Skip to content

Bump coverlet.collector and 9 others#1791

Closed
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/nuget/dependencies-e8c2fad013
Closed

Bump coverlet.collector and 9 others#1791
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/nuget/dependencies-e8c2fad013

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 2, 2026 •
edited
Loading

Updated coverlet.collector from 6.0.4 to 10.0.1.

Release notes

Sourced from coverlet.collector's releases.

10.0.1

Improvements

Fixed

  • Fix inconsistent paths in cobertura reports #​1723
  • Fix when using "is" with "and" in pattern matching, branch coverage is lower than normal #​1313
  • Fix Coverlet flagging a branch for an async functions finally block where none exists #​1337
  • Fix Coverlet Tracker Missing CompilerGeneratedAttribute #​1828

Maintenance

  • Add architecture docs and diagrams for all integrations #​1927
  • Update NuGet packages and .NET SDK versions #​1933

Diff between 10.0.0 and 10.0.1

10.0.0

Improvements

  • Unique Report Filenames (coverlet.MTP and AzDO) #​1866
  • Add --coverlet-file-prefix option for unique report files #​1869
  • Introduce .NET 10 support #​1823

Fixed

  • Fix [BUG] Wrong branch rate on IAsyncEnumerable for generic type #​1836
  • Fix [BUG] Missing Coverage after moving to MTP #​1843
  • Fix [BUG] No coverage reported when targeting .NET Framework with 8.0.1 #​1842
  • Fix [BUG] Behavior changes between MTP and Legacy (msbuild) #​1878
  • Fix [BUG] Coverlet.MTP - Unable to load coverlet.mtp.appsettings.json #​1880
  • Fix [BUG] Coverlet.Collector produces empty report when Mediator.SourceGenerator is referenced #​1718 by https://github.com/yusyd
  • Fix [BUG] Crash during instrumentation (Methods using LibraryImport/DllImport have no body) #​1762

Maintenance

  • Add comprehensive async method tests and documentation for issue #​1864
  • Replace Tmds.ExecFunction Package in coverlet.core.coverage.tests #​1833
  • Add net9.0 and net10.0 targets #​1822

Diff between 8.0.1 and 10.0.0

8.0.1

Fixed

  • Fix [BUG] TypeInitializationException when targeting .NET Framework #​1818
  • Fix [BUG] coverlet.MTP build fails with CS0400 due to developmentDependency=true #​1827

Improvements

  • Additional improvements needed for .NET Framework instrumentation type import #​1825

Diff between 8.0.0 and 8.0.1

8.0.0

Special Thanks: A huge thank you to @​Bertk for driving the majority of the work in this release! 🎉

Fixed

Improvements

  • Coverlet MTP extension feature #​1788
  • Generate SBOM for nuget packages #​1752
  • Use multi targets projects for coverlet.collector, coverlet.msbuild.tasks packages #​1742
  • Use .NET 8.0 target framework for coverlet.core and remove Newtonsoft.Json #​1733
  • Use latest System.CommandLine version #​1660
  • Upgraded minimum required .NET SDK and runtime to .NET 8.0 LTS (Long Term Support) (Breaking Change)
  • Use xunit.v3 for tests and example code

Diff between 6.0.4 and 8.0.0

Commits viewable in compare view.

Updated coverlet.msbuild from 6.0.4 to 10.0.1.

Release notes

Sourced from coverlet.msbuild's releases.

10.0.1

Improvements

Fixed

  • Fix inconsistent paths in cobertura reports #​1723
  • Fix when using "is" with "and" in pattern matching, branch coverage is lower than normal #​1313
  • Fix Coverlet flagging a branch for an async functions finally block where none exists #​1337
  • Fix Coverlet Tracker Missing CompilerGeneratedAttribute #​1828

Maintenance

  • Add architecture docs and diagrams for all integrations #​1927
  • Update NuGet packages and .NET SDK versions #​1933

Diff between 10.0.0 and 10.0.1

10.0.0

Improvements

  • Unique Report Filenames (coverlet.MTP and AzDO) #​1866
  • Add --coverlet-file-prefix option for unique report files #​1869
  • Introduce .NET 10 support #​1823

Fixed

  • Fix [BUG] Wrong branch rate on IAsyncEnumerable for generic type #​1836
  • Fix [BUG] Missing Coverage after moving to MTP #​1843
  • Fix [BUG] No coverage reported when targeting .NET Framework with 8.0.1 #​1842
  • Fix [BUG] Behavior changes between MTP and Legacy (msbuild) #​1878
  • Fix [BUG] Coverlet.MTP - Unable to load coverlet.mtp.appsettings.json #​1880
  • Fix [BUG] Coverlet.Collector produces empty report when Mediator.SourceGenerator is referenced #​1718 by https://github.com/yusyd
  • Fix [BUG] Crash during instrumentation (Methods using LibraryImport/DllImport have no body) #​1762

Maintenance

  • Add comprehensive async method tests and documentation for issue #​1864
  • Replace Tmds.ExecFunction Package in coverlet.core.coverage.tests #​1833
  • Add net9.0 and net10.0 targets #​1822

Diff between 8.0.1 and 10.0.0

8.0.1

Fixed

  • Fix [BUG] TypeInitializationException when targeting .NET Framework #​1818
  • Fix [BUG] coverlet.MTP build fails with CS0400 due to developmentDependency=true #​1827

Improvements

  • Additional improvements needed for .NET Framework instrumentation type import #​1825

Diff between 8.0.0 and 8.0.1

8.0.0

Special Thanks: A huge thank you to @​Bertk for driving the majority of the work in this release! 🎉

Fixed

Improvements

  • Coverlet MTP extension feature #​1788
  • Generate SBOM for nuget packages #​1752
  • Use multi targets projects for coverlet.collector, coverlet.msbuild.tasks packages #​1742
  • Use .NET 8.0 target framework for coverlet.core and remove Newtonsoft.Json #​1733
  • Use latest System.CommandLine version #​1660
  • Upgraded minimum required .NET SDK and runtime to .NET 8.0 LTS (Long Term Support) (Breaking Change)
  • Use xunit.v3 for tests and example code

Diff between 6.0.4 and 8.0.0

Commits viewable in compare view.

Updated GitHubActionsTestLogger from 3.0.1 to 3.0.4.

Release notes

Sourced from GitHubActionsTestLogger's releases.

3.0.4

What's Changed

Enhancements

Bugs

Full Changelog: Tyrrrz/GitHubActionsTestLogger@3.0.3...3.0.4

3.0.3

What's Changed

Full Changelog: Tyrrrz/GitHubActionsTestLogger@3.0.2...3.0.3

3.0.2

What's Changed

New Contributors

Full Changelog: Tyrrrz/GitHubActionsTestLogger@3.0.1...3.0.2

Commits viewable in compare view.

Updated Meziantou.Analyzer from 3.0.18 to 3.0.96.

Release notes

Sourced from Meziantou.Analyzer's releases.

3.0.96

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.96

Full Changelog: meziantou/Meziantou.Analyzer@3.0.95...3.0.96

3.0.95

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.95

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.94...3.0.95

3.0.94

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.94

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.93...3.0.94

3.0.93

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.93

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.92...3.0.93

3.0.92

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.92

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.91...3.0.92

3.0.91

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.91

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.90...3.0.91

3.0.90

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.90

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.89...3.0.90

3.0.89

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.89

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.88...3.0.89

3.0.88

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.88

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.87...3.0.88

3.0.87

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.87

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.86...3.0.87

3.0.86

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.86

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.85...3.0.86

3.0.85

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.85

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.84...3.0.85

3.0.84

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.84

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.83...3.0.84

3.0.83

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.83

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.82...3.0.83

3.0.82

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.82

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.81...3.0.82

3.0.81

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.81

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.80...3.0.81

3.0.80

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.80

Full Changelog: meziantou/Meziantou.Analyzer@3.0.79...3.0.80

3.0.79

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.79

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.78...3.0.79

3.0.78

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.78

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.77...3.0.78

3.0.77

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.77

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.76...3.0.77

3.0.76

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.76

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.75...3.0.76

3.0.75

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.75

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.74...3.0.75

3.0.74

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.74

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.73...3.0.74

3.0.73

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.73

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.72...3.0.73

3.0.72

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.72

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.71...3.0.72

3.0.71

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.71

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.70...3.0.71

3.0.70

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.70

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.69...3.0.70

3.0.69

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.69

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.68...3.0.69

3.0.68

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.68

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.67...3.0.68

3.0.67

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.67

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.66...3.0.67

3.0.66

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.66

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.65...3.0.66

3.0.65

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.65

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.64...3.0.65

3.0.64

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.64

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.63...3.0.64

3.0.63

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.63

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.62...3.0.63

3.0.62

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.62

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.61...3.0.62

3.0.61

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.61

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.60...3.0.61

3.0.60

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.60

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.59...3.0.60

3.0.59

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.59

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.58...3.0.59

3.0.58

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.58

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.57...3.0.58

3.0.57

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.57

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.56...3.0.57

3.0.56

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.56

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.55...3.0.56

3.0.55

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.55

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.54...3.0.55

3.0.54

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.54

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.53...3.0.54

3.0.53

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.53

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.52...3.0.53

3.0.52

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.52

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.51...3.0.52

3.0.51

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.51

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.50...3.0.51

3.0.50

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.50

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.49...3.0.50

3.0.49

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.49

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.48...3.0.49

3.0.48

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.48

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.47...3.0.48

3.0.47

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.47

Full Changelog: meziantou/Meziantou.Analyzer@3.0.46...3.0.47

3.0.46

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.46

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.45...3.0.46

3.0.45

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.45

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.44...3.0.45

3.0.44

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.44

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.43...3.0.44

3.0.43

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.43

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.42...3.0.43

3.0.42

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.42

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.41...3.0.42

3.0.41

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.41

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.40...3.0.41

3.0.40

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.40

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.39...3.0.40

3.0.39

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.39

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.38...3.0.39

3.0.38

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.38

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.37...3.0.38

3.0.37

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.37

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.36...3.0.37

3.0.36

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.36

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.35...3.0.36

3.0.35

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.35

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.34...3.0.35

3.0.34

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.34

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.33...3.0.34

3.0.33

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.33

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.32...3.0.33

3.0.32

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.32

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.31...3.0.32

3.0.31

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.31

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.30...3.0.31

3.0.30

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.30

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.29...3.0.30

3.0.29

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.29

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.28...3.0.29

3.0.28

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.28

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.27...3.0.28

3.0.27

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.27

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.26...3.0.27

3.0.26

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.26

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.25...3.0.26

3.0.25

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.25

Full Changelog: meziantou/Meziantou.Analyzer@3.0.24...3.0.25

3.0.24

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.24

Full Changelog: meziantou/Meziantou.Analyzer@3.0.23...3.0.24

3.0.23

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.23

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.22...3.0.23

3.0.22

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.22

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.21...3.0.22

3.0.21

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.21

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.20...3.0.21

3.0.20

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.20

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.19...3.0.20

3.0.19

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.19

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.18...3.0.19

Commits viewable in compare view.

Updated Microsoft.Bcl.Cryptography from 10.0.3 to 10.0.8.

Release notes

Sourced from Microsoft.Bcl.Cryptography's releases.

No release notes found for this version range.

Commits viewable in compare view.

Pinned Microsoft.Extensions.Logging.Console at 10.0.8.

Release notes

Sourced from Microsoft.Extensions.Logging.Console's releases.

No release notes found for this version range.

Commits viewable in compare view.

Pinned MSTest at 4.2.3.

Release notes

Sourced from MSTest's releases.

4.2.3

See the release notes here

4.2.2

See the release notes here

4.2.1

See the release notes here

Commits viewable in compare view.

Updated SonarAnalyzer.CSharp from 10.20.0.135146 to 10.27.0.140913.

Release notes

Sourced from SonarAnalyzer.CSharp's releases.

10.27.0.140913

Release notes - .NET Analyzers - 10.27

Feature

NET-1285 S2629: Add custom message for Log4Net and Castle.Core
NET-3666 Deprecate S5042 and move it from HotSpots to Code Smell
NET-3783 Update RSPEC before 10.27 release

False Positive

NET-2696 Fix S4260 FP: Extension Properties always raise

False Negative

NET-230 Fix S4056 FN: SpecifyIFormatProviderOrCultureInfo for C#​13 compatibility
NET-2692 Fix S2190 FN: Recursive extension properties
NET-2705 Fix S3343 FN: Partial Constructor with attribute in definition
NET-2732 Fix S1172 FN: Extension blocks
NET-2745 Fix S4144 FN: Extension Members
NET-2829 Fix S3241 FN: Extension methods and extension blocks
NET-3541 Fix S1117 FN: add CatchDeclaration coverage and adopt LocalDeclarationKinds

10.26.0.140279

Release notes - .NET Analyzers - 10.26

Feature

NET-3694 Update RSPEC before 10.26 release

False Positive

NET-2346 Fix S1854 FP: Variable used after another assignment in finally
NET-2347 Fix S1168 FP: Do not report on value types
NET-3698 Fix S1210 FP: file-scoped types should be exempt

False Negative

NET-1265 Fix S2930 FN: raise issues on non-disposed RegistryKeys
NET-2685 Fix S3604 FN: Field Keyword, Partial Constructors, NullConditional Assignment
NET-2812 Fix S4275 FN: Field Keyword
NET-2999 Fix S6672 FN: Mismatch in primary constructor is not recognized

10.25

?

Feature

  • NET-3613 - Support Cobertura coverage file format
    • Cobertura report paths can be passed via the sonar.cs.cobertura.reportsPaths parameter
  • NET-3665 - Update RSPEC before 10.25 release

False Positive

  • NET-3640 - Fix S3400 FP: Don't report function with conditional compilation body

10.24

 This release brings a batch of false negative fixes and analyzer crash fixes.

Bug Fixes

  • NET-3596 - Fix S1144 AD0001: Index out of range exception with type named Nullable
  • NET-3522 - Fix S1215 AD0001: ArgumentOutOfRangeException
  • NET-3521 - Fix S2053 AD0001: NRE
  • NET-3520 - Fix S3267 AD0001: NRE

False Positives

  • NET-2276 - Fix S1192 FP: EF migration classes

False Negatives

  • NET-3569 - Fix T0008 and T0009 FN: Support extension blocks
  • NET-2875 - Fix S2092 FN: Null Conditional Assignment
  • NET-2857 - Fix S3330 FN: Null Conditional Assignment
  • NET-2719 - Fix S4136 FN: Extension methods
  • NET-2688 - Fix S4433 FN: Null-conditional assignment in tracker
  • NET-2675 - Fix S6418 FN: Field keyword
  • NET-2667 - Fix S2934 FN: Null-conditional assignment and field keyword
  • NET-2658 - Fix S127 FN: BitShiftCompound

10.23

This release brings a bunch of fixes! Enjoy.

Bug Fixes

  • NET-3557 - Fix SE AD0001 when SyntaxTreeOptionsProvider is null
  • NET-3519 - Fix AD0001: NRE in PropertiesAccessCorrectField

False Positives

  • NET-3532 - Fix S2583 FP: Any called two times
  • NET-3468 - Fix S1144 FP: Erroneously flagged Add() method used in Collection Initializer
  • NET-3454 - Fix S3267 FP: ref struct in foreach body cannot be captured in LINQ lambda
  • NET-3164 - Fix S125 FP: Improve semicolon heuristic
  • NET-2559 - Fix S5944 FP: When method name is also a class name of generic argument
  • NET-2438 - Fix S1067 FP: Do not raise an issue inside Equals() implementation
  • NET-1565 - Fix S1192 FP: Shouldn't raise on Dapper parameters
  • NET-1168 - Fix S1172 FP: When parameter conditionally used in local function
  • NET-52 - Fix S4017 FP: Do not raise when implementing abstract class/interface

False Negatives

  • NET-1642 - Fix S3415, S2701, S2699, S2187 FN: Support NUnit 4.0
  • NET-348 - Fix S4144 FN: Methods with generic return types

10.22

Hello everyone,
This release brings 4 new rules to help developers transition to C# 14, and a bunch of false positive fixes.

New rules

  • NET-3361 - New rule S8381: "scoped" should be escaped when used as a type name in lambda parameters
  • NET-3359 - New rule S8368: "extension" identifiers should be escaped to avoid contextual keyword conflicts
  • NET-3347 - New rule S8380: Return types named "partial" should be escaped with "@"
  • NET-3345 - New rule S8367: Identifiers should not conflict with the "field" keyword in C# 14?

False Positive

  • NET-3443 - Fix S1940 FP: for floating point numbers that can be NaN "!(a <= b)" is not the same as "a > b"
  • NET-3001 - Fix S3063 FP: Concatenation with identifier
  • NET-1569 - Fix S5944 FP: AddressOf(MethodName) in Return statement
  • NET-3445 - Fix T0029 FP: Inside target-typed new
  • NET-2817 - Fix T0029 FP: Ident for collection expression members
  • NET-2024 - Fix T0029 FP: Inside array initializer
  • NET-3341 - Fix T0029 FP: After member access
  • NET-3462 - Fix T0042 FP: Inside constructors and collection initializers
  • NET-3426 - Fix T0042: Raw string in collection initializer
  • NET-2888 - Fix T0042 FP: Returned from method
  • NET-2874 - Fix T0042 FP: Raw string in ternary

Bugs

  • NET-3386 - Fix S4583 AD0001: BeginInvoke callback declared in separate file

Other

  • NET-3385 - S2612: Rule type changed from Security Hotspot to Vulnerability

10.21

### Bug

  • NET-3376 - Fix S6930 AD0001: Issue on template / code files for blazor
  • NET-3367 - Fix S4830 AD0001: CertificateValidationCheck Syntax node is not within syntax tree

Feature

  • NET-3260 - Fix broken links in S6960 RSPEC

False Positive

  • NET-2886 - Fix T0015 FP: In constructor
  • NET-1678 - Fix S4275 FP: with property overload

Commits viewable in compare view.

Updated System.Formats.Asn1 from 10.0.3 to 10.0.8.

Release notes

Sourced from System.Formats.Asn1's releases.

No release notes found for this version range.

Commits viewable in compare view.

Pinned Testcontainers at 4.12.0.

Release notes

Sourced from Testcontainers's releases.

4.12.0

What's Changed

Thanks to all contributors 👏.

The NuGet packages for this release have been attested for supply chain security using actions/attest. This confirms the integrity and provenance of the artifacts and helps ensure they can be trusted: #​21198535.

⚠️ Breaking Changes

  • chore(deps): Bump Docker.DotNet from 3.131.1 to 4.0.2 (#​1665) @​HofmeisterAn

🚀 Features

  • feat: Add Floci module (#​1690) @​object
  • feat: Ignore port-forwarding extra host in reuse hash (#​1689) @​HofmeisterAn
  • feat: Allow devs to override the reuse hash calculation (#​1688) @​HofmeisterAn
  • feat: Add connect to network API (#​1672) @​HofmeisterAn
  • feat(LocalStack): Require auth token for 4.15 and onwards (#​1667) @​HofmeisterAn
  • chore(deps): Bump Docker.DotNet from 3.131.1 to 4.0.2 (#​1665) @​HofmeisterAn

🐛 Bug Fixes

  • fix: Trim tar record padding to avoid broken-pipe failure on Podman (#​1684) @​artiomchi
  • fix(Nats): Use healthz API for readiness probe (#​1679) @​eriblo01
  • fix: Remove KeepAlive socket option (#​1671) @​Angelinsky7

📖 Documentation

  • docs: Extend WithCommand(params string[]) documentation (#​1685) @​HofmeisterAn

🧹 Housekeeping

  • feat: Prepare next release cycle (4.12.0) (#​1664) @​HofmeisterAn

📦 Dependency Updates

  • chore(deps): Bump the actions group with 5 updates (#​1687) @dependabot[bot]
  • chore(deps): Bump Docker.DotNet from 4.1.0 to 4.2.0 (#​1686) @​HofmeisterAn
  • chore(deps): Bump the actions group with 5 updates (#​1676) @dependabot[bot]
  • chore(deps): Bump Docker.DotNet from 4.0.2 to 4.1.0 (#​1674) @​HofmeisterAn
  • chore(deps): Bump Docker.DotNet from 3.131.1 to 4.0.2 (#​1665) @​HofmeisterAn

4.11.0

What's Changed

Thanks to all contributors. Once again, really great contributions from everyone 🤝.

The NuGet packages for this release have been attested for supply chain security using actions/attest. This confirms the integrity and provenance of the artifacts and helps ensure they can be trusted: #​21198535.

Please be aware that we have changed the supported and underlying image used for the Cosmos DB module. The latest tag only supports certain environments and provides a limited set of features. Microsoft has introduced a new implementation, vnext-preview, which receives more updates and features. Due to the limitations of the latest tag, we decided to replace it with vnext-preview. You find more information about the image here: https://github.com/Azure/azure-cosmos-db-emulator-docker.

⚠️ Breaking Changes

  • feat(CosmosDb): Update base image from latest to vnext-preview (#​1324) @​NelsonBN

🚀 Features

  • feat(CosmosDb): Update base image from latest to vnext-preview (#​1324) @​NelsonBN
  • feat: Add typed WithResourceMapping(...) overloads (#​1497) @​cimnine
  • feat: Add Seq module (#​1276) @​montanehamilton
  • feat(PostgreSql): Add WithSsl builder API (#​1529) @​ozkanpakdil
  • feat: Add Temporal module (#​1635) @​bgener
  • feat: Add module connection string provider (#​1632) @​HofmeisterAn
  • fead: Add default container connection string provider (#​1630) @​HofmeisterAn
  • feat(ServiceBus): Add method to get HTTP connection string (#​1622) @​NelsonBN

🐛 Bug Fixes

  • fix(MongoDb): Wait for post-init startup readiness before replica set initiation (#​1656) @​HofmeisterAn
  • fix(Seq): Assert connection string provider (#​1645) @​HofmeisterAn
  • fix(EventHubs): Ignore runtime property to support reuse (#​1644) @​franciscosamuel
  • fix(ServiceBus): Ignore runtime property to support reuse (#​1643) @​franciscosamuel
  • fix(ResourceReaper): Set wait strategy (#​1634) @​HofmeisterAn
  • fix(ServiceBus): Workaround health API timeout (#​1625) @​HofmeisterAn
  • fix: Do not set console buffer width (ConsoleLogger) (#​1623) @​HofmeisterAn
  • fix(EventHubs): Workaround health API timeout (#​1624) @​HofmeisterAn

📖 Documentation

  • docs(CosmosDb): Replace unsupported tag 'latest' with 'vnext-preview' (#​1660) @​HofmeisterAn
  • docs(Redis): Add example (#​1641) @​HofmeisterAn

🧹 Housekeeping

  • chore(examples): Enable NuGet restore lock mode (#​1659) @​HofmeisterAn
  • chore: Pin image digest (#​1658) @​HofmeisterAn
  • fix: Run OpenSSF Scorecard only on default branch (#​1657) @​HofmeisterAn
  • chore: Remove Git LFS tracking for .snk (#​1655) @​HofmeisterAn
  • feat: Enable Dependabot for NuGet (repo) (#​1654) @​HofmeisterAn
  • feat: Enable Dependabot for NuGet (src) (#​1653) @​HofmeisterAn
  • fix: Replace branch protection with ruleset (#​1652) @​HofmeisterAn
  • fix: Do not enforce policies for admins (#​1651) @​HofmeisterAn
  • fix: Remove missing labels from Dependabot (#​1650) @​HofmeisterAn
    ... (truncated)

Commits viewable in compare view.

@dependabot
Bump the dependencies group with 10 updates
e50a8d3 
Bumps coverlet.collector from 6.0.4 to 10.0.0
Bumps coverlet.msbuild from 6.0.4 to 10.0.0
Bumps GitHubActionsTestLogger from 3.0.1 to 3.0.3
Bumps Meziantou.Analyzer from 3.0.18 to 3.0.54
Bumps Microsoft.Bcl.Cryptography from 10.0.3 to 10.0.7
Bumps Microsoft.Extensions.Logging.Console from 10.0.3 to 10.0.7
Bumps MSTest from 4.1.0 to 4.2.1
Bumps SonarAnalyzer.CSharp from 10.20.0.135146 to 10.24.0.138807
Bumps System.Formats.Asn1 from 10.0.3 to 10.0.7
Bumps Testcontainers from 4.10.0 to 4.11.0

---
updated-dependencies:
- dependency-name: coverlet.collector
  dependency-version: 10.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: coverlet.msbuild
  dependency-version: 10.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: GitHubActionsTestLogger
  dependency-version: 3.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: Meziantou.Analyzer
  dependency-version: 3.0.54
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: Microsoft.Bcl.Cryptography
  dependency-version: 10.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: Microsoft.Extensions.Logging.Console
  dependency-version: 10.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: MSTest
  dependency-version: 4.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: SonarAnalyzer.CSharp
  dependency-version: 10.24.0.138807
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: System.Formats.Asn1
  dependency-version: 10.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: Testcontainers
  dependency-version: 4.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added .NET Pull requests that update .net code dependencies Pull requests that update a dependency file labels May 2, 2026
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file .NET Pull requests that update .net code labels May 2, 2026
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Jun 3, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Jun 3, 2026
@dependabot dependabot Bot changed the title Bump the dependencies group with 10 updates Bump coverlet.collector and 9 others Jun 3, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@drieseng drieseng Awaiting requested review from drieseng drieseng is a code owner

@WojciechNagorski WojciechNagorski Awaiting requested review from WojciechNagorski WojciechNagorski is a code owner

@Rob-Hague Rob-Hague Awaiting requested review from Rob-Hague Rob-Hague is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .net code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants