8.4.0

One more bunch of rules targeting regular expressions (MMF-2480):

• S5869 Character classes in regular expressions should not contain the same character twice
• S6019 Reluctant quantifiers in regular expressions should be followed by an expression that can't match the empty string
• S6351 Regular expressions with the global flag should be used with caution
• S5843 Regular expressions should not be too complicated
• S5867 Regular expressions with Unicode property escapes should set Unicode flag
• S5842 Repeated patterns in regular expressions should not match the empty string
• S6353 Regular expression quantifiers and character classes should be used concisely
• S5852 Using slow regular expressions is security-sensitive

8.3.0

• Support for wildcards in coverage report paths #578
• Drop of deprecated properties for TypeScript (JavaScript properties should be used instead)
• Many fixes for false positives
• Upgrade of dependencies
  • eslint 7.32.0
  • typescript 4.3.5
  • @typescript-eslint 4.29.1
  • eslint-plugin-sonarjs 0.10.0

Full list of fixed issues: https://github.com/SonarSource/SonarJS/milestone/42?closed=1

@codyebberson, thanks for the contribution! (#2755)

8.2.0

• Add code quality rules for regular expressions (MMF-2443)
  • S5850 Alternatives in regular expressions should be grouped when used with anchors (#2695)
  • S5856 Regular expressions should be syntactically valid (#2692)
  • S5860 Names of regular expressions named groups should be used (#2693)
  • S5868 Unicode Grapheme Clusters should be avoided inside regex character classes (#2690)
  • S6035 Single-character alternations in regular expressions should be replaced with character classes (#2694)
  • S6323 Alternation in regular expressions should not contain empty alternatives (#2700)
  • S6324 Regular expressions should not contain control characters (#2699)
  • S6325 Regular expression literals should be used when possible (#2698)
  • S6326 Regular expressions should not contain multiple spaces (#2697)
  • S6328 Replacement strings should reference existing regular expression groups (#2696)
  • S6331 Regular expressions should not contain empty groups (#2691)
  • Support precise issue location for regular expressions (#2712) (#2721)
  • Add syntax highlighting for regular expression literals (#2717)
• Upgrade eslint-plugin-sonarjs dependency: 0.9.0, 0.9.1 (#2680)

8.1.0

• new rule S6299 hotspot for Vue DOM-XSS
• syntax highlighting for template element in Vue SFC files

8.0.0

• remove Java based parser (and custom rules API)
• support TypeScript 4.3
• new hotspot rule for Angular DOM XSS

7.4.4

Bugfix to parse .vue files with TypeScript code

7.4.3

• Bugfix to suppress error message when there are no TypeScript files to analyze

7.4.2

• bugfix for excessive filter

7.4.1

Update sslr-squid-bridge

7.4.0

• bugfixes and hardening for LTS