Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump SonarAnalyzer.CSharp from 8.40.0.48530 to 8.52.0.60960 #130

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 1, 2023

Bumps SonarAnalyzer.CSharp from 8.40.0.48530 to 8.52.0.60960.

Release notes

Sourced from SonarAnalyzer.CSharp's releases.

8.52

@​Corniel: Thank you for implementing S3898 for VB.NET!

New Rules

  • 6667 - [VB.NET] Implement S3898 -ValueTypes should implement IEquatable - for VB.NET

Improvements

  • 6638 - Rename S3866 to DoNotUseIIf
  • 6636 - [C#] Update S4018: Improve rule message
  • 6605 - Bump sonar-plugin-api from 9.13.0.360 to 9.14.0.375
  • 6602 - Add clean code as a tag on our nuget packages
  • 6573 - Fix ProjectOutFolderPath processing
  • 6571 - Update RSPEC before 8.52 release
  • 6532 - Refactor SonarAnalysisContext
  • 6511 - Remove useless package references
  • 6488 - [C#] Merge rule S4214 onto S4200
  • 6132 - [C#] Remove S4457 from SonarWay

Bug Fixes

  • 6612 - [C#] Fix S3353: Add support for different function types
  • 6598 - Incremental PR analysis fails for SQ < 9.4

False Positive

  • 6449 - [C#] Fix S4457 FP: When argument check is after async code
  • 5879 - [C#] Fix S2930 FP: Recognize IAsyncDisposable

False Negative

  • 6646 - Fix S2190 FN: Recursion inside init accessor of property

8.51

Hello everyone,

We are happy to announce that in this release we implemented Incremental PR analysis for C# and Vb.Net, a feature that can significantly reduce the analysis time when analyzing PRs.

Additionally, we fixed false positives and negatives introduced by the new C# 11 syntax and introduced a new rule #5693

Special thanks to our contributors @​Corniel for #5693 and @​Smenus for #6497.

New features

Incremental PR analysis (#6514, #6512, #6487, #6486, #6485, #6484, #6483)

New rules

  • 5693 - [C#, VB.NET] New rule S6444: RegEx evaluation should have a time out specified

Improvements

  • 6477 - Update RSPEC before 8.51 release and deprecate S4214

False Positive

  • 6497 - [C#] Fix S2699 FP: Support derivations of ExpectedExceptionBaseAttribute for MsTest
  • 6476 - [C#, VB.NET] Fix FNs/FPs: Add support for LibraryImportAttribute
  • 6429 - [C#] Fix S1067 FP: Conditionals in pattern should not be considered as a unit for the whole pattern

False Negative

  • 6517 - [C#] Fix S2674 FN: Add support for ConfigureAwait

... (truncated)

Commits
  • 791eddb Revert release.yml to automatically use latest minor version (#6693)
  • f8aff1b Fix S2930 FN (#6685)
  • 4da3c1d Update RSPEC for release (#6681)
  • 1e71ac1 Fix S4457 FP: Argument check after async code (#6624)
  • 986b17a Remove S4457 from SonarWay profile (#6673)
  • de08a90 Fix FP S2930: IAsyncDisposable objects should not be flagged if disposed prop...
  • 7cce08b Implement S3898 -ValueTypes should implement IEquatable - for VB.NET (#5740)
  • c62cc0c Fix FN S2190: No issues raised if recursion is inside an init accessor of a p...
  • 1168a47 Update rspec scaffolding script after the SonarAnalysisContext refactoring an...
  • 71ccb2b Happy New Year 2023! (#6665)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [SonarAnalyzer.CSharp](https://github.com/SonarSource/sonar-dotnet) from 8.40.0.48530 to 8.52.0.60960.
- [Release notes](https://github.com/SonarSource/sonar-dotnet/releases)
- [Commits](SonarSource/sonar-dotnet@8.40.0.48530...8.52.0.60960)

---
updated-dependencies:
- dependency-name: SonarAnalyzer.CSharp
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Feb 1, 2023
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Mar 1, 2023

Superseded by #132.

@dependabot dependabot bot closed this Mar 1, 2023
@dependabot dependabot bot deleted the dependabot/nuget/development/SonarAnalyzer.CSharp-8.52.0.60960 branch March 1, 2023 15:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants