Sonar Scanner Msbuild Versions Save

Improvements

• 1447 - Moved from SHA256Managed to SHA256CryptoServiceProvider in CacheProvider to be FIPS compliant
• 1446 - Bump scanner-cli version to 4.8.0.2856

Improvements

• 1440 - The scanner does not normalize the file paths of unchanged files before writing them to UnchangedFiles.txt

Improvements

• 1430 - Incremental PR Analysis: Validate cache keys
• 1429 - Fix regression introduced when switching from string URLs to Uri

Hello,

This release of SonarScanner for .NET brings support for incremental PR analysis. It's a prerequisite for our analyzers that will introduce this feature in the near future.

This version also adds a correct User-Agent header. Previous header UserAgent will remain for backward compatibility until version 6.0.0.

Improvements

• 1412 - Incremental PR analysis: Log stats
• 1396 - Incremental PR analysis: Add integration tests
• 1393 - Fix the nuget restore step during build
• 1387 - Incremental PR analysis: Produce unchanged files
• 1379 - Incremental PR analysis: Add UnchangedFiles
• 1377 - Incremental PR analysis: Implement the protobuf deserialization
• 1370 - Incremental PR analysis: Download the cache
• 1369 - Incremental PR analysis: Implement the hashing
• 1354 - Fix broken ITs: Change tested plugin versions
• 1344 - Add .NET 7 IT for Razor projects
• 1331 - Move "src" folder under LGPL v3 license
• 1328 - Remove jdbc related properties
• 1321 - Remove jdbc related properties.
• 1295 - User Agent Header not Set

Bug Fixes

• 1357 - VsTestToolsInstallerInstalledToolLocation: Path to CodeCoverage.exe may contain net462 instead of net451
• 1333 - Analysis fails with .NET 7

Analysis of Azure Functions on Github Actions with default behavior no longer hard fails. However, in this case, you still need to provide the sonar.projectBaseDir parameter to the BEGIN step to have the correct paths in SonarQube / SonarCloud (see https://github.com/SonarSource/sonar-scanner-msbuild/issues/1309 for details).

Improvements

• 1298 - Remove confusing message about "project without guid will not be analyzed"

Bug Fixes

• 1294 - When projects are on different drives and sonar.projectBaseDir is not explicitly set, end step fails hard on generation of sonar-properties (e.g. Azure Functions on GH Actions)

Improvements

• 1281 - Log warning instead of error when not parsing environment variables to avoid hard failure when Newtonsoft does not get resolved

Bug Fixes

• 1270 - Revert fix for "SonarScanner.MSBuild.dll should not require manual CHMOD"

Improvements

• 1265 - Add longPathAware manifest and config to support long paths on Windows
• 1245 - Add logging to Azure Devops settings parser
• 1237 - Update scanner CLI to the newest version (4.7.0.2747)
• 1213 - Update documentation regarding prerequisites: minimum .Net Framework 4.7.2
• 1160 - [Docs] Drop misleading compatibility section from the docs
• 1034 - Code comment with cache path information is outdated
• 1032 - Warnings are raised for files added by NuGet packages
• 968 - Improve the help message of the Scanner
• 493 - SonarScanner.MSBuild.dll should not require manual CHMOD*
• 821 - /s: parameter is not documented

Bug Fixes

• 1211 - The GetAnalyzerSettings task is removing existing code generators when sonar.cs.roslyn.ignoreIssues is set to true
• 1207 - Environment variables are ignored during Tasks, mainly during VSTS integration
• 1099 - GetAnalyzerSettings target removes dependencies with the same name

Context: .NET Runtime Support for the SonarScanner for .NET

Improvements

• 1227 - Raise analysis warning if using NetCore 2.1 version of scanner
• 1224 - Analysis warning for Net Framework < 4.6.2 version

Improvements

• 1199 - Fix "MSB3677 Unable to move file" regression