Custom rules 101, update for Sonarqube latest (9.5.0) !?

Hi @anon67236913

The message means that your custom plugin jar contains third-party dependencies embedded as jar files (jar in jar). We want to remove this “feature” because it forces us to create temporary files to extract those jars before loading them.
The replacement is to shade those dependencies (also known as fat jar).

The plugin template you mention is already up to date:

  1. tell the maven-packaging-plugin to skip packaging dependencies
  2. use the maven shade plugin to shade the dependencies
2 Likes