Skip to content

Bump the analyzers group with 3 updates - #90

Open
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/nuget/develop/analyzers-c49cd1338d
Open

dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/nuget/develop/analyzers-c49cd1338d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 12, 2026

Copy link
Copy Markdown
Contributor

Updated Meziantou.Analyzer from 3.0.320 to 3.0.326.

Release notes

Sourced from Meziantou.Analyzer's releases.

3.0.326

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.326

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.325...3.0.326

3.0.325

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.325

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.324...3.0.325

3.0.324

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.324

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.323...3.0.324

3.0.323

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.323

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.322...3.0.323

3.0.322

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.322

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.321...3.0.322

3.0.321

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.321

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.320...3.0.321

Commits viewable in compare view.

Updated Microsoft.CodeAnalysis.NetAnalyzers from 10.0.403 to 11.0.100.

Release notes

Sourced from Microsoft.CodeAnalysis.NetAnalyzers's releases.

11.0.100

You can build .NET 11.0 from the repository by cloning the release tag v11.0.100 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

Important

Please use https://builds.dotnet.microsoft.com/dotnet/source-build/dotnet-source-11.0.100-rtm.26529.118.tar.gz instead of the GitHub-generated sources tarball. This is due to a discrepancy in the ownership metadata. The signatures were generated from build-produced source archives with ownership normalized to UID/GID 2001:2001, while GitHub’s automatically generated archives use 0:0. The source contents are identical, but the ownership metadata changes the archive bytes, causing signature verification to fail.

11.0.100-rc.3.26522.148

You can build .NET 11.0 RC 3 from the repository by cloning the release tag v11.0.100-rc.3.26522.148 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

Important

Please use https://builds.dotnet.microsoft.com/dotnet/source-build/dotnet-source-11.0.100-rc.3.26522.148.tar.gz instead of the GitHub-generated sources tarball. This is due to a discrepancy in the ownership metadata. The signatures were generated from build-produced source archives with ownership normalized to UID/GID 2001:2001, while GitHub’s automatically generated archives use 0:0. The source contents are identical, but the ownership metadata changes the archive bytes, causing signature verification to fail.

11.0.100-rc.2.26504.105

You can build .NET 11.0 RC 2 from the repository by cloning the release tag v11.0.100-rc.2.26504.105 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

11.0.100-rc.1.26425.128

You can build .NET 11.0 RC 1 from the repository by cloning the release tag v11.0.100-rc.1.26425.128 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

11.0.100-preview.7.26381.103

You can build .NET 11.0 Preview 7 from the repository by cloning the release tag v11.0.100-preview.7.26381.103 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

11.0.100-preview.6.26359.118

You can build .NET 11.0 Preview 6 from the repository by cloning the release tag v11.0.100-preview.6.26359.118 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

11.0.100-preview.5.26302.115

You can build .NET 11.0 Preview 5 from the repository by cloning the release tag v11.0.100-preview.5.26302.115 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

11.0.100-preview.4.26230.115

You can build .NET 11.0 Preview 4 from the repository by cloning the release tag v11.0.100-preview.4.26230.115 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

11.0.100-preview.3.26207.106

You can build .NET 11.0 Preview 3 from the repository by cloning the release tag v11.0.100-preview.3.26207.106 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

11.0.100-preview.2.26159.112

You can build .NET 11.0 Preview 2 from the repository by cloning the release tag v11.0.100-preview.2.26159.112 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

11.0.100-preview.1.26104.118

You can build .NET 11.0 Preview 1 from the repository by cloning the release tag v11.0.100-preview.1.26104.118 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

10.0.404

You can build .NET 10.0 from the repository by cloning the release tag v10.0.404 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

Important

Please use https://builds.dotnet.microsoft.com/dotnet/source-build/dotnet-source-10.0.404-servicing.26529.119.tar.gz instead of the GitHub-generated sources tarball. This is due to a discrepancy in the ownership metadata. The signatures were generated from build-produced source archives with ownership normalized to UID/GID 2001:2001, while GitHub’s automatically generated archives use 0:0. The source contents are identical, but the ownership metadata changes the archive bytes, causing signature verification to fail.

Commits viewable in compare view.

Updated SonarAnalyzer.CSharp from 10.35.0.4138 to 10.36.0.15337.

Release notes

Sourced from SonarAnalyzer.CSharp's releases.

10.36.0.15337

Release notes - .NET Analyzers - 10.36

Two months since 10.35, and the nets have been busy. We went fishing for false positives and landed over twenty, and we caught a crash and a memory leak along the way. We kept the new rules and stopped throwing back the good code fixes.

What's in the catch:

  • 🔮 .NET 11 / C# 15 readiness: we support the new language features (union types, closed hierarchies, extension indexers, collection expression with(...) arguments, labeled break/continue). We probed the SonarWay rules against them and fixed false positives that turned up.
  • 🆕 Three new rules: S9414, S9415 and S9422.
  • 🛠️ Better code fixes: S2178 and S1110, plus a faster, leak-free S110.
  • 🎯 23 false positives gone, including EF Include rules, async/CancellationToken rules and MAUI/WPF handlers.

Feature

NET-1612 Fix S2178 CodeFix: Using short-circuiting operator does not preserve operator precedence
NET-2154 Use Roslyn location mapping capabilities
NET-4654 Create rule S9414: Local variable declarations and assignments should be joined
NET-4655 Create rule S9415: Local functions should be marked "static" when they don't capture variables
NET-4662 Create rule S9422: Lock object fields should use "System.Threading.Lock" type

False Positive

NET-1596 Fix S5332 FP: Don't raise http warning for SOAP actions
NET-2677 Fix S2325 FP: WPF event handlers should be ignored
NET-2937 Fix S2325 FP: Awaitable 'IsCompleted' must be instanced
NET-3295 S6664: Exclude TRACE-level logging calls
NET-4142 Fix S2187, MSTEST0016 FP: Test methods hidden behind #if NET are not seen on other target frameworks
NET-4633 Fix S9023 FP: Select() projector calling an opaque custom mapper is treated as dropping every Included navigation
NET-4640 Fix S2325 FP: MAUI event handlers should be ignored
NET-4671 Fix S1121 FP: Boolean assignments in while conditions
NET-4705 Fix S8949 FP: obsolete CancellationToken overloads are considered as alternatives
NET-4710 Fix S8969 FP: null-forgiving operator flagged as redundant when operand flows through a nullable-returning implicit conversion operator
NET-4733 Fix S6966 FP: EditorBrowsable(Never) overload is suggested as an awaitable alternative
NET-4737 Fix S9022 FP: Include reported redundant via ReportReprojectedIncludes before a materializing (Func<>) terminal operator
NET-4738 Fix S9022 FP: ToDictionary(Async)/ToLookup key selector ignored when checking whether Include is dead
NET-4739 Fix T0015 FP: Local function last in a lambda or nested local function
NET-4742 Fix FP S8949: Suppress suggestion when the producer call is already configured via WithCancellation/ConfigureAwait
NET-4818 Fix S4507 FP: Alerting on !app.Environment.IsProduction()
NET-4836 Fix S4049 FP: Should not raise on Extension Properties
NET-4837 Fix S4049 FP: Should not raise on awaiter GetResult
NET-4842 Fix S3900 FP: C# 15 Extension Indexers should not raise
NET-4913 Fix S3346 FP: .NET 11 BitArray.PopCount in Debug.Assert should not be reported
NET-4916 Fix S3903 FP: C# 15 types nested in a union should not be reported
NET-4938 Fix S3260 FP: C# 15 closed classes should not be suggested for sealing
NET-5034 Fix S3263 FP: C# 15 union static field referencing another static field in the same union is always misreported as out of order

False Negative

NET-4741 Fix S9022 FN: Include not reported redundant before Max/Min when selector dereferences the included nav

Bug

NET-4547 S110 recompiles filteredClasses regexes on every compilation start, leaking IL on .NET Framework
NET-4629 Fix ChangeSyntaxElement to replace on the container
NET-4686 S1110: Restore C# quick-fix support for nested expressions
NET-4794 Consider .NET 11 Razor declaration partials generated code
... (truncated)

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps Meziantou.Analyzer from 3.0.320 to 3.0.326
Bumps Microsoft.CodeAnalysis.NetAnalyzers from 10.0.403 to 11.0.100
Bumps SonarAnalyzer.CSharp from 10.35.0.4138 to 10.36.0.15337

---
updated-dependencies:
- dependency-name: Meziantou.Analyzer
  dependency-version: 3.0.326
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: analyzers
- dependency-name: Microsoft.CodeAnalysis.NetAnalyzers
  dependency-version: 11.0.100
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: analyzers
- dependency-name: SonarAnalyzer.CSharp
  dependency-version: 10.36.0.15337
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: analyzers
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Nov 12, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants