1
0
mirror of https://github.com/mc1arke/sonarqube-community-branch-plugin.git synced 2025-02-21 19:20:09 +02:00

344 Commits

Author SHA1 Message Date
dependabot[bot]
faeebb1b6a Bump com.fasterxml.jackson.datatype:jackson-datatype-jsr310
Bumps com.fasterxml.jackson.datatype:jackson-datatype-jsr310 from 2.17.2 to 2.18.1.

---
updated-dependencies:
- dependency-name: com.fasterxml.jackson.datatype:jackson-datatype-jsr310
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-11-11 16:34:17 +00:00
dependabot[bot]
474553bfff Bump org.wiremock:wiremock from 3.9.1 to 3.9.2
Bumps [org.wiremock:wiremock](https://github.com/wiremock/wiremock) from 3.9.1 to 3.9.2.
- [Release notes](https://github.com/wiremock/wiremock/releases)
- [Commits](https://github.com/wiremock/wiremock/compare/3.9.1...3.9.2)

---
updated-dependencies:
- dependency-name: org.wiremock:wiremock
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-11-11 16:31:19 +00:00
Jacky Lam
8cfa03aef5
Update helm chart example not to use deprecated fields
Helm chart values jvmOpts and jvmCeOpts were deprecated in v8.3.1.
2024-11-11 16:25:43 +00:00
Michael Clarke
a228d9f7ef #972: Ensure a consistent timezone is used in comparisons
The service code uses DateUtils to convert a long into a String format,
which DateUtils converting the long to an instant, then an
OffsetDateTime before passing this through a formatter, using the local
timezone during the OffsetDateTime conversion.
As the test was using a pre-created String based on the UTC timezone,
the test does not correctly compare the values when being executed in a
different timezone. To overcome this, the test has been altered to use
the same DateUtils methods to convert from the long to a String, thereby
ensuring the same timezone handling is using in both test and live code.
2024-10-05 12:19:50 +01:00
Michael Clarke
5932956c29 Return to SNAPSHOT version post release 2024-09-07 18:19:57 +01:00
GitHub
ba87ec669f [Gradle Release Plugin] - new version commit: '1.22.1'. 2024-09-07 17:05:23 +00:00
Michael Clarke
44945374bd Initiate release 1.22.0 1.22.0 2024-09-07 18:00:51 +01:00
Michael Clarke
fde1c7770c #958: Remove group assignment during container build
The sonarqube images no longer create a sonarqube group for the
sonarqube user to be placed into, instead they put the sonarqube user in
the root group. To prevent the plugin builds failing when attempting to
set the plugin ownership to a group that doesn't exist, the `chown`
command is being altered to only set the user ownership, not the
associated group.
2024-09-07 17:52:12 +01:00
dependabot[bot]
0648ca45c7 Bump org.junit:junit-bom from 5.10.3 to 5.11.0
Bumps [org.junit:junit-bom](https://github.com/junit-team/junit5) from 5.10.3 to 5.11.0.
- [Release notes](https://github.com/junit-team/junit5/releases)
- [Commits](https://github.com/junit-team/junit5/compare/r5.10.3...r5.11.0)

---
updated-dependencies:
- dependency-name: org.junit:junit-bom
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-09-06 19:12:11 +01:00
dependabot[bot]
10ee795c56 Bump org.wiremock:wiremock from 3.8.0 to 3.9.1
Bumps [org.wiremock:wiremock](https://github.com/wiremock/wiremock) from 3.8.0 to 3.9.1.
- [Release notes](https://github.com/wiremock/wiremock/releases)
- [Commits](https://github.com/wiremock/wiremock/compare/3.8.0...3.9.1)

---
updated-dependencies:
- dependency-name: org.wiremock:wiremock
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-09-06 19:10:36 +01:00
dependabot[bot]
eb96c9fe70 Bump org.mockito:mockito-core from 5.12.0 to 5.13.0
Bumps [org.mockito:mockito-core](https://github.com/mockito/mockito) from 5.12.0 to 5.13.0.
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](https://github.com/mockito/mockito/compare/v5.12.0...v5.13.0)

---
updated-dependencies:
- dependency-name: org.mockito:mockito-core
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-09-06 19:05:58 +01:00
Michael Clarke
7fb5a568b9 #934: Use static report key for non-monorepo Bitbucket decoration
The Bitbucket decoration is currently using the project key to create
the analysis report key, but the Sonarqube documentation states this
should be a static value across all projects. To ensure that the
Bitbucket `Required report` configuration can be created as per the
guidance in Sonarqube documentation, the static key is being used where
the repository has not been set as a monorepo.
2024-09-06 19:05:42 +01:00
Michael Clarke
405c894f22 #909: Use default branch as Pull Request base when target does not exist
The resolution of Pull Request details currently uses the project
default branch when a pull request is analysed without specifying a
target branch. However, when a target branch is specified, the plugin
expects that branch to exist and throws an exception if the target
branch is not found. To overcome this, the target branch is being
resolved to the default branch where no target branch is specified or
the requested target branch does not exist. As the API used to gather
branch information does not return PULL_REQUEST details, the result of
this searching is that a pull request will either target a branch from
the main branch, or target the main branch, there is no further nesting
or pull requests and branches.
2024-09-06 19:03:59 +01:00
Michael Clarke
6d328056a4 #959: Ensure multi-line string are enclosed in blockquotes
The Github Cloud API now returns an error about the input message being
malformed, seemingly due to a change in how new lines in messages are
being handled. As the use of blockquotes around multi-line messages
appears to continue to work, the analysis messages are being wrapped in
blockquotes rather than double-quotes where they contain newline
characters. This requires an interim measure of cloning the InputObject
class from the nodes library to alter the String comparison and wrapping
since the library is no longer maintained.
2024-09-06 18:59:34 +01:00
Michael Clarke
92f74f7e07 #945: Gather statistics for issues fixed in a pull request
Sonarqube currently reports a fixed issues metric for pull requests, but
the plugin isn't providing the data to allow that value to be
calculated. To resolve this an additional IssueVisitor has been
introduced that compares the issues from the target branch with the
findings on the source branch and finds any target code blocks that no
longer exists - implying the issue line has been removed - or any code
that still exists but is now reporting the issue as fixed, and reports
them to the PullRequestFixedIssuesRepository which is used within
Sonarqube to gather the count of issues fixed in the current analysis.
2024-08-18 13:37:22 +01:00
Michael Clarke
c9ff809107 #940: Use correct component IDs when extracting analysis date
The component ID was being used to create a map of analysis dates to
items, but the Pull Request's component ID did not map into this item,
so the Pull Request web service was always returning the analysis date
as empty. The service has been altered to use the root component ID as
was used in the search to ensure the IDs align.
2024-08-11 21:17:51 +01:00
Michael Clarke
137e8e66e1 #715: Handle duplication information not being present
Where Sonarqube does not have duplication information recorded on a
branch, such as there being no code to analyse, the duplication
information may be null. THe plugin is being altered to show this as a
`0` rather than throwing an exception when trying to format the missing
value.
2024-08-11 16:59:20 +01:00
Michael Clarke
6d7320cecb Return to SNAPSHOT version post release 2024-08-11 16:02:49 +01:00
GitHub
dc77c262fe [Gradle Release Plugin] - new version commit: '1.21.1'. 2024-08-11 13:40:06 +00:00
Michael Clarke
43c5421b81 Initiate release 1.21.0 1.21.0 2024-08-11 14:38:32 +01:00
nyyu
757a33e7a3 #926: Update to SonarQube 10.6 2024-08-11 14:31:16 +01:00
Michael Clarke
fce27c89b3 Return to SNAPSHOT version post release 2024-08-11 14:17:32 +01:00
GitHub
db365586bb [Gradle Release Plugin] - new version commit: '1.20.1'. 2024-08-11 12:57:54 +00:00
Michael Clarke
0b3984e6e5 Initiate release 1.20.0 1.20.0 2024-08-11 13:56:21 +01:00
Michael Clarke
182911d6d6 Upgrade to the latest Gradle version
Bumps to Gradle 8.9. Includes moving to the `Jammy` JDK Docker image
rather than the `Alpine` image to allow building on Arm architectures.
2024-08-11 12:16:24 +01:00
Dennis
c5a5a7308c SonarQube 10.5 compatibility 2024-08-11 09:03:20 +01:00
Mykola Rybak
9ec99e0fdf Fix detection of previous PR annotation comments
MarkdownFormatterFactory uses System.lineSeparator() as the end-of-line
character for annotation comments.

GraphqlGithubClient.postSummaryComment(), however, uses hardcoded \r\n
as end-of-line character, so it isn't able to match legitimate comments
if SonarQube is not running on Windows.

This change updates GraphqlGithubClient to also use system end-of-line
char.
2024-08-11 08:57:56 +01:00
dependabot[bot]
6e50df12ff Bump org.assertj:assertj-core from 3.25.3 to 3.26.3
Bumps [org.assertj:assertj-core](https://github.com/assertj/assertj) from 3.25.3 to 3.26.3.
- [Release notes](https://github.com/assertj/assertj/releases)
- [Commits](https://github.com/assertj/assertj/compare/assertj-build-3.25.3...assertj-build-3.26.3)

---
updated-dependencies:
- dependency-name: org.assertj:assertj-core
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-10 20:18:29 +01:00
dependabot[bot]
d3a3df886c Bump com.fasterxml.jackson.datatype:jackson-datatype-jsr310
Bumps com.fasterxml.jackson.datatype:jackson-datatype-jsr310 from 2.17.0 to 2.17.2.

---
updated-dependencies:
- dependency-name: com.fasterxml.jackson.datatype:jackson-datatype-jsr310
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-10 20:13:34 +01:00
dependabot[bot]
d76e1b4ca4 Bump org.wiremock:wiremock from 3.5.2 to 3.8.0
Bumps [org.wiremock:wiremock](https://github.com/wiremock/wiremock) from 3.5.2 to 3.8.0.
- [Release notes](https://github.com/wiremock/wiremock/releases)
- [Commits](https://github.com/wiremock/wiremock/compare/3.5.2...3.8.0)

---
updated-dependencies:
- dependency-name: org.wiremock:wiremock
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-10 20:11:53 +01:00
dependabot[bot]
c850433236 Bump org.junit:junit-bom from 5.10.2 to 5.10.3
Bumps [org.junit:junit-bom](https://github.com/junit-team/junit5) from 5.10.2 to 5.10.3.
- [Release notes](https://github.com/junit-team/junit5/releases)
- [Commits](https://github.com/junit-team/junit5/compare/r5.10.2...r5.10.3)

---
updated-dependencies:
- dependency-name: org.junit:junit-bom
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-10 20:11:10 +01:00
dependabot[bot]
1d0cd64c33 Bump org.mockito:mockito-core from 5.11.0 to 5.12.0
Bumps [org.mockito:mockito-core](https://github.com/mockito/mockito) from 5.11.0 to 5.12.0.
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](https://github.com/mockito/mockito/compare/v5.11.0...v5.12.0)

---
updated-dependencies:
- dependency-name: org.mockito:mockito-core
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-10 20:05:55 +01:00
Michael Clarke
a7ca8b6092 Update versions table with latest release 2024-08-10 19:56:43 +01:00
Michael Clarke
079b0d738c Return to SNAPSHOT version post release 2024-08-10 19:45:45 +01:00
GitHub
34813eb83f [Gradle Release Plugin] - new version commit: '1.20.1'. 2024-08-10 18:04:18 +00:00
Michael Clarke
eb3811ba9f Return to SNAPSHOT version post release 2024-08-10 19:02:33 +01:00
GitHub
425db80a6b [Gradle Release Plugin] - new version commit: '1.19.1'. 2024-04-08 10:16:13 +00:00
Michael Clarke
3353612233 Initiate release 1.19.0 1.19.0 2024-04-08 11:14:45 +01:00
Mykola Rybak
929154b68e #870: Update to SonarQube 10.4
Updates to the latest Sonarqube minor version, including changes
to the Github decorator to handle changes in the JTW library method
signatures inherited from Sonarqube core, and test only changes to
the Class Loader code built into Sonarqube.
2024-04-08 10:58:03 +01:00
dependabot[bot]
0901b66c9d Bump org.wiremock:wiremock from 3.4.2 to 3.5.2
Bumps [org.wiremock:wiremock](https://github.com/wiremock/wiremock) from 3.4.2 to 3.5.2.
- [Release notes](https://github.com/wiremock/wiremock/releases)
- [Commits](https://github.com/wiremock/wiremock/compare/3.4.2...3.5.2)

---
updated-dependencies:
- dependency-name: org.wiremock:wiremock
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-04-06 13:04:01 +01:00
Daniel Gut
8f014bc970
#785: Only minimise Github summary comments with same project key
The Github decorator was not checking the project key listed against a summary
comment so was minimising all summary comments when performing multiple
decorations against a mono-repository. To overcome this, the contents of the
summary comments are being retrieved and only the ones with a project key
matching the current project are being minimised during decoration.
2024-04-06 12:48:57 +01:00
Norbert Kelemen
e039e72fb3
#558: Use PNG images in generated reports
Some email clients block the loading of SVG images,
resulting in the summary reports not displaying 
cleanly. PNG equivalents of those images has been
generated and the report generation switched to use
them. The old SVG images have been retained to 
ensure that existing reports continue to render
where possible.
2024-03-16 13:39:09 +00:00
dependabot[bot]
2ddc5a7221 Bump org.mockito:mockito-core from 5.10.0 to 5.11.0
Bumps [org.mockito:mockito-core](https://github.com/mockito/mockito) from 5.10.0 to 5.11.0.
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](https://github.com/mockito/mockito/compare/v5.10.0...v5.11.0)

---
updated-dependencies:
- dependency-name: org.mockito:mockito-core
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-03-16 13:34:09 +00:00
dependabot[bot]
c9f000a789 Bump softprops/action-gh-release from 1 to 2
Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release) from 1 to 2.
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](https://github.com/softprops/action-gh-release/compare/v1...v2)

---
updated-dependencies:
- dependency-name: softprops/action-gh-release
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-03-16 13:32:52 +00:00
dependabot[bot]
564094ec7f Bump com.fasterxml.jackson.datatype:jackson-datatype-jsr310
Bumps com.fasterxml.jackson.datatype:jackson-datatype-jsr310 from 2.16.1 to 2.17.0.

---
updated-dependencies:
- dependency-name: com.fasterxml.jackson.datatype:jackson-datatype-jsr310
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-03-16 13:32:13 +00:00
dependabot[bot]
895a89d751 Bump org.assertj:assertj-core from 3.25.1 to 3.25.3
Bumps [org.assertj:assertj-core](https://github.com/assertj/assertj) from 3.25.1 to 3.25.3.
- [Release notes](https://github.com/assertj/assertj/releases)
- [Commits](https://github.com/assertj/assertj/compare/assertj-build-3.25.1...assertj-build-3.25.3)

---
updated-dependencies:
- dependency-name: org.assertj:assertj-core
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-02-25 13:28:44 +00:00
dependabot[bot]
0d11e20a9d Bump org.junit:junit-bom from 5.10.1 to 5.10.2
Bumps [org.junit:junit-bom](https://github.com/junit-team/junit5) from 5.10.1 to 5.10.2.
- [Release notes](https://github.com/junit-team/junit5/releases)
- [Commits](https://github.com/junit-team/junit5/compare/r5.10.1...r5.10.2)

---
updated-dependencies:
- dependency-name: org.junit:junit-bom
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-02-25 13:17:20 +00:00
dependabot[bot]
f361eca641 Bump org.wiremock:wiremock from 3.3.1 to 3.4.2
Bumps [org.wiremock:wiremock](https://github.com/wiremock/wiremock) from 3.3.1 to 3.4.2.
- [Release notes](https://github.com/wiremock/wiremock/releases)
- [Commits](https://github.com/wiremock/wiremock/compare/3.3.1...3.4.2)

---
updated-dependencies:
- dependency-name: org.wiremock:wiremock
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-02-25 13:16:50 +00:00
dependabot[bot]
84914f68d6 Bump org.mockito:mockito-core from 5.8.0 to 5.10.0
Bumps [org.mockito:mockito-core](https://github.com/mockito/mockito) from 5.8.0 to 5.10.0.
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](https://github.com/mockito/mockito/compare/v5.8.0...v5.10.0)

---
updated-dependencies:
- dependency-name: org.mockito:mockito-core
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-02-25 13:12:09 +00:00
dependabot[bot]
cc89179150 Bump actions/cache from 3 to 4
Bumps [actions/cache](https://github.com/actions/cache) from 3 to 4.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-02-25 13:11:44 +00:00