)]}'
{
  "log": [
    {
      "commit": "862f3fc3e76dcd563ddef662758cdf2f8d6b51b0",
      "tree": "2339122e78b660f9541c74d696962df5e786fe50",
      "parents": [
        "b739fda203ce7ec380b44e9d2d84341aee1be83b"
      ],
      "author": {
        "name": "Curt Hagenlocher",
        "email": "curt@hagenlocher.org",
        "time": "Sun Sep 13 16:49:47 2026 -0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sun Sep 13 16:49:47 2026 -0700"
      },
      "message": "feat: Support IPC Message custom_metadata in ArrowStreamWriter and ArrowStreamReader (#432)\n\nAdds IPC `Message.custom_metadata` support to the stream and file\nreaders and writers.\n\n## Credit\n\nThe original implementation is **@cmettler\u0027s** work in #283 (closing\n#282). **@rustyconover** rebased it onto a `main` that had drifted ~76\ncommits ahead and addressed the first round of review comments in #424.\nBoth of those PRs are branches on personal forks; this one moves the\nwork onto a branch in the base repository so that any committer can push\nto it, and supersedes them. The individual commits here retain their\noriginal authorship.\n\n## What this adds\n\n- `ArrowStreamReader.ReadNextRecordBatchWithCustomMetadata()` and\n`…Async()` return a `RecordBatchWithMetadata` pairing the batch with its\nIPC `Message.custom_metadata`, mirroring pyarrow\u0027s\n`read_next_batch_with_custom_metadata()` and the equivalent Arrow C++\nstruct. The struct deconstructs, so callers can write `var (batch,\nmetadata) \u003d …`.\n- `ArrowFileReader.ReadRecordBatchWithCustomMetadataAsync(int index)`\ngives the indexed read the same capability as the sequential one.\n- `ArrowStreamWriter.WriteRecordBatch(batch, customMetadata)` and the\nasync counterpart attach per-message `custom_metadata` when writing,\nmatching pyarrow\u0027s `write_batch(batch, custom_metadata)`.\n- Cross-language round-trip tests via pythonnet + pyarrow, skipped\nunless `PYTHONNET_PYDLL` is set, consistent with the existing\n`CDataSchemaPythonTest` pattern.\n\n## Changes on top of #424\n\n- The read side originally exposed a `LastBatchCustomMetadata` property.\nA property that has to be read at exactly the right moment is easy to\nget out of step with the batch in hand, and it had no sensible value at\nthe end of the stream, so it was replaced with the\n`RecordBatchWithMetadata` return type above. The transient state on\n`ArrowReaderImplementation` remains, but it is internal and consumed\nimmediately.\n- The new write overloads went straight to `WriteRecordBatchInternal`,\nwhile `ArrowFileWriter` relied on overriding each public\n`WriteRecordBatch` to call `WriteStart()` first — so the new overload on\nan `ArrowFileWriter` skipped the ARROW1 magic and silently produced a\nfile that `ArrowFileReader` rejects. `WriteStart()`/`WriteStartAsync()`\nmoved into `WriteRecordBatchInternal`, where every write path must pass\nthrough it; both are idempotent, so byte output is unchanged for the\nstream writer, the file writer and Flight.\n- Removed the second virtual `WriteMessageAsync` overload. Two virtual\noverloads where one forwards to the other is the trap that already\nrouted Flight\u0027s record batch writes past `FlightDataStream`\u0027s override.\n- Custom metadata is validated before anything is written rather than\npart-way through building the message, so a rejected dictionary leaves\nthe writer usable.\n- `Message.custom_metadata` is read the same way schema and field\nmetadata already are in `MessageSerializer`, rather than skipping null\nkeys and rewriting null values as `\"\"`.\n\n## Verification\n\n- `dotnet build Apache.Arrow.sln` — succeeds, 0 warnings, 0 errors.\n- `dotnet test test/Apache.Arrow.Tests` — 1893 passed / 30 skipped on\nnet8.0, 1849 passed / 30 skipped on net462 and net472, 0 failed. The\nskips are the pre-existing Python-dependent tests.\n\nCloses #282\nSupersedes #283\nSupersedes #424\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nhttps://claude.ai/code/session_01DT86mdkGm3XseKwiUeGUcx\n\nCo-Authored-By: Christoph Mettler\n\u003c116812500+cmettler@users.noreply.github.com\u003e\nCo-Authored-By: Rusty Conover \u003crusty@conover.me\u003e\n\n---------\n\nCo-authored-by: Christoph Mettler \u003cc.mettler@ethenea.com\u003e\nCo-authored-by: Claude Opus 4.6 \u003cnoreply@anthropic.com\u003e\nCo-authored-by: Rusty Conover \u003crusty@conover.me\u003e"
    },
    {
      "commit": "b739fda203ce7ec380b44e9d2d84341aee1be83b",
      "tree": "887bb2da631f5523c1b43d0830ec06718c78f4b0",
      "parents": [
        "eb05b1273420bd092df3dc3b38d47b00c3c8bb1f"
      ],
      "author": {
        "name": "George Vanburgh",
        "email": "1670176+georgevanburgh@users.noreply.github.com",
        "time": "Mon Sep 14 00:48:30 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sun Sep 13 16:48:30 2026 -0700"
      },
      "message": "perf: Copy fixed-size binary values using CopyTo (#434)\n\nWhen looking at some work related to #96, I noticed that\n`FixedSizeBinaryArray.BuilderBase.Set` copied each value one byte at a\ntime. `CopyTo` copies the requested fixed-width slice in one call to\nremove work that scaled with the byte width. It\u0027s a small absolute\nimprovement, but it does show up on the hot path for some fixed width\ntype conversions.\n\nBenchmarked the impact on `GuidArray`, and setting raw bytes. Results\nare mean time per operation; lower is better.\n\n| Operation | .NET 8 before | .NET 8 after | Change | .NET 10 before |\n.NET 10 after | Change |\n|---|---:|---:|---:|---:|---:|---:|\n| Set GUIDs | 328.6 µs | 170.5 µs | 48% faster | 367.2 µs | 152.4 µs |\n58% faster |\n| Set precomputed 16-byte values | 259.3 µs | 79.3 µs | 69% faster |\n318.2 µs | 62.8 µs | 80% faster |\n\nBoth runtime comparisons used BenchmarkDotNet 0.15.8, 15 measured\niterations across two launches, on an AMD Ryzen 7 5800X. Runtime\nversions were .NET 8.0.31 and .NET 10.0.12. The harness verifies GUID\nround trips in setup.\n\n\u003cdetails\u003e\n\n\u003csummary\u003eBenchmark harness used for these GUID results:\u003c/summary\u003e\n\n```csharp\nusing System;\nusing BenchmarkDotNet.Attributes;\n\nnamespace Apache.Arrow.Benchmarks\n{\n    [MemoryDiagnoser]\n    public class GuidBenchmark\n    {\n        [Params(10_000)]\n        public int Count { get; set; }\n        private Guid[] _values;\n        private byte[][] _bytes;\n        private GuidArray.Builder _setBuilder;\n\n        [GlobalSetup]\n        public void Setup()\n        {\n            var random \u003d new Random(42);\n            _values \u003d new Guid[Count];\n            _bytes \u003d new byte[Count][];\n            _setBuilder \u003d new GuidArray.Builder().Resize(Count);\n            _appendBuilder \u003d new GuidArray.Builder().Reserve(Count);\n            byte[] bytes \u003d new byte[16];\n            for (int i \u003d 0; i \u003c Count; i++)\n            {\n                random.NextBytes(bytes);\n                _values[i] \u003d new Guid(bytes);\n                _bytes[i] \u003d GuidArray.GuidToBytes(_values[i]);\n            }\n            SetGuid();\n            _array \u003d _setBuilder.Build();\n            for (int i \u003d 0; i \u003c Count; i++)\n                if (_array.GetGuid(i) !\u003d _values[i]) throw new Exception(\"GUID round trip failed\");\n        }\n\n        [Benchmark]\n        public GuidArray.Builder SetGuid()\n        {\n            var builder \u003d _setBuilder;\n            for (int i \u003d 0; i \u003c Count; i++) builder.Set(i, _values[i]);\n            return builder;\n        }\n\n        [Benchmark]\n        public GuidArray.Builder SetBytes()\n        {\n            var builder \u003d _setBuilder;\n            for (int i \u003d 0; i \u003c Count; i++) builder.Set(i, _bytes[i]);\n            return builder;\n        }\n\n        [GlobalCleanup]\n        public void Cleanup() \u003d\u003e _array.Dispose();\n    }\n}\n```\n\u003c/details\u003e\n\nAlso ran some benchmarks for different values of ByteWidth:\n\n### Before\n\n| Method | Job | Runtime | Count | Mean | Error | StdDev | Ratio |\nRatioSD | Allocated | Alloc Ratio |\n|------------ |---------- |---------- |------\n|----------:|----------:|----------:|------:|--------:|----------:|------------:|\n| SetBytes_4 | .NET 10.0 | .NET 10.0 | 10000 | 103.39 μs | 0.680 μs |\n1.018 μs | 1.12 | 0.01 | - | NA |\n| SetBytes_4 | .NET 8.0 | .NET 8.0 | 10000 | 92.33 μs | 0.581 μs | 0.814\nμs | 1.00 | 0.01 | - | NA |\n| | | | | | | | | | | |\n| SetBytes_8 | .NET 10.0 | .NET 10.0 | 10000 | 205.57 μs | 24.169 μs |\n34.662 μs | 1.38 | 0.23 | - | NA |\n| SetBytes_8 | .NET 8.0 | .NET 8.0 | 10000 | 148.93 μs | 2.049 μs |\n3.004 μs | 1.00 | 0.03 | - | NA |\n| | | | | | | | | | | |\n| SetBytes_16 | .NET 10.0 | .NET 10.0 | 10000 | 307.22 μs | 1.168 μs |\n1.638 μs | 1.16 | 0.02 | - | NA |\n| SetBytes_16 | .NET 8.0 | .NET 8.0 | 10000 | 265.20 μs | 3.166 μs |\n4.738 μs | 1.00 | 0.02 | - | NA |\n| | | | | | | | | | | |\n| SetBytes_32 | .NET 10.0 | .NET 10.0 | 10000 | 579.55 μs | 2.377 μs |\n3.254 μs | 1.16 | 0.02 | - | NA |\n| SetBytes_32 | .NET 8.0 | .NET 8.0 | 10000 | 497.96 μs | 5.542 μs |\n7.948 μs | 1.00 | 0.02 | - | NA |\n\n### After\n\n| Method | Job | Runtime | Count | Mean | Error | StdDev | Median |\nRatio | RatioSD | Allocated | Alloc Ratio |\n|------------ |---------- |---------- |------\n|---------:|---------:|---------:|---------:|------:|--------:|----------:|------------:|\n| SetBytes_4 | .NET 10.0 | .NET 10.0 | 10000 | 62.43 μs | 0.610 μs |\n0.914 μs | 62.26 μs | 0.74 | 0.01 | - | NA |\n| SetBytes_4 | .NET 8.0 | .NET 8.0 | 10000 | 84.29 μs | 0.356 μs | 0.522\nμs | 84.20 μs | 1.00 | 0.01 | - | NA |\n| | | | | | | | | | | | |\n| SetBytes_8 | .NET 10.0 | .NET 10.0 | 10000 | 69.49 μs | 4.899 μs |\n7.181 μs | 75.72 μs | 0.82 | 0.08 | - | NA |\n| SetBytes_8 | .NET 8.0 | .NET 8.0 | 10000 | 85.25 μs | 1.264 μs | 1.892\nμs | 84.68 μs | 1.00 | 0.03 | - | NA |\n| | | | | | | | | | | | |\n| SetBytes_16 | .NET 10.0 | .NET 10.0 | 10000 | 61.86 μs | 0.297 μs |\n0.407 μs | 61.83 μs | 0.73 | 0.01 | - | NA |\n| SetBytes_16 | .NET 8.0 | .NET 8.0 | 10000 | 84.78 μs | 0.803 μs |\n1.201 μs | 84.42 μs | 1.00 | 0.02 | - | NA |\n| | | | | | | | | | | | |\n| SetBytes_32 | .NET 10.0 | .NET 10.0 | 10000 | 62.44 μs | 0.506 μs |\n0.709 μs | 62.09 μs | 0.73 | 0.02 | - | NA |\n| SetBytes_32 | .NET 8.0 | .NET 8.0 | 10000 | 86.12 μs | 1.471 μs |\n2.061 μs | 84.99 μs | 1.00 | 0.03 | - | NA |"
    },
    {
      "commit": "eb05b1273420bd092df3dc3b38d47b00c3c8bb1f",
      "tree": "3976ed76c4a3ce10e15e11f2b9f13471081f786b",
      "parents": [
        "6ef78e5559fa398dd16bac003dbe9c6eff2eb99a"
      ],
      "author": {
        "name": "Curt Hagenlocher",
        "email": "curt@hagenlocher.org",
        "time": "Sun Sep 13 15:16:33 2026 -0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sun Sep 13 15:16:33 2026 -0700"
      },
      "message": "fix: update dependency with vulnerabilities (#431)\n\n## What\u0027s Changed\n\nMoves to a version of SourceLink that doesn\u0027t have a vulnerable\ndependency"
    },
    {
      "commit": "6ef78e5559fa398dd16bac003dbe9c6eff2eb99a",
      "tree": "ac56c479693be6d2344b1a722b27695da337265d",
      "parents": [
        "021db72c5b6130c50076499f15b8b1c47732c4ef"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Sun Sep 06 20:55:45 2026 -0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sun Sep 06 20:55:45 2026 -0700"
      },
      "message": "chore: Bump actions/deploy-pages from 5.0.0 to 5.0.1 (#429)\n\nBumps [actions/deploy-pages](https://github.com/actions/deploy-pages)\nfrom 5.0.0 to 5.0.1.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/actions/deploy-pages/releases\"\u003eactions/deploy-pages\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.0.1\u003c/h2\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eAdd backoff and jitter to deployment polling \u003ca\nhref\u003d\"https://github.com/yoannchaudet\"\u003e\u003ccode\u003e@​yoannchaudet\u003c/code\u003e\u003c/a\u003e\n(\u003ca\nhref\u003d\"https://redirect.github.com/actions/deploy-pages/issues/444\"\u003e#444\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove deployment request test coverage \u003ca\nhref\u003d\"https://github.com/adwitiyagoyal\"\u003e\u003ccode\u003e@​adwitiyagoyal\u003c/code\u003e\u003c/a\u003e\n(\u003ca\nhref\u003d\"https://redirect.github.com/actions/deploy-pages/issues/440\"\u003e#440\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003eSee details of \u003ca\nhref\u003d\"https://github.com/actions/deploy-pages/compare/v5.0.0...v5.0.1\"\u003eall\ncode changes\u003c/a\u003e since previous release.\u003c/p\u003e\n\u003cp\u003e:warning: For use with products other than GitHub.com, such as GitHub\nEnterprise Server, please consult the \u003ca\nhref\u003d\"https://github.com/actions/deploy-pages/#compatibility\"\u003ecompatibility\ntable\u003c/a\u003e.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/deploy-pages/commit/368f82528645a54fb793d4d04e342629a3f51346\"\u003e\u003ccode\u003e368f825\u003c/code\u003e\u003c/a\u003e\nMerge pull request \u003ca\nhref\u003d\"https://redirect.github.com/actions/deploy-pages/issues/444\"\u003e#444\u003c/a\u003e\nfrom actions/yoannchaudet-deployment-polling-backoff\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/deploy-pages/commit/7e97763d1f8271fc88f351a0c275f37de7f32094\"\u003e\u003ccode\u003e7e97763\u003c/code\u003e\u003c/a\u003e\nValidate deployment polling intervals\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/deploy-pages/commit/0143e11abb4ace1f6858cb44b2ab99eae8a40b45\"\u003e\u003ccode\u003e0143e11\u003c/code\u003e\u003c/a\u003e\nAdd backoff and jitter to deployment polling\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/deploy-pages/commit/5e98f10ce206463e411e82ac66ef0f2df79c5499\"\u003e\u003ccode\u003e5e98f10\u003c/code\u003e\u003c/a\u003e\nMerge pull request \u003ca\nhref\u003d\"https://redirect.github.com/actions/deploy-pages/issues/440\"\u003e#440\u003c/a\u003e\nfrom actions/user/adwitiya\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/deploy-pages/commit/8b0625abb54462fce279dc6ce57ef7ce0fb8b8fc\"\u003e\u003ccode\u003e8b0625a\u003c/code\u003e\u003c/a\u003e\nImprove deployment request test coverage\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca\nhref\u003d\"https://github.com/actions/deploy-pages/compare/cd2ce8fcbc39b97be8ca5fce6e763baed58fa128...368f82528645a54fb793d4d04e342629a3f51346\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dactions/deploy-pages\u0026package-manager\u003dgithub_actions\u0026previous-version\u003d5.0.0\u0026new-version\u003d5.0.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "021db72c5b6130c50076499f15b8b1c47732c4ef",
      "tree": "727c770046e09dfe7b6a45177b98dd05a90defb5",
      "parents": [
        "d297acafffbde58dea3c6efe47647771d8478921"
      ],
      "author": {
        "name": "Curt Hagenlocher",
        "email": "curt@hagenlocher.org",
        "time": "Sun Sep 06 20:26:24 2026 -0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sun Sep 06 20:26:24 2026 -0700"
      },
      "message": "feat: Improve the implementation of TimestampWithOffsetArray.Builder (#428)\n\n## What\u0027s Changed\n\nImprove the implementation of TimestampWithOffsetArray.Builder. This\nbrings the implementation of the builder in line with the other\nbuilders."
    },
    {
      "commit": "d297acafffbde58dea3c6efe47647771d8478921",
      "tree": "3be69e592e64fae8a4baa399539e1d6076140779",
      "parents": [
        "07db1136ddfafe47ffbba4dda5c48e18bd3fedb0"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue Sep 01 09:15:57 2026 +1200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Sep 01 09:15:57 2026 +1200"
      },
      "message": "chore: Bump Xunit.SkippableFact from 1.5.61 to 1.5.85 (#427)\n\nUpdated\n[Xunit.SkippableFact](https://github.com/AArnott/Xunit.SkippableFact)\nfrom 1.5.61 to 1.5.85.\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "07db1136ddfafe47ffbba4dda5c48e18bd3fedb0",
      "tree": "99a2393d2b338a516a39a6cd5bf8ed2c6816da95",
      "parents": [
        "62f27900431626588b84acdf891a8a7deab8849e"
      ],
      "author": {
        "name": "Rusty Conover",
        "email": "rusty@conover.me",
        "time": "Tue Aug 25 15:56:44 2026 -0400"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Aug 25 12:56:44 2026 -0700"
      },
      "message": "fix: Return immediately from a zero-length ReadFullBufferAsync/ReadFullBuffer instead of calling into the stream (#426)\n\n## What\u0027s Changed\n\n`StreamExtensions.ReadFullBufferAsync`/`ReadFullBuffer` called\n`stream.ReadAsync`/`stream.Read` with a zero-length buffer\nunconditionally, whenever a message body is legitimately empty (e.g. a\n`RecordBatch` built from a zero-column schema, which has no buffers).\nOver a `MemoryStream` this is a harmless no-op, but over a real\nsocket-backed `NetworkStream` a zero-byte read does not complete\nimmediately — it blocks as though waiting for the peer to send more\ndata, instead of trivially returning `0`. In a lockstep/RPC-style\nprotocol this blocks indefinitely, since the peer is itself waiting for\na response before sending anything further.\n\nBoth helpers now short-circuit `buffer.Length \u003d\u003d 0` and return `0`\nimmediately, before ever touching the stream — matching Go\u0027s\n`io.ReadFull`, which documents the same special-case for a zero-length\nbuffer.\n\nFull repro (real `pyarrow` client, real socket, `strace` evidence\npinning the exact hang to this call) is in the linked issue.\n\nAdded `StreamExtensionsTests.cs`: a `Stream` subclass whose\n`Read`/`ReadAsync` throw if ever invoked confirms the zero-length fast\npath never touches the underlying stream, plus two tests confirming\nnormal non-empty reads are unaffected. `dotnet test\ntest/Apache.Arrow.Tests` passes in full (1874 passed, 28 skipped —\nunrelated Python interop tests, pre-existing).\n\nCloses #425.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)"
    },
    {
      "commit": "62f27900431626588b84acdf891a8a7deab8849e",
      "tree": "b82ac84cd2d6edac8866151214f9ce61a07a2060",
      "parents": [
        "db7f1e4118cbc29f871b82bbb3e6c2aa642cb50f"
      ],
      "author": {
        "name": "Curt Hagenlocher",
        "email": "curt@hagenlocher.org",
        "time": "Sun Aug 23 08:27:37 2026 -0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sun Aug 23 08:27:37 2026 -0700"
      },
      "message": "test: Cover the Variant object header size matrix end to end (#422)\n\n## What\u0027s Changed\n\nAdditional test coverage for #420.\n\n#421 fixed `MakeObjectHeader` / `ParseObjectHeader` writing\n`field_id_size` and `offset_size` into each other\u0027s bits, and pinned\nboth helpers to literal header bytes. That coverage stops at the helper:\nit says nothing about which widths `VariantValueWriter` asks for, or\nwhether the body it emits is laid out at the widths the header declares.\n\n`VariantObjectHeaderSizeTests` builds real objects over the matrix of\nreachable widths — the dictionary is padded with names sorting ahead of\nthe object\u0027s own to drive field IDs into the 2- and 3-byte bands, and\nthe first field\u0027s value is padded to drive the end offset into them.\nEach case asserts the emitted header byte, decodes the object body with\na decoder written from the spec rather than through\n`VariantEncodingHelper`, checks that the widths were forced for the\nreason intended (largest ID, end offset), and reads the object back\nthrough the library. A second theory covers objects of 300 fields, which\npack `is_large` into bit 6 alongside the two size fields.\n\nWidth 4 is unreachable from a real object: a 4-byte field ID needs a\ndictionary of more than 16,777,216 entries and a 4-byte offset needs\nmore than 16 MiB of field data, so those cells stay covered at the\nhelper level.\n\n---------\n\nCo-authored-by: Claude Opus 5 (1M context) \u003cnoreply@anthropic.com\u003e"
    },
    {
      "commit": "db7f1e4118cbc29f871b82bbb3e6c2aa642cb50f",
      "tree": "0bcfe1b4d0688e6072753fa37c9e8ea768441da6",
      "parents": [
        "468d31c936e32e049d3be7f50684867dc2851c36"
      ],
      "author": {
        "name": "Curt Hagenlocher",
        "email": "curt@hagenlocher.org",
        "time": "Sat Aug 22 08:13:12 2026 -0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sat Aug 22 08:13:12 2026 -0700"
      },
      "message": "fix: Saturate NativeBuffer growth instead of overflowing past half of int.MaxValue (#419)\n\n## What\u0027s Changed\n\n`Grow` doubled the current length in a `checked` context without\nsaturating:\n\n```csharp\nint newCount \u003d Math.Max(newElementCount, checked(Length * 2));\n```\n\nSo once a buffer passed half of the addressable maximum, its **next**\ngrow threw `OverflowException`\nhowever small the requested increase, and even though the requested size\nstill fit. For a\n`NativeBuffer\u003cbyte, …\u003e` that is a hard ceiling near 1 GiB, with no way\nfor a caller to work around it:\nasking for a smaller increment does not help, because the overflow is in\nthe doubling rather than in\nthe request.\n\nGrowth now saturates at the largest addressable element count, so it\nstays amortised right up to the\nceiling. A request that genuinely cannot be addressed still fails at the\nbyte-size calculation, as it\ndid before — behaviour is unchanged for anything that could not have\nworked.\n\nThis is what the `TODO` those lines carried proposed:\n\n\u003e There might be a size that\u0027s big enough to work for this case but not\ntoo big to overflow. We could\n\u003e use that instead of blindly doubling.\n\n### On testing it\n\nReaching the boundary through `Grow` means allocating more than a\ngigabyte, which does not belong in\na unit test. The count arithmetic is extracted to `ComputeGrowCount` so\nthe boundary can be tested\ndirectly and exhaustively, including the per-element-size ceiling — the\nlimit is a byte count, so a\nwider element type saturates at proportionally fewer elements.\n\nVerified the new tests fail against the previous arithmetic before\nfixing it: with `checked(Length *\n2)` restored, `ComputeGrowCountSaturatesInsteadOfOverflowing` and\n`ComputeGrowCountSaturatesPerElementSize` both fail; the rest pass\neither way.\n\n`Apache.Arrow.Tests` is green on net8.0: 1870 passed, 28 skipped (the\nPython interop cases).\n\n### Scope\n\nThis does not change the 2 GiB ceiling on `ArrowBuffer` itself\n(`ReadOnlyMemory\u003cbyte\u003e`, `int Length`)\n— it only stops buffers failing at half of it.\n\nCloses #418.\n\n---------\n\nCo-authored-by: Claude Opus 5 (1M context) \u003cnoreply@anthropic.com\u003e"
    },
    {
      "commit": "468d31c936e32e049d3be7f50684867dc2851c36",
      "tree": "7194c95b3fa01e070d31f7af595f6ecc3a73e4ad",
      "parents": [
        "1abe8ab88d5ac3f1bb660d610ed4aec6c974e8ad"
      ],
      "author": {
        "name": "Curt Hagenlocher",
        "email": "curt@hagenlocher.org",
        "time": "Sat Aug 22 07:21:15 2026 -0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sat Aug 22 07:21:15 2026 -0700"
      },
      "message": "chore: Remove UTF-8 BOMs from source files and enforce their absence (#417)\n\n### Rationale for this change\n\nThe repository was split roughly in half on byte order mark usage — 272\nof 539 `.cs` files carried a UTF-8 BOM. Editors and tools that save\nwithout one silently strip it, which shows up as spurious first-line\nchanges in otherwise unrelated pull requests. #406 is a recent example:\nfive of its six files had a BOM removed from line 1, unrelated to the\nchange itself.\n\nNothing enforced either convention, so the churn could go in both\ndirections indefinitely.\n\n### What changes are included in this PR?\n\nThree commits.\n\n**1. Strip the BOM** from all tracked `.cs`, `.csproj`, and `.json`\nfiles (275 files). Every change in that commit is exactly one line, at\nline 1, differing only by the removed `EF BB BF` bytes — verified with\n`git diff --numstat` (all `1/1`) and by confirming every removed line\nmatches its added line once the BOM is dropped.\n\n`examples/Examples.sln` and `src/Apache.Arrow/Properties/Resources.resx`\nare deliberately left alone, since Visual Studio rewrites both with a\nBOM and stripping them would just churn back.\n\n**2. Enforce it** so this does not drift again:\n\n- `charset \u003d utf-8` under `[*.cs]` in `.editorconfig`. The existing\n`format` pre-commit hook runs `dotnet format`, which honors `charset`,\nso this is enforced by the `Lint` CI job as-is.\n(`*.{csproj,props,targets}` already declared this; two `.csproj` files\nwere quietly in violation.)\n- The upstream `fix-byte-order-marker` hook, to cover what `dotnet\nformat` cannot see: files outside the solution such as\n`launchSettings.json`, and anything under the\n`src/Apache.Arrow/Flatbuf/FlatBuffers/` directory that the `format` hook\nexcludes.\n\nContributors who run `pre-commit install` get the check locally as well.\n\n**3. Fix a malformed ASF license header** in `Time32Array.cs` and\n`Time64Array.cs`, whose first line read `// Licensed to the Apache\nSoftware Foundation (ASF) under one or moreDate32Array`.\n\nThis is the one content change in the PR, so it is isolated in its own\ncommit. The typo is pre-existing — a copy-paste slip from the\n`Date32Array` template in 71dc961 (ARROW-16660, #13279, June 2022). It\nsurvived four years precisely because the BOM kept line 1 out of\neveryone\u0027s diffs; removing the BOM surfaced it immediately. These were\nthe only two files in the repository with a malformed header line.\n\n### Are these changes tested?\n\nYes.\n\n- `dotnet build Apache.Arrow.sln -c Release` succeeds with 0 warnings\nand 0 errors. 38 `.cs` files already lacked a BOM while containing\nnon-ASCII bytes before this PR, so Roslyn\u0027s UTF-8 default was already\nbeing exercised; removing the remaining BOMs does not change how any\nfile decodes.\n- `dotnet format --verify-no-changes` exits 0 on the resulting tree, and\nexits 2 with `error CHARSET: Fix file encoding.` when a BOM is\nreintroduced.\n- `fix-byte-order-marker` passes on the resulting tree, and fails when a\nBOM is reintroduced into `launchSettings.json` or `FlatBufferBuilder.cs`\n— the two blind spots `dotnet format` misses. The two excluded files\nkeep their BOMs.\n- Apart from the two header lines in commit 3, every file in this PR was\nconfirmed byte-identical to `main` once the leading BOM is removed.\n\n### Are there any user-facing changes?\n\nNo. This is an encoding-only change to source files, plus a comment typo\nfix; no API, behavior, or build output is affected.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Opus 5 (1M context) \u003cnoreply@anthropic.com\u003e"
    },
    {
      "commit": "1abe8ab88d5ac3f1bb660d610ed4aec6c974e8ad",
      "tree": "2df86dd42cdb2735ec29972e41019f9b5c041e32",
      "parents": [
        "c5a82e5ed84324b167fc320b56e8dc4e9fac52cd"
      ],
      "author": {
        "name": "Robert Yokota",
        "email": "rayokota@gmail.com",
        "time": "Sat Aug 22 06:34:34 2026 -0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sat Aug 22 06:34:34 2026 -0700"
      },
      "message": "fix: encoding of Variant object header field-id and offset sizes (#421)\n\n### What\n\n`VariantEncodingHelper` wrote and read the Variant object value header\nwith\n`field_id_size_minus_one` and `field_offset_size_minus_one` in each\nother\u0027s bit positions.\n\nPer `apache/parquet-format` `VariantEncoding.md`, the object\n`value_header` — the 6 bits above\nthe 2 basic-type bits — is laid out as:\n\n```\n                  5   4  3     2 1     0\n                +---+---+-------+-------+\nvalue_header    | R |   |       |       |\n                +---+---+-------+-------+\n                      ^     ^       ^\n                      |     |       +-- field_offset_size_minus_one\n                      |     +-- field_id_size_minus_one\n                      +-- is_large\n```\n\n`MakeObjectHeader` and `ParseObjectHeader` had the two 2-bit fields\ntransposed, and the layout\ncomment above them documented the same transposition — so the block was\ninternally consistent\nrather than wrong in one expression.\n\n`is_large` was already correct. The array header and metadata header\nhelpers were checked and\nmatch the spec. This affects the object header only.\n\n### Impact\n\nReader and writer shared the inverted convention, so arrow-dotnet\nround-tripped its own output\ncorrectly. The bug was only observable across implementations, and only\nwhen\n`fieldIdSize !\u003d offsetSize` — when the two are equal, transposing them\nis a no-op.\n\nThose sizes are computed independently in `VariantValueWriter`\n(`fieldIdSize` from the maximum\nfield ID, `offsetSize` from the encoded data length), so they diverge\nroutinely: for example an\nobject drawn from a \u003e255-entry metadata dictionary (2-byte field IDs)\nwhose own field data is\nunder 256 bytes (1-byte offsets).\n\nFor `fieldIdSize\u003d2, offsetSize\u003d1, isLarge\u003dfalse`, the spec-correct\nheader byte is `0x12`;\nbefore this change we emitted `0x06`, and read `0x12` back as\n`fieldIdSize\u003d1, offsetSize\u003d2`.\nSuch objects were silently misparsed in both directions — field IDs and\noffsets read at the\nwrong widths, surfacing as garbage field values or out-of-range offsets\nrather than a clean\nerror.\n\n### Changes\n\n- `VariantEncodingHelper.MakeObjectHeader` / `ParseObjectHeader`: swap\nthe two shifts, and\ncorrect the layout comment. The `out` parameters were already named\ncorrectly, so neither\ncall site — `VariantValueWriter` or `VariantObjectReader` — needed\nchanges.\n- `VariantEncodingHelperTests`: add `MakeObjectHeaderUsesSpecBitLayout`\nand\n\nCloses #420."
    },
    {
      "commit": "c5a82e5ed84324b167fc320b56e8dc4e9fac52cd",
      "tree": "c2e0b3a8778a0ca6d71f9c506e726df7c363a010",
      "parents": [
        "08b2b16269a146cdc1495d04c2aaf0900f37b949"
      ],
      "author": {
        "name": "Abhilash S Hathwar",
        "email": "76783449+Abhilash437@users.noreply.github.com",
        "time": "Wed Aug 19 04:06:45 2026 +0530"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Aug 18 15:36:45 2026 -0700"
      },
      "message": "feat: Implement RunEndEncodedArray.Builder (#407) (#408)\n\n## What\u0027s Changed\n\nThis PR implements `RunEndEncodedArray.Builder` to close the feature gap\nfor constructing REE arrays in C#.\n\n- Designed the Builder to accept generic `TRunEndBuilder` and\n`TValueBuilder` types in the constructor (pre-configured inner\nbuilders).\n- Implemented implicit run-length tracking via `Append(TValue value)`,\nutilizing `EqualityComparer\u003cTValue\u003e.Default` to group sequential\nduplicates.\n- Added comprehensive unit tests in `RunEndEncodedArrayBuilderTests.cs`.\n\nCloses #407."
    },
    {
      "commit": "08b2b16269a146cdc1495d04c2aaf0900f37b949",
      "tree": "c979c31ac37808f3ddea269c8e53d88d7dc0b503",
      "parents": [
        "c42689e99046fe5709492f2fcdd9ceafa937bfad"
      ],
      "author": {
        "name": "Abhilash S Hathwar",
        "email": "76783449+Abhilash437@users.noreply.github.com",
        "time": "Wed Aug 19 04:05:50 2026 +0530"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Aug 18 15:35:50 2026 -0700"
      },
      "message": "fix: Add memory lifetime warnings to ReadOnlySpan properties (#406)\n\n## What\u0027s Changed\n\nAdds explicit XML documentation remarks (`\u003cremarks\u003e`) to properties and\nmethods that return a `ReadOnlySpan` over managed or unmanaged memory\nacross Apache Arrow array and buffer classes.\n\n### Motivation \u0026 Relation to PR #393\nWhen an `ArrowBuffer` or `Array` is backed by unmanaged memory (e.g.,\nallocated via a custom `MemoryAllocator` or `NativeMemoryManager`),\nextracting a `ReadOnlySpan` into a local variable and subsequently\ndisposing the parent buffer/array can lead to use-after-free memory\naccess issues.\n\nWhile PR #393 explores structural lifecycle/pinning mechanisms, this PR\nprovides an immediate, non-breaking developer safety improvement:\n- Added `\u003cremarks\u003e` warning callouts to `ArrowBuffer.Span`,\n`PrimitiveArray.Values`, `BooleanArray.Values`, and\n`BinaryArray.GetBytes`. These surface as visible safety notes in IDE\ntooltips and IntelliSense (Visual Studio, VS Code, Rider) without\nbreaking builds or requiring API breaking changes under\n`TreatWarningsAsErrors\u003dtrue`.\n- Added `PoisonMemoryAllocator` and unit test\n`TestNativeMemoryManagerUseAfterFree` to `Apache.Arrow.Tests` to verify\nmemory poisoning on buffer release.\n\nRelates to #397 and #393."
    },
    {
      "commit": "c42689e99046fe5709492f2fcdd9ceafa937bfad",
      "tree": "2c8dcd69ff4e8c22bf719677a4e57c2b4fc863bb",
      "parents": [
        "2a79486944e36fd1f5e406b7a10f64b105cf18e3"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Aug 17 04:46:10 2026 -0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Aug 17 04:46:10 2026 -0700"
      },
      "message": "chore: Bump Microsoft.NET.Test.Sdk from 18.8.1 to 18.9.0 (#412)\n\nUpdated [Microsoft.NET.Test.Sdk](https://github.com/microsoft/vstest)\nfrom 18.8.1 to 18.9.0.\n\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\n_Sourced from [Microsoft.NET.Test.Sdk\u0027s\nreleases](https://github.com/microsoft/vstest/releases)._\n\n## 18.9.0\n\n## What\u0027s Changed\n* Fix tilde/exclamation characters corrupted in TerminalLogger test\noutput by @​nohwnd in https://github.com/microsoft/vstest/pull/16046\n* Make TranslationLayer Native AOT-compatible by @​drewnoakes in\nhttps://github.com/microsoft/vstest/pull/16045\n* Guard GenerateProgramFile target against UseWinUI/UseUwpTools\nevaluation order by @​nohwnd in\nhttps://github.com/microsoft/vstest/pull/16072\n* Add RequestingAssembly to AssemblyResolveEventArgs for binary compat\nby @​nohwnd in https://github.com/microsoft/vstest/pull/16076\n* Remove stale Microsoft.Extensions.FileSystemGlobbing binding redirect\nfrom testhost.x86 and datacollector by @​Evangelink in\nhttps://github.com/microsoft/vstest/pull/16082\n* Fix TRX attachment paths when LogFileName contains a subdirectory by\n@​nohwnd in https://github.com/microsoft/vstest/pull/15791\n* Fix missing dumps for .NET Framework child processes in\nNetClientHangDumper by @​nohwnd in\nhttps://github.com/microsoft/vstest/pull/16098\n* Fix data collection channels to use negotiated protocol version\ninstead of V1 by @​nohwnd in\nhttps://github.com/microsoft/vstest/pull/16096\n* Fix race condition in BlameCollector: skip hang dump when testhost\nhasn\u0027t launched yet by @​nohwnd in\nhttps://github.com/microsoft/vstest/pull/16065\n* Replace TestSDKAutoGeneratedCode with ExcludeFromCodeCoverage in\nauto-generated Program files by @​nohwnd in\nhttps://github.com/microsoft/vstest/pull/16101\n* Include testhost process path in crash error messages by @​nohwnd in\nhttps://github.com/microsoft/vstest/pull/16108\n* Fix DataDriven test results being double-counted in TRX logger totals\nby @​nohwnd in https://github.com/microsoft/vstest/pull/15766\n* Fix datacollector crash visibility: replace Assert with throwable\nexceptions by @​nohwnd in https://github.com/microsoft/vstest/pull/16048\n* Add TreatErrorMessagesAsWarnings parameter to TRX logger by @​nohwnd\nin https://github.com/microsoft/vstest/pull/16106\n* Wait for testhost stderr to drain before reading its crash output by\n@​nohwnd in https://github.com/microsoft/vstest/pull/16128\n* Handle runtimeconfig.dev.json without additionalProbingPaths by @​tmat\nin https://github.com/microsoft/vstest/pull/16166\n* Suggest Microsoft.NET.Test.Sdk when a managed test project brings no\ntesthost by @​nohwnd in https://github.com/microsoft/vstest/pull/16169\n* Fix x86 testhost loading mismatched x64 hostfxr (0x800700C1) when run\nvia vstest.console.exe directly (#​16151) by @​azat-msft in\nhttps://github.com/microsoft/vstest/pull/16156\n* Preserve the real exception (type + stack trace) when a test run\naborts in BaseRunTests by @​nohwnd in\nhttps://github.com/microsoft/vstest/pull/16167\n\n## New Contributors\n* @​drewnoakes made their first contribution in\nhttps://github.com/microsoft/vstest/pull/16045\n\n**Full Changelog**:\nhttps://github.com/microsoft/vstest/compare/v18.8.0...v18.9.0\n\nCommits viewable in [compare\nview](https://github.com/microsoft/vstest/compare/v18.8.1...v18.9.0).\n\u003c/details\u003e\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dMicrosoft.NET.Test.Sdk\u0026package-manager\u003dnuget\u0026previous-version\u003d18.8.1\u0026new-version\u003d18.9.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "2a79486944e36fd1f5e406b7a10f64b105cf18e3",
      "tree": "54fc9f82f62cb2b824353ae508b568ce1984d627",
      "parents": [
        "bc91b8f3c19fb6603edcba7a57f532d7186b9d39"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Aug 17 04:44:29 2026 -0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Aug 17 04:44:29 2026 -0700"
      },
      "message": "chore: Bump System.CommandLine from 2.0.10 to 2.0.11 (#414)\n\nUpdated [System.CommandLine](https://github.com/dotnet/dotnet) from\n2.0.10 to 2.0.11.\n\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\n_Sourced from [System.CommandLine\u0027s\nreleases](https://github.com/dotnet/dotnet/releases)._\n\nNo release notes found for this version range.\n\nCommits viewable in [compare\nview](https://github.com/dotnet/dotnet/commits).\n\u003c/details\u003e\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dSystem.CommandLine\u0026package-manager\u003dnuget\u0026previous-version\u003d2.0.10\u0026new-version\u003d2.0.11)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "bc91b8f3c19fb6603edcba7a57f532d7186b9d39",
      "tree": "2edd72fc5157f4c67f6080448fec81f23e04a874",
      "parents": [
        "acf14364b06c157d25b850bae41a7586795050a8"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Aug 17 04:43:17 2026 -0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Aug 17 04:43:17 2026 -0700"
      },
      "message": "chore: Bump xunit.runner.visualstudio from 3.1.5 to 4.0.0 (#416)\n\nUpdated\n[xunit.runner.visualstudio](https://github.com/xunit/visualstudio.xunit)\nfrom 3.1.5 to 4.0.0.\n\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\n_Sourced from [xunit.runner.visualstudio\u0027s\nreleases](https://github.com/xunit/visualstudio.xunit/releases)._\n\n## 4.0.0\n\nRelease notes: https://xunit.net/releases/visualstudio/4.0.0\n\n## 4.0.0-pre.5\n\nRelease notes: https://xunit.net/releases/visualstudio/4.0.0-pre.5\n\n## 4.0.0-pre.4\n\nRelease notes: https://xunit.net/releases/visualstudio/4.0.0-pre.4\n\n## 4.0.0-pre.3\n\nRelease notes: https://xunit.net/releases/visualstudio/4.0.0-pre.3\n\nCommits viewable in [compare\nview](https://github.com/xunit/visualstudio.xunit/compare/3.1.5...4.0.0).\n\u003c/details\u003e\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dxunit.runner.visualstudio\u0026package-manager\u003dnuget\u0026previous-version\u003d3.1.5\u0026new-version\u003d4.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "acf14364b06c157d25b850bae41a7586795050a8",
      "tree": "c9f37ed4dc1c37f7ac462003756524d4ac1afad8",
      "parents": [
        "dc2c56617f5612cfd77750ba79b21f0e9a2ec5e6"
      ],
      "author": {
        "name": "Adam Reeve",
        "email": "adreeve@gmail.com",
        "time": "Fri Aug 07 03:47:35 2026 +1200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu Aug 06 08:47:35 2026 -0700"
      },
      "message": "chore: enable more Python types in C Data Interface tests (#401)\n\nCI uses the latest PyArrow release, which is 25.0.0 and has support for\nthe `ListView`, `BinaryView`, `StringView`, `Decimal32`, and `Decimal64`\ntypes. These were previously excluded from the C Data Interface tests\nwhen PyArrow didn\u0027t support them, so enable them now."
    },
    {
      "commit": "dc2c56617f5612cfd77750ba79b21f0e9a2ec5e6",
      "tree": "51aac2c386fa5dcf380f6b59bfe3a32da96271d4",
      "parents": [
        "290223441d3af45194df74998ace0766e2a380ea"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Jul 27 03:06:37 2026 -0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Jul 27 03:06:37 2026 -0700"
      },
      "message": "chore: Bump Grpc.Tools from 2.72.0 to 2.83.0 (#396)\n\nUpdated [Grpc.Tools](https://github.com/grpc/grpc) from 2.72.0 to\n2.83.0.\n\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\n_Sourced from [Grpc.Tools\u0027s\nreleases](https://github.com/grpc/grpc/releases)._\n\nNo release notes found for this version range.\n\nCommits viewable in [compare\nview](https://github.com/grpc/grpc/commits).\n\u003c/details\u003e\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dGrpc.Tools\u0026package-manager\u003dnuget\u0026previous-version\u003d2.72.0\u0026new-version\u003d2.83.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "290223441d3af45194df74998ace0766e2a380ea",
      "tree": "4ddcd3b020fb867f0028bbbade597e6156d982b9",
      "parents": [
        "c2a670dcc7ddb8e81daabcea521b352e0c802bb0"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Jul 27 03:05:08 2026 -0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Jul 27 03:05:08 2026 -0700"
      },
      "message": "chore: Bump actions/setup-python from 6.3.0 to 7.0.0 (#394)\n\nBumps [actions/setup-python](https://github.com/actions/setup-python)\nfrom 6.3.0 to 7.0.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/actions/setup-python/releases\"\u003eactions/setup-python\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev7.0.0\u003c/h2\u003e\n\u003ch2\u003eWhat\u0027s Changed\u003c/h2\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eMigrate to ESM and upgrade dependencies by \u003ca\nhref\u003d\"https://github.com/priyagupta108\"\u003e\u003ccode\u003e@​priyagupta108\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-python/pull/1330\"\u003eactions/setup-python#1330\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePin SHA commits and update docs with latest versions by \u003ca\nhref\u003d\"https://github.com/HarithaVattikuti\"\u003e\u003ccode\u003e@​HarithaVattikuti\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-python/pull/1338\"\u003eactions/setup-python#1338\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove the pip-install input by \u003ca\nhref\u003d\"https://github.com/gowridurgad\"\u003e\u003ccode\u003e@​gowridurgad\u003c/code\u003e\u003c/a\u003e in\n\u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-python/pull/1336\"\u003eactions/setup-python#1336\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fix\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix to Classify stderr warning messages as warnings instead of\nerrors in annotations by \u003ca\nhref\u003d\"https://github.com/lmvysakh\"\u003e\u003ccode\u003e@​lmvysakh\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-python/pull/1335\"\u003eactions/setup-python#1335\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eValidate and retry manifest fetch to prevent silent failures by \u003ca\nhref\u003d\"https://github.com/priyagupta108\"\u003e\u003ccode\u003e@​priyagupta108\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-python/pull/1332\"\u003eactions/setup-python#1332\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependency Upgrade\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBump certifi from 2020.6.20 to 2024.7.4 in\n/\u003cstrong\u003etests\u003c/strong\u003e/data by \u003ca\nhref\u003d\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-python/pull/1328\"\u003eactions/setup-python#1328\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRemove EOL Python versions and Bumps numpy text fixture by \u003ca\nhref\u003d\"https://github.com/priya-kinthali\"\u003e\u003ccode\u003e@​priya-kinthali\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-python/pull/1333\"\u003eactions/setup-python#1333\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpgrade \u003ccode\u003e@​actions/cache\u003c/code\u003e to 6.2.0 by \u003ca\nhref\u003d\"https://github.com/philip-gai\"\u003e\u003ccode\u003e@​philip-gai\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-python/pull/1337\"\u003eactions/setup-python#1337\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/lmvysakh\"\u003e\u003ccode\u003e@​lmvysakh\u003c/code\u003e\u003c/a\u003e\nmade their first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-python/pull/1335\"\u003eactions/setup-python#1335\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/philip-gai\"\u003e\u003ccode\u003e@​philip-gai\u003c/code\u003e\u003c/a\u003e made\ntheir first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-python/pull/1337\"\u003eactions/setup-python#1337\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca\nhref\u003d\"https://github.com/actions/setup-python/compare/v6...v7.0.0\"\u003ehttps://github.com/actions/setup-python/compare/v6...v7.0.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/setup-python/commit/5fda3b95a4ea91299a34e894583c3862153e4b97\"\u003e\u003ccode\u003e5fda3b9\u003c/code\u003e\u003c/a\u003e\nPin SHA commits and update docs with latest versions (\u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-python/issues/1338\"\u003e#1338\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/setup-python/commit/4ab7e95f05e168b4356aebde89dd84f59c283d8e\"\u003e\u003ccode\u003e4ab7e95\u003c/code\u003e\u003c/a\u003e\nMerge pull request \u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-python/issues/1337\"\u003e#1337\u003c/a\u003e\nfrom actions/philip-gai/bump-actions-cache-6-2-0\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/setup-python/commit/0f3a009f475dbea83c0371cd85d099690fee8c5c\"\u003e\u003ccode\u003e0f3a009\u003c/code\u003e\u003c/a\u003e\nRemove the pip-install input (\u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-python/issues/1336\"\u003e#1336\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/setup-python/commit/f8cf4291c8b8e273ddd26e569454615c7315d932\"\u003e\u003ccode\u003ef8cf429\u003c/code\u003e\u003c/a\u003e\nMigrate to ESM and upgrade dependencies (\u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-python/issues/1330\"\u003e#1330\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/setup-python/commit/54baeea5b34417d10a7479663a23cca53ea209b5\"\u003e\u003ccode\u003e54baeea\u003c/code\u003e\u003c/a\u003e\nValidate and retry manifest fetch to prevent silent failures (\u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-python/issues/1332\"\u003e#1332\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/setup-python/commit/c7092773a316760f4ecfe498e4af668a4dafeac5\"\u003e\u003ccode\u003ec709277\u003c/code\u003e\u003c/a\u003e\nAnnotation code fix (\u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-python/issues/1335\"\u003e#1335\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/setup-python/commit/6849080452e69b330395e8a6d23cf90f56d76a1a\"\u003e\u003ccode\u003e6849080\u003c/code\u003e\u003c/a\u003e\nremove EOL Python versions and Bumps numpy text fixture (\u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-python/issues/1333\"\u003e#1333\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/setup-python/commit/0903b469fbf4441aadfe4f4b249dc5b1fba3a73e\"\u003e\u003ccode\u003e0903b46\u003c/code\u003e\u003c/a\u003e\nBump certifi from 2020.6.20 to 2024.7.4 in /\u003cstrong\u003etests\u003c/strong\u003e/data\n(\u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-python/issues/1328\"\u003e#1328\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca\nhref\u003d\"https://github.com/actions/setup-python/compare/ece7cb06caefa5fff74198d8649806c4678c61a1...5fda3b95a4ea91299a34e894583c3862153e4b97\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dactions/setup-python\u0026package-manager\u003dgithub_actions\u0026previous-version\u003d6.3.0\u0026new-version\u003d7.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "c2a670dcc7ddb8e81daabcea521b352e0c802bb0",
      "tree": "76d5b17d133ef07dbc4024502b8d5d48004d8a1a",
      "parents": [
        "282058b3dfef0b20248f5129d081bfece8d2bc09"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Jul 27 03:04:39 2026 -0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Jul 27 03:04:39 2026 -0700"
      },
      "message": "chore: Bump actions/checkout from 7.0.0 to 7.0.1 (#395)\n\nBumps [actions/checkout](https://github.com/actions/checkout) from 7.0.0\nto 7.0.1.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/actions/checkout/releases\"\u003eactions/checkout\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev7.0.1\u003c/h2\u003e\n\u003ch2\u003eWhat\u0027s Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eskip running unsafe pr check if input is default by \u003ca\nhref\u003d\"https://github.com/aiqiaoy\"\u003e\u003ccode\u003e@​aiqiaoy\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2518\"\u003eactions/checkout#2518\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003etrim only ascii whitespace for branch by \u003ca\nhref\u003d\"https://github.com/aiqiaoy\"\u003e\u003ccode\u003e@​aiqiaoy\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2521\"\u003eactions/checkout#2521\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eescape values passed to --unset by \u003ca\nhref\u003d\"https://github.com/aiqiaoy\"\u003e\u003ccode\u003e@​aiqiaoy\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2530\"\u003eactions/checkout#2530\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eVarious dependency updates\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca\nhref\u003d\"https://github.com/actions/checkout/compare/v7...v7.0.1\"\u003ehttps://github.com/actions/checkout/compare/v7...v7.0.1\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/actions/checkout/blob/main/CHANGELOG.md\"\u003eactions/checkout\u0027s\nchangelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003ch2\u003ev7.0.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSkip running unsafe pr check if input is default by \u003ca\nhref\u003d\"https://github.com/aiqiaoy\"\u003e\u003ccode\u003e@​aiqiaoy\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2518\"\u003eactions/checkout#2518\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eTrim only ascii whitespace for branch by \u003ca\nhref\u003d\"https://github.com/aiqiaoy\"\u003e\u003ccode\u003e@​aiqiaoy\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2521\"\u003eactions/checkout#2521\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEscape values passed to --unset by \u003ca\nhref\u003d\"https://github.com/aiqiaoy\"\u003e\u003ccode\u003e@​aiqiaoy\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2530\"\u003eactions/checkout#2530\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eVarious dependency updates\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev7.0.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBlock checking out fork PR for pull_request_target and workflow_run\nby \u003ca href\u003d\"https://github.com/aiqiaoy\"\u003e\u003ccode\u003e@​aiqiaoy\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2454\"\u003eactions/checkout#2454\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eVarious dependency updates\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev6.0.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix checkout init for SHA-256 repositories by \u003ca\nhref\u003d\"https://github.com/yaananth\"\u003e\u003ccode\u003e@​yaananth\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2439\"\u003eactions/checkout#2439\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: expand merge commit SHA regex and add SHA-256 test cases by \u003ca\nhref\u003d\"https://github.com/yaananth\"\u003e\u003ccode\u003e@​yaananth\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2414\"\u003eactions/checkout#2414\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev6.0.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix tag handling: preserve annotations and explicit fetch-tags by \u003ca\nhref\u003d\"https://github.com/ericsciple\"\u003e\u003ccode\u003e@​ericsciple\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2356\"\u003eactions/checkout#2356\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev6.0.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd worktree support for persist-credentials includeIf by \u003ca\nhref\u003d\"https://github.com/ericsciple\"\u003e\u003ccode\u003e@​ericsciple\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2327\"\u003eactions/checkout#2327\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev6.0.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ePersist creds to a separate file by \u003ca\nhref\u003d\"https://github.com/ericsciple\"\u003e\u003ccode\u003e@​ericsciple\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2286\"\u003eactions/checkout#2286\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate README to include Node.js 24 support details and requirements\nby \u003ca href\u003d\"https://github.com/salmanmkc\"\u003e\u003ccode\u003e@​salmanmkc\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2248\"\u003eactions/checkout#2248\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev5.0.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ePort v6 cleanup to v5 by \u003ca\nhref\u003d\"https://github.com/ericsciple\"\u003e\u003ccode\u003e@​ericsciple\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2301\"\u003eactions/checkout#2301\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev5.0.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate actions checkout to use node 24 by \u003ca\nhref\u003d\"https://github.com/salmanmkc\"\u003e\u003ccode\u003e@​salmanmkc\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2226\"\u003eactions/checkout#2226\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev4.3.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ePort v6 cleanup to v4 by \u003ca\nhref\u003d\"https://github.com/ericsciple\"\u003e\u003ccode\u003e@​ericsciple\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2305\"\u003eactions/checkout#2305\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev4.3.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003edocs: update README.md by \u003ca\nhref\u003d\"https://github.com/motss\"\u003e\u003ccode\u003e@​motss\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/1971\"\u003eactions/checkout#1971\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd internal repos for checking out multiple repositories by \u003ca\nhref\u003d\"https://github.com/mouismail\"\u003e\u003ccode\u003e@​mouismail\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/1977\"\u003eactions/checkout#1977\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDocumentation update - add recommended permissions to Readme by \u003ca\nhref\u003d\"https://github.com/benwells\"\u003e\u003ccode\u003e@​benwells\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2043\"\u003eactions/checkout#2043\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdjust positioning of user email note and permissions heading by \u003ca\nhref\u003d\"https://github.com/joshmgross\"\u003e\u003ccode\u003e@​joshmgross\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2044\"\u003eactions/checkout#2044\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate README.md by \u003ca\nhref\u003d\"https://github.com/nebuk89\"\u003e\u003ccode\u003e@​nebuk89\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2194\"\u003eactions/checkout#2194\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate CODEOWNERS for actions by \u003ca\nhref\u003d\"https://github.com/TingluoHuang\"\u003e\u003ccode\u003e@​TingluoHuang\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2224\"\u003eactions/checkout#2224\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate package dependencies by \u003ca\nhref\u003d\"https://github.com/salmanmkc\"\u003e\u003ccode\u003e@​salmanmkc\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2236\"\u003eactions/checkout#2236\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev4.2.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eurl-helper.ts\u003c/code\u003e now leverages well-known environment\nvariables by \u003ca href\u003d\"https://github.com/jww3\"\u003e\u003ccode\u003e@​jww3\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/1941\"\u003eactions/checkout#1941\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eExpand unit test coverage for \u003ccode\u003eisGhes\u003c/code\u003e by \u003ca\nhref\u003d\"https://github.com/jww3\"\u003e\u003ccode\u003e@​jww3\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/1946\"\u003eactions/checkout#1946\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev4.2.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eCheck out other refs/* by commit if provided, fall back to ref by \u003ca\nhref\u003d\"https://github.com/orhantoy\"\u003e\u003ccode\u003e@​orhantoy\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/1924\"\u003eactions/checkout#1924\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/checkout/commit/3d3c42e5aac5ba805825da76410c181273ba90b1\"\u003e\u003ccode\u003e3d3c42e\u003c/code\u003e\u003c/a\u003e\nprep v7.0.1 release (\u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/issues/2531\"\u003e#2531\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/checkout/commit/28802689a136bfcdb721715abd713740beecbe07\"\u003e\u003ccode\u003e2880268\u003c/code\u003e\u003c/a\u003e\nescape values passed to --unset (\u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/issues/2530\"\u003e#2530\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/checkout/commit/12cd2235efa0937479335606d7c3ac9f6c0973b1\"\u003e\u003ccode\u003e12cd223\u003c/code\u003e\u003c/a\u003e\ntrim only ascii whitespace for branch (\u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/issues/2521\"\u003e#2521\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/checkout/commit/62661c4e71a304b2823ed026347b8d34c3eac541\"\u003e\u003ccode\u003e62661c4\u003c/code\u003e\u003c/a\u003e\nskip running unsafe pr check if input is default (\u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/issues/2518\"\u003e#2518\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/checkout/commit/e8d4307400f9427dba7cb98e488d6ab85f1cec5f\"\u003e\u003ccode\u003ee8d4307\u003c/code\u003e\u003c/a\u003e\nBump the minor-actions-dependencies group with 2 updates (\u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/issues/2499\"\u003e#2499\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/checkout/commit/631c942040754b6e095e929c1677c07e10ed4f87\"\u003e\u003ccode\u003e631c942\u003c/code\u003e\u003c/a\u003e\neslint 9 (\u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/issues/2474\"\u003e#2474\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/checkout/commit/4f1f4aec02e41874fa0262ea8ff5172d7978ad1e\"\u003e\u003ccode\u003e4f1f4ae\u003c/code\u003e\u003c/a\u003e\nBump actions/upload-artifact from 4 to 7 (\u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/issues/2476\"\u003e#2476\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/checkout/commit/ba097532fb203f7e88c9c3c0b899b49469908a92\"\u003e\u003ccode\u003eba09753\u003c/code\u003e\u003c/a\u003e\nBump actions/checkout from 6 to 7 (\u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/issues/2488\"\u003e#2488\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/checkout/commit/b9e0990d219a03df7633c93f6f005a8fecbcab22\"\u003e\u003ccode\u003eb9e0990\u003c/code\u003e\u003c/a\u003e\nBump docker/login-action from 3.3.0 to 4.2.0 (\u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/issues/2479\"\u003e#2479\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/checkout/commit/e8cb398be4a550817e382abf69e4c12c76fce1f2\"\u003e\u003ccode\u003ee8cb398\u003c/code\u003e\u003c/a\u003e\nBump docker/build-push-action from 6.5.0 to 7.2.0 (\u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/issues/2478\"\u003e#2478\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://github.com/actions/checkout/compare/9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0...3d3c42e5aac5ba805825da76410c181273ba90b1\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dactions/checkout\u0026package-manager\u003dgithub_actions\u0026previous-version\u003d7.0.0\u0026new-version\u003d7.0.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "282058b3dfef0b20248f5129d081bfece8d2bc09",
      "tree": "aaabfcf286fd4364c5a544402f50dc81cd383cfa",
      "parents": [
        "420b1318965177e0cce7c2d62166c455a1e95d59"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Sun Jul 19 21:26:30 2026 -0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sun Jul 19 21:26:30 2026 -0700"
      },
      "message": "chore: Bump System.CommandLine from 2.0.9 to 2.0.10 (#391)\n\nUpdated [System.CommandLine](https://github.com/dotnet/dotnet) from\n2.0.9 to 2.0.10.\n\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\n_Sourced from [System.CommandLine\u0027s\nreleases](https://github.com/dotnet/dotnet/releases)._\n\nNo release notes found for this version range.\n\nCommits viewable in [compare\nview](https://github.com/dotnet/dotnet/commits).\n\u003c/details\u003e\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dSystem.CommandLine\u0026package-manager\u003dnuget\u0026previous-version\u003d2.0.9\u0026new-version\u003d2.0.10)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "420b1318965177e0cce7c2d62166c455a1e95d59",
      "tree": "f901b4941a3cab06bba11ac5095fa985190295d6",
      "parents": [
        "d360887e64c5ba6f4f305a4dbe73eaa23c72e9c9"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Sun Jul 19 21:26:00 2026 -0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sun Jul 19 21:26:00 2026 -0700"
      },
      "message": "chore: Bump actions/setup-dotnet from 5.4.0 to 6.0.0 (#387)\n\nBumps [actions/setup-dotnet](https://github.com/actions/setup-dotnet)\nfrom 5.4.0 to 6.0.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/actions/setup-dotnet/releases\"\u003eactions/setup-dotnet\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev6.0.0\u003c/h2\u003e\n\u003ch2\u003eWhat\u0027s Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMigrate to ESM and upgrade dependencies by \u003ca\nhref\u003d\"https://github.com/priyagupta108\"\u003e\u003ccode\u003e@​priyagupta108\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-dotnet/pull/752\"\u003eactions/setup-dotnet#752\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump actions/checkout from 6.0.3 to 7.0.0 by \u003ca\nhref\u003d\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot]\nin \u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-dotnet/pull/751\"\u003eactions/setup-dotnet#751\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore(deps): bump \u003ccode\u003e@​actions/cache\u003c/code\u003e to 6.2.0 by \u003ca\nhref\u003d\"https://github.com/philip-gai\"\u003e\u003ccode\u003e@​philip-gai\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-dotnet/pull/756\"\u003eactions/setup-dotnet#756\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/philip-gai\"\u003e\u003ccode\u003e@​philip-gai\u003c/code\u003e\u003c/a\u003e made\ntheir first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-dotnet/pull/756\"\u003eactions/setup-dotnet#756\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca\nhref\u003d\"https://github.com/actions/setup-dotnet/compare/v5...v6.0.0\"\u003ehttps://github.com/actions/setup-dotnet/compare/v5...v6.0.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/setup-dotnet/commit/a98b56852c35b8e3190ac28c8c2271da59106c68\"\u003e\u003ccode\u003ea98b568\u003c/code\u003e\u003c/a\u003e\nchore(deps): bump \u003ccode\u003e@​actions/cache\u003c/code\u003e to 6.2.0 (\u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-dotnet/issues/756\"\u003e#756\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/setup-dotnet/commit/afb2931642fd907238eb71bce2da0dcc910b3553\"\u003e\u003ccode\u003eafb2931\u003c/code\u003e\u003c/a\u003e\nBump actions/checkout from 6.0.3 to 7.0.0 (\u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-dotnet/issues/751\"\u003e#751\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/setup-dotnet/commit/6df8cefd1440cf9313e76b8fdb8aaf90cfa745a3\"\u003e\u003ccode\u003e6df8cef\u003c/code\u003e\u003c/a\u003e\nMigrate to ESM and upgrade dependencies (\u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-dotnet/issues/752\"\u003e#752\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca\nhref\u003d\"https://github.com/actions/setup-dotnet/compare/26b0ec14cb23fa6904739307f278c14f94c95bf1...a98b56852c35b8e3190ac28c8c2271da59106c68\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dactions/setup-dotnet\u0026package-manager\u003dgithub_actions\u0026previous-version\u003d5.4.0\u0026new-version\u003d6.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "d360887e64c5ba6f4f305a4dbe73eaa23c72e9c9",
      "tree": "d88f5cd5efacb896953d18d40bcb7588177b51c8",
      "parents": [
        "2e54e4ee4d51eec0083714f700c281884ec10cd4"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Sun Jul 19 21:25:34 2026 -0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sun Jul 19 21:25:34 2026 -0700"
      },
      "message": "chore: Bump Microsoft.NET.Test.Sdk from 18.7.0 to 18.8.1 (#389)\n\nUpdated [Microsoft.NET.Test.Sdk](https://github.com/microsoft/vstest)\nfrom 18.7.0 to 18.8.1.\n\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\n_Sourced from [Microsoft.NET.Test.Sdk\u0027s\nreleases](https://github.com/microsoft/vstest/releases)._\n\n## 18.8.1\n\n## What\u0027s Changed\n* Fix protocol negotiation timeout when STJ reflection is disabled\n(18.8.1) by @​nohwnd in https://github.com/microsoft/vstest/pull/16281\n\n\n**Full Changelog**:\nhttps://github.com/microsoft/vstest/compare/v18.8.0...v18.8.1\n\n## 18.8.0\n\n## What\u0027s Changed\n* Migrate from Newtonsoft.Json to System.Text.Json / Jsonite (merge to\nmain) by @​nohwnd in https://github.com/microsoft/vstest/pull/15687\n- For more detail refer to\nhttps://devblogs.microsoft.com/dotnet/vs-test-is-removing-its-newtonsoft-json-dependency/\n* Create source-only filter package by @​Youssef1313 in\nhttps://github.com/microsoft/vstest/pull/15638\n* Add ARM64 msdia140.dll support to test platform packages by @​nohwnd\nin https://github.com/microsoft/vstest/pull/15692\n* Fix mutex cleanup crash on macOS/Linux by @​nohwnd in\nhttps://github.com/microsoft/vstest/pull/15684\n* Restrict artifact temp directory permissions on Unix by @​nohwnd in\nhttps://github.com/microsoft/vstest/pull/15729\n* Add support for filtering uncategorized tests with TestCategory\u003dNone\nby @​Evangelink in https://github.com/microsoft/vstest/pull/15727\n* Fix SCI binding failure in DTA hosts (main) by @​nohwnd in\nhttps://github.com/microsoft/vstest/pull/15724\n* Fix HTML logger parallel file collision by @​nohwnd in\nhttps://github.com/microsoft/vstest/pull/15435\n* Improve error message when testhost cannot be found by @​nohwnd in\nhttps://github.com/microsoft/vstest/pull/16053\n* Fix HTML logger exception on invalid XML chars in test display names\nby @​nohwnd in https://github.com/microsoft/vstest/pull/16051\n\n**Full Changelog**:\nhttps://github.com/microsoft/vstest/compare/v18.7.0...v18.8.0\n\nCommits viewable in [compare\nview](https://github.com/microsoft/vstest/compare/v18.7.0...v18.8.1).\n\u003c/details\u003e\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dMicrosoft.NET.Test.Sdk\u0026package-manager\u003dnuget\u0026previous-version\u003d18.7.0\u0026new-version\u003d18.8.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "2e54e4ee4d51eec0083714f700c281884ec10cd4",
      "tree": "850a1267f8f8b08d1064f1e42e77993db555be14",
      "parents": [
        "cd29cc12617c60ab9627b8cb3dbfaddb4772d219"
      ],
      "author": {
        "name": "David Linton",
        "email": "51540223+balicat@users.noreply.github.com",
        "time": "Mon Jul 06 21:54:41 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Jul 06 12:54:41 2026 -0700"
      },
      "message": "feat: add ICompressionCodecFactory support to Flight record batch readers (#285)\n\n## Summary\n\nResolves #184.\n\n### The Problem\n\nWhen a Flight server sends IPC-compressed record batches (LZ4/Zstd), the\nC# Flight client throws:\n\n\u003e \"Body is compressed with codec LZ4_FRAME but no\nICompressionCodecFactory has been configured to decompress buffers\"\n\nThe decompression infrastructure already exists — `ArrowStreamReader`\naccepts `ICompressionCodecFactory` and the `Apache.Arrow.Compression`\npackage provides LZ4/Zstd codecs. But the Flight reader chain never\npasses the factory through:\n\n```\nFlightClient.GetStream()\n  → FlightClientRecordBatchStreamReader(stream)\n    → FlightRecordBatchStreamReader(stream)\n      → RecordBatchReaderImplementation(stream)\n        → ArrowReaderImplementation()          ← parameterless, _compressionCodecFactory \u003d null\n```\n\n`RecordBatchReaderImplementation` calls the base constructor without a\ncodec factory, so `GetBufferCreator()` always hits the \"no factory\nconfigured\" error path.\n\n### The Fix\n\nThread `ICompressionCodecFactory` through the reader hierarchy (5 files,\nall with `\u003d null` defaults for backward compatibility):\n\n1. **`RecordBatchReaderImplementation`** — accept\n`ICompressionCodecFactory`, pass to `base(allocator: null,\ncompressionCodecFactory)`\n2. **`FlightRecordBatchStreamReader`** — accept and forward to\n`RecordBatchReaderImplementation`\n3. **`FlightClientRecordBatchStreamReader`** — forward to base\n4. **`FlightServerRecordBatchStreamReader`** — forward to base (both\nconstructors)\n5. **`FlightClient`** — store as field, add constructor overloads, pass\nto readers in `GetStream()` and `DoExchange()`\n\nAfter the fix:\n\n```\nFlightClient(channel, new CompressionCodecFactory())\n  → stores _compressionCodecFactory\n\nFlightClient.GetStream(ticket)\n  → FlightClientRecordBatchStreamReader(stream, _compressionCodecFactory)\n    → FlightRecordBatchStreamReader(stream, compressionCodecFactory)\n      → RecordBatchReaderImplementation(stream, compressionCodecFactory)\n        → ArrowReaderImplementation(null, compressionCodecFactory)  ← decompression works\n```\n\n### Usage\n\n```csharp\nusing Apache.Arrow.Compression;\n\n// Before (compressed batches cause error):\nvar client \u003d new FlightClient(channel);\n\n// After (LZ4/Zstd decompression handled transparently):\nvar client \u003d new FlightClient(channel, new CompressionCodecFactory());\n```\n\n### Impact\n\n- **25 lines added, 8 removed** across 5 files\n- **No breaking changes** — all new parameters default to `null`\n- **No new dependencies** — `ICompressionCodecFactory` is in\n`Apache.Arrow.Ipc`, already referenced by the Flight package\n\n## Test plan\n\n- [ ] Existing Flight tests pass unchanged (backward compatibility via\n`null` defaults)\n- [ ] Test with a Flight server sending LZ4-compressed record batches\n- [ ] Test with a Flight server sending Zstd-compressed record batches\n- [ ] Confirm `GetStream()` and `DoExchange()` correctly decompress when\n`ICompressionCodecFactory` is provided\n- [ ] Confirm no regression when `ICompressionCodecFactory` is `null`\n(existing behavior)"
    },
    {
      "commit": "cd29cc12617c60ab9627b8cb3dbfaddb4772d219",
      "tree": "c06129cb72ec21c9324bda373485d9118fc62340",
      "parents": [
        "fa968084845d5eceec5b27259da87d935c01e48d"
      ],
      "author": {
        "name": "kronic",
        "email": "kronic@softland.ru",
        "time": "Tue Jul 07 02:44:04 2026 +0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Jul 06 12:44:04 2026 -0700"
      },
      "message": "Make readonly field is possible (#385)\n\nMake readonly field is possible"
    },
    {
      "commit": "fa968084845d5eceec5b27259da87d935c01e48d",
      "tree": "e1c162eeaa57eb251263387623cdf11bef9777da",
      "parents": [
        "e40a12b7ecf91a82e7b295f7c4bbe58936cb71d8"
      ],
      "author": {
        "name": "kronic",
        "email": "kronic@softland.ru",
        "time": "Tue Jul 07 01:02:52 2026 +0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Jul 06 11:02:52 2026 -0700"
      },
      "message": "Remove static array (#384)\n\nremove static array"
    },
    {
      "commit": "e40a12b7ecf91a82e7b295f7c4bbe58936cb71d8",
      "tree": "ee6051546fad20f59988e90afe9d6fc6bae066b4",
      "parents": [
        "d3519117759bbaebcf5351e9329589e11096e8d5"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Jun 29 16:00:41 2026 +1200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Jun 29 16:00:41 2026 +1200"
      },
      "message": "chore: Bump Microsoft.NET.Test.Sdk from 18.6.0 to 18.7.0 (#383)\n\nUpdated [Microsoft.NET.Test.Sdk](https://github.com/microsoft/vstest)\nfrom 18.6.0 to 18.7.0.\n\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\n_Sourced from [Microsoft.NET.Test.Sdk\u0027s\nreleases](https://github.com/microsoft/vstest/releases)._\n\n## 18.7.0\n\n## What\u0027s Changed\n* Add ARM64 msdia140.dll support to test platform packages by\n@​jamesmcroft in https://github.com/microsoft/vstest/pull/15689\n* Update System.Memory from 4.5.5 to 4.6.3 by @​nohwnd in\nhttps://github.com/microsoft/vstest/pull/15706\n\n## New Contributors\n* @​jamesmcroft made their first contribution in\nhttps://github.com/microsoft/vstest/pull/15689\n\n**Full Changelog**:\nhttps://github.com/microsoft/vstest/compare/v18.6.0...v18.7.0\n\nCommits viewable in [compare\nview](https://github.com/microsoft/vstest/compare/v18.6.0...v18.7.0).\n\u003c/details\u003e\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dMicrosoft.NET.Test.Sdk\u0026package-manager\u003dnuget\u0026previous-version\u003d18.6.0\u0026new-version\u003d18.7.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "d3519117759bbaebcf5351e9329589e11096e8d5",
      "tree": "6f964eff1f4b4ff7ed33a9aaf49c2e472972108f",
      "parents": [
        "924f5dfa1e65f50d358ab3590d0def06b2205b26"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Sun Jun 28 20:45:51 2026 -0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sun Jun 28 20:45:51 2026 -0700"
      },
      "message": "chore: Bump actions/setup-dotnet from 5.3.0 to 5.4.0 (#381)\n\nBumps [actions/setup-dotnet](https://github.com/actions/setup-dotnet)\nfrom 5.3.0 to 5.4.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/actions/setup-dotnet/releases\"\u003eactions/setup-dotnet\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.4.0\u003c/h2\u003e\n\u003ch2\u003eWhat\u0027s Changed\u003c/h2\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eImprove global.json SDK version validation for rollForward by \u003ca\nhref\u003d\"https://github.com/priyagupta108\"\u003e\u003ccode\u003e@​priyagupta108\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-dotnet/pull/742\"\u003eactions/setup-dotnet#742\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePin actions to commit SHAs in workflows by \u003ca\nhref\u003d\"https://github.com/priya-kinthali\"\u003e\u003ccode\u003e@​priya-kinthali\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-dotnet/pull/744\"\u003eactions/setup-dotnet#744\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eExpand the CSC problem matcher to light up more errors on GitHub. by\n\u003ca\nhref\u003d\"https://github.com/StephenCleary\"\u003e\u003ccode\u003e@​StephenCleary\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-dotnet/pull/717\"\u003eactions/setup-dotnet#717\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDocumentation\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDocs(action): Explicitly mark all optional inputs with required:\nfalse by \u003ca\nhref\u003d\"https://github.com/kranthipoturaju\"\u003e\u003ccode\u003e@​kranthipoturaju\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-dotnet/pull/737\"\u003eactions/setup-dotnet#737\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix global.json creation command by \u003ca\nhref\u003d\"https://github.com/michal2612\"\u003e\u003ccode\u003e@​michal2612\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-dotnet/pull/694\"\u003eactions/setup-dotnet#694\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependency Updates\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade \u003ccode\u003e@​actions/cache\u003c/code\u003e to 5.1.0, log cache write\ndenied by \u003ca\nhref\u003d\"https://github.com/jasongin\"\u003e\u003ccode\u003e@​jasongin\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-dotnet/pull/746\"\u003eactions/setup-dotnet#746\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/jasongin\"\u003e\u003ccode\u003e@​jasongin\u003c/code\u003e\u003c/a\u003e\nmade their first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-dotnet/pull/746\"\u003eactions/setup-dotnet#746\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/michal2612\"\u003e\u003ccode\u003e@​michal2612\u003c/code\u003e\u003c/a\u003e made\ntheir first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-dotnet/pull/694\"\u003eactions/setup-dotnet#694\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/kranthipoturaju\"\u003e\u003ccode\u003e@​kranthipoturaju\u003c/code\u003e\u003c/a\u003e\nmade their first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-dotnet/pull/737\"\u003eactions/setup-dotnet#737\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/StephenCleary\"\u003e\u003ccode\u003e@​StephenCleary\u003c/code\u003e\u003c/a\u003e\nmade their first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-dotnet/pull/717\"\u003eactions/setup-dotnet#717\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca\nhref\u003d\"https://github.com/actions/setup-dotnet/compare/v5...v5.4.0\"\u003ehttps://github.com/actions/setup-dotnet/compare/v5...v5.4.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/setup-dotnet/commit/26b0ec14cb23fa6904739307f278c14f94c95bf1\"\u003e\u003ccode\u003e26b0ec1\u003c/code\u003e\u003c/a\u003e\nExpand the CSC problem matcher to light up more errors on GitHub. (\u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-dotnet/issues/717\"\u003e#717\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/setup-dotnet/commit/da5e5482f2d0700168cff080da45b50da8b60f0e\"\u003e\u003ccode\u003eda5e548\u003c/code\u003e\u003c/a\u003e\ndocs(action): explicitly mark all optional inputs with required: false\n(\u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-dotnet/issues/737\"\u003e#737\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/setup-dotnet/commit/9bd3b44355ba7c500f3d2e029636c6d29ac5caab\"\u003e\u003ccode\u003e9bd3b44\u003c/code\u003e\u003c/a\u003e\nImprove readability of global.json creation command (\u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-dotnet/issues/694\"\u003e#694\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/setup-dotnet/commit/4406a635cd2be9c92689ea22b2f74ea57297088c\"\u003e\u003ccode\u003e4406a63\u003c/code\u003e\u003c/a\u003e\nBump \u003ccode\u003e@​actions/cache\u003c/code\u003e to 5.1.0, log cache write denied (\u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-dotnet/issues/746\"\u003e#746\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/setup-dotnet/commit/dc3262dda80e97f1c7865b3b122e99240e30b738\"\u003e\u003ccode\u003edc3262d\u003c/code\u003e\u003c/a\u003e\npin actions to commit SHAs in workflows (\u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-dotnet/issues/744\"\u003e#744\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/setup-dotnet/commit/95a3f8b067437dc9b2027a437f5dc3b4569ddd49\"\u003e\u003ccode\u003e95a3f8b\u003c/code\u003e\u003c/a\u003e\nValidate global.json SDK version before rollForward optimization (\u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-dotnet/issues/742\"\u003e#742\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca\nhref\u003d\"https://github.com/actions/setup-dotnet/compare/9a946fdbd5fb07b82b2f5a4466058b876ab72bb2...26b0ec14cb23fa6904739307f278c14f94c95bf1\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dactions/setup-dotnet\u0026package-manager\u003dgithub_actions\u0026previous-version\u003d5.3.0\u0026new-version\u003d5.4.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "924f5dfa1e65f50d358ab3590d0def06b2205b26",
      "tree": "97af80ed06431ae075b539581aacc22b86ef5fa9",
      "parents": [
        "a28e67023b6eab5320ebad88f932b3c55ad4fa32"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Sun Jun 28 20:45:37 2026 -0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sun Jun 28 20:45:37 2026 -0700"
      },
      "message": "chore: Bump actions/cache from 5.0.5 to 6.1.0 (#382)\n\nBumps [actions/cache](https://github.com/actions/cache) from 5.0.5 to\n6.1.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/actions/cache/releases\"\u003eactions/cache\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev6.1.0\u003c/h2\u003e\n\u003ch2\u003eWhat\u0027s Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBump \u003ccode\u003e@​actions/cache\u003c/code\u003e to v6.1.0 - handle read-only cache\naccess by \u003ca\nhref\u003d\"https://github.com/jasongin\"\u003e\u003ccode\u003e@​jasongin\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/cache/pull/1768\"\u003eactions/cache#1768\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca\nhref\u003d\"https://github.com/actions/cache/compare/v6...v6.1.0\"\u003ehttps://github.com/actions/cache/compare/v6...v6.1.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev6.0.0\u003c/h2\u003e\n\u003ch2\u003eWhat\u0027s Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate packages, migrate to ESM by \u003ca\nhref\u003d\"https://github.com/Samirat\"\u003e\u003ccode\u003e@​Samirat\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/cache/pull/1760\"\u003eactions/cache#1760\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca\nhref\u003d\"https://github.com/actions/cache/compare/v5...v6.0.0\"\u003ehttps://github.com/actions/cache/compare/v5...v6.0.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev5.1.0\u003c/h2\u003e\n\u003ch2\u003eWhat\u0027s Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBump \u003ccode\u003e@​actions/cache\u003c/code\u003e to v5.1.0 - handle read-only cache\naccess by \u003ca\nhref\u003d\"https://github.com/jasongin\"\u003e\u003ccode\u003e@​jasongin\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/cache/pull/1775\"\u003eactions/cache#1775\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca\nhref\u003d\"https://github.com/actions/cache/compare/v5...v5.1.0\"\u003ehttps://github.com/actions/cache/compare/v5...v5.1.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/actions/cache/blob/main/RELEASES.md\"\u003eactions/cache\u0027s\nchangelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eReleases\u003c/h1\u003e\n\u003ch2\u003eHow to prepare a release\u003c/h2\u003e\n\u003cblockquote\u003e\n\u003cp\u003e[!NOTE]\nRelevant for maintainers with write access only.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003col\u003e\n\u003cli\u003eSwitch to a new branch from \u003ccode\u003emain\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eRun \u003ccode\u003enpm test\u003c/code\u003e to ensure all tests are passing.\u003c/li\u003e\n\u003cli\u003eUpdate the version in \u003ca\nhref\u003d\"https://github.com/actions/cache/blob/main/package.json\"\u003e\u003ccode\u003ehttps://github.com/actions/cache/blob/main/package.json\u003c/code\u003e\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eRun \u003ccode\u003enpm run build\u003c/code\u003e to update the compiled files.\u003c/li\u003e\n\u003cli\u003eUpdate this \u003ca\nhref\u003d\"https://github.com/actions/cache/blob/main/RELEASES.md\"\u003e\u003ccode\u003ehttps://github.com/actions/cache/blob/main/RELEASES.md\u003c/code\u003e\u003c/a\u003e\nwith the new version and changes in the \u003ccode\u003e## Changelog\u003c/code\u003e\nsection.\u003c/li\u003e\n\u003cli\u003eRun \u003ccode\u003elicensed cache\u003c/code\u003e to update the license report.\u003c/li\u003e\n\u003cli\u003eRun \u003ccode\u003elicensed status\u003c/code\u003e and resolve any warnings by\nupdating the \u003ca\nhref\u003d\"https://github.com/actions/cache/blob/main/.licensed.yml\"\u003e\u003ccode\u003ehttps://github.com/actions/cache/blob/main/.licensed.yml\u003c/code\u003e\u003c/a\u003e\nfile with the exceptions.\u003c/li\u003e\n\u003cli\u003eCommit your changes and push your branch upstream.\u003c/li\u003e\n\u003cli\u003eOpen a pull request against \u003ccode\u003emain\u003c/code\u003e and get it reviewed\nand merged.\u003c/li\u003e\n\u003cli\u003eDraft a new release \u003ca\nhref\u003d\"https://github.com/actions/cache/releases\"\u003ehttps://github.com/actions/cache/releases\u003c/a\u003e\nuse the same version number used in \u003ccode\u003epackage.json\u003c/code\u003e\n\u003col\u003e\n\u003cli\u003eCreate a new tag with the version number.\u003c/li\u003e\n\u003cli\u003eAuto generate release notes and update them to match the changes you\nmade in \u003ccode\u003eRELEASES.md\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eToggle the set as the latest release option.\u003c/li\u003e\n\u003cli\u003ePublish the release.\u003c/li\u003e\n\u003c/ol\u003e\n\u003c/li\u003e\n\u003cli\u003eNavigate to \u003ca\nhref\u003d\"https://github.com/actions/cache/actions/workflows/release-new-action-version.yml\"\u003ehttps://github.com/actions/cache/actions/workflows/release-new-action-version.yml\u003c/a\u003e\n\u003col\u003e\n\u003cli\u003eThere should be a workflow run queued with the same version\nnumber.\u003c/li\u003e\n\u003cli\u003eApprove the run to publish the new version and update the major tags\nfor this action.\u003c/li\u003e\n\u003c/ol\u003e\n\u003c/li\u003e\n\u003c/ol\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003ch3\u003e6.1.0\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBump \u003ccode\u003e@actions/cache\u003c/code\u003e to v6.1.0 to pick up \u003ca\nhref\u003d\"https://redirect.github.com/actions/toolkit/pull/2435\"\u003eactions/toolkit#2435\nHandle cache write error due to read-only token\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSwitch redundant \u0026quot;Cache save failed\u0026quot; warning to debug log\nin save-only\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e6.0.0\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdated \u003ccode\u003e@actions/cache\u003c/code\u003e to ^6.0.1,\n\u003ccode\u003e@actions/core\u003c/code\u003e to ^3.0.1, \u003ccode\u003e@actions/exec\u003c/code\u003e to\n^3.0.0, \u003ccode\u003e@actions/io\u003c/code\u003e to ^3.0.2\u003c/li\u003e\n\u003cli\u003eMigrated to ESM module system\u003c/li\u003e\n\u003cli\u003eUpgraded Jest to v30 and test infrastructure to be ESM\ncompatible\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e5.0.4\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBump \u003ccode\u003eminimatch\u003c/code\u003e to v3.1.5 (fixes ReDoS via globstar\npatterns)\u003c/li\u003e\n\u003cli\u003eBump \u003ccode\u003eundici\u003c/code\u003e to v6.24.1 (WebSocket decompression bomb\nprotection, header validation fixes)\u003c/li\u003e\n\u003cli\u003eBump \u003ccode\u003efast-xml-parser\u003c/code\u003e to v5.5.6\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e5.0.3\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBump \u003ccode\u003e@actions/cache\u003c/code\u003e to v5.0.5 (Resolves: \u003ca\nhref\u003d\"https://github.com/actions/cache/security/dependabot/33\"\u003ehttps://github.com/actions/cache/security/dependabot/33\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBump \u003ccode\u003e@actions/core\u003c/code\u003e to v2.0.3\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e5.0.2\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/cache/commit/55cc8345863c7cc4c66a329aec7e433d2d1c52a9\"\u003e\u003ccode\u003e55cc834\u003c/code\u003e\u003c/a\u003e\nMerge pull request \u003ca\nhref\u003d\"https://redirect.github.com/actions/cache/issues/1768\"\u003e#1768\u003c/a\u003e\nfrom jasongin/readonly-cache\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/cache/commit/d8cd72f230726cdf4457ebb61ec1b593a8d12337\"\u003e\u003ccode\u003ed8cd72f\u003c/code\u003e\u003c/a\u003e\nBump \u003ccode\u003e@​actions/cache\u003c/code\u003e to v6.1.0 - handle cache write error\ndue to RO token\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/cache/commit/2c8a9bd7457de244a408f35966fab2fb45fda9c8\"\u003e\u003ccode\u003e2c8a9bd\u003c/code\u003e\u003c/a\u003e\nMerge pull request \u003ca\nhref\u003d\"https://redirect.github.com/actions/cache/issues/1760\"\u003e#1760\u003c/a\u003e\nfrom actions/samirat/esm_migration_and_package_update\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/cache/commit/e9b91fdc3fea7d79165fceb79042ef45c2d51023\"\u003e\u003ccode\u003ee9b91fd\u003c/code\u003e\u003c/a\u003e\nPrettier fixes\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/cache/commit/e4884b8ff7f92ef6b52c79eda480bbc86e685adb\"\u003e\u003ccode\u003ee4884b8\u003c/code\u003e\u003c/a\u003e\nRebuild dist\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/cache/commit/10baf0191a3c426ea0fa4a3253a5c04233b6e18f\"\u003e\u003ccode\u003e10baf01\u003c/code\u003e\u003c/a\u003e\nFixed licenses\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/cache/commit/e39b386c9004d72a15d864ade8c0b3a702d47a37\"\u003e\u003ccode\u003ee39b386\u003c/code\u003e\u003c/a\u003e\nFix test mock return order\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/cache/commit/b6928203372a8571ff984c0c883ef3a1adfb0c06\"\u003e\u003ccode\u003eb692820\u003c/code\u003e\u003c/a\u003e\nPR feedback\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/cache/commit/60749128a44d25d3c520a489e576380cf00ff3f1\"\u003e\u003ccode\u003e6074912\u003c/code\u003e\u003c/a\u003e\nRebuild dist bundles as ESM to match type:module\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/cache/commit/5a912e8b4af820fa082a0e75cfd2c782f8fbfe0e\"\u003e\u003ccode\u003e5a912e8\u003c/code\u003e\u003c/a\u003e\nFix lint and jest issues\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://github.com/actions/cache/compare/27d5ce7f107fe9357f9df03efb73ab90386fccae...55cc8345863c7cc4c66a329aec7e433d2d1c52a9\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dactions/cache\u0026package-manager\u003dgithub_actions\u0026previous-version\u003d5.0.5\u0026new-version\u003d6.1.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "a28e67023b6eab5320ebad88f932b3c55ad4fa32",
      "tree": "1d4b0706a454ccdf54164c0d1b5e70a76ed83534",
      "parents": [
        "708fbe2e500404c75f7161ebd15a064411b9b0fa"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Sun Jun 28 20:45:18 2026 -0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sun Jun 28 20:45:18 2026 -0700"
      },
      "message": "chore: Bump actions/setup-python from 6.2.0 to 6.3.0 (#380)\n\nBumps [actions/setup-python](https://github.com/actions/setup-python)\nfrom 6.2.0 to 6.3.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/actions/setup-python/releases\"\u003eactions/setup-python\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev6.3.0\u003c/h2\u003e\n\u003ch2\u003eWhat\u0027s Changed\u003c/h2\u003e\n\u003ch3\u003eEnhancement\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd RHEL support and include Linux distro in cache keys by \u003ca\nhref\u003d\"https://github.com/priyagupta108\"\u003e\u003ccode\u003e@​priyagupta108\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-python/pull/1323\"\u003eactions/setup-python#1323\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix pip cache error handling on Windows by \u003ca\nhref\u003d\"https://github.com/priyagupta108\"\u003e\u003ccode\u003e@​priyagupta108\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-python/pull/1040\"\u003eactions/setup-python#1040\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependency update\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade minimatch from 3.1.2 to 3.1.5 by \u003ca\nhref\u003d\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-python/pull/1281\"\u003eactions/setup-python#1281\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpgrade actions dependencies by \u003ca\nhref\u003d\"https://github.com/gowridurgad\"\u003e\u003ccode\u003e@​gowridurgad\u003c/code\u003e\u003c/a\u003e\nwith \u003ca href\u003d\"https://github.com/Copilot\"\u003e\u003ccode\u003e@​Copilot\u003c/code\u003e\u003c/a\u003e in\n\u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-python/pull/1303\"\u003eactions/setup-python#1303\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpgrade \u003ccode\u003e@​actions/cache\u003c/code\u003e to 5.1.0, log cache write\ndenied by \u003ca\nhref\u003d\"https://github.com/jasongin\"\u003e\u003ccode\u003e@​jasongin\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-python/pull/1324\"\u003eactions/setup-python#1324\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpgrade dependency versions and test workflow configuration by \u003ca\nhref\u003d\"https://github.com/HarithaVattikuti\"\u003e\u003ccode\u003e@​HarithaVattikuti\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-python/pull/1322\"\u003eactions/setup-python#1322\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDocumentation\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate advanced-usage.md by \u003ca\nhref\u003d\"https://github.com/Dunky-Z\"\u003e\u003ccode\u003e@​Dunky-Z\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-python/pull/811\"\u003eactions/setup-python#811\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/gowridurgad\"\u003e\u003ccode\u003e@​gowridurgad\u003c/code\u003e\u003c/a\u003e\nwith \u003ca href\u003d\"https://github.com/Copilot\"\u003e\u003ccode\u003e@​Copilot\u003c/code\u003e\u003c/a\u003e\nmade their first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-python/pull/1303\"\u003eactions/setup-python#1303\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/jasongin\"\u003e\u003ccode\u003e@​jasongin\u003c/code\u003e\u003c/a\u003e\nmade their first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-python/pull/1324\"\u003eactions/setup-python#1324\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/Dunky-Z\"\u003e\u003ccode\u003e@​Dunky-Z\u003c/code\u003e\u003c/a\u003e made\ntheir first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-python/pull/811\"\u003eactions/setup-python#811\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca\nhref\u003d\"https://github.com/actions/setup-python/compare/v6...v6.3.0\"\u003ehttps://github.com/actions/setup-python/compare/v6...v6.3.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/setup-python/commit/ece7cb06caefa5fff74198d8649806c4678c61a1\"\u003e\u003ccode\u003eece7cb0\u003c/code\u003e\u003c/a\u003e\nFix pip cache error handling on Windows. (\u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-python/issues/1040\"\u003e#1040\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/setup-python/commit/1d18d7af5f767c1259ede05a0a5bcc30f3dcf1cf\"\u003e\u003ccode\u003e1d18d7a\u003c/code\u003e\u003c/a\u003e\nUpdate advanced-usage.md (\u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-python/issues/811\"\u003e#811\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/setup-python/commit/d2b357a6a3a3687dd6781a416c0d24fcfd68660e\"\u003e\u003ccode\u003ed2b357a\u003c/code\u003e\u003c/a\u003e\nUpdate dependency versions and test workflow configuration (\u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-python/issues/1322\"\u003e#1322\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/setup-python/commit/8f639b1e75c1048640734b2bb46e22cecf136982\"\u003e\u003ccode\u003e8f639b1\u003c/code\u003e\u003c/a\u003e\nMerge pull request \u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-python/issues/1324\"\u003e#1324\u003c/a\u003e\nfrom jasongin/update-actions-cache-5.1.0\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/setup-python/commit/6731c2ba87f530c26324d128c8fdd53499a4d4b0\"\u003e\u003ccode\u003e6731c2b\u003c/code\u003e\u003c/a\u003e\nResolve high-severity audit issues\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/setup-python/commit/0cb1a84326b90186fcd211036c65b42819794c87\"\u003e\u003ccode\u003e0cb1a84\u003c/code\u003e\u003c/a\u003e\nAdd RHEL support and include Linux distro in cache keys (\u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-python/issues/1323\"\u003e#1323\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/setup-python/commit/dc6eab6194394e0119523369788b507096f923e2\"\u003e\u003ccode\u003edc6eab6\u003c/code\u003e\u003c/a\u003e\nUpdate dist\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/setup-python/commit/6f4b74bfa2f520a380a620de3615c0dac427f4d3\"\u003e\u003ccode\u003e6f4b74b\u003c/code\u003e\u003c/a\u003e\nStrict equality\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/setup-python/commit/fa8bde1a9cc6347d06948d66bcd68c598b79eaea\"\u003e\u003ccode\u003efa8bde1\u003c/code\u003e\u003c/a\u003e\nBump \u003ccode\u003e@​actions/cache\u003c/code\u003e to 5.1.0, log cache write denied\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/setup-python/commit/c8813ba1bc76ebf779b911ad8ffccbf2e449cb48\"\u003e\u003ccode\u003ec8813ba\u003c/code\u003e\u003c/a\u003e\nUpgrade \u003ca href\u003d\"https://github.com/actions\"\u003e\u003ccode\u003e@​actions\u003c/code\u003e\u003c/a\u003e\ndependencies and update licenses (\u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-python/issues/1303\"\u003e#1303\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://github.com/actions/setup-python/compare/a309ff8b426b58ec0e2a45f0f869d46889d02405...ece7cb06caefa5fff74198d8649806c4678c61a1\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dactions/setup-python\u0026package-manager\u003dgithub_actions\u0026previous-version\u003d6.2.0\u0026new-version\u003d6.3.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "708fbe2e500404c75f7161ebd15a064411b9b0fa",
      "tree": "7b8e3ea3938c97817bb484d012042d991658b42e",
      "parents": [
        "fc77745e5c16182689134df7dd2be316c5ae1aff"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Jun 22 06:42:26 2026 -0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Jun 22 06:42:26 2026 -0700"
      },
      "message": "chore: Bump actions/checkout from 6.0.3 to 7.0.0 (#377)\n\nBumps [actions/checkout](https://github.com/actions/checkout) from 6.0.3\nto 7.0.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/actions/checkout/releases\"\u003eactions/checkout\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev7.0.0\u003c/h2\u003e\n\u003ch2\u003eWhat\u0027s Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eblock checking out fork pr for pull_request_target and workflow_run\nby \u003ca href\u003d\"https://github.com/aiqiaoy\"\u003e\u003ccode\u003e@​aiqiaoy\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2454\"\u003eactions/checkout#2454\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the\nminor-actions-dependencies group across 1 directory by \u003ca\nhref\u003d\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot]\nin \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2458\"\u003eactions/checkout#2458\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump flatted from 3.3.1 to 3.4.2 by \u003ca\nhref\u003d\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot]\nin \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2460\"\u003eactions/checkout#2460\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump js-yaml from 4.1.0 to 4.2.0 by \u003ca\nhref\u003d\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot]\nin \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2461\"\u003eactions/checkout#2461\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump \u003ccode\u003e@​actions/core\u003c/code\u003e and\n\u003ccode\u003e@​actions/tool-cache\u003c/code\u003e and Remove uuid by \u003ca\nhref\u003d\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot]\nin \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2459\"\u003eactions/checkout#2459\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eupgrade module to esm and update dependencies by \u003ca\nhref\u003d\"https://github.com/aiqiaoy\"\u003e\u003ccode\u003e@​aiqiaoy\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2463\"\u003eactions/checkout#2463\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump the minor-npm-dependencies group across 1 directory with 3\nupdates by \u003ca\nhref\u003d\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot]\nin \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2462\"\u003eactions/checkout#2462\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003egetting ready for checkout v7 release by \u003ca\nhref\u003d\"https://github.com/aiqiaoy\"\u003e\u003ccode\u003e@​aiqiaoy\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2464\"\u003eactions/checkout#2464\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eupdate error wording by \u003ca\nhref\u003d\"https://github.com/aiqiaoy\"\u003e\u003ccode\u003e@​aiqiaoy\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2467\"\u003eactions/checkout#2467\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/aiqiaoy\"\u003e\u003ccode\u003e@​aiqiaoy\u003c/code\u003e\u003c/a\u003e made\ntheir first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2454\"\u003eactions/checkout#2454\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca\nhref\u003d\"https://github.com/actions/checkout/compare/v6.0.3...v7.0.0\"\u003ehttps://github.com/actions/checkout/compare/v6.0.3...v7.0.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/actions/checkout/blob/main/CHANGELOG.md\"\u003eactions/checkout\u0027s\nchangelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003ch2\u003ev7.0.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBlock checking out fork PR for pull_request_target and workflow_run\nby \u003ca href\u003d\"https://github.com/aiqiaoy\"\u003e\u003ccode\u003e@​aiqiaoy\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2454\"\u003eactions/checkout#2454\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the\nminor-actions-dependencies group across 1 directory by \u003ca\nhref\u003d\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot]\nin \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2458\"\u003eactions/checkout#2458\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump flatted from 3.3.1 to 3.4.2 by \u003ca\nhref\u003d\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot]\nin \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2460\"\u003eactions/checkout#2460\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump js-yaml from 4.1.0 to 4.2.0 by \u003ca\nhref\u003d\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot]\nin \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2461\"\u003eactions/checkout#2461\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump \u003ccode\u003e@​actions/core\u003c/code\u003e and\n\u003ccode\u003e@​actions/tool-cache\u003c/code\u003e and Remove uuid by \u003ca\nhref\u003d\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot]\nin \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2459\"\u003eactions/checkout#2459\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eupgrade module to esm and update dependencies by \u003ca\nhref\u003d\"https://github.com/aiqiaoy\"\u003e\u003ccode\u003e@​aiqiaoy\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2463\"\u003eactions/checkout#2463\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump the minor-npm-dependencies group across 1 directory with 3\nupdates by \u003ca\nhref\u003d\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot]\nin \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2462\"\u003eactions/checkout#2462\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev6.0.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix checkout init for SHA-256 repositories by \u003ca\nhref\u003d\"https://github.com/yaananth\"\u003e\u003ccode\u003e@​yaananth\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2439\"\u003eactions/checkout#2439\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: expand merge commit SHA regex and add SHA-256 test cases by \u003ca\nhref\u003d\"https://github.com/yaananth\"\u003e\u003ccode\u003e@​yaananth\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2414\"\u003eactions/checkout#2414\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev6.0.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix tag handling: preserve annotations and explicit fetch-tags by \u003ca\nhref\u003d\"https://github.com/ericsciple\"\u003e\u003ccode\u003e@​ericsciple\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2356\"\u003eactions/checkout#2356\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev6.0.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd worktree support for persist-credentials includeIf by \u003ca\nhref\u003d\"https://github.com/ericsciple\"\u003e\u003ccode\u003e@​ericsciple\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2327\"\u003eactions/checkout#2327\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev6.0.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ePersist creds to a separate file by \u003ca\nhref\u003d\"https://github.com/ericsciple\"\u003e\u003ccode\u003e@​ericsciple\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2286\"\u003eactions/checkout#2286\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate README to include Node.js 24 support details and requirements\nby \u003ca href\u003d\"https://github.com/salmanmkc\"\u003e\u003ccode\u003e@​salmanmkc\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2248\"\u003eactions/checkout#2248\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev5.0.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ePort v6 cleanup to v5 by \u003ca\nhref\u003d\"https://github.com/ericsciple\"\u003e\u003ccode\u003e@​ericsciple\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2301\"\u003eactions/checkout#2301\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev5.0.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate actions checkout to use node 24 by \u003ca\nhref\u003d\"https://github.com/salmanmkc\"\u003e\u003ccode\u003e@​salmanmkc\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2226\"\u003eactions/checkout#2226\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev4.3.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ePort v6 cleanup to v4 by \u003ca\nhref\u003d\"https://github.com/ericsciple\"\u003e\u003ccode\u003e@​ericsciple\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2305\"\u003eactions/checkout#2305\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev4.3.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003edocs: update README.md by \u003ca\nhref\u003d\"https://github.com/motss\"\u003e\u003ccode\u003e@​motss\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/1971\"\u003eactions/checkout#1971\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd internal repos for checking out multiple repositories by \u003ca\nhref\u003d\"https://github.com/mouismail\"\u003e\u003ccode\u003e@​mouismail\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/1977\"\u003eactions/checkout#1977\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eDocumentation update - add recommended permissions to Readme by \u003ca\nhref\u003d\"https://github.com/benwells\"\u003e\u003ccode\u003e@​benwells\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2043\"\u003eactions/checkout#2043\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdjust positioning of user email note and permissions heading by \u003ca\nhref\u003d\"https://github.com/joshmgross\"\u003e\u003ccode\u003e@​joshmgross\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2044\"\u003eactions/checkout#2044\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate README.md by \u003ca\nhref\u003d\"https://github.com/nebuk89\"\u003e\u003ccode\u003e@​nebuk89\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2194\"\u003eactions/checkout#2194\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate CODEOWNERS for actions by \u003ca\nhref\u003d\"https://github.com/TingluoHuang\"\u003e\u003ccode\u003e@​TingluoHuang\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2224\"\u003eactions/checkout#2224\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate package dependencies by \u003ca\nhref\u003d\"https://github.com/salmanmkc\"\u003e\u003ccode\u003e@​salmanmkc\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2236\"\u003eactions/checkout#2236\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev4.2.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eurl-helper.ts\u003c/code\u003e now leverages well-known environment\nvariables by \u003ca href\u003d\"https://github.com/jww3\"\u003e\u003ccode\u003e@​jww3\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/1941\"\u003eactions/checkout#1941\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eExpand unit test coverage for \u003ccode\u003eisGhes\u003c/code\u003e by \u003ca\nhref\u003d\"https://github.com/jww3\"\u003e\u003ccode\u003e@​jww3\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/1946\"\u003eactions/checkout#1946\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev4.2.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eCheck out other refs/* by commit if provided, fall back to ref by \u003ca\nhref\u003d\"https://github.com/orhantoy\"\u003e\u003ccode\u003e@​orhantoy\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/1924\"\u003eactions/checkout#1924\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/checkout/commit/9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0\"\u003e\u003ccode\u003e9c091bb\u003c/code\u003e\u003c/a\u003e\nupdate error wording (\u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/issues/2467\"\u003e#2467\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/checkout/commit/1044a6dea927916f2c38ba5aeffbc0a847b1221a\"\u003e\u003ccode\u003e1044a6d\u003c/code\u003e\u003c/a\u003e\ngetting ready for checkout v7 release (\u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/issues/2464\"\u003e#2464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/checkout/commit/f0282184c7ce73ab54c7e4ab5a617122602e575f\"\u003e\u003ccode\u003ef028218\u003c/code\u003e\u003c/a\u003e\nBump the minor-npm-dependencies group across 1 directory with 3 updates\n(\u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/issues/2462\"\u003e#2462\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/checkout/commit/d914b262ffc244530a203ab40decab34c3abf34d\"\u003e\u003ccode\u003ed914b26\u003c/code\u003e\u003c/a\u003e\nupgrade module to esm and update dependencies (\u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/issues/2463\"\u003e#2463\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/checkout/commit/537c7ef99cef6e5ddb5e7ff5d16d14510503801d\"\u003e\u003ccode\u003e537c7ef\u003c/code\u003e\u003c/a\u003e\nBump \u003ccode\u003e@​actions/core\u003c/code\u003e and \u003ccode\u003e@​actions/tool-cache\u003c/code\u003e\nand Remove uuid (\u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/issues/2459\"\u003e#2459\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/checkout/commit/130a169078a413d3a5246a393625e8e742f387f6\"\u003e\u003ccode\u003e130a169\u003c/code\u003e\u003c/a\u003e\nBump js-yaml from 4.1.0 to 4.2.0 (\u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/issues/2461\"\u003e#2461\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/checkout/commit/7d09575332117a40b46e5e020664df234cd416f3\"\u003e\u003ccode\u003e7d09575\u003c/code\u003e\u003c/a\u003e\nBump flatted from 3.3.1 to 3.4.2 (\u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/issues/2460\"\u003e#2460\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/checkout/commit/0f9f3aa320cb53abeb534aeb54048075d9697a0e\"\u003e\u003ccode\u003e0f9f3aa\u003c/code\u003e\u003c/a\u003e\nBump actions/publish-immutable-action (\u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/issues/2458\"\u003e#2458\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/checkout/commit/f9e715a95fcd1f9253f77dd28f11e88d2d6460c7\"\u003e\u003ccode\u003ef9e715a\u003c/code\u003e\u003c/a\u003e\nblock checking out fork pr for pull_request_target and workflow_run (\u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/issues/2454\"\u003e#2454\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca\nhref\u003d\"https://github.com/actions/checkout/compare/df4cb1c069e1874edd31b4311f1884172cec0e10...9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dactions/checkout\u0026package-manager\u003dgithub_actions\u0026previous-version\u003d6.0.3\u0026new-version\u003d7.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "fc77745e5c16182689134df7dd2be316c5ae1aff",
      "tree": "46775d6ea41ea959dada07a30f4292c1b556dcf8",
      "parents": [
        "72141b1990cc85c071404a2faf13aa3794b899f3"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Jun 15 06:43:35 2026 -0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Jun 15 06:43:35 2026 -0700"
      },
      "message": "chore: Bump System.CommandLine from 2.0.8 to 2.0.9 (#373)\n\nUpdated [System.CommandLine](https://github.com/dotnet/dotnet) from\n2.0.8 to 2.0.9.\n\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\n_Sourced from [System.CommandLine\u0027s\nreleases](https://github.com/dotnet/dotnet/releases)._\n\nNo release notes found for this version range.\n\nCommits viewable in [compare\nview](https://github.com/dotnet/dotnet/commits).\n\u003c/details\u003e\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dSystem.CommandLine\u0026package-manager\u003dnuget\u0026previous-version\u003d2.0.8\u0026new-version\u003d2.0.9)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "72141b1990cc85c071404a2faf13aa3794b899f3",
      "tree": "8ceb54d1a662a1232ccdb314b52abfe768f50bcb",
      "parents": [
        "1f5f0dbd980c9dc5414506a2bcf2c25a871fc7e2"
      ],
      "author": {
        "name": "kronic",
        "email": "kronic2006@gmail.com",
        "time": "Sun Jun 14 18:51:52 2026 +0300"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sun Jun 14 08:51:52 2026 -0700"
      },
      "message": "Update ArrowBuffer.cs (#369)\n\n## What\u0027s Changed\n\nRemove allocation ArrowBuffer.Empty"
    },
    {
      "commit": "1f5f0dbd980c9dc5414506a2bcf2c25a871fc7e2",
      "tree": "b2733b8a8d370c6f24a4bfcea6d0c6e5afed752a",
      "parents": [
        "2b798cad7b1f130029d4e76c499f07b691ef69f5"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Jun 08 16:15:38 2026 +1200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Jun 08 16:15:38 2026 +1200"
      },
      "message": "chore: Bump actions/checkout from 6.0.2 to 6.0.3 (#367)\n\nBumps [actions/checkout](https://github.com/actions/checkout) from 6.0.2\nto 6.0.3.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/actions/checkout/releases\"\u003eactions/checkout\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev6.0.3\u003c/h2\u003e\n\u003ch2\u003eWhat\u0027s Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate changelog by \u003ca\nhref\u003d\"https://github.com/ericsciple\"\u003e\u003ccode\u003e@​ericsciple\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2357\"\u003eactions/checkout#2357\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efix: expand merge commit SHA regex and add SHA-256 test cases by \u003ca\nhref\u003d\"https://github.com/yaananth\"\u003e\u003ccode\u003e@​yaananth\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2414\"\u003eactions/checkout#2414\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix checkout init for SHA-256 repositories by \u003ca\nhref\u003d\"https://github.com/yaananth\"\u003e\u003ccode\u003e@​yaananth\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2439\"\u003eactions/checkout#2439\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate changelog for v6.0.3 by \u003ca\nhref\u003d\"https://github.com/yaananth\"\u003e\u003ccode\u003e@​yaananth\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2446\"\u003eactions/checkout#2446\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/yaananth\"\u003e\u003ccode\u003e@​yaananth\u003c/code\u003e\u003c/a\u003e\nmade their first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2414\"\u003eactions/checkout#2414\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca\nhref\u003d\"https://github.com/actions/checkout/compare/v6...v6.0.3\"\u003ehttps://github.com/actions/checkout/compare/v6...v6.0.3\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/checkout/commit/df4cb1c069e1874edd31b4311f1884172cec0e10\"\u003e\u003ccode\u003edf4cb1c\u003c/code\u003e\u003c/a\u003e\nUpdate changelog for v6.0.3 (\u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/issues/2446\"\u003e#2446\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/checkout/commit/1cce3390c2bfda521930d01229c073c7ff920824\"\u003e\u003ccode\u003e1cce339\u003c/code\u003e\u003c/a\u003e\nFix checkout init for SHA-256 repositories (\u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/issues/2439\"\u003e#2439\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/checkout/commit/900f2210b1d28bbbd0bd22d17926b9e224e8f231\"\u003e\u003ccode\u003e900f221\u003c/code\u003e\u003c/a\u003e\nfix: expand merge commit SHA regex and add SHA-256 test cases (\u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/issues/2414\"\u003e#2414\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/checkout/commit/0c366fd6a839edf440554fa01a7085ccba70ac98\"\u003e\u003ccode\u003e0c366fd\u003c/code\u003e\u003c/a\u003e\nUpdate changelog (\u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/issues/2357\"\u003e#2357\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca\nhref\u003d\"https://github.com/actions/checkout/compare/v6.0.2...v6.0.3\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dactions/checkout\u0026package-manager\u003dgithub_actions\u0026previous-version\u003d6.0.2\u0026new-version\u003d6.0.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\n---------\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e\nCo-authored-by: Adam Reeve \u003cadreeve@gmail.com\u003e"
    },
    {
      "commit": "2b798cad7b1f130029d4e76c499f07b691ef69f5",
      "tree": "e3172bd4ac8cfbd33913080c35a1a696521b58c3",
      "parents": [
        "66a58577ad768091d9c7450f71aaeee5146ebe20"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Jun 01 04:55:20 2026 -0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Jun 01 04:55:20 2026 -0700"
      },
      "message": "chore: Bump Microsoft.NET.Test.Sdk from 18.5.1 to 18.6.0 (#366)\n\nUpdated [Microsoft.NET.Test.Sdk](https://github.com/microsoft/vstest)\nfrom 18.5.1 to 18.6.0.\n\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\n_Sourced from [Microsoft.NET.Test.Sdk\u0027s\nreleases](https://github.com/microsoft/vstest/releases)._\n\n## 18.6.0\n\n## What\u0027s Changed\n* Revert removal of Video Recorder by @​nohwnd in\nhttps://github.com/microsoft/vstest/pull/15336\n* Speed up blame by filtering non-.NET processes from dump collection by\n@​nohwnd in https://github.com/microsoft/vstest/pull/15518\n* Add README.md to NuGet packages by @​nohwnd in\nhttps://github.com/microsoft/vstest/pull/15550\n* Report child process info on connection timeout by @​nohwnd in\nhttps://github.com/microsoft/vstest/pull/15603\n\n\n### Changes to tests and infra\n* Brand as 18.6 by @​nohwnd in\nhttps://github.com/microsoft/vstest/pull/15423\n* Upgrading code coverage version to 18.5.1, by @​fhnaseer in\nhttps://github.com/microsoft/vstest/pull/15422\n* Updating System.Collections.Immutable to 9.0.11 by @​MSLukeWest in\nhttps://github.com/microsoft/vstest/pull/15425\n* Fix attachVS when used for debugging integration tests by @​nohwnd in\nhttps://github.com/microsoft/vstest/pull/15451\n* Replace dotnet.config, with global.json by @​nohwnd in\nhttps://github.com/microsoft/vstest/pull/15449\n* Document debugging integration tests with AttachVS by @​Copilot in\nhttps://github.com/microsoft/vstest/pull/15452\n* Fix stack overflow tests by @​nohwnd in\nhttps://github.com/microsoft/vstest/pull/15461\n* Make TestAssets.sln buildable locally by @​Youssef1313 in\nhttps://github.com/microsoft/vstest/pull/15466\n* Try filtering out tests by @​nohwnd in\nhttps://github.com/microsoft/vstest/pull/15463\n* Build just once when tfms run in parallel by @​nohwnd in\nhttps://github.com/microsoft/vstest/pull/15465\n* Review simplify compatibility sources, deduplicate tests by @​nohwnd\nin https://github.com/microsoft/vstest/pull/15472\n* Cleanup dead TRX code by @​Youssef1313 in\nhttps://github.com/microsoft/vstest/pull/15474\n* Update .NET runtimes to 8.0.25, 9.0.14, and 10.0.4 by @​nohwnd in\nhttps://github.com/microsoft/vstest/pull/15481\n* Compat matrix checker by @​nohwnd in\nhttps://github.com/microsoft/vstest/pull/15480\n* Add trx analysis skill by @​nohwnd in\nhttps://github.com/microsoft/vstest/pull/15486\n* Split integration tests to single tfm and multi tfm project by\n@​nohwnd in https://github.com/microsoft/vstest/pull/15484\n* Update matrix by @​nohwnd in\nhttps://github.com/microsoft/vstest/pull/15477\n* Break infinite restore loop in VS by @​nohwnd in\nhttps://github.com/microsoft/vstest/pull/15503\n* Use global package cache for build, and local for running integration\ntests by @​nohwnd in https://github.com/microsoft/vstest/pull/15500\n* Update contributing by @​nohwnd in\nhttps://github.com/microsoft/vstest/pull/15505\n* Reduce test wall-clock time by increasing minThreads by @​drognanar in\nhttps://github.com/microsoft/vstest/pull/15502\n* Indicator flakiness by @​nohwnd in\nhttps://github.com/microsoft/vstest/pull/15513\n* Fix ci build by @​nohwnd in\nhttps://github.com/microsoft/vstest/pull/15515\n* Fix thread safety issues by @​Evangelink in\nhttps://github.com/microsoft/vstest/pull/15512\n* Optimize DotnetSDKSimulation_PostProcessing test (163s → 61s) by\n@​nohwnd in https://github.com/microsoft/vstest/pull/15516\n* Build isolated test assets for single TFM instead of 7 by @​nohwnd in\nhttps://github.com/microsoft/vstest/pull/15517\n* Remove unused dependencies from Library.IntegrationTests by @​nohwnd\nin https://github.com/microsoft/vstest/pull/15527\n* Remove printing _attachments content to console by @​nohwnd in\nhttps://github.com/microsoft/vstest/pull/15520\n* Add Linux/macOS test filtering guide to CONTRIBUTING.md by @​nohwnd in\nhttps://github.com/microsoft/vstest/pull/15521\n* Change integration test parallelization from ClassLevel to MethodLevel\nby @​nohwnd in https://github.com/microsoft/vstest/pull/15526\n* Unify target framework checks with IsNetFrameworkTarget/IsNetTarget by\n@​nohwnd in https://github.com/microsoft/vstest/pull/15523\n* Add unattended work instructions to copilot-instructions.md by\n@​nohwnd in https://github.com/microsoft/vstest/pull/15531\n* Reduce code style rule severity from warning to suggestion by @​nohwnd\nin https://github.com/microsoft/vstest/pull/15522\n* Remove Debug/Release line number branching from tests by @​nohwnd in\nhttps://github.com/microsoft/vstest/pull/15519\n* Revise unattended work instructions in copilot-instructions.md by\n@​nohwnd in https://github.com/microsoft/vstest/pull/15532\n* Improve CompatibilityRowsBuilder error message with diagnostic details\nby @​nohwnd in https://github.com/microsoft/vstest/pull/15529\n* docs: add git worktree and upstream sync workflow to\ncopilot-instructions.md by @​nohwnd in\nhttps://github.com/microsoft/vstest/pull/15538\n* Add VSIX runner to smoke tests by @​nohwnd in\nhttps://github.com/microsoft/vstest/pull/15541\n* Remove deprecated WebTest and TMI test methods by @​nohwnd in\nhttps://github.com/microsoft/vstest/pull/15525\n* Fix compatibility test failures for legacy vstest.console and MSTest\nadapter by @​nohwnd in https://github.com/microsoft/vstest/pull/15534\n* Convert TestPlatform.sln to slnx format by @​nohwnd in\nhttps://github.com/microsoft/vstest/pull/15551\n* Convert test/TestAssets .sln files to .slnx format by @​nohwnd in\nhttps://github.com/microsoft/vstest/pull/15557\n ... (truncated)\n\nCommits viewable in [compare\nview](https://github.com/microsoft/vstest/compare/v18.5.1...v18.6.0).\n\u003c/details\u003e\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dMicrosoft.NET.Test.Sdk\u0026package-manager\u003dnuget\u0026previous-version\u003d18.5.1\u0026new-version\u003d18.6.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "66a58577ad768091d9c7450f71aaeee5146ebe20",
      "tree": "e3644ebfdda7278ad99360c1f8db43f5f13108c3",
      "parents": [
        "5c6a0c9c2e2f46abfe7f022230c672cdaba31833"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Jun 01 04:54:56 2026 -0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Jun 01 04:54:56 2026 -0700"
      },
      "message": "chore: Bump actions/setup-dotnet from 5.2.0 to 5.3.0 (#365)\n\nBumps [actions/setup-dotnet](https://github.com/actions/setup-dotnet)\nfrom 5.2.0 to 5.3.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/actions/setup-dotnet/releases\"\u003eactions/setup-dotnet\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.3.0\u003c/h2\u003e\n\u003ch2\u003eWhat\u0027s Changed\u003c/h2\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd dotnet-version: latest support with dotnet-channel input by \u003ca\nhref\u003d\"https://github.com/mahabaleshwars\"\u003e\u003ccode\u003e@​mahabaleshwars\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-dotnet/pull/730\"\u003eactions/setup-dotnet#730\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport global.json\u0027s rollForward latest* variants by \u003ca\nhref\u003d\"https://github.com/js6pak\"\u003e\u003ccode\u003e@​js6pak\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-dotnet/pull/538\"\u003eactions/setup-dotnet#538\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eImprove version resolution by \u003ca\nhref\u003d\"https://github.com/akoeplinger\"\u003e\u003ccode\u003e@​akoeplinger\u003c/code\u003e\u003c/a\u003e in\n\u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-dotnet/pull/560\"\u003eactions/setup-dotnet#560\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependency Updates\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade @actions/* and fast-xml-parser dependencies by \u003ca\nhref\u003d\"https://github.com/Copilot\"\u003e\u003ccode\u003e@​Copilot\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-dotnet/pull/728\"\u003eactions/setup-dotnet#728\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate install scripts to v2026.05.19 (preserve archive links) by \u003ca\nhref\u003d\"https://github.com/MichaelSimons\"\u003e\u003ccode\u003e@​MichaelSimons\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-dotnet/pull/736\"\u003eactions/setup-dotnet#736\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd rollForward note in README, improve proxy health check in e2e\ntests and bump version to v5.3.0 by \u003ca\nhref\u003d\"https://github.com/priyagupta108\"\u003e\u003ccode\u003e@​priyagupta108\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-dotnet/pull/738\"\u003eactions/setup-dotnet#738\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate Test Proxy job by \u003ca\nhref\u003d\"https://github.com/priya-kinthali\"\u003e\u003ccode\u003e@​priya-kinthali\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-dotnet/pull/703\"\u003eactions/setup-dotnet#703\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/Copilot\"\u003e\u003ccode\u003e@​Copilot\u003c/code\u003e\u003c/a\u003e made\ntheir first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-dotnet/pull/728\"\u003eactions/setup-dotnet#728\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/akoeplinger\"\u003e\u003ccode\u003e@​akoeplinger\u003c/code\u003e\u003c/a\u003e\nmade their first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-dotnet/pull/560\"\u003eactions/setup-dotnet#560\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/MichaelSimons\"\u003e\u003ccode\u003e@​MichaelSimons\u003c/code\u003e\u003c/a\u003e\nmade their first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-dotnet/pull/736\"\u003eactions/setup-dotnet#736\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/js6pak\"\u003e\u003ccode\u003e@​js6pak\u003c/code\u003e\u003c/a\u003e made\ntheir first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-dotnet/pull/538\"\u003eactions/setup-dotnet#538\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca\nhref\u003d\"https://github.com/actions/setup-dotnet/compare/v5...v5.3.0\"\u003ehttps://github.com/actions/setup-dotnet/compare/v5...v5.3.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/setup-dotnet/commit/9a946fdbd5fb07b82b2f5a4466058b876ab72bb2\"\u003e\u003ccode\u003e9a946fd\u003c/code\u003e\u003c/a\u003e\nAdd rollForward note in README, improve proxy health check in e2e tests\nand b...\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/setup-dotnet/commit/98af08bf649b02f9e94783278906d34780362f6f\"\u003e\u003ccode\u003e98af08b\u003c/code\u003e\u003c/a\u003e\nSupport global.json\u0027s rollForward latest* variants (\u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-dotnet/issues/538\"\u003e#538\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/setup-dotnet/commit/84042723628274fd730a70726fbf57ef89e586de\"\u003e\u003ccode\u003e8404272\u003c/code\u003e\u003c/a\u003e\nUpdate install scripts to v2026.05.19 (\u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-dotnet/issues/736\"\u003e#736\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/setup-dotnet/commit/f1970f5ca30a3ba974274132e05c4bb012faac74\"\u003e\u003ccode\u003ef1970f5\u003c/code\u003e\u003c/a\u003e\nDon\u0027t download releases-index.json to resolve major version (\u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-dotnet/issues/560\"\u003e#560\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/setup-dotnet/commit/af9211b1364d382bc386cd82c6386875ad2ad796\"\u003e\u003ccode\u003eaf9211b\u003c/code\u003e\u003c/a\u003e\nAdd dotnet-version: latest support with dotnet-channel input (\u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-dotnet/issues/730\"\u003e#730\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/setup-dotnet/commit/df991aeaf2a76aae144b0b70ce23e455c66f061e\"\u003e\u003ccode\u003edf991ae\u003c/code\u003e\u003c/a\u003e\nchore: bump @actions/* and fast-xml-parser dependencies (\u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-dotnet/issues/728\"\u003e#728\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/setup-dotnet/commit/a66eefa2bf2572fc311ea6ff65a7b6ecc4df96a6\"\u003e\u003ccode\u003ea66eefa\u003c/code\u003e\u003c/a\u003e\nCI: remove manual PowerShell install from test-proxy job (e2e-tests.yml)\n(\u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-dotnet/issues/703\"\u003e#703\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca\nhref\u003d\"https://github.com/actions/setup-dotnet/compare/c2fa09f4bde5ebb9d1777cf28262a3eb3db3ced7...9a946fdbd5fb07b82b2f5a4466058b876ab72bb2\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dactions/setup-dotnet\u0026package-manager\u003dgithub_actions\u0026previous-version\u003d5.2.0\u0026new-version\u003d5.3.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "5c6a0c9c2e2f46abfe7f022230c672cdaba31833",
      "tree": "883aa6798406230146e53e0f2c31025f6126f2a1",
      "parents": [
        "156dd3230be53f7b0ae3696aba5022adf992f2e0"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon May 25 05:19:45 2026 -0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon May 25 05:19:45 2026 -0700"
      },
      "message": "chore: Bump pythonnet from 3.0.5 to 3.1.0 (#364)\n\nUpdated [pythonnet](https://github.com/pythonnet/pythonnet) from 3.0.5\nto 3.1.0.\n\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\n_Sourced from [pythonnet\u0027s\nreleases](https://github.com/pythonnet/pythonnet/releases)._\n\n## 3.1.0\n\n## What\u0027s Changed\n* ci: properly exclude job by @​RobPasMue in\nhttps://github.com/pythonnet/pythonnet/pull/2542\n* `__delitem__` for `IList\u003cT\u003e` and `IDictionary\u003cK,V\u003e` by @​lostmsu in\nhttps://github.com/pythonnet/pythonnet/pull/2533\n* Fix docs workflow by @​filmor in\nhttps://github.com/pythonnet/pythonnet/pull/2584\n* Drop EOLd Python versions by @​filmor in\nhttps://github.com/pythonnet/pythonnet/pull/2632\n* Bump setuptools and adjust license information by @​filmor in\nhttps://github.com/pythonnet/pythonnet/pull/2633\n* Minimal .NET 8 usage changes by @​filmor in\nhttps://github.com/pythonnet/pythonnet/pull/2634\n* Drop performance tests by @​filmor in\nhttps://github.com/pythonnet/pythonnet/pull/2636\n* Properly detect availability of BinaryFormatter by @​filmor in\nhttps://github.com/pythonnet/pythonnet/pull/2639\n* Use last compiler toolset version that support .NET 8 by @​filmor in\nhttps://github.com/pythonnet/pythonnet/pull/2640\n* Add dependabot file by @​filmor in\nhttps://github.com/pythonnet/pythonnet/pull/2642\n* Use official ARM runners by @​filmor in\nhttps://github.com/pythonnet/pythonnet/pull/2641\n* Bump actions/upload-pages-artifact from 3 to 4 by @​dependabot[bot] in\nhttps://github.com/pythonnet/pythonnet/pull/2644\n* Bump actions/setup-python from 2 to 6 by @​dependabot[bot] in\nhttps://github.com/pythonnet/pythonnet/pull/2646\n* Bump actions/checkout from 2 to 5 by @​dependabot[bot] in\nhttps://github.com/pythonnet/pythonnet/pull/2648\n* Bump actions/setup-dotnet from 1 to 5 by @​dependabot[bot] in\nhttps://github.com/pythonnet/pythonnet/pull/2645\n* Use uv and derive as much as possible from the environment, if\navailable by @​filmor in\nhttps://github.com/pythonnet/pythonnet/pull/2652\n* Fixes for the uv CI by @​filmor in\nhttps://github.com/pythonnet/pythonnet/pull/2654\n* Bump astral-sh/setup-uv from 6 to 7 by @​dependabot[bot] in\nhttps://github.com/pythonnet/pythonnet/pull/2656\n* Bump actions/checkout from 5 to 6 by @​dependabot[bot] in\nhttps://github.com/pythonnet/pythonnet/pull/2663\n* Ensure that the tests work even if BinaryFormatter is not available by\n@​filmor in https://github.com/pythonnet/pythonnet/pull/2638\n* Bump NUnit3TestAdapter from 5.2.0 to 6.0.0 by @​dependabot[bot] in\nhttps://github.com/pythonnet/pythonnet/pull/2667\n* Fix line endings by @​filmor in\nhttps://github.com/pythonnet/pythonnet/pull/2668\n* Switch to .NET SDK 10 by @​lostmsu in\nhttps://github.com/pythonnet/pythonnet/pull/2684\n* Python 3.14 by @​filmor in\nhttps://github.com/pythonnet/pythonnet/pull/2611\n* CI Improvements by @​filmor in\nhttps://github.com/pythonnet/pythonnet/pull/2669\n* Bump System.Reflection.Emit from 4.3.0 to 4.7.0 by @​dependabot[bot]\nin https://github.com/pythonnet/pythonnet/pull/2694\n* Bump pytest from 9.0.2 to 9.0.3 in the uv group across 1 directory by\n@​dependabot[bot] in https://github.com/pythonnet/pythonnet/pull/2705\n* CI Improvements by @​filmor in\nhttps://github.com/pythonnet/pythonnet/pull/2707\n* Fix method memleak test by @​filmor in\nhttps://github.com/pythonnet/pythonnet/pull/2708\n* Bump actions/upload-pages-artifact from 4 to 5 by @​dependabot[bot] in\nhttps://github.com/pythonnet/pythonnet/pull/2709\n* Update furo requirement from \u003e\u003d2022.9.15 to \u003e\u003d2025.12.19 by\n@​dependabot[bot] in https://github.com/pythonnet/pythonnet/pull/2711\n* Move documentation deps to pyproject.toml by @​filmor in\nhttps://github.com/pythonnet/pythonnet/pull/2714\n* Support .NET Framework 4.6.1 by @​Metadorius in\nhttps://github.com/pythonnet/pythonnet/pull/2701\n* Fix wheel tags by @​filmor in\nhttps://github.com/pythonnet/pythonnet/pull/2716\n* Name missing from __all__ on re-import by @​filmor in\nhttps://github.com/pythonnet/pythonnet/pull/2717\n* Add context manager protocol for .NET IDisposable types by\n@​den-run-ai in https://github.com/pythonnet/pythonnet/pull/2568\n* Fix MethodBinding/OverloadMapper memory leak (#​691) by\n@​greateggsgreg in https://github.com/pythonnet/pythonnet/pull/2719\n* Bump urllib3 from 2.6.3 to 2.7.0 in the uv group across 1 directory by\n@​dependabot[bot] in https://github.com/pythonnet/pythonnet/pull/2723\n* Update NUnit by @​filmor in\nhttps://github.com/pythonnet/pythonnet/pull/2724\n* Silence compile-time warnings by @​filmor in\nhttps://github.com/pythonnet/pythonnet/pull/2725\n* Implement support for DLR get/set by @​filmor in\nhttps://github.com/pythonnet/pythonnet/pull/2706\n* Bump idna from 3.13 to 3.15 in the uv group across 1 directory by\n@​dependabot[bot] in https://github.com/pythonnet/pythonnet/pull/2726\n\n## New Contributors\n* @​RobPasMue made their first contribution in\nhttps://github.com/pythonnet/pythonnet/pull/2542\n* @​dependabot[bot] made their first contribution in\nhttps://github.com/pythonnet/pythonnet/pull/2644\n* @​Metadorius made their first contribution in\nhttps://github.com/pythonnet/pythonnet/pull/2701\n\n**Full Changelog**:\nhttps://github.com/pythonnet/pythonnet/compare/v3.0.5...v3.1.0\n\n## 3.1.0-rc1\n\n## What\u0027s Changed\n* CI Improvements by @​filmor in\nhttps://github.com/pythonnet/pythonnet/pull/2669\n* Bump System.Reflection.Emit from 4.3.0 to 4.7.0 by @​dependabot[bot]\nin https://github.com/pythonnet/pythonnet/pull/2694\n* Bump pytest from 9.0.2 to 9.0.3 in the uv group across 1 directory by\n@​dependabot[bot] in https://github.com/pythonnet/pythonnet/pull/2705\n* CI Improvements by @​filmor in\nhttps://github.com/pythonnet/pythonnet/pull/2707\n* Fix method memleak test by @​filmor in\nhttps://github.com/pythonnet/pythonnet/pull/2708\n* Bump actions/upload-pages-artifact from 4 to 5 by @​dependabot[bot] in\nhttps://github.com/pythonnet/pythonnet/pull/2709\n* Update furo requirement from \u003e\u003d2022.9.15 to \u003e\u003d2025.12.19 by\n@​dependabot[bot] in https://github.com/pythonnet/pythonnet/pull/2711\n* Move documentation deps to pyproject.toml by @​filmor in\nhttps://github.com/pythonnet/pythonnet/pull/2714\n* Support .NET Framework 4.6.1 by @​Metadorius in\nhttps://github.com/pythonnet/pythonnet/pull/2701\n* Fix wheel tags by @​filmor in\nhttps://github.com/pythonnet/pythonnet/pull/2716\n* Name missing from __all__ on re-import by @​filmor in\nhttps://github.com/pythonnet/pythonnet/pull/2717\n* Add context manager protocol for .NET IDisposable types by\n@​den-run-ai in https://github.com/pythonnet/pythonnet/pull/2568\n* Fix MethodBinding/OverloadMapper memory leak (#​691) by\n@​greateggsgreg in https://github.com/pythonnet/pythonnet/pull/2719\n* Bump urllib3 from 2.6.3 to 2.7.0 in the uv group across 1 directory by\n@​dependabot[bot] in https://github.com/pythonnet/pythonnet/pull/2723\n* Update NUnit by @​filmor in\nhttps://github.com/pythonnet/pythonnet/pull/2724\n* Silence compile-time warnings by @​filmor in\nhttps://github.com/pythonnet/pythonnet/pull/2725\n* Implement support for DLR get/set by @​filmor in\nhttps://github.com/pythonnet/pythonnet/pull/2706\n\n## New Contributors\n* @​Metadorius made their first contribution in\nhttps://github.com/pythonnet/pythonnet/pull/2701\n\n**Full Changelog**:\nhttps://github.com/pythonnet/pythonnet/compare/v3.1.0-rc0...v3.1.0-rc1\n\n## 3.1.0-rc0\n\n## What\u0027s Changed\n* ci: properly exclude job by @​RobPasMue in\nhttps://github.com/pythonnet/pythonnet/pull/2542\n* `__delitem__` for `IList\u003cT\u003e` and `IDictionary\u003cK,V\u003e` by @​lostmsu in\nhttps://github.com/pythonnet/pythonnet/pull/2533\n* Fix docs workflow by @​filmor in\nhttps://github.com/pythonnet/pythonnet/pull/2584\n* Drop EOLd Python versions by @​filmor in\nhttps://github.com/pythonnet/pythonnet/pull/2632\n* Bump setuptools and adjust license information by @​filmor in\nhttps://github.com/pythonnet/pythonnet/pull/2633\n* Minimal .NET 8 usage changes by @​filmor in\nhttps://github.com/pythonnet/pythonnet/pull/2634\n* Drop performance tests by @​filmor in\nhttps://github.com/pythonnet/pythonnet/pull/2636\n* Properly detect availability of BinaryFormatter by @​filmor in\nhttps://github.com/pythonnet/pythonnet/pull/2639\n* Use last compiler toolset version that support .NET 8 by @​filmor in\nhttps://github.com/pythonnet/pythonnet/pull/2640\n* Add dependabot file by @​filmor in\nhttps://github.com/pythonnet/pythonnet/pull/2642\n* Use official ARM runners by @​filmor in\nhttps://github.com/pythonnet/pythonnet/pull/2641\n* Use uv and derive as much as possible from the environment, if\navailable by @​filmor in\nhttps://github.com/pythonnet/pythonnet/pull/2652\n* Fixes for the uv CI by @​filmor in\nhttps://github.com/pythonnet/pythonnet/pull/2654\n* Ensure that the tests work even if BinaryFormatter is not available by\n@​filmor in https://github.com/pythonnet/pythonnet/pull/2638\n* Fix line endings by @​filmor in\nhttps://github.com/pythonnet/pythonnet/pull/2668\n* Switch to .NET SDK 10 by @​lostmsu in\nhttps://github.com/pythonnet/pythonnet/pull/2684\n* Python 3.14 by @​filmor in\nhttps://github.com/pythonnet/pythonnet/pull/2611\n\n## New Contributors\n* @​RobPasMue made their first contribution in\nhttps://github.com/pythonnet/pythonnet/pull/2542\n* @​dependabot[bot] made their first contribution in\nhttps://github.com/pythonnet/pythonnet/pull/2644\n\n**Full Changelog**:\nhttps://github.com/pythonnet/pythonnet/compare/v3.0.5...v3.1.0-rc0\n\nCommits viewable in [compare\nview](https://github.com/pythonnet/pythonnet/compare/v3.0.5...v3.1.0).\n\u003c/details\u003e\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dpythonnet\u0026package-manager\u003dnuget\u0026previous-version\u003d3.0.5\u0026new-version\u003d3.1.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "156dd3230be53f7b0ae3696aba5022adf992f2e0",
      "tree": "746ef42b62e81ca468f8e24c7bdb6df69f802db8",
      "parents": [
        "cc3d329e2180bd4e515a1ebc932cae4c5ea79461"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon May 25 05:15:54 2026 -0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon May 25 05:15:54 2026 -0700"
      },
      "message": "chore: Bump coverlet.collector from 10.0.0 to 10.0.1 (#362)\n\nUpdated\n[coverlet.collector](https://github.com/coverlet-coverage/coverlet) from\n10.0.0 to 10.0.1.\n\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\n_Sourced from [coverlet.collector\u0027s\nreleases](https://github.com/coverlet-coverage/coverlet/releases)._\n\n## 10.0.1\n\n### Improvements\n\n- Coverlet with MTP 2 doesn\u0027t show test coverage statistic in console\n[#​1907](https://github.com/coverlet-coverage/coverlet/issues/1907)\n- Avoid unnecessary testhost restarts\n[#​1912](https://github.com/coverlet-coverage/coverlet/issues/1912) by\n\u003chttps://github.com/mawosoft\u003e\n\n### Fixed\n\n- Fix inconsistent paths in cobertura reports\n[#​1723](https://github.com/coverlet-coverage/coverlet/issues/1723)\n- Fix when using \"is\" with \"and\" in pattern matching, branch coverage is\nlower than normal\n[#​1313](https://github.com/coverlet-coverage/coverlet/issues/1313)\n- Fix Coverlet flagging a branch for an async functions finally block\nwhere none exists\n[#​1337](https://github.com/coverlet-coverage/coverlet/issues/1337)\n- Fix Coverlet Tracker Missing CompilerGeneratedAttribute\n[#​1828](https://github.com/coverlet-coverage/coverlet/issues/1828)\n\n### Maintenance\n\n- Add architecture docs and diagrams for all integrations\n[#​1927](https://github.com/coverlet-coverage/coverlet/pull/1927)\n- Update NuGet packages and .NET SDK versions\n[#​1933](https://github.com/coverlet-coverage/coverlet/pull/1933)\n\n[Diff between 10.0.0 and\n10.0.1](https://github.com/coverlet-coverage/coverlet/compare/v10.0.0...v10.0.1)\n\nCommits viewable in [compare\nview](https://github.com/coverlet-coverage/coverlet/compare/v10.0.0...v10.0.1).\n\u003c/details\u003e\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dcoverlet.collector\u0026package-manager\u003dnuget\u0026previous-version\u003d10.0.0\u0026new-version\u003d10.0.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "cc3d329e2180bd4e515a1ebc932cae4c5ea79461",
      "tree": "9e3667e805c4e8696c33e19cb1214964d9c32c97",
      "parents": [
        "40b9d9aeb17712bb8c9b5618bb672175aef87757"
      ],
      "author": {
        "name": "Curt Hagenlocher",
        "email": "curt@hagenlocher.org",
        "time": "Mon May 18 16:51:40 2026 -0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon May 18 16:51:40 2026 -0700"
      },
      "message": "Fix integration tests by modifying CompareVariadicArrays (#360)\n\n## What\u0027s Changed\n\nFix integration tests by modifying `CompareVariadicArrays` so that it\nonly does a direct buffer comparison when `_strictCompare` is enabled.\n\nFixes #359"
    },
    {
      "commit": "40b9d9aeb17712bb8c9b5618bb672175aef87757",
      "tree": "e2fd2636786fd4d4c813357387aad43d531890c5",
      "parents": [
        "fdc5ebf47455f517a18a0dd5b718df5b97a3a084"
      ],
      "author": {
        "name": "cjsha",
        "email": "36574350+cjsha@users.noreply.github.com",
        "time": "Mon May 18 18:23:11 2026 -0400"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue May 19 10:23:11 2026 +1200"
      },
      "message": "docs: Remove Run End Encoding from Not Implemented (#358)\n\nThis feature is implemented as of v23.0.0 release (PR #308), \nso it was removed from the  \"Not Implemented\" section of the docs."
    },
    {
      "commit": "fdc5ebf47455f517a18a0dd5b718df5b97a3a084",
      "tree": "3ee9856f181caebe216f1565c9b79508f0e40a35",
      "parents": [
        "debff867ef4ac9a62cd5173e69397343b7da4335"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue May 19 10:22:10 2026 +1200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue May 19 10:22:10 2026 +1200"
      },
      "message": "chore: Bump System.CommandLine from 2.0.7 to 2.0.8 (#356)\n\nUpdated [System.CommandLine](https://github.com/dotnet/dotnet) from\n2.0.7 to 2.0.8.\n\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\n_Sourced from [System.CommandLine\u0027s\nreleases](https://github.com/dotnet/dotnet/releases)._\n\nNo release notes found for this version range.\n\nCommits viewable in [compare\nview](https://github.com/dotnet/dotnet/commits).\n\u003c/details\u003e\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dSystem.CommandLine\u0026package-manager\u003dnuget\u0026previous-version\u003d2.0.7\u0026new-version\u003d2.0.8)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "debff867ef4ac9a62cd5173e69397343b7da4335",
      "tree": "c8b68d63e1159fe51c19ccc40f5842e169b354aa",
      "parents": [
        "3a57903db7c2bcff5329f31086b1ba04ce62202b"
      ],
      "author": {
        "name": "Curt Hagenlocher",
        "email": "curt@hagenlocher.org",
        "time": "Tue May 05 14:39:00 2026 -0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue May 05 14:39:00 2026 -0700"
      },
      "message": "Fix Powershell RC verification script to avoid stubs (#351)\n\n## What\u0027s Changed\n\nTh Powershell RC verification script has been fixed to avoid any paths\nin `WindowsApps` as these are likely to be stubs that point the\nMicrosoft Store rather than being the programs we want."
    },
    {
      "commit": "3a57903db7c2bcff5329f31086b1ba04ce62202b",
      "tree": "9ef766c2f4bf0da737d5bd8fdbc02b6981417393",
      "parents": [
        "8b002186ed8d85b25b293a85dd01dd3a40e8c706"
      ],
      "author": {
        "name": "Curt Hagenlocher",
        "email": "curt@hagenlocher.org",
        "time": "Tue May 05 04:56:14 2026 -0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue May 05 04:56:14 2026 -0700"
      },
      "message": "Port verify_rc to Powershell to make it easier to run on Windows (#350)\n\n## What\u0027s Changed\n\nPorts verify_rc.sh to Powershell to make it easier to run on Windows."
    },
    {
      "commit": "8b002186ed8d85b25b293a85dd01dd3a40e8c706",
      "tree": "726f6e97a76efb5ce9d97f0b5b17ba4c1975c90f",
      "parents": [
        "79e3844aca811abb3f9c463c0c27d407723e13be"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Sun May 03 21:31:43 2026 -0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sun May 03 21:31:43 2026 -0700"
      },
      "message": "chore: Bump Microsoft.NET.Test.Sdk from 18.4.0 to 18.5.1 (#349)\n\nUpdated [Microsoft.NET.Test.Sdk](https://github.com/microsoft/vstest)\nfrom 18.4.0 to 18.5.1.\n\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\n_Sourced from [Microsoft.NET.Test.Sdk\u0027s\nreleases](https://github.com/microsoft/vstest/releases)._\n\n## 18.5.1\n\n## What\u0027s Changed\n* Fix System.Collections.Immutable binding mismatch in Common.dll\n(rel/18.5) by @​nohwnd in https://github.com/microsoft/vstest/pull/15720\n* Port verify-binding-redirects.ps1 to rel/18.5 by @​nohwnd in\nhttps://github.com/microsoft/vstest/pull/15719\n* Bump to 18.5.1 by @​nohwnd in\nhttps://github.com/microsoft/vstest/pull/15721\n\n\n**Full Changelog**:\nhttps://github.com/microsoft/vstest/compare/v18.5.0...v18.5.1\n\n## 18.5.0\n\n⚠️ Unlisted on Nuget, because of #​15718 \n\n## What\u0027s Changed\n* Add runtime configs by @​nohwnd in\nhttps://github.com/microsoft/vstest/pull/15377\n* Add net8.0 target for TranslationLayer by @​nohwnd in\nhttps://github.com/microsoft/vstest/pull/15375\n* Determine architecture of remote process on windows by @​nohwnd in\nhttps://github.com/microsoft/vstest/pull/15396\n* Updating System.Collections.Immutable package reference to version\n9.0.0 by @​MSLukeWest in https://github.com/microsoft/vstest/pull/15392\n* Dump via netcore tool on windows by @​nohwnd in\nhttps://github.com/microsoft/vstest/pull/15397\n* Fix answer file splitting by @​nohwnd in\nhttps://github.com/microsoft/vstest/pull/15381\n* Run tests against vsix runner by @​nohwnd in\nhttps://github.com/microsoft/vstest/pull/15419\n\n**Full Changelog**:\nhttps://github.com/microsoft/vstest/compare/v18.4.0...v18.5.0\n\nCommits viewable in [compare\nview](https://github.com/microsoft/vstest/compare/v18.4.0...v18.5.1).\n\u003c/details\u003e\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dMicrosoft.NET.Test.Sdk\u0026package-manager\u003dnuget\u0026previous-version\u003d18.4.0\u0026new-version\u003d18.5.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "79e3844aca811abb3f9c463c0c27d407723e13be",
      "tree": "2f1c29b8f05a2dc9bc527971083d220cb640f3e8",
      "parents": [
        "446dca2e19ba658b3c877026f5f53b8b3706f18c"
      ],
      "author": {
        "name": "Curt Hagenlocher",
        "email": "curt@hagenlocher.org",
        "time": "Sat May 02 20:22:20 2026 -0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sat May 02 20:22:20 2026 -0700"
      },
      "message": "Bump version to 23 (#344)\n\n## What\u0027s Changed\n\nIncrease version to 23 in preparation for release."
    },
    {
      "commit": "446dca2e19ba658b3c877026f5f53b8b3706f18c",
      "tree": "ad04932343cbd82bf33d6de96d2e2b559af04388",
      "parents": [
        "3ea9aaae80c2a8a406d0726a01950e4f31032b98"
      ],
      "author": {
        "name": "Brandon Parks",
        "email": "bap@open-ephys.org",
        "time": "Sat May 02 13:54:55 2026 -0400"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sat May 02 10:54:55 2026 -0700"
      },
      "message": "chore: Bump Zstd.Sharp from 0.8.5 to 0.8.8 (#343)\n\n## What\u0027s Changed\n\nBump the `Zstd.Sharp` package from 0.8.5 to 0.8.8. The main reason for\nthis bump is to bring that project\u0027s dependency `System.Memory` up to\nv4.6.0, and is implemented in [this\nPR](https://github.com/oleg-st/ZstdSharp/pull/69).\n\nI implemented this change in `Zstd.Sharp` to fix a version mismatch\nissue; I am working on a plugin for use in\n[`Bonsai-Rx`](https://github.com/bonsai-rx/bonsai), which does not allow\nme to have an assembly binding redirect, leading to a run-time exception\ndue to multiple `System.Memory` versions present.\n\nAll tests passed locally, and all builds succeeded."
    },
    {
      "commit": "3ea9aaae80c2a8a406d0726a01950e4f31032b98",
      "tree": "5e5d3a499500aaf49e1ea428d9c12bf56f6161c8",
      "parents": [
        "8e35d8fa9a903e4a0938c7b5a711c761c6605d46"
      ],
      "author": {
        "name": "Curt Hagenlocher",
        "email": "curt@hagenlocher.org",
        "time": "Wed Apr 29 17:11:42 2026 -0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed Apr 29 17:11:42 2026 -0700"
      },
      "message": "Unambiguously equate decimal16 with SqlDecimal in Variant API (#342)\n\n## What\u0027s Changed\n\nUnambiguously equate `decimal16` with `SqlDecimal` in Variant API\n\nCloses #333."
    },
    {
      "commit": "8e35d8fa9a903e4a0938c7b5a711c761c6605d46",
      "tree": "41fdd93a17665f22ac35bdb95d8888480fa6bb8d",
      "parents": [
        "343434468c749c47ed0f3d20823bb29717a3c33c"
      ],
      "author": {
        "name": "Curt Hagenlocher",
        "email": "curt@hagenlocher.org",
        "time": "Tue Apr 28 21:18:51 2026 -0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Apr 28 21:18:51 2026 -0700"
      },
      "message": "Add Parquet variant shredding support (#332)\n\n## What\u0027s Changed\n\nImplements the Parquet variant shredding spec end-to-end in a new\n`Apache.Arrow.Operations.Shredding` namespace, alongside minor changes\nto the base scalar and array types.\n\nOperations.Shredding reader side:\n- `ShreddedVariant` / `ShreddedObject` / `ShreddedArray` ref-struct trio\nexposing typed columns and residual bytes side-by-side.\n- `VariantArrayShreddingExtensions` adds `GetShreddedVariant(i)` and\n`GetLogicalVariantValue(i)` on `VariantArray`.\n- `ShredSchema.FromArrowType` derives a shredding schema from an Arrow\ntyped_value type, rejecting unsupported types (uint32,\nfixed-size-binary(N≠16)).\n\nOperations.Shredding producer side:\n- `VariantShredder` decomposes a column of `VariantValues` against a\n`ShredSchema` into shared metadata + per-row `ShredResults`.\n- `ShreddedVariantArrayBuilder` assembles those into a shredded\n`VariantArray` with a `typed_value` Arrow tree matching the schema.\n\nApache.Arrow changes:\n- `VariantExtensionDefinition` accepts `struct\u003cmetadata, value?,\ntyped_value?\u003e` layouts in addition to the plain unshredded form.\n- `VariantType` gains `IsShredded` / `HasValueColumn` /\n`HasTypedValueColumn` / `TypedValueField` properties.\n- `VariantArray.GetVariantValue` and `GetVariantReader` throw on\nshredded columns with a pointer to the `Operations.Shredding`\nextensions.\n- The public `VariantArray(IArrowArray)` constructor now infers the\n`VariantType` (shredded or not) from the storage shape.\n- Operations gains a project reference to Apache.Arrow; Apache.Arrow\ndoes not reference Operations.\n\n  Apache.Arrow.Scalars changes:\n- `VariantValueWriter.CopyValue(VariantReader source)` transcodes a\nreader into this writer, re-resolving field IDs against the writer\u0027s\nmetadata dictionary. Supports cross-dictionary transcoding and\nmulti-source merge-into-one-dictionary workflows.\n- `VariantMetadataBuilder.CollectFieldNames(VariantReader source)` is\nthe two-pass companion that accumulates source field names into the\ntarget metadata builder.\n\nValidation:\n- Conformance tests run against the Iceberg shredded-variant corpus in\n`apache/parquet-testing` (`test/parquet-testing/shredded_variant/`).\n`test/shredded_variant_ipc/regen.py` converts each `case-NNN.parquet` to\nan Arrow IPC file via `pyarrow`; 137 resulting .arrow files are checked\nin so CI needs no Python. All 128 valid conformance cases pass; 6\nschema-invalid and data-invalid cases are rejected with clear errors; 3\n\"spec-invalid but permissive\" INVALID cases are documented as\nread-without-throw.\n- Additional round-trip, reader-style, and builder tests were\nimplemented"
    },
    {
      "commit": "343434468c749c47ed0f3d20823bb29717a3c33c",
      "tree": "eed4aef80f6dcf538420d8797c1cad53144beb99",
      "parents": [
        "89a6c615cfe78308d987ac6fb1091a523f3fbb2a"
      ],
      "author": {
        "name": "InCerryGit",
        "email": "36690780+InCerryGit@users.noreply.github.com",
        "time": "Wed Apr 29 00:44:58 2026 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Apr 28 09:44:58 2026 -0700"
      },
      "message": "perf: speed up MemoryStream IPC stream reads (#340)\n\n## Summary\n\nThis improves `ArrowStreamReader` when reading from `MemoryStream`\ninstances that expose their underlying buffer. The reader now uses the\nexposed buffer for IPC message/schema metadata reads while preserving\nthe existing reader-owned body-buffer boundary.\n\nThe change is intentionally scoped to MemoryStream-backed IPC stream\nreads:\n\n- public/exposed `MemoryStream` can use the fast path\n- non-public `MemoryStream` and partial-read streams continue through\nthe fallback stream-read path\n- record batch body data is still copied into allocator-owned memory\nbefore array construction\n- `ArrowMemoryReader` exact-length continuation-token handling is\ncorrected for complete in-memory buffers\n\n## Benchmark\n\nBenchmarkDotNet ShortRun, `ArrowReaderBenchmark`:\n\n| Scenario | Before | After |\n|---|---:|---:|\n| `ArrowReaderWithMemoryStream_ManagedMemory`, 100000 rows / 1 column |\n21629.3 us | 7707.6 us |\n| `ArrowReaderWithMemoryStream_ManagedMemory`, 100000 rows / 5 columns |\n91112.3 us | 40137.5 us |\n\n## Validation\n\n- `dotnet test test/Apache.Arrow.Tests/Apache.Arrow.Tests.csproj -c\nRelease --filter\n\"FullyQualifiedName~Apache.Arrow.Tests.ArrowStreamReaderTests\"`\n- `dotnet test\ntest/Apache.Arrow.Compression.Tests/Apache.Arrow.Compression.Tests.csproj\n-c Release --filter\n\"FullyQualifiedName~Apache.Arrow.Compression.Tests.ArrowStreamReaderTests\"`\n- `dotnet build Apache.Arrow.sln -c Release`"
    },
    {
      "commit": "89a6c615cfe78308d987ac6fb1091a523f3fbb2a",
      "tree": "c6c69c69386ecbee263004b3abf29381f2459164",
      "parents": [
        "ea58c946d7400349b6d6d14d4f124b42433fefc6"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Sun Apr 26 21:02:50 2026 -0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sun Apr 26 21:02:50 2026 -0700"
      },
      "message": "chore: Bump System.CommandLine from 2.0.6 to 2.0.7 (#338)\n\nUpdated [System.CommandLine](https://github.com/dotnet/dotnet) from\n2.0.6 to 2.0.7.\n\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\n_Sourced from [System.CommandLine\u0027s\nreleases](https://github.com/dotnet/dotnet/releases)._\n\nNo release notes found for this version range.\n\nCommits viewable in [compare\nview](https://github.com/dotnet/dotnet/commits).\n\u003c/details\u003e\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dSystem.CommandLine\u0026package-manager\u003dnuget\u0026previous-version\u003d2.0.6\u0026new-version\u003d2.0.7)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "ea58c946d7400349b6d6d14d4f124b42433fefc6",
      "tree": "765f548203a7106036891b6b7c7a652176d21770",
      "parents": [
        "c0e20b608ccd2ed92d0867d6205ec8bf1c708ac3"
      ],
      "author": {
        "name": "InCerryGit",
        "email": "36690780+InCerryGit@users.noreply.github.com",
        "time": "Mon Apr 27 12:01:09 2026 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sun Apr 26 21:01:09 2026 -0700"
      },
      "message": "perf: improve StringArray GetString decoding (#334)\n\n## Summary\n\n`StringArray.GetString` previously routed through `GetBytes`, which\nrepeated bounds/null/offset work before decoding the returned byte span.\nThis PR decodes directly from the array\u0027s offsets and value buffer while\npreserving the materialized-string fast path.\n\n## Benchmark\n\nBenchmarkDotNet, `StringArrayGetStringBenchmark`, Count\u003d1024:\n\n| Method | Before | After |\n|---|---:|---:|\n| `GetString` | 23.23 us / 48.08 KB | 18.04 us / 48.08 KB |\n| `GetStringFromSlice` | 23.90 us / 48.00 KB | 18.05 us / 48.00 KB |\n\n## Validation\n\n- `dotnet format Apache.Arrow.sln --include\nsrc/Apache.Arrow/Arrays/StringArray.cs\ntest/Apache.Arrow.Tests/StringArrayTests.cs\ntest/Apache.Arrow.Benchmarks/StringArrayGetStringBenchmark.cs\n--no-restore`\n- `dotnet test test/Apache.Arrow.Tests/Apache.Arrow.Tests.csproj -c\nRelease --filter\n\"FullyQualifiedName~Apache.Arrow.Tests.StringArrayTests\"`\n- `dotnet build Apache.Arrow.sln -c Release`"
    },
    {
      "commit": "c0e20b608ccd2ed92d0867d6205ec8bf1c708ac3",
      "tree": "7c34005f0fb4aa2c9382be19f7cff230b4ead4c5",
      "parents": [
        "4f60cc69fc7cc2d178e5e666d9799ac178417a28"
      ],
      "author": {
        "name": "InCerryGit",
        "email": "36690780+InCerryGit@users.noreply.github.com",
        "time": "Sun Apr 26 23:40:20 2026 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sun Apr 26 08:40:20 2026 -0700"
      },
      "message": "perf: improve StringArray builder append paths (#331)\n\n## Summary\n\n- Avoid temporary byte-array allocations for small\n`StringArray.Builder.Append(string)` values by encoding into stack\nmemory before appending.\n- Pre-reserve offsets, validity, and value-buffer capacity for\nknown-count `AppendRange` inputs.\n- Add focused correctness coverage for nulls, empty strings, custom\nencodings, large-string fallback, collection inputs, and non-collection\nenumerables.\n\n`AppendRange(ICollection\u003cstring\u003e)` now performs a counting prepass to\nreserve value-buffer capacity before appending, so collection inputs are\nenumerated twice by design.\n\n## Benchmark\n\nBenchmarkDotNet ShortRun, `StringBuilderAppendBenchmark`, 10,000 ASCII\nstrings of length 32:\n\n| Method | Before | After |\n| --- | ---: | ---: |\n| `AppendSmallStrings` | 432.0 us / 1.66 MB | 341.0 us / 1157.5 KB |\n| `AppendRangeSmallStrings` | 426.2 us / 1.66 MB | 311.8 us / 353.68 KB\n|\n\n## Validation\n\n- `dotnet test test/Apache.Arrow.Tests/Apache.Arrow.Tests.csproj -c\nRelease --filter\n\"FullyQualifiedName~Apache.Arrow.Tests.StringArrayTests\"`\n- `rtk dotnet build \"Apache.Arrow.sln\" -c Release`\n- LSP diagnostics clean on changed files\n- Code review completed before commit; no blockers found"
    },
    {
      "commit": "4f60cc69fc7cc2d178e5e666d9799ac178417a28",
      "tree": "c37faa173acd2e0b88f6e86dcdf8a17f05f6a2de",
      "parents": [
        "67b6db956b9a823824f6d40d55fcc3434c9a66b8"
      ],
      "author": {
        "name": "Curt Hagenlocher",
        "email": "curt@hagenlocher.org",
        "time": "Sun Apr 26 07:45:02 2026 -0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sun Apr 26 07:45:02 2026 -0700"
      },
      "message": "Refactors VariantValueWriter (#329)\n\n## What\u0027s Changed\n\nRefactors `VariantValueWriter` to use a new `Buffer\u003c\u003e` type to manage\nthe output buffers instead of using `MemoryStream`."
    },
    {
      "commit": "67b6db956b9a823824f6d40d55fcc3434c9a66b8",
      "tree": "ae4f9edae93076d4bd025cbab3753a8aceda8433",
      "parents": [
        "7949fb671ccc0610a4589f58c2c5ff5e801751c0"
      ],
      "author": {
        "name": "InCerryGit",
        "email": "36690780+InCerryGit@users.noreply.github.com",
        "time": "Sun Apr 26 04:16:51 2026 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sat Apr 25 13:16:51 2026 -0700"
      },
      "message": "perf: reduce ArrowBuffer builder reallocation work (#330)\n\n## Summary\n\n- Pre-reserve `ArrowBuffer.Builder\u003cT\u003e` capacity when `AppendRange`\nreceives a known-count collection.\n- Copy only the populated `Length * sizeof(T)` portion when reallocating\nbuilder storage.\n- Add focused coverage for enumerable, read-only collection, and\nreallocation preservation paths.\n\nThe reallocation behavior preserves appended/current-length contents.\nCapacity beyond `Length` remains undefined and is not copied across\nreallocations.\n\n## Validation\n\n- `dotnet test test/Apache.Arrow.Tests/Apache.Arrow.Tests.csproj -c\nRelease --filter\n\"FullyQualifiedName~Apache.Arrow.Tests.ArrowBufferBuilderTests\"`\n- `rtk dotnet build \"Apache.Arrow.sln\" -c Release`\n- LSP diagnostics clean on changed files\n- Code review completed before commit; no blockers found"
    },
    {
      "commit": "7949fb671ccc0610a4589f58c2c5ff5e801751c0",
      "tree": "97fe80b1d408a62afbeec66315c743ffc2acc8da",
      "parents": [
        "2b2afa201cf406167044a505b30dd096ebd37193"
      ],
      "author": {
        "name": "InCerryGit",
        "email": "36690780+InCerryGit@users.noreply.github.com",
        "time": "Sat Apr 25 00:41:53 2026 +0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Apr 24 09:41:53 2026 -0700"
      },
      "message": "fix: handle file reader cancellation and empty nested concat (#327)\n\n## Summary\n\nThis PR fixes two correctness edge cases found while reviewing the IPC\nreader and array concatenation paths.\n\n### File reader cancellation\n\n`ArrowFileReaderImplementation.ReadRecordBatchAsync(...)` and\n`ReadNextRecordBatchAsync(...)` accepted a caller cancellation token,\nbut the\nschema/footer loading step still called `ReadSchemaAsync()` without\npassing that\ntoken.\n\nThat meant a canceled async file read could still continue through\nschema/footer\nI/O before cancellation was observed later in the record batch path.\nThis PR\npasses the caller token into schema loading so cancellation is honored\nbefore\ndictionary and record batch reads begin.\n\n### Empty nested array concatenation\n\n`ArrayDataConcatenator` could drop the required child array structure\nwhen\nconcatenating nested list arrays whose parent arrays were all empty.\nNested Arrow\narrays still need a valid zero-length child `ArrayData`; otherwise\ndownstream\narray construction can fail or produce structurally invalid nested\narrays.\n\nThis PR preserves a zero-length child for all-empty nested/list inputs.\n\n### Null-only ListView concatenation\n\nFor `ListView` and `LargeListView`, null rows can have `size \u003d\u003d 0`, and\ntheir\noffset values should not contribute to the child slice range. The\nprevious logic\nused every offset when computing the child bounds, even for zero-size\nentries.\n\nThis PR computes list-view child bounds only from entries with `size \u003e\n0`, so\nnull-only inputs keep an empty child slice instead of deriving a range\nfrom null\nrows.\n\n## Validation\n\n- `dotnet test test/Apache.Arrow.Tests/Apache.Arrow.Tests.csproj -c\nRelease --filter\n\"FullyQualifiedName~ArrowFileReaderTests.ReadRecordBatchAsync_HonorsPreCanceledTokenDuringSchemaRead|FullyQualifiedName~ArrowFileReaderTests.ReadNextRecordBatchAsync_HonorsPreCanceledTokenDuringSchemaRead|FullyQualifiedName~ArrowArrayConcatenatorTests.TestConcatenateAllEmpty|FullyQualifiedName~ArrowArrayConcatenatorTests.TestConcatenateNullOnly\"`\n- `dotnet build Apache.Arrow.sln -c Release`"
    },
    {
      "commit": "2b2afa201cf406167044a505b30dd096ebd37193",
      "tree": "5db015d9187fe5cca7ca145762202e7559e54538",
      "parents": [
        "fbaa39dce43ada5be0d2c1e9d871f3a014fb799c"
      ],
      "author": {
        "name": "Curt Hagenlocher",
        "email": "curt@hagenlocher.org",
        "time": "Thu Apr 23 21:23:01 2026 -0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu Apr 23 21:23:01 2026 -0700"
      },
      "message": "chore(src): add checked conversions where needed (#318)\n\n## What\u0027s Changed\n\nAdds checks to some int64-\u003eint32 conversions when reading data through\nIPC."
    },
    {
      "commit": "fbaa39dce43ada5be0d2c1e9d871f3a014fb799c",
      "tree": "3a4107f19ba82a9bcbdf5361b5ed99e99391697a",
      "parents": [
        "90aed52cc670c581f934184d1fc0f6f42cd1ba5b"
      ],
      "author": {
        "name": "Curt Hagenlocher",
        "email": "curt@hagenlocher.org",
        "time": "Thu Apr 23 21:22:37 2026 -0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu Apr 23 21:22:37 2026 -0700"
      },
      "message": "Cleaned up some odds and ends (#326)\n\n## What\u0027s Changed\n\nCleaned up some odds and ends:\n- Marked projects as AOT-compatible\n- Moved some code from `Json` to `VariantJson` for better clarity\n- Enabled compression tests on Desktop Framework"
    },
    {
      "commit": "90aed52cc670c581f934184d1fc0f6f42cd1ba5b",
      "tree": "756bed13abdabc49e22625d1e872877ccc7c7e08",
      "parents": [
        "4f5b95f35243d233b8c7f5ea5ff997891f199158"
      ],
      "author": {
        "name": "Curt Hagenlocher",
        "email": "curt@hagenlocher.org",
        "time": "Thu Apr 23 03:38:16 2026 -0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu Apr 23 03:38:16 2026 -0700"
      },
      "message": "Add VariantArray extension type and introduce IBinaryArray/IIndexes interfaces (#325)\n\n## What\u0027s Changed\n\n- Adds a `VariantArray` extension type.\n- Adds a `Builder` class for `VariantArray` that encodes `VariantValue`\ninstances into the variant binary format and constructs the backing\n`StructArray`.\n- Introduces internal interfaces `IBinaryArray` and `IIndexes` to\ndecouple `VariantArray` and other uses from concrete array types.\n`IBinaryArray` unifies `BinaryArray`, `LargeBinaryArray`, and\n`BinaryViewArray` behind a common `GetBytes` API. `IIndexes` abstracts\nindex resolution for `DictionaryArray` and `RunEndEncodedArray`,\nenabling efficient sequential enumeration for REE arrays. Integer array\ntypes implement `IIndexes` with `GetPhysicalIndex` and\n`EnumeratePhysicalIndices` methods.\n- Removes support for .NET 6.0, which has been deprecated and replaces\nit with .NET 8.0 where appropriate.\n- Adds support for .NET 4.6.2 to the `Scalars` assembly and tests\n\n---------\n\nCo-authored-by: Copilot \u003c223556219+Copilot@users.noreply.github.com\u003e"
    },
    {
      "commit": "4f5b95f35243d233b8c7f5ea5ff997891f199158",
      "tree": "2f4786af9b5c9d6f5e6735850847d1666f3ca3fc",
      "parents": [
        "61c3ff1cf3539d87563b3189c2d866f4e2bd8016"
      ],
      "author": {
        "name": "Curt Hagenlocher",
        "email": "curt@hagenlocher.org",
        "time": "Wed Apr 22 04:48:57 2026 -0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed Apr 22 04:48:57 2026 -0700"
      },
      "message": "Add transparent encoding readers and TimestampWithOffset extension type (#324)\n\n## What\u0027s Changed\n\n- Adds an extension method `AsDecodedReadOnlyList\u003cT\u003e()` on `IArrowArray`\nthat returns an `IReadOnlyList\u003cT\u003e` view over plain, dictionary-encoded,\nand run-end encoded arrays with zero overhead for plain arrays.\n- Adds `EnumeratePhysicalIndices()` to `RunEndEncodedArray` for O(n+m)\nsequential enumeration instead of O(n·log m) from repeated binary\nsearches.\n- Implement the `arrow.timestamp_with_offset` canonical extension type\nwith `TimestampWithOffsetArray`, supporting\n`IReadOnlyList\u003cDateTimeOffset?\u003e` and a builder. The offset_minutes field\naccepts dictionary and REE encodings via `AsDecodedReadOnlyList`.\n\n---------\n\nCo-authored-by: Copilot \u003c223556219+Copilot@users.noreply.github.com\u003e"
    },
    {
      "commit": "61c3ff1cf3539d87563b3189c2d866f4e2bd8016",
      "tree": "fdc67e5a49560c86dce7a27cd2265a1c40519b6a",
      "parents": [
        "a25e49b411c614ec1203e8888a3df4e66a4d7c31"
      ],
      "author": {
        "name": "Curt Hagenlocher",
        "email": "curt@hagenlocher.org",
        "time": "Tue Apr 21 18:27:26 2026 -0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Apr 21 18:27:26 2026 -0700"
      },
      "message": "Rename `Variant` assemblies to `Scalars` (#323)\n\n## What\u0027s Changed\n\n- Renames `Apache.Arrow.Variant` project and assembly to\n`Apache.Arrow.Scalars`\n- Renames `Apache.Arrow.Variant.Tests` project and assembly to\n`Apache.Arrow.Scalars.Tests`\n- Moves Variant-related types into the `Apache.Arrow.Scalars.Variant`\nnamespace\n\n---------\n\nCo-authored-by: Copilot \u003c223556219+Copilot@users.noreply.github.com\u003e"
    },
    {
      "commit": "a25e49b411c614ec1203e8888a3df4e66a4d7c31",
      "tree": "e31d4a0285439bee126f78c28192373edb40aa58",
      "parents": [
        "65a5fbfc4f6ee4497751f44f3af225b47531c53f"
      ],
      "author": {
        "name": "Curt Hagenlocher",
        "email": "curt@hagenlocher.org",
        "time": "Mon Apr 20 20:22:41 2026 -0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Apr 20 20:22:41 2026 -0700"
      },
      "message": "Refactors Apache.Arrow.Variant into two assemblies (#322)\n\n## What\u0027s Changed\n\nRefactors `Apache.Arrow.Variant` into two assemblies -- one for the base\ntype and one for JSON conversion. The dependency on `System.Text.Json`\nmoves to the second assembly."
    },
    {
      "commit": "65a5fbfc4f6ee4497751f44f3af225b47531c53f",
      "tree": "b5fd4f4f7d13574d57c6183b0386f76cb91391f6",
      "parents": [
        "3d54e843bd0b99c5d43c857c92780bc27e760145"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Apr 20 12:26:04 2026 -0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Apr 20 12:26:04 2026 -0700"
      },
      "message": "chore: Bump actions/cache from 5.0.4 to 5.0.5 (#314)\n\nBumps [actions/cache](https://github.com/actions/cache) from 5.0.4 to\n5.0.5.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/actions/cache/releases\"\u003eactions/cache\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.0.5\u003c/h2\u003e\n\u003ch2\u003eWhat\u0027s Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate ts-http-runtime dependency by \u003ca\nhref\u003d\"https://github.com/yacaovsnc\"\u003e\u003ccode\u003e@​yacaovsnc\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/cache/pull/1747\"\u003eactions/cache#1747\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca\nhref\u003d\"https://github.com/actions/cache/compare/v5...v5.0.5\"\u003ehttps://github.com/actions/cache/compare/v5...v5.0.5\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/actions/cache/blob/main/RELEASES.md\"\u003eactions/cache\u0027s\nchangelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eReleases\u003c/h1\u003e\n\u003ch2\u003eHow to prepare a release\u003c/h2\u003e\n\u003cblockquote\u003e\n\u003cp\u003e[!NOTE]\u003cbr /\u003e\nRelevant for maintainers with write access only.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003col\u003e\n\u003cli\u003eSwitch to a new branch from \u003ccode\u003emain\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eRun \u003ccode\u003enpm test\u003c/code\u003e to ensure all tests are passing.\u003c/li\u003e\n\u003cli\u003eUpdate the version in \u003ca\nhref\u003d\"https://github.com/actions/cache/blob/main/package.json\"\u003e\u003ccode\u003ehttps://github.com/actions/cache/blob/main/package.json\u003c/code\u003e\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eRun \u003ccode\u003enpm run build\u003c/code\u003e to update the compiled files.\u003c/li\u003e\n\u003cli\u003eUpdate this \u003ca\nhref\u003d\"https://github.com/actions/cache/blob/main/RELEASES.md\"\u003e\u003ccode\u003ehttps://github.com/actions/cache/blob/main/RELEASES.md\u003c/code\u003e\u003c/a\u003e\nwith the new version and changes in the \u003ccode\u003e## Changelog\u003c/code\u003e\nsection.\u003c/li\u003e\n\u003cli\u003eRun \u003ccode\u003elicensed cache\u003c/code\u003e to update the license report.\u003c/li\u003e\n\u003cli\u003eRun \u003ccode\u003elicensed status\u003c/code\u003e and resolve any warnings by\nupdating the \u003ca\nhref\u003d\"https://github.com/actions/cache/blob/main/.licensed.yml\"\u003e\u003ccode\u003ehttps://github.com/actions/cache/blob/main/.licensed.yml\u003c/code\u003e\u003c/a\u003e\nfile with the exceptions.\u003c/li\u003e\n\u003cli\u003eCommit your changes and push your branch upstream.\u003c/li\u003e\n\u003cli\u003eOpen a pull request against \u003ccode\u003emain\u003c/code\u003e and get it reviewed\nand merged.\u003c/li\u003e\n\u003cli\u003eDraft a new release \u003ca\nhref\u003d\"https://github.com/actions/cache/releases\"\u003ehttps://github.com/actions/cache/releases\u003c/a\u003e\nuse the same version number used in \u003ccode\u003epackage.json\u003c/code\u003e\n\u003col\u003e\n\u003cli\u003eCreate a new tag with the version number.\u003c/li\u003e\n\u003cli\u003eAuto generate release notes and update them to match the changes you\nmade in \u003ccode\u003eRELEASES.md\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eToggle the set as the latest release option.\u003c/li\u003e\n\u003cli\u003ePublish the release.\u003c/li\u003e\n\u003c/ol\u003e\n\u003c/li\u003e\n\u003cli\u003eNavigate to \u003ca\nhref\u003d\"https://github.com/actions/cache/actions/workflows/release-new-action-version.yml\"\u003ehttps://github.com/actions/cache/actions/workflows/release-new-action-version.yml\u003c/a\u003e\n\u003col\u003e\n\u003cli\u003eThere should be a workflow run queued with the same version\nnumber.\u003c/li\u003e\n\u003cli\u003eApprove the run to publish the new version and update the major tags\nfor this action.\u003c/li\u003e\n\u003c/ol\u003e\n\u003c/li\u003e\n\u003c/ol\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003ch3\u003e5.0.4\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBump \u003ccode\u003eminimatch\u003c/code\u003e to v3.1.5 (fixes ReDoS via globstar\npatterns)\u003c/li\u003e\n\u003cli\u003eBump \u003ccode\u003eundici\u003c/code\u003e to v6.24.1 (WebSocket decompression bomb\nprotection, header validation fixes)\u003c/li\u003e\n\u003cli\u003eBump \u003ccode\u003efast-xml-parser\u003c/code\u003e to v5.5.6\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e5.0.3\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBump \u003ccode\u003e@actions/cache\u003c/code\u003e to v5.0.5 (Resolves: \u003ca\nhref\u003d\"https://github.com/actions/cache/security/dependabot/33\"\u003ehttps://github.com/actions/cache/security/dependabot/33\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBump \u003ccode\u003e@actions/core\u003c/code\u003e to v2.0.3\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e5.0.2\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBump \u003ccode\u003e@actions/cache\u003c/code\u003e to v5.0.3 \u003ca\nhref\u003d\"https://redirect.github.com/actions/cache/pull/1692\"\u003e#1692\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e5.0.1\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate \u003ccode\u003e@azure/storage-blob\u003c/code\u003e to \u003ccode\u003e^12.29.1\u003c/code\u003e via\n\u003ccode\u003e@actions/cache@5.0.1\u003c/code\u003e \u003ca\nhref\u003d\"https://redirect.github.com/actions/cache/pull/1685\"\u003e#1685\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e5.0.0\u003c/h3\u003e\n\u003cblockquote\u003e\n\u003cp\u003e[!IMPORTANT]\n\u003ccode\u003eactions/cache@v5\u003c/code\u003e runs on the Node.js 24 runtime and\nrequires a minimum Actions Runner version of \u003ccode\u003e2.327.1\u003c/code\u003e.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/cache/commit/27d5ce7f107fe9357f9df03efb73ab90386fccae\"\u003e\u003ccode\u003e27d5ce7\u003c/code\u003e\u003c/a\u003e\nMerge pull request \u003ca\nhref\u003d\"https://redirect.github.com/actions/cache/issues/1747\"\u003e#1747\u003c/a\u003e\nfrom actions/yacaovsnc/update-dependency\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/cache/commit/f280785d7b6e1884c7d12b9136eb0f4a1574fcfd\"\u003e\u003ccode\u003ef280785\u003c/code\u003e\u003c/a\u003e\nlicensed changes\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/cache/commit/619aeb1606e195be0b36fd0ff68dcf1aff6b65a7\"\u003e\u003ccode\u003e619aeb1\u003c/code\u003e\u003c/a\u003e\nnpm run build generated dist files\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/cache/commit/bcf16c2893940a4899761e55c7ac3c1cf88a04f6\"\u003e\u003ccode\u003ebcf16c2\u003c/code\u003e\u003c/a\u003e\nUpdate ts-http-runtime to 0.3.5\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca\nhref\u003d\"https://github.com/actions/cache/compare/668228422ae6a00e4ad889ee87cd7109ec5666a7...27d5ce7f107fe9357f9df03efb73ab90386fccae\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dactions/cache\u0026package-manager\u003dgithub_actions\u0026previous-version\u003d5.0.4\u0026new-version\u003d5.0.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "3d54e843bd0b99c5d43c857c92780bc27e760145",
      "tree": "21920b4aab89dd3f37ee548fb27c56b333cd7833",
      "parents": [
        "f596fe22c669a9053b59b1bda69df253f99a8af7"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Apr 20 12:25:41 2026 -0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Apr 20 12:25:41 2026 -0700"
      },
      "message": "chore: Bump coverlet.collector from 8.0.1 to 10.0.0 (#315)\n\nUpdated\n[coverlet.collector](https://github.com/coverlet-coverage/coverlet) from\n8.0.1 to 10.0.0.\n\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\n_Sourced from [coverlet.collector\u0027s\nreleases](https://github.com/coverlet-coverage/coverlet/releases)._\n\n## 10.0.0\n\n## Improvements\n\n- Unique Report Filenames (coverlet.MTP and AzDO)\n[#​1866](https://github.com/coverlet-coverage/coverlet/issues/1866)\n- Add `--coverlet-file-prefix` option for unique report files\n[#​1869](https://github.com/coverlet-coverage/coverlet/pull/1869)\n- Introduce .NET 10 support\n[#​1823](https://github.com/coverlet-coverage/coverlet/pull/1823)\n\n## Fixed\n\n- Fix [BUG] Wrong branch rate on IAsyncEnumerable for generic type\n[#​1836](https://github.com/coverlet-coverage/coverlet/issues/1836)\n- Fix [BUG] Missing Coverage after moving to MTP\n[#​1843](https://github.com/coverlet-coverage/coverlet/issues/1843)\n- Fix [BUG] No coverage reported when targeting .NET Framework with\n8.0.1\n[#​1842](https://github.com/coverlet-coverage/coverlet/issues/1842)\n- Fix [BUG] Behavior changes between MTP and Legacy (msbuild)\n[#​1878](https://github.com/coverlet-coverage/coverlet/issues/1878)\n- Fix [BUG] Coverlet.MTP - Unable to load coverlet.mtp.appsettings.json\n[#​1880](https://github.com/coverlet-coverage/coverlet/issues/1880)\n- Fix [BUG] Coverlet.Collector produces empty report when\nMediator.SourceGenerator is referenced\n[#​1718](https://github.com/coverlet-coverage/coverlet/issues/1718) by\n\u003chttps://github.com/yusyd\u003e\n- Fix [BUG] Crash during instrumentation (Methods using\nLibraryImport/DllImport have no body)\n[#​1762](https://github.com/coverlet-coverage/coverlet/issues/1762)\n\n## Maintenance\n\n- Add comprehensive async method tests and documentation for issue\n[#​1864](https://github.com/coverlet-coverage/coverlet/pull/1864)\n- Replace Tmds.ExecFunction Package in coverlet.core.coverage.tests\n[#​1833](https://github.com/coverlet-coverage/coverlet/issues/1833)\n- Add net9.0 and net10.0 targets\n[#​1822](https://github.com/coverlet-coverage/coverlet/issues/1822)\n\n[Diff between 8.0.1 and\n10.0.0](https://github.com/coverlet-coverage/coverlet/compare/v8.0.1...v10.0.0)\n\nCommits viewable in [compare\nview](https://github.com/coverlet-coverage/coverlet/compare/v8.0.1...v10.0.0).\n\u003c/details\u003e\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dcoverlet.collector\u0026package-manager\u003dnuget\u0026previous-version\u003d8.0.1\u0026new-version\u003d10.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "f596fe22c669a9053b59b1bda69df253f99a8af7",
      "tree": "04ce0b8abb8b93dd402c9fa2bea04592cf752c49",
      "parents": [
        "3e235ea8720b7f41c1bacd08fa9b940f04187d5a"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Apr 20 12:21:39 2026 -0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Apr 20 12:21:39 2026 -0700"
      },
      "message": "chore: Bump System.CommandLine from 2.0.5 to 2.0.6 (#319)\n\nUpdated [System.CommandLine](https://github.com/dotnet/dotnet) from\n2.0.5 to 2.0.6.\n\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\n_Sourced from [System.CommandLine\u0027s\nreleases](https://github.com/dotnet/dotnet/releases)._\n\nNo release notes found for this version range.\n\nCommits viewable in [compare\nview](https://github.com/dotnet/dotnet/commits).\n\u003c/details\u003e\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dSystem.CommandLine\u0026package-manager\u003dnuget\u0026previous-version\u003d2.0.5\u0026new-version\u003d2.0.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "3e235ea8720b7f41c1bacd08fa9b940f04187d5a",
      "tree": "bf8e7fc5a2c4ada8dbdc815dce608d981ceb39cf",
      "parents": [
        "f9faac18b4c04b186f8e0caa9472c69b07306ba0"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Apr 13 06:48:30 2026 -0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Apr 13 06:48:30 2026 -0700"
      },
      "message": "chore: Bump Microsoft.NET.Test.Sdk from 18.3.0 to 18.4.0 (#312)\n\nUpdated [Microsoft.NET.Test.Sdk](https://github.com/microsoft/vstest)\nfrom 18.3.0 to 18.4.0.\n\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\n_Sourced from [Microsoft.NET.Test.Sdk\u0027s\nreleases](https://github.com/microsoft/vstest/releases)._\n\n## 18.4.0\n\n## What\u0027s Changed\n* Add LoongArch64 support by @​stdmnpkg in\nhttps://github.com/microsoft/vstest/pull/15359\n\n* Refactor Condition evaluation by @​Youssef1313 in\nhttps://github.com/microsoft/vstest/pull/15357\n* Adding info on extensions points part 1 by @​nohwnd in\nhttps://github.com/microsoft/vstest/pull/15360\n* Add option to ask for uploading code QL before the standard window\nends by @​nohwnd in https://github.com/microsoft/vstest/pull/15373\n* Update runtime versions by @​nohwnd in\nhttps://github.com/microsoft/vstest/pull/15372\n* Fix .NET 10 regression for traits by @​Youssef1313 in\nhttps://github.com/microsoft/vstest/pull/15370\n* Update target frameworks to net10.0 and net11.0 by\n@​dotnet-maestro[bot] in https://github.com/microsoft/vstest/pull/15349\n* Fix names in pipeline matrix so we don\u0027t have to align them by\n@​nohwnd in https://github.com/microsoft/vstest/pull/15365\n* Update SECURITY.md by @​Youssef1313 in\nhttps://github.com/microsoft/vstest/pull/15342\n\n## New Contributors\n* @​stdmnpkg made their first contribution in\nhttps://github.com/microsoft/vstest/pull/15359\n\n**Full Changelog**:\nhttps://github.com/microsoft/vstest/compare/v18.3.0...v18.4.0\n\nCommits viewable in [compare\nview](https://github.com/microsoft/vstest/compare/v18.3.0...v18.4.0).\n\u003c/details\u003e\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dMicrosoft.NET.Test.Sdk\u0026package-manager\u003dnuget\u0026previous-version\u003d18.3.0\u0026new-version\u003d18.4.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "f9faac18b4c04b186f8e0caa9472c69b07306ba0",
      "tree": "10c3412ece4e1342c5c4b710e045fb8688f22c75",
      "parents": [
        "dc97213d81d7840ffd4b6e787db0abbc91a5f82c"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Apr 13 06:47:31 2026 -0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Apr 13 06:47:31 2026 -0700"
      },
      "message": "chore: Bump actions/upload-pages-artifact from 4.0.0 to 5.0.0 (#311)\n\nBumps\n[actions/upload-pages-artifact](https://github.com/actions/upload-pages-artifact)\nfrom 4.0.0 to 5.0.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/actions/upload-pages-artifact/releases\"\u003eactions/upload-pages-artifact\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.0.0\u003c/h2\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate upload-artifact action to version 7 \u003ca\nhref\u003d\"https://github.com/Tom-van-Woudenberg\"\u003e\u003ccode\u003e@​Tom-van-Woudenberg\u003c/code\u003e\u003c/a\u003e\n(\u003ca\nhref\u003d\"https://redirect.github.com/actions/upload-pages-artifact/issues/139\"\u003e#139\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efeat: add \u003ccode\u003einclude-hidden-files\u003c/code\u003e input \u003ca\nhref\u003d\"https://github.com/jonchurch\"\u003e\u003ccode\u003e@​jonchurch\u003c/code\u003e\u003c/a\u003e (\u003ca\nhref\u003d\"https://redirect.github.com/actions/upload-pages-artifact/issues/137\"\u003e#137\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eSee details of \u003ca\nhref\u003d\"https://github.com/actions/upload-pages-artifact/compare/v4.0.0...v4.0.1\"\u003eall\ncode changes\u003c/a\u003e since previous release.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/upload-pages-artifact/commit/fc324d3547104276b827a68afc52ff2a11cc49c9\"\u003e\u003ccode\u003efc324d3\u003c/code\u003e\u003c/a\u003e\nMerge pull request \u003ca\nhref\u003d\"https://redirect.github.com/actions/upload-pages-artifact/issues/139\"\u003e#139\u003c/a\u003e\nfrom Tom-van-Woudenberg/patch-1\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/upload-pages-artifact/commit/fe9d4b7d84090e1d8d9c53a0236f810d4e00d2c3\"\u003e\u003ccode\u003efe9d4b7\u003c/code\u003e\u003c/a\u003e\nMerge branch \u0027main\u0027 into patch-1\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/upload-pages-artifact/commit/0ca16172ca884f0a37117fed41734f29784cc980\"\u003e\u003ccode\u003e0ca1617\u003c/code\u003e\u003c/a\u003e\nMerge pull request \u003ca\nhref\u003d\"https://redirect.github.com/actions/upload-pages-artifact/issues/137\"\u003e#137\u003c/a\u003e\nfrom jonchurch/include-hidden-files\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/upload-pages-artifact/commit/57f0e8492b437b7818227931fef2faa1a379839b\"\u003e\u003ccode\u003e57f0e84\u003c/code\u003e\u003c/a\u003e\nUpdate action.yml\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/upload-pages-artifact/commit/4a90348b2933470dc78cec55534259872a6d3c0d\"\u003e\u003ccode\u003e4a90348\u003c/code\u003e\u003c/a\u003e\nv7 --\u0026gt; hash\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/upload-pages-artifact/commit/56f665a6f297fa95f8d735b314187fb2d7764569\"\u003e\u003ccode\u003e56f665a\u003c/code\u003e\u003c/a\u003e\nUpdate upload-artifact action to version 7\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/upload-pages-artifact/commit/f7615f5917213b24245d49ba96693d0f5375a414\"\u003e\u003ccode\u003ef7615f5\u003c/code\u003e\u003c/a\u003e\nAdd \u003ccode\u003einclude-hidden-files\u003c/code\u003e input\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca\nhref\u003d\"https://github.com/actions/upload-pages-artifact/compare/7b1f4a764d45c48632c6b24a0339c27f5614fb0b...fc324d3547104276b827a68afc52ff2a11cc49c9\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dactions/upload-pages-artifact\u0026package-manager\u003dgithub_actions\u0026previous-version\u003d4.0.0\u0026new-version\u003d5.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "dc97213d81d7840ffd4b6e787db0abbc91a5f82c",
      "tree": "ec2779904d595ecfdc208c4ccaecfe99157d22f4",
      "parents": [
        "b14c4a35662f87e69c83f9e89c5610b4a1a35a9d"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Apr 13 06:47:00 2026 -0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Apr 13 06:47:00 2026 -0700"
      },
      "message": "chore: Bump actions/upload-artifact from 7.0.0 to 7.0.1 (#310)\n\nBumps\n[actions/upload-artifact](https://github.com/actions/upload-artifact)\nfrom 7.0.0 to 7.0.1.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/actions/upload-artifact/releases\"\u003eactions/upload-artifact\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev7.0.1\u003c/h2\u003e\n\u003ch2\u003eWhat\u0027s Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate the readme with direct upload details by \u003ca\nhref\u003d\"https://github.com/danwkennedy\"\u003e\u003ccode\u003e@​danwkennedy\u003c/code\u003e\u003c/a\u003e in\n\u003ca\nhref\u003d\"https://redirect.github.com/actions/upload-artifact/pull/795\"\u003eactions/upload-artifact#795\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eReadme: bump all the example versions to v7 by \u003ca\nhref\u003d\"https://github.com/danwkennedy\"\u003e\u003ccode\u003e@​danwkennedy\u003c/code\u003e\u003c/a\u003e in\n\u003ca\nhref\u003d\"https://redirect.github.com/actions/upload-artifact/pull/796\"\u003eactions/upload-artifact#796\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eInclude changes in typespec/ts-http-runtime 0.3.5 by \u003ca\nhref\u003d\"https://github.com/yacaovsnc\"\u003e\u003ccode\u003e@​yacaovsnc\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/upload-artifact/pull/797\"\u003eactions/upload-artifact#797\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca\nhref\u003d\"https://github.com/actions/upload-artifact/compare/v7...v7.0.1\"\u003ehttps://github.com/actions/upload-artifact/compare/v7...v7.0.1\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/upload-artifact/commit/043fb46d1a93c77aae656e7c1c64a875d1fc6a0a\"\u003e\u003ccode\u003e043fb46\u003c/code\u003e\u003c/a\u003e\nMerge pull request \u003ca\nhref\u003d\"https://redirect.github.com/actions/upload-artifact/issues/797\"\u003e#797\u003c/a\u003e\nfrom actions/yacaovsnc/update-dependency\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/upload-artifact/commit/634250c1388765ea7ed0f053e636f1f399000b94\"\u003e\u003ccode\u003e634250c\u003c/code\u003e\u003c/a\u003e\nInclude changes in typespec/ts-http-runtime 0.3.5\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/upload-artifact/commit/e454baaac2be505c9450e11b8f3215c6fc023ce8\"\u003e\u003ccode\u003ee454baa\u003c/code\u003e\u003c/a\u003e\nReadme: bump all the example versions to v7 (\u003ca\nhref\u003d\"https://redirect.github.com/actions/upload-artifact/issues/796\"\u003e#796\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/upload-artifact/commit/74fad66b98a6d799dc004d3353ccd0e6f6b2530e\"\u003e\u003ccode\u003e74fad66\u003c/code\u003e\u003c/a\u003e\nUpdate the readme with direct upload details (\u003ca\nhref\u003d\"https://redirect.github.com/actions/upload-artifact/issues/795\"\u003e#795\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca\nhref\u003d\"https://github.com/actions/upload-artifact/compare/bbbca2ddaa5d8feaa63e36b76fdaad77386f024f...043fb46d1a93c77aae656e7c1c64a875d1fc6a0a\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dactions/upload-artifact\u0026package-manager\u003dgithub_actions\u0026previous-version\u003d7.0.0\u0026new-version\u003d7.0.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "b14c4a35662f87e69c83f9e89c5610b4a1a35a9d",
      "tree": "87169a82475aafe102b61fefd66b1073222821bf",
      "parents": [
        "c0f957ad48495aaf82e8f3be473e7815f762e8b9"
      ],
      "author": {
        "name": "Curt Hagenlocher",
        "email": "curt@hagenlocher.org",
        "time": "Wed Apr 08 16:17:41 2026 -0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed Apr 08 16:17:41 2026 -0700"
      },
      "message": "fix: Validate additional type information when concatenating (#309)\n\n## What\u0027s Changed\n\nWhen concatenating types, ensure that incompatible types are not being\nconcatenating (which can result in corrupt data).\n\nCloses #307."
    },
    {
      "commit": "c0f957ad48495aaf82e8f3be473e7815f762e8b9",
      "tree": "80bf2bd10b19bfa5883bbdb06034c50b1958f1ca",
      "parents": [
        "1185f99410565baa7b7f302371d9efc99efc152a"
      ],
      "author": {
        "name": "Curt Hagenlocher",
        "email": "curt@hagenlocher.org",
        "time": "Wed Apr 08 04:54:15 2026 -0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed Apr 08 04:54:15 2026 -0700"
      },
      "message": "feat: Add support for Run-End Encoded arrays (#308)\n\n## What\u0027s Changed\n\nThis PR adds basic support for Run-End Encoded arrays by following\nestablished codebase patterns.\n\nNotably:\n- New `ArrowTypeId` added.\n- New array type `RunEndEncodedArray` added.\n- New visitor method to handle the new array type.\n- New entry in the IPC serializer field type switch.\n- New `RunEndEncodedType` nested type.\n- Basic feature tests.\n- C API support\n- Concatenation support\n\nCo-authored-by: Jorge Candeias \u003cjorge.candeias@outcompute.com\u003e\n\nSupercedes #260\n\n---------\n\nCo-authored-by: Jorge Candeias \u003cjorge.candeias@outcompute.com\u003e"
    },
    {
      "commit": "1185f99410565baa7b7f302371d9efc99efc152a",
      "tree": "986c96176a1dcf7505174f482e5464b65b6fcb9d",
      "parents": [
        "aaa07feb04f08cc34c60894e6e84f9b1beee3bc3"
      ],
      "author": {
        "name": "Curt Hagenlocher",
        "email": "curt@hagenlocher.org",
        "time": "Wed Apr 01 23:05:51 2026 -0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed Apr 01 23:05:51 2026 -0700"
      },
      "message": "Implement Arrow C device API (#305)\n\n## What\u0027s Changed\n\nImplement Arrow C device API\n\nCloses #299."
    },
    {
      "commit": "aaa07feb04f08cc34c60894e6e84f9b1beee3bc3",
      "tree": "5e80962aab5698f01c5da4317e4718d7321623d8",
      "parents": [
        "d1c0a72cda966037fb56daf7eac981b39e6e01fd"
      ],
      "author": {
        "name": "Curt Hagenlocher",
        "email": "curt@hagenlocher.org",
        "time": "Wed Apr 01 16:33:02 2026 -0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed Apr 01 16:33:02 2026 -0700"
      },
      "message": "Add support for an alternative `ArrowBuffer` allocation mechanism. (#304)\n\n## What\u0027s Changed\n\nAdds support for an alternative `ArrowBuffer` allocation mechanism to\noptimize array creation."
    },
    {
      "commit": "d1c0a72cda966037fb56daf7eac981b39e6e01fd",
      "tree": "713f91bfbeff41dc45483691279f26d15a120efb",
      "parents": [
        "fc49cf334a5507829ac46e62de6c93022a32ca22"
      ],
      "author": {
        "name": "Curt Hagenlocher",
        "email": "curt@hagenlocher.org",
        "time": "Tue Mar 31 06:16:44 2026 -0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Mar 31 06:16:44 2026 -0700"
      },
      "message": "Implement largelistview support (#303)\n\n## What\u0027s Changed\n\nSupport for largelistview has been implemented. This still doesn\u0027t\nsupport lists which are actually more than 2GB, but at least smaller\nlists of this type can be loaded."
    },
    {
      "commit": "fc49cf334a5507829ac46e62de6c93022a32ca22",
      "tree": "85d1638b88ea609a0f0b6772fd75f4a2093c7293",
      "parents": [
        "1acbca65efb0fe949b665c34e82a08a27ef2d7ff"
      ],
      "author": {
        "name": "Vasilis Themelis",
        "email": "vdthemelis@gmail.com",
        "time": "Tue Mar 31 01:49:21 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Mar 30 17:49:21 2026 -0700"
      },
      "message": "GH-301: [C#] Use an index lookup for O(1) field index access (#300)\n\nCloses #301.\n\nPorts the optimization from the closed PR at\nhttps://github.com/apache/arrow/pull/44633 into the new .NET-specific\nrepository.\n\nThe original PR was closed on November 18, 2025 with the note that the\nC# implementation had moved to a new repository.\n\nThis version keeps the current `arrow-dotnet` behavior intact:\n- `GetFieldIndex(..., comparer: null)` and the default path now use a\ncached `CurrentCulture` index lookup for the common case.\n- Missing fields still return `-1`.\n- Duplicate field names still return the first match.\n- Non-default comparers still fall back to the existing linear scan.\n\nI also added dedicated schema tests covering:\n- `null`, `Ordinal`, `OrdinalIgnoreCase`, and `CurrentCulture` comparers\n- duplicate-name lookup returning the first match\n- missing-name behavior for each comparer\n\nLocal verification:\n- `dotnet build test/Apache.Arrow.Tests/Apache.Arrow.Tests.csproj`\n- `DOTNET_ROLL_FORWARD\u003dMajor DOTNET_ROLL_FORWARD_TO_PRERELEASE\u003d1 dotnet\ntest test/Apache.Arrow.Tests/Apache.Arrow.Tests.csproj --no-restore\n--logger \u0027console;verbosity\u003dminimal\u0027`"
    },
    {
      "commit": "1acbca65efb0fe949b665c34e82a08a27ef2d7ff",
      "tree": "9be0d50fce9e082c585ff4b9def71f239a7740bf",
      "parents": [
        "fb9199e0a511b32f311ba2703c1f5a82bf973e8b"
      ],
      "author": {
        "name": "Curt Hagenlocher",
        "email": "curt@hagenlocher.org",
        "time": "Mon Mar 30 17:48:21 2026 -0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Mar 30 17:48:21 2026 -0700"
      },
      "message": "Add missing builders and concatenator support for \"large\" array types. (#302)\n\n## What\u0027s Changed\n\nWhen support for largebinary, largeutf8 and largelist were added,\ncorresponding support for builders and concatenators were not added."
    },
    {
      "commit": "fb9199e0a511b32f311ba2703c1f5a82bf973e8b",
      "tree": "35aea39f8469a71565e02d5a00d00352f141ac78",
      "parents": [
        "d536de0fe8ec62cf8d1e28484ad8850bf472dbc5"
      ],
      "author": {
        "name": "Curt Hagenlocher",
        "email": "curt@hagenlocher.org",
        "time": "Mon Mar 30 13:24:08 2026 -0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Mar 30 13:24:08 2026 -0700"
      },
      "message": "Introduce a reference counted layer between ArrowBuffer and memory (#297)\n\n## What\u0027s Changed\n\nIntroduces a reference-counted layer between ArrowBuffer and the\nunderlying memory to allow buffers to be shared between multiple arrays.\nSupports export of managed buffers.\nDisables experimental workaround that was previously added to support\nbuffer export given that it is no longer necessary.\n\nThis is an alternative to #291 that\u0027s more flexible.\n\nCloses #111."
    },
    {
      "commit": "d536de0fe8ec62cf8d1e28484ad8850bf472dbc5",
      "tree": "a873834555aae353442b9e18405b252f6835d6b0",
      "parents": [
        "009762ed78eab160c1b31774e4db6480a5ae5f80"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Sun Mar 29 20:54:54 2026 -0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sun Mar 29 20:54:54 2026 -0700"
      },
      "message": "chore: Bump actions/deploy-pages from 4.0.5 to 5.0.0 (#298)\n\nBumps [actions/deploy-pages](https://github.com/actions/deploy-pages)\nfrom 4.0.5 to 5.0.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/actions/deploy-pages/releases\"\u003eactions/deploy-pages\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.0.0\u003c/h2\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate Node.js version to 24.x \u003ca\nhref\u003d\"https://github.com/salmanmkc\"\u003e\u003ccode\u003e@​salmanmkc\u003c/code\u003e\u003c/a\u003e (\u003ca\nhref\u003d\"https://redirect.github.com/actions/deploy-pages/issues/404\"\u003e#404\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd workflow file for publishing releases to immutable action\npackage \u003ca\nhref\u003d\"https://github.com/Jcambass\"\u003e\u003ccode\u003e@​Jcambass\u003c/code\u003e\u003c/a\u003e (\u003ca\nhref\u003d\"https://redirect.github.com/actions/deploy-pages/issues/374\"\u003e#374\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBump braces from 3.0.2 to 3.0.3 in the npm_and_yarn group across 1\ndirectory \u003ca\nhref\u003d\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e (\u003ca\nhref\u003d\"https://redirect.github.com/actions/deploy-pages/issues/360\"\u003e#360\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eMake the rebuild dist workflow work nicer with Dependabot \u003ca\nhref\u003d\"https://github.com/yoannchaudet\"\u003e\u003ccode\u003e@​yoannchaudet\u003c/code\u003e\u003c/a\u003e\n(\u003ca\nhref\u003d\"https://redirect.github.com/actions/deploy-pages/issues/361\"\u003e#361\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBump the non-breaking-changes group across 1 directory with 3\nupdates \u003ca\nhref\u003d\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e (\u003ca\nhref\u003d\"https://redirect.github.com/actions/deploy-pages/issues/358\"\u003e#358\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDelete repeated sentence \u003ca\nhref\u003d\"https://github.com/garethsb\"\u003e\u003ccode\u003e@​garethsb\u003c/code\u003e\u003c/a\u003e (\u003ca\nhref\u003d\"https://redirect.github.com/actions/deploy-pages/issues/359\"\u003e#359\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUpdate README.md \u003ca\nhref\u003d\"https://github.com/tsusdere\"\u003e\u003ccode\u003e@​tsusdere\u003c/code\u003e\u003c/a\u003e (\u003ca\nhref\u003d\"https://redirect.github.com/actions/deploy-pages/issues/348\"\u003e#348\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBump the non-breaking-changes group with 4 updates \u003ca\nhref\u003d\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e (\u003ca\nhref\u003d\"https://redirect.github.com/actions/deploy-pages/issues/341\"\u003e#341\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRemove error message for file permissions \u003ca\nhref\u003d\"https://github.com/TooManyBees\"\u003e\u003ccode\u003e@​TooManyBees\u003c/code\u003e\u003c/a\u003e (\u003ca\nhref\u003d\"https://redirect.github.com/actions/deploy-pages/issues/340\"\u003e#340\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003chr /\u003e\n\u003cp\u003eSee details of \u003ca\nhref\u003d\"https://github.com/actions/deploy-pages/compare/v4.0.5...v4.0.6\"\u003eall\ncode changes\u003c/a\u003e since previous release.\u003c/p\u003e\n\u003cp\u003e:warning: For use with products other than GitHub.com, such as GitHub\nEnterprise Server, please consult the \u003ca\nhref\u003d\"https://github.com/actions/deploy-pages/#compatibility\"\u003ecompatibility\ntable\u003c/a\u003e.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/deploy-pages/commit/cd2ce8fcbc39b97be8ca5fce6e763baed58fa128\"\u003e\u003ccode\u003ecd2ce8f\u003c/code\u003e\u003c/a\u003e\nMerge pull request \u003ca\nhref\u003d\"https://redirect.github.com/actions/deploy-pages/issues/404\"\u003e#404\u003c/a\u003e\nfrom salmanmkc/node24\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/deploy-pages/commit/bbe2a950ee52d4f5cbe74e6d9d6a8803676e91d5\"\u003e\u003ccode\u003ebbe2a95\u003c/code\u003e\u003c/a\u003e\nUpdate Node.js version to 24.x\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/deploy-pages/commit/854d7aa1b99e4509c4d1b53d69b7ba4eaf39215a\"\u003e\u003ccode\u003e854d7aa\u003c/code\u003e\u003c/a\u003e\nMerge pull request \u003ca\nhref\u003d\"https://redirect.github.com/actions/deploy-pages/issues/374\"\u003e#374\u003c/a\u003e\nfrom actions/Jcambass-patch-1\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/deploy-pages/commit/306bb814f29679fd12f0e4b0014bc1f3a7e7f4bc\"\u003e\u003ccode\u003e306bb81\u003c/code\u003e\u003c/a\u003e\nAdd workflow file for publishing releases to immutable action\npackage\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/deploy-pages/commit/b74272834adc04f971da4b0b055c49fa8d7f90c9\"\u003e\u003ccode\u003eb742728\u003c/code\u003e\u003c/a\u003e\nMerge pull request \u003ca\nhref\u003d\"https://redirect.github.com/actions/deploy-pages/issues/360\"\u003e#360\u003c/a\u003e\nfrom actions/dependabot/npm_and_yarn/npm_and_yarn-513...\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/deploy-pages/commit/72732942c639e67ea3f70165fd2e012dd6d95027\"\u003e\u003ccode\u003e7273294\u003c/code\u003e\u003c/a\u003e\nBump braces in the npm_and_yarn group across 1 directory\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/deploy-pages/commit/963791f01c40ef3eff219c255dbfb97a6f2c9f87\"\u003e\u003ccode\u003e963791f\u003c/code\u003e\u003c/a\u003e\nMerge pull request \u003ca\nhref\u003d\"https://redirect.github.com/actions/deploy-pages/issues/361\"\u003e#361\u003c/a\u003e\nfrom actions/dependabot-friendly\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/deploy-pages/commit/51bb29d9d7bfe15d731c4957ce1887b5ae8c6727\"\u003e\u003ccode\u003e51bb29d\u003c/code\u003e\u003c/a\u003e\nMake the rebuild dist workflow safer for Dependabot\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/deploy-pages/commit/89f3d10406f57ee86e6517a982b3fb0438bd6dc5\"\u003e\u003ccode\u003e89f3d10\u003c/code\u003e\u003c/a\u003e\nMerge pull request \u003ca\nhref\u003d\"https://redirect.github.com/actions/deploy-pages/issues/358\"\u003e#358\u003c/a\u003e\nfrom actions/dependabot/npm_and_yarn/non-breaking-cha...\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/deploy-pages/commit/bce735589bbbfa569f1d2ac003277b590d743e4c\"\u003e\u003ccode\u003ebce7355\u003c/code\u003e\u003c/a\u003e\nMerge branch \u0027main\u0027 into\ndependabot/npm_and_yarn/non-breaking-changes-99c12deb21\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://github.com/actions/deploy-pages/compare/d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e...cd2ce8fcbc39b97be8ca5fce6e763baed58fa128\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dactions/deploy-pages\u0026package-manager\u003dgithub_actions\u0026previous-version\u003d4.0.5\u0026new-version\u003d5.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "009762ed78eab160c1b31774e4db6480a5ae5f80",
      "tree": "62fabe15de23b381484a0eadf9628ae7a467f41b",
      "parents": [
        "8071c9e4318ee88bb90b09133858a29c29187307"
      ],
      "author": {
        "name": "Curt Hagenlocher",
        "email": "curt@hagenlocher.org",
        "time": "Wed Mar 25 10:46:44 2026 -0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed Mar 25 10:46:44 2026 -0700"
      },
      "message": "Improvements to decimal conversion (#292)\n\n## What\u0027s Changed\n\n- Fixes DecimalUtility.GetDecimal to correctly handle high-scale values\n(e.g., Decimal256 with precision 76, scale 38) that previously threw\nOverflowException — addresses issue #247\n- Adds a fast path using Int128 on .NET 7+ that avoids BigInteger\nallocation for values that fit in 128 bits\n- Replaces the old fractional-part overflow check (which threw) with\nFractionToDecimal, which gracefully reduces precision to fit within\ndecimal\u0027s ~28-digit mantissa\n\nCloses #247.\nPartially addresses #96."
    },
    {
      "commit": "8071c9e4318ee88bb90b09133858a29c29187307",
      "tree": "0dd1685621022331429e2b0dc5275550f17bd5f2",
      "parents": [
        "3ad67bade1c4161d906da372cd0247ca4d858893"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue Mar 24 13:02:06 2026 -0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Mar 24 13:02:06 2026 -0700"
      },
      "message": "chore: Bump actions/cache from 5.0.3 to 5.0.4 (#293)\n\nBumps [actions/cache](https://github.com/actions/cache) from 5.0.3 to\n5.0.4.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/actions/cache/releases\"\u003eactions/cache\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.0.4\u003c/h2\u003e\n\u003ch2\u003eWhat\u0027s Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd release instructions and update maintainer docs by \u003ca\nhref\u003d\"https://github.com/Link\"\u003e\u003ccode\u003e@​Link\u003c/code\u003e\u003c/a\u003e- in \u003ca\nhref\u003d\"https://redirect.github.com/actions/cache/pull/1696\"\u003eactions/cache#1696\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ePotential fix for code scanning alert no. 52: Workflow does not\ncontain permissions by \u003ca\nhref\u003d\"https://github.com/Link\"\u003e\u003ccode\u003e@​Link\u003c/code\u003e\u003c/a\u003e- in \u003ca\nhref\u003d\"https://redirect.github.com/actions/cache/pull/1697\"\u003eactions/cache#1697\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix workflow permissions and cleanup workflow names / formatting by\n\u003ca href\u003d\"https://github.com/Link\"\u003e\u003ccode\u003e@​Link\u003c/code\u003e\u003c/a\u003e- in \u003ca\nhref\u003d\"https://redirect.github.com/actions/cache/pull/1699\"\u003eactions/cache#1699\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: Update examples to use the latest version by \u003ca\nhref\u003d\"https://github.com/XZTDean\"\u003e\u003ccode\u003e@​XZTDean\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/cache/pull/1690\"\u003eactions/cache#1690\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix proxy integration tests by \u003ca\nhref\u003d\"https://github.com/Link\"\u003e\u003ccode\u003e@​Link\u003c/code\u003e\u003c/a\u003e- in \u003ca\nhref\u003d\"https://redirect.github.com/actions/cache/pull/1701\"\u003eactions/cache#1701\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix cache key in examples.md for bun.lock by \u003ca\nhref\u003d\"https://github.com/RyPeck\"\u003e\u003ccode\u003e@​RyPeck\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/cache/pull/1722\"\u003eactions/cache#1722\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate dependencies \u0026amp; patch security vulnerabilities by \u003ca\nhref\u003d\"https://github.com/Link\"\u003e\u003ccode\u003e@​Link\u003c/code\u003e\u003c/a\u003e- in \u003ca\nhref\u003d\"https://redirect.github.com/actions/cache/pull/1738\"\u003eactions/cache#1738\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/XZTDean\"\u003e\u003ccode\u003e@​XZTDean\u003c/code\u003e\u003c/a\u003e made\ntheir first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/actions/cache/pull/1690\"\u003eactions/cache#1690\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/RyPeck\"\u003e\u003ccode\u003e@​RyPeck\u003c/code\u003e\u003c/a\u003e made\ntheir first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/actions/cache/pull/1722\"\u003eactions/cache#1722\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca\nhref\u003d\"https://github.com/actions/cache/compare/v5...v5.0.4\"\u003ehttps://github.com/actions/cache/compare/v5...v5.0.4\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/actions/cache/blob/main/RELEASES.md\"\u003eactions/cache\u0027s\nchangelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eReleases\u003c/h1\u003e\n\u003ch2\u003eHow to prepare a release\u003c/h2\u003e\n\u003cblockquote\u003e\n\u003cp\u003e[!NOTE]\u003cbr /\u003e\nRelevant for maintainers with write access only.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003col\u003e\n\u003cli\u003eSwitch to a new branch from \u003ccode\u003emain\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eRun \u003ccode\u003enpm test\u003c/code\u003e to ensure all tests are passing.\u003c/li\u003e\n\u003cli\u003eUpdate the version in \u003ca\nhref\u003d\"https://github.com/actions/cache/blob/main/package.json\"\u003e\u003ccode\u003ehttps://github.com/actions/cache/blob/main/package.json\u003c/code\u003e\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eRun \u003ccode\u003enpm run build\u003c/code\u003e to update the compiled files.\u003c/li\u003e\n\u003cli\u003eUpdate this \u003ca\nhref\u003d\"https://github.com/actions/cache/blob/main/RELEASES.md\"\u003e\u003ccode\u003ehttps://github.com/actions/cache/blob/main/RELEASES.md\u003c/code\u003e\u003c/a\u003e\nwith the new version and changes in the \u003ccode\u003e## Changelog\u003c/code\u003e\nsection.\u003c/li\u003e\n\u003cli\u003eRun \u003ccode\u003elicensed cache\u003c/code\u003e to update the license report.\u003c/li\u003e\n\u003cli\u003eRun \u003ccode\u003elicensed status\u003c/code\u003e and resolve any warnings by\nupdating the \u003ca\nhref\u003d\"https://github.com/actions/cache/blob/main/.licensed.yml\"\u003e\u003ccode\u003ehttps://github.com/actions/cache/blob/main/.licensed.yml\u003c/code\u003e\u003c/a\u003e\nfile with the exceptions.\u003c/li\u003e\n\u003cli\u003eCommit your changes and push your branch upstream.\u003c/li\u003e\n\u003cli\u003eOpen a pull request against \u003ccode\u003emain\u003c/code\u003e and get it reviewed\nand merged.\u003c/li\u003e\n\u003cli\u003eDraft a new release \u003ca\nhref\u003d\"https://github.com/actions/cache/releases\"\u003ehttps://github.com/actions/cache/releases\u003c/a\u003e\nuse the same version number used in \u003ccode\u003epackage.json\u003c/code\u003e\n\u003col\u003e\n\u003cli\u003eCreate a new tag with the version number.\u003c/li\u003e\n\u003cli\u003eAuto generate release notes and update them to match the changes you\nmade in \u003ccode\u003eRELEASES.md\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eToggle the set as the latest release option.\u003c/li\u003e\n\u003cli\u003ePublish the release.\u003c/li\u003e\n\u003c/ol\u003e\n\u003c/li\u003e\n\u003cli\u003eNavigate to \u003ca\nhref\u003d\"https://github.com/actions/cache/actions/workflows/release-new-action-version.yml\"\u003ehttps://github.com/actions/cache/actions/workflows/release-new-action-version.yml\u003c/a\u003e\n\u003col\u003e\n\u003cli\u003eThere should be a workflow run queued with the same version\nnumber.\u003c/li\u003e\n\u003cli\u003eApprove the run to publish the new version and update the major tags\nfor this action.\u003c/li\u003e\n\u003c/ol\u003e\n\u003c/li\u003e\n\u003c/ol\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003ch3\u003e5.0.4\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBump \u003ccode\u003eminimatch\u003c/code\u003e to v3.1.5 (fixes ReDoS via globstar\npatterns)\u003c/li\u003e\n\u003cli\u003eBump \u003ccode\u003eundici\u003c/code\u003e to v6.24.1 (WebSocket decompression bomb\nprotection, header validation fixes)\u003c/li\u003e\n\u003cli\u003eBump \u003ccode\u003efast-xml-parser\u003c/code\u003e to v5.5.6\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e5.0.3\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBump \u003ccode\u003e@actions/cache\u003c/code\u003e to v5.0.5 (Resolves: \u003ca\nhref\u003d\"https://github.com/actions/cache/security/dependabot/33\"\u003ehttps://github.com/actions/cache/security/dependabot/33\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBump \u003ccode\u003e@actions/core\u003c/code\u003e to v2.0.3\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e5.0.2\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBump \u003ccode\u003e@actions/cache\u003c/code\u003e to v5.0.3 \u003ca\nhref\u003d\"https://redirect.github.com/actions/cache/pull/1692\"\u003e#1692\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e5.0.1\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate \u003ccode\u003e@azure/storage-blob\u003c/code\u003e to \u003ccode\u003e^12.29.1\u003c/code\u003e via\n\u003ccode\u003e@actions/cache@5.0.1\u003c/code\u003e \u003ca\nhref\u003d\"https://redirect.github.com/actions/cache/pull/1685\"\u003e#1685\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e5.0.0\u003c/h3\u003e\n\u003cblockquote\u003e\n\u003cp\u003e[!IMPORTANT]\n\u003ccode\u003eactions/cache@v5\u003c/code\u003e runs on the Node.js 24 runtime and\nrequires a minimum Actions Runner version of \u003ccode\u003e2.327.1\u003c/code\u003e.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/cache/commit/668228422ae6a00e4ad889ee87cd7109ec5666a7\"\u003e\u003ccode\u003e6682284\u003c/code\u003e\u003c/a\u003e\nMerge pull request \u003ca\nhref\u003d\"https://redirect.github.com/actions/cache/issues/1738\"\u003e#1738\u003c/a\u003e\nfrom actions/prepare-v5.0.4\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/cache/commit/e34039626f957d3e3e50843d15c1b20547fc90e2\"\u003e\u003ccode\u003ee340396\u003c/code\u003e\u003c/a\u003e\nUpdate RELEASES\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/cache/commit/8a671105293e81530f1af99863cdf94550aba1a6\"\u003e\u003ccode\u003e8a67110\u003c/code\u003e\u003c/a\u003e\nAdd licenses\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/cache/commit/1865903e1b0cb750dda9bc5c58be03424cc62830\"\u003e\u003ccode\u003e1865903\u003c/code\u003e\u003c/a\u003e\nUpdate dependencies \u0026amp; patch security vulnerabilities\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/cache/commit/565629816435f6c0b50676926c9b05c254113c0c\"\u003e\u003ccode\u003e5656298\u003c/code\u003e\u003c/a\u003e\nMerge pull request \u003ca\nhref\u003d\"https://redirect.github.com/actions/cache/issues/1722\"\u003e#1722\u003c/a\u003e\nfrom RyPeck/patch-1\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/cache/commit/4e380d19e192ace8e86f23f32ca6fdec98a673c6\"\u003e\u003ccode\u003e4e380d1\u003c/code\u003e\u003c/a\u003e\nFix cache key in examples.md for bun.lock\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/cache/commit/b7e8d49f17405cc70c1c120101943203c98d3a4b\"\u003e\u003ccode\u003eb7e8d49\u003c/code\u003e\u003c/a\u003e\nMerge pull request \u003ca\nhref\u003d\"https://redirect.github.com/actions/cache/issues/1701\"\u003e#1701\u003c/a\u003e\nfrom actions/Link-/fix-proxy-integration-tests\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/cache/commit/984a21b1cb176a0936f4edafb42be88978f93ef1\"\u003e\u003ccode\u003e984a21b\u003c/code\u003e\u003c/a\u003e\nAdd traffic sanity check step\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/cache/commit/acf2f1f76affe1ef80eee8e56dfddd3b3e5f0fba\"\u003e\u003ccode\u003eacf2f1f\u003c/code\u003e\u003c/a\u003e\nFix resolution\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/cache/commit/95a07c51324af6001b4d6ab8dff29f4dfadc2531\"\u003e\u003ccode\u003e95a07c5\u003c/code\u003e\u003c/a\u003e\nAdd wait for proxy\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://github.com/actions/cache/compare/cdf6c1fa76f9f475f3d7449005a359c84ca0f306...668228422ae6a00e4ad889ee87cd7109ec5666a7\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dactions/cache\u0026package-manager\u003dgithub_actions\u0026previous-version\u003d5.0.3\u0026new-version\u003d5.0.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "3ad67bade1c4161d906da372cd0247ca4d858893",
      "tree": "06e9d7f2b31bfceab8e5afa611cc71711453f11a",
      "parents": [
        "1fefa992a236665b30f95f329af1b8c13eff1847"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue Mar 24 13:01:50 2026 -0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Mar 24 13:01:50 2026 -0700"
      },
      "message": "chore: Bump coverlet.collector from 8.0.0 to 8.0.1 (#294)\n\nUpdated\n[coverlet.collector](https://github.com/coverlet-coverage/coverlet) from\n8.0.0 to 8.0.1.\n\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\n_Sourced from [coverlet.collector\u0027s\nreleases](https://github.com/coverlet-coverage/coverlet/releases)._\n\n## 8.0.1\n\n### Fixed\n- Fix [BUG] TypeInitializationException when targeting .NET Framework\n[#​1818](https://github.com/coverlet-coverage/coverlet/issues/1818)\n- Fix [BUG] coverlet.MTP build fails with CS0400 due to\ndevelopmentDependency\u003dtrue\n[#​1827](https://github.com/coverlet-coverage/coverlet/issues/1827)\n\n### Improvements\n- Additional improvements needed for .NET Framework instrumentation type\nimport\n[#​1825](https://github.com/coverlet-coverage/coverlet/issues/1825)\n\n[Diff between 8.0.0 and\n8.0.1](https://github.com/coverlet-coverage/coverlet/compare/v8.0.0...v8.0.1)\n\n\nCommits viewable in [compare\nview](https://github.com/coverlet-coverage/coverlet/compare/v8.0.0...v8.0.1).\n\u003c/details\u003e\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dcoverlet.collector\u0026package-manager\u003dnuget\u0026previous-version\u003d8.0.0\u0026new-version\u003d8.0.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "1fefa992a236665b30f95f329af1b8c13eff1847",
      "tree": "ce8894f22fa9ce93133abe2dadf4add2d4a90db4",
      "parents": [
        "7bdb8685b524fb32164eb57413809b5398cc089b"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Mar 16 06:38:01 2026 -0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Mar 16 06:38:01 2026 -0700"
      },
      "message": "chore: Bump System.CommandLine from 2.0.3 to 2.0.5 (#289)\n\nUpdated [System.CommandLine](https://github.com/dotnet/dotnet) from\n2.0.3 to 2.0.5.\n\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\n_Sourced from [System.CommandLine\u0027s\nreleases](https://github.com/dotnet/dotnet/releases)._\n\nNo release notes found for this version range.\n\nCommits viewable in [compare\nview](https://github.com/dotnet/dotnet/commits).\n\u003c/details\u003e\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dSystem.CommandLine\u0026package-manager\u003dnuget\u0026previous-version\u003d2.0.3\u0026new-version\u003d2.0.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "7bdb8685b524fb32164eb57413809b5398cc089b",
      "tree": "d94f4f880b086d6a3a8346c94ded65f511a9560e",
      "parents": [
        "eb33c67396474cc626cf9e7a620bc2f494d70c7f"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Mar 16 05:22:57 2026 -0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Mar 16 05:22:57 2026 -0700"
      },
      "message": "chore: Bump actions/download-artifact from 8.0.0 to 8.0.1 (#286)\n\nBumps\n[actions/download-artifact](https://github.com/actions/download-artifact)\nfrom 8.0.0 to 8.0.1.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/actions/download-artifact/releases\"\u003eactions/download-artifact\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev8.0.1\u003c/h2\u003e\n\u003ch2\u003eWhat\u0027s Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSupport for CJK characters in the artifact name by \u003ca\nhref\u003d\"https://github.com/danwkennedy\"\u003e\u003ccode\u003e@​danwkennedy\u003c/code\u003e\u003c/a\u003e in\n\u003ca\nhref\u003d\"https://redirect.github.com/actions/download-artifact/pull/471\"\u003eactions/download-artifact#471\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd a regression test for artifact name + content-type mismatches by\n\u003ca href\u003d\"https://github.com/danwkennedy\"\u003e\u003ccode\u003e@​danwkennedy\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/actions/download-artifact/pull/472\"\u003eactions/download-artifact#472\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca\nhref\u003d\"https://github.com/actions/download-artifact/compare/v8...v8.0.1\"\u003ehttps://github.com/actions/download-artifact/compare/v8...v8.0.1\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/download-artifact/commit/3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c\"\u003e\u003ccode\u003e3e5f45b\u003c/code\u003e\u003c/a\u003e\nAdd regression tests for CJK characters (\u003ca\nhref\u003d\"https://redirect.github.com/actions/download-artifact/issues/471\"\u003e#471\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/download-artifact/commit/e6d03f67377d4412c7aa56a8e2e4988e6ec479dd\"\u003e\u003ccode\u003ee6d03f6\u003c/code\u003e\u003c/a\u003e\nAdd a regression test for artifact name + content-type mismatches (\u003ca\nhref\u003d\"https://redirect.github.com/actions/download-artifact/issues/472\"\u003e#472\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca\nhref\u003d\"https://github.com/actions/download-artifact/compare/70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3...3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dactions/download-artifact\u0026package-manager\u003dgithub_actions\u0026previous-version\u003d8.0.0\u0026new-version\u003d8.0.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "eb33c67396474cc626cf9e7a620bc2f494d70c7f",
      "tree": "861f49998af3d56cdba92dfb6b14dcb59471c501",
      "parents": [
        "c5166949eb24b3e612248cca6e4fd8746424fd74"
      ],
      "author": {
        "name": "Curt Hagenlocher",
        "email": "curt@hagenlocher.org",
        "time": "Sat Mar 14 14:58:35 2026 -0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sat Mar 14 14:58:35 2026 -0700"
      },
      "message": "Initial attempt at a standalone Arrow variant implementation (#275)\n\n## What\u0027s Changed\n\nThis adds a new standalone assembly for dealing with Arrow/Parquet\nvariants. The implementation was largely coded by AI, with significant\ninput from me about API and design constraints.\n\nI think the most important thing for review purposes is probably the API\nand the tests."
    },
    {
      "commit": "c5166949eb24b3e612248cca6e4fd8746424fd74",
      "tree": "71bdfc312c00124162d5256561985c3eaa68c2af",
      "parents": [
        "3d0c7a24644666794c7ebcefcdd5849782a35709"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Mar 09 08:47:06 2026 -0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Mar 09 08:47:06 2026 -0700"
      },
      "message": "chore: Bump actions/setup-dotnet from 5.1.0 to 5.2.0 (#281)\n\nBumps [actions/setup-dotnet](https://github.com/actions/setup-dotnet)\nfrom 5.1.0 to 5.2.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/actions/setup-dotnet/releases\"\u003eactions/setup-dotnet\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.2.0\u003c/h2\u003e\n\u003ch2\u003eWhat\u0027s changed\u003c/h2\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd support for workloads input by \u003ca\nhref\u003d\"https://github.com/gowridurgad\"\u003e\u003ccode\u003e@​gowridurgad\u003c/code\u003e\u003c/a\u003e in\n\u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-dotnet/pull/693\"\u003eactions/setup-dotnet#693\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd support for optional architecture input for cross-architecture\n.NET installs by \u003ca\nhref\u003d\"https://github.com/priya-kinthali\"\u003e\u003ccode\u003e@​priya-kinthali\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-dotnet/pull/700\"\u003eactions/setup-dotnet#700\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eDependency Updates\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade fast-xml-parser from 4.4.1 to 5.3.6 by \u003ca\nhref\u003d\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-dotnet/pull/671\"\u003eactions/setup-dotnet#671\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpgrade minimatch from 3.1.2 to 3.1.5 by \u003ca\nhref\u003d\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-dotnet/pull/705\"\u003eactions/setup-dotnet#705\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca\nhref\u003d\"https://github.com/actions/setup-dotnet/compare/v5...v5.2.0\"\u003ehttps://github.com/actions/setup-dotnet/compare/v5...v5.2.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/setup-dotnet/commit/c2fa09f4bde5ebb9d1777cf28262a3eb3db3ced7\"\u003e\u003ccode\u003ec2fa09f\u003c/code\u003e\u003c/a\u003e\nBump minimatch from 3.1.2 to 3.1.5 (\u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-dotnet/issues/705\"\u003e#705\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/setup-dotnet/commit/02574b18e2dc57a218ee4e11ba1e1603c67236e8\"\u003e\u003ccode\u003e02574b1\u003c/code\u003e\u003c/a\u003e\nAdd support for optional architecture input for cross-architecture .NET\ninsta...\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/setup-dotnet/commit/16c7b3c2fa55a0e394467d22512b84fda46adf63\"\u003e\u003ccode\u003e16c7b3c\u003c/code\u003e\u003c/a\u003e\nBump fast-xml-parser from 4.4.1 to 5.3.6 (\u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-dotnet/issues/671\"\u003e#671\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/setup-dotnet/commit/131b410979e0b49e2162c0718030257b22d6dc2c\"\u003e\u003ccode\u003e131b410\u003c/code\u003e\u003c/a\u003e\nAdd support for workloads input (\u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-dotnet/issues/693\"\u003e#693\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca\nhref\u003d\"https://github.com/actions/setup-dotnet/compare/baa11fbfe1d6520db94683bd5c7a3818018e4309...c2fa09f4bde5ebb9d1777cf28262a3eb3db3ced7\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dactions/setup-dotnet\u0026package-manager\u003dgithub_actions\u0026previous-version\u003d5.1.0\u0026new-version\u003d5.2.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "3d0c7a24644666794c7ebcefcdd5849782a35709",
      "tree": "770502b58bd397ba2dc794886c4a21840de57d54",
      "parents": [
        "c45da687e7ee4931d4ab6bc27c496599260b2e11"
      ],
      "author": {
        "name": "Curt Hagenlocher",
        "email": "curt@hagenlocher.org",
        "time": "Tue Mar 03 05:02:44 2026 -0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Mar 03 05:02:44 2026 -0800"
      },
      "message": "Add bool8 extension type support (#274)\n\n## What\u0027s Changed\n\nThis PR adds support for the bool8 extension type. The support is off by\ndefault."
    },
    {
      "commit": "c45da687e7ee4931d4ab6bc27c496599260b2e11",
      "tree": "24069f2573609ffd3c04b740901bfea9287c4dea",
      "parents": [
        "138590f76490a7da42f8c48d3e441e949aa0a125"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Sun Mar 01 20:21:41 2026 -0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sun Mar 01 20:21:41 2026 -0800"
      },
      "message": "chore: Bump Microsoft.NET.Test.Sdk from 18.0.1 to 18.3.0 (#280)\n\nUpdated [Microsoft.NET.Test.Sdk](https://github.com/microsoft/vstest)\nfrom 18.0.1 to 18.3.0.\n\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\n_Sourced from [Microsoft.NET.Test.Sdk\u0027s\nreleases](https://github.com/microsoft/vstest/releases)._\n\n## 18.3.0\n\n## What\u0027s Changed\n\n* Fix answer file splitting by @​nohwnd in\nhttps://github.com/microsoft/vstest/pull/15306\n\n## Internal fixes and updates\n\n* Bump branding to 18.1 by @​nohwnd in\nhttps://github.com/microsoft/vstest/pull/15286\n* Remove stale copy of S.ComponentModel.Composition from testplatform\npackages by @​ViktorHofer in\nhttps://github.com/microsoft/vstest/pull/15287\n* Update codeflow metadata to fix backflow by @​premun in\nhttps://github.com/microsoft/vstest/pull/15291\n* [main] Update dependencies from devdiv/DevDiv/vs-code-coverage by\n@​dotnet-maestro[bot] in https://github.com/microsoft/vstest/pull/15283\n* Update Microsoft.Build.Utilities.Core by @​Youssef1313 in\nhttps://github.com/microsoft/vstest/pull/15300\n* Disable DynamicNative instrumentation by default by @​nohwnd in\nhttps://github.com/microsoft/vstest/pull/15299\n* [main] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot]\nin https://github.com/microsoft/vstest/pull/15293\n* [main] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot]\nin https://github.com/microsoft/vstest/pull/15302\n* [main] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot]\nin https://github.com/microsoft/vstest/pull/15314\n* Delete sha1 custom implementation we are not using for a long time by\n@​nohwnd in https://github.com/microsoft/vstest/pull/15313\n* [main] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot]\nin https://github.com/microsoft/vstest/pull/15315\n* Update branding to 18.3.0 by @​nohwnd in\nhttps://github.com/microsoft/vstest/pull/15321\n* [main] Update dependencies from devdiv/DevDiv/vs-code-coverage by\n@​dotnet-maestro[bot] in https://github.com/microsoft/vstest/pull/15325\n* [main] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot]\nin https://github.com/microsoft/vstest/pull/15264\n* Revert adding dotnet_host_path workaround by @​nohwnd in\nhttps://github.com/microsoft/vstest/pull/15328\n* [main] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot]\nin https://github.com/microsoft/vstest/pull/15338\n* [main] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot]\nin https://github.com/microsoft/vstest/pull/15322\n* [main] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot]\nin https://github.com/microsoft/vstest/pull/15343\n* Change PreReleaseVersionLabel from \u0027preview\u0027 to \u0027release\u0027 by @​nohwnd\nin https://github.com/microsoft/vstest/pull/15352\n* [rel/18.3] Update dependencies from devdiv/DevDiv/vs-code-coverage by\n@​dotnet-maestro[bot] in https://github.com/microsoft/vstest/pull/15354\n* [rel/18.3] Update dependencies from dotnet/arcade by\n@​dotnet-maestro[bot] in https://github.com/microsoft/vstest/pull/15389\n* [rel/18.3] Update dependencies from dotnet/arcade by\n@​dotnet-maestro[bot] in https://github.com/microsoft/vstest/pull/15400\n* Update build tools to 17.11.48 to be source buildable by @​nohwnd in\nhttps://github.com/microsoft/vstest/pull/15310\n* Disable publishing on RTM by @​nohwnd in\nhttps://github.com/microsoft/vstest/pull/15296\n* Don\u0027t access nuget.org for package feeds by @​nohwnd in\nhttps://github.com/microsoft/vstest/pull/15316\n* No nuget access fix tests by @​nohwnd in\nhttps://github.com/microsoft/vstest/pull/15317\n* Disable Dependabot updates in dependabot.yml by @​mmitche in\nhttps://github.com/microsoft/vstest/pull/15324\n\n## New Contributors\n* @​premun made their first contribution in\nhttps://github.com/microsoft/vstest/pull/15291\n\nCommits viewable in [compare\nview](https://github.com/microsoft/vstest/compare/v18.0.1...v18.3.0).\n\u003c/details\u003e\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dMicrosoft.NET.Test.Sdk\u0026package-manager\u003dnuget\u0026previous-version\u003d18.0.1\u0026new-version\u003d18.3.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "138590f76490a7da42f8c48d3e441e949aa0a125",
      "tree": "af7f29ff503344d57573465b88afbd834b08cafa",
      "parents": [
        "02956fab471156ba3657331ad101ef5aeed61e37"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Sun Mar 01 20:21:18 2026 -0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sun Mar 01 20:21:18 2026 -0800"
      },
      "message": "chore: Bump actions/download-artifact from 7.0.0 to 8.0.0 (#278)\n\nBumps\n[actions/download-artifact](https://github.com/actions/download-artifact)\nfrom 7.0.0 to 8.0.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/actions/download-artifact/releases\"\u003eactions/download-artifact\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev8.0.0\u003c/h2\u003e\n\u003ch2\u003ev8 - What\u0027s new\u003c/h2\u003e\n\u003ch3\u003eDirect downloads\u003c/h3\u003e\n\u003cp\u003eTo support direct uploads in \u003ccode\u003eactions/upload-artifact\u003c/code\u003e,\nthe action will no longer attempt to unzip all downloaded files.\nInstead, the action checks the \u003ccode\u003eContent-Type\u003c/code\u003e header ahead of\nunzipping and skips non-zipped files. Callers wishing to download a\nzipped file as-is can also set the new \u003ccode\u003eskip-decompress\u003c/code\u003e\nparameter to \u003ccode\u003efalse\u003c/code\u003e.\u003c/p\u003e\n\u003ch3\u003eEnforced checks (breaking)\u003c/h3\u003e\n\u003cp\u003eA previous release introduced digest checks on the download. If a\ndownload hash didn\u0027t match the expected hash from the server, the action\nwould log a warning. Callers can now configure the behavior on mismatch\nwith the \u003ccode\u003edigest-mismatch\u003c/code\u003e parameter. To be secure by\ndefault, we are now defaulting the behavior to \u003ccode\u003eerror\u003c/code\u003e which\nwill fail the workflow run.\u003c/p\u003e\n\u003ch3\u003eESM\u003c/h3\u003e\n\u003cp\u003eTo support new versions of the @actions/* packages, we\u0027ve upgraded\nthe package to ESM.\u003c/p\u003e\n\u003ch2\u003eWhat\u0027s Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDon\u0027t attempt to un-zip non-zipped downloads by \u003ca\nhref\u003d\"https://github.com/danwkennedy\"\u003e\u003ccode\u003e@​danwkennedy\u003c/code\u003e\u003c/a\u003e in\n\u003ca\nhref\u003d\"https://redirect.github.com/actions/download-artifact/pull/460\"\u003eactions/download-artifact#460\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd a setting to specify what to do on hash mismatch and default it\nto \u003ccode\u003eerror\u003c/code\u003e by \u003ca\nhref\u003d\"https://github.com/danwkennedy\"\u003e\u003ccode\u003e@​danwkennedy\u003c/code\u003e\u003c/a\u003e in\n\u003ca\nhref\u003d\"https://redirect.github.com/actions/download-artifact/pull/461\"\u003eactions/download-artifact#461\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca\nhref\u003d\"https://github.com/actions/download-artifact/compare/v7...v8.0.0\"\u003ehttps://github.com/actions/download-artifact/compare/v7...v8.0.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/download-artifact/commit/70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3\"\u003e\u003ccode\u003e70fc10c\u003c/code\u003e\u003c/a\u003e\nMerge pull request \u003ca\nhref\u003d\"https://redirect.github.com/actions/download-artifact/issues/461\"\u003e#461\u003c/a\u003e\nfrom actions/danwkennedy/digest-mismatch-behavior\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/download-artifact/commit/f258da9a506b755b84a09a531814700b86ccfc62\"\u003e\u003ccode\u003ef258da9\u003c/code\u003e\u003c/a\u003e\nAdd change docs\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/download-artifact/commit/ccc058e5fbb0bb2352213eaec3491e117cbc4a5c\"\u003e\u003ccode\u003eccc058e\u003c/code\u003e\u003c/a\u003e\nFix linting issues\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/download-artifact/commit/bd7976ba57ecea96e6f3df575eb922d11a12a9fd\"\u003e\u003ccode\u003ebd7976b\u003c/code\u003e\u003c/a\u003e\nAdd a setting to specify what to do on hash mismatch and default it to\n\u003ccode\u003eerror\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/download-artifact/commit/ac21fcf45e0aaee541c0f7030558bdad38d77d6c\"\u003e\u003ccode\u003eac21fcf\u003c/code\u003e\u003c/a\u003e\nMerge pull request \u003ca\nhref\u003d\"https://redirect.github.com/actions/download-artifact/issues/460\"\u003e#460\u003c/a\u003e\nfrom actions/danwkennedy/download-no-unzip\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/download-artifact/commit/15999bff51058bc7c19b50ebbba518eaef7c26c0\"\u003e\u003ccode\u003e15999bf\u003c/code\u003e\u003c/a\u003e\nAdd note about package bumps\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/download-artifact/commit/974686ed5098c7f9c9289ec946b9058e496a2561\"\u003e\u003ccode\u003e974686e\u003c/code\u003e\u003c/a\u003e\nBump the version to \u003ccode\u003ev8\u003c/code\u003e and add release notes\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/download-artifact/commit/fbe48b1d2756394be4cd4358ed3bc1343b330e75\"\u003e\u003ccode\u003efbe48b1\u003c/code\u003e\u003c/a\u003e\nUpdate test names to make it clearer what they do\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/download-artifact/commit/96bf374a614d4360e225874c3efd6893a3f285e7\"\u003e\u003ccode\u003e96bf374\u003c/code\u003e\u003c/a\u003e\nOne more test fix\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/download-artifact/commit/b8c4819ef592cbe04fd93534534b38f853864332\"\u003e\u003ccode\u003eb8c4819\u003c/code\u003e\u003c/a\u003e\nFix skip decompress test\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://github.com/actions/download-artifact/compare/37930b1c2abaa49bbe596cd826c3c89aef350131...70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dactions/download-artifact\u0026package-manager\u003dgithub_actions\u0026previous-version\u003d7.0.0\u0026new-version\u003d8.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "02956fab471156ba3657331ad101ef5aeed61e37",
      "tree": "8dec526830b0407558f6c62ff696925bf0cfb64b",
      "parents": [
        "955a6d6898ad657be462a879a75210c4e4f494a6"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Sun Mar 01 20:21:01 2026 -0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sun Mar 01 20:21:01 2026 -0800"
      },
      "message": "chore: Bump actions/upload-artifact from 6.0.0 to 7.0.0 (#277)\n\nBumps\n[actions/upload-artifact](https://github.com/actions/upload-artifact)\nfrom 6.0.0 to 7.0.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/actions/upload-artifact/releases\"\u003eactions/upload-artifact\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev7.0.0\u003c/h2\u003e\n\u003ch2\u003ev7 What\u0027s new\u003c/h2\u003e\n\u003ch3\u003eDirect Uploads\u003c/h3\u003e\n\u003cp\u003eAdds support for uploading single files directly (unzipped). Callers\ncan set the new \u003ccode\u003earchive\u003c/code\u003e parameter to \u003ccode\u003efalse\u003c/code\u003e to\nskip zipping the file during upload. Right now, we only support single\nfiles. The action will fail if the glob passed resolves to multiple\nfiles. The \u003ccode\u003ename\u003c/code\u003e parameter is also ignored with this\nsetting. Instead, the name of the artifact will be the name of the\nuploaded file.\u003c/p\u003e\n\u003ch3\u003eESM\u003c/h3\u003e\n\u003cp\u003eTo support new versions of the \u003ccode\u003e@actions/*\u003c/code\u003e packages,\nwe\u0027ve upgraded the package to ESM.\u003c/p\u003e\n\u003ch2\u003eWhat\u0027s Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd proxy integration test by \u003ca\nhref\u003d\"https://github.com/Link\"\u003e\u003ccode\u003e@​Link\u003c/code\u003e\u003c/a\u003e- in \u003ca\nhref\u003d\"https://redirect.github.com/actions/upload-artifact/pull/754\"\u003eactions/upload-artifact#754\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpgrade the module to ESM and bump dependencies by \u003ca\nhref\u003d\"https://github.com/danwkennedy\"\u003e\u003ccode\u003e@​danwkennedy\u003c/code\u003e\u003c/a\u003e in\n\u003ca\nhref\u003d\"https://redirect.github.com/actions/upload-artifact/pull/762\"\u003eactions/upload-artifact#762\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport direct file uploads by \u003ca\nhref\u003d\"https://github.com/danwkennedy\"\u003e\u003ccode\u003e@​danwkennedy\u003c/code\u003e\u003c/a\u003e in\n\u003ca\nhref\u003d\"https://redirect.github.com/actions/upload-artifact/pull/764\"\u003eactions/upload-artifact#764\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/Link\"\u003e\u003ccode\u003e@​Link\u003c/code\u003e\u003c/a\u003e- made\ntheir first contribution in \u003ca\nhref\u003d\"https://redirect.github.com/actions/upload-artifact/pull/754\"\u003eactions/upload-artifact#754\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca\nhref\u003d\"https://github.com/actions/upload-artifact/compare/v6...v7.0.0\"\u003ehttps://github.com/actions/upload-artifact/compare/v6...v7.0.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/upload-artifact/commit/bbbca2ddaa5d8feaa63e36b76fdaad77386f024f\"\u003e\u003ccode\u003ebbbca2d\u003c/code\u003e\u003c/a\u003e\nSupport direct file uploads (\u003ca\nhref\u003d\"https://redirect.github.com/actions/upload-artifact/issues/764\"\u003e#764\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/upload-artifact/commit/589182c5a4cec8920b8c1bce3e2fab1c97a02296\"\u003e\u003ccode\u003e589182c\u003c/code\u003e\u003c/a\u003e\nUpgrade the module to ESM and bump dependencies (\u003ca\nhref\u003d\"https://redirect.github.com/actions/upload-artifact/issues/762\"\u003e#762\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/upload-artifact/commit/47309c993abb98030a35d55ef7ff34b7fa1074b5\"\u003e\u003ccode\u003e47309c9\u003c/code\u003e\u003c/a\u003e\nMerge pull request \u003ca\nhref\u003d\"https://redirect.github.com/actions/upload-artifact/issues/754\"\u003e#754\u003c/a\u003e\nfrom actions/Link-/add-proxy-integration-tests\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/upload-artifact/commit/02a8460834e70dab0ce194c64360c59dc1475ef0\"\u003e\u003ccode\u003e02a8460\u003c/code\u003e\u003c/a\u003e\nAdd proxy integration test\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca\nhref\u003d\"https://github.com/actions/upload-artifact/compare/b7c566a772e6b6bfb58ed0dc250532a479d7789f...bbbca2ddaa5d8feaa63e36b76fdaad77386f024f\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dactions/upload-artifact\u0026package-manager\u003dgithub_actions\u0026previous-version\u003d6.0.0\u0026new-version\u003d7.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "955a6d6898ad657be462a879a75210c4e4f494a6",
      "tree": "ed52ceed40d511fdd9ec83b113a006f672672bf7",
      "parents": [
        "93af89f6526d5cccfa75f36af85cff9ba8146b01"
      ],
      "author": {
        "name": "Curt Hagenlocher",
        "email": "curt@hagenlocher.org",
        "time": "Sun Mar 01 09:23:25 2026 -0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sun Mar 01 09:23:25 2026 -0800"
      },
      "message": "Fixed issue #269 (#276)\n\n## What\u0027s Changed\n\nThe implementation of `IReadOnlyList\u003cbyte[]\u003e` on `BinaryArray` would\nreturn an empty byte array instead of null when the value was null. This\nhas been fixed.\n\n**This contains potentially-breaking changes, if consumers are not\nprepared to handle a null coming back from the IReadOnlyList**\n\nCloses #269."
    },
    {
      "commit": "93af89f6526d5cccfa75f36af85cff9ba8146b01",
      "tree": "71fb7c5314230251503eb1362cf317e8426305cc",
      "parents": [
        "f49331fff8082cbbed904bd1d0741787413bd7e7"
      ],
      "author": {
        "name": "Adam Reeve",
        "email": "adreeve@gmail.com",
        "time": "Mon Feb 23 17:31:02 2026 +1300"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Feb 23 17:31:02 2026 +1300"
      },
      "message": "chore: Pin Python version to 3.13 as PythonNet doesn\u0027t yet support 3.14 (#271)\n\nPin the Python version to 3.13 in CI to keep the C Data Interface tests working without skipping them."
    },
    {
      "commit": "f49331fff8082cbbed904bd1d0741787413bd7e7",
      "tree": "eacd48f00cd69b4fc85fad98ea0d2787d11c6794",
      "parents": [
        "59cc1af4fcb5e34981ce847c327b3b74e1fd69a9"
      ],
      "author": {
        "name": "Adam Reeve",
        "email": "adreeve@gmail.com",
        "time": "Mon Feb 23 16:51:00 2026 +1300"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Feb 23 16:51:00 2026 +1300"
      },
      "message": "chore: Fix test warnings about skipping duplicate test cases (#272)\n\n`ExampleDates` contains dates as `DateTime` values with the same day\nnumber but different kind, and the kind is dropped when converting to\n`DateOnly`, so this leads to duplicate test data values.\n\nThis adds a new `ExampleDateOnlyDates` function without duplicates."
    },
    {
      "commit": "59cc1af4fcb5e34981ce847c327b3b74e1fd69a9",
      "tree": "7cab9954ad35b66454a92298fa9fc2afd50747cc",
      "parents": [
        "bc99008f9b4c1207f43b9f137d0ec428b1787af8"
      ],
      "author": {
        "name": "Curt Hagenlocher",
        "email": "curt@hagenlocher.org",
        "time": "Sun Feb 22 16:41:40 2026 -0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sun Feb 22 16:41:40 2026 -0800"
      },
      "message": "Add extension type support and implement GuidArray (#268)\n\n## What\u0027s Changed\n\nAdds generic support for extension types including an extension type\nregistry. This has been done in what should be a fairly compatible\nfashion. No extension types are enabled by default, and different\nconsumers of Arrow inside the same process can explicitly designate\nwhich extension types they want to make use of.\n\nPackages several extensibility points into a single `ArrowContext`: the\ncompression factory, the allocator and the extension registry.\n\nImplements the `GuidArray` extension type.\n\nAdds tests including interop tests with Python for `GuidArray`.\n\nPartially implements #182."
    },
    {
      "commit": "bc99008f9b4c1207f43b9f137d0ec428b1787af8",
      "tree": "82f9f4fccb61132b3798d56334b09c126cfefde4",
      "parents": [
        "c8fc3455112cdd81156a4ff1308b1d175bfe6a2c"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Sun Feb 22 06:19:08 2026 -0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sun Feb 22 06:19:08 2026 -0800"
      },
      "message": "chore: Bump coverlet.collector from 6.0.4 to 8.0.0 (#262)\n\nUpdated\n[coverlet.collector](https://github.com/coverlet-coverage/coverlet) from\n6.0.4 to 8.0.0.\n\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\n_Sourced from [coverlet.collector\u0027s\nreleases](https://github.com/coverlet-coverage/coverlet/releases)._\n\n## 8.0.0\n\n**Special Thanks:** A huge thank you to\n[@​Bertk](https://github.com/Bertk) for driving the majority of the work\nin this release! 🎉\n\n### Fixed\n- Fix System.CommandLine 2.0 release is available\n[#​1776](https://github.com/coverlet-coverage/coverlet/issues/1776)\n- Fix Excluding From Coverage bad defaults from given example\n[#​1764](https://github.com/coverlet-coverage/coverlet/issues/1764)\n- Fix branchpoint exclusion for sdk 8.0.407\n[#​1741](https://github.com/coverlet-coverage/coverlet/issues/1741)\n- Fix missing copyright information in NuGet\n[#​1794](https://github.com/coverlet-coverage/coverlet/issues/1794)\n- Fix bad default values in documentation\n[#​1764](https://github.com/coverlet-coverage/coverlet/issues/1764) by\n\u003chttps://github.com/cboudereau\u003e\n\n### Improvements\n\n- Coverlet MTP extension feature\n[#​1788](https://github.com/coverlet-coverage/coverlet/pull/1788)\n- Generate SBOM for nuget packages\n[#​1752](https://github.com/coverlet-coverage/coverlet/pull/1752)\n- Use multi targets projects for coverlet.collector,\ncoverlet.msbuild.tasks packages\n[#​1742](https://github.com/coverlet-coverage/coverlet/pull/1742)\n- Use .NET 8.0 target framework for coverlet.core and remove\nNewtonsoft.Json\n[#​1733](https://github.com/coverlet-coverage/coverlet/pull/1733)\n- Use latest System.CommandLine version\n[#​1660](https://github.com/coverlet-coverage/coverlet/pull/1660)\n- Upgraded minimum required .NET SDK and runtime to .NET 8.0 LTS (Long\nTerm Support) (**Breaking Change**)\n- Use [xunit.v3](https://xunit.net/docs/getting-started/v3/whats-new)\nfor tests and example code\n\n[Diff between 6.0.4 and\n8.0.0](https://github.com/coverlet-coverage/coverlet/compare/v6.0.4...v8.0.0)\n\nCommits viewable in [compare\nview](https://github.com/coverlet-coverage/coverlet/compare/v6.0.4...v8.0.0).\n\u003c/details\u003e\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dcoverlet.collector\u0026package-manager\u003dnuget\u0026previous-version\u003d6.0.4\u0026new-version\u003d8.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "c8fc3455112cdd81156a4ff1308b1d175bfe6a2c",
      "tree": "d8598da5b9ef3c0415b18a868f19ada3b3007f53",
      "parents": [
        "ff5c9fb7962246b22bb4ee410520986d5aae8079"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Sun Feb 22 06:13:37 2026 -0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sun Feb 22 06:13:37 2026 -0800"
      },
      "message": "chore: Bump Microsoft.SourceLink.GitHub from 10.0.102 to 10.0.103 (#264)\n\nUpdated [Microsoft.SourceLink.GitHub](https://github.com/dotnet/dotnet)\nfrom 10.0.102 to 10.0.103.\n\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\n_Sourced from [Microsoft.SourceLink.GitHub\u0027s\nreleases](https://github.com/dotnet/dotnet/releases)._\n\n## 10.0.103\n\nYou can build .NET 10.0 from the repository by cloning the release tag\n`v10.0.103` and following the build instructions in the [main\nREADME.md](https://github.com/dotnet/dotnet/blob/v10.0.103/README.md#building).\n\nAlternatively, you can build from the sources attached to this release\ndirectly.\nMore information on this process can be found in the [dotnet/dotnet\nrepository](https://github.com/dotnet/dotnet/blob/v10.0.103/README.md#building-from-released-sources).\n\nAttached is the PGP signature for the GitHub generated tarball. You can\nfind the public key at https://dot.net/release-key-2023\n\nCommits viewable in [compare\nview](https://github.com/dotnet/dotnet/commits/v10.0.103).\n\u003c/details\u003e\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dMicrosoft.SourceLink.GitHub\u0026package-manager\u003dnuget\u0026previous-version\u003d10.0.102\u0026new-version\u003d10.0.103)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "ff5c9fb7962246b22bb4ee410520986d5aae8079",
      "tree": "3f0304e6c0cf3c5b6fbc0ee8670e982870bfa7d8",
      "parents": [
        "f9bf6cb7541a3b4acbb2413bdbcffb9983488d4c"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Sun Feb 22 06:13:26 2026 -0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sun Feb 22 06:13:26 2026 -0800"
      },
      "message": "chore: Bump System.CommandLine from 2.0.2 to 2.0.3 (#265)\n\nUpdated [System.CommandLine](https://github.com/dotnet/dotnet) from\n2.0.2 to 2.0.3.\n\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\n_Sourced from [System.CommandLine\u0027s\nreleases](https://github.com/dotnet/dotnet/releases)._\n\nNo release notes found for this version range.\n\nCommits viewable in [compare\nview](https://github.com/dotnet/dotnet/commits).\n\u003c/details\u003e\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dSystem.CommandLine\u0026package-manager\u003dnuget\u0026previous-version\u003d2.0.2\u0026new-version\u003d2.0.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "f9bf6cb7541a3b4acbb2413bdbcffb9983488d4c",
      "tree": "06df2951384aa4d2d53338917c1ce8d166130942",
      "parents": [
        "12fce233c9e99e8ba73edf318368216cdda3eeef"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Feb 09 10:09:41 2026 -0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Feb 09 10:09:41 2026 -0800"
      },
      "message": "chore: Bump Microsoft.SourceLink.GitHub from 8.0.0 to 10.0.102 (#259)\n\nUpdated [Microsoft.SourceLink.GitHub](https://github.com/dotnet/dotnet)\nfrom 8.0.0 to 10.0.102.\n\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\n_Sourced from [Microsoft.SourceLink.GitHub\u0027s\nreleases](https://github.com/dotnet/dotnet/releases)._\n\n## 10.0.102-sb1\n\nYou can build .NET 10.0 from the repository by cloning the release tag\n`v10.0.102-sb1` and following the build instructions in the [main\nREADME.md](https://github.com/dotnet/dotnet/blob/v10.0.102-sb1/README.md#building).\n\nAlternatively, you can build from the sources attached to this release\ndirectly.\nMore information on this process can be found in the [dotnet/dotnet\nrepository](https://github.com/dotnet/dotnet/blob/v10.0.102-sb1/README.md#building-from-released-sources).\n\nAttached are PGP signatures for the GitHub generated tarball and\nzipball. You can find the public key at https://dot.net/release-key-2023\n\n## 10.0.101\n\nYou can build .NET 10.0 from the repository by cloning the release tag\n`v10.0.101` and following the build instructions in the [main\nREADME.md](https://github.com/dotnet/dotnet/blob/v10.0.101/README.md#building).\n\nAlternatively, you can build from the sources attached to this release\ndirectly.\nMore information on this process can be found in the [dotnet/dotnet\nrepository](https://github.com/dotnet/dotnet/blob/v10.0.101/README.md#building-from-released-sources).\n\nAttached are PGP signatures for the GitHub generated tarball and\nzipball. You can find the public key at https://dot.net/release-key-2023\n\n## 10.0.100\n\nYou can build .NET 10.0 from the repository by cloning the release tag\n`v10.0.100` and following the build instructions in the [main\nREADME.md](https://github.com/dotnet/dotnet/blob/v10.0.100/README.md#building).\n\nAlternatively, you can build from the sources attached to this release\ndirectly.\nMore information on this process can be found in the [dotnet/dotnet\nrepository](https://github.com/dotnet/dotnet/blob/v10.0.100/README.md#building-from-released-sources).\n\nAttached are PGP signatures for the GitHub generated tarball and\nzipball. You can find the public key at https://dot.net/release-key-2023\n\nTo produce artifacts with the .NET 10 GA version strings, users must\npass the branding argument to the build: `--branding rtm`.\n\n## 10.0.100-rc.2.25502.107\n\nYou can build .NET 10.0 RC 2 from the repository by cloning the release\ntag `v10.0.100-rc.2.25502.107` and following the build instructions in\nthe [main\nREADME.md](https://github.com/dotnet/dotnet/blob/v10.0.100-rc.2.25502.107/README.md#building).\n\nAlternatively, you can build from the sources attached to this release\ndirectly.\nMore information on this process can be found in the [dotnet/dotnet\nrepository](https://github.com/dotnet/dotnet/blob/v10.0.100-rc.2.25502.107/README.md#building-from-released-sources).\n\nAttached are PGP signatures for the GitHub generated tarball and\nzipball. You can find the public key at https://dot.net/release-key-2023\n\nNote: GitHub automatically generates the \"Source code (tar.gz/zip)\"\narchives included in this release. Please download the official source\ncode from:\n-\n[dotnet-source-10.0.100-rc.2.25502.107.tar.gz](https://builds.dotnet.microsoft.com/dotnet/source-build/dotnet-source-10.0.100-rc.2.25502.107.tar.gz)\n-\n[dotnet-source-10.0.100-rc.2.25502.107.zip](https://builds.dotnet.microsoft.com/dotnet/source-build/dotnet-source-10.0.100-rc.2.25502.107.zip)\n\n## 10.0.100-rc.1.25451.107\n\n\u003c!-- This file is a template for a GitHub release notes post. --\u003e\n\u003c!-- The line prefixed by \u0027Title:\u0027 will be submitted as the title of the\nrelease notes, and the rest of the file will be submitted as the body.\n--\u003e\n\nYou can build .NET 10.0 RC 1 from the repository by cloning the release\ntag `v10.0.100-rc.1.25451.107` and following the build instructions in\nthe [main\nREADME.md](https://github.com/dotnet/dotnet/blob/v10.0.100-rc.1.25451.107/README.md#building).\n\nAlternatively, you can build from the sources attached to this release\ndirectly.\nMore information on this process can be found in the [dotnet/dotnet\nrepository](https://github.com/dotnet/dotnet/blob/v10.0.100-rc.1.25451.107/README.md#building-from-released-sources).\n\nAttached are PGP signatures for the GitHub generated tarball and\nzipball. You can find the public key at https://dot.net/release-key-2023\n\n## 10.0.100-preview.7.25380.108\n\n\u003c!-- This file is a template for a GitHub release notes post. --\u003e\n\u003c!-- The line prefixed by \u0027Title:\u0027 will be submitted as the title of the\nrelease notes, and the rest of the file will be submitted as the body.\n--\u003e\n\nYou can build .NET 10.0 Preview 7 from the repository by cloning the\nrelease tag `v10.0.100-preview.7.25380.108` and following the build\ninstructions in the [main\nREADME.md](https://github.com/dotnet/dotnet/blob/v10.0.100-preview.7.25380.108/README.md#building).\n\nAlternatively, you can build from the sources attached to this release\ndirectly.\nMore information on this process can be found in the [dotnet/dotnet\nrepository](https://github.com/dotnet/dotnet/blob/v10.0.100-preview.7.25380.108/README.md#building-from-released-sources).\n\nAttached are PGP signatures for the GitHub generated tarball and\nzipball. You can find the public key at https://dot.net/release-key-2023\n\n## 10.0.0-preview.6.25358.103\n\nYou can build .NET 10.0 Preview 6 from the repository by cloning the\nrelease tag `v10.0.0-preview.6.25358.103` and following the build\ninstructions in the [main\nREADME.md](https://github.com/dotnet/dotnet/blob/v10.0.0-preview.6.25358.103/README.md#building).\n\nAlternatively, you can build from the sources attached to this release\ndirectly.\nMore information on this process can be found in the [dotnet/dotnet\nrepository](https://github.com/dotnet/dotnet/blob/v10.0.0-preview.6.25358.103/README.md#building-from-released-sources).\n\nAttached are PGP signatures for the GitHub generated tarball and\nzipball. You can find the public key at https://dot.net/release-key-2023\n\n## 10.0.0-preview.5.25277.114\n\nYou can build .NET 10.0 Preview 5 from the repository by cloning the\nrelease tag `v10.0.0-preview.5.25277.114` and following the build\ninstructions in the [main\nREADME.md](https://github.com/dotnet/dotnet/blob/v10.0.0-preview.5.25277.114/README.md#building).\n\nAlternatively, you can build from the sources attached to this release\ndirectly.\nMore information on this process can be found in the [dotnet/dotnet\nrepository](https://github.com/dotnet/dotnet/blob/v10.0.0-preview.5.25277.114/README.md#building-from-released-sources).\n\nAttached are PGP signatures for the GitHub generated tarball and\nzipball. You can find the public key at https://dot.net/release-key-2023\n\n## 10.0.0-preview.4.25258.110\n\nYou can build .NET 10.0 Preview 4 from the repository by cloning the\nrelease tag `v10.0.0-preview.4.25258.110` and following the build\ninstructions in the [main\nREADME.md](https://github.com/dotnet/dotnet/blob/v10.0.0-preview.4.25258.110/README.md#building).\n\nAlternatively, you can build from the sources attached to this release\ndirectly.\nMore information on this process can be found in the [dotnet/dotnet\nrepository](https://github.com/dotnet/dotnet/blob/v10.0.0-preview.4.25258.110/README.md#building-from-released-sources).\n\nAttached are PGP signatures for the GitHub generated tarball and\nzipball. You can find the public key at https://dot.net/release-key-2023\n\n## 10.0.0-preview.3.25171.5\n\nYou can build .NET 10.0 Preview 3 from the repository by cloning the\nrelease tag `v10.0.0-preview.3.25171.5` and following the build\ninstructions in the [main\nREADME.md](https://github.com/dotnet/dotnet/blob/v10.0.0-preview.3.25171.5/README.md#building).\n\nAlternatively, you can build from the sources attached to this release\ndirectly.\nMore information on this process can be found in the [dotnet/dotnet\nrepository](https://github.com/dotnet/dotnet/blob/v10.0.0-preview.3.25171.5/README.md#building-from-released-sources).\n\nAttached are PGP signatures for the GitHub generated tarball and\nzipball. You can find the public key at https://dot.net/release-key-2023\n\n## 10.0.0-preview.2.25163.2\n\nYou can build .NET 10.0 Preview 2 from the repository by cloning the\nrelease tag `v10.0.0-preview.2.25163.2` and following the build\ninstructions in the [main\nREADME.md](https://github.com/dotnet/dotnet/blob/v10.0.0-preview.2.25163.2/README.md#building).\n\nAlternatively, you can build from the sources attached to this release\ndirectly.\nMore information on this process can be found in the [dotnet/dotnet\nrepository](https://github.com/dotnet/dotnet/blob/v10.0.0-preview.2.25163.2/README.md#building-from-released-sources).\n\nAttached are PGP signatures for the GitHub generated tarball and\nzipball. You can find the public key at https://dot.net/release-key-2023\n\n## 10.0.0-preview.1.25080.5\n\nYou can build .NET 10.0 Preview 1 from the repository by cloning the\nrelease tag `v10.0.0-preview.1.25080.5` and following the build\ninstructions in the [main\nREADME.md](https://github.com/dotnet/dotnet/blob/v10.0.0-preview.1.25080.5/README.md#building).\n\nAlternatively, you can build from the sources attached to this release\ndirectly.\nMore information on this process can be found in the [dotnet/dotnet\nrepository](https://github.com/dotnet/dotnet/blob/v10.0.0-preview.1.25080.5/README.md#building-from-released-sources).\n\nAttached are PGP signatures for the GitHub generated tarball and\nzipball. You can find the public key at https://dot.net/release-key-2023\n\n## 9.0.113\n\n\u003c!-- This file is a template for a GitHub release notes post. --\u003e\n\u003c!-- The line prefixed by \u0027Title:\u0027 will be submitted as the title of the\nrelease notes, and the rest of the file will be submitted as the body.\n--\u003e\n\nYou can build .NET 9.0 from the repository by cloning the release tag\n`v9.0.113` and following the build instructions in the [main\nREADME.md](https://github.com/dotnet/dotnet/blob/v9.0.113/README.md#building).\n\nAlternatively, you can build from the sources attached to this release\ndirectly.\nMore information on this process can be found in the [dotnet/dotnet\nrepository](https://github.com/dotnet/dotnet/blob/v9.0.113/README.md#building-from-released-sources).\n\nAttached are PGP signatures for the GitHub generated tarball and\nzipball. You can find the public key at https://dot.net/release-key-2023\n\n## 9.0.112\n\n\u003c!-- This file is a template for a GitHub release notes post. --\u003e\n\u003c!-- The line prefixed by \u0027Title:\u0027 will be submitted as the title of the\nrelease notes, and the rest of the file will be submitted as the body.\n--\u003e\n\nYou can build .NET 9.0 from the repository by cloning the release tag\n`v9.0.112` and following the build instructions in the [main\nREADME.md](https://github.com/dotnet/dotnet/blob/v9.0.112/README.md#building).\n\nAlternatively, you can build from the sources attached to this release\ndirectly.\nMore information on this process can be found in the [dotnet/dotnet\nrepository](https://github.com/dotnet/dotnet/blob/v9.0.112/README.md#building-from-released-sources).\n\nAttached are PGP signatures for the GitHub generated tarball and\nzipball. You can find the public key at https://dot.net/release-key-2023\n\n## 9.0.111\n\n\u003c!-- This file is a template for a GitHub release notes post. --\u003e\n\u003c!-- The line prefixed by \u0027Title:\u0027 will be submitted as the title of the\nrelease notes, and the rest of the file will be submitted as the body.\n--\u003e\n\nYou can build .NET 9.0 from the repository by cloning the release tag\n`v9.0.111` and following the build instructions in the [main\nREADME.md](https://github.com/dotnet/dotnet/blob/v9.0.111/README.md#building).\n\nAlternatively, you can build from the sources attached to this release\ndirectly.\nMore information on this process can be found in the [dotnet/dotnet\nrepository](https://github.com/dotnet/dotnet/blob/v9.0.111/README.md#building-from-released-sources).\n\nAttached are PGP signatures for the GitHub generated tarball and\nzipball. You can find the public key at https://dot.net/release-key-2023\n\n## 9.0.110\n\n\u003c!-- This file is a template for a GitHub release notes post. --\u003e\n\u003c!-- The line prefixed by \u0027Title:\u0027 will be submitted as the title of the\nrelease notes, and the rest of the file will be submitted as the body.\n--\u003e\n\nYou can build .NET 9.0 from the repository by cloning the release tag\n`v9.0.110` and following the build instructions in the [main\nREADME.md](https://github.com/dotnet/dotnet/blob/v9.0.110/README.md#building).\n\nAlternatively, you can build from the sources attached to this release\ndirectly.\nMore information on this process can be found in the [dotnet/dotnet\nrepository](https://github.com/dotnet/dotnet/blob/v9.0.110/README.md#building-from-released-sources).\n\nAttached are PGP signatures for the GitHub generated tarball and\nzipball. You can find the public key at https://dot.net/release-key-2023\n\n## 9.0.109\n\n\u003c!-- This file is a template for a GitHub release notes post. --\u003e\n\u003c!-- The line prefixed by \u0027Title:\u0027 will be submitted as the title of the\nrelease notes, and the rest of the file will be submitted as the body.\n--\u003e\n\nYou can build .NET 9.0 from the repository by cloning the release tag\n`v9.0.109` and following the build instructions in the [main\nREADME.md](https://github.com/dotnet/dotnet/blob/v9.0.109/README.md#building).\n\nAlternatively, you can build from the sources attached to this release\ndirectly.\nMore information on this process can be found in the [dotnet/dotnet\nrepository](https://github.com/dotnet/dotnet/blob/v9.0.109/README.md#building-from-released-sources).\n\nAttached are PGP signatures for the GitHub generated tarball and\nzipball. You can find the public key at https://dot.net/release-key-2023\n\n## 9.0.101\n\nYou can build .NET 9.0 from the repository by cloning the release tag\n`v9.0.101` and following the build instructions in the [main\nREADME.md](https://github.com/dotnet/dotnet/blob/v9.0.101/README.md#building).\n\nAlternatively, you can build from the sources attached to this release\ndirectly.\nMore information on this process can be found in the [dotnet/dotnet\nrepository](https://github.com/dotnet/dotnet/blob/v9.0.101/README.md#building-from-released-sources).\n\nAttached are PGP signatures for the GitHub generated tarball and\nzipball. You can find the public key at https://dot.net/release-key-2023\n\n## 9.0.7\n\nYou can build .NET 9.0 from the repository by cloning the release tag\n`v9.0.7` and following the build instructions in the [main\nREADME.md](https://github.com/dotnet/dotnet/blob/v9.0.7/README.md#building).\n\nAlternatively, you can build from the sources attached to this release\ndirectly.\nMore information on this process can be found in the [dotnet/dotnet\nrepository](https://github.com/dotnet/dotnet/blob/v9.0.7/README.md#building-from-released-sources).\n\nAttached are PGP signatures for the GitHub generated tarball and\nzipball. You can find the public key at https://dot.net/release-key-2023\n\n## 9.0.6\n\nYou can build .NET 9.0 from the repository by cloning the release tag\n`v9.0.6` and following the build instructions in the [main\nREADME.md](https://github.com/dotnet/dotnet/blob/v9.0.6/README.md#building).\n\nAlternatively, you can build from the sources attached to this release\ndirectly.\nMore information on this process can be found in the [dotnet/dotnet\nrepository](https://github.com/dotnet/dotnet/blob/v9.0.6/README.md#building-from-released-sources).\n\nAttached are PGP signatures for the GitHub generated tarball and\nzipball. You can find the public key at https://dot.net/release-key-2023\n\n## 9.0.5\n\nYou can build .NET 9.0 from the repository by cloning the release tag\n`v9.0.5` and following the build instructions in the [main\nREADME.md](https://github.com/dotnet/dotnet/blob/v9.0.5/README.md#building).\n\nAlternatively, you can build from the sources attached to this release\ndirectly.\nMore information on this process can be found in the [dotnet/dotnet\nrepository](https://github.com/dotnet/dotnet/blob/v9.0.5/README.md#building-from-released-sources).\n\nAttached are PGP signatures for the GitHub generated tarball and\nzipball. You can find the public key at https://dot.net/release-key-2023\n\n## 9.0.4\n\nYou can build .NET 9.0 from the repository by cloning the release tag\n`v9.0.4` and following the build instructions in the [main\nREADME.md](https://github.com/dotnet/dotnet/blob/v9.0.4/README.md#building).\n\nAlternatively, you can build from the sources attached to this release\ndirectly.\nMore information on this process can be found in the [dotnet/dotnet\nrepository](https://github.com/dotnet/dotnet/blob/v9.0.4/README.md#building-from-released-sources).\n\nAttached are PGP signatures for the GitHub generated tarball and\nzipball. You can find the public key at https://dot.net/release-key-2023\n\n## 9.0.3\n\nYou can build .NET 9.0 from the repository by cloning the release tag\n`v9.0.3` and following the build instructions in the [main\nREADME.md](https://github.com/dotnet/dotnet/blob/v9.0.3/README.md#building).\n\nAlternatively, you can build from the sources attached to this release\ndirectly.\nMore information on this process can be found in the [dotnet/dotnet\nrepository](https://github.com/dotnet/dotnet/blob/v9.0.3/README.md#building-from-released-sources).\n\nAttached are PGP signatures for the GitHub generated tarball and\nzipball. You can find the public key at https://dot.net/release-key-2023\n\n## 9.0.2\n\nYou can build .NET 9.0 from the repository by cloning the release tag\n`v9.0.2` and following the build instructions in the [main\nREADME.md](https://github.com/dotnet/dotnet/blob/v9.0.2/README.md#building).\n\nAlternatively, you can build from the sources attached to this release\ndirectly.\nMore information on this process can be found in the [dotnet/dotnet\nrepository](https://github.com/dotnet/dotnet/blob/v9.0.2/README.md#building-from-released-sources).\n\nAttached are PGP signatures for the GitHub generated tarball and\nzipball. You can find the public key at https://dot.net/release-key-2023\n\n## 9.0.1\n\nYou can build .NET 9.0 from the repository by cloning the release tag\n`v9.0.1` and following the build instructions in the [main\nREADME.md](https://github.com/dotnet/dotnet/blob/v9.0.1/README.md#building).\n\nAlternatively, you can build from the sources attached to this release\ndirectly.\nMore information on this process can be found in the [dotnet/dotnet\nrepository](https://github.com/dotnet/dotnet/blob/v9.0.1/README.md#building-from-released-sources).\n\nAttached are PGP signatures for the GitHub generated tarball and\nzipball. You can find the public key at https://dot.net/release-key-2023\n\n## 9.0.0\n\nYou can build .NET 9.0 from the repository by cloning the release tag\n`v9.0.0` and following the build instructions in the [main\nREADME.md](https://github.com/dotnet/dotnet/blob/v9.0.0/README.md#building).\n\nAlternatively, you can build from the sources attached to this release\ndirectly.\nMore information on this process can be found in the [dotnet/dotnet\nrepository](https://github.com/dotnet/dotnet/blob/v9.0.0/README.md#building-from-released-sources).\n\nAttached are PGP signatures for the GitHub generated tarball and\nzipball. You can find the public key at https://dot.net/release-key-2023\n\n## 9.0.0-rc.2.24473.5\n\nYou can build NET 9.0 RC2 from the repository by cloning the release tag\n`v9.0.0-rc.2.24473.5` and following the build instructions in the [main\nREADME.md](https://github.com/dotnet/dotnet/blob/v9.0.0-rc.2.24473.5/README.md#building).\n\nAlternatively, you can build from the sources attached to this release\ndirectly.\nMore information on this process can be found in the [dotnet/dotnet\nrepository](https://github.com/dotnet/dotnet/blob/v9.0.0-rc.2.24473.5/README.md#building-from-released-sources).\n\nAttached are PGP signatures for the GitHub generated tarball and\nzipball. You can find the public key at https://dot.net/release-key-2023\n\n## 9.0.0-rc.1.24431.7\n\nYou can build .NET 9.0 RC1 from the repository by cloning the release\ntag `v9.0.0-rc.1.24431.7` and following the build instructions in the\n[main\nREADME.md](https://github.com/dotnet/dotnet/blob/v9.0.0-rc.1.24431.7/README.md#building).\n\nAlternatively, you can build from the sources attached to this release\ndirectly.\nMore information on this process can be found in the [dotnet/dotnet\nrepository](https://github.com/dotnet/dotnet/blob/v9.0.0-rc.1.24431.7/README.md#building-from-released-sources).\n\nAttached are PGP signatures for the GitHub generated tarball and\nzipball. You can find the public key at https://dot.net/release-key-2023\n\n## 9.0.0-preview.7.24405.7\n\nYou can build .NET 9.0 Preview 7 from the repository by cloning the\nrelease tag `v9.0.0-preview.7.24405.7` and following the build\ninstructions in the [main\nREADME.md](https://github.com/dotnet/dotnet/blob/v9.0.0-preview.7.24405.7/README.md#building).\n\nAlternatively, you can build from the sources attached to this release\ndirectly.\nMore information on this process can be found in the [dotnet/dotnet\nrepository](https://github.com/dotnet/dotnet/blob/v9.0.0-preview.7.24405.7/README.md#building-from-released-sources).\n\nAttached are PGP signatures for the GitHub generated tarball and\nzipball. You can find the public key at https://dot.net/release-key-2023\n\n## 9.0.0-preview.6.24327.7\n\nYou can build .NET 9.0 Preview 6 from the repository by cloning the\nrelease tag `v9.0.0-preview.6.24327.7` and following the build\ninstructions in the [main\nREADME.md](https://github.com/dotnet/dotnet/blob/v9.0.0-preview.6.24327.7/README.md#building).\n\nAlternatively, you can build from the sources attached to this release\ndirectly.\nMore information on this process can be found in the [dotnet/dotnet\nrepository](https://github.com/dotnet/dotnet/blob/v9.0.0-preview.6.24327.7/README.md#building-from-released-sources).\n\nAttached are PGP signatures for the GitHub generated tarball and\nzipball. You can find the public key at https://dot.net/release-key-2023\n\n## 9.0.0-preview.5.24306.7\n\nYou can build .NET 9.0 Preview 5 from the repository by cloning the\nrelease tag `v9.0.0-preview.5.24306.7` and following the build\ninstructions in the [main\nREADME.md](https://github.com/dotnet/dotnet/blob/v9.0.0-preview.5.24306.7/README.md#building).\n\nAlternatively, you can build from the sources attached to this release\ndirectly.\nMore information on this process can be found in the [dotnet/dotnet\nrepository](https://github.com/dotnet/dotnet/blob/v9.0.0-preview.5.24306.7/README.md#building-from-released-sources).\n\nAttached are PGP signatures for the GitHub generated tarball and\nzipball. You can find the public key at https://dot.net/release-key-2023\n\n## 9.0.0-preview.4.24266.19\n\nYou can build .NET 9.0 Preview 4 from the repository by cloning the\nrelease tag `v9.0.0-preview.4.24266.19` and following the build\ninstructions in the [main\nREADME.md](https://github.com/dotnet/dotnet/blob/v9.0.0-preview.4.24266.19/README.md#building).\n\nAlternatively, you can build from the sources attached to this release\ndirectly.\nMore information on this process can be found in the [dotnet/dotnet\nrepository](https://github.com/dotnet/dotnet/blob/v9.0.0-preview.4.24266.19/README.md#building-from-released-sources).\n\nAttached are PGP signatures for the GitHub generated tarball and\nzipball. You can find the public key at https://dot.net/release-key-2023\n\n## 9.0.0-preview.3.24172.9\n\nYou can build .NET 9.0 Preview 3 from the repository by cloning the\nrelease tag `v9.0.0-preview.3.24172.9` and following the build\ninstructions in the [main\nREADME.md](https://github.com/dotnet/dotnet/blob/v9.0.0-preview.3.24172.9/README.md#building).\n\nAlternatively, you can build from the sources attached to this release\ndirectly.\nMore information on this process can be found in the [dotnet/dotnet\nrepository](https://github.com/dotnet/dotnet/blob/v9.0.0-preview.3.24172.9/README.md#building-from-released-sources).\n\nAttached are PGP signatures for the GitHub generated tarball and\nzipball. You can find the public key at https://dot.net/release-key-2023\n\n## 9.0.0-preview.2.24128.5\n\nYou can build .NET 9.0 Preview 2 from the repository by cloning the\nrelease tag `v9.0.0-preview.2.24128.5` and following the build\ninstructions in the [main\nREADME.md](https://github.com/dotnet/dotnet/blob/v9.0.0-preview.2.24128.5/README.md#building).\n\nAlternatively, you can build from the sources attached to this release\ndirectly.\nMore information on this process can be found in the [dotnet/dotnet\nrepository](https://github.com/dotnet/dotnet/blob/v9.0.0-preview.2.24128.5/README.md#building-from-released-sources).\n\nAttached are PGP signatures for the GitHub generated tarball and\nzipball. You can find the public key at https://dot.net/release-key-2023\n\n## 9.0.0-preview.1.24080.9\n\nYou can build .NET 9.0 Preview 1 from the repository by cloning the\nrelease tag `v9.0.0-preview.1.24080.9` and following the build\ninstructions in the [main\nREADME.md](https://github.com/dotnet/dotnet/blob/v9.0.0-preview.1.24080.9/README.md#building).\n\nAlternatively, you can build from the sources attached to this release\ndirectly.\nMore information on this process can be found in the [dotnet/dotnet\nrepository](https://github.com/dotnet/dotnet/blob/v9.0.0-preview.1.24080.9/README.md#building-from-released-sources).\n\nAttached are PGP signatures for the GitHub generated tarball and\nzipball. You can find the public key at https://dot.net/release-key-2023\n\n## 8.0.123\n\n\u003c!-- This file is a template for a GitHub release notes post. --\u003e\n\u003c!-- The line prefixed by \u0027Title:\u0027 will be submitted as the title of the\nrelease notes, and the rest of the file will be submitted as the body.\n--\u003e\n\nYou can build .NET 8.0 from the repository by cloning the release tag\n`v8.0.123` and following the build instructions in the [main\nREADME.md](https://github.com/dotnet/dotnet/blob/v8.0.123/README.md#building).\n\nAlternatively, you can build from the sources attached to this release\ndirectly.\nMore information on this process can be found in the [dotnet/dotnet\nrepository](https://github.com/dotnet/dotnet/blob/v8.0.123/README.md#building-from-released-sources).\n\nAttached are PGP signatures for the GitHub generated tarball and\nzipball. You can find the public key at https://dot.net/release-key-2023\n\n## 8.0.122\n\n\u003c!-- This file is a template for a GitHub release notes post. --\u003e\n\u003c!-- The line prefixed by \u0027Title:\u0027 will be submitted as the title of the\nrelease notes, and the rest of the file will be submitted as the body.\n--\u003e\n\nYou can build .NET 8.0 from the repository by cloning the release tag\n`v8.0.122` and following the build instructions in the [main\nREADME.md](https://github.com/dotnet/dotnet/blob/v8.0.122/README.md#building).\n\nAlternatively, you can build from the sources attached to this release\ndirectly.\nMore information on this process can be found in the [dotnet/dotnet\nrepository](https://github.com/dotnet/dotnet/blob/v8.0.122/README.md#building-from-released-sources).\n\nAttached are PGP signatures for the GitHub generated tarball and\nzipball. You can find the public key at https://dot.net/release-key-2023\n\n## 8.0.121\n\n\u003c!-- This file is a template for a GitHub release notes post. --\u003e\n\u003c!-- The line prefixed by \u0027Title:\u0027 will be submitted as the title of the\nrelease notes, and the rest of the file will be submitted as the body.\n--\u003e\n\nYou can build .NET 8.0 from the repository by cloning the release tag\n`v8.0.121` and following the build instructions in the [main\nREADME.md](https://github.com/dotnet/dotnet/blob/v8.0.121/README.md#building).\n\nAlternatively, you can build from the sources attached to this release\ndirectly.\nMore information on this process can be found in the [dotnet/dotnet\nrepository](https://github.com/dotnet/dotnet/blob/v8.0.121/README.md#building-from-released-sources).\n\nAttached are PGP signatures for the GitHub generated tarball and\nzipball. You can find the public key at https://dot.net/release-key-2023\n\n## 8.0.120\n\n\u003c!-- This file is a template for a GitHub release notes post. --\u003e\n\u003c!-- The line prefixed by \u0027Title:\u0027 will be submitted as the title of the\nrelease notes, and the rest of the file will be submitted as the body.\n--\u003e\n\nYou can build .NET 8.0 from the repository by cloning the release tag\n`v8.0.120` and following the build instructions in the [main\nREADME.md](https://github.com/dotnet/dotnet/blob/v8.0.120/README.md#building).\n\nAlternatively, you can build from the sources attached to this release\ndirectly.\nMore information on this process can be found in the [dotnet/dotnet\nrepository](https://github.com/dotnet/dotnet/blob/v8.0.120/README.md#building-from-released-sources).\n\nAttached are PGP signatures for the GitHub generated tarball and\nzipball. You can find the public key at https://dot.net/release-key-2023\n\n## 8.0.119\n\n\u003c!-- This file is a template for a GitHub release notes post. --\u003e\n\u003c!-- The line prefixed by \u0027Title:\u0027 will be submitted as the title of the\nrelease notes, and the rest of the file will be submitted as the body.\n--\u003e\n\nYou can build .NET 8.0 from the repository by cloning the release tag\n`v8.0.119` and following the build instructions in the [main\nREADME.md](https://github.com/dotnet/dotnet/blob/v8.0.119/README.md#building).\n\nAlternatively, you can build from the sources attached to this release\ndirectly.\nMore information on this process can be found in the [dotnet/dotnet\nrepository](https://github.com/dotnet/dotnet/blob/v8.0.119/README.md#building-from-released-sources).\n\nAttached are PGP signatures for the GitHub generated tarball and\nzipball. You can find the public key at https://dot.net/release-key-2023\n\n## 8.0.100-preview.1\n\n\n\n## 8.0.18\n\nYou can build .NET 8.0 from the repository by cloning the release tag\n`v8.0.18` and following the build instructions in the [main\nREADME.md](https://github.com/dotnet/dotnet/blob/v8.0.18/README.md#building).\n\nAlternatively, you can build from the sources attached to this release\ndirectly.\nMore information on this process can be found in the [dotnet/dotnet\nrepository](https://github.com/dotnet/dotnet/blob/v8.0.18/README.md#building-from-released-sources).\n\nAttached are PGP signatures for the GitHub generated tarball and\nzipball. You can find the public key at https://dot.net/release-key-2023\n\n## 8.0.17\n\nYou can build .NET 8.0 from the repository by cloning the release tag\n`v8.0.17` and following the build instructions in the [main\nREADME.md](https://github.com/dotnet/dotnet/blob/v8.0.17/README.md#building).\n\nAlternatively, you can build from the sources attached to this release\ndirectly.\nMore information on this process can be found in the [dotnet/dotnet\nrepository](https://github.com/dotnet/dotnet/blob/v8.0.17/README.md#building-from-released-sources).\n\nAttached are PGP signatures for the GitHub generated tarball and\nzipball. You can find the public key at https://dot.net/release-key-2023\n\n## 8.0.16\n\nYou can build .NET 8.0 from the repository by cloning the release tag\n`v8.0.16` and following the build instructions in the [main\nREADME.md](https://github.com/dotnet/dotnet/blob/v8.0.16/README.md#building).\n\nAlternatively, you can build from the sources attached to this release\ndirectly.\nMore information on this process can be found in the [dotnet/dotnet\nrepository](https://github.com/dotnet/dotnet/blob/v8.0.16/README.md#building-from-released-sources).\n\nAttached are PGP signatures for the GitHub generated tarball and\nzipball. You can find the public key at https://dot.net/release-key-2023\n\n## 8.0.15\n\nYou can build .NET 8.0 from the repository by cloning the release tag\n`v8.0.15` and following the build instructions in the [main\nREADME.md](https://github.com/dotnet/dotnet/blob/v8.0.15/README.md#building).\n\nAlternatively, you can build from the sources attached to this release\ndirectly.\nMore information on this process can be found in the [dotnet/dotnet\nrepository](https://github.com/dotnet/dotnet/blob/v8.0.15/README.md#building-from-released-sources).\n\nAttached are PGP signatures for the GitHub generated tarball and\nzipball. You can find the public key at https://dot.net/release-key-2023\n\n## 8.0.14\n\nYou can build .NET 8.0 from the repository by cloning the release tag\n`v8.0.14` and following the build instructions in the [main\nREADME.md](https://github.com/dotnet/dotnet/blob/v8.0.14/README.md#building).\n\nAlternatively, you can build from the sources attached to this release\ndirectly.\nMore information on this process can be found in the [dotnet/dotnet\nrepository](https://github.com/dotnet/dotnet/blob/v8.0.14/README.md#building-from-released-sources).\n\nAttached are PGP signatures for the GitHub generated tarball and\nzipball. You can find the public key at https://dot.net/release-key-2023\n\n## 8.0.13\n\nYou can build .NET 8.0 from the repository by cloning the release tag\n`v8.0.13` and following the build instructions in the [main\nREADME.md](https://github.com/dotnet/dotnet/blob/v8.0.13/README.md#building).\n\nAlternatively, you can build from the sources attached to this release\ndirectly.\nMore information on this process can be found in the [dotnet/dotnet\nrepository](https://github.com/dotnet/dotnet/blob/v8.0.13/README.md#building-from-released-sources).\n\nAttached are PGP signatures for the GitHub generated tarball and\nzipball. You can find the public key at https://dot.net/release-key-2023\n\n## 8.0.12\n\nYou can build .NET 8.0 from the repository by cloning the release tag\n`v8.0.12` and following the build instructions in the [main\nREADME.md](https://github.com/dotnet/dotnet/blob/v8.0.12/README.md#building).\n\nAlternatively, you can build from the sources attached to this release\ndirectly.\nMore information on this process can be found in the [dotnet/dotnet\nrepository](https://github.com/dotnet/dotnet/blob/v8.0.12/README.md#building-from-released-sources).\n\nAttached are PGP signatures for the GitHub generated tarball and\nzipball. You can find the public key at https://dot.net/release-key-2023\n\n## 8.0.11\n\nYou can build .NET 8.0 from the repository by cloning the release tag\n`v8.0.11` and following the build instructions in the [main\nREADME.md](https://github.com/dotnet/dotnet/blob/v8.0.11/README.md#building).\n\nAlternatively, you can build from the sources attached to this release\ndirectly.\nMore information on this process can be found in the [dotnet/dotnet\nrepository](https://github.com/dotnet/dotnet/blob/v8.0.11/README.md#building-from-released-sources).\n\nAttached are PGP signatures for the GitHub generated tarball and\nzipball. You can find the public key at https://dot.net/release-key-2023\n\n## 8.0.10\n\nYou can build .NET 8.0 from the repository by cloning the release tag\n`v8.0.10` and following the build instructions in the [main\nREADME.md](https://github.com/dotnet/dotnet/blob/v8.0.10/README.md#building).\n\nAlternatively, you can build from the sources attached to this release\ndirectly.\nMore information on this process can be found in the [dotnet/dotnet\nrepository](https://github.com/dotnet/dotnet/blob/v8.0.10/README.md#building-from-released-sources).\n\nAttached are PGP signatures for the GitHub generated tarball and\nzipball. You can find the public key at https://dot.net/release-key-2023\n\n## 8.0.8\n\nYou can build .NET 8.0 from the repository by cloning the release tag\n`v8.0.8` and following the build instructions in the [main\nREADME.md](https://github.com/dotnet/dotnet/blob/v8.0.8/README.md#building).\n\nAlternatively, you can build from the sources attached to this release\ndirectly.\nMore information on this process can be found in the [dotnet/dotnet\nrepository](https://github.com/dotnet/dotnet/blob/v8.0.8/README.md#building-from-released-sources).\n\nAttached are PGP signatures for the GitHub generated tarball and\nzipball. You can find the public key at https://dot.net/release-key-2023\n\n## 8.0.7\n\nYou can build .NET 8.0 from the repository by cloning the release tag\n`v8.0.7` and following the build instructions in the [main\nREADME.md](https://github.com/dotnet/dotnet/blob/v8.0.7/README.md#building).\n\nAlternatively, you can build from the sources attached to this release\ndirectly.\nMore information on this process can be found in the [dotnet/dotnet\nrepository](https://github.com/dotnet/dotnet/blob/v8.0.7/README.md#building-from-released-sources).\n\nAttached are PGP signatures for the GitHub generated tarball and\nzipball. You can find the public key at https://dot.net/release-key-2023\n\n## 8.0.6\n\nYou can build .NET 8.0 from the repository by cloning the release tag\n`v8.0.6` and following the build instructions in the [main\nREADME.md](https://github.com/dotnet/dotnet/blob/v8.0.6/README.md#building).\n\nAlternatively, you can build from the sources attached to this release\ndirectly.\nMore information on this process can be found in the [dotnet/dotnet\nrepository](https://github.com/dotnet/dotnet/blob/v8.0.6/README.md#building-from-released-sources).\n\nAttached are PGP signatures for the GitHub generated tarball and\nzipball. You can find the public key at https://dot.net/release-key-2023\n\n## 8.0.5\n\nYou can build .NET 8 from the repository by cloning the release tag\n`v8.0.5` and following the build instructions in the [main\nREADME.md](https://github.com/dotnet/dotnet/blob/v8.0.5/README.md#building).\n\nAlternatively, you can build from the sources attached to this release\ndirectly.\nMore information on this process can be found in the [dotnet/dotnet\nrepository](https://github.com/dotnet/dotnet/blob/v8.0.5/README.md#building-from-released-sources).\n\nAttached are PGP signatures for the GitHub generated tarball and\nzipball. You can find the public key at https://dot.net/release-key-2023\n\n## 8.0.4\n\nYou can build .NET 8.0 from the repository by cloning the release tag\n`v8.0.4` and following the build instructions in the [main\nREADME.md](https://github.com/dotnet/dotnet/blob/v8.0.4/README.md#building).\n\nAlternatively, you can build from the sources attached to this release\ndirectly.\nMore information on this process can be found in the [dotnet/dotnet\nrepository](https://github.com/dotnet/dotnet/blob/v8.0.4/README.md#building-from-released-sources).\n\nAttached are PGP signatures for the GitHub generated tarball and\nzipball. You can find the public key at https://dot.net/release-key-2023\n\n## 8.0.3\n\nYou can build .NET 8.0 from the repository by cloning the release tag\n`v8.0.3` and following the build instructions in the [main\nREADME.md](https://github.com/dotnet/dotnet/blob/v8.0.3/README.md#building).\n\nAlternatively, you can build from the sources attached to this release\ndirectly.\nMore information on this process can be found in the [dotnet/dotnet\nrepository](https://github.com/dotnet/dotnet/blob/v8.0.3/README.md#building-from-released-sources).\n\nAttached are PGP signatures for the GitHub generated tarball and\nzipball. You can find the public key at https://dot.net/release-key-2023\n\n## 8.0.2\n\nYou can build .NET 8.0 from the repository by cloning the release tag\n`v8.0.2` and following the build instructions in the [main\nREADME.md](https://github.com/dotnet/dotnet/blob/v8.0.2/README.md#building).\n\nAlternatively, you can build from the sources attached to this release\ndirectly.\nMore information on this process can be found in the [dotnet/dotnet\nrepository](https://github.com/dotnet/dotnet/blob/v8.0.2/README.md#building-from-released-sources).\n\nAttached are PGP signatures for the GitHub generated tarball and\nzipball. You can find the public key at https://dot.net/release-key-2023\n\n## 8.0.1\n\nYou can build .NET 8.0 from the repository by cloning the release tag\n`v8.0.1` and following the build instructions in the [main\nREADME.md](https://github.com/dotnet/dotnet/blob/v8.0.1/README.md#building).\n\nAlternatively, you can build from the sources attached to this release\ndirectly.\nMore information on this process can be found in the [dotnet/dotnet\nrepository](https://github.com/dotnet/dotnet/blob/v8.0.1/README.md#building-from-released-sources).\n\nAttached are PGP signatures for the GitHub generated tarball and\nzipball. You can find the public key at\nhttps://dotnet.microsoft.com/download/dotnet/release-key-2023.asc\n\n\nCommits viewable in [compare\nview](https://github.com/dotnet/dotnet/commits).\n\u003c/details\u003e\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dMicrosoft.SourceLink.GitHub\u0026package-manager\u003dnuget\u0026previous-version\u003d8.0.0\u0026new-version\u003d10.0.102)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "12fce233c9e99e8ba73edf318368216cdda3eeef",
      "tree": "ffa107c6c0256368e570e3e5d2f8dbc425147ff1",
      "parents": [
        "3d5daa06da147b2cf925f3ee5fb6584ae69ee2c7"
      ],
      "author": {
        "name": "Adam Reeve",
        "email": "adreeve@gmail.com",
        "time": "Tue Feb 03 02:33:33 2026 +0000"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Feb 03 11:33:33 2026 +0900"
      },
      "message": "chore: Remove pr_comment GitHub actions workflow (#255)\n\nThis uses the `pull_request_target` trigger, which goes against the [ASF\nGitHub Actions\nPolicy](https://infra.apache.org/github-actions-policy.html).\n\nFrom reading\nhttps://securitylab.github.com/resources/github-actions-preventing-pwn-requests/,\nmy understanding is that we\u0027re using `pull_request_target` correctly\nhere by not checking out untrusted code. We need to use this target\ninstead of `pull_request` to have permission to comment on the PR.\n\nThe ASF automated check seems too strict to me, but I\u0027m not sure it\u0027s\nworth the hassle to challenge this and we can work without this\nworkflow.\n\nMaybe as an alternative, we could add something to the pull request\ntemplate that\u0027s commented out by default but users can uncomment and\nedit if they\u0027re making documentation changes? I can add that in a\nfollow-up PR.\n\ncc @kou"
    },
    {
      "commit": "3d5daa06da147b2cf925f3ee5fb6584ae69ee2c7",
      "tree": "4f6693a72dd4e81c428f6b951b0b654c7442bfa2",
      "parents": [
        "56a9a5e53e9fa52224a678e7f2e504bb4399de58"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Feb 02 07:11:58 2026 -0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Feb 02 07:11:58 2026 -0800"
      },
      "message": "chore: Bump actions/cache from 5.0.2 to 5.0.3 (#252)\n\nBumps [actions/cache](https://github.com/actions/cache) from 5.0.2 to\n5.0.3.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/actions/cache/releases\"\u003eactions/cache\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.0.3\u003c/h2\u003e\n\u003ch2\u003eWhat\u0027s Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBump \u003ccode\u003e@actions/cache\u003c/code\u003e to v5.0.5 (Resolves: \u003ca\nhref\u003d\"https://github.com/actions/cache/security/dependabot/33\"\u003ehttps://github.com/actions/cache/security/dependabot/33\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBump \u003ccode\u003e@actions/core\u003c/code\u003e to v2.0.3\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca\nhref\u003d\"https://github.com/actions/cache/compare/v5...v5.0.3\"\u003ehttps://github.com/actions/cache/compare/v5...v5.0.3\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/actions/cache/blob/main/RELEASES.md\"\u003eactions/cache\u0027s\nchangelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eReleases\u003c/h1\u003e\n\u003ch2\u003eHow to prepare a release\u003c/h2\u003e\n\u003cblockquote\u003e\n\u003cp\u003e[!NOTE]\u003cbr /\u003e\nRelevant for maintainers with write access only.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003col\u003e\n\u003cli\u003eSwitch to a new branch from \u003ccode\u003emain\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eRun \u003ccode\u003enpm test\u003c/code\u003e to ensure all tests are passing.\u003c/li\u003e\n\u003cli\u003eUpdate the version in \u003ca\nhref\u003d\"https://github.com/actions/cache/blob/main/package.json\"\u003e\u003ccode\u003ehttps://github.com/actions/cache/blob/main/package.json\u003c/code\u003e\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eRun \u003ccode\u003enpm run build\u003c/code\u003e to update the compiled files.\u003c/li\u003e\n\u003cli\u003eUpdate this \u003ca\nhref\u003d\"https://github.com/actions/cache/blob/main/RELEASES.md\"\u003e\u003ccode\u003ehttps://github.com/actions/cache/blob/main/RELEASES.md\u003c/code\u003e\u003c/a\u003e\nwith the new version and changes in the \u003ccode\u003e## Changelog\u003c/code\u003e\nsection.\u003c/li\u003e\n\u003cli\u003eRun \u003ccode\u003elicensed cache\u003c/code\u003e to update the license report.\u003c/li\u003e\n\u003cli\u003eRun \u003ccode\u003elicensed status\u003c/code\u003e and resolve any warnings by\nupdating the \u003ca\nhref\u003d\"https://github.com/actions/cache/blob/main/.licensed.yml\"\u003e\u003ccode\u003ehttps://github.com/actions/cache/blob/main/.licensed.yml\u003c/code\u003e\u003c/a\u003e\nfile with the exceptions.\u003c/li\u003e\n\u003cli\u003eCommit your changes and push your branch upstream.\u003c/li\u003e\n\u003cli\u003eOpen a pull request against \u003ccode\u003emain\u003c/code\u003e and get it reviewed\nand merged.\u003c/li\u003e\n\u003cli\u003eDraft a new release \u003ca\nhref\u003d\"https://github.com/actions/cache/releases\"\u003ehttps://github.com/actions/cache/releases\u003c/a\u003e\nuse the same version number used in \u003ccode\u003epackage.json\u003c/code\u003e\n\u003col\u003e\n\u003cli\u003eCreate a new tag with the version number.\u003c/li\u003e\n\u003cli\u003eAuto generate release notes and update them to match the changes you\nmade in \u003ccode\u003eRELEASES.md\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eToggle the set as the latest release option.\u003c/li\u003e\n\u003cli\u003ePublish the release.\u003c/li\u003e\n\u003c/ol\u003e\n\u003c/li\u003e\n\u003cli\u003eNavigate to \u003ca\nhref\u003d\"https://github.com/actions/cache/actions/workflows/release-new-action-version.yml\"\u003ehttps://github.com/actions/cache/actions/workflows/release-new-action-version.yml\u003c/a\u003e\n\u003col\u003e\n\u003cli\u003eThere should be a workflow run queued with the same version\nnumber.\u003c/li\u003e\n\u003cli\u003eApprove the run to publish the new version and update the major tags\nfor this action.\u003c/li\u003e\n\u003c/ol\u003e\n\u003c/li\u003e\n\u003c/ol\u003e\n\u003ch2\u003eChangelog\u003c/h2\u003e\n\u003ch3\u003e5.0.3\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBump \u003ccode\u003e@actions/cache\u003c/code\u003e to v5.0.5 (Resolves: \u003ca\nhref\u003d\"https://github.com/actions/cache/security/dependabot/33\"\u003ehttps://github.com/actions/cache/security/dependabot/33\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBump \u003ccode\u003e@actions/core\u003c/code\u003e to v2.0.3\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e5.0.2\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBump \u003ccode\u003e@actions/cache\u003c/code\u003e to v5.0.3 \u003ca\nhref\u003d\"https://redirect.github.com/actions/cache/pull/1692\"\u003e#1692\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e5.0.1\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate \u003ccode\u003e@azure/storage-blob\u003c/code\u003e to \u003ccode\u003e^12.29.1\u003c/code\u003e via\n\u003ccode\u003e@actions/cache@5.0.1\u003c/code\u003e \u003ca\nhref\u003d\"https://redirect.github.com/actions/cache/pull/1685\"\u003e#1685\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e5.0.0\u003c/h3\u003e\n\u003cblockquote\u003e\n\u003cp\u003e[!IMPORTANT]\n\u003ccode\u003eactions/cache@v5\u003c/code\u003e runs on the Node.js 24 runtime and\nrequires a minimum Actions Runner version of \u003ccode\u003e2.327.1\u003c/code\u003e.\nIf you are using self-hosted runners, ensure they are updated before\nupgrading.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003ch3\u003e4.3.0\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBump \u003ccode\u003e@actions/cache\u003c/code\u003e to \u003ca\nhref\u003d\"https://redirect.github.com/actions/toolkit/pull/2132\"\u003ev4.1.0\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/cache/commit/cdf6c1fa76f9f475f3d7449005a359c84ca0f306\"\u003e\u003ccode\u003ecdf6c1f\u003c/code\u003e\u003c/a\u003e\nMerge pull request \u003ca\nhref\u003d\"https://redirect.github.com/actions/cache/issues/1695\"\u003e#1695\u003c/a\u003e\nfrom actions/Link-/prepare-5.0.3\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/cache/commit/a1bee22673bee4afb9ce4e0a1dc3da1c44060b7d\"\u003e\u003ccode\u003ea1bee22\u003c/code\u003e\u003c/a\u003e\nAdd review for the \u003ccode\u003e@​actions/http-client\u003c/code\u003e license\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/cache/commit/46957638dc5c5ff0c34c0143f443c07d3a7c769f\"\u003e\u003ccode\u003e4695763\u003c/code\u003e\u003c/a\u003e\nAdd licensed output\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/cache/commit/dc73bb9f7bf74a733c05ccd2edfd1f2ac9e5f502\"\u003e\u003ccode\u003edc73bb9\u003c/code\u003e\u003c/a\u003e\nUpgrade dependencies and address security warnings\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/cache/commit/345d5c2f761565bace4b6da356737147e9041e3a\"\u003e\u003ccode\u003e345d5c2\u003c/code\u003e\u003c/a\u003e\nAdd 5.0.3 builds\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca\nhref\u003d\"https://github.com/actions/cache/compare/8b402f58fbc84540c8b491a91e594a4576fec3d7...cdf6c1fa76f9f475f3d7449005a359c84ca0f306\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dactions/cache\u0026package-manager\u003dgithub_actions\u0026previous-version\u003d5.0.2\u0026new-version\u003d5.0.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after\nyour CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge\nand block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating\nit. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "56a9a5e53e9fa52224a678e7f2e504bb4399de58",
      "tree": "fdcc417e562fddc75ec07b425ab57e5a5f307033",
      "parents": [
        "70ab46691df24225e2407ad3cc0d22fd534eb18b"
      ],
      "author": {
        "name": "Joshua Klein",
        "email": "mobiusklein@gmail.com",
        "time": "Mon Feb 02 10:10:53 2026 -0500"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Feb 02 07:10:53 2026 -0800"
      },
      "message": "Use unsigned long integers for computing bit-length of fixed-width types via the CData ABI (#251)\n\n## What\u0027s Changed\n\nUses unsigned 64-bit integers to compute the intermediate bit length of\nan array to avoid arithmetic overflow.\n\nI could factorize this expression differently to avoid the casts, but I\ndidn\u0027t think this was a sufficiently heavy code path that it\u0027d need more\nattention.\n\nCloses #250 .\n\n---------\n\nCo-authored-by: Adam Reeve \u003cadreeve@gmail.com\u003e"
    },
    {
      "commit": "70ab46691df24225e2407ad3cc0d22fd534eb18b",
      "tree": "0116f7fd3d2b5074ac66ff6006371c9a3e327ab4",
      "parents": [
        "7cf956d3a911c697872e6517fb1a1d72ebdd1f39"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Jan 26 08:24:12 2026 -0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Jan 26 08:24:12 2026 -0800"
      },
      "message": "chore: Bump actions/setup-python from 6.1.0 to 6.2.0 (#249)\n\nBumps [actions/setup-python](https://github.com/actions/setup-python)\nfrom 6.1.0 to 6.2.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/actions/setup-python/releases\"\u003eactions/setup-python\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev6.2.0\u003c/h2\u003e\n\u003ch2\u003eWhat\u0027s Changed\u003c/h2\u003e\n\u003ch3\u003eDependency Upgrades\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade dependencies to Node 24 compatible versions by \u003ca\nhref\u003d\"https://github.com/salmanmkc\"\u003e\u003ccode\u003e@​salmanmkc\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-python/pull/1259\"\u003eactions/setup-python#1259\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpgrade urllib3 from 2.5.0 to 2.6.3 in \u003ccode\u003e/__tests__/data\u003c/code\u003e\nby \u003ca href\u003d\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-python/pull/1253\"\u003eactions/setup-python#1253\u003c/a\u003e\nand \u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-python/pull/1264\"\u003eactions/setup-python#1264\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca\nhref\u003d\"https://github.com/actions/setup-python/compare/v6...v6.2.0\"\u003ehttps://github.com/actions/setup-python/compare/v6...v6.2.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/setup-python/commit/a309ff8b426b58ec0e2a45f0f869d46889d02405\"\u003e\u003ccode\u003ea309ff8\u003c/code\u003e\u003c/a\u003e\nBump urllib3 from 2.6.0 to 2.6.3 in /\u003cstrong\u003etests\u003c/strong\u003e/data (\u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-python/issues/1264\"\u003e#1264\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/setup-python/commit/bfe8cc55a7890e3d6672eda6460ef37bfcc70755\"\u003e\u003ccode\u003ebfe8cc5\u003c/code\u003e\u003c/a\u003e\nUpgrade \u003ca href\u003d\"https://github.com/actions\"\u003e\u003ccode\u003e@​actions\u003c/code\u003e\u003c/a\u003e\ndependencies to Node 24 compatible versions (\u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-python/issues/1259\"\u003e#1259\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/setup-python/commit/4f41a90a1f38628c7ccc608d05fbafe701bc20ae\"\u003e\u003ccode\u003e4f41a90\u003c/code\u003e\u003c/a\u003e\nBump urllib3 from 2.5.0 to 2.6.0 in /\u003cstrong\u003etests\u003c/strong\u003e/data (\u003ca\nhref\u003d\"https://redirect.github.com/actions/setup-python/issues/1253\"\u003e#1253\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca\nhref\u003d\"https://github.com/actions/setup-python/compare/83679a892e2d95755f2dac6acb0bfd1e9ac5d548...a309ff8b426b58ec0e2a45f0f869d46889d02405\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dactions/setup-python\u0026package-manager\u003dgithub_actions\u0026previous-version\u003d6.1.0\u0026new-version\u003d6.2.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after\nyour CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge\nand block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating\nit. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "7cf956d3a911c697872e6517fb1a1d72ebdd1f39",
      "tree": "6c63fdc5e6a2cc1cbe2a607be393daa6e8fd41a8",
      "parents": [
        "866ed8a9cf518ccb85ee479f947a361f1ca91041"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Jan 26 07:00:48 2026 -0800"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Jan 26 07:00:48 2026 -0800"
      },
      "message": "chore: Bump actions/checkout from 6.0.1 to 6.0.2 (#248)\n\nBumps [actions/checkout](https://github.com/actions/checkout) from 6.0.1\nto 6.0.2.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/actions/checkout/releases\"\u003eactions/checkout\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev6.0.2\u003c/h2\u003e\n\u003ch2\u003eWhat\u0027s Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID\nis set by \u003ca\nhref\u003d\"https://github.com/TingluoHuang\"\u003e\u003ccode\u003e@​TingluoHuang\u003c/code\u003e\u003c/a\u003e\nin \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2355\"\u003eactions/checkout#2355\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix tag handling: preserve annotations and explicit fetch-tags by \u003ca\nhref\u003d\"https://github.com/ericsciple\"\u003e\u003ccode\u003e@​ericsciple\u003c/code\u003e\u003c/a\u003e in \u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/pull/2356\"\u003eactions/checkout#2356\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca\nhref\u003d\"https://github.com/actions/checkout/compare/v6.0.1...v6.0.2\"\u003ehttps://github.com/actions/checkout/compare/v6.0.1...v6.0.2\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/checkout/commit/de0fac2e4500dabe0009e67214ff5f5447ce83dd\"\u003e\u003ccode\u003ede0fac2\u003c/code\u003e\u003c/a\u003e\nFix tag handling: preserve annotations and explicit fetch-tags (\u003ca\nhref\u003d\"https://redirect.github.com/actions/checkout/issues/2356\"\u003e#2356\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/actions/checkout/commit/064fe7f3312418007dea2b49a19844a9ee378f49\"\u003e\u003ccode\u003e064fe7f\u003c/code\u003e\u003c/a\u003e\nAdd orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is\nset (...\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca\nhref\u003d\"https://github.com/actions/checkout/compare/v6.0.1...v6.0.2\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dactions/checkout\u0026package-manager\u003dgithub_actions\u0026previous-version\u003d6.0.1\u0026new-version\u003d6.0.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after\nyour CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge\nand block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating\nit. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop\nDependabot creating any more for this major version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop\nDependabot creating any more for this minor version (unless you reopen\nthe PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop\nDependabot creating any more for this dependency (unless you reopen the\nPR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    }
  ],
  "next": "866ed8a9cf518ccb85ee479f947a361f1ca91041"
}