Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

build(deps): bump org.sonarsource.java:java-frontend from 7.21.0.31796 to 7.24.0.32100 #92

Merged
merged 4 commits into from
Aug 25, 2023
Merged

build(deps): bump org.sonarsource.java:java-frontend from 7.21.0.31796 to 7.24.0.32100 #92

merged 4 commits into from
Aug 25, 2023

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Aug 21, 2023

Bumps org.sonarsource.java:java-frontend from 7.21.0.31796 to 7.24.0.32100.

Release notes

Sourced from org.sonarsource.java:java-frontend's releases.

7.24.0.32100

Release notes - SonarJava - 7.24

Documentation

SONARJAVA-4463 Add significant example to S2589

SONARJAVA-4495 LayC: review and update as appropriate SonarWay rules

SONARJAVA-4578 LaYC: review and update as appropriate SonarWay rules (loops and iterators)

False-Positive

SONARJAVA-4478 FP for S1948 on annotation "javax.annotation.Resource"

SONARJAVA-4563 S1258: Add "lombok.Builder" to excluded annotations list

False Negative

SONARJAVA-4503 FN on rule S2140 on random floating point numbers cast to long

Task

SONARJAVA-4585 Update rules metadata

Improvement

SONARJAVA-4509 S2438: Provide an actionable issue message

SONARJAVA-4559 Provide a list of impacted files when displaying DEBUG log of unresolved imports/types

SONARJAVA-4574 Issue message of S106 can be more precise and do not need the `or` section

7.23.0.32023

Release notes - SonarJava - 7.23

Bug

SONARJAVA-4477 S1125 quickfix breaking compilation with instanceof

False-Positive

SONARJAVA-1186 Indentation Check (S1120): Block in case of switch statements are not taken into account

SONARJAVA-4007 FP in S1120 with switch expressions

SONARJAVA-4401 FP on Rule S1120 (indentation checking) regarding switch blocks

SONARJAVA-4411 FP S1075 Regex or Pattern are not hardcoded URI

... (truncated)

Commits
  • c39dafc SONARJAVA-4585 Update rules metadata
  • 2bc477a SONARJAVA-4463 S2589: Fix typo and formatting in code examples (#4458)
  • 4a34e3b SONARJAVA-4563 update rule S1258 documentation (#4455)
  • adff249 SONARJAVA-4463 Add significant example to S2589 (#4456)
  • 0b49d8c SONARJAVA-4559 Provide a list of impacted files when displaying DEBUG log of ...
  • 4855fba SONARJAVA-4478 S1948 does not raise on fields annotated with @Resource (#4453)
  • 598f1af SONARJAVA-4563 S1258 does not raise on fields annotated with @​Builder (#4454)
  • cf5a4e2 SONARJAVA-4509 Update S2438's issue message to be more actionable (#4451)
  • ecc7fed SONARJAVA-4503 S2140 raises issue when casting random floating point number t...
  • 4a2f83f SONARJAVA-4585 Update rules metadata (#4449)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot
build(deps): bump org.sonarsource.java:java-frontend
17800b4 
Bumps [org.sonarsource.java:java-frontend](https://github.com/SonarSource/sonar-java) from 7.21.0.31796 to 7.24.0.32100.
- [Release notes](https://github.com/SonarSource/sonar-java/releases)
- [Commits](SonarSource/sonar-java@7.21.0.31796...7.24.0.32100)

---
updated-dependencies:
- dependency-name: org.sonarsource.java:java-frontend
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Aug 21, 2023
@dependabot dependabot bot mentioned this pull request Aug 21, 2023
Closed
@Leibnizhu Leibnizhu merged commit 886fd03 into master Aug 25, 2023
1 check passed
@dependabot dependabot bot deleted the dependabot/maven/org.sonarsource.java-java-frontend-7.24.0.32100 branch August 25, 2023 08:07
Leibnizhu added a commit that referenced this pull request Aug 25, 2023
@dependabot @Leibnizhu
build(deps): bump org.sonarsource.java:java-frontend from 7.21.0.3179…
89f348e 
…6 to 7.24.0.32100 (#92)

* build(deps): bump org.sonarsource.java:java-frontend

Bumps [org.sonarsource.java:java-frontend](https://github.com/SonarSource/sonar-java) from 7.21.0.31796 to 7.24.0.32100.
- [Release notes](https://github.com/SonarSource/sonar-java/releases)
- [Commits](SonarSource/sonar-java@7.21.0.31796...7.24.0.32100)

---
updated-dependencies:
- dependency-name: org.sonarsource.java:java-frontend
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* fix: 单测错误

* fix: JDK版本

* fix: 允许build

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Leibniz.Hu <leibnizhu@gmail.com>
Leibnizhu added a commit that referenced this pull request Aug 25, 2023
@dependabot @Leibnizhu
build(deps-dev): bump org.apache.commons:commons-lang3 from 3.12.0 to…
15f8292 
… 3.13.0 (#89)

* build(deps-dev): bump org.apache.commons:commons-lang3

Bumps org.apache.commons:commons-lang3 from 3.12.0 to 3.13.0.

---
updated-dependencies:
- dependency-name: org.apache.commons:commons-lang3
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* build(deps): bump org.sonarsource.java:java-frontend from 7.21.0.31796 to 7.24.0.32100 (#92)

* build(deps): bump org.sonarsource.java:java-frontend

Bumps [org.sonarsource.java:java-frontend](https://github.com/SonarSource/sonar-java) from 7.21.0.31796 to 7.24.0.32100.
- [Release notes](https://github.com/SonarSource/sonar-java/releases)
- [Commits](SonarSource/sonar-java@7.21.0.31796...7.24.0.32100)

---
updated-dependencies:
- dependency-name: org.sonarsource.java:java-frontend
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* fix: 单测错误

* fix: JDK版本

* fix: 允许build

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Leibniz.Hu <leibnizhu@gmail.com>

* build(deps): bump com.google.guava:guava from 32.1.1-jre to 32.1.2-jre (#90)

Bumps [com.google.guava:guava](https://github.com/google/guava) from 32.1.1-jre to 32.1.2-jre.
- [Release notes](https://github.com/google/guava/releases)
- [Commits](https://github.com/google/guava/commits)

---
updated-dependencies:
- dependency-name: com.google.guava:guava
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* build(deps-dev): bump org.junit.jupiter:junit-jupiter (#87)

Bumps [org.junit.jupiter:junit-jupiter](https://github.com/junit-team/junit5) from 5.9.3 to 5.10.0.
- [Release notes](https://github.com/junit-team/junit5/releases)
- [Commits](junit-team/junit5@r5.9.3...r5.10.0)

---
updated-dependencies:
- dependency-name: org.junit.jupiter:junit-jupiter
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* build(deps-dev): bump org.mockito:mockito-core from 5.4.0 to 5.5.0 (#93)

Bumps [org.mockito:mockito-core](https://github.com/mockito/mockito) from 5.4.0 to 5.5.0.
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](mockito/mockito@v5.4.0...v5.5.0)

---
updated-dependencies:
- dependency-name: org.mockito:mockito-core
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* build(deps-dev): bump org.junit.jupiter:junit-jupiter (#87)

Bumps [org.junit.jupiter:junit-jupiter](https://github.com/junit-team/junit5) from 5.9.3 to 5.10.0.
- [Release notes](https://github.com/junit-team/junit5/releases)
- [Commits](junit-team/junit5@r5.9.3...r5.10.0)

---
updated-dependencies:
- dependency-name: org.junit.jupiter:junit-jupiter
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* build(deps-dev): bump org.mockito:mockito-core from 5.4.0 to 5.5.0 (#93)

Bumps [org.mockito:mockito-core](https://github.com/mockito/mockito) from 5.4.0 to 5.5.0.
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](mockito/mockito@v5.4.0...v5.5.0)

---
updated-dependencies:
- dependency-name: org.mockito:mockito-core
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Leibniz.Hu <leibnizhu@gmail.com>
Leibnizhu added a commit that referenced this pull request Aug 25, 2023
@dependabot @Leibnizhu
build(deps): bump org.sonarsource.java:java-frontend from 7.21.0.3179…
519758d 
…6 to 7.24.0.32100 (#92)

* build(deps): bump org.sonarsource.java:java-frontend

Bumps [org.sonarsource.java:java-frontend](https://github.com/SonarSource/sonar-java) from 7.21.0.31796 to 7.24.0.32100.
- [Release notes](https://github.com/SonarSource/sonar-java/releases)
- [Commits](SonarSource/sonar-java@7.21.0.31796...7.24.0.32100)

---
updated-dependencies:
- dependency-name: org.sonarsource.java:java-frontend
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* fix: 单测错误

* fix: JDK版本

* fix: 允许build

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Leibniz.Hu <leibnizhu@gmail.com>
Leibnizhu added a commit that referenced this pull request Aug 25, 2023
@dependabot @Leibnizhu
build(deps): bump org.apache.maven.plugins:maven-enforcer-plugin from…
c7fed9b 
… 3.3.0 to 3.4.0 (#94)

* build(deps): bump org.apache.maven.plugins:maven-enforcer-plugin

Bumps [org.apache.maven.plugins:maven-enforcer-plugin](https://github.com/apache/maven-enforcer) from 3.3.0 to 3.4.0.
- [Release notes](https://github.com/apache/maven-enforcer/releases)
- [Commits](apache/maven-enforcer@enforcer-3.3.0...enforcer-3.4.0)

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-enforcer-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* build(deps): bump org.sonarsource.java:java-frontend from 7.21.0.31796 to 7.24.0.32100 (#92)

* build(deps): bump org.sonarsource.java:java-frontend

Bumps [org.sonarsource.java:java-frontend](https://github.com/SonarSource/sonar-java) from 7.21.0.31796 to 7.24.0.32100.
- [Release notes](https://github.com/SonarSource/sonar-java/releases)
- [Commits](SonarSource/sonar-java@7.21.0.31796...7.24.0.32100)

---
updated-dependencies:
- dependency-name: org.sonarsource.java:java-frontend
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* fix: 单测错误

* fix: JDK版本

* fix: 允许build

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Leibniz.Hu <leibnizhu@gmail.com>

* build(deps): bump com.google.guava:guava from 32.1.1-jre to 32.1.2-jre (#90)

Bumps [com.google.guava:guava](https://github.com/google/guava) from 32.1.1-jre to 32.1.2-jre.
- [Release notes](https://github.com/google/guava/releases)
- [Commits](https://github.com/google/guava/commits)

---
updated-dependencies:
- dependency-name: com.google.guava:guava
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* build(deps-dev): bump org.junit.jupiter:junit-jupiter (#87)

Bumps [org.junit.jupiter:junit-jupiter](https://github.com/junit-team/junit5) from 5.9.3 to 5.10.0.
- [Release notes](https://github.com/junit-team/junit5/releases)
- [Commits](junit-team/junit5@r5.9.3...r5.10.0)

---
updated-dependencies:
- dependency-name: org.junit.jupiter:junit-jupiter
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* build(deps-dev): bump org.mockito:mockito-core from 5.4.0 to 5.5.0 (#93)

Bumps [org.mockito:mockito-core](https://github.com/mockito/mockito) from 5.4.0 to 5.5.0.
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](mockito/mockito@v5.4.0...v5.5.0)

---
updated-dependencies:
- dependency-name: org.mockito:mockito-core
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Leibniz.Hu <leibnizhu@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@Leibnizhu