SonarQube 9.4 发布，代码质量管理平台-低调大师

SonarQube 9.4 发布，代码质量管理平台

2022-04-08 739

Sonar（SonarQube）是一个开源平台，用于管理源代码的质量。Sonar 不只是一个质量数据报告工具，更是代码质量管理平台。支持的语言包括：Java、PHP、C#、C、Cobol、PL/SQL、Flex 等

SonarQube 在 4 月份发布了最新的 9.4 版本，包含一众改进和 bug 修复：

Bug

[SONAR-12592] - External rules are not removed when no more provided by analyzer
[SONAR-13125] - Missing information about db migration in sonar.log in console mode when starting SonarQube with jar file
[SONAR-13588] - Tags defined on external rules are not propagated to external issues
[SONAR-14011] - Docker not detected in System Information when using AWS ECS
[SONAR-15974] - Escape special characters on Azure DevOps Platform Project onboarding
[SONAR-15987] - Restart should not fail if temp files can't be deleted
[SONAR-16001] - Embedded documentation shows placeholder content for superior edition languages
[SONAR-16006] - "Keep when inactive" button doesn't preserve changed state in UI
[SONAR-16031] - Security fix (SSF-230)
[SONAR-16039] - Issues not found on reference branch strategy after migrating from 9.2 to 9.3
[SONAR-16050] - Scanner fails with NPE if user doesn't have permission to analyze project
[SONAR-16057] - Filesystem tests fail with NPE
[SONAR-16100] - Analysis computation errror when a reference branch is used and a file is not under scm control
[SONAR-16131] - CWE titles and descriptions are missing in the security report
[SONAR-16151] - Some file names are wrongly displayed in the issue's page
[SONAR-16158] - Duplicated blocks assigned to the wrong lines of code
[SONAR-16159] - Security fix (SSF-235)
[SONAR-16165] - Multiselection of authors is broken in the issue page
[SONAR-16167] - Security fix (SSF-239)
[SONAR-16174] - SonarLint icon in PR decoration missing for some DevOps platforms
[SONAR-16178] - Security fix (SSF-241)
[SONAR-16179] - Security fix (SSF-240)
[SONAR-16181] - Security fix (SSF-227)
[SONAR-16189] - Security fix (SSF-217)

New Feature

[SONAR-15918] - Create a new web API endpoint to stream events to SonarLint
[SONAR-16007] - Display hotspots' secondary locations
[SONAR-16012] - Export project license usage from the license page
[SONAR-16013] - Add api endpoint that expose the list of projects with their license usage
[SONAR-16032] - Update Executive Report PDF to reflect Clean As You Code practice
[SONAR-16101] - Track Security Hotspots which represent real risks to fix later
[SONAR-16123] - Display OWASP Top 10 2021 in Security Report
[SONAR-16192] - Improve Terraform analysis: support GCP and detect Traceability problems on Azur
[SONAR-16208] - Improve Python analysis: 8 rules to help developers reduce the complexity of their regular expressions
[SONAR-16209] - Improve JS/TS analysis: support TypeScript 4.6 ; quick fixes support for 30 rules when SonarLint is used in Connected Mode with SQ
[SONAR-16213] - Improve Java analysis: enable Java 18 code parsing

Task

[SONAR-7496] - Drop unused db columns ISSUES.REPORTER, ACTION_PLAN_KEY and ISSUE_ATTRIBUTES
[SONAR-12807] - Put all ALM icons in a single location
[SONAR-13672] - Fix Bibucket typo to Bitbucket
[SONAR-15845] - Upgrade H2 database dependency
[SONAR-15870] - Xoo SCM should support relative dates
[SONAR-15909] - Introduce an appState context
[SONAR-15910] - Extract "languages" from redux
[SONAR-15911] - Extract "Metrics" from redux
[SONAR-15912] - Extract "Settings" from redux - part 1: SettingsApp
[SONAR-15913] - Extract "users" from redux
[SONAR-15914] - Clean up redux
[SONAR-15926] - Performance testing of new Server Push API
[SONAR-15938] - Improve code sharing with the license extension
[SONAR-15962] - Drop the "Suggest dependency upgrades" useless Github Action
[SONAR-15966] - Use Spring instead of Pico as dependency injection framework in the scanner-engine
[SONAR-15977] - Fix microsoft jdbc docstring in sonar.properties
[SONAR-15991] - Update frontend dependencies
[SONAR-15992] - Extract "Settings" from redux - part 2: global setting values
[SONAR-15994] - Migrate Sonarqube IOC framework from Pico to Spring
[SONAR-16005] - Remove appState from the Redux store
[SONAR-16047] - Don't start MyBatis in every test
[SONAR-16055] - Upgrade github-action_release to v4
[SONAR-16073] - Add integration test for Projects License Usage export
[SONAR-16081] - Update SelectLegacy component with Select component inside core-extension-governance
[SONAR-16082] - Update SelectLegacy component with Select component inside core-extension-developer-server
[SONAR-16083] - Update SelectLegacy component with Select component inside core-extension-securityreport
[SONAR-16084] - Update SelectLegacy component with Select component inside sonar-web/apps/background-tasks
[SONAR-16085] - Update SelectLegacy component with Select component inside sonar-web/apps/coding-rules
[SONAR-16086] - Update SelectLegacy component with Select component inside sonar-web/apps/component-measures and /issues
[SONAR-16087] - Update SelectLegacy component with Select component inside sonar-web/apps/permissions, /projectBaseline and /projectActivity
[SONAR-16088] - Update SelectLegacy component with Select component inside sonar-web/apps/projectQualityGate and /projectQualityProfiles
[SONAR-16090] - Update SelectLegacy component with Select component inside sonar-web/apps/quality-profiles
[SONAR-16091] - Update SelectLegacy component with Select component inside sonar-web/apps/security-hotspots, /settings and /users
[SONAR-16092] - Update SelectLegacy component with Select component inside sonar-web/app/ and sonar-web/components/
[SONAR-16113] - Expose Select component to extensions using exposeLibraries
[SONAR-16139] - Drop api/users/set_setting and related db table
[SONAR-16156] - Write IT to validate new OWASP Top 10 2021 edition
[SONAR-16182] - Migrate remaining modules from java 8 to java 11
[SONAR-16199] - Correct styling for input in multiselect and other places

Improvement

[SONAR-10179] - Add clear start/stop logs in the different log files
[SONAR-10930] - Add pagination in WS api/ce/activity
[SONAR-11672] - Address display of issues reported above file level
[SONAR-11718] - Increase the number of returned tags in web service
[SONAR-11767] - Add Server base URL to 'Test Configuration' email
[SONAR-12499] - Displaying all SonarSource standards in Security Category facets
[SONAR-12693] - Fix wording in scanner success message log
[SONAR-12859] - Use new issue icons in pull request decoration
[SONAR-13704] - Activity of a project is not updated when quality gate is back to green after an update on an issue
[SONAR-14721] - Do not follow redirects when interacting with GitHub API
[SONAR-14722] - Do not follow redirects when interacting with Azure DevOps API
[SONAR-14723] - Do not follow redirects when interacting with Bitbucket Server API
[SONAR-14742] - Project import from GitHub, Bitbucket and Azure can clash with existing project key
[SONAR-15554] - Update the Permissions text for Quality Profiles
[SONAR-15695] - Better selection behavior for QG admin delegation
[SONAR-15857] - Measure page should support ascending and descending sorting for rating and quality gate
[SONAR-15919] - Add RuleSetChanged event to events streamed to SonarLint
[SONAR-15921] - Add SonarlintClient connected count to system info file, to telemetry and to prometheus monitoring
[SONAR-15972] - Improve responsiveness of the portfolio page
[SONAR-15975] - Change Portfolio overview wording to be more precise
[SONAR-15979] - Make Rating charts in Portfolio Overview Clickable
[SONAR-15985] - Validate user's permission and deactivated/active status before pushing an event
[SONAR-15989] - Fix typo in archived docs warning
[SONAR-15999] - Remove ability to see list of projects as bubble charts
[SONAR-16008] - Improve the hotspot page UX
[SONAR-16015] - Reorganize the license page to better explain how license is being used
[SONAR-16026] - Retry lock on cached analyzers to run multiple scans on the same machine
[SONAR-16058] - Replace parameter 'sinceLeakPeriod' with 'inNewCodePeriod' for 'api/issues/search'
[SONAR-16059] - Add the "Permission" security category
[SONAR-16064] - Add a new API in SensorContext to indicate possibility to skip unchanged files
[SONAR-16066] - Improve executive PDF report
[SONAR-16069] - Scroll to primary location when clicking on the hotspot primary location
[SONAR-16071] - Hotspots UI improvements
[SONAR-16078] - Tag “Removed” displayed on issue is misleading
[SONAR-16095] - Improve the layout of the "Why is this an issue" button
[SONAR-16096] - Create webservices to get and clear scanner plugin cache
[SONAR-16097] - Add plugin cache to the Sensor API
[SONAR-16098] - Improve SonarC# analysis - minor bug fix
[SONAR-16099] - Improve SonarVB analysis - minor bug fix
[SONAR-16112] - Improve Java analysis: minor fix of FPs
[SONAR-16115] - Store plugin's scanner cache in SonarQube
[SONAR-16119] - Enable documentation page for the IaC analyzer
[SONAR-16124] - Add OWASP Top 10 2021 categories to standards.json
[SONAR-16126] - Add CWE Top 25 2021 data to Security Report PDF
[SONAR-16127] - Update the "Authentication" security category
[SONAR-16128] - Update Security Report PDF with OWASP Top 10 2021 data
[SONAR-16129] - Create new facet in Issues search 'OWASP Top 10 - 2021'
[SONAR-16130] - Create new facet in Rules search 'OWASP Top 10 - 2021'
[SONAR-16141] - Security hotspots status and confirmation modal related improvements
[SONAR-16147] - Allow users to assign acknowledged security hotspot
[SONAR-16152] - Do not follow redirects when interacting with Bitbucket Cloud API
[SONAR-16153] - Bitbucket Cloud integration should support custom connection timeout and read timeout
[SONAR-16155] - Allow Security Hotspots to be filtered by OWASP Top 10 2021
[SONAR-16160] - Improve CFamily analysis
[SONAR-16162] - Enable New Code based on "reference branch" with a scanner parameter
[SONAR-16163] - Process reference branch set by the scanner in the CE
[SONAR-16180] - API should validate email address for portfolio reports
[SONAR-16187] - Analysis cache gets cache from different branch when needed
[SONAR-16188] - Deprecate Common Rules and deactivate them for a set of languages
[SONAR-16196] - Improve PHP analysis: improve S1808 and S6328 regexp rules
[SONAR-16204] - Drop SHA1 legacy hash method
[SONAR-16224] - Improve Java Security analysis: better display messages of vulnerabilities involving dependencies

Documentation

[SONAR-13505] - Document how to use SQ Docker image with self-signed certificates
[SONAR-13574] - Add reference to required Java version in docs
[SONAR-14331] - Update note on Linux file ownership
[SONAR-15892] - Document the behavior of users/search
[SONAR-15976] - Mention Microsoft JDBC driver update in the Release notes of 9.3
[SONAR-16072] - Explain License Usage in relation to Lines Of Code
[SONAR-16125] - Update Security Reports page to mention support for OWASP Top 10 2021
[SONAR-16142] - Add Oracle database requirement for max_string_size
[SONAR-16154] - Fix incorrect explanation about VS xml coverage file format for CFamily
[SONAR-16164] - Document new scanner parameter 'sonar.newCode.referenceBranch'
[SONAR-16186] - Add Oracle SQL query for resetting admin password
[SONAR-16203] - Mention Java 17 support in documentation
[SONAR-16210] - Add instruction to verify which branches to keep before exporting project in Project Move

同时发布的还有 SonarQube LTS 版本 8.9.8 ，详细信息请看这里。

微信关注我们

原文链接：https://www.oschina.net/news/190270/sonarqube-9-4-released

转载内容版权归作者及来源网站所有！

低调大师中文资讯倾力打造互联网数据资讯、行业资源、电子商务、移动互联网、网络营销平台。持续更新报道IT业界、互联网、市场资讯、驱动更新,是最及时权威的产业资讯及硬件资讯报道平台。

人人站 CMSV1.4.0 版即将来袭，会员功能上线，后台增加全新功能

用户的需求便是人人站CMS的动力，在即将到来的版本更新中，我们将工作重点放在了新功能的研发上，新的V1.4.0版本将会上线会员管理相关类功能，并且增加了文章及产品类目的便捷功能，让CMS操作变得更加高效快捷。具体更新内容如下： 1、[新增]会员相关功能：会员投稿、会员中心、会员注册登录（需要模版支持） 2、[新增]后台文章和产品批量换栏目或分类功能 3、[新增]后台文章和产品列表加浏览按钮查看详情 4、[新增]后台文章和产品列表-栏目分类加上超链接预览列表页 5、[新增]文章和产品增加跳转链接功能 6、[修复]管理后台产品参数选择无法保存问题完整更新日志最新版系统后台体验体验账号：test 密码：123456 安装环境要求：操作系统：Linux/Unix/Windows 软件环境：Apache/Nginx/IIS + PHP7.1 及以上 + MySQL 5.6 及以上

2022-04-08

532

fastmybatis 2.2.1 发布，本次更新内如如下：去除spring依赖，项目无需依赖spring也能跑，具体查看fastmybatis-demo/fastmybatis-demo-standard 新增Vert.x示例，具体查看fastmybatis-demo/fastmybatis-demo-vertx 本次更新最大的改动是不需要依赖spring框架，具体用法如下： public static void main(String[] args) { // 启动加载 Fastmybatis.create() // 指定mybatis-config.xml文件classpath路径 .configLocation("mybatis/mybatis-config.xml") // 指定mybatis sql文件classpath目录 .mapperLocations("mybatis/mapper") // 指定Mapper接口package .basePackage("com.myapp.dao") .load(); // 使用mapper TUs...

2022-04-08

717

资源下载

更多资源

Nacos

Nacos /nɑ:kəʊs/ 是 Dynamic Naming and Configuration Service 的首字母简称，一个易于构建 AI Agent 应用的动态服务发现、配置管理和AI智能体管理平台。Nacos 致力于帮助您发现、配置和管理微服务及AI智能体应用。Nacos 提供了一组简单易用的特性集，帮助您快速实现动态服务发现、服务配置、服务元数据、流量管理。Nacos 帮助您更敏捷和容易地构建、交付和管理微服务平台。

Spring

Spring框架（Spring Framework）是由Rod Johnson于2002年提出的开源Java企业级应用框架，旨在通过使用JavaBean替代传统EJB实现方式降低企业级编程开发的复杂性。该框架基于简单性、可测试性和松耦合性设计理念，提供核心容器、应用上下文、数据访问集成等模块，支持整合Hibernate、Struts等第三方框架，其适用范围不仅限于服务器端开发，绝大多数Java应用均可从中受益。

Rocky Linux

Rocky Linux（中文名：洛基）是由Gregory Kurtzer于2020年12月发起的企业级Linux发行版，作为CentOS稳定版停止维护后与RHEL（Red Hat Enterprise Linux）完全兼容的开源替代方案，由社区拥有并管理，支持x86_64、aarch64等架构。其通过重新编译RHEL源代码提供长期稳定性，采用模块化包装和SELinux安全架构，默认包含GNOME桌面环境及XFS文件系统，支持十年生命周期更新。

Sublime Text

Sublime Text具有漂亮的用户界面和强大的功能，例如代码缩略图，Python的插件，代码段等。还可自定义键绑定，菜单和工具栏。Sublime Text 的主要功能包括：拼写检查，书签，完整的 Python API ， Goto 功能，即时项目切换，多选择，多窗口等等。Sublime Text 是一个跨平台的编辑器，同时支持Windows、Linux、Mac OS X等操作系统。