Skip to content

Bump the nuget-root-patch-minor group with 4 updates#59

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/nuget/src/CodexSessionManager.App/nuget-root-patch-minor-c31c22f8ba
Closed

Bump the nuget-root-patch-minor group with 4 updates#59
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/nuget/src/CodexSessionManager.App/nuget-root-patch-minor-c31c22f8ba

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 27, 2026

Updated CommunityToolkit.Mvvm from 8.3.2 to 8.4.2.

Release notes

Sourced from CommunityToolkit.Mvvm's releases.

8.4.2

What's Changed

Full Changelog: CommunityToolkit/dotnet@v8.4.1...v8.4.2

8.4.1

This release of the .NET Community Toolkit updates the MVVM Toolkit analyzers and source generator to Roslyn 5.0, so they can work with C# 14 out of the box. This means that [ObservableProperty] on partial properties no longer needs preview language version 🎉

What's Changed 🆕

New Contributors

Full Changelog: CommunityToolkit/dotnet@v8.4.0...v8.4.1

8.4.0

What's Changed 🆕

New Contributors

Full Changelog: CommunityToolkit/dotnet@v8.3.2...v8.4.0

8.4.0-preview3

What's Changed 🆕

New Contributors

Full Changelog: CommunityToolkit/dotnet@v8.3.2...v8.4.0-preview3

Commits viewable in compare view.

Updated coverlet.msbuild from 6.0.0 to 6.0.4.

Release notes

Sourced from coverlet.msbuild's releases.

6.0.4

Fixed

  • Fix empty coverage report when using include and exclude filters #​1726

Diff between 6.0.3 and 6.0.4

6.0.3

Fixed

Improvements

  • Cache the regex used in InstrumentationHelper #​1693
  • Enable dotnetTool integration tests for linux #​660

Diff between 6.0.2 and 6.0.3

6.0.2

Fixed

  • Threshold-stat triggers error #​1634
  • Fixed coverlet collector 6.0.1 requires dotnet sdk 8 #​1625
  • Type initializer errors after updating from 6.0.0 to 6.0.1 #​1629
  • Exception when multiple exclude-by-attribute filters specified #​1624

Improvements

  • More concise options to specify multiple parameters in coverlet.console #​1624

Diff between 6.0.1 and 6.0.2

6.0.1

Fixed

  • Uncovered lines in .NET 8 for inheriting records #​1555
  • Fix record constructors not covered when SkipAutoProps is true #​1561
  • Fix .NET 7 Method Group branch coverage issue #​1447
  • Fix ExcludeFromCodeCoverage does not exclude method in a partial class #​1548
  • Fix ExcludeFromCodeCoverage does not exclude F# task #​1547
  • Fix issues where ExcludeFromCodeCoverage ignored #​1431
  • Fix issues with ExcludeFromCodeCoverage attribute #​1484
  • Fix broken links in documentation #​1514
  • Fix problem with coverage for .net5 WPF application #​1221 by https://github.com/lg2de
  • Fix unable to instrument module for Microsoft.AspNetCore.Mvc.Razor #​1459 by https://github.com/lg2de

Improvements

Diff between 6.0.0 and 6.0.1

Commits viewable in compare view.

Updated Microsoft.Data.Sqlite from 10.0.5 to 10.0.7.

Release notes

Sourced from Microsoft.Data.Sqlite's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.3.0 to 18.4.0.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.4.0

What's Changed

New Contributors

Full Changelog: microsoft/vstest@v18.3.0...v18.4.0

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Summary by cubic

Update MVVM Toolkit, Sqlite, and test/coverage tooling to latest minor/patch versions to improve reliability and align with C# 14. Brings analyzer/source generator updates, bug fixes, and more stable coverage.

  • Dependencies
    • CommunityToolkit.Mvvm: 8.3.2 → 8.4.2 (C# 14 analyzer/generator support; partial property improvements; analyzer fix)
    • Microsoft.Data.Sqlite: 10.0.5 → 10.0.7 (patch fixes and compatibility updates)
    • coverlet.msbuild: 6.0.0 → 6.0.4 (fix empty reports with include/exclude; instrumentation and SDK 8 self-contained fixes)
    • Microsoft.NET.Test.Sdk: 18.3.0 → 18.4.0 (fix .NET 10 trait regression; updated runtime support)

Written for commit cb781b6. Summary will update on new commits. Review in cubic

Bumps CommunityToolkit.Mvvm from 8.3.2 to 8.4.2
Bumps coverlet.msbuild from 6.0.0 to 6.0.4
Bumps Microsoft.Data.Sqlite from 10.0.5 to 10.0.7
Bumps Microsoft.NET.Test.Sdk from 18.3.0 to 18.4.0

---
updated-dependencies:
- dependency-name: CommunityToolkit.Mvvm
  dependency-version: 8.4.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-root-patch-minor
- dependency-name: coverlet.msbuild
  dependency-version: 6.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-root-patch-minor
- dependency-name: coverlet.msbuild
  dependency-version: 6.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-root-patch-minor
- dependency-name: coverlet.msbuild
  dependency-version: 6.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-root-patch-minor
- dependency-name: Microsoft.Data.Sqlite
  dependency-version: 10.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-root-patch-minor
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-root-patch-minor
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-root-patch-minor
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-root-patch-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Apr 27, 2026

Labels

The following labels could not be found: area:ci, type:chore. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Apr 27, 2026
@dependabot dependabot Bot requested a review from Prekzursil as a code owner April 27, 2026 23:25
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Apr 27, 2026
@codeant-ai
Copy link
Copy Markdown

codeant-ai Bot commented Apr 27, 2026

Skipping PR review because a bot author is detected.

If you want to trigger CodeAnt AI, comment @codeant-ai review to trigger a manual review.

@deepsource-io
Copy link
Copy Markdown

deepsource-io Bot commented Apr 27, 2026

DeepSource Code Review

We reviewed changes in 73b353c...cb781b6 on this pull request. Below is the summary for the review, and you can see the individual issues we found as inline review comments.

See full review on DeepSource ↗

PR Report Card

Overall Grade   Security  

Reliability  

Complexity  

Hygiene  

Code Review Summary

Analyzer Status Updated (UTC) Details
Terraform Apr 27, 2026 11:25p.m. Review ↗
SQL Apr 27, 2026 11:25p.m. Review ↗
Rust Apr 27, 2026 11:25p.m. Review ↗
Shell Apr 27, 2026 11:25p.m. Review ↗
Ruby Apr 27, 2026 11:25p.m. Review ↗
PHP Apr 27, 2026 11:25p.m. Review ↗
Kotlin Apr 27, 2026 11:25p.m. Review ↗
Java Apr 27, 2026 11:25p.m. Review ↗
C & C++ Apr 27, 2026 11:25p.m. Review ↗
Go Apr 27, 2026 11:25p.m. Review ↗
Swift Apr 27, 2026 11:25p.m. Review ↗
Scala Apr 27, 2026 11:25p.m. Review ↗
Python Apr 27, 2026 11:25p.m. Review ↗
JavaScript Apr 27, 2026 11:25p.m. Review ↗
Docker Apr 27, 2026 11:25p.m. Review ↗
C# Apr 27, 2026 11:25p.m. Review ↗
Ansible Apr 27, 2026 11:25p.m. Review ↗
Secrets Apr 27, 2026 11:25p.m. Review ↗

Important

AI Review is run only on demand for your team. We're only showing results of static analysis review right now. To trigger AI Review, comment @deepsourcebot review on this thread.

@socket-security
Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedcommunitytoolkit.mvvm@​8.3.2 ⏵ 8.4.21001009010080
Updatedmicrosoft.data.sqlite@​10.0.5 ⏵ 10.0.710010090100100
Updatedmicrosoft.net.test.sdk@​18.3.0 ⏵ 18.4.010010090100100
Updatedcoverlet.msbuild@​6.0.0 ⏵ 6.0.4100 +64100100 +11100100

View full report

Copy link
Copy Markdown

@cubic-dev-ai cubic-dev-ai Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No issues found across 6 files

@codacy-production
Copy link
Copy Markdown

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 4, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this May 4, 2026
@dependabot dependabot Bot deleted the dependabot/nuget/src/CodexSessionManager.App/nuget-root-patch-minor-c31c22f8ba branch May 4, 2026 23:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants