Skip to content

chore(deps): bump sonar.java.version from 8.22.0.41895 to 8.39.0.46279 - #501

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/main/sonar.java.version-8.39.0.46279
Open

chore(deps): bump sonar.java.version from 8.22.0.41895 to 8.39.0.46279#501
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/main/sonar.java.version-8.39.0.46279

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 18, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps sonar.java.version from 8.22.0.41895 to 8.39.0.46279.
Updates org.sonarsource.java:sonar-java-plugin from 8.22.0.41895 to 8.39.0.46279

Release notes

Sourced from org.sonarsource.java:sonar-java-plugin's releases.

8.39.0.46279

Release notes - SonarJava - 8.39

Feature

SONARJAVA-6737 Update RSPEC before 8.39 release SONARJAVA-6741 Create rule S9149: Static methods should not hide methods from superclasses SONARJAVA-6742 Create rule S9146: Apache XML RPC extensions should not be enabled SONARJAVA-6743 Create rule S9147: "NaN" should not be tested for equality using "==" or "!=" SONARJAVA-6744 Create rule S9148: "Float.compare" or "Double.compare" should be used for floating-point comparisons

False Positive

SONARJAVA-6384 FP on S2160 when using Apache commons lang EqualsBuilder.reflectionEquals

Maintenance

SONARJAVA-6738 Prepare next development iteration 8.39.0 SONARJAVA-6751 Update rule metadata SONARJAVA-6752 Implement verifyIssueOnProject in JavaCheckVerifier and modernize MissingPackageInfoCheckTest

8.38.0.46176

Release notes - SonarJava - 8.38

Feature

SONARJAVA-5917 Raise content hash cache misses log messages to debug level SONARJAVA-6686 Implement S2198: Unnecessary mathematical comparisons SONARJAVA-6695 Create rule S9130: Stream read results should be checked for -1 before casting SONARJAVA-6699 Update RSPEC before 8.38 release SONARJAVA-6703 Create rule S9133: Predefined mathematical constants should be used instead of hard-coded approximations SONARJAVA-6704 Create rule S9132: "ScheduledThreadPoolExecutor.setMaximumPoolSize" should not be called

False Positive

SONARJAVA-6696 Improve S8989: should not raise on private methods SONARJAVA-6707 S8975 should not raise in tests SONARJAVA-6711 USER-2405 Fix S3252 false positive for Quarkus Panache entity static methods SONARJAVA-6714 S2638 should not raise on type arguments when overriding a method with @​Nullable return type from a @​NullMarked class

False Negative

SONARJAVA-6713 S2696: false negative when static field write target is wrapped in parentheses SONARJAVA-6716 S8909: False negative on public classes with explicit constructors but no no-arg constructor

Bug

SONARJAVA-5646 Files are incorrectly skipped by incremental analysis when the base branch does not have a cache

Maintenance

SONARJAVA-6430 Centralize Tree.Kind class types SONARJAVA-6431 Centralize Tree.Kind assignment types SONARJAVA-6674 Update SonarSource/sonar-plugin-api monorepo to v13.9.0.4428 SONARJAVA-6677 Update actions/checkout action to v7.0.1 SONARJAVA-6681 Update dependency jdx/mise to v2026.7.11 SONARJAVA-6682 Update astral-sh/setup-uv action to v9 SONARJAVA-6684 Update dependency org.sonarsource.orchestrator:sonar-orchestrator-junit4 to v6.4.0.4572

... (truncated)

Commits
  • e931ac9 SONARJAVA-6752 Implement verifyIssueOnProject in JavaCheckVerifier and modern...
  • c2d3646 SONARJAVA-6751 Update rule metadata (#5918)
  • 5ed58d7 SONARJAVA-6741 Implement new rule S9149: Static methods should not hide metho...
  • 97b8252 SONARJAVA-6743 Implement new rule S9147: "NaN" should not be tested for equal...
  • 4a4b425 Remove autoscan ITs and add withoutSemantic tests (#5870)
  • f4323b8 SONARJAVA-6744 Implement new rule S9148: "Float.compare" or "Double.compare" ...
  • 07e29f8 SONARJAVA-6745 Implement new rule S9146: Apache XML RPC extensions should not...
  • d3006af SONARJAVA-6384 Fix S2160 FP when parent uses EqualsBuilder.reflectionEquals (...
  • eeb8cb2 SONARJAVA-6738 Prepare next development iteration 8.39.0 (#5904)
  • 227d108 SONARJAVA-6736 Remove S6541 from profile (#5903)
  • Additional commits viewable in compare view

Updates org.sonarsource.java:java-checks-testkit from 8.22.0.41895 to 8.39.0.46279

Release notes

Sourced from org.sonarsource.java:java-checks-testkit's releases.

8.39.0.46279

Release notes - SonarJava - 8.39

Feature

SONARJAVA-6737 Update RSPEC before 8.39 release SONARJAVA-6741 Create rule S9149: Static methods should not hide methods from superclasses SONARJAVA-6742 Create rule S9146: Apache XML RPC extensions should not be enabled SONARJAVA-6743 Create rule S9147: "NaN" should not be tested for equality using "==" or "!=" SONARJAVA-6744 Create rule S9148: "Float.compare" or "Double.compare" should be used for floating-point comparisons

False Positive

SONARJAVA-6384 FP on S2160 when using Apache commons lang EqualsBuilder.reflectionEquals

Maintenance

SONARJAVA-6738 Prepare next development iteration 8.39.0 SONARJAVA-6751 Update rule metadata SONARJAVA-6752 Implement verifyIssueOnProject in JavaCheckVerifier and modernize MissingPackageInfoCheckTest

8.38.0.46176

Release notes - SonarJava - 8.38

Feature

SONARJAVA-5917 Raise content hash cache misses log messages to debug level SONARJAVA-6686 Implement S2198: Unnecessary mathematical comparisons SONARJAVA-6695 Create rule S9130: Stream read results should be checked for -1 before casting SONARJAVA-6699 Update RSPEC before 8.38 release SONARJAVA-6703 Create rule S9133: Predefined mathematical constants should be used instead of hard-coded approximations SONARJAVA-6704 Create rule S9132: "ScheduledThreadPoolExecutor.setMaximumPoolSize" should not be called

False Positive

SONARJAVA-6696 Improve S8989: should not raise on private methods SONARJAVA-6707 S8975 should not raise in tests SONARJAVA-6711 USER-2405 Fix S3252 false positive for Quarkus Panache entity static methods SONARJAVA-6714 S2638 should not raise on type arguments when overriding a method with @​Nullable return type from a @​NullMarked class

False Negative

SONARJAVA-6713 S2696: false negative when static field write target is wrapped in parentheses SONARJAVA-6716 S8909: False negative on public classes with explicit constructors but no no-arg constructor

Bug

SONARJAVA-5646 Files are incorrectly skipped by incremental analysis when the base branch does not have a cache

Maintenance

SONARJAVA-6430 Centralize Tree.Kind class types SONARJAVA-6431 Centralize Tree.Kind assignment types SONARJAVA-6674 Update SonarSource/sonar-plugin-api monorepo to v13.9.0.4428 SONARJAVA-6677 Update actions/checkout action to v7.0.1 SONARJAVA-6681 Update dependency jdx/mise to v2026.7.11 SONARJAVA-6682 Update astral-sh/setup-uv action to v9 SONARJAVA-6684 Update dependency org.sonarsource.orchestrator:sonar-orchestrator-junit4 to v6.4.0.4572

... (truncated)

Commits
  • e931ac9 SONARJAVA-6752 Implement verifyIssueOnProject in JavaCheckVerifier and modern...
  • c2d3646 SONARJAVA-6751 Update rule metadata (#5918)
  • 5ed58d7 SONARJAVA-6741 Implement new rule S9149: Static methods should not hide metho...
  • 97b8252 SONARJAVA-6743 Implement new rule S9147: "NaN" should not be tested for equal...
  • 4a4b425 Remove autoscan ITs and add withoutSemantic tests (#5870)
  • f4323b8 SONARJAVA-6744 Implement new rule S9148: "Float.compare" or "Double.compare" ...
  • 07e29f8 SONARJAVA-6745 Implement new rule S9146: Apache XML RPC extensions should not...
  • d3006af SONARJAVA-6384 Fix S2160 FP when parent uses EqualsBuilder.reflectionEquals (...
  • eeb8cb2 SONARJAVA-6738 Prepare next development iteration 8.39.0 (#5904)
  • 227d108 SONARJAVA-6736 Remove S6541 from profile (#5903)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Aug 18, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner August 18, 2026 05:23
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Aug 18, 2026
@dependabot
chore(deps): bump sonar.java.version from 8.22.0.41895 to 8.39.0.46279
694fa0d 
Bumps `sonar.java.version` from 8.22.0.41895 to 8.39.0.46279.

Updates `org.sonarsource.java:sonar-java-plugin` from 8.22.0.41895 to 8.39.0.46279
- [Release notes](https://github.com/SonarSource/sonar-java/releases)
- [Commits](SonarSource/sonar-java@8.22.0.41895...8.39.0.46279)

Updates `org.sonarsource.java:java-checks-testkit` from 8.22.0.41895 to 8.39.0.46279
- [Release notes](https://github.com/SonarSource/sonar-java/releases)
- [Commits](SonarSource/sonar-java@8.22.0.41895...8.39.0.46279)

---
updated-dependencies:
- dependency-name: org.sonarsource.java:java-checks-testkit
  dependency-version: 8.39.0.46279
  dependency-type: direct:development
  update-type: version-update:semver-minor
- dependency-name: org.sonarsource.java:sonar-java-plugin
  dependency-version: 8.39.0.46279
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/maven/main/sonar.java.version-8.39.0.46279 branch from e9a5e6e to 694fa0d Compare August 18, 2026 07:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants