Skip to content

Bump the nuget-dependencies group with 15 updates#1443

Open
dependabot[bot] wants to merge 7 commits into
mainfrom
dependabot/nuget/nuget-dependencies-77802c0652
Open

Bump the nuget-dependencies group with 15 updates#1443
dependabot[bot] wants to merge 7 commits into
mainfrom
dependabot/nuget/nuget-dependencies-77802c0652

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Jun 4, 2026

Bumps the nuget-dependencies group with the following updates (dependabot-generated body trimmed):

  • HtmlAgilityPack 1.11.30 → 1.12.4
  • Irony 1.1.0 → 1.5.3
  • Microsoft.Build.NoTargets 2.0.1 → 3.7.134
  • Microsoft.CodeAnalysis.CSharp 4.3.1 → 5.3.0
  • Microsoft.CodeAnalysis.FxCopAnalyzers 3.3.0 → 3.3.2 (replaced — see below)
  • Microsoft.CodeAnalysis.PublicApiAnalyzers 3.3.4 → 4.14.0
  • Microsoft.DotNet.GenAPI 8.0.0-beta.24516.1 → 8.0.0-beta.26301.3
  • Microsoft.NET.Test.Sdk 17.5.0-preview-20221003-04 → 18.6.0
  • Microsoft.SourceLink.GitHub 1.1.1 → 10.0.300
  • Microsoft.Xml.SgmlReader 1.8.16 → 1.8.30
  • Mono.Cecil 0.11.4 → 0.11.6
  • NUnit 3.13.2 → 4.6.13.14.0 (stayed on latest 3.x — see below)
  • NUnit.ConsoleRunner 3.12.0 → 3.22.0
  • NUnit3TestAdapter 4.0.0 → 6.2.04.6.0 (stayed on latest 3.x-compatible — see below)
  • protobuf-net 2.4.4 → 3.2.56 (reverted — see below)

Manual follow-ups on top of the dependabot commit

  1. Mono.Cecil 0.11.6 — fix NU1504 duplicate PackageReference.
    Dependabot added an inline <PackageReference Include="Mono.Cecil" Version="0.11.6" /> to four csprojs that already pull Mono.Cecil in via the imported build-tools/scripts/cecil.projitems, producing duplicate-reference errors. Bumped the version inside cecil.projitems (the single source of truth) and removed the redundant inline references from Java.Interop.Tools.Cecil, Java.Interop.Tools.Diagnostics, Java.Interop.Tools.JavaCallableWrappers, and tools/jcw-gen.

  2. Replace deprecated Microsoft.CodeAnalysis.FxCopAnalyzers — fix CA9998.
    The FxCopAnalyzers package is deprecated in favor of Microsoft.CodeAnalysis.NetAnalyzers. Swapped the reference in Directory.Build.targets (3.3.2Microsoft.CodeAnalysis.NetAnalyzers 9.0.0), preserving the existing PrivateAssets/IncludeAssets metadata, and updated the matching comment in .editorconfig.

  3. Revert protobuf-net to 2.4.4.
    protobuf-net 3.x split the assembly into protobuf-net + protobuf-net.Core and made breaking API changes (e.g. ProtoContractAttribute, IExtensible, IExtension type forwards / namespace moves) that src/Xamarin.Android.Tools.Bytecode/Kotlin/KotlinProtobufDefinition.cs does not compile against. Pinned back to 2.4.4 in Directory.Build.targets.

  4. Adapt to SgmlDtd.Parse signature change in SgmlReader 1.8.30.
    Microsoft.Xml.SgmlReader 1.8.24 removed the unused XmlNameTable parameter from SgmlDtd.Parse. Dropped the new NameTable () argument from HtmlLoader.LoadHtmlDtd in tools/param-name-importer to match the new 6-argument overload.

  5. Stay on latest NUnit 3.x.
    NUnit 4.x has breaking changes that don't compile against the existing tests — e.g. CollectionAssert moved to NUnit.Framework.Legacy, and Assert.AreEqual overloads taking dynamic no longer resolve (CS1973 in DynamicJavaClassTests). Pinned nunit to 3.14.0 (latest 3.x) and NUnit3TestAdapter to 4.6.0 (the last release that still supports NUnit 3.x; 5.0+ requires NUnit 4). NUnit.ConsoleRunner 3.22.0 is independent and kept as-is.

Bumps HtmlAgilityPack from 1.11.30 to 1.12.4
Bumps Irony from 1.1.0 to 1.5.3
Bumps Microsoft.Build.NoTargets from 2.0.1 to 3.7.134
Bumps Microsoft.CodeAnalysis.CSharp from 4.3.1 to 5.3.0
Bumps Microsoft.CodeAnalysis.FxCopAnalyzers from 3.3.0 to 3.3.2
Bumps Microsoft.CodeAnalysis.PublicApiAnalyzers from 3.3.4 to 4.14.0
Bumps Microsoft.DotNet.GenAPI from 8.0.0-beta.24516.1 to 8.0.0-beta.26301.3
Bumps Microsoft.NET.Test.Sdk from 17.5.0-preview-20221003-04 to 18.6.0
Bumps Microsoft.SourceLink.GitHub from 1.1.1 to 10.0.300
Bumps Microsoft.Xml.SgmlReader from 1.8.16 to 1.8.30
Bumps Mono.Cecil from 0.11.4 to 0.11.6
Bumps NUnit from 3.13.2 to 4.6.1
Bumps NUnit.ConsoleRunner from 3.12.0 to 3.22.0
Bumps NUnit3TestAdapter from 4.0.0 to 6.2.0
Bumps protobuf-net from 2.4.4 to 3.2.56

---
updated-dependencies:
- dependency-name: HtmlAgilityPack
  dependency-version: 1.12.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-dependencies
- dependency-name: Irony
  dependency-version: 1.5.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-dependencies
- dependency-name: Microsoft.Build.NoTargets
  dependency-version: 3.7.134
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-dependencies
- dependency-name: Microsoft.CodeAnalysis.CSharp
  dependency-version: 5.3.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-dependencies
- dependency-name: Microsoft.CodeAnalysis.FxCopAnalyzers
  dependency-version: 3.3.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-dependencies
- dependency-name: Microsoft.CodeAnalysis.PublicApiAnalyzers
  dependency-version: 4.14.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-dependencies
- dependency-name: Microsoft.DotNet.GenAPI
  dependency-version: 8.0.0-beta.26301.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-dependencies
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.6.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-dependencies
- dependency-name: Microsoft.SourceLink.GitHub
  dependency-version: 10.0.300
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-dependencies
- dependency-name: Microsoft.Xml.SgmlReader
  dependency-version: 1.8.30
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-dependencies
- dependency-name: Mono.Cecil
  dependency-version: 0.11.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-dependencies
- dependency-name: NUnit
  dependency-version: 4.6.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-dependencies
- dependency-name: NUnit.ConsoleRunner
  dependency-version: 3.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-dependencies
- dependency-name: NUnit3TestAdapter
  dependency-version: 6.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-dependencies
- dependency-name: protobuf-net
  dependency-version: 3.2.56
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code labels Jun 4, 2026
jonathanpeppers and others added 6 commits June 4, 2026 11:17
Dependabot added inline `<PackageReference Include="Mono.Cecil" Version="0.11.6" />` to four csprojs that already pull Mono.Cecil in via the imported `build-tools/scripts/cecil.projitems`, producing NU1504 duplicate reference errors.

Bump the version inside `cecil.projitems` (the single source of truth) and remove the redundant inline references dependabot added.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Microsoft.CodeAnalysis.FxCopAnalyzers is deprecated (CA9998) in favor of Microsoft.CodeAnalysis.NetAnalyzers. Switch the Directory.Build.targets reference and update the matching .editorconfig comment.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
protobuf-net 3.x split the assembly into protobuf-net + protobuf-net.Core and made breaking API changes that don't compile against KotlinProtobufDefinition.cs. Stay on 2.4.4 for now.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Microsoft.Xml.SgmlReader 1.8.24 removed the unused XmlNameTable parameter from SgmlDtd.Parse. Drop the `new NameTable ()` argument from HtmlLoader.LoadHtmlDtd to match the new 6-argument overload.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
NUnit 4.x has API breaking changes that don't compile against the existing tests (e.g. `CollectionAssert` moved to NUnit.Framework.Legacy, and `Assert.AreEqual` overloads taking `dynamic` no longer resolve). Pin nunit to 3.14.0 (latest 3.x) and NUnit3TestAdapter to 4.6.0 (the last release that still supports NUnit 3.x; 5.0+ requires NUnit 4).

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Microsoft.DotNet.GenAPI 8.0.0-beta.26301.3 stamps a new version (8.0.14.30103) in the auto-generated header. The build regenerates `src/Java.Base-ref.cs` and the `Ensure no modified committed files` CI step then fails on the version-comment diff. Update the committed file to match.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant