Sonar Community Roundup, February 1 - February 7

Sonar Updates
1

Hi all,

It’s been a quiet week in Lake Woebegone the community, and a good thing too, since a lot of us are struggling through winter colds. :face_with_thermometer:

Struggling with coughs and fatigue makes stopping for gratitude even more important, and we are grateful for the feedback we’ve gotten this week, and for every time you give us feedback. So like every week, we want to spend some time acknowledging everyone who prompted interesting discussions and gave us feedback to help us continuously improve.

SonarQube Cloud:

  • When a new project is added to your monorepo, it should be easy to add it to SonarCloud too. But @vaklam2 found that that’s not the case if you’re using Bitbucket. We’re on it!

  • @gnsilva1_kpmg helped us realize that an August 2024 change on the GitHub side means some new users can’t be added to SonarQube for Cloud until they verify their email address on the GitHub side. That’s because “managed” enterprise users’ emails are now unverified by default. Thanks for helping us find this important caveat! We’ll get the docs updated.

SonarQube for IDE:

Rule & Language improvements:

  • Unchanged variables should be marked with const, it’s true. Unfortunately, csharpsquid:S3353 doesn’t recognize that @inject doesn’t mark a variable. Thanks for the report, and all your supporting files @Piedone!

  • Define a generic type in a function and you’ll get a false positive from python:S3287 telling you it’s not defined. Thanks for the great report @dave-shawley! SONARPY-2577

  • csharpsquid:S3240 seems to unconditionally recommend the use of null-coalescing operators for conditional variable assignment, even when there are three choices. Thanks @haraman21 for the report, and @Corniel for the assist.

  • We’ll add an exception to csharpsquid:S2360 for Action methods after @Furiphan’s report, and another valuable assist from @Corniel. Thanks!

  • csharpsquid:S3353 doesn’t take ref extension methods into account. Nice catch @eduherminio.

  • @dsc let us know that python:S930 raises a false positive in a @classmethod. Thanks! SONARPY-2595

  • A List of @NonNull elements is not the same as a @NonNull List. But java:S2637 doesn’t recognize that - yet. Thanks for both your patience and your persistence @nelkahn! :joy: SONARJAVA-5315

Once more, we extend our thanks to everyone mentioned here - and those we may have missed - for their efforts in strengthening this community and enhancing our Sonar products.

Please leave your own shout-outs below – whether for another community member or a SonarSourcer who assisted you this week. If there’s someone you think should be acknowledged in next week’s roundup, don’t hesitate to let us know.

 
Ann