Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github May 5, 2025

Bumps the production-dependencies group with 6 updates:

Package From To
Microsoft.Extensions.Logging.Abstractions 9.0.2 9.0.4
Microsoft.Extensions.Options 9.0.2 9.0.4
SonarAnalyzer.CSharp 10.7.0.110445 10.9.0.115408
Microsoft.Extensions.Hosting 9.0.2 9.0.4
Serilog 4.2.0 4.2.0
Serilog.Sinks.File 6.0.0 7.0.0

Updates Microsoft.Extensions.Logging.Abstractions from 9.0.2 to 9.0.4

Release notes

Sourced from Microsoft.Extensions.Logging.Abstractions's releases.

.NET 9.0.4

Release

What's Changed

Full Changelog: dotnet/runtime@v9.0.3...v9.0.4

... (truncated)

Commits
  • f57e6dc Merge commit 'd9d0ae01ab31513b02033317a9f716f1aeb5abab'
  • d9d0ae0 [release/9.0] fix SBOM issues for runtime (#113463)
  • 0c9b70d Merge commit 'f0d7e1f58406583972ea640029d5a5a341a76731'
  • f0d7e1f Merge pull request #113447 from dotnet/darc-release/9.0-staging-62bd3ef1-917b...
  • 111a76e Update dependencies from https://github.com/dotnet/arcade build 20250311.4
  • 984ab68 Merge pull request #113333 from dotnet/merge/release/9.0-to-release/9.0-staging
  • d7dd049 Merge commit '315f1f5b8300bf800afcb5d9376f8bdf12ebf6fc'
  • 315f1f5 Merge pull request #113389 from vseanreesermsft/internal-merge-9.0-2025-03-11...
  • d21cf87 Merge commit '831d23e56149cd59c40fc00c7feb7c5334bd19c4' into internal-merge-9...
  • 6758abd [release/9.0-staging] Fix HttpHandlerDiagnosticListenerTests.TestW3CHeadersTr...
  • Additional commits viewable in compare view

Updates Microsoft.Extensions.Options from 9.0.2 to 9.0.4

Release notes

Sourced from Microsoft.Extensions.Options's releases.

.NET 9.0.4

Release

What's Changed

Full Changelog: dotnet/runtime@v9.0.3...v9.0.4

... (truncated)

Commits
  • f57e6dc Merge commit 'd9d0ae01ab31513b02033317a9f716f1aeb5abab'
  • d9d0ae0 [release/9.0] fix SBOM issues for runtime (#113463)
  • 0c9b70d Merge commit 'f0d7e1f58406583972ea640029d5a5a341a76731'
  • f0d7e1f Merge pull request #113447 from dotnet/darc-release/9.0-staging-62bd3ef1-917b...
  • 111a76e Update dependencies from https://github.com/dotnet/arcade build 20250311.4
  • 984ab68 Merge pull request #113333 from dotnet/merge/release/9.0-to-release/9.0-staging
  • d7dd049 Merge commit '315f1f5b8300bf800afcb5d9376f8bdf12ebf6fc'
  • 315f1f5 Merge pull request #113389 from vseanreesermsft/internal-merge-9.0-2025-03-11...
  • d21cf87 Merge commit '831d23e56149cd59c40fc00c7feb7c5334bd19c4' into internal-merge-9...
  • 6758abd [release/9.0-staging] Fix HttpHandlerDiagnosticListenerTests.TestW3CHeadersTr...
  • Additional commits viewable in compare view

Updates SonarAnalyzer.CSharp from 10.7.0.110445 to 10.9.0.115408

Release notes

Sourced from SonarAnalyzer.CSharp's releases.

10.9

Hello everyone!  This is a mega-hardening release! Enjoy 😄

False Positive

  • NET-1309 - Fix S2583 FP: Support overrides in IsImplementingInterfaceMember
  • NET-1308 - Fix S2583 FP: Add support for AdressOf operator
  • NET-1302 - Fix S4158 FP: Don't raise on GetEnumerator() calls
  • NET-1295 - Fix S3236 FP: Exclude Debug.Assert
  • NET-1290 - Fix S4158 FP: Support RouteValueDictionary in AspNetCore
  • NET-1289 - Fix S4158 FP: Adding methods with well defined sematics
  • NET-1288 - Fix S4158 FP: Recognize Add methods with bool return type
  • NET-1287 - Fix S4158 FP: Don't raise on SetValue
  • NET-1280 - Fix S2342 FP: Flaky reports
  • NET-1278 - Fix S3440 FP: Variable assignment and switch expression
  • NET-1246 - Fix S1481 FP: Don't report on discard like looking variables
  • NET-1242 - Fix S2583/S4158 FP: Support for collections that are initialized with object
  • NET-1241 - Fix S2589 FP: Don't track concurrent collections
  • NET-1230 - Fix S4158 FP: Immutable collections
  • NET-1223 - Fix S3267 FP: ref struct types cannot leave the stack
  • NET-1214 - Fix S2259 FP: Foreach loop over empty collection
  • NET-1212 - Fix S2259 FP: Learn bool from NotNull constraint and Null value
  • NET-1208 - Fix S2589 FP: Rule ignores case guards
  • NET-1207 - Fix S3966 FP: disposing element of indexable after declaration pattern
  • NET-1203 - Fix S3966 FP: Enumerating a collection of tuples
  • NET-1202 - Fix S2259 FP: Foreach nested in try, nested in loop
  • NET-1188 - Improve S4158 - Empty Collections should not be Enumerated
  • NET-1088 - Fix S3240 FP: Ignore when a conditional block contains a ternary
  • NET-800 - Fix S2259 FP: FlowCaptures in loops and try-regions

False Negative

  • NET-1299 - Fix S2053 FN: Support Copy methods
  • NET-1257 - Fix S4790 FN: New HashData overloads not recognized
  • NET-1194 - Fix S4158 FN: Collection Expressions (C# 12)
  • NET-357 - Fix S2068 FN: does not consider launchSettings.json files
  • NET-210 - Fix S4158 FN: AddRange with empty collection

Bug

  • NET-1267 - Fix S2068 bug: Issue location is out of range in web.config for elements or attributes with an xml namespace
  • NET-1184 - Roslyn rule import should map the issue severity to the Software Quality impact in SonarQube Server

Improvement

  • NET-1217 - Improve S3996: Set location to the property instead of record

... (truncated)

Commits
  • 9500888 NET-1361 Fix S3444 AD0001: Secondary location in a bigger file
  • abce8b8 NET-1244 Write UTs for uncovered extension methods in IOperationExtension
  • ea56edc Revert "NET-1254 Fix S3878 FN: When params are passed as array through an att...
  • a759f41 NET-1323 Fix S3267 AD0001: Support empty return and lambdas
  • 99a7f78 NET-1245 Update RSPEC before 10.9 release
  • 54ea029 NET-1257 Fix S4790 FN: New HashData overloads not recognized
  • f47c985 NET-1320 S1699: Do not raise on constructor initializers
  • 59bc156 NET-1222 Fix S3267 FP: Conversions to nullable value type is not expressible ...
  • ed1d110 NET-1253 Fix S1699 FN: Adds support for complex inheritance
  • 6101985 NET-1254 Fix S3878 FN: When params are passed as array throught an attribute
  • Additional commits viewable in compare view

Updates Microsoft.Extensions.Hosting from 9.0.2 to 9.0.4

Release notes

Sourced from Microsoft.Extensions.Hosting's releases.

.NET 9.0.4

Release

What's Changed

Full Changelog: dotnet/runtime@v9.0.3...v9.0.4

... (truncated)

Commits
  • f57e6dc Merge commit 'd9d0ae01ab31513b02033317a9f716f1aeb5abab'
  • d9d0ae0 [release/9.0] fix SBOM issues for runtime (#113463)
  • 0c9b70d Merge commit 'f0d7e1f58406583972ea640029d5a5a341a76731'
  • f0d7e1f Merge pull request #113447 from dotnet/darc-release/9.0-staging-62bd3ef1-917b...
  • 111a76e Update dependencies from https://github.com/dotnet/arcade build 20250311.4
  • 984ab68 Merge pull request #113333 from dotnet/merge/release/9.0-to-release/9.0-staging
  • d7dd049 Merge commit '315f1f5b8300bf800afcb5d9376f8bdf12ebf6fc'
  • 315f1f5 Merge pull request #113389 from vseanreesermsft/internal-merge-9.0-2025-03-11...
  • d21cf87 Merge commit '831d23e56149cd59c40fc00c7feb7c5334bd19c4' into internal-merge-9...
  • 6758abd [release/9.0-staging] Fix HttpHandlerDiagnosticListenerTests.TestW3CHeadersTr...
  • Additional commits viewable in compare view

Updates Microsoft.Extensions.Logging.Abstractions from 9.0.2 to 9.0.4

Release notes

Sourced from Microsoft.Extensions.Logging.Abstractions's releases.

.NET 9.0.4

Release

What's Changed

Full Changelog: dotnet/runtime@v9.0.3...v9.0.4

... (truncated)

Commits
  • f57e6dc Merge commit 'd9d0ae01ab31513b02033317a9f716f1aeb5abab'
  • d9d0ae0 [release/9.0] fix SBOM issues for runtime (#113463)
  • 0c9b70d Merge commit 'f0d7e1f58406583972ea640029d5a5a341a76731'
  • f0d7e1f Merge pull request #113447 from dotnet/darc-release/9.0-staging-62bd3ef1-917b...
  • 111a76e Update dependencies from https://github.com/dotnet/arcade build 20250311.4
  • 984ab68 Merge pull request #113333 from dotnet/merge/release/9.0-to-release/9.0-staging
  • d7dd049 Merge commit '315f1f5b8300bf800afcb5d9376f8bdf12ebf6fc'
  • 315f1f5 Merge pull request #113389 from vseanreesermsft/internal-merge-9.0-2025-03-11...
  • d21cf87 Merge commit '831d23e56149cd59c40fc00c7feb7c5334bd19c4' into internal-merge-9...
  • 6758abd [release/9.0-staging] Fix HttpHandlerDiagnosticListenerTests.TestW3CHeadersTr...
  • Additional commits viewable in compare view

Updates Microsoft.Extensions.Options from 9.0.2 to 9.0.4

Release notes

Sourced from Microsoft.Extensions.Options's releases.

.NET 9.0.4

Release

What's Changed

@dependabot dependabot bot added dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code labels May 5, 2025
Bumps the production-dependencies group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [Microsoft.Extensions.Logging.Abstractions](https://github.com/dotnet/runtime) | `9.0.2` | `9.0.4` |
| [Microsoft.Extensions.Options](https://github.com/dotnet/runtime) | `9.0.2` | `9.0.4` |
| [SonarAnalyzer.CSharp](https://github.com/SonarSource/sonar-dotnet) | `10.7.0.110445` | `10.9.0.115408` |
| [Microsoft.Extensions.Hosting](https://github.com/dotnet/runtime) | `9.0.2` | `9.0.4` |
| [Serilog](https://github.com/serilog/serilog) | `4.2.0` | `4.2.0` |
| [Serilog.Sinks.File](https://github.com/serilog/serilog-sinks-file) | `6.0.0` | `7.0.0` |


Updates `Microsoft.Extensions.Logging.Abstractions` from 9.0.2 to 9.0.4
- [Release notes](https://github.com/dotnet/runtime/releases)
- [Commits](dotnet/runtime@v9.0.2...v9.0.4)

Updates `Microsoft.Extensions.Options` from 9.0.2 to 9.0.4
- [Release notes](https://github.com/dotnet/runtime/releases)
- [Commits](dotnet/runtime@v9.0.2...v9.0.4)

Updates `SonarAnalyzer.CSharp` from 10.7.0.110445 to 10.9.0.115408
- [Release notes](https://github.com/SonarSource/sonar-dotnet/releases)
- [Commits](SonarSource/sonar-dotnet@10.7.0.110445...10.9.0.115408)

Updates `Microsoft.Extensions.Hosting` from 9.0.2 to 9.0.4
- [Release notes](https://github.com/dotnet/runtime/releases)
- [Commits](dotnet/runtime@v9.0.2...v9.0.4)

Updates `Microsoft.Extensions.Logging.Abstractions` from 9.0.2 to 9.0.4
- [Release notes](https://github.com/dotnet/runtime/releases)
- [Commits](dotnet/runtime@v9.0.2...v9.0.4)

Updates `Microsoft.Extensions.Options` from 9.0.2 to 9.0.4
- [Release notes](https://github.com/dotnet/runtime/releases)
- [Commits](dotnet/runtime@v9.0.2...v9.0.4)

Updates `Serilog` from 4.2.0 to 4.2.0
- [Release notes](https://github.com/serilog/serilog/releases)
- [Commits](serilog/serilog@v4.2.0...v4.2.0)

Updates `Serilog.Sinks.File` from 6.0.0 to 7.0.0
- [Release notes](https://github.com/serilog/serilog-sinks-file/releases)
- [Changelog](https://github.com/serilog/serilog-sinks-file/blob/dev/CHANGES.md)
- [Commits](serilog/serilog-sinks-file@v6.0.0...v7.0.0)

---
updated-dependencies:
- dependency-name: Microsoft.Extensions.Logging.Abstractions
  dependency-version: 9.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: Microsoft.Extensions.Options
  dependency-version: 9.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: SonarAnalyzer.CSharp
  dependency-version: 10.9.0.115408
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: Microsoft.Extensions.Hosting
  dependency-version: 9.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: Microsoft.Extensions.Logging.Abstractions
  dependency-version: 9.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: Microsoft.Extensions.Options
  dependency-version: 9.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: Serilog
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: Serilog.Sinks.File
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot-nuget-production-dependencies-18bc765c95 branch from 1355c26 to 011084d Compare May 5, 2025 14:29
@elzik elzik merged commit 11c2b1a into main May 5, 2025
12 checks passed
@elzik elzik deleted the dependabot-nuget-production-dependencies-18bc765c95 branch May 5, 2025 17:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants