squid:S2095 should ignore org.apache.commons.io.output.ByteArrayOutputStream

Classes org.apache.commons.io.output.ByteArrayOutputStream and org.apache.commons.io.output.UnsynchronizedByteArrayOutputStream comes from Apache commons-io
it is similar to java.io.ByteArrayOutputStream.
close method has empty implementation.

So should be also ignored by rule.

Hello @slawekjaranowski

Indeed, these two classes should be ignored by default. Ticket created: SONARJAVA-3953.

In the meantime, you can use the rule parameters in order to remove the false positives.