Draft for 1.2.2 release

[guwirth]

Please review:

We are pleased to announce the SonarQube C++ Community Plugin version 1.2.2.
See lists below for features added and bugs fixed in this release.

SonarQube compability

• tested and released for SonarQube 6.7 LTS, 7.0, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6
  see also SonarQube compatibility matrix
• Installation Instructions
• Upgrade Instructions

Enhancements

• SQ 7.6 support test with SQ 7.6 #1674
• minimal supported SQ API is 6.7 Refactoring: minimal supported SQ API is 6.7 #1317
• lowercase filenames in sensors are supported WARN: Cannot find the file '...' in module '...' base dir '...', skipping violations. #1651, CxxIssuesReportSensor: use realPath as part of path normalization #1653, CxxCompilerVcSensor fails if filenames in log file appear in lowercase #1678, cobertura coverage does not support drive letter only in source tag #1682, Path::toRealPath() can throw RuntimeExceptions, catch them #1679, cobertura coverage does not support drive letter only in source tag #1682
• {Aggregate|Density} MeasureComputer: reduce and soften the logging CE log is flooded with DEBUG and ERROR entries #1640 {Aggregate|Density}MeasureComputer: reduce and soften the logging #1641
• improved preprocessor: performance, include and macro handling CxxPreprocessor: reduce run-time overhead, extract invariants #1637, CxxPreprocessor: fix handling of SquidAstVisitorContext #1645, CxxPreprocessor: collect missing includes conditionally #1650, CxxPreprocessor: unitilize com.sonar.sslr.api.Preprocessor::init() #1660, CxxPreprocessor: cache forced includes, forced & global defines #1665
• optimized lexer and AST: remove some nodes from AST. Please check in user defined checks and XPath if they are still working speed-up initialization list handling #1664, improve number lexer #1646 optimize AST #1667
• use of scanner 3.3.0.1492 use scanner 3.3.0.1492 #1676
• use of Maven 3.5.4 use Maven 3.5.4 #1649
• Google Guava dependencies removed remove guava dependencies #1647
• refactoring improve Travis cache #1644 SquidAstVisitorContext: remove redundant references #1659 Fix quality gate isssues #1677

Bugfixes

Known Issues

For an up to date list of known issues see the issue tracker.

• not compatible with Java 9
• Ensure that a rule is enabled if you get no results. In new SQ versions the default profile is read-only. The cxx plugin does not enable all rules per default.
• Starting with SQ 6.2 there are some new metrics and some are no more available. Please have a look to the SonarQube release notes.
• duplicated_lines_density values are different with SQ 7.5
• test execution metrics are not supported
• The Cppcheck plugin is deprecated and not working in parallel to this plugin. This plugin provides an own Cppcheck sensor.
• C plugin and JSON Compilation Database support are experimental only

Thanks ....

go to all contributors (in alphabetical order):

@guwirth
@ivangalkin

... and all people which were active on the issue tracker!

[ivangalkin]

👍 thank you!

[guwirth]

I will release 1.2.2 today.

Seems that next SQ 7.7 version will also be next LTS? For our next version I see the main focus in removing deprecated API and updating the wiki.

Some other points I have in mind:

• Do we need the c plug-in? Or can we remove it?
• Someone using our lint tool (part of cxx plug-in)? Or can we remove it?
• Who is using XPath?
• Who is using custom checks?
• I would like to remove checks marked deprecated

Any other ideas/comments?
I would tend to set the next version number to 1.3?

[ivangalkin]

Hi @guwirth, does it make sense to provide support for cppcheck 1.87 as part of 1.2.2? It was released today and I plan to integrate it during this weekend. Regards,

…

Am 09.02.2019 um 08:38 schrieb Günter Wirth ***@***.***>: I will release 1.2.2 today. Seems that next SQ 7.7 version will also be next LTS? For our next version I see the main focus in removing deprecated API and updating the wiki. Some other points I have in mind: Do we need the c plug-in? Or can we remove it? Someone using our lint tool (part of cxx plug-in)? Or can we remove it? Who is using XPath? Who is using custom checks? I would like to remove checks marked deprecated Any other ideas/comments? I would tend to set the version number to 1.3? — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub, or mute the thread.

[guwirth]

Hi @ivangalkin,

Yes makes sense. I will wait for it. One other comment to Cppcheck. There are some Vulnerability. Think following the SQ definition a tool like Cppcheck don’t create Vulnerability? Maybe you can set it to Bug or Code Smell?

Regards