Skip to content

chore(deps): update dotnet monorepo#2454

Open
thomhurst wants to merge 1 commit intomainfrom
renovate/dotnet-monorepo
Open

chore(deps): update dotnet monorepo#2454
thomhurst wants to merge 1 commit intomainfrom
renovate/dotnet-monorepo

Conversation

@thomhurst
Copy link
Owner

@thomhurst thomhurst commented Mar 10, 2026

This PR contains the following updates:

Package Change Age Confidence Type Update
Microsoft.Build (source) 18.3.318.4.0 age confidence nuget minor
Microsoft.Extensions.Caching.Memory (source) 10.0.410.0.5 age confidence nuget patch
Microsoft.Extensions.DependencyInjection (source) 10.0.410.0.5 age confidence nuget patch
Microsoft.Extensions.Hosting (source) 10.0.410.0.5 age confidence nuget patch
Microsoft.Extensions.Http (source) 10.0.410.0.5 age confidence nuget patch
Microsoft.Extensions.TimeProvider.Testing (source) 10.3.010.4.0 age confidence nuget minor
Microsoft.SourceLink.GitHub 10.0.20010.0.201 age confidence nuget patch
System.CommandLine (source) 2.0.42.0.5 age confidence nuget patch
dotnet-sdk 10.0.10310.0.201 age confidence dotnet-sdk patch

Release Notes

dotnet/msbuild (Microsoft.Build)

v18.4.0

What's Changed

Full Changelog: dotnet/msbuild@v18.3.3...v18.4.0

dotnet/extensions (Microsoft.Extensions.TimeProvider.Testing)

v10.4.0

This release advances the AI abstractions with new hosted file, web search, and reasoning content types, stabilizes MCP and tool approval APIs, adds streaming latency metrics to OpenTelemetry instrumentation, and delivers bug fixes across caching, data ingestion, and resource monitoring.

Experimental API Changes

Now Stable
  • MCP Server Tool Content and Function Call Approval APIs are now stable (previously MEAI001) #​7299
  • FakeLogCollector.GetLogsAsync(CancellationToken) is now stable (previously EXTEXP0003) #​7332
New Experimental APIs
  • New experimental AddExtendedHttpClientLogging overloads with wrapHandlersPipeline parameter (EXTEXP0013) #​7231
Removed Experimental APIs
  • AI Tool Reduction experimental APIs removed (was experimental under MEAI001) #​7353

What's Changed

AI
Telemetry and Observability
HTTP Resilience and Diagnostics
Diagnostics, Health Checks, and Resource Monitoring
Data Ingestion
Caching

Test Improvements

Repository Infrastructure Updates

Acknowledgements

Full Changelog: dotnet/extensions@v10.3.0...v10.4.0

dotnet/dotnet (Microsoft.SourceLink.GitHub)

v10.0.201: .NET 10.0.5 / 10.0.201

You can build .NET 10.0 from the repository by cloning the release tag v10.0.201 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

dotnet/sdk (dotnet-sdk)

v10.0.201

Compare Source

v10.0.200: .NET 10.0.4

Compare Source

Release

v10.0.105

Compare Source

v10.0.104

Compare Source


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@thomhurst thomhurst added dependencies Pull requests that update a dependency file PATCH renovate-bot labels Mar 10, 2026
@thomhurst thomhurst enabled auto-merge (squash) March 10, 2026 18:49
Copy link

@claude claude bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review: chore(deps): update dependency dotnet-sdk to v10.0.200

This is a routine automated dependency update from Renovate Bot, bumping the .NET SDK from 10.0.103 to 10.0.200 (a patch update within the 10.0.x line).

Changes Reviewed

  • global.json — root-level SDK version bump
  • test/ModularPipelines.TestsForTests/global.json — matching SDK version bump in the test project

Assessment

This is a clean, well-structured dependency update. A few observations:

  1. Consistency — Both global.json files are updated together, which is correct. Having mismatched SDK versions between the root and the test project would cause build inconsistencies.

  2. rollForward policy — Both files retain "rollForward": "latestMinor" and "allowPrerelease": false, which is a sound configuration for a production library — it avoids accidental adoption of preview builds.

  3. Patch-to-minor jump — The version moves from 10.0.103 (patch band) to 10.0.200 (the first release of the 10.0.2xx feature band). Feature band updates in .NET can occasionally include tooling changes (e.g., MSBuild behavior, NuGet client updates) beyond pure bug fixes, so it's worth confirming CI passes cleanly before merging.

  4. Auto-merge is enabled — Given this is a feature-band update rather than a pure patch, it may be worth reviewing CI results before auto-merge proceeds, especially for a library project where SDK tooling differences could affect build output or NuGet package metadata.

No architectural concerns. The change is minimal, targeted, and follows the existing project conventions. ✅

@thomhurst thomhurst force-pushed the renovate/dotnet-monorepo branch from 88addc1 to 86904b4 Compare March 10, 2026 22:12
@thomhurst thomhurst changed the title chore(deps): update dependency dotnet-sdk to v10.0.200 chore(deps): update dotnet monorepo Mar 10, 2026
Copy link

@claude claude bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review: chore(deps): update dotnet monorepo

This is a Renovate Bot automated dependency update. A previous review was posted for an earlier commit; this review covers the full current diff.

Changes Reviewed

File Change
Directory.Packages.props Microsoft.Build 18.3.318.4.0 (minor)
global.json dotnet-sdk 10.0.10310.0.200 (feature band)
test/ModularPipelines.TestsForTests/global.json dotnet-sdk 10.0.10310.0.200 (feature band)

Assessment

The changes are clean and well-scoped. A few notes:

  1. Microsoft.Build 18.4.0 — A minor version bump. Minor releases in Microsoft.Build can introduce new MSBuild features or behavior changes (e.g., new evaluation semantics, property/item function additions). Since this project includes MSBuild-related tooling and the Options Generator, it's worth confirming the build pipeline and analyzer projects still produce the same output post-update. The CI run will validate this.

  2. dotnet-sdk 10.0.200 — As noted in the prior review, this crosses a .NET feature band boundary (1xx → 2xx). Feature bands are tooling-level updates that can carry changes to MSBuild, NuGet, Roslyn integration, and templating. This is a higher-impact change than a pure patch. No action needed beyond confirming CI passes.

  3. Consistency — Both global.json files are updated together, which is correct. A mismatch between the root and test/ModularPipelines.TestsForTests/ would cause hard-to-diagnose build issues.

  4. rollForward policy — Retained as latestMinor / allowPrerelease: false across both files. This remains a sound configuration.

No architectural concerns. The update is minimal, targeted, and consistent with project conventions. The combination of the MSBuild minor bump and SDK feature band bump in a single PR is worth a close eye on CI, but there are no issues with the changes themselves. ✅

Copy link

@claude claude bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review: chore(deps): update dotnet monorepo

Two previous reviews have been posted on earlier commits. This review covers the full current diff and checks whether prior observations remain applicable.

Changes in Current Diff

File Change
Directory.Packages.props Microsoft.Build 18.3.318.4.0 (minor)
Directory.Packages.props Microsoft.Extensions.TimeProvider.Testing 10.3.010.4.0 (minor)
global.json dotnet-sdk 10.0.10310.0.200 (feature band)
test/ModularPipelines.TestsForTests/global.json dotnet-sdk 10.0.10310.0.200 (feature band)

Follow-up on Previous Review Notes

  • SDK feature band bump (10.0.1xx → 10.0.2xx) — flagged in both prior reviews. No action needed from the author; CI results are the right gate here.
  • Microsoft.Build 18.4.0 — flagged in the second review for potential MSBuild behavior changes. Again, CI is the correct validation mechanism.
  • Both concerns are inherent to automated dependency updates, not issues with how the PR is structured.

New in This Diff: Microsoft.Extensions.TimeProvider.Testing 10.3.0 → 10.4.0

This package provides FakeTimeProvider and related test utilities from dotnet/extensions. The 10.x line tracks the .NET 10 major version, so this is a standard minor increment. No behavioral concerns expected — this library is test-only and does not affect production runtime behavior.

Overall Assessment

The PR is clean, minimal, and consistent:

  • All version bumps are from trusted first-party Microsoft sources
  • global.json files are updated in sync (root + test project), avoiding potential SDK mismatch issues
  • rollForward: latestMinor and allowPrerelease: false are preserved
  • No manual configuration or logic changes — purely mechanical version bumps

No architectural concerns. Previous review notes have been accounted for; nothing outstanding. Looks good to merge once CI is green. ✅

Copy link

@claude claude bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review: chore(deps): update dotnet monorepo

Two previous reviews have been posted on earlier commits. This review covers the full current diff and checks whether prior observations remain applicable.

Changes in Current Diff

File Change
Directory.Packages.props Microsoft.Build 18.3.318.4.0 (minor)
Directory.Packages.props Microsoft.Extensions.TimeProvider.Testing 10.3.010.4.0 (minor)
global.json dotnet-sdk 10.0.10310.0.200 (feature band)
test/ModularPipelines.TestsForTests/global.json dotnet-sdk 10.0.10310.0.200 (feature band)

Follow-up on Previous Review Notes

  • SDK feature band bump (10.0.1xx → 10.0.2xx) — flagged in both prior reviews. No action needed from the author; CI results are the right gate here.
  • Microsoft.Build 18.4.0 — flagged in the second review for potential MSBuild behavior changes. CI is the correct validation mechanism.
  • Both concerns are inherent to automated dependency updates, not issues with how the PR is structured.

New in This Diff: Microsoft.Extensions.TimeProvider.Testing 10.3.0 → 10.4.0

This package provides FakeTimeProvider and related test utilities from dotnet/extensions. The 10.x line tracks the .NET 10 major version, so this is a standard minor increment. No behavioral concerns expected — this library is test-only and does not affect production runtime behavior.

Overall Assessment

The PR is clean, minimal, and consistent:

  • All version bumps are from trusted first-party Microsoft sources
  • global.json files are updated in sync (root + test project), avoiding potential SDK mismatch issues
  • rollForward: latestMinor and allowPrerelease: false are preserved
  • No manual configuration or logic changes — purely mechanical version bumps

No architectural concerns. Previous review notes have been accounted for; nothing outstanding. Looks good to merge once CI is green. ✅

Copy link

@claude claude bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review: chore(deps): update dotnet monorepo (latest commit)

Four previous reviews have been posted on earlier commits. This review covers the full current diff on the latest commit (76ade549) and notes what is new since the last review.

Full Change Summary

File Package Change Type
Directory.Packages.props Microsoft.Build 18.3.318.4.0 minor
Directory.Packages.props Microsoft.Extensions.Caching.Memory 10.0.410.0.5 patch
Directory.Packages.props Microsoft.Extensions.DependencyInjection 10.0.410.0.5 patch
Directory.Packages.props Microsoft.Extensions.Hosting 10.0.410.0.5 patch
Directory.Packages.props Microsoft.Extensions.Http 10.0.410.0.5 patch
Directory.Packages.props Microsoft.Extensions.TimeProvider.Testing 10.3.010.4.0 minor
Directory.Packages.props Microsoft.SourceLink.GitHub 10.0.20010.0.201 patch
Directory.Packages.props System.CommandLine 2.0.42.0.5 patch
global.json dotnet-sdk 10.0.10310.0.200 feature band
test/ModularPipelines.TestsForTests/global.json dotnet-sdk 10.0.10310.0.200 feature band

New Since Last Review

The latest commit adds the following packages not covered previously:

  • Microsoft.Extensions.Caching.Memory/DependencyInjection/Hosting/Http 10.0.5 — Coordinated patch updates across the Microsoft.Extensions family. These are pure bug-fix releases with no API surface changes expected. Low risk.
  • Microsoft.SourceLink.GitHub 10.0.200 → 10.0.201 — Patch bump to the SourceLink tooling that embeds source file links in NuGet packages. This affects debug symbols/PDB metadata but has no runtime impact. Low risk.
  • System.CommandLine 2.0.4 → 2.0.5 — Patch bump. System.CommandLine is used for CLI argument parsing in this project. Patch releases in this package are typically bug fixes; no breaking changes expected.

Carryover from Previous Reviews

  • dotnet-sdk 10.0.200 feature band bump — previously flagged; CI is the correct gate.
  • Microsoft.Build 18.4.0 minor bump — previously flagged; CI validation applies.
  • Microsoft.Extensions.TimeProvider.Testing 10.4.0 — previously reviewed; no concerns.

Overall Assessment

The PR is clean, well-scoped, and consistent with project conventions:

  • All updates are from first-party Microsoft sources via Renovate Bot
  • The Microsoft.Extensions.* packages are updated as a coordinated group, which avoids version skew between interdependent packages
  • Both global.json files remain in sync
  • rollForward: latestMinor and allowPrerelease: false are preserved
  • No logic or configuration changes — purely mechanical version bumps

No architectural concerns. Previous review notes have been addressed by the coordinated nature of automated updates. Looks good to merge once CI is green. ✅

Copy link

@claude claude bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review: chore(deps): update dotnet monorepo (latest commit)

Five previous reviews have been posted on earlier commits. This review covers the full current diff on the latest commit (8bcebf31) and calls out what is new since the last review.

Full Change Summary

File Package Change Type
Directory.Packages.props Microsoft.Build 18.3.318.4.0 minor
Directory.Packages.props Microsoft.Extensions.Caching.Memory 10.0.410.0.5 patch
Directory.Packages.props Microsoft.Extensions.DependencyInjection 10.0.410.0.5 patch
Directory.Packages.props Microsoft.Extensions.Hosting 10.0.410.0.5 patch
Directory.Packages.props Microsoft.Extensions.Http 10.0.410.0.5 patch
Directory.Packages.props Microsoft.Extensions.TimeProvider.Testing 10.3.010.4.0 minor
Directory.Packages.props Microsoft.SourceLink.GitHub 10.0.20010.0.201 patch
Directory.Packages.props System.CommandLine 2.0.42.0.5 patch
global.json dotnet-sdk 10.0.10310.0.201 patch
test/ModularPipelines.TestsForTests/global.json dotnet-sdk 10.0.10310.0.201 patch

New Since Last Review

The only change since the previous review is:

  • dotnet-sdk 10.0.20010.0.201 in both global.json files — this is a pure patch update within the same 10.0.2xx feature band. Previously, the prior review noted the 10.0.1xx10.0.2xx feature band jump as worth watching in CI. This additional bump is lower risk — it stays within the same band and is purely a bug-fix release. Both global.json files remain in sync, which is correct.

Carryover from Previous Reviews (all still applicable)

  • dotnet-sdk feature band bump (10.0.1xx → 10.0.2xx) — still applies, CI is the correct gate.
  • Microsoft.Build 18.4.0 — minor bump with potential MSBuild behavior changes; CI validates this.
  • Microsoft.Extensions. 10.0.5* — coordinated patch group; low risk.
  • Microsoft.Extensions.TimeProvider.Testing 10.4.0 — test-only library; no production impact.
  • System.CommandLine 2.0.5 — patch; no breaking changes expected.

Overall Assessment

The PR is clean, minimal, and consistent with project conventions:

  • All updates are from first-party Microsoft sources via Renovate Bot
  • Both global.json files remain in sync (root + test project)
  • rollForward: latestMinor and allowPrerelease: false are preserved across both files
  • Microsoft.Extensions.* packages are updated as a coordinated group, avoiding version skew between interdependent packages
  • No logic or configuration changes — purely mechanical version bumps

No architectural concerns. All prior review observations remain addressed. Looks good to merge once CI is green. ✅

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file MINOR PATCH renovate-bot

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants