jborgers / sonar-pmd

☕️ PMD Plugin for SonarQube
https://redirect.sonarsource.com/plugins/pmd.html
GNU Lesser General Public License v3.0
254 stars 154 forks source link

build(deps): bump org.sonarsource.java:java-frontend from 7.30.0.34429 to 8.0.0.36314 #477

Closed dependabot[bot] closed 3 weeks ago

dependabot[bot] commented 1 month ago

Bumps org.sonarsource.java:java-frontend from 7.30.0.34429 to 8.0.0.36314.

Release notes

Sourced from org.sonarsource.java:java-frontend's releases.

8.0.0.36314

Release notes - SonarJava - 8.0

Task

SONARJAVA-4975 Create custom rules plugin around symbolic execution engine

7.35.0.36271

Release notes - SonarJava - 7.35

Task

SONARJAVA-4951 Replace InternalCheckVerifier with JavaCheckVerifier

SONARJAVA-4974 Update custom rule documentation with new CheckVerifier API

SONARJAVA-5021 Update Rules Metadata

Improvement

SONARJAVA-4988 Use SonarLintCache component and make it accessible to custom rules via the caching APIs

7.34.0.35958

Release notes - SonarJava - 7.34

Bug

SONARJAVA-4934 On-demand plugin downloading ignore jsp files

False-Positive

SONARJAVA-4520 Rule S3655: False Positive with JUnit assertions

SONARJAVA-4529 FP on rule S3740 when instanceof with variable is used on raw types

SONARJAVA-4699 FP on S3516 when calling a method using objects from "unknown" packages

SONARJAVA-4741 FP on S6857 for special default values in property placeholders

SONARJAVA-4933 FP on S1068 with lombok @​Data, @​Getter, @​Setter annotations

SONARJAVA-4937 FP on S1118 when using Lombok generated constructors with private access

SONARJAVA-4943 FP on S1144 if private method is referenced by name in annotations

SONARJAVA-4944 FP on S2699 on SpringBoot sanity test "contextLoads"

Task

SONARJAVA-4936 Allow rules to analyze both main and test code

... (truncated)

Commits
  • 0d651bf Prepare for next development iteration 8.0.0-SNAPSHOT (#4811)
  • 9074a22 [NO JIRA] Fix code smell (#4810)
  • bfe0b30 [NO JIRA] Fix quality issues introduced in recent SE engine decoupling effort...
  • 52c9272 SONARJAVA-4975 Create custom rules plugin around symbolic execution engine (#...
  • d6f74cb [NO-JIRA] Prepare for next development iteration 7.36.0-SNAPSHOT (#4802)
  • 3842ec9 SONARJAVA-5021 Update Rules Metadata (#4801)
  • 5292d8b [NO-JIRA] Update parent pom (#4799)
  • 0a5e7a4 SONARJAVA-4988: Use SonarLintCache component and make it accessible to custom...
  • aad7d6f Ignore maven versions backup files (#4791)
  • f74679d SONARJAVA-4951 Replace sonar-java specific verifier with analyzer-commons lib...
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
sonarcloud[bot] commented 1 month ago

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarCloud

dependabot[bot] commented 3 weeks ago

Superseded by #478.