Bump the production-dependencies group with 3 updates

[dependabot]

Updated csharpier from 1.2.6 to 1.3.0.

Release notes

Sourced from csharpier's releases.

1.3.0

1.3.0

Breaking Changes

Change xml formatting to return error when it runs into syntax error so it is consistent with c# #​1854

Previously CSharpier treated an invalid xml file as a warning instead of an error. This was inconsistent with how it treated c# files.
Invalid c# or xml files are not treated as errors.
The --compilation-errors-as-warnings argument has been renamed to --syntax-errors-as-warnings and can be used to return warnings instead of errors when encountering invalid files.

What's Changed

Feature: Configurable whitespace handling for xml #​1790

CSharpier now supports two types of xml whitespace formatting strict or ignore.
By default all xml except xaml or axaml is treated as strict whitespace. See details

Feature: Move closing bracket for xml elements to the same line. #​1598

With strict xml whitespace handling, csharpier now keeps the closing bracket for an element on the same line instead of breaking it to a new line.

<!-- input & expected output -->
<ElementWithAttribute Attribute="AttributeValue__________________"
  >TextValue</ElementWithAttribute>

<!-- 1.2.6 -->
<ElementWithAttribute Attribute="AttributeValue__________________"
  >TextValue</ElementWithAttribute
>

Feature: Support for csharpier-ignore with XML formatter #​1788

CSharpier now supports csharpier-ignore in xml files. See details

Feature: Add MSBuild transitive and multi-target support #​1833

CSharpier.MSBuild can now work as a transitive dependency.

Feature: allow checking formatting with cache #​1830

The csharpier check command now supports a --use-cache option.

Feature: remove dependency on Microsoft.AspNetCore.App #​1508

Previously CSharpier required that Microsoft.AspNetCore.App be installed. CSharpier has been modified to use an HttpListener when it is run using server to remove the need for this dependency.

Fix: csharpier-ignore comment removes linespaces before block #​1867

CSharpier was removing blank lines before csharpier-ignore comments in some cases

// input and expected output
var x = 1;
    
// csharpier-ignore
var y=1;

/// 1.2.6
var x = 1;
// csharpier-ignore
var y=1;
 ... (truncated)

Commits viewable in [compare view](https://github.com/belav/csharpier/compare/1.2.6...1.3.0).
</details>

Updated [Microsoft.NET.Test.Sdk](https://github.com/microsoft/vstest) from 18.8.1 to 18.9.0.

<details>
<summary>Release notes</summary>

_Sourced from [Microsoft.NET.Test.Sdk's releases](https://github.com/microsoft/vstest/releases)._

## 18.9.0

## What's Changed
* Fix tilde/exclamation characters corrupted in TerminalLogger test output by @​nohwnd in https://github.com/microsoft/vstest/pull/16046
* Make TranslationLayer Native AOT-compatible by @​drewnoakes in https://github.com/microsoft/vstest/pull/16045
* Guard GenerateProgramFile target against UseWinUI/UseUwpTools evaluation order by @​nohwnd in https://github.com/microsoft/vstest/pull/16072
* Add RequestingAssembly to AssemblyResolveEventArgs for binary compat by @​nohwnd in https://github.com/microsoft/vstest/pull/16076
* Remove stale Microsoft.Extensions.FileSystemGlobbing binding redirect from testhost.x86 and datacollector by @​Evangelink in https://github.com/microsoft/vstest/pull/16082
* Fix TRX attachment paths when LogFileName contains a subdirectory by @​nohwnd in https://github.com/microsoft/vstest/pull/15791
* Fix missing dumps for .NET Framework child processes in NetClientHangDumper by @​nohwnd in https://github.com/microsoft/vstest/pull/16098
* Fix data collection channels to use negotiated protocol version instead of V1 by @​nohwnd in https://github.com/microsoft/vstest/pull/16096
* Fix race condition in BlameCollector: skip hang dump when testhost hasn't launched yet by @​nohwnd in https://github.com/microsoft/vstest/pull/16065
* Replace TestSDKAutoGeneratedCode with ExcludeFromCodeCoverage in auto-generated Program files by @​nohwnd in https://github.com/microsoft/vstest/pull/16101
* Include testhost process path in crash error messages by @​nohwnd in https://github.com/microsoft/vstest/pull/16108
* Fix DataDriven test results being double-counted in TRX logger totals by @​nohwnd in https://github.com/microsoft/vstest/pull/15766
* Fix datacollector crash visibility: replace Assert with throwable exceptions by @​nohwnd in https://github.com/microsoft/vstest/pull/16048
* Add TreatErrorMessagesAsWarnings parameter to TRX logger by @​nohwnd in https://github.com/microsoft/vstest/pull/16106
* Wait for testhost stderr to drain before reading its crash output by @​nohwnd in https://github.com/microsoft/vstest/pull/16128
* Handle runtimeconfig.dev.json without additionalProbingPaths by @​tmat in https://github.com/microsoft/vstest/pull/16166
* Suggest Microsoft.NET.Test.Sdk when a managed test project brings no testhost by @​nohwnd in https://github.com/microsoft/vstest/pull/16169
* Fix x86 testhost loading mismatched x64 hostfxr (0x800700C1) when run via vstest.console.exe directly (#​16151) by @​azat-msft in https://github.com/microsoft/vstest/pull/16156
* Preserve the real exception (type + stack trace) when a test run aborts in BaseRunTests by @​nohwnd in https://github.com/microsoft/vstest/pull/16167

## New Contributors
* @​drewnoakes made their first contribution in https://github.com/microsoft/vstest/pull/16045

**Full Changelog**: https://github.com/microsoft/vstest/compare/v18.8.0...v18.9.0

Commits viewable in [compare view](https://github.com/microsoft/vstest/compare/v18.8.1...v18.9.0).
</details>

Updated [Microsoft.OpenApi.YamlReader](https://github.com/Microsoft/OpenAPI.NET) from 3.9.0 to 3.10.0.

<details>
<summary>Release notes</summary>

_Sourced from [Microsoft.OpenApi.YamlReader's releases](https://github.com/Microsoft/OpenAPI.NET/releases)._

## 3.10.0

## [3.10.0](https://github.com/microsoft/OpenAPI.NET/compare/v3.9.0...v3.10.0) (2026-08-11)


### Features

* adds deserialization of the example extension ([e5a1080](https://github.com/microsoft/OpenAPI.NET/commit/e5a108004a6c4637d4dd7dc27a417a2d3e29d70b))
* do not ignore multiple types when serializing to 3.0 ([#​2960](https://github.com/microsoft/OpenAPI.NET/issues/2960)) ([ebaf27a](https://github.com/microsoft/OpenAPI.NET/commit/ebaf27ac46f8820e7b817cc33e693632c2fc908a))
* serialize license identifier as extension for earlier versions ([d090989](https://github.com/microsoft/OpenAPI.NET/commit/d0909890d3706152e3ea221660d80ddc69fb8ce5))
* serialize license identifier as extension for earlier versions ([60971ba](https://github.com/microsoft/OpenAPI.NET/commit/60971ba87ced4162e471ebfc1b878776d09cc62f))


### Bug Fixes

* better nullability round-tripping ([655c2c8](https://github.com/microsoft/OpenAPI.NET/commit/655c2c843732faba3687f8fd64568ba509b0065a))
* bound YAML anchor/alias expansion to prevent OOM (billion laughs) ([#​3000](https://github.com/microsoft/OpenAPI.NET/issues/3000)) ([2179326](https://github.com/microsoft/OpenAPI.NET/commit/21793261d6860fb6e607b71fd95c0bd320724764))
* deserialize metadata url from extension in earlier version ([9387b01](https://github.com/microsoft/OpenAPI.NET/commit/9387b01188c4d2297eaaaa08f06c41c83179f688))
* marks deprecated properties from the specification as obsolete ([787b045](https://github.com/microsoft/OpenAPI.NET/commit/787b045faa15f23528be70c9a6fde2d45ec3bd90))
* marks deprecated properties from the specification as obsolete ([953c22a](https://github.com/microsoft/OpenAPI.NET/commit/953c22aa3b0fba6fecc0e3df21186fb368632ba3))
* **schema:** serialize compatibility examples from examples list ([5d8ec3a](https://github.com/microsoft/OpenAPI.NET/commit/5d8ec3a32d49059b68d00cf2ee267a6537c1a678))
* serialize examples as extension in v2/v3 ([ff1dbc9](https://github.com/microsoft/OpenAPI.NET/commit/ff1dbc98dbfc6d7cfb87153c2b61ec3351157f72))
* serialize examples as extension in v2/v3 ([edf3c67](https://github.com/microsoft/OpenAPI.NET/commit/edf3c6789aafcc6156e193ee6f3bc23d886e8052))

Commits viewable in [compare view](https://github.com/Microsoft/OpenAPI.NET/compare/v3.9.0...v3.10.0).
</details>

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions


</details>