diff --git a/src/sdks/dotnet/Directory.Packages.props b/src/sdks/dotnet/Directory.Packages.props
index 8b75fd15..fd737507 100644
--- a/src/sdks/dotnet/Directory.Packages.props
+++ b/src/sdks/dotnet/Directory.Packages.props
@@ -20,7 +20,7 @@
     <PackageVersion Include="System.Text.Json" Version="10.0.9" />
   </ItemGroup>
   <ItemGroup Label="Code quality">
-    <PackageVersion Include="Microsoft.VisualStudio.Threading.Analyzers" Version="17.14.15" />
+    <PackageVersion Include="Microsoft.VisualStudio.Threading.Analyzers" Version="18.7.23" />
   </ItemGroup>
   <ItemGroup Label="Testing">
     <PackageVersion Include="Microsoft.NET.Test.Sdk" Version="18.6.0" />
diff --git a/tests/sdks/dotnet/.editorconfig b/tests/sdks/dotnet/.editorconfig
index 09d6365a..a9a36817 100644
--- a/tests/sdks/dotnet/.editorconfig
+++ b/tests/sdks/dotnet/.editorconfig
@@ -263,3 +263,9 @@ csharp_prefer_static_anonymous_function = true:suggestion
 dotnet_diagnostic.xUnit1048.severity = error
 dotnet_diagnostic.xUnit1051.severity = suggestion
 dotnet_diagnostic.CA2016.severity = error
+
+# These E2E tests intentionally exercise the synchronous SDK API
+# (e.g. Env.Load, Env.ResolveFile, builder.Resolve/Inject) to verify the
+# sync-over-async surface works for consumers. Suppress VSTHRD103 so the
+# analyzer does not flag (or auto-rewrite) these deliberate sync calls.
+dotnet_diagnostic.VSTHRD103.severity = none