Sourced from sonar-java-plugin's releases.

7.14.0.30229

Release notes - SonarJava - Version 7.14

False-Positive

SONARJAVA-4330 Rule S2272: FP on method calls that are not next()

SONARJAVA-4242 SE should handle "booleanValue()" from Boolean wrapper

SONARJAVA-4174 S2259 should not raise an issue when a null variable is passed to Optional.ofNullable

SONARJAVA-4131 Add support of org.springframework.util.StringUtils#isEmpty

Improvement

SONARJAVA-4288 Update Analyzer Commons to 1.27: changes in Regex check and resources loading

SONARJAVA-4220 Update ECJ to 3.30.0

SONARJAVA-3891 Add support of org.apache.commons.lang3.ArrayUtils methods

New Feature

SONARJAVA-4284 Rules support PCI DSS Security Standard

SONARJAVA-4278 Rule S2068: Remove method checks

SONARJAVA-4275 Rule S6437: Credentials should not be hard-coded

Task

SONARJAVA-4332 Update rules metadata

7.13.0.29990

    Release Notes - SonarJava - Version 7.13

... (truncated)

• 9079835 Update to the latest parent pom 63.0.187 (#4161)
• 9865680 SONARJAVA-4332 Update rules metadata (#4160)
• e4154bf SONARJAVA-4330 FP S2272: Should not raise issues in the presence of method ca...
• b201f30 SONARJAVA-4275 S6437: Update rule documentation and infeasibility of quickfix...
• 9162b73 SONARJAVA-4275 S6437 reduce FPs on conditionally assigned and empty secrets (...
• 8e48b88 SONARJAVA-4278 Rule S2068: Remove method checks (#4154)
• 83b9bd6 SONARJAVA-4275 Rule S6437: Credentials should not be hard-coded (#4147)
• fc7606e SONARJAVA-4220 Update to ECJ 3.30
• 72a3180 SONARJAVA-4284 revert behavior of deprecated keys (#4151)
• fdbc579 SONARJAVA-4131 FP in SE related to org.springframework.util.StringUtils#isEmp...
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)