Skip to content

chore(deps): update dependency sonaranalyzer.csharp to 10.21.0.135717#175

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/sonaranalyzer.csharp-10.x
Open

chore(deps): update dependency sonaranalyzer.csharp to 10.21.0.135717#175
renovate[bot] wants to merge 1 commit intomainfrom
renovate/sonaranalyzer.csharp-10.x

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Feb 25, 2026

This PR contains the following updates:

Package Change Age Confidence
SonarAnalyzer.CSharp (source) 10.19.0.13279310.21.0.135717 age confidence

Release Notes

SonarSource/sonar-dotnet (SonarAnalyzer.CSharp)

v10.21.0.135717: 10.21

Compare Source

?

Bug
  • NET-3376 - Fix S6930 AD0001: Issue on template / code files for blazor
  • NET-3367 - Fix S4830 AD0001: CertificateValidationCheck Syntax node is not within syntax tree
Feature
  • NET-3260 - Fix broken links in S6960 RSPEC
False Positive
  • NET-2886 - Fix T0015 FP: In constructor
  • NET-1678 - Fix S4275 FP: with property overload

v10.20.0.135146: 10.20

Compare Source

This release brings 9 precision improvements — 7 false positive fixes and 2 false negative fixes — across rules S1116, S1144, S1210, S1643, S1854, S2365, S3254, S3265, and S127. It also promotes S2068 and S6418 from Security Hotspot to Vulnerability, making them visible directly in the IDE, and removes S3256 from the Sonar Way quality profile.

Changes
  • NET-3227 - Remove S3256 from "Sonar Way" quality profile
  • NET-3208 - S6418: Rule type changed from Security Hotspot to Vulnerability
  • NET-3207 - S2068: Rule type changed from Security Hotspot to Vulnerability
  • NET-3206 - Remove links to rules.sonarsource.com
False Positive
  • NET-3215 - Fix FP on S127: Should only raise on stop condition variables
  • NET-3212 - Fix FP on S3254: Don't raise if the parameter isn't last
  • NET-3053 - Fix FP on S1210: Implementing comparable operators for private types
  • NET-2984 - Fix FP on S3265: BCL enums with [Flags] not recognized due to metadata resolution
  • NET-2976 - Fix FP on S1854: Default value initializations flagged despite exemptions
  • NET-2966 - Fix FP on S1144: Constructors in MEF-exported types
  • NET-2956 - Fix FP on S1116: Empty loop body with side effects in condition
False Negative
  • NET-1261 - Fix FN on S2365: Rule should report on new collection
  • NET-1259 - Fix FN on S1643: Concatenation for parameters, fields and properties are not detected
Rule specification
  • NET-3246 - Modify Rule S127: Update Description
  • NET-3218 - Modify Rule S3265: Add exception for MethodImplAttributes
  • NET-3086 - Modify Rule S1116: Add loop exception
Maintenance
  • NET-3047 - Update RSPEC before 10.20 release

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the dependency:nuget Indicates a pull request related to updating or managing NuGet package dependencies. label Feb 25, 2026
@renovate renovate bot enabled auto-merge (squash) February 25, 2026 13:10
@renovate renovate bot force-pushed the renovate/sonaranalyzer.csharp-10.x branch 4 times, most recently from 3f0f403 to 4ad4b1c Compare March 11, 2026 18:59
@renovate renovate bot changed the title chore(deps): update dependency sonaranalyzer.csharp to 10.20.0.135146 chore(deps): update dependency sonaranalyzer.csharp to 10.21.0.135717 Mar 13, 2026
@renovate renovate bot force-pushed the renovate/sonaranalyzer.csharp-10.x branch from 4ad4b1c to 905cf22 Compare March 13, 2026 20:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependency:nuget Indicates a pull request related to updating or managing NuGet package dependencies.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants