Bump the all-dependencies group with 8 updates by dependabot[bot] · Pull Request #81 · EvotecIT/FileInspectorX

dependabot · 2026-08-10T18:06:15Z

Updated coverlet.collector from 8.0.1 to 10.0.1.

Release notes

Sourced from coverlet.collector's releases.

10.0.1

Improvements

Coverlet with MTP 2 doesn't show test coverage statistic in console #1907
Avoid unnecessary testhost restarts #1912 by https://github.com/mawosoft

Fixed

Fix inconsistent paths in cobertura reports #1723
Fix when using "is" with "and" in pattern matching, branch coverage is lower than normal #1313
Fix Coverlet flagging a branch for an async functions finally block where none exists #1337
Fix Coverlet Tracker Missing CompilerGeneratedAttribute #1828

Maintenance

Add architecture docs and diagrams for all integrations #1927
Update NuGet packages and .NET SDK versions #1933

Diff between 10.0.0 and 10.0.1

10.0.0 Improvements

Unique Report Filenames (coverlet.MTP and AzDO) #1866
Add --coverlet-file-prefix option for unique report files #1869
Introduce .NET 10 support #1823

Fixed

Fix [BUG] Wrong branch rate on IAsyncEnumerable for generic type #1836
Fix [BUG] Missing Coverage after moving to MTP #1843
Fix [BUG] No coverage reported when targeting .NET Framework with 8.0.1 #1842
Fix [BUG] Behavior changes between MTP and Legacy (msbuild) #1878
Fix [BUG] Coverlet.MTP - Unable to load coverlet.mtp.appsettings.json #1880
Fix [BUG] Coverlet.Collector produces empty report when Mediator.SourceGenerator is referenced #1718 by https://github.com/yusyd
Fix [BUG] Crash during instrumentation (Methods using LibraryImport/DllImport have no body) #1762

Maintenance

Add comprehensive async method tests and documentation for issue #1864
Replace Tmds.ExecFunction Package in coverlet.core.coverage.tests #1833
Add net9.0 and net10.0 targets #1822

Diff between 8.0.1 and 10.0.0

Commits viewable in compare view.

Updated Microsoft.ML.OnnxRuntime from 1.27.1 to 1.28.0.

Release notes

Sourced from Microsoft.ML.OnnxRuntime's releases.

1.28.0 Announcements & Breaking Changes

Upgraded to ONNX 1.22.0 and protobuf 6.33.5 (#28754, #29606, #28967). Graph optimizer opset version checks were updated accordingly (#28966).
cuDNN and cuFFT are now optional at runtime for the CUDA EP, and nvrtc is no longer linked, which significantly reduces the required CUDA redistributable footprint (#29252, #29808, #29705, #29620).
An experimental C/C++ API surface was introduced. OrtModelPackageApi now lives in the experimental C API and may change in future releases (#28746, #29142, #28990).
Deprecated / removed:
- SkipLayerNorm strict mode is deprecated (#29388).
- The TensorRT fused causal attention kernels were removed from the CUDA EP (#29143).
- The dynamic WGSL generator (duktape/Node) path was removed in favor of the Python wgsl-gen implementation (#29141, #28355).
- CUDA_QUANT_PREPROCESS is off by default (#29687).
NPM packages are now published from the CUDA 13 pipeline (#28773).
The CUDA 12.8 package architecture list was refreshed for this release (#29711).

Security Fixes

Memory safety & input validation

Hardened the ORT FlatBuffer model loader against malformed buffers, and removed now-redundant table offset validation (#28186, #29068)
Fixed type confusion in raw-pointer bind_input causing an out-of-bounds write (#28839)
Fixed out-of-bounds pointer in TensorAt for sub-byte packed types (#28973)
Fixed arbitrary memory read, out-of-bounds dereference, and other OOB accesses in kernels (#28991, #29011, #29012, #29014)
Validated Col2Im inputs to prevent heap over-read (#28706)
Hardened CropAndResize against malformed crop_size tensors (#28766)
Validated BeamSearch vocab_size against logits width (#28774)
Fixed bounds in WhisperDecoderSubgraph::CreateInitialFeeds (#29239)
Validated SparseAttention CSR indices/key lengths and rejected zero-dimension block_row_indices (#29015, #29242)
Clamped derived sequence lengths and KV-cache index in CUDA GroupQueryAttention, and fixed a CPU GQA out-of-bounds read in the past-KV buffer (#29240, #29447)
Clamped 1D attention mask_index to valid bounds (#29449)
Validated MaxpoolWithMask kernel rank against input spatial rank (#29253)
Rejected CUDA BERT EmbedLayerNorm/SkipLayerNorm shapes exceeding 32-bit output indexing (#29264)
Fixed the optional-output guard in DecoderAttention/MultiHeadAttention shape inference and negative-axis handling in ExpandDims shape inference (#29268, #29448)
Fixed TreeEnsemble target id validation and added input validation to LinearClassifier (#29293, #29060)
Fixed DynamicQuantizeLSTM zero-point/scale validation typos (#29462)
Handled non-trivially-copyable types in Loop/Scan output concatenation (#29397)
Normalized bool tensor raw_data to {0, 1} on unpack (#29238)
Addressed hardening gaps in Resize, PadFusion, and LoRA handling (#28779, #28780, #28801)
Fixed unbounded lifetime on WithOutputTensor in the Rust bindings (#29251)

Integer overflow & allocation size

Guarded MlasConvPrepare working-buffer products and ConvTranspose pad computation with SafeInt (#29444, #29446)
Fixed signed-int overflow in SamplingState::Init that could cause a heap buffer overflow (#29443)
Hardened QMoE against integer overflow and partial K tiles (#29067)
Validated B/scales/zero-points shape in MatMulNBits::PrePack (#29445)
Pre-checked ConstantOfShape output size against the input initializer before constant folding (#28751)
Fixed integer overflow in RKNPU implicit bias allocation (#29249)
Fixed WebGPU out-of-bounds reads in Pad (int64/int32 truncation), Slice, and GatherBlockQuantized (#28721, #28704, #28718)

Supply chain & tooling

... (truncated)

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.3.0 to 18.8.1.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.8.1 What's Changed

Fix protocol negotiation timeout when STJ reflection is disabled (18.8.1) by @nohwnd in Fix protocol negotiation timeout when STJ reflection is disabled (18.8.1) microsoft/vstest#16281

Full Changelog: microsoft/vstest@v18.8.0...v18.8.1

18.8.0 What's Changed

Migrate from Newtonsoft.Json to System.Text.Json / Jsonite (merge to main) by @nohwnd in feat: migrate from Newtonsoft.Json to System.Text.Json / Jsonite (merge to main) microsoft/vstest#15687
- For more detail refer to https://devblogs.microsoft.com/dotnet/vs-test-is-removing-its-newtonsoft-json-dependency/
Create source-only filter package by @Youssef1313 in Create source-only filter package microsoft/vstest#15638
Add ARM64 msdia140.dll support to test platform packages by @nohwnd in Cherry-pick: Add ARM64 msdia140.dll support to test platform packages microsoft/vstest#15692
Fix mutex cleanup crash on macOS/Linux by @nohwnd in Fix mutex cleanup crash on macOS/Linux microsoft/vstest#15684
Restrict artifact temp directory permissions on Unix by @nohwnd in Restrict artifact temp directory permissions on Unix microsoft/vstest#15729
Add support for filtering uncategorized tests with TestCategory=None by @Evangelink in Add support for filtering uncategorized tests with TestCategory=None microsoft/vstest#15727
Fix SCI binding failure in DTA hosts (main) by @nohwnd in Fix SCI binding failure in DTA hosts (main) microsoft/vstest#15724
Fix HTML logger parallel file collision by @nohwnd in [fix] Fix HTML logger parallel file collision microsoft/vstest#15435
Improve error message when testhost cannot be found by @nohwnd in [fix] Improve error message when testhost cannot be found microsoft/vstest#16053
Fix HTML logger exception on invalid XML chars in test display names by @nohwnd in [fix] Fix HTML logger exception on invalid XML chars in test display names microsoft/vstest#16051

Full Changelog: microsoft/vstest@v18.7.0...v18.8.0

18.7.0 What's Changed

Add ARM64 msdia140.dll support to test platform packages by @jamesmcroft in Add ARM64 msdia140.dll support to test platform packages microsoft/vstest#15689
Update System.Memory from 4.5.5 to 4.6.3 by @nohwnd in Update System.Memory from 4.5.5 to 4.6.3 microsoft/vstest#15706

New Contributors

@jamesmcroft made their first contribution in Add ARM64 msdia140.dll support to test platform packages microsoft/vstest#15689

Full Changelog: microsoft/vstest@v18.6.0...v18.7.0

18.6.0 What's Changed

Revert removal of Video Recorder by @nohwnd in Revert removal of Video Recorder microsoft/vstest#15336
Speed up blame by filtering non-.NET processes from dump collection by @nohwnd in Speed up blame tests by filtering non-.NET processes from dump collection microsoft/vstest#15518
Add README.md to NuGet packages by @nohwnd in Add README.md to NuGet packages microsoft/vstest#15550
Report child process info on connection timeout by @nohwnd in Report child process info on connection timeout microsoft/vstest#15603

Changes to tests and infra

Brand as 18.6 by @nohwnd in Brand as 18.6 microsoft/vstest#15423
Upgrading code coverage version to 18.5.1, by @fhnaseer in Upgrading code coverage version to 18.5.1, microsoft/vstest#15422
Updating System.Collections.Immutable to 9.0.11 by @MSLukeWest in Updating System.Collections.Immutable to 9.0.11 microsoft/vstest#15425
Fix attachVS when used for debugging integration tests by @nohwnd in Fix attachVS when used for debugging integration tests microsoft/vstest#15451
Replace dotnet.config, with global.json by @nohwnd in Replace dotnet.config, with global.json microsoft/vstest#15449
Document debugging integration tests with AttachVS by @Copilot in Document debugging integration tests with AttachVS microsoft/vstest#15452
Fix stack overflow tests by @nohwnd in Fix stack overflow tests microsoft/vstest#15461
Make TestAssets.sln buildable locally by @Youssef1313 in Make TestAssets.sln buildable locally microsoft/vstest#15466
Try filtering out tests by @nohwnd in Try filtering out tests microsoft/vstest#15463
Build just once when tfms run in parallel by @nohwnd in Build just once when tfms run in parallel microsoft/vstest#15465
Review simplify compatibility sources, deduplicate tests by @nohwnd in Review simplify compatibility sources, deduplicate tests microsoft/vstest#15472
Cleanup dead TRX code by @Youssef1313 in Cleanup dead TRX code microsoft/vstest#15474
Update .NET runtimes to 8.0.25, 9.0.14, and 10.0.4 by @nohwnd in Update .NET runtimes to 8.0.25, 9.0.14, and 10.0.4 microsoft/vstest#15481
Compat matrix checker by @nohwnd in Compat matrix checker microsoft/vstest#15480
Add trx analysis skill by @nohwnd in Add trx analysis skill microsoft/vstest#15486
Split integration tests to single tfm and multi tfm project by @nohwnd in Split integration tests to single tfm and multi tfm project microsoft/vstest#15484
Update matrix by @nohwnd in Update matrix microsoft/vstest#15477
Break infinite restore loop in VS by @nohwnd in Break infinite restore loop in VS microsoft/vstest#15503
Use global package cache for build, and local for running integration tests by @nohwnd in Use global package cache for build, and local for running integration tests microsoft/vstest#15500
Update contributing by @nohwnd in Update contributing microsoft/vstest#15505
Reduce test wall-clock time by increasing minThreads by @drognanar in Reduce test wall-clock time by increasing minThreads microsoft/vstest#15502
Indicator flakiness by @nohwnd in Indicator flakiness microsoft/vstest#15513
Fix ci build by @nohwnd in Fix ci build microsoft/vstest#15515
Fix thread safety issues by @Evangelink in Fix thread safety issues microsoft/vstest#15512
Optimize DotnetSDKSimulation_PostProcessing test (163s → 61s) by @nohwnd in Optimize DotnetSDKSimulation_PostProcessing test (163s → 61s) microsoft/vstest#15516
Build isolated test assets for single TFM instead of 7 by @nohwnd in Build isolated test assets for single TFM instead of 7 microsoft/vstest#15517
Remove unused dependencies from Library.IntegrationTests by @nohwnd in Remove unused dependencies from Library.IntegrationTests microsoft/vstest#15527
Remove printing _attachments content to console by @nohwnd in Remove printing _attachments content to console microsoft/vstest#15520
Add Linux/macOS test filtering guide to CONTRIBUTING.md by @nohwnd in Add Linux/macOS test filtering guide to CONTRIBUTING.md microsoft/vstest#15521
Change integration test parallelization from ClassLevel to MethodLevel by @nohwnd in Change integration test parallelization from ClassLevel to MethodLevel microsoft/vstest#15526
Unify target framework checks with IsNetFrameworkTarget/IsNetTarget by @nohwnd in Unify target framework checks with IsNetFrameworkTarget/IsNetTarget microsoft/vstest#15523
Add unattended work instructions to copilot-instructions.md by @nohwnd in Add unattended work instructions to copilot-instructions.md microsoft/vstest#15531
Reduce code style rule severity from warning to suggestion by @nohwnd in Reduce code style rule severity from warning to suggestion microsoft/vstest#15522
Remove Debug/Release line number branching from tests by @nohwnd in Remove Debug/Release line number branching from tests microsoft/vstest#15519
Revise unattended work instructions in copilot-instructions.md by @nohwnd in Revise unattended work instructions in copilot-instructions.md microsoft/vstest#15532
Improve CompatibilityRowsBuilder error message with diagnostic details by @nohwnd in Improve CompatibilityRowsBuilder error message with diagnostic details microsoft/vstest#15529
docs: add git worktree and upstream sync workflow to copilot-instructions.md by @nohwnd in docs: add git worktree and upstream sync workflow to copilot-instructions.md microsoft/vstest#15538
Add VSIX runner to smoke tests by @nohwnd in Add VSIX runner to smoke tests microsoft/vstest#15541
Remove deprecated WebTest and TMI test methods by @nohwnd in Remove deprecated WebTest and TMI test methods microsoft/vstest#15525
Fix compatibility test failures for legacy vstest.console and MSTest adapter by @nohwnd in Fix compatibility test failures for legacy vstest.console and MSTest adapter microsoft/vstest#15534
Convert TestPlatform.sln to slnx format by @nohwnd in Convert TestPlatform.sln to slnx format microsoft/vstest#15551
Convert test/TestAssets .sln files to .slnx format by @nohwnd in Convert test/TestAssets .sln files to .slnx format microsoft/vstest#15557
... (truncated)

18.5.1 What's Changed

Fix System.Collections.Immutable binding mismatch in Common.dll (rel/18.5) by @nohwnd in Fix System.Collections.Immutable binding mismatch in Common.dll (rel/18.5) microsoft/vstest#15720
Port verify-binding-redirects.ps1 to rel/18.5 by @nohwnd in Port verify-binding-redirects.ps1 to rel/18.5 microsoft/vstest#15719
Bump to 18.5.1 by @nohwnd in Bump to 18.5.1 microsoft/vstest#15721

Full Changelog: microsoft/vstest@v18.5.0...v18.5.1

18.5.0

⚠️ Unlisted on Nuget, because of #15718

What's Changed

Add runtime configs by @nohwnd in Add runtime configs microsoft/vstest#15377
Add net8.0 target for TranslationLayer by @nohwnd in Add net8.0 target for TranslationLayer microsoft/vstest#15375
Determine architecture of remote process on windows by @nohwnd in Determine architecture of remote process on windows microsoft/vstest#15396
Updating System.Collections.Immutable package reference to version 9.0.0 by @MSLukeWest in Updating System.Collections.Immutable package reference to version 9.0.0 microsoft/vstest#15392
Dump via netcore tool on windows by @nohwnd in Dump via netcore tool on windows microsoft/vstest#15397
Fix answer file splitting by @nohwnd in Fix answer file splitting microsoft/vstest#15381
Run tests against vsix runner by @nohwnd in Run tests against vsix runner microsoft/vstest#15419

Full Changelog: microsoft/vstest@v18.4.0...v18.5.0

18.4.0 What's Changed

Add LoongArch64 support by @stdmnpkg in Add LoongArch64 support microsoft/vstest#15359
Refactor Condition evaluation by @Youssef1313 in Refactor Condition evaluation microsoft/vstest#15357
Adding info on extensions points part 1 by @nohwnd in Adding info on extensions points part 1 microsoft/vstest#15360
Add option to ask for uploading code QL before the standard window ends by @nohwnd in Add option to ask for uploading code QL before the standard window ends microsoft/vstest#15373
Update runtime versions by @nohwnd in Update runtime versions microsoft/vstest#15372
Fix .NET 10 regression for traits by @Youssef1313 in Fix .NET 10 regression for traits microsoft/vstest#15370
Update target frameworks to net10.0 and net11.0 by @dotnet-maestro[bot] in Update target frameworks to net10.0 and net11.0 microsoft/vstest#15349
Fix names in pipeline matrix so we don't have to align them by @nohwnd in Fix names in pipeline matrix so we don't have to align them microsoft/vstest#15365
Update SECURITY.md by @Youssef1313 in Update SECURITY.md microsoft/vstest#15342

New Contributors

@stdmnpkg made their first contribution in Add LoongArch64 support microsoft/vstest#15359

Full Changelog: microsoft/vstest@v18.3.0...v18.4.0

Commits viewable in compare view.

Updated System.Formats.Asn1 from 8.0.1 to 10.0.10.

Release notes

Sourced from System.Formats.Asn1's releases.

10.0.0-preview.6.25358.103

You can build .NET 10.0 Preview 6 from the repository by cloning the release tag v10.0.0-preview.6.25358.103 and following the build instructions in the main README.md.