Sonar Community Roundup, August 23 - August 29

Sonar Updates
1

Hi all,

Hope everyone’s having a great week! :glowing_star:

As always, we want to take a moment to recognize everyone who sparked interesting discussions and gave us valuable feedback to drive continuous improvement.

SonarQube for IDE:

SonarQube Cloud:

  • The activity editing documentation caused some confusion for @ed.nick. The documentation has been flagged for improvement to better guide users to the right location in the UI! Thanks for telling us.

  • @sdwyer20 encountered 500 errors when trying to enable GitHub member sync. Turns out this was a symptom of a broader issue and a few hours later we merged a fix. Thanks for the report!

  • An API pagination bug was discovered by @pergun, where the GET /api/users/groups endpoint was returning incorrect total counts. Yesterday, we flipped a feature flag that fixed the behavior for now while we fix the bug. Thanks for the report and your patience!

  • What happens to your SonarQube Cloud organization when you update the name of your GitHub Org? Great question—turns out you just have to click a button in your organization administration, but this is documented nowhere. We’ll fix that. Thanks @olli-kauppinen_ACC!

  • @ArminPrieschl found that while trying to configure GitHub integration with GHE.com (GitHub with Data Residency), the API URL was always being marked as invalid. We’ll fix that with SONAR-25730.

Rules & Languages Improvements:

  • A Vue.js analysis gap was spotted by @shanyi-front, where unused variables in the top-level function weren’t being flagged, while nested functions worked correctly. The root scope handling bug has been tracked in JS-845. Nice catch!

  • Interface implementation requirements are clashing with deprecation warnings, as @sithmein pointed out. When implementing a deprecated interface method marked @Deprecated(forRemoval = true), rule java:S5738 incorrectly suggests avoiding it—but Java requires the implementation! SONARJAVA-5751

  • Thanks @ptandler for pointing out that we have two tickets for the same issue on typescript:S3801. We closed the latest as duplicate and we’ll try to work on it soon. :slight_smile:

  • Conflicting floating-point comparison rules created a puzzle for @ivan-igorevich, where direct comparisons trigger java:S1244 but epsilon-based comparisons trigger java:S3518. After providing a detailed reproducer, the team created JAVASE-21. Thanks for the reproducer!

  • ASP.NET Web.config secrets are flying under the radar, as @AlexSV discovered. These generic ASP.NET configuration secrets aren’t currently supported. This has been added to the backlog.

Thank you again to everyone mentioned—and to those we may have missed—for your ongoing contributions in making this community stronger and helping us improve Sonar products.

If you’d like to give a shout-out to someone, whether a community member or a SonarSourcer who helped you, please do so below. And if there’s someone you think we should acknowledge next week, let us know!

2 Likes