Release 2.1.0

Highlights

New command line argument:

• --config: Path to the configuration file. The file format must comply with the provided JSON schema. You can refer to the example zpa-config-example.json for guidance. If the configuration file is not provided, only the rules marked as "activated by default" will be executed.

ZPA 3.6.0

This release includes the latest version of ZPA (3.6.0).

Make sure to build your custom plugins with this version of ZPA before using them in ZPA CLI.

Binaries

🌟 Universal

This distribution requires an external Java runtime.

• zpa-cli-2.1.0.zip (requires Java 17+)

☕️ Bundled Java Runtimes

These binaries provide their own Java runtime.

Platform	Intel	Arm
MacOS	zpa-cli-2.1.0-osx-x86_64.tar.gz	zpa-cli-2.1.0-osx-aarch_64.tar.gz
Linux (glibc)	zpa-cli-2.1.0-linux-x86_64.tar.gz	zpa-cli-2.1.0-linux-aarch_64.tar.gz
Alpine Linux (musl)	zpa-cli-2.1.0-linux_musl-x86_64.tar.gz
Windows	zpa-cli-2.1.0-windows-x86_64.zip

Full changelog

🔀 Merge

• 1e1e170 Merge pull request #9 from felipebz/renovate/all, closes #9
• 3a81a96 Merge pull request #8 from felipebz/renovate/all, closes #8
• 1d4eb1c Merge pull request #7 from felipebz/renovate/all, closes #7
• f074093 Merge pull request #5 from felipebz/renovate/all, closes #5

🚀 Features

• 4e31f34 Update bundled JRE to 21.0.4
• 3a318db Add a config to set the base ruleset
• 9df9c51 Use new ActiveRuleConfigurer from ZPA to support 'on' and 'off' options in config
• efcb4c5 Add a JSON schema defining the config file format
• 44e980a Add RuleLevel enum to the config file
• 3957686 Update config format and add an example
• d6abd2b Add an initial prototype of config file to configure the rules
• aee33c8 Copy the plugins to a temporary dir for package location and replace the dependency on sonar-zpa-plugin by zpa-core/checks
• 867ff5b Remove dependency on sonar-plugin-api
• 134ee17 Replace gson by jackson

🐛 Fixes

• f2a7d68 deps: update all dependencies to v3.6.0
• 6a4f125 deps: update dependency com.fasterxml.jackson.module:jackson-module-kotlin to v2.18.0
• eeee5d0 renovate: switch mode from silent to full

🔄️ Changes

• d2a5fab Refactor exporters
• 69ab5da Fix LegacyKeyValueFormat warning on Dockerfile

🧰 Tasks

• d228254 Update config example
• 131183d deps: update dependency gradle to v8.10.2
• 7eb2ede docs: Remove links to the early-access release in preparation for shorter release cycles
• 15ef5a3 Update JReleaser config to mark the GitHub releases as draft
• dd1f698 deps: update all dependencies
• 7749cea Configure Renovate
• 23a215f Update Gradle to 8.10.1
• 20c80cd Update dependencies
• 1b68723 Update Kotlin to 2.0.20
• 2cbe508 Update links to the new website
• 2c9704d Update changelog template
• 12ba667 Update to JReleaser 1.13.1
• 82bad5b Update to JReleaser 1.13.1
• 705a4b0 Update JReleaser config
• 5133546 deps: Remove explicit dependency on jackson-databind because sonar-zpa-plugin already contains a copy of it
• 4e646fd Add .editorconfig
• 787eff7 deps: Bump ZPA version to 3.6.0-SNAPSHOT
• 46dedb4 Update tag pattern

🛠 Build

• bc2cbf0 Release 2.1.0
• 13e70cb Use Gradle 8.10
• 5a078a0 Enable parallel execution and build cache in Gradle
• 7127527 Use Gradle 8.9
• dd2194c Bump project version

📝 Documentation

• 1e674fc Include the --config argument in README.md

Release 2.0.0

Highlights

Support for custom plugins

ZPA CLI now supports the same custom plugins as the ZPA Plugin for SonarQube. You can create a plugin by following the plugin development guide.

To use a custom plugin, simply add the JAR file to the plugins directory.

Binaries

🌟 Universal

This distribution requires an external Java runtime.

• zpa-cli-2.0.0.zip (requires Java 17+)

☕️ Bundled Java Runtimes

These binaries provide their own Java runtime.

Platform	Intel	Arm
MacOS	zpa-cli-2.0.0-osx-x86_64.tar.gz	zpa-cli-2.0.0-osx-aarch_64.tar.gz
Linux (glibc)	zpa-cli-2.0.0-linux-x86_64.tar.gz	zpa-cli-2.0.0-linux-aarch_64.tar.gz
Alpine Linux (musl)	zpa-cli-2.0.0-linux_musl-x86_64.tar.gz
Windows	zpa-cli-2.0.0-windows-x86_64.zip

Changelog

🔀 Merge

• f2c0027 Merge pull request #3 from angelobernardi/feature/SeverityToConsoleOutput
• 58af14c Merge pull request #2 from felipecrs/docker

🚀 Features

• 843b8ad feat: Add a default "plugins" dir in the distribution
• bfbc879 feat: Set a non-root user in Dockerfile
• 18aa33e feat: Remove the (unfinished) integration with SonarQube
• 52b4772 feat: Add basic support to custom plugins

🐛 Fixes

• c28770c fix: Fix execution on Windows
• a471752 fix: Update console formatting

🔄️ Changes

• cb2125f refactor: Remove unnecessary code and add the DefaultRulesDefinition class to define the repository

🧰 Tasks

• 32ed56a chore: Update changelog.tpl
• 7d654b1 chore: Update requirements in README.md
• c0b1030 chore: Remove FUNDING.yml
• 76425e5 chore: Bump ZPA version to 3.2.0
• a22201e chore: Update changelog formatting
• 494b3c1 chore: Remove contributors and uncategorized commits from changelog
• a806cee chore: Format changelog
• 09eedbe chore: Use Gradle 7.6

🛠 Build

• f9b18b5 build: Release 2.0.0
• 5ff7849 build(deps): Use ZPA 3.5.1
• c9b2ceb build: Remove unnecessary java.sql module
• b49985b build: Replace Clikt by JCommander
• 3912ecd build: Update dependencies
• f72965b build: Remove unnecessary java.sql module
• 68c9455 build: Fix copyDependencies task
• dd0e8e5 build: Update bundled JDK to 21.0.3 and keep the version consistent with the Dockerfile
• 3457f57 build: Update to Gradle 8.8
• 3e620fe build: Update build plugins
• 469d84d build: Change container platform from linux/arm64 to linux/arm64/v8
• fc8893b build(deps): Update Kotlin to 2.0.0
• 1a80aeb build(deps): Update Kotlin to 2.0.0
• a275a77 build: Publish a multi-arch container image
• c26905f build: Update to Gradle 8.7
• 1e14e8d build: Update GitHub Actions to use newer versions and revise build commands
• 4cdbf0a build: Update to Gradle 8.6 and Kotlin 1.9.22
• 39a4091 build: Use Kotlin 1.9.10
• 980a24a build: Use JReleaser 1.8.0
• 8ce04d2 build: Use Gradle 8.4
• 7972e79 build: Update dependencies
• 9f49299 build: Use Gradle 8.2.1
• 6f46002 build: Fetch all commits in gh actions
• e1b586e build: Update pipeline
• b11c8c1 build: Checkout submodules on gh actions
• efa179c build: Remove explicit guava dependency
• cf5bf5f build: Include a release step on gh actions
• ea27188 build: Update bundled JDK version to 17.0.7
• c130242 build: Use JReleaser 1.6.0
• 52fe0aa build: Migrate to GitHub Actions
• 4d22f86 build: Update Azure Pipelines tasks
• b292754 build: Use Kotlin 1.8.20 and Gradle 8.1.1
• 08f0d56 build: Replace ZPA dependencies by a dependency on sonar-zpa-plugin
• df1dcf5 build: Update azure-pipelines.yaml
• 202e93e build: Revert "Use JReleaser 1.5.1" because of problems with JLink
• 4b71079 build: Bump ZPA version to 3.3.0-SNAPSHOT
• 35a3312 build: Use JReleaser 1.5.1
• efedd1b build: Use Gradle 8.0.2
• 1fd1132 build: Use Gradle 8.0.1
• f1b3d46 build: Use Kotlin 1.8.10
• 636db42 build: Use alpine as the base image for docker
• a54d2d6 build: Add a JLink image for Alpine Linux
• 5f91da5 build: Cache JDKs correctly on Azure Pipelines
• 854e04f build: Use the jlink image in Dockerfile
• d4c42b6 build: Changed package format to .tar.gz for Linux and macOS
• 209ed3e build: Remove shadow plugin
• eabc65d build: Use JReleaser 1.4.0
• 846100c build: Use Kotlin 1.8.0

📝 Documentation

• e1557d0 docs: Add CONTRIBUTING.md

1.2.0

• Update to ZPA 3.1.0
• Enable multi-threaded analysis for files.

1.1.0

• Update to ZPA 3.0.0
• Now the default output format is console. To generate a SonarQube "Generic Issue Data" file you must set the options --output-format sq-generic-issue-import --output-file <filename>.

1.0.0

This is the first release of ZPA CLI!

This version generates a file in the "Generic Issue Data" format to use in SonarCloud or in a SonarQube server, as an alternative to the dedicated Z PL/SQL Analyzer Plugin.