Bump Microsoft.Build.Utilities.Core from 18.9.6 to 18.10.1

[dependabot]

Updated Microsoft.Build.Utilities.Core from 18.9.6 to 18.10.1.

Release notes

Sourced from Microsoft.Build.Utilities.Core's releases.

18.10.1

What's Changed

• [vs16.11] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [vs16.11] Update dependencies from dotnet/arcade dotnet/msbuild#13103
• [vs17.12] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [vs17.12] Update dependencies from dotnet/arcade dotnet/msbuild#13796
• [vs17.8] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [vs17.8] Update dependencies from dotnet/arcade dotnet/msbuild#13902
• [vs17.11] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [vs17.11] Update dependencies from dotnet/arcade dotnet/msbuild#13903
• [vs17.12] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [vs17.12] Update dependencies from dotnet/arcade dotnet/msbuild#13909
• [vs17.12] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [vs17.12] Update dependencies from dotnet/arcade dotnet/msbuild#13986
• Add vs18.9 to merge-flow config; retire vs18.3 by @​JanProvaznik in Add vs18.9 to merge-flow config; retire vs18.3 dotnet/msbuild#14214
• Bump labeler-cache-retention to use issue-labeler v2.1.0 by @​jeffhandley in Bump labeler-cache-retention to use issue-labeler v2.1.0 dotnet/msbuild#14171
• Bump main to 18.10.0 after vs18.9 snap by @​JanProvaznik in Bump main to 18.10.0 after vs18.9 snap dotnet/msbuild#14216
• Improve release skill: Phase 2 DARC rules, VMR backflow, deterministic baseline by @​JanProvaznik in Improve release skill: Phase 2 DARC rules, VMR backflow, deterministic baseline dotnet/msbuild#14220
• Determinize release: hardcode OptProf baseline + Phase 3.2 baseline resolver by @​JanProvaznik in Determinize release: hardcode OptProf baseline + Phase 3.2 baseline resolver dotnet/msbuild#14222
• Serialize BuildRequestConfiguration.RequestedTargets to fix solution metaproject MSB4057 in parallel builds by @​ViktorHofer in Serialize BuildRequestConfiguration.RequestedTargets to fix solution metaproject MSB4057 in parallel builds dotnet/msbuild#14223
• [main] Update dependencies from nuget/nuget.client by @​dotnet-maestro[bot] in [main] Update dependencies from nuget/nuget.client dotnet/msbuild#14203
• Core support for AbsolutePath/FileInfo/DirectoryInfo and ITaskItem as task parameters by @​baronfel in Core support for AbsolutePath/FileInfo/DirectoryInfo and ITaskItem<T> as task parameters dotnet/msbuild#13971
• [main] Update dependencies from dotnet/roslyn by @​dotnet-maestro[bot] in [main] Update dependencies from dotnet/roslyn dotnet/msbuild#14206
• Fix existence cache kind poisoning by @​AlesProkop in Fix existence cache kind poisoning dotnet/msbuild#14249
• [main] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in [main] Source code updates from dotnet/dotnet dotnet/msbuild#14226
• Don't disable the MSBuild server for /mt builds when node reuse is off by @​AR-May in Don't disable the MSBuild server for /mt builds when node reuse is off dotnet/msbuild#14248
• Enhance expert reviewer guidelines with additional checks. by @​AR-May in Enhance expert reviewer guidelines with additional checks. dotnet/msbuild#14255
• [main] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in [main] Source code updates from dotnet/dotnet dotnet/msbuild#14253
• [main] Update dependencies from dotnet/roslyn by @​dotnet-maestro[bot] in [main] Update dependencies from dotnet/roslyn dotnet/msbuild#14268
• [main] Update dependencies from nuget/nuget.client by @​dotnet-maestro[bot] in [main] Update dependencies from nuget/nuget.client dotnet/msbuild#14267
• Bump github/gh-aw-actions/setup from 0.81.6 to 0.82.2 by @​dependabot[bot] in Bump github/gh-aw-actions/setup from 0.81.6 to 0.82.2 dotnet/msbuild#14266
• Avoid boxing the struct enumerator in PropertyDictionary.GetEnumerator() by @​nareshjo in Avoid boxing the struct enumerator in PropertyDictionary<T>.GetEnumerator() dotnet/msbuild#14272
• Refresh copy marker when implementation output changes by @​AlesProkop in Refresh copy marker when implementation output changes dotnet/msbuild#14231
• Send task-host build process environment as delta by @​OvesN in Send task-host build process environment as delta dotnet/msbuild#14126
• Add regression coverage for metadata newline preservation by @​VolPlita in Add regression coverage for metadata newline preservation dotnet/msbuild#14261
• Fix EmbedInBinlog items with relative paths from child projects by @​huulinhnguyen-dev in Fix EmbedInBinlog items with relative paths from child projects dotnet/msbuild#13990
• Stop requiring VersionPrefix updates in servicing - insert prerelease versions to VS by @​ViktorHofer in Stop requiring VersionPrefix updates in servicing - insert prerelease versions to VS dotnet/msbuild#14277
• Fix WriteLinesToFile rewriting unchanged file when custom encoding is used by @​huulinhnguyen-dev in Fix WriteLinesToFile rewriting unchanged file when custom encoding is used dotnet/msbuild#14146
• Enable trim/AOT analyzers for Microsoft.Build and clean up annotations by @​JeremyKuhne in Enable trim/AOT analyzers for Microsoft.Build and clean up annotations dotnet/msbuild#14064
• [automated] Merge branch 'vs18.9' => 'main' by @​github-actions[bot] in [automated] Merge branch 'vs18.9' => 'main' dotnet/msbuild#14291
• Fix MicroBuild plugin feed URL to use allowed pkgs.dev.azure.com format by @​AlesProkop in Fix MicroBuild plugin feed URL to use allowed pkgs.dev.azure.com format dotnet/msbuild#14295
• Pass ExcludeRestorePackageImports during restore to avoid redundant evaluations by @​ViktorHofer with @​Copilot in Pass ExcludeRestorePackageImports during restore to avoid redundant evaluations dotnet/msbuild#14274
• [vs18.7] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [vs18.7] Update dependencies from dotnet/arcade dotnet/msbuild#13988
• Adopt Clever Test Selection (CTS) as parallel, non-blocking PR pipeline by @​jankratochvilcz in Adopt Clever Test Selection (CTS) as parallel, non-blocking PR pipeline dotnet/msbuild#14212
• Harden exceptions when connecting to server by @​JanProvaznik in Harden exceptions when connecting to server dotnet/msbuild#14292
• Update MicrosoftBuildVersion in analyzer template by @​github-actions[bot] in Update MicrosoftBuildVersion in analyzer template dotnet/msbuild#13886
• Fix MSBuild Server client dropping build result under WaitAny race (#​14172) by @​JanProvaznik in Fix MSBuild Server client dropping build result under WaitAny race (#14172) dotnet/msbuild#14251
• Partially revert #​13660: remove NuGet RestoreTask transient TaskHost workaround by @​JanProvaznik in Partially revert #13660: remove NuGet RestoreTask transient TaskHost workaround dotnet/msbuild#14297
• Disable daily AI credits guardrail for Expert Code Review workflow by @​JanProvaznik with @​Copilot in Disable daily AI credits guardrail for Expert Code Review workflow dotnet/msbuild#14314
• Localized file check-in by OneLocBuild Task: Build definition ID 9434: Build ID 14614733 by @​dotnet-bot in Localized file check-in by OneLocBuild Task: Build definition ID 9434: Build ID 14614733 dotnet/msbuild#14246
• Add opt-in partial (stop-after-pass) project evaluation by @​ViktorHofer in Add opt-in partial (stop-after-pass) project evaluation dotnet/msbuild#14290
• Use partial evaluation for -getProperty/-getItem without a target by @​ViktorHofer in Use partial evaluation for -getProperty/-getItem without a target dotnet/msbuild#14296
• [main] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in [main] Source code updates from dotnet/dotnet dotnet/msbuild#14324
• [main] Update dependencies from dotnet/roslyn by @​dotnet-maestro[bot] in [main] Update dependencies from dotnet/roslyn dotnet/msbuild#14333
• [main] Update dependencies from nuget/nuget.client by @​dotnet-maestro[bot] in [main] Update dependencies from nuget/nuget.client dotnet/msbuild#14330
• Bump github/gh-aw-actions/setup from 0.82.2 to 0.82.8 by @​dependabot[bot] in Bump github/gh-aw-actions/setup from 0.82.2 to 0.82.8 dotnet/msbuild#14328
• Restrict partial evaluation to ProjectInstance by @​ViktorHofer in Restrict partial evaluation to ProjectInstance dotnet/msbuild#14340
  ... (truncated)

Commits viewable in compare view.

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[C0nquistadore]

Closing this one: the update cannot be taken on .NET 10, and this is by design rather than a bug.

What fails

The Linux CI job fails in the Pack Dibix.Sdk.Cli (Release) step:

error NU5019: File not found: '.../src/Dibix.Sdk.Cli/bin/Release/net10.0/Microsoft.Build.Framework.dll'

Why

Microsoft.Build.Utilities.Core 18.10.1 dropped lib/net10.0 in favour of lib/net11.0. On a net10.0 project NuGet therefore resolves only the compile asset ref/netstandard2.0 and no runtime asset at all, so the MSBuild assemblies are no longer copied to the output directory. The build still succeeds (hence only the "doesn't support net10.0" warnings), and the breakage surfaces at pack time.

This is documented behaviour. From the package's own README.md:

The netstandard2.0 target of this build is configured only to output reference assemblies; at runtime MSBuild will be net11.0 or net472. Please use the net11.0-targeted assemblies for .NET 11+ scenarios.

(18.9.6 carries the same text with net10.0; context in dotnet/msbuild#6148.)

MSBuild only ships implementation assemblies for net472 and for the TFM of the SDK its band ships in. The minor number tracks Visual Studio, not .NET:

• 18.9.x → VS 18.9 → .NET 10 SDK (net10.0) — confirmed by dotnet msbuild -version reporting 18.9.11.42413 on SDK 10.0.401 and 18.9.6.38015 on 10.0.400
• 18.10.x → VS 18.10 → .NET 11 SDK (net11.0)

Why the usual workaround does not apply

The guidance to reference MSBuild with ExcludeAssets="runtime" assumes the code runs inside MSBuild. Dibix.Sdk.Cli is a standalone tool and PublicSqlDataSchemaModelLoader builds a fake IBuildEngine plus a reflected TaskLoggingHelper to drive the DacFx task outside of MSBuild, so the implementation assemblies genuinely have to be redistributed in tools/net10.0 — which is exactly what Dibix.Sdk.Cli.targets does and why packing fails.

Resolution

Pinned to the 18.9.x band in 63108e5, with a Dependabot ignore for >=18.10.0. Patch updates within 18.9.x are still proposed, so servicing and security fixes keep flowing — the same way 17.11.4 → 17.11.48 delivered the CVE-2025-55247 fix during .NET 8.

Since 10.0.4xx is the last feature band of .NET 10, no future MSBuild band will target net10.0, making 18.9.x the terminal band for this LTS. .NET 11 is STS and is skipped, so this will be revisited when the SDK projects move to .NET 12.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.