Skip to content

Bump the nuget-root-patch-minor group with 3 updates#57

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/nuget/src/CodexSessionManager.App/nuget-root-patch-minor-2ff41b2479
Open

Bump the nuget-root-patch-minor group with 3 updates#57
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/nuget/src/CodexSessionManager.App/nuget-root-patch-minor-2ff41b2479

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 13, 2026

Updated CommunityToolkit.Mvvm from 8.3.2 to 8.4.2.

Release notes

Sourced from CommunityToolkit.Mvvm's releases.

8.4.2

What's Changed

Full Changelog: CommunityToolkit/dotnet@v8.4.1...v8.4.2

8.4.1

This release of the .NET Community Toolkit updates the MVVM Toolkit analyzers and source generator to Roslyn 5.0, so they can work with C# 14 out of the box. This means that [ObservableProperty] on partial properties no longer needs preview language version 🎉

What's Changed 🆕

New Contributors

Full Changelog: CommunityToolkit/dotnet@v8.4.0...v8.4.1

8.4.0

What's Changed 🆕

New Contributors

Full Changelog: CommunityToolkit/dotnet@v8.3.2...v8.4.0

8.4.0-preview3

What's Changed 🆕

New Contributors

Full Changelog: CommunityToolkit/dotnet@v8.3.2...v8.4.0-preview3

Commits viewable in compare view.

Updated coverlet.msbuild from 6.0.0 to 6.0.4.

Release notes

Sourced from coverlet.msbuild's releases.

6.0.4

Fixed

  • Fix empty coverage report when using include and exclude filters #​1726

Diff between 6.0.3 and 6.0.4

6.0.3

Fixed

Improvements

  • Cache the regex used in InstrumentationHelper #​1693
  • Enable dotnetTool integration tests for linux #​660

Diff between 6.0.2 and 6.0.3

6.0.2

Fixed

  • Threshold-stat triggers error #​1634
  • Fixed coverlet collector 6.0.1 requires dotnet sdk 8 #​1625
  • Type initializer errors after updating from 6.0.0 to 6.0.1 #​1629
  • Exception when multiple exclude-by-attribute filters specified #​1624

Improvements

  • More concise options to specify multiple parameters in coverlet.console #​1624

Diff between 6.0.1 and 6.0.2

6.0.1

Fixed

  • Uncovered lines in .NET 8 for inheriting records #​1555
  • Fix record constructors not covered when SkipAutoProps is true #​1561
  • Fix .NET 7 Method Group branch coverage issue #​1447
  • Fix ExcludeFromCodeCoverage does not exclude method in a partial class #​1548
  • Fix ExcludeFromCodeCoverage does not exclude F# task #​1547
  • Fix issues where ExcludeFromCodeCoverage ignored #​1431
  • Fix issues with ExcludeFromCodeCoverage attribute #​1484
  • Fix broken links in documentation #​1514
  • Fix problem with coverage for .net5 WPF application #​1221 by https://github.com/lg2de
  • Fix unable to instrument module for Microsoft.AspNetCore.Mvc.Razor #​1459 by https://github.com/lg2de

Improvements

Diff between 6.0.0 and 6.0.1

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.3.0 to 18.4.0.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.4.0

What's Changed

New Contributors

Full Changelog: microsoft/vstest@v18.3.0...v18.4.0

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Summary by cubic

Bump CommunityToolkit.Mvvm, Microsoft.NET.Test.Sdk, and coverlet.msbuild to improve C# 14 support, test stability, and coverage accuracy across the solution.

  • Dependencies
    • CommunityToolkit.Mvvm 8.3.2 → 8.4.2: Adds C# 14/Roslyn 5 support and analyzer fixes.
    • Microsoft.NET.Test.Sdk 18.3.0 → 18.4.0: Fixes .NET 10 trait regression and updates runtimes.
    • coverlet.msbuild 6.0.0 → 6.0.4: Fixes empty reports when using include/exclude filters.

Written for commit 415154f. Summary will update on new commits.

Bumps CommunityToolkit.Mvvm from 8.3.2 to 8.4.2
Bumps coverlet.msbuild from 6.0.0 to 6.0.4
Bumps Microsoft.NET.Test.Sdk from 18.3.0 to 18.4.0

---
updated-dependencies:
- dependency-name: CommunityToolkit.Mvvm
  dependency-version: 8.4.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-root-patch-minor
- dependency-name: coverlet.msbuild
  dependency-version: 6.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-root-patch-minor
- dependency-name: coverlet.msbuild
  dependency-version: 6.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-root-patch-minor
- dependency-name: coverlet.msbuild
  dependency-version: 6.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-root-patch-minor
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-root-patch-minor
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-root-patch-minor
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-root-patch-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Apr 13, 2026
@dependabot dependabot bot requested a review from Prekzursil as a code owner April 13, 2026 20:52
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Apr 13, 2026

Labels

The following labels could not be found: area:ci, type:chore. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Apr 13, 2026
@codeant-ai
Copy link
Copy Markdown

codeant-ai bot commented Apr 13, 2026

Skipping PR review because a bot author is detected.

If you want to trigger CodeAnt AI, comment @codeant-ai review to trigger a manual review.

@socket-security
Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedcommunitytoolkit.mvvm@​8.3.2 ⏵ 8.4.21001009010080
Updatedmicrosoft.net.test.sdk@​18.3.0 ⏵ 18.4.010010090100100
Updatedcoverlet.msbuild@​6.0.0 ⏵ 6.0.4100 +64100100 +11100100

View full report

@codacy-production
Copy link
Copy Markdown

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

TIP This summary will be updated as you push new changes. Give us feedback

Copy link
Copy Markdown

@cubic-dev-ai cubic-dev-ai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No issues found across 6 files

@deepsource-io
Copy link
Copy Markdown

deepsource-io bot commented Apr 13, 2026

DeepSource Code Review

We reviewed changes in 73b353c...415154f on this pull request. Below is the summary for the review, and you can see the individual issues we found as inline review comments.

See full review on DeepSource ↗

PR Report Card

Overall Grade   Security  

Reliability  

Complexity  

Hygiene  

Code Review Summary

Analyzer Status Updated (UTC) Details
Terraform Apr 13, 2026 8:53p.m. Review ↗
SQL Apr 13, 2026 8:53p.m. Review ↗
Rust Apr 13, 2026 8:53p.m. Review ↗
Shell Apr 13, 2026 8:53p.m. Review ↗
Ruby Apr 13, 2026 8:53p.m. Review ↗
PHP Apr 13, 2026 8:53p.m. Review ↗
Kotlin Apr 13, 2026 8:53p.m. Review ↗
Java Apr 13, 2026 8:53p.m. Review ↗
C & C++ Apr 13, 2026 8:53p.m. Review ↗
Go Apr 13, 2026 8:53p.m. Review ↗
Swift Apr 13, 2026 8:53p.m. Review ↗
Scala Apr 13, 2026 8:53p.m. Review ↗
Python Apr 13, 2026 8:53p.m. Review ↗
JavaScript Apr 13, 2026 8:53p.m. Review ↗
Docker Apr 13, 2026 8:53p.m. Review ↗
C# Apr 13, 2026 8:53p.m. Review ↗
Ansible Apr 13, 2026 8:53p.m. Review ↗
Secrets Apr 13, 2026 8:53p.m. Review ↗

Important

AI Review is run only on demand for your team. We're only showing results of static analysis review right now. To trigger AI Review, comment @deepsourcebot review on this thread.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants