Skip to content

Conversation

@tomasz-tylenda-sonarsource
Copy link
Contributor

No description provided.

@hashicorp-vault-sonar-prod hashicorp-vault-sonar-prod bot changed the title Troubleshoot QA failure SONARJAVA-5942 Troubleshoot QA failure Jan 6, 2026
@hashicorp-vault-sonar-prod
Copy link

hashicorp-vault-sonar-prod bot commented Jan 6, 2026

SONARJAVA-5942

@tomasz-tylenda-sonarsource tomasz-tylenda-sonarsource changed the title SONARJAVA-5942 Troubleshoot QA failure SONARJAVA-5942 Fix CI: use Java 21 in plugin QA and bump SpotBugs to 4.9.8.2 Jan 6, 2026
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The change looks good to me but I am wondering if we could remove the versioning from the plugin invocation in the test for easier maintenance

- name: Select Java 17
run: mise use java@17
- name: Select Java 21
run: mise use java@21

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It might be a little early to switch all plugin QA to Java 21 but at least that's work we won't have to do for the LTA

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I changed the config, so that we keep running LATEST_RELEASE with Java 17.

MavenBuild build = TestUtils.createMavenBuild().setPom(TestUtils.projectPom("spotbugs-external-report"))
.setProperty("sonar.java.spotbugs.reportPaths", "target" + File.separator + "spotbugsXml.xml")
.setGoals("clean package com.github.spotbugs:spotbugs-maven-plugin:4.5.3.0:spotbugs", "sonar:sonar");
.setGoals("clean package com.github.spotbugs:spotbugs-maven-plugin:4.9.8.2:spotbugs", "sonar:sonar");

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Do we need to specify the version of the plugin here? My understanding is that because the plugin is versioned in the pom.xml of the project, this is redundant. Or am I missing something?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm not a maven expert. I dropped the version and the CI passes, so I guess we can do this.

@sonarqube-next
Copy link

sonarqube-next bot commented Jan 7, 2026

@tomasz-tylenda-sonarsource tomasz-tylenda-sonarsource merged commit 244ad0c into master Jan 7, 2026
15 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants