Skip to content

Bump the dotnet-dependencies group with 8 updates#136

Merged
Chris-Wolfgang merged 2 commits into
mainfrom
dependabot/nuget/dotnet-dependencies-f91895ad07
Jul 9, 2026
Merged

Bump the dotnet-dependencies group with 8 updates#136
Chris-Wolfgang merged 2 commits into
mainfrom
dependabot/nuget/dotnet-dependencies-f91895ad07

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 3, 2026

Copy link
Copy Markdown
Contributor

Updated Meziantou.Analyzer from 3.0.115 to 3.0.119.

Release notes

Sourced from Meziantou.Analyzer's releases.

3.0.119

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.119

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.118...3.0.119

3.0.118

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.118

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.117...3.0.118

3.0.117

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.117

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.116...3.0.117

3.0.116

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.116

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.115...3.0.116

Commits viewable in compare view.

Updated Microsoft.CodeAnalysis.BannedApiAnalyzers from 4.14.0 to 5.6.0.

Release notes

Sourced from Microsoft.CodeAnalysis.BannedApiAnalyzers's releases.

5.0.4

Release

5.0.2

Release Notes
Install Instructions

Repos

5.0.1

Release Notes
Install Instructions

Repo

Commits viewable in compare view.

Updated Microsoft.CodeAnalysis.CSharp from 4.13.0 to 5.6.0.

Release notes

Sourced from Microsoft.CodeAnalysis.CSharp's releases.

5.0.4

Release

5.0.2

Release Notes
Install Instructions

Repos

5.0.1

Release Notes
Install Instructions

Repo

Commits viewable in compare view.

Updated Microsoft.CodeAnalysis.PublicApiAnalyzers from 3.3.4 to 5.6.0.

Release notes

Sourced from Microsoft.CodeAnalysis.PublicApiAnalyzers's releases.

5.0.4

Release

5.0.2

Release Notes
Install Instructions

Repos

5.0.1

Release Notes
Install Instructions

Repo

4.2.0-4.22266.5

Release

4.2.0-3.22151.16

Release

4.2.0-1.22108.11

Release

4.0.0-2.21354.7

Release

4.0.0-2.21254.26

Release

4.0.0-1.21277.15

Release

3.10.0-3.21201.20

Release

3.10.0-2.21153.36

Release

3.10.0-1.21102.26

Release

3.7.0-3.20312.3

Release Notes
Install Instructions

Repos

3.7.0-3.20269.11

Release Notes
Install Instructions

Repos

3.7.0-2.20277.1

Release Notes
Install Instructions

Repos

3.6.0

Release Notes
Install Instructions

Commits viewable in compare view.

Updated SonarAnalyzer.CSharp from 10.27.0.140913 to 10.28.0.143324.

Release notes

Sourced from SonarAnalyzer.CSharp's releases.

10.28.0.143324

Release notes - .NET Analyzers - 10.28

Feature

NET-1990 S100/S101: Configuration for custom acronyms
NET-2280 New Rule T0048: Avoid is not { } value
NET-3802 Update RSPEC before 10.28 release
NET-3818 Change Protobuf Info message to Debug
NET-3820 Coverage warnings should surface as Analysis Warnings
NET-3827 Create RSPEC for S8717: Multiple "[Key]" attributes should not be used to define a composite key
NET-3843 Implement rule S8717: Multiple "[Key]" attributes should not be used to define a composite key
NET-3949 Modify rule S2696: add fix guidance, compliant example, and exceptions
NET-3950 Modify rule S1135: add compliant example and fix guidance
NET-3951 Modify rule S108: give the C# page its own code examples
NET-3952 Modify rule S1133: add rationale, fix guidance, code examples
NET-3953 Modify rule S3251: add compliant example, fix guidance, and exceptions
NET-3967 Move S1313 out of hotspot
NET-3969 Move S2077 out of hotspot
NET-3972 Move S2092 and S3330 out of hotspot
NET-3973 Move S2245 out of hotspot
NET-3975 Move S2257 out of hotspot
NET-3976 Move S4036 out of hotspot
NET-3978 Move S4502 out of hotspot
NET-3980 Move S4507 out of hotspot
NET-3982 Move S5122 out of hotspot
NET-3983 Move S5332 out of hotspot
NET-3993 Move S5443 out of hotspot
NET-3995 Move S5753 out of hotspot
NET-3996 Move S5766 out of hotspot
NET-3998 Move S6640 out of hotspot
NET-4000 Move S4790 out of hotspot
NET-4001 Move S5693 out of hotspot
NET-4008 Change S1313 message
NET-4009 Change S2257 message
NET-4010 Change S4036 message
NET-4011 Change S2077 message

False Positive

NET-3564 Fix FP S6966: Do not raise for methods for SqlDataReader.IsDBNull/GetFieldValue
NET-3808 Fix S4260 FP: Don't raise on extension properties
NET-3821 Fix S1244 FP: Should not raise on comparison to 0
NET-3825 Fix S2221 FP: Do not raise on async void
NET-3878 Fix S3358 FP: Suggesting to extract ternary from EF Core select
NET-3914 Fix T0044 FP: Should not raise on locator annotaitons
NET-3926 Fix S6608 FP: Should not raise inside expression tree
NET-3927 Fix S6603 FP: Should not raise inside expression tree
NET-3932 S2068: Do not raise on @​paramName and $paramName

False Negative

NET-1673 Fix S4790 FN: default parameters
NET-2846 Fix S1117 FN: Extensions, Partial Events
... (truncated)

Commits viewable in compare view.

Updated Wolfgang.Etl.Abstractions from 0.14.1 to 0.15.0.

Release notes

Sourced from Wolfgang.Etl.Abstractions's releases.

0.15.0

Minor release: adds an opt-in dry-run contract. No breaking change.

Added

  • ISupportDryRun — an opt-in interface exposing bool IsDryRun { get; set; } for ETL stages that support a dry run: the full pipeline is exercised (enumeration, skip/max counts, progress counters, timer callback, logging) but the external side effect that mutates a destination or source is skipped. Implemented by the stage that honours it (not by the base classes), and applies to any side-effect-bearing stage — loaders skip their write, source-mutating extractors skip their acknowledgement. (#​259)

Full Changelog: Chris-Wolfgang/ETL-Abstractions@v0.14.1...v0.15.0

Commits viewable in compare view.

Updated Wolfgang.Etl.TestKit from 0.9.0 to 0.10.0.

Release notes

Sourced from Wolfgang.Etl.TestKit's releases.

0.10.0

Adds an opt-in contract-test base for the ISupportDryRun interface introduced in Wolfgang.Etl.Abstractions 0.15.0. No breaking change.

Added

  • SupportsDryRunContractTests<TSut> — an opt-in xUnit contract-test base that verifies a stage implementing ISupportDryRun actually skips its external side effect when IsDryRun is true (not merely exposes the property). Stage-agnostic: the derived test supplies CreateSut() and a single RunAndReportSideEffectAsync(bool). (ETL-Abstractions#​259, #​195)
  • TestLoader<T> now implements ISupportDryRun — in dry-run mode it still enumerates the source and advances progress counters but skips collecting items, serving as the reference implementation exercised by the new contract base.

Changed

  • Built against Wolfgang.Etl.Abstractions 0.15.0 (was 0.14.1).

Full Changelog: Chris-Wolfgang/ETL-Test-Kit@v0.9.0...v0.10.0

Commits viewable in compare view.

Updated Wolfgang.Etl.TestKit.Xunit from 0.9.0 to 0.10.0.

Release notes

Sourced from Wolfgang.Etl.TestKit.Xunit's releases.

0.10.0

Adds an opt-in contract-test base for the ISupportDryRun interface introduced in Wolfgang.Etl.Abstractions 0.15.0. No breaking change.

Added

  • SupportsDryRunContractTests<TSut> — an opt-in xUnit contract-test base that verifies a stage implementing ISupportDryRun actually skips its external side effect when IsDryRun is true (not merely exposes the property). Stage-agnostic: the derived test supplies CreateSut() and a single RunAndReportSideEffectAsync(bool). (ETL-Abstractions#​259, #​195)
  • TestLoader<T> now implements ISupportDryRun — in dry-run mode it still enumerates the source and advances progress counters but skips collecting items, serving as the reference implementation exercised by the new contract base.

Changed

  • Built against Wolfgang.Etl.Abstractions 0.15.0 (was 0.14.1).

Full Changelog: Chris-Wolfgang/ETL-Test-Kit@v0.9.0...v0.10.0

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps Meziantou.Analyzer from 3.0.115 to 3.0.119
Bumps Microsoft.CodeAnalysis.BannedApiAnalyzers from 4.14.0 to 5.6.0
Bumps Microsoft.CodeAnalysis.CSharp from 4.13.0 to 5.6.0
Bumps Microsoft.CodeAnalysis.PublicApiAnalyzers from 3.3.4 to 5.6.0
Bumps SonarAnalyzer.CSharp from 10.27.0.140913 to 10.28.0.143324
Bumps Wolfgang.Etl.Abstractions from 0.14.1 to 0.15.0
Bumps Wolfgang.Etl.TestKit from 0.9.0 to 0.10.0
Bumps Wolfgang.Etl.TestKit.Xunit from 0.9.0 to 0.10.0

---
updated-dependencies:
- dependency-name: Meziantou.Analyzer
  dependency-version: 3.0.119
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-dependencies
- dependency-name: Microsoft.CodeAnalysis.BannedApiAnalyzers
  dependency-version: 5.6.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dotnet-dependencies
- dependency-name: Microsoft.CodeAnalysis.CSharp
  dependency-version: 5.6.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dotnet-dependencies
- dependency-name: Microsoft.CodeAnalysis.PublicApiAnalyzers
  dependency-version: 5.6.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dotnet-dependencies
- dependency-name: SonarAnalyzer.CSharp
  dependency-version: 10.28.0.143324
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet-dependencies
- dependency-name: Wolfgang.Etl.Abstractions
  dependency-version: 0.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet-dependencies
- dependency-name: Wolfgang.Etl.TestKit
  dependency-version: 0.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet-dependencies
- dependency-name: Wolfgang.Etl.TestKit.Xunit
  dependency-version: 0.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 3, 2026
@dependabot
dependabot Bot requested a review from Chris-Wolfgang as a code owner July 3, 2026 18:21
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 3, 2026
@Chris-Wolfgang
Chris-Wolfgang merged commit 4894082 into main Jul 9, 2026
8 checks passed
@Chris-Wolfgang
Chris-Wolfgang deleted the dependabot/nuget/dotnet-dependencies-f91895ad07 branch July 9, 2026 20:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant