Skip to content

Comments

chore(deps): update dependency sonaranalyzer.csharp to 10.20.0.135146#175

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/sonaranalyzer.csharp-10.x
Open

chore(deps): update dependency sonaranalyzer.csharp to 10.20.0.135146#175
renovate[bot] wants to merge 1 commit intomainfrom
renovate/sonaranalyzer.csharp-10.x

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Feb 25, 2026

This PR contains the following updates:

Package Change Age Confidence
SonarAnalyzer.CSharp (source) 10.19.0.13279310.20.0.135146 age confidence

Release Notes

SonarSource/sonar-dotnet (SonarAnalyzer.CSharp)

v10.20.0.135146: 10.20

This release brings 9 precision improvements — 7 false positive fixes and 2 false negative fixes — across rules S1116, S1144, S1210, S1643, S1854, S2365, S3254, S3265, and S127. It also promotes S2068 and S6418 from Security Hotspot to Vulnerability, making them visible directly in the IDE, and removes S3256 from the Sonar Way quality profile.

Changes
  • NET-3227 - Remove S3256 from "Sonar Way" quality profile
  • NET-3208 - S6418: Rule type changed from Security Hotspot to Vulnerability
  • NET-3207 - S2068: Rule type changed from Security Hotspot to Vulnerability
  • NET-3206 - Remove links to rules.sonarsource.com
False Positive
  • NET-3215 - Fix FP on S127: Should only raise on stop condition variables
  • NET-3212 - Fix FP on S3254: Don't raise if the parameter isn't last
  • NET-3053 - Fix FP on S1210: Implementing comparable operators for private types
  • NET-2984 - Fix FP on S3265: BCL enums with [Flags] not recognized due to metadata resolution
  • NET-2976 - Fix FP on S1854: Default value initializations flagged despite exemptions
  • NET-2966 - Fix FP on S1144: Constructors in MEF-exported types
  • NET-2956 - Fix FP on S1116: Empty loop body with side effects in condition
False Negative
  • NET-1261 - Fix FN on S2365: Rule should report on new collection
  • NET-1259 - Fix FN on S1643: Concatenation for parameters, fields and properties are not detected
Rule specification
  • NET-3246 - Modify Rule S127: Update Description
  • NET-3218 - Modify Rule S3265: Add exception for MethodImplAttributes
  • NET-3086 - Modify Rule S1116: Add loop exception
Maintenance
  • NET-3047 - Update RSPEC before 10.20 release

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the dependency:nuget Indicates a pull request related to updating or managing NuGet package dependencies. label Feb 25, 2026
@renovate renovate bot enabled auto-merge (squash) February 25, 2026 13:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependency:nuget Indicates a pull request related to updating or managing NuGet package dependencies.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants