chore: update dotnet monorepo (major)

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update
Microsoft.Build.Utilities.Core (source)	17.14.28 → 18.10.1					nuget	major
Microsoft.CodeAnalysis.Analyzers	3.11.0 → 5.9.0					nuget	major
Microsoft.CodeAnalysis.CSharp.Workspaces	4.14.0 → 5.9.0					nuget	major
Microsoft.SourceLink.GitHub	8.0.0 → 10.0.401					nuget	major
dotnet-sdk	8.0.425 → 10.0.401					dotnet-sdk	major

---

Release Notes

dotnet/msbuild (Microsoft.Build.Utilities.Core)

v18.10.1

What's Changed

• [vs16.11] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​13103
• [vs17.12] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​13796
• [vs17.8] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​13902
• [vs17.11] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​13903
• [vs17.12] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​13909
• [vs17.12] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​13986
• Add vs18.9 to merge-flow config; retire vs18.3 by @​JanProvaznik in #​14214
• Bump labeler-cache-retention to use issue-labeler v2.1.0 by @​jeffhandley in #​14171
• Bump main to 18.10.0 after vs18.9 snap by @​JanProvaznik in #​14216
• Improve release skill: Phase 2 DARC rules, VMR backflow, deterministic baseline by @​JanProvaznik in #​14220
• Determinize release: hardcode OptProf baseline + Phase 3.2 baseline resolver by @​JanProvaznik in #​14222
• Serialize BuildRequestConfiguration.RequestedTargets to fix solution metaproject MSB4057 in parallel builds by @​ViktorHofer in #​14223
• [main] Update dependencies from nuget/nuget.client by @​dotnet-maestro[bot] in #​14203
• Core support for AbsolutePath/FileInfo/DirectoryInfo and ITaskItem as task parameters by @​baronfel in #​13971
• [main] Update dependencies from dotnet/roslyn by @​dotnet-maestro[bot] in #​14206
• Fix existence cache kind poisoning by @​AlesProkop in #​14249
• [main] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in #​14226
• Don't disable the MSBuild server for /mt builds when node reuse is off by @​AR-May in #​14248
• Enhance expert reviewer guidelines with additional checks. by @​AR-May in #​14255
• [main] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in #​14253
• [main] Update dependencies from dotnet/roslyn by @​dotnet-maestro[bot] in #​14268
• [main] Update dependencies from nuget/nuget.client by @​dotnet-maestro[bot] in #​14267
• Bump github/gh-aw-actions/setup from 0.81.6 to 0.82.2 by @​dependabot[bot] in #​14266
• Avoid boxing the struct enumerator in PropertyDictionary.GetEnumerator() by @​nareshjo in #​14272
• Refresh copy marker when implementation output changes by @​AlesProkop in #​14231
• Send task-host build process environment as delta by @​OvesN in #​14126
• Add regression coverage for metadata newline preservation by @​VolPlita in #​14261
• Fix EmbedInBinlog items with relative paths from child projects by @​huulinhnguyen-dev in #​13990
• Stop requiring VersionPrefix updates in servicing - insert prerelease versions to VS by @​ViktorHofer in #​14277
• Fix WriteLinesToFile rewriting unchanged file when custom encoding is used by @​huulinhnguyen-dev in #​14146
• Enable trim/AOT analyzers for Microsoft.Build and clean up annotations by @​JeremyKuhne in #​14064
• [automated] Merge branch 'vs18.9' => 'main' by @​github-actions[bot] in #​14291
• Fix MicroBuild plugin feed URL to use allowed pkgs.dev.azure.com format by @​AlesProkop in #​14295
• Pass ExcludeRestorePackageImports during restore to avoid redundant evaluations by @​ViktorHofer with @​Copilot in #​14274
• [vs18.7] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​13988
• Adopt Clever Test Selection (CTS) as parallel, non-blocking PR pipeline by @​jankratochvilcz in #​14212
• Harden exceptions when connecting to server by @​JanProvaznik in #​14292
• Update MicrosoftBuildVersion in analyzer template by @​github-actions[bot] in #​13886
• Fix MSBuild Server client dropping build result under WaitAny race (#​14172) by @​JanProvaznik in #​14251
• Partially revert #​13660: remove NuGet RestoreTask transient TaskHost workaround by @​JanProvaznik in #​14297
• Disable daily AI credits guardrail for Expert Code Review workflow by @​JanProvaznik with @​Copilot in #​14314
• Localized file check-in by OneLocBuild Task: Build definition ID 9434: Build ID 1461473 by @​dotnet-bot in #​14246
• Add opt-in partial (stop-after-pass) project evaluation by @​ViktorHofer in #​14290
• Use partial evaluation for -getProperty/-getItem without a target by @​ViktorHofer in #​14296
• [main] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in #​14324
• [main] Update dependencies from dotnet/roslyn by @​dotnet-maestro[bot] in #​14333
• [main] Update dependencies from nuget/nuget.client by @​dotnet-maestro[bot] in #​14330
• Bump github/gh-aw-actions/setup from 0.82.2 to 0.82.8 by @​dependabot[bot] in #​14328
• Restrict partial evaluation to ProjectInstance by @​ViktorHofer in #​14340
• Add Roslyn analyzers (MSBuildTask0006/0007) to suggest typed task parameters by @​baronfel in #​13972
• [main] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in #​14348
• Localized file check-in by OneLocBuild Task: Build definition ID 9434: Build ID 1464388 by @​dotnet-bot in #​14342
• Revert passing ExcludeRestorePackageImports during restore (#​14274) by @​ViktorHofer in #​14349
• Update to .NET 11 P5 SDK and Arcade main by @​ViktorHofer in #​14318
• Remove local fork requirement from contributing guide by @​jankratochvilcz in #​14350
• Log MSBuild Server lifecycle (spawn/reuse/not-used) to the build log by @​JanProvaznik in #​14156
• Remove NuGet restore task for internal tools by @​ViktorHofer in #​14352
• Use eng/common enable-internal-sources.yml for internal feeds auth by @​ViktorHofer in #​14353
• Default restore to true in sdk-task scripts by @​ViktorHofer in #​14354
• Add Roslyn analyzer (MSBuildTask0009) warning for unsupported ITaskItem type arguments by @​baronfel in #​13973
• Fix MSBuild coordinator deadlock for nested MSBuild processes by @​DustinCampbell in #​14224
• [main] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in #​14362
• Add Dreaming workflow to curate Copilot memory weekly by @​jankratochvilcz in #​14357
• Fix #​14364: upgrade gh-aw to v0.82.9 and repin setup by @​jankratochvilcz in #​14365
• Dreaming: set protected-files: allowed so the workflow can open its curation PR by @​jankratochvilcz in #​14369
• [Dreaming] dreaming: flag System.Reflection on hot paths in expert-reviewer checklist by @​github-actions[bot] in #​14372
• Skip CI build/test legs for documentation- and .github-only changes by @​jankratochvilcz in #​14371
• Dreaming: up to 3 atomic PRs + per-PR core-team reviewer requests by @​jankratochvilcz in #​14373
• [Dreaming] dreaming: agents must not resolve reviewer threads without explicit maintainer acknowledgment by @​github-actions[bot] in #​14382
• Dreaming: enforce reviewer intersection (discussion participant AND kitten member) by @​jankratochvilcz in #​14383
• Refactor bootstrapped build infrastructure by @​ViktorHofer in #​14361
• Remove FEATURE_LEGACY_GETFULLPATH and use Microsoft.IO.Path.GetFullPath in .NET Framework. by @​teo-tsirpanis in #​13769
• Bootstrap PowerShell modules in flaky test detector by @​AlesProkop in #​14390
• Fix official build as -officialBuild parameter is now just a property by @​ViktorHofer in #​14391
• Bump .NET runtime packages to 10.0.9 by @​AArnott in #​14343
• Support TaskEnvironment injection via task constructors by @​baronfel in #​14315
• Align ITaskItem binding with ValueTypeParser and flag culture-sensitive conversions by @​baronfel in #​13974
• Eliminate shared string resource file by @​DustinCampbell in #​14386
• Fix Forwarding logger issue by @​AlesProkop in #​14396
• Handle null task type in OutOfProc task host to avoid NullReferenceException by @​JanProvaznik with @​Copilot in #​14007
• docs: fix outdated NuGet package link in Binary-Log.md by @​JanProvaznik with @​Copilot in #​14412
• [vs18.6] Fix VMR validation pipeline endpoint by @​JanProvaznik in #​14411
• Raise def-344 quarantine scan limits so the Flaky Test fixer completes by @​AlesProkop in #​14421
• Run -mt VMR validation three times weekly by @​JanProvaznik in #​14410
• [main] Update dependencies from dotnet/roslyn by @​dotnet-maestro[bot] in #​14449
• [main] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​14446
• [main] Update dependencies from nuget/nuget.client by @​dotnet-maestro[bot] in #​14442
• Bump github/gh-aw-actions/setup-cli from 0.82.9 to 0.82.13 by @​dependabot[bot] in #​14436
• Bump github/gh-aw-actions/setup from 0.82.8 to 0.82.13 by @​dependabot[bot] in #​14437
• Bump actions/setup-node from 6.4.0 to 7.0.0 by @​dependabot[bot] in #​14438
• [vs17.8] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​14439
• [vs17.12] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​14447
• [vs17.14] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​14445
• [Flaky Test] Quarantine 3 flaky tests by @​github-actions[bot] in #​14397
• [vs17.11] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​14440
• [vs18.6] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in #​14405
• [vs18.7] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​14450
• [vs18.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​14444
• [vs18.8] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​14443
• [vs18.6] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​14441
• Avoid duplicate flaky-test issues from stale search results by @​AlesProkop in #​14454
• [Fix] MSBuild Producing Different Output Paths if the Paths are Passes as Absolute or Relative by @​AlesProkop in #​13752
• Recompile agent workflows with gh-aw 0.82.13 by @​AlesProkop in #​14457
• Add analyzer for TaskEnvironment constructor injection by @​jankratochvilcz in #​14401
• Update TFM to net11.0 and update accompanying files by @​ViktorHofer in #​14455
• Bump XML cryptography packages to 10.0.10 by @​AlesProkop in #​14472
• [Flaky Test] Quarantine 5 flaky tests by @​github-actions[bot] in #​14460
• [automated] Merge branch 'vs18.6' => 'vs18.7' by @​github-actions[bot] in #​14424
• [automated] Merge branch 'vs18.7' => 'vs18.8' by @​github-actions[bot] in #​14478
• Place Framework buildTransitive target in the net10.0 asset group by @​baronfel in #​14469
• Add EnumeratePattern and OpenedFileOrDirectoryAttributes to FileAccessData by @​dfederm in #​14104
• Rewrite branch freeze automation in PowerShell by @​AlesProkop in #​14470
• Harden coordinator client lifecycle races by @​emaf in #​14240
• [vs18.6] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in #​14483
• Grant pull-requests: write to branch freeze command workflow by @​AlesProkop in #​14495
• Extract DebugTrace into a standalone Framework class by @​DustinCampbell in #​14494
• Consolidate message code parsing and formatting into MessageParser and MessageFormatter by @​DustinCampbell in #​14493
• Remove orphaned neutral and English .xlf localization files by @​DustinCampbell in #​14491
• [Flaky Test] Quarantine 2 flaky tests by @​github-actions[bot] in #​14503
• Bump actions/checkout from 7.0.0 to 7.0.1 by @​dependabot[bot] in #​14518
• Bump github/gh-aw-actions/setup from 0.82.13 to 0.83.3 by @​dependabot[bot] in #​14517
• Bump github/gh-aw-actions/setup-cli from 0.82.13 to 0.83.3 by @​dependabot[bot] in #​14519
• [main] Update dependencies from nuget/nuget.client by @​dotnet-maestro[bot] in #​14523
• [vs17.12] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​14528
• [main] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​14527
• [vs17.14] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​14526
• [vs18.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​14524
• [vs18.8] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​14525
• [vs17.11] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​14521
• [vs17.8] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​14520
• Update expert-reviewer models: Opus 5, GPT-5.6 Sol, Gemini 3.6 Flash by @​JanProvaznik in #​14532
• Fix false and over-broad checks in the expert-reviewer agent by @​JanProvaznik in #​14533
• De-stale the release skill after #​14277 removed stabilization by @​JanProvaznik in #​14534
• Reset process state between MSBuild server requests by @​JanProvaznik with @​Copilot in #​14475
• [vs18.6] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​14522
• Fix quoting in eng/build.sh by @​omajid in #​14506
• Bump .NET runtime packages to 10.0.10 by @​AlesProkop in #​14549
• [Flaky Test] Quarantine 1 flaky test by @​github-actions[bot] in #​14542
• [Flaky Test] Quarantine 2 flaky tests by @​github-actions[bot] in #​14553
• Enlighten ResolveKeySource for multithreaded mode by @​jankratochvilcz in #​13623
• [vs18.10] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​14621
• [vs18.9] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​14620
• [vs17.12] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​14618
• [vs17.14] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​14616
• [vs18.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​14615
• [vs18.8] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​14614
• [vs18.6] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​14613
• [vs18.0] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in #​14545
• [automated] Merge branch 'vs18.8' => 'vs18.9' by @​github-actions[bot] in #​14630
• [automated] Merge branch 'vs18.9' => 'vs18.10' by @​github-actions[bot] in #​14635
• [vs18.10] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​14678
• [vs16.11] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​14675
• [vs17.11] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​14667
• [vs18.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​14671
• [vs18.9] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​14676
• [vs18.8] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​14670
• [vs17.12] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​14674
• [vs17.8] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​14666
• [vs17.14] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​14673
• [vs18.6] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​14668
• [vs16.11] Drop stale AzureDevOps-Artifact-Feeds-Pats secret group by @​ViktorHofer in #​14718
• [vs17.11] Drop stale AzureDevOps-Artifact-Feeds-Pats secret group by @​ViktorHofer in #​14719
• [automated] Merge branch 'vs16.11' => 'vs17.8' by @​github-actions[bot] in #​14720
• [automated] Merge branch 'vs17.8' => 'vs17.11' by @​github-actions[bot] in #​14722
• [automated] Merge branch 'vs17.11' => 'vs17.12' by @​github-actions[bot] in #​14721
• [automated] Merge branch 'vs17.12' => 'vs17.14' by @​github-actions[bot] in #​14724
• [automated] Merge branch 'vs17.14' => 'vs18.0' by @​github-actions[bot] in #​14728
• [automated] Merge branch 'vs18.0' => 'vs18.6' by @​github-actions[bot] in #​14730
• [automated] Merge branch 'vs18.6' => 'vs18.8' by @​github-actions[bot] in #​14733
• [automated] Merge branch 'vs18.8' => 'vs18.9' by @​github-actions[bot] in #​14734
• [automated] Merge branch 'vs18.9' => 'vs18.10' by @​github-actions[bot] in #​14735
• [vs18.10] Remove obsolete Publish-Build-Assets variable group import by @​ViktorHofer in #​14752
• [vs18.10] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​14808
• [vs18.10] Expand built-in metadata references in the task host by @​JanProvaznik in #​14823

New Contributors

• @​emaf made their first contribution in #​14240

Full Changelog: dotnet/msbuild@v18.9.6...v18.10.1

v18.9.6

What's Changed

• [vs18.6] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​13793
• [vs18.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​13859
• [vs18.6] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​13858
• [vs18.7] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​13863
• CsWin32 follow-up: CLR metadata + TypeLib interop migration by @​JeremyKuhne in #​13853
• Update vmr-sb-validation.yml for Azure Pipelines by @​meghnave in #​13871
• Test: keep shell alive 15s in ToolTaskCanChangeCanonicalErrorFormat (#​13734) by @​jankratochvilcz in #​13878
• Add vs18.8 to merge-flow config by @​OvesN in #​13877
• Stable branding for 18.8 release by @​OvesN in #​13883
• Bump main to 18.9.0 after vs18.8 snap by @​OvesN in #​13880
• Avoid checkout in insertion pipeline by @​rainersigwald in #​13887
• Report actual launch path in MSB4216 for Runtime="NET" task host by @​ViktorHofer in #​13889
• Migrate Tlblmp and AxImp to Multithreaded Execution by @​AlesProkop in #​13708
• Replace ErrorUtilities assertion methods with Assumed API and BCL throw helpers by @​DustinCampbell in #​13790
• Fix CLR_E_SHIM_RUNTIMELOAD in RAR's IMetaDataDispenser activation by @​JeremyKuhne in #​13899
• [main] Update dependencies from nuget/nuget.client by @​dotnet-maestro[bot] in #​13905
• [main] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​13907
• [main] Update dependencies from dotnet/roslyn by @​dotnet-maestro[bot] in #​13910
• [vs17.14] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​13908
• [vs18.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​13906
• Fix ToolTask output loss: increase EOF pipe timeout from 2s to 30s by @​huulinhnguyen-dev in #​13767
• Improve symlink cycle condition by @​GangWang01 in #​13901
• [vs18.6] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​13904
• Add flaky-test detection and auto-fix agentic workflows by @​ViktorHofer in #​13915
• Quote --ignore-exit-code values so the quarantine pipeline does not shell-split on Unix by @​ViktorHofer in #​13918
• Fix flaky-test detector PR-evidence loss and raise scan limits by @​ViktorHofer in #​13919
• Tighten the pr review agent by @​JanKrivanek in #​13921
• Add environment variables for governance detection by @​ViktorHofer in #​13920
• Change IsPackable to true and add IsShipping flag by @​ViktorHofer in #​13924
• [vs18.7] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​13911
• Make flaky detector verify recurrence postdates the fix before commenting by @​ViktorHofer in #​13930
• Fix AbsolutePath.GetCanonicalForm process state leak on Windows by @​OvesN in #​13788
• Fix flaky detector: unblock dnceng feed, fail fast, and defer quarantine to a second run by @​ViktorHofer in #​13936
• Update documentation for ImplicitUsings element by @​drewnoakes in #​13900
• [vs18.6] Point OptProf bootstrapper at rel/stable instead of int.main by @​AlesProkop in #​13923
• Add CS8618 suppressor for required MSBuild task properties by @​AArnott in #​13926
• Tighten NodeLaunchData.EnvironmentOverrides nullability to IDictionary<string, string?>? by @​OvesN with @​Copilot in #​13815
• Fix ToolTask EOF wait to be STA-safe via CountdownEvent (MSB4018 in AspNetCompiler) by @​YuliiaKovalova in #​13917
• [automated] Merge branch 'vs18.6' => 'vs18.7' by @​github-actions[bot] in #​13941
• Localized file check-in by OneLocBuild Task: Build definition ID 9434: Build ID 1419225 by @​dotnet-bot in #​13849
• Bumping to 10.0.8 runtime packages by @​OvesN in #​13898
• Flaky-test workflow: reassure on empty PR list + drop local reproduction (quarantine-first) by @​ViktorHofer in #​13938
• [Flaky Test] Un-quarantine 5 consistently-green tests by @​github-actions[bot] in #​13952
• Flaky-test detector: open PRs ready-for-review; drop newly-filed-issues section from PR body by @​ViktorHofer in #​13958
• [Flaky Test] Quarantine 4 flaky tests by @​github-actions[bot] in #​13937
• Flaky-test: fix duplicate-issue bug by switching dedup key to a visible code-block key by @​ViktorHofer in #​13963
• CsWin32 follow-up: WindowsNative + VS Setup Configuration + remaining hand-rolled interop by @​JeremyKuhne in #​13872
• Add the reviewer release skill checking if the Learn article Change waves is updated by @​GangWang01 in #​13840
• [main] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in #​13977
• [main] Update dependencies from dotnet/roslyn by @​dotnet-maestro[bot] in #​13987
• [main] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​13983
• [Flaky Test] Un-quarantine 5 flaky tests confirmed green in quarantine pipeline by @​github-actions[bot] in #​13979
• [main] Update dependencies from nuget/nuget.client by @​dotnet-maestro[bot] in #​13982
• [vs17.14] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​13985
• [vs18.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​13984
• Localized file check-in by OneLocBuild Task: Build definition ID 9434: Build ID 1430919 by @​dotnet-bot in #​13957
• Add parentheses in capacity calculation by @​jnyrup in #​13980
• [vs18.6] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in #​13981
• Dedup target list in ProjectGraph.ExpandDefaultTargets to prevent graph explosion by @​dfederm in #​13855
• [vs18.7] Revert "Fix ToolTask hang when grandchild processes inherit pipe handles (#​13351)" by @​JanProvaznik in #​13945
• chore: Pin GitHub Actions to commit SHAs by @​pgoslatara in #​13269
• [vs18.7] Fix OptProf bootstrapper channel: use 'release' not 'stable' by @​JanProvaznik in #​13993
• [vs18.6] Fix OptProf bootstrapper channel: use 'release' not 'stable' by @​JanProvaznik in #​13992
• Enabling weekly Dependabot updates for GitHub Actions by @​rainersigwald with @​Copilot in #​13999
• [vs18.6] Fix OptProf bootstrapper channel: use 'int.stable' not 'release' by @​JanProvaznik in #​14005
• [vs18.7] Fix OptProf bootstrapper channel: use 'int.stable' not 'release' by @​JanProvaznik in #​14006
• Bump actions/download-artifact from 4 to 8 by @​dependabot[bot] in #​14000
• Bump actions/cache from 4 to 5 by @​dependabot[bot] in #​14001
• Bump actions/github-script from 7 to 9 by @​dependabot[bot] in #​14004
• Update release-checklist.md by @​OvesN in #​13754
• Bump and pin actions/checkout from 3.6.0 to v6.0.3 SHA by @​dependabot[bot] in #​14003
• Bump github/gh-aw-actions from 0.77.5 to 0.78.3 by @​dependabot[bot] in #​14002
• Source bootstrap dotnet-install script from a repo-local path by @​JanProvaznik in #​14011
• Raise un-quarantine bar to 50 distinct builds / 14 days by @​ViktorHofer in #​14009
• Replace Csc task with Roslyn API in FileTrackerTests by @​huulinhnguyen-dev in #​13094
• Introduce Copilot PAT rotation to agentic workflows by @​JanKrivanek in #​14013
• Fix Expert Code Review (on open) failing with git checkout error by @​JanKrivanek in #​14018
• CsWin32 follow-up: ComReference family + typelib registration interop by @​JeremyKuhne in #​13975
• Enable AOT/trim analyzers for Framework and StringTools by @​JeremyKuhne in #​14012
• Bump actions/checkout from 6.0.2 to 6.0.3 by @​dependabot[bot] in #​14021
• Enable AOT/trim analyzers for Utilities and Tasks by [@&

❗ Important

✂ PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[kodiakhq]

This PR currently has a merge conflict. Please resolve this and then re-add the automerge label.