chore: Bump the analyzers group with 3 updates #41

Add option roslynator_null_conditional_operator.avoid_negative_boolean_comparison (PR)
- Do not suggest to use null-conditional operator when result would be ... != true/false
- Applicable for RCS1146

Fixed

Fix analyzer RCS1172 (PR)
[CLI] Fix loc command (PR)
Exclude ref-field backed properties from RCS1085 (PR by @ovska)
[CLI] Fix rename-symbol scope option not being applied correctly (PR by @andrtmschkw)
[CLI] Fix rename-symbol support for top-level statement (PR by @andrtmschkw)

Changed

Migrate to .NET 10 (including command-line tool) (PR)

4.14.1

Added

[CLI] Add support for slnx files (PR by @darthtrevino)
- Bump Roslyn to 4.14.0
- Drop support for .NET 7 SDK

Fixed

Fix analyzer RCS1246 (PR)
Fix analyzer RCS1248 (PR)
Fix analyzer RCS1203 (PR)
Fix analyzer RCS1043 (PR)
Fix analyzer RCS1213 (PR)
- Add unity method OnRectTransformDimensionsChange
Fix analyzer RCS1253 (PR)
Fix refactoring Check expression for null (PR)

Changed

Change behavior of analyzer RCS1206 (PR)
- The condition for option omit_when_single_line will be that the braces/brackets are on the same line, not just the expression in the braces/brackets

4.14.0

Added

[CLI] Add support for GitLab analyzer reports (PR)

Fixed

Fix analyzer RCS1264 (PR)
Fix analyzer RCS1229 (PR)
Fix analyzer RCS1250 (PR by @aihnatiuk)
Fix analyzer RCS1260 (PR)
Fix analyzer RCS1105 (PR)
Fix analyzer RCS1260 (PR)

Changed

Disable analyzer RCS1036 by default (PR)
- Use analyzer RCS0063 instead

Removed

Remove legacy config options (PR)

4.13.1

Added

Support custom path of a test file (PR)
- It's possible to specify a directory path and/or a file name of a test file.
- Applies to testing library (Roslynator.Testing.*).

4.13.0

Fixed

Fix analyzer RCS1229 (PR)
Fix analyzer RCS1174 (PR)
Fix analyzer RCS0010 (PR)
Fix analyzer RCS0005 (PR)

Added

Add analyzer "Put expression body on its own line" RCS0062 (PR by @cbersch)
- Affects analyzer RCS1016
- Affects refactoring RR0169

Changed

Move analyzer RCS1036 to Formatting.Analyzers as RCS0063 (PR)
- Old analyzer still works but is marked as obsolete.
Bump Roslyn to 4.12.0 (PR)
- Applies to CLI and testing library.
Bump Microsoft.Build.Locator to 1.7.8 (PR)

4.12.11

Added

[CLI] Add support for .NET 9 (PR)

Fixed

Fix refactoring 'Change accessibility' (RR0186) (PR)
Fix analyzer RCS1264 (PR)

Changed

Move DiagnosticRules and DiagnosticIdentifiers to Roslynator.Common (PR)

4.12.10

Fixed

Fix analyzer RCS1213 (PR)
Improve code fixer for RCS1228 (PR)
Fix diagnostic message for RCS0032 (PR)

Changed

Update whitespace formatting rules (PR)
Ensure that diagnostics are not reported with zero length (PR)

4.12.9

Fixed

Fix analyzer RCS1090 (PR)
Fix analyzer RCS1124 (PR)
[CLI] Fix command generate-doc (PR, PR)

Changed

Update analyzer RCS1077 (PR)
- Do not suggest to change list.FirstOrDefault(predicate) to list.Find(predicate).
  Performance gain is negligible and actually FirstOrDefault can be even faster on .NET 9 (see related issue for more details).

4.12.8

Fixed

Fix analyzer RCS0053 (PR)
Fix analyzer RCS1223 (PR)
Fix analyzer RCS1140 (PR)
Fix analyzer RCS1096 (PR)
[CLI] Improve removing of unused symbols (PR)
[CLI] Fix command generate-doc (PR)

4.12.7

Fixed

Fix analyzer RCS1202 (PR)
Fix analyzer RCS1246 (PR)
Fix analyzer RCS1140 (PR by @Qluxzz)
Fix analyzer RCS1077 (PR)

Changed

Add support for duck-typed awaitables and task-like types for Task/Async-related analyzers (PR by @Govorunb)
- Affects the following analyzers:
  - RCS1046
  - RCS1047
  - RCS1090
  - RCS1174
  - RCS1229
  - RCS1261
- Affects refactoring RR0209

4.12.6

Added

Analyzer RCS1077 now suggests to use Order instead of OrderBy (PR by @BenjaminBrienen)

Fixed

Fix analyzer RCS0053 (PR)
Fix analyzer RCS0056 (PR)
Fix analyzer RCS1181 (PR)
Fix analyzer RCS0005 (PR)
Fix analyzer RCS1181 (PR)

4.12.5

Fixed

Fix analyzer RCS1182 (PR)
Fix analyzer RCS1198 (PR)
Fix analyzer RCS1214 (PR)
Fix analyzer RCS1018 (PR)
Fix analyzer RCS1264 (PR)
Fix analyzer RCS0053 (PR)
Fix analyzer RCS0056 (PR)

Changed

Bump Roslyn to 4.11.0 (PR)
- Applies to CLI and testing library.

Removed

[CLI] Remove support for .NET SDK 6 (PR)

4.12.4

Fixed

Fix analyzer RCS1108 (PR)
Fix analyzer RCS1201 (PR)
Fix analyzer RCS0012 (PR)
[CLI] Fix duplicate analyzers (PR)

4.12.3

Fixed

Fix analyzer RCS1246 (PR)
Fix analyzer RCS1085 (PR)
Fix analyzer RCS1077 (PR)
[CLI] Fix roslynator analyze --include/--exclude (PR)
Fix analyzer RCS0036 (PR)

4.12.2

Fixed

[CLI] Fix loading of slnf files (PR)
[CLI] Fix --severity-level (PR)
Fix analyzer RCS1246 (PR)

4.12.1

Changed

[CLI] Bump Roslyn to 4.9.2 (PR)
Convert Last() to [] (RCS1246) (PR by @jakubreznak)

Fixed

Fix analyzer RCS1077 (PR)
Fix export of ILanguageService (PR)

Commits viewable in compare view.

Updated SonarAnalyzer.CSharp from 9.16.0.82469 to 9.32.0.97167.

Release notes

Sourced from SonarAnalyzer.CSharp's releases.

9.32

This rule includes the promotion of 4 rules to Sonar-way, the deprecation of 1 rule and 2 FP fixes.

Rule Promotions and Deprecations

9644 - Modify S2387: Deprecate rule
9643 - Modify S4050: Promote to Sonar-way
9642 - Modify S2674: Promote to Sonar-way
9641 - Modify S3993: Promote to Sonar-way
9640 - Modify S4052: Promote to Sonar-way

False Positive

9590 - [C#] Fix S6966 FP: EntityFrameworks IDbContextFactory CreateDbContext method is preferred over its Async counterpart
8300 - [C#] Fix S3431 FP: Don't raise if assertions are done in catch or finally

9.31

This release focuses on improving the SonarQube plugin for the .NET analyzers.

Improvements

9558 - SQ Plugin: Load STIG standard after ACOMMONS-11 is done
8503 - SQ Plugin: Align logging for not indexed files
7798 - SQ Plugin: Remove the sonar runtime checks for versions prior 9.9
7115 - SQ Plugin: Replace org.sonar.api.utils.log.Logger
4687 - SQ Plugin: Add xunit report paths in products UI
4685 - SQ Plugin: Remove deprecated import of integration test coverage from plugins
3102 - SQ Plugin: Replace usages of deprecated Build.setProfile in the integration tests
8032 - SQ Plugin: Update the plugin to store the hash for the .cshtml files to enable incremental PR analysis

9.30

Hello, everyone. In this release, we worked on hardening our live variable analysis, which improved the analyzer's accuracy.

False Positives

9473 - Fix S1854 FP: Raises when a variable is reassigned in a using body after it has been already assigned in using statement
9472 - Fix S1854 FP: Raises when a variable is assigned in the switch statement and not used in the first case
9471 - Fix S1854 FP: Raises when a variable is assigned in expression that is part of the ternary condition
9468 - Fix S1854 FP: Throw should connect to outer catch
9466 - Fix S1854 FP: Throw should visit finally

9.29

This release includes a lot of false positive and false negative fixes.

Improvements

2120 - [C#] Improve S3247: Rule should recommend pattern matching for new C# instead of as
9465 - Update RSPEC before 9.29 release

False Positive

7522 - [C#] Fix S1104 FP: Do not report in Unity3D serializable classes
6990 - [C#] Fix S1144 FP: Event with a concrete sender
3842 - [C#] Fix S1144 FP: Ignore unused Deconstruct methods
8239 - [C#] Fix S1450 FP: When field is assigned value in event handler
9494 - [C#] Fix S1694 FP: Abstract class with field or constructor
9421 - [C#] Fix S1694 FP: Protected abstract methods
3605 - [C#] Fix S2219 FP: Is operator used for pattern matching
8266 - [C#] Fix S2259 FP: SE engine doesn't take into account element existence collection methods
9485 - [C#] Fix S3247 FP: Should not report on member access objects
6343 - [C#] Fix S3963 FP: Static constructor with conditional and no static field initialization
7961 - [C#, VB.NET] Fix S2699 FP: Support Moq

False Negative

9491 - [C#] Fix S3247 FN: When cast expression contains parentheses
223 - [C#] Fix S3247 FN: Rule should catch more duplicated cast

9.28

False Positive

9432 - [C#] Fix S1144 FP: Unused fields in class with StructLayout when struct is in deep hierarchy class
9379 - [C#] Fix S1144 FP: Diagnostic doesn't respect reflection with DynamicallyAccessedMembers attribute
8342 - [C#] Fix S1144 FP: Private Attributes
7068 - [C#] Fix S4144 FP: when type constraints are used
3050 - [C#] Fix S1479 FP: Single line case clause should be ignored
9447 - [C#] Fix S1854 FP: Value used in catch or when should LiveIn for all try blocks
9440 - [C#] Fix S1854 FP: Value used in finally should LiveIn for all try blocks
4948 - [C#] Fix S1854 FP: Value used in finally should LiveIn after throw
6894 - [C#, VB.NET] Fix S3878 FP: When non-object array is passed to object[] params as first argument
6893 - [C#, VB.NET] Fix S3878 FP: when a params argument is named

False Negative

8719 - [C#, VB.NET] Fix S2583/S2589 FN: try-catch in loop, LVA purges symbol prematurely
4940 - [C#] Fix S1854 FN: Proper support of try/catch statements
1255 - [C#] Fix S1871 FN: Support single line conditional block

9.27

This release includes a ton of false positive and false negative fixes. We would also like to thank @sagi1623 for his contribution in #8464, which fixed three issues 🚀.

Improvements

RSPEC change - Rule S1694: Promoted to SonarWay
9390 - Rule S6608: Benchmark is benchmarking the wrong things
8795 - [C#] Improve S1694: Remove part about protected constructor
5417 - Enable multiple project level issues
9372 - Update RSPEC before 9.27 release

False Positive

9247 - [C#] Fix S2629 FP: Constant fields in interpolated string
9241 - [C#, VB.NET] Fix S2094 FP: Allow empty queries
9106 - [C#] Fix S3459 FP: Backing field with ref property
8522 - [C#, VB.NET] Fix S3220 FP: Rule does not take into account generics
8436 - [C#] Fix S3253 FP: Don't raise for primary constructor in type declarations without parameters when they inherit from types with parameters
8199 - [C#, VB.NET] Fix S2737 FP: Raised when exception filter is used
8025 - [C#] Fix S2325 FP: Partial method implementations
7521 - [C#] Fix S2743 FP: Should not raise when base type is generic
7137 - [VB.NET] Fix S1654 FP: Do not report on event handlers, interfaces and overrides

False Negative

9002 - [C#, VB.NET] Fix S6931 FN: Route templates starting with ~/
6644 - [C#] Fix S2190 FN: No issues raised if recursion is inside an EventDeclaration by @sagi1623
6643 - [C#] Fix S2190 FN: No issues raised if recursion is inside a ConversionOperatorDeclaration by @sagi1623
6642 - [C#] Fix S2190 FN: No issues raised if recursion is inside an indexer by @sagi1623
4081 - [C#] Fix S2743 FN: Static fields of nested class inside generic class

9.26

New Rules

8871 - [C#] New rule S6932: Use model binding instead of reading raw request data
8992 - [C#] New rule S4347: Secure random number generators must not output predictable values
8996 - [C#] New rule S6781: JWT secret keys should not be disclosed
8982 - [C#] New rule S6377: XML signatures should be verified securely
8998 - [C#] New rule S5344: Passwords should not be stored in plain-text or with a fast hashing algorithm

Bug Fixes

8577 - Fix S2234 Bug: AD0001 is thrown due to referencing a location outside of the current compilation

Improvements

9282 - [C#] S6964: Issue is reported on the attribute instead of the property

False Positive

9360 - [C#] Fix S6964 FP: Properties decorated with the [BindNever] attribute
9337 - [C#] Fix S6964 FP: Add more attributes to the exclusions
9336 - [C#] Fix S6966 FP: Don't raise on XmlReader and XmlWriter methods
9331 - [C#] Fix S6964 FP: Property with a default value
9285 - [C#] Fix S6964 FP: Do not raise in properties with required modifier
9284 - [C#] Fix S6964 FP: Should not raise for reference properties in nullable context
9275 - [C#] Fix S6964 FP: Don't raise on properties annotated with the JsonRequiredAttribute
9269 - [C#] Fix S6966 FP: EntityFrameworks DbContext/DBSet Add/AddRange methods are preferred over their Async counterpart
9265 - [C#] Fix S6966 FP: MongoDB Find can not be replaced by FindAsync
9252 - [C#] Fix S6934 FP: Abstract Controller base class
8985 - [C#] Fix S6934 FP: Attributes implementing IRouteTemplateProvider or inheriting from RouteAttribute

False Negative

9263 - [C#] Fix S6964 FN: Rule should raise in case of value type property annotated with RequiredAttribute

9.25.1

The latest Roslyn compiler version changes the way Razor files are compiled, and this hotfix release takes care of these changes. For more information check this issue.

Bug Fixes

9288 - [C#] Metrics analyzer for Razor: Lines of code are outside the range of the file

9.25

Hello everyone,

This release comes with seven new rules for ASP.NET core alongside some improvements.
Enjoy!

New Rules

9096 - [C#] New Rule S6966: Awaitable method should be used
9095 - [C#] New Rule S6967: ModelState.IsValid should be called in controller actions
9094 - [C#] New Rule S6964: The value type properties of a model class should be nullable or marked as "Required" to avoid under-posting.
9093 - [C#] New rule S6968: Actions that return a value should be annotated with ProducesResponseTypeAttribute containing the return type
9092 - [C#] New rule S6965: You should use HttpAttribute in API controller actions
9091 - [C#] New rule S6962: You should pool HTTP connections with HttpClientFactory
9089 - [C#] New rule S6960: Controllers should not have too many responsibilities

Bug Fixes

9193 - Fix AD0001: Named Attribute Arguments in S6930

False Positive

9219 - [C#] Fix S1144 FP: Getters/Setters of property with attribute are being flagged

Improvements

9187 - Update RSPEC before 9.25 release
9186 - [C#] Rule S6961: Implement CodeFix

Rule deprecations and deletions

9175 - [VB.NET] Delete S2353: Remove deprecated rule
9189 - [C#] Deprecate S6803

9.24

Hey everyone,
This release contains one new ASP.NET Rule (S6961) and several general improvements and fixes. Enjoy!

Improvements

9090 - [C#] New rule S6961 for C#: API Controllers should derive from ControllerBase instead of Controller
8696 - Fix coverage aggregation from multiple reports
9048 - Create SonarAnalyzer.CSharp.Styling project
7774 - [C#, VB.NET] Fix S1144: Nested type constructor accessibility is wrong in the rule message
8980 - Update RSPEC before 9.24 release

Bug Fixes

9113 - [C#, VB.NET] AD0001: ArgumentNullException in SymbolicExecutionRunner
8977 - [C#] CfgAllPathValidator AreAllSuccessorsValid Stack Overflow on Windows and error MSB6006 in Linux Codespaces

False Positive

9063 - [C#, VB.NET] Fix S2094 FP: Should not raise for messages
9062 - [C#, VB.NET] Fix S2094 FP: Documentation using the DefaultDocumentation package
7591 - [C#, VB.NET] Fix S2094 FP: Implicit parameterless constructor widens the scope of the base class constructor
8163 - [C#, VB.NET] Fix S3878 FP: Jagged arrays

False Negative

6724 - [C#, VB.NET] Fix S1144 FN: Unused private getters and private setters
6699 - [C#] Fix S1144 FN: Unused local functions

9.23.2

Hello, everyone!

Today we are doing a bug fix release that also addresses a couple of false positives. We deprecated VB support for S6931 and removed the rule from the "Sonar Way" quality profile for VB.

Special thanks to @Corniel for fixing #9019!

Bug fix

9022 - S6931 and S6934 raises AD0001 warnings

Improvements

9075 - Update RSPEC before 9.23.2 release

False Positive

9011 - [C#] Fix S2094 FP: Primary constructor calling base class constructor
8905 - [C#, VB.NET] Fix S2259 FP: PropertyReference does not learn from the underlying symbol

9.23.1

Bug Fixes

8984 - Fix StackOverflow in CfgAllPathValidator.AreAllSuccessorsValid
8991 - [C#, VB.NET] Fix TypeInitializationException in SymbolStartAnalysisContextWrapper

False Positive

8532 - [C#, VB.NET] Fix S1144 FP: Do not raise on serializable members

9.23

Hello everyone!
This release comes with two new rules for ASP.NET, false positive fixes, and other improvements.

A big thank you to @Corniel for their external contribution with #8898!

New Rules

8872 - [C#] New rule S6934: You should specify the RouteAttribute when an HttpMethodAttribute is specified at an action level
8870 - [C#, VB.NET] New rule S6931: ASP.NET controller actions should not have a route template starting with "/"

False Positives

8898 - [C#] Fix S3993 FP: Allow abstract attributes not to decorate Attribute usage
8510 - [C#] Fix S3878 FP: When the input array is a collection expression with the spread operator
8260 - [C#] Fix S1117 FP: Field/property instances are not accessible from static methods
7709 - [C#] Fix S2094 FP: Marker interface not detected when using records
6633 - [C#] Fix S2857 FP: Rule is not checking SQL keywords in const interpolated string

Other improvements and fixes

8935 - [C#] Rule S6602: Improve the logging message when recommending for Array.Find
7999 - [C#] Fix S1125 codefix: Do not add ! when transforming x == false.

9.22

New Rules

8869 - [C#, VB.NET] New rule S6930: Backslash should be avoided in route templates
8844 - [C#] New rule S3416: Loggers should be ....

Description has been truncated

Bumps Meziantou.Analyzer from 2.0.146 to 2.0.264 Bumps Roslynator.Analyzers from 4.12.0 to 4.15.0 Bumps SonarAnalyzer.CSharp from 9.16.0.82469 to 9.32.0.97167 --- updated-dependencies: - dependency-name: Meziantou.Analyzer dependency-version: 2.0.264 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: analyzers - dependency-name: Roslynator.Analyzers dependency-version: 4.15.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: analyzers - dependency-name: SonarAnalyzer.CSharp dependency-version: 9.32.0.97167 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: analyzers ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot · 2025-12-22T09:49:00Z

Labels

The following labels could not be found: nuget. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

dependabot · 2025-12-29T09:38:23Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot bot assigned dogaaydinn Dec 22, 2025

dependabot bot added the dependencies Pull requests that update a dependency file label Dec 22, 2025

dependabot bot closed this Dec 29, 2025

dependabot bot deleted the dependabot/nuget/analyzers-b9d3fc64d8 branch December 29, 2025 09:38

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore: Bump the analyzers group with 3 updates #41

chore: Bump the analyzers group with 3 updates #41

Uh oh!

dependabot bot commented on behalf of github Dec 22, 2025 •

edited

Loading

Uh oh!

dependabot bot commented on behalf of github Dec 22, 2025

Uh oh!

dependabot bot commented on behalf of github Dec 29, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

chore: Bump the analyzers group with 3 updates #41

chore: Bump the analyzers group with 3 updates #41

Uh oh!

Conversation

dependabot bot commented on behalf of github Dec 22, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

2.0.264

What's Changed

2.0.263

What's Changed

2.0.262

What's Changed

2.0.261

What's Changed

2.0.260

What's Changed

2.0.259

What's Changed

2.0.258

2.0.257

What's Changed

2.0.256

What's Changed

2.0.255

What's Changed

2.0.254

What's Changed

2.0.253

2.0.252

What's Changed

2.0.251

What's Changed

2.0.250

What's Changed

2.0.249

What's Changed

2.0.248

What's Changed

2.0.247

What's Changed

2.0.246

2.0.245

What's Changed

2.0.244

What's Changed

2.0.243

What's Changed

New Contributors

2.0.242

2.0.241

2.0.240

What's Changed

2.0.239

2.0.238

2.0.237

2.0.236

What's Changed

2.0.235

What's Changed

2.0.234

2.0.233

2.0.232

2.0.231

What's Changed

2.0.230

What's Changed

2.0.229

2.0.228

2.0.227

2.0.226

2.0.225

What's Changed

2.0.224

What's Changed

2.0.223

What's Changed

2.0.222

What's Changed

New Contributors

2.0.221

dependabot bot commented on behalf of github Dec 22, 2025 •

edited

Loading