Skip to content

Bump the nuget-minor-patch group with 4 updates - #518

Merged
Zafnok merged 2 commits into
mainfrom
dependabot/nuget/nuget-minor-patch-e7ff6c20cf
Oct 16, 2026
Merged

Zafnok merged 2 commits into
mainfrom
dependabot/nuget/nuget-minor-patch-e7ff6c20cf

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 16, 2026

Copy link
Copy Markdown
Contributor

Updated Meziantou.Analyzer from 3.0.296 to 3.0.303.

Release notes

Sourced from Meziantou.Analyzer's releases.

3.0.303

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.303

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.302...3.0.303

3.0.302

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.302

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.301...3.0.302

3.0.301

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.301

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.300...3.0.301

3.0.300

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.300

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.299...3.0.300

3.0.299

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.299

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.298...3.0.299

3.0.298

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.298

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.297...3.0.298

3.0.297

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.297

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.296...3.0.297

Commits viewable in compare view.

Updated Sarif.Sdk from 5.7.0 to 5.8.0.

Release notes

Sourced from Sarif.Sdk's releases.

5.8.0

v5.8.0 Sdk | Driver | Converters | Multitool | Multitool Library

  • NEW: GHAzDO1021.ProvideValidVersionControlProvenance rejects a blank primary branch or revision and the 40-character all-zero Git revision sentinel.
  • BUG: MultithreadedAnalyzeCommandBase.Run and RunAsync return on timeout without disposing resources still used by unfinished analysis.
  • BUG: HashUtilities.ComputeHashes omits hashes for unsupported file paths so scan-exception notifications can be logged.
  • BUG: SarifLogger emits hashes supplied by base-less in-memory scan targets without reading a same-named file from the working directory.
  • BUG: SarifLogger resolves uriBaseId before hashing result artifacts and omits hashes when their relative locations cannot be resolved.
  • BUG: analyze --post-uri reports the endpoint health-check status and response body or exception when validation fails.

Commits viewable in compare view.

Updated Verify.XunitV3 from 33.3.2 to 33.3.4.

Release notes

Sourced from Verify.XunitV3's releases.

33.3.4

33.3.3

Commits viewable in compare view.

Updated xunit.v3 from 4.0.1 to 4.0.2.

Release notes

Sourced from xunit.v3's releases.

No release notes found for this version range.

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps Meziantou.Analyzer from 3.0.296 to 3.0.303
Bumps Sarif.Sdk from 5.7.0 to 5.8.0
Bumps Verify.XunitV3 from 33.3.2 to 33.3.4
Bumps xunit.v3 from 4.0.1 to 4.0.2

---
updated-dependencies:
- dependency-name: Meziantou.Analyzer
  dependency-version: 3.0.303
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: Sarif.Sdk
  dependency-version: 5.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-patch
- dependency-name: Verify.XunitV3
  dependency-version: 33.3.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: xunit.v3
  dependency-version: 4.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Oct 16, 2026
@sonarqubecloud

Copy link
Copy Markdown

@Zafnok
Zafnok merged commit 929e421 into main Oct 16, 2026
40 of 41 checks passed
@Zafnok
Zafnok deleted the dependabot/nuget/nuget-minor-patch-e7ff6c20cf branch October 16, 2026 03:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant