SonarQube compatibility

This release is compatible with SonarQube 9.9 LTA Community Edition and newer. However, comprehensive testing and validation have been conducted only on SonarQube 9.9 CE, 10.6 CE, and 10.7 CE. While compatibility is expected for other versions within this range, the full extent of functionality has been assured only for the tested versions.

Additionally, please note that while this version may work with SonarQube’s commercial editions, the compatibility was not tested and simultaneous analysis using ZPA and SonarSource’s embedded PL/SQL plugin is not supported. If you require this scenario, consider using zpa-cli instead.

Install/update instructions

• Download the sonar-zpa-plugin-3.6.0-SNAPSHOT.jar and copy it to the SONARQUBE_HOME/extensions/plugins.
• Remove the older plugin from that directory.
• Restart the SonarQube instance.

For custom plugin developers

Binary compatibility is not guaranteed either in between any version number change. Custom plugins should be recompiled against the same version of sonar-zpa-plugin.

Download the zpa-toolkit-3.6.0-SNAPSHOT.jar (requires Java 11+) to test the parser and view the AST.

Full changelog

🚀 Features

• ab4addf Add ActiveRuleConfigurer interface for rule configuration in analysis

🧰 Tasks

• 5338730 Fix path of vendored files in .gitattributes
• 5dda4cb Update SonarScanner plugin to 5.1.0.4882
• 30399be Update test libraries
• fe44f08 Move dependencies to version catalog
• 59c5bda Update to JReleaser 1.13.1

🛠 Build

• eb776e0 Restore the default test logging level
• 415beb5 Remove unnecessary --build-cache argument from the build workflow
• 8f1a824 Enable parallel execution and build cache in Gradle
• 06d1488 Use Gradle 8.9
• 5d6b503 Remove SQ 10.5 from the test matrix and add SQ 10.7-SNAPSHOT
• 5249ea0 Remove unnecessary dependency from sonar-zpa-plugin
• 715a8ad Bump project version