Skip to content

chore(deps): update NuGet package versions - #58

Open
github-actions[bot] wants to merge 1 commit into
developfrom
deps/nuget-update-20261012-f79fe9b73f13fa22
Open

github-actions[bot] wants to merge 1 commit into
developfrom
deps/nuget-update-20261012-f79fe9b73f13fa22

Conversation

@github-actions

Copy link
Copy Markdown
Contributor

Caution

Protected files were modified in this change.
This pull request is in request_review mode and requires explicit human scrutiny before merge.

Protected files: Directory.Packages.props

Routine NuGet dependency update. Central package management via Directory.Packages.props only; no .csproj files touched, no target frameworks or global.json changed.

Updated

Minor

  • Microsoft.Extensions.DependencyInjection.AutoActivation: 10.8.0 -> 10.10.0
  • FluentValidation: 12.1.1 -> 12.2.0
  • Microsoft.WindowsAppSDK: 2.3.1 -> 2.5.1
  • Uno.WinUI: 6.6.184 -> 6.7.135

Patch

  • CommunityToolkit.Maui: 15.0.0 -> 15.0.1
  • Avalonia, Avalonia.Desktop, Avalonia.Fonts.Inter, Avalonia.Themes.Fluent: 12.1.1 -> 12.1.4
  • Microsoft.AspNetCore.Components.WebAssembly / .DevServer: 10.0.10 -> 10.0.12
  • Microsoft.NET.Test.Sdk: 18.8.1 -> 18.10.1
  • coverlet.collector: 10.0.1 -> 10.1.0

Deliberately left unchanged

  • ReactiveUI.Reactive / .Blazor.Reactive / .Maui.Reactive / .WPF.Reactive / .WinUI.Reactive (24.3.0): already the latest release on the 24.x line. 25.x/26.x is available but is a breaking move (binding source generator replaces Bind through private view fields; ICreatesCustomizedCommandRebinding is removed) — per repo policy, staying on 24.x. Noting it's available for a deliberate, separate migration.
  • ReactiveUI.SourceGenerators (3.2.0): tied to the ReactiveUI 24.x line; 4.x pairs with ReactiveUI 25+, so left unchanged for the same reason.
  • Microsoft.CodeAnalysis.CSharp (5.0.0): pinned per repo policy as a compatibility floor for Stellar.SourceGenerators; 5.9.0 exists but must not be raised above 5.0.0.
  • xunit.runner.visualstudio: already at the latest version within its 3.x line (3.1.5); 4.0.1 is a major bump tied to xunit v3, which is out of scope since xunit itself stays on 2.x per policy.
  • xunit (2.9.3): kept on 2.x per policy (no xunit.v3 migration).
  • stylecop.analyzers (1.2.0-beta.556): kept on its beta line per policy (no stable release exists).
  • Microsoft.Maui.Controls (10.0.110), Microsoft.AspNetCore.Components.WebView.Maui (10.0.110), CommunityToolkit.Maui.Markup (8.0.0), CommunityToolkit.Mvvm (8.4.2), Mopups (1.3.4): already at the latest published stable version (checked via dotnet package search --exact-match against nuget.org).
  • All other packages (Microsoft.Extensions.DependencyInjection, Microsoft.Extensions.Logging.Debug, System.Threading.RateLimiting, System.Reactive, ReactiveGenerator, ReactiveMarbles.ObservableEvents.SourceGenerator, Roslynator.Analyzers, Microsoft.CodeAnalysis.NetAnalyzers, Microsoft.Reactive.Testing): already current.

Nothing was dropped from the batch due to a verification failure — everything above built and tested successfully together.

Verification

Ran against Stellar.slnf (the non-MAUI subset):

dotnet restore Stellar.slnf        # succeeded
dotnet build Stellar.slnf --configuration Release --no-restore   # succeeded, 0 errors
dotnet test Stellar.UnitTests/Stellar.UnitTests.csproj --configuration Release --no-build
# Passed! - Failed: 0, Passed: 259, Skipped: 0, Total: 259

MAUI projects and sample apps are not built here (no MAUI workload available) and will be verified by CI on this PR.

Warning

Firewall blocked 8 domains

The following domains were blocked by the firewall during workflow execution:

  • avbuildtelapiv1.avaloniaui.net
  • ccsca2021.crl.certum.pl
  • ccsca2021.ocspcertum.com
  • crl.certum.pl
  • crl.godaddy.com
  • ocsp.godaddy.com
  • subca.crl.certum.pl
  • subca.ocspcertum.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "avbuildtelapiv1.avaloniaui.net"
    - "ccsca2021.crl.certum.pl"
    - "ccsca2021.ocspcertum.com"
    - "crl.certum.pl"
    - "crl.godaddy.com"
    - "ocsp.godaddy.com"
    - "subca.crl.certum.pl"
    - "subca.ocspcertum.com"

See Network Configuration for more information.

Generated by Dependency update · sonnet50 238.6K · ◷

- Microsoft.Extensions.DependencyInjection.AutoActivation 10.8.0 -> 10.10.0
- FluentValidation 12.1.1 -> 12.2.0
- CommunityToolkit.Maui 15.0.0 -> 15.0.1
- Avalonia, Avalonia.Desktop, Avalonia.Fonts.Inter, Avalonia.Themes.Fluent 12.1.1 -> 12.1.4
- Microsoft.AspNetCore.Components.WebAssembly(.DevServer) 10.0.10 -> 10.0.12
- Microsoft.WindowsAppSDK 2.3.1 -> 2.5.1
- Uno.WinUI 6.6.184 -> 6.7.135
- Microsoft.NET.Test.Sdk 18.8.1 -> 18.10.1
- coverlet.collector 10.0.1 -> 10.1.0

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@github-actions github-actions Bot added the dependencies Automated dependency updates label Oct 12, 2026

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Protected files were modified in this pull request and require manual scrutiny before merge.

Please verify that each protected-file change is intentional, policy-compliant, and safe:

  • Protected files: Directory.Packages.props

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Automated dependency updates

Development

Successfully merging this pull request may close these issues.

0 participants