[deps]: Bump ICSharpCode.Decompiler from 10.1.0.8386 to 11.0.0.9375

[dependabot]

Updated ICSharpCode.Decompiler from 10.1.0.8386 to 11.0.0.9375.

Release notes

Sourced from ICSharpCode.Decompiler's releases.

11.0

The major news item of this release cycle is us porting ILSpy from WPF to Avalonia. With this port, ILSpy is now available on Linux and Mac in addition to Windows. Do note that there is no longer a WPF frontend, it was entirely removed in favor of the new Avalonia one.

Aside from this already major UI work, a few other long-standing UI features from our wish list made it into ILSpy:

• File / Open from NuGet feed
• File / Open from running process (all platforms!)
• Window / Bookmarks (full-featured bookmarks implementation for the decompiled C# view)
• View / Options / Display / Show Omnibar (breadcrumb/search bar feature at the top of decompiled code)

A second focus area was improving the ilspycmd story for agentic development. Download numbers for our dotnet tool took off in the last quarter of 2025, and agents like Claude are the reason for that (downloads are now exceeding 70k/week). Given we are using Claude as well, we found a few areas lacking that needed improvement, especially to save on token spend:

• PR #​3924: ilspycmd: add --member for single-member decompilation
• PR #​3801: Fix #​3797: resolve ilspycmd -t type names with fuzzy matching
• PR #​3951: Add --dump-table metadata dump mode to ilspycmd

Together with list/extract embedded resources, decompile BAML to XAML which shipped in 10.1, we now have a good set of optimized options for the most common scenarios in skills and tool calling available for you.

A part of this initiative was hardening:

• PR #​3843: Bound XamarinCompressedFileLoader against crafted XALZ headers
• PR #​3842: Bound WebCilFile section access against mapped-view length
• PR #​3841: Harden BAML reader against crafted-resource crashes
• PR #​3840: Bound .rsrc resource-tree parsing against crafted input
• PR #​3838: Guard against OOB read when bundle signature is at file start

The third pillar of this release is fixing long-standing annoyances and in general investing in tech debt, eg fuzzing our decompiler engine with NuGet packages. A lot (!) of the changes detailled in the release notes for preview 1 and rc deal with exactly those many small to big improvements.

Finally, we'd like to point out one retirement: the VS2017/2019 add-in has been removed, we continue to support VS2022-2026.

What is new since RC?

• PR #​3976: Fix #​3451: qualify an explicit implementation as the type implements it
• PR #​3971: Fix #​3510: keep exporting a project when a member cannot be decompiled
• PR #​3969: Keep null-conditional LINQ chains in method syntax — @​sailro, thank you!
• PR #​3970: Generate DecompilerSettings boilerplate from [DecompilerSetting] attributes
• PR #​3967: Keep ref-returning switches as statements — @​sailro, thank you!
• PR #​3950: Reconstruct nested deconstruction designations
• PR #​3956: Fix #​3952: decompile VB.NET anonymous types and queries to valid C#
• PR #​3959: Fix overflow approximating fractions of large negative constants
• PR #​3960: Fix overflow computing the element count of a multi-dim array initializer
• PR #​3961: Recognize a protected copy constructor on a sealed record
• PR #​3958: Fix crash decompiling reference assemblies with stripped method bodies
• PR #​3955: Fix #​3954: name the entry point of a top-level program 'Main'

For a full list of changes click here.

This release is based on .NET 10.0. Please make sure that you have it installed on your machine beforehand.

Note for Mac users: see https://github.com/icsharpcode/ILSpy/wiki/Build-Artifacts#running-the-macos-artifact because the ILSpy.app is neither signed nor notarized.

11.0-rc

This release is based on .NET 10.0. Please make sure that you have it installed on your machine beforehand.

Note for Mac users: see https://github.com/icsharpcode/ILSpy/wiki/Build-Artifacts#running-the-macos-artifact because the ILSpy.app is neither signed nor notarized.

New Features

• PR #​3936: Add "Open from running process" dialog
• PR #​3951: Add --dump-table metadata dump mode to ilspycmd
• PR #​3924: ilspycmd: add --member for single-member decompilation

User Interface

• PR #​3932: Metadata row details: full-width layout and a decompiler-styled editor for text blobs
• PR #​3927: Fix #​2879: show stored FieldList/MethodList values for memberless types
• PR #​3922: Fix #​749: toggle a member's fold together with its documentation
• PR #​3923: Fix #​781: click highlights member references, Ctrl+Click navigates
• PR #​3918: Fix #​633: Overrides analysis and this/base keyword navigation
• PR #​3906: Show hover tooltips for dynamic member accesses

Enhancements

• PR #​3933: Convert float/double += 1 into increment and decrement expressions
• PR #​3926: Generate and resolve xml doc ID strings at the metadata level
• PR #​3917: Represent VB.NET parameterized properties as accessor methods in C# output
• PR #​3899: Don't undo the compiler's &&-to-& optimization
• PR #​3889: Reimplement cross-platform single-instance handling
• PR #​3904: Proper event tracing for ICSharpCode.Decompiler and ICSharpCode.ILSpyX
• PR #​3902: Beautify enum declarations by referencing previously declared members

Testing / Infrastructure

• PR #​3943: Do not pass /shared to compilers that cannot reach a compiler server
• PR #​3941: Skip redundant push builds for branches with an open PR
• PR #​3928: Add pretty test for C# 13 ref struct interfaces / allows ref struct
• PR #​3919: Preserve Debug Steps tree state across filter sessions
• PR #​3914: Support Roslyn 1.x/2.x compiler configurations in tests on non-Windows
• PR #​3915: Revive TypeInferenceTests from NRefactory and cover the C# standard inference rules
• PR #​3912: Revive NRefactory conversion tests and cover all of C# standard chapter 10
• PR #​3907: Generate version-info files with CRLF on all platforms

Contributions

• PR #​3903: Provide a WholeProjectDecompiler constructor with no default parameter values — @​ds5678, thank you!
• PR #​3934: Publicize IProjectFileWriter implementations — @​ds5678, thank you!
• PR #​3910: Fix #​3909: emit nullable override disambiguators — @​sailro, thank you!
• PR #​3911: Fix #​3908: use the async iterator element type for yield — @​sailro, thank you!
• PR #​3896: Fix #​3895: keep byref-like ToString in string concatenation — @​sailro, thank you!
• PR #​3893: Fix #​3892: preserve unsafe for pointer constructors — @​sailro, thank you!

Bug Fixes

... (truncated)

11.0-preview1

[!WARNING]
We DO NOT own the domain ilspy[.]org See #​3709
Download ILSpy only from GitHub Releases!

This release is based on .NET 10.0. Please make sure that you have it installed on your machine beforehand.

Note for Mac users: see https://github.com/icsharpcode/ILSpy/wiki/Build-Artifacts#running-the-macos-artifact because the ILSpy.app is neither signed nor notarized.

Avalonia Cross Platform Port

• PR #​3755: Avalonia 12 Port and Removal of the WPF UI
• PR #​3759: Metadata explorer cleanup, flags-filter fixes, and WPF row-details parity
• PR #​3766: Round-trip the legacy WPF SessionSettings shape
• PR #​3768: Build, test, and package ILSpy on Linux and macOS in CI
• PR #​3861: Show text-based resources inline with syntax highlighting
• PR #​3875: Avalonia 12.1
• PR #​3876: Keep BAML decompilation working when WPF assemblies are missing

New Features

• PR #​3847: Unpack !AvaloniaResources into per-file resource tree nodes
• PR #​3801: Fix #​3797: resolve ilspycmd -t type names with fuzzy matching
• PR #​3789: Add a bookmarks feature for the decompiled C# view
• PR #​3786: Add omnibar breadcrumb and search bar above the decompiled code
• PR #​3769: Make the override modifier a link to the overridden member
• PR #​3762: Add Open from NuGet feed dialog for browsing and opening packages

User Interface

• PR #​3857: Fix #​2078: Generic local functions not highlighted properly
• PR #​3855: Fix #​3845: Add option to expand XML documentation comments
• PR #​3814: Toggle the fold under the right-click, not at the caret
• PR #​3812: Syntax-colour analyzer signatures with bold type names (#​2164)

Enhancements

• PR #​3872: Decompile await on dynamic expressions
• PR #​3837: Fix #​3804: decompile foreach over inline array
• PR #​3791: Fix #​3777: decompile runtime async without a separate C# 15 setting
• PR #​3843: Bound XamarinCompressedFileLoader against crafted XALZ headers
• PR #​3842: Bound WebCilFile section access against mapped-view length
• PR #​3841: Harden BAML reader against crafted-resource crashes
• PR #​3816: Allow overriding an assembly's target framework for reference resolution
• PR #​3840: Bound .rsrc resource-tree parsing against crafted input
• PR #​3838: Guard against OOB read when bundle signature is at file start
• PR #​3818: Display the IL 'tail.' prefix in C# output
• PR #​3808: Migrate the VS extension to an SDK-style VSIX (dotnet build) and retire the VS2017/2019 add-in
• PR #​3802: Fix #​3799 and three related stackalloc initializer decompilation defects
• PR #​3780: Compute public-key tokens with a managed SHA-1
  ... (truncated)

10.1.1

[!WARNING]
We DO NOT own the domain ilspy[.]org See #​3709
Download ILSpy only from GitHub Releases!

This release is based on .NET 10.0. Please make sure that you have it installed on your machine beforehand.

Bug Fixes

• Fix: Stop the assembly list from disposing removed assemblies

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #183.