Hi all,
What a week! Posting this is one of the last things I’m doing before I head off to the Irish countryside tonight to celebrate a dear friend’s 40th birthday. 
As always, we want to take a moment to recognize everyone who sparked interesting discussions and gave us valuable feedback to drive continuous improvement.
SonarQube Server & Community Build:
- AWS RDS IAM authentication gained some traction when @taktakpeops submitted a PR to support AWS JDBC drivers. After review, SONAR-25887 was created to properly assess the change. Thanks for the contribution!
SonarQube Cloud:
-
Code coverage mysteriously dropped to 0% for TypeScript projects starting September 22nd, as @anthony-nhs reported. At the same time, ESLint report imports stopped working on the same date, as @lrozenblyum discovered. It turns out that a change we deployed that day had unexpected side-effects for multi-module projects. We’ve reverted the change and we’re determining next steps. Thanks for reporting this so quickly.
-
Automatic Analysis for .NET projects is behaving badly when faced with a faulty package on Nuget, which led to an analysis failure for @HaroonSaid. We’ve identified a fix to prevent this from failing the analysis completely. Thanks for the report!
-
Our documentation could do a better job describing PR Housekeeping. Thanks for the nudge @MRV!
SonarQube for IDE:
-
Performance dramatically degraded with version 11.13 of SonarQube for Eclipse for @dandoy, who discovered this when analysis time jumped from 10 to 20+ minutes. After extensive investigation with multiple versions, the team identified a regression and created SLCORE-1658 with a fix on the way. Thank you so much for all your help testing!
-
Over in VS Code land, inline indicators are interfering with Python indentation visibility, as @gchappel told us. We created SLVSCODE-1369 for UX improvements around issue decorations. Good feedback!
Rule and Languages Improvements:
-
java:S2097doesn’t understand JPA Buddy-style equals methods with Hibernate proxy handling, as @kim.martin found. The rule missed the instanceof pattern used for type checking. SONARJAVA-5765 was created! Thanks! -
C# null suppression operator isn’t honored for value types, as @carlossus reported.
csharpsquid:S3655should respect the ! operator for nullable value types like float?. Added to the backlog! Thanks! -
Multiple false positives for .NET analysis were reported by @dalestan:
csharpsquid:S1172with method parameters in local functions,csharpsquid:S1116after labels, andcsharpsquid:S4275when overriding field-backed properties. All confirmed as false positives with tickets created, updated, or reprioritized! Great job!
Scanners:
-
Scanner authentication failures aren’t failing .NET builds soon enough, as @damienbod and @rufer7 discovered. The solution requires using the
pwshshell with$ErrorActionPreference = "Stop"and$PSNativeCommandUseErrorActionPreference = $true. We should update our analysis tutorials, and we will! Thanks for the report. -
The
project_rootparameter stopped working in SonarQube Cloud’s CircleCI Orb, as @akarapatis reported. The regression was quickly fixed and released in v3.0.1. Thanks for telling us!
Thank you again to everyone mentioned—and to those we may have missed—for your ongoing contributions in making this community stronger and helping us improve Sonar products.
If you’d like to give a shout-out to someone, whether a community member or a SonarSourcer who helped you, please do so below. And if there’s someone you think we should acknowledge next week, let us know!