Bump Meziantou.Analyzer, Roslynator.Analyzers and SonarAnalyzer.CSharp by dependabot[bot] · Pull Request #63 · emeraldleaf/NextAurora

Add option roslynator_null_conditional_operator.avoid_negative_boolean_comparison (PR)
- Do not suggest to use null-conditional operator when result would be ... != true/false
- Applicable for RCS1146

Fixed

Fix analyzer RCS1172 (PR)
[CLI] Fix loc command (PR)
Exclude ref-field backed properties from RCS1085 (PR by @ovska)
[CLI] Fix rename-symbol scope option not being applied correctly (PR by @andrtmschkw)
[CLI] Fix rename-symbol support for top-level statement (PR by @andrtmschkw)

Changed

Migrate to .NET 10 (including command-line tool) (PR)

Commits viewable in compare view.

Updated SonarAnalyzer.CSharp from 10.16.0.128591 to 10.27.0.140913.

Release notes

Sourced from SonarAnalyzer.CSharp's releases.

10.27.0.140913

Release notes - .NET Analyzers - 10.27

Feature

NET-1285 S2629: Add custom message for Log4Net and Castle.Core
NET-3666 Deprecate S5042 and move it from HotSpots to Code Smell
NET-3783 Update RSPEC before 10.27 release

False Positive

NET-2696 Fix S4260 FP: Extension Properties always raise

False Negative

NET-230 Fix S4056 FN: SpecifyIFormatProviderOrCultureInfo for C#13 compatibility
NET-2692 Fix S2190 FN: Recursive extension properties
NET-2705 Fix S3343 FN: Partial Constructor with attribute in definition
NET-2732 Fix S1172 FN: Extension blocks
NET-2745 Fix S4144 FN: Extension Members
NET-2829 Fix S3241 FN: Extension methods and extension blocks
NET-3541 Fix S1117 FN: add CatchDeclaration coverage and adopt LocalDeclarationKinds

10.26.0.140279

Release notes - .NET Analyzers - 10.26

Feature

NET-3694 Update RSPEC before 10.26 release

False Positive

NET-2346 Fix S1854 FP: Variable used after another assignment in finally
NET-2347 Fix S1168 FP: Do not report on value types
NET-3698 Fix S1210 FP: file-scoped types should be exempt

False Negative

NET-1265 Fix S2930 FN: raise issues on non-disposed RegistryKeys
NET-2685 Fix S3604 FN: Field Keyword, Partial Constructors, NullConditional Assignment
NET-2812 Fix S4275 FN: Field Keyword
NET-2999 Fix S6672 FN: Mismatch in primary constructor is not recognized

10.25

?

Feature

NET-3613 - Support Cobertura coverage file format
- Cobertura report paths can be passed via the sonar.cs.cobertura.reportsPaths parameter
NET-3665 - Update RSPEC before 10.25 release

False Positive

NET-3640 - Fix S3400 FP: Don't report function with conditional compilation body

10.24

This release brings a batch of false negative fixes and analyzer crash fixes.

Bug Fixes

NET-3596 - Fix S1144 AD0001: Index out of range exception with type named Nullable
NET-3522 - Fix S1215 AD0001: ArgumentOutOfRangeException
NET-3521 - Fix S2053 AD0001: NRE
NET-3520 - Fix S3267 AD0001: NRE

False Positives

NET-2276 - Fix S1192 FP: EF migration classes

False Negatives

NET-3569 - Fix T0008 and T0009 FN: Support extension blocks
NET-2875 - Fix S2092 FN: Null Conditional Assignment
NET-2857 - Fix S3330 FN: Null Conditional Assignment
NET-2719 - Fix S4136 FN: Extension methods
NET-2688 - Fix S4433 FN: Null-conditional assignment in tracker
NET-2675 - Fix S6418 FN: Field keyword
NET-2667 - Fix S2934 FN: Null-conditional assignment and field keyword
NET-2658 - Fix S127 FN: BitShiftCompound

10.23

This release brings a bunch of fixes! Enjoy.

Bug Fixes

NET-3557 - Fix SE AD0001 when SyntaxTreeOptionsProvider is null
NET-3519 - Fix AD0001: NRE in PropertiesAccessCorrectField

False Positives

NET-3532 - Fix S2583 FP: Any called two times
NET-3468 - Fix S1144 FP: Erroneously flagged Add() method used in Collection Initializer
NET-3454 - Fix S3267 FP: ref struct in foreach body cannot be captured in LINQ lambda
NET-3164 - Fix S125 FP: Improve semicolon heuristic
NET-2559 - Fix S5944 FP: When method name is also a class name of generic argument
NET-2438 - Fix S1067 FP: Do not raise an issue inside Equals() implementation
NET-1565 - Fix S1192 FP: Shouldn't raise on Dapper parameters
NET-1168 - Fix S1172 FP: When parameter conditionally used in local function
NET-52 - Fix S4017 FP: Do not raise when implementing abstract class/interface

False Negatives

NET-1642 - Fix S3415, S2701, S2699, S2187 FN: Support NUnit 4.0
NET-348 - Fix S4144 FN: Methods with generic return types

10.22

Hello everyone,
This release brings 4 new rules to help developers transition to C# 14, and a bunch of false positive fixes.

New rules

NET-3361 - New rule S8381: "scoped" should be escaped when used as a type name in lambda parameters
NET-3359 - New rule S8368: "extension" identifiers should be escaped to avoid contextual keyword conflicts
NET-3347 - New rule S8380: Return types named "partial" should be escaped with "@"
NET-3345 - New rule S8367: Identifiers should not conflict with the "field" keyword in C# 14?

False Positive

NET-3443 - Fix S1940 FP: for floating point numbers that can be NaN "!(a <= b)" is not the same as "a > b"
NET-3001 - Fix S3063 FP: Concatenation with identifier
NET-1569 - Fix S5944 FP: AddressOf(MethodName) in Return statement
NET-3445 - Fix T0029 FP: Inside target-typed new
NET-2817 - Fix T0029 FP: Ident for collection expression members
NET-2024 - Fix T0029 FP: Inside array initializer
NET-3341 - Fix T0029 FP: After member access
NET-3462 - Fix T0042 FP: Inside constructors and collection initializers
NET-3426 - Fix T0042: Raw string in collection initializer
NET-2888 - Fix T0042 FP: Returned from method
NET-2874 - Fix T0042 FP: Raw string in ternary

Bugs

NET-3386 - Fix S4583 AD0001: BeginInvoke callback declared in separate file

Other

NET-3385 - S2612: Rule type changed from Security Hotspot to Vulnerability

10.21

### Bug

NET-3376 - Fix S6930 AD0001: Issue on template / code files for blazor
NET-3367 - Fix S4830 AD0001: CertificateValidationCheck Syntax node is not within syntax tree

Feature

NET-3260 - Fix broken links in S6960 RSPEC

False Positive

NET-2886 - Fix T0015 FP: In constructor
NET-1678 - Fix S4275 FP: with property overload

10.20

This release brings 9 precision improvements — 7 false positive fixes and 2 false negative fixes — across rules S1116, S1144, S1210, S1643, S1854, S2365, S3254, S3265, and S127. It also promotes S2068 and S6418 from Security Hotspot to Vulnerability, making them visible directly in the IDE, and removes S3256 from the Sonar Way quality profile.

Changes

NET-3227 - Remove S3256 from "Sonar Way" quality profile
NET-3208 - S6418: Rule type changed from Security Hotspot to Vulnerability
NET-3207 - S2068: Rule type changed from Security Hotspot to Vulnerability
NET-3206 - Remove links to rules.sonarsource.com

False Positive

NET-3215 - Fix FP on S127: Should only raise on stop condition variables
NET-3212 - Fix FP on S3254: Don't raise if the parameter isn't last
NET-3053 - Fix FP on S1210: Implementing comparable operators for private types
NET-2984 - Fix FP on S3265: BCL enums with [Flags] not recognized due to metadata resolution
NET-2976 - Fix FP on S1854: Default value initializations flagged despite exemptions
NET-2966 - Fix FP on S1144: Constructors in MEF-exported types
NET-2956 - Fix FP on S1116: Empty loop body with side effects in condition

False Negative

NET-1261 - Fix FN on S2365: Rule should report on new collection
NET-1259 - Fix FN on S1643: Concatenation for parameters, fields and properties are not detected

Rule specification

NET-3246 - Modify Rule S127: Update Description
NET-3218 - Modify Rule S3265: Add exception for MethodImplAttributes
NET-3086 - Modify Rule S1116: Add loop exception

Maintenance

NET-3047 - Update RSPEC before 10.20 release

10.19

Documentation

NET-3012 - Modify Rule S3903: Update description for C#10

False Positive

NET-3004 - Fix S2696 FP: New extension method format triggers FP when accessing static fields

False Negative

NET-3011 - Fix S4790 FN: Support Using statement

Task

NET-2948 - Update RSPEC before 10.19 release

Bug

NET-1866 - Support future VS versions in NuGet package

10.18

This releases focuses on fixing the false-positives that are raised on code making use of the new features in C# 14.

Improvement

NET-2921 - Fix passthrough calculation in ModelBuilder
NET-2903 - Remove manual extension methods
NET-2895 - Cleanup handling of ParameterList of primary constructors

Task

NET-2917 - Update RSPEC before 10.18 release

False Positive

NET-2898 - Fix S2583/S2589 FP: Extension Members
NET-2877 - Fix S2225 FP: Extension member
NET-2832 - Fix S3063 FP: NullConditionalOperator
NET-2825 - Fix S1144 FP: Partial events
NET-2821 - Fix S3264 FP: Partial events
NET-2805 - Fix S1144 FP: S1144 Is confused by Debugger Display attribute
NET-2748 - Fix S3459 FP: NullConditional Assignment
NET-2716 - Fix S2325 FP: Field Keyword
NET-2712 - Fix S2953 FP: Extension block member
NET-2707 - Fix S3877 FP: Equals method without IEquatable
NET-2684 - Fix S7039 FP/FN: Null-conditional assignment
NET-2672 - Fix S3928 FP: Extension block
NET-2671 - Fix S2970 FP: Null Conditional Assignment
NET-2668 - Fix S3398 FP: On private methods in C#14 extensions classes
NET-2644 - Fix S1144 FP: Always raises on private methods in extension block
NET-2621 - Fix S2325 FP: Incorrectly reports on C# 14 extensions
NET-2620 - Fix S4545 FP: Extension Methods
NET-2391 - Fix S1121 FP: Extract (null-forgiving) assignment from expression
NET-1914 - Fix S3264 FP: when using +=

False Negative

NET-2813 - Fix S2292 FN: FieldKeyword
NET-2681 - Fix S2692 FN: Support Spans

10.17

False Negative

NET-2840 - Improve S2077: Support more methods

Task

NET-2839 - Update RSPEC before 10.17 release

New Feature

NET-2820 - ShimLayer: Implement Factory
NET-2789 - ShimLayer Generator: Enums
NET-2728 - ShimLayer Generator: SyntaxNodes

Bug

NET-2816 - Fix S3603 AD0001: NRE when LocalFunction inside Record constructor in C#7

Improvement

NET-2722 - Activate new ShimLayer
NET-2721 - Create diff for ShimLayer
NET-2720 - Create ShimLayer projects

10.16.2

Rotations of binary signing keys

10.16.1

Rotations of binary signing keys

Commits viewable in compare view.

Summary by CodeRabbit

Chores
- Updated code analysis tools to latest versions for improved code quality checks.

dependabot · 2026-06-01T01:40:10Z

Labels

The following labels could not be found: dependencies, nuget. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

coderabbitai · 2026-06-01T01:40:21Z

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: 606b6014-a5d0-4e2e-af42-9dd73273a88c

📥 Commits

Reviewing files that changed from the base of the PR and between d009f77 and b7afc91.

📒 Files selected for processing (1)

Directory.Packages.props

Walkthrough

Three code analysis packages are upgraded in the centrally managed dependency configuration: Meziantou.Analyzer to 3.0.98, SonarAnalyzer.CSharp to 10.27.0.140913, and Roslynator.Analyzers to 4.15.0.

Changes

Code Analyzer Package Upgrades

Layer / File(s)	Summary
Code analyzer package versions `Directory.Packages.props`	Meziantou.Analyzer, SonarAnalyzer.CSharp, and Roslynator.Analyzers are upgraded to newer versions in the central package management configuration.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title directly and accurately describes the main change: updating three analyzer packages (Meziantou.Analyzer, Roslynator.Analyzers, and SonarAnalyzer.CSharp) in the pull request.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

Create PR with unit tests
Commit unit tests in branch dependabot/nuget/analyzers-d02fdd2c47

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

Bumps Meziantou.Analyzer from 2.0.257 to 3.0.98 Bumps Roslynator.Analyzers from 4.14.1 to 4.15.0 Bumps SonarAnalyzer.CSharp from 10.16.0.128591 to 10.27.0.140913 --- updated-dependencies: - dependency-name: Meziantou.Analyzer dependency-version: 3.0.98 dependency-type: direct:production update-type: version-update:semver-major dependency-group: analyzers - dependency-name: Roslynator.Analyzers dependency-version: 4.15.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: analyzers - dependency-name: SonarAnalyzer.CSharp dependency-version: 10.27.0.140913 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: analyzers ... Signed-off-by: dependabot[bot] <support@github.com>

…isfy S3241 (#64) Main has been broken since #63 (analyzers bump) landed — SonarAnalyzer's S3241 rule now fires on three pre-existing private extension methods in NextAurora.ServiceDefaults/Extensions.cs that return TBuilder but whose callers ignore the return value: - AddOpenTelemetryExporters<TBuilder> (line 107) - AddDefaultAuthentication<TBuilder> (line 169) - AddNextAuroraApiVersioning<TBuilder> (line 234) S3241: "Change return type to 'void'; not a single caller uses the returned value." Every Dependabot rebase since #63 has been failing CI with the same three errors, blocking #35, #36, #61 from merging. Unblocks the queue. The rule is correct — all three were called as statements (`builder.AddOpenTelemetryExporters();`) with the return discarded. Changes the return type to `void`, drops the `return builder;` lines (and converts the early-return in AddDefaultAuthentication from `return builder;` to bare `return;`). No behavior change. No caller change. Build green locally. Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>

dependabot Bot requested a review from emeraldleaf as a code owner June 1, 2026 01:40

coderabbitai Bot approved these changes Jun 1, 2026

View reviewed changes

dependabot Bot changed the title ~~Bump the analyzers group with 3 updates~~ Bump Meziantou.Analyzer, Roslynator.Analyzers and SonarAnalyzer.CSharp Jun 1, 2026

dependabot Bot force-pushed the dependabot/nuget/analyzers-d02fdd2c47 branch from d009f77 to b7afc91 Compare June 1, 2026 02:26

emeraldleaf merged commit b8a1201 into main Jun 2, 2026
3 of 6 checks passed

emeraldleaf deleted the dependabot/nuget/analyzers-d02fdd2c47 branch June 2, 2026 03:04

emeraldleaf mentioned this pull request Jun 2, 2026

fix(analyzers): unblock main — S3241 fires on three unused-return extension methods #64

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump Meziantou.Analyzer, Roslynator.Analyzers and SonarAnalyzer.CSharp#63

Bump Meziantou.Analyzer, Roslynator.Analyzers and SonarAnalyzer.CSharp#63
emeraldleaf merged 1 commit into
mainfrom
dependabot/nuget/analyzers-d02fdd2c47

dependabot Bot commented on behalf of github Jun 1, 2026 •

edited by coderabbitai Bot

Loading

Uh oh!

dependabot Bot commented on behalf of github Jun 1, 2026

Uh oh!

coderabbitai Bot commented Jun 1, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Jun 1, 2026 • edited by coderabbitai Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

3.0.98

What's Changed

3.0.97

What's Changed

3.0.96

3.0.95

What's Changed

3.0.94

What's Changed

3.0.93

What's Changed

3.0.92

What's Changed

3.0.91

What's Changed

3.0.90

What's Changed

3.0.89

What's Changed

3.0.88

What's Changed

3.0.87

What's Changed

3.0.86

What's Changed

3.0.85

What's Changed

3.0.84

What's Changed

3.0.83

What's Changed

3.0.82

What's Changed

3.0.81

What's Changed

3.0.80

3.0.79

What's Changed

3.0.78

What's Changed

3.0.77

What's Changed

3.0.76

What's Changed

3.0.75

What's Changed

3.0.74

What's Changed

3.0.73

What's Changed

3.0.72

What's Changed

3.0.71

What's Changed

3.0.70

What's Changed

3.0.69

What's Changed

3.0.68

What's Changed

3.0.67

What's Changed

3.0.66

What's Changed

3.0.65

What's Changed

3.0.64

What's Changed

3.0.63

What's Changed

3.0.62

What's Changed

3.0.61

What's Changed

3.0.60

What's Changed

3.0.59

dependabot Bot commented on behalf of github Jun 1, 2026 •

edited by coderabbitai Bot

Loading