Skip to content

Bump Meziantou.Analyzer from 3.0.43 to 3.0.46#202

Merged
GeWuYou merged 1 commit intomainfrom
dependabot/nuget/GFramework.Core.Abstractions/multi-e15943f403
Apr 10, 2026
Merged

Bump Meziantou.Analyzer from 3.0.43 to 3.0.46#202
GeWuYou merged 1 commit intomainfrom
dependabot/nuget/GFramework.Core.Abstractions/multi-e15943f403

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 9, 2026

Updated Meziantou.Analyzer from 3.0.43 to 3.0.46.

Release notes

Sourced from Meziantou.Analyzer's releases.

3.0.46

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.46

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.45...3.0.46

3.0.45

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.45

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.44...3.0.45

3.0.44

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.44

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.43...3.0.44

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---
updated-dependencies:
- dependency-name: Meziantou.Analyzer
  dependency-version: 3.0.46
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: Meziantou.Analyzer
  dependency-version: 3.0.46
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: Meziantou.Analyzer
  dependency-version: 3.0.46
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: Meziantou.Analyzer
  dependency-version: 3.0.46
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: Meziantou.Analyzer
  dependency-version: 3.0.46
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Apr 9, 2026
@greptile-apps
Copy link
Copy Markdown

greptile-apps Bot commented Apr 9, 2026

Greptile Summary

This PR bumps Meziantou.Analyzer from 3.0.43 to 3.0.46 across all five projects that reference it as an analyzer-only dependency. The changes are purely version-string updates in .csproj files — no runtime or source code changes are involved.

Key changes across the three intermediate releases:

  • 3.0.44: MA0011 suppression improvement — no longer fires when all AppendFormat template arguments are culture-insensitive.
  • 3.0.45: Bug-fix for MA0135/MA0139 (Serilog @ destructuring prefix not stripped consistently for multi-parameter log calls); batch "Fix All" support added for MA0190.
  • 3.0.46: New rule MA0192 — flags bitwise flag checks (e.g., (flags & Foo.Bar) != 0) and suggests HasFlag instead.

The new MA0192 rule may surface new analyzer diagnostics in existing code that performs bitwise enum flag comparisons. Because Meziantou.Analyzer is wired as PrivateAssets=\"all\" / IncludeAssets=\"analyzers\", it is a build-time-only tool with no runtime impact.

Confidence Score: 5/5

Safe to merge — purely a build-time analyzer bump with no runtime impact.

All five changes are identical single-line version bumps in .csproj files. The package is consumed as an analyzer-only tool (PrivateAssets="all") so there is zero runtime risk. The new MA0192 rule may produce additional diagnostics for bitwise flag checks, but since the project currently builds clean against 3.0.43, any new warnings would be visible immediately on the next CI run and are easily addressable. No logic, no tests, no API surface, and no security surface was changed.

No files require special attention.

Vulnerabilities

No security concerns identified. The updated package is a Roslyn analyzer used only at build time (PrivateAssets="all"); it ships no runtime code and has no dependency on user input or network access.

Important Files Changed

Filename Overview
GFramework.Core.Abstractions/GFramework.Core.Abstractions.csproj Single-line version bump of Meziantou.Analyzer from 3.0.43 to 3.0.46; no other changes.
GFramework.Game.Abstractions/GFramework.Game.Abstractions.csproj Single-line version bump of Meziantou.Analyzer from 3.0.43 to 3.0.46; no other changes.
GFramework.Godot.SourceGenerators.Abstractions/GFramework.Godot.SourceGenerators.Abstractions.csproj Single-line version bump of Meziantou.Analyzer from 3.0.43 to 3.0.46; no other changes.
GFramework.SourceGenerators.Abstractions/GFramework.SourceGenerators.Abstractions.csproj Single-line version bump of Meziantou.Analyzer from 3.0.43 to 3.0.46; no other changes.
GFramework.SourceGenerators.Common/GFramework.SourceGenerators.Common.csproj Single-line version bump of Meziantou.Analyzer from 3.0.43 to 3.0.46; no other changes.

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A["Meziantou.Analyzer 3.0.46\n(build-time analyzer only)"] --> B["GFramework.Core.Abstractions"]
    A --> C["GFramework.Game.Abstractions"]
    A --> D["GFramework.Godot.SourceGenerators.Abstractions"]
    A --> E["GFramework.SourceGenerators.Abstractions"]
    A --> F["GFramework.SourceGenerators.Common"]
    subgraph "New analyzer rules introduced"
        G["MA0192 — Use HasFlag instead of\nbitwise enum flag checks"]
        H["MA0011 fix — suppress for\nculture-insensitive AppendFormat args"]
        I["MA0135/MA0139 fix — Serilog @\ndestructuring prefix in multi-param calls"]
    end
    A -.->|"may surface new diagnostics"| G
    A -.->|"fewer false positives"| H
    A -.->|"bug fix"| I
Loading

Reviews (1): Last reviewed commit: "Bump Meziantou.Analyzer from 3.0.43 to 3..." | Re-trigger Greptile

@GeWuYou GeWuYou merged commit 41194d5 into main Apr 10, 2026
6 of 7 checks passed
@GeWuYou GeWuYou deleted the dependabot/nuget/GFramework.Core.Abstractions/multi-e15943f403 branch April 10, 2026 09:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant