Skip to content

Bump Microsoft.Build.Utilities.Core from 18.6.3 to 18.7.1#80

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/Microsoft.Build.Utilities.Core-18.7.1
Open

Bump Microsoft.Build.Utilities.Core from 18.6.3 to 18.7.1#80
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/Microsoft.Build.Utilities.Core-18.7.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 11, 2026

Copy link
Copy Markdown
Contributor

Updated Microsoft.Build.Utilities.Core from 18.6.3 to 18.7.1.

Release notes

Sourced from Microsoft.Build.Utilities.Core's releases.

18.7.1

What's Changed

Commits viewable in compare view.

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot
Bump Microsoft.Build.Utilities.Core from 18.6.3 to 18.7.1
d141443 
---
updated-dependencies:
- dependency-name: Microsoft.Build.Utilities.Core
  dependency-version: 18.7.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added .NET Pull requests that update .net code dependencies labels Jun 11, 2026
@codecov

codecov Bot commented Jun 11, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 100.00%. Comparing base (14fb4eb) to head (d141443).
✅ All tests successful. No failed tests found.

Additional details and impacted files 
@@            Coverage Diff            @@
##              main       #80   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files            2         2           
  Lines           37        37           
  Branches         3         3           
=========================================
  Hits            37        37

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

@github-actions

github-actions Bot commented Jun 11, 2026

Copy link
Copy Markdown
Contributor

❌MegaLinter analysis: Error

Descriptor Linter Files Fixed Errors Warnings Elapsed time
✅ ACTION actionlint 4 0 0 0.06s
❌ ACTION zizmor 4 1 0 0.34s
✅ EDITORCONFIG editorconfig-checker 42 0 0 0.06s
✅ JSON jsonlint 2 0 0 0.16s
✅ JSON prettier 2 0 0 0.49s
✅ JSON v8r 2 0 0 3.38s
✅ MARKDOWN markdownlint 1 0 0 0.7s
✅ MARKDOWN markdown-table-formatter 1 0 0 0.34s
✅ REPOSITORY checkov yes no no 19.49s
✅ REPOSITORY gitleaks yes no no 0.22s
✅ REPOSITORY git_diff yes no no 0.01s
✅ REPOSITORY grype yes no no 50.51s
❌ REPOSITORY osv-scanner yes 1 no 0.14s
✅ REPOSITORY secretlint yes no no 1.03s
✅ REPOSITORY syft yes no no 2.23s
✅ REPOSITORY trivy-sbom yes no no 0.31s
✅ REPOSITORY trufflehog yes no no 5.34s
✅ XML xmllint 14 0 0 0.64s
✅ YAML prettier 9 0 0 0.69s
✅ YAML v8r 9 0 0 8.2s
✅ YAML yamllint 9 0 0 0.55s

Detailed Issues

❌ REPOSITORY / osv-scanner - 1 error 
Scanning dir .
Starting filesystem walk for root: /
End status: 42 dirs visited, 134 inodes visited, 0 Extract calls, 3.941675ms elapsed, 3.941905ms wall time
No package sources found, --help for usage information.
❌ ACTION / zizmor - 1 error 
INFO zizmor: 🌈 zizmor v1.25.0
fatal: no audit was performed
'ref-confusion' audit failed on file://.github/workflows/codeql.yml

Caused by:
    0: error in 'ref-confusion' audit
    1: couldn't list branches for actions/checkout
    2: request error while accessing GitHub API
    3: HTTP status client error (401 Unauthorized) for url (https://github.com/actions/checkout.git/git-upload-pack)


[ZizmorLinter] Zizmor failed to reach the GitHub API.
To allow zizmor to use GITHUB_TOKEN, add the following to your .mega-linter.yml:
ACTION_ZIZMOR_UNSECURED_ENV_VARIABLES:
  - GITHUB_TOKEN

Notices

📣 MegaLinter 9.5.0 is out! Discover the new features and security recommendations in the release announcement. (Skip this info by defining SECURITY_SUGGESTIONS: false)

See detailed reports in MegaLinter artifacts

You could have the same capabilities but better runtime performances if you use a MegaLinter flavor:

Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)

  • Documentation: Custom Flavors
  • Command: npx mega-linter-runner@9.5.0 --custom-flavor-setup --custom-flavor-linters ACTION_ACTIONLINT,ACTION_ZIZMOR,EDITORCONFIG_EDITORCONFIG_CHECKER,JSON_JSONLINT,JSON_V8R,JSON_PRETTIER,MARKDOWN_MARKDOWNLINT,MARKDOWN_MARKDOWN_TABLE_FORMATTER,REPOSITORY_CHECKOV,REPOSITORY_GIT_DIFF,REPOSITORY_GITLEAKS,REPOSITORY_GRYPE,REPOSITORY_OSV_SCANNER,REPOSITORY_SECRETLINT,REPOSITORY_SYFT,REPOSITORY_TRIVY_SBOM,REPOSITORY_TRUFFLEHOG,XML_XMLLINT,YAML_PRETTIER,YAML_YAMLLINT,YAML_V8R

MegaLinter is graciously provided by OX Security
Show us your support by starring ⭐ the repository

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies .NET Pull requests that update .net code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants