Skip to content

chore(deps): update dependency sonaranalyzer.csharp to 10.22.0.136894#175

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/sonaranalyzer.csharp-10.x
Open

chore(deps): update dependency sonaranalyzer.csharp to 10.22.0.136894#175
renovate[bot] wants to merge 1 commit intomainfrom
renovate/sonaranalyzer.csharp-10.x

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate bot commented Feb 25, 2026

This PR contains the following updates:

Package Change Age Confidence
SonarAnalyzer.CSharp (source) 10.19.0.13279310.22.0.136894 age confidence

Release Notes

SonarSource/sonar-dotnet (SonarAnalyzer.CSharp)

v10.22.0.136894: 10.22

Compare Source

Hello everyone,
This release brings 4 new rules to help developers transition to C# 14, and a bunch of false positive fixes.

New rules
  • NET-3361 - New rule S8381: "scoped" should be escaped when used as a type name in lambda parameters
  • NET-3359 - New rule S8368: "extension" identifiers should be escaped to avoid contextual keyword conflicts
  • NET-3347 - New rule S8380: Return types named "partial" should be escaped with "@​"
  • NET-3345 - New rule S8367: Identifiers should not conflict with the "field" keyword in C# 14?
False Positive
  • NET-3443 - Fix S1940 FP: for floating point numbers that can be NaN "!(a <= b)" is not the same as "a > b"
  • NET-3001 - Fix S3063 FP: Concatenation with identifier
  • NET-1569 - Fix S5944 FP: AddressOf(MethodName) in Return statement
  • NET-3445 - Fix T0029 FP: Inside target-typed new
  • NET-2817 - Fix T0029 FP: Ident for collection expression members
  • NET-2024 - Fix T0029 FP: Inside array initializer
  • NET-3341 - Fix T0029 FP: After member access
  • NET-3462 - Fix T0042 FP: Inside constructors and collection initializers
  • NET-3426 - Fix T0042: Raw string in collection initializer
  • NET-2888 - Fix T0042 FP: Returned from method
  • NET-2874 - Fix T0042 FP: Raw string in ternary
Bugs
  • NET-3386 - Fix S4583 AD0001: BeginInvoke callback declared in separate file
Other
  • NET-3385 - S2612: Rule type changed from Security Hotspot to Vulnerability

v10.21.0.135717: 10.21

Compare Source

Bug

  • NET-3376 - Fix S6930 AD0001: Issue on template / code files for blazor
  • NET-3367 - Fix S4830 AD0001: CertificateValidationCheck Syntax node is not within syntax tree
Feature
  • NET-3260 - Fix broken links in S6960 RSPEC
False Positive
  • NET-2886 - Fix T0015 FP: In constructor
  • NET-1678 - Fix S4275 FP: with property overload

v10.20.0.135146: 10.20

Compare Source

This release brings 9 precision improvements — 7 false positive fixes and 2 false negative fixes — across rules S1116, S1144, S1210, S1643, S1854, S2365, S3254, S3265, and S127. It also promotes S2068 and S6418 from Security Hotspot to Vulnerability, making them visible directly in the IDE, and removes S3256 from the Sonar Way quality profile.

Changes
  • NET-3227 - Remove S3256 from "Sonar Way" quality profile
  • NET-3208 - S6418: Rule type changed from Security Hotspot to Vulnerability
  • NET-3207 - S2068: Rule type changed from Security Hotspot to Vulnerability
  • NET-3206 - Remove links to rules.sonarsource.com
False Positive
  • NET-3215 - Fix FP on S127: Should only raise on stop condition variables
  • NET-3212 - Fix FP on S3254: Don't raise if the parameter isn't last
  • NET-3053 - Fix FP on S1210: Implementing comparable operators for private types
  • NET-2984 - Fix FP on S3265: BCL enums with [Flags] not recognized due to metadata resolution
  • NET-2976 - Fix FP on S1854: Default value initializations flagged despite exemptions
  • NET-2966 - Fix FP on S1144: Constructors in MEF-exported types
  • NET-2956 - Fix FP on S1116: Empty loop body with side effects in condition
False Negative
  • NET-1261 - Fix FN on S2365: Rule should report on new collection
  • NET-1259 - Fix FN on S1643: Concatenation for parameters, fields and properties are not detected
Rule specification
  • NET-3246 - Modify Rule S127: Update Description
  • NET-3218 - Modify Rule S3265: Add exception for MethodImplAttributes
  • NET-3086 - Modify Rule S1116: Add loop exception
Maintenance
  • NET-3047 - Update RSPEC before 10.20 release

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the dependency:nuget Indicates a pull request related to updating or managing NuGet package dependencies. label Feb 25, 2026
@renovate renovate bot enabled auto-merge (squash) February 25, 2026 13:10
@renovate renovate bot force-pushed the renovate/sonaranalyzer.csharp-10.x branch 4 times, most recently from 3f0f403 to 4ad4b1c Compare March 11, 2026 18:59
@renovate renovate bot changed the title chore(deps): update dependency sonaranalyzer.csharp to 10.20.0.135146 chore(deps): update dependency sonaranalyzer.csharp to 10.21.0.135717 Mar 13, 2026
@renovate renovate bot force-pushed the renovate/sonaranalyzer.csharp-10.x branch from 4ad4b1c to 905cf22 Compare March 13, 2026 20:09
@renovate renovate bot force-pushed the renovate/sonaranalyzer.csharp-10.x branch 7 times, most recently from a76e958 to 6f37c62 Compare March 27, 2026 12:07
@renovate renovate bot changed the title chore(deps): update dependency sonaranalyzer.csharp to 10.21.0.135717 chore(deps): update dependency sonaranalyzer.csharp to 10.22.0.136894 Mar 27, 2026
@renovate renovate bot force-pushed the renovate/sonaranalyzer.csharp-10.x branch from 6f37c62 to f56fbc9 Compare March 27, 2026 12:11
@renovate renovate bot force-pushed the renovate/sonaranalyzer.csharp-10.x branch from f56fbc9 to 920dab1 Compare March 28, 2026 00:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependency:nuget Indicates a pull request related to updating or managing NuGet package dependencies.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants