Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump SonarAnalyzer.CSharp from 9.6.0.74858 to 9.7.0.75501 #180

Merged
merged 1 commit into from
Aug 8, 2023

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Aug 8, 2023

Bumps SonarAnalyzer.CSharp from 9.6.0.74858 to 9.7.0.75501.

Release notes

Sourced from SonarAnalyzer.CSharp's releases.

9.7

This release focused on improving the precision of existing rules. We fixed a lot of False Positives, False Negatives, and bugs in Code Fixes.

We also reduced our memory footprint by reducing allocations in the hot path. Thank you @​sharwell, for reporting this in #7439 and #7440.

Special thanks to our contributor @​nalka0 for the correction of our rule documentation in #7587

Improvements

  • 7462 - [C#] Fix S1125: Codefix should set correct condition priority by adding parentheses.
  • 2618 - [C#] Fix S1125: Faulty code fix on C# pattern matching in conditional operator
  • 7213 - [C#] Improve S109 message

False Positive

  • 7633 - [C#] Fix S4023 FP: Interfaces that provide type parameters from base interface
  • 7629 - [C#] Fix S1186 FP: Empty method comes from interface
  • 7508 - [C#, VB.NET] Fix S6605 FP: Should not fire in expressions
  • 7324 - [C#] Fix S3063 FP: StringBuilder used in concatenation
  • 6912 - [C#] Fix S1144 FP: Unused fields in class with StructLayout
  • 5521 - [C#] Fix S1643 FP: should not apply when strings are not aggregated
  • 3945 - [C#] Fix S3925 FP: Classes not having extra properties should not have to extend ISerializable interface

False Negative

  • 7688 - [C#] Fix S1125 FN: recognize C#9 "is not" constant pattern
  • 2619 - [C#] Fix S1125 FN: recognize "is" keyword with constant pattern
  • 7713 - [C#] Fix S1643 FN: consider simple assignments with variable not on the innermost add expression

Performance

  • 7664 - Allocations: Make IsUnchanged allocation free in the common case
  • 7663 - Allocations: Move stringliteral tokens array to static field
  • 7656 - Allocations: Remove delegate allocation from IsExcluded
  • 7655 - Allocations: Remove delegate allocation from IsGenerated
  • 7440 - Allocations: Unroll AdditionalFile extension method
  • 7439 - Allocations: Avoid capturing and delegate allocations in SonarAnalysisContextBase
Commits
  • d9025b5 Update RSPEC before 9.7 release (#7724)
  • 28c59a4 Reproducer for #7722 Concatenation for parameters, fields and properties are ...
  • b9bab9b Fix S1125 CodeFix: C# pattern matching in conditional operator (#7719)
  • 8f6674f Fix S1125 FN: recognize "is" and "is not" keyword with constant pattern (#7687)
  • 85c2441 Fix S3925 FP: Classes should need to opt-in for serialization (#7673)
  • 3144489 Fix S1643 FN: consider simple assignments with variable not on the innermost ...
  • d42e451 Deprecation: Replace ValidateTag with TagValue (BeTrue part) (#7705)
  • 23ddd7e Fix S1643 FP: should not apply when strings are not aggregated (#7711)
  • c58a860 Fix S4023 FP: Interfaces that provide type parameters from base interface (#7...
  • 4b25ebc Fix copy paste in S1186 docs (#7587)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [SonarAnalyzer.CSharp](https://github.com/SonarSource/sonar-dotnet) from 9.6.0.74858 to 9.7.0.75501.
- [Release notes](https://github.com/SonarSource/sonar-dotnet/releases)
- [Commits](SonarSource/sonar-dotnet@9.6.0.74858...9.7.0.75501)

---
updated-dependencies:
- dependency-name: SonarAnalyzer.CSharp
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot requested a review from Bertk as a code owner August 8, 2023 18:50
@dependabot dependabot bot added .NET Pull requests that update .net code type: dependencies Pull requests that update a dependency file labels Aug 8, 2023
@Bertk Bertk merged commit 0d88691 into main Aug 8, 2023
13 checks passed
@dependabot dependabot bot deleted the dependabot/nuget/SonarAnalyzer.CSharp-9.7.0.75501 branch August 8, 2023 19:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
.NET Pull requests that update .net code type: dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant