From 4b27595b6c053dd2a7a7866efad1b1a0c64bf89a Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 17 Jul 2026 02:58:39 +0000 Subject: [PATCH 1/4] Bump System.IO.Hashing from 10.0.9 to 10.0.10 --- updated-dependencies: - dependency-name: System.IO.Hashing dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- eng/Versions.props | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/eng/Versions.props b/eng/Versions.props index 48b4abd3d1a..e02031ca8cd 100644 --- a/eng/Versions.props +++ b/eng/Versions.props @@ -16,7 +16,7 @@ 11.0.100-preview.7.26360.111 0.11.5-preview.26360.111 4.4.0-preview.26360.5 - 10.0.9 + 10.0.10 11.0.0-preview.1.26104.118 36.1.69 From c397956167a8edd984539566fd3f7125493a924c Mon Sep 17 00:00:00 2001 From: Jonathan Peppers Date: Fri, 17 Jul 2026 14:14:31 -0500 Subject: [PATCH 2/4] Centralize System.IO.Hashing package version Use the root SystemIOHashingPackageVersion in xamarin-android-tools and keep compatibility comments independent of the current patch version. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: 51b3ca0b-2cd9-4f3d-be25-99ea715790c8 --- Directory.Build.targets | 4 ++-- external/Java.Interop/Directory.Build.targets | 4 ++-- external/xamarin-android-tools/Directory.Build.targets | 2 +- 3 files changed, 5 insertions(+), 5 deletions(-) diff --git a/Directory.Build.targets b/Directory.Build.targets index e7995f7b1ee..3e86c351176 100644 --- a/Directory.Build.targets +++ b/Directory.Build.targets @@ -14,8 +14,8 @@ Microsoft.Build.Tasks.Git pulls System.IO.Hashing in as a *runtime* asset (e.g. 10.0.300 -> 10.0.8). Projects that reference System.IO.Hashing only transitively would then ship that version into the SDK pack's `tools/` directory, where it collides with the $(SystemIOHashingPackageVersion) the build - tasks are compiled against (System.IO.Hashing bumps its AssemblyVersion every patch: 10.0.0.8 vs - 10.0.0.9), producing a MissingMethodException (XACRP7000) on System.IO.Hashing.Crc64.Hash at build + tasks are compiled against (System.IO.Hashing bumps its AssemblyVersion every patch), producing a + MissingMethodException (XACRP7000) on System.IO.Hashing.Crc64.Hash at build time. Exclude SourceLink's runtime assets so it can never contribute a floating System.IO.Hashing; source linking is unaffected (it runs via SourceLink's build assets). Mirrors the same pin in external/Java.Interop/Directory.Build.targets. diff --git a/external/Java.Interop/Directory.Build.targets b/external/Java.Interop/Directory.Build.targets index 7ee81fe7d44..a17662a9993 100644 --- a/external/Java.Interop/Directory.Build.targets +++ b/external/Java.Interop/Directory.Build.targets @@ -39,8 +39,8 @@ dependency Microsoft.Build.Tasks.Git 10.0.300 pulls System.IO.Hashing 10.0.8 in as a *runtime* asset. Projects that only reference System.IO.Hashing transitively (e.g. class-parse, jcw-gen, generator) therefore ship a System.IO.Hashing 10.0.8 assembly, which collides in the shared - .NET for Android SDK pack `tools/` directory with the 10.0.9 assembly the build tasks are - compiled against (System.IO.Hashing bumps its AssemblyVersion every patch: 10.0.0.8 vs 10.0.0.9), + .NET for Android SDK pack `tools/` directory with the $(SystemIOHashingPackageVersion) assembly the + build tasks are compiled against (System.IO.Hashing bumps its AssemblyVersion every patch), producing a MissingMethodException on System.IO.Hashing.Crc64.Hash at build time. These tools do not use System.IO.Hashing themselves, so exclude SourceLink's runtime assets to keep the unused assembly out of their output. Source linking is unaffected (it runs via SourceLink's build assets). diff --git a/external/xamarin-android-tools/Directory.Build.targets b/external/xamarin-android-tools/Directory.Build.targets index 71eb37507a4..ada96e496ef 100644 --- a/external/xamarin-android-tools/Directory.Build.targets +++ b/external/xamarin-android-tools/Directory.Build.targets @@ -28,7 +28,7 @@ - + From 7bd7e4575f2d352bce009b2a5d214d5355798c49 Mon Sep 17 00:00:00 2001 From: Jonathan Peppers Date: Fri, 17 Jul 2026 14:19:15 -0500 Subject: [PATCH 3/4] Potential fix for pull request finding Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> --- Directory.Build.targets | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Directory.Build.targets b/Directory.Build.targets index 3e86c351176..f697ad1811e 100644 --- a/Directory.Build.targets +++ b/Directory.Build.targets @@ -13,7 +13,7 @@ SourceLink is a build-time only package (PrivateAssets="All"), but in 10.x its dependency Microsoft.Build.Tasks.Git pulls System.IO.Hashing in as a *runtime* asset (e.g. 10.0.300 -> 10.0.8). Projects that reference System.IO.Hashing only transitively would then ship that version into the - SDK pack's `tools/` directory, where it collides with the $(SystemIOHashingPackageVersion) the build + SDK pack's `tools/` directory, where it collides with the $(SystemIOHashingPackageVersion) assembly the build tasks are compiled against (System.IO.Hashing bumps its AssemblyVersion every patch), producing a MissingMethodException (XACRP7000) on System.IO.Hashing.Crc64.Hash at build time. Exclude SourceLink's runtime assets so it can never contribute a floating System.IO.Hashing; From b79425997866e0779c4cbb21f4a000dad8f7503a Mon Sep 17 00:00:00 2001 From: Jonathan Peppers Date: Mon, 20 Jul 2026 08:10:31 -0500 Subject: [PATCH 4/4] Normalize Directory.Build.targets line ending Remove the lone CRLF introduced by the autofix so macOS builds do not leave the repository dirty. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: 51b3ca0b-2cd9-4f3d-be25-99ea715790c8 --- Directory.Build.targets | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Directory.Build.targets b/Directory.Build.targets index f697ad1811e..fbc12606990 100644 --- a/Directory.Build.targets +++ b/Directory.Build.targets @@ -13,7 +13,7 @@ SourceLink is a build-time only package (PrivateAssets="All"), but in 10.x its dependency Microsoft.Build.Tasks.Git pulls System.IO.Hashing in as a *runtime* asset (e.g. 10.0.300 -> 10.0.8). Projects that reference System.IO.Hashing only transitively would then ship that version into the - SDK pack's `tools/` directory, where it collides with the $(SystemIOHashingPackageVersion) assembly the build + SDK pack's `tools/` directory, where it collides with the $(SystemIOHashingPackageVersion) assembly the build tasks are compiled against (System.IO.Hashing bumps its AssemblyVersion every patch), producing a MissingMethodException (XACRP7000) on System.IO.Hashing.Crc64.Hash at build time. Exclude SourceLink's runtime assets so it can never contribute a floating System.IO.Hashing;