From def035a86b71fcbdb293e6906f7a1854778d8253 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 24 Aug 2026 04:32:19 +0000
Subject: [PATCH] deps: Bump the test-and-analyzers group with 4 updates

Bumps Microsoft.CodeAnalysis.Analyzers from 5.6.0 to 5.9.0
Bumps Microsoft.CodeAnalysis.CSharp from 5.0.0 to 5.9.0
Bumps xunit.runner.visualstudio from 3.1.5 to 4.0.0
Bumps xunit.v3 from 3.2.2 to 4.0.0

---
updated-dependencies:
- dependency-name: Microsoft.CodeAnalysis.Analyzers
  dependency-version: 5.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: test-and-analyzers
- dependency-name: Microsoft.CodeAnalysis.CSharp
  dependency-version: 5.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: test-and-analyzers
- dependency-name: xunit.runner.visualstudio
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: test-and-analyzers
- dependency-name: xunit.v3
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: test-and-analyzers
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 Directory.Packages.props | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/Directory.Packages.props b/Directory.Packages.props
index 872288bc..ef4d66d1 100644
--- a/Directory.Packages.props
+++ b/Directory.Packages.props
@@ -10,7 +10,7 @@
          the build with error OVERFIT008 — i.e. the analyzer stays alive. This package ships the RS* rules FOR
          analyzer authors; unlike Microsoft.CodeAnalysis.CSharp below it does NOT set the Roslyn API the
          analyzer compiles against, so it is not bound by the SDK's compiler version. -->
-    <PackageVersion Include="Microsoft.CodeAnalysis.Analyzers" Version="5.6.0" />
+    <PackageVersion Include="Microsoft.CodeAnalysis.Analyzers" Version="5.9.0" />
     <PackageVersion Include="Microsoft.CodeAnalysis.BannedApiAnalyzers" Version="5.6.0" />
     <!-- MUST be <= the SDK compiler's Roslyn version (currently 5.0.0 on .NET SDK 10.0.1xx) — a NEWER
          reference makes the compiler silently REJECT the whole analyzer (CS9057: every OVERFIT rule
@@ -20,7 +20,7 @@
          "Kompilacja powiodła się", and a deliberate Parallel.For violation went UNREPORTED (all 20 OVERFIT
          rules silently off). Expect this package to show as permanently "outdated"; that is INTENTIONAL, not
          debt. Bump it only when the SDK's own Roslyn version moves up. -->
-    <PackageVersion Include="Microsoft.CodeAnalysis.CSharp" Version="5.0.0" />
+    <PackageVersion Include="Microsoft.CodeAnalysis.CSharp" Version="5.9.0" />
     <!-- Tools/SemanticNavigator only. Held at the SAME 5.0.0 as Microsoft.CodeAnalysis.CSharp above, and for a
          different reason than that package's own pin: MSBuildWorkspace loads the OVERFIT analyzers out of each
          project it opens, so the navigator is an analyzer HOST. A host older than the analyzers cannot load
@@ -166,7 +166,7 @@
          runtime and SDK, which DOES change the JIT. That install is a separate action and does warrant a
          canary. See XC-21. -->
     <PackageVersion Include="System.Numerics.Tensors" Version="10.0.11" />
-    <PackageVersion Include="xunit.v3" Version="3.2.2" />
-    <PackageVersion Include="xunit.runner.visualstudio" Version="3.1.5" />
+    <PackageVersion Include="xunit.v3" Version="4.0.0" />
+    <PackageVersion Include="xunit.runner.visualstudio" Version="4.0.0" />
   </ItemGroup>
 </Project>
\ No newline at end of file