use regex to replace all invalid chars

As suggested by @tobsil

Bump ThisAssembly.AssemblyInfo from 1.2.15 to 1.3.1

Bumps [ThisAssembly.AssemblyInfo](https://github.com/devlooped/ThisAssembly) from 1.2.15 to 1.3.1.
- [Release notes](https://github.com/devlooped/ThisAssembly/releases)
- [Changelog](https://github.com/devlooped/ThisAssembly/blob/main/changelog.md)
- [Commits](devlooped/ThisAssembly@v1.2.15...v1.3.1)

---
updated-dependencies:
- dependency-name: ThisAssembly.AssemblyInfo
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Ensure IsDirty is a constant

Fixes the regression reported in #287.
Fixes #285.

Bump ThisAssembly

Bump ThisAssembly.AssemblyInfo from 1.2.11 to 1.2.14

Bumps [ThisAssembly.AssemblyInfo](https://github.com/devlooped/ThisAssembly) from 1.2.11 to 1.2.14.
- [Release notes](https://github.com/devlooped/ThisAssembly/releases)
- [Changelog](https://github.com/devlooped/ThisAssembly/blob/main/changelog.md)
- [Commits](devlooped/ThisAssembly@v1.2.11...v1.2.14)

---
updated-dependencies:
- dependency-name: ThisAssembly.AssemblyInfo
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Bump to ThisAssembly version that doesn't run so early

Fixes #260

Bump to SponsorLink

💜 Bump SponsorLink for better privacy

See https://github.com/devlooped/SponsorLink/blob/main/releases.md#v096

Make sure we don't surface SponsorLink as an API

When taking a dependency on SponsorLink, we should only depend on the build+analyzer artifacts in the pacakge.

Bump to latest SponsorLink

See https://github.com/devlooped/SponsorLink/blob/main/releases.md#v095