Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Dec 3, 2025

This PR contains the following updates:

Package Change Age Confidence
SonarAnalyzer.CSharp (source) 10.9.0.115408 -> 10.16.1.129956 age confidence

Release Notes

SonarSource/sonar-dotnet (SonarAnalyzer.CSharp)

v10.16.1.129956: 10.16.1

Compare Source

Rotations of binary signing keys

v10.16.0.128591: 10.16

Compare Source

False Positive
  • NET-1729 - Fix S2114 FP: list.AddRange(list) and list.Concat(list) are sensible
False Negative
  • NET-399 - Fix S4790 FN: Support CryptographicOperations data methods
Bug
  • NET-2686 - Fix S3604 AD0001: NRE with partial constructor

v10.15.0.120848: 10.15

Compare Source

False Positive
  • NET-2198 - Fix S1905 FP: Cast of default! expression is required
  • NET-2197 - Fix S1905 FP: stackalloc and Span conversions
  • NET-1641 - Fix S1905 FP: casting IEnumerable<string?> to IEnumerable<string>
  • NET-2157 - Fix S2589 FP: Don't raise an issue after a delegate is invoked
  • NET-2073 - Fix S2699 FP: Add support for FsCheck property tests
  • NET-1537 - Fix S6964 FP: Don't raise on properties annotated with the BindRequiredAttribute
Improvement
  • NET-2112 - Consider ExplodedNodes relevant if a successor would be relevant
  • NET-2183 - SE: Set constraint on operation when learning from IsPattern
False Negative
  • NET-429 - Fix S4275 FN: Support partial properties
Task
  • NET-2208 - Update RSpec before release

v10.14.0.120626: 10.14

Compare Source

Hey everyone,

This release mostly focuses on mitigating (NET-2196) a performance regression that was introduced in 10.13.

Improvement
  • NET-2196 - Fix path algorithm for execution flows to mitigate performance regression
  • NET-2177 - Improve how the Symbolic Execution engine handles exception paths
  • NET-2135 - Support xUnit V3
  • NET-2163 - Provide Interface for other plugins to add rules to VB.NET SonarWay profile
False Negative
  • NET-235 - Fix S2053: Adjust required salt length to be 32 bytes
Task
  • NET-2170 - Update RSPEC before 10.14 release

v10.13.0.120203: 10.13

Compare Source

Hello everyone,

In this release, we've focused on:

  • False positive fixes
  • Enhancing S2259's secondary locations to provide clearer, step-by-step explanations of null pointer dereferences issues.
False Positives
  • NET-2099 - Fix S3885 FP: Do not raise in ResolutionEventHandler
  • NET-2023 - Fix S3257 FP: Array with target-typed new
  • NET-1646 - Fix S3267 FP: Loops should be simplified with LINQ expressions
  • NET-1588 - Fix S1066 FP: Combination of dynamic and out should not raise
  • NET-882 - Fix S3257 FP: Don't raise for C# 10 and later when there's explicit delegate creation
Improvements
  • NET-2095 - Improve incremental PR analysis path detection
  • SE: S2259 - Improve secondary locations

v10.12.0.118525: 10.12

Compare Source

This release brings the VB version of S6418 and a few FP and FN fixes.

New Rule
  • NET-1379 - New Rule: Implement S6418 Hard-coded secrets are security-sensitive for VB.NET
False Positive
  • NET-1526 - Fix S3267 FP: Only raise on IEnumerable
False Negative
  • NET-1260 - Fix S1215 FN: GC.GetTotalMemory(forceFullCollection: true) should not be called
  • NET-1258 - Fix S6678 FN: Lowercase placeholders in interpolated string
  • NET-1255 - Fix S3267 FN: Logical operators are not supported
Task
  • NET-2060 - Update RSPEC before 11.12 release

v10.11.0.117924: 10.11

Compare Source

Hello everyone!
In this release we fixed a bunch of false positives and false negatives.
Additionally this version adds support for telemetry in order to gather information on feature usage. Telemetry, requires scanner 10.2.0 or greater.

False Positive
  • NET-1522 - Fix S2068 FP: Do not raise on password:secret
  • NET-1149 - Fix S3626 FP: Add exception when return statement is preceding local functions
False Negative
  • NET-1263 - Fix S1871 FN: Nested if .. else if chain
  • NET-1256 - S2068: Remove word boundary(\b) from regex
  • NET-1254 - Fix S3878 FN: When params are passed as array through an attribute
  • NET-1252 - FN S1168: Support IndexerDeclaration and ConversionOperatorDeclaration
  • NET-459 - Fix S1168 FN: Add support for partial indexers

v10.10.0.116381: 10.10

Compare Source

Hey everyone, this release mostly focuses on internal and technical things.

General
  • NET-1444 - Move ProfileRegistrar to org.sonar.plugins.csharpenterprise.api
  • NET-1326 - Update RSPEC before 10.10 release
Internal Styling Rules
  • NET-1378 - New Rule T0045: Use var
  • NET-1359 - New Rule T0043: Avoid primary constructors on normal classes and structs
  • NET-1358 - New Rule T0042: Indent raw string literal +4
  • NET-1357 - New Rule T0041: Use raw string literals for multiline strings
  • NET-1356 - New Rule T0040: Use minimum necessary interpolation characters
  • NET-1355 - New Rule T0039: Protected field should start with lower case letter
  • NET-1354 - New Rule T0038: Use fields instead of auto-implemented private or protected properties
  • NET-1347 - New Rule T0000: Don't use Get prefixes
  • NET-1346 - New Rule T0037: Use .Test suffix namespace
  • NET-1345 - New rule T0046: Move extension method to dedicated class
  • NET-1344 - New Rule T0035: Do not use var for this deconstruction
  • NET-1343 - New Rule T0034: Do not embed var into this condition
  • NET-1342 - New Rule T0033: Swap the logic to use positive conditions instead
  • NET-1341 - New Rule T0032: Move the method body to the next line
  • NET-1339 - New Rule T0030: Move the field initializer on the same line
  • NET-1338 - New Rule T0029: Indent all arguments +4 further than the invocation line
  • NET-1337 - New Rule T0028: Move all arguments on the same line, or wrap all of them
  • NET-1336 - New Rule T0027: Move subsequent expressions on separate lines
  • NET-1335 - New Rule T0026: Indent member access +4 further than the initial line
  • NET-1334 - New Rule T0025: Indent ‘?’ and ‘:’ +4 further than the condition line
  • NET-1333 - New Rule T0024: Place multiline ‘?’ and ‘:’ on separate lines
  • NET-1332 - New Rule T0022: Indent all parameters with the first one
  • NET-1331 - New Rule T0021: Use extension methods for Linq
  • NET-1329 - New Rule T0019: Indent operator correctly
  • NET-1328 - New Rule T0018: Move the operator to the beginning of the next line
  • NET-1327 - New Rule T0015: Move local function at the end of the method
  • NET-1237 - New Rule T0044: Don't add Arrange, Act, and Assert(s) comments
  • NET-1325 - Improve T0007: Raise on nondeclaring is { } check

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the dependency:nuget Indicates a pull request related to updating or managing NuGet package dependencies. label Dec 3, 2025
@renovate renovate bot requested a review from a team as a code owner December 3, 2025 13:56
@renovate renovate bot requested a review from Spacemonkay December 3, 2025 13:56
@renovate renovate bot enabled auto-merge (squash) December 3, 2025 13:56
@renovate renovate bot force-pushed the renovate/sonaranalyzer.csharp-10.x branch from 8701d3f to 9b9c499 Compare December 3, 2025 13:56
@renovate renovate bot force-pushed the renovate/sonaranalyzer.csharp-10.x branch from 9b9c499 to 216fbcc Compare December 3, 2025 13:58
@samtrion samtrion disabled auto-merge December 3, 2025 13:58
@samtrion samtrion merged commit 4e7c090 into main Dec 3, 2025
7 checks passed
@samtrion samtrion deleted the renovate/sonaranalyzer.csharp-10.x branch December 3, 2025 13:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependency:nuget Indicates a pull request related to updating or managing NuGet package dependencies.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants