]>
source.dussan.org Git - sonarqube.git/log
Philippe Perrin [Mon, 16 Mar 2020 16:51:17 +0000 (17:51 +0100)]
Bump to eslint-config-sonarqube@0.6.0
michaelbirnstiehl [Wed, 1 Apr 2020 19:23:55 +0000 (14:23 -0500)]
DOCS add importing issues to nav
sylvain-combe-sonarsource [Mon, 6 Apr 2020 13:43:53 +0000 (15:43 +0200)]
Remove uncommented properties filename from sample (#2682)
* Remove uncommented properties filename from sample
Small glitch in sonar-project.properties sample: it has as first line the name of the properties file.
* Update sonarscanner.md
As suggested by @ganncamp , fix the sample properties file in Alternate Analysis Directory section too.
Simon Brandhof [Thu, 2 Apr 2020 10:12:28 +0000 (12:12 +0200)]
Fix the upgrade of the Gradle Artifactory plugin to 4.15.1
The configuration of private subprojects must be fixed
in order to correct set the properties like "build.name"
on private artifacts.
mickael-caro-sonarsource [Mon, 6 Apr 2020 09:00:21 +0000 (11:00 +0200)]
SONAR-13211 Increase / Document limit of comments posted in a PR for … (#2656)
* SONAR-13211 Increase / Document limit of comments posted in a PR for Azure DevOps
Wouter Admiraal [Mon, 6 Apr 2020 07:00:06 +0000 (09:00 +0200)]
SONAR-13289 Fix sonarqube wallboard notifications from Travis CI builds
sns-seb [Mon, 30 Mar 2020 09:04:57 +0000 (09:04 +0000)]
SONAR-13263 Upgrade plugins
michaelbirnstiehl [Mon, 2 Mar 2020 16:18:02 +0000 (10:18 -0600)]
SONAR-13138 Update Security Engine Custom Configuration docs for Python
colin-mueller-sonarsource [Thu, 2 Apr 2020 12:41:06 +0000 (14:41 +0200)]
DOC Add Fonts section to Platform Notes
Philippe Perrin [Fri, 20 Mar 2020 13:48:15 +0000 (14:48 +0100)]
SONAR-12945 Display latest release's information for scanners in documentation
Mathieu Suen [Fri, 27 Mar 2020 16:09:28 +0000 (17:09 +0100)]
Bump to sonar-ui-common@0.0.57
Evgeny Mandrikov [Tue, 31 Mar 2020 17:10:05 +0000 (19:10 +0200)]
Gradle scripts should use `plugins` block
It was de-incubated (promoted) in Gradle 5.0
and in particular it can't contain duplicate IDs.
Evgeny Mandrikov [Tue, 31 Mar 2020 15:40:13 +0000 (17:40 +0200)]
Replace Gradle plugin 'com.moowork.node' by 'com.github.node-gradle.node'
The latter one is actively maintained fork
of the not anymore maintained former.
In particular the former does not support Gradle 6.x.
Jacek [Fri, 20 Mar 2020 14:22:33 +0000 (15:22 +0100)]
SONAR-13204 remove global() aggr in project_measure ES search queries
Jacek [Fri, 20 Mar 2020 07:17:05 +0000 (08:17 +0100)]
SONAR-13204 support filters on nested field in RequestFiltersComputer
Jacek [Thu, 19 Mar 2020 14:20:28 +0000 (15:20 +0100)]
SONAR-13204 drop TermTopAggregationDef
Jacek [Thu, 19 Mar 2020 12:08:00 +0000 (13:08 +0100)]
SONAR-13104 drop global aggregation from issues ES searches
Jacek [Thu, 19 Mar 2020 09:19:06 +0000 (10:19 +0100)]
SONAR-13104 drop unused code
Duarte Meneses [Tue, 24 Mar 2020 00:21:34 +0000 (19:21 -0500)]
SONAR-12691 Refactor measures DAO
Duarte Meneses [Thu, 19 Mar 2020 18:53:16 +0000 (13:53 -0500)]
fix tests on Windows
Duarte Meneses [Thu, 19 Mar 2020 18:53:23 +0000 (13:53 -0500)]
SONAR-12691 Don't persist project measures that are not historical
Duarte Meneses [Thu, 19 Mar 2020 15:16:59 +0000 (10:16 -0500)]
SONAR-12691 Minor refactoring
Duarte Meneses [Wed, 18 Mar 2020 20:50:42 +0000 (15:50 -0500)]
SONAR-12691 Dont delete past measures of directories and files
Duarte Meneses [Wed, 18 Mar 2020 18:54:33 +0000 (13:54 -0500)]
SONAR-12691 Minor cleanup
Philippe Perrin [Thu, 20 Feb 2020 09:07:24 +0000 (10:07 +0100)]
Drop redux-logger
Wouter Admiraal [Fri, 27 Mar 2020 12:38:20 +0000 (13:38 +0100)]
SONAR-13259 Fix branch analysis on Travis CI for public repo
Costin Zaharia [Fri, 27 Mar 2020 06:51:45 +0000 (07:51 +0100)]
Add Coverlet to coverage tools list (#2640)
Wouter Admiraal [Tue, 24 Mar 2020 07:19:03 +0000 (08:19 +0100)]
Add default reviewer for upgrade plugins PR
Simon Brandhof [Wed, 25 Mar 2020 10:35:50 +0000 (11:35 +0100)]
SONAR-13155 upgrade sonar-channel to 4.2
This project is no longer maintained. V4.2 is the latest, released
in 2014. It is probably similar to 4.1 and does not bring changes.
The reason is that this lib was a module of the sonarqube repository
at that time.
Simon Brandhof [Wed, 25 Mar 2020 10:31:51 +0000 (11:31 +0100)]
SONAR-13155 upgrade Artifactory plugin to 4.15.1
Changelog contains mainly bug-fixes and preparation of Gradle 6 support
https://www.jfrog.com/jira/browse/GAP-305?jql=project%20%3D%20GAP%20AND%20fixVersion%20in%20(4.11.0%2C%204.12.0%2C%204.14.1%2C%204.15.0%2C%204.15.1)%20ORDER%20BY%20priority%20DESC%2C%20updated%20DESC
Simon Brandhof [Tue, 24 Mar 2020 20:33:36 +0000 (21:33 +0100)]
SONAR-13155 schedule listing of available dependency upgrades
Simon Brandhof [Tue, 24 Mar 2020 20:31:35 +0000 (21:31 +0100)]
SONAR-13155 add command to run yarn security audit
Simon Brandhof [Tue, 24 Mar 2020 20:30:42 +0000 (21:30 +0100)]
SONAR-13155 add a comment about lib diffutils
Simon Brandhof [Tue, 24 Mar 2020 09:41:06 +0000 (10:41 +0100)]
SONAR-13155 upgrade jackson-bind
Julien HENRY [Fri, 20 Mar 2020 08:13:40 +0000 (09:13 +0100)]
SONAR-13214 Restore a minimal Settings API for backward compatibility
Julien HENRY [Thu, 19 Mar 2020 15:44:46 +0000 (16:44 +0100)]
Remove deprecated APIs since at least 6.7
Julien HENRY [Thu, 19 Mar 2020 15:23:03 +0000 (16:23 +0100)]
Decrease coupling with commons-io
Julien HENRY [Thu, 19 Mar 2020 11:41:40 +0000 (12:41 +0100)]
SONAR-13214 Remove org.sonar.api.config.Settings from the API
Jeremy [Mon, 23 Mar 2020 16:26:25 +0000 (17:26 +0100)]
SONAR-13155 Upgrade dependencies
colin-mueller-sonarsource [Mon, 23 Mar 2020 11:18:34 +0000 (12:18 +0100)]
Update "No Visible Projects" Message
Simon Brandhof [Wed, 18 Mar 2020 19:40:32 +0000 (20:40 +0100)]
SONAR-13155 upgrade commons-collection to fix vulnerability
(that can't be exploited)
Simon Brandhof [Wed, 18 Mar 2020 08:11:15 +0000 (09:11 +0100)]
SONAR-13155 add Gradle command to list all dependency trees
`./gradlew allDependencies` lists the trees of dependencies of
all subprojects. This is convenient when investigating the
impacts of a dependency upgrade.
Simon Brandhof [Wed, 18 Mar 2020 08:02:15 +0000 (09:02 +0100)]
SONAR-13155 use the official Maven coordinates of Oracle driver
'com.oracle.jdbc:ojdbc8' was the coordinates of the artifact manually
deployed to SonarSource repository.
Simon Brandhof [Tue, 17 Mar 2020 21:01:51 +0000 (22:01 +0100)]
SONAR-13155 upgrade Tomcat from 8.5.51 to 8.5.53
Bug-fixes listed in http://tomcat.apache.org/tomcat-8.5-doc/changelog.html
Simon Brandhof [Tue, 17 Mar 2020 20:57:11 +0000 (21:57 +0100)]
SONAR-13155 upgrade testing dependencies
Simon Brandhof [Tue, 17 Mar 2020 20:53:28 +0000 (21:53 +0100)]
SONAR-13155 upgrade OkHttp from 3.14.2 to 3.14.7
Bug-fixes listed in https://square.github.io/okhttp/changelog_3x/
Simon Brandhof [Tue, 17 Mar 2020 20:47:57 +0000 (21:47 +0100)]
SONAR-13155 upgrade SQLServer driver to 7.4.1
* Supports NTLM authentication mode.
* Updated Microsoft Azure Key Vault SDK for Java, version 1.2.1
See https://docs.microsoft.com/en-us/sql/connect/jdbc/release-notes-for-the-jdbc-driver?view=sql-server-ver15#-741
Simon Brandhof [Tue, 17 Mar 2020 20:44:14 +0000 (21:44 +0100)]
SONAR-13155 upgrade Hazelcast from 3.12.3 to 3.12.6
Multiple bug-fixes:
https://docs.hazelcast.org/docs/rn/index.html
Simon Brandhof [Tue, 17 Mar 2020 20:37:20 +0000 (21:37 +0100)]
SONAR-13155 upgrade protobuf-java from 3.10 to 3.11.4
No major changes
https://github.com/protocolbuffers/protobuf/releases
Simon Brandhof [Tue, 17 Mar 2020 20:34:10 +0000 (21:34 +0100)]
SONAR-13155 upgrade gson from 2.8.5 to 2.8.6
No major changes
https://github.com/google/gson/blob/master/CHANGELOG.md
Simon Brandhof [Tue, 17 Mar 2020 20:25:50 +0000 (21:25 +0100)]
SONAR-13155 do not suggest major upgrades of dependencies
Simon Brandhof [Tue, 17 Mar 2020 20:24:14 +0000 (21:24 +0100)]
SONAR-13155 upgrade httpclient from 4.5.10 to 4.5.12
Bug-fixes listed in https://archive.apache.org/dist/httpcomponents/httpclient/RELEASE_NOTES-4.5.x.txt
Simon Brandhof [Tue, 17 Mar 2020 20:21:55 +0000 (21:21 +0100)]
SONAR-13155 upgrade jgit from 5.6 to 5.7
See https://projects.eclipse.org/projects/technology.jgit/releases/5.7.0/
Simon Brandhof [Tue, 17 Mar 2020 16:56:06 +0000 (17:56 +0100)]
SONAR-13155 upgrade building dependencies
Simon Brandhof [Tue, 17 Mar 2020 16:52:45 +0000 (17:52 +0100)]
SONAR-13155 upgrade JWT libs
Simon Brandhof [Tue, 17 Mar 2020 12:16:01 +0000 (13:16 +0100)]
SONAR-13155 upgrade SLF4J
Simon Brandhof [Tue, 17 Mar 2020 12:15:21 +0000 (13:15 +0100)]
SONAR-13155 upgrade testing dependencies
Simon Brandhof [Tue, 17 Mar 2020 12:13:56 +0000 (13:13 +0100)]
SONAR-13155 upgrade snakeymaml
Simon Brandhof [Fri, 6 Mar 2020 07:58:52 +0000 (08:58 +0100)]
SONAR-13155 clean-up Guava transitive dependencies
See https://github.com/google/guava/wiki/UseGuavaInYourBuild#what-about-guavas-own-dependencies
Simon Brandhof [Fri, 6 Mar 2020 07:58:09 +0000 (08:58 +0100)]
SONAR-13155 drop usage of HTTP kevinsawicki lib
Simon Brandhof [Thu, 5 Mar 2020 08:25:07 +0000 (09:25 +0100)]
SONAR-13155 upgrade protobuf compiler gradle plugin
No breaking changes. It prepares future upgrade to Gradle 6:
https://github.com/google/protobuf-gradle-plugin/releases/tag/v0.8.11
Simon Brandhof [Wed, 4 Mar 2020 08:56:01 +0000 (09:56 +0100)]
SONAR-13155 Upgrade nanohttpd, used by Compute Engine
Simon Brandhof [Wed, 4 Mar 2020 08:55:41 +0000 (09:55 +0100)]
SONAR-13155 Drop unused freemarker dependency
Simon Brandhof [Wed, 4 Mar 2020 08:55:14 +0000 (09:55 +0100)]
SONAR-13155 Upgrade XML parsers
Simon Brandhof [Tue, 3 Mar 2020 15:29:56 +0000 (16:29 +0100)]
SONAR-13155 Add comment about instability of H2 1.4.200
Simon Brandhof [Tue, 3 Mar 2020 15:29:00 +0000 (16:29 +0100)]
SONAR-13155 Upgrade various test dependencies
Simon Brandhof [Tue, 3 Mar 2020 15:23:38 +0000 (16:23 +0100)]
SONAR-13155 Upgrade MyBatis from 3.5.3 to 3.5.4
The bug-fixes do not bring breaking changes:
https://github.com/mybatis/mybatis-3/releases/tag/mybatis-3.5.4
Simon Brandhof [Tue, 3 Mar 2020 15:22:11 +0000 (16:22 +0100)]
SONAR-13155 Remove unused Owasp Gradle plugin
Simon Brandhof [Tue, 3 Mar 2020 15:11:04 +0000 (16:11 +0100)]
SONAR-13155 Upgrade PostgreSQL driver to 42.2.10
Changes are safe:
- https://jdbc.postgresql.org/documentation/changelog.html#version_42.2.9
- https://jdbc.postgresql.org/documentation/changelog.html#version_42.2.10
Simon Brandhof [Tue, 3 Mar 2020 14:37:06 +0000 (15:37 +0100)]
SONAR-13155 Upgrade scribejava from 6.8.1 to 6.9.0
This new version mainly apply bug-fixes by upgrading dependencies:
https://github.com/scribejava/scribejava/compare/scribejava-6.8.1...scribejava-6.9.0
Simon Brandhof [Tue, 3 Mar 2020 14:28:10 +0000 (15:28 +0100)]
SONAR-13155 Upgrade commons-dbutils fron 1.5 to 1.7
even if it's used only by unit tests
Simon Brandhof [Tue, 3 Mar 2020 14:15:40 +0000 (15:15 +0100)]
SONAR-13155 Drop usage of commons-dbutils
except for unit tests
Simon Brandhof [Tue, 3 Mar 2020 14:00:38 +0000 (15:00 +0100)]
SONAR-13155 Upgrade Gradle Dependency Management to 1.0.9
Versions from 1.0.4 fix bugs: https://github.com/spring-gradle-plugins/dependency-management-plugin/releases
Simon Brandhof [Tue, 3 Mar 2020 13:34:23 +0000 (14:34 +0100)]
SONAR-13155 Upgrade gradle-versions-plugin to 0.28.0
Wouter Admiraal [Fri, 20 Mar 2020 09:11:51 +0000 (10:11 +0100)]
Migrate release procedure to GH actions
Jeremy Davis [Thu, 12 Mar 2020 13:42:49 +0000 (14:42 +0100)]
SONAR-11552 Reduce tab size in codeviewer
Jeremy Davis [Thu, 12 Mar 2020 13:31:59 +0000 (14:31 +0100)]
SONAR-13185 Remove hardcoded 'source' and 'sink'
Duarte Meneses [Mon, 16 Mar 2020 19:46:26 +0000 (14:46 -0500)]
SONAR-13205 Default QG should fail if Security Hotspots Reviewed on New Code is < 100%
Julien HENRY [Fri, 13 Mar 2020 12:37:58 +0000 (13:37 +0100)]
Minimize dependencies
Julien HENRY [Fri, 13 Mar 2020 10:58:17 +0000 (11:58 +0100)]
SONAR-13198 Deprecate JsonWriter
Hirle [Thu, 19 Mar 2020 09:45:06 +0000 (10:45 +0100)]
SONAR-13209 Connect docs deployment to buddy.works
G. Ann Campbell [Tue, 17 Mar 2020 14:54:18 +0000 (10:54 -0400)]
DOC Remove 6.7-specific info
+ minor general cleanup.
colin-mueller-sonarsource [Tue, 17 Mar 2020 14:30:08 +0000 (15:30 +0100)]
DOCS Pull Request cleanup: More ALMs
michaelbirnstiehl [Mon, 9 Mar 2020 22:50:13 +0000 (17:50 -0500)]
SONAR-13148 add Jenkins auto branch and PR detection
Duarte Meneses [Mon, 9 Mar 2020 19:53:05 +0000 (14:53 -0500)]
SONAR-11853 Improve logs about autoconfiguration in CIs
Duarte Meneses [Wed, 4 Mar 2020 13:59:35 +0000 (07:59 -0600)]
SONAR-13158 Scanner logs files indexed with language 'null'
Duarte Meneses [Tue, 3 Mar 2020 22:54:40 +0000 (16:54 -0600)]
SONAR-11853 SONAR-13161 Auto-configuration pull requests and branches on Jenkins
Jeremy Davis [Thu, 12 Mar 2020 11:19:08 +0000 (12:19 +0100)]
BUILD-797 Prevent double trigger of dogfood merge task
Pierre [Fri, 13 Mar 2020 09:59:25 +0000 (10:59 +0100)]
fix java:S2259 possible NPE
Julien Lancelot [Wed, 4 Mar 2020 17:06:32 +0000 (18:06 +0100)]
SONAR-13160 Fix display of Portfolio Admin page when project contains UTF-8 characters
Duarte Meneses [Fri, 21 Feb 2020 20:21:20 +0000 (14:21 -0600)]
SONAR-12928 Persistence of live measures is a performance hotspot on Oracle and SQLServer
Sébastien Lesaint [Fri, 6 Sep 2019 14:26:54 +0000 (16:26 +0200)]
SONAR-13093 Optimize cache of issues in Compute Engine
colin-mueller-sonarsource [Wed, 11 Mar 2020 09:54:35 +0000 (10:54 +0100)]
DOCS ALM Integrations section in Requirements
Andrei Epure [Mon, 9 Mar 2020 14:33:13 +0000 (15:33 +0100)]
DOCS update S4MSB version (#2602)
Jeremy Davis [Fri, 6 Mar 2020 13:40:07 +0000 (14:40 +0100)]
SONAR-13166 Fix tooltip on hotspot status
Jeremy Davis [Fri, 6 Mar 2020 13:33:47 +0000 (14:33 +0100)]
SONAR-13131 Add Security Review Rating explanation tooltip
colin-mueller-sonarsource [Fri, 6 Mar 2020 15:17:54 +0000 (16:17 +0100)]
DOCS Change title of section for adjusting java install
colin-mueller-sonarsource [Fri, 6 Mar 2020 15:17:29 +0000 (16:17 +0100)]
DOCS "Advanced Installation" - Remove Docker CE
colin-mueller-sonarsource [Fri, 6 Mar 2020 15:17:09 +0000 (16:17 +0100)]
DOCS Remove true requirements from HW reccomendations
Duarte Meneses [Thu, 5 Mar 2020 17:45:56 +0000 (11:45 -0600)]
SONAR-13165 Scanner warns that it wasn't able to detected changed lines on files with lines removed only