Skip to content

Merge main into live#54498

Open
dotnet-policy-service[bot] wants to merge 20 commits into
livefrom
main
Open

Merge main into live#54498
dotnet-policy-service[bot] wants to merge 20 commits into
livefrom
main

Conversation

@dotnet-policy-service

@dotnet-policy-service dotnet-policy-service Bot commented Jun 23, 2026 •
edited by github-actions Bot
Loading

Copy link
Copy Markdown
Contributor

Please don't squash-merge this PR.

Internal previews

Toggle expand/collapse
📄 File 🔗 Preview link
.github/workflows/cleanrepo-orphaned-articles.yml .github/workflows/cleanrepo-orphaned-articles
.github/workflows/cleanrepo-orphaned-images.yml .github/workflows/cleanrepo-orphaned-images
.github/workflows/cleanrepo-orphaned-includes.yml .github/workflows/cleanrepo-orphaned-includes
.github/workflows/cleanrepo-orphaned-snippets.yml .github/workflows/cleanrepo-orphaned-snippets
.github/workflows/cleanrepo-redirect-hops.yml .github/workflows/cleanrepo-redirect-hops
.github/workflows/cleanrepo-relative-links.yml .github/workflows/cleanrepo-relative-links
.github/workflows/cleanrepo-replace-redirects.yml .github/workflows/cleanrepo-replace-redirects
.github/workflows/dependabot-bot.yml The name used in the GitHub UI for the workflow
.github/workflows/dependency-review.yml surfacing known-vulnerable versions of the packages declared or updated in the PR.
.github/workflows/docs-verifier.yml .github/workflows/docs-verifier
.github/workflows/markdownlint.yml .github/workflows/markdownlint
.github/workflows/scorecards.yml This workflow uses actions that are not certified by GitHub. They are provided
.github/workflows/snippets5000.yml events on the main branch only.
docs/core/testing/unit-testing-mstest-writing-tests-assertions.md MSTest assertions
docs/core/testing/unit-testing-mstest-writing-tests-deployment-items.md Deploy files alongside MSTest tests
docs/core/testing/unit-testing-mstest-writing-tests-testcontext.md MSTest TestContext
docs/core/testing/unit-testing-mstest-writing-tests.md Write tests with MSTest
docs/csharp/language-reference/compiler-messages/unsafe-code-errors.md Resolve errors and warnings in unsafe code constructs
docs/csharp/language-reference/toc.yml docs/csharp/language-reference/toc
docs/csharp/misc/sorry-we-don-t-have-specifics-on-this-csharp-error.md Coming in C# 15
docs/fsharp/language-reference/verbose-syntax.md Verbose Syntax
docs/navigate/devops-testing/toc.yml docs/navigate/devops-testing/toc

Evangelink and others added 2 commits June 22, 2026 11:02
@Evangelink
Document Assert.Scope() soft assertions and related behaviors (#54409)
fec3fcb 
* Document Assert.Scope() soft assertions and related behaviors

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Address review: code-format .editorconfig, soften suppression wording, unspaced em dashes

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Fix xref-not-found: use inline code for experimental Assert.Scope() API

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

---------

Co-authored-by: Evangelink <amauryleve@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@Evangelink
Add MSTest DeploymentItem sub-page (#54210)
a595c97 
* Add MSTest DeploymentItem sub-page

Adds a new `Write tests` sub-page that documents `DeploymentItemAttribute`
end to end: how it resolves relative paths against the build output
directory, the two constructor overloads, how to stage source files via
`CopyToOutputDirectory` or post-build events, `TestContext.DeploymentDirectory`,
`DeploymentEnabled`, legacy mode caveats, and best practices.

Cross-links the new page from the main Write tests page (description table
+ attribute quick reference) and the TestContext page, and wires the entry
into devops-testing/toc.yml.

Related to microsoft/testfx#8960 (the matching XML doc comment fix on the
attribute is microsoft/testfx#8968).

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Fix DeploymentItem snippet compile issues and rename heading

- Add missing 'using System.IO;' to the two snippets that use File/Path.

- Drop trailing backslash from verbatim folder paths (@"TestFiles\" and @"Resources\") since C# verbatim string literals can't end with a single backslash.

- Rename 'Use a post-build event' section to 'Use a post-build target' to match the MSBuild <Target> example.

Addresses review comments on PR #54210.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

---------

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@github-advanced-security

github-advanced-security AI commented Jun 23, 2026

Copy link
Copy Markdown

You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.

What Enabling Code Scanning Means:

  • The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
  • Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
  • You will be able to see the analysis results for the pull request's branch on this overview once the scans have completed and the checks have passed.

For more information about GitHub Code Scanning, check out the documentation.

@dotnetrepoman dotnetrepoman Bot added this to the June 2026 milestone Jun 23, 2026
gewarren and others added 18 commits June 23, 2026 10:37
@gewarren
Add empty lines for code block rendering (#54493)
85e686f
@BillWagner
Add additional memory safety diagnostics (#54369)
456eb9b 
* Add additional diagnostics

* Add additional existing errors

Add additional errors related to the main topic.

* Consolidation is complete

* Verify error codes.

* Apply suggestions from code review

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

* lint

---------

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
@dependabot
Bump actions/checkout from 6.0.3 to 7.0.0 (#54510)
3fd3b8b 
Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.3 to 7.0.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@df4cb1c...9c091bb)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump the dotnet group with 2 updates (#54542)
d6d88db 
Bumps Microsoft.Extensions.Configuration.Binder from 10.0.7 to 10.0.9
Bumps Microsoft.Extensions.Hosting from 10.0.7 to 10.0.9

---
updated-dependencies:
- dependency-name: Microsoft.Extensions.Configuration.Binder
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: Microsoft.Extensions.Hosting
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump the dotnet group with 2 updates (#54539)
ec36ee8 
Bumps Microsoft.Extensions.AmbientMetadata.Build from 10.6.0 to 10.7.0
Bumps Microsoft.Extensions.Hosting from 10.0.8 to 10.0.9

---
updated-dependencies:
- dependency-name: Microsoft.Extensions.AmbientMetadata.Build
  dependency-version: 10.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
- dependency-name: Microsoft.Extensions.Hosting
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump the dotnet group with 1 update (#54537)
d4426a7 
Bumps Microsoft.Extensions.AI.OpenAI from 10.4.1 to 10.7.0

---
updated-dependencies:
- dependency-name: Microsoft.Extensions.AI.OpenAI
  dependency-version: 10.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump the dotnet group with 3 updates (#54535)
c774b4d 
Bumps Microsoft.Extensions.AI.OpenAI from 10.4.1 to 10.7.0
Bumps Microsoft.Extensions.Configuration from 10.0.5 to 10.0.9
Bumps Microsoft.Extensions.Configuration.UserSecrets from 10.0.5 to 10.0.9

---
updated-dependencies:
- dependency-name: Microsoft.Extensions.AI.OpenAI
  dependency-version: 10.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
- dependency-name: Microsoft.Extensions.Configuration
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: Microsoft.Extensions.Configuration.UserSecrets
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump the dotnet group with 4 updates (#54531)
882bd11 
Bumps Microsoft.Extensions.AI from 10.6.0 to 10.7.0
Bumps Microsoft.Extensions.AI.OpenAI from 10.6.0 to 10.7.0
Bumps Microsoft.Extensions.Configuration from 10.0.8 to 10.0.9
Bumps Microsoft.Extensions.Configuration.UserSecrets from 10.0.8 to 10.0.9

---
updated-dependencies:
- dependency-name: Microsoft.Extensions.AI
  dependency-version: 10.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
- dependency-name: Microsoft.Extensions.AI.OpenAI
  dependency-version: 10.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
- dependency-name: Microsoft.Extensions.Configuration
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: Microsoft.Extensions.Configuration.UserSecrets
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump the dotnet group with 1 update (#54533)
87b24e3 
Bumps Microsoft.Extensions.DependencyInjection from 10.0.8 to 10.0.9

---
updated-dependencies:
- dependency-name: Microsoft.Extensions.DependencyInjection
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump the dotnet group with 1 update (#54532)
14ebce2 
Bumps Microsoft.Agents.AI.OpenAI from 1.9.0 to 1.10.0

---
updated-dependencies:
- dependency-name: Microsoft.Agents.AI.OpenAI
  dependency-version: 1.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump the dotnet group with 2 updates (#54528)
7e4bcd9 
Bumps Microsoft.Extensions.Caching.Memory from 10.0.8 to 10.0.9
Bumps OpenTelemetry.Exporter.Console from 1.15.3 to 1.16.0

---
updated-dependencies:
- dependency-name: Microsoft.Extensions.Caching.Memory
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: OpenTelemetry.Exporter.Console
  dependency-version: 1.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump the dotnet group with 2 updates (#54527)
2635cf2 
Bumps Microsoft.Extensions.Caching.Memory from 10.0.8 to 10.0.9
Bumps OpenTelemetry.Exporter.Console from 1.15.3 to 1.16.0

---
updated-dependencies:
- dependency-name: Microsoft.Extensions.Caching.Memory
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: OpenTelemetry.Exporter.Console
  dependency-version: 1.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump the dotnet group with 3 updates (#54524)
fed5786 
Bumps OpenTelemetry.Exporter.Console from 1.15.3 to 1.16.0
Bumps OpenTelemetry.Exporter.OpenTelemetryProtocol from 1.15.3 to 1.16.0
Bumps OpenTelemetry.Extensions.Hosting from 1.15.3 to 1.16.0

---
updated-dependencies:
- dependency-name: OpenTelemetry.Exporter.Console
  dependency-version: 1.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
- dependency-name: OpenTelemetry.Exporter.OpenTelemetryProtocol
  dependency-version: 1.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
- dependency-name: OpenTelemetry.Extensions.Hosting
  dependency-version: 1.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump the dotnet group with 2 updates (#54520)
ae9dc51 
Bumps Microsoft.Extensions.Logging from 10.0.8 to 10.0.9
Bumps Microsoft.Extensions.Logging.Console from 10.0.8 to 10.0.9

---
updated-dependencies:
- dependency-name: Microsoft.Extensions.Logging
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: Microsoft.Extensions.Logging.Console
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump the dotnet group with 1 update (#54519)
70cce0a 
Bumps Spectre.Console from 0.56.0 to 0.57.0

---
updated-dependencies:
- dependency-name: Spectre.Console
  dependency-version: 0.57.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump the dotnet group with 1 update (#54508)
1a29a39 
Bumps Refit.HttpClientFactory from 11.0.1 to 11.1.0

---
updated-dependencies:
- dependency-name: Refit.HttpClientFactory
  dependency-version: 11.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump the dotnet group with 1 update (#54505)
fa130dd 
Bumps Microsoft.Diagnostics.Tracing.TraceEvent from 3.2.3 to 3.2.4

---
updated-dependencies:
- dependency-name: Microsoft.Diagnostics.Tracing.TraceEvent
  dependency-version: 3.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump the dotnet group with 2 updates (#54518)
c59f88c 
Bumps Microsoft.Extensions.Logging from 10.0.8 to 10.0.9
Bumps OpenTelemetry.Exporter.OpenTelemetryProtocol from 1.15.3 to 1.16.0

---
updated-dependencies:
- dependency-name: Microsoft.Extensions.Logging
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: OpenTelemetry.Exporter.OpenTelemetryProtocol
  dependency-version: 1.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

:octocat: auto-merge

Projects

None yet

Milestone

June 2026

Development

Successfully merging this pull request may close these issues.

4 participants

@github-advanced-security @Evangelink @gewarren @BillWagner