- Query metadata tags have been systematically updated for many C# queries. Primary categorization as either
reliabilityormaintainability, and relevant sub-category tags such asreadability,useless-code,complexity,performance,correctness,error-handling, andconcurrency. Aligns with the established Query file metadata and alert message style guide. - Adjusts the
@security-severityfrom 9.3 to 7.3 forcs/uncontrolled-format-stringto alignCWE-134severity for memory safe languages to better reflect their impact.
- The queries
cs/dereferenced-value-is-always-nullandcs/dereferenced-value-may-be-nullhave been improved to reduce false positives. The queries no longer assume that expressions are dereferenced when passed as the receiver (thisparameter) to extension methods where that parameter is a nullable type.