Release notes - SonarJava - 8.36
Feature
SONARJAVA-3259 Rule S5673: Spring components should use specialized annotations
SONARJAVA-4926 Methods annotated with @transactional should set ‘rollbackFor’ or ‘noRollbackFor’ attributes
SONARJAVA-6222 Extend ProfileRegistrar to register rules in a specific Quality Profile
SONARJAVA-6508 Create rule S9015: Mock should be created automatically with @mock if @ExtendWith(MockitoExtension.class) is used.
SONARJAVA-6509 Create rule S9024: @Injectmocks should be preferred over manual initialization
SONARJAVA-6576 Update RSPEC before 8.36 release
SONARJAVA-6579 Create rule S8975: The return value of "EntityManager.merge()" should be used
SONARJAVA-6588 Create rule S8983: Stateless session beans should not store mutable state in instance variables
SONARJAVA-6605 Create rule S9017: Mockito stubbing chains should be complete
SONARJAVA-6613 Implement rule S9021: "@configuration" classes should not be final
False Positive
SONARJAVA-6522 S2092: Don't Raise Issue for Secure Flag if Cookie is for deletion
SONARJAVA-6523 S2092: Don't raise issue when a Cookie subtype instantiates itself (bridge/wrapper pattern)
SONARJAVA-6528 S2068, S6418, and S6437: Make use of common secret exclusion filter
Maintenance
SONARJAVA-6524 Generate built-in profiles from rule metadata
SONARJAVA-6525 Decrease FPs for the rule S117 (using naming conventions for Java variables and methods)
SONARJAVA-6580 Prepare next development iteration 8.36.0
SONARJAVA-6584 Update rule metadata
SONARJAVA-6591 Add ruling diff comment workflow
SONARJAVA-6592 Integrate ruling-update-and-notify action in sonar-java
SONARJAVA-6598 Revert "Update dependency com.fasterxml.staxmate:staxmate to v2.4.2"
SONARJAVA-6602 Fix quality gate
SONARJAVA-6603 Add missing annotation to fix QG
SONARJAVA-6608 Adapt ITs to new behaviour of scanner engine when binaries are missing.
SONARJAVA-6612 Add RIS preprocessing file
SONARJAVA-6617 Update PM email in automated release workflow
SONARJAVA-6623 Revert Tomcat 11 upgrade
SONARJAVA-6625 Migrate remaining tests to JUnit 5
SONARJAVA-6627 Update slackapi/slack-github-action action to v3.0.4
SONARJAVA-6628 Update slackapi/slack-github-action action to v3.0.5
SONARJAVA-6629 Fix five open SonarQube issues (S1130, S2259)
SONARJAVA-6631 Update actions/checkout action to v7
SONARJAVA-6632 Update astral-sh/setup-uv action to v8
SONARJAVA-6636 Pin actions/checkout action to v7.0.0
SONARJAVA-6639 Update rule metadata