SonarJS 3.0 "Kill The Noise" RC1

Hi,

We are glad to finally go for the release of the new major version of SonarJS: 3.0.

The main goal of this version was to increase the value of the analyzer by reducing the noise it makes, so in release notes you can see plenty of false-positives fixed as well as rule and engine improvements.

Moreover the default rule profile "Sonar way" was changed to retain only those rules that are useful for the largest possible number of JS developers. To complement the now minimalist "Sonar way" profile we created a new predefined profile "Sonar way Recommended" which will help you to maintain your JavaScript projects on the long term.

Finally, we took the opportunity of releasing a major version to update the custom rules API (see docs).

Release notes: https://jira.sonarsource.com/jira/secure/ReleaseNote.jspa?projectId=10933&version=13050

Release Candidate: https://github.com/SonarSource/sonar-javascript/releases/tag/3.0-RC1

Any feedback is highly welcome as usual!

Feedback period is open until Wednesday April 26.

P.S. FYI since next version we will start tracking issues on GitHub, so don't hesitate if you find some bug or have a good idea for a new feature!

SonarJS 2.21 RC1

SNAPSHOT version of the plugin to allow users to test SonarJS during the request for feedback for the release 2.21.

We took the first steps in cross-procedural data flow analysis (also known as symbolic execution) and improved it to reduce false positives and false negatives.

Release notes: https://jira.sonarsource.com/jira/secure/ReleaseNote.jspa?projectId=10933&version=13693

SonarJS 2.20 RC2

RC2 fixes bug SONARJS-900

---

SNAPSHOT version of the plugin to allow users to test SonarJS during the request for feedback for the release 2.20.

We introduced 8 new rules, among them we have :

• Cognitive Complexity of functions should not be too high
• Non-existent variables should not be referenced (requires configuration at project level)

Release notes: http://jira.sonarsource.com/jira/secure/ReleaseNote.jspa?projectId=10933&version=13651

SonarJS 2.20 RC1

SNAPSHOT version of the plugin to allow users to test SonarJS during the request for feedback for the release 2.20.

We introduced 8 new rules, among them we have :

• Cognitive Complexity of functions should not be too high
• Non-existent variables should not be referenced (requires configuration at project level)

Release notes: http://jira.sonarsource.com/jira/secure/ReleaseNote.jspa?projectId=10933&version=13651

SonarJS 2.19 RC1

SNAPSHOT version of the plugin to allow users to test SonarJS during the request for feedback for the release 2.19.

This version brings 14 new rules! Among them couple rules based on built-in method resolution:

• Arguments to built-in functions should match documented types
• Return values should not be ignored when function calls don't have any side effects

Moreover some work was done on coverage side, see tickets SONARJS-800 and SONARJS-801.

Release notes: https://jira.sonarsource.com/jira/secure/ReleaseNote.jspa?projectId=10933&version=13460

JavaScript Plugin 2.18 RC1

SNAPSHOT version of the plugin to allow users to test the plugin during the request for feedback for the release 2.18.

This version brings 10 new rules including several type-based rules:

• Arithmetic operations should not result in "NaN"
• Values not convertible to numbers should not be used in numeric comparisons
• Arithmetic operators should only have numbers as operands
• Non-existent properties shouldn't be accessed for reading

JavaScript Plugin 2.17 RC1

SNAPSHOT version of the plugin to allow users to test the plugin during the request for feedback for the release 2.17.

This version brings a new bug-detection rule "The output of functions that don't return anything should not be used".

JavaScript Plugin 2.16 RC1

SNAPSHOT version of the plugin to allow users to test the plugin during the vote for release 2.16.

Here are the main changes:
-Rule metadata were reviewed to fit the new SonarQube quality model
-Class and property decorators are now supported (ECMAScript 2017)
-The symbolic execution engine now tracks relations between variables (e.g. "a > b")
-Integration with SonarLint was improved

JavaScript Plugin 2.15 RC1

SNAPSHOT version of the plugin to allow users to test the plugin during the vote for release 2.15.

This version brings:

• support of some features proposed for ES2017
• improvement of rules based on type inference
• an improved function complexity computation
• an improved detection of minified files
• a new rule "Calls should not be made to non-callable values"
• a new rule "Functions should not be called both with and without "new""

JavaScript Plugin 2.14 RC1

SNAPSHOT version of the plugin to allow users to test the plugin during the vote for release 2.14.
This version requires SonarQube 5.6 (LTS version) and Java 8.
It brings precise issue location for all rules and adds 2 new rules. Rules based on symbolic execution report better results.