Skip to content

Bump slopwatch.cmd from 0.3.4 to 0.4.0#20

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/nuget/dot-config/slopwatch.cmd-0.4.0
Open

Bump slopwatch.cmd from 0.3.4 to 0.4.0#20
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/nuget/dot-config/slopwatch.cmd-0.4.0

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 3, 2026

Updated slopwatch.cmd from 0.3.4 to 0.4.0.

Release notes

Sourced from slopwatch.cmd's releases.

0.4.0

0.4.0 March 2nd 2026

Bug Fixes:

  • --config flag now properly loads custom suppression configurations during analysis - the option was previously documented but not wired into the analysis pipeline (PR #​71)
  • Hook mode now falls back to full file analysis when git status is unavailable (e.g., outside a git repository), instead of silently returning no results (PR #​71)

Documentation:

  • Updated README examples to reflect correct .slopwatch/config.json schema, SW006 severity levels, and local tool installation instructions (PR #​71)

0.3.4 February 18th 2026

New Features:

  • .razor files (Blazor) are now scanned by default - SW001-SW006 detection rules apply to Razor components without requiring explicit -f flags (PR #​64)

0.3.3 January 20th 2026

Bug Fixes:

  • Fixed slopwatch init command to scan .props and .targets files, matching the patterns used by analyze - prevents incomplete baselines when projects have SW005 violations in MSBuild property files (PR #​53, fixes #​52)

Improvements:

  • JSON output now uses relaxed escaping for human-readable characters - apostrophes appear as ' instead of \u0027 in baseline.json and JSON output (PR #​54, fixes #​50)
  • Centralized default file patterns into DefaultPatterns class to prevent drift between commands (PR #​56)

0.3.2 January 17th 2026

Compatibility:

  • SW006 now treats CPM package version overrides (Version and VersionOverride) as errors, preventing inline overrides when CPM is enabled (PR #​48)

0.3.1 January 14th 2026

Bug Fixes:

  • Fixed slopwatch --version and --help returning exit code 2 instead of 0, which was breaking CI/CD pipelines (PR #​44, fixes #​43)
  • SW003 no longer flags catch blocks that log exceptions - logging IS handling for fire-and-forget operations, background jobs, and graceful degradation scenarios (PR #​45, fixes #​42)

Dependency Updates:

  • Bump actions/setup-dotnet from 5.0.1 to 5.1.0 (PR #​39)
  • Bump xunit.runner.visualstudio from 3.0.2 to 3.1.5 (PR #​37)

0.3.0 January 12th 2026

Compatibility:

  • Downgraded to .NET 8 for broader compatibility across environments (PR #​34)

Bug Fixes:

  • MultiEdit tool now properly analyzed in Claude Code hook mode (PR #​32)

Documentation:

  • Improved hook error messages for clarity when working with programming assistants (PR #​35)

0.2.1 January 11th 2026

... (truncated)

Commits viewable in compare view.

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---
updated-dependencies:
- dependency-name: slopwatch.cmd
  dependency-version: 0.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Mar 3, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants