Bump the nuget group with 4 updates

[dependabot]

Updated protobuf-net from 3.3.21 to 3.4.19.

Release notes

Sourced from protobuf-net's releases.

3.4.19

What's Changed

• PBN2001: don't report constants, static members or nested types on a service interface by @​mgravell in PBN2001: don't report constants, static members or nested types on a service interface protobuf-net/protobuf-net#1327
• The extension APIs read packed data (#​1328) by @​mgravell in The extension APIs read packed data (#1328) protobuf-net/protobuf-net#1329
• Expose the descriptor TypeModel by @​mgravell in Expose the descriptor TypeModel protobuf-net/protobuf-net#1330
• Bump Grpc.Net.Client from 2.80.0 to 2.83.0 by @​dependabot[bot] in Bump Grpc.Net.Client from 2.80.0 to 2.83.0 protobuf-net/protobuf-net#1325

Full Changelog: protobuf-net/protobuf-net@3.4.14...3.4.19

3.4.14

Features:

• Out-of-band sub-types for the AOT generator: [ProtoSubType] by @​mgravell in Out-of-band sub-types for the AOT generator: [ProtoSubType] protobuf-net/protobuf-net#1317

Maintenance

• Package validation: diff each package against 3.4.0 at pack time by @​mgravell in Package validation: diff each package against 3.4.0 at pack time protobuf-net/protobuf-net#1305
• Record the out-of-band sub-type design, and where its ticket went by @​mgravell in Record the out-of-band sub-type design, and where its ticket went protobuf-net/protobuf-net#1309
• Shipping hygiene: security policy, Dependabot, SHA-pinned actions by @​mgravell in Shipping hygiene: security policy, Dependabot, SHA-pinned actions protobuf-net/protobuf-net#1306
• Bump actions/setup-dotnet from 4.3.1 to 6.0.0 by @​dependabot[bot] in Bump actions/setup-dotnet from 4.3.1 to 6.0.0 protobuf-net/protobuf-net#1311
• Bump actions/cache from 4.3.0 to 6.1.0 by @​dependabot[bot] in Bump actions/cache from 4.3.0 to 6.1.0 protobuf-net/protobuf-net#1310
• Bump actions/checkout from 4.4.0 to 7.0.1 by @​dependabot[bot] in Bump actions/checkout from 4.4.0 to 7.0.1 protobuf-net/protobuf-net#1312
• Bump actions/upload-artifact from 4.6.2 to 7.0.1 by @​dependabot[bot] in Bump actions/upload-artifact from 4.6.2 to 7.0.1 protobuf-net/protobuf-net#1313
• Bump coverlet.collector from 10.0.0 to 10.0.1 by @​dependabot[bot] in Bump coverlet.collector from 10.0.0 to 10.0.1 protobuf-net/protobuf-net#1318
• Bump Google.Protobuf from 3.34.1 to 3.36.0 by @​dependabot[bot] in Bump Google.Protobuf from 3.34.1 to 3.36.0 protobuf-net/protobuf-net#1320
• Bump protobuf-net.Grpc to 1.3.14 by @​mgravell in Bump protobuf-net.Grpc to 1.3.14 protobuf-net/protobuf-net#1321
• Bump FSharp.Core from 10.1.203 to 10.1.400 by @​dependabot[bot] in Bump FSharp.Core from 10.1.203 to 10.1.400 protobuf-net/protobuf-net#1319
• Bump Microsoft.CodeAnalysis.Analyzers and 2 others by @​dependabot[bot] in Bump Microsoft.CodeAnalysis.Analyzers and 2 others protobuf-net/protobuf-net#1322

New Contributors

• @​dependabot[bot] made their first contribution in Bump actions/setup-dotnet from 4.3.1 to 6.0.0 protobuf-net/protobuf-net#1311

Full Changelog: protobuf-net/protobuf-net@3.4.0...3.4.14

3.4.0

What's Changed

The headline feature is experimental gRPC AOT support to accompany type-model AOT support.

(features)

• Build-time gRPC proxies and server bindings, hung off a declared partial (alternative to #​1255) by @​mgravell in Build-time gRPC proxies and server bindings, hung off a declared partial (alternative to #1255) protobuf-net/protobuf-net#1282
• PBN0022: don't nag about initializers that only restate the type's default by @​mgravell in PBN0022: don't nag about initializers that only restate the type's default protobuf-net/protobuf-net#1294
• PBN0024 / PBN0025: declared defaults that do not do what they look like (re-target to main) by @​mgravell in PBN0024 / PBN0025: declared defaults that do not do what they look like (re-target to main) protobuf-net/protobuf-net#1297
• PBN0026: a declared default that SkipConstructor puts out of reach by @​mgravell in PBN0026: a declared default that SkipConstructor puts out of reach protobuf-net/protobuf-net#1301

(background)

• Pin the docs site config, and give it a favicon by @​mgravell in Pin the docs site config, and give it a favicon protobuf-net/protobuf-net#1289
• Use the vector mark for the favicon by @​mgravell in Use the vector mark for the favicon protobuf-net/protobuf-net#1290
• Document editions, and benchmark the delimited encoding it finally spells by @​mgravell in Document editions, and benchmark the delimited encoding it finally spells protobuf-net/protobuf-net#1292
• Switching framing is only a wire break for other implementations by @​mgravell in Switching framing is only a wire break for other implementations protobuf-net/protobuf-net#1300
• Split editions and delimited into two pages, and measure the skip cost by @​mgravell in Split editions and delimited into two pages, and measure the skip cost protobuf-net/protobuf-net#1302
• NodaTime: LocalDate and LocalTime reach the compile-time model too by @​mgravell in NodaTime: LocalDate and LocalTime reach the compile-time model too protobuf-net/protobuf-net#1303
• Give each shipping package its own readme, and fix the package metadata by @​mgravell in Give each shipping package its own readme, and fix the package metadata protobuf-net/protobuf-net#1291
• NodaTime surrogates are structs, like the well-known types they sit beside by @​mgravell in NodaTime surrogates are structs, like the well-known types they sit beside protobuf-net/protobuf-net#1304

Full Changelog: protobuf-net/protobuf-net@3.3.21...3.4.0

Commits viewable in compare view.

Updated Roslynator.Analyzers from 4.16.1 to 5.0.0.

Release notes

Sourced from Roslynator.Analyzers's releases.

5.0.0

Added

• Add roslyn5.0 NuGet package flavor (analyzers/dotnet/roslyn5.0/cs) (PR)

Breaking

• Enable nullable annotations on Roslynator.Common and Roslynator.Workspaces.Common (#​1817)
  • Source-breaking for projects that compile against this surface with nullable reference types enabled.
• [Testing Framework] Lower Roslyn dependency of testing packages to 3.8.0 so that the Roslyn version is determined by the consumer's own Microsoft.CodeAnalysis.* reference instead of being forced to a fixed version (PR)
  • Roslynator.Testing.Common, Roslynator.Testing.CSharp, Roslynator.Testing.CSharp.Xunit and Roslynator.Testing.CSharp.MSTest now depend on Microsoft.CodeAnalysis.* >= 3.8.0 (previously >= 4.14.0).
  • Roslynator.Testing.Common no longer depends on Roslynator.Core.
  • Action required: a test project that previously relied on the testing framework to pull in Roslyn 4.14.0 should now add its own reference, e.g. <PackageReference Include="Microsoft.CodeAnalysis.CSharp.Workspaces" Version="4.14.0" />. The chosen version raises the maximum C# language version the parser can accept; test sources still parse at CSharpParseOptions.Default unless you set parse options / LanguageVersion (for example LanguageVersion.Latest).
  • Action required: a test project that used Roslynator.Core types via the old transitive dependency must now add an explicit Roslynator.Core package reference.

Changed

• Bump Roslyn to 5.0.0 (PR)
  • CLI targets Roslyn 5.0.0
  • Solution build and tests use Roslyn 5.0.0 by default (the testing packages floor at 3.8.0; see Breaking)
• Replace Visual Studio 2022 extension with Roslynator 2026 for Visual Studio 2026 ([18.0,19.0)) (PR)
  • Extension ships refactorings and compiler diagnostic code fixes; analyzers via NuGet
  • Roslynator 2022 remains available as the last 4.x VSIX
• Visual Studio Code extension ships refactorings and compiler diagnostic code fixes only (PR)
  • Analyzers require Roslynator NuGet packages
  • Requires OmniSharp with Roslyn 5.x (C# extension 1.39.15+; set dotnet.server.useOmnisharp to true)

Removed

• Remove leftover implementations of obsolete analyzers (XML descriptors remain). Enable the successor rules instead: RCS0014 → RCS0061, RCS0022 → RCS0021, RCS0038 → RCS0015, RCS0043 → RCS0020, RCS0047 → RCS0053, RCS1008/RCS1009/RCS1010/RCS1012/RCS1176/RCS1177 → RCS1264, RCS1035 → RCS1260, RCS1036 → RCS0063, RCS1038/RCS1040/RCS1041/RCS1066/RCS1072/RCS1091/RCS1106 → RCS1259, RCS1063/RCS1064/RCS1065 → RCS1252, RCS1100/RCS1101 → RCS1253, RCS1237 → RCS1254.
• Remove SyntaxInverter (Roslynator.CSharp.Workspaces). Use SyntaxLogicalInverter.
• Remove unused obsolete DiagnosticCategories constants and make the type internal.
• Remove unused ROS0001/ROS0002 diagnostic IDs.
• Remove obsolete constructors/properties from the testing package (DiagnosticTestData, CompilerDiagnosticFixTestData, RefactoringTestData).
• Remove legacy config keys roslynator.max_line_length, roslynator.prefix_field_identifier_with_underscore, and roslynator_suppress_unity_script_methods. Use roslynator_max_line_length, roslynator_prefix_field_identifier_with_underscore, and roslynator_unity_code_analysis.enabled.
• [CLI] Remove obsolete command generate-doc-root. Use generate-doc --root-file-path instead.
• Remove bundled analyzers from Visual Studio extension (PR)
  • Use Roslynator.Analyzers NuGet package for diagnostics
• Remove bundled analyzers from Visual Studio Code extension (PR)
  • Use Roslynator NuGet packages for diagnostics
• Remove AnalyzersOptionsPage from Visual Studio extension (PR)
• Drop support for Visual Studio 2022 VSIX (PR)
  • Pin last 4.x release (Roslynator 2022) or use NuGet packages on Visual Studio 2022

Fixed

• Fix analyzers RCS1263 and RCS1139 for C# 14 extension block documentation (PR)

Commits viewable in compare view.

Updated Roslynator.Formatting.Analyzers from 4.16.1 to 5.0.0.

Release notes

Sourced from Roslynator.Formatting.Analyzers's releases.

5.0.0

Added

• Add roslyn5.0 NuGet package flavor (analyzers/dotnet/roslyn5.0/cs) (PR)

Breaking

• Enable nullable annotations on Roslynator.Common and Roslynator.Workspaces.Common (#​1817)
  • Source-breaking for projects that compile against this surface with nullable reference types enabled.
• [Testing Framework] Lower Roslyn dependency of testing packages to 3.8.0 so that the Roslyn version is determined by the consumer's own Microsoft.CodeAnalysis.* reference instead of being forced to a fixed version (PR)
  • Roslynator.Testing.Common, Roslynator.Testing.CSharp, Roslynator.Testing.CSharp.Xunit and Roslynator.Testing.CSharp.MSTest now depend on Microsoft.CodeAnalysis.* >= 3.8.0 (previously >= 4.14.0).
  • Roslynator.Testing.Common no longer depends on Roslynator.Core.
  • Action required: a test project that previously relied on the testing framework to pull in Roslyn 4.14.0 should now add its own reference, e.g. <PackageReference Include="Microsoft.CodeAnalysis.CSharp.Workspaces" Version="4.14.0" />. The chosen version raises the maximum C# language version the parser can accept; test sources still parse at CSharpParseOptions.Default unless you set parse options / LanguageVersion (for example LanguageVersion.Latest).
  • Action required: a test project that used Roslynator.Core types via the old transitive dependency must now add an explicit Roslynator.Core package reference.

Changed

• Bump Roslyn to 5.0.0 (PR)
  • CLI targets Roslyn 5.0.0
  • Solution build and tests use Roslyn 5.0.0 by default (the testing packages floor at 3.8.0; see Breaking)
• Replace Visual Studio 2022 extension with Roslynator 2026 for Visual Studio 2026 ([18.0,19.0)) (PR)
  • Extension ships refactorings and compiler diagnostic code fixes; analyzers via NuGet
  • Roslynator 2022 remains available as the last 4.x VSIX
• Visual Studio Code extension ships refactorings and compiler diagnostic code fixes only (PR)
  • Analyzers require Roslynator NuGet packages
  • Requires OmniSharp with Roslyn 5.x (C# extension 1.39.15+; set dotnet.server.useOmnisharp to true)

Removed

• Remove leftover implementations of obsolete analyzers (XML descriptors remain). Enable the successor rules instead: RCS0014 → RCS0061, RCS0022 → RCS0021, RCS0038 → RCS0015, RCS0043 → RCS0020, RCS0047 → RCS0053, RCS1008/RCS1009/RCS1010/RCS1012/RCS1176/RCS1177 → RCS1264, RCS1035 → RCS1260, RCS1036 → RCS0063, RCS1038/RCS1040/RCS1041/RCS1066/RCS1072/RCS1091/RCS1106 → RCS1259, RCS1063/RCS1064/RCS1065 → RCS1252, RCS1100/RCS1101 → RCS1253, RCS1237 → RCS1254.
• Remove SyntaxInverter (Roslynator.CSharp.Workspaces). Use SyntaxLogicalInverter.
• Remove unused obsolete DiagnosticCategories constants and make the type internal.
• Remove unused ROS0001/ROS0002 diagnostic IDs.
• Remove obsolete constructors/properties from the testing package (DiagnosticTestData, CompilerDiagnosticFixTestData, RefactoringTestData).
• Remove legacy config keys roslynator.max_line_length, roslynator.prefix_field_identifier_with_underscore, and roslynator_suppress_unity_script_methods. Use roslynator_max_line_length, roslynator_prefix_field_identifier_with_underscore, and roslynator_unity_code_analysis.enabled.
• [CLI] Remove obsolete command generate-doc-root. Use generate-doc --root-file-path instead.
• Remove bundled analyzers from Visual Studio extension (PR)
  • Use Roslynator.Analyzers NuGet package for diagnostics
• Remove bundled analyzers from Visual Studio Code extension (PR)
  • Use Roslynator NuGet packages for diagnostics
• Remove AnalyzersOptionsPage from Visual Studio extension (PR)
• Drop support for Visual Studio 2022 VSIX (PR)
  • Pin last 4.x release (Roslynator 2022) or use NuGet packages on Visual Studio 2022

Fixed

• Fix analyzers RCS1263 and RCS1139 for C# 14 extension block documentation (PR)

Commits viewable in compare view.

Updated SonarAnalyzer.CSharp from 10.32.0.713 to 10.33.0.1635.

Release notes

Sourced from SonarAnalyzer.CSharp's releases.

10.33.0.1635

Release notes - .NET Analyzers - 10.33

Feature

NET-4312 Update RSPEC before 10.33 release
NET-4254 Implement rule S9129: "Include" and "ThenInclude" chains of reference navigations should be merged into a single "Include" call

False Positive

NET-1777 Fix S101 FP: Lower case character after number
NET-4245 Fix S107 FP: should not raise for parameters marked with dependency-injection attributes

Maintenance

NET-4184 Duplicate telemetry key exception when multiple projects report the same non-counter telemetry value

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions