Skip to content

Conversation

@premun
Copy link
Member

@premun premun commented Nov 18, 2025

Previous fix in #5499 did not unblock all errors. These packages need to be pinned to a higher version than what comes from net10.0

Previous fix in dotnet#5499 did not unblock all errors. These packages need to be pinned to a higher version than what comes from net10.0
Copilot AI review requested due to automatic review settings November 18, 2025 12:21
Copilot finished reviewing on behalf of premun November 18, 2025 12:22
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR pins CodeAnalysis packages to specific versions to resolve Component Governance (CG) compliance issues. The previous fix in PR #5499 did not resolve all errors, requiring these packages to be pinned to versions higher than what comes from .NET 10.0.

Key changes:

  • Introduces a centralized CodeAnalysisPackagesVersion property set to 4.14.0
  • Pins 11 Microsoft.CodeAnalysis.* packages to version 4.14.0 using the new property
  • Pins Microsoft.CodeAnalysis.Analyzers to version 3.11.0 (separate version)

@premun premun changed the title Pin CodeAnalysis packages to unblock CG Pin Microsoft.CodeCoverage packages to unblock CG Nov 18, 2025
@premun premun enabled auto-merge (squash) November 18, 2025 12:45
@premun premun force-pushed the prvysoky/update-codeanalysis-packages branch from 5eaa7ec to 0415f5e Compare November 18, 2025 12:53
@premun premun disabled auto-merge November 18, 2025 12:57
@premun premun merged commit fa7110e into dotnet:main Nov 18, 2025
4 of 9 checks passed
@premun premun deleted the prvysoky/update-codeanalysis-packages branch November 18, 2025 12:58
premun added a commit to premun/arcade-services that referenced this pull request Nov 18, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants