This release includes the following enhancements:

Release date: May 13, 2025

AI Assistant

A new AI Assistant is available in dotTEST. Users can ask questions about the product in natural language and the AI Assistant will answer based on documentation and integration with a pre-configured LLM provider. New and existing users can learn the product and get help more efficiently using the AI Assistant. Access the AI Assistant by navigating in the desktop to Parasoft > Show View > AI Assistant. See The AI Assistant for more information.

Code Coverage Enhancements

  • dotTEST introduces a new dedicated coverage agent UI, which allows you to collect coverage data from managed code during manual or automated functional tests. This UI is launched by running the agent client in the console without parameters, and allows you to collect coverage for standalone (desktop) applications and web applications. For details, see Application Coverage.
  • The coverage_wizard.exe application has been removed.
  • A .yaml OpenAPI specification endpoint has been added to the coverage agent that documents the REST API exposed by the coverage agent.

Static Analysis Enhancements

  • You can now install an external Roslyn analyzer that includes custom rules, and use these rules in your analysis. You can also create a custom analyzer and use it with dotTEST. See -installAnalyzer.
  • The suppression mechanism has been extended to allow suppressing similar violations in different versions of dotTEST.

Support for .NET 9

Support for .NET 9 has been added. See Supported Frameworks.

Support for C# 13

dotTEST can now analyze code written in C# 13.

Test Impact Analysis Enhancements

Test impact analysis now supports re-executing tests that failed in the base run along with affected tests. See dottest.tia.run_failed_tests.

New and Updated Test Configurations

The Security Compliance Pack has been extended by adding support for the following test configurations:

  • CWE 4.17
  • CWE Top 25 2024
  • CWE Top 25 + On the Cusp 2024

The following test configurations have been updated:

  • HIPAA
  • UL 2900

The following test configurations have been removed:

  • CWE 4.15
  • CWE Top 25 2022
  • CWE Top 25 + On the Cusp 2022

Updated Static Analysis Rules

The following rules have been updated:

Rule ID

Updates

CS.TRS.LOCKSETGET

C#13 syntax support. 

SPR.HARDCONN

New parameters have been added. Issues have been fixed.

Updated Flow Analysis Rules

The following rules have been updated:

Rule ID

Updates

BD.PB.CC

Improved consistency of results.

BD.SECURITY.TDThe rule has been significantly updated to improve performance and accuracy.

Support for Platforms

The following platform is now supported:

  • Windows Server 2025

VSCode Extension Enhancements

  • Violations are now saved in a file when applying the Fix with AI option in Problems View.
  • Authentication with Azure Pipelines no longer requires additional extensions to be installed.
  • You can now import the analysis results of a project named differently than the current workspace.
  • You can now import violations from GitLab to VSCode using a personal token with any role.
  • It is now possible to select an AI model when working with Copilot Chat using the @parasoft participant.

Additional Updates

  • The shipped JRE has been upgraded to version 21.0.7+6.
  • dotTEST now supports groups of rule equivalents. When one of these rules is suppressed at the point of violation, the suppression is automatically applied to all equivalent rules in the group. See Automatically suppress violations of equivalent rules.
  • dotTEST can now be configured to be FIPS 140-3 compliant.
  • The severity specified in a <rule-id>-<severity> pattern (e.g., BD.PB.VOVR-3) used in a suppression comment or suppression record is now taken into account when suppressing violations. A violation is suppressed if its severity matches or is lower than the one specified in the suppression pattern. If the rule's severity has increased, existing suppressions will no longer apply.
  • You can now customize any of the intermediate XSL transformation files used to generate reports in all available formats as an alternative to building a custom XSL transformation from scratch. See Customizing XSL Files Used to Generate Reports.
  • Parameters used to configure dotTEST for test execution are now always included in XML reports.
  • Settings can now be imported from a remote location. See Importing Preferences.
  • Rule documentation is now distributed as a .zip file. You can specify the path to a .zip file containing the documentation. See Specifying the Rule Documentation Path
  • The dotTEST installation process is now faster and more efficient.
  • dottestcov now requires .NET 9 runtime.

Deprecated Support

Deprecated Support for Operating Systems

Support for the following OS is now deprecated:

  • Windows 10

Resolved Bugs and FRs

Bug/FR ID

Description

DT-18943Occurring popup
DT-22842Section of viewing reports and UT with passed, failed, incomplete
FA-6806BD.SECURITY.TDFNAMES false positive caused by incorrect propagation of tainted data
FA-10104Inconsistent results for BD.PB.CC
FA-10244BD.PB.VOVR false positive on variable updated in a loop, which is traversed only once

Resolved Bugs and FRs in 2025.1.2

Bug/FR ID

Description

CVE-2026-22732

Critical vulnerability resolved by updating to spring-security version 6.5.9

CVE-2026-29145

Critical vulnerability resolved by updating to Tomcat version 10.1.53

CVE-2026-33937

Critical vulnerability resolved by updating to handlebars version 4.7.9

Resolved Bugs and FRs in 2025.1.3

Bug/FR ID

Description

CVE-2025-7783Critical vulnerability resolved by upgrading form-data to 4.0.6.
CVE-2026-27601Critical vulnerability resolved by upgrading underscore to 1.13.8
CVE-2026-41842Critical vulnerability resolved by upgrading Spring to 6.2.19
CVE-2026-43515Critical vulnerability resolved by upgrading Tomcat to 10.1.56
CVE-2026-46681 Critical vulnerability resolved by upgrading nevware21/ts-utils to 0.14.0.
CVE-2026-47838Critical vulnerability resolved by upgrading Spring Security to 6.5.11
CVE-2025-48734Critical vulnerability resolved by upgrading commons-beanutils to 1.11.0
CVE-2025-48976Critical vulnerability resolved by upgrading commons-fileupload2-core to 2.0.0-M4

CVE-2026-54512

CVE-2026-54513

Critical vulnerability resolved by upgrading Jackson to 2.18.8

Resolved Bugs and FRs in 2025.1.4

Bug/FR ID

Description

CVE-2026-55276

CVE-2026-53434

CVE-2026-59083

CVE-2026-59084

Critical vulnerability resolved by upgrading Tomcat to 10.1.57

CVE-2026-53914Critical vulnerability resolved by upgrading kotlin-stdlib to 2.4.20

Resolved Bugs and FRs in 2025.1.5

Bug/FR ID

Description

CVE-2026-8763Critical vulnerability resolved by upgrading bc-fips to 2.1.3
CVE-2026-58062Critical vulnerability resolved by upgrading bc-fips to 2.1.3
CVE-2026-59638Critical vulnerability resolved by upgrading bctls-fips to 2.1.24

For information about this release, see https://docs.parasoft.com/display/DOTTEST20251/Updates+in+2025.1.