Update dependency SonarAnalyzer.CSharp to 8.56.0.67649

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
SonarAnalyzer.CSharp (source)	8.50.0.58025 → 8.56.0.67649

---

Release Notes

SonarSource/sonar-dotnet (SonarAnalyzer.CSharp)

v8.56.0.67649: 8.56

Compare Source

Release 8.56 is here and it brings a whole lot of improvements. We implemented S3900 and S3655 for VB.NET and at the same time, we also got improvements to the C# versions of S3900, S3655, S2222, and S2259. Special kudos to @​Corniel who contributed new rule S5856 and several other enhancements.

New Rules

• 6797 - [VB.NET] New Rule S3900 for VB.NET: Arguments of public methods should be validated against Nothing
• 6795 - [VB.NET] New Rule S3655 for VB.NET: Empty nullable value should not be accessed
• 6691 - [C#, VB.NET] New Rule S5856: Regex literals should be valid by @​Corniel

Improvements (S3900, S3655, S2222, and S2259)

• 6794 - [C#] Improve S3655: Support C# 9 and C# 10 syntax
• 6793 - [C#] Improve S3900: Support C# 9 and C# 10 syntax
• 6997 - [C#] Fix S3900: FN and FP
• 7060 - [C#] Fix S3900 FP: Don't raise if parameter is captured
• 2775 - [C#] Fix S3900 FP: is is not considered as null-check
• 2670 - [C#] Fix S3900 FP: with string.IsNullOrEmpty
• 7004 - [C#] Fix S3900: Change parameter dereference check to top-down
• 6682 - [C#] Fix S3655 FP: HasValue checked with Pattern matching
• 4250 - [C#] Fix S2259 FP: Lifted operator results in null value in value type comparison
• 6994 - [C#, VB.NET] Fix S2222: Branch on createdNew parameter on Mutex constructor
• 6840 - [C#, VB.NET] Fix S2259 FP/FN: Do not raise on Nullable members
• 6241 - [C#, VB.NET] Fix S2259 FP: is null check on generic type
• 6930 - [C#, VB.NET] Fix S2259 FN: Auto-Properties don't learn ObjectConstraint
• 6898 - [C#, VB.NET] Fix S2259 FN: Raise on fields and events
• 7048 - [VB.NET] Fix S2259 FP: ValidatedNotNullAttribute in extension method
• 7047 - [VB.NET] Fix S3900 FP: Recognize VB extensions
• 6991 - [VB.NET] Fix S3655 FN: VB implicit conversions

Other improvements

• 6899 - Update RSPEC
• 6910 - Fix S2094 FP: Allow to have empty classes, used as generic parameter
• 6878 - [C#] Fix S1168 FP: Does not respect nullable annotations by @​Corniel
• 6890 - [C#, VB.NET] Fix S1123 FN: The explanation should not be null or whitespace by @​Corniel

@​corniel contributions

• 6691 - [C#, VB.NET] New Rule S5856: Regex literals should be valid
• 6890 - [C#, VB.NET] Fix S1123 FN: The explanation should not be null or whitespace
• 6825 - [C#] Expand the ShimLayer with ITypeSymbol.NullableAnnotation
• 6878 - [C#] Fix S1168 FP: Does not respect nullable annotations

v8.55.0.65544: 8.55

Compare Source

This version contains the prerequisite to support sonar.exclusions, sonar.inclusions, sonar.global.exclusions, sonar.test.exclusions, sonar.test.inclusions and sonar.global.test.exclusions parameters when the analysis is run inside SonarLint for Visual Studio. Stay tuned, the second and final part of the feature will be implemented soon by the SonarLint team.

In the meantime, if you are wondering what these parameters are, you can find more information about them in our documentation.

• 6877 - Support exclusion and inclusion parameters when run by SonarLint

New Rules

• 6885 - [C#, VB.NET] ExcludeFromCodeCoverage attributes should include a justification
  Special thanks to @​Corniel for implementing this new rule!

Improvements

• 6798 - Update RSPEC before 8.55 release

False Positive

• 6630 - [C#] Fix S3415 FP/FN: Support named arguments
• 6525 - [C#] Fix S2699 FP: AssertionMethodAttribute is ignored when assertion method is inherited
• 6438 - [C#] Fix S1905 FP: Nullability context and array of anonymous types

v8.54.0.64047: 8.54

In this release we added six code structure and best practice rules.

Thank you @​teo-tsirpanis, for contributing #​6580

New Rules

• 6706 - [C#] New Rule S3398: "private" methods called only by inner classes should be moved to those classes
• 6704 - [C#] New Rule S2094: Classes should not be empty
• 6703 - [C#, VB.NET] New Rule S4545: "DebuggerDisplayAttribute" strings should reference existing members
• 6701 - [C#] New Rule S2445: Blocks should be synchronized on read-only fields
• 6662 - [C#] New rule S2970: Assertions should be complete
• 6854 - [C#] New rule S6507: Blocks should not be synchronized on local variables

Improvements

• 6763 - Update RSPEC before 8.54 release
• 6761 - Improve Rule S2223: cleanup and performance
• 6678 - Report deprecation analysis warning for MsBuild 14/15

Performance

• 6785 - Performance: Token Type Utility Analyzer: Avoid allocations

Bug Fixes

• 6766 - [C#] Old SE: Handle unsupported syntax gracefully

False Positive

• 6229 - [C#] Fix S2952 FN/FP: FNs on conditional invocation and FPs on additional disposal

False Negative

• 6580 - [C#] FN S2857: Add support for Microsoft SqlClient Data Provider for SQL Server

v8.53.0.62665: 8.53

Compare Source

New Rules

• 6658 - [C#] New rule S2198: Silly mathematical comparisons should not be made
• 6705 - [C#, VB.NET] New rule S2166: Classes named like "Exception" should extend "Exception" or a subclass
• 6663 - [C#, VB.NET] New rule S4663: Comments should not be empty
• 6659 - [C#, VB.NET] New rule S3063: "StringBuilder" data should be used
• 6657 - [C#, VB.NET] New rule S3878: Arrays should not be created for params parameters
• 6656 - [C#, VB.NET] New rule S1133: Deprecated code should be removed

Improvements

• 6676 - Update RSPEC before 8.53 release
• 6634 - Enable Incremental Analysis ITs
• 6521 - [C#] Improve S1244: Add message to use "IsX" instead of "== double.X"
• 6331 - [C#] Improve S3927: Interfaces should be excluded
• 6321 - [C#] Improve S1144: Highlight only the identifier name

False Positive

• 6653 - [C#] Fix S4487 FP: ??= operator reads value
• 6616 - [C#] Fix S2219 FP: "Use the is operator" reports "unfixable" code
• 5430 - [C#] Fix S3220 FP: Rule does not take into account access modifier of the members

v8.52.0.60960: 8.52

Compare Source

@​Corniel: Thank you for implementing S3898 for VB.NET!

New Rules

• 6667 - [VB.NET] Implement S3898 -ValueTypes should implement IEquatable - for VB.NET

Improvements

• 6638 - Rename S3866 to DoNotUseIIf
• 6636 - [C#] Update S4018: Improve rule message
• 6605 - Bump sonar-plugin-api from 9.13.0.360 to 9.14.0.375
• 6602 - Add clean code as a tag on our nuget packages
• 6573 - Fix ProjectOutFolderPath processing
• 6571 - Update RSPEC before 8.52 release
• 6532 - Refactor SonarAnalysisContext
• 6511 - Remove useless package references
• 6488 - [C#] Merge rule S4214 onto S4200
• 6132 - [C#] Remove S4457 from SonarWay

Bug Fixes

• 6612 - [C#] Fix S3353: Add support for different function types
• 6598 - Incremental PR analysis fails for SQ < 9.4

False Positive

• 6449 - [C#] Fix S4457 FP: When argument check is after async code
• 5879 - [C#] Fix S2930 FP: Recognize IAsyncDisposable

False Negative

• 6646 - Fix S2190 FN: Recursion inside init accessor of property

v8.51.0.59060: 8.51

Compare Source

Hello everyone,

We are happy to announce that in this release we implemented Incremental PR analysis for C# and Vb.Net, a feature that can significantly reduce the analysis time when analyzing PRs.

Additionally, we fixed false positives and negatives introduced by the new C# 11 syntax and introduced a new rule #​5693

Special thanks to our contributors @​Corniel for #​5693 and @​Smenus for #​6497.

New features

Incremental PR analysis (#​6514, #​6512, #​6487, #​6486, #​6485, #​6484, #​6483)

New rules

• 5693 - [C#, VB.NET] New rule S6444: RegEx evaluation should have a time out specified

Improvements

• 6477 - Update RSPEC before 8.51 release and deprecate S4214

False Positive

• 6497 - [C#] Fix S2699 FP: Support derivations of ExpectedExceptionBaseAttribute for MsTest
• 6476 - [C#, VB.NET] Fix FNs/FPs: Add support for LibraryImportAttribute
• 6429 - [C#] Fix S1067 FP: Conditionals in pattern should not be considered as a unit for the whole pattern

False Negative

• 6517 - [C#] Fix S2674 FN: Add support for ConfigureAwait
• 6481 - [C#] Fix S2674 FN: Add support for Stream.ReadAtLeast
• 6441 - Fix S2302 FN: Issue is not raised when the name of one of the method parameters is a raw string literal
• 6423 - [C#] Fix S1244 FN: Half, NFloat, and IFloatingPointIeee754 are not supported
• 6399 - Fix S2201 FN: Support native ints
• 6394 - Fix S2068 FN: Support utf-8 string literals
• 6393 - Fix S1168 FN: Support mathematical operators in generic types
• 6387 - Fix S3267 FN: Support list pattern
• 6386 - Fix S3444 FN: Support static methods in interfaces
• 6164 - Fix S4426 FN: On .Net 7 when using ECDsaOpenSsl

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[sonarqubecloud]

Kudos, SonarCloud Quality Gate passed!   

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

[sonarqubecloud]

Kudos, SonarCloud Quality Gate passed!   

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

[sonarqubecloud]

Kudos, SonarCloud Quality Gate passed!   

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information