Skip to content

nuget: Bump the nuget-minor-patch group with 6 updates - #4

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/nuget/CHDMounter.Tests/nuget-minor-patch-766a8ee787
Open

nuget: Bump the nuget-minor-patch group with 6 updates#4
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/nuget/CHDMounter.Tests/nuget-minor-patch-766a8ee787

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 30, 2026

Copy link
Copy Markdown

Updated CHDSharp from 1.4.3 to 1.6.0.

Release notes

Sourced from CHDSharp's releases.

1.6.0

CHDSharp v1.6.0 - What's New

Released: 2026-10-29 - Full changelog - NuGet

CHDSharp v1.6.0 is a reliability and supply-chain release: read-ahead teardown no longer blocks on
in-flight I/O, truncated CD sources report exactly where the layout ran out, and the repository
gained a full CI gate with CodeQL, Dependency Review, OpenSSF Scorecard, Dependabot, NuGet audit,
SHA-pinned actions and provenance-attested release assets.

Download (CLI)

Platform Bundle
Windows x64 CHDSharp_win-x64_v1.6.0.zip
Windows ARM64 CHDSharp_win-arm64_v1.6.0.zip
Linux x64 CHDSharp_linux-x64_v1.6.0.zip
Linux ARM64 CHDSharp_linux-arm64_v1.6.0.zip
macOS Intel CHDSharp_osx-x64_v1.6.0.zip
macOS Apple Silicon CHDSharp_osx-arm64_v1.6.0.zip

Every bundle contains a framework-dependent single-file CHDSharp / CHDSharp.exe
build (the .NET runtime is not embedded) plus LICENSE.txt, README.md, README.txt
and this document. The .NET 10 runtime
is required.

Fixed: read-ahead disposal no longer blocks or leaks permits

ChdFile.Dispose() and ConfigureReadAhead(0) used to wait for every in-flight read-ahead read.
A stream that ignored cancellation could stall teardown indefinitely. The manager now cancels,
returns immediately, and lets the last background task dispose its semaphore and token source.
In-flight hunks are deduplicated, so two tasks can no longer race to cache the same hunk and leak a
permit. Shutdown cancellation is no longer logged as a decompression failure (important because
Warning+ events are forwarded to the CLI bug-report sink).

Fixed: truncated CD sources are diagnosable

A short read while encoding a CD now reports the track, frame within the track, logical frame,
source offset (hex and decimal), sector size, bytes needed/read and the file length. Split-pregap
reads name the next track's file only when that file was actually used.

Full CI and security (new in v1.6.0)

  • CI gate - three-OS build/test across .NET 8/9/10, InspectCode, NuGet packaging, merged
    coverage, a Jekyll docs build and a quick chdman parity battle.
  • CodeQL for C# and GitHub Actions, Dependency Review on pull requests, and
    OpenSSF Scorecard results published to code scanning.
    ... (truncated)

1.5.2

CHDSharp v1.5.2 - What's New

Released: 2026-10-21 - Full changelog - NuGet

CHDSharp v1.5.2 rolls up the v1.5.1 cue-layout parity fixes and adds a repo-wide code-quality pass plus fully automated wiki and
documentation-site deployment.

Download (CLI)

Platform Bundle
Windows x64 CHDSharp_win-x64_v1.5.2.zip
Windows ARM64 CHDSharp_win-arm64_v1.5.2.zip
Linux x64 CHDSharp_linux-x64_v1.5.2.zip
Linux ARM64 CHDSharp_linux-arm64_v1.5.2.zip
macOS Intel CHDSharp_osx-x64_v1.5.2.zip
macOS Apple Silicon CHDSharp_osx-arm64_v1.5.2.zip

Every bundle contains a framework-dependent single-file CHDSharp / CHDSharp.exe
build (the .NET runtime is not embedded) plus LICENSE.txt, README.md, README.txt
and this document. The .NET 10 runtime
is required.

Fixed: REM LEAD-OUT at or before the session's last track

The parser compared the track's frame count with leadOut - index00 using two int values.
MAME compares a uint32_t frame count against a signed int32_t end frame
(cdrom.cpp:2748), so a negative end frame converts to a huge unsigned value and the trim is
skipped. Cues that declare REM LEAD-OUT 00:00:00 (or any address at or before the last track
of the session) therefore failed with:

Track 2: the session lead-out values leave a negative length (-11400 frames); the cue's
REM SESSION/LEAD-OUT values do not match the image.

while chdman createcd encoded the same cue, because the no-op lead-out leaves the cue's INDEX
positions in charge of the layout. The parser now performs the same unsigned comparison, so the
track layout and the CHD bytes match chdman.

Fixed: a pad larger than its track zeroed the whole track

The CD reader treated the last PadFrames frames of a track as zero-filled padding. In chdman
the pad start is an unsigned offset from the track start (chdman.cpp:471-472); when the pad is
larger than the track the offset wraps below the track start, the pad region is unreachable, and
every frame is read from the source file. The encoder now mirrors that rule, and the GD-ROM
... (truncated)

1.5.0

CHDSharp v1.5.0 — What's New

Released: 2026-10-16 · Full changelog · NuGet

CHDSharp v1.5.0 is the first release produced end-to-end by the GitHub Actions pipeline:
one tag push builds the six platform bundles, creates the GitHub release, publishes the
NuGet package, and updates the wiki and
the documentation site.

Download (CLI)

Platform Bundle
Windows x64 CHDSharp_win-x64_v1.5.0.zip
Windows ARM64 CHDSharp_win-arm64_v1.5.0.zip
Linux x64 CHDSharp_linux-x64_v1.5.0.zip
Linux ARM64 CHDSharp_linux-arm64_v1.5.0.zip
macOS Intel CHDSharp_osx-x64_v1.5.0.zip
macOS Apple Silicon CHDSharp_osx-arm64_v1.5.0.zip

Every bundle contains a framework-dependent single-file CHDSharp / CHDSharp.exe
build (the .NET runtime is not embedded) plus LICENSE.txt, README.md, README.txt
and this document. The .NET 10 runtime
is required. On Linux/macOS run chmod +x CHDSharp if the binary is not executable after
unzipping.

Fixed: built-in update check

The CLI's "a new version is available" notice now links directly to the download for
your platform. The bundle the release ships (CHDSharp_<os>-<arch>_v<version>.zip) is
exactly the name the update check looks up; previously it searched for the wrong asset
name built from the currently running version, so the direct link never resolved and
users were sent to the releases page instead.

Release engineering

  • One tag, one release — Release workflow: bundles (win/linux/osx × x64/arm64),
    GitHub release, NuGet push, wiki sync, Pages rebuild. The workflow refuses to run if
    the tag does not match Directory.Build.props.
  • NuGet publishing is idempotent — re-running the workflow skips a version that is
    already on nuget.org.
  • GitHub releases now ship only the CLI — the WPF Tester remains source-only.

Also in this release

  • Wiki + documentation site in sync — the docs/ folder is deployed twice from CI:
    ... (truncated)

Commits viewable in compare view.

Updated LibFuseSharp from 1.0.0 to 1.0.1.

Release notes

Sourced from LibFuseSharp's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Meziantou.Analyzer from 3.0.299 to 3.0.318.

Release notes

Sourced from Meziantou.Analyzer's releases.

3.0.318

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.318

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.317...3.0.318

3.0.317

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.317

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.316...3.0.317

3.0.316

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.316

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.315...3.0.316

3.0.315

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.315

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.314...3.0.315

3.0.314

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.314

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.313...3.0.314

3.0.313

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.313

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.312...3.0.313

3.0.312

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.312

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.311...3.0.312

3.0.311

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.311

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.310...3.0.311

3.0.310

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.310

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.309...3.0.310

3.0.309

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.309

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.308...3.0.309

3.0.308

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.308

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.307...3.0.308

3.0.307

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.307

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.306...3.0.307

3.0.306

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.306

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.305...3.0.306

3.0.305

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.305

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.304...3.0.305

3.0.304

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.304

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.303...3.0.304

3.0.303

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.303

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.302...3.0.303

3.0.302

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.302

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.301...3.0.302

3.0.301

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.301

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.300...3.0.301

3.0.300

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.300

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.299...3.0.300

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.10.1 to 18.11.0.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.11.0

What's Changed

New Contributors

Full Changelog: microsoft/vstest@v18.10.1...v18.11.0

Commits viewable in compare view.

Updated System.Security.Cryptography.ProtectedData from 10.0.12 to 10.0.14.

Release notes

Sourced from System.Security.Cryptography.ProtectedData's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated winfsp.net from 2.1.25156 to 2.2.26286.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
nuget: Bump the nuget-minor-patch group with 6 updates
60c3520 
Bumps CHDSharp from 1.4.3 to 1.6.0
Bumps LibFuseSharp from 1.0.0 to 1.0.1
Bumps Meziantou.Analyzer from 3.0.299 to 3.0.318
Bumps Microsoft.NET.Test.Sdk from 18.10.1 to 18.11.0
Bumps System.Security.Cryptography.ProtectedData from 10.0.12 to 10.0.14
Bumps winfsp.net from 2.1.25156 to 2.2.26286

---
updated-dependencies:
- dependency-name: CHDSharp
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-patch
- dependency-name: LibFuseSharp
  dependency-version: 1.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: Meziantou.Analyzer
  dependency-version: 3.0.318
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: Meziantou.Analyzer
  dependency-version: 3.0.318
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-patch
- dependency-name: System.Security.Cryptography.ProtectedData
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: winfsp.net
  dependency-version: 2.2.26286
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Dependency updates nuget NuGet dependency updates labels Oct 30, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Dependency updates nuget NuGet dependency updates

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants