Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump org.sonarsource.java:sonar-java-plugin from 7.17.0.31219 to 8.5.0.37199 #31

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 16, 2024

Bumps org.sonarsource.java:sonar-java-plugin from 7.17.0.31219 to 8.5.0.37199.

Release notes

Sourced from org.sonarsource.java:sonar-java-plugin's releases.

8.5.0.37199

Release notes - SonarJava - 8.5

Documentation

SONARJAVA-5144 Update Custom rules documentation regarding Testing

New Feature

SONARJAVA-4544 Support @​org.jspecify.annotations.Nullable and @​org.jspecify.annotations.NonNull in existing nullability checks

SONARJAVA-4545 Support @​org.jspecify.annotations.NonNull in existing nullability checks

SONARJAVA-4546 Support @​org.jspecify.annotations.NullMarked in existing nullability checks up to Package Level

SONARJAVA-4547 Rule S6665: Redundant nullability annotations check

Sub-task

SONARJAVA-5083 Add unit test samples for Java 22 unnamed variables and patterns

SONARJAVA-5084 Identify the rules affected by the unnamed variables and patterns feature (i.e. unused parameter)

SONARJAVA-5085 Review the Java 22 JEP impact on existing rules

Task

SONARJAVA-5148 Update rules metadata

Improvement

SONARJAVA-4462 Add a QuickFix for S6485

SONARJAVA-5138 [Support Java 22] Update Eclipse Compiler for Java 3.39.0

8.4.0.37032

Release notes - SonarJava - 8.4

Bug

SONARJAVA-4262 S1226 should fail its analysis because the CFG builder cannot recover the yield argument

SONARJAVA-4480 Bug in rule S1066 quickfix: preserve conditional logic when collapsing if by using parentheses

SONARJAVA-4950 S6204: IndexOutOfBoundsException when lombok.val is used

SONARJAVA-4961 S6916: Quickfix suggesting to merge single if into existing pattern guard does not take operators precedence into account

SONARJAVA-4963 Line and column positions are wrong after text blocks using '\' line continuations

... (truncated)

Commits
  • f99ad5a [NO JIRA] Fix Autoscan result, it was wrong in the CI because of the missing ...
  • 2a39d25 [NO JIRA] Point out in the README.md, that we now need Java 22 to build (#4904)
  • 187a94f SONARJAVA-5083 Add unit test samples for Java 22 unnamed variables and patter...
  • 353e76f SONARJAVA-5148 Update rule metadata (#4906)
  • e6037cd [NO JIRA] Update parent pom to 79.0.0.2165 (#4905)
  • b807569 [NO JIRA] Fix Quality Flaws: S1128 Remove this unused import
  • 841ea33 SONARJAVA-5144 Update Custom rules documentation to match MyJavaFileCheckRegi...
  • fed5ece [NO JIRA] Fix Quality Flaws: S1854 Unused assignments should be removed
  • 39c1b0c [NO JIRA] Fix Quality Flaws: S6213 Restricted Identifiers should not be used ...
  • 04721e0 [NO JIRA] Fix Quality Flaws: S1128 Unnecessary imports should be removed
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [org.sonarsource.java:sonar-java-plugin](https://github.com/SonarSource/sonar-java) from 7.17.0.31219 to 8.5.0.37199.
- [Release notes](https://github.com/SonarSource/sonar-java/releases)
- [Commits](SonarSource/sonar-java@7.17.0.31219...8.5.0.37199)

---
updated-dependencies:
- dependency-name: org.sonarsource.java:sonar-java-plugin
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Oct 16, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file java Pull requests that update Java code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants