<li><strong>eslint-plugin:</strong> [no-base-to-string] don't flag a
shadowed String() call (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12492">#12492</a>)</li>
<li><strong>scope-manager:</strong> export ClassStaticBlockScope (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12460">#12460</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>Evyatar Daud <a
href="https://github.com/StyleShit"><code>@​StyleShit</code></a></li>
<li>Kristjan <a
href="https://github.com/KristjanTammekivi"><code>@​KristjanTammekivi</code></a></li>
<li>Michael Naumov <a
href="https://github.com/mnaoumov"><code>@​mnaoumov</code></a></li>
<li>Serhii Leniv <a
href="https://github.com/Serhii-Leniv"><code>@​Serhii-Leniv</code></a></li>
<li>송재욱</li>
</ul>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.63.0">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md">@​typescript-eslint/eslint-plugin's
changelog</a>.</em></p>
<blockquote>
<h2>8.63.0 (2026-07-06)</h2>
<h3>🚀 Features</h3>
<ul>
<li><strong>eslint-plugin:</strong> [no-misused-promises] detect async
usage of a sync dispose usage (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12426">#12426</a>)</li>
</ul>
<h3>🩹 Fixes</h3>
<ul>
<li><strong>eslint-plugin:</strong> [no-base-to-string] don't flag a
shadowed String() call (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12492">#12492</a>)</li>
<li><strong>eslint-plugin:</strong> [no-unnecessary-type-assertion]
handle optional-chained calls to overloaded functions (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12491">#12491</a>,
<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/issues/12485">#12485</a>)</li>
<li><strong>eslint-plugin:</strong> [method-signature-style] suggest
converting readonly function properties instead of emitting invalid
syntax (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12447">#12447</a>,
<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/issues/12446">#12446</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>Evyatar Daud <a
href="https://github.com/StyleShit"><code>@​StyleShit</code></a></li>
<li>Kristjan <a
href="https://github.com/KristjanTammekivi"><code>@​KristjanTammekivi</code></a></li>
<li>Michael Naumov <a
href="https://github.com/mnaoumov"><code>@​mnaoumov</code></a></li>
<li>Serhii Leniv <a
href="https://github.com/Serhii-Leniv"><code>@​Serhii-Leniv</code></a></li>
<li>송재욱</li>
</ul>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.63.0">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/290cf6cdcc5ffb00c5b8f3e1e0e9f2fd8cc96374"><code>290cf6c</code></a>
chore(release): publish 8.63.0</li>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/8d8fda638b9cb5874c5bfd8b13da7ec8b74dd0f8"><code>8d8fda6</code></a>
feat(eslint-plugin): [no-misused-promises] detect async usage of a sync
dispo...</li>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/fec4f4f0fb8fa7318c60ec59f59bf2b710314b34"><code>fec4f4f</code></a>
fix(eslint-plugin): [no-base-to-string] don't flag a shadowed String()
call (...</li>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/fb3da7974e00d119493a7170e34b76b2a9051f85"><code>fb3da79</code></a>
fix(eslint-plugin): [no-unnecessary-type-assertion] handle
optional-chained c...</li>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/dd020578ed417b844b1d03a70be42a126d51cbb5"><code>dd02057</code></a>
docs: [no-base-to-string] clarify ignoredTypeNames description (<a
href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin/issues/12488">#12488</a>)</li>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/5b224e79c59897a5580540a561a492f83b6d8836"><code>5b224e7</code></a>
docs: [ban-ts-comment] clarify that <code>@ts-expect-error</code> is
allowed by default ...</li>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/a9a9d431017bd081a55f1d63d91c00ee901b7205"><code>a9a9d43</code></a>
docs: [restrict-template-expressions] clarify <code>allowArray</code>
option behavior (#...</li>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/091fe8241275300f022d521c2ac74f920b55a024"><code>091fe82</code></a>
fix(eslint-plugin): [method-signature-style] suggest converting readonly
func...</li>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/d5502f9367c90f0e599cef47b3e090a1de343d40"><code>d5502f9</code></a>
docs: clarify consistent-type-imports guidance for verbatimModuleSyntax
(<a
href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin/issues/12194">#12194</a>)</li>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/61a9dba6872ddcc996797c0fdfb9a3e3c825c3d2"><code>61a9dba</code></a>
chore(eslint-plugin): switch auto-generated test cases to hand-written
in pre...</li>
<li>Additional commits viewable in <a
href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.63.0/packages/eslint-plugin">compare
view</a></li>
</ul>
</details>
<br />

Updates `@typescript-eslint/parser` from 8.62.1 to 8.63.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/releases">@​typescript-eslint/parser's
releases</a>.</em></p>
<blockquote>
<h2>v8.63.0</h2>
<h2>8.63.0 (2026-07-06)</h2>
<h3>🚀 Features</h3>
<ul>
<li><strong>eslint-plugin:</strong> [no-misused-promises] detect async
usage of a sync dispose usage (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12426">#12426</a>)</li>
</ul>
<h3>🩹 Fixes</h3>
<ul>
<li><strong>eslint-plugin:</strong> [method-signature-style] suggest
converting readonly function properties instead of emitting invalid
syntax (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12447">#12447</a>,
<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/issues/12446">#12446</a>)</li>
<li><strong>eslint-plugin:</strong> [no-unnecessary-type-assertion]
handle optional-chained calls to overloaded functions (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12491">#12491</a>,
<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/issues/12485">#12485</a>)</li>
<li><strong>eslint-plugin:</strong> [no-base-to-string] don't flag a
shadowed String() call (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12492">#12492</a>)</li>
<li><strong>scope-manager:</strong> export ClassStaticBlockScope (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12460">#12460</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>Evyatar Daud <a
href="https://github.com/StyleShit"><code>@​StyleShit</code></a></li>
<li>Kristjan <a
href="https://github.com/KristjanTammekivi"><code>@​KristjanTammekivi</code></a></li>
<li>Michael Naumov <a
href="https://github.com/mnaoumov"><code>@​mnaoumov</code></a></li>
<li>Serhii Leniv <a
href="https://github.com/Serhii-Leniv"><code>@​Serhii-Leniv</code></a></li>
<li>송재욱</li>
</ul>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.63.0">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md">@​typescript-eslint/parser's
changelog</a>.</em></p>
<blockquote>
<h2>8.63.0 (2026-07-06)</h2>
<p>This was a version bump only for parser to align it with other
projects, there were no code changes.</p>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.63.0">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/290cf6cdcc5ffb00c5b8f3e1e0e9f2fd8cc96374"><code>290cf6c</code></a>
chore(release): publish 8.63.0</li>
<li>See full diff in <a
href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.63.0/packages/parser">compare
view</a></li>
</ul>
</details>
<br />

Updates `typescript-eslint` from 8.62.1 to 8.63.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/releases">typescript-eslint's
releases</a>.</em></p>
<blockquote>
<h2>v8.63.0</h2>
<h2>8.63.0 (2026-07-06)</h2>
<h3>🚀 Features</h3>
<ul>
<li><strong>eslint-plugin:</strong> [no-misused-promises] detect async
usage of a sync dispose usage (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12426">#12426</a>)</li>
</ul>
<h3>🩹 Fixes</h3>
<ul>
<li><strong>eslint-plugin:</strong> [method-signature-style] suggest
converting readonly function properties instead of emitting invalid
syntax (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12447">#12447</a>,
<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/issues/12446">#12446</a>)</li>
<li><strong>eslint-plugin:</strong> [no-unnecessary-type-assertion]
handle optional-chained calls to overloaded functions (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12491">#12491</a>,
<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/issues/12485">#12485</a>)</li>
<li><strong>eslint-plugin:</strong> [no-base-to-string] don't flag a
shadowed String() call (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12492">#12492</a>)</li>
<li><strong>scope-manager:</strong> export ClassStaticBlockScope (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12460">#12460</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>Evyatar Daud <a
href="https://github.com/StyleShit"><code>@​StyleShit</code></a></li>
<li>Kristjan <a
href="https://github.com/KristjanTammekivi"><code>@​KristjanTammekivi</code></a></li>
<li>Michael Naumov <a
href="https://github.com/mnaoumov"><code>@​mnaoumov</code></a></li>
<li>Serhii Leniv <a
href="https://github.com/Serhii-Leniv"><code>@​Serhii-Leniv</code></a></li>
<li>송재욱</li>
</ul>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.63.0">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md">typescript-eslint's
changelog</a>.</em></p>
<blockquote>
<h2>8.63.0 (2026-07-06)</h2>
<p>This was a version bump only for typescript-eslint to align it with
other projects, there were no code changes.</p>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.63.0">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/290cf6cdcc5ffb00c5b8f3e1e0e9f2fd8cc96374"><code>290cf6c</code></a>
chore(release): publish 8.63.0</li>
<li>See full diff in <a
href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.63.0/packages/typescript-eslint">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps the github-actions group with 3 updates:
[taiki-e/install-action](https://github.com/taiki-e/install-action),
[github/codeql-action/init](https://github.com/github/codeql-action) and
[github/codeql-action/analyze](https://github.com/github/codeql-action).

Updates `taiki-e/install-action` from 2.82.6 to 2.82.10
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/taiki-e/install-action/releases">taiki-e/install-action's
releases</a>.</em></p>
<blockquote>
<h2>2.82.10</h2>
<ul>
<li>
<p>Update <code>tombi@latest</code> to 1.2.0.</p>
</li>
<li>
<p>Update <code>cargo-nextest@latest</code> to 0.9.140.</p>
</li>
</ul>
<h2>2.82.9</h2>
<ul>
<li>
<p>Update <code>vacuum@latest</code> to 0.29.9.</p>
</li>
<li>
<p>Update <code>prek@latest</code> to 0.4.8.</p>
</li>
<li>
<p>Update <code>cargo-tarpaulin@latest</code> to 0.37.0.</p>
</li>
<li>
<p>Update <code>cargo-leptos@latest</code> to 0.3.7.</p>
</li>
</ul>
<h2>2.82.8</h2>
<ul>
<li>
<p>Update <code>vacuum@latest</code> to 0.29.8.</p>
</li>
<li>
<p>Update <code>uv@latest</code> to 0.11.26.</p>
</li>
<li>
<p>Update <code>typos@latest</code> to 1.48.0.</p>
</li>
<li>
<p>Update <code>trivy@latest</code> to 0.72.0.</p>
</li>
<li>
<p>Update <code>tombi@latest</code> to 1.1.7.</p>
</li>
<li>
<p>Update <code>prek@latest</code> to 0.4.6.</p>
</li>
<li>
<p>Update <code>mise@latest</code> to 2026.7.0.</p>
</li>
<li>
<p>Update <code>just@latest</code> to 1.55.1.</p>
</li>
<li>
<p>Update <code>biome@latest</code> to 2.5.2.</p>
</li>
</ul>
<h2>2.82.7</h2>
<ul>
<li>
<p>Update <code>tombi@latest</code> to 1.1.6.</p>
</li>
<li>
<p>Update <code>kingfisher@latest</code> to 1.105.0.</p>
</li>
<li>
<p>Update <code>gungraun-runner@latest</code> to 0.19.3.</p>
</li>
<li>
<p>Update <code>editorconfig-checker@latest</code> to 3.8.0.</p>
</li>
<li>
<p>Update <code>dprint@latest</code> to 0.55.1.</p>
</li>
<li>
<p>Update <code>cargo-tarpaulin@latest</code> to 0.36.0.</p>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md">taiki-e/install-action's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<p>All notable changes to this project will be documented in this
file.</p>
<p>This project adheres to <a href="https://semver.org">Semantic
Versioning</a>.</p>
<!-- raw HTML omitted -->
<h2>[Unreleased]</h2>
<h2>[2.82.10] - 2026-07-07</h2>
<ul>
<li>
<p>Update <code>tombi@latest</code> to 1.2.0.</p>
</li>
<li>
<p>Update <code>cargo-nextest@latest</code> to 0.9.140.</p>
</li>
</ul>
<h2>[2.82.9] - 2026-07-05</h2>
<ul>
<li>
<p>Update <code>vacuum@latest</code> to 0.29.9.</p>
</li>
<li>
<p>Update <code>prek@latest</code> to 0.4.8.</p>
</li>
<li>
<p>Update <code>cargo-tarpaulin@latest</code> to 0.37.0.</p>
</li>
<li>
<p>Update <code>cargo-leptos@latest</code> to 0.3.7.</p>
</li>
</ul>
<h2>[2.82.8] - 2026-07-03</h2>
<ul>
<li>
<p>Update <code>vacuum@latest</code> to 0.29.8.</p>
</li>
<li>
<p>Update <code>uv@latest</code> to 0.11.26.</p>
</li>
<li>
<p>Update <code>typos@latest</code> to 1.48.0.</p>
</li>
<li>
<p>Update <code>trivy@latest</code> to 0.72.0.</p>
</li>
<li>
<p>Update <code>tombi@latest</code> to 1.1.7.</p>
</li>
<li>
<p>Update <code>prek@latest</code> to 0.4.6.</p>
</li>
<li>
<p>Update <code>mise@latest</code> to 2026.7.0.</p>
</li>
<li>
<p>Update <code>just@latest</code> to 1.55.1.</p>
</li>
<li>
<p>Update <code>biome@latest</code> to 2.5.2.</p>
</li>
</ul>
<h2>[2.82.7] - 2026-06-30</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/taiki-e/install-action/commit/50414676f9f5d50a65992c6dd2ed02641263226c"><code>5041467</code></a>
Release 2.82.10</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/99a7f87ef1e6f99c941052e455bae2424b27235f"><code>99a7f87</code></a>
Update uv manifest</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/3ab022bf4858764f3ce8bda3e6a945e6269eb922"><code>3ab022b</code></a>
Update <code>tombi@latest</code> to 1.2.0</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/f2df39bdf2bef4791037b2adc3809e6fe98d2104"><code>f2df39b</code></a>
Update mdbook manifest</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/1f59d6175c5e6a275739a4aa090c645bb134e001"><code>1f59d61</code></a>
Update <code>cargo-nextest@latest</code> to 0.9.140</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/4684b8405694ae9dd42c9f39ba901a70ae83f4a3"><code>4684b84</code></a>
Release 2.82.9</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/29fb1dbe52c0247f03f90f9dd43b08d3c603510b"><code>29fb1db</code></a>
Update <code>vacuum@latest</code> to 0.29.9</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/584230b16680bbb1ddef3c65a89568570fd36f69"><code>584230b</code></a>
Update tombi manifest</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/1872019a1c4268421e4c2d5f230285190a08b258"><code>1872019</code></a>
Update <code>prek@latest</code> to 0.4.8</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/3e817d29dde43a866e242560569eb7f418035f1a"><code>3e817d2</code></a>
Update <code>cargo-tarpaulin@latest</code> to 0.37.0</li>
<li>Additional commits viewable in <a
href="https://github.com/taiki-e/install-action/compare/9bcaee1dcae34154180f412e2fa69355a7cda9f6...50414676f9f5d50a65992c6dd2ed02641263226c">compare
view</a></li>
</ul>
</details>
<br />

Updates `github/codeql-action/init` from 4.36.2 to 4.36.3
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases">github/codeql-action/init's
releases</a>.</em></p>
<blockquote>
<h2>v4.36.3</h2>
<p>No user facing changes.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action/init's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>4.36.3 - 01 Jul 2026</h2>
<p>No user facing changes.</p>
<h2>4.36.2 - 04 Jun 2026</h2>
<ul>
<li>Cache CodeQL CLI version information across Actions steps. <a
href="https://redirect.github.com/github/codeql-action/pull/3943">#3943</a></li>
<li>Reduce requests while waiting for analysis processing by using
exponential backoff when polling SARIF processing status. <a
href="https://redirect.github.com/github/codeql-action/pull/3937">#3937</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.6">2.25.6</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3948">#3948</a></li>
</ul>
<h2>4.36.1 - 02 Jun 2026</h2>
<p>No user facing changes.</p>
<h2>4.36.0 - 22 May 2026</h2>
<ul>
<li><em>Breaking change</em>: Bump the minimum required CodeQL bundle
version to 2.19.4. <a
href="https://redirect.github.com/github/codeql-action/pull/3894">#3894</a></li>
<li>Add support for SHA-256 Git object IDs. <a
href="https://redirect.github.com/github/codeql-action/pull/3893">#3893</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.5">2.25.5</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3926">#3926</a></li>
</ul>
<h2>4.35.5 - 15 May 2026</h2>
<ul>
<li>We have improved how the JavaScript bundles for the CodeQL Action
are generated to avoid duplication across bundles and reduce the size of
the repository by around 70%. This should have no effect on the runtime
behaviour of the CodeQL Action. <a
href="https://redirect.github.com/github/codeql-action/pull/3899">#3899</a></li>
<li>For performance and accuracy reasons, <a
href="https://redirect.github.com/github/roadmap/issues/1158">improved
incremental analysis</a> will now only be enabled on a pull request when
diff-informed analysis is also enabled for that run. If diff-informed
analysis is unavailable (for example, because the PR diff ranges could
not be computed), the action will fall back to a full analysis. <a
href="https://redirect.github.com/github/codeql-action/pull/3791">#3791</a></li>
<li>If multiple inputs are provided for the GitHub-internal
<code>analysis-kinds</code> input, only <code>code-scanning</code> will
be enabled. The <code>analysis-kinds</code> input is experimental, for
GitHub-internal use only, and may change without notice at any time. <a
href="https://redirect.github.com/github/codeql-action/pull/3892">#3892</a></li>
<li>Added an experimental change which, when running a Code Scanning
analysis for a PR with <a
href="https://redirect.github.com/github/roadmap/issues/1158">improved
incremental analysis</a> enabled, prefers CodeQL CLI versions that have
a cached overlay-base database for the configured languages. This speeds
up analysis for a repository when there is not yet a cached overlay-base
database for the latest CLI version. We expect to roll this change out
to everyone in May. <a
href="https://redirect.github.com/github/codeql-action/pull/3880">#3880</a></li>
</ul>
<h2>4.35.4 - 07 May 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.4">2.25.4</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3881">#3881</a></li>
</ul>
<h2>4.35.3 - 01 May 2026</h2>
<ul>
<li><em>Upcoming breaking change</em>: Add a deprecation warning for
customers using CodeQL version 2.19.3 and earlier. These versions of
CodeQL were discontinued on 9 April 2026 alongside GitHub Enterprise
Server 3.15, and will be unsupported by the next minor release of the
CodeQL Action. <a
href="https://redirect.github.com/github/codeql-action/pull/3837">#3837</a></li>
<li>Configurations for private registries that use Cloudsmith or GCP
OIDC are now accepted. <a
href="https://redirect.github.com/github/codeql-action/pull/3850">#3850</a></li>
<li>Best-effort connection tests for private registries now use
<code>GET</code> requests instead of <code>HEAD</code> for better
compatibility with various registry implementations. For NuGet feeds,
the test is now always performed against the service index. <a
href="https://redirect.github.com/github/codeql-action/pull/3853">#3853</a></li>
<li>Fixed a bug where two diagnostics produced within the same
millisecond could overwrite each other on disk, causing one of them to
be lost. <a
href="https://redirect.github.com/github/codeql-action/pull/3852">#3852</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.3">2.25.3</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3865">#3865</a></li>
</ul>
<h2>4.35.2 - 15 Apr 2026</h2>
<ul>
<li>The undocumented TRAP cache cleanup feature that could be enabled
using the <code>CODEQL_ACTION_CLEANUP_TRAP_CACHES</code> environment
variable is deprecated and will be removed in May 2026. If you are
affected by this, we recommend disabling TRAP caching by passing the
<code>trap-caching: false</code> input to the <code>init</code> Action.
<a
href="https://redirect.github.com/github/codeql-action/pull/3795">#3795</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/54f647b7e1bb85c95cddabcd46b0c578ec92bc1a"><code>54f647b</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3984">#3984</a>
from github/update-v4.36.3-1f34ec164</li>
<li><a
href="https://github.com/github/codeql-action/commit/e78819e05527766c3c5919e3177647e280c6cb83"><code>e78819e</code></a>
Trigger checks</li>
<li><a
href="https://github.com/github/codeql-action/commit/2c9d3d63eb4941734e2d29468953529a56f5ff1c"><code>2c9d3d6</code></a>
Update changelog for v4.36.3</li>
<li><a
href="https://github.com/github/codeql-action/commit/1f34ec16430d82636d18716acc7aaa6d843b35a9"><code>1f34ec1</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3983">#3983</a>
from github/mbg/repo-props/ff-for-config-file-prop</li>
<li><a
href="https://github.com/github/codeql-action/commit/d5f0145480025b49d8b08c3f6b36e6ad41a68c90"><code>d5f0145</code></a>
Log when repository property has a value but is ignored</li>
<li><a
href="https://github.com/github/codeql-action/commit/f27f56386a3c745af8d7bbfb806098c714a5e32a"><code>f27f563</code></a>
Add test for when the FF is off</li>
<li><a
href="https://github.com/github/codeql-action/commit/0025d0f2b5676fde748a0be9725dcce18dd9f986"><code>0025d0f</code></a>
Use FF</li>
<li><a
href="https://github.com/github/codeql-action/commit/f7fa18f05d107ff6735857c3510fbff190c9a1eb"><code>f7fa18f</code></a>
Add FF for config file repo property</li>
<li><a
href="https://github.com/github/codeql-action/commit/628fc3f124e68b0151f0d2a5d81e864ee1e42335"><code>628fc3f</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3979">#3979</a>
from github/henrymercer/overlay-db-cleanup-size-tele...</li>
<li><a
href="https://github.com/github/codeql-action/commit/9cfb67bab9b32441237f92d4ba29a7f3ccff259f"><code>9cfb67b</code></a>
Add clarifying comments</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/8aad20d150bbac5944a9f9d289da16a4b0d87c1e...54f647b7e1bb85c95cddabcd46b0c578ec92bc1a">compare
view</a></li>
</ul>
</details>
<br />

Updates `github/codeql-action/analyze` from 4.36.2 to 4.36.3
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases">github/codeql-action/analyze's
releases</a>.</em></p>
<blockquote>
<h2>v4.36.3</h2>
<p>No user facing changes.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action/analyze's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>4.36.3 - 01 Jul 2026</h2>
<p>No user facing changes.</p>
<h2>4.36.2 - 04 Jun 2026</h2>
<ul>
<li>Cache CodeQL CLI version information across Actions steps. <a
href="https://redirect.github.com/github/codeql-action/pull/3943">#3943</a></li>
<li>Reduce requests while waiting for analysis processing by using
exponential backoff when polling SARIF processing status. <a
href="https://redirect.github.com/github/codeql-action/pull/3937">#3937</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.6">2.25.6</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3948">#3948</a></li>
</ul>
<h2>4.36.1 - 02 Jun 2026</h2>
<p>No user facing changes.</p>
<h2>4.36.0 - 22 May 2026</h2>
<ul>
<li><em>Breaking change</em>: Bump the minimum required CodeQL bundle
version to 2.19.4. <a
href="https://redirect.github.com/github/codeql-action/pull/3894">#3894</a></li>
<li>Add support for SHA-256 Git object IDs. <a
href="https://redirect.github.com/github/codeql-action/pull/3893">#3893</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.5">2.25.5</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3926">#3926</a></li>
</ul>
<h2>4.35.5 - 15 May 2026</h2>
<ul>
<li>We have improved how the JavaScript bundles for the CodeQL Action
are generated to avoid duplication across bundles and reduce the size of
the repository by around 70%. This should have no effect on the runtime
behaviour of the CodeQL Action. <a
href="https://redirect.github.com/github/codeql-action/pull/3899">#3899</a></li>
<li>For performance and accuracy reasons, <a
href="https://redirect.github.com/github/roadmap/issues/1158">improved
incremental analysis</a> will now only be enabled on a pull request when
diff-informed analysis is also enabled for that run. If diff-informed
analysis is unavailable (for example, because the PR diff ranges could
not be computed), the action will fall back to a full analysis. <a
href="https://redirect.github.com/github/codeql-action/pull/3791">#3791</a></li>
<li>If multiple inputs are provided for the GitHub-internal
<code>analysis-kinds</code> input, only <code>code-scanning</code> will
be enabled. The <code>analysis-kinds</code> input is experimental, for
GitHub-internal use only, and may change without notice at any time. <a
href="https://redirect.github.com/github/codeql-action/pull/3892">#3892</a></li>
<li>Added an experimental change which, when running a Code Scanning
analysis for a PR with <a
href="https://redirect.github.com/github/roadmap/issues/1158">improved
incremental analysis</a> enabled, prefers CodeQL CLI versions that have
a cached overlay-base database for the configured languages. This speeds
up analysis for a repository when there is not yet a cached overlay-base
database for the latest CLI version. We expect to roll this change out
to everyone in May. <a
href="https://redirect.github.com/github/codeql-action/pull/3880">#3880</a></li>
</ul>
<h2>4.35.4 - 07 May 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.4">2.25.4</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3881">#3881</a></li>
</ul>
<h2>4.35.3 - 01 May 2026</h2>
<ul>
<li><em>Upcoming breaking change</em>: Add a deprecation warning for
customers using CodeQL version 2.19.3 and earlier. These versions of
CodeQL were discontinued on 9 April 2026 alongside GitHub Enterprise
Server 3.15, and will be unsupported by the next minor release of the
CodeQL Action. <a
href="https://redirect.github.com/github/codeql-action/pull/3837">#3837</a></li>
<li>Configurations for private registries that use Cloudsmith or GCP
OIDC are now accepted. <a
href="https://redirect.github.com/github/codeql-action/pull/3850">#3850</a></li>
<li>Best-effort connection tests for private registries now use
<code>GET</code> requests instead of <code>HEAD</code> for better
compatibility with various registry implementations. For NuGet feeds,
the test is now always performed against the service index. <a
href="https://redirect.github.com/github/codeql-action/pull/3853">#3853</a></li>
<li>Fixed a bug where two diagnostics produced within the same
millisecond could overwrite each other on disk, causing one of them to
be lost. <a
href="https://redirect.github.com/github/codeql-action/pull/3852">#3852</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.3">2.25.3</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3865">#3865</a></li>
</ul>
<h2>4.35.2 - 15 Apr 2026</h2>
<ul>
<li>The undocumented TRAP cache cleanup feature that could be enabled
using the <code>CODEQL_ACTION_CLEANUP_TRAP_CACHES</code> environment
variable is deprecated and will be removed in May 2026. If you are
affected by this, we recommend disabling TRAP caching by passing the
<code>trap-caching: false</code> input to the <code>init</code> Action.
<a
href="https://redirect.github.com/github/codeql-action/pull/3795">#3795</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/54f647b7e1bb85c95cddabcd46b0c578ec92bc1a"><code>54f647b</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3984">#3984</a>
from github/update-v4.36.3-1f34ec164</li>
<li><a
href="https://github.com/github/codeql-action/commit/e78819e05527766c3c5919e3177647e280c6cb83"><code>e78819e</code></a>
Trigger checks</li>
<li><a
href="https://github.com/github/codeql-action/commit/2c9d3d63eb4941734e2d29468953529a56f5ff1c"><code>2c9d3d6</code></a>
Update changelog for v4.36.3</li>
<li><a
href="https://github.com/github/codeql-action/commit/1f34ec16430d82636d18716acc7aaa6d843b35a9"><code>1f34ec1</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3983">#3983</a>
from github/mbg/repo-props/ff-for-config-file-prop</li>
<li><a
href="https://github.com/github/codeql-action/commit/d5f0145480025b49d8b08c3f6b36e6ad41a68c90"><code>d5f0145</code></a>
Log when repository property has a value but is ignored</li>
<li><a
href="https://github.com/github/codeql-action/commit/f27f56386a3c745af8d7bbfb806098c714a5e32a"><code>f27f563</code></a>
Add test for when the FF is off</li>
<li><a
href="https://github.com/github/codeql-action/commit/0025d0f2b5676fde748a0be9725dcce18dd9f986"><code>0025d0f</code></a>
Use FF</li>
<li><a
href="https://github.com/github/codeql-action/commit/f7fa18f05d107ff6735857c3510fbff190c9a1eb"><code>f7fa18f</code></a>
Add FF for config file repo property</li>
<li><a
href="https://github.com/github/codeql-action/commit/628fc3f124e68b0151f0d2a5d81e864ee1e42335"><code>628fc3f</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3979">#3979</a>
from github/henrymercer/overlay-db-cleanup-size-tele...</li>
<li><a
href="https://github.com/github/codeql-action/commit/9cfb67bab9b32441237f92d4ba29a7f3ccff259f"><code>9cfb67b</code></a>
Add clarifying comments</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/8aad20d150bbac5944a9f9d289da16a4b0d87c1e...54f647b7e1bb85c95cddabcd46b0c578ec92bc1a">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Updated
[Microsoft.CodeAnalysis.Analyzers](https://github.com/dotnet/roslyn)
from 5.3.0 to 5.6.0.

<details>
<summary>Release notes</summary>

_Sourced from [Microsoft.CodeAnalysis.Analyzers's
releases](https://github.com/dotnet/roslyn/releases)._

No release notes found for this version range.

Commits viewable in [compare
view](https://github.com/dotnet/roslyn/commits).
</details>

Updated
[Microsoft.CodeAnalysis.BannedApiAnalyzers](https://github.com/dotnet/roslyn)
from 3.3.4 to 5.6.0.

<details>
<summary>Release notes</summary>

_Sourced from [Microsoft.CodeAnalysis.BannedApiAnalyzers's
releases](https://github.com/dotnet/roslyn/releases)._

## 5.0.4

[Release](https://github.com/dotnet/core/releases/tag/v5.0.4)

## 5.0.2

[Release
Notes](https://github.com/dotnet/core/blob/master/release-notes/5.0/5.0.2/5.0.2.md)
[Install
Instructions](https://github.com/dotnet/core/blob/master/release-notes/5.0/5.0.2/5.0.2-install-instructions.md)

# Repos

* [Core](https://github.com/dotnet/core/releases/tag/v5.0.2)

## 5.0.1

[Release
Notes](https://github.com/dotnet/core/blob/master/release-notes/5.0/5.0.1/5.0.1.md)
[Install
Instructions](https://github.com/dotnet/core/blob/master/release-notes/5.0/5.0.1/5.0.1-install-instructions.md)

# Repo

* [Core](https://github.com/dotnet/core/releases/tag/v5.0.1)

## 4.2.0-4.22266.5

[Release](https://github.com/dotnet/core/releases/tag/v7.0.0-preview.5)

## 4.2.0-3.22151.16

[Release](https://github.com/dotnet/core/releases/tag/v7.0.0-preview.2)

## 4.2.0-1.22108.11

[Release](https://github.com/dotnet/core/releases/tag/v7.0.0-preview.1)

## 4.0.0-2.21354.7

[Release](https://github.com/dotnet/core/releases/tag/v6.0.0-preview.6)

## 4.0.0-2.21254.26

[Release](https://github.com/dotnet/core/releases/tag/v6.0.0-preview.4)

## 4.0.0-1.21277.15

[Release](https://github.com/dotnet/core/releases/tag/v6.0.0-preview.5)

## 3.10.0-3.21201.20

[Release](https://github.com/dotnet/core/releases/tag/v6.0.0-preview.3)

## 3.10.0-2.21153.36

[Release](https://github.com/dotnet/core/releases/tag/v6.0.0-preview.2)

## 3.10.0-1.21102.26

 [Release](https://github.com/dotnet/core/releases/tag/v6.0.0-preview.1)

## 3.7.0-3.20312.3

[Release
Notes](https://github.com/dotnet/core/blob/master/release-notes/5.0/preview/5.0.0-preview.6.md)
[Install
Instructions](https://github.com/dotnet/core/blob/master/release-notes/5.0/preview/5.0.0-preview.6-install-instructions.md)

# Repos

*
[Installer](https://github.com/dotnet/installer/releases/tag/v5.0.100-preview.6.20318.15)
*
[Windowsdesktop](https://github.com/dotnet/windowsdesktop/releases/tag/v5.0.0-preview.6.20308.1)
*
[Runtime](https://github.com/dotnet/runtime/releases/tag/v5.0.0-preview.6.20305.6)
*
[Aspnetcore](https://github.com/dotnet/aspnetcore/releases/tag/v5.0.0-preview.6.20312.15)
*
[templating](https://github.com/dotnet/templating/releases/tag/v5.0.0-preview.6.20309.2)
*
[SDK](https://github.com/dotnet/sdk/releases/tag/v5.0.100-preview.6.20318.5)
*
[winforms](https://github.com/dotnet/winforms/releases/tag/v5.0.0-preview.6.20306.1)
*
[WPF](https://github.com/dotnet/wpf/releases/tag/v5.0.0-preview.6.20306.1)
*
[Extensions](https://github.com/dotnet/extensions/releases/tag/v5.0.0-preview.6.20312.15)
* [EF
Core](https://github.com/dotnet/efcore/releases/tag/v5.0.0-preview.6.20312.4)
*
[Roslyn](https://github.com/dotnet/roslyn/releases/tag/v3.7.0-3.20312.3)
*
[Fsharp](https://github.com/dotnet/fsharp/releases/tag/v10.10.0-beta.20312.5)
*
[WebSDK](https://github.com/dotnet/websdk/releases/tag/v5.0.100-preview.6.20314.1)

## 3.7.0-3.20269.11

[Release
Notes](https://github.com/dotnet/core/blob/master/release-notes/5.0/preview/5.0.0-preview.8.md)
[Install
Instructions](https://github.com/dotnet/core/blob/master/release-notes/5.0/preview/5.0.0-preview.8-install-instructions.md)

# Repos

*
[Installer](https://github.com/dotnet/installer/releases/tag/v5.0.100-preview.8.20417.9)
*
[Windowsdesktop](https://github.com/dotnet/windowsdesktop/releases/tag/v5.0.0-preview.8.20411.6)
*
[Runtime](https://github.com/dotnet/runtime/releases/tag/v5.0.0-preview.8.20407.11)
*
[Aspnetcore](https://github.com/dotnet/aspnetcore/releases/tag/v5.0.0-preview.8.20414.8)
*
[templating](https://github.com/dotnet/templating/releases/tag/v5.0.0-preview.8.20371.3)
*
[SDK](https://github.com/dotnet/sdk/releases/tag/v5.0.100-preview.8.20417.14)
*
[winforms](https://github.com/dotnet/winforms/releases/tag/v5.0.0-preview.8.20410.2)
*
[WPF](https://github.com/dotnet/wpf/releases/tag/v5.0.0-preview.8.20411.7)
*
[WCF](https://github.com/dotnet/wcf/releases/tag/v1.2.0-preview1.20412.3)
*
[Extensions](https://github.com/dotnet/extensions/releases/tag/v5.0.0-preview.8.20414.8)
* [EF
Core](https://github.com/dotnet/efcore/releases/tag/v5.0.0-preview.8.20407.4)
*
[Roslyn](https://github.com/dotnet/roslyn/releases/tag/v3.7.0-3.20269.11)
*
[Fsharp](https://github.com/dotnet/fsharp/releases/tag/v11.0.0-beta.20417.1)
*
[MSBuild](https://github.com/dotnet/msbuild/releases/tag/v16.8.0-preview-20414-02)

## 3.7.0-2.20277.1


[Release
Notes](https://github.com/dotnet/core/blob/master/release-notes/5.0/preview/5.0.0-preview.5.md)
[Install
Instructions](https://github.com/dotnet/core/blob/master/release-notes/5.0/preview/5.0.0-preview.5-install-instructions.md)

# Repos

*
[Windowsdesktop](https://github.com/dotnet/windowsdesktop/releases/tag/v5.0.0-preview.5.20278.3)
*
[Runtime](https://github.com/dotnet/runtime/releases/tag/v5.0.0-preview.5.20278.1)
*
[Aspnetcore](https://github.com/dotnet/aspnetcore/releases/tag/v5.0.0-preview.5.20279.2)
*
[templating](https://github.com/dotnet/templating/releases/tag/v5.0.0-preview.6.20262.2)
*
[SDK](https://github.com/dotnet/sdk/releases/tag/v5.0.100-preview.5.20279.7)
*
[winforms](https://github.com/dotnet/winforms/releases/tag/v5.0.0-preview.5.20278.1)
*
[WPF](https://github.com/dotnet/wpf/releases/tag/v5.0.0-preview.5.20278.3)
*
[ASPNETCORE-Tooling](https://github.com/dotnet/aspnetcore-tooling/releases/tag/v5.0.0-preview.5.20278.2)
*
[Extensions](https://github.com/dotnet/extensions/releases/tag/v5.0.0-preview.5.20279.2)
* [EF
Core](https://github.com/dotnet/efcore/releases/tag/v5.0.0-preview.5.20278.2)
*
[Roslyn](https://github.com/dotnet/roslyn/releases/tag/v3.7.0-2.20277.1)
*
[Fsharp](https://github.com/dotnet/fsharp/releases/tag/v11.0.0-beta.20263.4)

## 3.6.0

[Release
Notes](https://github.com/dotnet/core/blob/master/release-notes/5.0/preview/5.0.0-preview.2.md)
[Install
Instructions](https://github.com/dotnet/core/blob/master/release-notes/5.0/preview/5.0.0-preview.2-install-instructions.md)


*
[Installer](https://github.com/dotnet/installer/releases/tag/v5.0.100-preview.2.20176.6)
*
[Windowsdesktop](https://github.com/dotnet/windowsdesktop/releases/tag/v5.0.0-preview.2.20160.6)
*
[Runtime](https://github.com/dotnet/runtime/releases/tag/v5.0.0-preview.2.20160.6)
*
[Aspnetcore](https://github.com/dotnet/aspnetcore/releases/tag/v5.0.0-preview.2.20167.3)
*
[templating](https://github.com/dotnet/templating/releases/tag/v5.0.0-preview.2.20174.1)
*
[SDK](https://github.com/dotnet/sdk/releases/tag/v5.0.100-preview.2.20176.4)
*
[winforms](https://github.com/dotnet/winforms/releases/tag/v5.0.0-preview.2.20155.3)
*
[WPF](https://github.com/dotnet/wpf/releases/tag/v5.0.0-preview.2.20156.7)
*
[WCF](https://github.com/dotnet/wcf/releases/tag/v1.2.0-preview1.20104.1)
*
[standard](https://github.com/dotnet/standard/releases/tag/v2.2.0-prerelease.19564.1)
*
[blazor](https://github.com/dotnet/blazor/releases/tag/v3.2.0-preview1.20067.1)
*
[ASPNETCORE-Tooling](https://github.com/dotnet/aspnetcore-tooling/releases/tag/v5.0.0-preview.2.20160.3)
* [EF
Core](https://github.com/dotnet/efcore/releases/tag/v5.0.0-preview.2.20159.4)
*
[Extensions](https://github.com/dotnet/extensions/releases/tag/v5.0.0-preview.2.20160.3)
* [roslyn](https://github.com/dotnet/roslyn/releases/tag/v3.6.0)
* [fsharp ](https://github.com/dotnet/fsharp/releases/tag/v11.0.0)
*
[WebSDK](https://github.com/aspnet/websdk/releases/tag/v5.0.100-preview.2.20167.4)

Commits viewable in [compare
view](https://github.com/dotnet/roslyn/commits).
</details>

Updated Microsoft.CodeAnalysis.CSharp from 5.3.0 to 5.6.0.

Updated
[Microsoft.CodeAnalysis.CSharp.Features](https://github.com/dotnet/roslyn)
from 5.3.0 to 5.6.0.

<details>
<summary>Release notes</summary>

_Sourced from [Microsoft.CodeAnalysis.CSharp.Features's
releases](https://github.com/dotnet/roslyn/releases)._

No release notes found for this version range.

Commits viewable in [compare
view](https://github.com/dotnet/roslyn/commits).
</details>

Updated
[Microsoft.CodeAnalysis.CSharp.Workspaces](https://github.com/dotnet/roslyn)
from 5.3.0 to 5.6.0.

<details>
<summary>Release notes</summary>

_Sourced from [Microsoft.CodeAnalysis.CSharp.Workspaces's
releases](https://github.com/dotnet/roslyn/releases)._

No release notes found for this version range.

Commits viewable in [compare
view](https://github.com/dotnet/roslyn/commits).
</details>

Updated
[Microsoft.CodeAnalysis.Workspaces.MSBuild](https://github.com/dotnet/roslyn)
from 5.3.0 to 5.6.0.

<details>
<summary>Release notes</summary>

_Sourced from [Microsoft.CodeAnalysis.Workspaces.MSBuild's
releases](https://github.com/dotnet/roslyn/releases)._

No release notes found for this version range.

Commits viewable in [compare
view](https://github.com/dotnet/roslyn/commits).
</details>

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps the github-actions group with 3 updates:
[taiki-e/install-action](https://github.com/taiki-e/install-action),
[github/codeql-action/init](https://github.com/github/codeql-action) and
[github/codeql-action/analyze](https://github.com/github/codeql-action).

Updates `taiki-e/install-action` from 2.82.10 to 2.82.11
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/taiki-e/install-action/releases">taiki-e/install-action's
releases</a>.</em></p>
<blockquote>
<h2>2.82.11</h2>
<ul>
<li>
<p>Update <code>wasm-tools@latest</code> to 1.253.0.</p>
</li>
<li>
<p>Update <code>uv@latest</code> to 0.11.27.</p>
</li>
<li>
<p>Update <code>mise@latest</code> to 2026.7.2.</p>
</li>
<li>
<p>Update <code>mdbook@latest</code> to 0.5.4.</p>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md">taiki-e/install-action's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<p>All notable changes to this project will be documented in this
file.</p>
<p>This project adheres to <a href="https://semver.org">Semantic
Versioning</a>.</p>
<!-- raw HTML omitted -->
<h2>[Unreleased]</h2>
<h2>[2.82.11] - 2026-07-08</h2>
<ul>
<li>
<p>Update <code>wasm-tools@latest</code> to 1.253.0.</p>
</li>
<li>
<p>Update <code>uv@latest</code> to 0.11.27.</p>
</li>
<li>
<p>Update <code>mise@latest</code> to 2026.7.2.</p>
</li>
<li>
<p>Update <code>mdbook@latest</code> to 0.5.4.</p>
</li>
</ul>
<h2>[2.82.10] - 2026-07-07</h2>
<ul>
<li>
<p>Update <code>tombi@latest</code> to 1.2.0.</p>
</li>
<li>
<p>Update <code>cargo-nextest@latest</code> to 0.9.140.</p>
</li>
</ul>
<h2>[2.82.9] - 2026-07-05</h2>
<ul>
<li>
<p>Update <code>vacuum@latest</code> to 0.29.9.</p>
</li>
<li>
<p>Update <code>prek@latest</code> to 0.4.8.</p>
</li>
<li>
<p>Update <code>cargo-tarpaulin@latest</code> to 0.37.0.</p>
</li>
<li>
<p>Update <code>cargo-leptos@latest</code> to 0.3.7.</p>
</li>
</ul>
<h2>[2.82.8] - 2026-07-03</h2>
<ul>
<li>
<p>Update <code>vacuum@latest</code> to 0.29.8.</p>
</li>
<li>
<p>Update <code>uv@latest</code> to 0.11.26.</p>
</li>
<li>
<p>Update <code>typos@latest</code> to 1.48.0.</p>
</li>
<li>
<p>Update <code>trivy@latest</code> to 0.72.0.</p>
</li>
<li>
<p>Update <code>tombi@latest</code> to 1.1.7.</p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/taiki-e/install-action/commit/5ebac0d9522d786674368e47e92963ba13f2c376"><code>5ebac0d</code></a>
Release 2.82.11</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/0ef1b06f246983bfc9b14d94cff7855d90529e46"><code>0ef1b06</code></a>
Update <code>wasm-tools@latest</code> to 1.253.0</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/78ce37c0ce7da0b633b3ee9a800d18e6d4fb11e7"><code>78ce37c</code></a>
Update <code>mise@latest</code> to 2026.7.2</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/080cc5c6de6a4709eb3c099c56ad225fa3db5492"><code>080cc5c</code></a>
Update wasm-tools manifest</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/c870c7a1dbaa5d99671937765392df21151c7808"><code>c870c7a</code></a>
Update <code>uv@latest</code> to 0.11.27</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/dcc765d42b0daa9842059edfb11fda14143027e2"><code>dcc765d</code></a>
Update <code>mise@latest</code> to 2026.7.1</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/98fa0bac11003b6f1143fd1634b47d42624003b2"><code>98fa0ba</code></a>
Update <code>mdbook@latest</code> to 0.5.4</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/544756b7938b454b9339922116f9f21301cc8169"><code>544756b</code></a>
Update martin manifest</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/116765984988a711571bdb8292667a67de89b08e"><code>1167659</code></a>
Update kingfisher manifest</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/ca5e0a7228a263c12320511f1b10890972a12bbc"><code>ca5e0a7</code></a>
Update biome manifest</li>
<li>See full diff in <a
href="https://github.com/taiki-e/install-action/compare/50414676f9f5d50a65992c6dd2ed02641263226c...5ebac0d9522d786674368e47e92963ba13f2c376">compare
view</a></li>
</ul>
</details>
<br />

Updates `github/codeql-action/init` from 4.36.3 to 4.37.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases">github/codeql-action/init's
releases</a>.</em></p>
<blockquote>
<h2>v4.37.0</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.0">2.26.0</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3995">#3995</a></li>
<li>In addition to the existing input format, the
<code>config-file</code> input for the <code>codeql-action/init</code>
step will soon support a new <code>[owner/]repo[@ref][:path]</code>
format. All components except the repository name are optional. If
omitted, <code>owner</code> defaults to the same owner as the repository
the analysis is running for, <code>ref</code> to <code>main</code>, and
<code>path</code> to <code>.github/codeql-action.yaml</code>. Support
for this format ships in this version of the CodeQL Action, but will
only be enabled over the coming weeks. <a
href="https://redirect.github.com/github/codeql-action/pull/3973">#3973</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action/init's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>4.37.0 - 08 Jul 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.0">2.26.0</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3995">#3995</a></li>
<li>In addition to the existing input format, the
<code>config-file</code> input for the <code>codeql-action/init</code>
step will soon support a new <code>[owner/]repo[@ref][:path]</code>
format. All components except the repository name are optional. If
omitted, <code>owner</code> defaults to the same owner as the repository
the analysis is running for, <code>ref</code> to <code>main</code>, and
<code>path</code> to <code>.github/codeql-action.yaml</code>. Support
for this format ships in this version of the CodeQL Action, but will
only be enabled over the coming weeks. <a
href="https://redirect.github.com/github/codeql-action/pull/3973">#3973</a></li>
</ul>
<h2>4.36.3 - 01 Jul 2026</h2>
<p>No user facing changes.</p>
<h2>4.36.2 - 04 Jun 2026</h2>
<ul>
<li>Cache CodeQL CLI version information across Actions steps. <a
href="https://redirect.github.com/github/codeql-action/pull/3943">#3943</a></li>
<li>Reduce requests while waiting for analysis processing by using
exponential backoff when polling SARIF processing status. <a
href="https://redirect.github.com/github/codeql-action/pull/3937">#3937</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.6">2.25.6</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3948">#3948</a></li>
</ul>
<h2>4.36.1 - 02 Jun 2026</h2>
<p>No user facing changes.</p>
<h2>4.36.0 - 22 May 2026</h2>
<ul>
<li><em>Breaking change</em>: Bump the minimum required CodeQL bundle
version to 2.19.4. <a
href="https://redirect.github.com/github/codeql-action/pull/3894">#3894</a></li>
<li>Add support for SHA-256 Git object IDs. <a
href="https://redirect.github.com/github/codeql-action/pull/3893">#3893</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.5">2.25.5</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3926">#3926</a></li>
</ul>
<h2>4.35.5 - 15 May 2026</h2>
<ul>
<li>We have improved how the JavaScript bundles for the CodeQL Action
are generated to avoid duplication across bundles and reduce the size of
the repository by around 70%. This should have no effect on the runtime
behaviour of the CodeQL Action. <a
href="https://redirect.github.com/github/codeql-action/pull/3899">#3899</a></li>
<li>For performance and accuracy reasons, <a
href="https://redirect.github.com/github/roadmap/issues/1158">improved
incremental analysis</a> will now only be enabled on a pull request when
diff-informed analysis is also enabled for that run. If diff-informed
analysis is unavailable (for example, because the PR diff ranges could
not be computed), the action will fall back to a full analysis. <a
href="https://redirect.github.com/github/codeql-action/pull/3791">#3791</a></li>
<li>If multiple inputs are provided for the GitHub-internal
<code>analysis-kinds</code> input, only <code>code-scanning</code> will
be enabled. The <code>analysis-kinds</code> input is experimental, for
GitHub-internal use only, and may change without notice at any time. <a
href="https://redirect.github.com/github/codeql-action/pull/3892">#3892</a></li>
<li>Added an experimental change which, when running a Code Scanning
analysis for a PR with <a
href="https://redirect.github.com/github/roadmap/issues/1158">improved
incremental analysis</a> enabled, prefers CodeQL CLI versions that have
a cached overlay-base database for the configured languages. This speeds
up analysis for a repository when there is not yet a cached overlay-base
database for the latest CLI version. We expect to roll this change out
to everyone in May. <a
href="https://redirect.github.com/github/codeql-action/pull/3880">#3880</a></li>
</ul>
<h2>4.35.4 - 07 May 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.4">2.25.4</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3881">#3881</a></li>
</ul>
<h2>4.35.3 - 01 May 2026</h2>
<ul>
<li><em>Upcoming breaking change</em>: Add a deprecation warning for
customers using CodeQL version 2.19.3 and earlier. These versions of
CodeQL were discontinued on 9 April 2026 alongside GitHub Enterprise
Server 3.15, and will be unsupported by the next minor release of the
CodeQL Action. <a
href="https://redirect.github.com/github/codeql-action/pull/3837">#3837</a></li>
<li>Configurations for private registries that use Cloudsmith or GCP
OIDC are now accepted. <a
href="https://redirect.github.com/github/codeql-action/pull/3850">#3850</a></li>
<li>Best-effort connection tests for private registries now use
<code>GET</code> requests instead of <code>HEAD</code> for better
compatibility with various registry implementations. For NuGet feeds,
the test is now always performed against the service index. <a
href="https://redirect.github.com/github/codeql-action/pull/3853">#3853</a></li>
<li>Fixed a bug where two diagnostics produced within the same
millisecond could overwrite each other on disk, causing one of them to
be lost. <a
href="https://redirect.github.com/github/codeql-action/pull/3852">#3852</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/99df26d4f13ea111d4ec1a7dddef6063f76b97e9"><code>99df26d</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3996">#3996</a>
from github/update-v4.37.0-c7c896d71</li>
<li><a
href="https://github.com/github/codeql-action/commit/31c27074fda95256cda077009907f8a6022dd7c0"><code>31c2707</code></a>
Add changenote for <a
href="https://redirect.github.com/github/codeql-action/issues/3973">#3973</a></li>
<li><a
href="https://github.com/github/codeql-action/commit/72df2181aac054d1f4b44264399d2aac12cf11c6"><code>72df218</code></a>
Update changelog for v4.37.0</li>
<li><a
href="https://github.com/github/codeql-action/commit/c7c896d71b3055d36f2aff93b16bcc6c69923b91"><code>c7c896d</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3995">#3995</a>
from github/update-bundle/codeql-bundle-v2.26.0</li>
<li><a
href="https://github.com/github/codeql-action/commit/3f34ff0ea3f5153c96071437b7cbf71ea3757146"><code>3f34ff0</code></a>
Add changelog note</li>
<li><a
href="https://github.com/github/codeql-action/commit/43bec09f1dc368b430cab4b5d69799bc904079d1"><code>43bec09</code></a>
Update default bundle to codeql-bundle-v2.26.0</li>
<li><a
href="https://github.com/github/codeql-action/commit/f58f0d11ebf5dedd870fab2f999275f7602cfa46"><code>f58f0d1</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3973">#3973</a>
from github/mbg/repo-props/config-file-shorthands</li>
<li><a
href="https://github.com/github/codeql-action/commit/7dc37cbb5b3e37f0e1cd1f18b61e0ea849898fb8"><code>7dc37cb</code></a>
Merge remote-tracking branch 'origin/main' into
mbg/repo-props/config-file-sh...</li>
<li><a
href="https://github.com/github/codeql-action/commit/8e22350a7e28c34c82a5a499fc241923301c2c4f"><code>8e22350</code></a>
Thread <code>ActionState</code> to <code>initConfig</code></li>
<li><a
href="https://github.com/github/codeql-action/commit/69c9e8c7d918cf2fee13b8b72fdde15883ff155b"><code>69c9e8c</code></a>
Mark some <code>status-report</code> imports as <code>type</code>-only
to avoid circular dependencies</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/54f647b7e1bb85c95cddabcd46b0c578ec92bc1a...99df26d4f13ea111d4ec1a7dddef6063f76b97e9">compare
view</a></li>
</ul>
</details>
<br />

Updates `github/codeql-action/analyze` from 4.36.3 to 4.37.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases">github/codeql-action/analyze's
releases</a>.</em></p>
<blockquote>
<h2>v4.37.0</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.0">2.26.0</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3995">#3995</a></li>
<li>In addition to the existing input format, the
<code>config-file</code> input for the <code>codeql-action/init</code>
step will soon support a new <code>[owner/]repo[@ref][:path]</code>
format. All components except the repository name are optional. If
omitted, <code>owner</code> defaults to the same owner as the repository
the analysis is running for, <code>ref</code> to <code>main</code>, and
<code>path</code> to <code>.github/codeql-action.yaml</code>. Support
for this format ships in this version of the CodeQL Action, but will
only be enabled over the coming weeks. <a
href="https://redirect.github.com/github/codeql-action/pull/3973">#3973</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action/analyze's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>4.37.0 - 08 Jul 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.0">2.26.0</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3995">#3995</a></li>
<li>In addition to the existing input format, the
<code>config-file</code> input for the <code>codeql-action/init</code>
step will soon support a new <code>[owner/]repo[@ref][:path]</code>
format. All components except the repository name are optional. If
omitted, <code>owner</code> defaults to the same owner as the repository
the analysis is running for, <code>ref</code> to <code>main</code>, and
<code>path</code> to <code>.github/codeql-action.yaml</code>. Support
for this format ships in this version of the CodeQL Action, but will
only be enabled over the coming weeks. <a
href="https://redirect.github.com/github/codeql-action/pull/3973">#3973</a></li>
</ul>
<h2>4.36.3 - 01 Jul 2026</h2>
<p>No user facing changes.</p>
<h2>4.36.2 - 04 Jun 2026</h2>
<ul>
<li>Cache CodeQL CLI version information across Actions steps. <a
href="https://redirect.github.com/github/codeql-action/pull/3943">#3943</a></li>
<li>Reduce requests while waiting for analysis processing by using
exponential backoff when polling SARIF processing status. <a
href="https://redirect.github.com/github/codeql-action/pull/3937">#3937</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.6">2.25.6</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3948">#3948</a></li>
</ul>
<h2>4.36.1 - 02 Jun 2026</h2>
<p>No user facing changes.</p>
<h2>4.36.0 - 22 May 2026</h2>
<ul>
<li><em>Breaking change</em>: Bump the minimum required CodeQL bundle
version to 2.19.4. <a
href="https://redirect.github.com/github/codeql-action/pull/3894">#3894</a></li>
<li>Add support for SHA-256 Git object IDs. <a
href="https://redirect.github.com/github/codeql-action/pull/3893">#3893</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.5">2.25.5</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3926">#3926</a></li>
</ul>
<h2>4.35.5 - 15 May 2026</h2>
<ul>
<li>We have improved how the JavaScript bundles for the CodeQL Action
are generated to avoid duplication across bundles and reduce the size of
the repository by around 70%. This should have no effect on the runtime
behaviour of the CodeQL Action. <a
href="https://redirect.github.com/github/codeql-action/pull/3899">#3899</a></li>
<li>For performance and accuracy reasons, <a
href="https://redirect.github.com/github/roadmap/issues/1158">improved
incremental analysis</a> will now only be enabled on a pull request when
diff-informed analysis is also enabled for that run. If diff-informed
analysis is unavailable (for example, because the PR diff ranges could
not be computed), the action will fall back to a full analysis. <a
href="https://redirect.github.com/github/codeql-action/pull/3791">#3791</a></li>
<li>If multiple inputs are provided for the GitHub-internal
<code>analysis-kinds</code> input, only <code>code-scanning</code> will
be enabled. The <code>analysis-kinds</code> input is experimental, for
GitHub-internal use only, and may change without notice at any time. <a
href="https://redirect.github.com/github/codeql-action/pull/3892">#3892</a></li>
<li>Added an experimental change which, when running a Code Scanning
analysis for a PR with <a
href="https://redirect.github.com/github/roadmap/issues/1158">improved
incremental analysis</a> enabled, prefers CodeQL CLI versions that have
a cached overlay-base database for the configured languages. This speeds
up analysis for a repository when there is not yet a cached overlay-base
database for the latest CLI version. We expect to roll this change out
to everyone in May. <a
href="https://redirect.github.com/github/codeql-action/pull/3880">#3880</a></li>
</ul>
<h2>4.35.4 - 07 May 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.4">2.25.4</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3881">#3881</a></li>
</ul>
<h2>4.35.3 - 01 May 2026</h2>
<ul>
<li><em>Upcoming breaking change</em>: Add a deprecation warning for
customers using CodeQL version 2.19.3 and earlier. These versions of
CodeQL were discontinued on 9 April 2026 alongside GitHub Enterprise
Server 3.15, and will be unsupported by the next minor release of the
CodeQL Action. <a
href="https://redirect.github.com/github/codeql-action/pull/3837">#3837</a></li>
<li>Configurations for private registries that use Cloudsmith or GCP
OIDC are now accepted. <a
href="https://redirect.github.com/github/codeql-action/pull/3850">#3850</a></li>
<li>Best-effort connection tests for private registries now use
<code>GET</code> requests instead of <code>HEAD</code> for better
compatibility with various registry implementations. For NuGet feeds,
the test is now always performed against the service index. <a
href="https://redirect.github.com/github/codeql-action/pull/3853">#3853</a></li>
<li>Fixed a bug where two diagnostics produced within the same
millisecond could overwrite each other on disk, causing one of them to
be lost. <a
href="https://redirect.github.com/github/codeql-action/pull/3852">#3852</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/99df26d4f13ea111d4ec1a7dddef6063f76b97e9"><code>99df26d</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3996">#3996</a>
from github/update-v4.37.0-c7c896d71</li>
<li><a
href="https://github.com/github/codeql-action/commit/31c27074fda95256cda077009907f8a6022dd7c0"><code>31c2707</code></a>
Add changenote for <a
href="https://redirect.github.com/github/codeql-action/issues/3973">#3973</a></li>
<li><a
href="https://github.com/github/codeql-action/commit/72df2181aac054d1f4b44264399d2aac12cf11c6"><code>72df218</code></a>
Update changelog for v4.37.0</li>
<li><a
href="https://github.com/github/codeql-action/commit/c7c896d71b3055d36f2aff93b16bcc6c69923b91"><code>c7c896d</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3995">#3995</a>
from github/update-bundle/codeql-bundle-v2.26.0</li>
<li><a
href="https://github.com/github/codeql-action/commit/3f34ff0ea3f5153c96071437b7cbf71ea3757146"><code>3f34ff0</code></a>
Add changelog note</li>
<li><a
href="https://github.com/github/codeql-action/commit/43bec09f1dc368b430cab4b5d69799bc904079d1"><code>43bec09</code></a>
Update default bundle to codeql-bundle-v2.26.0</li>
<li><a
href="https://github.com/github/codeql-action/commit/f58f0d11ebf5dedd870fab2f999275f7602cfa46"><code>f58f0d1</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3973">#3973</a>
from github/mbg/repo-props/config-file-shorthands</li>
<li><a
href="https://github.com/github/codeql-action/commit/7dc37cbb5b3e37f0e1cd1f18b61e0ea849898fb8"><code>7dc37cb</code></a>
Merge remote-tracking branch 'origin/main' into
mbg/repo-props/config-file-sh...</li>
<li><a
href="https://github.com/github/codeql-action/commit/8e22350a7e28c34c82a5a499fc241923301c2c4f"><code>8e22350</code></a>
Thread <code>ActionState</code> to <code>initConfig</code></li>
<li><a
href="https://github.com/github/codeql-action/commit/69c9e8c7d918cf2fee13b8b72fdde15883ff155b"><code>69c9e8c</code></a>
Mark some <code>status-report</code> imports as <code>type</code>-only
to avoid circular dependencies</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/54f647b7e1bb85c95cddabcd46b0c578ec92bc1a...99df26d4f13ea111d4ec1a7dddef6063f76b97e9">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Updated
[MessagePack](https://github.com/MessagePack-CSharp/MessagePack-CSharp)
from 3.1.7 to 3.1.8.

<details>
<summary>Release notes</summary>

_Sourced from [MessagePack's
releases](https://github.com/MessagePack-CSharp/MessagePack-CSharp/releases)._

No release notes found for this version range.

Commits viewable in [compare
view](https://github.com/MessagePack-CSharp/MessagePack-CSharp/commits).
</details>

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…scode in the vscode-extension group (#145)

Bumps the vscode-extension group in /editors/vscode with 1 update:
[@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node).

Updates `@types/node` from 26.1.0 to 26.1.1
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@types/node&package-manager=npm_and_yarn&previous-version=26.1.0&new-version=26.1.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps the rust-host group with 2 updates:
[lsp-server](https://github.com/rust-lang/rust-analyzer) and
[tree-sitter](https://github.com/tree-sitter/tree-sitter).

Updates `lsp-server` from 0.8.0 to 0.9.0
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/rust-lang/rust-analyzer/commits">compare
view</a></li>
</ul>
</details>
<br />

Updates `tree-sitter` from 0.26.10 to 0.26.11
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/tree-sitter/tree-sitter/releases">tree-sitter's
releases</a>.</em></p>
<blockquote>
<h2>v0.26.11</h2>
<h2>What's Changed</h2>
<ul>
<li>fix(deps): zig manifest for wasmtime is missing windows hashes by <a
href="https://github.com/tree-sitter-ci-bot"><code>@​tree-sitter-ci-bot</code></a>[bot]
in <a
href="https://redirect.github.com/tree-sitter/tree-sitter/pull/5720">tree-sitter/tree-sitter#5720</a></li>
<li>fix(xtask): eliminate silent errors in zig fetch by <a
href="https://github.com/WillLillis"><code>@​WillLillis</code></a> in <a
href="https://redirect.github.com/tree-sitter/tree-sitter/pull/5724">tree-sitter/tree-sitter#5724</a></li>
<li>fix(query): short-circuit longest-match dedup for disjoint states by
<a
href="https://github.com/tree-sitter-ci-bot"><code>@​tree-sitter-ci-bot</code></a>[bot]
in <a
href="https://redirect.github.com/tree-sitter/tree-sitter/pull/5726">tree-sitter/tree-sitter#5726</a></li>
<li>fix(query): various anchor fixes by <a
href="https://github.com/tree-sitter-ci-bot"><code>@​tree-sitter-ci-bot</code></a>[bot]
in <a
href="https://redirect.github.com/tree-sitter/tree-sitter/pull/5727">tree-sitter/tree-sitter#5727</a></li>
<li>Fix C++ compilation errors in array macros. by <a
href="https://github.com/tree-sitter-ci-bot"><code>@​tree-sitter-ci-bot</code></a>[bot]
in <a
href="https://redirect.github.com/tree-sitter/tree-sitter/pull/5735">tree-sitter/tree-sitter#5735</a></li>
<li>fix(rust): address new clippy lints by <a
href="https://github.com/WillLillis"><code>@​WillLillis</code></a> in <a
href="https://redirect.github.com/tree-sitter/tree-sitter/pull/5743">tree-sitter/tree-sitter#5743</a></li>
<li>fix(generate): strip non-ASCII case folds by <a
href="https://github.com/tree-sitter-ci-bot"><code>@​tree-sitter-ci-bot</code></a>[bot]
in <a
href="https://redirect.github.com/tree-sitter/tree-sitter/pull/5744">tree-sitter/tree-sitter#5744</a></li>
<li>fix(ci): re-set executable permission on release artifacts before
zipping by <a href="https://github.com/clason"><code>@​clason</code></a>
in <a
href="https://redirect.github.com/tree-sitter/tree-sitter/pull/5746">tree-sitter/tree-sitter#5746</a></li>
<li>release v0.26.11 by <a
href="https://github.com/clason"><code>@​clason</code></a> in <a
href="https://redirect.github.com/tree-sitter/tree-sitter/pull/5748">tree-sitter/tree-sitter#5748</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/tree-sitter/tree-sitter/compare/v0.26.10...v0.26.11">https://github.com/tree-sitter/tree-sitter/compare/v0.26.10...v0.26.11</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/tree-sitter/tree-sitter/commit/64402de2857cc197ecc4ca3bc144ea91fda7e72e"><code>64402de</code></a>
release v0.26.11</li>
<li><a
href="https://github.com/tree-sitter/tree-sitter/commit/2194ac1a9c9fb8960b8471daade1da07aaeb2b0b"><code>2194ac1</code></a>
fix(ci): re-set executable permission on release artifacts before
zipping</li>
<li><a
href="https://github.com/tree-sitter/tree-sitter/commit/a2b8369c4a18373c08a8b7e742fac8b14674eefc"><code>a2b8369</code></a>
fix(generate): strip non-ASCII case folds</li>
<li><a
href="https://github.com/tree-sitter/tree-sitter/commit/1ae3cc575388c8429a8991b8c9580946243598a7"><code>1ae3cc5</code></a>
fix(rust): address new clippy lints</li>
<li><a
href="https://github.com/tree-sitter/tree-sitter/commit/90dd1a0cfbf6262483a9e5953a35659585129120"><code>90dd1a0</code></a>
fix(templates): generated array macros do not compile with C++</li>
<li><a
href="https://github.com/tree-sitter/tree-sitter/commit/fa6222a0d37ecf2bfb4fccd31e857133f3e81930"><code>fa6222a</code></a>
docs(queries): clarify behavior of first child anchor example</li>
<li><a
href="https://github.com/tree-sitter/tree-sitter/commit/77b741bb8309d6755797f942bf0ff1a9a74475a4"><code>77b741b</code></a>
docs(queries): specify anchor behavior with quantifiers and groups</li>
<li><a
href="https://github.com/tree-sitter/tree-sitter/commit/1c21ff33d688c328a687e37a7f4215136b6e6dc6"><code>1c21ff3</code></a>
fix(query): apply a trailing anchor when its optional node is
skipped</li>
<li><a
href="https://github.com/tree-sitter/tree-sitter/commit/5756ced350638708becc00d7ccb2e8d171b4feae"><code>5756ced</code></a>
fix(query): make an anchor after a zero-matched quantifier vacuous</li>
<li><a
href="https://github.com/tree-sitter/tree-sitter/commit/eca86a7a6c77c0a7124a59be712661256e361cbd"><code>eca86a7</code></a>
fix(query): forbid an anchor at the end of a group</li>
<li>Additional commits viewable in <a
href="https://github.com/tree-sitter/tree-sitter/compare/v0.26.10...v0.26.11">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps the github-actions group with 2 updates:
[actions/setup-node](https://github.com/actions/setup-node) and
[taiki-e/install-action](https://github.com/taiki-e/install-action).

Updates `actions/setup-node` from 6.4.0 to 7.0.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/setup-node/releases">actions/setup-node's
releases</a>.</em></p>
<blockquote>
<h2>v7.0.0</h2>
<h2>What's Changed</h2>
<h3>Enhancements:</h3>
<ul>
<li>Add cache-primary-key and cache-matched-key as outputs by <a
href="https://github.com/gowridurgad"><code>@​gowridurgad</code></a> in
<a
href="https://redirect.github.com/actions/setup-node/pull/1577">actions/setup-node#1577</a></li>
<li>Migrate to ESM and upgrade dependencies by <a
href="https://github.com/gowridurgad"><code>@​gowridurgad</code></a> in
<a
href="https://redirect.github.com/actions/setup-node/pull/1574">actions/setup-node#1574</a></li>
</ul>
<h3>Bug fixes:</h3>
<ul>
<li>Remove dummy NODE_AUTH_TOKEN export by <a
href="https://github.com/gowridurgad"><code>@​gowridurgad</code></a> in
<a
href="https://redirect.github.com/actions/setup-node/pull/1558">actions/setup-node#1558</a></li>
<li>Only use <code>mirrorToken</code> in <code>getManifest</code> if
it's provided by <a
href="https://github.com/deiga"><code>@​deiga</code></a> in <a
href="https://redirect.github.com/actions/setup-node/pull/1548">actions/setup-node#1548</a></li>
</ul>
<h3>Documentation updates:</h3>
<ul>
<li>Add documentation for publishing to npm with Trusted Publisher
(OIDC) by <a
href="https://github.com/chiranjib-swain"><code>@​chiranjib-swain</code></a>
in <a
href="https://redirect.github.com/actions/setup-node/pull/1536">actions/setup-node#1536</a></li>
<li>docs: Update restore-only cache documentation by <a
href="https://github.com/priya-kinthali"><code>@​priya-kinthali</code></a>
in <a
href="https://redirect.github.com/actions/setup-node/pull/1550">actions/setup-node#1550</a></li>
<li>docs: Update caching recommendations to mitigate cache poisoning
risks by <a
href="https://github.com/chiranjib-swain"><code>@​chiranjib-swain</code></a>
in <a
href="https://redirect.github.com/actions/setup-node/pull/1567">actions/setup-node#1567</a></li>
</ul>
<h3>Dependency update:</h3>
<ul>
<li>Upgrade <code>@​actions/cache</code> to 5.1.0, log cache write
denied by <a
href="https://github.com/jasongin"><code>@​jasongin</code></a> in <a
href="https://redirect.github.com/actions/setup-node/pull/1569">actions/setup-node#1569</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/chiranjib-swain"><code>@​chiranjib-swain</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/setup-node/pull/1536">actions/setup-node#1536</a></li>
<li><a href="https://github.com/deiga"><code>@​deiga</code></a> made
their first contribution in <a
href="https://redirect.github.com/actions/setup-node/pull/1548">actions/setup-node#1548</a></li>
<li><a href="https://github.com/jasongin"><code>@​jasongin</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/setup-node/pull/1569">actions/setup-node#1569</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/setup-node/compare/v6...v7.0.0">https://github.com/actions/setup-node/compare/v6...v7.0.0</a></p>
<h2>v6.5.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Update <code>@​actions/cache</code> to 5.1.0 and add security
overrides for undici and fast-xml-parser by <a
href="https://github.com/HarithaVattikuti"><code>@​HarithaVattikuti</code></a>
in <a
href="https://redirect.github.com/actions/setup-node/pull/1579">actions/setup-node#1579</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/setup-node/compare/v6.4.0...v6.5.0">https://github.com/actions/setup-node/compare/v6.4.0...v6.5.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/setup-node/commit/820762786026740c76f36085b0efc47a31fe5020"><code>8207627</code></a>
Migrate to ESM and upgrade dependencies (<a
href="https://redirect.github.com/actions/setup-node/issues/1574">#1574</a>)</li>
<li><a
href="https://github.com/actions/setup-node/commit/04be95cf3511ea51ebf9f224ddfb99cc7ab87cd4"><code>04be95c</code></a>
Add cache-primary-key and cache-matched-key as outputs (<a
href="https://redirect.github.com/actions/setup-node/issues/1577">#1577</a>)</li>
<li><a
href="https://github.com/actions/setup-node/commit/7c2c68d20d402ed6a201ada70a81341941093140"><code>7c2c68d</code></a>
docs: Update caching recommendations to mitigate cache poisoning risks
(<a
href="https://redirect.github.com/actions/setup-node/issues/1567">#1567</a>)</li>
<li><a
href="https://github.com/actions/setup-node/commit/6a61c0375d66246de94630495909f12cf8dac84d"><code>6a61c03</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/setup-node/issues/1569">#1569</a>
from jasongin/update-actions-cache-5.1.0</li>
<li><a
href="https://github.com/actions/setup-node/commit/30eb73b41ded577900c1ebf968ef95cdf8f7434f"><code>30eb73b</code></a>
Resolve high-severity audit issues</li>
<li><a
href="https://github.com/actions/setup-node/commit/4e1a87a501d0302f99e30e2748568adcb388d09f"><code>4e1a87a</code></a>
Update dist</li>
<li><a
href="https://github.com/actions/setup-node/commit/360237f0c01778d0c17291f75c56d6feae4f7574"><code>360237f</code></a>
Strict equality</li>
<li><a
href="https://github.com/actions/setup-node/commit/4f8aac5beb2f0854bc79651567a18c67eb0b9de3"><code>4f8aac5</code></a>
Bump <code>@​actions/cache</code> to 5.1.0, log cache write denied</li>
<li><a
href="https://github.com/actions/setup-node/commit/f4a67bbeca970f103397d3d2b9462cf787cd2980"><code>f4a67bb</code></a>
Only use <code>mirrorToken</code> in <code>getManifest</code> if it's
provided (<a
href="https://redirect.github.com/actions/setup-node/issues/1548">#1548</a>)</li>
<li><a
href="https://github.com/actions/setup-node/commit/0355742c943ddb13ca8a6b700f824231caa91e75"><code>0355742</code></a>
Remove dummy NODE_AUTH_TOKEN export (<a
href="https://redirect.github.com/actions/setup-node/issues/1558">#1558</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/actions/setup-node/compare/48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e...820762786026740c76f36085b0efc47a31fe5020">compare
view</a></li>
</ul>
</details>
<br />

Updates `taiki-e/install-action` from 2.82.11 to 2.83.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/taiki-e/install-action/releases">taiki-e/install-action's
releases</a>.</em></p>
<blockquote>
<h2>2.83.2</h2>
<ul>
<li>
<p>Update <code>parse-dockerfile@latest</code> to 0.1.8.</p>
</li>
<li>
<p>Update <code>mise@latest</code> to 2026.7.5.</p>
</li>
<li>
<p>Update <code>just@latest</code> to 1.56.0.</p>
</li>
<li>
<p>Update <code>gungraun-runner@latest</code> to 0.19.4.</p>
</li>
<li>
<p>Update <code>cargo-neat@latest</code> to 0.4.1.</p>
</li>
</ul>
<h2>2.83.1</h2>
<ul>
<li>
<p>Update <code>rclone@latest</code> to 1.74.4.</p>
</li>
<li>
<p>Update <code>mise@latest</code> to 2026.7.4.</p>
</li>
<li>
<p>Update <code>cargo-deny@latest</code> to 0.20.2.</p>
</li>
</ul>
<h2>2.83.0</h2>
<ul>
<li>
<p>Support <code>cargo-about</code>. (<a
href="https://redirect.github.com/taiki-e/install-action/pull/1924">#1924</a>,
thanks <a
href="https://github.com/ruffsl"><code>@​ruffsl</code></a>)</p>
</li>
<li>
<p>Update <code>uv@latest</code> to 0.11.28.</p>
</li>
<li>
<p>Update <code>martin@latest</code> to 1.12.0.</p>
</li>
<li>
<p>Update <code>kingfisher@latest</code> to 1.106.0.</p>
</li>
<li>
<p>Update <code>biome@latest</code> to 2.5.3.</p>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md">taiki-e/install-action's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<p>All notable changes to this project will be documented in this
file.</p>
<p>This project adheres to <a href="https://semver.org">Semantic
Versioning</a>.</p>
<!-- raw HTML omitted -->
<h2>[Unreleased]</h2>
<h2>[2.83.2] - 2026-07-12</h2>
<ul>
<li>
<p>Update <code>parse-dockerfile@latest</code> to 0.1.8.</p>
</li>
<li>
<p>Update <code>mise@latest</code> to 2026.7.5.</p>
</li>
<li>
<p>Update <code>just@latest</code> to 1.56.0.</p>
</li>
<li>
<p>Update <code>gungraun-runner@latest</code> to 0.19.4.</p>
</li>
<li>
<p>Update <code>cargo-neat@latest</code> to 0.4.1.</p>
</li>
</ul>
<h2>[2.83.1] - 2026-07-10</h2>
<ul>
<li>
<p>Update <code>rclone@latest</code> to 1.74.4.</p>
</li>
<li>
<p>Update <code>mise@latest</code> to 2026.7.4.</p>
</li>
<li>
<p>Update <code>cargo-deny@latest</code> to 0.20.2.</p>
</li>
</ul>
<h2>[2.83.0] - 2026-07-09</h2>
<ul>
<li>
<p>Support <code>cargo-about</code>. (<a
href="https://redirect.github.com/taiki-e/install-action/pull/1924">#1924</a>,
thanks <a
href="https://github.com/ruffsl"><code>@​ruffsl</code></a>)</p>
</li>
<li>
<p>Update <code>uv@latest</code> to 0.11.28.</p>
</li>
<li>
<p>Update <code>martin@latest</code> to 1.12.0.</p>
</li>
<li>
<p>Update <code>kingfisher@latest</code> to 1.106.0.</p>
</li>
<li>
<p>Update <code>biome@latest</code> to 2.5.3.</p>
</li>
</ul>
<h2>[2.82.11] - 2026-07-08</h2>
<ul>
<li>
<p>Update <code>wasm-tools@latest</code> to 1.253.0.</p>
</li>
<li>
<p>Update <code>uv@latest</code> to 0.11.27.</p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/taiki-e/install-action/commit/43aecc8d72668fbcfe75c31400bc4f890f1c5853"><code>43aecc8</code></a>
Release 2.83.2</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/fca47892c74f4dffa1e86ad93eca31cf898c2541"><code>fca4789</code></a>
Update prek manifest</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/b41cc1f9ab348b9db341d8597853df93b08652f0"><code>b41cc1f</code></a>
Update <code>parse-dockerfile@latest</code> to 0.1.8</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/8d866f8ca86db77044d7d29639e24660d0b37b88"><code>8d866f8</code></a>
Update <code>mise@latest</code> to 2026.7.5</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/7ebe462223a33af951eed3c3ab1f754ddf2992e2"><code>7ebe462</code></a>
Update <code>just@latest</code> to 1.56.0</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/01ab5633b01b19988c158b5366d64947fd6cacce"><code>01ab563</code></a>
Update <code>gungraun-runner@latest</code> to 0.19.4</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/f164a682e7e0033cf72f1d5722d079fe82275c1e"><code>f164a68</code></a>
Update <code>cargo-neat@latest</code> to 0.4.1</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/2ca9b94c269419b7b0c711c09d0b21c4e1d51145"><code>2ca9b94</code></a>
Release 2.83.1</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/8598f86981150fb7f6511798af658bbf80a8ea46"><code>8598f86</code></a>
Update parse-dockerfile manifest</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/76cfe4de2d710e12bae93580164f20dff9fd96e9"><code>76cfe4d</code></a>
Update <code>rclone@latest</code> to 1.74.4</li>
<li>Additional commits viewable in <a
href="https://github.com/taiki-e/install-action/compare/5ebac0d9522d786674368e47e92963ba13f2c376...43aecc8d72668fbcfe75c31400bc4f890f1c5853">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…6 updates (#148)

Bumps the vscode-extension group in /editors/vscode with 6 updates:

| Package | From | To |
| --- | --- | --- |
|
[fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser)
| `5.9.3` | `5.10.0` |
|
[@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin)
| `8.63.0` | `8.64.0` |
|
[@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser)
| `8.63.0` | `8.64.0` |
| [eslint](https://github.com/eslint/eslint) | `10.6.0` | `10.7.0` |
| [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` |
`7.0.2` |
|
[typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint)
| `8.63.0` | `8.64.0` |

Updates `fast-xml-parser` from 5.9.3 to 5.10.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/NaturalIntelligence/fast-xml-parser/releases">fast-xml-parser's
releases</a>.</em></p>
<blockquote>
<h2>v5.10.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Bump actions/checkout from 6.0.3 to 7.0.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/NaturalIntelligence/fast-xml-parser/pull/849">NaturalIntelligence/fast-xml-parser#849</a></li>
<li>Bump zizmorcore/zizmor-action from 0.5.6 to 0.5.7 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/NaturalIntelligence/fast-xml-parser/pull/848">NaturalIntelligence/fast-xml-parser#848</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.9.3...v5.10.0">https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.9.3...v5.10.0</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md">fast-xml-parser's
changelog</a>.</em></p>
<blockquote>
<p><!-- raw HTML omitted -->Note: If you find missing information about
particular minor version, that version must have been changed without
any functional change in this library.<!-- raw HTML omitted --></p>
<p>Note: Due to some last quick changes on v4, detail of v4.5.3 &amp;
v4.5.4 are not updated here. v4.5.4x is the last tag of v4 in github
repository. I'm extremely sorry for the confusion</p>
<p><strong>5.10.0 / 2026-07-11</strong></p>
<ul>
<li>upgrade:
<ul>
<li>xml-naming v0.3.0: cache support</li>
<li>PEM v1.6.2: sibling bug fix</li>
<li>is-unsafe v2.0.0: tree shaking</li>
</ul>
</li>
</ul>
<p>*<em>5.9.3 / 2026-06-19</em></p>
<ul>
<li>update strnum</li>
</ul>
<p>*<em>5.9.2 / 2026-06-17</em></p>
<ul>
<li>dummy release to test changes in github action</li>
</ul>
<p>*<em>5.9.1 / 2026-06-17</em></p>
<ul>
<li>dummy release to test release from github action</li>
</ul>
<p>*<em>5.9.0 / 2026-06-15</em></p>
<ul>
<li>update strnum to 2.3.0
<ul>
<li>you can set hex, binary, enotation, infinity, unicode</li>
</ul>
</li>
<li>validate unsafe HTML or XML data in doctype entities unsing
'is-unsafe' library.
User can override rules by overriding EntityDecoder.</li>
</ul>
<p>*<em>5.8.0 / 2026-05-12</em></p>
<ul>
<li>integrate xml-naming to validate DOCTYPE entity name and notation
name (using qname becaue of backward compatibility)
<ul>
<li>This will consider xml-version as well. '1.0' is default</li>
</ul>
</li>
<li>update strnum to 2.3.0
<ul>
<li>You can set octal and binary parsing which is bydeault off</li>
</ul>
</li>
<li>update fast-xml-builder to 1.2.0
<ul>
<li>can sanitize tag names if found invalid</li>
<li>fix format output</li>
</ul>
</li>
</ul>
<p><strong>5.7.3 / 2006-05-05</strong></p>
<ul>
<li>fix: alwaysCreateTextNode should create text node when attributes
are present for self closing node</li>
<li>fix stop node expression when ns prefix is removed (found by <a
href="https://github.com/iruizsalinas">iruizsalinas</a>)</li>
<li>update XML Builder to 1.1.7</li>
<li>mark addEntity deprecated</li>
</ul>
<p><strong>5.7.2 / 2026-04-25</strong></p>
<ul>
<li>allow numerical external entity for backward compatibility</li>
<li>fix <a
href="https://redirect.github.com/NaturalIntelligence/fast-xml-parser/issues/705">#705</a>:
attributesGroupName working with preserveOrder</li>
<li>fix <a
href="https://redirect.github.com/NaturalIntelligence/fast-xml-parser/issues/817">#817</a>:
stackoverflow when tag expression is very long</li>
</ul>
<p><strong>5.7.1 / 2026-04-20</strong></p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/NaturalIntelligence/fast-xml-parser/commit/296b3322916c40a70c77b88183cc8fc810fd544f"><code>296b332</code></a>
5.10.0</li>
<li><a
href="https://github.com/NaturalIntelligence/fast-xml-parser/commit/75f756558cf382e2dc6d61cca0e93854d546c42c"><code>75f7565</code></a>
update package guide</li>
<li><a
href="https://github.com/NaturalIntelligence/fast-xml-parser/commit/2d8d1d0ab2c6607e3a2e107f8ed47f697f3cb3d3"><code>2d8d1d0</code></a>
update details</li>
<li><a
href="https://github.com/NaturalIntelligence/fast-xml-parser/commit/e58e4dd7155694dfcd6d2a8d905eee95f9866ee9"><code>e58e4dd</code></a>
upgrade: xml-naming v0.3.0, PEM v1.6.2, is-unsafe v2.0.0</li>
<li><a
href="https://github.com/NaturalIntelligence/fast-xml-parser/commit/545e491baf205116341103487db05a77beeccbac"><code>545e491</code></a>
Bump zizmorcore/zizmor-action from 0.5.6 to 0.5.7 (<a
href="https://redirect.github.com/NaturalIntelligence/fast-xml-parser/issues/848">#848</a>)</li>
<li><a
href="https://github.com/NaturalIntelligence/fast-xml-parser/commit/5ea8aa15783a81e4c3c36ce54d6d34b066d0409b"><code>5ea8aa1</code></a>
Bump actions/checkout from 6.0.3 to 7.0.0 (<a
href="https://redirect.github.com/NaturalIntelligence/fast-xml-parser/issues/849">#849</a>)</li>
<li>See full diff in <a
href="https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.9.3...v5.10.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `@typescript-eslint/eslint-plugin` from 8.63.0 to 8.64.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/releases">@​typescript-eslint/eslint-plugin's
releases</a>.</em></p>
<blockquote>
<h2>v8.64.0</h2>
<h2>8.64.0 (2026-07-13)</h2>
<h3>🚀 Features</h3>
<ul>
<li>support parsing <code>import defer</code> (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12513">#12513</a>)</li>
<li><strong>eslint-plugin:</strong> [no-loop-func] support
<code>using</code> / <code>await using</code> declarations and deprecate
the rule (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12500">#12500</a>)</li>
<li><strong>typescript-estree:</strong> throw for invalid definite
assignment in class properties (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12543">#12543</a>)</li>
</ul>
<h3>🩹 Fixes</h3>
<ul>
<li><strong>eslint-plugin:</strong> [require-array-sort-compare] handle
constrained arrays (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12512">#12512</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>Evyatar Daud <a
href="https://github.com/StyleShit"><code>@​StyleShit</code></a></li>
<li>송재욱</li>
</ul>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.64.0">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md">@​typescript-eslint/eslint-plugin's
changelog</a>.</em></p>
<blockquote>
<h2>8.64.0 (2026-07-13)</h2>
<h3>🚀 Features</h3>
<ul>
<li><strong>eslint-plugin:</strong> [no-loop-func] support
<code>using</code> / <code>await using</code> declarations and deprecate
the rule (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12500">#12500</a>)</li>
<li><strong>typescript-estree:</strong> throw for invalid definite
assignment in class properties (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12543">#12543</a>)</li>
</ul>
<h3>🩹 Fixes</h3>
<ul>
<li><strong>eslint-plugin:</strong> [require-array-sort-compare] handle
constrained arrays (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12512">#12512</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>Evyatar Daud <a
href="https://github.com/StyleShit"><code>@​StyleShit</code></a></li>
<li>송재욱</li>
</ul>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.64.0">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/414d9abbf66f77796ab12ec7e75b07722e592832"><code>414d9ab</code></a>
chore(release): publish 8.64.0</li>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/bcfe16fd2c4cbb12227168475172b46cd5788543"><code>bcfe16f</code></a>
feat(eslint-plugin): [no-loop-func] support <code>using</code> /
<code>await using</code> declarati...</li>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/5b5bfdeb8fd6b351c4366fb09d46ae35ec6eeea7"><code>5b5bfde</code></a>
fix(eslint-plugin): [require-array-sort-compare] handle constrained
arrays (#...</li>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/321856cdadeb369ce89c90327822399b1447e5f9"><code>321856c</code></a>
chore: cleanup cspell config (<a
href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin/issues/12526">#12526</a>)</li>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/b418cf577f66e65ea1ddd02619fda3a5de9cb9e6"><code>b418cf5</code></a>
feat(typescript-estree): throw for invalid definite assignment in class
prope...</li>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/737de2b569c29327d2e19a81ebd95236bd854335"><code>737de2b</code></a>
docs: align unified-signatures correct example parameter (<a
href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin/issues/12506">#12506</a>)</li>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/a63c17ab747b1f539c51ca066c0409a901677004"><code>a63c17a</code></a>
docs: fix shadowed parameter name in unified-signatures example (<a
href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin/issues/12502">#12502</a>)</li>
<li>See full diff in <a
href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.64.0/packages/eslint-plugin">compare
view</a></li>
</ul>
</details>
<br />

Updates `@typescript-eslint/parser` from 8.63.0 to 8.64.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/releases">@​typescript-eslint/parser's
releases</a>.</em></p>
<blockquote>
<h2>v8.64.0</h2>
<h2>8.64.0 (2026-07-13)</h2>
<h3>🚀 Features</h3>
<ul>
<li>support parsing <code>import defer</code> (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12513">#12513</a>)</li>
<li><strong>eslint-plugin:</strong> [no-loop-func] support
<code>using</code> / <code>await using</code> declarations and deprecate
the rule (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12500">#12500</a>)</li>
<li><strong>typescript-estree:</strong> throw for invalid definite
assignment in class properties (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12543">#12543</a>)</li>
</ul>
<h3>🩹 Fixes</h3>
<ul>
<li><strong>eslint-plugin:</strong> [require-array-sort-compare] handle
constrained arrays (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12512">#12512</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>Evyatar Daud <a
href="https://github.com/StyleShit"><code>@​StyleShit</code></a></li>
<li>송재욱</li>
</ul>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.64.0">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md">@​typescript-eslint/parser's
changelog</a>.</em></p>
<blockquote>
<h2>8.64.0 (2026-07-13)</h2>
<p>This was a version bump only for parser to align it with other
projects, there were no code changes.</p>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.64.0">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/414d9abbf66f77796ab12ec7e75b07722e592832"><code>414d9ab</code></a>
chore(release): publish 8.64.0</li>
<li>See full diff in <a
href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.64.0/packages/parser">compare
view</a></li>
</ul>
</details>
<br />

Updates `eslint` from 10.6.0 to 10.7.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/eslint/eslint/releases">eslint's
releases</a>.</em></p>
<blockquote>
<h2>v10.7.0</h2>
<h2>Features</h2>
<ul>
<li><a
href="https://github.com/eslint/eslint/commit/cf2a9bf2d982642f760370c15f1196f4658f4e27"><code>cf2a9bf</code></a>
feat: add errorClassNames option to preserve-caught-error rule (<a
href="https://redirect.github.com/eslint/eslint/issues/21032">#21032</a>)
(sethamus)</li>
<li><a
href="https://github.com/eslint/eslint/commit/f8b873aae53610b80b5c1005606716e05ed3b91f"><code>f8b873a</code></a>
feat: max-nested-callbacks option for constructor callbacks (<a
href="https://redirect.github.com/eslint/eslint/issues/21063">#21063</a>)
(fnx)</li>
<li><a
href="https://github.com/eslint/eslint/commit/557fde8bc633d26ea4fe287d4483f287e8e6080f"><code>557fde8</code></a>
feat: support computed <code>Number.parseInt</code> member access in
<code>radix</code> rule (<a
href="https://redirect.github.com/eslint/eslint/issues/21041">#21041</a>)
(Pixel)</li>
<li><a
href="https://github.com/eslint/eslint/commit/0b4a73b65808f5a8fd192f15db2bf5e47002b9f7"><code>0b4a73b</code></a>
feat: add suggestions to no-compare-neg-zero (<a
href="https://redirect.github.com/eslint/eslint/issues/21034">#21034</a>)
(den$)</li>
<li><a
href="https://github.com/eslint/eslint/commit/96cdd427db5f26c6403fba92b0f7ae4556c595ec"><code>96cdd42</code></a>
feat: report invalid signed numeric radix values in <code>radix</code>
rule (<a
href="https://redirect.github.com/eslint/eslint/issues/21030">#21030</a>)
(Pixel)</li>
</ul>
<h2>Bug Fixes</h2>
<ul>
<li><a
href="https://github.com/eslint/eslint/commit/3e7bf15e69e6d3a2c8832356bcc2e9903cc4eede"><code>3e7bf15</code></a>
fix: apply <code>ignoreClassesWithImplements</code> to class expressions
(<a
href="https://redirect.github.com/eslint/eslint/issues/21069">#21069</a>)
(Pixel)</li>
<li><a
href="https://github.com/eslint/eslint/commit/0d7d70cf013ec5bf1e4f5a0fcf7128bdf059b2d4"><code>0d7d70c</code></a>
fix: insert cause outside wrapping parens in preserve-caught-error (<a
href="https://redirect.github.com/eslint/eslint/issues/21062">#21062</a>)
(Mahin Anowar)</li>
<li><a
href="https://github.com/eslint/eslint/commit/75ec753226010867270787b412f3dae412e421e6"><code>75ec753</code></a>
fix: handle static template literals in <code>eqeqeq</code> rule (<a
href="https://redirect.github.com/eslint/eslint/issues/21058">#21058</a>)
(Pixel)</li>
<li><a
href="https://github.com/eslint/eslint/commit/b717a22e2408389a2ad40af66543e46390669eb6"><code>b717a22</code></a>
fix: prevent <code>eqeqeq</code> null option from reporting non-equality
operators (<a
href="https://redirect.github.com/eslint/eslint/issues/21057">#21057</a>)
(Pixel)</li>
<li><a
href="https://github.com/eslint/eslint/commit/e35b05f1961dcd691611bd68b6ff8a87072d6f76"><code>e35b05f</code></a>
fix: avoid <code>no-invalid-regexp</code> false positive for shadowed
RegExp (<a
href="https://redirect.github.com/eslint/eslint/issues/21051">#21051</a>)
(Pixel)</li>
<li><a
href="https://github.com/eslint/eslint/commit/a3172b69c7db63ea0321355543e3f527c7d8b76a"><code>a3172b6</code></a>
fix: avoid <code>no-control-regex</code> false positive for shadowed
RegExp (<a
href="https://redirect.github.com/eslint/eslint/issues/21050">#21050</a>)
(Pixel)</li>
<li><a
href="https://github.com/eslint/eslint/commit/d1f637eca27e523d613991c6bea5b8726b810e4c"><code>d1f637e</code></a>
fix: parenthesize sequence expression operands in no-implicit-coercion
(<a
href="https://redirect.github.com/eslint/eslint/issues/21045">#21045</a>)
(spokodev)</li>
<li><a
href="https://github.com/eslint/eslint/commit/8859bafb018e2b23b5110d52e491b69b94ad890a"><code>8859baf</code></a>
fix: avoid prefer-numeric-literals false positive for shadowed globals
(<a
href="https://redirect.github.com/eslint/eslint/issues/21047">#21047</a>)
(한국)</li>
<li><a
href="https://github.com/eslint/eslint/commit/a9e5961050676ef29dba9649dfcd7233d21760c7"><code>a9e5961</code></a>
fix: use-isnan false positive on shadowed NaN/Number (<a
href="https://redirect.github.com/eslint/eslint/issues/20958">#20958</a>)
(sethamus)</li>
<li><a
href="https://github.com/eslint/eslint/commit/8a240a76108f30f2476e61a925e4d32d378cce5e"><code>8a240a7</code></a>
fix: avoid false positives in <code>radix</code> rule for spread
arguments (<a
href="https://redirect.github.com/eslint/eslint/issues/21044">#21044</a>)
(Pixel)</li>
</ul>
<h2>Documentation</h2>
<ul>
<li><a
href="https://github.com/eslint/eslint/commit/c30d80801ca561bdf65c6c3eba4ee57dced278cf"><code>c30d808</code></a>
docs: Update README (GitHub Actions Bot)</li>
<li><a
href="https://github.com/eslint/eslint/commit/5139800b23e77fdd1a76664e1b36f478942eae55"><code>5139800</code></a>
docs: document ESLint migration codemods in v9 and v10 guides (<a
href="https://redirect.github.com/eslint/eslint/issues/20980">#20980</a>)
(Alex Bit)</li>
<li><a
href="https://github.com/eslint/eslint/commit/04174cbfaac1f9555400b5332d69056e6aab9cc6"><code>04174cb</code></a>
docs: Update README (GitHub Actions Bot)</li>
<li><a
href="https://github.com/eslint/eslint/commit/026e1304080512bcddfd2af3557fff86474ff949"><code>026e130</code></a>
docs: update semver policy for bug fixes (<a
href="https://redirect.github.com/eslint/eslint/issues/21048">#21048</a>)
(Milos Djermanovic)</li>
<li><a
href="https://github.com/eslint/eslint/commit/9d42fefb0e05ecd0b256c2ebed479fc868862f0c"><code>9d42fef</code></a>
docs: Update README (GitHub Actions Bot)</li>
<li><a
href="https://github.com/eslint/eslint/commit/b23015955c8d6e6516076190730f538c86927f26"><code>b230159</code></a>
docs: Update README (GitHub Actions Bot)</li>
<li><a
href="https://github.com/eslint/eslint/commit/0129972ba122e95bece6040fda44d20f6799246a"><code>0129972</code></a>
docs: correct <code>**/.js</code> glob to <code>**/*.js</code> in config
files guide (<a
href="https://redirect.github.com/eslint/eslint/issues/21036">#21036</a>)
(EduardF1)</li>
</ul>
<h2>Chores</h2>
<ul>
<li><a
href="https://github.com/eslint/eslint/commit/948937986f2aa3cccb27a4c80694a85e5b0a5f64"><code>9489379</code></a>
chore: update dependency <code>@​eslint/eslintrc</code> to ^3.3.6 (<a
href="https://redirect.github.com/eslint/eslint/issues/21076">#21076</a>)
(renovate[bot])</li>
<li><a
href="https://github.com/eslint/eslint/commit/81a4774a928211bd0c01a06a1517736ece594522"><code>81a4774</code></a>
chore: updates for v9.39.5 release (Jenkins)</li>
<li><a
href="https://github.com/eslint/eslint/commit/983541491393323d17717683f6a2e6dbef4bc3f4"><code>9835414</code></a>
chore: enable <code>$ExpectType</code> annotations in all TypeScript
files (<a
href="https://redirect.github.com/eslint/eslint/issues/21071">#21071</a>)
(Francesco Trotta)</li>
<li><a
href="https://github.com/eslint/eslint/commit/72adf6bd214c142b38aabb4b8f6f908079c5301a"><code>72adf6b</code></a>
chore: restrict <code>markdownlint-cli2</code> updates in renovate (<a
href="https://redirect.github.com/eslint/eslint/issues/21067">#21067</a>)
(lumir)</li>
<li><a
href="https://github.com/eslint/eslint/commit/833ec10fd702644e94334edd3cd2aa313174a958"><code>833ec10</code></a>
chore: update dependency prettier to v3.9.4 (<a
href="https://redirect.github.com/eslint/eslint/issues/21061">#21061</a>)
(renovate[bot])</li>
<li><a
href="https://github.com/eslint/eslint/commit/7ea106ddcb6af7db8f36d62a28dbaba94d33598e"><code>7ea106d</code></a>
chore: update ecosystem plugins (<a
href="https://redirect.github.com/eslint/eslint/issues/21059">#21059</a>)
(ESLint Bot)</li>
<li><a
href="https://github.com/eslint/eslint/commit/8fb550e7c257fbdc4108fc8e63db43c1d914d472"><code>8fb550e</code></a>
chore: add prettier update commit to <code>.git-blame-ignore-revs</code>
(<a
href="https://redirect.github.com/eslint/eslint/issues/21056">#21056</a>)
(lumir)</li>
<li><a
href="https://github.com/eslint/eslint/commit/e4e11668ead6b950328c71e894563a13ef72bf84"><code>e4e1166</code></a>
chore: update dependency prettier to v3.9.1 (<a
href="https://redirect.github.com/eslint/eslint/issues/21055">#21055</a>)
(renovate[bot])</li>
<li><a
href="https://github.com/eslint/eslint/commit/0493f53f3fcec4ed69a1808dffa153dcff1380d3"><code>0493f53</code></a>
chore: update prettier to v3.9.0 (<a
href="https://redirect.github.com/eslint/eslint/issues/21054">#21054</a>)
(Pixel)</li>
<li><a
href="https://github.com/eslint/eslint/commit/1056a996c657b377dc16a58c28890d2940394408"><code>1056a99</code></a>
chore: update dependency prettier to v3.8.5 (<a
href="https://redirect.github.com/eslint/eslint/issues/21049">#21049</a>)
(renovate[bot])</li>
<li><a
href="https://github.com/eslint/eslint/commit/4d4155df4a21d711e8dd21a467de085e770bad35"><code>4d4155d</code></a>
ci: run ecosystem tests on pull requests (<a
href="https://redirect.github.com/eslint/eslint/issues/21027">#21027</a>)
(sethamus)</li>
<li><a
href="https://github.com/eslint/eslint/commit/993539fd45d3d01aad3fbc13963e2245fdf7ee0d"><code>993539f</code></a>
chore: update dependency <code>@​eslint/json</code> to ^2.0.1 (<a
href="https://redirect.github.com/eslint/eslint/issues/21042">#21042</a>)
(renovate[bot])</li>
<li><a
href="https://github.com/eslint/eslint/commit/53f8b69c15af7398c989071ee4788b88edd48bdd"><code>53f8b69</code></a>
test: add error locations to <code>no-constant-binary-expression</code>
(<a
href="https://redirect.github.com/eslint/eslint/issues/21039">#21039</a>)
(lumir)</li>
<li><a
href="https://github.com/eslint/eslint/commit/5ab71d52f9d860df04e626fcd819a36257f21f9e"><code>5ab71d5</code></a>
refactor: clean up radix rule internals (<a
href="https://redirect.github.com/eslint/eslint/issues/21015">#21015</a>)
(Pixel)</li>
<li><a
href="https://github.com/eslint/eslint/commit/a80a9a461478838930c5545f840473840b26b0e6"><code>a80a9a4</code></a>
chore: update ecosystem plugins (<a
href="https://redirect.github.com/eslint/eslint/issues/21035">#21035</a>)
(ESLint Bot)</li>
<li><a
href="https://github.com/eslint/eslint/commit/7c9a02933cf1c231237babb8a7a32150ab72e263"><code>7c9a029</code></a>
ci: add Node.js 26 to CI (<a
href="https://redirect.github.com/eslint/eslint/issues/20847">#20847</a>)
(lumir)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/eslint/eslint/commit/fabd99bb74eedcb950df51ec3280414ff1d68d38"><code>fabd99b</code></a>
10.7.0</li>
<li><a
href="https://github.com/eslint/eslint/commit/37c5e75949ff2ae1f0085f547e35ce2bdf9d524d"><code>37c5e75</code></a>
Build: changelog update for 10.7.0</li>
<li><a
href="https://github.com/eslint/eslint/commit/948937986f2aa3cccb27a4c80694a85e5b0a5f64"><code>9489379</code></a>
chore: update dependency <code>@​eslint/eslintrc</code> to ^3.3.6 (<a
href="https://redirect.github.com/eslint/eslint/issues/21076">#21076</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/81a4774a928211bd0c01a06a1517736ece594522"><code>81a4774</code></a>
chore: updates for v9.39.5 release</li>
<li><a
href="https://github.com/eslint/eslint/commit/3e7bf15e69e6d3a2c8832356bcc2e9903cc4eede"><code>3e7bf15</code></a>
fix: apply <code>ignoreClassesWithImplements</code> to class expressions
(<a
href="https://redirect.github.com/eslint/eslint/issues/21069">#21069</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/983541491393323d17717683f6a2e6dbef4bc3f4"><code>9835414</code></a>
chore: enable <code>$ExpectType</code> annotations in all TypeScript
files (<a
href="https://redirect.github.com/eslint/eslint/issues/21071">#21071</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/cf2a9bf2d982642f760370c15f1196f4658f4e27"><code>cf2a9bf</code></a>
feat: add errorClassNames option to preserve-caught-error rule (<a
href="https://redirect.github.com/eslint/eslint/issues/21032">#21032</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/c30d80801ca561bdf65c6c3eba4ee57dced278cf"><code>c30d808</code></a>
docs: Update README</li>
<li><a
href="https://github.com/eslint/eslint/commit/f8b873aae53610b80b5c1005606716e05ed3b91f"><code>f8b873a</code></a>
feat: max-nested-callbacks option for constructor callbacks (<a
href="https://redirect.github.com/eslint/eslint/issues/21063">#21063</a>)</li>
<li><a
href="https://github.com/eslint/eslint/commit/72adf6bd214c142b38aabb4b8f6f908079c5301a"><code>72adf6b</code></a>
chore: restrict <code>markdownlint-cli2</code> updates in renovate (<a
href="https://redirect.github.com/eslint/eslint/issues/21067">#21067</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/eslint/eslint/compare/v10.6.0...v10.7.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `typescript` from 6.0.3 to 7.0.2
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/microsoft/TypeScript/commits">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~microsoft1es">microsoft1es</a>, a new
releaser for typescript since your current version.</p>
</details>
<br />

Updates `typescript-eslint` from 8.63.0 to 8.64.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/releases">typescript-eslint's
releases</a>.</em></p>
<blockquote>
<h2>v8.64.0</h2>
<h2>8.64.0 (2026-07-13)</h2>
<h3>🚀 Features</h3>
<ul>
<li>support parsing <code>import defer</code> (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12513">#12513</a>)</li>
<li><strong>eslint-plugin:</strong> [no-loop-func] support
<code>using</code> / <code>await using</code> declarations and deprecate
the rule (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12500">#12500</a>)</li>
<li><strong>typescript-estree:</strong> throw for invalid definite
assignment in class properties (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12543">#12543</a>)</li>
</ul>
<h3>🩹 Fixes</h3>
<ul>
<li><strong>eslint-plugin:</strong> [require-array-sort-compare] handle
constrained arrays (<a
href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12512">#12512</a>)</li>
</ul>
<h3>❤️ Thank You</h3>
<ul>
<li>Evyatar Daud <a
href="https://github.com/StyleShit"><code>@​StyleShit</code></a></li>
<li>송재욱</li>
</ul>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.64.0">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md">typescript-eslint's
changelog</a>.</em></p>
<blockquote>
<h2>8.64.0 (2026-07-13)</h2>
<p>This was a version bump only for typescript-eslint to align it with
other projects, there were no code changes.</p>
<p>See <a
href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.64.0">GitHub
Releases</a> for more information.</p>
<p>You can read about our <a
href="https://typescript-eslint.io/users/versioning">versioning
strategy</a> and <a
href="https://typescript-eslint.io/users/releases">releases</a> on our
website.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/typescript-eslint/typescript-eslint/commit/414d9abbf66f77796ab12ec7e75b07722e592832"><code>414d9ab</code></a>
chore(release): publish 8.64.0</li>
<li>See full diff in <a
href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.64.0/packages/typescript-eslint">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Updated [Microsoft.NET.Test.Sdk](https://github.com/microsoft/vstest)
from 18.7.0 to 18.8.0.

<details>
<summary>Release notes</summary>

_Sourced from [Microsoft.NET.Test.Sdk's
releases](https://github.com/microsoft/vstest/releases)._

## 18.8.0

## What's Changed
* Migrate from Newtonsoft.Json to System.Text.Json / Jsonite (merge to
main) by @​nohwnd in microsoft/vstest#15687
- For more detail refer to
https://devblogs.microsoft.com/dotnet/vs-test-is-removing-its-newtonsoft-json-dependency/
* Create source-only filter package by @​Youssef1313 in
microsoft/vstest#15638
   - Package release is pending.
* Add ARM64 msdia140.dll support to test platform packages by @​nohwnd
in microsoft/vstest#15692
* Fix mutex cleanup crash on macOS/Linux by @​nohwnd in
microsoft/vstest#15684
* Restrict artifact temp directory permissions on Unix by @​nohwnd in
microsoft/vstest#15729
* Add support for filtering uncategorized tests with TestCategory=None
by @​Evangelink in microsoft/vstest#15727
* Fix SCI binding failure in DTA hosts (main) by @​nohwnd in
microsoft/vstest#15724
* Fix HTML logger parallel file collision by @​nohwnd in
microsoft/vstest#15435
* Improve error message when testhost cannot be found by @​nohwnd in
microsoft/vstest#16053
* Fix HTML logger exception on invalid XML chars in test display names
by @​nohwnd in microsoft/vstest#16051

**Full Changelog**:
microsoft/vstest@v18.7.0...v18.8.0

Commits viewable in [compare
view](microsoft/vstest@v18.7.0...v18.8.0).
</details>

Updated [Serilog](https://github.com/serilog/serilog) from 4.3.1 to
4.4.0.

<details>
<summary>Release notes</summary>

_Sourced from [Serilog's
releases](https://github.com/serilog/serilog/releases)._

## 4.4.0

## What's Changed
* Emit SelfLog warning when extra arguments are provided by @​matantsach
in serilog/serilog#2222
* dont WriteQuotedJsonString for null by @​SimonCropp in
serilog/serilog#2216
* Pin System.Security.Cryptography.Xml to 8.0.3 in tests by @​ArieGato
in serilog/serilog#2232
* Route optional interfaces through OptionalInterfaceForwardingSink for
restricted sinks by @​ArieGato in
serilog/serilog#2234
* `SelfMetrics` by @​nblumhardt in
serilog/serilog#2237

## New Contributors
* @​matantsach made their first contribution in
serilog/serilog#2222
* @​ArieGato made their first contribution in
serilog/serilog#2232

**Full Changelog**:
serilog/serilog@v4.3.1...v4.4.0

Commits viewable in [compare
view](serilog/serilog@v4.3.1...v4.4.0).
</details>

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
updated-dependencies:
- dependency-name: System.Security.Cryptography.Xml
  dependency-version: 10.0.10
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) from 5.10.0 to 5.10.1.
- [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases)
- [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md)
- [Commits](NaturalIntelligence/fast-xml-parser@v5.10.0...v5.10.1)

---
updated-dependencies:
- dependency-name: fast-xml-parser
  dependency-version: 5.10.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [linkify-it](https://github.com/markdown-it/linkify-it) from 5.0.1 to 5.0.2.
- [Changelog](https://github.com/markdown-it/linkify-it/blob/master/CHANGELOG.md)
- [Commits](markdown-it/linkify-it@5.0.1...5.0.2)

---
updated-dependencies:
- dependency-name: linkify-it
  dependency-version: 5.0.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [fast-uri](https://github.com/fastify/fast-uri) from 3.1.2 to 3.1.4.
- [Release notes](https://github.com/fastify/fast-uri/releases)
- [Commits](fastify/fast-uri@v3.1.2...v3.1.4)

---
updated-dependencies:
- dependency-name: fast-uri
  dependency-version: 3.1.4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [liquidjs](https://github.com/harttle/liquidjs) from 10.27.0 to 10.27.2.
- [Release notes](https://github.com/harttle/liquidjs/releases)
- [Changelog](https://github.com/harttle/liquidjs/blob/master/CHANGELOG.md)
- [Commits](harttle/liquidjs@v10.27.0...v10.27.2)

---
updated-dependencies:
- dependency-name: liquidjs
  dependency-version: 10.27.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [quinn-proto](https://github.com/quinn-rs/quinn) from 0.11.14 to 0.11.16.
- [Release notes](https://github.com/quinn-rs/quinn/releases)
- [Commits](quinn-rs/quinn@quinn-proto-0.11.14...quinn-proto-0.11.16)

---
updated-dependencies:
- dependency-name: quinn-proto
  dependency-version: 0.11.16
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
MelbourneDeveloper and others added 12 commits July 29, 2026 07:12
…sp.Sidecar.FSharp/System.Security.Cryptography.Xml-10.0.10' into fixes
The lockfile on `fixes` had drifted out of sync with package.json (lock
carried typescript 7.0.2 / vscode-languageclient 10.1.0 while package.json
declares ^6.0.3 / ^9.0.1), so `npm ci` failed outright.

Rebuilt from main's known-good lock with the three dependabot bump patches
applied, preserving their exact pins and integrity hashes:
  - fast-xml-parser 5.10.0 -> 5.10.1
  - fast-uri        3.1.2  -> 3.1.4  (GHSA-v2hh-gcrm-f6hx)
  - linkify-it      5.0.1  -> 5.0.2  (mailto: DoS)

`npm ci` now resolves cleanly (557 packages, matching main).
## TLDR
Adds robust support for opening standalone `.cs` files (Single-File
Mode) without requiring a containing `.csproj` or `.sln` file.

## Details
- **Rust Host (`src/main.rs`)**: Updated the `init_workspace_for_file`
lazy initialization logic to conditionally start only the relevant
sidecar based on the opened file extension (e.g., launching only the C#
sidecar for `.cs` files). Previously, it aggressively started both,
causing the F# sidecar to crash when no `.fsproj` was found.
- **C# Sidecar (`WorkspaceManager.cs`)**: Refactored `OpenCoreAsync` to
gracefully fall through to a new `OpenSingleFileModeAsync` path when
`SolutionLoader` fails to discover a project file.
- **Single-File Logic (`WorkspaceManager.SingleFile.cs`)**: Implemented
a new partial class that spins up an incredibly fast `AdhocWorkspace` to
house the standalone file.
- **BCL Metadata Fix (`SharpLsp.Sidecar.CSharp.csproj`)**: Added
`Basic.Reference.Assemblies.Net100` as a dependency. Because the sidecar
is shipped as a self-contained single-file executable, the standard
`System.Runtime` metadata references were unavailable on disk for Roslyn
to read via `CreateFromFile`. This package directly provides the .NET 10
metadata reference assemblies in-memory, fixing `CS0518` (System.Object
not defined) and restoring full IntelliSense functionality.

## How Do The Automated Tests Prove It Works?
- Added `WorkspaceManagerSingleFileTests.cs`, featuring the
`OpenAsync_without_project_loads_single_file_mode` test case.
- The test proves functionality by programmatically passing a directory
that explicitly lacks a `.csproj` file into the `WorkspaceManager`.
- The test verifies that `manager.IsLoaded` correctly evaluates to
`true` (indicating successful fallback to Single-File Mode).
- The test then invokes `manager.GetDiagnosticsAsync(sourcePath)` and
asserts that it completes cleanly without returning any errors (proving
that the AdhocWorkspace was successfully constructed and the BCL
metadata references were properly loaded).

---------

Co-authored-by: m.ashar@ssidecisions.com <m.ashar@ssidecisions.com>
…hecks

Security updates ALWAYS target the default branch — GitHub ignores
target-branch for them — so they could never route to dependabot-upgrades
and instead piled up on main (6 open, oldest 8 days).

main now carries required status checks, so `gh pr merge --auto` genuinely
queues behind CI there. Adds a second job for base=main that enables
auto-merge and lets GitHub release it only once those checks pass.

Deliberately `--auto` with NO immediate-merge fallback, unlike the staging
job: that fallback is only correct because the staging branch has no required
checks; on main it would squash the bump in without waiting for CI.

Majors are excluded via dependabot/fetch-metadata — a breaking bump reaching
main unattended needs a human even when CI is green.

Both jobs are now guarded on base.ref so they don't cross-fire.
Covers the bound and degradation paths introduced with .NET file-based app
and .csx script support, and deletes dead code rather than shipping it
uncovered.

sidecar (C#)
- Delete FileLevelDirectives.FindMisplaced/FirstCodeTokenStart. Nothing in
  the production path called them: a misplaced-directive detector with no
  consumer is dead code, and the diagnostics wiring is not written yet.
  Tracked as a single plan item so detector and consumer land together.

tests
- 7 new coarse e2e tests over WorkspaceManager single-file loading:
  the full #: directive vocabulary (sdk/package/project/property with both
  the name-only and name@version / name=value forms), graceful degradation
  on unknown directives and unresolvable includes, glob and recursive-glob
  #:include expansion, the 64-file closure bound, the 8-level #:include
  nesting bound, and the unsupported-extension load error.

sharplsp-sidecar-csharp coverage 93.56% -> 95.08%, restoring the stored
95.0% ratchet rather than scraping past the 1pp tolerance. The threshold
was not touched.

docs
- SCRIPTING-FILEBASED-PLAN.md: reword the misplaced-directive TODO now that
  the orphaned detector is gone.

Also carries in-progress netcoredbg staging (Makefile, scripts/, THIRD-PARTY-NOTICES),
VS Code debug wiring, the profiler flame-graph e2e test, and a Windows EOL
normalisation helper for the scaffolding suite [DIST-CI-WIN-VSIX].

File-based app support originally proposed by @ashar-builds in #188.
…le binaries

Fixes the "required binaries are missing or version-mismatched" activation
failure users hit in the wild, which reported an unrelated directory
(a plugin folder that happened to be on PATH) as the missing location.

Two independent defects, both of which shipped silently.

1. Sidecar payload lost Microsoft.CodeAnalysis.CSharp.dll (regression)

   Directory.Build.props declares Microsoft.CodeAnalysis.CSharp with
   PrivateAssets="all" for analyzer support. NuGet treats such packages as
   development dependencies and `dotnet publish` EXCLUDES them, so the C#
   sidecar shipped without its own compiler layer and resolved Roslyn from
   the machine SDK instead — crashing workspace/open with "Could not load
   type ...WithElementSyntax" on any SDK whose Roslyn is older than the
   bundled Features/Workspaces assemblies.

   This was diagnosed and fixed before; the fix (a `PackageReference Update`
   restoring full asset flow) was deleted on this branch. Restored, with the
   rationale kept next to it so it does not get dropped a third time.

2. Staging could ship an apphost with no managed assembly

   sharplsp-sidecar-<lang>(.exe) is a .NET apphost: a launcher whose only job
   is to load SharpLsp.Sidecar.<lang>.dll beside it. Every copy/rename in
   _stage-vsix-binary-only is best-effort (`2>/dev/null || true`), and a
   publish raced by a concurrent rebuild yields an incomplete tree. The
   result packages cleanly and passes CI, then dies on the user's machine:
   shipwright runs `--version`, rejects the unusable `bundled` source, falls
   through to the `path` source, and blames whatever PATH entry it tried last.

   _stage-vsix-binary-only now runs each staged sidecar and fails the build if
   it cannot start, so this can never reach a VSIX again.

Also scopes BannedSymbols.txt to the sidecars via sidecars/Directory.Build.props.
It was wired into the ROOT props, so RS0030 also bound every test fixture and
broke the Rust shards: tests/fixtures/ProfileTarget blocks with Thread.Sleep on
purpose so the sampling profiler has real blocked frames to capture, and
rewriting it to Task.Delay would change the flame graph the profiler e2e test
asserts on. The ban's own header says it governs the sidecars.

tests
- "bundled sidecars actually execute" spawns each staged sidecar and asserts
  it starts and reports its version — the exact check shipwright performs.
  The existing "sidecars are present" test only called fs.existsSync on the
  apphost, so it passed against a payload that could not run at all; that is
  why defect 2 was invisible. Verified failing first:
    AssertionError: sharplsp-sidecar-csharp is staged but does not run
    (exit 2147516570): The application to execute does not exist:
    'bin\all\SharpLsp.Sidecar.CSharp.dll'
  and passing after the fix, alongside the pre-existing Roslyn payload test.
Three unrelated CI failures, each with a distinct root cause.

rust e2e — call hierarchy without a sidecar
  [SCRIPT-ROUTE-LAZY] changed what "no sidecar" means. Initializing without a
  workspace root used to leave the sidecar manager as None, so the host
  short-circuited every semantic request to `null`. A single file with no
  project now starts its sidecar lazily on first didOpen, so the request
  reaches the sidecar and returns `[]`.

  LSP 3.17 types prepareCallHierarchy / incomingCalls / outgoingCalls as
  `T[] | null`; both encode "no results" and no client can distinguish them.
  These six tests now expect NullOrEmptyArray — the variant the other
  no-sidecar feature tests in this suite already use — so they still pin what
  matters: no error, no crash, no fabricated results. Rationale recorded in
  the file so the change is not mistaken for a weakened assertion later.

real-repo fixtures — restore is not an audit
  Serilog is pinned to v4.4.0, but NuGet's advisory database moves
  independently. A newly published CVE against a transitive package raised
  NU1903, and the upstream repo's own TreatWarningsAsErrors turned restore
  into a hard failure — CI broke with no change on our side, on a repo we do
  not control. Restore now passes -p:NuGetAudit=false. The fixture exists to
  drive the LSP against real-world code, not to audit that code's
  dependencies; this is the same normalisation as dropping its global.json.

  The failure was also undebuggable: stdio:'pipe' captured NuGet's
  diagnostics and the rethrow discarded them, leaving only "Command failed:
  dotnet restore". They are now attached to the thrown error.

windows teardown — EPERM on temp cleanup
  `fs.rmSync(dir, { recursive: true, force: true })` was duplicated at 19 call
  sites. `force` only swallows ENOENT; it does NOT retry, so a directory whose
  files are still open in a spawned child (dotnet, VBCSCompiler, a sidecar)
  fails with EPERM and takes down an otherwise-passing suite. Node retries
  exactly those codes given maxRetries/retryDelay.

  Replaced all 19 with a single removeDirRecursive() helper carrying the retry
  policy, rather than copying the options 19 times — a per-site copy is how
  such a policy drifts.
[SCRIPT-ROUTE-LAZY] made the sidecar managers unconditional so a single file with
no project can start one lazily on first didOpen. That silently redefined what the
e2e suite's "no sidecar" meant: initializing without a workspace root still produced
a server WITH sidecars, so 9 tests that pin the no-sidecar contract began seeing
sidecar answers.

The previous commit papered over part of this by relaxing call-hierarchy
expectations from Null to NullOrEmptyArray. That was the wrong call and is reverted
here. It would also not have covered
test_semantic_tokens_full_repeated_without_sidecar, which sends the SAME request
twice and asserts the answers match — it was failing because the response now
depended on whether the lazy workspace/open had finished in between. Relaxing that
assertion would have deleted a determinism guarantee to make a race look green.

host
- Config discovery falls back to the current directory when no workspace root is
  supplied. Opening one file inside a configured tree must not ignore that tree's
  sharplsp.toml just because the editor sent no workspace folder. This is correct
  on its own merits and is also the only switch that can truly remove the sidecars.

tests
- LspClient::start_without_sidecars() runs the server in a temp directory whose
  sharplsp.toml disables both sidecars, and owns that directory so it outlives the
  process. open_no_sidecar / assert_no_sidecar_request and the nine inline
  no-sidecar tests use it.
- Every original assertion is restored, including the strict Null expectations and
  the repeated-request determinism check. No expectation was weakened.

320/320 e2e pass. (test_profiler_start_trace_latency asserts <1s and can lose that
budget on a loaded machine; it passes in isolation at 0.33s.)
Comment thread scripts/vsix-test-chunks.mjs Fixed
CodeQL flagged js/incomplete-sanitization (HIGH) at
scripts/vsix-test-chunks.mjs: `char.replace(/[.+^${}()|[\]\]/, "\$&")` is a
non-global regex used for escaping, so it replaces only the first occurrence.

The call is in fact safe — `for…of` yields exactly one code point, so there is
never a second occurrence to miss — but CodeQL cannot see that, and the finding
is not cosmetic: release.yml's CodeQL gate fails the release on any High or
Critical, so it blocks publishing outright.

Replaced the regex with a direct membership test against an explicit set of
metacharacters. Same output, no escaping-by-regex for the analysis to flag, and
one less regex — which CLAUDE.md prefers anyway.

_check-vsix-chunks still reports the identical partition:
36 VS Code suites: 7 Windows chunks, 3 excluded.
The previous commit inserted REGEXP_METACHARACTERS between the function's
docstring and the function, leaving the doc attached to the constant instead.
Moved it back and trimmed the constant's own doc to what it needs to say.

Note the previous commit also reformatted the whole file: `scripts/` is not
covered by the CI prettier gate (which is scoped to editors/vscode/src/**/*.ts),
so this file had drifted from prettier style. Running --write over it produced a
whitespace-only diff around the three-line logic change. Behaviour is unchanged —
`matrix`, `files <chunk>` and `check` all produce identical output.
…ndition

Last of the [SCRIPT-ROUTE-LAZY] fallout, and the one I missed because I verified
only the lsp_e2e target — nuget_e2e is a separate binary with its own harness.

nuget_unused_fsproj_routes_to_fsharp_sidecar asserted an error for an unloaded
fsproj. That error used to come from there being no sidecar at all; now the F#
sidecar starts lazily and answers `unused: []`, so the assertion failed.

Worth noting what this exposes: the test never actually proved F# routing. With no
sidecar, BOTH branches of pick_package_sidecar produced the same error, so the
assertion held regardless of which one was chosen. Its sibling .csproj test still
passes because the C# path errors where the F# path returns empty — an asymmetry
between the two sidecars that was invisible while neither was running.

Restored the intended precondition the same way as the rest: a sharplsp.toml in the
test's existing temp dir disables both sidecars, and LspClient::start_in() runs the
server there. The assertion is unchanged.

All Rust targets pass: lsp_e2e 320, nuget_e2e 33, build_deps_file_e2e 1.
(The two profiler timing tests fail only under parallel load on a busy machine;
they pass serially, which is how CI runs them — RUST_TEST_THREADS=1.)
@MelbourneDeveloper
MelbourneDeveloper merged commit 1cad207 into main Jul 28, 2026
25 of 26 checks passed
@MelbourneDeveloper
MelbourneDeveloper deleted the fixes branch July 28, 2026 23:35
MelbourneDeveloper added a commit that referenced this pull request Aug 3, 2026
…ss dirs and multi-solution roots (#197)

## TLDR

Restores C# semantic features (hover, completions, diagnostics) in
workspace roots the sidecar previously refused to load — projectless
directories and roots holding more than one solution — while keeping an
ambiguous root a loud error rather than a silently mis-analyzed one, and
upgrades the VS Code extension to the current SDK.

## Details

Two independent defects left `WorkspaceManager._solution` null, after
which every semantic request returns null for the whole session. Both
surfaced as the same user-visible symptom — no hover — and both are
fixed here.

**1. A configured `csharp.solution_path` was parsed and then ignored
(`src/config.rs`, `src/main.rs`).**

`CSharpConfig::solution_path` was deserialized from `sharplsp.toml` but
never read by any caller, so the host always sent the raw workspace root
to the sidecar's `workspace/open`. When that root holds several
`.sln`/`.slnx` files, `SolutionLoader.FindRecursiveMatch` deliberately
returns null rather than guessing which one to load; `OpenCoreAsync`
then fell through to `OpenProjectlessAsync(<directory>)`, whose
`File.Exists` check fails on a directory, and the open aborted with the
misleading `No .sln, .slnx, or .csproj found at or under '<root>'`. The
SharpLsp repo itself has this shape.

New `CSharpConfig::open_target(workspace_root)` resolves the path the
sidecar should actually open: the configured solution when it names an
existing file (absolute, or relative to the root), otherwise the
workspace root so plain auto-discovery is unchanged. A
configured-but-missing path logs a `warn!` and falls back rather than
wedging the sidecar on a path that does not exist. `src/main.rs` passes
the result to the C# `start_sidecar`; the F# sidecar still receives the
root. New spec section `[WORKSPACE-SOLUTION-PATH]` documents the
behaviour, and `sharplsp.example.toml` plus the English/Japanese/Chinese
configuration docs now state that the setting is required for
multi-solution roots.

**2. A projectless directory aborted initialization permanently
(`WorkspaceManager.cs`, `WorkspaceManager.SingleFile.cs`).**

Opening a folder with no `.sln`/`.csproj` at all (a Desktop, a scratch
directory) hit the same `OpenProjectlessAsync(<directory>)` failure, so
the sidecar never started its health monitor. `OpenCoreAsync` now
detects that the unresolved path is a directory, sets
`_isProjectlessDirectory`, and returns success, deferring workspace
creation. The first `UpdateDocumentTextAsync` for a file then lazily
calls `OpenProjectlessAsync` with the real file path under a dedicated
`_projectlessLoadLock`. `AddAdhocProject` switched to `_adhocWorkspace
??= new AdhocWorkspace()` so a second loose file adds a project instead
of discarding the first one's.

**2b. That deferral must not swallow an ambiguous root
(`SolutionLoader.cs`, `WorkspaceManager.cs`).**

`SolutionLoader` returns "no target" for two different reasons — the
root holds no solution at all, *or* it holds several and discovery
refused to guess. Deferring on both meant a real multi-solution
repository was analyzed as loose files: no project reference resolves,
so every cross-project type becomes a phantom "not found" diagnostic
across the whole tree. `[SCRIPT-DEGRADE]` names that case explicitly
("**ambiguity, not absence** … must surface as an error asking the user
to choose"), so the two must be told apart.

New `SolutionLoader.FindAmbiguousSolutions` reports the competing
solutions when — and only when — recursive discovery found more than
one. `OpenCoreAsync` consults it before deferring: an ambiguous root
fails with a message naming every candidate and the
`csharp.solution_path` setting that resolves it, while a genuinely empty
root still takes the deferred path. This also closes the
`[SCRIPT-DEGRADE]` plan item "Distinguish 'absent' from 'ambiguous' in
the error message". The spec's `[SCRIPT-DEGRADE]` section and three plan
checkboxes are updated to describe the deferral, which previously
contradicted the shipped code.

**3. `MetadataDecompiler` file names were platform-dependent
(`MetadataDecompiler.cs`).**

`SanitizeFileName` had delegated `:` to
`Path.GetInvalidFileNameChars()`, which on Unix returns only `{ '\0',
'/' }` — so a `global::`-style display name kept its colons on Linux
while losing them on Windows. The unsafe-character set is now an
explicit `<>:,` + space list unioned with the platform's invalid
characters, applied in a single pass, so a decompiled type yields a
byte-identical file name on every OS.

**4. VS Code SDK upgrade (`editors/vscode/`).**

`engines.vscode` and `@types/vscode` `^1.99.0` → `^1.125.0`, and
`@vscode/test-electron` `^3.0.0` → `^3.1.0`. `brace-expansion` overrides
move to the patched `2.1.3`/`5.0.8` maintenance releases — both keys
already existed in `main` at `2.0.3`/`5.0.7`, so this is a patch bump of
an existing pin, not a new dependency.

`createAnsiStrippingChannel` now returns a `LogOutputChannel` rather
than a plain `OutputChannel`: it forwards
`logLevel`/`onDidChangeLogLevel` as live getters (a snapshot would
report a stale level forever) and strips ANSI from the five level-tagged
log methods, which previously bypassed the filter entirely. It is split
into `writeMethods`/`logMethods`/`lifecycleMethods` helpers to stay
under the 20-line function limit, and `error` forwards an `Error`
instance unchanged, sanitizing only string messages. `LogOutputChannel`
extends `OutputChannel`, so this is a strict widening.

**`vscode-languageclient` is deliberately left at `^9.0.1`.** Bumping it
to `^10.1.0` was attempted and reverted: it breaks
`sharplsp.restartServer`, and the client never returns to `Running`. A
controlled A/B on one machine at one commit, varying only the VS Code
dependency state, gave 60 passing / **2 failing** in ~2m on v10 versus
**62 passing / 0 failing** in ~20s on v9. That is tracked as #195 with
the reproduction and migration notes; the `LogOutputChannel` half of the
migration is kept here so the re-attempt starts smaller. The requested
SDK upgrade (the VS Code API surface) is fully delivered —
`vscode-languageclient` is a separate library, not the SDK.

## How Do The Automated Tests Prove It Works?

**`tests/e2e_modules/multi_solution.rs` —
`test_full_stack_hover_uses_configured_solution_path_in_multi_solution_root`**
is the coarse end-to-end proof for defect 1. Its fixture builds the
exact ambiguous shape: `app/App.sln` and `other/Other.sln` in sibling
subdirectories, each with a real restored `.csproj`, plus a
`sharplsp.toml` naming `app/App.sln`. It drives a real `sharplsp` host
and a real Roslyn sidecar over stdio, opens `app/App/Calculator.cs`, and
polls `textDocument/hover` on the `Calculator` class name, asserting the
returned contents mention `Calculator`. Against the pre-fix host this
cannot pass: the root is sent verbatim, discovery finds two solutions
and refuses to choose, and hover returns null until the 90-second poll
expires. It is the assertion on real hover content — not a status code —
that proves a solution actually loaded.

**Five `src/config.rs` tests pin the resolution rules** that the e2e
test exercises only one path through:
`test_relative_solution_path_is_opened_not_workspace_root` (with a decoy
second solution present, so it fails if the root is returned),
`test_absolute_solution_path_is_opened`, and three fallback cases —
empty, missing, and directory-valued `solution_path` — each asserting
the workspace root is returned so auto-discovery is provably preserved.
Written first, they failed with `left: <root>` / `right:
<root>/app/App.sln` before `open_target` existed.

**`WorkspaceManagerSingleFileTests`** covers defect 2.
`Directory_without_project_or_root_file_succeeds_for_lazy_loading`
asserts `workspace/open` on a projectless directory returns success
*and* that `IsLoaded` stays false, so nothing claims a workspace exists
before one does.
`Independent_scripts_in_projectless_directory_are_lazily_loaded_simultaneously`
then opens two loose files and asserts **both** report zero error
diagnostics — that is what proves the second file adds a project rather
than replacing the first, which the previous `_adhocWorkspace`
reassignment would have done.

**`Ambiguous_multi_solution_root_is_an_error_not_lazy_loading`** is the
guard for 2b, and it distinguishes the two "no target" causes at the
level that matters: it writes `app/App.sln` and `other/Other.sln` into
one root, opens the root, and asserts the result is an error whose
message contains both candidate names *and* the string `solution_path`.
Asserting the message content, not merely `IsError`, is what proves the
failure is actionable rather than the old misleading "no solution found"
text. Written first, it failed on `Assert.True(result.IsError)` — the
ambiguous root was loading lazily — and passes after the fix, with the
whole 41-test
`WorkspaceManagerSingleFileTests`/`SolutionLoaderTests`/`WorkspaceManagerDegenerateCoverageTests`
set green. Critically,
`Multiple_sln_in_subdirs_should_not_pick_arbitrary_one` is untouched and
still passes: the sidecar's refusal to guess is preserved, and the fix
is in surfacing the choice, not in weakening that refusal.


**`MetadataDecompilerTests.DecompileTypeToFile_sanitizes_colons_identically_on_every_platform`**
covers defect 3 by decompiling a real BCL type with the display name
`global::System.Int32` and asserting the resulting file name equals
exactly `global__System.Int32.cs`. Asserting the full name rather than
merely the absence of a colon is what makes it a cross-platform
contract: it fails on Ubuntu under the previous implementation while
passing on Windows, which is precisely the divergence that shipped
unnoticed.

**`fsi-build-output-e2e.test.ts` — `createAnsiStrippingChannel strips
ANSI from the level-tagged log methods`** covers the widened channel.
Its `RecordingChannel` implements the full `LogOutputChannel` surface
and captures what each of `trace`/`debug`/`info`/`warn`/`error`
forwards, asserting the escape codes are gone from the recorded strings
— so the added methods are proven to sanitize, not merely to exist and
satisfy the compiler. It also asserts an `Error` argument survives
intact and that `logLevel` delegates live rather than snapshotting.

That test earned its keep immediately: the first version of it silently
asserted nothing, because the ESC bytes were lost from the string
literals and `stripAnsi` correctly leaves a bare `[2m` alone. It failed
loudly against a correct implementation, which is how the missing bytes
were caught; the literals now embed real ESC control bytes, matching the
convention the neighbouring `stripAnsi` assertions already use.

### Gates run locally

Every command `ci-lint.yml`, `ci-rust.yml`, `ci-dotnet.yml`, and
`ci-vsix-windows.yml` run was executed on Windows against this branch:

| Gate | Result |
|---|---|
| `_lint-rust` / `_lint-zed` (clippy `-D warnings`, fmt) | pass |
| `csharpier check` / `_lint-dotnet` (`-warnaserror`) | pass, 0 warnings
|
| sidecar pack smoke (both sidecars) | pass |
| prettier / eslint / `tsc --noEmit` / chunk check | pass |
| Rust shards 1+2 | 651 tests, 651 passed |
| Rust coverage gate | 95.88% vs 94.0% effective |
| version contract (`--version`, `--version --json`) | pass |
| `_test-dotnet` | 898 tests (466 C#, 340 F#, 92 Common), all passed |
| VS Code chunks `lifecycle` / `lsp` / `profiler` / `explorer` | 62 / 63
/ 60 / 167 passing, 0 failing |

Two caveats, both pre-existing on `main` and neither touched by this
branch:

- **`VS Code (Windows) / explorer` is expected red in CI.** It also
failed on #189 and #194 and is tracked as #191 (workspaceSymbols serving
stale data after rename). It passes 167/167 locally, so the CI failure
is runner-specific. Note that #194 merged with this check already
failing, because `ci.yml` triggers only on PRs into `main` and #194
targeted a topic branch — the full pipeline never gated it.
- The Common package's local line coverage (92.18%) sits under its
94.02% effective threshold **on Windows only**, because
`IpcConnection/<ConnectUnixSocketAsync>` (70%), `IpcListener` (63.88%),
and `MessageRouter/<HandleAsync>` (54.5%) are Linux transport paths that
cannot execute there. `MetadataDecompiler`, the only Common file this
branch touches, is at **100%**, and the Ubuntu `.NET / Sidecars` job
clears the gate.

---------

Co-authored-by: Muhammad Ashar <ashar.builds@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants