Skip to content

deps: Bump Bogus and 12 others#5

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/nuget/minor-and-patch-7733306621
Closed

deps: Bump Bogus and 12 others#5
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/nuget/minor-and-patch-7733306621

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github Apr 16, 2026 •
edited
Loading

Updated Bogus from 35.6.1 to 35.6.5.

Release notes

Sourced from Bogus's releases.

35.6.5

CHANGE LOG

35.6.4

CHANGE LOG

35.6.3

CHANGE LOG

35.6.2

CHANGE LOG

Commits viewable in compare view.

Updated bunit from 1.34.0 to 1.40.0.

Release notes

Sourced from bunit's releases.

1.40.0

Fixed

  • Aligned Microsoft packages to their TFM version

1.39.5

Fixed

  • Do not set the Uri or BaseUri property on the FakeNavigationManager if navigation is prevented by a handler on net7.0 or greater. Reported and fixed by @​ayyron-dev in #​1647
  • Use default renderer properties for AngleSharp. Reported by @​jtleaming in [#​1692].
  • FindComponents throws an exception, when a base and derived class was searched for. Reported by @​BlueDragon709 in [#​1691].

1.38.5

Added

  • Added support for xunit v3 in the bunit.template. By @​linkdotnet.

1.37.7

Added

  • Added support for RendererInfo and AssignedRenderMode (.net9.0).

1.36.0

Added

  • Bumped .NET 9 version dependencies to stable packages.

1.35.3

Added

  • Extension packages (bunit.generators and bunit.web.query) are flagged as stable.

Commits viewable in compare view.

Updated Hangfire.AspNetCore from 1.8.21 to 1.8.23.

Release notes

Sourced from Hangfire.AspNetCore's releases.

1.8.23

Release Notes

Hangfire.Core

  • Changed – Use stable sorting algorithm for background job filters again (by @​jirikanda).
  • Fixed – Custom AutomaticRetryAttribute is ignored under certain conditions regression from 1.8.14 (by @​jirikanda).
  • Fixed – Add missing keys for Swedish translation (by @​karl-sjogren).
  • Project – Use TypeNameAssemblyFormatHandling in tests with .NET 6 (by @​viktor-vintertass).

Hangfire.AspNetCore

  • Fixed – InvalidOperationException: The request reached the end of the pipeline without executing the endpoint.

1.8.22

Release Notes

Hangfire.Core

  • Added – IGlobalConfiguration.UseNoOpLogProvider method to disable logging.
  • Changed – Un-deprecate interval methods in the Cron class, add remarks in docs instead.
  • Changed – Bump internalized version of Cronos to 0.11.1.
  • Changed – Bump internalized version of Microsoft.Owin to 4.2.3.
  • Fixed – Serialization of arrays of nested types SimpleAssemblyTypeSerializer.
  • Fixed – Remove wrong escaping characters in Portuguese translations on the "Servers" page.
  • Fixed – Properly remove registered IBackgroundProcessingServer instances on OWIN app shutdown.
  • Fixed – AspNetShutdownDetector for early ASP.NET shutdown detection is not working (regression from 1.7.30).
  • Project – Replace the netcoreapp3.1 target with the net8.0 one in tests.

Hangfire.SqlServer

  • Fixed – InvalidCastException when creating a background job with Schema 5 (regression from 1.8.15).
  • Project – Replace the netcoreapp3.1 target with the net8.0 one in tests.

Hangfire.AspNetCore

  • Added – MapHangfireDashboardWithNoAuthorizationFilters method, which does not include local-only filters.
  • Changed – Set 404 status code when MapHangfireDashboard is used and no dispatcher is found.
  • Fixed – InvalidOperationException upon receiving a request for 'hangfire/bootstrap.min.css.map'.

Commits viewable in compare view.

Updated Hangfire.NetCore from 1.8.21 to 1.8.23.

Release notes

Sourced from Hangfire.NetCore's releases.

1.8.23

Release Notes

Hangfire.Core

  • Changed – Use stable sorting algorithm for background job filters again (by @​jirikanda).
  • Fixed – Custom AutomaticRetryAttribute is ignored under certain conditions regression from 1.8.14 (by @​jirikanda).
  • Fixed – Add missing keys for Swedish translation (by @​karl-sjogren).
  • Project – Use TypeNameAssemblyFormatHandling in tests with .NET 6 (by @​viktor-vintertass).

Hangfire.AspNetCore

  • Fixed – InvalidOperationException: The request reached the end of the pipeline without executing the endpoint.

1.8.22

Release Notes

Hangfire.Core

  • Added – IGlobalConfiguration.UseNoOpLogProvider method to disable logging.
  • Changed – Un-deprecate interval methods in the Cron class, add remarks in docs instead.
  • Changed – Bump internalized version of Cronos to 0.11.1.
  • Changed – Bump internalized version of Microsoft.Owin to 4.2.3.
  • Fixed – Serialization of arrays of nested types SimpleAssemblyTypeSerializer.
  • Fixed – Remove wrong escaping characters in Portuguese translations on the "Servers" page.
  • Fixed – Properly remove registered IBackgroundProcessingServer instances on OWIN app shutdown.
  • Fixed – AspNetShutdownDetector for early ASP.NET shutdown detection is not working (regression from 1.7.30).
  • Project – Replace the netcoreapp3.1 target with the net8.0 one in tests.

Hangfire.SqlServer

  • Fixed – InvalidCastException when creating a background job with Schema 5 (regression from 1.8.15).
  • Project – Replace the netcoreapp3.1 target with the net8.0 one in tests.

Hangfire.AspNetCore

  • Added – MapHangfireDashboardWithNoAuthorizationFilters method, which does not include local-only filters.
  • Changed – Set 404 status code when MapHangfireDashboard is used and no dispatcher is found.
  • Fixed – InvalidOperationException upon receiving a request for 'hangfire/bootstrap.min.css.map'.

Commits viewable in compare view.

Updated Hangfire.SqlServer from 1.8.21 to 1.8.23.

Release notes

Sourced from Hangfire.SqlServer's releases.

1.8.23

Release Notes

Hangfire.Core

  • Changed – Use stable sorting algorithm for background job filters again (by @​jirikanda).
  • Fixed – Custom AutomaticRetryAttribute is ignored under certain conditions regression from 1.8.14 (by @​jirikanda).
  • Fixed – Add missing keys for Swedish translation (by @​karl-sjogren).
  • Project – Use TypeNameAssemblyFormatHandling in tests with .NET 6 (by @​viktor-vintertass).

Hangfire.AspNetCore

  • Fixed – InvalidOperationException: The request reached the end of the pipeline without executing the endpoint.

1.8.22

Release Notes

Hangfire.Core

  • Added – IGlobalConfiguration.UseNoOpLogProvider method to disable logging.
  • Changed – Un-deprecate interval methods in the Cron class, add remarks in docs instead.
  • Changed – Bump internalized version of Cronos to 0.11.1.
  • Changed – Bump internalized version of Microsoft.Owin to 4.2.3.
  • Fixed – Serialization of arrays of nested types SimpleAssemblyTypeSerializer.
  • Fixed – Remove wrong escaping characters in Portuguese translations on the "Servers" page.
  • Fixed – Properly remove registered IBackgroundProcessingServer instances on OWIN app shutdown.
  • Fixed – AspNetShutdownDetector for early ASP.NET shutdown detection is not working (regression from 1.7.30).
  • Project – Replace the netcoreapp3.1 target with the net8.0 one in tests.

Hangfire.SqlServer

  • Fixed – InvalidCastException when creating a background job with Schema 5 (regression from 1.8.15).
  • Project – Replace the netcoreapp3.1 target with the net8.0 one in tests.

Hangfire.AspNetCore

  • Added – MapHangfireDashboardWithNoAuthorizationFilters method, which does not include local-only filters.
  • Changed – Set 404 status code when MapHangfireDashboard is used and no dispatcher is found.
  • Fixed – InvalidOperationException upon receiving a request for 'hangfire/bootstrap.min.css.map'.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Authentication.Google from 10.0.0 to 10.0.6.

Release notes

Sourced from Microsoft.AspNetCore.Authentication.Google's releases.

No release notes found for this version range.

Commits viewable in compare view.

Pinned Microsoft.Extensions.Configuration at 10.0.6.

Release notes

Sourced from Microsoft.Extensions.Configuration's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Playwright from 1.48.0 to 1.59.0.

Release notes

Sourced from Microsoft.Playwright's releases.

1.59.0

🎬 Screencast

New Page.Screencast API provides a unified interface for capturing page content with:

  • Screencast recordings
  • Action annotations
  • Visual overlays
  • Real-time frame capture
  • Agentic video receipts
Demo

Screencast recording — record video with precise start/stop control, as an alternative to the recordVideoDir option:

await page.Screencast.StartAsync(new() { Path = "video.webm" });
// ... perform actions ...
await page.Screencast.StopAsync();

Action annotations — enable built-in visual annotations that highlight interacted elements and display action titles during recording:

await page.Screencast.ShowActionsAsync(new() { Position = "top-right" });

ShowActionsAsync accepts Position ("top-left", "top", "top-right", "bottom-left", "bottom", "bottom-right"), Duration (ms per annotation), and FontSize (px). Returns a disposable to stop showing actions.

Visual overlays — add chapter titles and custom HTML overlays on top of the page for richer narration:

await page.Screencast.ShowChapterAsync("Adding TODOs", new() {
    Description = "Type and press enter for each TODO",
    Duration = 1000,
});

await page.Screencast.ShowOverlayAsync("<div style=\"color: red\">Recording</div>");

Real-time frame capture — stream JPEG-encoded frames for custom processing like thumbnails, live previews, AI vision, and more:

await page.Screencast.StartAsync(new() {
    OnFrame = frame => SendToVisionModel(frame.Data),
});

... (truncated)

1.58.0

Trace Viewer Improvements

  • New 'system' theme option follows your OS dark/light mode preference
  • Search functionality (Cmd/Ctrl+F) is now available in code editors
  • Network details panel has been reorganized for better usability
  • JSON responses are now automatically formatted for readability

Thanks to @​cpAdm for contributing these improvements!

Miscellaneous

BrowserType.ConnectOverCDPAsync() now accepts an IsLocal option. When set to true, it tells Playwright that it runs on the same host as the CDP server, enabling file system optimizations.

Breaking Changes ⚠️

  • Removed _react and _vue selectors. See locators guide for alternatives.
  • Removed :light selector engine suffix. Use standard CSS selectors instead.
  • Option Devtools from BrowserType.LaunchAsync() has been removed. Use Args = new[] { "--auto-open-devtools-for-tabs" } instead.
  • Removed macOS 13 support for WebKit.

Browser Versions

  • Chromium 145.0.7632.6
  • Mozilla Firefox 146.0.1
  • WebKit 26.0

1.57.0

Chrome for Testing

Starting with this release, Playwright switches from Chromium, to using Chrome for Testing builds. Both headed and headless browsers are subject to this. Your tests should still be passing after upgrading to Playwright 1.57.

We're expecting no functional changes to come from this switch. The biggest change is the new icon and title in your toolbar.

new and old logo

If you still see an unexpected behaviour change, please file an issue.

On Arm64 Linux, Playwright continues to use Chromium.

Breaking Change

After 3 years of being deprecated, we removed Page.Accessibility from our API. Please use other libraries such as Axe if you need to test page accessibility. See our Node.js guide for integration with Axe.

New APIs

Browser Versions

  • Chromium 143.0.7499.4
  • Mozilla Firefox 144.0.2
  • WebKit 26.0

1.56.0

New APIs

Breaking Changes

Miscellaneous

  • Aria snapshots render and compare input placeholder

Browser Versions

  • Chromium 141.0.7390.37
  • Mozilla Firefox 142.0.1
  • WebKit 26.0

1.55.0

Codegen

  • Automatic ToBeVisibleAsync() assertions: Codegen can now generate automatic ToBeVisibleAsync() assertions for common UI interactions. This feature can be enabled in the Codegen settings UI.

Breaking Changes

  • ⚠️ Dropped support for Chromium extension manifest v2.

Miscellaneous

Browser Versions

  • Chromium 140.0.7339.16
  • Mozilla Firefox 141.0
  • WebKit 26.0

This version was also tested against the following stable channels:

  • Google Chrome 139
  • Microsoft Edge 139

1.54.0

Highlights

  • New cookie property PartitionKey in browserContext.cookies() and browserContext.addCookies(). This property allows to save and restore partitioned cookies. See CHIPS MDN article for more information. Note that browsers have different support and defaults for cookie partitioning.

  • New option --user-data-dir in multiple commands. You can specify the same user data dir to reuse browsing state, like authentication, between sessions.

    pwsh bin/Debug/netX/playwright.ps1 codegen --user-data-dir=./user-data

  • pwsh bin/Debug/netX/playwright.ps1 open does not open the test recorder anymore. Use pwsh bin/Debug/netX/playwright.ps1 codegen instead.

Browser Versions

  • Chromium 139.0.7258.5
  • Mozilla Firefox 140.0.2
  • WebKit 26.0

This version was also tested against the following stable channels:

  • Google Chrome 140
  • Microsoft Edge 140

1.53.0

Miscellaneous

  • New Steps in Trace Viewer:
    New Trace Viewer Steps

  • New method Locator.Describe() to describe a locator. Used for trace viewer.

    var button = Page.GetByTestId("btn-sub").Describe("Subscribe button");
await button.ClickAsync();

  • pwsh bin/Debug/netX/playwright.ps1 install --list will now list all installed browsers, versions and locations.

Browser Versions

  • Chromium 138.0.7204.4
  • Mozilla Firefox 139.0
  • WebKit 18.5

This version was also tested against the following stable channels:

  • Google Chrome 137
  • Microsoft Edge 137

1.52.0

Highlights

  • New method Expect(locator).ToContainClassAsync() to ergonomically assert individual class names on the element.

      await Expect(Page.GetByRole(AriaRole.Listitem, new() { Name = "Ship v1.52" })).ToContainClassAsync("done");

  • Aria Snapshots got two new properties: /children for strict matching and /url for links.

    await Expect(locator).ToMatchAriaSnapshotAsync(@"
  - list
    - /children: equal
    - listitem: Feature A
    - listitem:
      - link ""Feature B"":
        - /url: ""https://playwright.dev""
");

Miscellaneous

Breaking Changes

  • Method route.ContinueAsync() does not allow to override the Cookie header anymore. If a Cookie header is provided, it will be ignored, and the cookie will be loaded from the browser's cookie store. To set custom cookies, use browserContext.AddCookiesAsync().
  • macOS 13 is now deprecated and will no longer receive WebKit updates. Please upgrade to a more recent macOS version to continue benefiting from the latest WebKit improvements.

Browser Versions

  • Chromium 136.0.7103.25
  • Mozilla Firefox 137.0
  • WebKit 18.4

This version was also tested against the following stable channels:

  • Google Chrome 135
  • Microsoft Edge 135

1.51.0

Highlights

  • New option IndexedDB for BrowserContext.StorageStateAsync() allows to save and restore IndexedDB contents. Useful when your application uses IndexedDB API to store authentication tokens, like Firebase Authentication.

    Here is an example following the authentication guide:

    // Save storage state into the file. Make sure to include IndexedDB.
await context.StorageStateAsync(new()
{
    Path = "../../../playwright/.auth/state.json",
    IndexedDB = true
});

// Create a new context with the saved storage state.
var context = await browser.NewContextAsync(new()
{
    StorageStatePath = "../../../playwright/.auth/state.json"
});

  • New option Visible for locator.filter() allows matching only visible elements.

    // Ignore invisible todo items.
var todoItems = Page.GetByTestId("todo-item").Filter(new() { Visible = true });
// Check there are exactly 3 visible ones.
await Expect(todoItems).ToHaveCountAsync(3);

  • New option Contrast for methods page.emulateMedia() and Browser.NewContextAsync() allows to emulate the prefers-contrast media feature.

  • New option FailOnStatusCode makes all fetch requests made through the APIRequestContext throw on response codes other than 2xx and 3xx.

Browser Versions

  • Chromium 134.0.6998.35
  • Mozilla Firefox 135.0
  • WebKit 18.4

This version was also tested against the following stable channels:

  • Google Chrome 133
  • Microsoft Edge 133

1.50.0

Support for Xunit

Miscellaneous

UI updates

  • New button in Codegen for picking elements to produce aria snapshots.
  • Additional details (such as keys pressed) are now displayed alongside action API calls in traces.
  • Display of canvas content in traces is error-prone. Display is now disabled by default, and can be enabled via the Display canvas content UI setting.
  • Call and Network panels now display additional time information.

Breaking

Browser Versions

  • Chromium 133.0.6943.16
  • Mozilla Firefox 134.0
  • WebKit 18.2

This version was also tested against the following stable channels:

  • Google Chrome 132
  • Microsoft Edge 132

1.49.0

Aria snapshots

New assertion Expect(locator).toMatchAriaSnapshot() verifies page structure by comparing to an expected accessibility tree, represented as YAML.

await page.GotoAsync("https://playwright.dev");
await Expect(page.Locator("body")).ToMatchAriaSnapshotAsync(@"
  - banner:
    - heading /Playwright enables reliable/ [level=1]
    - link ""Get started""
    - link ""Star microsoft/playwright on GitHub""
  - main:
    - img ""Browsers (Chromium, Firefox, WebKit)""
    - heading ""Any browser • Any platform • One API""
");

You can generate this assertion with Test Generator or by calling locator.ariaSnapshot().

Learn more in the aria snapshots guide.

Tracing groups

New method tracing.group() allows you to visually group actions in the trace viewer.

// All actions between GroupAsync and GroupEndAsync
// will be shown in the trace viewer as a group.
await Page.Context.Tracing.GroupAsync("Open Playwright.dev > API");
await Page.GotoAsync("https://playwright.dev/");
await Page.GetByRole(AriaRole.Link, new() { Name = "API" }).ClickAsync();
await Page.Context.Tracing.GroupEndAsync();

Breaking: chrome and msedge channels switch to new headless mode

This change affects you if you're using one of the following channels in your playwright.config.ts:

  • chrome, chrome-dev, chrome-beta, or chrome-canary
  • msedge, msedge-dev, msedge-beta, or msedge-canary

After updating to Playwright v1.49, run your test suite. If it still passes, you're good to go. If not, you will probably need to update your snapshots, and adapt some of your test code around PDF viewers and extensions. See issue #​33566 for more details.

Try new Chromium headless

You can opt into the new headless mode by using 'chromium' channel. As official Chrome documentation puts it:

New Headless on the other hand is the real Chrome browser, and is thus more authentic, reliable, and offers more features. This makes it more suitable for high-accuracy end-to-end web app testing or browser extension testing.

See issue #​33566 for the list of possible breakages you could encounter and more details on Chromium headless. Please file an issue if you see any problems after opting in.

... (truncated)

Commits viewable in compare view.

Updated MudBlazor from 8.10.0 to 8.15.0.

Release notes

Sourced from MudBlazor's releases.

8.15.0

What's Changed

New Features

Bug Fixes

Other Changes

New Contributors

Full Changelog: MudBlazor/MudBlazor@v8.14.0...v8.15.0

8.14.0

What's Changed

Breaking Changes

New Features

Bug Fixes

Other Changes

New Contributors

Full Changelog: MudBlazor/MudBlazor@v8.13.0...v8.14.0

8.13.0

What's Changed

New Features

Bug Fixes

New Contributors

Full Changelog: MudBlazor/MudBlazor@v8.12.0...v8.13.0

8.12.0

What's Changed

New Features

Bug Fixes

New Contributors

Full Changelog: MudBlazor/MudBlazor@v8.11.0...v8.12.0

8.11.0

What's Changed

New Features

Bug Fixes

Other Changes

New Contributors

Full Changelog: MudBlazor/MudBlazor@v8.10.0...v8.11.0

Commits viewable in compare view.

Updated Serilog.Sinks.Console from 6.0.0 to 6.1.1.

Release notes

Sourced from Serilog.Sinks.Console's releases.

6.1.1

What's Changed

Full Changelog: serilog/serilog-sinks-console@v6.1.0...v6.1.1

6.1.0

  • #​165 - support for {UtcTimestamp} in output templates (@​ManuelRin)
  • #​172, #​173 - switch build to Serilog org standard (@​nblumhardt)

Commits viewable in compare view.

Updated SonarAnalyzer.CSharp from 10.4.0.108396 to 10.23.0.137933.

Release notes

Sourced from SonarAnalyzer.CSharp's releases.

10.23

This release brings a bunch of fixes! Enjoy.

Bug Fixes

  • NET-3557 - Fix SE AD0001 when SyntaxTreeOptionsProvider is null
  • NET-3519 - Fix AD0001: NRE in PropertiesAccessCorrectField

False Positives

  • NET-3532 - Fix S2583 FP: Any called two times
  • NET-3468 - Fix S1144 FP: Erroneously flagged Add() method used in Collection Initializer
  • NET-3454 - Fix S3267 FP: ref struct in foreach body cannot be captured in LINQ lambda
  • NET-3164 - Fix S125 FP: Improve semicolon heuristic
  • NET-2559 - Fix S5944 FP: When method name is also a class name of generic argument
  • NET-2438 - Fix S1067 FP: Do not raise an issue inside Equals() implementation
  • NET-1565 - Fix S1192 FP: Shouldn't raise on Dapper parameters
  • NET-1168 - Fix S1172 FP: When parameter conditionally used in local function
  • NET-52 - Fix S4017 FP: Do not raise when implementing abstract class/interface

False Negatives

  • NET-1642 - Fix S3415, S2701, S2699, S2187 FN: Support NUnit 4.0
  • NET-348 - Fix S4144 FN: Methods with generic return types

10.22

Hello everyone,
This release brings 4 new rules to help developers transition to C# 14, and a bunch of false positive fixes.

New rules

  • NET-3361 - New rule S8381: "scoped" should be escaped when used as a type name in lambda parameters
  • NET-3359 - New rule S8368: "extension" identifiers should be escaped to avoid contextual keyword conflicts
  • NET-3347 - New rule S8380: Return types named "partial" should be escaped with "@"
  • NET-3345 - New rule S8367: Identifiers should not conflict with the "field" keyword in C# 14?

False Positive

  • NET-3443 - Fix S1940 FP: for floating point numbers that can be NaN "!(a <= b)" is not the same as "a > b"
  • NET-3001 - Fix S3063 FP: Concatenation with identifier
  • NET-1569 - Fix S5944 FP: AddressOf(MethodName) in Return statement
  • NET-3445 - Fix T0029 FP: Inside target-typed new
  • NET-2817 - Fix T0029 FP: Ident for collection expression members
  • NET-2024 - Fix T0029 FP: Inside array initializer
  • NET-3341 - Fix T0029 FP: After member access
  • NET-3462 - Fix T0042 FP: Inside constructors and collection initializers
  • NET-3426 - Fix T0042: Raw string in collection initializer
  • NET-2888 - Fix T0042 FP: Returned from method
  • NET-2874 - Fix T0042 FP: Raw string in ternary

Bugs

  • NET-3386 - Fix S4583 AD0001: BeginInvoke callback declared in separate file

Other

  • NET-3385 - S2612: Rule type changed from Security Hotspot to Vulnerability

10.21

### Bug

  • NET-3376 - Fix S6930 AD0001: Issue on template / code files for blazor
  • NET-3367 - Fix S4830 AD0001: CertificateValidationCheck Syntax node is not within syntax tree

Feature

  • NET-3260 - Fix broken links in S6960 RSPEC

False Positive

  • NET-2886 - Fix T0015 FP: In constructor
  • NET-1678 - Fix S4275 FP: with property overload

10.20

This release brings 9 precision improvements — 7 false positive fixes and 2 false negative fixes — across rules S1116, S1144, S1210, S1643, S1854, S2365, S3254, S3265, and S127. It also promotes S2068 and S6418 from Security Hotspot to Vulnerability, making them visible directly in the IDE, and removes S3256 from the Sonar Way quality profile.

Changes

  • NET-3227 - Remove S3256 from "Sonar Way" quality profile
  • NET-3208 - S6418: Rule type changed from Security Hotspot to Vulnerability
  • NET-3207 - S2068: Rule type changed from Security Hotspot to Vulnerability
  • NET-3206 - Remove links to rules.sonarsource.com

False Positive

  • NET-3215 - Fix FP on S127: Should only raise on stop condition variables
  • NET-3212 - Fix FP on S3254: Don't raise if the parameter isn't last
  • NET-3053 - Fix FP on S1210: Implementing comparable operators for private types
  • NET-2984 - Fix FP on S3265: BCL enums with [Flags] not recognized due to metadata resolution
  • NET-2976 - Fix FP on S1854: Default value initializations flagged despite exemptions
  • NET-2966 - Fix FP on S1144: Constructors in MEF-exported types
  • NET-2956 - Fix FP on S1116: Empty loop body with side effects in condition

False Negative

  • NET-1261 - Fix FN on S2365: Rule should report on new collection
  • NET-1259 - Fix FN on S1643: Concatenation for parameters, fields and properties are not detected

Rule specification

  • NET-3246 - Modify Rule S127: Update Description
  • NET-3218 - Modify Rule S3265: Add exception for MethodImplAttributes
  • NET-3086 - Modify Rule S1116: Add loop exception

Maintenance

  • NET-3047 - Update RSPEC before 10.20 release

10.19



Documentation

  • NET-3012 - Modify Rule S3903: Update description for C#​10

False Positive

  • NET-3004 - Fix S2696 FP: New extension method format triggers FP when accessing static fields

False Negative

  • NET-3011 - Fix S4790 FN: Support Using statement

Task

  • NET-2948 - Update RSPEC before 10.19 release

Bug

  • NET-1866 - Support future VS versions in NuGet package

10.18

This releases focuses on fixing the false-positives that are raised on code making use of the new features in C# 14.

Improvement

  • NET-2921 - Fix passthrough calculation in ModelBuilder
  • NET-2903 - Remove manual extension methods
  • NET-2895 - Cleanup handling of ParameterList of primary constructors

Task

  • NET-2917 - Update RSPEC before 10.18 release

False Positive

  • NET-2898 - Fix S2583/S2589 FP: Extension Members
  • NET-2877 - Fix S2225 FP: Extension member
  • NET-2832 - Fix S3063 FP: NullConditionalOperator
  • NET-2825 - Fix S1144 FP: Partial events
  • NET-2821 - Fix S3264 FP: Partial events
  • NET-2805 - Fix S1144 FP: S1144 Is confused by Debugger Display attribute
  • NET-2748 - Fix S3459 FP: NullConditional Assignment
  • NET-2716 - Fix S2325 FP: Field Keyword
  • NET-2712 - Fix S2953 FP: Extension block member
  • NET-2707 - Fix S3877 FP: Equals method without IEquatable
  • NET-2684 - Fix S7039 FP/FN: Null-conditional assignment
  • NET-2672 - Fix S3928 FP: Extension block
  • NET-2671 - Fix S2970 FP: Null Conditional Assignment
  • NET-2668 - Fix S3398 FP: On private methods in C#​14 extensions classes
  • NET-2644 - Fix S1144 FP: Always raises on private methods in extension block
  • NET-2621 - Fix S2325 FP: Incorrectly reports on C# 14 extensions
  • NET-2620 - Fix S4545 FP: Extension Methods
  • NET-2391 - Fix S1121 FP: Extract (null-forgiving) assignment from expression
  • NET-1914 - Fix S3264 FP: when using +=

False Negative

10.17



False Negative

  • NET-2840 - Improve S2077: Support more methods

Task

  • NET-2839 - Update RSPEC before 10.17 release

New Feature

  • NET-2820 - ShimLayer: Implement Factory
  • NET-2789 - ShimLayer Generator: Enums
  • NET-2728 - ShimLayer Generator: SyntaxNodes

Bug

  • NET-2816 - Fix S3603 AD0001: NRE when LocalFunction inside Record constructor in C#​7

Improvement

10.16.2

Rotations of binary signing keys

10.16.1

Rotations of binary signing keys

10.16

False Positive

  • NET-1729 - Fix S2114 FP: list.AddRange(list) and list.Concat(list) are sensible

False Negative

  • NET-399 - Fix S4790 FN: Support CryptographicOperations data methods

Bug

  • NET-2686 - Fix S3604 AD0001: NRE with partial constructor

10.15

False Positive

  • NET-2198 - Fix S1905 FP: Cast of default! expression is required
  • NET-2197 - Fix S1905 FP: stackalloc and Span conversions
  • NET-1641 - Fix S1905 FP: casting IEnumerable<string?> to IEnumerable<string>
  • NET-2157 - Fix S2589 FP: Don't raise an issue after a delegate is invoked
  • NET-2073 - Fix S2699 FP: Add support for FsCheck property tests
  • NET-1537 - Fix S6964 FP: Don't raise on properties annotated with the BindRequiredAttribute

Improvement

  • NET-2112 - Consider ExplodedNodes relevant if a successor would be relevant
  • NET-2183 - SE: Set constraint on operation when learning from IsPattern

False Negative

  • NET-429 - Fix S4275 FN: Support partial properties

Task

  • NET-2208 - Update RSpec before release

10.14

Hey everyone,

This release mostly focuses on mitigating (NET-2196) a performance regression that was introduced in 10.13.

Improvement

  • NET-2196 - Fix path algorithm for execution flows to mitigate performance regression
  • NET-2177 - Improve how the Symbolic Execution engine handles exception paths
  • NET-2135 - Support xUnit V3
  • NET-2163 - Provide Interface for other plugins to add rules to VB.NET SonarWay profile

False Negative

  • NET-235 - Fix S2053: Adjust required salt length to be 32 bytes

Task

  • NET-2170 - Update RSPEC before 10.14 release

10.13

Hello everyone,

In this release, we've focused on:

  • False positive fixes
  • Enhancing S2259's secondary locations to provide clearer, step-by-step explanations of null pointer dereferences issues.

False Positives

  • NET-2099 - Fix S3885 FP: Do not raise in ResolutionEventHandler
  • NET-2023 - Fix S3257 FP: Array with target-typed new
  • NET-1646 - Fix S3267 FP: Loops should be simplified with LINQ expressions
  • NET-1588 - Fix S1066 FP: Combination of dynamic and out should not raise
  • NET-882 - Fix S3257 FP: Don't raise for C# 10 and later when there's explicit delegate creation

Improvements

  • NET-2095 - Improve incremental PR analysis path detection
  • SE: S2259 - Improve secondary locations

10.12

This release brings the VB version of S6418 and a few FP and FN fixes.

New Rule

  • NET-1379 - New Rule: Implement S6418 Hard-coded secrets are security-sensitive for VB.NET

False Positive

  • NET-1526 - Fix S3267 FP: Only raise on IEnumerable

False Negative

  • NET-1260 - Fix S1215 FN: GC.GetTotalMemory(forceFullCollection: true) should not be called
  • NET-1258 - Fix S6678 FN: Lowercase placeholders in interpolated string
  • NET-1255 - Fix S3267 FN: Logical operators are not supported

Task

  • NET-2060 - Update RSPEC before 11.12 release

10.11

Hello everyone!
In this release we fixed a bunch of false positives and false negatives.
Additionally this version adds support for telemetry in order to gather information on feature usage. Telemetry, requires scanner 10.2.0 or greater.

False Positive

  • NET-1522 - Fix S2068 FP: Do not raise on password:secret
  • NET-1149 - Fix S3626 FP: Add exception when return statement is preceding local functions

False Negative

  • NET-1263 - Fix S1871 FN: Nested if .. else if chain
  • NET-1256 - S2068: Remove word boundary(\b) from regex
  • NET-1254 - Fix S3878 FN: When params are passed as array through an attribute
  • NET-1252 - FN S1168: Support IndexerDeclaration and ConversionOperatorDeclaration
  • NET-459 - Fix S1168 FN: Add support for partial indexers

10.10.1

Bugfix release to fix combability with SonarQube Cloud + a simplification to the ProfileRegistrar

Task

  • NET-1463 - Update RSPEC before 10.10.1 release
  • NET-1461 - Make CSharpSonarWayProfile be compatible and simplify ProfileRegistrar

10.10

Hey everyone, this release mostly focuses on internal and technical things.

General

  • NET-1444 - Move ProfileRegistrar to org.sonar.plugins.csharpenterprise.api
  • NET-1326 - Update RSPEC before 10.10 release

Internal Styling Rules

  • NET-1378 - New Rule T0045: Use var
  • NET-1359 - New Rule T0043: Avoid primary constructors on normal classes and structs
  • NET-1358 - New Rule T0042: Indent raw string literal +4
  • NET-1357 - New Rule T0041: Use raw string literals for multiline strings
  • NET-1356 - New Rule T0040: Use minimum necessary interpolation characters
  • NET-1355 - New Rule T0039: Protected field should start with lower case letter
  • NET-1354 - New Rule T0038: Use fields instead of auto-implemented private or protected properties
  • NET-1347 - New Rule T0000: Don't use Get prefixes
  • NET-1346 - New Rule T0037: Use .Test suffix namespace
  • NET-1345 - New rule T0046: Move extension method to dedicated class
  • NET-1344 - New Rule T0035: Do not use var for this deconstruction
  • NET-1343 - New Rule T0034: Do not embed var into this condition
  • NET-1342 - New Rule T0033: Swap the logic to use positive conditions instead
  • NET-1341 - New Rule T0032: Move the method body to the next line
  • NET-1339 - New Rule T0030: Move the field initializer on the same line
  • NET-1338 - New Rule T0029: Indent all arguments +4 further than the invocation line
  • NET-1337 - New Rule T0028: Move all arguments on the same line, or wrap all of them
  • NET-1336 - New Rule T0027: Move subsequent expressions on separate lines
  • NET-1335 - New Rule T0026: Indent member access +4 further than the initial line
  • NET-1334 - New Rule T0025: Indent ‘?’ and ‘:’ +4 further than the condition line
  • NET-1333 - New Rule T0024: Place multiline ‘?’ and ‘:’ on separate lines
  • NET-1332 - New Rule T0022: Indent all parameters with the first one
  • NET-1331 - New Rule T0021: Use extension methods for Linq
  • NET-1329 - New Rule T0019: Indent operator correctly
  • NET-1328 - New Rule T0018: Move the operator to the beginning of the next line
  • NET-1327 - New Rule T0015: Move local function at the end of the method
  • NET-1237 - New Rule T0044: Don't add Arrange, Act, and Assert(s) comments
  • NET-1325 - Improve T0007: Raise on nondeclaring is { } check

10.9

Hello everyone!

This is a mega-hardening release! Enjoy 😄

False Positive

  • NET-1309 - Fix S2583 FP: Support overrides in IsImplementingInterfaceMember
  • NET-1308 - Fix S2583 FP: Add support for AdressOf operator
  • NET-1302 - Fix S4158 FP: Don't raise on GetEnumerator() calls
  • NET-1295 - Fix S3236 FP: Exclude Debug.Assert
  • NET-1290 - Fix S4158 FP: Support RouteValueDictionary in AspNetCore
  • NET-1289 - Fix S4158 FP: Adding methods with well defined sematics
  • NET-1288 - Fix S4158 FP: Recognize Add methods with bool return type
  • NET-1287 - Fix S4158 FP: Don't raise on SetValue
  • NET-1280 - Fix S2342 FP: Flaky reports
  • NET-1278 - Fix S3440 FP: Variable assignment and switch expression
  • NET-1246 - Fix S1481 FP: Don't report on discard like looking variables
  • NET-1242 - Fix S2583/S4158 FP: Support for collections that are initialized with object
  • [NET-1...

Description has been truncated

@dependabot @github
Copy link
Copy Markdown
Author

dependabot Bot commented on behalf of github Apr 16, 2026

Labels

The following labels could not be found: automated, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot changed the title deps: Bump the minor-and-patch group with 13 updates deps: Bump Bogus and 12 others Apr 16, 2026
@dependabot dependabot Bot force-pushed the dependabot/nuget/minor-and-patch-7733306621 branch 2 times, most recently from dda7988 to b875161 Compare April 16, 2026 13:08
@dependabot
deps: Bump the minor-and-patch group with 13 updates
f9da23e 
Bumps Bogus from 35.6.1 to 35.6.5
Bumps bunit from 1.34.0 to 1.40.0
Bumps Hangfire.AspNetCore from 1.8.21 to 1.8.23
Bumps Hangfire.NetCore from 1.8.21 to 1.8.23
Bumps Hangfire.SqlServer from 1.8.21 to 1.8.23
Bumps Microsoft.AspNetCore.Authentication.Google from 10.0.0 to 10.0.6
Bumps Microsoft.Extensions.Configuration from 10.0.0 to 10.0.6
Bumps Microsoft.Playwright from 1.48.0 to 1.59.0
Bumps MudBlazor from 8.10.0 to 8.15.0
Bumps Serilog.Sinks.Console from 6.0.0 to 6.1.1
Bumps SonarAnalyzer.CSharp from 10.4.0.108396 to 10.23.0.137933
Bumps Testcontainers.MsSql from 4.1.0 to 4.11.0
Bumps xunit.runner.visualstudio from 3.1.4 to 3.1.5

---
updated-dependencies:
- dependency-name: Bogus
  dependency-version: 35.6.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: bunit
  dependency-version: 1.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: Hangfire.AspNetCore
  dependency-version: 1.8.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: Hangfire.NetCore
  dependency-version: 1.8.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: Hangfire.SqlServer
  dependency-version: 1.8.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: Microsoft.AspNetCore.Authentication.Google
  dependency-version: 10.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: Microsoft.Extensions.Configuration
  dependency-version: 10.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: Microsoft.Playwright
  dependency-version: 1.59.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: MudBlazor
  dependency-version: 8.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: Serilog.Sinks.Console
  dependency-version: 6.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: SonarAnalyzer.CSharp
  dependency-version: 10.23.0.137933
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: Testcontainers.MsSql
  dependency-version: 4.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: xunit.runner.visualstudio
  dependency-version: 3.1.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/nuget/minor-and-patch-7733306621 branch from b875161 to f9da23e Compare April 20, 2026 05:43
@dependabot @github
Copy link
Copy Markdown
Author

dependabot Bot commented on behalf of github Apr 20, 2026

Superseded by #12.

@dependabot dependabot Bot closed this Apr 20, 2026
@dependabot dependabot Bot deleted the dependabot/nuget/minor-and-patch-7733306621 branch April 20, 2026 05:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants