v1.11.1

1.11.1 (2026-10-15)

Documentation

• correct readme samples, claims and links (#109) (888b4dd)
• measure analyzer build-time overhead and add the harness (#114) (eefd079), closes #108

Tests

• pin patched system.security.cryptography.pkcs for cve-2026-84008 (#111) (d2e4abb)

v1.11.0

1.11.0 (2026-10-10)

Features

• follow spans through calls and in arguments in ZA0110 (8161f85)
• report overloaded params methods in ZA0110 when no overload can conflict (8161f85)

Bug Fixes

• check extension overloads in other static classes before ZA0110 reports (8161f85)
• import System for ZA0110's fix on generic methods (8161f85)
• point ZA1710's Mediator hint at the generated AddMediator (#105) (df408da)
• stop ZA0110 treating a span passed to a ref struct instance method as used up (8161f85)

v1.10.0

1.10.0 (2026-10-10)

Features

• report rented buffers passed to async Stream calls in ZA0303 (459496b)
• report using statements over a dynamic resource in ZA1709 (459496b)

Bug Fixes

• stop ZA0303 trusting methods a Stream subclass adds (459496b)
• trust Array and Buffer methods that take System.Array in ZA0303 (459496b)

v1.9.0

1.9.0 (2026-10-09)

Features

• add ZA1710 to report assembly-scanning registration (f77217b)

v1.8.0

1.8.0 (2026-10-09)

Features

• add ZA1706 to report libraries that never set IsAotCompatible (77249c7)
• add ZA1707 to suggest the configuration-binding source generator (77249c7)
• add ZA1708 to suggest OptionsValidator over ValidateDataAnnotations (77249c7)
• add ZA1709 to report dynamic dispatch (77249c7)

v1.7.0

1.7.0 (2026-10-09)

Features

• add ZA1402 to suggest state-passing overloads over capturing lambdas (4c7a135)
• add ZA1503 to report struct hash keys without IEquatable (4c7a135)

v1.6.0

1.6.0 (2026-10-09)

Features

• add ZA0110 to suggest declaring params as ReadOnlySpan (bd67b56)
• add ZA0111 to enumerate ConcurrentDictionary instead of Keys or Values snapshots (bd67b56)
• add ZA0210 to replace constant UTF-8 encoding with u8 literals (bd67b56)
• add ZA0211 to suggest the span-based Split on .NET 9 (bd67b56)
• add ZA0212 to prefer TryParse over catching Parse exceptions (bd67b56)
• add ZA0303 to report rented arrays never returned to the pool (bd67b56)
• add ZA0304 to turn constant lookup tables into ReadOnlySpan properties (bd67b56)

Bug Fixes

• stop the ZA0109 code fix adding a redundant using System next to a global using (bd67b56)

v1.5.6

1.5.6 (2026-10-09)

Documentation

• design batch 3 zero-alloc and NativeAOT analyzer rules (#87) (6a791c5)

v1.5.5

1.5.5 (2026-10-09)

Bug Fixes

• stop ZA0602 reporting params calls that do not allocate (#71) (b69fcbb), closes #70

v1.5.4

1.5.4 (2026-09-25)

Bug Fixes

• mark released analyzer rules as shipped and automate the move on release (#66) (89adc3b)