chore(deps): Bump Microsoft.CodeAnalysis.CSharp.Workspaces from 4.8.0…

… to 4.9.2 in /packages/@jsii/dotnet-runtime/src (#4442)

Bumps [Microsoft.CodeAnalysis.CSharp.Workspaces](https://github.com/dotnet/roslyn) from 4.8.0 to 4.9.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/dotnet/roslyn/releases">Microsoft.CodeAnalysis.CSharp.Workspaces's releases</a>.</em></p>
<blockquote>
<h2>.NET 6.0.1</h2>
<p><a href="https://github.com/dotnet/core/releases/tag/v6.0.1">Release</a></p>
<h2>.NET 5.0.4</h2>
<p><a href="https://github.com/dotnet/core/releases/tag/v5.0.4">Release</a></p>
<h2>.NET 5.0.2</h2>
<p><a href="https://github.com/dotnet/core/blob/master/release-notes/5.0/5.0.2/5.0.2.md">Release Notes</a>
<a href="https://github.com/dotnet/core/blob/master/release-notes/5.0/5.0.2/5.0.2-install-instructions.md">Install Instructions</a></p>
<h1>Repos</h1>
<ul>
<li><a href="https://github.com/dotnet/core/releases/tag/v5.0.2">Core</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/dotnet/roslyn/blob/main/docs/Breaking%20API%20Changes.md">Microsoft.CodeAnalysis.CSharp.Workspaces's changelog</a>.</em></p>
<blockquote>
<h1>API Breaking Changes</h1>
<h1>Version 1.1.0</h1>
<h3>Removed VisualBasicCommandLineParser.ctor</h3>
<p>During a toolset update we noticed the constructor on <code>VisualBasicCommandLineParser</code> was <code>public</code>.  This in turn made many of the <code>protected</code> members of <code>CommandLineParser</code> a part of the API surface as it gave external customers an inheritance path.</p>
<p>It was never the intent for these members to be a part of the supported API surface.  Creation of the parsers is meant to be done via the <code>Default</code> singleton properties.  There seems to be little risk that we broke any customers here and hence we decided to remove this API.</p>
<p>PR: <a href="https://redirect.github.com/dotnet/roslyn/pull/4169">dotnet/roslyn#4169</a></p>
<h3>Changed Simplifier methods to throw ArgumentNullExceptions</h3>
<p>Changed Simplifier.ReduceAsync, Simplifier.ExpandAsync, and Simplifier.Expand methods to throw ArgumentNullExceptions if any non-optional, nullable arguments are passed in.  Previously the user would get a NullReferenceException for synchronous methods and an AggregateException containing a NullReferenceException for asynchronous methods.</p>
<p>PR: <a href="https://redirect.github.com/dotnet/roslyn/pull/5144">dotnet/roslyn#5144</a></p>
<h1>Version 1.3.0</h1>
<h3>Treat a method marked with both public and private flags as private</h3>
<p>The scenario is loading an assembly where some methods, fields or nested types have accessibility flags set to 7 (all three bits set), which mean public AND private.
After the fix, such flags are loaded to mean private.
The compat change is we’re trading a compile-time success and runtime failure (native compiler) against a compile-time error (restoring the behavior of v1.2).</p>
<p>Details below:</p>
<ul>
<li>The native compiler successfully compiles the method and field case (those only yield runtime error System.TypeLoadException: Invalid Field Access Flags) and reported an accessibility error on the nested type.</li>
<li>The 1.2 compiler generated errors:</li>
</ul>
<pre><code>error BC30390: 'C.Private Overloads Sub M()' is not accessible in this context because it is 'Private'.
error BC30389: 'C.F' is not accessible in this context because it is 'Private'.
error BC30389: 'C.C2' is not accessible in this context because it is 'Protected Friend'.
error BC30390: 'C2.Private Overloads Sub M2()' is not accessible in this context because it is 'Private'.
</code></pre>
<ul>
<li>The 1.3 compiler crashes.</li>
<li>After fix, the same errors as 1.2 are generated again.</li>
</ul>
<p>PR: <a href="https://redirect.github.com/dotnet/roslyn/pull/11547">dotnet/roslyn#11547</a></p>
<h3>Don't emit bad DateTimeConstant, and load bad BadTimeConstant as default value instead</h3>
<p>The change affects compatibility in two ways:</p>
<ul>
<li>When loading an invalid DateTimeConstant(-1), the compiler will use default(DateTime) instead, whereas the native compiler would produce code that fails to execute.</li>
<li>DateTimeConstant(-1) will still count when we check that you don’t specify two default values. The compiler will produce an error, instead of succeeding (and producing IL with two attributes).</li>
</ul>
<p>PR: <a href="https://redirect.github.com/dotnet/roslyn/pull/11536">dotnet/roslyn#11536</a></p>
<h1>Version 4.1.0</h1>

</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a href="https://github.com/dotnet/roslyn/commits">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=Microsoft.CodeAnalysis.CSharp.Workspaces&package-manager=nuget&previous-version=4.8.0&new-version=4.9.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>

packages/@jsii/Directory.Build.targets

@@ -6,7 +6,7 @@
     <PackageReference Update="Microsoft.Extensions.Logging" Version="8.0.0" />
     <PackageReference Update="Microsoft.Extensions.Logging.Console" Version="8.0.0" />
 
-    <PackageReference Update="Microsoft.CodeAnalysis.CSharp.Workspaces" Version="4.8.0" />
+    <PackageReference Update="Microsoft.CodeAnalysis.CSharp.Workspaces" Version="4.9.2" />
     <PackageReference Update="Microsoft.CodeAnalysis.Analyzers" Version="3.3.4" />
     <PackageReference Update="Microsoft.CodeQuality.Analyzers" Version="3.3.2" />