build: Bump the analyzers group with 5 updates by dependabot[bot] · Pull Request #44 · P4suta/clipvault

Enable nullable annotations on Roslynator.Common and Roslynator.Workspaces.Common (#1817)
- Source-breaking for projects that compile against this surface with nullable reference types enabled.
[Testing Framework] Lower Roslyn dependency of testing packages to 3.8.0 so that the Roslyn version is determined by the consumer's own Microsoft.CodeAnalysis.* reference instead of being forced to a fixed version (PR)
- Roslynator.Testing.Common, Roslynator.Testing.CSharp, Roslynator.Testing.CSharp.Xunit and Roslynator.Testing.CSharp.MSTest now depend on Microsoft.CodeAnalysis.* >= 3.8.0 (previously >= 4.14.0).
- Roslynator.Testing.Common no longer depends on Roslynator.Core.
- Action required: a test project that previously relied on the testing framework to pull in Roslyn 4.14.0 should now add its own reference, e.g. <PackageReference Include="Microsoft.CodeAnalysis.CSharp.Workspaces" Version="4.14.0" />. The chosen version raises the maximum C# language version the parser can accept; test sources still parse at CSharpParseOptions.Default unless you set parse options / LanguageVersion (for example LanguageVersion.Latest).
- Action required: a test project that used Roslynator.Core types via the old transitive dependency must now add an explicit Roslynator.Core package reference.

Changed

Bump Roslyn to 5.0.0 (PR)
- CLI targets Roslyn 5.0.0
- Solution build and tests use Roslyn 5.0.0 by default (the testing packages floor at 3.8.0; see Breaking)
Replace Visual Studio 2022 extension with Roslynator 2026 for Visual Studio 2026 ([18.0,19.0)) (PR)
- Extension ships refactorings and compiler diagnostic code fixes; analyzers via NuGet
- Roslynator 2022 remains available as the last 4.x VSIX
Visual Studio Code extension ships refactorings and compiler diagnostic code fixes only (PR)
- Analyzers require Roslynator NuGet packages
- Requires OmniSharp with Roslyn 5.x (C# extension 1.39.15+; set dotnet.server.useOmnisharp to true)

Removed

Remove leftover implementations of obsolete analyzers (XML descriptors remain). Enable the successor rules instead: RCS0014 → RCS0061, RCS0022 → RCS0021, RCS0038 → RCS0015, RCS0043 → RCS0020, RCS0047 → RCS0053, RCS1008/RCS1009/RCS1010/RCS1012/RCS1176/RCS1177 → RCS1264, RCS1035 → RCS1260, RCS1036 → RCS0063, RCS1038/RCS1040/RCS1041/RCS1066/RCS1072/RCS1091/RCS1106 → RCS1259, RCS1063/RCS1064/RCS1065 → RCS1252, RCS1100/RCS1101 → RCS1253, RCS1237 → RCS1254.
Remove SyntaxInverter (Roslynator.CSharp.Workspaces). Use SyntaxLogicalInverter.
Remove unused obsolete DiagnosticCategories constants and make the type internal.
Remove unused ROS0001/ROS0002 diagnostic IDs.
Remove obsolete constructors/properties from the testing package (DiagnosticTestData, CompilerDiagnosticFixTestData, RefactoringTestData).
Remove legacy config keys roslynator.max_line_length, roslynator.prefix_field_identifier_with_underscore, and roslynator_suppress_unity_script_methods. Use roslynator_max_line_length, roslynator_prefix_field_identifier_with_underscore, and roslynator_unity_code_analysis.enabled.
[CLI] Remove obsolete command generate-doc-root. Use generate-doc --root-file-path instead.
Remove bundled analyzers from Visual Studio extension (PR)
- Use Roslynator.Analyzers NuGet package for diagnostics
Remove bundled analyzers from Visual Studio Code extension (PR)
- Use Roslynator NuGet packages for diagnostics
Remove AnalyzersOptionsPage from Visual Studio extension (PR)
Drop support for Visual Studio 2022 VSIX (PR)
- Pin last 4.x release (Roslynator 2022) or use NuGet packages on Visual Studio 2022

Fixed

Fix analyzers RCS1263 and RCS1139 for C# 14 extension block documentation (PR)

4.16.1

Fixed

Fix analyzer RCS1060 to not report a file that contains only multiple partial declarations of the same type (PR)
Fix analyzer RCS1231 to not suggest in for ref struct parameters (#1725) (PR)
Fix analyzer RCS1260 false positive for omit_when_single_line on multi-line object/collection initializers (#1439) (PR)
Fix analyzer RCS0036 to report blank lines between single-line declarations in records (PR)
Fix analyzer RCS1046 to report async void methods without Async suffix (PR)
Fix analyzer RCS1265 to not report catch clauses with a when filter (PR)
Fix analyzer RCS0034 for types with a primary constructor and multiple constraint clauses (PR)
Fix analyzer RCS1231 to not report CancellationToken in sync methods returning Task (PR)
[CLI] Fix GitLab output format to use relative paths, forward slashes, and 1-based line numbers (PR)
[CLI] Fix generate-doc to omit internal interfaces from type declarations and the Implements section (PR)

4.16.0

Added

[CLI] Suppress error code from Roslynator when it detects issues in code but runs successfully (PR by @mdrybak)

Fixed

Fix analyzer RCS1118 to not report local variable passed as 'in' argument (PR by @NoahStolk)
Fix analyzer RCS1074 (PR by @cbersch)
Fix enum contained flags check for partial matches in RCS1258 (PR by @ovska)
Fix analyzer RCS1146 (PR)
Fix analyzer RCS1194 (PR)
Fix analyzer RCS1060 to ignore classes marked with file modifier (PR by @cbersch)
Fix analyzer RCS1231 (PR by @cbersch)
Fix analyzer RCS1246 for conditional access expressions ([PR](Fix analyzer RCS1246 for conditional access expressions dotnet/roslynator#1772 by @krajek))
[CLI] Fix fix command ignoring --include / --exclude file filter (PR by @hashiiiii)
[CLI] Fix loading of projects and solutions on .NET 10 SDK (PR)

Commits viewable in compare view.

Updated SonarAnalyzer.CSharp from 10.27.0.140913 to 10.34.0.3385.

Release notes

Sourced from SonarAnalyzer.CSharp's releases.

10.34.0.3385

Release notes - .NET Analyzers - 10.34

Feature

NET-4133 Implement rule S9023: "Include" calls discarded by query reshaping should be fixed

False Positive

NET-3281 Fix S1192 FP: should not raise on DBContext model configuration
NET-4317 Fix S2325 FP: Do not raise on ConfigureServices in classes decorated with [LambdaStartup]
NET-4419 Fix S2737 FP: Do not report known temporary-context rethrow boundaries
NET-4421 Fix S6607 FP: Indexed LINQ Where after OrderBy
NET-4463 Fix S8747 FP: Do not raise when a defaultValue backfills existing NULLs before narrowing to non-nullable
NET-4506 Fix S6967 FP: Recognize manual DataAnnotations validation
NET-4507 Fix S8969 FP: Don't raise in Razor files

False Negative

NET-1883 Files added as symbolic links are not analyzed
NET-4249 Fix S9022 FN: Include before a terminal aggregate/scalar operator not detected as dead code
NET-4379 Fix S2259 FN: void compound assignment operators not flagged as dereference
NET-4383 Fix S9022 FN: Include on a navigation re-projected directly by a later Select/SelectMany is not detected as redundant
NET-4443 Fix S2068 FN: Scope the value passed to the secret-exclusion classifier to the candidate secret
NET-4496 Fix S8949 FN: self-recursion suppression also hides calls already recursive before the suggested fix
NET-4500 Fix S9022 FN: ThenInclude consumed only through a nested Select's rebound element parameter is not detected as redundant

Bug

NET-4483 Fix S3459 FP: Public writable properties in private nested types

Maintenance

NET-4472 Remove S1264 from the C# Sonar way profile
NET-4474 Remove S2692 from the C# Sonar way profile
NET-4480 Remove S3249 from the C# Sonar way profile
NET-4481 Remove S6670 from the C# Sonar way profile
NET-4482 Remove S3885 from the C# Sonar way profile

10.33.0.1635

Release notes - .NET Analyzers - 10.33

Feature

NET-4312 Update RSPEC before 10.33 release
NET-4254 Implement rule S9129: "Include" and "ThenInclude" chains of reference navigations should be merged into a single "Include" call

False Positive

NET-1777 Fix S101 FP: Lower case character after number
NET-4245 Fix S107 FP: should not raise for parameters marked with dependency-injection attributes

Maintenance

NET-4184 Duplicate telemetry key exception when multiple projects report the same non-counter telemetry value

10.32.0.713

Release notes - .NET Analyzers - 10.32

Feature

NET-4132 Implement rule S9022: Redundant "Include" calls should be removed
NET-4215 Implement rule S9118: Default values should be compatible with their entity property type
NET-4240 Update RSPEC before 10.32 release

False Positive

NET-1322 Fix S2857 FP: Do not raise in constant string interpolation when string is in square brackets
NET-1468 Fix S6966 FP: should not raise when inside lock
NET-1598 Fix S1125 FP: dynamic and custom nullable structs with conversion to bool are compliant
NET-4233 Fix S8733 FP: AsSplitQuery/AsSingleQuery set in a different statement than the colliding Includes goes undetected
NET-4297 Fix S8717 FP: EFCore DBFirst Scaffold

10.31.0.145097

Release notes - .NET Analyzers - 10.31

Feature

NET-3865 Implement S8733: Potential Cartesian Explosion
NET-3875 Implement rule S8718: Client-evaluated default values should use database functions
NET-4087 Use shared secret exclusion patterns in hardcoded secrets rules
NET-4211 Update RSPEC before 10.31 release

False Positive

NET-1922 S1144 FP: When registering a service with Microsoft.Extensions.DependencyInjecion framework
NET-3928 Fix S3267 FP: Should not raise on EntityFramework IQueryables
NET-4205 Fix S1244 FP: should not raise on NaN check via x.Equals(double.NaN)

10.30.0.144632

Release notes - .NET Analyzers - 10.30

Feature

NET-1536 Implement rule S8970: Null-forgiving operators should not be used when nullable warnings are disabled
NET-3436 Implement rule S8949: Use the overload that accepts a CancellationToken
NET-3810 Fix: Protobuf Importer logs debug on excluded files
NET-3877 Implement rule S8747: Migrations should not narrow column types ...

Description has been truncated

Bumps Meziantou.Analyzer from 3.0.107 to 3.0.263 Bumps Microsoft.CodeAnalysis.BannedApiAnalyzers from 3.3.4 to 5.6.0 Bumps Microsoft.VisualStudio.Threading.Analyzers from 17.14.15 to 18.7.23 Bumps Roslynator.Analyzers from 4.15.0 to 5.0.0 Bumps SonarAnalyzer.CSharp from 10.27.0.140913 to 10.34.0.3385 --- updated-dependencies: - dependency-name: Meziantou.Analyzer dependency-version: 3.0.263 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: analyzers - dependency-name: Microsoft.CodeAnalysis.BannedApiAnalyzers dependency-version: 5.6.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: analyzers - dependency-name: Microsoft.VisualStudio.Threading.Analyzers dependency-version: 18.7.23 dependency-type: direct:production update-type: version-update:semver-major dependency-group: analyzers - dependency-name: Roslynator.Analyzers dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: analyzers - dependency-name: SonarAnalyzer.CSharp dependency-version: 10.34.0.3385 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: analyzers ... Signed-off-by: dependabot[bot] <support@github.com>

coderabbitai · 2026-09-24T17:20:15Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: 579ec34b-aa07-40cb-95e0-abaefce0244c

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

P4suta · 2026-09-25T13:40:39Z

Closing: dependency updates now come from Renovate, which proposes this update again if it still applies.

dependabot · 2026-09-25T13:40:44Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

dependabot Bot added .NET Pull requests that update .NET code dependencies Dependency update (Renovate). labels Sep 24, 2026

dependabot Bot requested a review from P4suta as a code owner September 24, 2026 17:20

dependabot Bot added dependencies Dependency update (Renovate). .NET Pull requests that update .NET code labels Sep 24, 2026

dependabot Bot mentioned this pull request Sep 24, 2026

build: Bump the analyzers group with 5 updates #43

Closed

P4suta closed this Sep 25, 2026

P4suta deleted the dependabot/nuget/analyzers-7ef56b6099 branch September 25, 2026 13:40

Navigation Menu

build: Bump the analyzers group with 5 updates - #44

build: Bump the analyzers group with 5 updates#44
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/analyzers-7ef56b6099

dependabot Bot commented on behalf of github Sep 24, 2026

Uh oh!

coderabbitai Bot commented Sep 24, 2026

Review skipped

Uh oh!

P4suta commented Sep 25, 2026

Uh oh!

dependabot Bot commented on behalf of github Sep 25, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Sep 24, 2026

3.0.263

What's Changed

3.0.262

What's Changed

3.0.261

What's Changed

3.0.260

What's Changed

3.0.259

What's Changed

3.0.258

What's Changed

3.0.257

What's Changed

3.0.256

What's Changed

3.0.255

What's Changed

3.0.254

What's Changed

3.0.253

What's Changed

3.0.252

What's Changed

3.0.251

What's Changed

3.0.250

What's Changed

3.0.249

What's Changed

3.0.248

What's Changed

3.0.247

What's Changed

3.0.246

What's Changed

3.0.245

What's Changed

3.0.244

What's Changed

3.0.243

What's Changed

3.0.242

What's Changed

3.0.241

What's Changed

3.0.240

What's Changed

3.0.239

What's Changed

3.0.238

What's Changed

3.0.237

What's Changed

3.0.236

What's Changed

3.0.235

What's Changed

3.0.234

What's Changed

3.0.233

What's Changed

3.0.232

What's Changed

3.0.231

What's Changed

3.0.230

What's Changed

3.0.229

What's Changed

3.0.228

What's Changed

3.0.227

What's Changed

3.0.226

What's Changed

3.0.225

What's Changed