chore(deps): update all non-major nuget dependencies

[hojmark-renovate]

This PR contains the following updates:

Package	Type	Update	Change
Microsoft.NET.Test.Sdk	nuget	minor	18.4.0 → 18.5.1
NUnit (source)	nuget	minor	4.5.1 → 4.6.0
NUnit.Analyzers	nuget	minor	4.12.0 → 4.13.0
SonarAnalyzer.CSharp (source)	nuget	minor	10.24.0.138807 → 10.25.0.139117
TUnit	nuget	minor	1.37.24 → 1.43.11
YamlDotNet (source)	nuget	minor	17.0.1 → 17.1.0

---

Release Notes

microsoft/vstest (Microsoft.NET.Test.Sdk)

v18.5.1

What's Changed

• Fix System.Collections.Immutable binding mismatch in Common.dll (rel/18.5) by @​nohwnd in #​15720
• Port verify-binding-redirects.ps1 to rel/18.5 by @​nohwnd in #​15719
• Bump to 18.5.1 by @​nohwnd in #​15721

Full Changelog: microsoft/vstest@v18.5.0...v18.5.1

v18.5.0

⚠️ Unlisted on Nuget, because of #​15718

What's Changed

• Add runtime configs by @​nohwnd in #​15377
• Add net8.0 target for TranslationLayer by @​nohwnd in #​15375
• Determine architecture of remote process on windows by @​nohwnd in #​15396
• Updating System.Collections.Immutable package reference to version 9.0.0 by @​MSLukeWest in #​15392
• Dump via netcore tool on windows by @​nohwnd in #​15397
• Fix answer file splitting by @​nohwnd in #​15381
• Run tests against vsix runner by @​nohwnd in #​15419

Full Changelog: microsoft/vstest@v18.4.0...v18.5.0

nunit/nunit (NUnit)

v4.6.0: NUnit 4.6.0

Compare Source

See release notes for details.

nunit/nunit.analyzers (NUnit.Analyzers)

v4.13.0: NUnit Analyzers 4.13 - May 2, 2026

Compare Source

NUnit Analyzers 4.13 - May 2, 2026

This release of the NUnit Analyzers updates analyzer handling for the NUnit 4.6 API change that replaces
ActualValueDelegate<> with Func<> - see nunit/nunit#4824 for more information.
Analyzers now also consider the return type of Func<> in assertions. The release also includes one bug fix and
some dependency updates.

The release contains contributions from the following users (in alphabetical order):

• @​manfred-brands
• @​mikkelbu
• @​RenderMichael

Issues Resolved

Features and Enhancements

• #​982 Recognized Func<T> return values

Bugs

• #​968 Whitespace issue in Does.Contain fixer when assert spans multiple lines

Tooling, Process, and Documentation

• #​985 chore: Bump year to 2026 in copyrights
• #​978 Bump cake.tool from 6.0.0 to 6.1.0
• #​976 chore: Correct documentation
• #​975 chore: bump version
• #​956 Bump cake.tool from 4.0.0 to 6.0.0

SonarSource/sonar-dotnet (SonarAnalyzer.CSharp)

v10.25.0.139117: 10.25

Compare Source

?

Feature

• NET-3613 - Support Cobertura coverage file format
  • Cobertura report paths can be passed via the sonar.cs.cobertura.reportsPaths parameter
• NET-3665 - Update RSPEC before 10.25 release

False Positive

• NET-3640 - Fix S3400 FP: Don't report function with conditional compilation body

thomhurst/TUnit (TUnit)

v1.43.11: 1.43.11

What's Changed

Other Changes

• perf(engine): skip execution ledger for independent tests by @​thomhurst in #​5813
• perf(engine): skip tracked object graph rediscovery by @​thomhurst in #​5814
• fix: suppress XML doc warnings in generated sources by @​mvanhorn in #​5797
• Fix xUnit Throws migration docs by @​thomhurst in #​5819
• Fix Should optional overload generation by @​thomhurst in #​5820

Dependencies

• chore(deps): update dependency mockolate to 3.1.0 by @​thomhurst in #​5811
• chore(deps): update tunit to 1.43.2 by @​thomhurst in #​5809
• chore(deps): update dependency nunit.analyzers to 4.13.0 by @​thomhurst in #​5815
• chore(deps): update dependency yaml to v2.8.4 by @​thomhurst in #​5812

New Contributors

• @​mvanhorn made their first contribution in #​5797

Full Changelog: thomhurst/TUnit@v1.43.2...v1.43.11

v1.43.2: 1.43.2

What's Changed

Other Changes

• fix(assertions): emit auto-generated header in MethodAssertionGenerator output by @​JohnVerheij in #​5796
• fix(engine): enforce runtime exclusion for global [NotInParallel] (#​5800) by @​thomhurst in #​5805
• feat(mocks): add Arg.AnyArgs() shortcut for setup/verify by @​thomhurst in #​5792
• fix(should): add specialized assertion sources by @​thomhurst in #​5806

Dependencies

• chore(deps): update tunit to 1.41.0 by @​thomhurst in #​5789
• chore(deps): update microsoft.testing to 2.2.2 by @​thomhurst in #​5793
• chore(deps): update mstest to 4.2.2 by @​thomhurst in #​5794
• chore(deps): update docusaurus by @​thomhurst in #​5798
• chore(deps): update dependency dompurify to v3.4.2 by @​thomhurst in #​5799
• chore(deps): update dependency mockolate to v3 by @​thomhurst in #​5801

Full Changelog: thomhurst/TUnit@v1.41.0...v1.43.2

v1.41.0: 1.41.0

TUnit Should() Assertions (beta)

This versions comes with a beta version of TUnit.Assertions.Should - meaning that you can do:
myCode.Should().BeEqualTo(fluentShouldSyntax);

For more information see the docs: https://tunit.dev/docs/assertions/should-syntax

What's Changed

Other Changes

• fix(reporters): unwrap TestFailedException for failure grouping by @​thomhurst in #​5776
• Fix item-at Satisfies source typing by @​thomhurst in #​5764
• ci(docs): add link-check automation and tighten Docusaurus strictness by @​thomhurst in #​5779
• feat: add TUnit.Assertions.Should package by @​thomhurst in #​5785

Dependencies

• chore(deps): update tunit to 1.40.10 by @​thomhurst in #​5775
• chore(deps): update actions/cache action to v5 by @​thomhurst in #​5780
• chore(deps): update dependency microsoft.net.test.sdk to 18.5.1 by @​thomhurst in #​5784

Full Changelog: thomhurst/TUnit@v1.40.10...v1.41.0

v1.40.10: 1.40.10

What's Changed

Other Changes

• refactor(opentelemetry): depend on TUnit.Core instead of umbrella TUnit by @​thomhurst in #​5774

Dependencies

• chore(deps): update tunit to 1.40.5 by @​thomhurst in #​5769

Full Changelog: thomhurst/TUnit@v1.40.5...v1.40.10

v1.40.5: 1.40.5

What's Changed

Other Changes

• Fix reflection property injection reuse by @​thomhurst in #​5763
• fix(assertions): gate IsEqualTo<TValue, TOther> overload to net9+ (#​5765) by @​thomhurst in #​5767

Dependencies

• chore(deps): update tunit to 1.40.0 by @​thomhurst in #​5762

Full Changelog: thomhurst/TUnit@v1.40.0...v1.40.5

v1.40.0: 1.40.0

What's Changed

Other Changes

• perf(engine): collapse async forwarding wrappers in test execution (#​5714) by @​thomhurst in #​5725
• perf(engine): skip Console.Out/Err FlushAsync when no output captured (#​5712) by @​thomhurst in #​5724
• perf(engine): collapse async state machines on hook cache-hit / empty-hook path (#​5713) by @​thomhurst in #​5726
• perf: eliminate per-test closure + GetOrAdd factory alloc (#​5710) by @​thomhurst in #​5727
• perf(engine): replace global lock in EventReceiverRegistry with lock-free CAS by @​thomhurst in #​5731
• perf(engine): batch per-test overhead cleanups (#​5719) by @​thomhurst in #​5730
• #​5733 handling all arguments for Fact and Theory by @​inyutin-maxim in #​5734
• fix(assertions): prefer string overload of Member() over IEnumerable (#​5702) by @​thomhurst in #​5721
• fix(migration): preserve comments/XML docs when removing sole attributes (#​5698) by @​thomhurst in #​5739
• perf(build): trim test TFMs and skip viewer dump by default by @​thomhurst in #​5741
• fix(pipeline): skip TestBaseModule frameworks with missing binaries by @​thomhurst in #​5752
• feat(assertions): focused diff messages for IsEqualTo/IsEquivalentTo (#​5732) by @​thomhurst in #​5747
• fix(analyzers): remove incorrect AOT rules TUnit0300/0301/0302 (#​5722) by @​thomhurst in #​5746
• perf(engine): lazy hook metadata registration (#​5448) by @​thomhurst in #​5750
• chore(templates): unify TUnit version pinning to 1.* (#​5709) by @​thomhurst in #​5743
• fix(templates): floating TUnit.Aspire version (#​5708) by @​thomhurst in #​5742
• fix(assertions): preserve specialised source in .Count(itemAssertion) (#​5707) by @​thomhurst in #​5749
• feat(assertions): IsEqualTo with implicitly-convertible wrappers (#​5720) by @​thomhurst in #​5751
• feat(aspire): add ability to manually remove resources by @​Odonno in #​5586
• fix(fscheck): register default CancellationToken arbitrary that surfaces TestContext token by @​JohnVerheij in #​5758
• fix(engine): allow keyed NotInParallel tests to run alongside unconstrained tests (#​5700) by @​thomhurst in #​5740
• perf: skip TimeoutHelper wrap when no explicit [Timeout] is set (#​5711) by @​thomhurst in #​5728

Dependencies

• chore(deps): update tunit to 1.39.0 by @​thomhurst in #​5701
• chore(deps): update aspire to 13.2.4 by @​thomhurst in #​5735
• chore(deps): bump postcss from 8.5.6 to 8.5.10 in /docs by @​dependabot[bot] in #​5736
• chore(deps): update dependency fscheck to 3.3.3 by @​thomhurst in #​5760

New Contributors

• @​inyutin-maxim made their first contribution in #​5734
• @​Odonno made their first contribution in #​5586

Full Changelog: thomhurst/TUnit@v1.39.0...v1.40.0

v1.39.0: 1.39.0

What's Changed

Other Changes

• perf(mocks): shrink MethodSetup + cache stateless matchers by @​thomhurst in #​5669
• fix(mocks): handle base classes with explicit interface impls (#​5673) by @​thomhurst in #​5674
• fix(mocks): implement indexer in generated mock (#​5676) by @​thomhurst in #​5683
• fix(mocks): disambiguate IEquatable.Equals from object.Equals (#​5675) by @​thomhurst in #​5680
• fix(mocks): escape C# keyword identifiers at all emit sites (#​5679) by @​thomhurst in #​5684
• fix(mocks): emit [SetsRequiredMembers] on generated mock ctor (#​5678) by @​thomhurst in #​5682
• fix(mocks): skip MockBridge for class targets with static-abstract interfaces (#​5677) by @​thomhurst in #​5681
• chore(mocks): regenerate source generator snapshots by @​thomhurst in #​5691
• perf(engine): collapse async state-machine layers on hot test path (#​5687) by @​thomhurst in #​5690
• perf(engine): reduce lock contention in scheduling and hook caches (#​5686) by @​thomhurst in #​5693
• fix(assertions): prevent implicit-to-string op from NREing on null (#​5692) by @​thomhurst in #​5696
• perf(engine/core): reduce per-test allocations (#​5688) by @​thomhurst in #​5694
• perf(engine): reduce message-bus contention on test start (#​5685) by @​thomhurst in #​5695

Dependencies

• chore(deps): update tunit to 1.37.36 by @​thomhurst in #​5667
• chore(deps): update verify to 31.16.2 by @​thomhurst in #​5699

Full Changelog: thomhurst/TUnit@v1.37.36...v1.39.0

v1.37.36: 1.37.36

What's Changed

Other Changes

• fix(telemetry): remove duplicate HTTP client spans by @​thomhurst in #​5668

Full Changelog: thomhurst/TUnit@v1.37.35...v1.37.36

v1.37.35: 1.37.35

What's Changed

Other Changes

• Add TUnit.TestProject.Library to the TUnit.Dev.slnx solution file by @​Zodt in #​5655
• fix(aspire): preserve user-supplied OTLP endpoint (#​4818) by @​thomhurst in #​5665
• feat(aspire): emit client spans for HTTP by @​thomhurst in #​5666

Dependencies

• chore(deps): update dependency dotnet-sdk to v10.0.203 by @​thomhurst in #​5656
• chore(deps): update microsoft.aspnetcore to 10.0.7 by @​thomhurst in #​5657
• chore(deps): update tunit to 1.37.24 by @​thomhurst in #​5659
• chore(deps): update microsoft.extensions to 10.0.7 by @​thomhurst in #​5658
• chore(deps): update aspire to 13.2.3 by @​thomhurst in #​5661
• chore(deps): update dependency microsoft.net.test.sdk to 18.5.0 by @​thomhurst in #​5664

New Contributors

• @​Zodt made their first contribution in #​5655

Full Changelog: thomhurst/TUnit@v1.37.24...v1.37.35

aaubry/YamlDotNet (YamlDotNet)

v17.1.0: Release 17.1.0

What's Changed

• Security improvements by @​EdwardCooke in #​1102
  There was a potential breaking change for large yaml files in the MergingParser. You may need to specify the optional parameter for maximum events to be processed. It default to 100k events which is a very large yaml file.

Full Changelog: aaubry/YamlDotNet@v17.0.0...v17.1.0

---

Configuration

📅 Schedule: (in timezone Europe/Berlin)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.