Bump actions/setup-dotnet from 5.4.0 to 6.0.0 - #14403
Conversation
Bumps [actions/setup-dotnet](https://github.com/actions/setup-dotnet) from 5.4.0 to 6.0.0. - [Release notes](https://github.com/actions/setup-dotnet/releases) - [Commits](actions/setup-dotnet@26b0ec1...a98b568) --- updated-dependencies: - dependency-name: actions/setup-dotnet dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
dependabot
Bot
added
dependencies
There was a problem hiding this comment.
🟢 Approval recommended
The change is a straightforward action version bump applied consistently across all existing setup-dotnet usages with no workflow syntax issues observed.
Pull request overview
Updates the pinned actions/setup-dotnet GitHub Action reference from v5.4.0 to v6.0.0 across the repo’s .NET CI workflows to keep the CI environment up to date.
Changes:
- Bump
actions/setup-dotnetfromv5.4.0tov6.0.0(pinned by commit SHA) in the .NET CI workflow. - Apply the same bump in the build-and-test workflow.
- Apply the same bump in the integration tests workflow.
File summaries
| File | Description |
|---|---|
| .github/workflows/dotnet-integration-tests.yml | Updates actions/setup-dotnet pin to v6.0.0 for integration test runs. |
| .github/workflows/dotnet-ci.yml | Updates actions/setup-dotnet pin to v6.0.0 for matrix CI builds. |
| .github/workflows/dotnet-build-and-test.yml | Updates actions/setup-dotnet pin to v6.0.0 for build/test pipeline runs. |
Review details
- Files reviewed: 3/3 changed files
- Comments generated: 0
- Review effort level: Lite
💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
There was a problem hiding this comment.
MAF Automated Review — Iteration 1
Result: No findings
Scope: full PR (1 commit(s)): 210c127740a8
Model: gpt-5.6-sol-fast
Overview
This PR updates all repository uses of actions/setup-dotnet to an immutable v6.0.0 commit while preserving each workflow's existing SDK inputs, authentication, triggers, and execution order. The affected jobs use GitHub-hosted runners, retain explicit .NET 10 SDK selection, and do not enable setup-dotnet caching. No publishable Critical, High, or Medium issue is established by the changed lines.
Reviewed the supplied pull-request change set across correctness, security/reliability, architecture, and failure behavior.
No publishable findings remained after source verification for this scope.
Bumps actions/setup-dotnet from 5.4.0 to 6.0.0.
Release notes
Sourced from actions/setup-dotnet's releases.
Commits
a98b568chore(deps): bump@actions/cacheto 6.2.0 (#756)afb2931Bump actions/checkout from 6.0.3 to 7.0.0 (#751)6df8cefMigrate to ESM and upgrade dependencies (#752)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)