Bump actions/setup-dotnet from 5.3.0 to 5.4.0

[dependabot]

Bumps actions/setup-dotnet from 5.3.0 to 5.4.0.

Release notes

Sourced from actions/setup-dotnet's releases.

v5.4.0

What's Changed

Enhancements

• Improve global.json SDK version validation for rollForward by @​priyagupta108 in actions/setup-dotnet#742
• Pin actions to commit SHAs in workflows by @​priya-kinthali in actions/setup-dotnet#744
• Expand the CSC problem matcher to light up more errors on GitHub. by @​StephenCleary in actions/setup-dotnet#717

Documentation

• Docs(action): Explicitly mark all optional inputs with required: false by @​kranthipoturaju in actions/setup-dotnet#737

Bug Fixes

• Fix global.json creation command by @​michal2612 in actions/setup-dotnet#694

Dependency Updates

• Upgrade @​actions/cache to 5.1.0, log cache write denied by @​jasongin in actions/setup-dotnet#746

New Contributors

• @​jasongin made their first contribution in actions/setup-dotnet#746
• @​michal2612 made their first contribution in actions/setup-dotnet#694
• @​kranthipoturaju made their first contribution in actions/setup-dotnet#737
• @​StephenCleary made their first contribution in actions/setup-dotnet#717

Full Changelog: actions/setup-dotnet@v5...v5.4.0

Commits

• 26b0ec1 Expand the CSC problem matcher to light up more errors on GitHub. (#717)
• da5e548 docs(action): explicitly mark all optional inputs with required: false (#737)
• 9bd3b44 Improve readability of global.json creation command (#694)
• 4406a63 Bump @​actions/cache to 5.1.0, log cache write denied (#746)
• dc3262d pin actions to commit SHAs in workflows (#744)
• 95a3f8b Validate global.json SDK version before rollForward optimization (#742)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
actions/actions/setup-dotnet	26b0ec14cb23fa6904739307f278c14f94c95bf1	🟢 5.5	Details Check Score Reason Code-Review 🟢 10 all changesets reviewed Binary-Artifacts 🟢 10 no binaries found in the repo Maintained 🟢 5 7 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5 Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Packaging ⚠️ -1 packaging workflow not detected CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 Fuzzing ⚠️ 0 project is not fuzzed License 🟢 10 license file detected Signed-Releases ⚠️ -1 no releases found Security-Policy 🟢 9 security policy file detected Branch-Protection ⚠️ 0 branch protection not enabled on development/release branches SAST 🟢 8 SAST tool is not run on all commits -- score normalized to 8

Scanned Files

• .github/workflows/dotnet.yml

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 100.00%. Comparing base (9e9b143) to head (54effa1).
✅ All tests successful. No failed tests found.

Additional details and impacted files

@@            Coverage Diff            @@
##              main       #86   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files            2         2           
  Lines           37        37           
  Branches         3         3           
=========================================
  Hits            37        37           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

[github-actions]

✅MegaLinter analysis: Success

Descriptor	Linter	Files	Fixed	Errors	Warnings	Elapsed time
✅ ACTION	actionlint	5		0	0	0.04s
✅ ACTION	zizmor	5		0	0	2.66s
✅ EDITORCONFIG	editorconfig-checker	43		0	0	0.07s
✅ JSON	jsonlint	2		0	0	0.14s
✅ JSON	prettier	2		0	0	0.36s
✅ JSON	v8r	2		0	0	3.42s
✅ MARKDOWN	markdownlint	1		0	0	0.54s
✅ MARKDOWN	markdown-table-formatter	1		0	0	0.3s
✅ REPOSITORY	checkov	yes		no	no	19.92s
✅ REPOSITORY	gitleaks	yes		no	no	0.15s
✅ REPOSITORY	git_diff	yes		no	no	0.01s
✅ REPOSITORY	grype	yes		no	no	51.27s
✅ REPOSITORY	osv-scanner	yes		no	no	0.56s
✅ REPOSITORY	secretlint	yes		no	no	1.12s
✅ REPOSITORY	syft	yes		no	no	2.43s
✅ REPOSITORY	trivy-sbom	yes		no	no	1.94s
✅ REPOSITORY	trufflehog	yes		no	no	3.82s
✅ XML	xmllint	14		0	0	0.55s
✅ YAML	prettier	10		0	0	0.61s
✅ YAML	v8r	10		0	0	8.54s
✅ YAML	yamllint	10		0	0	0.5s

Notices

📣 MegaLinter 9.5.0 is out! Discover the new features and security recommendations in the release announcement. (Skip this info by defining SECURITY_SUGGESTIONS: false)

See detailed reports in MegaLinter artifacts

Show us your support by starring ⭐ the repository