Bug fixes:

• Support SonarQube™ with SSO enabled

Bug fixes:

• Support SonarQube™ with SSO enabled

• Limit Windows Build CMD line length to <8192

• Limit Windows Build CMD line length to <8192

Improvements:

* Support service account token override on tasks

Bug fixes:

* Fixed bug where ‘Create Project per Branch’ setting does not keep it’s state on save

Improvements:

* Support service account token override on tasks

Bug fixes:

* Fixed bug where ‘Create Project per Branch’ setting does not keep it’s state on save

Improvements:

* Support JDK selection in MSBuild/dotnet tasks

* Improved description of MSBuild/dotnet capability requirements

Bug fixes:

* Fixed exceptions when a plan has no repository attached

* Fix missing enforcement of JDK requirements

Improvements:

* Support JDK selection in MSBuild/dotnet tasks

* Improved description of MSBuild/dotnet capability requirements

Bug fixes:

* Fixed exceptions when a plan has no repository attached

* Fix missing enforcement of JDK requirements

Bug fixes:

* Fixed missing SonarQube server configurations in admin configuration page* Improved SonarQube Edition detection handling

Bug fixes:

* Fixed missing SonarQube server configurations in admin configuration page

* Improved SonarQube Edition detection handling

Bug fixes:

* Fixed parsing of missing analysis result URL for SonarQube 9.4

* Fixed bug where 'Disable SQ project per branch' checkbox does not keep it's state on save

* Fixed bug where unreachable SonarQube server leads to timeout of admin configuration page

* Improved user experience when switching between plaint text field and Bamboo variable for SonarQube user token.

Bug fixes:

* Fixed parsing of missing analysis result URL for SonarQube 9.4

* Fixed bug where 'Disable SQ project per branch' checkbox does not keep it's state on save

* Fixed bug where unreachable SonarQube server leads to timeout of admin configuration page

* Improved user experience when switching between plaint text field and Bamboo variable for SonarQube user token.

Bug fixes:

* Access denied for some users when accessing Sonar task config

* New task configurations try PR analysis in community editions

* Incremental mode missing since v3.1

Bug fixes:

* Access denied for some users when accessing Sonar task config

* New task configurations try PR analysis in community editions

* Incremental mode missing since v3.1

* Access denied for some users when accessing Sonar task config

* New task configurations try PR analysis in community editions

* Incremental mode missing since v3.1

Bug fixes:

* Unable to save a new Sonar Task when 'Show and break build on broken quality gates' is selected

Bug fixes:

* New created sonar tasks ignore selected SonarQube server configuration

New Features:

* Debug logging to plan build log, instead of Bamboo log for easier accessibility (per Task option)

Improvements:

* Auto detection of SonarQube edition

* Simplified configuration: app shows only the relevant configuration options based on your SonarQube edition

Bamboo Data Center is supported, even if you experience an incompatibility message in the UPM. When the Atlassian Data Center certification process is ready, we will publish a DC version of the app. Data Center customers will be required to purchase a Data Center app license upon their next renewal afterwards.

For more information, check the official community article.

Bug fixes:

* With SonarQube Commercial Editions < 8.1, the app crashed while setting "sonar.branch.target", if the Bamboo build plan does not use Bitbucket

Bug fixes:

* Opening Sonar Server configuration is slow, causes Exception Spam

* Configuration fails validation when switching to Token authetication

Task:

* Improve Configuration Panel to Encourage using User Tokens over Passwords

* Increase lower bound of Bamboo compatiblity to 6.10

Sub-task:

* Require Sonar 6.7 or newer

* Removed Support for Sonar 5.2 or older and JDBC

* Removed deprecated Sonar Runner task

* Removed Incremental Sonar Analysis File Option

* Removed Sonar Maven 2 task

* With SonarQube commercial edition < 8.1 and Bamboo < 6.9, a "bamboo user needed" error is thrown when executing the task

* Some quality gate alert keys are not translated with i18n

Task:

* Removal of distinction between short/long-living branches and -Dsonar.branch.target

* Make incremental mode more flexible by not requiring analysis of pull request destination branch

* NullPointerException error when Saving the Sonar Task

Bug fixes:

* No translation for quality gate "Security Hotspots Reviewed" causes "? 0> 100" text in quality gate description

* Wrong Sonar scanner result mapping in jobs with multiple Sonar tasks

* Depending on the used MSBuild SonarScanner, the SonarQube result link is not shown on the Bamboo build results page

* New option to show quality gates without breaking the build

Task:

* Only pass as many files for sonar.inclusions as the OS allows, otherwise execute a full build

* Improved incremental mode task option descriptions to make them more clear

* Do not escape invalid branch characters when using commercial SonarQube editions

* Improved "escape invalid branch characters" task option descriptions

Bug fixes:

* Gradle Task doesn't use configured project key override

* Maven Sonar analysis fails with NullPointerException when updated from Bamboo specs and no additional SQ params are configured

Task:

* Improve log msg for cancelled SonarQube tasks in Quality gate check

* Compatibility with SonarQube >= 8.4 where project key cannot contain Git branch name characters like "/" anymore

* Do not allow multiple Sonar server configurations with the same name

* Sonar analysis result link cannot be shown with SQ 8.4 and SonarScanner 4.4

* MSBuild and .NET Core end task yields "Cannot deduce sonar.projectKey for this build" error when using legacy branching and SQ >= 7.8

* Illegal branch character replacement option always uses "_"

* App does not show Sonar build results for multiple Sonar tasks within the same build job

* As sonar.branch.target is deprecated since SQ 8.1, the app should not pass it to the scanner invocation anymore

Task:

* Improved help text about using Bamboo variables for SonarQube credentials

* Remark that the quality gate status can only be displayed if the option to fail the build in case of failed quality gates is enabled

Bug fixes:

- Security vulnerability in used HttpClient dependency version 4.3.2

- Security vulnerability in used plexus-utils dependency version 3.0.10

* Support for Bamboo 7.0

Bug fixes:

* Organization parameter is not correctly set for SonarCloud when using MSBuild/.NET scanners

* When only project name but not project key is overridden in the task settings, the project name is still taken from the build files

* Bamboo variables in project keys and project names are not substituted when using new branching

* Maven variables like groupId/artifactId in project name are not substituted when using legacy branching

* Link getting started page from app installation

Bug fixes:

* "Cannot deduce sonar.projectKey for this build" error with Maven multi-module builds where group ID is inherited

Bug fixes:

* Quality gate status is fetched even if option "Fail build when project has quality gate status FAILED" is disabled

* Show all Sonar scan results on build results page and not only the last one

* Show quality gate status on build results page even if failing build option is disabled

Bug fixes:

* Incremental mode is not scanning files in multi-module Maven/SonarScanner builds

* sonar.branch.target should only be filled with long-living Sonar branches

* Support for SonarQube 7.8

Bug fixes:

* .NET Core scanner task does not use configured Sonar server credentials

Task:

* For Sonar Gradle tasks using community edition of SonarQube >= 7.8, the Sonar project key now has to be configured in the task settings

* Support organization parameter for SonarCloud in server settings

* Support new pull request branch variables of Bamboo 6.9 to reduce amount of REST calls to Bitbucket

* Add Bamboo build plan link to SonarQube project

* Support pull request analysis with -Dsonar.pullrequest.*

Bug fixes:

* Only set sonar.branch.target if branch is not the configured main branch

Task:

* Improved task settings layout for a better overview over the various options

* Increased Bitbucket timeout for REST calls

* Improved license error messages

* Improved error reporting if quality gate status detection fails

Bug fixes:

• NPE in SonarRuntimeDataProvider.isLegacyBranchingEnabled

• Override of global Sonar credentials in "additional properties" does not always work

New Features:

• Provide fail build when quality gate fails option as a global setting

Improvements:

• Improved documentation on how to run the tasks inside a Docker container

Bug fixes:

• .NET Core scanner fails on remote agents when used with Docker
• Maven scanner fails when used with remote agents inside Docker

* Provide a display URL field which will be used instead of the server URL for proxies

* Support .NET Core scanner on Linux environments

* Consider credentials passed with additional parameters for all Sonar requests like getting the quality gate status

Bug fixes:

* In some situations the current branch cannot determined for incremental mode

* When OAuth token is rejected, Bamboo task validation doesn't allow to reauthenticate

* Improved incremental mode documentation

Bug fixes:

* Branch plug-in existence check doesn't work with SonarQube 7.4

* Branch plug-in existence check doesn't work with SonarQube 6.7

* Support analysis with .NET Core scanner

* Use SonarScanner.MSBuild.exe instead of deprecated MSBuild.SonarQube.Runner as executable name for MSBuild

Bug fixes:

* When the Sonar project name contains spaces, the MSBuild begin task fails

* Sonar Maven 2 task fails with NoSuchBeanDefinitionException on remote agents

* "No report-task.txt file found" error when file is not part of the build working directory

* NPE when creating Sonar task under certain conditions

* For new Sonar server configurations, JDBC options should be disabled by default

Bug fixes:

* Quality gate violations should show label instead of number for ratings

* When a pull request only consists of deleted files, incremental mode is not applied and full analysis is executed

* NoClassDefFoundError when using Sonar task on remote agents

Bug fixes:

• JSONException in case there is no analysis ID when checking the quality gate status
• Branch plug-in existence check doesn't work anymore with SonarQube 7.2

New features:

• Use SonarQube webhooks instead of polling for quality gate status check
• Require license for plug-in to work
• Show failed quality gates on build result summary page

* Support incremental analysis options in MSBuild end task

* Java 10 not supported by the Bamboo task validation

* Only set "sonar.branch.target" if the current branch is not the main branch

* New options to ignore missing pull request for incremental mode and fall back to full analysis or skip task

* NPE when the global user is not configured but new branching mode is enabled

* sonar.report.export.path parameter is wrongly named

* Project key field description is misleading because the project key is mandatory in the MSBuild task

* Fail build if no open pull request could be found and incremental mode is enabled but cannot be applied

Bug fixes:

* Incremental mode does not work when using MSBuild scanner

* Wrong "not able to find a SonarQube result URL" message in MSBuild begin task

Bug fixes:

* NPE can occur if incremental mode is enabled

* Deleted files should be ignored in the incremental analysis

* When multiple build files like pom.xml and sonar-project.properties exist incremental mode deduces the wrong inclusion file paths

* Plug-in tries to use branching plug-in mode when no SonarQube server configuration is used in the task even when it is actually disabled

Task:

* Configured Bamboo user in Sonar server settings is now optional when using the new branching plug-in

* Verify if valid Bamboo user in global plug-in settings is used when saving

* Linked instructions on how to migrate from old-branching model to new Sonar 6.7 branch plug-in

* Fill sonar.branch.target with target branch of pull request

Bug fixes:

* Incremental mode does not analyze the changed files when invoked with a configured working directory in the task options

Bug fixes:

* A NullPointerException can be thrown when editing legacy Sonar server configurations

* Other parameters than sonar.login are set for MSBuild end task causing it to fail

* New gobal Sonar server option to enable/disable the new branching feature

Bug fixes:

* Build errors occuring during MSBuild end task do not fail the build

* MSBuild end task does not set the credentials parameters

* Adding a Maven task to a job does not add used Java version as a requirement

Task:

* Better document the fact that "build pull request branches" option should be used for incremental mode

* New option to not run a Sonar analysis if incremental mode cannot be applied

* New option to ignore task errors

* Provide an option to create a temp file with the sonar.inclusions list for operating systems with strict command parameter length limits

* Fall back to full analysis if the pull request diff is too large for using incremental mode

Bug fixes:

* For non-Maven or non-SonarRunner builds incremental mode sometimes doesn't work

* Incremental mode cannot handle case when a pull request diff is larger than the configured threshold (default: 1000 files)

Bug fixes:

* Security fix

* Sonar task sometimes never finishes because of file lock for report-task.txt

* Incremental mode does not work in multi-module Maven and SonarRunner projects

* New option to use Bamboo variables for Sonar server passwords and tokens

Bug fixes:

* Check Bitbucket Server OAuth connection for incremental mode with configured user and not actual logged-in user

Bug fixes:

* Improved incremental analysis mode to support pull request plan branches

* Incremental mode for analyzing only the changed/new files in a pull request

Bug fixes:

* Analysis result link leads to 404 when branch names contain a "/"

Task:

* Update Marketplace materials

* Result link to SonarQube project is not shown for MSBuild task

* Sonar fails to execute on Windows with Maven 3.3.1+

* MSBuild begin task checks quality gate if option is enabled which leads to build error

* Plug-in adds "\bin" to MSBuild runner path leading to file not found error

Task:

* Increased timeout of quality gate status detection to 30 minutes

* Creating a new server connection with SonarQube 6.3 yields "An error occurred while connecting the given SonarQube server:"

Task:

* Only show options to override Sonar analysis parameters in task config when configured

* Provide an option to configure the working directory for the MSBuild end task

* A build task for the new SonarQube Scanner

* A build task for the MSBuild SonarQube Runner

* SonarQube result link gives a 404 error when the branch name contains a "/" due to escaping

* Bamboo task descriptions are not always shown due to I18N issues

* Separating additional properties with new lines does not work

* Using sonar.jdbc.url can cause "Unable to determine database dialect" error

* Quote -Dsonar.jdbc.url field to prevent issus with special characters

* Make executable field in Sonar tasks optional and use the capability if provided

* Allow to override Sonar project properities with input fields in the task configurations

Bug fixes:

* Analysis result link is not shown when using new Gradle SonarQube plug-in

* Do not add a capability requirement for Gradle if wrapper is used

* Bug fix: OSGI injection error with SonarClient on remote agents

• Support for Gradle Wrapper
• Support for the new SonarQube Gradle plug-in which should be now used instead of the deprecated SonarRunner Gradle plug-in
• "Rewrite branch key" setting is not the default anymore for Sonar tasks because this is only necessary with SonarQube versions < 5.0 (the functionality is still available of course)

• Sonar Maven tasks now support repository isolation and temporary directory support as known from Bamboo's Maven tasks
• Bug fixes for remote agent support

• By default, Sonar for Bamboo will not fail the build if SonarQube emits any errors (e.g., due to configuration or compile errors). This release provides an option on all Sonar tasks which - when enabled - will fail the build in case SonarQube raises any errors during its analysis. Note that the build will fail in this case even if SonarQube exits with "ANALYSIS SUCCESSFUL".

• Adds a button to the build results in Bamboo to directly go to the Sonar analysis results for the given project.

• Support for SonarQube 5.0 (this version does not need a translation of certain characters like '/' in Git branch names anymore)
• Sonar analysis errors are now detected, marked in the build log and let the build fail

• Sonar credentials are verified in the plug-in settings
• Bugfixing