Bump Microsoft.CodeAnalysis.FxCopAnalyzers from 2.9.3 to 2.9.4

[dependabot-preview]

Bumps Microsoft.CodeAnalysis.FxCopAnalyzers from 2.9.3 to 2.9.4.

Release notes

Sourced from Microsoft.CodeAnalysis.FxCopAnalyzers's releases.

v2.9.4

Release build of Roslyn-analyzers based on Microsoft.CodeAnalysis 2.9.0 NuGet packages. Contains bug fixes on top of v2.9.3 release and additional rules listed below.

Works with VS 2017.9 or later.

Added

• Performance
  • CA1827: Do not use Count() when Any() can be used -- Enabled by default
• Security
  • CA2326: Do not use TypeNameHandling values other than None
  • CA2327: Do not use insecure JsonSerializerSettings
  • CA2328: Ensure that JsonSerializerSettings are secure
  • CA5387: Do Not Use Weak Key Derivation Function With Insufficient Iteration Count
  • CA5388: Ensure Sufficient Iteration Count When Using Weak Key Derivation Function
  • CA5389: Do Not Add Archive Item's Path To The Target File System Path -- Enabled by default
  • CA5390: Do Not Hard Code Encryption Key -- Enabled by default
• Usage
  • CA2245: Do not assign a property to itself. -- Enabled by default

v2.9.4-beta1.final

Pre-Release build of Roslyn-analyzers based on Microsoft.CodeAnalysis 2.9.0 NuGet packages. Contains following additional analyzers and additional bug fixes on top of v2.9.3 release:

1. Usage rule CA2245 (AvoidPropertySelfAssignment) - On by default
2. Security rule CA5387 (DefinitelyUseWeakKDFInsufficientIterationCount) - Off by default
3. Security rule CA5388 (MaybeUseWeakKDFInsufficientIterationCount) - Off by default
4. Security rule CA5389 (DoNotAddArchiveItemPathToTheTargetFileSystemPath) - Off by default

Works with VS 2017.9 or later.

Commits

• a1a198d Merge pull request #2710 from LLLXXXCCC/DoNotHardCodedEncryptionKey
• 9d09736 Update.
• 13bf3cd Hopefully fixed the bug.
• a1c8b3a Merge pull request #2705 from mavasani/GenerateRulesetsCustomTags
• ecc1fed Merge pull request #2704 from mavasani/Issue2703
• dbc4f18 Merge pull request #2699 from mavasani/AnalysisExclusion
• aa1b293 Merge pull request #2701 from LLLXXXCCC/RemoveDisallowReturningRSA
• fbadcb7 Test case from issue's repro
• 5fe406c Revert "Test case for repro from issue"
• 9acfd50 Generate analyzer rulesets based on custom tags
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot ignore this [patch|minor|major] version will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it). To ignore the version in this PR you can just close it
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Automerge options (never/patch/minor, and dev/runtime dependencies)
• Pull request limits (per update run and/or open at any time)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

Finally, you can contact us by mentioning @dependabot.

[Adawntoremember]

ReactiveGit.Gui.WPF/ReactiveGit.Gui.WPF.csproj