[github-actions]

Caution

Protected files were modified in this change.
This pull request is in request_review mode and requires explicit human scrutiny before merge.

Protected files: Directory.Packages.props

Summary

Checked all packages managed via Directory.Packages.props (central package management) for newer stable releases and updated the ones that are safe to take, per the repository's dependency-update policy.

Minor updates

• Microsoft.Extensions.DependencyInjection.AutoActivation: 10.8.0 -> 10.10.0
• Microsoft.NET.Test.Sdk: 18.8.1 -> 18.10.1
• Microsoft.WindowsAppSDK: 2.3.1 -> 2.5.1
• Uno.WinUI: 6.6.184 -> 6.7.135

Patch updates

• coverlet.collector: 10.0.1 -> 10.1.0
• Avalonia: 12.1.1 -> 12.1.3
• Avalonia.Desktop: 12.1.1 -> 12.1.3
• Avalonia.Fonts.Inter: 12.1.1 -> 12.1.3
• Avalonia.Themes.Fluent: 12.1.1 -> 12.1.3
• Microsoft.AspNetCore.Components.WebAssembly: 10.0.10 -> 10.0.12
• Microsoft.AspNetCore.Components.WebAssembly.DevServer: 10.0.10 -> 10.0.12
• CommunityToolkit.Maui: 15.0.0 -> 15.0.1

Deliberately left unchanged

• ReactiveUI.Reactive / ReactiveUI.Blazor.Reactive / ReactiveUI.Maui.Reactive / ReactiveUI.WPF.Reactive / ReactiveUI.WinUI.Reactive (24.3.0): already the newest release on the 24.x line. ReactiveUI 25/26 are available upstream but move binding onto a source generator that breaks Stellar's private-field Bind calls and removes ICreatesCustomizedCommandRebinding; not taken per repository policy.
• ReactiveUI.SourceGenerators (3.2.0): already newest on the 3.x line; 4.x tracks ReactiveUI 25+ and is intentionally skipped alongside it.
• Microsoft.CodeAnalysis.CSharp (5.0.0): left at the compatibility floor on purpose — raising it (newest stable is 5.9.0) would silently break Stellar.SourceGenerators for consumers on .NET SDK feature bands below 10.0.3xx.
• xunit (2.9.3) / xunit.runner.visualstudio (3.1.5): already newest within their current lines; xunit.v3/xunit.runner.visualstudio 4.0.0 is a major migration and explicitly out of scope.
• Microsoft.Maui.Controls (10.0.110), Microsoft.AspNetCore.Components.WebView.Maui (10.0.110), CommunityToolkit.Maui.Markup (8.0.0), CommunityToolkit.Mvvm (8.4.2), Mopups (1.3.4): already the newest stable release on nuget.org.
• stylecop.analyzers stays on its 1.2.0-beta.556 line (no stable release exists).
• All other packages (Microsoft.CodeAnalysis.NetAnalyzers, Roslynator.Analyzers, FluentValidation, Microsoft.Extensions.DependencyInjection, Microsoft.Extensions.Logging.Debug, System.Threading.RateLimiting, System.Reactive, ReactiveGenerator, ReactiveMarbles.ObservableEvents.SourceGenerator, Microsoft.Reactive.Testing) were already at the newest available stable version — no change needed.

Nothing was dropped from the batch; every update attempted passed verification.

Verification

Ran the following, all passing:

dotnet restore Stellar.slnf
dotnet build Stellar.slnf --configuration Release --no-restore
dotnet test Stellar.UnitTests/Stellar.UnitTests.csproj --configuration Release --no-build

Build succeeded (0 errors, pre-existing warnings only) and all 259 unit tests passed.

Note: Stellar.slnf excludes the MAUI projects and sample apps; those are verified by CI on this PR, not locally. The dependencies label has been applied; skip-samples was intentionally not applied so the MAUI sample builds still run against this update.

Warning

Firewall blocked 8 domains

The following domains were blocked by the firewall during workflow execution:

• avbuildtelapiv1.avaloniaui.net
• ccsca2021.crl.certum.pl
• ccsca2021.ocspcertum.com
• crl.certum.pl
• crl.godaddy.com
• ocsp.godaddy.com
• subca.crl.certum.pl
• subca.ocspcertum.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "avbuildtelapiv1.avaloniaui.net"
    - "ccsca2021.crl.certum.pl"
    - "ccsca2021.ocspcertum.com"
    - "crl.certum.pl"
    - "crl.godaddy.com"
    - "ocsp.godaddy.com"
    - "subca.crl.certum.pl"
    - "subca.ocspcertum.com"

See Network Configuration for more information.

Generated by Dependency update · sonnet50 173.2K · ◷

[github-actions]

Protected files were modified in this pull request and require manual scrutiny before merge.

Please verify that each protected-file change is intentional, policy-compliant, and safe:

• Protected files: Directory.Packages.props