chore(deps): update dependency coverlet.collector to v6

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
coverlet.collector	3.2.0 -> 6.0.4

---

Release Notes

coverlet-coverage/coverlet (coverlet.collector)

v6.0.4

Fixed

• Fix empty coverage report when using include and exclude filters #​1726

Diff between 6.0.3 and 6.0.4

v6.0.3

Fixed

• Fix RuntimeConfigurationReader to support self-contained builds #​1705 by https://github.com/pfeigl
• Fix inconsistent filenames with UseSourceLink after .NET 8 #​1679
• Fix hanging tests #​989
• Fix coverlet instrumentation becomes slow after installing dotnet sdk 8.0.200 #​1620
• Fix upgrading v6.0.1 to v6.0.2 increases instrumentation time #​1649
• Fix Unable to instrument module - NET 8 #​1631
• Fix slow modules filtering process #​1646 by https://github.com/BlackGad
• Fix incorrect coverage await using in generic method #​1490

Improvements

• Cache the regex used in InstrumentationHelper #​1693
• Enable dotnetTool integration tests for linux #​660

Diff between 6.0.2 and 6.0.3

v6.0.2

Fixed

• Threshold-stat triggers error #​1634
• Fixed coverlet collector 6.0.1 requires dotnet sdk 8 #​1625
• Type initializer errors after updating from 6.0.0 to 6.0.1 #​1629
• Exception when multiple exclude-by-attribute filters specified #​1624

Improvements

• More concise options to specify multiple parameters in coverlet.console #​1624

Diff between 6.0.1 and 6.0.2

v6.0.1

Fixed

• Uncovered lines in .NET 8 for inheriting records #​1555
• Fix record constructors not covered when SkipAutoProps is true #​1561
• Fix .NET 7 Method Group branch coverage issue #​1447
• Fix ExcludeFromCodeCoverage does not exclude method in a partial class #​1548
• Fix ExcludeFromCodeCoverage does not exclude F# task #​1547
• Fix issues where ExcludeFromCodeCoverage ignored #​1431
• Fix issues with ExcludeFromCodeCoverage attribute #​1484
• Fix broken links in documentation #​1514
• Fix problem with coverage for .net5 WPF application #​1221 by https://github.com/lg2de
• Fix unable to instrument module for Microsoft.AspNetCore.Mvc.Razor #​1459 by https://github.com/lg2de

Improvements

• Extended exclude by attribute feature to work with fully qualified name #​1589
• Use System.CommandLine instead of McMaster.Extensions.CommandLineUtils #​1474 by https://github.com/Bertk
• Fix deadlog in Coverlet.Integration.Tests.BaseTest #​1541 by https://github.com/Bertk
• Add coverlet.msbuild.tasks unit tests #​1534 by https://github.com/Bertk

Diff between 6.0.0 and 6.0.1

v6.0.0

Fixed
-Could not write lines to file CoverletSourceRootsMapping - in use by another processhttps://github.com/coverlet-coverage/coverlet/issues/11555
-Incorrect coverage for methods returning IAsyncEnumerable in generic classeshttps://github.com/coverlet-coverage/coverlet/issues/13833
-Wrong branch coverage for async methods .NET Standard 1.xhttps://github.com/coverlet-coverage/coverlet/issues/13766
-Empty path exception in visual basic projectshttps://github.com/coverlet-coverage/coverlet/issues/7755
-Align published nuget package version to github release versionhttps://github.com/coverlet-coverage/coverlet/issues/14133
-Sync nuget and github release versionshttps://github.com/coverlet-coverage/coverlet/issues/11222

Improvements
-Migration of the project to .NET 6.0https://github.com/coverlet-coverage/coverlet/pull/14733

Breaking changes
New parameter ExcludeAssembliesWithoutSources to control automatic assembly exclusion https://github.com/coverlet-coverage/coverlet/issues/1164. The parameter InstrumentModulesWithoutLocalSources has been removed. since it can be handled by setting ExcludeAssembliesWithoutSources to None.
The default heuristics for determining whether to instrument an assembly has been changed. In previous versions any missing source file was taken as a signal that it was a third-party project that shouldn't be instrumented, with exceptions for some common file name patterns for source generators. Now only assemblies where no source files at all can be found are excluded from instrumentation, and the code for detecting source generator files have been removed. To get back to the behaviour that at least one missing file is sufficient to exclude an assembly, set ExcludeAssembliesWithoutSources to MissingAny, or use assembly exclusion filters for more fine-grained control.

Diff between 3.2.0 and 6.0.0

---

Configuration

📅 Schedule: Branch creation - "* 0-3 1 * *" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

🦙 MegaLinter status: ⚠️ WARNING

Descriptor	Linter	Files	Fixed	Errors	Elapsed time
✅ ACTION	actionlint	4		0	0.03s
✅ BASH	bash-exec	1		0	0.01s
✅ BASH	shellcheck	1		0	0.06s
✅ BASH	shfmt	1	0	0	0.11s
✅ CSHARP	csharpier	7	3	0	1.63s
✅ CSHARP	roslynator	2	0	0	56.31s
✅ DOCKERFILE	hadolint	1		0	0.19s
✅ EDITORCONFIG	editorconfig-checker	74		0	5.61s
✅ JSON	jsonlint	18		0	0.31s
✅ JSON	prettier	18	0	0	8.76s
✅ JSON	v8r	18		0	9.99s
⚠️ MARKDOWN	markdownlint	3	0	9	1.18s
✅ REPOSITORY	checkov	yes		no	50.3s
✅ REPOSITORY	dustilock	yes		no	0.01s
✅ REPOSITORY	gitleaks	yes		no	0.44s
✅ REPOSITORY	git_diff	yes		no	0.1s
✅ REPOSITORY	grype	yes		no	21.02s
✅ REPOSITORY	secretlint	yes		no	2.27s
✅ REPOSITORY	syft	yes		no	0.36s
✅ REPOSITORY	trivy	yes		no	13.34s
✅ REPOSITORY	trivy-sbom	yes		no	10.64s
✅ REPOSITORY	trufflehog	yes		no	6.29s
✅ XML	xmllint	2	0	0	0.11s
✅ YAML	prettier	11	0	0	0.9s
✅ YAML	v8r	11		0	25.13s
✅ YAML	yamllint	11		0	0.47s

See detailed report in MegaLinter reports

You could have the same capabilities but better runtime performances if you use a MegaLinter flavor:

• oxsecurity/megalinter/flavors/[email protected] (62 linters)
• oxsecurity/megalinter/flavors/[email protected] (71 linters)

MegaLinter is graciously provided by

[github-actions]

Trivy image scan report

ghcr.io/chgl/magnifhir:pr-119 (ubuntu 22.04)

11 known vulnerabilities found (CRITICAL: 0 HIGH: 0 MEDIUM: 7 LOW: 4)

Show detailed table of vulnerabilities

Package	ID	Severity	Installed Version	Fixed Version
libc6	CVE-2024-2961	MEDIUM	2.35-0ubuntu3.6	2.35-0ubuntu3.7
libc6	CVE-2024-33599	MEDIUM	2.35-0ubuntu3.6	2.35-0ubuntu3.8
libc6	CVE-2024-33600	MEDIUM	2.35-0ubuntu3.6	2.35-0ubuntu3.8
libc6	CVE-2024-33601	MEDIUM	2.35-0ubuntu3.6	2.35-0ubuntu3.8
libc6	CVE-2024-33602	MEDIUM	2.35-0ubuntu3.6	2.35-0ubuntu3.8
libssl3	CVE-2022-40735	MEDIUM	3.0.2-0ubuntu1.15	3.0.2-0ubuntu1.16
libssl3	CVE-2024-6119	MEDIUM	3.0.2-0ubuntu1.15	3.0.2-0ubuntu1.18
libssl3	CVE-2024-2511	LOW	3.0.2-0ubuntu1.15	3.0.2-0ubuntu1.17
libssl3	CVE-2024-4603	LOW	3.0.2-0ubuntu1.15	3.0.2-0ubuntu1.17
libssl3	CVE-2024-4741	LOW	3.0.2-0ubuntu1.15	3.0.2-0ubuntu1.17
libssl3	CVE-2024-5535	LOW	3.0.2-0ubuntu1.15	3.0.2-0ubuntu1.17

No Misconfigurations found

opt/magnifhir/magniFHIR.deps.json

No Vulnerabilities found

No Misconfigurations found

usr/share/dotnet/shared/Microsoft.AspNetCore.App/7.0.19/Microsoft.AspNetCore.App.deps.json

No Vulnerabilities found

No Misconfigurations found

usr/share/dotnet/shared/Microsoft.NETCore.App/7.0.19/Microsoft.NETCore.App.deps.json

No Vulnerabilities found

No Misconfigurations found