diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 94db3ff..af76b6a 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -73,7 +73,7 @@ jobs:
 
       - name: 🧪 test
         shell: pwsh
-        run: dnx --yes retest -- --no-build
+        run: dotnet dnx --yes retest -- --no-build
 
       - name: 🐛 logs
         uses: actions/upload-artifact@v4
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 035d811..9ad32c1 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -35,7 +35,7 @@ jobs:
 
       - name: 🧪 test
         shell: pwsh
-        run: dnx --yes retest -- --no-build
+        run: dotnet dnx --yes retest -- --no-build
 
       - name: 🐛 logs
         uses: actions/upload-artifact@v4
diff --git a/changelog.md b/changelog.md
index 82bf38a..a45a48f 100644
--- a/changelog.md
+++ b/changelog.md
@@ -1,5 +1,11 @@
 # Changelog
 
+## Unreleased
+
+:bug: Fixed bugs:
+
+- Assemblies of transitive nuget dependencies are placed into the build folder [\#389](https://github.com/devlooped/GitInfo/issues/389)
+
 ## [v3.6.0](https://github.com/devlooped/GitInfo/tree/v3.6.0) (2025-10-17)
 
 [Full Changelog](https://github.com/devlooped/GitInfo/compare/v3.6.0-beta...v3.6.0)
diff --git a/src/GitInfo/GitInfo.msbuildproj b/src/GitInfo/GitInfo.msbuildproj
index 5ae11c9..72aec79 100644
--- a/src/GitInfo/GitInfo.msbuildproj
+++ b/src/GitInfo/GitInfo.msbuildproj
@@ -14,7 +14,7 @@
   <ItemGroup>
     <PackageReference Include="NuGetizer" Version="1.4.5" />
     <PackageReference Include="Microsoft.SourceLink.GitHub" Version="8.0.0" PrivateAssets="all" />
-    <PackageReference Include="ThisAssembly.Constants" Version="2.1.2" Pack="true" TargetFramework="netstandard2.0" />
+    <PackageReference Include="ThisAssembly.Constants" Version="2.1.2" Pack="true" PrivateAssets="all" IncludeAssets="build;analyzers" TargetFramework="netstandard2.0" />
   </ItemGroup>
   <ItemGroup>
     <None Include="build/**/*.*" />
diff --git a/src/GitInfo/buildMultiTargeting/GitInfo.targets b/src/GitInfo/buildMultiTargeting/GitInfo.targets
index bd02a40..3409738 100644
--- a/src/GitInfo/buildMultiTargeting/GitInfo.targets
+++ b/src/GitInfo/buildMultiTargeting/GitInfo.targets
@@ -4,6 +4,9 @@
     <!-- Make sure we're always private to the referencing project. Prevents analyzers from "flowing out" of the referencing project. -->
     <PackageReference Update="GitInfo" PrivateAssets="all" PackTransitive="false" />
 
+    <!-- Ensure ThisAssembly.Constants (a dependency) is only used for build/analyzers to avoid bringing its transitive runtime assemblies (e.g. System.Threading.Tasks.Extensions.dll, System.Runtime.CompilerServices.Unsafe.dll) into the build output. See https://github.com/devlooped/GitInfo/issues/389 -->
+    <PackageReference Update="ThisAssembly.Constants" PrivateAssets="all" IncludeAssets="build;analyzers" />
+
     <!-- This makes sure we don't enforce SponsorLink transitively, but only when consumers are directly referencing our package. -->
     <SponsorablePackageId Include="GitInfo" />
 
diff --git a/src/GitInfo/buildTransitive/GitInfo.targets b/src/GitInfo/buildTransitive/GitInfo.targets
index bd02a40..3409738 100644
--- a/src/GitInfo/buildTransitive/GitInfo.targets
+++ b/src/GitInfo/buildTransitive/GitInfo.targets
@@ -4,6 +4,9 @@
     <!-- Make sure we're always private to the referencing project. Prevents analyzers from "flowing out" of the referencing project. -->
     <PackageReference Update="GitInfo" PrivateAssets="all" PackTransitive="false" />
 
+    <!-- Ensure ThisAssembly.Constants (a dependency) is only used for build/analyzers to avoid bringing its transitive runtime assemblies (e.g. System.Threading.Tasks.Extensions.dll, System.Runtime.CompilerServices.Unsafe.dll) into the build output. See https://github.com/devlooped/GitInfo/issues/389 -->
+    <PackageReference Update="ThisAssembly.Constants" PrivateAssets="all" IncludeAssets="build;analyzers" />
+
     <!-- This makes sure we don't enforce SponsorLink transitively, but only when consumers are directly referencing our package. -->
     <SponsorablePackageId Include="GitInfo" />