chore(deps): update dependency microsoft.visualstudio.threading.analyzers to v18

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
Microsoft.VisualStudio.Threading.Analyzers (source)	17.14.15 → 18.7.23

---

Release Notes

microsoft/vs-threading (Microsoft.VisualStudio.Threading.Analyzers)

v18.7.23

What's Changed

Fixes

• Fix CancellationToken.Combine with 3+ cancelable tokens by @​AArnott in #​1443
• Fix VSTHRD110 firing in Expression-valued scenarios by @​AArnott with @​Copilot in #​1467
• Fix super set for VSTHRD103 by @​AArnott in #​1545
• Fix VSTHRD114 not firing for null in ternary conditional expressions by @​AArnott with @​Copilot in #​1548
• Disable VSTHRD010 in AppWithoutMainThread.editorconfig by @​ArturDorochowicz in #​1562
• Fix VSTHRD103 missing diagnostic for sync extension methods with async alternatives in the same static class by @​drewnoakes with @​Copilot in #​1569

Enhancements

• Add JoinableTaskFactory.DisableProcessing() by @​AArnott in #​1576
• Add NoMessagePumpSyncContext..ctor(SynchronizationContext) for Post/Send behaviors by @​AArnott in #​1578
• Add trim and NativeAOT safety attributes by @​AArnott in #​1471
• Add IPendingExecutionRequestState interface to expose completion state of SingleExecuteProtector by @​lifengl in #​1447
• Add AdditionalFiles support to VSTHRD103 analyzer for excluding specific APIs by @​AArnott with @​Copilot in #​1465
• Document InvalidOperationException for AsyncReaderWriterLock acquisition methods by @​AArnott with @​Copilot in #​1466
• Allow library code to detect the JoinableTaskContext is not associated with Main thread by @​lifengl in #​1477
• remove NotifyOfCrossThreadDependency call inside get_NoMessagePumpSynchronizationContext by @​lifengl in #​1486
• reduce overhead when running in no main thread mode by @​lifengl in #​1502
• Join tasks waited by JoinableTaskCollection.JoinUntilEmpty in dumpasync result by @​lifengl in #​1538
• Remove slow regex from threading analyzers by @​AArnott in #​1547

New Contributors

• @​jgrosic made their first contribution in #​1485
• @​AbhitejJohn made their first contribution in #​1533
• @​ArturDorochowicz made their first contribution in #​1562
• @​microsoft-github-policy-service[bot] made their first contribution in #​1587

Full Changelog: microsoft/vs-threading@v17.14.15...v18.7.23

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[samtrion]

Skipped by automated dependency-PR triage: build and tests pass, but the required "Run Tests / Testing .NET solution" check fails at the "Update codecov" step with gpg: Can't check signature: No public key. Retried once (re-ran the failed job) and it failed identically, so this looks like a systemic issue with the Codecov CLI's GPG signature verification (e.g. rotated/missing signing key) rather than a one-off flake tied to this dependency bump. Not force-merging since the required check is genuinely red; needs a workflow-level fix (e.g. pin an older Codecov CLI version or update the trusted GPG key) before dependency PRs can merge again.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 97.95%. Comparing base (5dd588c) to head (7e7a578).

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #561   +/-   ##
=======================================
  Coverage   97.95%   97.95%           
=======================================
  Files           7        7           
  Lines         343      343           
  Branches       37       37           
=======================================
  Hits          336      336           
  Misses          3        3           
  Partials        4        4           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[samtrion]

Automated approval by NetEvolve.Socks (v1.0.0.0)

[samtrion]

Automated approval by NetEvolve.Socks (v1.0.0.0)

[samtrion]

Automated approval by NetEvolve.Socks (v1.0.0.0)