chore: Bump paket from 10.3.1 to 11.0.1

[dependabot]

Updated paket from 10.3.1 to 11.0.1.

Release notes

Sourced from paket's releases.

11.0.1

• paket auto-restore on and paket convert-from-nuget download paket.targets from the latest Paket 11 release up to the running version instead of the latest GitHub release, so that they keep working once 12.0 ships; so does paket.exe for paket.bootstrapper.exe, which it also downloads on paket init
• The bootstrapper, when it downloads from GitHub, now finds the latest 11.x release once 12.0 ships, for paket.exe and for --self, instead of staying on 11.0.0
• The paket .NET tool now honours no_proxy and the system proxy settings, as paket.exe already did; as in curl, a no_proxy entry matches the host and its subdomains

11.0.0

• DEPRECATION: paket.exe and paket.bootstrapper.exe are deprecated and will no longer be published from Paket 12.0 onwards. The paket .NET tool becomes the only supported way to run Paket: dotnet tool install paket. Both binaries now print a notice on every run unless -s is passed.
• The bootstrapper shipped with this release never resolves a version past 11.x, so it keeps working once 12.0 ships without a paket.exe asset instead of failing the build. An explicitly pinned version is unaffected.
• Upgrade to .NET 10: SDK 10.0.400 and target frameworks from net9 to net10.0. The paket .NET tool now requires the .NET 10 runtime; the merged paket.exe still targets net461.
• Allow a whole source line in paket.dependencies to come from an environment variable (source %FEED_URL%) - [repo-assist] Allow sources to be specified as Environment Variables, with docs fsprojects/Paket#4374
• Fall back to User/Machine scoped environment variables in paket.dependencies - [repo-assist] Fall back to User/Machine scoped environment variables in paket.dependencies fsprojects/Paket#4406
• Parse native0.0 as a valid TFM, removing the "Could not detect any platforms" warning for packages such as Microsoft.NET.Test.Sdk - Parse native0.0 as valid TFM fsprojects/Paket#4323
• Recognize the netcoreapp6.0 to netcoreapp10.0 monikers when detecting platforms - Could not detect any platforms warning fsprojects/Paket#4239
• Prefer the MSBuild PackageId property when resolving the pack id - [repo-assist] Prefer MSBuild PackageId property when resolving pack id (fixes #3195) fsprojects/Paket#4360
• Read the Package-prefixed metadata of SDK-style projects (PackageReleaseNotes, PackageProjectUrl, PackageIconUrl, PackageLicenseExpression, PackageLicenseUrl) in paket pack - Pack with type project should find release notes in new csproj fsprojects/Paket#3603
• Forward NoWarn/TreatWarningsAsErrors/WarningsAsErrors to PackTask - [repo-assist] Forward NoWarn/TreatWarningsAsErrors/WarningsAsErrors to PackTask fsprojects/Paket#4393
• Warn when paket pack finds no template files - [repo-assist] Warn when paket pack finds no template files fsprojects/Paket#4384
• Warn on unknown option values in paket.dependencies - [repo-assist] Warn on unknown dependencies file parser option values (#3637) fsprojects/Paket#4386
• Warn when an F# project references FSharp.Core without redirects: force - [repo-assist] Warn when F# project references FSharp.Core without redirects: force fsprojects/Paket#4394
• Improve the error message when a package is missing from paket.lock - [repo-assist] Improve error message when package missing from paket.lock fsprojects/Paket#4365
• Distinguish "package not found" from real conflicts in resolver errors - [repo-assist] Distinguish "package not found" from real conflicts in resolver errors fsprojects/Paket#4408
• Invalidate the per-project restore skip when paket.lock content changes - Invalidate per-project restore skip when paket.lock content changes fsprojects/Paket#4334
• Fix restore cache not regenerating deleted .paket/load scripts - [repo-assist] Fix restore cache to detect missing .paket/load scripts fsprojects/Paket#4363
• Preserve the position of the Paket.Restore.targets import in project files - [repo-assist] Fix #3209: preserve Paket.Restore.targets import position fsprojects/Paket#4364
• Fix dotnet pack --include-symbols failing because of multiple nuspec files - [repo-assist] Fix dotnet pack failure with --include-symbols due to multiple nuspec files fsprojects/Paket#4367
• Fix exclude directive not suppressing build targets/props import - [repo-assist] Fix exclude directive not suppressing build targets/props import (#3193) fsprojects/Paket#4368
• Filter non-DLL files from the analyzers folder to prevent MSBuild breakage - [repo-assist] Filter non-DLL files from analyzers folder to prevent MSBuild breakage fsprojects/Paket#4379
• Fix paket remove not removing clitool packages from paket.dependencies - [repo-assist] Fix: paket remove does not remove clitool packages from paket.dependencies fsprojects/Paket#4405
• Fix tab characters in paket.dependencies causing resolution failure - [repo-assist] Fix tab characters in paket.dependencies causing resolution failure fsprojects/Paket#4398
• Strip inline comments from framework/restriction lines in paket.dependencies - [repo-assist] Fix: strip inline comments from framework/restriction lines in paket.dependencies fsprojects/Paket#4414
• Fix inconsistent ~> LOCKEDVERSION range for short version strings - [repo-assist] Fix inconsistent ~> LOCKEDVERSION twiddle range for short version strings fsprojects/Paket#4416
• Fix local git dependency version restriction failure - [repo-assist] Fix local git dependency version restriction failure (#3422) fsprojects/Paket#4390
• Fix intermittent git dependency restore failures via cross-process locking - [repo-assist] Fix intermittent git dependency restore failures via cross-process locking fsprojects/Paket#4407
• Fix local file:/// git URL handling to preserve the absolute path slash - [repo-assist] Fix (redacted) git URL handling to preserve absolute path slash fsprojects/Paket#4377
• Prevent git subprocess hangs on non-interactive build agents - [repo-assist] Prevent git subprocess hangs on non-interactive build agents fsprojects/Paket#4357
• Prevent home directory deletion from a malformed github/git source spec - [repo-assist] Prevent home directory deletion from malformed github/git source spec fsprojects/Paket#4389
• Fix unquoted local NuGet source paths containing spaces - [repo-assist] Fix unquoted local NuGet source paths containing spaces fsprojects/Paket#4354
• Fix local NuGet source not recognizing .symbols.nupkg packages - [repo-assist] Fix local NuGet source not recognizing .symbols.nupkg packages fsprojects/Paket#4388
• Fix createRelativePath mangling paths with special characters (#, %, &) - [repo-assist] Fix createRelativePath mangling paths with special characters (#, %, &) fsprojects/Paket#4359
• Skip dot folders (e.g. .localhistory, .git) when scanning for files - [repo-assist] Skip dot folders (e.g. .localhistory, .git) when scanning for files fsprojects/Paket#4358
• Treat a missing Dependencies node in OData feeds (e.g. Artifactory) as no dependencies - [repo-assist] Treat missing dependencies as no dependencies (with test) fsprojects/Paket#4373
• Fix credential lookup for www.nuget.org / nuget.org mismatch - [repo-assist] Fix credential lookup for www.nuget.org / nuget.org mismatch (fixes #3843) fsprojects/Paket#4418
• Fix trailing slash mismatch in credential/token source lookup - [repo-assist] Fix trailing slash mismatch in credential/token source lookup (#3592) fsprojects/Paket#4369
• Fix add-credentials failing when input is redirected (Git Bash) - [repo-assist] Fix add-credentials failing when input is redirected (Git Bash) fsprojects/Paket#4370
• Fix NO_PROXY wildcard entries not matching subdomains - [repo-assist] Fix NO_PROXY wildcard bypass entries not matching subdomains fsprojects/Paket#4392
• Fix bootstrapper unconditionally forcing the console foreground color - [repo-assist] Fix bootstrapper unconditionally forcing console foreground color fsprojects/Paket#4385
• Remove msbuild.exe lookup that crashed after RoslynTools.MSBuild removal - Remove msbuild.exe lookup to fix build crash after RoslynTools.MSBuild removal #4002 fsprojects/Paket#4330
• Reduced memory allocations in ProjectFile.findInsertSpot - perf: reduce memory allocations in ProjectFile.findInsertSpot fsprojects/Paket#4322
• Bump Newtonsoft.Json and Mono.Cecil, pin System.Formats.Asn1 to a patched version (CVE-2024-38095) - [repo-assist] Bump Newtonsoft.Json and Mono.Cecil (patch updates) fsprojects/Paket#4362 [repo-assist] Pin System.Formats.Asn1 to patched version (fixes NU1903 / CVE-2024-38095) fsprojects/Paket#4409
• Fix paket pack on Linux and macOS for projects using group conditions, where the second condition was run as a shell command of its own

11.0.0-alpha004

• DEPRECATION: paket.exe and paket.bootstrapper.exe are deprecated and will no longer be published from Paket 12.0 onwards. The paket .NET tool becomes the only supported way to run Paket: dotnet tool install paket. Both binaries now print a notice on every run unless -s is passed.
• The bootstrapper shipped with this release never resolves a version past 11.x, so it keeps working once 12.0 ships without a paket.exe asset instead of failing the build. An explicitly pinned version is unaffected.

11.0.0-alpha003

• Attempt to republish now package permissions are in place

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)