Skip to content

Bump the tests group with 4 updates#330

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/nuget/dot-config/tests-0c7fe4fa4f
Open

Bump the tests group with 4 updates#330
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/nuget/dot-config/tests-0c7fe4fa4f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 22, 2026

Copy link
Copy Markdown
Contributor

Updated CancelCop.Analyzer from 1.27.173 to 1.27.224.

Release notes

Sourced from CancelCop.Analyzer's releases.

1.27.224

Changed

  • Reworked the GitHub and NuGet README around CancellationToken and async Roslyn search intent.
  • Replaced the stale package README that advertised 9 analyzers and 111 tests with the root README as a single source of truth.
  • Corrected build, compatibility, test-count, sample, project-layout, and default-branch guidance.
  • Expanded NuGet title, description, and tags across C#, .NET, ASP.NET Core, EF Core, HttpClient, gRPC, SignalR, MediatR, async/await, and code-fix discovery terms.

Validation

  • 733 tests passed locally and in GitHub Actions.
  • Release build, pack, package layout, README byte comparison, and consumer diagnostic smoke test passed.
  • Independent Claude review returned clean after one documentation correction.

1.27.223

Fixed

  • CC019 now classifies direct negated type-pattern rethrows by polarity and cancellation-hierarchy overlap.
  • Guards that swallow OperationCanceledException, a derived cancellation type, or a possible interface-implementing cancellation subtype are diagnosed, while disjoint and same-named custom types stay quiet.

Verification

  • 732 tests passed.
  • Release build, package inspection, and consumer smoke test passed.

1.27.222

Fixed

  • CC022 now verifies that the analyzed target framework exposes CancellationTokenSource.CancelAsync() before reporting Cancel().
  • .NET 6 and .NET 7 projects no longer receive a non-compiling migration suggestion.

Verification

  • 726 tests passed.
  • Release build, package inspection, and consumer smoke test passed.

1.27.221

Fixed

  • CC005B now analyzes MVC controller actions decorated with [AcceptVerbs(...)] and offers the existing add-token fix.
  • Same-named attributes outside Microsoft.AspNetCore.Mvc remain excluded.

Verification

  • 725 tests passed.
  • Release build, package inspection, and consumer smoke test passed.

1.27.220

CC005C: positional unreduced EndpointRouteBuilderExtensions Map calls now analyze and fix lambda and method-group handlers with exact framework and route-builder gates. Verified by 722 tests, Release build, package inspection, PR CI, and master CI.

1.27.219

CC015: statically imported Task.WaitAll and Task.WaitAny calls are now diagnosed in async code while zero-timeout, shadowing, and sync guards remain quiet. Verified by 717 tests, Release build, package inspection, PR CI, and master CI.

1.27.218

CC020/CC021: null-conditional reduced extension calls now count as context handoffs while ordinary instance calls remain diagnostic. Verified by 712 tests, Release build, package inspection, PR CI, and master CI.

1.27.217

CC020/CC021: chained null-conditional CancellationToken and RequestAborted reads now count as observation while nested-object members remain excluded. Verified by 709 tests, Release build, package inspection, PR CI, and master CI.

1.27.216

Fixed CC020/CC021 false positives: direct null-conditional context token reads now count as runtime observation, while similarly named downstream members do not.

1.27.215

Fixed a CC022 false negative: null-conditional CancellationTokenSource.Cancel() calls are now diagnosed in async code. No automatic fix is offered because preserving null semantics requires a control-flow rewrite.

1.27.214

Fixed a CC002 false negative by classifying explicit arguments by their parameter-converted type, so boxed token expressions no longer masquerade as propagation while contextual token defaults remain recognized.

1.27.213

Fixed a CC019 false negative: a conditional rethrow restricted to an unrelated exception type no longer masks cancellation swallowing, while OperationCanceledException guards remain recognized.

1.27.212

CC009 now ignores cancellation checks deferred inside nested lambdas or local functions when evaluating an enclosing loop.

1.27.211

CC016 and CC017 now diagnose cancellation-token parameters only passed as out, while ref, in, and ordinary forwarding remain observations.

1.27.210

CC012 now diagnoses and fixes CancellationToken.None imported through using static while keeping custom None properties quiet.

1.27.209

CC016 and CC017 now diagnose cancellation-token parameters that are only overwritten before use, while preserving right-hand-side reads as real observation.

1.27.208

Fixed

  • CC012 now diagnoses repeatedly parenthesized CancellationToken.None, typed default, and default-literal arguments when a token is available.
  • The code fix replaces the complete outer argument expression cleanly.

1.27.207

Fixed

  • CC014 now recognizes actual parameterless framework IDisposable.Dispose() invocations through an exact built-in interface cast.
  • Arbitrary casts, user-defined conversions, and custom Dispose extension calls remain diagnostic.

1.27.206

Fixed

  • CC027 now diagnoses tasks returned from calls on an existing local disposed by expression-form using (resource).
  • Analysis is limited to returns inside that exact using scope, preserving earlier and outside returns.

1.27.205

Fixed

  • CC014 now treats parentheses as transparent for CancellationTokenSource disposal and conservative ownership escape.
  • Mixed parenthesized/null-forgiven references retain their semantics, while non-disposal calls remain diagnostic.

1.27.204

Fixed

  • CC013 now excludes provably zero framework TimeSpan durations so scheduler-yield semantics are not rewritten to synchronously completing Task.Delay calls.
  • Runtime-determined and nonzero TimeSpan sleeps remain diagnostic.

1.27.203

Fixed

  • CC014 now treats null-forgiving operators as transparent for CancellationTokenSource disposal and conservative ownership escapes.
  • Non-disposal calls through the same syntax remain diagnostic.

1.27.202

Fixed

  • CC028 now diagnoses blocking System.IO.File calls made through using static imports.
  • The fixer rewrites them to the bare async counterpart and flows a supported in-scope cancellation token.

1.27.201

Fixed

  • CC013 no longer diagnoses the zero-millisecond scheduler-yield form Thread.Sleep(0).
  • Positive and runtime-determined sleeps in async code remain diagnosed.

1.27.200

Fixed

  • CC020 and CC021 now treat a reduced extension-method receiver as semantic context handoff.
  • Ordinary instance calls still require explicit cancellation observation and remain diagnostic.

1.27.199

Fixed

  • CC010 no longer reports a redundant missing-token diagnostic when a custom async-enumerable ConfigureAwait overload already receives a CancellationToken.
  • Boolean ConfigureAwait configuration without token flow remains diagnosed.

1.27.198

What's Changed

Full Changelog: georgepwall1991/CancelCop.Analyzer@v1.27.197...v1.27.198

1.27.197

What's Changed

Full Changelog: georgepwall1991/CancelCop.Analyzer@v1.27.196...v1.27.197

1.27.196

What's Changed

Full Changelog: georgepwall1991/CancelCop.Analyzer@v1.27.195...v1.27.196

1.27.195

What's Changed

Full Changelog: georgepwall1991/CancelCop.Analyzer@v1.27.194...v1.27.195

1.27.194

What's Changed

Full Changelog: georgepwall1991/CancelCop.Analyzer@v1.27.193...v1.27.194

1.27.193

What's Changed

Full Changelog: georgepwall1991/CancelCop.Analyzer@v1.27.192...v1.27.193

1.27.192

What's Changed

Full Changelog: georgepwall1991/CancelCop.Analyzer@v1.27.191...v1.27.192

1.27.191

CC026 now excludes exact zero-TimeSpan SemaphoreSlim.Wait probes.

1.27.190

CC015 now treats zero-timeout Task.WaitAll and Task.WaitAny calls as immediate probes.

1.27.189

CC015 now excludes exact zero-TimeSpan Task.Wait probes while preserving potentially blocking timeout diagnostics.

1.27.188

CC015 no longer diagnoses Task.Wait(0), a guaranteed immediate completion probe.

1.27.187

CC022 and CC025 now recognize async top-level programs while preserving purely synchronous top-level behavior.

1.27.186

CC024 now diagnoses async lambdas converted to custom void-returning delegates while preserving the sanctioned event-handler delegate shape.

1.27.185

What's Changed

Full Changelog: georgepwall1991/CancelCop.Analyzer@v1.27.184...v1.27.185

1.27.184

What's Changed

Full Changelog: georgepwall1991/CancelCop.Analyzer@v1.27.183...v1.27.184

1.27.183

What's Changed

Full Changelog: georgepwall1991/CancelCop.Analyzer@v1.27.182...v1.27.183

1.27.182

What's Changed

Full Changelog: georgepwall1991/CancelCop.Analyzer@v1.27.181...v1.27.182

1.27.181

What's Changed

Full Changelog: georgepwall1991/CancelCop.Analyzer@v1.27.180...v1.27.181

1.27.180

What's Changed

Full Changelog: georgepwall1991/CancelCop.Analyzer@v1.27.179...v1.27.180

1.27.179

What's Changed

Full Changelog: georgepwall1991/CancelCop.Analyzer@v1.27.178...v1.27.179

1.27.178

What's Changed

Full Changelog: georgepwall1991/CancelCop.Analyzer@v1.27.177...v1.27.178

1.27.177

What's Changed

Full Changelog: georgepwall1991/CancelCop.Analyzer@v1.27.176...v1.27.177

1.27.176

What's Changed

Full Changelog: georgepwall1991/CancelCop.Analyzer@v1.27.175...v1.27.176

1.27.175

What's Changed

Full Changelog: georgepwall1991/CancelCop.Analyzer@v1.27.174...v1.27.175

1.27.174

What's Changed

Full Changelog: georgepwall1991/CancelCop.Analyzer@v1.27.173...v1.27.174

Commits viewable in compare view.

Updated Microsoft.Extensions.Http.Polly from 9.0.0 to 9.0.18.

Release notes

Sourced from Microsoft.Extensions.Http.Polly's releases.

9.0.18

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.17...v9.0.18

9.0.17

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.16...v9.0.17

9.0.16

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.15...v9.0.16

9.0.15

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.14...v9.0.15

9.0.14

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.13...v9.0.14

9.0.13

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.12...v9.0.13)

9.0.12

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.11...v9.0.12

9.0.11

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.10...v9.0.11

9.0.10

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.9...v9.0.10

9.0.9

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.8...v9.0.9

9.0.7

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.6...v9.0.7

9.0.6

Bug Fixes

  • Forwarded Headers Middleware: Ignore X-Forwarded-Headers from Unknown Proxy (#​61622)
    The Forwarded Headers Middleware now ignores X-Forwarded-Headers sent from unknown proxies. This change improves security by ensuring that only trusted proxies can influence forwarded header values, preventing potential spoofing or misrouting issues.

Dependency Updates

  • Bump src/submodules/googletest from 52204f7 to 04ee1b4 (#​61762)
    Updates the GoogleTest submodule to a newer commit, bringing in the latest improvements and bug fixes from the upstream project.
  • Update dependencies from dotnet/arcade (#​61714)
    Updates internal build and infrastructure dependencies from the dotnet/arcade repository, ensuring compatibility and access to the latest build tools.
  • Update dependencies from dotnet/extensions (#​61571)
    Refreshes dependencies from the dotnet/extensions repository, incorporating the latest features and fixes from the extensions libraries.
  • Update dependencies from dotnet/extensions (#​61877)
    Further updates dependencies from dotnet/extensions, ensuring the project benefits from recent improvements and bug fixes.
  • Update dependencies from dotnet/arcade (#​61892)
    Additional updates to build and infrastructure dependencies from dotnet/arcade, maintaining up-to-date tooling and build processes.

Miscellaneous

  • Update branding to 9.0.6 (#​61831)
    Updates the project version and branding to 9.0.6, reflecting the new release and ensuring version consistency across the codebase.
  • Merging internal commits for release/9.0 (#​61925)
    Incorporates various internal commits into the release/9.0 branch, ensuring that all relevant changes are included in this release.

This summary is generated and may contain inaccuracies. For complete details, please review the linked pull requests.

Full Changelog: v9.0.5...v9.0.6

9.0.5

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.4...v9.0.5

9.0.4

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.3...v9.0.4

9.0.3

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.2...v9.0.3

9.0.2

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.1...v9.0.2

9.0.1

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.0...v9.0.1

Commits viewable in compare view.

Updated microsoft.web.librarymanager.cli from 3.0.71 to 3.0.114.

Release notes

Sourced from microsoft.web.librarymanager.cli's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated System.ServiceModel.Syndication from 9.0.0 to 9.0.18.

Release notes

Sourced from System.ServiceModel.Syndication's releases.

9.0.18

Release

What's Changed

Full Changelog: dotnet/runtime@v9.0.17...v9.0.18

9.0.17

Release

What's Changed

Full Changelog: dotnet/runtime@v9.0.16...v9.0.17

9.0.16

Release

9.0.15

Release

9.0.14

Release

9.0.13

Release

What's Changed

Full Changelog: dotnet/runtime@v9.0.12...v9.0.13

9.0.12

Release

9.0.11

Release

What's Changed

Full Changelog: dotnet/runtime@v9.0.10...v9.0.11

9.0.10

Release

What's Changed

Full Changelog: dotnet/runtime@v9.0.9...v9.0.10

9.0.9

Release

What's Changed

Description has been truncated

Bumps CancelCop.Analyzer from 1.27.173 to 1.27.224
Bumps Microsoft.Extensions.Http.Polly from 9.0.0 to 9.0.18
Bumps microsoft.web.librarymanager.cli from 3.0.71 to 3.0.114
Bumps System.ServiceModel.Syndication from 9.0.0 to 9.0.18

---
updated-dependencies:
- dependency-name: CancelCop.Analyzer
  dependency-version: 1.27.224
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: tests
- dependency-name: Microsoft.Extensions.Http.Polly
  dependency-version: 9.0.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: tests
- dependency-name: microsoft.web.librarymanager.cli
  dependency-version: 3.0.114
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: tests
- dependency-name: System.ServiceModel.Syndication
  dependency-version: 9.0.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: tests
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added .NET Pull requests that update .net code dependencies Pull requests that update a dependency file labels Jul 22, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .net code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants