Conversation
SummaryGenerated a PR comment for #1911 that complements the author's detailed dependency update table by providing high-level context about the scope and systematic nature of the changes across multiple pom.xml files. What reviewers should knowThe comment briefly characterizes the PR as a systematic update of SonarSource analyzer plugins and dependencies across the project's build configuration. It notes the files affected (root pom.xml, analysis engine, test plugins) and key version changes, then suggests verifying integration tests and plugin builds work correctly after the analyzer plugin updates.
|
|
Renovate Jira issue ID: SLCORE-2232 |
renovate
Bot
force-pushed
the
renovate/analyzer-dependencies
branch
from
04d0328 to
94314e0
Compare
renovate
Bot
changed the title
Summary
This PR updates analyzer plugin dependencies and related SonarQube APIs across the project's pom.xml files. The updates include major version bumps for multiple language plugins (Java, Python, PHP, Kotlin, Scala, HTML, C++, etc.), plugin APIs, and build tools. What reviewers should knowWhere to look:
What to verify:
Note: This is a straightforward dependency update with no code logic changes — focus on the version transitions and their compatibility.
|
1 participant
This PR contains the following updates:
8.19.0.1586→8.20.0.18645.1.0.12421→5.2.0.124906.78.0.96395→6.80.0.984903.13.0.7515→3.15.0.80323.4.0.8957→3.5.0.92402.41.0.10709→2.42.0.107843.24.0.7341→3.25.0.74731.21.0.1997→1.22.0.22175.18.0.31561→5.21.0.327263.55.0.15704→3.56.0.158708.25.0.42802→8.28.0.431761.23.0.740→1.25.1.30021.17→1.25.1.30029.9.0.65466→9.9.9.10436925.3.0.104237→25.12.0.11709313.4.2.4284→13.5.0.43199.9.0.65466→9.9.9.1043699.14.0.375→9.17.0.5872.1.0.1111→2.21.0.46267.16.0.30901→7.35.0.36271Release Notes
SonarSource/sonar-java-symbolic-execution (org.sonarsource.java:sonar-java-symbolic-execution-plugin)
v8.20.0.1864Compare Source
Release notes - JavaSE - 8.20
Feature
JAVASE-187 Agentic AI Quality Profiles for Java
Maintenance
JAVASE-161 Prepare next development iteration 8.20.0
JAVASE-173 Use shared workflow in UpdateRuleMetadata.yml
JAVASE-189 Upgrade parent pom to version 87.0.0.3057
SonarSource/sonar-kotlin (org.sonarsource.kotlin:sonar-kotlin-plugin)
v3.5.0.9240Compare Source
Release notes - SonarKotlin - 3.5
Feature
SONARKT-724 Upgrade Kotlin compiler to 2.3.20
False Positive
SONARKT-248 S1192 should not raise when a string literal is used in TODO
SONARKT-264 S2175 should not raise on collections initialized with lazy
SONARKT-310 S108 should not raise on an empty block in when->else statement
SONARKT-386 S6518 should not raise on classes not supporting the indexed access operator
SONARKT-681 S1862 should not raise when guard conditions are used in "when" statements
SONARKT-702 S100 should allow test method names with spaces
SONARKT-703 S6508 should not raise on functions that are implementing parent class/interface
SONARKT-719 S6518 should not raise when get or set is called with named parameters
SONARKT-739 S6518 Add class exceptions for common user errors where operator is provided via java interop
Bug
SONARKT-718 ZipHandler leaks file handles on Windows, locking Maven .m2 JARs after SonarLint analysis
SONARKT-728 Should not throw UnsupportedOperationException in a mixed Java+Kotlin project
SonarSource/sonar-html (org.sonarsource.html:sonar-html-plugin)
v3.25.0.7473Compare Source
Release notes - SonarHTML - 3.25
What's Changed
Full Changelog: SonarSource/sonar-html@3.24.0.7341...3.25.0.7473
SonarSource/sonar-scala (org.sonarsource.slang:sonar-scala-plugin)
v1.22.0.2217Compare Source
Release notes - sonar-scala - 1.22
Maintenance
SONARSCALA-106 Prepare next development iteration for 1.22
SONARSCALA-109 Add its subproject to analysis
SONARSCALA-111 Add automated release workflow
SONARSCALA-113 Update dependencies
SONARSCALA-117 Create workflow "Update Rule Metadata"
SONARSCALA-119 Update rule metadata
SONARSCALA-120 Fix bump-version to always include patch number.
SONARSCALA-121 Use #squad-jvm-releases for notifications about releases
SONARSCALA-122 Licence packaging standard - Scala
SONARSCALA-123 Scala - Upgrade gradle wrapper to 9.3.1
SONARSCALA-124 Update automated release
SonarSource/sonar-php (org.sonarsource.php:sonar-php-plugin)
v3.56.0.15870Compare Source
Release notes - SonarPHP - 3.56
Bug
SONARPHP-1801 Add "type" field to Psalm rules and fix PsalmReportTest
SONARPHP-1806 S117 false positive and S116 false negative on PHP 8 constructor property promotion
SonarSource/sonar-java (org.sonarsource.java:sonar-java-plugin)
v8.28.0.43176Compare Source
Release notes - SonarJava - 8.28
No issues found for this release.
v8.27.0.43088Compare Source
Release notes - SonarJava - 8.27
Feature
SONARJAVA-5472 Dangling Javadoc comments should be removed
SONARJAVA-6205 Agentic AI Quality Profiles for Java
SONARJAVA-6212 Rename rules property for ruling test to enable checking only specific set of Sonar rules
SONARJAVA-6218 Prepare a basic project in sonar-java to use for running ruling samples
False Positive
SONARJAVA-5730 S1301 Should not raise issues when a switch expression is used for an exhaustive match on 2-valued enum
SONARJAVA-6070 Fix FP on S1133: Public APIs with documented deprecation plans flagged
False Negative
SONARJAVA-6139 S5042 should raise when invoking sensitive methods over tar archives
Maintenance
SONARJAVA-6193 Bump version using automated release and Maven
SONARJAVA-6195 Add the Java 25 tag to rules S8465 and S8469
SONARJAVA-6211 Upload artifacts if ruling-qa or autoscan ITs fail
SONARJAVA-6219 Make build and qa jobs emit download logs
SONARJAVA-6220 Do not run nightly builds on the weekends
SONARJAVA-6229 Upgrade parent pom to version 87.0.0.3057
SONARJAVA-6230 Delete duplicated agentic profile
v8.26.0.42915Compare Source
Release notes - SonarJava - 8.26
False Positive
SONARJAVA-4960 FP S1854 wrongly report issues when the semantic is not complete
SONARJAVA-5975 FP on S6856 when the ModelAttribute is a class / record
SONARJAVA-5985 S6207 should only raise if it has no side effects or only before assignments to components
SONARJAVA-6003 FP on S2055 when superclass has a generated no args constructor
SONARJAVA-6070 Fix FP on S1133: Public APIs with documented deprecation plans flagged
SONARJAVA-6179 FP in S6810: CompletableFuture is not treated as a subtype of Future when T is unknown
SONARJAVA-6180 FP on rule S5853: consecutive calls to "assertThat" chained with calls to "element" should not raise an issue
SONARJAVA-6184 FP for S4605 when having SpringBootApplication followed by ComponentScan annotation
SONARJAVA-6186 S6207 should not raise on non-trivial getter methods
False Negative
SONARJAVA-5980 S3749: false negative when Lombok
RequiredArgsConstructoris usedSONARJAVA-6122 FN Rule S3078 : VolatileVariablesOperationsCheck implementation seems to be wrong
Bug
SONARJAVA-5657 S6541, Incorrect NOAV Metric Calculation
SONARJAVA-6152 S1612 incorrect quickfix
Maintenance
SONARJAVA-5981 S5194: Compliant and non compliant code exmples are too different
SONARJAVA-6155 Use shared update rule metadata worflow
SONARJAVA-6176 Update Rspec quickfix property for ["S7629", "S7467", "S7466", "S7475", "S7477"]
SONARJAVA-6185 Prepare Next Iteration: adjust for automated release
SONARJAVA-6188 Use plugin-artifacts to fix SQS and SQC integrations
SONARJAVA-6190 Update automated release workflow
SONARJAVA-6194 Update rule metadata
SonarSource/sonar-packaging-maven-plugin (org.sonarsource.sonar-packaging-maven-plugin:sonar-packaging-maven-plugin)
v1.25.1.3002Compare Source
What's Changed
Full Changelog: SonarSource/sonar-packaging-maven-plugin@1.25.0.11...1.25.1.3002
v1.25.0.11What's Changed
Full Changelog: SonarSource/sonar-packaging-maven-plugin@1.23.0.740...1.25.0.11
SonarSource/sonarqube (org.sonarsource.sonarqube:sonar-scanner-protocol)
v9.9.8.100196Compare Source
See details in the community announcement, and more in the release notes.
v9.9.7.96285Compare Source
See details in the community announcement, and more in the release notes.
v9.9.6.92038Compare Source
See details in the community announcement, and more in the release notes.
v9.9.5.90363Compare Source
See details in the community announcement, and more in the release notes.
v9.9.4.87374Compare Source
See details in the community announcement, and more in the release notes.
v9.9.3.79811Compare Source
See details in the community announcement, and more in the release notes.
v9.9.2.77730Compare Source
See details in the community announcement, and more in the release notes.
v9.9.1.69595Compare Source
See details in the community announcement, and more in the release notes.
SonarSource/sonar-plugin-api (org.sonarsource.api.plugin:sonar-plugin-api)
v13.5.0.4319What's Changed
Full Changelog: SonarSource/sonar-plugin-api@13.4.3.4290...13.5.0.4319
v13.4.3.4290Compare Source
What's Changed
Full Changelog: SonarSource/sonar-plugin-api@13.4.2.4284...13.4.3.4290
SonarSource/sonar-analyzer-commons (org.sonarsource.analyzer-commons:sonar-analyzer-commons)
v2.21.0.4626Compare Source
Rotations of binary signing keys
v2.20.0.4607Compare Source
Release notes - Sonar Analyzer Commons - 2.20
Task
ACOMMONS-36 Prepare next development iteration
Improvement
ACOMMONS-40 Improve internal xml parser to support long attributes
v2.19.0.3575Compare Source
What's Changed
New Contributors
Full Changelog: SonarSource/sonar-analyzer-commons@2.18.0.3393...2.19.0.3575
v2.18.0.3393Compare Source
v2.17.0.3322Compare Source
What's Changed
Extend the RuleMetadataLoader API (#361)
New Contributors
Full Changelog: SonarSource/sonar-analyzer-commons@2.16.0.3141...2.17.0.3322
v2.16.0.3141Compare Source
v2.15.0.3128Compare Source
Task
SONARPHP-1555 Move helper classes for hard-coded secrets to analyzer commons
v2.14.0.3087Compare Source
Release notes - Sonar Analyzer Commons - 2.14
Task
ACOMMONS-18 Support Multi-Quality Rule (MQR) mode
SONARXML-146 Allow checks to access SensorContext to read the configuration
BUILD-6088 Create SECURITY.md
v2.13.0.3004Compare Source
Release notes - Sonar Analyzer Commons - 2.13
Bug
ACOMMONS-16 AVLTree iteration does not look through buckets
Task
ACOMMONS-17 Move ShannonEntropy to analyzer commons
v2.12.0.2964Compare Source
Release notes - Sonar Analyzer Commons - 2.12
New Feature
ACOMMONS-11 Expose STIG metadata in analyzer-commons
Improvement
ACOMMONS-15 Add convenience factory methods for small collections
v2.11.0.2861Compare Source
What's Changed
Full Changelog: SonarSource/sonar-analyzer-commons@2.10.0.2849...2.11.0.2861
v2.10.0.2849Compare Source
Release notes - Sonar Analyzer Commons - 2.10
New Feature
ACOMMONS-8 Add quickfix verification API
ACOMMONS-9 Add "assertNoIssuesRaised" to SingleFileVerifier
v2.9.0.2753Compare Source
What's Changed
ARTIFACTORY_ACCESS_TOKENvariable by @petertrr in #318\0as an allowed PHP regex element by @petertrr in #317New Contributors
Full Changelog: SonarSource/sonar-analyzer-commons@2.8.0.2699...2.9.0.2753
v2.8.0.2699Compare Source
What's Changed
New Contributors
Full Changelog: SonarSource/sonar-analyzer-commons@2.7.0.1482...2.8.0.2699
v2.7.0.1482Compare Source
What's Changed
Full Changelog: SonarSource/sonar-analyzer-commons@2.6.0.1473...2.7.0.1482
v2.6.0.1473Compare Source
What's Changed
keySetmethod onPMapandstreammethod onPSetandPStackby @Swalkyn in #298Full Changelog: SonarSource/sonar-analyzer-commons@2.5.0.1358...2.6.0.1473
v2.5.0.1358Compare Source
Update rule loader to allow education rules to not have a "How to fix it?" section.
v2.4.0.1317Compare Source
Support Python 3.11 regex features (Atomic grouping and possessive quantifiers) and add a new regex finder for S5852 (RedosCheck)
v2.3.0.1263Compare Source
Update support for the newest education format rule descriptions.
v2.2.0.1251Compare Source
Add support for education format rule descriptions.
Configuration
📅 Schedule: (in timezone CET)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Never, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.