build(deps): Bump the analyzers group with 3 updates by dependabot[bot] · Pull Request #135 · Tibirot/Cla6

Fix analyzer RCS1060 to not report a file that contains only multiple partial declarations of the same type (PR)
Fix analyzer RCS1231 to not suggest in for ref struct parameters (#1725) (PR)
Fix analyzer RCS1260 false positive for omit_when_single_line on multi-line object/collection initializers (#1439) (PR)
Fix analyzer RCS0036 to report blank lines between single-line declarations in records (PR)
Fix analyzer RCS1046 to report async void methods without Async suffix (PR)
Fix analyzer RCS1265 to not report catch clauses with a when filter (PR)
Fix analyzer RCS0034 for types with a primary constructor and multiple constraint clauses (PR)
Fix analyzer RCS1231 to not report CancellationToken in sync methods returning Task (PR)
[CLI] Fix GitLab output format to use relative paths, forward slashes, and 1-based line numbers (PR)
[CLI] Fix generate-doc to omit internal interfaces from type declarations and the Implements section (PR)

4.16.0

Added

[CLI] Suppress error code from Roslynator when it detects issues in code but runs successfully (PR by @mdrybak)

Fixed

Fix analyzer RCS1118 to not report local variable passed as 'in' argument (PR by @NoahStolk)
Fix analyzer RCS1074 (PR by @cbersch)
Fix enum contained flags check for partial matches in RCS1258 (PR by @ovska)
Fix analyzer RCS1146 (PR)
Fix analyzer RCS1194 (PR)
Fix analyzer RCS1060 to ignore classes marked with file modifier (PR by @cbersch)
Fix analyzer RCS1231 (PR by @cbersch)
Fix analyzer RCS1246 for conditional access expressions ([PR](Fix analyzer RCS1246 for conditional access expressions dotnet/roslynator#1772 by @krajek))
[CLI] Fix fix command ignoring --include / --exclude file filter (PR by @hashiiiii)
[CLI] Fix loading of projects and solutions on .NET 10 SDK (PR)

4.15.0

Added

Add option roslynator_null_conditional_operator.avoid_negative_boolean_comparison (PR)
- Do not suggest to use null-conditional operator when result would be ... != true/false
- Applicable for RCS1146

Fixed

Fix analyzer RCS1172 (PR)
[CLI] Fix loc command (PR)
Exclude ref-field backed properties from RCS1085 (PR by @ovska)
[CLI] Fix rename-symbol scope option not being applied correctly (PR by @andrtmschkw)
[CLI] Fix rename-symbol support for top-level statement (PR by @andrtmschkw)

Changed

Migrate to .NET 10 (including command-line tool) (PR)

4.14.1

Added

[CLI] Add support for slnx files (PR by @darthtrevino)
- Bump Roslyn to 4.14.0
- Drop support for .NET 7 SDK

Fixed

Fix analyzer RCS1246 (PR)
Fix analyzer RCS1248 (PR)
Fix analyzer RCS1203 (PR)
Fix analyzer RCS1043 (PR)
Fix analyzer RCS1213 (PR)
- Add unity method OnRectTransformDimensionsChange
Fix analyzer RCS1253 (PR)
Fix refactoring Check expression for null (PR)

Changed

Change behavior of analyzer RCS1206 (PR)
- The condition for option omit_when_single_line will be that the braces/brackets are on the same line, not just the expression in the braces/brackets

Commits viewable in compare view.

Updated SonarAnalyzer.CSharp from 10.19.0.132793 to 10.32.0.713.

Release notes

Sourced from SonarAnalyzer.CSharp's releases.

10.32.0.713

Release notes - .NET Analyzers - 10.32

Feature

NET-4132 Implement rule S9022: Redundant "Include" calls should be removed
NET-4215 Implement rule S9118: Default values should be compatible with their entity property type
NET-4240 Update RSPEC before 10.32 release

False Positive

NET-1322 Fix S2857 FP: Do not raise in constant string interpolation when string is in square brackets
NET-1468 Fix S6966 FP: should not raise when inside lock
NET-1598 Fix S1125 FP: dynamic and custom nullable structs with conversion to bool are compliant
NET-4233 Fix S8733 FP: AsSplitQuery/AsSingleQuery set in a different statement than the colliding Includes goes undetected
NET-4297 Fix S8717 FP: EFCore DBFirst Scaffold

10.31.0.145097

Release notes - .NET Analyzers - 10.31

Feature

NET-3865 Implement S8733: Potential Cartesian Explosion
NET-3875 Implement rule S8718: Client-evaluated default values should use database functions
NET-4087 Use shared secret exclusion patterns in hardcoded secrets rules
NET-4211 Update RSPEC before 10.31 release

False Positive

NET-1922 S1144 FP: When registering a service with Microsoft.Extensions.DependencyInjecion framework
NET-3928 Fix S3267 FP: Should not raise on EntityFramework IQueryables
NET-4205 Fix S1244 FP: should not raise on NaN check via x.Equals(double.NaN)

10.30.0.144632

Release notes - .NET Analyzers - 10.30

Feature

NET-1536 Implement rule S8970: Null-forgiving operators should not be used when nullable warnings are disabled
NET-3436 Implement rule S8949: Use the overload that accepts a CancellationToken
NET-3810 Fix: Protobuf Importer logs debug on excluded files
NET-3877 Implement rule S8747: Migrations should not narrow column types without converting existing data
NET-4091 Implement rule S8969: Null-forgiving operators should not be redundant
NET-4120 Update RSPEC before 10.30 release

False Positive

NET-1541 Fix S3459 FP: support classes marked with [AutoConstructor] attribute
NET-1583 Fix S6967 FP: Raises when model has no validation attributes
NET-1840 Fix S3903 FP: top-level statements and partial Program in separate file
NET-4059 Improve precision of S8949 (CancellationTokenShouldBeUsed) - umbrella
NET-4191 Fix S3169 FP: Should not raise in Azure Cosmos

False Negative

NET-3819 Fix S1244 FN: Should report on Double.Equals

Bug

NET-4107 Fix S4026 Race Condition

10.29.0.143774

Release notes - .NET Analyzers - 10.29

Feature

NET-3997 Move S6444 out of hotspot
NET-4060 Update RSPEC before 10.29 release

False Positive

NET-1626 Fix S6444 FP: REGEX_DEFAULT_MATCH_TIMEOUT

False Negative

NET-3920 Fix S2971 FN: Should raise on EntityFramework IQueryables
NET-3921 Fix S1155 FN: Should raise on EntityFramework IQueryables
NET-3922 Fix S3981 FN: Should raise on EntityFramework IQueryables
NET-3924 Fix S3169 FN: Should raise on EntityFramework IQueryables

10.28.0.143324

Release notes - .NET Analyzers - 10.28

Feature

NET-1990 S100/S101: Configuration for custom acronyms
NET-2280 New Rule T0048: Avoid is not { } value
NET-3802 Update RSPEC before 10.28 release
NET-3818 Change Protobuf Info message to Debug
NET-3820 Coverage warnings should surface as Analysis Warnings
NET-3827 Create RSPEC for S8717: Multiple "[Key]" attributes should not be used to define a composite key
NET-3843 Implement rule S8717: Multiple "[Key]" attributes should not be used to define a composite key
NET-3949 Modify rule S2696: add fix guidance, compliant example, and exceptions
NET-3950 Modify rule S1135: add compliant example and fix guidance
NET-3951 Modify rule S108: give the C# page its own code examples
NET-3952 Modify rule S1133: add rationale, fix guidance, code examples
NET-3953 Modify rule S3251: add compliant example, fix guidance, and exceptions
NET-3967 Move S1313 out of hotspot
NET-3969 Move S2077 out of hotspot
NET-3972 Move S2092 and S3330 out of hotspot
NET-3973 Move S2245 out of hotspot
NET-3975 Move S2257 out of hotspot
NET-3976 Move S4036 out of hotspot
NET-3978 Move S4502 out of hotspot
NET-3980 Move S4507 out of hotspot
NET-3982 Move S5122 out of hotspot
NET-3983 Move S5332 out of hotspot
NET-3993 Move S5443 out of hotspot
NET-3995 Move S5753 out of hotspot
NET-3996 Move S5766 out of hotspot
NET-3998 Move S6640 out of hotspot
NET-4000 Move S4790 out of hotspot
NET-4001 Move S5693 out of hotspot
NET-4008 Change S1313 message
NET-4009 Change S2257 message
NET-4010 Change S4036 message
NET-4011 Change S2077 message

False Positive

NET-3564 Fix FP S6966: Do not raise for methods for SqlDataReader.IsDBNull/GetFieldValue
NET-3808 Fix S4260 FP: Don't raise on extension properties
NET-3821 Fix S1244 FP: Should not raise on comparison to 0
NET-3825 Fix S2221 FP: Do not raise on async void
NET-3878 Fix S3358 FP: Suggesting to extract ternary from EF Core select
NET-3914 Fix T0044 FP: Should not raise on locator annotaitons
NET-3926 Fix S6608 FP: Should not raise inside expression tree
NET-3927 Fix S6603 FP: Should not raise inside expression tree
NET-3932 S2068: Do not raise on @paramName and $paramName

False Negative

NET-1673 Fix S4790 FN: default parameters
NET-2846 Fix S1117 FN: Extensions, Partial Events
... (truncated)

10.27.0.140913

Release notes - .NET Analyzers - 10.27

Feature

NET-1285 S2629: Add custom message for Log4Net and Castle.Core
NET-3666 Deprecate S5042 and move it from HotSpots to Code Smell
NET-3783 Update RSPEC before 10.27 release

False Positive

NET-2696 Fix S4260 FP: Extension Properties always raise

False Negative

NET-230 Fix S4056 FN: SpecifyIFormatProviderOrCultureInfo for C#13 compatibility
NET-2692 Fix S2190 FN: Recursive extension properties
NET-2705 Fix S3343 FN: Partial Constructor with attribute in definition
NET-2732 Fix S1172 FN: Extension blocks
NET-2745 Fix S4144 FN: Extension Members
NET-2829 Fix S3241 FN: Extension methods and extension blocks
NET-3541 Fix S1117 FN: add CatchDeclaration coverage and adopt LocalDeclarationKinds

10.26.0.140279

Release notes - .NET Analyzers - 10.26

Feature

NET-3694 Update RSPEC before 10.26 release

False Positive

NET-2346 Fix S1854 FP: Variable used after another assignment in finally
NET-2347 Fix S1168 FP: Do not report on value types
NET-3698 Fix S1210 FP: file-scoped types should be exempt

False Negative

NET-1265 Fix S2930 FN: raise issues on non-disposed RegistryKeys
NET-2685 Fix S3604 FN: Field Keyword, Partial Constructors, NullConditional Assignment
NET-2812 Fix S4275 FN: Field Keyword
NET-2999 Fix S6672 FN: Mismatch in primary constructor is not recognized

10.25

?

Feature

NET-3613 - Support Cobertura coverage file format
- Cobertura report paths can be passed via the sonar.cs.cobertura.reportsPaths parameter
NET-3665 - Update RSPEC before 10.25 release

False Positive

NET-3640 - Fix S3400 FP: Don't report function with conditional compilation body

10.24

This release brings a batch of false negative fixes and analyzer crash fixes.

Bug Fixes

NET-3596 - Fix S1144 AD0001: Index out of range exception with type named Nullable
NET-3522 - Fix S1215 AD0001: ArgumentOutOfRangeException
NET-3521 - Fix S2053 AD0001: NRE
NET-3520 - Fix S3267 AD0001: NRE

False Positives

NET-2276 - Fix S1192 FP: EF migration classes

False Negatives

NET-3569 - Fix T0008 and T0009 FN: Support extension blocks
NET-2875 - Fix S2092 FN: Null Conditional Assignment
NET-2857 - Fix S3330 FN: Null Conditional Assignment
NET-2719 - Fix S4136 FN: Extension methods
NET-2688 - Fix S4433 FN: Null-conditional assignment in tracker
NET-2675 - Fix S6418 FN: Field keyword
NET-2667 - Fix S2934 FN: Null-conditional assignment and field keyword
NET-2658 - Fix S127 FN: BitShiftCompound

10.23

This release brings a bunch of fixes! Enjoy.

Bug Fixes

NET-3557 - Fix SE AD0001 when SyntaxTreeOptionsProvider is null
NET-3519 - Fix AD0001: NRE in PropertiesAccessCorrectField

False Positives

NET-3532 - Fix S2583 FP: Any called two times
NET-3468 - Fix S1144 FP: Erroneously flagged Add() method used in Collection Initializer
NET-3454 - Fix S3267 FP: ref struct in foreach body cannot be captured in LINQ lambda
NET-3164 - Fix S125 FP: Improve semicolon heuristic
NET-2559 - Fix S5944 FP: When method name is also a class name of generic argument
NET-2438 - Fix S1067 FP: Do not raise an issue inside Equals() implementation
NET-1565 - Fix S1192 FP: Shouldn't raise on Dapper parameters
NET-1168 - Fix S1172 FP: When parameter conditionally used in local function
NET-52 - Fix S4017 FP: Do not raise when implementing abstract class/interface

False Negatives

NET-1642 - Fix S3415, S2701, S2699, S2187 FN: Support NUnit 4.0
NET-348 - Fix S4144 FN: Methods with generic return types

10.22

Hello everyone,
This release brings 4 new rules to help developers transition to C# 14, and a bunch of false positive fixes.

New rules

NET-3361 - New rule S8381: "scoped" should be escaped when used as a type name in lambda parameters
NET-3359 - New rule S8368: "extension" identifiers should be escaped to avoid contextual keyword conflicts
NET-3347 - New rule S8380: Return types named "partial" should be escaped with "@"
NET-3345 - New rule S8367: Identifiers should not conflict with the "field" keyword in C# 14?

False Positive

NET-3443 - Fix S1940 FP: for floating point numbers that can be NaN "!(a <= b)" is not the same as "a > b"
NET-3001 - Fix S3063 FP: Concatenation with identifier
NET-1569 - Fix S5944 FP: AddressOf(MethodName) in Return statement
NET-3445 - Fix T0029 FP: Inside target-typed new
NET-2817 - Fix T0029 FP: Ident for collection expression members
NET-2024 - Fix T0029 FP: Inside array initializer
NET-3341 - Fix T0029 FP: After member access
NET-3462 - Fix T0042 FP: Inside constructors and collection initializers
NET-3426 - Fix T0042: Raw string in collection initializer
NET-2888 - Fix T0042 FP: Returned from method
NET-2874 - Fix T0042 FP: Raw string in ternary

Bugs

NET-3386 - Fix S4583 AD0001: BeginInvoke callback declared in separate file

Other

NET-3385 - S2612: Rule type changed from Security Hotspot to Vulnerability

10.21

### Bug

NET-3376 - Fix S6930 AD0001: Issue on template / code files for blazor
NET-3367 - Fix S4830 AD0001: CertificateValidationCheck Syntax node is not within syntax tree

Feature

NET-3260 - Fix broken links in S6960 RSPEC

False Positive

NET-2886 - Fix T0015 FP: In constructor
NET-1678 - Fix S4275 FP: with property overload

10.20

This release brings 9 precision improvements — 7 false positive fixes and 2 false negative fixes — across rules S1116, S1144, S1210, S1643, S1854, S2365, S3254, S3265, and S127. It also promotes S2068 and S6418 from Security Hotspot to Vulnerability, making them visible directly in the IDE, and removes S3256 from the Sonar Way quality profile.

Changes

NET-3227 - Remove S3256 from "Sonar Way" quality profile
NET-3208 - S6418: Rule type changed from Security Hotspot to Vulnerability
NET-3207 - S2068: Rule type changed from Security Hotspot to Vulnerability
NET-3206 - Remove links to rules.sonarsource.com

False Positive

NET-3215 - Fix FP on S127: Should only raise on stop condition variables
NET-3212 - Fix FP on S3254: Don't raise if the parameter isn't last
NET-3053 - Fix FP on S1210: Implementing comparable operators for private types
NET-2984 - Fix FP on S3265: BCL enums with [Flags] not recognized due to metadata resolution
NET-2976 - Fix FP on S1854: Default value initializations flagged despite exemptions
NET-2966 - Fix FP on S1144: Constructors in MEF-exported types
NET-2956 - Fix FP on S1116: Empty loop body with side effects in condition

False Negative

NET-1261 - Fix FN on S2365: Rule should report on new collection
NET-1259 - Fix FN on S1643: Concatenation for parameters, fields and properties are not detected

Rule specification

NET-3246 - Modify Rule S127: Update Description
NET-3218 - Modify Rule S3265: Add exception for MethodImplAttributes
NET-3086 - Modify Rule S1116: Add loop exception

Maintenance

NET-3047 - Update RSPEC before 10.20 release

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
`@dependabot uni...

Description has been truncated

Bumps Meziantou.Analyzer from 2.0.220 to 3.0.159 Bumps Roslynator.Analyzers from 4.14.0 to 4.16.1 Bumps SonarAnalyzer.CSharp from 10.19.0.132793 to 10.32.0.713 --- updated-dependencies: - dependency-name: Meziantou.Analyzer dependency-version: 3.0.159 dependency-type: direct:production update-type: version-update:semver-major dependency-group: analyzers - dependency-name: Roslynator.Analyzers dependency-version: 4.16.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: analyzers - dependency-name: SonarAnalyzer.CSharp dependency-version: 10.32.0.713 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: analyzers ... Signed-off-by: dependabot[bot] <support@github.com>

Meziantou 3.x and Sonar 10.32 add rules the tree does not satisfy, and -warnaserror turns every one of them into a build failure. None of this is a behaviour change; it is the bump's cost. Rebasing on main also left six lock files stale: the Crm module and Cla6.Platform.Security landed after Dependabot generated the branch, so their packages.lock.json still pinned the old analyzer versions and --locked-mode refused the restore. Regenerated with --force-evaluate; nothing else moved. S8969 (new in Sonar 10.32) — 37 redundant null-forgiving operators, almost all of them a `!` after a `.Should().NotBeNull()` that already narrowed the type. Deleted. MA0015 (new in Meziantou 3.x) — three throw helpers applied to something that is not a parameter, so the captured CallerArgumentExpression named a loop variable rather than the argument the caller passed. Adding an explicit paramName trades MA0015 for Sonar's S3236, which forbids exactly that, so the guards are now written out. They read like the throws already sitting next to them and report the right parameter. MA0011 — the Money.ToString() test deliberately pins invariant-culture output and already suppressed CA1305. MA0011 is the same objection; it joins the pragma. S2077/S2068 in Cla6.DbTool are suppressed in .editorconfig with the reasoning, matching how the other analyzer disagreements are recorded there. Postgres cannot bind an identifier as a parameter and every identifier in that SQL is a compile-time constant, so S2077's remedy does not exist; the one configured value, the role password, is already bound through quote_literal. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

dependabot Bot added dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code labels Aug 17, 2026

dependabot Bot requested a review from Tibirot as a code owner August 17, 2026 03:48

dependabot Bot added dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code labels Aug 17, 2026

dependabot Bot and others added 2 commits August 17, 2026 08:41

Tibirot force-pushed the dependabot/nuget/aspire/Cla6.ServiceDefaults/analyzers-d01a2788b9 branch from 4cb8a22 to cb5ff2a Compare August 17, 2026 05:54

Tibirot merged commit 6102927 into main Aug 17, 2026
4 checks passed

dependabot Bot deleted the dependabot/nuget/aspire/Cla6.ServiceDefaults/analyzers-d01a2788b9 branch August 17, 2026 06:06

Navigation Menu

build(deps): Bump the analyzers group with 3 updates - #135

build(deps): Bump the analyzers group with 3 updates#135
Tibirot merged 2 commits into
mainfrom
dependabot/nuget/aspire/Cla6.ServiceDefaults/analyzers-d01a2788b9

dependabot Bot commented on behalf of github Aug 17, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Aug 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

3.0.159

What's Changed

3.0.158

What's Changed

3.0.157

What's Changed

3.0.156

What's Changed

3.0.155

What's Changed

3.0.154

What's Changed

3.0.153

What's Changed

3.0.152

What's Changed

3.0.151

What's Changed

3.0.150

What's Changed

3.0.149

What's Changed

3.0.148

What's Changed

3.0.147

What's Changed

3.0.146

What's Changed

3.0.145

What's Changed

3.0.144

What's Changed

3.0.143

What's Changed

3.0.142

What's Changed

3.0.141

What's Changed

3.0.140

What's Changed

3.0.139

What's Changed

3.0.138

What's Changed

3.0.137

What's Changed

3.0.136

What's Changed

3.0.135

What's Changed

3.0.134

What's Changed

3.0.133

What's Changed

3.0.132

What's Changed

3.0.131

What's Changed

3.0.130

What's Changed

3.0.129

What's Changed

3.0.128

What's Changed

3.0.127

What's Changed

3.0.126

What's Changed

3.0.125

What's Changed

3.0.124

What's Changed

3.0.123

What's Changed

3.0.122

What's Changed

3.0.121

dependabot Bot commented on behalf of github Aug 17, 2026 •

edited

Loading