Skip to content

Bump the nuget-root-patch-minor group with 4 updates#61

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/src/CodexSessionManager.App/nuget-root-patch-minor-a422bac241
Open

Bump the nuget-root-patch-minor group with 4 updates#61
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/src/CodexSessionManager.App/nuget-root-patch-minor-a422bac241

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 19, 2026

Updated CommunityToolkit.Mvvm from 8.3.2 to 8.4.2.

Release notes

Sourced from CommunityToolkit.Mvvm's releases.

8.4.2

What's Changed

Full Changelog: CommunityToolkit/dotnet@v8.4.1...v8.4.2

8.4.1

This release of the .NET Community Toolkit updates the MVVM Toolkit analyzers and source generator to Roslyn 5.0, so they can work with C# 14 out of the box. This means that [ObservableProperty] on partial properties no longer needs preview language version 🎉

What's Changed 🆕

New Contributors

Full Changelog: CommunityToolkit/dotnet@v8.4.0...v8.4.1

8.4.0

What's Changed 🆕

New Contributors

Full Changelog: CommunityToolkit/dotnet@v8.3.2...v8.4.0

8.4.0-preview3

What's Changed 🆕

New Contributors

Full Changelog: CommunityToolkit/dotnet@v8.3.2...v8.4.0-preview3

Commits viewable in compare view.

Updated coverlet.msbuild from 6.0.0 to 6.0.4.

Release notes

Sourced from coverlet.msbuild's releases.

6.0.4

Fixed

  • Fix empty coverage report when using include and exclude filters #​1726

Diff between 6.0.3 and 6.0.4

6.0.3

Fixed

Improvements

  • Cache the regex used in InstrumentationHelper #​1693
  • Enable dotnetTool integration tests for linux #​660

Diff between 6.0.2 and 6.0.3

6.0.2

Fixed

  • Threshold-stat triggers error #​1634
  • Fixed coverlet collector 6.0.1 requires dotnet sdk 8 #​1625
  • Type initializer errors after updating from 6.0.0 to 6.0.1 #​1629
  • Exception when multiple exclude-by-attribute filters specified #​1624

Improvements

  • More concise options to specify multiple parameters in coverlet.console #​1624

Diff between 6.0.1 and 6.0.2

6.0.1

Fixed

  • Uncovered lines in .NET 8 for inheriting records #​1555
  • Fix record constructors not covered when SkipAutoProps is true #​1561
  • Fix .NET 7 Method Group branch coverage issue #​1447
  • Fix ExcludeFromCodeCoverage does not exclude method in a partial class #​1548
  • Fix ExcludeFromCodeCoverage does not exclude F# task #​1547
  • Fix issues where ExcludeFromCodeCoverage ignored #​1431
  • Fix issues with ExcludeFromCodeCoverage attribute #​1484
  • Fix broken links in documentation #​1514
  • Fix problem with coverage for .net5 WPF application #​1221 by https://github.com/lg2de
  • Fix unable to instrument module for Microsoft.AspNetCore.Mvc.Razor #​1459 by https://github.com/lg2de

Improvements

Diff between 6.0.0 and 6.0.1

Commits viewable in compare view.

Updated Microsoft.Data.Sqlite from 10.0.5 to 10.0.8.

Release notes

Sourced from Microsoft.Data.Sqlite's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.3.0 to 18.5.1.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.5.1

What's Changed

Full Changelog: microsoft/vstest@v18.5.0...v18.5.1

18.5.0

⚠️ Unlisted on Nuget, because of #​15718

What's Changed

Full Changelog: microsoft/vstest@v18.4.0...v18.5.0

18.4.0

What's Changed

New Contributors

Full Changelog: microsoft/vstest@v18.3.0...v18.4.0

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Summary by cubic

Update CommunityToolkit.Mvvm, Microsoft.Data.Sqlite, and test/coverage tooling to pick up C# 14 support, test runner fixes, and more reliable coverage reports. Improves compatibility with newer SDKs and stabilizes CI.

  • Dependencies
    • CommunityToolkit.Mvvm 8.3.2 → 8.4.2 — C# 14 support for [ObservableProperty] without preview; analyzer fixes.
    • Microsoft.Data.Sqlite 10.0.5 → 10.0.8 — patch updates.
    • Microsoft.NET.Test.Sdk 18.3.0 → 18.5.1 — binding fix and runtime config updates; improves test stability.
    • coverlet.msbuild 6.0.0 → 6.0.4 — fixes empty reports with include/exclude filters; performance/compatibility fixes.

Written for commit cb44764. Summary will update on new commits. Review in cubic

Bumps CommunityToolkit.Mvvm from 8.3.2 to 8.4.2
Bumps coverlet.msbuild from 6.0.0 to 6.0.4
Bumps Microsoft.Data.Sqlite from 10.0.5 to 10.0.8
Bumps Microsoft.NET.Test.Sdk from 18.3.0 to 18.5.1

---
updated-dependencies:
- dependency-name: CommunityToolkit.Mvvm
  dependency-version: 8.4.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-root-patch-minor
- dependency-name: coverlet.msbuild
  dependency-version: 6.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-root-patch-minor
- dependency-name: coverlet.msbuild
  dependency-version: 6.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-root-patch-minor
- dependency-name: coverlet.msbuild
  dependency-version: 6.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-root-patch-minor
- dependency-name: Microsoft.Data.Sqlite
  dependency-version: 10.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-root-patch-minor
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-root-patch-minor
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-root-patch-minor
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-root-patch-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 19, 2026

Labels

The following labels could not be found: area:ci, type:chore. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label May 19, 2026
@dependabot dependabot Bot requested a review from Prekzursil as a code owner May 19, 2026 04:57
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label May 19, 2026
@codeant-ai
Copy link
Copy Markdown

codeant-ai Bot commented May 19, 2026

Skipping PR review because a bot author is detected.

If you want to trigger CodeAnt AI, comment @codeant-ai review to trigger a manual review.

@socket-security
Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedcommunitytoolkit.mvvm@​8.3.2 ⏵ 8.4.292 -21009010080
Updatedcoverlet.msbuild@​6.0.0 ⏵ 6.0.485 +49100100 +11100100
Updatedmicrosoft.data.sqlite@​10.0.5 ⏵ 10.0.810010090100100
Updatedmicrosoft.net.test.sdk@​18.3.0 ⏵ 18.5.110010090100100

View full report

@deepsource-io
Copy link
Copy Markdown

deepsource-io Bot commented May 19, 2026

DeepSource Code Review

We reviewed changes in 73b353c...cb44764 on this pull request. Below is the summary for the review, and you can see the individual issues we found as inline review comments.

See full review on DeepSource ↗

PR Report Card

Overall Grade   Security  

Reliability  

Complexity  

Hygiene  

Code Review Summary

Analyzer Status Updated (UTC) Details
Terraform May 19, 2026 4:57a.m. Review ↗
SQL May 19, 2026 4:57a.m. Review ↗
Rust May 19, 2026 4:57a.m. Review ↗
Shell May 19, 2026 4:57a.m. Review ↗
Ruby May 19, 2026 4:57a.m. Review ↗
PHP May 19, 2026 4:57a.m. Review ↗
Kotlin May 19, 2026 4:57a.m. Review ↗
Java May 19, 2026 4:57a.m. Review ↗
C & C++ May 19, 2026 4:57a.m. Review ↗
Go May 19, 2026 4:57a.m. Review ↗
Swift May 19, 2026 4:57a.m. Review ↗
Scala May 19, 2026 4:57a.m. Review ↗
Python May 19, 2026 4:57a.m. Review ↗
JavaScript May 19, 2026 4:57a.m. Review ↗
Docker May 19, 2026 4:57a.m. Review ↗
C# May 19, 2026 4:57a.m. Review ↗
Ansible May 19, 2026 4:57a.m. Review ↗
Secrets May 19, 2026 4:57a.m. Review ↗

Important

AI Review is run only on demand for your team. We're only showing results of static analysis review right now. To trigger AI Review, comment @deepsourcebot review on this thread.

@codacy-production
Copy link
Copy Markdown

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.

Copy link
Copy Markdown

@cubic-dev-ai cubic-dev-ai Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No issues found across 6 files

Re-trigger cubic

@sentry
Copy link
Copy Markdown

sentry Bot commented May 19, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants