chore(deps): update analyzers

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
PerformanceSharp.Analyzers	5.0.0 → 5.0.3
SecuritySharp.Analyzers	5.0.0 → 5.0.3
SonarAnalyzer.CSharp (source)	10.33.0.1635 → 10.34.0.3385
StyleSharp.Analyzers	5.0.0 → 5.0.3

---

Release Notes

glennawatson/RoslynCommonAnalyzers (PerformanceSharp.Analyzers)

v5.0.3

Compare Source

🗞️ What's Changed

🐛 Fixes

• @​4964591 fix(benchmarks): read the hot-path corpus type through its namespace @​glennawatson

⚡ Performance

• @​9ec7c4b perf(analyzers): cut allocations on three guard and usage rules @​glennawatson

🧹 General Changes

• @​3f222d1 ci(benchmarks): name A/B slice jobs by their slice @​glennawatson
• @​1d883db ci(benchmarks): pass slice counts to the A/B report step @​glennawatson
• @​34444c0 ci(benchmarks): default the A/B candidate to the latest commit and the suite to all @​glennawatson
• @​4d5825d chore: Update dependencies @​glennawatson
• @​8caca3f ci(benchmarks): measure A/B slices with 6 warmup and 15 measured iterations @​glennawatson
• @​b2be3db ci(benchmarks): upload only the report exports from A/B slices @​glennawatson
• @​e3755b6 ci(benchmarks): group A/B slice jobs and size slices from an input @​glennawatson
• @​990d310 ci(benchmarks): split A/B runs into slices that each fit one runner @​glennawatson

📦 Dependencies

• @​8a68c69 chore(deps): bump dependency java-jdk to v25.0.4+101.0.lts (#​81) renovate[bot]

🔗 Full Changelog: glennawatson/RoslynCommonAnalyzers@5.0.2...5.0.3

🙌 Contributions

💖 Thanks to all the contributors: @​glennawatson

🤖 Automated services that contributed: renovate[bot]

v5.0.2

Compare Source

🗞️ What's Changed

🐛 Fixes

• @​4d75510 fix(sst1460): report writable ref returns whose receiver is scoped @​glennawatson

🔗 Full Changelog: glennawatson/RoslynCommonAnalyzers@5.0.1...5.0.2

🙌 Contributions

💖 Thanks to all the contributors: @​glennawatson

v5.0.1

Compare Source

🗞️ What's Changed

♻️ Refactoring

• @​56ab5a2 refactor(stylesharp): remove duplicated analyzer and code-fix scaffolding @​glennawatson

🐛 Fixes

• @​66ca755 fix(sst1424): treat a writable ref to a field as a write @​glennawatson

🧹 General Changes

• @​5e591d7 ci(benchmarks): set up the environment before checking out the compared commits @​glennawatson
• @​697314a ci(benchmarks): run shared actions from the trusted checkout @​glennawatson
• @​bb1f603 ci: run only the GitHub Actions analysis for workflow-only changes @​glennawatson
• @​feedbec build(renovate): title GitHub Actions pin updates after the group @​glennawatson
• @​2d417b8 build(renovate): pin every action by digest and automerge trusted updates @​glennawatson

📦 Dependencies

• @​07bc487 chore(deps): pin dependencies (#​79) renovate[bot]

🔗 Full Changelog: glennawatson/RoslynCommonAnalyzers@5.0.0...5.0.1

🙌 Contributions

💖 Thanks to all the contributors: @​glennawatson

🤖 Automated services that contributed: renovate[bot]

SonarSource/sonar-dotnet (SonarAnalyzer.CSharp)

v10.34.0.3385

Compare Source

Release notes - .NET Analyzers - 10.34

Feature

NET-4133 Implement rule S9023: "Include" calls discarded by query reshaping should be fixed

False Positive

NET-3281 Fix S1192 FP: should not raise on DBContext model configuration
NET-4317 Fix S2325 FP: Do not raise on ConfigureServices in classes decorated with [LambdaStartup]
NET-4419 Fix S2737 FP: Do not report known temporary-context rethrow boundaries
NET-4421 Fix S6607 FP: Indexed LINQ Where after OrderBy
NET-4463 Fix S8747 FP: Do not raise when a defaultValue backfills existing NULLs before narrowing to non-nullable
NET-4506 Fix S6967 FP: Recognize manual DataAnnotations validation
NET-4507 Fix S8969 FP: Don't raise in Razor files

False Negative

NET-1883 Files added as symbolic links are not analyzed
NET-4249 Fix S9022 FN: Include before a terminal aggregate/scalar operator not detected as dead code
NET-4379 Fix S2259 FN: void compound assignment operators not flagged as dereference
NET-4383 Fix S9022 FN: Include on a navigation re-projected directly by a later Select/SelectMany is not detected as redundant
NET-4443 Fix S2068 FN: Scope the value passed to the secret-exclusion classifier to the candidate secret
NET-4496 Fix S8949 FN: self-recursion suppression also hides calls already recursive before the suggested fix
NET-4500 Fix S9022 FN: ThenInclude consumed only through a nested Select's rebound element parameter is not detected as redundant

Bug

NET-4483 Fix S3459 FP: Public writable properties in private nested types

Maintenance

NET-4472 Remove S1264 from the C# Sonar way profile
NET-4474 Remove S2692 from the C# Sonar way profile
NET-4480 Remove S3249 from the C# Sonar way profile
NET-4481 Remove S6670 from the C# Sonar way profile
NET-4482 Remove S3885 from the C# Sonar way profile

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 99.26%. Comparing base (4314015) to head (7f82a21).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #569   +/-   ##
=======================================
  Coverage   99.26%   99.26%           
=======================================
  Files           7        7           
  Lines         272      272           
  Branches       49       49           
=======================================
  Hits          270      270           
  Partials        2        2           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud