Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump SonarAnalyzer.CSharp from 9.16.0.82469 to 9.17.0.82934 #368

Merged

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 22, 2024

Bumps SonarAnalyzer.CSharp from 9.16.0.82469 to 9.17.0.82934.

Release notes

Sourced from SonarAnalyzer.CSharp's releases.

9.17

Hi everyone!

We are shipping some more improvements to our Symbolic Execution rules reducing the number of false positives.

False Negatives

  • 8493 - [C#] Fix S2583/S2589 FN and S2259 FP: Add support for relational pattern

False Positive

  • 7665 - [C#, VB.NET] Fix S2259 FP: is not and short-circuit or
  • 8382 - [C#, VB.NET] Fix S2589 FP: Custom Equals(null) is wrongly assumed to always return false
  • 8504 - [C#, VB.NET] Fix S1104 FP: Should be ignored on classes and structs marked as [Serializable]
Commits
  • e3e67e0 RSPEC update (#8553)
  • c7847c0 Add NuGet authentication (#8514)
  • 5decea0 Fix S1104 FN: In types marked as [Serializable], do not ignore fields marked ...
  • 20d4726 Happy New Year 2024! (#8530)
  • 53626ac Fix S1104 FP: Should be ignored on classes and structs marked as [Serializabl...
  • 2a9584d [TO BE REVERTED] Fix Maven IT Failures because of 'no plugins installed' (#8518)
  • 53de1b1 README: Add link for provisioning repo (#8516)
  • 2fb41a4 S3878: Add FP repro for #8510 (#8511)
  • 3ccd115 GitHub workflow: Improve author_association to NONE only (#8506)
  • 0420b6f Bump com.google.guava:guava from 32.1.3-jre to 33.0.0-jre (#8480)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [SonarAnalyzer.CSharp](https://github.com/SonarSource/sonar-dotnet) from 9.16.0.82469 to 9.17.0.82934.
- [Release notes](https://github.com/SonarSource/sonar-dotnet/releases)
- [Commits](SonarSource/sonar-dotnet@9.16.0.82469...9.17.0.82934)

---
updated-dependencies:
- dependency-name: SonarAnalyzer.CSharp
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added .NET Pull requests that update .net code dependencies Pull requests that update a dependency file labels Jan 22, 2024
@teo-tsirpanis teo-tsirpanis merged commit 5b769d9 into main Jan 24, 2024
4 checks passed
@dependabot dependabot bot deleted the dependabot/nuget/SonarAnalyzer.CSharp-9.17.0.82934 branch January 24, 2024 00:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file .NET Pull requests that update .net code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant