Skip to content

Bump Microsoft.Build.Framework from 17.11.31 to 18.8.2 - #72

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/nuget/Microsoft.Build.Framework-18.8.2
Closed

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/nuget/Microsoft.Build.Framework-18.8.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 10, 2026

Copy link
Copy Markdown

Updated Microsoft.Build.Framework from 17.11.31 to 18.8.2.

Release notes

Sourced from Microsoft.Build.Framework's releases.

18.8.2

What's Changed

18.7.1

What's Changed

18.6.3

What's Changed

18.5.4

What's Changed

18.4.0

What's Changed

18.3.3

What's Changed

18.0.2

What's Changed

17.14.28

What's Changed

17.14.8

What's Changed

Full Changelog: dotnet/msbuild@v17.14.5...v17.14.8

17.14.5

What's Changed

17.14.0-preview-25177-05

Release

What's Changed

17.14.0-preview-25155-01

Release

What's Changed

Description has been truncated

---
updated-dependencies:
- dependency-name: Microsoft.Build.Framework
  dependency-version: 18.8.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Aug 10, 2026
@JoshuaPeddle

Copy link
Copy Markdown
Owner

Closing: this bump is not applicable as-is.

Microsoft.Build.Framework 18.8.2 pulls Microsoft.NET.StringTools 18.8.2 into the runtime graph, which Microsoft.Build.Locator 1.11.2 rejects:

error MSBL001: A PackageReference to the package 'Microsoft.NET.StringTools' at version '18.8.2'
is present in this project without ExcludeAssets="runtime" and PrivateAssets="all" set.
This can cause errors at run-time due to MSBuild assembly-loading.

It breaks the build in three projects — GameEngine.Editor, GameEngine.Editor.Desktop and GameEngine.Editor.Tests.

Locator deliberately requires MSBuild assemblies stay out of the output so it can resolve them from the installed SDK at runtime. Taking this bump means adding ExcludeAssets="runtime" PrivateAssets="all" to the MSBuild package references, which is a deliberate change to make rather than an automated bump to merge. Staying on 17.11.31 for now.

@dependabot @github

dependabot Bot commented on behalf of github Aug 12, 2026

Copy link
Copy Markdown
Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/nuget/Microsoft.Build.Framework-18.8.2 branch August 12, 2026 00:23
JoshuaPeddle added a commit that referenced this pull request Aug 12, 2026
* Bump all outdated packages to latest

Five pins were behind:

  SkiaSharp.NativeAssets.WebAssembly  4.151.0  -> 4.151.1
  SkiaSharp.Views.Maui.Controls       4.151.0  -> 4.151.1
  SkiaSharp.Views.WindowsForms        4.151.0  -> 4.151.1
  Microsoft.Build.Framework           17.11.31 -> 18.9.6
  Xamarin.AndroidX.Core.SplashScreen  1.0.1.1  -> 1.2.0.3

The three SkiaSharp entries close the split introduced by #73 and #74, which
bumped SkiaSharp and SkiaSharp.NativeAssets.Linux alone and left the rest of
the family a patch behind. GameEngine.Runner.Winforms consumes both SkiaSharp
and SkiaSharp.Views.WindowsForms, so it was the one project actually mixing
versions.

Microsoft.Build.Framework is the bump that closed as PR #72. It fails with
MSBL001 on its own: Microsoft.Build.Framework depends on
Microsoft.NET.StringTools, CentralPackageTransitivePinningEnabled promotes
that transitive to a top-level reference, and the promoted reference does not
inherit the ExcludeAssets/PrivateAssets flags that Microsoft.Build.Locator
requires in order to resolve MSBuild from the installed SDK at runtime.
Microsoft.Build.Framework already carried those flags; StringTools did not
exist as an explicit reference to carry them.

Declaring Microsoft.NET.StringTools explicitly, with the same flags and the
same IncludeAssets list already used for Microsoft.Build.Framework, is what
makes the bump build. Applied to the three projects that reference MSBuild:
GameEngine.Editor, GameEngine.Editor.Desktop and GameEngine.Editor.Tests.

249 tests pass. Note that none of them exercise SceneProjectCompiler, so the
MSBuild assembly-loading path these flags exist to protect is covered by the
build-time MSBL001 check only, not by a runtime test.

* Hold Xamarin.AndroidX.Core.SplashScreen at 1.0.1.1

1.2.0.3 pulls a newer Xamarin.AndroidX.Core than the one Avalonia.Android
12.1.1 binds, and D8 fails packaging the APK:

  Type androidx.core.animation.AnimatorKt$addListener$1 is defined multiple
  times: obj/Release/net10.0-android/lp/72/jl/classes.jar,
         obj/Release/net10.0-android/lp/78/jl/classes.jar

Both CI jobs failed on it; the build job builds the Android head too, so it
was the same single cause twice, not two faults. It did not reproduce locally
because this machine has no Android SDK and that project cannot build here.

The other four bumps in this branch are unaffected and stay.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant