Unable to find sonar-checkstyle-plugin-2.4.jar in Nexus

[timgifford]

I was able to find the binary for 2.4 of this plugin here:
http://docs.sonarqube.org/display/SONARQUBE45/Checkstyle+Plugin

And this is a direct link:
http://sonarsource.bintray.com/Distribution/sonar-checkstyle-plugin/sonar-checkstyle-plugin-2.4.jar

The problem is that there is a 2.4 version published in Maven
http://search.maven.org/#artifactdetails%7Corg.codehaus.sonar.plugins%7Csonar-checkstyle-plugin%7C2.4%7Csonar-plugin

This is very confusing. Is there a plan to publish the new 2.4 version to Nexus?

[romani]

Sonar team did a change to groupId after 2.14 release(68c728c) but did no do any new release:
on Maven central groupId is "org.codehaus.sonar.plugins" - http://repo1.maven.org/maven2/org/codehaus/sonar/plugins/sonar-checkstyle-plugin/

in sources "org.sonarsource.checkstyle" - sevntu-checkstyle/sevntu.checkstyle@8f4ac56 -

Is there a plan to publish the new 2.4 version to Nexus?

You look at http://docs.sonarqube.org/display/SONARQUBE45/Checkstyle+Plugin , you look at old page.

There is already 2.14 here
http://repo1.maven.org/maven2/org/codehaus/sonar/plugins/sonar-checkstyle-plugin/2.14/

sonar-checkstyle-plugin-2.4 use checkstyle 5.1 . Checkstyle is already 6.18.

[romani]

smth weird - latest source version is 2.5-SNAPSHOT but groupID is different..

https://github.com/checkstyle/sonar-checkstyle/blob/6cdc8d9781b7e40f83256288384dae7175dae934/pom.xml
Have different groupID (org.codehaus.sonar-plugins.java)

  <groupId>org.codehaus.sonar-plugins.java</groupId>
  <artifactId>sonar-checkstyle-plugin</artifactId>
  <version>2.0</version>

  <checkstyle.version>5.6</checkstyle.version>

But here are a maven repo http://repo1.maven.org/maven2/org/codehaus/sonar-plugins/java/

[romani]

Resolution: no matter what is history or reality of this groupId - we cannot do release in groupId of Sonar team.
As we have a time we will change a groupId one more time and do latest release - #7 .

[tsjensen]

Just in case someone comes looking:

You look at http://docs.sonarqube.org/display/SONARQUBE45/Checkstyle+Plugin , you look at old page. There is already 2.14 here
http://repo1.maven.org/maven2/org/codehaus/sonar/plugins/sonar-checkstyle-plugin/2.14/

In fact 2.4 is the last (and currently latest) version of the SonarQube Checkstyle Plugin that was released by SonarSource before transfer of the plugin to the Checkstyle team.
This "old page" is currently a good location for download of 2.4. This is likely to change as the Checkstyle team sets up new releases.
The Nexus content seems wrong to me. There never was a version greater than 2.4, and also the JAR file is not a fatJar, so it would not actually work as a SonarQube plugin. Also, these seemingly "later" versions date back to 2012 and before, which means they are older than the real 2.4.

Older versions than 2.4 have been removed from the "old page" by SonarSource. That is a shame, because it also included 2.2, which was the last version still to support Java 6. (You'd be surprised at how many organizations still use that.) But it should be possible to build it from the sources.

[tsjensen]

One more comment: I think it does not make sense to publish the SonarQube plugin in Nexus at all, because SonarQube cannot read it from there. Instead, it should be published in GitHub Releases, where it is clearly visible for download, with release notes, and statistics (example).

[timgifford]

@tsjensen Nexus is the defacto standard for binary artifacts in the Java ecosystem.

One way that I'm using that nexus helps with is automating plugin installations. I create a Pom with all the plugins as dependencies. I use maven to pull all the plugins I need, then I transfer them to the sonar plugin folder.

I don't care about the location of the binaries, but I'd like them to available in the same system.

[tsjensen]

But that's your plan, right? You are not actually doing this already?
Because the Checkstyle Plugin, for example, was never on Nexus in a form that would actually work with SonarQube.

[romani]

@timgifford , why wget is a problem for you to get file from internet.
Hosting on maven central make sense only if artifact suppose to be used in maven build for maven projects.

Sonar checkstyle plugin can not be used in maven projects, should be placed only to sonar.

[tsjensen]

I set up a download page in GitHub Releases of my fork, in order to make the plugin available for download again for the (relevant) versions originally published by SonarSource.