Skip to content

Bump Microsoft.VisualStudio.Threading from 17.14.15 to 18.7.23#1737

Open
dependabot[bot] wants to merge 3 commits into
mainfrom
dependabot/nuget/DevProxy/Microsoft.VisualStudio.Threading-18.7.23
Open

Bump Microsoft.VisualStudio.Threading from 17.14.15 to 18.7.23#1737
dependabot[bot] wants to merge 3 commits into
mainfrom
dependabot/nuget/DevProxy/Microsoft.VisualStudio.Threading-18.7.23

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 30, 2026

Copy link
Copy Markdown
Contributor

Updated Microsoft.VisualStudio.Threading from 17.14.15 to 18.7.23.

Release notes

Sourced from Microsoft.VisualStudio.Threading's releases.

18.7.23

What's Changed

Fixes

Enhancements

New Contributors

Full Changelog: microsoft/vs-threading@v17.14.15...v18.7.23

Commits viewable in compare view.

@dependabot dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Jun 30, 2026
@dependabot dependabot Bot requested a review from a team as a code owner June 30, 2026 05:35
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code labels Jun 30, 2026
@waldekmastykarz

Copy link
Copy Markdown
Collaborator

@dependabot rebase

@dependabot @github

dependabot Bot commented on behalf of github Jun 30, 2026

Copy link
Copy Markdown
Contributor Author

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

@waldekmastykarz waldekmastykarz left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM - dependency update with async fix for VSTHRD103

@waldekmastykarz waldekmastykarz enabled auto-merge (squash) June 30, 2026 07:24

@waldekmastykarz waldekmastykarz left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM - all checks pass

waldekmastykarz
waldekmastykarz previously approved these changes Jul 2, 2026

@waldekmastykarz waldekmastykarz left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM - dependency update looks good

@waldekmastykarz

Copy link
Copy Markdown
Collaborator

@dependabot rebase

@dependabot @github

dependabot Bot commented on behalf of github Jul 3, 2026

Copy link
Copy Markdown
Contributor Author

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

@waldekmastykarz

Copy link
Copy Markdown
Collaborator

@dependabot recreate

---
updated-dependencies:
- dependency-name: Microsoft.VisualStudio.Threading
  dependency-version: 18.7.23
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/nuget/DevProxy/Microsoft.VisualStudio.Threading-18.7.23 branch from 3e0385c to dc33a35 Compare July 3, 2026 07:18
@waldekmastykarz

Copy link
Copy Markdown
Collaborator

@copilot fix

- Update DevProxy.Plugins/packages.lock.json to reflect current Markdig
  (1.3.2) and Scriban (7.2.5) versions from DevProxy.Abstractions
- Fix VSTHRD103 analyzer error: convert synchronous LoadCertificate to
  async LoadCertificateAsync using File.ReadAllBytesAsync
auto-merge was automatically disabled July 3, 2026 10:26

Head branch was pushed to by a user without write access

Copilot AI commented Jul 3, 2026

Copy link
Copy Markdown
Contributor

@copilot fix

Fixed in the latest commit. Two issues were resolved:

  1. DevProxy.Plugins/packages.lock.json was stale — it still referenced Markdig 1.3.0 and Scriban 7.2.4 from devproxy.abstractions, which caused dotnet restore --locked-mode to fail in CI. Regenerated the lock file to pick up the current versions (1.3.2 / 7.2.5).
  2. VSTHRD103 build error in CertificateDiskCache.cs — the new version of Microsoft.VisualStudio.Threading introduced a stricter analyzer that flagged the synchronous File.ReadAllBytes call. Converted the private LoadCertificate helper to async Task using File.ReadAllBytesAsync.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants