Hi all!
I hope Spring is treating you well. We’ve had time change here in the U.S. and it hasn’t been easy to get up in the dark this week, but the daffodils, forsythia and camellias are in glorious bloom. Watching the dawn from my desk and seeing it light up the daffodils at my mailbox makes it all a little better. 
Speaking of making things better, you do that every week when you take the time to give us product feedback. As always, we are grateful for the feedback we’ve gotten this week, and for every time you give us feedback. So like every week, we want to spend some time acknowledging everyone who prompted interesting discussions and gave us feedback to help us continuously improve.
SonarQube Cloud:
-
@shysteph joined the community to let us know about a “not found” warning for Sonar Architecture configuration - even though she wasn’t trying to use it. Great first post! We’ll get that fixed.
-
@nutmix couldn’t find the docs on blocking PR merge when the Quality Gate fails. Apparently that got lost in the shuffle during some reorganization. Thanks! We’ll get it added back in.
-
@safakgos, @Xavier-Rivadulla_ing, and @Rudy_Moniaga alerted us to a problem with Bitbucket Cloud integration after some WAF changes on our side. Thanks for helping us spot this! It’s already fixed.
SonarQube for IDE:
-
We’re playing Whack-a-mole with problems caused by non-ASCII characters in SonarQube for IntelliJ. Thanks @Yura for pointing out another case. SLCORE-1215
-
@Fiplan let us know Security Hotspots can’t be “Open[ed] in IDE” with Visual Studio. SLVS-1886
-
@FreddySquall found that SonarQube for IntelliJ was trying to compute Git information on disposed modules. SLI-1920
Rule & Languages Improvements:
-
@Ginden gave us a tidy little reproducer for a false positive in
typescript:S3403. JS-619 -
It is an ongoing race to support each and every framework, and in the context of Tailwind,
css:S4662should have more permissive defaults. Thanks @JacobHonore. JS-620 -
Division remainders can be either positive or negative, but
javabugs:S6651doesn’t know that. Thanks @throup. We’re on it. -
java:S6241andjava:S6242support AwsClient methods. But not all of them. SONARJAVA-5400 will add support forsoftware.amazon.awssdk.services.s3.S3CrtAsyncClientBuildermethods. Thanks @TasMot! -
@Dodge sent us an extremely thorough report about problems with
java:S6809, which suggests injecting a Spring service into itself - even though Spring will kill the app if you do that. SONARJAVA-5399 and SONARJAVA-5401
-
@cmullikin and @nelkahn let us know that
java:S2259treats@jakarta.annotation.Nullableand@org.jspecify.annotations.Nullabledifferently, even in the context ofOptional.map. SONARJAVA-5402
Once more, we extend our thanks to everyone mentioned here - and those we may have missed - for their efforts in strengthening this community and enhancing our Sonar products.
Please leave your own shout-outs below – whether for another community member or a SonarSourcer who assisted you this week. If there’s someone you think should be acknowledged in next week’s roundup, don’t hesitate to let us know.
Ann