[thomhurst]

This PR contains the following updates:

Package	Type	Update	Change
actions/setup-dotnet	action	minor	v6.0.0 → v6.1.0

---

Release Notes

actions/setup-dotnet

v6.1.0

Compare Source

What's Changed

Enhancements

• Add check-latest input to reuse a locally installed .NET SDK and skip network calls by @​v-mahabaleshwars in #​774
• Add skip-lts-prepass input to optimize .NET SDK installation process by @​v-chiranjib-swain in #​791
• Add fallback install directory when default is not writable by @​v-priyagupta108 in #​785

Documentation

• Document sdk.version validation for rollForward in global.json by @​v-priyagupta108 in #​763
• Docs: Add Microsoft docs link for dotnet-quality options by @​v-priyagupta108 in #​773
• Docs: Updating Documentation in README by @​v-lmvysakh in #​776
• Clarify dotnet-quality behavior for multiple SDK versions by @​v-mahabaleshwars in #​780

Dependency Updates

• Fix security vulnerabilities by @​v-HarithaVattikuti in #​767
• ci: make validation caches read-only by @​philip-gai in #​777
• Bump actions/checkout from 7.0.0 to 7.0.1 by @​dependabot in #​764
• Bump browserslist from 4.28.2 to 4.28.8 by @​dependabot in #​781
• Bump eslint from 10.5.0 to 10.11.0 by @​dependabot in #​772
• Bump eslint-plugin-jest from 29.15.2 to 29.16.6 by @​dependabot in #​771
• Bump undici from 6.28.0 to 6.29.1 by @​dependabot in #​784
• Bump actions/checkout from 7.0.0 to 7.0.1 by @​dependabot in #​788
• Bump handlebars from 4.7.9 to 4.7.10 by @​dependabot in #​792
• Bump brace-expansion by @​dependabot in #​790
• Prepare v6.1.0 release with updated cache dependency by @​v-HarithaVattikuti in #​798

New Contributors

• @​v-lmvysakh made their first contribution in #​776
• @​v-chiranjib-swain made their first contribution in #​791

Full Changelog: actions/setup-dotnet@v6.0.0...v6.1.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

Summary by CodeRabbit

• Chores
  • Updated the .NET setup tooling used across automated build, test, benchmark, and security-analysis workflows.
  • Existing .NET version settings and workflow behavior remain unchanged; these maintenance updates do not change product functionality or affect the end-user experience.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-11-03T07:40:26.984060Z	dd64f2b	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[coderabbitai]

No actionable comments were generated in the recent review.

Walkthrough

CI workflows now use actions/setup-dotnet@v6.1.0 instead of v6.0.0. The configured .NET versions and other workflow behavior remain unchanged.

Changes: CI .NET setup action update

Layer / File(s)	Summary
Update workflow setup action versions .github/workflows/aot.yml, .github/workflows/cloudshop-example.yml, .github/workflows/codeql.yml, .github/workflows/dotnet-build-different-locale.yml, .github/workflows/dotnet.yml, .github/workflows/mock-benchmarks.yml, .github/workflows/platform-smoke.yml, .github/workflows/speed-comparison.yml	The listed workflow jobs now reference actions/setup-dotnet@v6.1.0 instead of v6.0.0.

Estimated code review effort: 2 (Simple) | ~10 minutes

Change: Other

Possibly related issues

• Issue 403 tracks the actions/setup-dotnet v6.1.0 update applied here.

Possibly related PRs

• thomhurst/TUnit#7364: This PR updates the setup action in the engine-tests job added by that PR.

Suggested reviewers: glennawatson

Merge Risk: Minimal · up to dd64f

No actionable merge-blocking risk is identified in this version-only CI dependency update.

Pre-merge checks: 5

Check name	Status	Explanation
Description Check		Check skipped - CodeRabbit’s high-level summary is enabled.
Title check		The title names the main change: the GitHub Action actions/setup-dotnet is updated from v6.0.0 to v6.1.0 across the workflow files. The raw summary confirms this change in every listed workflow, and t…
Docstring Coverage		No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff with cyclomatic complexity of at least 2. Documentat…
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.

Full details: Title check

Explanation

The title names the main change: the GitHub Action actions/setup-dotnet is updated from v6.0.0 to v6.1.0 across the workflow files. The raw summary confirms this change in every listed workflow, and the PR objectives describe the same version bump. The title follows conventional commit style and is specific enough for a teammate scanning history.

Full details: Docstring Coverage

Explanation

No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff with cyclomatic complexity of at least 2. Documentation-only edits and deletions within surviving functions are included; unchanged diff context and fully deleted functions are excluded. Analyzed 0 functions across 0 files. (8 skipped: 8 unsupported.)

Finishing Touches

Generate unit tests (beta)

• Commit to this branch
• Create a new PR

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Warning

Some tools did not complete. Review the errors below.

ast-grep (0.51.1)

ast-grep could not parse rule config: /ast-grep-rules/ast-grep-essentials/rules/ruby/security/jwt-hardcoded-secret-ruby.yml

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

• X
• Mastodon
• Reddit
• LinkedIn

_{A rabbit checked the workflow trail,
And found a fresh setup tag.
The .NET steps now point ahead,
No other settings shifted.
The bunny hops through green-lit jobs,
Then tucks the change in its bag.}

CodeRabbit Verify

• Run CodeRabbit Verify to test the changes in this pull request.

Recent review info

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: 7d4ed821-ff9c-4c64-b2f1-c46a0d7c7275

Commits

Reviewing files that changed from the base of the PR and between 5e823b9 and dd64f2b.

Files selected for processing: 8

• .github/workflows/aot.yml
• .github/workflows/cloudshop-example.yml
• .github/workflows/codeql.yml
• .github/workflows/dotnet-build-different-locale.yml
• .github/workflows/dotnet.yml
• .github/workflows/mock-benchmarks.yml
• .github/workflows/platform-smoke.yml
• .github/workflows/speed-comparison.yml

Included review availability: This review used your included allowance. Your plan provides up to 8 included reviews per hour; 2 remain after this review.

[greptile-apps]

Confidence Score: 5/5

[Medium impact] This version-only update appears safe to merge.

Summary

Updates actions/setup-dotnet from v6.0.0 to v6.1.0 across eight workflows.

• CI jobs now set up .NET with actions/setup-dotnet v6.1.0.

_{Reviews (1) · Last reviewed commit: "chore(deps): update actions/setup-dotnet..." · Reviewed by Greptile}