chore: Bump the nuget-dependencies group with 2 updates

[dependabot]

Updated Microsoft.AspNetCore.Components.Web from 9.0.18 to 9.0.19.

Release notes

Sourced from Microsoft.AspNetCore.Components.Web's releases.

9.0.19

Release

What's Changed

• [release/9.0] Update branding to 9.0.19 by @​dotnet-bot in [release/9.0] Update branding to 9.0.19 dotnet/aspnetcore#67623
• [release/9.0] (deps): Bump src/submodules/MessagePack-CSharp from 9614e6f to 365965f by @​dependabot[bot] in [release/9.0] (deps): Bump src/submodules/MessagePack-CSharp from 9614e6f to 365965f dotnet/aspnetcore#67527
• [release/9.0] (deps): Bump src/submodules/googletest from 7140cd4 to 973323e by @​dependabot[bot] in [release/9.0] (deps): Bump src/submodules/googletest from 7140cd4 to 973323e dotnet/aspnetcore#67526
• [release/9.0] Update dependencies from dotnet/source-build-assets by @​dotnet-maestro[bot] in [release/9.0] Update dependencies from dotnet/source-build-assets dotnet/aspnetcore#67328
• [release/9.0] Update CI pipeline to use Windows 2022 image by @​github-actions[bot] in [release/9.0] Update CI pipeline to use Windows 2022 image dotnet/aspnetcore#67287
• [release/9.0] Update npm dependencies by @​wtgodbe in [release/9.0] Update npm dependencies dotnet/aspnetcore#67277
• [release/9.0] Update Selenium and Playwright versions to match main by @​wtgodbe in [release/9.0] Update Selenium and Playwright versions to match main dotnet/aspnetcore#67274
• [release/9.0] Update Node.js version from 20.x to 24.x by @​wtgodbe in [release/9.0] Update Node.js version from 20.x to 24.x dotnet/aspnetcore#67242
• [release/9.0] improve CI flakiness by @​wtgodbe in [release/9.0] improve CI flakiness dotnet/aspnetcore#67646
• [release/9.0] (deps): Bump src/submodules/googletest from 973323e to 3064a60 by @​dependabot[bot] in [release/9.0] (deps): Bump src/submodules/googletest from 973323e to 3064a60 dotnet/aspnetcore#67652
• Merging internal commits for release/9.0 by @​dotnet-bot in Merging internal commits for release/9.0 dotnet/aspnetcore#67795
• Use build identity for internal feeds instead of expired dn-bot-dnceng-artifact-feeds-rw PAT (release/9.0) by @​missymessa in Use build identity for internal feeds instead of expired dn-bot-dnceng-artifact-feeds-rw PAT (release/9.0) dotnet/aspnetcore#67853
• Use System.AccessToken for internal feed auth on release/9.0 by @​missymessa in Use System.AccessToken for internal feed auth on release/9.0 dotnet/aspnetcore#67859

Full Changelog: dotnet/aspnetcore@v9.0.18...v9.0.19

Commits viewable in compare view.

Updated SonarAnalyzer.CSharp from 10.31.0.145097 to 10.33.0.1635.

Release notes

Sourced from SonarAnalyzer.CSharp's releases.

10.33.0.1635

Release notes - .NET Analyzers - 10.33

Feature

NET-4312 Update RSPEC before 10.33 release
NET-4254 Implement rule S9129: "Include" and "ThenInclude" chains of reference navigations should be merged into a single "Include" call

False Positive

NET-1777 Fix S101 FP: Lower case character after number
NET-4245 Fix S107 FP: should not raise for parameters marked with dependency-injection attributes

Maintenance

NET-4184 Duplicate telemetry key exception when multiple projects report the same non-counter telemetry value

10.32.0.713

Release notes - .NET Analyzers - 10.32

Feature

NET-4132 Implement rule S9022: Redundant "Include" calls should be removed
NET-4215 Implement rule S9118: Default values should be compatible with their entity property type
NET-4240 Update RSPEC before 10.32 release

False Positive

NET-1322 Fix S2857 FP: Do not raise in constant string interpolation when string is in square brackets
NET-1468 Fix S6966 FP: should not raise when inside lock
NET-1598 Fix S1125 FP: dynamic and custom nullable structs with conversion to bool are compliant
NET-4233 Fix S8733 FP: AsSplitQuery/AsSingleQuery set in a different statement than the colliding Includes goes undetected
NET-4297 Fix S8717 FP: EFCore DBFirst Scaffold

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions