fix(deps): update dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
Microsoft.Extensions.Hosting (source)	9.0.6 -> 9.0.7
Microsoft.Extensions.Hosting.Abstractions (source)	9.0.6 -> 9.0.7
SonarAnalyzer.CSharp (source)	10.12.0.118525 -> 10.14.0.120626
System.CommandLine	2.0.0-beta4.22272.1 -> 2.0.0-beta6.25358.103
System.Reflection.MetadataLoadContext (source)	9.0.6 -> 9.0.7

---

Release Notes

dotnet/runtime (Microsoft.Extensions.Hosting)

v9.0.7: .NET 9.0.7

Release

What's Changed

• [release/9.0-staging] Fix crash during Async Break when APC and CET are enabled by @​thaystg in https://github.com/dotnet/runtime/pull/114932
• [release/9.0-staging] [STJ] Account for F# CompilationMappingAttribute now supporting multiple declarations. by @​github-actions in https://github.com/dotnet/runtime/pull/115076
• [release/9.0-staging][wasm][interpreter] Fix PackedSimd interpreter intrinsics by @​lewing in https://github.com/dotnet/runtime/pull/114218
• [release/9.0-staging] JIT: Fix invalid removal of explicit zeroing in methods without .localsinit by @​jakobbotsch in https://github.com/dotnet/runtime/pull/115568
• [release/9.0-staging] throw an exception instead of infinite loop in sort_mark_list by @​github-actions in https://github.com/dotnet/runtime/pull/115529
• [release/9.0-staging] [DNS] Ignore ObjectDisposedException on CancellationToken Callback by @​github-actions in https://github.com/dotnet/runtime/pull/115840
• Revert "[release/9.0-staging] Fix crash during Async Break when APC and CET are enabled" by @​thaystg in https://github.com/dotnet/runtime/pull/116015
• [release/9.0-staging] Fix SysV first/second return register GC info mismatch by @​jakobbotsch in https://github.com/dotnet/runtime/pull/116206
• [release/9.0-staging] Fix PipeStream leak on Windows when pipe is disposed with a pending operation by @​github-actions in https://github.com/dotnet/runtime/pull/116188
• [release/9.0] Fix edge cases in Tarjan GC bridge (Android) by @​filipnavara in https://github.com/dotnet/runtime/pull/114682
• [release/9.0-staging] Revert change to follow symlinks of dotnet host by @​github-actions in https://github.com/dotnet/runtime/pull/116244
• Update branding to 9.0.7 by @​vseanreesermsft in https://github.com/dotnet/runtime/pull/116312
• [release/9.0-staging] Fix generation of minidump by @​github-actions in https://github.com/dotnet/runtime/pull/115738
• [release/9.0-staging] fix: in rsa signatures, configure digest before padding mode by @​github-actions in https://github.com/dotnet/runtime/pull/115695
• [release/9.0-staging] JIT: Fix possible heap corruption in outlined composite SSA storage by @​github-actions in https://github.com/dotnet/runtime/pull/116132
• [release/9.0-staging] Update dependencies from dotnet/roslyn by @​dotnet-maestro in https://github.com/dotnet/runtime/pull/115984
• [release/9.0-staging] Update dependencies from dotnet/arcade by @​dotnet-maestro in https://github.com/dotnet/runtime/pull/115855
• [release/9.0-staging] Update dependencies from dotnet/icu by @​dotnet-maestro in https://github.com/dotnet/runtime/pull/115597
• [release/9.0-staging] Update dependencies from dotnet/sdk by @​dotnet-maestro in https://github.com/dotnet/runtime/pull/115710
• [release/9.0-staging] Update dependencies from dotnet/cecil by @​dotnet-maestro in https://github.com/dotnet/runtime/pull/115504
• [release/9.0-staging] Update dependencies from dotnet/xharness by @​dotnet-maestro in https://github.com/dotnet/runtime/pull/115589
• [release/9.0] Update dependencies from dotnet/emsdk by @​dotnet-maestro in https://github.com/dotnet/runtime/pull/115537
• Bump SDK version used by WASM since it was broken by dotnet/arcade codeflow by @​jozkee in https://github.com/dotnet/runtime/pull/116450
• [automated] Merge branch 'release/9.0' => 'release/9.0-staging' by @​github-actions in https://github.com/dotnet/runtime/pull/115576
• [release/9.0-staging] Link peer's X509 stack handle to parent SSL safe handle by @​github-actions in https://github.com/dotnet/runtime/pull/115380
• [release/9.0-staging] [mono][interp] Minor SSA fixes by @​BrzVlad in https://github.com/dotnet/runtime/pull/116428
• [release/9.0-staging] Update dependencies from dotnet/runtime-assets by @​dotnet-maestro in https://github.com/dotnet/runtime/pull/115677
• [release/9.0-staging] Disable the UTFStringConversionFailures test on CI runs by @​github-actions in https://github.com/dotnet/runtime/pull/116460
• [manual] Merge release/9.0-staging into release/9.0 by @​jozkee in https://github.com/dotnet/runtime/pull/116459
• Merging internal commits for release/9.0 by @​vseanreesermsft in https://github.com/dotnet/runtime/pull/116499
• [release/9.0] Delete s390x and ppc64le helix queues by @​github-actions in https://github.com/dotnet/runtime/pull/116537

Full Changelog: dotnet/runtime@v9.0.6...v9.0.7

SonarSource/sonar-dotnet (SonarAnalyzer.CSharp)

v10.14.0.120626: 10.14

Compare Source

Hey everyone,

This release mostly focuses on mitigating (NET-2196) a performance regression that was introduced in 10.13.

Improvement

• NET-2196 - Fix path algorithm for execution flows to mitigate performance regression
• NET-2177 - Improve how the Symbolic Execution engine handles exception paths
• NET-2135 - Support xUnit V3
• NET-2163 - Provide Interface for other plugins to add rules to VB.NET SonarWay profile

False Negative

• NET-235 - Fix S2053: Adjust required salt length to be 32 bytes

Task

• NET-2170 - Update RSPEC before 10.14 release

v10.13.0.120203: 10.13

Compare Source

Hello everyone,

In this release, we've focused on:

• False positive fixes
• Enhancing S2259's secondary locations to provide clearer, step-by-step explanations of null pointer dereferences issues.

False Positives

• NET-2099 - Fix S3885 FP: Do not raise in ResolutionEventHandler
• NET-2023 - Fix S3257 FP: Array with target-typed new
• NET-1646 - Fix S3267 FP: Loops should be simplified with LINQ expressions
• NET-1588 - Fix S1066 FP: Combination of dynamic and out should not raise
• NET-882 - Fix S3257 FP: Don't raise for C# 10 and later when there's explicit delegate creation

Improvements

• NET-2095 - Improve incremental PR analysis path detection
• SE: S2259 - Improve secondary locations

---

Configuration

📅 Schedule: Branch creation - "after 9pm,before 6am" in timezone Europe/Zurich, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.