[ANN] SonarQube 6.4 RC2 is now available

[Fabrice Bellingard]

Hi SonarQube Community,

Here is a new public release candidate of SonarQube 6.4.

To help us test this new version, here's all what you need to know:

• Original announcement: https://groups.google.com/d/msg/sonarqube/XHq0rh6xjEE/0PZXA_wPBgAJ
• Download: https://sonarsource.bintray.com/Distribution/sonarqube/sonarqube-6.4-RC2.zip
• Release notes: https://jira.sonarsource.com/jira/secure/ReleaseNote.jspa?projectId=10930&version=13697
  
• Staging Documentation: http://docs.sonarqube.org/display/SONARNEXT/Documentation
• Upgrade notes: http://docs.sonarqube.org/display/SONARNEXT/Release+6.4+Upgrade+Notes

Thanks to the early testers who already shared feedback on previous RC!

Best regards,

Fabrice Bellingard | SonarSource SonarQube & SonarLint Product Manager http://sonarsource.com

[Felipe Zorzo]

Hi Fabrice.

The updated "Projects" page and the new tagging feature are great. The "Projects" page is really useful now.

I only found a problem with the localization of the "Projects" sidebar. The filter headers and the sorting options are not localizable except the buttons in the "Size" filter:

By the way, there are two invalid entries in the core.properties file (just nitpicking, it's not really a problem) :

https://github.com/SonarSource/sonarqube/blob/branch-6.4/sonar-core/src/main/resources/org/sonar/l10n/core.properties#L224

https://github.com/SonarSource/sonarqube/blob/branch-6.4/sonar-core/src/main/resources/org/sonar/l10n/core.properties#L2806

[gregoir...@sonarsource.com]

Hi,

Thanks for the feedback, it will be fixed in the next RC (RC3).

[fergus...@barclays.com]

"To decide whether a given project should be made public or private, the migration relies on the permissions granted to the virtual "Anyone" group. If "Anyone" has the "Browse" or "See Source Code" permission, then the project is set to public - otherwise it's set to private."

We use SQ with a split level permissioning, "anyone" can look at the statistics on a project ("anyone" has browse on all projects), however only a restricted group can see the source code

Can you let me know what the migration will do to these projects? It sounds like this will make the projects "public" - this will be a problem for us. Should the "public" conversion logic make public only those projects with anyone on the "Browse" AND "See Source Code"

Kind Regards,

Fergus.

[Günter Wirth]

Hi Fabrice.

We did a first try with 6.4-RC2 and our integration tests are no more working:

• in the past (5-6 - 6.3) we were using rest API "/api/rules/app" which is no more working
• we replaced it with "/api/qualityprofiles/search" which is working for 5.6 to 6.3 but not with 6.4
• link to Travis: https://travis-ci.org/SonarOpenCommunity/sonar-cxx/builds/235948138?utm_source=github_status&utm_medium=notification
  

Is this an issue with 6.4 or on our side?

Best regards,

Günter

[Simon Brandhof]

Hi Günter,

• in the past (5-6 - 6.3) we were using rest API "/api/rules/app" which is no more working

This is not an API. It's a web service used internally by the Javascript webapp. That's the reason why it evolves according to the changes in UI.

Generally you should never use a web service marked as "internal". 

 

• we replaced it with "/api/qualityprofiles/search" which is working for 5.6 to 6.3 but not with 6.4
• link to Travis: https://travis-ci.org/SonarOpenCommunity/sonar-cxx/builds/235948138?utm_source=github_status&utm_medium=notification

I'm not sure to correctly understand what your tests do, but "_gotKeyFromQualityProfile" reminds me that the format of profile keys changed. It is not supposed to have side-effects if you don't parse the key. Can you point me to the verifications done when calling the web service ?

Thanks

++

--

Simon Brandhof | SonarSource

Co-Founder & Tech Lead

@SimonBrandhof

http://sonarsource.com

[Günter Wirth]

Hi Simon,

thanks for your answer. We already removed web service "/api/rules/app" and are using "/api/qualityprofiles/search"  now.

I'm not sure to correctly understand what your tests do...

We have an integration test using the web services to setup an test environment. Afterwards we are starting tests with some demo projects.
Looking to our test scripts we are sending a request and waiting for the response. With SQ5.6 to SQ 6.3 we got the reponse but no more with 6.4.

https://github.com/guwirth/sonar-cxx/blob/ad2e40c7e95cefc073655e07583d101557558584/integration-tests/features/steps/test_execution_statistics.py#L57
def step_impl(context, project):
    assert os.path.isdir(os.path.join(TESTDATADIR, project))
    context.project = project
    url = (SONAR_URL + "/api/qualityprofiles/search")
    response = requests.get(url)

    profiles = json.loads(response.text).get("profiles", None)
    data = _gotKeyFromQualityProfile(profiles)
    for key, name in data.iteritems():
        if name == "Sonar way - c++":
            context.profile_key = key

Link to Travis: https://travis-ci.org/SonarOpenCommunity/sonar-cxx/builds/235948138?utm_source=github_status&utm_medium=notification.
Here you can see that it was working with older versions.

Regards,
Günter

[Simon Brandhof]

The test searches for profile with name "Sonar way - c++" whereas it's named "Sonar way" in the plugin !

https://github.com/guwirth/sonar-cxx/blob/ad2e40c7e95cefc073655e07583d101557558584/sonar-cxx-plugin/src/main/java/org/sonar/plugins/cxx/CxxDefaultProfile.java#L37

--
You received this message because you are subscribed to the Google Groups "SonarQube" group.
To unsubscribe from this group and stop receiving emails from it, send an email to sonarqube+...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/sonarqube/5258195d-9041-450c-8d4d-3d02ef749366%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Günter Wirth]

Hello Simon,

inside of _gotKeyFromQualityProfile we are creating a string with "name" and "language". The reason for this is that asking for the language for c++ is not working because of the + sign (?language=c++).:

https://github.com/guwirth/sonar-cxx/blob/ad2e40c7e95cefc073655e07583d101557558584/integration-tests/features/steps/test_execution_statistics.py#L238
def _gotKeyFromQualityProfile(measures):
   return {measure["key"]: measure["name"] + " - " + measure["language"] for measure in measures}

So as you can see on Travis the code is working fine for SQ5.6 to SQ6.3 but not for SQ6.4.
The question is why this public web service is no more working with SQ6.4?

Best regards,
Günter

[Simon Brandhof]

Note that the character "+" is supported by the parameter "language", but it has to be escaped in the URL (see my following gist).

I don't see any regressions between 6.3 and 6.4-RC2 when installing the CXX plugin (branch named "6.4-rc2") on a fresh installation : https://gist.github.com/simonbrandhof/0f7307eab36a176c98b467ad05a43d2a. At this point you should go deeper into the investigation within the context of your test.

Thanks

--
You received this message because you are subscribed to the Google Groups "SonarQube" group.
To unsubscribe from this group and stop receiving emails from it, send an email to sonarqube+...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/sonarqube/575138b0-17f2-4cc8-81cf-3a827ece43ff%40googlegroups.com.

For more options, visit https://groups.google.com/d/optout.

[Fabrice Bellingard]

Hi Fergus, 

indeed, you're right. I've reopened SONAR-9090 and this will be fixed for GA.

Thanks for your feedback!

Best regards,

Fabrice Bellingard | SonarSource SonarQube & SonarLint Product Manager http://sonarsource.com

--

You received this message because you are subscribed to the Google Groups "SonarQube" group.

To unsubscribe from this group and stop receiving emails from it, send an email to sonarqube+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/sonarqube/986ca20f-6126-4621-8476-7e3c7fd55267%40googlegroups.com.