Bump actions/setup-dotnet from 5.3.0 to 5.4.0

[dependabot]

Bumps actions/setup-dotnet from 5.3.0 to 5.4.0.

Release notes

Sourced from actions/setup-dotnet's releases.

v5.4.0

What's Changed

Enhancements

• Improve global.json SDK version validation for rollForward by @​priyagupta108 in actions/setup-dotnet#742
• Pin actions to commit SHAs in workflows by @​priya-kinthali in actions/setup-dotnet#744
• Expand the CSC problem matcher to light up more errors on GitHub. by @​StephenCleary in actions/setup-dotnet#717

Documentation

• Docs(action): Explicitly mark all optional inputs with required: false by @​kranthipoturaju in actions/setup-dotnet#737

Bug Fixes

• Fix global.json creation command by @​michal2612 in actions/setup-dotnet#694

Dependency Updates

• Upgrade @​actions/cache to 5.1.0, log cache write denied by @​jasongin in actions/setup-dotnet#746

New Contributors

• @​jasongin made their first contribution in actions/setup-dotnet#746
• @​michal2612 made their first contribution in actions/setup-dotnet#694
• @​kranthipoturaju made their first contribution in actions/setup-dotnet#737
• @​StephenCleary made their first contribution in actions/setup-dotnet#717

Full Changelog: actions/setup-dotnet@v5...v5.4.0

Commits

• 26b0ec1 Expand the CSC problem matcher to light up more errors on GitHub. (#717)
• da5e548 docs(action): explicitly mark all optional inputs with required: false (#737)
• 9bd3b44 Improve readability of global.json creation command (#694)
• 4406a63 Bump @​actions/cache to 5.1.0, log cache write denied (#746)
• dc3262d pin actions to commit SHAs in workflows (#744)
• 95a3f8b Validate global.json SDK version before rollForward optimization (#742)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Qodana Community for .NET

395 new problems were found

Inspection name	Severity	Problems
Cannot resolve symbol	🔶 Warning	46
Redundant name qualifier	🔶 Warning	40
Inconsistent Naming	🔶 Warning	7
Path error	🔶 Warning	5
Conditional access qualifier expression is not null according to nullable reference types' annotations	🔶 Warning	2
Use preferred style of 'new' expression when created type is evident	◽️ Notice	159
Inconsistent Naming	◽️ Notice	52
Avoid using 'async' for methods and functions with the 'void' return type: Avoid using 'async' for methods and functions with the 'void' return type and a parameter of type 'System.EventArgs'	◽️ Notice	34
Property can be made init-only: Non-private accessibility	◽️ Notice	33
Member can be made private: Non-private accessibility	◽️ Notice	5
Method return value is never used: Non-private accessibility	◽️ Notice	5
Auto-property can be made get-only: Non-private accessibility	◽️ Notice	3
Class is never instantiated: Non-private accessibility	◽️ Notice	1
Class with virtual (overridable) members never inherited: Non-private accessibility	◽️ Notice	1
Prefer using concrete value over 'default' or 'new()'	◽️ Notice	1
Type member is never used: Non-private accessibility	◽️ Notice	1

View the detailed Qodana report

To be able to view the detailed Qodana report, you can either:

• Register at Qodana Cloud and configure the action
• Use GitHub Code Scanning with Qodana
• Host Qodana report at GitHub Pages
• Inspect and use qodana.sarif.json (see the Qodana SARIF format for details)

To get *.log files or any other Qodana artifacts, run the action with upload-result option set to true,
so that the action will upload the files as the job artifacts:

      - name: 'Qodana Scan'
        uses: JetBrains/qodana-action@v2026.1.3
        with:
          upload-result: true

Contact Qodana team

Contact us at qodana-support@jetbrains.com

• Or via our issue tracker: https://jb.gg/qodana-issue
• Or share your feedback: https://jb.gg/qodana-discussions