Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
nuget	PInvoke.Kernel32

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (17)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
npm	await-semaphore	2017-09-27
npm	cancellationtoken	2021-05-11
npm	caught	2019-11-21
npm	eslint-plugin-import	2025-06-20
npm	eslint-plugin-jsx-a11y	2024-10-26
npm	gulp	2025-06-01
npm	gulp-typescript	2019-11-17
npm	jshint	2022-11-11
npm	mkdirp	2023-04-24
npm	msgpack-lite	2016-10-14
npm	path	2015-09-13
nuget	CSharpIsNullAnalyzer	2024-07-08
nuget	DotNetAnalyzers.DocumentationAnalyzers	2018-10-08
nuget	Microsoft.VisualStudio.Validation	2025-08-09
nuget	NSubstitute.Analyzers.CSharp	2024-02-11
nuget	StyleCop.Analyzers.Unstable	2023-12-20
nuget	System.IO.Pipes	2016-11-15

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Update dependency NSubstitute to 6.2.0
• Lock file maintenance
• 🔐 Create all rate-limited PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• Update pnpm to v11.21.0
• Update typescript-eslint monorepo to v8.67.0 (@typescript-eslint/eslint-plugin, @typescript-eslint/parser)

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update dependency Microsoft.Bcl.AsyncInterfaces to 10.0.11
• Update Dockerfile and global.json updates to v10.0.400 (dotnet-sdk, mcr.microsoft.com/dotnet/sdk)
• Update dotnet monorepo to 2.3.12 (Microsoft.AspNetCore, Microsoft.AspNetCore.TestHost)
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

cargo (1)

src/nerdbank-streams-rs/Cargo.toml (4)

• rand 0.10
• rmp 0.8
• tokio 1.48
• tokio =1.53.1

dockerfile (1)

.devcontainer/Dockerfile (1)

• mcr.microsoft.com/dotnet/sdk 10.0.302@sha256:ed034a8bf0b24ded0cbbac07e17825d8e9ebfe21e308191d0f7421eaf5ad4664 → [Updates: 10.0.400, 10.0.302]

github-actions (7)

.github/actions/publish-artifacts/action.yaml (7)

• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a

.github/workflows/build.yml (6)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/setup-node v7@820762786026740c76f36085b0efc47a31fe5020
• dtolnay/rust-toolchain 1.85.0
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• becheran/mlc v1.2.0@7ec24825cefe0c9c8c6bac48430e1f69e3ec356e
• node 24.x

.github/workflows/codeql.yml (7)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• github/codeql-action v4@5595ccaf912efad79be6eef63a5619ff05969be3
• github/codeql-action v4@5595ccaf912efad79be6eef63a5619ff05969be3
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• github/codeql-action v4@5595ccaf912efad79be6eef63a5619ff05969be3
• github/codeql-action v4@5595ccaf912efad79be6eef63a5619ff05969be3
• github/codeql-action v4@5595ccaf912efad79be6eef63a5619ff05969be3

.github/workflows/copilot-setup-steps.yml (1)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1

.github/workflows/docs.yml (3)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/upload-pages-artifact v5.0.0@fc324d3547104276b827a68afc52ff2a11cc49c9
• actions/deploy-pages v5.0.0@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128

.github/workflows/libtemplate-update.yml (1)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1

.github/workflows/release.yml (8)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• azure/login v3@f5d393ae46f8fde4be8b75f32e3fc50e654ad0ca
• NuGet/login v1.2.0@8d196754b4036150537f80ac539e15c2f1028841
• actions/setup-node v7@820762786026740c76f36085b0efc47a31fe5020
• dtolnay/rust-toolchain 1.85.0
• rust-lang/crates-io-auth-action v1.0.5@c6f97d42243bad5fab37ca0427f495c86d5b1a18
• node 24

npm (2)

src/nerdbank-streams/package.json (29)

• await-semaphore ^0.1.3
• cancellationtoken ^2.2.0
• caught ^0.1.3
• msgpack-lite ^0.1.26
• @types/gulp 4.0.18
• @types/jest 30.0.0
• @types/msgpack-lite 0.1.12
• @types/node 24.13.3
• @typescript/native 7.0.2
• @typescript-eslint/eslint-plugin 8.66.0 → [Updates: 8.67.0]
• @typescript-eslint/parser 8.66.0 → [Updates: 8.67.0]
• eslint 10.8.1
• eslint-config-prettier 10.1.8
• eslint-plugin-import 2.32.0
• eslint-plugin-jsx-a11y 6.10.2
• eslint-plugin-prettier 5.5.6
• gulp 5.0.1
• gulp-typescript 6.0.0-alpha.1
• jest 30.4.2
• jshint 2.13.6
• mkdirp 3.0.1
• nerdbank-gitversioning 3.10.91
• path 0.12.7
• prettier 3.9.6
• ts-jest 29.4.12
• ts-node 10.9.2
• typescript 6.0.2
• vscode-jsonrpc 9.0.1
• pnpm 11.20.0 → [Updates: 11.21.0]

src/nerdbank-streams/pnpm-workspace.yaml

nuget (10)

.config/dotnet-tools.json (6)

• powershell 7.6.4
• dotnet-coverage 18.9.0
• nbgv 3.10.91
• docfx 2.78.5
• nerdbank.dotnetrepotools 1.5.15
• dotnet-symbol 9.0.661903

Directory.Packages.props (30)

• StyleCop.Analyzers.Unstable 1.2.0.556
• PolySharp 1.16.0
• Nerdbank.GitVersioning 3.10.91
• DotNetAnalyzers.DocumentationAnalyzers 1.0.0-beta.59
• CSharpIsNullAnalyzer 0.1.593
• xunit.v3.mtp-v2 3.2.2
• Microsoft.Testing.Extensions.TrxReport 2.3.3
• Microsoft.Testing.Extensions.Telemetry 2.3.3
• Microsoft.Testing.Extensions.HangDump 2.3.3
• Microsoft.Testing.Extensions.CrashDump 2.3.3
• Microsoft.Testing.Extensions.CodeCoverage 18.9.0
• xunit.combinatorial 2.0.24
• xunit.v3.extensibility.core 3.2.2
• System.Text.Json 8.0.6
• System.Runtime.CompilerServices.Unsafe 6.1.2
• System.IO.Pipes 4.3.0
• System.IO.Pipelines 8.0.0
• StreamJsonRpc 2.25.29
• PInvoke.Kernel32 0.7.124
• NSubstitute.Analyzers.CSharp 1.0.17
• NSubstitute 6.1.0 → [Updates: 6.2.0]
• Microsoft.VisualStudio.Validation 17.13.22
• Microsoft.VisualStudio.Threading 18.7.23
• Microsoft.VisualStudio.Threading.Only 18.7.23
• Microsoft.VisualStudio.Threading.Analyzers 18.7.23
• Microsoft.Bcl.AsyncInterfaces 10.0.10 → [Updates: 10.0.11]
• Microsoft.AspNetCore 2.3.11 → [Updates: 2.3.12]
• Microsoft.AspNetCore.TestHost 2.3.11 → [Updates: 2.3.12, 10.0.11]
• BenchmarkDotNet 0.15.8
• BenchmarkDotNet.Diagnostics.Windows 0.15.8

global.json (1)

• dotnet-sdk 10.0.302 → [Updates: 10.0.400]

src/Nerdbank.Streams/Nerdbank.Streams.csproj

test/Directory.Build.targets

test/Directory.Packages.props (2)

• System.Text.Json 10.0.8
• System.IO.Pipelines 10.0.8

test/IsolatedTestHost/IsolatedTestHost.csproj

test/Nerdbank.Streams.Benchmark/Nerdbank.Streams.Benchmark.csproj

test/Nerdbank.Streams.Interop.Tests/Nerdbank.Streams.Interop.Tests.csproj

test/Nerdbank.Streams.Tests/Nerdbank.Streams.Tests.csproj

renovate-config (1)

.github/renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository