fix(deps): update analyzer dependencies#1911
Open
renovate[bot] wants to merge 1 commit intomasterfrom
Open
Conversation
SummaryGenerated a PR comment for #1911 that complements the author's detailed dependency update table by providing high-level context about the scope and systematic nature of the changes across multiple pom.xml files. What reviewers should knowThe comment briefly characterizes the PR as a systematic update of SonarSource analyzer plugins and dependencies across the project's build configuration. It notes the files affected (root pom.xml, analysis engine, test plugins) and key version changes, then suggests verifying integration tests and plugin builds work correctly after the analyzer plugin updates.
|
|
Renovate Jira issue ID: SLCORE-2232 |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
5.1.0.12421→5.2.0.124906.78.0.96395→6.79.0.972913.24.0.7341→3.25.0.74731.21.0.1997→1.22.0.22175.18.0.31561→5.19.0.320988.25.0.42802→8.26.0.429159.9.0.65466→9.9.9.1043691.23.0.740→1.25.1.300225.3.0.104237→25.12.0.11709313.4.2.4284→13.5.0.43191.17→1.25.1.30029.9.0.65466→9.9.9.1043699.14.0.375→9.17.0.5872.1.0.1111→2.21.0.46267.16.0.30901→7.35.0.36271Release Notes
SonarSource/sonar-html (org.sonarsource.html:sonar-html-plugin)
v3.25.0.7473Compare Source
Release notes - SonarHTML - 3.25
What's Changed
Full Changelog: SonarSource/sonar-html@3.24.0.7341...3.25.0.7473
SonarSource/sonar-scala (org.sonarsource.slang:sonar-scala-plugin)
v1.22.0.2217Compare Source
Release notes - sonar-scala - 1.22
Maintenance
SONARSCALA-106 Prepare next development iteration for 1.22
SONARSCALA-109 Add its subproject to analysis
SONARSCALA-111 Add automated release workflow
SONARSCALA-113 Update dependencies
SONARSCALA-117 Create workflow "Update Rule Metadata"
SONARSCALA-119 Update rule metadata
SONARSCALA-120 Fix bump-version to always include patch number.
SONARSCALA-121 Use #squad-jvm-releases for notifications about releases
SONARSCALA-122 Licence packaging standard - Scala
SONARSCALA-123 Scala - Upgrade gradle wrapper to 9.3.1
SONARSCALA-124 Update automated release
SonarSource/sonar-java (org.sonarsource.java:sonar-java-plugin)
v8.26.0.42915Compare Source
Release notes - SonarJava - 8.26
False Positive
SONARJAVA-4960 FP S1854 wrongly report issues when the semantic is not complete
SONARJAVA-5975 FP on S6856 when the ModelAttribute is a class / record
SONARJAVA-5985 S6207 should only raise if it has no side effects or only before assignments to components
SONARJAVA-6003 FP on S2055 when superclass has a generated no args constructor
SONARJAVA-6070 Fix FP on S1133: Public APIs with documented deprecation plans flagged
SONARJAVA-6179 FP in S6810: CompletableFuture is not treated as a subtype of Future when T is unknown
SONARJAVA-6180 FP on rule S5853: consecutive calls to "assertThat" chained with calls to "element" should not raise an issue
SONARJAVA-6184 FP for S4605 when having SpringBootApplication followed by ComponentScan annotation
SONARJAVA-6186 S6207 should not raise on non-trivial getter methods
False Negative
SONARJAVA-5980 S3749: false negative when Lombok
RequiredArgsConstructoris usedSONARJAVA-6122 FN Rule S3078 : VolatileVariablesOperationsCheck implementation seems to be wrong
Bug
SONARJAVA-5657 S6541, Incorrect NOAV Metric Calculation
SONARJAVA-6152 S1612 incorrect quickfix
Maintenance
SONARJAVA-5981 S5194: Compliant and non compliant code exmples are too different
SONARJAVA-6155 Use shared update rule metadata worflow
SONARJAVA-6176 Update Rspec quickfix property for ["S7629", "S7467", "S7466", "S7475", "S7477"]
SONARJAVA-6185 Prepare Next Iteration: adjust for automated release
SONARJAVA-6188 Use plugin-artifacts to fix SQS and SQC integrations
SONARJAVA-6190 Update automated release workflow
SONARJAVA-6194 Update rule metadata
SonarSource/sonarqube (org.sonarsource.sonarqube:sonar-scanner-protocol)
v9.9.8.100196Compare Source
See details in the community announcement, and more in the release notes.
v9.9.7.96285Compare Source
See details in the community announcement, and more in the release notes.
v9.9.6.92038Compare Source
See details in the community announcement, and more in the release notes.
v9.9.5.90363Compare Source
See details in the community announcement, and more in the release notes.
v9.9.4.87374Compare Source
See details in the community announcement, and more in the release notes.
v9.9.3.79811Compare Source
See details in the community announcement, and more in the release notes.
v9.9.2.77730Compare Source
See details in the community announcement, and more in the release notes.
v9.9.1.69595Compare Source
See details in the community announcement, and more in the release notes.
SonarSource/sonar-packaging-maven-plugin (org.sonarsource.sonar-packaging-maven-plugin:sonar-packaging-maven-plugin)
v1.25.1.3002Compare Source
What's Changed
Full Changelog: SonarSource/sonar-packaging-maven-plugin@1.25.0.11...1.25.1.3002
v1.25.0.11What's Changed
Full Changelog: SonarSource/sonar-packaging-maven-plugin@1.23.0.740...1.25.0.11
SonarSource/sonar-plugin-api (org.sonarsource.api.plugin:sonar-plugin-api)
v13.5.0.4319What's Changed
Full Changelog: SonarSource/sonar-plugin-api@13.4.3.4290...13.5.0.4319
v13.4.3.4290Compare Source
What's Changed
Full Changelog: SonarSource/sonar-plugin-api@13.4.2.4284...13.4.3.4290
SonarSource/sonar-analyzer-commons (org.sonarsource.analyzer-commons:sonar-analyzer-commons)
v2.21.0.4626Compare Source
Rotations of binary signing keys
v2.20.0.4607Compare Source
Release notes - Sonar Analyzer Commons - 2.20
Task
ACOMMONS-36 Prepare next development iteration
Improvement
ACOMMONS-40 Improve internal xml parser to support long attributes
v2.19.0.3575Compare Source
What's Changed
New Contributors
Full Changelog: SonarSource/sonar-analyzer-commons@2.18.0.3393...2.19.0.3575
v2.18.0.3393Compare Source
v2.17.0.3322Compare Source
What's Changed
Extend the RuleMetadataLoader API (#361)
New Contributors
Full Changelog: SonarSource/sonar-analyzer-commons@2.16.0.3141...2.17.0.3322
v2.16.0.3141Compare Source
v2.15.0.3128Compare Source
Task
SONARPHP-1555 Move helper classes for hard-coded secrets to analyzer commons
v2.14.0.3087Compare Source
Release notes - Sonar Analyzer Commons - 2.14
Task
ACOMMONS-18 Support Multi-Quality Rule (MQR) mode
SONARXML-146 Allow checks to access SensorContext to read the configuration
BUILD-6088 Create SECURITY.md
v2.13.0.3004Compare Source
Release notes - Sonar Analyzer Commons - 2.13
Bug
ACOMMONS-16 AVLTree iteration does not look through buckets
Task
ACOMMONS-17 Move ShannonEntropy to analyzer commons
v2.12.0.2964Compare Source
Release notes - Sonar Analyzer Commons - 2.12
New Feature
ACOMMONS-11 Expose STIG metadata in analyzer-commons
Improvement
ACOMMONS-15 Add convenience factory methods for small collections
v2.11.0.2861Compare Source
What's Changed
Full Changelog: SonarSource/sonar-analyzer-commons@2.10.0.2849...2.11.0.2861
v2.10.0.2849Compare Source
Release notes - Sonar Analyzer Commons - 2.10
New Feature
ACOMMONS-8 Add quickfix verification API
ACOMMONS-9 Add "assertNoIssuesRaised" to SingleFileVerifier
v2.9.0.2753Compare Source
What's Changed
ARTIFACTORY_ACCESS_TOKENvariable by @petertrr in #318\0as an allowed PHP regex element by @petertrr in #317New Contributors
Full Changelog: SonarSource/sonar-analyzer-commons@2.8.0.2699...2.9.0.2753
v2.8.0.2699Compare Source
What's Changed
New Contributors
Full Changelog: SonarSource/sonar-analyzer-commons@2.7.0.1482...2.8.0.2699
v2.7.0.1482Compare Source
What's Changed
Full Changelog: SonarSource/sonar-analyzer-commons@2.6.0.1473...2.7.0.1482
v2.6.0.1473Compare Source
What's Changed
keySetmethod onPMapandstreammethod onPSetandPStackby @Swalkyn in #298Full Changelog: SonarSource/sonar-analyzer-commons@2.5.0.1358...2.6.0.1473
v2.5.0.1358Compare Source
Update rule loader to allow education rules to not have a "How to fix it?" section.
v2.4.0.1317Compare Source
Support Python 3.11 regex features (Atomic grouping and possessive quantifiers) and add a new regex finder for S5852 (RedosCheck)
v2.3.0.1263Compare Source
Update support for the newest education format rule descriptions.
v2.2.0.1251Compare Source
Add support for education format rule descriptions.
Configuration
📅 Schedule: Branch creation - "after 7am every weekday,before 7pm every weekday" in timezone CET, Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Never, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.