# \#rule-changes

**URL:** https://community.sonarsource.com/tag/rule-changes/356.md

[Latest](https://community.sonarsource.com/latest.md) · [Categories](https://community.sonarsource.com/categories.md) · [Tags](https://community.sonarsource.com/tags.md)

---

## [Package rules changelog strange behaviour](https://community.sonarsource.com/t/package-rules-changelog-strange-behaviour/190353)

<div class="topic-metadata">

**Author:** [@Usinelogicielle](https://community.sonarsource.com/u/Usinelogicielle)\
**Replies:** 6\
**Last updated:** [October 29, 2026, 11:10am UTC](https://community.sonarsource.com/t/package-rules-changelog-strange-behaviour/190353 "2026-10-29T11:10:19Z")

</div>

Hello! Since our last version upgrade of SonarQube to 26.7.0.124771-community, we’ve seen a strange behaviour in the rules changelog of a package (see screenshot below). Basically, there’s multiple blocks of Updated an…

---

## [kotlin:S5612 should adjust its behavior for function with @Composable annotations](https://community.sonarsource.com/t/kotlin-s5612-should-adjust-its-behavior-for-function-with-composable-annotations/148135)

<div class="topic-metadata">

**Author:** [@Qheb](https://community.sonarsource.com/u/Qheb)\
**Replies:** 2\
**Last updated:** [September 5, 2025, 8:18am UTC](https://community.sonarsource.com/t/kotlin-s5612-should-adjust-its-behavior-for-function-with-composable-annotations/148135 "2025-09-05T08:18:30Z")

</div>

What language is this for? Kotlin for Android, with Jetpack Compose Which rule? kotlin:S5612 Lambdas should not have too many lines Are you using SonarQube Server Developer Edition v2025.3.1 (109879) So…

---

## [There is going to be a replace for a deprecated java rule?](https://community.sonarsource.com/t/there-is-going-to-be-a-replace-for-a-deprecated-java-rule/135487)

<div class="topic-metadata">

**Author:** [@frbellido](https://community.sonarsource.com/u/frbellido)\
**Replies:** 1\
**Last updated:** [February 20, 2025, 1:00pm UTC](https://community.sonarsource.com/t/there-is-going-to-be-a-replace-for-a-deprecated-java-rule/135487 "2025-02-20T13:00:03Z")

</div>

With Sonar \* Version 10.4.1, we were using a java rule for “configuring loggers is security-sensitive” - Java:S4792. But the problem is that we realised the rule now is deprecated. So I want to know if its posible, if th…

---

## [Impact assessment before introducing new rule to a quality gate](https://community.sonarsource.com/t/impact-assessment-before-introducing-new-rule-to-a-quality-gate/135151)

<div class="topic-metadata">

**Author:** [@jwain](https://community.sonarsource.com/u/jwain)\
**Replies:** 1\
**Last updated:** [February 14, 2025, 4:12pm UTC](https://community.sonarsource.com/t/impact-assessment-before-introducing-new-rule-to-a-quality-gate/135151 "2025-02-14T16:12:30Z")

</div>

I’m currently using SonarQube Server 10.2, and would like to introduce several new rules to a quality gate. However, before doing this, I’d like to assess the impact of this change. Is there a way to request a report f…

---

## [System user activates deactivated rules](https://community.sonarsource.com/t/system-user-activates-deactivated-rules/113105)

<div class="topic-metadata">

**Author:** [@roberto.gamarra](https://community.sonarsource.com/u/roberto.gamarra)\
**Replies:** 6\
**Last updated:** [April 16, 2024, 5:24pm UTC](https://community.sonarsource.com/t/system-user-activates-deactivated-rules/113105 "2024-04-16T17:24:17Z")

</div>

after sometime, SonarQube’s System user activates back deactivated rules in a extended profile SonarQube: 10.4.0.87286 Edition: Community Date: April 3, 2024 at 8:43 AM User: System Action: Activated Rule: \[Fiel…

---

## [Missing null pointer related rule](https://community.sonarsource.com/t/missing-null-pointer-related-rule/107112)

<div class="topic-metadata">

**Author:** [@prasanna.ravishanker](https://community.sonarsource.com/u/prasanna.ravishanker)\
**Replies:** 1\
**Last updated:** [January 16, 2024, 4:04pm UTC](https://community.sonarsource.com/t/missing-null-pointer-related-rule/107112 "2024-01-16T16:04:43Z")

</div>

Hi Everyone, We recently upgraded sonarQube v8.9.6LTS to 9.9LTS. We are using the SonarQube Community Version 9.9.1 (build 69595) and We see that the below new code is not reporting the possibility of a NullPointer bec…

---

## [Rule c:S868 improvement](https://community.sonarsource.com/t/rule-c-s868-improvement/105341)

<div class="topic-metadata">

**Author:** [@nikola](https://community.sonarsource.com/u/nikola)\
**Replies:** 1\
**Last updated:** [December 4, 2023, 6:45pm UTC](https://community.sonarsource.com/t/rule-c-s868-improvement/105341 "2023-12-04T18:45:23Z")

</div>

Rule ID: c:S868 Rule name: # Operands of “&&” and “||” should be primary (C) or postfix (C++) expressions Is it possible to add configuration to this rule, which parts of this rule are valid and which are not? It is g…

---

## [User friendly way to edit existing rule or add new rule](https://community.sonarsource.com/t/user-friendly-way-to-edit-existing-rule-or-add-new-rule/99669)

<div class="topic-metadata">

**Author:** [@karenlaw](https://community.sonarsource.com/u/karenlaw)\
**Replies:** 2\
**Last updated:** [October 9, 2023, 10:20am UTC](https://community.sonarsource.com/t/user-friendly-way-to-edit-existing-rule-or-add-new-rule/99669 "2023-10-09T10:20:32Z")

</div>

Must-share information (formatted with Markdown): which versions are you using (SonarQube, Scanner, Plugin, and any relevant extension) SonarQube 10.1 how is SonarQube deployed: zip, Docker, Helm Docker what are you …

---

## [How to keep the rules up to date](https://community.sonarsource.com/t/how-to-keep-the-rules-up-to-date/97452)

<div class="topic-metadata">

**Author:** [@Chang](https://community.sonarsource.com/u/Chang)\
**Replies:** 1\
**Last updated:** [August 15, 2023, 8:39am UTC](https://community.sonarsource.com/t/how-to-keep-the-rules-up-to-date/97452 "2023-08-15T08:39:43Z")

</div>

Make sure to tell us: What version are you upgrading from? sonarqube-9.9.0.65466 upgrade to sonarqube-9.9.1.69595 System information (Operating system, Java version, Database provider/version) windows 2022 . sqlserve…

---

## [Allow underscores in PHP variable names (ref. php:S117)](https://community.sonarsource.com/t/allow-underscores-in-php-variable-names-ref-php-s117/91826)

<div class="topic-metadata">

**Author:** [@Sergio\_Carabetta](https://community.sonarsource.com/u/Sergio_Carabetta)\
**Replies:** 2\
**Last updated:** [June 8, 2023, 12:01pm UTC](https://community.sonarsource.com/t/allow-underscores-in-php-variable-names-ref-php-s117/91826 "2023-06-08T12:01:38Z")

</div>

I noticed that the php:S117 rule defines a regex expression that is a subset of what is considered a standard PHP naming convention, by excluding the underscore sign (“\_”) from it. Instead of the current: ^\[a-z\]\[a-zA-Z…

---

## [Allow upgrade rules without upgrading SonarQube itself](https://community.sonarsource.com/t/allow-upgrade-rules-without-upgrading-sonarqube-itself/92029)

<div class="topic-metadata">

**Author:** [@Chien\_Ming\_Lee](https://community.sonarsource.com/u/Chien_Ming_Lee)\
**Replies:** 2\
**Last updated:** [June 6, 2023, 9:43am UTC](https://community.sonarsource.com/t/allow-upgrade-rules-without-upgrading-sonarqube-itself/92029 "2023-06-06T09:43:14Z")

</div>

Our team is evalating if SonarQube can help us to improve code quality. We are now testing version 9.8 and deploy it by zip file (for evaluation purpose). Due to the stability and security reasons, we hope newer rules …

---

## [Deprecated Rules unclarity (C# Unit tests)](https://community.sonarsource.com/t/deprecated-rules-unclarity-c-unit-tests/81584)

<div class="topic-metadata">

**Author:** [@bob-sanders\_valtech](https://community.sonarsource.com/u/bob-sanders_valtech)\
**Replies:** 6\
**Last updated:** [January 25, 2023, 3:03pm UTC](https://community.sonarsource.com/t/deprecated-rules-unclarity-c-unit-tests/81584 "2023-01-25T15:03:33Z")

</div>

Hello, Context I am using an On-premise SonarQube instance and we have recently upgraded to version 9.7.1 (build 62043). Within our Quality Profiles, we see new rules that have been marked as \[DEPRECATED\]. While it is…

---

## [Clarify exceptions to java:S1121](https://community.sonarsource.com/t/clarify-exceptions-to-java-s1121/62665)

<div class="topic-metadata">

**Author:** [@MisterPi](https://community.sonarsource.com/u/MisterPi)\
**Replies:** 6\
**Last updated:** [May 16, 2022, 6:33pm UTC](https://community.sonarsource.com/t/clarify-exceptions-to-java-s1121/62665 "2022-05-16T18:33:48Z")

</div>

On SQ 8.6 (yeah yeah I know) the explanation for rule java:S1121 (assignments within expressions) mentions exceptions: “Assignments in while statement conditions, and assignments enclosed in relational expressions are ig…

---

## [Extenability of S2699? (Tests should include assertions)](https://community.sonarsource.com/t/extenability-of-s2699-tests-should-include-assertions/581)

<div class="topic-metadata">

**Author:** [@TobiX](https://community.sonarsource.com/u/TobiX)\
**Replies:** 6\
**Last updated:** [March 16, 2022, 11:29am UTC](https://community.sonarsource.com/t/extenability-of-s2699-tests-should-include-assertions/581 "2022-03-16T11:29:58Z")

</div>

Hi, (This is sorta followup to Redirecting to Google Groups) Currently, someone needs to extend Sonar-Java whenever S2699 needs to support a new assertion framework or a new feature of an existing assertion framework. …

---

## [Please remove the "clumsy" tag](https://community.sonarsource.com/t/please-remove-the-clumsy-tag/35665)

<div class="topic-metadata">

**Author:** [@StingyJack](https://community.sonarsource.com/u/StingyJack)\
**Replies:** 1\
**Last updated:** [March 15, 2022, 1:45am UTC](https://community.sonarsource.com/t/please-remove-the-clumsy-tag/35665 "2022-03-15T01:45:07Z")

</div>

A rule violation is neither awkward or nor uncoordinated, its just a violation. A person can be clumsy (this is subjective, depending on your point of view). Using a word thats most commonly applied to humans as a catego…

---

## [RSPEC-3065 need detect final variables from out class](https://community.sonarsource.com/t/rspec-3065-need-detect-final-variables-from-out-class/55131)

<div class="topic-metadata">

**Author:** [@Belle](https://community.sonarsource.com/u/Belle)\
**Replies:** 1\
**Last updated:** [December 21, 2021, 5:35pm UTC](https://community.sonarsource.com/t/rspec-3065-need-detect-final-variables-from-out-class/55131 "2021-12-21T17:35:20Z")

</div>

Hi, I think the rule RSPEC-3065 should detect final fields from out class. Please refer to the following minimized sample and this is a false negative. SonarQube should report a warning at line 6 because the Min and Max …
