dotnet · timcassell · Jan 4, 2026 · Dec 28, 2025
diff --git a/.github/workflows/generate-changelog.yaml b/.github/workflows/generate-changelog.yaml
@@ -15,12 +15,12 @@ jobs:
     steps:
 
     - name: Checkout
-      uses: actions/checkout@v5
+      uses: actions/checkout@v6
       with:
         ref: master
 
     - name: Checkout changelog
-      uses: actions/checkout@v5
+      uses: actions/checkout@v6
       with:
         ref: docs-changelog
         path: docs/_changelog
@@ -31,7 +31,7 @@ jobs:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
     - name: Push changelog
-      uses: JamesIves/github-pages-deploy-action@v4
+      uses: JamesIves/github-pages-deploy-action@9d877eea73427180ae43cf98e8914934fe157a1a # v4.7.6
       with:
         branch: docs-changelog
         folder: docs/_changelog

diff --git a/.github/workflows/generate-gh-pages.yaml b/.github/workflows/generate-gh-pages.yaml
@@ -15,12 +15,12 @@ jobs:
     steps:
 
     - name: Checkout
-      uses: actions/checkout@v5
+      uses: actions/checkout@v6
       with:
         ref: docs-stable
 
     - name: Checkout changelog
-      uses: actions/checkout@v5
+      uses: actions/checkout@v6
       with:
         ref: docs-changelog
         path: docs/_changelog
@@ -37,7 +37,7 @@ jobs:
       run: ./build.cmd docs-build
 
     - name: Upload Artifacts
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v6
       with:
         name: site
         path: docs/_site
@@ -49,12 +49,12 @@ jobs:
     steps:
 
     - name: Checkout
-      uses: actions/checkout@v5
+      uses: actions/checkout@v6
       with:
         ref: docs-stable
 
     - name: Download Artifacts
-      uses: actions/download-artifact@v4
+      uses: actions/download-artifact@v7
       with:
         name: site
         path: site
@@ -63,7 +63,7 @@ jobs:
       run: tree $GITHUB_WORKSPACE
 
     - name: Deploy documentation
-      uses: JamesIves/github-pages-deploy-action@v4
+      uses: JamesIves/github-pages-deploy-action@9d877eea73427180ae43cf98e8914934fe157a1a # v4.7.6
       with:
         branch: gh-pages
         folder: site

diff --git a/.github/workflows/publish-nightly.yaml b/.github/workflows/publish-nightly.yaml
@@ -12,13 +12,13 @@ jobs:
     runs-on: ubuntu-latest
     if: ${{ github.repository == 'dotnet/BenchmarkDotNet' }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Set date
         run: echo "DATE=$(date +'%Y%m%d')" >> $GITHUB_ENV
       - name: Pack
         run: ./build.cmd pack /p:VersionSuffix=nightly.$DATE.$GITHUB_RUN_NUMBER
       - name: Upload nupkg to artifacts
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: nupkgs
           path: "**/*.*nupkg"

diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
@@ -20,10 +20,10 @@ jobs:
     # --- Init ---
 
     - name: Checkout sources
-      uses: actions/checkout@v5
+      uses: actions/checkout@v6
 
     - name: Checkout changelog
-      uses: actions/checkout@v5
+      uses: actions/checkout@v6
       with:
         ref: docs-changelog
         path: docs/_changelog
@@ -68,7 +68,7 @@ jobs:
       run: ./build.cmd version-increment
 
     - name: Commit changes
-      uses: EndBug/add-and-commit@v9
+      uses: EndBug/add-and-commit@a94899bca583c204427a224a7af87c02f9b325d5 # v9.1.4
       with:
         message: "Set next BenchmarkDotNet version: ${{ steps.version.outputs.VERSION }} and update released analyzer rules"
         author_name: GitHub Actions
@@ -83,14 +83,14 @@ jobs:
     # --- Release ---
 
     - name: Push git changes
-      uses: ad-m/github-push-action@v1
+      uses: ad-m/github-push-action@77c5b412c50b723d2a4fbc6d71fb5723bcd439aa # v1.0.0
       with:
         github_token: ${{ secrets.GITHUB_TOKEN }}
         branch: master
         tags: true
 
     - name: Release
-      uses: softprops/action-gh-release@v2
+      uses: softprops/action-gh-release@a06a81a03ee405af7f2048a818ed3f03bbf83c7b # v2.5.0
       with:
         name: BenchmarkDotNet v${{ steps.version.outputs.VERSION }}
         tag_name: v${{ steps.version.outputs.VERSION }}
@@ -106,7 +106,7 @@ jobs:
         milestone_name: v${{ steps.version.outputs.VERSION }}
 
     - name: Create new milestone
-      uses: WyriHaximus/github-action-create-milestone@v1
+      uses: WyriHaximus/github-action-create-milestone@bcd9e15439836d6098d353a5bcf82de46591a35d # v1.1.2
       env:
         GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
       with:
@@ -140,7 +140,7 @@ jobs:
       run: ./build.cmd docs-build
 
     - name: Deploy documentation
-      uses: JamesIves/github-pages-deploy-action@v4
+      uses: JamesIves/github-pages-deploy-action@9d877eea73427180ae43cf98e8914934fe157a1a # v4.7.6
       with:
         branch: gh-pages
         folder: docs/_site

diff --git a/.github/workflows/run-tests-selected.yaml b/.github/workflows/run-tests-selected.yaml
@@ -15,7 +15,7 @@ on:
           - macos-latest
           - windows-11-arm          
           - ubuntu-24.04-arm
-          - macos-13
+          - macos-15-intel
       project:
         type: string
         description: Specify test project path
@@ -80,7 +80,7 @@ jobs:
 
       # Upload artifact files that are located at `$(GITHUB_WORKSPACE)/artifacts` directory
       - name: Upload test results
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         if: always()
         with:
           name: results

diff --git a/.github/workflows/run-tests.yaml b/.github/workflows/run-tests.yaml
@@ -21,7 +21,7 @@ jobs:
       - name: Disable Windows Defender
         run: Set-MpPreference -DisableRealtimeMonitoring $true
         shell: powershell
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       # Build and Test
       - name: Run task 'build'
         shell: cmd
@@ -31,15 +31,15 @@ jobs:
         run: ./build.cmd in-tests-core -e
       # Report test results with unique name
       - name: Report tests results
-        uses: dorny/test-reporter@v2
+        uses: dorny/test-reporter@fe45e9537387dac839af0d33ba56eed8e24189e8 # v2.3.0
         if: always()
         with:
           name: test-windows-core-${{ matrix.os }}
           path: "**/*.trx"
           reporter: dotnet-trx
       # Upload Artifacts with Unique Name
       - name: Upload test results
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         if: always()
         with:
           name: test-windows-core-trx-${{ github.run_id }}-${{ matrix.os }}
@@ -54,7 +54,7 @@ jobs:
       - name: Disable Windows Defender
         run: Set-MpPreference -DisableRealtimeMonitoring $true
         shell: powershell
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       # Build and Test
       - name: Run task 'build'
         shell: cmd
@@ -70,15 +70,15 @@ jobs:
         run: ./build.cmd in-tests-full -e
       # Report test results with unique name
       - name: Report tests results
-        uses: dorny/test-reporter@v2
+        uses: dorny/test-reporter@fe45e9537387dac839af0d33ba56eed8e24189e8 # v2.3.0
         if: always()
         with:
           name: test-windows-full-${{ matrix.os }}
           path: "**/*.trx"
           reporter: dotnet-trx
       # Upload Artifacts with Unique Name
       - name: Upload test results
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         if: always()
         with:
           name: test-windows-full-trx-${{ github.run_id }}-${{ matrix.os }}
@@ -90,7 +90,7 @@ jobs:
         os: [ubuntu-latest, ubuntu-24.04-arm]
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       # Set up the environment
       - name: Set up Clang
         uses: egor-tensin/setup-clang@ef434b41eb33a70396fb336b1bae39c76d740c3d # v1.4
@@ -100,9 +100,9 @@ jobs:
       - name: Set up zlib-static
         run: sudo apt-get install -y libkrb5-dev
       - name: Set up node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
-          node-version: "22"
+          node-version: "24"
       - name: Set up v8
         run: npm install jsvu -g && jsvu --os=linux64 --engines=v8 && echo "$HOME/.jsvu/bin" >> $GITHUB_PATH
       - name: Install wasm-tools workload
@@ -118,15 +118,15 @@ jobs:
         run: ./build.cmd in-tests-core -e
       # Report test results with unique name
       - name: Report tests results
-        uses: dorny/test-reporter@v2
+        uses: dorny/test-reporter@fe45e9537387dac839af0d33ba56eed8e24189e8 # v2.3.0
         if: always()
         with:
           name: test-linux-${{ matrix.os }}
           path: "**/*.trx"
           reporter: dotnet-trx
       # Upload Artifacts with Unique Name
       - name: Upload test results
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         if: always()
         with:
           name: test-linux-trx-${{ github.run_id }}-${{ matrix.os }}
@@ -145,11 +145,11 @@ jobs:
             jsvu-os: 'mac64'
             arch: 'x64'
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Set up node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
-          node-version: "22"
+          node-version: "24"
       - name: Set up v8
         run: npm install jsvu -g && jsvu --os=${{ matrix.os.jsvu-os }} --engines=v8 && echo "$HOME/.jsvu/bin" >> $GITHUB_PATH
       - name: Install wasm-tools workload
@@ -165,15 +165,15 @@ jobs:
         run: ./build.cmd in-tests-core -e
       # Report test results with unique name
       - name: Report tests results
-        uses: dorny/test-reporter@v2
+        uses: dorny/test-reporter@fe45e9537387dac839af0d33ba56eed8e24189e8 # v2.3.0
         if: always()
         with:
           name: test-macos(${{ matrix.os.arch }})
           path: "**/*.trx"
           reporter: dotnet-trx
       # Upload Artifacts with Unique Name
       - name: Upload test results
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         if: always()
         with:
           name: test-macos(${{ matrix.os.arch }})-trx-${{ github.run_id }}
@@ -182,7 +182,7 @@ jobs:
   test-pack:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Set up Clang
         uses: egor-tensin/setup-clang@v1
         with:
@@ -196,11 +196,11 @@ jobs:
   spellcheck-docs:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@v6
+      - uses: actions/setup-node@v6
         name: Setup node
         with:
-          node-version: "22"
+          node-version: "24"
       - name: Install cSpell
         run: npm install -g [email protected]
       - name: Copy cSpell config

diff --git a/samples/BenchmarkDotNet.Samples.FSharp/BenchmarkDotNet.Samples.FSharp.fsproj b/samples/BenchmarkDotNet.Samples.FSharp/BenchmarkDotNet.Samples.FSharp.fsproj
@@ -20,9 +20,9 @@
   </ItemGroup>
 
   <ItemGroup>
-    <PackageReference Update="FSharp.Core" Version="9.0.300" />
+    <PackageReference Update="FSharp.Core" Version="10.0.101" />
     <PackageReference Update="System.ValueTuple" Version="4.6.1" />
-    <PackageReference Include="Microsoft.NET.Test.Sdk" Version="17.14.1" />
+    <PackageReference Include="Microsoft.NET.Test.Sdk" Version="18.0.1" />
   </ItemGroup>
 
   <Import Project="..\..\build\common.targets" />

diff --git a/samples/BenchmarkDotNet.Samples/BenchmarkDotNet.Samples.csproj b/samples/BenchmarkDotNet.Samples/BenchmarkDotNet.Samples.csproj
@@ -26,11 +26,11 @@
     <PackageReference Include="System.IO.Hashing" Version="$(SihVersion)" />
   </ItemGroup>
   <ItemGroup>
-    <PackageReference Include="System.Drawing.Common" Version="9.0.5" />
+    <PackageReference Include="System.Drawing.Common" Version="10.0.1" />
     <!-- The Test SDK is required only for the VSTest Adapter to work -->
-    <PackageReference Include="Microsoft.NET.Test.Sdk" Version="17.14.1" />
+    <PackageReference Include="Microsoft.NET.Test.Sdk" Version="18.0.1" />
     <!-- This package enables the Visual Studio Profiler integration IntroVisualStudioProfiler.cs -->
-    <PackageReference Include="Microsoft.VisualStudio.DiagnosticsHub.BenchmarkDotNetDiagnosers" Version="18.0.36302.1" />
+    <PackageReference Include="Microsoft.VisualStudio.DiagnosticsHub.BenchmarkDotNetDiagnosers" Version="18.3.36812.1" />
   </ItemGroup>
   <ItemGroup>
     <ProjectReference Include="..\..\src\BenchmarkDotNet.Diagnostics.dotTrace\BenchmarkDotNet.Diagnostics.dotTrace.csproj" />

diff --git a/src/BenchmarkDotNet.Analyzers/BenchmarkDotNet.Analyzers.csproj b/src/BenchmarkDotNet.Analyzers/BenchmarkDotNet.Analyzers.csproj
@@ -22,11 +22,11 @@
   <ItemGroup>
     <!-- We multi-target for different compiler versions. https://github.com/dotnet/roslyn/discussions/81256#discussioncomment-14975130, https://github.com/dotnet/roslyn/blob/main/docs/wiki/NuGet-packages.md#versioning -->
     <!-- C# 7.3 (min version we support) -->
-    <PackageReference Include="Microsoft.CodeAnalysis.CSharp" Version="2.8.0" Condition="'$(MccVersion)' == '2.8'" />
+    <PackageReference Include="Microsoft.CodeAnalysis.CSharp" Version="[2.8.0]" Condition="'$(MccVersion)' == '2.8'" />
     <!-- C# 9 -->
-    <PackageReference Include="Microsoft.CodeAnalysis.CSharp" Version="3.8.0" Condition="'$(MccVersion)' == '3.8'" />
+    <PackageReference Include="Microsoft.CodeAnalysis.CSharp" Version="[3.8.0]" Condition="'$(MccVersion)' == '3.8'" />
     <!-- C# 12 -->
-    <PackageReference Include="Microsoft.CodeAnalysis.CSharp" Version="4.8.0" Condition="'$(MccVersion)' == '4.8'" />
+    <PackageReference Include="Microsoft.CodeAnalysis.CSharp" Version="[4.8.0,)" Condition="'$(MccVersion)' == '4.8'" />
   </ItemGroup>
   <ItemGroup>
     <AdditionalFiles Include="AnalyzerReleases.Shipped.md" />

diff --git a/src/BenchmarkDotNet.Diagnostics.Windows/BenchmarkDotNet.Diagnostics.Windows.csproj b/src/BenchmarkDotNet.Diagnostics.Windows/BenchmarkDotNet.Diagnostics.Windows.csproj
@@ -12,7 +12,7 @@
     <ProjectReference Include="..\BenchmarkDotNet\BenchmarkDotNet.csproj" />
   </ItemGroup>
   <ItemGroup>
-    <PackageReference Include="Microsoft.Diagnostics.Tracing.TraceEvent" Version="3.1.21" PrivateAssets="contentfiles;analyzers" />
+    <PackageReference Include="Microsoft.Diagnostics.Tracing.TraceEvent" Version="3.1.28" PrivateAssets="contentfiles;analyzers" />
   </ItemGroup>
   <Import Project="..\..\build\common.targets" />
 </Project>
diff --git a/src/BenchmarkDotNet.Diagnostics.dotMemory/BenchmarkDotNet.Diagnostics.dotMemory.csproj b/src/BenchmarkDotNet.Diagnostics.dotMemory/BenchmarkDotNet.Diagnostics.dotMemory.csproj
@@ -14,7 +14,7 @@
     </ItemGroup>
 
     <ItemGroup>
-        <PackageReference Include="JetBrains.Profiler.SelfApi" Version="2.5.13" />
+        <PackageReference Include="JetBrains.Profiler.SelfApi" Version="2.5.15" />
     </ItemGroup>
 
     <Import Project="..\..\build\common.targets" />

diff --git a/src/BenchmarkDotNet.Diagnostics.dotTrace/BenchmarkDotNet.Diagnostics.dotTrace.csproj b/src/BenchmarkDotNet.Diagnostics.dotTrace/BenchmarkDotNet.Diagnostics.dotTrace.csproj
@@ -14,7 +14,7 @@
     </ItemGroup>
 
     <ItemGroup>
-        <PackageReference Include="JetBrains.Profiler.SelfApi" Version="2.5.13" />
+        <PackageReference Include="JetBrains.Profiler.SelfApi" Version="2.5.15" />
     </ItemGroup>
 
     <Import Project="..\..\build\common.targets" />

diff --git a/src/BenchmarkDotNet/BenchmarkDotNet.csproj b/src/BenchmarkDotNet/BenchmarkDotNet.csproj
@@ -23,10 +23,10 @@
     <PackageReference Include="Iced" Version="1.21.0" />
     <PackageReference Include="Microsoft.Diagnostics.Runtime" Version="3.1.512801" />
     <PackageReference Include="Perfolizer" Version="[0.6.1]" />
-    <PackageReference Include="Microsoft.Diagnostics.Tracing.TraceEvent" Version="3.1.21" PrivateAssets="contentfiles;analyzers" />
+    <PackageReference Include="Microsoft.Diagnostics.Tracing.TraceEvent" Version="3.1.28" PrivateAssets="contentfiles;analyzers" />
     <PackageReference Include="Microsoft.DotNet.PlatformAbstractions" Version="3.1.6" />
     <PackageReference Include="Microsoft.CodeAnalysis.CSharp" Version="5.0.0" />
-    <PackageReference Include="System.Management" Version="9.0.5" />
+    <PackageReference Include="System.Management" Version="10.0.1" />
   </ItemGroup>
   <ItemGroup Condition=" '$(TargetFramework)' == 'netstandard2.0' ">
     <PackageReference Include="Microsoft.Win32.Registry" Version="5.0.0" />