Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 5, 2025

Updated Meziantou.Analyzer from 2.0.256 to 2.0.257.

Release notes

Sourced from Meziantou.Analyzer's releases.

2.0.257

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/2.0.257

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@2.0.256...2.0.257

Commits viewable in compare view.

Updated SonarAnalyzer.CSharp from 10.15.0.120848 to 10.16.1.129956.

Release notes

Sourced from SonarAnalyzer.CSharp's releases.

10.16.1

Rotations of binary signing keys

10.16

False Positive

  • NET-1729 - Fix S2114 FP: list.AddRange(list) and list.Concat(list) are sensible

False Negative

  • NET-399 - Fix S4790 FN: Support CryptographicOperations data methods

Bug

  • NET-2686 - Fix S3604 AD0001: NRE with partial constructor

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps Meziantou.Analyzer from 2.0.256 to 2.0.257
Bumps SonarAnalyzer.CSharp from 10.15.0.120848 to 10.16.1.129956

---
updated-dependencies:
- dependency-name: Meziantou.Analyzer
  dependency-version: 2.0.257
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: tests
- dependency-name: SonarAnalyzer.CSharp
  dependency-version: 10.16.1.129956
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: tests
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added .NET Pull requests that update .net code dependencies Pull requests that update a dependency file labels Dec 5, 2025
@what-the-diff
Copy link

what-the-diff bot commented Dec 5, 2025

PR Summary

  • Update of Meziantou.Analyzer package
    The Meziantou.Analyzer package is upgraded from version 2.0.256 to 2.0.257. This update is important because it will provide the latest security updates and enhancements, ensuring the most optimised and safe version of the package is used.

  • Update of SonarAnalyzer.CSharp package
    The SonarAnalyzer.CSharp package is upgraded from version 10.15.0.120848 to 10.16.1.129956. Such updates typically include fixes to bugs, improvements to functionality, and added features which constitute better performance and reliability of our services.

@VahidN VahidN merged commit 7171f28 into master Dec 5, 2025
3 of 4 checks passed
@dependabot dependabot bot deleted the dependabot/nuget/src/iTextSharp.LGPLv2.Core/tests-bb4ad63561 branch December 5, 2025 07:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .net code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants