Bump Microsoft.Extensions.Hosting and 6 others

[dependabot]

Pinned Microsoft.Extensions.Hosting at 10.0.7.

Release notes

Sourced from Microsoft.Extensions.Hosting's releases.

No release notes found for this version range.

Commits viewable in compare view.

Pinned Microsoft.Extensions.Http at 10.0.7.

Release notes

Sourced from Microsoft.Extensions.Http's releases.

No release notes found for this version range.

Commits viewable in compare view.

Pinned Microsoft.Extensions.Http.Polly at 10.0.7.

Release notes

Sourced from Microsoft.Extensions.Http.Polly's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.0.1 to 18.5.1.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.5.1

What's Changed

• Fix System.Collections.Immutable binding mismatch in Common.dll (rel/18.5) by @​nohwnd in Fix System.Collections.Immutable binding mismatch in Common.dll (rel/18.5) microsoft/vstest#15720
• Port verify-binding-redirects.ps1 to rel/18.5 by @​nohwnd in Port verify-binding-redirects.ps1 to rel/18.5 microsoft/vstest#15719
• Bump to 18.5.1 by @​nohwnd in Bump to 18.5.1 microsoft/vstest#15721

Full Changelog: microsoft/vstest@v18.5.0...v18.5.1

18.5.0

⚠️ Unlisted on Nuget, because of #​15718

What's Changed

• Add runtime configs by @​nohwnd in Add runtime configs microsoft/vstest#15377
• Add net8.0 target for TranslationLayer by @​nohwnd in Add net8.0 target for TranslationLayer microsoft/vstest#15375
• Determine architecture of remote process on windows by @​nohwnd in Determine architecture of remote process on windows microsoft/vstest#15396
• Updating System.Collections.Immutable package reference to version 9.0.0 by @​MSLukeWest in Updating System.Collections.Immutable package reference to version 9.0.0 microsoft/vstest#15392
• Dump via netcore tool on windows by @​nohwnd in Dump via netcore tool on windows microsoft/vstest#15397
• Fix answer file splitting by @​nohwnd in Fix answer file splitting microsoft/vstest#15381
• Run tests against vsix runner by @​nohwnd in Run tests against vsix runner microsoft/vstest#15419

Full Changelog: microsoft/vstest@v18.4.0...v18.5.0

18.4.0

What's Changed

• Add LoongArch64 support by @​stdmnpkg in Add LoongArch64 support microsoft/vstest#15359

• Refactor Condition evaluation by @​Youssef1313 in Refactor Condition evaluation microsoft/vstest#15357

• Adding info on extensions points part 1 by @​nohwnd in Adding info on extensions points part 1 microsoft/vstest#15360

• Add option to ask for uploading code QL before the standard window ends by @​nohwnd in Add option to ask for uploading code QL before the standard window ends microsoft/vstest#15373

• Update runtime versions by @​nohwnd in Update runtime versions microsoft/vstest#15372

• Fix .NET 10 regression for traits by @​Youssef1313 in Fix .NET 10 regression for traits microsoft/vstest#15370

• Update target frameworks to net10.0 and net11.0 by @​dotnet-maestro[bot] in Update target frameworks to net10.0 and net11.0 microsoft/vstest#15349

• Fix names in pipeline matrix so we don't have to align them by @​nohwnd in Fix names in pipeline matrix so we don't have to align them microsoft/vstest#15365

• Update SECURITY.md by @​Youssef1313 in Update SECURITY.md microsoft/vstest#15342

New Contributors

• @​stdmnpkg made their first contribution in Add LoongArch64 support microsoft/vstest#15359

Full Changelog: microsoft/vstest@v18.3.0...v18.4.0

18.3.0

What's Changed

• Fix answer file splitting by @​nohwnd in Fix answer file splitting microsoft/vstest#15306

Internal fixes and updates

• Bump branding to 18.1 by @​nohwnd in Bump branding to 18.1 microsoft/vstest#15286
• Remove stale copy of S.ComponentModel.Composition from testplatform packages by @​ViktorHofer in Remove stale copy of S.ComponentModel.Composition from testplatform packages microsoft/vstest#15287
• Update codeflow metadata to fix backflow by @​premun in Update codeflow metadata to fix backflow microsoft/vstest#15291
• [main] Update dependencies from devdiv/DevDiv/vs-code-coverage by @​dotnet-maestro[bot] in [main] Update dependencies from devdiv/DevDiv/vs-code-coverage microsoft/vstest#15283
• Update Microsoft.Build.Utilities.Core by @​Youssef1313 in Update Microsoft.Build.Utilities.Core microsoft/vstest#15300
• Disable DynamicNative instrumentation by default by @​nohwnd in Disable DynamicNative instrumentation by default microsoft/vstest#15299
• [main] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in [main] Source code updates from dotnet/dotnet microsoft/vstest#15293
• [main] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in [main] Source code updates from dotnet/dotnet microsoft/vstest#15302
• [main] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in [main] Source code updates from dotnet/dotnet microsoft/vstest#15314
• Delete sha1 custom implementation we are not using for a long time by @​nohwnd in Delete sha1 custom implementation we are not using for a long time microsoft/vstest#15313
• [main] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in [main] Source code updates from dotnet/dotnet microsoft/vstest#15315
• Update branding to 18.3.0 by @​nohwnd in Update branding to 18.3.0 microsoft/vstest#15321
• [main] Update dependencies from devdiv/DevDiv/vs-code-coverage by @​dotnet-maestro[bot] in [main] Update dependencies from devdiv/DevDiv/vs-code-coverage microsoft/vstest#15325
• [main] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [main] Update dependencies from dotnet/arcade microsoft/vstest#15264
• Revert adding dotnet_host_path workaround by @​nohwnd in Revert adding dotnet_host_path workaround microsoft/vstest#15328
• [main] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [main] Update dependencies from dotnet/arcade microsoft/vstest#15338
• [main] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in [main] Source code updates from dotnet/dotnet microsoft/vstest#15322
• [main] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [main] Update dependencies from dotnet/arcade microsoft/vstest#15343
• Change PreReleaseVersionLabel from 'preview' to 'release' by @​nohwnd in Change PreReleaseVersionLabel from 'preview' to 'release' microsoft/vstest#15352
• [rel/18.3] Update dependencies from devdiv/DevDiv/vs-code-coverage by @​dotnet-maestro[bot] in [rel/18.3] Update dependencies from devdiv/DevDiv/vs-code-coverage microsoft/vstest#15354
• [rel/18.3] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [rel/18.3] Update dependencies from dotnet/arcade microsoft/vstest#15389
• [rel/18.3] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [rel/18.3] Update dependencies from dotnet/arcade microsoft/vstest#15400
• Update build tools to 17.11.48 to be source buildable by @​nohwnd in Update build tools to 17.11.48 to be source buildable microsoft/vstest#15310
• Disable publishing on RTM by @​nohwnd in Disable publishing on RTM microsoft/vstest#15296
• Don't access nuget.org for package feeds by @​nohwnd in Don't access nuget.org for package feeds microsoft/vstest#15316
• No nuget access fix tests by @​nohwnd in No nuget access fix tests microsoft/vstest#15317
• Disable Dependabot updates in dependabot.yml by @​mmitche in Disable Dependabot updates in dependabot.yml microsoft/vstest#15324

New Contributors

• @​premun made their first contribution in Update codeflow metadata to fix backflow microsoft/vstest#15291

Commits viewable in compare view.

Updated MSTest.TestAdapter from 4.1.0 to 4.2.2.

Release notes

Sourced from MSTest.TestAdapter's releases.

4.2.1

See the release notes here

Commits viewable in compare view.

Updated MSTest.TestFramework from 4.1.0 to 4.2.2.

Release notes

Sourced from MSTest.TestFramework's releases.

4.2.1

See the release notes here

Commits viewable in compare view.

Updated SonarAnalyzer.CSharp from 10.19.0.132793 to 10.25.0.139117.

Release notes

Sourced from SonarAnalyzer.CSharp's releases.

10.25

?

Feature

• NET-3613 - Support Cobertura coverage file format
  • Cobertura report paths can be passed via the sonar.cs.cobertura.reportsPaths parameter
• NET-3665 - Update RSPEC before 10.25 release

False Positive

• NET-3640 - Fix S3400 FP: Don't report function with conditional compilation body

10.24

 This release brings a batch of false negative fixes and analyzer crash fixes.

Bug Fixes

• NET-3596 - Fix S1144 AD0001: Index out of range exception with type named Nullable
• NET-3522 - Fix S1215 AD0001: ArgumentOutOfRangeException
• NET-3521 - Fix S2053 AD0001: NRE
• NET-3520 - Fix S3267 AD0001: NRE

False Positives

• NET-2276 - Fix S1192 FP: EF migration classes

False Negatives

• NET-3569 - Fix T0008 and T0009 FN: Support extension blocks
• NET-2875 - Fix S2092 FN: Null Conditional Assignment
• NET-2857 - Fix S3330 FN: Null Conditional Assignment
• NET-2719 - Fix S4136 FN: Extension methods
• NET-2688 - Fix S4433 FN: Null-conditional assignment in tracker
• NET-2675 - Fix S6418 FN: Field keyword
• NET-2667 - Fix S2934 FN: Null-conditional assignment and field keyword
• NET-2658 - Fix S127 FN: BitShiftCompound

10.23

This release brings a bunch of fixes! Enjoy.

Bug Fixes

• NET-3557 - Fix SE AD0001 when SyntaxTreeOptionsProvider is null
• NET-3519 - Fix AD0001: NRE in PropertiesAccessCorrectField

False Positives

• NET-3532 - Fix S2583 FP: Any called two times
• NET-3468 - Fix S1144 FP: Erroneously flagged Add() method used in Collection Initializer
• NET-3454 - Fix S3267 FP: ref struct in foreach body cannot be captured in LINQ lambda
• NET-3164 - Fix S125 FP: Improve semicolon heuristic
• NET-2559 - Fix S5944 FP: When method name is also a class name of generic argument
• NET-2438 - Fix S1067 FP: Do not raise an issue inside Equals() implementation
• NET-1565 - Fix S1192 FP: Shouldn't raise on Dapper parameters
• NET-1168 - Fix S1172 FP: When parameter conditionally used in local function
• NET-52 - Fix S4017 FP: Do not raise when implementing abstract class/interface

False Negatives

• NET-1642 - Fix S3415, S2701, S2699, S2187 FN: Support NUnit 4.0
• NET-348 - Fix S4144 FN: Methods with generic return types

10.22

Hello everyone,
This release brings 4 new rules to help developers transition to C# 14, and a bunch of false positive fixes.

New rules

• NET-3361 - New rule S8381: "scoped" should be escaped when used as a type name in lambda parameters
• NET-3359 - New rule S8368: "extension" identifiers should be escaped to avoid contextual keyword conflicts
• NET-3347 - New rule S8380: Return types named "partial" should be escaped with "@"
• NET-3345 - New rule S8367: Identifiers should not conflict with the "field" keyword in C# 14?

False Positive

• NET-3443 - Fix S1940 FP: for floating point numbers that can be NaN "!(a <= b)" is not the same as "a > b"
• NET-3001 - Fix S3063 FP: Concatenation with identifier
• NET-1569 - Fix S5944 FP: AddressOf(MethodName) in Return statement
• NET-3445 - Fix T0029 FP: Inside target-typed new
• NET-2817 - Fix T0029 FP: Ident for collection expression members
• NET-2024 - Fix T0029 FP: Inside array initializer
• NET-3341 - Fix T0029 FP: After member access
• NET-3462 - Fix T0042 FP: Inside constructors and collection initializers
• NET-3426 - Fix T0042: Raw string in collection initializer
• NET-2888 - Fix T0042 FP: Returned from method
• NET-2874 - Fix T0042 FP: Raw string in ternary

Bugs

• NET-3386 - Fix S4583 AD0001: BeginInvoke callback declared in separate file

Other

• NET-3385 - S2612: Rule type changed from Security Hotspot to Vulnerability

10.21

### Bug

• NET-3376 - Fix S6930 AD0001: Issue on template / code files for blazor
• NET-3367 - Fix S4830 AD0001: CertificateValidationCheck Syntax node is not within syntax tree

Feature

• NET-3260 - Fix broken links in S6960 RSPEC

False Positive

• NET-2886 - Fix T0015 FP: In constructor
• NET-1678 - Fix S4275 FP: with property overload

10.20

This release brings 9 precision improvements — 7 false positive fixes and 2 false negative fixes — across rules S1116, S1144, S1210, S1643, S1854, S2365, S3254, S3265, and S127. It also promotes S2068 and S6418 from Security Hotspot to Vulnerability, making them visible directly in the IDE, and removes S3256 from the Sonar Way quality profile.

Changes

• NET-3227 - Remove S3256 from "Sonar Way" quality profile
• NET-3208 - S6418: Rule type changed from Security Hotspot to Vulnerability
• NET-3207 - S2068: Rule type changed from Security Hotspot to Vulnerability
• NET-3206 - Remove links to rules.sonarsource.com

False Positive

• NET-3215 - Fix FP on S127: Should only raise on stop condition variables
• NET-3212 - Fix FP on S3254: Don't raise if the parameter isn't last
• NET-3053 - Fix FP on S1210: Implementing comparable operators for private types
• NET-2984 - Fix FP on S3265: BCL enums with [Flags] not recognized due to metadata resolution
• NET-2976 - Fix FP on S1854: Default value initializations flagged despite exemptions
• NET-2966 - Fix FP on S1144: Constructors in MEF-exported types
• NET-2956 - Fix FP on S1116: Empty loop body with side effects in condition

False Negative

• NET-1261 - Fix FN on S2365: Rule should report on new collection
• NET-1259 - Fix FN on S1643: Concatenation for parameters, fields and properties are not detected

Rule specification

• NET-3246 - Modify Rule S127: Update Description
• NET-3218 - Modify Rule S3265: Add exception for MethodImplAttributes
• NET-3086 - Modify Rule S1116: Add loop exception

Maintenance

• NET-3047 - Update RSPEC before 10.20 release

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions