CycloneDX / cyclonedx-cli

CycloneDX CLI tool for SBOM analysis, merging, diffs and format conversions.
https://cyclonedx.org/
Apache License 2.0
317 stars 62 forks source link

Bump coverlet.collector from 3.1.2 to 6.0.2 #390

Open dependabot[bot] opened 3 months ago

dependabot[bot] commented 3 months ago

Bumps coverlet.collector from 3.1.2 to 6.0.2.

Release notes

Sourced from coverlet.collector's releases.

v6.0.2

Fixed

  • Threshold-stat triggers error #1634
  • Fixed coverlet collector 6.0.1 requires dotnet sdk 8 #1625
  • Type initializer errors after updating from 6.0.0 to 6.0.1 #1629
  • Exception when multiple exclude-by-attribute filters specified #1624

Improvements

  • More concise options to specify multiple parameters in coverlet.console #1624

Diff between 6.0.1 and 6.0.2

v6.0.1

Fixed

  • Uncovered lines in .NET 8 for inheriting records #1555
  • Fix record constructors not covered when SkipAutoProps is true #1561
  • Fix .NET 7 Method Group branch coverage issue #1447
  • Fix ExcludeFromCodeCoverage does not exclude method in a partial class #1548
  • Fix ExcludeFromCodeCoverage does not exclude F# task #1547
  • Fix issues where ExcludeFromCodeCoverage ignored #1431
  • Fix issues with ExcludeFromCodeCoverage attribute #1484
  • Fix broken links in documentation #1514
  • Fix problem with coverage for .net5 WPF application #1221 by https://github.com/lg2de
  • Fix unable to instrument module for Microsoft.AspNetCore.Mvc.Razor #1459 by https://github.com/lg2de

Improvements

Diff between 6.0.0 and 6.0.1

v6.0.0

Fixed -Could not write lines to file CoverletSourceRootsMapping - in use by another process coverlet-coverage/coverlet#1155
-Incorrect coverage for methods returning IAsyncEnumerable in generic classes coverlet-coverage/coverlet#1383
-Wrong branch coverage for async methods .NET Standard 1.x coverlet-coverage/coverlet#1376
-Empty path exception in visual basic projects coverlet-coverage/coverlet#775
-Align published nuget package version to github release version coverlet-coverage/coverlet#1413
-Sync nuget and github release versions coverlet-coverage/coverlet#1122

Improvements -Migration of the project to .NET 6.0 coverlet-coverage/coverlet#1473

Breaking changes New parameter ExcludeAssembliesWithoutSources to control automatic assembly exclusion coverlet-coverage/coverlet#1164. The parameter InstrumentModulesWithoutLocalSources has been removed. since it can be handled by setting ExcludeAssembliesWithoutSources to None. The default heuristics for determining whether to instrument an assembly has been changed. In previous versions any missing source file was taken as a signal that it was a third-party project that shouldn't be instrumented, with exceptions for some common file name patterns for source generators. Now only assemblies where no source files at all can be found are excluded from instrumentation, and the code for detecting source generator files have been removed. To get back to the behaviour that at least one missing file is sufficient to exclude an assembly, set ExcludeAssembliesWithoutSources to MissingAny, or use assembly exclusion filters for more fine-grained control.

Diff between 3.2.0 and 6.0.0

... (truncated)

Commits


Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note Automatic rebases have been disabled on this pull request as it has been open for over 30 days.