Bump SonarAnalyzer.CSharp from 10.4.0.108396 to 10.5.0.109200 #419
Conversation
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps [SonarAnalyzer.CSharp](https://github.com/SonarSource/sonar-dotnet) from 10.4.0.108396 to 10.5.0.109200. - [Release notes](https://github.com/SonarSource/sonar-dotnet/releases) - [Commits](https://github.com/SonarSource/sonar-dotnet/commits) --- updated-dependencies: - dependency-name: SonarAnalyzer.CSharp dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
.NET
|
By default, I don't review pull requests opened by bots. If you would like me to review this pull request anyway, you can request a review via the |
Reviewer's Guide by SourceryThis pull request updates the SonarAnalyzer.CSharp NuGet package from version 10.4.0.108396 to 10.5.0.109200. No diagrams generated as the changes look simple and do not need a visual representation. File-Level Changes
Tips and commandsInteracting with Sourcery
Customizing Your ExperienceAccess your dashboard to:
Getting Help
|
![sourcery-ai[bot]](https://avatars.githubusercontent.com/in/48477?s=60&v=4){kind=small}
github-actions
bot
added
the
size/XS
|
Important Review skippedBot user detected. To trigger a single review, invoke the You can disable this status message by setting the Note Free review on us!CodeRabbit is offering free reviews until Wed Jan 15 2025 to showcase some of the refinements we've made. 🪧 TipsChatThere are 3 ways to chat with CodeRabbit:
Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments. CodeRabbit Commands (Invoked using PR comments)
Other keywords and placeholders
CodeRabbit Configuration File (
|
gstraccini
bot
added
the
☑️ auto-merge
![gstraccini[bot]](https://avatars.githubusercontent.com/in/480132?s=60&v=4){kind=small}
|
@dependabot squash and merge |
Coverage summary from CodacySee diff coverage on Codacy
Coverage variation details
Coverage variation is the difference between the coverage for the head and common ancestor commits of the pull request branch: Diff coverage details
Diff coverage is the percentage of lines that are covered by tests out of the coverable lines that the pull request added or modified: See your quality gate settings Change summary preferencesCodacy stopped sending the deprecated coverage status on June 5th, 2024. Learn more |
|
❌ Build VTEX-SDK-dotnet 2.4.362 failed (commit 94e5b62868 by @gstraccini[bot]) |
|
Infisical secrets check: ✅ No secrets leaked! 💻 Scan logs3:11AM INF scanning for exposed secrets...
3:11AM INF 360 commits scanned.
3:11AM INF scan completed in 294ms
3:11AM INF no leaks found
|
|
|
✅ Build VTEX-SDK-dotnet 3.0.11 completed (commit 945411a239 by @gstraccini[bot]) |
guibranco
deleted the
dependabot/nuget/SonarAnalyzer.CSharp-10.5.0.109200
branch
Codecov ReportAll modified and coverable lines are covered by tests ✅
Additional details and impacted files@@ Coverage Diff @@
## main #419 +/- ##
=====================================
Coverage 0.22% 0.22%
=====================================
Files 117 117
Lines 1777 1777
Branches 75 75
=====================================
Hits 4 4
+ Misses 1773 1771 -2
- Partials 0 2 +2 ☔ View full report in Codecov by Sentry. |
Bumps SonarAnalyzer.CSharp from 10.4.0.108396 to 10.5.0.109200.
Commits
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot will merge this PR once CI passes on it, as requested by @guibranco.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)Summary by Sourcery
Build:
Description by Korbit AI
What change is being made?
Bump SonarAnalyzer.CSharp package version from 10.4.0.108396 to 10.5.0.109200 in the
Directory.Build.propsfile.Why are these changes being made?
This update ensures we are using the latest version of SonarAnalyzer.CSharp, which may include important bug fixes, security updates, or performance improvements. Keeping dependencies up to date is a best practice to prevent potential vulnerabilities and to take advantage of the latest features.