Skip to content

Update dependency Microsoft.NET.Test.Sdk to v18 - #77

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/major-vstest-monorepo
Open

renovate[bot] wants to merge 1 commit into
mainfrom
renovate/major-vstest-monorepo

Conversation

@renovate

@renovate renovate Bot commented Jun 12, 2026 •

Copy link
Copy Markdown
Contributor

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
Microsoft.NET.Test.Sdk 17.13.0 → 18.12.0 age confidence

Release Notes

microsoft/vstest (Microsoft.NET.Test.Sdk)

v18.12.0

Security fix

This release includes the fix for CVE-2026-105544, an elevation of privilege vulnerability in the VSTest artifact post-processor. The post-processor could consume a forged executionComplete.json written by another local user, and then run attacker-controlled output handling.

Affected: Microsoft.TestPlatform.CLI 18.11.0 and earlier. Every version from 18.11.1 on is fixed, including 18.12.0.

Microsoft.TestPlatform.CLI is the VSTest build that we ship into the .NET SDK. The recommended way to get this fix is to update your .NET SDK to the latest patched version, see the advisory for the SDK versions.

The fix is also released in the Microsoft.TestPlatform.CLI package, for completeness. That package is rarely used directly. It is not a dependency of Microsoft.NET.Test.Sdk or Microsoft.TestPlatform, so those packages do not bring it in.

Details: #​16654 and dotnet/announcements#517

Using custom Docker images or Nano Server? See #​16652

What's Changed

Full Changelog: microsoft/vstest@v18.11.0...v18.12.0

v18.11.1

Security fix

This release fixes CVE-2026-105544, an elevation of privilege vulnerability in the VSTest artifact post-processor. The post-processor could consume a forged executionComplete.json written by another local user, and then run attacker-controlled output handling.

Affected: Microsoft.TestPlatform.CLI 18.11.0.
Fixed in: Microsoft.TestPlatform.CLI 18.11.1.

Microsoft.TestPlatform.CLI is the VSTest build that we ship into the .NET SDK. The recommended way to get this fix is to update your .NET SDK to the latest patched version, see the advisory for the SDK versions.

The fix is also released in the Microsoft.TestPlatform.CLI package, for completeness. That package is rarely used directly. It is not a dependency of Microsoft.NET.Test.Sdk or Microsoft.TestPlatform, so those packages do not bring it in.

Details: #​16654 and dotnet/announcements#517

Using custom Docker images or Nano Server? See #​16652

What's Changed

  • Security fix for CVE-2026-105544, see #​16654
  • Ship Microsoft.Diagnostics.NETCore.Client in Microsoft.TestPlatform and Portable packages by @​nohwnd in #​16632
  • Fix localized resource paths in CLI source-build packages by @​nohwnd in #​16643

Full Changelog: microsoft/vstest@v18.11.0...v18.11.1

v18.11.0

What's Changed

New Contributors

Full Changelog: microsoft/vstest@v18.10.1...v18.11.0

v18.10.2

Security fix

This release fixes CVE-2026-105544, an elevation of privilege vulnerability in the VSTest artifact post-processor. The post-processor could consume a forged executionComplete.json written by another local user, and then run attacker-controlled output handling.

Affected: Microsoft.TestPlatform.CLI 18.10.0 and 18.10.1.
Fixed in: Microsoft.TestPlatform.CLI 18.10.2.

Microsoft.TestPlatform.CLI is the VSTest build that we ship into the .NET SDK. The recommended way to get this fix is to update your .NET SDK to the latest patched version, see the advisory for the SDK versions.

The fix is also released in the Microsoft.TestPlatform.CLI package, for completeness. That package is rarely used directly. It is not a dependency of Microsoft.NET.Test.Sdk or Microsoft.TestPlatform, so those packages do not bring it in.

Details: #​16654 and dotnet/announcements#517

Using custom Docker images or Nano Server? See #​16652

What's Changed

  • Security fix for CVE-2026-105544, see #​16654

Full Changelog: microsoft/vstest@v18.10.1...v18.10.2

v18.10.1

What's Changed

Full Changelog: microsoft/vstest@v18.10.0...v18.10.1

v18.10.0

What's Changed

Full Changelog: microsoft/vstest@v18.9.0...v18.10.0

v18.9.0

What's Changed

  • Fix tilde/exclamation characters corrupted in TerminalLogger test output by @​nohwnd in #​16046
  • Make TranslationLayer Native AOT-compatible by @​drewnoakes in #​16045
  • Guard GenerateProgramFile target against UseWinUI/UseUwpTools evaluation order by @​nohwnd in #​16072
  • Add RequestingAssembly to AssemblyResolveEventArgs for binary compat by @​nohwnd in #​16076
  • Remove stale Microsoft.Extensions.FileSystemGlobbing binding redirect from testhost.x86 and datacollector by @​Evangelink in #​16082
  • Fix TRX attachment paths when LogFileName contains a subdirectory by @​nohwnd in #​15791
  • Fix missing dumps for .NET Framework child processes in NetClientHangDumper by @​nohwnd in #​16098
  • Fix data collection channels to use negotiated protocol version instead of V1 by @​nohwnd in #​16096
  • Fix race condition in BlameCollector: skip hang dump when testhost hasn't launched yet by @​nohwnd in #​16065
  • Replace TestSDKAutoGeneratedCode with ExcludeFromCodeCoverage in auto-generated Program files by @​nohwnd in #​16101
  • Include testhost process path in crash error messages by @​nohwnd in #​16108
  • Fix DataDriven test results being double-counted in TRX logger totals by @​nohwnd in #​15766
  • Fix datacollector crash visibility: replace Assert with throwable exceptions by @​nohwnd in #​16048
  • Add TreatErrorMessagesAsWarnings parameter to TRX logger by @​nohwnd in #​16106
  • Wait for testhost stderr to drain before reading its crash output by @​nohwnd in #​16128
  • Handle runtimeconfig.dev.json without additionalProbingPaths by @​tmat in #​16166
  • Suggest Microsoft.NET.Test.Sdk when a managed test project brings no testhost by @​nohwnd in #​16169
  • Fix x86 testhost loading mismatched x64 hostfxr (0x800700C1) when run via vstest.console.exe directly (#​16151) by @​azat-msft in #​16156
  • Preserve the real exception (type + stack trace) when a test run aborts in BaseRunTests by @​nohwnd in #​16167

New Contributors

Full Changelog: microsoft/vstest@v18.8.0...v18.9.0

v18.8.1

What's Changed

  • Fix protocol negotiation timeout when STJ reflection is disabled (18.8.1) by @​nohwnd in #​16281

Full Changelog: microsoft/vstest@v18.8.0...v18.8.1

v18.8.0

What's Changed

Full Changelog: microsoft/vstest@v18.7.0...v18.8.0

v18.7.1

Security fix

This release fixes CVE-2026-105544, an elevation of privilege vulnerability in the VSTest artifact post-processor. The post-processor could consume a forged executionComplete.json written by another local user, and then run attacker-controlled output handling.

Affected: Microsoft.TestPlatform.CLI 18.7.0.
Fixed in: Microsoft.TestPlatform.CLI 18.7.1.

Microsoft.TestPlatform.CLI is the VSTest build that we ship into the .NET SDK. The recommended way to get this fix is to update your .NET SDK to the latest patched version, see the advisory for the SDK versions.

The fix is also released in the Microsoft.TestPlatform.CLI package, for completeness. That package is rarely used directly. It is not a dependency of Microsoft.NET.Test.Sdk or Microsoft.TestPlatform, so those packages do not bring it in.

Details: #​16654 and dotnet/announcements#517

Using custom Docker images or Nano Server? See #​16652

What's Changed

  • Security fix for CVE-2026-105544, see #​16654

Full Changelog: microsoft/vstest@v18.7.0...v18.7.1

v18.7.0

What's Changed

New Contributors

Full Changelog: microsoft/vstest@v18.6.0...v18.7.0

v18.6.0

What's Changed
Changes to tests and infra

Full Changelog: microsoft/vstest@v18.5.1...v18.6.0

v18.5.1

What's Changed

Full Changelog: microsoft/vstest@v18.5.0...v18.5.1

v18.5.0

⚠️ Unlisted on Nuget, because of #​15718

What's Changed

Full Changelog: microsoft/vstest@v18.4.0...v18.5.0

v18.4.0

What's Changed

New Contributors

Full Changelog: microsoft/vstest@v18.3.0...v18.4.0

v18.3.0

What's Changed

Internal fixes and updates

New Contributors

v18.0.2

Security fix

This release fixes CVE-2026-105544, an elevation of privilege vulnerability in the VSTest artifact post-processor. The post-processor could consume a forged executionComplete.json written by another local user, and then run attacker-controlled output handling.

Affected: Microsoft.TestPlatform.CLI 18.0.0 and 18.0.1.
Fixed in: Microsoft.TestPlatform.CLI 18.0.2.

Microsoft.TestPlatform.CLI is the VSTest build that we ship into the .NET SDK. The recommended way to get this fix is to update your .NET SDK to the latest patched version, see the advisory for the SDK versions.

The fix is also released in the Microsoft.TestPlatform.CLI package, for completeness. That package is rarely used directly. It is not a dependency of Microsoft.NET.Test.Sdk or Microsoft.TestPlatform, so those packages do not bring it in.

Details: #​16654 and dotnet/announcements#517

Using custom Docker images or Nano Server? See #​16652

What's Changed

[!IMPORTANT]
✂ PR body was truncated to here.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate

renovate Bot commented Jun 12, 2026

Copy link
Copy Markdown
Contributor Author

Branch automerge failure

This PR was configured for branch automerge. However, this is not possible, so it has been raised as a PR instead.


  • Branch has one or more failed status checks

@renovate
renovate Bot force-pushed the renovate/major-vstest-monorepo branch 2 times, most recently from 0ea8f15 to c953f13 Compare June 19, 2026 04:37
@renovate renovate Bot changed the title Update vstest monorepo to v18 Update vstest monorepo (major) Jun 22, 2026
@renovate
renovate Bot force-pushed the renovate/major-vstest-monorepo branch from c953f13 to 9aa936f Compare June 23, 2026 11:57
@renovate renovate Bot changed the title Update vstest monorepo (major) Update dependency Microsoft.NET.Test.Sdk to v18 Jun 25, 2026
@renovate
renovate Bot force-pushed the renovate/major-vstest-monorepo branch 3 times, most recently from 643cdb5 to 090688b Compare July 16, 2026 09:14
@renovate
renovate Bot force-pushed the renovate/major-vstest-monorepo branch 2 times, most recently from 275c9d0 to a4f4b5f Compare August 15, 2026 06:14
@renovate renovate Bot changed the title Update dependency Microsoft.NET.Test.Sdk to v18 Update dependency Microsoft.NET.Test.Sdk to v18 - autoclosed Aug 31, 2026
@renovate renovate Bot closed this Aug 31, 2026
@renovate
renovate Bot deleted the renovate/major-vstest-monorepo branch August 31, 2026 06:01
@renovate renovate Bot changed the title Update dependency Microsoft.NET.Test.Sdk to v18 - autoclosed Update dependency Microsoft.NET.Test.Sdk to v18 Aug 31, 2026
@renovate renovate Bot reopened this Aug 31, 2026
@renovate
renovate Bot force-pushed the renovate/major-vstest-monorepo branch 2 times, most recently from a4f4b5f to 9702efb Compare August 31, 2026 14:50
@renovate
renovate Bot force-pushed the renovate/major-vstest-monorepo branch 2 times, most recently from c426941 to 4f5e334 Compare September 15, 2026 13:35
@renovate
renovate Bot force-pushed the renovate/major-vstest-monorepo branch 2 times, most recently from b045af7 to 40a5f19 Compare October 13, 2026 14:06
@renovate
renovate Bot force-pushed the renovate/major-vstest-monorepo branch from 40a5f19 to 4ac1396 Compare November 10, 2026 21:07
@renovate
renovate Bot force-pushed the renovate/major-vstest-monorepo branch from 4ac1396 to be81fb4 Compare November 11, 2026 22:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants