This release is a massive clean-up (plus improvement) that resolves all previously raised upstream issues and brings major improvements to compatibility, security, and rule evaluation accuracy.
Key Highlights:
All Outstanding Issues Fixed:
-
We’ve cleared the backlog! All previously reported GitHub issues and historical bugs have been addressed in this consolidated release.
-
New javax.xml (JAXP) Support: Introduces v1.1 rules backed by the standard javax.xml XPath engine. This enables highly accurate node-based rules that attach issues to exact line numbers and XML ranges—fixing the old “file-level only” visibility issues.
-
SonarQube 9.9 LTS Support: Fully compatible with SQ 9.9+. It’s now much easier to install on Helm/Kubernetes deployments because default rule files are embedded directly in the JAR.
-
Enhanced Mule 4 Rules: Adds new project naming convention rules and expands built-in namespace mappings for common modules and connectors.
-
Security Hardening: Safer for CI/PR environments with strict XXE hardening for all XML parsing and restricted local-only namespace properties.
-
Better Code Coverage Sync: Improved path matching for MUnit JSON reports. It will also accurately report 0% coverage when reports are missing, ensuring our Quality Gates fail appropriately.
-
Independent Scanning: Mule XML scanning is now independent of Sonar’s global XML language detection, reducing configuration conflicts.
For the full list of technical details and bug fixes, check out the complete Release Notes here and update README here which is yet to release.