SonarJS 3.1 RC1

We would like to release SonarJS 3.1.

We implemented Vue.js single file component support (#576), the Cognitive Complexity metric (#588), a new rule "Method returns should not be invariant" (#582) and plenty of minor improvements.

Release notes : https://github.com/SonarSource/sonar-javascript/milestone/4?closed=1

For any feedback on this release, please create an issue.

SonarJS 3.0 "Kill The Noise" RC1

Hi,

We are glad to finally go for the release of the new major version of SonarJS: 3.0.

The main goal of this version was to increase the value of the analyzer by reducing the noise it makes, so in release notes you can see plenty of false-positives fixed as well as rule and engine improvements.

Moreover the default rule profile "Sonar way" was changed to retain only those rules that are useful for the largest possible number of JS developers. To complement the now minimalist "Sonar way" profile we created a new predefined profile "Sonar way Recommended" which will help you to maintain your JavaScript projects on the long term.

Finally, we took the opportunity of releasing a major version to update the custom rules API (see docs).

Release notes: https://jira.sonarsource.com/jira/secure/ReleaseNote.jspa?projectId=10933&version=13050

Release Candidate: https://github.com/SonarSource/sonar-javascript/releases/tag/3.0-RC1

Any feedback is highly welcome as usual!

Feedback period is open until Wednesday April 26.

P.S. FYI since next version we will start tracking issues on GitHub, so don't hesitate if you find some bug or have a good idea for a new feature!

SonarJS 2.21 RC1

SNAPSHOT version of the plugin to allow users to test SonarJS during the request for feedback for the release 2.21.

We took the first steps in cross-procedural data flow analysis (also known as symbolic execution) and improved it to reduce false positives and false negatives.

Release notes: https://jira.sonarsource.com/jira/secure/ReleaseNote.jspa?projectId=10933&version=13693

SonarJS 2.20 RC2

RC2 fixes bug SONARJS-900

---

SNAPSHOT version of the plugin to allow users to test SonarJS during the request for feedback for the release 2.20.

We introduced 8 new rules, among them we have :

• Cognitive Complexity of functions should not be too high
• Non-existent variables should not be referenced (requires configuration at project level)

Release notes: http://jira.sonarsource.com/jira/secure/ReleaseNote.jspa?projectId=10933&version=13651

SonarJS 2.20 RC1

SNAPSHOT version of the plugin to allow users to test SonarJS during the request for feedback for the release 2.20.

We introduced 8 new rules, among them we have :

• Cognitive Complexity of functions should not be too high
• Non-existent variables should not be referenced (requires configuration at project level)

Release notes: http://jira.sonarsource.com/jira/secure/ReleaseNote.jspa?projectId=10933&version=13651

SonarJS 2.19 RC1

SNAPSHOT version of the plugin to allow users to test SonarJS during the request for feedback for the release 2.19.

This version brings 14 new rules! Among them couple rules based on built-in method resolution:

• Arguments to built-in functions should match documented types
• Return values should not be ignored when function calls don't have any side effects

Moreover some work was done on coverage side, see tickets SONARJS-800 and SONARJS-801.

Release notes: https://jira.sonarsource.com/jira/secure/ReleaseNote.jspa?projectId=10933&version=13460

JavaScript Plugin 2.18 RC1

SNAPSHOT version of the plugin to allow users to test the plugin during the request for feedback for the release 2.18.

This version brings 10 new rules including several type-based rules:

• Arithmetic operations should not result in "NaN"
• Values not convertible to numbers should not be used in numeric comparisons
• Arithmetic operators should only have numbers as operands
• Non-existent properties shouldn't be accessed for reading

JavaScript Plugin 2.17 RC1

SNAPSHOT version of the plugin to allow users to test the plugin during the request for feedback for the release 2.17.

This version brings a new bug-detection rule "The output of functions that don't return anything should not be used".

JavaScript Plugin 2.16 RC1

SNAPSHOT version of the plugin to allow users to test the plugin during the vote for release 2.16.

Here are the main changes:
-Rule metadata were reviewed to fit the new SonarQube quality model
-Class and property decorators are now supported (ECMAScript 2017)
-The symbolic execution engine now tracks relations between variables (e.g. "a > b")
-Integration with SonarLint was improved

JavaScript Plugin 2.15 RC1

SNAPSHOT version of the plugin to allow users to test the plugin during the vote for release 2.15.

This version brings:

• support of some features proposed for ES2017
• improvement of rules based on type inference
• an improved function complexity computation
• an improved detection of minified files
• a new rule "Calls should not be made to non-callable values"
• a new rule "Functions should not be called both with and without "new""