[dependabot]

Bumps the github-actions-dependencies group with 1 update in the / directory: dotnet/nbgv.

Updates dotnet/nbgv from c6191c85c1d788f23d78cbdb90cc1082e3b46fa4 to 512d02860b01661cb8f6cc22b3e837b2bd9e9865

Commits

• 512d028 Merge pull request #267 from dotnet/renovate/pnpm-12.x
• c9c9045 chore(deps): update pnpm to v12.11.2
• See full diff in compare view

[dependabot]

Labels

The following labels could not be found: ci. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[github-actions]

⚠️ Deprecation Warning: The deny-licenses option is deprecated for possible removal in the next major release. For more information, see issue 997.

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
actions/dotnet/nbgv	512d02860b01661cb8f6cc22b3e837b2bd9e9865	🟢 4.2	Details Check Score Reason Code-Review ⚠️ 0 Found 0/14 approved changesets -- score normalized to 0 Binary-Artifacts 🟢 10 no binaries found in the repo Packaging ⚠️ -1 packaging workflow not detected Maintained 🟢 10 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Fuzzing ⚠️ 0 project is not fuzzed License 🟢 10 license file detected Signed-Releases ⚠️ -1 no releases found Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md Security-Policy ⚠️ 0 security policy file not detected SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0

Scanned Files

• .github/workflows/pr-validation.yml

[github-actions]

Test Results

7 641 tests   7 622 ✅  2m 15s ⏱️
    7 suites     19 💤
    7 files        0 ❌

Results for commit 3e65ce2.

♻️ This comment has been updated with latest results.

[JerrettDavis]

@dependabot rebase

[github-actions]

Code Coverage

Summary
  Generated on: 10/19/2026 - 23:46:28
  Coverage date: 10/19/2026 - 23:44:27 - 10/19/2026 - 23:46:19
  Parser: MultiReport (7x Cobertura)
  Assemblies: 23
  Classes: 1067
  Files: 591
  Line coverage: 74.6%
  Covered lines: 36849
  Uncovered lines: 12491
  Coverable lines: 49340
  Total lines: 97328
  Branch coverage: 61.8% (13502 of 21830)
  Covered branches: 13502
  Total branches: 21830
  Method coverage: 86.4% (6318 of 7310)
  Full method coverage: 74.2% (5426 of 7310)
  Covered methods: 6318
  Fully covered methods: 5426
  Total methods: 7310