Release build of Roslyn-analyzers based on Microsoft.CodeAnalysis 3.3.0 NuGet packages. Works with VS 2019 16.3 or later.
Contains important functionality and performance bug fixes on top of v3.3.1 release
New deprecation warning CA9998 for Microsoft.CodeAnalysis.FxCopAnalyzers package:
FxCopAnalyzers package has been deprecated in favor of 'Microsoft.CodeAnalysis.NetAnalyzers', that ships with the .NET SDK. Please refer to https://docs.microsoft.com/visualstudio/code-quality/migrate-from-fxcop-analyzers-to-net-analyzers to migrate to .NET analyzers.
v3.3.1
Release build of Roslyn-analyzers based on Microsoft.CodeAnalysis 3.3.0 NuGet packages. Works with VS 2019 16.3 or later.
Contains following important changes on top of v3.3.0 release:
Bug Fixes
Functionality and performance bug fixes
Tainted data rules improvements
CA5377: Don't warn when unable to get the control flow graph for dataflow analysis
CA3075: Fix false positive on XmlReader.Create(string) invocations
Optimizing error list refresh times for full compilation analyzers in Visual Studio 2019 16.9
Additional analyzers/fixers
Added
Globalization
CA1310: Specify StringComparison for correctness -- Enabled by default
Interoperability
CA1416: Validate platform compatibility -- Enabled by default
Changed
Globalization
CA1307: Specify StringComparison for clarity -- Now disabled by default
v3.3.0
Release build of Roslyn-analyzers based on Microsoft.CodeAnalysis 3.3.0 NuGet packages. Works with VS 2019 16.3 or later.
Contains following important changes on top of v3.0.0 release
Editorconfig based file/directory level options configuration. See details here
Bug Fixes
Many bug fixes, including performance fixes.
Various tainted data rules: Don't report tainted data flowing into non-sink method parameters, when other tainted data does flow into a sink parameter.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language
- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language
- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language
- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language
- `@dependabot badge me` will comment on this PR with code to add a "Dependabot enabled" badge to your readme
Additionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com):
- Update frequency (including time of day and day of week)
- Pull request limits (per update run and/or open at any time)
- Out-of-range updates (receive only lockfile updates, if desired)
- Security updates (receive only security updates, if desired)
Bumps Microsoft.CodeAnalysis.FxCopAnalyzers from 2.9.6 to 3.3.2.
Release notes
Sourced from Microsoft.CodeAnalysis.FxCopAnalyzers's releases.
Commits
4e0e1e8Merge pull request #4494 from dotnet/merges/release/5.0.2xx-to-master5530a8bMerge branch 'master' into merges/release/5.0.2xx-to-master26b2159Merge pull request #4492 from mavasani/Issue4491_5_0_2xx23619ebHarden InterproceduralAnalysisConfiguration to prevent null tree argument9df0075Merge pull request #4490 from mavasani/FI_5_0_2xx5671c0bMerge remote-tracking branch 'upstream/release/5.0.2xx' into FI_5_0_2xxf7aad5cMerge pull request #4489 from dotnet/mavasani-patch-1389ac2fUpdate Program.cs3b7bb4aMerge pull request #4488 from dotnet/netanalyzers-5-0-1704496dUpdate auto-generated documentation file by running msbuild /t:packDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language - `@dependabot badge me` will comment on this PR with code to add a "Dependabot enabled" badge to your readme Additionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com): - Update frequency (including time of day and day of week) - Pull request limits (per update run and/or open at any time) - Out-of-range updates (receive only lockfile updates, if desired) - Security updates (receive only security updates, if desired)