3.4.0.5461

Release Notes - SonarPHP - Version 3.4

False-Positive

• [SONARPHP-789] - FP on S2037 (SelfKeywordUsageCheck): constant from parent class declared in another file
• [SONARPHP-853] - FP S1144 when anonymous nested class
• [SONARPHP-884] - RSPEC-1603 should not raise issues on namespaced classes
• [SONARPHP-906] - S1125 should ignore operands of ternary operator
• [SONARPHP-930] - FP on S1185 when a method defines default values for parameters
• [SONARPHP-932] - FP: CodeFollowingJumpStatementCheck should ignore PHP closing tags
• [SONARPHP-949] - False Positive S905: @phan-var statement
• [SONARPHP-959] - Rule S2068: filter string literal that contains the wordlist item
• [SONARPHP-960] - Rule S2068: filter database query parameters
• [SONARPHP-961] - FP on anonymous function for "$this should not be used in a static context"

Task

• [SONARPHP-937] - Remove rule S1536 that can be spotted by PHP interpreter
• [SONARPHP-963] - Change issue type of S3011 to code smell

Improvement

• [SONARPHP-927] - Stop logging warnings when importing test results based on 'dataProvider'
• [SONARPHP-948] - Deprecate RSPEC-2964
• [SONARPHP-951] - The progress report should report the current file instead of the next one
• [SONARPHP-956] - S2068 should detect hardcoded credentials in LDAP and database functions
• [SONARPHP-957] - Rule S2068: support URI userinfo component
• [SONARPHP-962] - Update branding to drop 'SonarPHP'
• [SONARPHP-964] - Fix performance issue on PHPTree.getLastToken()

SonarPHP 2.12-RC1

SNAPSHOT version of the plugin to allow users to test the plugin during the request for feedback for the release 2.12.

Important: the minimal compatibility has change to SonarQube 6.7 LTS.

This version fixes 7 rules, feeds "Cognitive Complexity Metric" and introduces 20 new rules:

• S1110: Redundant parentheses should be removed
• S3923: All branches in a conditional structure should not have exactly the same implementation
• S2757: "=+" should not be used instead of "+="
• S3972: Conditionals should start on new lines
• S3973: Conditionally executed code should be denoted by either indentation or curly braces
• S3801: Functions should use "return" consistently
• S3699: The output of functions that don't return anything should not be used
• S2201: Return values from functions without side effects should not be ignored
• S3981: Collection sizes and array length comparisons should make sense
• S2123: Values should not be uselessly incremented
• S4144: Methods should not have identical implementations
• S3984: Exception should not be created without being thrown
• S1075: URIs should not be hardcoded
• S4142: Duplicate values should not be passed as arguments
• S1121: Assignments should not be made from within sub-expressions
• S3358: Ternary operators should not be nested
• S2737: "catch" clauses should do more than rethrow
• NoSonar: Track uses of "NOSONAR" comments
• S2251: A "for" loop update clause should move the counter in the right direction
• S836: Variables should be initialized before use

Release Notes

SonarPHP 2.11-RC1

SNAPSHOT version of the plugin to allow users to test the plugin during the request for feedback for the release 2.11.

This release adds support for PHP 7.1 and PHP 7.2.

Release notes.

PHP Plugin 2.10 RC1

SNAPSHOT version of the plugin to allow users to test the plugin during the request for feedback for the release 2.10.

The main changes in this release include :

• New rule: Cognitive Complexity of functions should not be too high
• Up-to-date SonarLint integration
• Import any number of test coverage reports to SonarQube 6.2 and above

But there's much more, see the release notes: https://jira.sonarsource.com/jira/secure/ReleaseNote.jspa?projectId=10956&version=13456

PHP Plugin 2.9 RC1

SNAPSHOT version of the plugin to allow users to test the plugin during the request for feedback for the release 2.9.
This version requires SonarQube 5.6 (LTS version) and Java 8.
Here are the main changes:

• Rule metadata was reviewed to fit the new SonarQube quality model
• Precise issue locations for all rules
• 7 new rules for php.ini files
• New rule "Alias functions should not be used" (thanks to @pdaw!)

PHP Plugin 2.8 RC1

PHP Plugin 2.8 brings support of PHP7 syntax

PHP Plugin 2.7 RC2

2.7-RC2

Fix NPE in NamespaceAndUseStatementCheck

PHP Plugin 2.7 RC1

2.7-RC1

SONARPHP-581 Support cancellation of analysis