Visitar URL original
Update NuGet non-major by renovate[bot] · Pull Request #447 · NetCordDev/NetCord · GitHub
Skip to content

Update NuGet non-major - #447

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/nuget-non-major
Open

renovate[bot] wants to merge 1 commit into
mainfrom
renovate/nuget-non-major

Conversation

@renovate

@renovate renovate Bot commented Nov 9, 2026 •

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
MSTest.TestAdapter 4.5.2 → 4.5.3 age confidence
MSTest.TestFramework 4.5.2 → 4.5.3 age confidence
Microsoft.CodeAnalysis.Analyzers 5.9.0 → 5.12.0 age confidence
Microsoft.CodeAnalysis.CSharp 5.9.0 → 5.12.0 age confidence
Microsoft.CodeAnalysis.CSharp.Scripting 5.9.0 → 5.12.0 age confidence
Microsoft.Extensions.Configuration.Binder (source) 10.0.14 → 10.0.15 age confidence
Microsoft.Extensions.DependencyInjection (source) 10.0.14 → 10.0.15 age confidence
Microsoft.Extensions.Hosting (source) 10.0.14 → 10.0.15 age confidence
Microsoft.Extensions.Hosting.Abstractions (source) 10.0.14 → 10.0.15 age confidence
Microsoft.Extensions.Options.ConfigurationExtensions (source) 10.0.14 → 10.0.15 age confidence
Microsoft.Extensions.Options.DataAnnotations (source) 10.0.14 → 10.0.15 age confidence
Microsoft.NET.Test.Sdk 18.11.0 → 18.12.0 age confidence
PolySharp 1.16.0 → 1.17.1 age confidence

Release Notes

microsoft/testfx (MSTest.TestAdapter)

v4.5.3

See MSTest 4.5.3 release notes here.

See Microsoft.Testing.Platform (MTP) 2.5.3 release notes here.

dotnet/dotnet (Microsoft.Extensions.Configuration.Binder)

v10.0.15

microsoft/vstest (Microsoft.NET.Test.Sdk)

v18.12.0

Security fix

This release includes the fix for CVE-2026-105544, an elevation of privilege vulnerability in the VSTest artifact post-processor. The post-processor could consume a forged executionComplete.json written by another local user, and then run attacker-controlled output handling.

Affected: Microsoft.TestPlatform.CLI 18.11.0 and earlier. Every version from 18.11.1 on is fixed, including 18.12.0.

Microsoft.TestPlatform.CLI is the VSTest build that we ship into the .NET SDK. The recommended way to get this fix is to update your .NET SDK to the latest patched version, see the advisory for the SDK versions.

The fix is also released in the Microsoft.TestPlatform.CLI package, for completeness. That package is rarely used directly. It is not a dependency of Microsoft.NET.Test.Sdk or Microsoft.TestPlatform, so those packages do not bring it in.

Details: #​16654 and dotnet/announcements#517

Using custom Docker images or Nano Server? See #​16652

What's Changed

Full Changelog: microsoft/vstest@v18.11.0...v18.12.0

v18.11.1

Security fix

This release fixes CVE-2026-105544, an elevation of privilege vulnerability in the VSTest artifact post-processor. The post-processor could consume a forged executionComplete.json written by another local user, and then run attacker-controlled output handling.

Affected: Microsoft.TestPlatform.CLI 18.11.0.
Fixed in: Microsoft.TestPlatform.CLI 18.11.1.

Microsoft.TestPlatform.CLI is the VSTest build that we ship into the .NET SDK. The recommended way to get this fix is to update your .NET SDK to the latest patched version, see the advisory for the SDK versions.

The fix is also released in the Microsoft.TestPlatform.CLI package, for completeness. That package is rarely used directly. It is not a dependency of Microsoft.NET.Test.Sdk or Microsoft.TestPlatform, so those packages do not bring it in.

Details: #​16654 and dotnet/announcements#517

Using custom Docker images or Nano Server? See #​16652

What's Changed

  • Security fix for CVE-2026-105544, see #​16654
  • Ship Microsoft.Diagnostics.NETCore.Client in Microsoft.TestPlatform and Portable packages by @​nohwnd in #​16632
  • Fix localized resource paths in CLI source-build packages by @​nohwnd in #​16643

Full Changelog: microsoft/vstest@v18.11.0...v18.11.1

Sergio0694/PolySharp (PolySharp)

v1.17.0

Compare Source

This PolySharp release includes C# 15 support.

🪄 Polyfills
✅ Fixes
🔧 Other changes

New Contributors

Full Changelog: Sergio0694/PolySharp@1.16.0...1.17.0


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@github-actions

github-actions Bot commented Nov 9, 2026

Copy link
Copy Markdown

The documentation preview is available at https://preview.netcord.dev/447.

@renovate
renovate Bot force-pushed the renovate/nuget-non-major branch from 979e0e0 to 7a44875 Compare November 10, 2026 16:09
@renovate renovate Bot changed the title Update dependency PolySharp to 1.17.0 Update NuGet non-major Nov 10, 2026
@renovate
renovate Bot force-pushed the renovate/nuget-non-major branch 3 times, most recently from ca5bba1 to afe8773 Compare November 13, 2026 04:13
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
renovate Bot force-pushed the renovate/nuget-non-major branch from afe8773 to 86e4221 Compare November 14, 2026 04:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants