Skip to content

Releases: SonarSource/sonar-scanner-maven

5.2.0.4988

29 Aug 09:03
ce7b226

Choose a tag to compare

Release notes - Sonar Scanner for Maven - 5.2

New Feature

SCANMAVEN-296 Include github actions folder in the scan

Task

SCANMAVEN-286 Update Slack notification in .github/workflows/slack_notify.yml

SCANMAVEN-287 Bump orchestrator to version 5.5 or greater

SCANMAVEN-294 Update sonar-scanner-java-library to 3.4.0.514

SCANMAVEN-298 Populate name in pom.xml

SCANMAVEN-299 Exclude tests from publication.

5.1.0.4751

25 Mar 10:44
e284917

Choose a tag to compare

Release notes - Sonar Scanner for Maven - 5.1

New Feature

SCANMAVEN-264 Add support for SonarQube Cloud regions

Bug

SCANMAVEN-228 Irrelevant encrypted properties should not be passed to the scanner engine

Task

SCANMAVEN-242 Migrate from single module to a multi-module structure

SCANMAVEN-250 Fix broken links coming from the relocation-pom's parent

SCANMAVEN-254 Update parent pom to version 81.0.0.2300

SCANMAVEN-257 Update headers for 2025

SCANMAVEN-258 Conditionally run tests using sonar.password in ITs

SCANMAVEN-260 Update CODEOWNERS after reorg

SCANMAVEN-261 Validate IT using the latest maven 4 release candidate 2

SCANMAVEN-262 Fix quality flaws: remove unnecessary public modifiers

SCANMAVEN-265 Upgrade sonar-scanner-java-library to latest version

SCANMAVEN-266 Analyze integration tests

SCANMAVEN-269 Prepare next development iteration 5.1

SCANMAVEN-271 Fix readability issues in ProxyTest

SCANMAVEN-272 Increase memory because maven 4.0.0-rc-2 fails with out of memory exception

SCANMAVEN-274 Fix quality flaws

SCANMAVEN-277 remove unused third-party-licenses.sh

SCANMAVEN-278 Fix quality flaws

SCANMAVEN-279 Clean up tech debt in Maven Scanner

SCANMAVEN-282 Update plexus-sec-dispatcher to fix CVE-2017-1000487

SCANMAVEN-284 Migrate releasability check to v2, fix property-dump-plugin to be excluded by releasability check (not released)

Improvement

SCANMAVEN-256 Remove (now redundant) server type logging

SCANMAVEN-276 ScannerEngineBootstrapper.isSuccessful() should be verified before calling getEngineFacade()

SCANMAVEN-280 Log the SonarQube Cloud Region

5.0.0.4389

06 Nov 10:03
21bbb41

Choose a tag to compare

Release notes - Sonar Scanner for Maven - 5.0

Documentation

SCANMAVEN-231 Gather details for a community post about the new scanner JRE provisioning

SCANMAVEN-234 Document env variable `SONAR_SCANNER_JAVA_OPTS` and property `sonar.scanner.javaOpts` as options to tweak analysis runtime

SCANMAVEN-235 Update JRE auto-provisioning section to add the SonarScanner for Maven

SCANMAVEN-239 Update develop.md file for the new dump-plugin

SCANMAVEN-240 Remove outdated URL from pom.xml

Task

SCANMAVEN-229 Add Jira integration

SCANMAVEN-230 Update scanner library to support new bootstrapper

SCANMAVEN-236 Remove obsolete site folder

SCANMAVEN-237 Test sensor context config, system properties, and environment variables passed to the bootstrapped JRE

SCANMAVEN-238 Remove unauthenticated REST API call to SonarQube during IT

SCANMAVEN-246 Bump to version 5.0

SCANMAVEN-248 Add static documentation of the scanner

Improvement

SCANMAVEN-233 The SonarScanner for Maven provides a sane default value for `sonar.java.jdkHome`

SCANMAVEN-243 The SonarScanner for Maven does not try to contact the server when the project is skipped

4.0.0.4121

31 May 08:57
5d0c548

Choose a tag to compare

Release notes - Sonar Scanner for Maven - 4.0

Bug

SCANMAVEN-183 Maven HTTPS proxies not taken into account

SCANMAVEN-217 Broken integration with maven encrypted secret

SCANMAVEN-218 The scanner should index pom.xml instead of generated pom

Improvement

SCANMAVEN-210 Move to Java 11 and drop Java 8 support

SCANMAVEN-214 scanAll should be disabled when `sonar.tests` is overridden

SCANMAVEN-215 scanAll exludes external report files

SCANMAVEN-216 scanAll includes Java and Kotlin files if `sonar.java.binaries` and `sonar.java.libraries` are set

SCANMAVEN-219 Support HTTPS Proxy System Properties

SCANMAVEN-224 Log a warning message when the version of the scanner is not specified

3.11.0.3922

13 Mar 09:30
250195e

Choose a tag to compare

Release notes - Sonar Scanner for Maven - 3.11

Bug

MSONAR-205 Undesired behaviour when sonar.projectKey is specified in root pom or as user property

Documentation

MSONAR-203 Update license headers

Task

MSONAR-208 Migrate tests to JUnit 5

Improvement

MSONAR-202 Improve logging : log information about Maven options, Java version and the OS

MSONAR-204 "SonarQube version" is not displayed when communicating with SonarCloud

MSONAR-207 The scanner for Maven collects files outside of conventional sonar.sources

3.10.0.2594

14 Sep 14:38
07989ce

Choose a tag to compare

Release notes - Sonar Scanner for Maven - 3.10

New Feature

MSONAR-193 Set property `sonar.java.enablePreview` when Java's enablePreview feature is set

Task

MSONAR-184 Properly escape multi-valued properties if some paths contain comma

MSONAR-187 Upgrade github-action_release to v4

MSONAR-188 Stop leaking Maven classes in the scanner engine classloader

MSONAR-189 Add ITs with java 17

MSONAR-192 Run all tests nightly

MSONAR-195 Reduce the scope of the maven-compat dependency

MSONAR-198 Add Maven 4 tests to the pipeline

MSONAR-199 Use master build for peachee jobs

Improvement

MSONAR-190 Default sources to "src/main" instead of "src/main/java"

MSONAR-197 Maven Scanner relies on old slf4j version

3.9.1.2184

09 Nov 13:30

Choose a tag to compare

Prepare for patch release

3.9.0.2155

29 Apr 13:59

Choose a tag to compare

upgrade to latest parent pom

3.8.0.2131

13 Jan 13:59

Choose a tag to compare

Support release from Github Action