Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 1, 2025

Bumps SonarAnalyzer.CSharp from 10.6.0.109712 to 10.7.0.110445.

Release notes

Sourced from SonarAnalyzer.CSharp's releases.

10.7



Improvement

  • NET-1116 - Deprecate S1227: break statements should not be used except for switch cases
  • NET-1045 - Remove unused AnalyzerId and RuleNamespace server properties

Bug

  • NET-1047 - Fix install scripts for NuGet packages
Commits
  • 033f8a4 NET-1040 Update RSPEC before 10.7 release
  • d9a8fd0 NET-1151 Repro FP S3626
  • 88381f2 NET-1047 Update nuget install scripts to account for single analyzer dll
  • ef12213 NET-1137 Repro FP S1121
  • 4dceed1 NET-1140 Add UT for issue with same start and end location
  • 77b933a NET-504 Clean up RuleDefinition UTs
  • 5697628 NET-1058 Move plugin properties to root pom.xml
  • 0172dbc NET-1059 Move organization and scm to private/pom.xml and pom.xml
  • 96b07b3 NET-1043 Extract remaining Helper extensions from SonarAnalyzer.Core
  • 856f2f5 NET-1042 Extract semantic Helper extensions from SonarAnalyzer.Core
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [SonarAnalyzer.CSharp](https://github.com/SonarSource/sonar-dotnet) from 10.6.0.109712 to 10.7.0.110445.
- [Release notes](https://github.com/SonarSource/sonar-dotnet/releases)
- [Commits](SonarSource/sonar-dotnet@10.6.0.109712...10.7.0.110445)

---
updated-dependencies:
- dependency-name: SonarAnalyzer.CSharp
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added .NET Pull requests that update .net code dependencies Pull requests that update a dependency file labels Mar 1, 2025
@github-actions
Copy link

github-actions bot commented Mar 1, 2025

🔍 Vulnerabilities of bitcoin-web-api:latest

📦 Image Reference bitcoin-web-api:latest
digestsha256:56288730016842e68a2753f0ad52e9ff51820ac03739a147bbc2a1d7109f5047
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
platformlinux/amd64
size58 MB
packages347
📦 Base Image alpine:3
also known as
  • 3.21
  • 3.21.3
  • latest
digestsha256:1c4eef651f65e2f7daee7ee785882ac164b02b78fb74503052a26dc061c90474
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0

@github-actions
Copy link

github-actions bot commented Mar 1, 2025

Recommended fixes for local bitcoin-web-api:latest

Base image is alpine:3

Name3.21.3
Digestsha256:1c4eef651f65e2f7daee7ee785882ac164b02b78fb74503052a26dc061c90474
Vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
Pushed2 weeks ago
Size3.6 MB
Packages19
OS3.21.3
The base image is also available under the supported tag(s): 3.21, 3.21.3, latest

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

✅ There are no tag recommendations at this time.

@sonarqubecloud
Copy link

sonarqubecloud bot commented Mar 1, 2025

@Tsingis Tsingis merged commit 8b02592 into master Mar 1, 2025
9 checks passed
@dependabot dependabot bot deleted the dependabot/nuget/master/SonarAnalyzer.CSharp-10.7.0.110445 branch March 1, 2025 20:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .net code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants