Bump Microsoft.VisualStudio.Threading from 17.14.15 to 18.7.23

[dependabot]

Updated Microsoft.VisualStudio.Threading from 17.14.15 to 18.7.23.

Release notes

Sourced from Microsoft.VisualStudio.Threading's releases.

18.7.23

What's Changed

Fixes

• Fix CancellationToken.Combine with 3+ cancelable tokens by @​AArnott in Fix CancellationToken.Combine with 3+ cancelable tokens microsoft/vs-threading#1443
• Fix VSTHRD110 firing in Expression-valued scenarios by @​AArnott with @​Copilot in Fix VSTHRD110 firing in Expression-valued scenarios microsoft/vs-threading#1467
• Fix super set for VSTHRD103 by @​AArnott in Fix super set for VSTHRD103 microsoft/vs-threading#1545
• Fix VSTHRD114 not firing for null in ternary conditional expressions by @​AArnott with @​Copilot in Fix VSTHRD114 not firing for null in ternary conditional expressions microsoft/vs-threading#1548
• Disable VSTHRD010 in AppWithoutMainThread.editorconfig by @​ArturDorochowicz in Disable VSTHRD010 in AppWithoutMainThread.editorconfig microsoft/vs-threading#1562
• Fix VSTHRD103 missing diagnostic for sync extension methods with async alternatives in the same static class by @​drewnoakes with @​Copilot in Fix VSTHRD103 missing diagnostic for sync extension methods with async alternatives in the same static class microsoft/vs-threading#1569

Enhancements

• Add JoinableTaskFactory.DisableProcessing() by @​AArnott in Add JoinableTaskFactory.DisableProcessing() microsoft/vs-threading#1576
• Add NoMessagePumpSyncContext..ctor(SynchronizationContext) for Post/Send behaviors by @​AArnott in Add NoMessagePumpSyncContext..ctor(SynchronizationContext) for Post/Send behaviors microsoft/vs-threading#1578
• Add trim and NativeAOT safety attributes by @​AArnott in Add trim and NativeAOT safety attributes microsoft/vs-threading#1471
• Add IPendingExecutionRequestState interface to expose completion state of SingleExecuteProtector by @​lifengl in Add IPendingExecutionRequestState interface to expose completion state of SingleExecuteProtector microsoft/vs-threading#1447
• Add AdditionalFiles support to VSTHRD103 analyzer for excluding specific APIs by @​AArnott with @​Copilot in Add AdditionalFiles support to VSTHRD103 analyzer for excluding specific APIs microsoft/vs-threading#1465
• Document InvalidOperationException for AsyncReaderWriterLock acquisition methods by @​AArnott with @​Copilot in Document InvalidOperationException for AsyncReaderWriterLock acquisition methods microsoft/vs-threading#1466
• Allow library code to detect the JoinableTaskContext is not associated with Main thread by @​lifengl in Allow library code to detect the JoinableTaskContext is not associated with Main thread microsoft/vs-threading#1477
• remove NotifyOfCrossThreadDependency call inside get_NoMessagePumpSynchronizationContext by @​lifengl in remove NotifyOfCrossThreadDependency call inside get_NoMessagePumpSynchronizationContext  microsoft/vs-threading#1486
• reduce overhead when running in no main thread mode by @​lifengl in reduce overhead when running in no main thread mode microsoft/vs-threading#1502
• Join tasks waited by JoinableTaskCollection.JoinUntilEmpty in dumpasync result by @​lifengl in Join tasks waited by JoinableTaskCollection.JoinUntilEmpty in dumpasync result microsoft/vs-threading#1538
• Remove slow regex from threading analyzers by @​AArnott in Remove slow regex from threading analyzers microsoft/vs-threading#1547

New Contributors

• @​jgrosic made their first contribution in Fix typo in docs library_with_jtf.md microsoft/vs-threading#1485
• @​AbhitejJohn made their first contribution in Fix link to documentation in VSTHRD111.md microsoft/vs-threading#1533
• @​ArturDorochowicz made their first contribution in Disable VSTHRD010 in AppWithoutMainThread.editorconfig microsoft/vs-threading#1562
• @​microsoft-github-policy-service[bot] made their first contribution in Auto-generated baselines by 1ES Pipeline Templates microsoft/vs-threading#1587

Full Changelog: microsoft/vs-threading@v17.14.15...v18.7.23

Commits viewable in compare view.

[waldekmastykarz]

@dependabot rebase

[dependabot]

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

[waldekmastykarz]

LGTM - dependency update with async fix for VSTHRD103

[waldekmastykarz]

LGTM - all checks pass

[waldekmastykarz]

LGTM - dependency update looks good

[waldekmastykarz]

@dependabot rebase

[dependabot]

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

[waldekmastykarz]

@dependabot recreate

[waldekmastykarz]

@copilot fix

[Copilot]

@copilot fix

Fixed in the latest commit. Two issues were resolved:

1. DevProxy.Plugins/packages.lock.json was stale — it still referenced Markdig 1.3.0 and Scriban 7.2.4 from devproxy.abstractions, which caused dotnet restore --locked-mode to fail in CI. Regenerated the lock file to pick up the current versions (1.3.2 / 7.2.5).
2. VSTHRD103 build error in CertificateDiskCache.cs — the new version of Microsoft.VisualStudio.Threading introduced a stricter analyzer that flagged the synchronous File.ReadAllBytes call. Converted the private LoadCertificate helper to async Task using File.ReadAllBytesAsync.

[waldekmastykarz]

LGTM

[waldekmastykarz]

@dependabot rebase

[dependabot]

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

[waldekmastykarz]

LGTM

[waldekmastykarz]

@dependabot recreate

[waldekmastykarz]

Closing to let dependabot create a fresh PR.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.