Skip to content

Bump the major-minor-dependencies group with 4 updates - #748

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/nuget/backend/major-minor-dependencies-61284654ff
Open

Bump the major-minor-dependencies group with 4 updates#748
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/nuget/backend/major-minor-dependencies-61284654ff

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 10, 2026

Copy link
Copy Markdown
Contributor

Updated ICSharpCode.ILSpyX from 10.1.1.8388 to 11.2.0.10050.

Release notes

Sourced from ICSharpCode.ILSpyX's releases.

11.2

In this point release, we kept focussing on improving decompilation accuracy and performance (raw performance as well as memory usage) across the board. This is why again a lot of work went in the category Testing / Infrastructure.

One major performance win to point out is that we now ship ilspycmd with native AOT packages for linux-x64 and win-x64. Measured on win-x64 against the same 3 MB input (ICSharpCode.Decompiler.dll), medians of five runs:

Call shape managed tool AOT package
--version 219 ms 45 ms
-l c (list classes) 384 ms 93 ms
--type one large class 1,446 ms 199 ms
--type one small class 1,797 ms 315 ms
-p whole project (881 files) 6.3 s 2.9 s

For an agent loop that spawns ilspycmd per question that is a 4x to 7x reduction per call!

New Features

  • PR #​4248: Add a search box to the Options tab
  • PR #​4241: Add opt-in RID-specific and Native AOT packages for ilspycmd
  • PR #​4197: Add cross-platform PDB dumping to ilspycmd

Enhancements

  • PR #​4268: Native AOT fidelity follow-up: resolver lookup, culture independence, gate coverage
  • PR #​4259: Native AOT fidelity for the ICSharpCode.Decompiler package
  • PR #​4256: Make ilspycmd -il honor the --type and --member selection
  • PR #​4247: Report ilspycmd usage mistakes instead of crashing
  • PR #​4236: Transform value.<Clone>$() into value with {} even if there are no initializers
  • PR #​4222: Improved decompilation support for VB.NET closures
  • PR #​4201: Rewrite VB WithEvents WinForms initialization
  • PR #​4160: Decide extension method syntax in CallBuilder
  • PR #​4188: Detect generated closure cache types
  • PR #​4185: Handle required members on record copy constructors
  • PR #​4179: Include member context in decompilation error comments
  • PR #​4171: Recognize metadata property backing fields

Testing / Infrastructure

  • PR #​4285: Fix decompdiff platform reference staging
  • PR #​4283: Improve Debug Steps and decompdiff workflows
  • PR #​4276: nugetfuzz: add parallelization + report caught exceptions
  • PR #​4274: Migrate ILSpy.sln to the SLNX solution format
  • PR #​4269: Cut the ILSpy.Tests wall clock: cheap fixtures, dead waits, duplicate tests, and process sharding
  • PR #​4261: Keep tests off the network unless a toolset download is actually needed
  • PR #​4255: Add top 500 NuGet package list
  • PR #​4254: Reenable LiftedOperators tests
  • PR #​4230: Add allocation trace viewer
  • PR #​4240: Use local .NET Framework assemblies in nugetfuzz
  • PR #​4235: Fallback from unsupported netcoreapp assets in nugetfuzz
  • PR #​4205: Clean up package restore (Diasymreader)
  • PR #​4187: Let decompdiff reports use full width
    ... (truncated)

11.1

A major focus of this release was to find the small (and not so small) bugs of the decompiler via a revamp of our testing by adding two new tools that allow mass-testing (for more information see TestTools/README.md):

  • nugetfuzz: downloads packages from nuget.org and runs them through a DEBUG build of ilspycmd (sanity checks/assertions enabled). It records: crash, assertion fail, warnings in the decompiler output (as comment "IL_<nnnn>: ...") as well as any residue of compiler-generated identifiers in C# code (hints at missing language feature/pattern support).
  • decompdiff: runs an assembly through two different versions of the decompiler (driven via ilspycmd) and calculates a diff of the generated source code.

You should see better decompilation results as an effect of this push and the general push of fixing previously reported decompiler bugs by users.

New Language Features

  • PR #​4014: Emit C# 7.1 default literals where the context supplies the type
  • PR #​3930: Decompile C# 14 implicit span conversions (first-class span types)
  • PR #​3975: Fix #​3624: decompile semi-auto properties with the C# 14 field keyword

User Interface

  • PR #​4039: Fix five Avalonia UI regressions: mouse navigation, derived types, Enter, Delete, Analyze in the Analyzer pane
  • PR #​4056: Fix #​4054: Accept drops from sources that do not permit the Move effect
  • PR #​4150: Fix #​4146: keep Options section names readable on hover
  • PR #​3998: Fix #​3996: edit the display font size in points, not pixels
  • PR #​4154: Fix #​3526: show WPF resource entry names unescaped
  • PR #​4139: Scroll a node's new children into view when it is expanded
  • PR #​4129: Reject the name of an existing list in the assembly list prompt
  • PR #​4116: Fix #​2093: find a navigation target in a reference assembly too
  • PR #​4117: Empty the panes when the assembly list is cleared
  • PR #​4044: Fix #​4040: Compose accessibility and static overlays onto search result icons
  • PR #​4025: Fix package search and navigation follow-ups from #​4023
  • PR #​3997: Fix #​3993, #​3994: main-menu shortcuts and dark-mode hover tooltips
  • PR #​4002: Give dark-theme syntax colors a perceptual contrast floor
  • PR #​3989: Prevent double dark conversion of syntax colors
  • PR #​3988: Keep the editor zoom separate from the configured font size

Contributions

  • PR #​4133: Remove the delegate cache left by a discarded method-group conversion — @​dualfroz, thank you!
  • PR #​4134: Recognize a VB exception filter's type test — @​dualfroz, thank you!
  • PR #​4053: Handle unresolved value-type call targets — @​sonyps5201314, thank you!
  • PR #​4022: Improve floating-point fraction and negative constant reconstruction — @​SychicBoy, thank you!
  • PR #​3897: Fix #​3894: keep lambda parameter typing consistent — @​sailro, thank you!
  • PR #​3888: Fix #​3853: infer scoped locals from ref safety — @​sailro, thank you!
  • PR #​3887: Model scoped and UnscopedRef lifetimes in the type system — @​sailro, thank you!
  • PR #​3980: Keep instance-dependent assignments in constructors — @​sailro, thank you!

Performance

  • PR #​4156: Keep the UI responsive while searching and drawing reference nodes
  • PR #​4106: Read the file system once per reference closure, not per reference
  • PR #​4023: Search inside packages without stalling, and navigate to what it finds

Enhancements

... (truncated)

11.0

The major news item of this release cycle is us porting ILSpy from WPF to Avalonia. With this port, ILSpy is now available on Linux and Mac in addition to Windows. Do note that there is no longer a WPF frontend, it was entirely removed in favor of the new Avalonia one.

Aside from this already major UI work, a few other long-standing UI features from our wish list made it into ILSpy:

  • File / Open from NuGet feed
  • File / Open from running process (all platforms!)
  • Window / Bookmarks (full-featured bookmarks implementation for the decompiled C# view)
  • View / Options / Display / Show Omnibar (breadcrumb/search bar feature at the top of decompiled code)

A second focus area was improving the ilspycmd story for agentic development. Download numbers for our dotnet tool took off in the last quarter of 2025, and agents like Claude are the reason for that (downloads are now exceeding 70k/week). Given we are using Claude as well, we found a few areas lacking that needed improvement, especially to save on token spend:

  • PR #​3924: ilspycmd: add --member for single-member decompilation
  • PR #​3801: Fix #​3797: resolve ilspycmd -t type names with fuzzy matching
  • PR #​3951: Add --dump-table metadata dump mode to ilspycmd

Together with list/extract embedded resources, decompile BAML to XAML which shipped in 10.1, we now have a good set of optimized options for the most common scenarios in skills and tool calling available for you.

A part of this initiative was hardening:

  • PR #​3843: Bound XamarinCompressedFileLoader against crafted XALZ headers
  • PR #​3842: Bound WebCilFile section access against mapped-view length
  • PR #​3841: Harden BAML reader against crafted-resource crashes
  • PR #​3840: Bound .rsrc resource-tree parsing against crafted input
  • PR #​3838: Guard against OOB read when bundle signature is at file start

The third pillar of this release is fixing long-standing annoyances and in general investing in tech debt, eg fuzzing our decompiler engine with NuGet packages. A lot (!) of the changes detailled in the release notes for preview 1 and rc deal with exactly those many small to big improvements.

Finally, we'd like to point out one retirement: the VS2017/2019 add-in has been removed, we continue to support VS2022-2026.

What is new since RC?

  • PR #​3976: Fix #​3451: qualify an explicit implementation as the type implements it
  • PR #​3971: Fix #​3510: keep exporting a project when a member cannot be decompiled
  • PR #​3969: Keep null-conditional LINQ chains in method syntax — @​sailro, thank you!
  • PR #​3970: Generate DecompilerSettings boilerplate from [DecompilerSetting] attributes
  • PR #​3967: Keep ref-returning switches as statements — @​sailro, thank you!
  • PR #​3950: Reconstruct nested deconstruction designations
  • PR #​3956: Fix #​3952: decompile VB.NET anonymous types and queries to valid C#
  • PR #​3959: Fix overflow approximating fractions of large negative constants
  • PR #​3960: Fix overflow computing the element count of a multi-dim array initializer
  • PR #​3961: Recognize a protected copy constructor on a sealed record
  • PR #​3958: Fix crash decompiling reference assemblies with stripped method bodies
  • PR #​3955: Fix #​3954: name the entry point of a top-level program 'Main'

For a full list of changes click here.

This release is based on .NET 10.0. Please make sure that you have it installed on your machine beforehand.

Note for Mac users: see https://github.com/icsharpcode/ILSpy/wiki/Build-Artifacts#running-the-macos-artifact because the ILSpy.app is neither signed nor notarized.

11.0-rc

This release is based on .NET 10.0. Please make sure that you have it installed on your machine beforehand.

Note for Mac users: see https://github.com/icsharpcode/ILSpy/wiki/Build-Artifacts#running-the-macos-artifact because the ILSpy.app is neither signed nor notarized.

New Features

  • PR #​3936: Add "Open from running process" dialog
  • PR #​3951: Add --dump-table metadata dump mode to ilspycmd
  • PR #​3924: ilspycmd: add --member for single-member decompilation

User Interface

  • PR #​3932: Metadata row details: full-width layout and a decompiler-styled editor for text blobs
  • PR #​3927: Fix #​2879: show stored FieldList/MethodList values for memberless types
  • PR #​3922: Fix #​749: toggle a member's fold together with its documentation
  • PR #​3923: Fix #​781: click highlights member references, Ctrl+Click navigates
  • PR #​3918: Fix #​633: Overrides analysis and this/base keyword navigation
  • PR #​3906: Show hover tooltips for dynamic member accesses

Enhancements

  • PR #​3933: Convert float/double += 1 into increment and decrement expressions
  • PR #​3926: Generate and resolve xml doc ID strings at the metadata level
  • PR #​3917: Represent VB.NET parameterized properties as accessor methods in C# output
  • PR #​3899: Don't undo the compiler's &&-to-& optimization
  • PR #​3889: Reimplement cross-platform single-instance handling
  • PR #​3904: Proper event tracing for ICSharpCode.Decompiler and ICSharpCode.ILSpyX
  • PR #​3902: Beautify enum declarations by referencing previously declared members

Testing / Infrastructure

  • PR #​3943: Do not pass /shared to compilers that cannot reach a compiler server
  • PR #​3941: Skip redundant push builds for branches with an open PR
  • PR #​3928: Add pretty test for C# 13 ref struct interfaces / allows ref struct
  • PR #​3919: Preserve Debug Steps tree state across filter sessions
  • PR #​3914: Support Roslyn 1.x/2.x compiler configurations in tests on non-Windows
  • PR #​3915: Revive TypeInferenceTests from NRefactory and cover the C# standard inference rules
  • PR #​3912: Revive NRefactory conversion tests and cover all of C# standard chapter 10
  • PR #​3907: Generate version-info files with CRLF on all platforms

Contributions

  • PR #​3903: Provide a WholeProjectDecompiler constructor with no default parameter values — @​ds5678, thank you!
  • PR #​3934: Publicize IProjectFileWriter implementations — @​ds5678, thank you!
  • PR #​3910: Fix #​3909: emit nullable override disambiguators — @​sailro, thank you!
  • PR #​3911: Fix #​3908: use the async iterator element type for yield — @​sailro, thank you!
  • PR #​3896: Fix #​3895: keep byref-like ToString in string concatenation — @​sailro, thank you!
  • PR #​3893: Fix #​3892: preserve unsafe for pointer constructors — @​sailro, thank you!

Bug Fixes

... (truncated)

11.0-preview1

[!WARNING]
We DO NOT own the domain ilspy[.]org See #​3709
Download ILSpy only from GitHub Releases!

This release is based on .NET 10.0. Please make sure that you have it installed on your machine beforehand.

Note for Mac users: see https://github.com/icsharpcode/ILSpy/wiki/Build-Artifacts#running-the-macos-artifact because the ILSpy.app is neither signed nor notarized.

Avalonia Cross Platform Port

  • PR #​3755: Avalonia 12 Port and Removal of the WPF UI
  • PR #​3759: Metadata explorer cleanup, flags-filter fixes, and WPF row-details parity
  • PR #​3766: Round-trip the legacy WPF SessionSettings shape
  • PR #​3768: Build, test, and package ILSpy on Linux and macOS in CI
  • PR #​3861: Show text-based resources inline with syntax highlighting
  • PR #​3875: Avalonia 12.1
  • PR #​3876: Keep BAML decompilation working when WPF assemblies are missing

New Features

  • PR #​3847: Unpack !AvaloniaResources into per-file resource tree nodes
  • PR #​3801: Fix #​3797: resolve ilspycmd -t type names with fuzzy matching
  • PR #​3789: Add a bookmarks feature for the decompiled C# view
  • PR #​3786: Add omnibar breadcrumb and search bar above the decompiled code
  • PR #​3769: Make the override modifier a link to the overridden member
  • PR #​3762: Add Open from NuGet feed dialog for browsing and opening packages

User Interface

  • PR #​3857: Fix #​2078: Generic local functions not highlighted properly
  • PR #​3855: Fix #​3845: Add option to expand XML documentation comments
  • PR #​3814: Toggle the fold under the right-click, not at the caret
  • PR #​3812: Syntax-colour analyzer signatures with bold type names (#​2164)

Enhancements

  • PR #​3872: Decompile await on dynamic expressions
  • PR #​3837: Fix #​3804: decompile foreach over inline array
  • PR #​3791: Fix #​3777: decompile runtime async without a separate C# 15 setting
  • PR #​3843: Bound XamarinCompressedFileLoader against crafted XALZ headers
  • PR #​3842: Bound WebCilFile section access against mapped-view length
  • PR #​3841: Harden BAML reader against crafted-resource crashes
  • PR #​3816: Allow overriding an assembly's target framework for reference resolution
  • PR #​3840: Bound .rsrc resource-tree parsing against crafted input
  • PR #​3838: Guard against OOB read when bundle signature is at file start
  • PR #​3818: Display the IL 'tail.' prefix in C# output
  • PR #​3808: Migrate the VS extension to an SDK-style VSIX (dotnet build) and retire the VS2017/2019 add-in
  • PR #​3802: Fix #​3799 and three related stackalloc initializer decompilation defects
  • PR #​3780: Compute public-key tokens with a managed SHA-1
    ... (truncated)

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.4.0 to 18.11.0.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.11.0

What's Changed

New Contributors

Full Changelog: microsoft/vstest@v18.10.1...v18.11.0

18.10.1

What's Changed

Full Changelog: microsoft/vstest@v18.10.0...v18.10.1

18.10.0

What's Changed

Full Changelog: microsoft/vstest@v18.9.0...v18.10.0

18.9.0

What's Changed

New Contributors

Full Changelog: microsoft/vstest@v18.8.0...v18.9.0

18.8.1

What's Changed

Full Changelog: microsoft/vstest@v18.8.0...v18.8.1

18.8.0

What's Changed

Full Changelog: microsoft/vstest@v18.7.0...v18.8.0

18.7.0

What's Changed

New Contributors

Full Changelog: microsoft/vstest@v18.6.0...v18.7.0

18.6.0

What's Changed

Changes to tests and infra

18.5.1

What's Changed

Full Changelog: microsoft/vstest@v18.5.0...v18.5.1

18.5.0

⚠️ Unlisted on Nuget, because of #​15718

What's Changed

Full Changelog: microsoft/vstest@v18.4.0...v18.5.0

Commits viewable in compare view.

Updated Serilog from 4.3.1 to 4.4.0.

Release notes

Sourced from Serilog's releases.

4.4.0

What's Changed

New Contributors

Full Changelog: serilog/serilog@v4.3.1...v4.4.0

Commits viewable in compare view.

Updated xunit.runner.visualstudio from 3.1.5 to 4.0.1.

Release notes

Sourced from xunit.runner.visualstudio's releases.

4.0.1

Release notes: https://xunit.net/releases/visualstudio/4.0.1

4.0.0

Release notes: https://xunit.net/releases/visualstudio/4.0.0

4.0.0-pre.5

Release notes: https://xunit.net/releases/visualstudio/4.0.0-pre.5

4.0.0-pre.4

Release notes: https://xunit.net/releases/visualstudio/4.0.0-pre.4

4.0.0-pre.3

Release notes: https://xunit.net/releases/visualstudio/4.0.0-pre.3

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the major-minor-dependencies group with 4 updates
c44e23f 
Bumps ICSharpCode.ILSpyX from 10.1.1.8388 to 11.2.0.10050
Bumps Microsoft.NET.Test.Sdk from 18.4.0 to 18.11.0
Bumps Serilog from 4.3.1 to 4.4.0
Bumps xunit.runner.visualstudio from 3.1.5 to 4.0.1

---
updated-dependencies:
- dependency-name: ICSharpCode.ILSpyX
  dependency-version: 11.2.0.10050
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major-minor-dependencies
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: major-minor-dependencies
- dependency-name: Serilog
  dependency-version: 4.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: major-minor-dependencies
- dependency-name: xunit.runner.visualstudio
  dependency-version: 4.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major-minor-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added .NET Pull requests that update .net code dependencies Pull requests that update a dependency file labels Nov 10, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .net code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants