Skip to content

Conversation

@dotnet-policy-service
Copy link
Contributor

@dotnet-policy-service dotnet-policy-service bot commented Oct 9, 2025

Please don't squash-merge this PR.


Internal previews

Toggle expand/collapse
📄 File 🔗 Preview link
.github/workflows/scorecards.yml .github/workflows/scorecards
.github/workflows/stale.yml .github/workflows/stale
docs/core/extensions/dependency-injection-usage.md docs/core/extensions/dependency-injection-usage
docs/core/testing/mstest-analyzers/mstest0001.md docs/core/testing/mstest-analyzers/mstest0001
docs/core/testing/mstest-analyzers/mstest0006.md docs/core/testing/mstest-analyzers/mstest0006
docs/core/testing/mstest-analyzers/mstest0007.md docs/core/testing/mstest-analyzers/mstest0007
docs/core/testing/mstest-analyzers/mstest0017.md docs/core/testing/mstest-analyzers/mstest0017
docs/core/testing/mstest-analyzers/mstest0023.md docs/core/testing/mstest-analyzers/mstest0023
docs/core/testing/mstest-analyzers/mstest0024.md docs/core/testing/mstest-analyzers/mstest0024
docs/core/testing/mstest-analyzers/mstest0025.md docs/core/testing/mstest-analyzers/mstest0025
docs/core/testing/mstest-analyzers/mstest0030.md docs/core/testing/mstest-analyzers/mstest0030
docs/core/testing/mstest-analyzers/mstest0034.md docs/core/testing/mstest-analyzers/mstest0034
docs/core/testing/mstest-analyzers/mstest0039.md docs/core/testing/mstest-analyzers/mstest0039
docs/core/testing/mstest-analyzers/mstest0045.md docs/core/testing/mstest-analyzers/mstest0045
docs/core/testing/mstest-analyzers/mstest0053.md docs/core/testing/mstest-analyzers/mstest0053
docs/core/testing/unit-testing-mstest-migration-v3-v4.md docs/core/testing/unit-testing-mstest-migration-v3-v4
docs/core/tools/dotnet-restore.md docs/core/tools/dotnet-restore
docs/csharp/language-reference/compiler-messages/cs0163.md docs/csharp/language-reference/compiler-messages/cs0163
docs/csharp/language-reference/preprocessor-directives.md docs/csharp/language-reference/preprocessor-directives
docs/csharp/language-reference/toc.yml docs/csharp/language-reference/toc
docs/csharp/misc/cs0436.md docs/csharp/misc/cs0436
docs/csharp/misc/sorry-we-don-t-have-specifics-on-this-csharp-error.md docs/csharp/misc/sorry-we-don-t-have-specifics-on-this-csharp-error
docs/fsharp/language-reference/computation-expressions.md docs/fsharp/language-reference/computation-expressions
docs/fsharp/language-reference/xml-documentation.md docs/fsharp/language-reference/xml-documentation
docs/fundamentals/code-analysis/quality-rules/ca1005.md docs/fundamentals/code-analysis/quality-rules/ca1005
docs/fundamentals/code-analysis/quality-rules/ca1700.md docs/fundamentals/code-analysis/quality-rules/ca1700
docs/fundamentals/code-analysis/quality-rules/ca1864.md docs/fundamentals/code-analysis/quality-rules/ca1864
docs/fundamentals/code-analysis/quality-rules/ca5358.md docs/fundamentals/code-analysis/quality-rules/ca5358
docs/fundamentals/code-analysis/quality-rules/ca5372.md docs/fundamentals/code-analysis/quality-rules/ca5372
docs/fundamentals/code-analysis/quality-rules/ca5391.md docs/fundamentals/code-analysis/quality-rules/ca5391

Note

This table shows preview links for the 30 files with the most changes. For preview links for other files in this PR, select OpenPublishing.Build Details within checks.

dependabot bot and others added 30 commits October 8, 2025 12:05
Bumps [actions/stale](https://github.com/actions/stale) from 10.0.0 to 10.1.0.
- [Release notes](https://github.com/actions/stale/releases)
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md)
- [Commits](actions/stale@3a9db7e...5f858e3)

---
updated-dependencies:
- dependency-name: actions/stale
  dependency-version: 10.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps Microsoft.Extensions.Hosting from 9.0.7 to 9.0.9

---
updated-dependencies:
- dependency-name: Microsoft.Extensions.Hosting
  dependency-version: 9.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.30.5 to 4.30.7.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@3599b3b...e296a93)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.30.7
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps MSTest from 3.10.4 to 4.0.0

---
updated-dependencies:
- dependency-name: MSTest
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps Microsoft.NET.Test.Sdk from 17.14.1 to 18.0.0
Bumps NUnit from 4.3.2 to 4.4.0
Bumps NUnit3TestAdapter from 5.0.0 to 5.2.0

---
updated-dependencies:
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dotnet
- dependency-name: NUnit
  dependency-version: 4.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
- dependency-name: NUnit3TestAdapter
  dependency-version: 5.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps Azure.Storage.Blobs from 12.25.0 to 12.25.1
Bumps Microsoft.Extensions.Azure from 1.12.0 to 1.13.0

---
updated-dependencies:
- dependency-name: Azure.Storage.Blobs
  dependency-version: 12.25.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: Microsoft.Extensions.Azure
  dependency-version: 1.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps Microsoft.Extensions.Configuration from 9.0.8 to 9.0.9
Bumps Microsoft.Extensions.Configuration.UserSecrets from 9.0.8 to 9.0.9

---
updated-dependencies:
- dependency-name: Microsoft.Extensions.Configuration
  dependency-version: 9.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: Microsoft.Extensions.Configuration.UserSecrets
  dependency-version: 9.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps Microsoft.NET.Test.Sdk from 17.14.1 to 18.0.0
Bumps MSTest.TestAdapter from 3.10.4 to 4.0.0
Bumps MSTest.TestFramework from 3.10.5 to 4.0.0
Bumps NUnit3TestAdapter from 5.1.0 to 5.2.0

---
updated-dependencies:
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dotnet
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dotnet
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dotnet
- dependency-name: MSTest.TestAdapter
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dotnet
- dependency-name: MSTest.TestFramework
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dotnet
- dependency-name: NUnit3TestAdapter
  dependency-version: 5.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps Microsoft.NET.Test.Sdk from 17.14.1 to 18.0.0
Bumps xunit.runner.visualstudio from 3.1.4 to 3.1.5

---
updated-dependencies:
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dotnet
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dotnet
- dependency-name: xunit.runner.visualstudio
  dependency-version: 3.1.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: xunit.runner.visualstudio
  dependency-version: 3.1.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps OpenTelemetry.Exporter.Console from 1.12.0 to 1.13.0
Bumps OpenTelemetry.Exporter.OpenTelemetryProtocol from 1.12.0 to 1.13.0
Bumps OpenTelemetry.Extensions.Hosting from 1.12.0 to 1.13.0

---
updated-dependencies:
- dependency-name: OpenTelemetry.Exporter.Console
  dependency-version: 1.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
- dependency-name: OpenTelemetry.Exporter.OpenTelemetryProtocol
  dependency-version: 1.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
- dependency-name: OpenTelemetry.Extensions.Hosting
  dependency-version: 1.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps Microsoft.VSSDK.BuildTools from 17.14.2101 to 17.14.2120
Bumps MSTest.TestAdapter from 3.10.4 to 3.11.0
Bumps MSTest.TestFramework from 3.10.4 to 4.0.0

---
updated-dependencies:
- dependency-name: Microsoft.VSSDK.BuildTools
  dependency-version: 17.14.2120
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: MSTest.TestAdapter
  dependency-version: 3.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
- dependency-name: MSTest.TestFramework
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps OllamaSharp from 5.4.4 to 5.4.7
Bumps OpenTelemetry.Exporter.Console from 1.12.0 to 1.13.0

---
updated-dependencies:
- dependency-name: OllamaSharp
  dependency-version: 5.4.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: OpenTelemetry.Exporter.Console
  dependency-version: 1.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps OllamaSharp from 5.4.6 to 5.4.7
Bumps OpenTelemetry.Exporter.Console from 1.12.0 to 1.13.0

---
updated-dependencies:
- dependency-name: OllamaSharp
  dependency-version: 5.4.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: OpenTelemetry.Exporter.Console
  dependency-version: 1.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps Azure.Identity from 1.16.0 to 1.17.0
Bumps Microsoft.Extensions.AI from 9.9.0 to 9.9.1

---
updated-dependencies:
- dependency-name: Azure.Identity
  dependency-version: 1.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
- dependency-name: Microsoft.Extensions.AI
  dependency-version: 9.9.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps Microsoft.Extensions.AI from 9.9.0 to 9.9.1
Bumps OllamaSharp from 5.4.2 to 5.4.7

---
updated-dependencies:
- dependency-name: Microsoft.Extensions.AI
  dependency-version: 9.9.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: OllamaSharp
  dependency-version: 5.4.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps OllamaSharp from 5.3.6 to 5.4.7

---
updated-dependencies:
- dependency-name: OllamaSharp
  dependency-version: 5.4.7
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps Azure.Identity from 1.16.0 to 1.17.0
Bumps Microsoft.Extensions.AI.Abstractions from 9.9.0 to 9.9.1
Bumps Microsoft.NET.Test.Sdk from 17.14.1 to 18.0.0
Bumps MSTest from 3.10.4 to 4.0.0

---
updated-dependencies:
- dependency-name: Azure.Identity
  dependency-version: 1.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
- dependency-name: Microsoft.Extensions.AI.Abstractions
  dependency-version: 9.9.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dotnet
- dependency-name: MSTest
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Remove the misleading example of default in switch

* Add the missing closing bracket

* Replace return with break in case 3

* Add an example of several cases with single implementation
* Update MSTest analyzer documentation for 4.0.0

* Apply suggestions from code review

* Table formatting

* Update unit-testing-mstest-migration-v3-v4.md
* Update access-modifiers.md

Added description for file access type modifier

* Update using.md
… covariance (#48862)

* Initial plan

* Fix incorrect statement about generic interface inheritance

The previous statement incorrectly claimed that generic interfaces can only inherit from non-generic interfaces if they are covariant. This is false - any generic interface can inherit from a non-generic interface regardless of variance.

The corrected text now:
1. States correctly that generic interfaces CAN inherit from non-generic interfaces (no conditions)
2. Explains that when this happens, the type parameter replaces 'object' in overridden members
3. Uses IEnumerable<T> as an example where T replaces object in output positions
4. Clarifies that because T is used only in output positions, the interface CAN be marked as covariant
5. Notes that if T were used in input positions, it couldn't be covariant

This addresses the issue raised in #43518 and incorporates Bill Wagner's clarification.

Co-authored-by: BillWagner <493969+BillWagner@users.noreply.github.com>

* Update docs/csharp/programming-guide/generics/generic-interfaces.md

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: BillWagner <493969+BillWagner@users.noreply.github.com>
Co-authored-by: Bill Wagner <wiwagn@microsoft.com>
…ocumentation (#48863)

* Initial plan

* Clarify what constitutes a conflict in CS0436 documentation

Co-authored-by: BillWagner <493969+BillWagner@users.noreply.github.com>

* Apply suggestions from code review

Co-authored-by: Meaghan Osagie (Lewis) <mosagie@microsoft.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: BillWagner <493969+BillWagner@users.noreply.github.com>
Co-authored-by: Bill Wagner <wiwagn@microsoft.com>
Co-authored-by: Meaghan Osagie (Lewis) <mosagie@microsoft.com>
…essor errors (#48947)

* Create skeleton

* Consolidate all existing errors

Consolidate existing errors and warnings related to preprocessor directives into this one file.

* Add additional files

I had copilot search for additional files that I had missed earlier in the appropriate folders. These are the ones it found.

* Found a few more files searching

In step 3, use the source from roslyn to find any additional errors and warnings that haven't been covered.

* Combine related errors

Create combined sections for related errors and warnings. Provide links to relevant language-reference articles.

* build issues

* proofread

* Apply suggestions from code review

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

---------

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
It's been replaced by --no-http-cache and we shouldn't be documented it anymore as we want people to use `--no-http-cache`
to modify 'Register services for DI' section
* Initial plan

* Add explanation of tuple deconstruction in tour.md

Co-authored-by: BillWagner <493969+BillWagner@users.noreply.github.com>

* Update docs/fsharp/tour.md

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: BillWagner <493969+BillWagner@users.noreply.github.com>
Co-authored-by: Bill Wagner <wiwagn@microsoft.com>
…essions (#48891)

* Initial plan

* Remove misleading statement about background threads in async operations

Co-authored-by: BillWagner <493969+BillWagner@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: BillWagner <493969+BillWagner@users.noreply.github.com>
)

* Initial plan

* Add applicative computation expressions documentation to and! section

Co-authored-by: BillWagner <493969+BillWagner@users.noreply.github.com>

* Update docs/fsharp/language-reference/computation-expressions.md

* Apply suggestions from code review

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: BillWagner <493969+BillWagner@users.noreply.github.com>
Co-authored-by: Bill Wagner <wiwagn@microsoft.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
…tags (#48918)

* Initial plan

* Add note about broken XML tags in comments without proper XML formatting

Co-authored-by: BillWagner <493969+BillWagner@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: BillWagner <493969+BillWagner@users.noreply.github.com>
Copilot AI and others added 9 commits October 8, 2025 15:08
…#48942)

* Initial plan

* Add introduction to arrow syntax in for...in expression documentation

Co-authored-by: BillWagner <493969+BillWagner@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: BillWagner <493969+BillWagner@users.noreply.github.com>
* Add code example for CA1700 rule (#48932)

* Fix class -> enum for comments (#48932)
@github-advanced-security
Copy link

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.

@dotnetrepoman dotnetrepoman bot added this to the October 2025 milestone Oct 9, 2025
@dotnet-policy-service dotnet-policy-service bot merged commit f3c00fd into live Oct 9, 2025
25 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

9 participants