Bump the tests group with 6 updates by dependabot[bot] · Pull Request #370 · VahidN/DNTCommon.Web.Core

dependabot · 2026-08-18T19:37:08Z

Updated CancelCop.Analyzer from 1.38.0 to 1.46.0.

Release notes

Sourced from CancelCop.Analyzer's releases.

1.46.0 Added

CC043 (BlockingDnsAnalyzer) flags blocking Dns.GetHostAddresses in async code.

GetHostAddresses parks a pool thread on a DNS query. GetHostAddressesAsync yields; on modern .NET it takes a CancellationToken. .NET Framework has the tokenless form. CC002 cannot see this method (no token overload). CC036–CC042 are Socket/Tcp/Udp/HttpListener/named-pipe; DNS produced zero diagnostics from every shipped rule.

1151 tests passing. 43 diagnostics. NuGet publishing is handled by the release workflow.

1.45.0 Added

CC042 (BlockingNamedPipeClientAnalyzer) flags blocking NamedPipeClientStream.Connect in async code.

Connect parks a pool thread until the server accepts (or a timeout elapses). ConnectAsync yields; on modern .NET it takes a CancellationToken. The rule stays quiet where ConnectAsync is absent. CC041 is the server accept wait; the client produced zero diagnostics from every shipped rule.

1144 tests passing. 42 diagnostics. NuGet publishing is handled by the release workflow.

1.44.0 Added

CC041 (BlockingNamedPipeAnalyzer) flags blocking NamedPipeServerStream.WaitForConnection in async code.

WaitForConnection parks a pool thread until a client connects. WaitForConnectionAsync yields; on modern .NET it takes a CancellationToken. CC028 maps File/Stream Read/Write/CopyTo/Flush only; CC036–CC040 are Socket/TcpClient/TcpListener/UdpClient/HttpListener; the named-pipe server produced zero diagnostics from every shipped rule.

1136 tests passing. 41 diagnostics. NuGet publishing is handled by the release workflow.

1.43.0 Added

CC040 (BlockingHttpListenerAnalyzer) flags blocking HttpListener.GetContext in async code.

GetContext parks a pool thread until a request arrives. GetContextAsync yields (it does not take a token). CC036–CC039 are Socket/TcpClient/TcpListener/UdpClient; the HTTP listener produced zero diagnostics from every shipped rule.

1130 tests passing. 40 diagnostics. NuGet publishing is handled by the release workflow.

1.42.0 Added

CC039 (BlockingUdpClientAnalyzer) flags blocking UdpClient.Receive in async code.

Receive parks a pool thread until a datagram arrives. ReceiveAsync yields and accepts a token on modern .NET. CC036 is Socket-only, CC037 is TcpClient.Connect, and CC038 is TcpListener accept; the UDP wrapper produced zero diagnostics from every shipped rule.

if (client.Available > 0), while (Available > 0), the inverted poll (if (Available == 0) continue; then receive), and client.Client.Blocking = false stay quiet.

1124 tests passing. 39 diagnostics. NuGet publishing is handled by the release workflow.

1.41.1 Changed

CC038 now reports AcceptTcpClient / AcceptSocket when the Pending() guard is negated.

if (!listener.Pending()) AcceptTcpClient() is the blocking path (no client is queued). if (Pending() == false) is the same. A positive probe stays quiet: if (Pending()), while (Pending()), while (flag && Pending()), Pending() is true, if (!Pending()) { } else Accept, and the inverted poll (if (!Pending()) continue/return; then accept).

1103 tests passing. 38 diagnostics. NuGet publishing is handled by the release workflow.

1.41.0 Added

CC038 (BlockingTcpListenerAnalyzer) flags blocking TcpListener.AcceptTcpClient and AcceptSocket in async code.

Both park a pool thread until a client connects. Accept*Async yields and accepts a token on modern .NET. CC036 is Socket-only and CC037 is TcpClient.Connect; the listener path produced zero diagnostics from every shipped rule.

if (listener.Pending()) and listener.Server.Blocking = false stay quiet. Reassignment / ref/out invalidate the exemption.

1091 tests passing. 38 diagnostics. NuGet publishing is handled by the release workflow.

1.40.0 Added

CC037 (BlockingTcpClientAnalyzer) flags blocking TcpClient.Connect in async code.

Connect parks a pool thread until the handshake finishes or TCP times out. ConnectAsync yields and accepts a token on modern .NET. CC036 already covers Socket.Connect; application code almost always uses the TcpClient wrapper, which none of the 36 shipped rules reported.

Hostname Connect still reports after Client.Blocking = false (synchronous DNS). The non-blocking exemption applies only to IP/endpoint overloads on a simple local, parameter, or field.

1076 tests passing. 37 diagnostics. NuGet publishing is handled by the release workflow.

1.39.4 Changed

CC031 now flags ReaderWriterLock.UpgradeToWriterLock in async code.

The v1.39.3 slice covered Acquire*Lock but left the upgrade path silent. UpgradeToWriterLock parks on contention, including the zero-timeout form: a failed upgrade restores the read lock with Timeout.Infinite. Acquire*Lock(0) remains a try-acquire.

1051 tests passing. 36 diagnostics. NuGet publishing is handled by the release workflow.

1.39.3 Changed

CC031 now flags ReaderWriterLock.AcquireReaderLock / AcquireWriterLock in async code.

The pre-Slim lock is not a WaitHandle and has no …Async counterpart, so the previous type map never saw it. Acquire*Lock(Timeout.Infinite) is an unbounded wait. A zero timeout is a non-blocking try-acquire and stays quiet.

// ❌ CC031
public async Task ReadAsync(ReaderWriterLock gate)
{
    gate.AcquireReaderLock(Timeout.Infinite);
    try { await Task.Yield(); }
    finally { gate.ReleaseReaderLock(); }
}

1049 tests passing. 36 diagnostics. NuGet publishing is handled by the release workflow.

1.39.2 Changed

CC031 now flags Barrier.SignalAndWait in async code.

Barrier is not a WaitHandle and has no …Async counterpart, so the previous type map never saw it. SignalAndWait parks every participant until the last one arrives. Zero-timeout overloads still report: the last arriver runs the post-phase action synchronously before returning.

// ❌ CC031
public async Task RendezvousAsync(Barrier barrier)
{
    barrier.SignalAndWait();
    await Task.Yield();
}

1044 tests passing. 36 diagnostics. NuGet publishing is handled by the release workflow.

1.39.1 Changed

CC031 now flags ReaderWriterLockSlim.Enter*Lock and TryEnter*Lock in async code.

Those members park a thread-pool thread and have no …Async counterpart, but they are not WaitHandle methods, so the previous type map never saw them. TryEnterWriteLock(Timeout.Infinite) is an unbounded enter. Zero-timeout TryEnter probes, look-alikes, and synchronous methods stay quiet.

// ❌ CC031 — parks a pooled thread until every writer exits
public async Task ReadAsync(ReaderWriterLockSlim gate)
{
    gate.EnterReadLock();
    try { await Task.Yield(); }
    finally { gate.ExitReadLock(); }
}

// ❌ CC031 — Timeout.Infinite is EnterWriteLock by another name
if (gate.TryEnterWriteLock(Timeout.Infinite)) { ... }

// ✅ zero-timeout probe stays quiet
_ = gate.TryEnterReadLock(0);

1038 tests passing. 36 diagnostics. NuGet publishing is handled by the release workflow.

1.39.0 Framework cancellation tokens are now in-scope

HttpContext.RequestAborted and ServerCallContext.CancellationToken participate in the shared token walk that powers CC002/CC003/CC004 and sibling rules (CC009, CC010, CC012, CC013, CC026, CC028, CC029, CC030, CC034). A CancellationToken parameter still wins when both exist.

// ❌ CC004 — RequestAborted is in scope but not passed
public async Task InvokeAsync(HttpContext context)
{
    return await _http.GetStringAsync(url);
}

// ✅
public async Task InvokeAsync(HttpContext context)
{
    return await _http.GetStringAsync(url, context.RequestAborted);
}

CC001 skips convention middleware Invoke / InvokeAsync(HttpContext). Adding a token parameter is not injected by the pipeline and can throw at runtime. Use RequestAborted instead. Closes the remaining half of #1.

Code fixes emit member-access expressions (context.RequestAborted), not dotted identifiers. CC028's speculative bind uses the same expression so blocking file I/O in middleware is no longer silent.

1030 tests passing. Focused Stryker.NET on the walk at 96% mutation score. 36 diagnostics.

Commits viewable in compare view.

Updated iTextSharp.LGPLv2.Core from 3.8.4 to 3.8.5.

Release notes

Sourced from iTextSharp.LGPLv2.Core's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Http.Polly from 9.0.0 to 9.0.19.

Release notes

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 18, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

1.46.0

Added

1.45.0

Added

1.44.0

Added

1.43.0

Added

1.42.0

Added

1.41.1

Changed

1.41.0

Added

1.40.0

Added

1.39.4

Changed

1.39.3

Changed

1.39.2

Changed

1.39.1

Changed

1.39.0

Framework cancellation tokens are now in-scope

9.0.19

What's Changed

9.0.18

What's Changed

9.0.17

What's Changed

9.0.16

What's Changed

9.0.15

What's Changed

9.0.14

What's Changed

9.0.13

What's Changed

9.0.12

What's Changed

9.0.11

What's Changed

9.0.10

What's Changed

9.0.9

What's Changed

9.0.7

What's Changed

9.0.6

Bug Fixes

Dependency Updates

Miscellaneous

9.0.5

What's Changed

9.0.4

What's Changed

9.0.3

What's Changed

9.0.2

What's Changed

9.0.1

What's Changed

18.9.0

What's Changed

New Contributors

4.16.1

Fixed

9.0.19

What's Changed

9.0.18

What's Changed

9.0.17

What's Changed

9.0.16

dependabot Bot commented on behalf of github Aug 18, 2026 •

edited

Loading