Skip to content

chore(deps): update analyzers - #587

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/analyzers
Open

renovate[bot] wants to merge 1 commit into
mainfrom
renovate/analyzers

Conversation

@renovate

@renovate renovate Bot commented Sep 30, 2026 •

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
PerformanceSharp.Analyzers 5.1.2 → 5.1.4 age confidence
Roslynator.Analyzers 5.0.0 → 5.0.1 age confidence
SecuritySharp.Analyzers 5.1.2 → 5.1.4 age confidence
SonarAnalyzer.CSharp (source) 10.34.0.3385 → 10.35.0.4138 age confidence
StyleSharp.Analyzers 5.1.2 → 5.1.4 age confidence

Release Notes

glennawatson/RoslynCommonAnalyzers (PerformanceSharp.Analyzers)

v5.1.4

Compare Source

🗞️ What's Changed
🐛 Fixes
🧹 General Changes
📦 Dependencies

🔗 Full Changelog: glennawatson/RoslynCommonAnalyzers@5.1.3...5.1.4

🙌 Contributions

🌱 New contributors since the last release: @​ChrisPulman
💖 Thanks to all the contributors: @​ChrisPulman, @​glennawatson

🤖 Automated services that contributed: renovate[bot]

v5.1.3

Compare Source

5.1.3 fixes analyzer suggestions that could introduce recursion, remove a custom operation, or change base dispatch. It also updates dependencies and build tooling, with test and benchmark support for .NET 10 and .NET 11.

Analyzer fixes

  • PSH1317: Avoid suggesting the enclosing cancellation-token overload, which could make a wrapper call itself. Other valid overloads remain available.
  • SST2496: Preserve custom Close() operations, including contour operations. Only framework disposal aliases and their overrides are treated as redundant disposal calls.
  • PSH1211: Preserve explicit base.ToString() calls in interpolations and method arguments so the suggested change keeps the original dispatch behavior.

These fixes are included in PR #​129, commit 8ed330978df44fc6b21cb9ffaa36c983e1ff076a.

Build and dependency updates

  • Update analyzer, test and coverage dependencies.
  • Run tests and benchmarks on .NET 10 and .NET 11. Update BenchmarkDotNet to 0.16.0-preview.2 for .NET 11 support.
  • Use shared build and release actions pinned to commit SHAs, and move workflow logic into .NET scripts.
  • Support current BenchmarkDotNet JSON export names and compatible runtimes for historical benchmark comparisons.
  • Skip SonarCloud finalization for cancelled jobs.
  • Update signing images and GitHub Actions dependencies.

Pull requests and commits

All commits below are included since 5.1.2. SHA links point to the full commit.

Commit PR Description
572397f8 #​111 chore(deps): bump ghcr.io/reactiveui/certum-signer:latest docker digest to 170e4da
7f7f82bd #​112 chore(deps): bump ghcr.io/reactiveui/certum-signer:latest docker digest to ab4f5e5
96774bf5 #​114 chore(deps): bump ghcr.io/reactiveui/certum-signer:latest docker digest to 374ce36
dbfa8f69 #​113 chore(deps): bump dependency tunit to 1.69.0
1b1df110 #​115 chore(deps): bump github/codeql-action digest to 2892aa5
3a1fa219 #​118 chore(deps): bump ghcr.io/reactiveui/certum-signer:latest docker digest to 576f758
1b25087b #​116 chore(deps): bump dependency tunit to 1.70.1
11894ae4 #​119 chore(deps): bump ghcr.io/reactiveui/certum-signer:latest docker digest to 7a77f04
096289e5 #​121 chore(deps): bump ghcr.io/reactiveui/certum-signer:latest docker digest to 5b2b171
22ce1bf3 #​122 chore(deps): bump ghcr.io/reactiveui/certum-signer:latest docker digest to 9610907
cc4ea202 ci: update Certum signer image
9c5a25eb #​124 chore(deps): bump ghcr.io/reactiveui/certum-signer:latest docker digest to 05d52b4
8ed651d5 #​125 chore(deps): bump github actions
5b0b6a23 #​126 chore(deps): bump github actions
70148040 chore: Delete stylecop.json
8ed33097 #​129 fix: prevent unsafe analyzer suggestions and refresh ci

Full changelog: 5.1.2...5.1.3

Release commit: 8ed330978df44fc6b21cb9ffaa36c983e1ff076a

dotnet/roslynator (Roslynator.Analyzers)

v5.0.1

Fixed
  • Set Visual Studio extension InstallationTarget to API version [17.14,) so Marketplace publish succeeds (VsixPub0029; API 18.0 is experimental). Installable on Visual Studio 2022 17.14+ and Visual Studio 2026 (VS 2026 extension compatibility).
  • [CLI] Reference the compiled output of referenced projects that cannot be loaded into the workspace (for example F# projects), so their types are no longer reported as missing (CS0103/CS0246) during analysis (PR)
  • [CLI] Fix loading of analyzers that reference System.Composition on the .NET 10 SDK (PR)
  • Fix code fix for RCS1233 to add parentheses when the new &&/|| expression is an operand of an operator with higher precedence (e.g. a && b | c is now fixed to a && (b || c)) (PR)
SonarSource/sonar-dotnet (SonarAnalyzer.CSharp)

v10.35.0.4138

Compare Source

Release notes - .NET Analyzers - 10.35

Feature

NET-1313 Improve S3267: Suggest other LINQ methods instead of always Where
NET-4549 Update RSPEC before 10.35 release

False Positive

NET-87 Fix S6667 FP: Add an exception when rethrowing the exception
NET-1559 Fix S6966 FP: FluentValidation ValidateAndThrow should not be proposed
NET-3964 Fix S125 FP: Do not raise on comments that resemble code but are not
NET-4294 Fix S107 FP: Should not raise on constructors of dependency-injection managed types
NET-4310 Fix S8747 FP: Do not raise when data is backfilled via UpdateData
NET-4315 Fix S3453 FP: Should not raise on classes with static members and non-static nested types
NET-4415 Fix S8969 FP: redundant null-forgiving operator raised on ref-loop variables reassigned each iteration
NET-4466 Fix S6966 FP: Do not suggest a non-awaitable overload resolved via speculative rebind
NET-4546 Fix S6669 FP: overridden "format" rule parameter is ignored
NET-4556 Fix S1128 FP: SafeVisit abort silently drops necessary usings
NET-4634 Fix S9022 FP: Generic identity pass-through wrapper not implementing IEnumerable misclassified as a reshaping boundary
NET-4639 Fix S8717 FP: EF6 and EF Core referenced in the same compilation (in-progress migration)

False Negative

NET-4256 Fix S9022 FN: Include on owned-type navigation not detected as redundant
NET-4532 Fix S9022/S9023 FN: rule stays silent when the Include is used in a comparison, cast, or other common expression
NET-4541 Fix S5542 FN: Detect weak RSA signature padding

Bug

NET-4571 Fix AD0001: NRE in DoNotOverwriteCollectionElements
NET-4587 Fix AD0001: ArgumentNullException in ReleaseCorrectReaderWriterLockBase (S7131)
NET-4588 Fix AD0001: ArgumentNullException in FirstSingleShouldBeUsedOnNonEmptyCollectionBase (S7130)
NET-4636 Fix S6966 AD0001: NullReferenceException on null-conditional calls followed by an indexer

Maintenance

NET-4370 Drop backward compatibility with S4NET below 5.2
NET-4540 Update MSTest to 4.4.0
NET-4550 Bump version to 10.35
NET-4555 Update SonarSource/sonar-scanner-engine monorepo to v13.11.0.5929
NET-4558 Create SLCORE ticket instead of SLVSCODE and SLI on release
NET-4579 ShimLayer Generator: Remove old BasicBlock and ControlFlowBranch
NET-4580 Update dependency Microsoft.NET.Test.Sdk to 18.10.0
NET-4596 Update dependency org.codehaus.mojo:build-helper-maven-plugin to v3.6.2
NET-4597 Update dependency Verify.MSTest to 32.0.1
NET-4622 Update SonarSource/sonar-scanner-engine monorepo to v13.13.0.6016
NET-4628 Update dependency Microsoft.NET.Test.Sdk to 18.10.1
NET-4631 Update MSTest to 4.4.1
NET-4632 Harden S1144: internal-type usage scan no longer trusts partial SafeVisit walks
NET-4637 Update protocolbuffers/protobuf monorepo to v4.36.2
NET-4663 Restore sonar-csharp-enterprise-plugin minsize to 6200000


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@codecov

codecov Bot commented Sep 30, 2026 •

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 99.26%. Comparing base (843006e) to head (59ebb41).

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #587   +/-   ##
=======================================
  Coverage   99.26%   99.26%           
=======================================
  Files           7        7           
  Lines         272      272           
  Branches       49       49           
=======================================
  Hits          270      270           
  Partials        2        2           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@renovate
renovate Bot force-pushed the renovate/analyzers branch from bf2dc8f to 1816811 Compare October 7, 2026 19:03
@renovate renovate Bot changed the title chore(deps): update dependency sonaranalyzer.csharp to 10.35.0.4138 chore(deps): update analyzers Oct 7, 2026
@renovate
renovate Bot force-pushed the renovate/analyzers branch from 1816811 to da954ae Compare October 13, 2026 13:59
@renovate
renovate Bot force-pushed the renovate/analyzers branch from da954ae to 59ebb41 Compare October 17, 2026 20:22
@sonarqubecloud

Copy link
Copy Markdown

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants