aboutsummaryrefslogtreecommitdiffstats
path: root/build.gradle
Commit message (Collapse)AuthorAgeFilesLines
* SONAR-14033 Refactor storage of applicationsDuarte Meneses2020-11-281-0/+2
|
* Update orchestrator version to 3.34Jacek2020-11-261-1/+1
| | | | | By default this version is disabling force authentication for 8.6 and greater. Also it allows to enable default behaviour, which will be used.
* SONAR-13992 Upgrade Apache httpclient to 4.5.13Julien Lancelot2020-11-251-1/+1
|
* SONAR-14174, SONAR-14150, SONAR-14148, SONAR-14151, SONAR-14163,Mathieu Suen2020-11-241-15/+15
| | | | SONAR-14164, SONAR-14149, SONAR-14153, SONAR-14152, SONAR-14173, SONAR-14174 Language plugin upgrade for 8.6.
* BUILD Fix unauthorized builds with artifactory repoMalena Ebert2020-11-171-1/+5
| | | | | | | | Due to a misbehavior in artifactory, the wrong http status code is returned and the build will stop immediately. This happens if you access a virtual repository which contains a repository which requires authentication. As a workaround a virtual repository is used, which does not include non-public repositories. https://www.jfrog.com/jira/browse/RTFACT-13797
* SONAR-13991 Fix SSF-128Julien Lancelot2020-11-061-5/+1
|
* SONAR-13979 Fail when sonar.search.host or sonar.search.port are defined in DCEMichal Duda2020-11-051-1/+1
| | | | - Orchestrator upgrade was required as by default it was setting these properties
* SONAR-12686 upgrade es client to 7.9.3 and move to HTTPJacek2020-11-051-5/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - add should minimum match eq 1 to user index queries ES 7.X changed behaviour in case filter query with bool it defaults to '0' https://www.elastic.co/guide/en/elasticsearch/reference/7.x/breaking-changes-7.0.html#_the_filter_context_has_been_removed - fix issue index routing param ES 7.X helped discover this bug as new setting has been auto configured which is 'index.number_of_routing_shards'. This has changed how documents are distributed across shards depending on how many shards the index has. Without that change issues docs has been incorrectly routed to the same shard hash as projects and it worked no matter what routing key you used projectUuid or auth_projectUuid. - update ngram and edge_ngram names to match with es 7.x nGram and edgeNgram has been deprecated in favour of ngram and edge_ngram https://www.elastic.co/guide/en/elasticsearch/reference/current/breaking-changes-7.0.html#deprecated-ngram-edgengram-token-filter-cannot-be-used - remove `_all : enabled` usage from UT This field was already deprecated in 6.X, now it has been removed. https://www.elastic.co/guide/en/elasticsearch/reference/current/breaking-changes-7.0.html#all-meta-field-removed - add Elasticsearch High Level REST client dependency - use sonar.search.port for ES HTTP - main process use ES Rest client to check ES status - sonar.cluster.search.hosts has HTTP ports on APP nodes also sonar.search.port and sonar.search.host MUST be configured on each Search node with the host and HTTP port of the current node - use Elasticsearch high level rest client - use in EsTester - use as primary es client - use indices api to get all indices name instead of cluster api - use cluster health api to check cluster state - support raw requests for 'nodes/_stats' and '_cluster/stats' - support raw requests for 'indices/_stats' - leave netty4plugin as testCompile dependency it is used in UTs - all ES non-test calls go through EsClient class - add rest client ES profiling
* Update node version used by gradleMalena Ebert2020-11-021-1/+1
|
* Move OWASP suppression files to private folderMalena Ebert2020-11-021-1/+1
|
* SONAR-14001 SONAR-14010 SONAR-14030 SONAR-14032 SONAR-14050 SONAR-14052 ↵Jeremy Davis2020-10-291-11/+11
| | | | SONAR-14053 SONAR-14054 SONAR-14055 SONAR-14056 Upgrade analyzers
* SONAR-13913 Upgrade Orchestrator version to 3.31Jacek2020-10-281-1/+1
|
* SONAR-14044 update mybatisTobias Trabelsi2020-10-271-1/+1
|
* SONAR-13937 Upgrade sonar-css to 1.3.1.1642Jacek2020-10-211-1/+1
|
* Revert "SONAR-13913 Remove tables and indexes clean up used in Integration ↵Julien Lancelot2020-10-211-1/+1
| | | | | | Tests" This reverts commit 6d13dd2f
* Improve validation build loggingDuarte Meneses2020-10-201-0/+20
|
* SONAR-13913 Remove tables and indexes clean up used in Integration TestsJulien Lancelot2020-10-201-1/+1
| | | | | | | | | | | * SONAR-13913 Remove usage of Orchestrator#resetData * Remove ProjectAnalysisRule * Upgrade to Orchestrator 3.31 * SONAR-13913 Remove BackendCleanup class * Remove code related to no more existing tables
* SONAR-13937 Fix SSF-126Jacek2020-10-191-1/+1
|
* SONAR-13980 upgrade postgresql jdbc driver version to 42.2.17Pierre Guillot2020-10-141-1/+1
|
* SONAR-13944 Upgrade RPG analyzerJeremy Davis2020-10-081-1/+1
|
* SONAR-13931 SONAR-13932 SONAR-13933 Upgrade analyzers for java, php and flexJeremy Davis2020-10-071-3/+3
|
* upgrade okhttp library version to latestPierre2020-10-061-1/+1
|
* SONAR-13912 Add owasp_check_task to Cirrus CI.Malena Ebert2020-10-021-0/+5
|
* SONAR-13905 enable OWASP Dependency Check toolSimon Brandhof2020-10-021-0/+34
|
* SONAR-13914 SONAR-13928 analysis updatesJeremy Davis2020-10-021-7/+7
|
* SONAR-13905 upgrade common-io versionPierre2020-10-011-1/+1
|
* SONAR-13914 Upgrade analyzersPhilippe Perrin2020-10-011-5/+6
|
* SONAR-13662Jeremy Davis2020-09-301-6/+6
| | | | | | | | SONAR-13833 SONAR-13907 SONAR-13909 SONAR-13910 Upgrade analyzers
* Upgrade Gradle pluginsSimon Brandhof2020-09-281-3/+3
|
* SONAR-13905 upgrade Hazelcast from 3.12.7 to 3.12.9Simon Brandhof2020-09-281-1/+1
| | | | | | | | to mitigate the vulnerabilities brought by the bundled jackson-core dependency. The release notes of 3.12.8 and 3.12.9 highlights only bug-fixes: https://docs.hazelcast.org/docs/rn/index.html#3-12-9
* SONAR-13905 upgrade Tomcat from 8.5.56 zo 8.5.58Simon Brandhof2020-09-281-1/+1
| | | | | | | | | The main reason is to fix potential vulnerabilities: - CVE-2020-13934 https://cve.mitre.org/cgi-bin/cvename.cgi?name=2020-13934 - CVE-2020-13935 https://cve.mitre.org/cgi-bin/cvename.cgi?name=2020-13935 Release notes: http://tomcat.apache.org/tomcat-8.5-doc/changelog.html
* SONAR-13644 load bundled plugins from 'lib/extension' directoryJacek2020-09-181-1/+1
|
* update postgresql jdbc driver versionPierre Guillot2020-09-031-1/+1
|
* SONAR-13833 Upgrade Java analyzer to 6.7.0.23054Jeremy Davis2020-09-011-1/+1
|
* SONAR-13829 Upgrade Python analyzer to 3.1.0.7619Jeremy Davis2020-09-011-1/+1
|
* SONAR-13792 Embed sonar-scm-svnDuarte Meneses2020-08-281-1/+1
|
* SONAR-13792 Embed sonar-scm-gitDuarte Meneses2020-08-281-1/+0
|
* SONAR-13576 Remove sonar-typescript-plugin (#2920)Tibor Blenessy2020-07-211-2/+1
| | | | | * SONAR-13576 Remove sonar-typescript-plugin * Update sonar-javascript-plugin to 6.3.0.12464
* SONAR-13563 Update sonar-java to 6.5.1.225868.4.0.35506Julien Lancelot2020-07-031-1/+1
|
* SONAR-13563 Update sonar-java to 6.5.1.22584 and sonar-cobol to 4.5.1.4460Julien Lancelot2020-07-021-2/+2
|
* SONAR-13563 Revert sonar-cobol-plugin to 4.4.0.3403Julien Lancelot2020-07-011-1/+1
|
* SONAR-13495 Release and embed Git 1.12.0.2034 and SVN 1.10.0.1917 pluginsDuarte Meneses2020-06-301-2/+2
|
* SONAR-13563 Update analyzers to latest releasessns-seb2020-06-301-13/+13
|
* Upgrade Jackson Dataformat dependencies to 2.10.4Simon Brandhof2020-06-221-2/+7
|
* Upgrade Hazelcast to 3.12.7Simon Brandhof2020-06-221-1/+1
| | | | Bug-fixes listed in https://docs.hazelcast.org/docs/rn/index.html#3-12-7
* Upgrade PostgreSQL driver to 42.2.14Simon Brandhof2020-06-221-1/+1
| | | | Fixes potential vulnerability CVE-2020-13692
* Upgrade jjwt to 0.11.2Simon Brandhof2020-06-221-1/+1
|
* Upgrade Tomcat to 8.5.56Simon Brandhof2020-06-221-1/+1
| | | | | | The vulnerability https://cve.mitre.org/cgi-bin/cvename.cgi?name=2020-9484 is not exploitable but it generates a false-positive in SCA reports. Upgrading kills the noise.
* Upgrade commons-io to 2.7Simon Brandhof2020-06-221-1/+1
| | | | Avoids vulnerability https://issues.apache.org/jira/browse/IO-556
* SONAR-13496 Update sonar-javascript, sonar-python to latest release(s)sns-seb2020-06-021-2/+2
|