From d823fb3f0367bc462195d8fefec3a966bece008f Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 27 Jul 2026 18:17:42 +0000 Subject: [PATCH 1/2] Bump the nuget-dependencies group with 2 updates Bumps demaconsulting.pandoctool from 3.10.0 to 3.10.1 Bumps SonarAnalyzer.CSharp from 10.29.0.143774 to 10.30.0.144632 --- updated-dependencies: - dependency-name: demaconsulting.pandoctool dependency-version: 3.10.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-dependencies - dependency-name: SonarAnalyzer.CSharp dependency-version: 10.30.0.144632 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-dependencies - dependency-name: SonarAnalyzer.CSharp dependency-version: 10.30.0.144632 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-dependencies ... Signed-off-by: dependabot[bot] --- .config/dotnet-tools.json | 2 +- src/DemaConsulting.SpdxModel/DemaConsulting.SpdxModel.csproj | 2 +- .../DemaConsulting.SpdxModel.Tests.csproj | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.config/dotnet-tools.json b/.config/dotnet-tools.json index 5a7f93f..e886ad0 100644 --- a/.config/dotnet-tools.json +++ b/.config/dotnet-tools.json @@ -10,7 +10,7 @@ "rollForward": false }, "demaconsulting.pandoctool": { - "version": "3.10.0", + "version": "3.10.1", "commands": [ "pandoc" ], diff --git a/src/DemaConsulting.SpdxModel/DemaConsulting.SpdxModel.csproj b/src/DemaConsulting.SpdxModel/DemaConsulting.SpdxModel.csproj index 3c6ee12..069e2ea 100644 --- a/src/DemaConsulting.SpdxModel/DemaConsulting.SpdxModel.csproj +++ b/src/DemaConsulting.SpdxModel/DemaConsulting.SpdxModel.csproj @@ -65,7 +65,7 @@ all runtime; build; native; contentfiles; analyzers; buildtransitive - + all runtime; build; native; contentfiles; analyzers; buildtransitive diff --git a/test/DemaConsulting.SpdxModel.Tests/DemaConsulting.SpdxModel.Tests.csproj b/test/DemaConsulting.SpdxModel.Tests/DemaConsulting.SpdxModel.Tests.csproj index 8097209..6daf333 100644 --- a/test/DemaConsulting.SpdxModel.Tests/DemaConsulting.SpdxModel.Tests.csproj +++ b/test/DemaConsulting.SpdxModel.Tests/DemaConsulting.SpdxModel.Tests.csproj @@ -49,7 +49,7 @@ all runtime; build; native; contentfiles; analyzers; buildtransitive - + all runtime; build; native; contentfiles; analyzers; buildtransitive From 222ed4f646f00d6312110960fa5a190f41d17e70 Mon Sep 17 00:00:00 2001 From: Malcolm Nixon Date: Mon, 27 Jul 2026 15:51:02 -0400 Subject: [PATCH 2/2] Remove unnecessary null-forgiving operator in SpdxPackageTests Static analysis (S8969) surfaced a redundant null-forgiving operator on p1.VerificationCode, which the compiler already knows is non-null from its object initializer. Removed it to clear the dotnet format lint phase. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --- test/DemaConsulting.SpdxModel.Tests/SpdxPackageTests.cs | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/test/DemaConsulting.SpdxModel.Tests/SpdxPackageTests.cs b/test/DemaConsulting.SpdxModel.Tests/SpdxPackageTests.cs index 81d3fc2..3cc4207 100644 --- a/test/DemaConsulting.SpdxModel.Tests/SpdxPackageTests.cs +++ b/test/DemaConsulting.SpdxModel.Tests/SpdxPackageTests.cs @@ -148,7 +148,7 @@ public void SpdxPackage_DeepCopy_CreatesEqualButDistinctInstance() Assert.Equal(p1.AttributionText, p2.AttributionText); SpdxTestHelpers.AssertEquivalent(p1.Annotations, p2.Annotations, SpdxAnnotation.Same); Assert.NotNull(p2.VerificationCode); - Assert.Equal(p1.VerificationCode!.Value, p2.VerificationCode.Value); + Assert.Equal(p1.VerificationCode.Value, p2.VerificationCode.Value); // Assert: Verify deep-copy has distinct instances Assert.False(ReferenceEquals(p1, p2));