Bump sonarjava.version from 8.40.0.46617 to 8.42.0.47616

[dependabot]

Bumps sonarjava.version from 8.40.0.46617 to 8.42.0.47616.
Updates org.sonarsource.java:sonar-java-plugin from 8.40.0.46617 to 8.42.0.47616

Release notes

Sourced from org.sonarsource.java:sonar-java-plugin's releases.

8.42.0.47616

Release notes - SonarJava - 8.42

Feature

SONARJAVA-6868 Update RSPEC before 8.42 release SONARJAVA-6906 Improve rule S8924: raise only when the usage is inconsistent

False Positive

SONARJAVA-6256 S6832 should not raise when the injected bean's scope is ScopedProxyMode.TARGET_CLASS SONARJAVA-6660 S2229 FP: self-invocation inside a TransactionTemplate callback flagged despite an active programmatic transaction SONARJAVA-6833 Fix false positives for java:S2699 "Tests should include assertions" SONARJAVA-6870 Improve S9342 Archive entries should not be empty SONARJAVA-6874 Fix FP on S9351: "BigDecimal.compareTo()" should be used instead of "equals()" for numerical comparison SONARJAVA-6876 S2479 Reduce noise by suppressing on strings that are most likely generated SONARJAVA-6892 Fix FP in S8989 for cases where no transaction actually occurs SONARJAVA-6898 Fix FPs on S5786 and S5810: stop raising issues for public / protected test classes

False Negative

SONARJAVA-6888 Extend S9133 Predefined mathematical constants should be used instead of hard-coded approximations

Bug

SONARJAVA-5397 Custom Checkstyle issues are not imported SONARJAVA-6912 S6829 should recognize @​Inject constructors in Spring components

Maintenance

SONARJAVA-6687 Add exception for BigDecimal String constructor to the rule java:S2129 description SONARJAVA-6869 Prepare next development iteration 8.42.0 SONARJAVA-6875 Update SonarSource/sonar-scanner-engine monorepo to v13.10.0.4657 SONARJAVA-6877 Update dependency jdx/mise to v2026.8.11 SONARJAVA-6881 Update jdx/mise-action action to v4.3.0 SONARJAVA-6885 Update dependency jdx/mise to v2026.8.14 SONARJAVA-6886 Update SonarSource/sonar-plugin-api monorepo to v14 SONARJAVA-6890 Update SonarSource/sonarqube monorepo to v26.9.0.129388 SONARJAVA-6891 Remove redundant logging dependency handling SONARJAVA-6895 Update SonarSource/sonar-analyzer-commons monorepo to v2.31.0.5284 SONARJAVA-6900 Update dependency org.sonarsource.orchestrator:sonar-orchestrator-junit4 to v6.4.3.4676 SONARJAVA-6901 Update dependency org.apache.maven.plugins:maven-compiler-plugin to v3.16.0 SONARJAVA-6904 Update dependency jdx/mise to v2026.8.15 SONARJAVA-6909 Update dependency jdx/mise to v2026.9.0 SONARJAVA-6913 Update dependency jdx/mise to v2026.9.1 SONARJAVA-6935 Update rule metadata

8.41.0.47177

Release notes - SonarJava - 8.41

Feature

SONARJAVA-4647 java:S120: Update the location where the rule is raising an issue SONARJAVA-6304 Create rule S8218: Instant APIs should only use supported temporal units SONARJAVA-6780 Create rule S9354: "Comparable.compareTo()" and "Comparator.compare()" should not use subtraction on numerical fields SONARJAVA-6783 Create rule S9345: Classes with throwing constructors should be protected against Finalizer attacks

... (truncated)

Commits

• e321be6 Handle null expectedMessage in InternalCheckVerifier (#6098)
• aec760f SONARJAVA-6935 Update rule metadata (#6111)
• 7ed22b9 SONARJAVA-6833: S2699 - Fix false positives for disabled tests, Java assert, ...
• e3fee12 SONARJAVA-6912 Recognize @​Inject constructor selection (#6091)
• 4ea6fbe SONARJAVA-6906 - Modify S8924 to raise only on inconsistent Mockito import us...
• 80594fb SONARJAVA-6256: S6832 - Fix FP for non-singleton beans with scoped proxy mode...
• e912657 Update dependency jdx/mise to v2026.9.1 (#6089)
• a113375 SONARJAVA-6898 S5786/S5810: stop flagging class modifiers to avoid FPs (#6080)
• 1269d4e SONARJAVA-6888: Extend S9133 with additional mathematical constants (#6066)
• 82519ef Update dependency jdx/mise to v2026.9.0 (#6085)
• Additional commits viewable in compare view

Updates org.sonarsource.java:java-checks-testkit from 8.40.0.46617 to 8.42.0.47616

Release notes

Sourced from org.sonarsource.java:java-checks-testkit's releases.

8.42.0.47616

Release notes - SonarJava - 8.42

Feature

SONARJAVA-6868 Update RSPEC before 8.42 release SONARJAVA-6906 Improve rule S8924: raise only when the usage is inconsistent

False Positive

SONARJAVA-6256 S6832 should not raise when the injected bean's scope is ScopedProxyMode.TARGET_CLASS SONARJAVA-6660 S2229 FP: self-invocation inside a TransactionTemplate callback flagged despite an active programmatic transaction SONARJAVA-6833 Fix false positives for java:S2699 "Tests should include assertions" SONARJAVA-6870 Improve S9342 Archive entries should not be empty SONARJAVA-6874 Fix FP on S9351: "BigDecimal.compareTo()" should be used instead of "equals()" for numerical comparison SONARJAVA-6876 S2479 Reduce noise by suppressing on strings that are most likely generated SONARJAVA-6892 Fix FP in S8989 for cases where no transaction actually occurs SONARJAVA-6898 Fix FPs on S5786 and S5810: stop raising issues for public / protected test classes

False Negative

SONARJAVA-6888 Extend S9133 Predefined mathematical constants should be used instead of hard-coded approximations

Bug

SONARJAVA-5397 Custom Checkstyle issues are not imported SONARJAVA-6912 S6829 should recognize @​Inject constructors in Spring components

Maintenance

SONARJAVA-6687 Add exception for BigDecimal String constructor to the rule java:S2129 description SONARJAVA-6869 Prepare next development iteration 8.42.0 SONARJAVA-6875 Update SonarSource/sonar-scanner-engine monorepo to v13.10.0.4657 SONARJAVA-6877 Update dependency jdx/mise to v2026.8.11 SONARJAVA-6881 Update jdx/mise-action action to v4.3.0 SONARJAVA-6885 Update dependency jdx/mise to v2026.8.14 SONARJAVA-6886 Update SonarSource/sonar-plugin-api monorepo to v14 SONARJAVA-6890 Update SonarSource/sonarqube monorepo to v26.9.0.129388 SONARJAVA-6891 Remove redundant logging dependency handling SONARJAVA-6895 Update SonarSource/sonar-analyzer-commons monorepo to v2.31.0.5284 SONARJAVA-6900 Update dependency org.sonarsource.orchestrator:sonar-orchestrator-junit4 to v6.4.3.4676 SONARJAVA-6901 Update dependency org.apache.maven.plugins:maven-compiler-plugin to v3.16.0 SONARJAVA-6904 Update dependency jdx/mise to v2026.8.15 SONARJAVA-6909 Update dependency jdx/mise to v2026.9.0 SONARJAVA-6913 Update dependency jdx/mise to v2026.9.1 SONARJAVA-6935 Update rule metadata

8.41.0.47177

Release notes - SonarJava - 8.41

Feature

SONARJAVA-4647 java:S120: Update the location where the rule is raising an issue SONARJAVA-6304 Create rule S8218: Instant APIs should only use supported temporal units SONARJAVA-6780 Create rule S9354: "Comparable.compareTo()" and "Comparator.compare()" should not use subtraction on numerical fields SONARJAVA-6783 Create rule S9345: Classes with throwing constructors should be protected against Finalizer attacks

... (truncated)

Commits

• e321be6 Handle null expectedMessage in InternalCheckVerifier (#6098)
• aec760f SONARJAVA-6935 Update rule metadata (#6111)
• 7ed22b9 SONARJAVA-6833: S2699 - Fix false positives for disabled tests, Java assert, ...
• e3fee12 SONARJAVA-6912 Recognize @​Inject constructor selection (#6091)
• 4ea6fbe SONARJAVA-6906 - Modify S8924 to raise only on inconsistent Mockito import us...
• 80594fb SONARJAVA-6256: S6832 - Fix FP for non-singleton beans with scoped proxy mode...
• e912657 Update dependency jdx/mise to v2026.9.1 (#6089)
• a113375 SONARJAVA-6898 S5786/S5810: stop flagging class modifiers to avoid FPs (#6080)
• 1269d4e SONARJAVA-6888: Extend S9133 with additional mathematical constants (#6066)
• 82519ef Update dependency jdx/mise to v2026.9.0 (#6085)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.