Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/Altinn/fileanalyzers-lib-dotnet).

## Deprecations / Replacements
> [!WARNING]
The following dependencies are either deprecated or have replacements available.

| Datasource | Package | Replacement PR? |
|------------|------|--------------|
| nuget | [Verify.Xunit](https://redirect.github.com/VerifyTests/Verify) |  |
| nuget | [xunit](https://redirect.github.com/xunit/xunit) |  |

## Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

- [ ] Update actions/setup-java action to v6
- [ ] Update actions/upload-artifact action to v7
- [ ] Update dependency coverlet.collector to v10
- [ ] Update dependency Microsoft.NET.Test.Sdk to v18
- [ ] Update dependency Microsoft.SourceLink.GitHub to v10
- [ ] Update dependency MinVer to v8
- [ ] Update dependency Verify.Xunit to v31
- [ ] Update dependency xunit.runner.visualstudio to v4
- [ ] Update marocchino/sticky-pull-request-comment action to v3
- [ ] 🔐 **Create all rate-limited PRs at once** 🔐

---

> [!WARNING]
> Renovate failed to look up the following dependencies: `Could not determine new digest for update (github-tags package marocchino/sticky-pull-request-comment)`.
>
> Files affected: `.github/workflows/test-and-analyze-fork.yml`

---

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [Pin dependencies](../pull/53) (`actions/add-to-project`, `actions/download-artifact`)
- [ ] [Update actions/checkout digest to fbc6f39](../pull/46)
- [ ] [Update actions/setup-dotnet digest to 26b0ec1](../pull/48)
- [ ] [Update actions/setup-java digest to b6effb0](../pull/51)
- [ ] [Update github/codeql-action digest to b96794f](../pull/47)
- [ ] [Update nuget non-major dependencies](../pull/39) (`CSharpier.MsBuild`, `MinVer`, `Nullable.Extended.Analyzer`, `PublicApiGenerator`, `SonarAnalyzer.CSharp`, `Verify.Xunit`, `csharpier`, `dotnet-sdk`, `xunit.runner.visualstudio`)
- [ ] [Update actions/cache action to v6](../pull/55)
- [ ] [Update actions/checkout action to v7](../pull/54)
- [ ] [Update actions/setup-dotnet action to v6](../pull/56)
- [ ] [Update dependency dotnet-sdk to v10](../pull/50)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## Detected Dependencies

github-actions (6)

.github/workflows/add-to-project.yml (1)

- `actions/add-to-project main` → [Updates: `main`]

.github/workflows/codeql.yml (4)

- `actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8` → [Updates: `v7`, `v5`]
- `github/codeql-action v4@014f16e7ab1402f30e7c3329d33797e7948572db` → [Updates: `v4`]
- `github/codeql-action v4@014f16e7ab1402f30e7c3329d33797e7948572db` → [Updates: `v4`]
- `github/codeql-action v4@014f16e7ab1402f30e7c3329d33797e7948572db` → [Updates: `v4`]

.github/workflows/dotnet-test.yml (2)

- `actions/setup-dotnet v5@d4c94342e560b34958eacfc5d055d21461ed1c5d` → [Updates: `v6`, `v5`]
- `actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8` → [Updates: `v7`, `v5`]

.github/workflows/publish-release.yml (2)

- `actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8` → [Updates: `v7`, `v5`]
- `actions/setup-dotnet v5@d4c94342e560b34958eacfc5d055d21461ed1c5d` → [Updates: `v6`, `v5`]

.github/workflows/test-and-analyze-fork.yml (6)

- `actions/setup-dotnet v5@d4c94342e560b34958eacfc5d055d21461ed1c5d` → [Updates: `v6`, `v5`]
- `actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8` → [Updates: `v7`, `v5`]
- `actions/upload-artifact v5@330a01c490aca151604b8cf639adc76d48f6c5d4` → [Updates: `v7`]
- `actions/download-artifact master` → [Updates: `master`]
- `irongut/CodeCoverageSummary v1.3.0@51cc3a756ddcd398d447c044c02cb6aa83fdae95`
- `marocchino/sticky-pull-request-comment v2@773744901bac0e8cbb5a0dc842800d45e9b2b405` → [Updates: `v3.0.5`]

.github/workflows/test-and-analyze.yml (5)

- `actions/setup-dotnet v5@d4c94342e560b34958eacfc5d055d21461ed1c5d` → [Updates: `v6`, `v5`]
- `actions/setup-java v5@dded0888837ed1f317902acf8a20df0ad188d165` → [Updates: `v6`, `v5`]
- `actions/checkout v5@08c6903cd8c0fde910a37f88322edcfb5dd907a8` → [Updates: `v7`, `v5`]
- `actions/cache v4@0057852bfaa89a56745cba8c7296529d2fc39830` → [Updates: `v6`]
- `actions/cache v4@0057852bfaa89a56745cba8c7296529d2fc39830` → [Updates: `v6`]

nuget (7)

.config/dotnet-tools.json (1)

- `csharpier 1.1.2` → [Updates: `1.3.0`]

Directory.Build.props

Directory.Packages.props (14)

- `SonarAnalyzer.CSharp 10.15.0.120848` → [Updates: `10.34.0.3385`]
- `Verify.Xunit 30.11.0` → [Updates: `30.20.1`, `31.12.5`]
- `PublicApiGenerator 11.4.6` → [Updates: `11.5.4`]
- `Nullable.Extended.Analyzer 1.15.6581` → [Updates: `1.16.6891`]
- `xunit.runner.visualstudio 3.1.4` → [Updates: `3.1.5`, `4.0.0`]
- `xunit 2.9.3`
- `Moq 4.20.72`
- `MinVer 6.0.0` → [Updates: `6.1.0`, `8.0.0`]
- `Mime-Detective 25.8.1`
- `Microsoft.SourceLink.GitHub 8.0.0` → [Updates: `10.0.401`]
- `Microsoft.NETFramework.ReferenceAssemblies 1.0.3`
- `Microsoft.NET.Test.Sdk 17.14.1` → [Updates: `18.10.0`]
- `CSharpier.MsBuild 1.1.2` → [Updates: `1.3.0`]
- `coverlet.collector 6.0.4` → [Updates: `10.0.1`]

global.json (1)

- `dotnet-sdk 8.0.413` → [Updates: `8.0.425`, `10.0.401`]

src/Altinn.FileAnalyzers/Altinn.FileAnalyzers.csproj

src/Directory.Build.props

test/Altinn.FileAnalyzers.Tests/Altinn.FileAnalyzers.Tests.csproj

renovate-config (1)

renovate.json

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository

This is a Renovate-generated dashboard covering multiple workflows, Directory.Packages.props, global.json, and .config/dotnet-tools.json rather than one scoped change. Start by reviewing the specific rate-limited or open update and its linked pull request; done means the selected dependency update is applied and the repository checks pass.

Written by the indexing model from the issue text.