pmd-devel Mailing List for PMD

Greetings and welcome to the latest OpenJDK Quality Outreach update!

JDK 24 was officially released (General Availability) on March 18th during JavaOne. You can rewatch the Java 24 launch and the J1 keynote here [1]. Be sure to also check out the Quality Outreach section here [2]. JavaOne was amazing, and if you couldn't attend, make sure to watch the JavaOne 2025 playlist [3] regularly as sessions are gradually being added.

With the release of JDK 24, the focus now moves to JDK 25 testing. On that note, be sure to check out the heads-up below, with more to follow. And as always, if you experience any issues with your project running on a JDK 25 early-access builds, please don't hesitate to reach out.

[1] https://www.youtube.com/watch?v=mk_2MIWxLI0&t=12s
[2] https://www.youtube.com/live/GwR7Gvi80Xo?si=gxdqAhVbnNV0JZGt&t=2795
[3] https://www.youtube.com/playlist?list=PLX8CzqL3ArzVV1xRJkRbcM2tOgVwytJAi


# Heads-up - JDK 25: New Null Checks in Inner Class Constructors

The Java Language Specification prescribes that various use sites of inner class constructors should include null checks of the immediately enclosing instance and from then on assumes that the reference is non-null. However, it does not mandate such checks of the incoming instance at the declaration site of these constructors and so core reflection, method handles, and direct bytecode invocation can pass null as enclosing instance, which can lead to NullPointerExceptions down the road.

Since a null enclosing instance is outside of the JLS and the future evolution of inner classes may lead to unexpected NPEs, Java 25 will start ensuring that references to the immediately enclosing instance are always non-null.

Starting with JDK 25, when javac is targeting release 25 or higher, it will emit null checks for the enclosing instances in inner class constructors.

This behavioral change will lead to new NPEs in code that uses core reflection, method handles, or direct bytecode invocation to pass null as enclosing instance. Such code is rare and usually found in libraries or frameworks (as opposed to in applications). It should be changed to no longer pass a null reference.

In case these additional checks lead to issues, their emission can be prevented with a flag: `-XDnullCheckOuterThis=(true|false)`. This should be seen as a temporary workaround and no guarantees are made for how long this flag will be available.

For more details, check JDK-8351274 [4].

[4] https://bugs.openjdk.org/browse/JDK-8351274


# JDK 25

The JDK 25 early-access builds 17 are available [5] and are provided under the GNU General Public License v2, with the Classpath Exception. The Release Notes are available here [6].

The following JEPs have been targeted to JDK 25, so far:
- JEP 502: Stable Values (Preview)
- JEP 503: Remove the 32-bit x86 Port

## Changes in recent JDK 25 builds that may be of interest:
- JDK-8353118: Deprecate the use of `java.locale.useOldISOCodes` system property
- JDK-8351435: Change the default Console implementation back to the built-in one in `java.base` module
- JDK-8350459: MontgomeryIntegerPolynomialP256 multiply intrinsic with AVX2 on x86_64
- JDK-8349583: Add mechanism to disable signature schemes based on their TLS scope
- JDK-8338675: javac shouldn't silently change .jar files on the classpath
- JDK-8319447: Improve performance of delayed task handling
- JDK-8341775: Duplicate manifest files are removed by jarsigner after signing
- JDK-8303770: Remove Baltimore root certificate expiring in May 2025
- JDK-8346948: Update CLDR to Version 47.0
- JDK-8348829: Remove ObjectMonitor perf counters
- JDK-8164714: Constructor.newInstance creates instance of inner class with null outer class
- JDK-8352716: (tz) Update Timezone Data to 2025b
- JDK-8347946: Add API note that caller should validate/trust signers to the getCertificates and getCodeSigners methods of JarEntry and JarURLConnection
- JDK-8345213: JVM Prefers /etc/timezone Over /etc/localtime on Debian 12
- JDK-8350646: Calendar.Builder.build() Throws ArrayIndexOutOfBoundsException
- JDK-8347433: Deprecate XML interchange in java.management/javax/management/modelmbean/DescriptorSupport for removal
- JDK-8328119: Support HKDF in SunPKCS11 (Preview)
- JDK-8327378: XMLStreamReader throws EOFException instead of XMLStreamException
- JDK-8024695: new File("").exists() returns false whereas it is the current working directory
- JDK-8351224: Deprecate com.sun.tools.attach.AttachPermission for removal
- JDK-8351310: Deprecate com.sun.jdi.JDIPermission for removal
- JDK-8348561: Add aarch64 intrinsics for ML-DSA
- JDK-8351266: JFR: -XX:StartFlightRecording:report-on-exit
- JDK-8350638: Make keyboard navigation more usable in API docs
- JDK-8350464: The flags to set the native priority for the VMThread and Java threads need a broader range
- JDK-8349860: Make Class.isArray(), Class.isInterface() and Class.isPrimitive() non-native
- JDK-8347335: ZGC: Use limitless mark stack memory
- JDK-8348596: Update FreeType to 2.13.3

Note: A more exhaustive list of changes can be found here [7].

[5] https://jdk.java.net/25/
[6] https://jdk.java.net/25/release-notes
[7] https://github.com/openjdk/jdk/compare/jdk-25+10...jdk-25+17


# JavaFX 25 Early-Access Builds

These are early access builds of the JavaFX 25 Runtime built from openjdk/jfx [8]. These builds enable JavaFX application developers to build and test their applications with JavaFX 25 on JDK 25. Although these builds are designed to work with JDK 25-EA builds, they are also known to work with JDK 22 and later versions.

The latest early access builds of JavaFX 25 Builds 11 (2025/4/4) are now available [9], under the GNU General Public License, version 2, with the Classpath Exception. JavaFX 25 API Javadocs [10] are available too.

[8] https://github.com/openjdk/jfx
[9] https://jdk.java.net/javafx25/
[10] https://download.java.net/java/early_access/javafx25/docs/api/overview-summary.html


# Topics of Interest

- The Arrival of Java 24
https://blogs.oracle.com/java/post/the-arrival-of-java-24

- Performance Improvements in JDK 24
https://inside.java/2025/03/19/performance-improvements-in-jdk24/

- Java 24 - Better Language, Better APIs, Better Runtime
https://inside.java/2025/03/01/jfokus-better-jdk24/

- JDK 24 Release Notes Overview - Security Update
https://inside.java/2025/04/05/java-24-security-notes/

- JDK 24 Release Notes Review for Developers
https://inside.java/2025/03/13/newscast-87/

- JDK 24 Release Notes Overview for Operations
https://inside.java/2025/03/29/java-24-for-ops/

- JDK 24 G1/Parallel/Serial GC Changes
https://tschatzl.github.io/2025/04/01/jdk24-g1-serial-parallel-gc-changes.html

- Scoped Values in Java 24
https://inside.java/2025/02/27/newscast-86/

- Stable Values in Java 25
https://inside.java/2025/03/27/newscast-88/

- New Write Barriers for G1
http://tschatzl.github.io/2025/02/21/new-write-barriers.html

- SuperWord (Auto-Vectorization) - Scheduling
https://eme64.github.io/blog/2023/05/16/SuperWord-Scheduling.html

~

That's it for this time. Feel free to reach out if you encounter any issues while testing your project(s) with the latest JDK early-access builds.

--David

  * Downloads: https://github.com/pmd/pmd/releases/tag/pmd_releases%2F7.12.0
  * Documentation: https://docs.pmd-code.org/pmd-doc-7.12.0/


    28-March-2025 - 7.12.0

The PMD team is pleased to announce PMD 7.12.0.

This is a minor release.


      Table Of Contents

  * 🚀 New and noteworthy
    <https://sourceforge.net/p/pmd/news/2025/03/pmd-7120-28-march-2025-released/#new-and-noteworthy>

      o ✨ New Rules
        <https://sourceforge.net/p/pmd/news/2025/03/pmd-7120-28-march-2025-released/#new-rules>
  * 🐛 Fixed Issues
    <https://sourceforge.net/p/pmd/news/2025/03/pmd-7120-28-march-2025-released/#fixed-issues>
  * 🚨 API Changes
    <https://sourceforge.net/p/pmd/news/2025/03/pmd-7120-28-march-2025-released/#api-changes>

      o Deprecations
        <https://sourceforge.net/p/pmd/news/2025/03/pmd-7120-28-march-2025-released/#deprecations>
  * ✨ Merged pull requests
    <https://sourceforge.net/p/pmd/news/2025/03/pmd-7120-28-march-2025-released/#merged-pull-requests>
  * 📦 Dependency updates
    <https://sourceforge.net/p/pmd/news/2025/03/pmd-7120-28-march-2025-released/#dependency-updates>
  * 📈 Stats
    <https://sourceforge.net/p/pmd/news/2025/03/pmd-7120-28-march-2025-released/#stats>


      🚀 New and noteworthy


        ✨ New Rules

  * The new Java rule |ImplicitFunctionalInterface|
    <https://docs.pmd-code.org/pmd-doc-7.12.0/pmd_rules_java_bestpractices.html#implicitfunctionalinterface>
    reports functional interfaces that were
    not explicitly declared as such with the annotation
    |@FunctionalInterface|. If an interface is accidentally a functional
    interface, then it should bear a
    |@SuppressWarnings("PMD.ImplicitFunctionalInterface")|
    annotation to make this clear.


      🐛 Fixed Issues

  * core
  * #5593 <https://github.com/pmd/pmd/issues/5593>: [core] Make
    renderers output files in deterministic order even when multithreaded
  * apex
  * #5567 <https://github.com/pmd/pmd/issues/5567>: [apex] Provide type
    information for CastExpression
  * apex-design
  * #5616 <https://github.com/pmd/pmd/issues/5616>: [apex]
    ExcessiveParameterList reports entire method instead of signature only
  * java
  * #5587 <https://github.com/pmd/pmd/issues/5587>: [java] Thread
    deadlock during PMD analysis in ParseLock.getFinalStatus
  * java-bestpractices
  * #2849 <https://github.com/pmd/pmd/issues/2849>: [java] New Rule:
    ImplicitFunctionalInterface
  * #5369 <https://github.com/pmd/pmd/issues/5369>: [java]
    UnusedPrivateMethod false positives with lombok.val
  * #5590 <https://github.com/pmd/pmd/issues/5590>: [java]
    LiteralsFirstInComparisonsRule not applied on constant
  * #5592 <https://github.com/pmd/pmd/issues/5592>: [java]
    UnusedAssignment false positive in record compact constructor
  * java-codestyle
  * #5079 <https://github.com/pmd/pmd/issues/5079>: [java]
    LocalVariableCouldBeFinal false-positive with lombok.val
  * #5452 <https://github.com/pmd/pmd/issues/5452>: [java] PackageCase:
    Suppression comment has no effect due to finding at wrong position
    in case of JavaDoc comment
  * plsql
  * #4441 <https://github.com/pmd/pmd/issues/4441>: [plsql] Parsing
    exception with XMLQUERY function in SELECT
  * #5521 <https://github.com/pmd/pmd/issues/5521>: [plsql] Long parse
    time and eventually parse error with XMLAGG order by clause


      🚨 API Changes


        Deprecations

  * java
  * The method |buildConstValue|
    <https://docs.pmd-code.org/apidocs/pmd-java/7.12.0/net/sourceforge/pmd/lang/java/ast/AbstractJavaExpr.html#buildConstValue()>
    is deprecated for removal. It should
    have been package-private from the start. In order to get the
    (compile time) const value of an expression, use
    |getConstValue|
    <https://docs.pmd-code.org/apidocs/pmd-java/7.12.0/net/sourceforge/pmd/lang/java/ast/ASTExpression.html#getConstValue()>
    or |getConstFoldingResult|
    <https://docs.pmd-code.org/apidocs/pmd-java/7.12.0/net/sourceforge/pmd/lang/java/ast/ASTExpression.html#getConstFoldingResult()>
    instead.
  *

    For the same reason, the following methods are also deprecated for
    removal:
    |buildConstValue|
    <https://docs.pmd-code.org/apidocs/pmd-java/7.12.0/net/sourceforge/pmd/lang/java/ast/ASTNumericLiteral.html#buildConstValue()>
    and |buildConstValue|
    <https://docs.pmd-code.org/apidocs/pmd-java/7.12.0/net/sourceforge/pmd/lang/java/ast/ASTStringLiteral.html#buildConstValue()>.

  *

    |JTypeVar#withUpperbound|
    <https://docs.pmd-code.org/apidocs/pmd-java/7.12.0/net/sourceforge/pmd/lang/java/types/JTypeVar.html#withUpperbound(net.sourceforge.pmd.types.JTypeMirror)>
    is deprecated. It was previously meant to be used
    internally and not needed anymore.


      ✨ Merged pull requests

  * #5550 <https://github.com/pmd/pmd/pull/5550>: Fix #5521: [plsql]
    Improve parser performance by reducing lookaheads - Andreas Dangel
    <https://github.com/adangel> (@adangel
    <https://sourceforge.net/u/adangel/profile/>)
  * #5554 <https://github.com/pmd/pmd/pull/5554>: Fix #5369: [java]
    Consider that lombok.val and var are inferred - Clément Fournier
    <https://github.com/oowekyala> (@oowekyala
    <https://sourceforge.net/u/oowekyala/profile/>)
  * #5555 <https://github.com/pmd/pmd/pull/5555>: Fix #2849: [java] Add
    rule ImplicitFunctionalInterface - Clément Fournier
    <https://github.com/oowekyala> (@oowekyala
    <https://sourceforge.net/u/oowekyala/profile/>)
  * #5556 <https://github.com/pmd/pmd/pull/5556>: [ci] New workflow
    "Publish Results from Pull Requests" - Andreas Dangel
    <https://github.com/adangel> (@adangel
    <https://sourceforge.net/u/adangel/profile/>)
  * #5574 <https://github.com/pmd/pmd/pull/5574>: Fix #5567: [apex]
    Provide type info for CastExpression - Andreas Dangel
    <https://github.com/adangel> (@adangel
    <https://sourceforge.net/u/adangel/profile/>)
  * #5583 <https://github.com/pmd/pmd/pull/5583>: [java] Fix race
    condition in ClassStub for inner classes - Andreas Dangel
    <https://github.com/adangel> (@adangel
    <https://sourceforge.net/u/adangel/profile/>)
  * #5586 <https://github.com/pmd/pmd/pull/5586>: [java/core] Micro
    optimizations - Clément Fournier <https://github.com/oowekyala>
    (@oowekyala <https://sourceforge.net/u/oowekyala/profile/>)
  * #5588 <https://github.com/pmd/pmd/pull/5588>: [java] Fix crash when
    parsing class for anonymous class - Clément Fournier
    <https://github.com/oowekyala> (@oowekyala
    <https://sourceforge.net/u/oowekyala/profile/>)
  * #5591 <https://github.com/pmd/pmd/pull/5591>: Fix #5587: [java] Fix
    deadlock while loading ClassStub - Clément Fournier
    <https://github.com/oowekyala> (@oowekyala
    <https://sourceforge.net/u/oowekyala/profile/>)
  * #5593 <https://github.com/pmd/pmd/pull/5593>: [core] Make renderers
    output files in deterministic order even when multithreaded -
    Clément Fournier <https://github.com/oowekyala> (@oowekyala
    <https://sourceforge.net/u/oowekyala/profile/>)
  * #5595 <https://github.com/pmd/pmd/pull/5595>: Fix #5590: [java]
    LiteralsFirstInComparisons with constant field - Clément Fournier
    <https://github.com/oowekyala> (@oowekyala
    <https://sourceforge.net/u/oowekyala/profile/>)
  * #5596 <https://github.com/pmd/pmd/pull/5596>: Fix #4441: [plsql]
    XMLQuery - Support identifier as XQuery_string parameter - Andreas
    Dangel <https://github.com/adangel> (@adangel
    <https://sourceforge.net/u/adangel/profile/>)
  * #5598 <https://github.com/pmd/pmd/pull/5598>: Fix #5592: [java] Fix
    UnusedAssignment FP with compact record ctor - Clément Fournier
    <https://github.com/oowekyala> (@oowekyala
    <https://sourceforge.net/u/oowekyala/profile/>)
  * #5600 <https://github.com/pmd/pmd/pull/5600>: Fix #5079: [java]
    LocalVariableCouldBeFinal false-positive with lombok.val - Clément
    Fournier <https://github.com/oowekyala> (@oowekyala
    <https://sourceforge.net/u/oowekyala/profile/>)
  * #5611 <https://github.com/pmd/pmd/pull/5611>: Fix #5452: [java]
    PackageCase reported on wrong line - Clément Fournier
    <https://github.com/oowekyala> (@oowekyala
    <https://sourceforge.net/u/oowekyala/profile/>)
  * #5617 <https://github.com/pmd/pmd/pull/5617>: Fix #5616: [apex]
    ExcessiveParameterList: Report only method signature - Andreas
    Dangel <https://github.com/adangel> (@adangel
    <https://sourceforge.net/u/adangel/profile/>)
  * #5618 <https://github.com/pmd/pmd/pull/5618>: [doc] Fix search index
    - Andreas Dangel <https://github.com/adangel> (@adangel
    <https://sourceforge.net/u/adangel/profile/>)


      📦 Dependency updates

  * #5558 <https://github.com/pmd/pmd/pull/5558>: Bump PMD from 7.10.0
    to 7.11.0
  * #5561 <https://github.com/pmd/pmd/pull/5561>: Bump
    org.apache.groovy:groovy from 4.0.25 to 4.0.26
  * #5562 <https://github.com/pmd/pmd/pull/5562>: Bump
    org.junit.platform:junit-platform-suite from 1.11.4 to 1.12.0
  * #5564 <https://github.com/pmd/pmd/pull/5564>: Bump
    org.apache.maven.plugins:maven-clean-plugin from 3.4.0 to 3.4.1
  * #5565 <https://github.com/pmd/pmd/pull/5565>: Bump
    org.apache.maven.plugins:maven-deploy-plugin from 3.1.3 to 3.1.4
  * #5566 <https://github.com/pmd/pmd/pull/5566>: Bump
    io.github.apex-dev-tools:apex-ls_2.13 from 5.7.0 to 5.8.0
  * #5571 <https://github.com/pmd/pmd/pull/5571>: Bump nokogiri from
    1.16.7 to 1.18.3
  * #5572 <https://github.com/pmd/pmd/pull/5572>: Bump uri from 0.13.1
    to 1.0.3
  * #5575 <https://github.com/pmd/pmd/pull/5575>: Bump org.jsoup:jsoup
    from 1.18.3 to 1.19.1
  * #5576 <https://github.com/pmd/pmd/pull/5576>: Bump scalameta.version
    from 4.13.2 to 4.13.3
  * #5577 <https://github.com/pmd/pmd/pull/5577>: Bump
    org.yaml:snakeyaml from 2.3 to 2.4
  * #5578 <https://github.com/pmd/pmd/pull/5578>: Bump
    com.google.protobuf:protobuf-java from 4.29.3 to 4.30.0
  * #5580 <https://github.com/pmd/pmd/pull/5580>: Bump
    net.bytebuddy:byte-buddy from 1.17.1 to 1.17.2
  * #5581 <https://github.com/pmd/pmd/pull/5581>: Bump
    com.puppycrawl.tools:checkstyle from 10.21.3 to 10.21.4
  * #5582 <https://github.com/pmd/pmd/pull/5582>: Bump the gems liquid
    to 5.8.1 and logger to 1.6.6
  * #5602 <https://github.com/pmd/pmd/pull/5602>: Bump
    org.apache.maven.plugins:maven-install-plugin from 3.1.3 to 3.1.4
  * #5603 <https://github.com/pmd/pmd/pull/5603>: Bump
    net.bytebuddy:byte-buddy-agent from 1.17.1 to 1.17.2
  * #5604 <https://github.com/pmd/pmd/pull/5604>: Bump
    org.mockito:mockito-core from 5.15.2 to 5.16.1
  * #5605 <https://github.com/pmd/pmd/pull/5605>: Bump
    org.junit.platform:junit-platform-suite from 1.12.0 to 1.12.1
  * #5606 <https://github.com/pmd/pmd/pull/5606>: Bump
    org.checkerframework:checker-qual from 3.49.0 to 3.49.1
  * #5608 <https://github.com/pmd/pmd/pull/5608>: Bump
    com.google.protobuf:protobuf-java from 4.30.0 to 4.30.1
  * #5619 <https://github.com/pmd/pmd/pull/5619>: Bump nokogiri from
    1.18.3 to 1.18.5
  * #5624 <https://github.com/pmd/pmd/pull/5624>: Bump scalameta.version
    from 4.13.3 to 4.13.4
  * #5627 <https://github.com/pmd/pmd/pull/5627>: Bump
    net.bytebuddy:byte-buddy-agent from 1.17.2 to 1.17.4
  * #5628 <https://github.com/pmd/pmd/pull/5628>: Bump
    io.github.apex-dev-tools:apex-ls_2.13 from 5.8.0 to 5.9.0
  * #5629 <https://github.com/pmd/pmd/pull/5629>: Bump
    com.google.guava:guava from 33.4.0-jre to 33.4.5-jre
  * #5630 <https://github.com/pmd/pmd/pull/5630>: Bump
    net.bytebuddy:byte-buddy from 1.17.2 to 1.17.4


      📈 Stats

  * 114 commits
  * 28 closed tickets & PRs
  * Days since last release: 27

  * Downloads: https://github.com/pmd/pmd/releases/tag/pmd_releases%2F7.11.0
  * Documentation: https://docs.pmd-code.org/pmd-doc-7.11.0/


    28-February-2025 - 7.11.0

The PMD team is pleased to announce PMD 7.11.0.

This is a minor release.


      Table Of Contents

  * 🚀 New and noteworthy
    <https://sourceforge.net/p/pmd/news/2025/02/pmd-7110-28-february-2025-released/#new-and-noteworthy>

      o ✨ New Rules
        <https://sourceforge.net/p/pmd/news/2025/02/pmd-7110-28-february-2025-released/#new-rules>
      o Signed Releases
        <https://sourceforge.net/p/pmd/news/2025/02/pmd-7110-28-february-2025-released/#signed-releases>
  * 🐛 Fixed Issues
    <https://sourceforge.net/p/pmd/news/2025/02/pmd-7110-28-february-2025-released/#fixed-issues>
  * 🚨 API Changes
    <https://sourceforge.net/p/pmd/news/2025/02/pmd-7110-28-february-2025-released/#api-changes>

      o Deprecations
        <https://sourceforge.net/p/pmd/news/2025/02/pmd-7110-28-february-2025-released/#deprecations>
  * ✨ Merged pull requests
    <https://sourceforge.net/p/pmd/news/2025/02/pmd-7110-28-february-2025-released/#merged-pull-requests>
  * 📦 Dependency updates
    <https://sourceforge.net/p/pmd/news/2025/02/pmd-7110-28-february-2025-released/#dependency-updates>
  * 📈 Stats
    <https://sourceforge.net/p/pmd/news/2025/02/pmd-7110-28-february-2025-released/#stats>


      🚀 New and noteworthy


        ✨ New Rules

  * The new Apex rule |AvoidStatefulDatabaseResult|
    <https://docs.pmd-code.org/pmd-doc-7.11.0/pmd_rules_apex_errorprone.html#avoidstatefuldatabaseresult>
    detects |Database.Stateful| implementations
    that store database results in instance variables. This can cause
    serialization issues between successive batch
    iterations.


        Signed Releases

We now not only sign the maven artifacts, but also our binary 
distribution files that you can
download from GitHub Releases <https://github.com/pmd/pmd/releases>.
See the page Signed Releases 
<https://docs.pmd-code.org/latest/pmd_userdocs_signed_releases.html> in 
our documentation for how to verify the files.


      🐛 Fixed Issues

  * apex-errorprone
      o #5305 <https://github.com/pmd/pmd/issues/5305>: [apex] New Rule:
        Avoid Stateful Database Results
  * java
      o #5442 <https://github.com/pmd/pmd/issues/5442>: [java]
        StackOverflowError with recursive generic types
      o #5493 <https://github.com/pmd/pmd/issues/5493>: [java]
        IllegalArgumentException: <?> cannot be a wildcard bound
      o #5505 <https://github.com/pmd/pmd/issues/5505>: [java]
        java.lang.StackOverflowError while executing a PmdRunnable
  * java-bestpractices
      o #3359 <https://github.com/pmd/pmd/issues/3359>: [java]
        UnusedPrivateMethod does not recognize Lombok
        @EqualsAndHashCode.Include annotation
      o #5486 <https://github.com/pmd/pmd/issues/5486>: [java]
        UnusedPrivateMethod detected when class is referenced in another
        class
      o #5504 <https://github.com/pmd/pmd/issues/5504>: [java]
        UnusedAssignment false-positive in for-loop with continue
  * java-codestyle
      o #4822 <https://github.com/pmd/pmd/issues/4822>: [java]
        UnnecessaryCast false-positive for raw types
      o #5073 <https://github.com/pmd/pmd/issues/5073>: [java]
        UnnecessaryCast false-positive for cast in return position of lambda
      o #5440 <https://github.com/pmd/pmd/issues/5440>: [java]
        UnnecessaryCast reported in stream chain map() call that casts
        to more generic interface
      o #5523 <https://github.com/pmd/pmd/issues/5523>: [java]
        UnnecessaryCast false-positive for integer operations in
        floating-point context
      o #5541 <https://github.com/pmd/pmd/pull/5541>: [java] Fix
        IdenticalCatchBranch reporting branches that call different
        overloads
  * java-design
      o #5018 <https://github.com/pmd/pmd/issues/5018>: [java]
        FinalFieldCouldBeStatic false-positive for access of super class
        field
  * plsql
      o #5522 <https://github.com/pmd/pmd/issues/5522>: [plsql] Parse
        error for operator in TRIM function call


      🚨 API Changes


        Deprecations

  * java
  * The method |TypeOps#isContextDependent(JMethodSig)|
    <https://docs.pmd-code.org/apidocs/pmd-java/7.11.0/net/sourceforge/pmd/lang/java/types/TypeOps.html#isContextDependent(net.sourceforge.pmd.lang.java.types.JMethodSig)>
    is deprecated for removal.
    Use |isContextDependent(JExecutableSymbol)|
    <https://docs.pmd-code.org/apidocs/pmd-java/7.11.0/net/sourceforge/pmd/lang/java/types/TypeOps.html#isContextDependent(net.sourceforge.pmd.lang.java.symbols.JExecutableSymbol)>
    instead which
    is more flexible.


      ✨ Merged pull requests

  * #5425 <https://github.com/pmd/pmd/pull/5425>: [apex] New Rule: Avoid
    Stateful Database Results - Mitch Spano
    <https://github.com/mitchspano> (@mitchspano)
  * #5491 <https://github.com/pmd/pmd/pull/5491>: [docs] Call
    render_release_notes.rb within docs - Andreas Dangel
    <https://github.com/adangel> (@adangel
    <https://sourceforge.net/u/adangel/profile/>)
  * #5492 <https://github.com/pmd/pmd/pull/5492>: [docs] Add security
    page with known vulnerabilities - Andreas Dangel
    <https://github.com/adangel> (@adangel
    <https://sourceforge.net/u/adangel/profile/>)
  * #5503 <https://github.com/pmd/pmd/pull/5503>: [java]
    AvoidSynchronizedAtMethodLevel: Fixed error in code example - Balazs
    Glatz <https://github.com/gbq6> (@gbq6)
  * #5507 <https://github.com/pmd/pmd/pull/5507>: Fix #5486: [java] Fix
    UnusedPrivateMethod - always search decls in current AST - Andreas
    Dangel <https://github.com/adangel> (@adangel
    <https://sourceforge.net/u/adangel/profile/>)
  * #5508 <https://github.com/pmd/pmd/pull/5508>: Fix #3359: [java]
    UnusedPrivateMethod: Ignore lombok.EqualsAndHashCode.Include -
    Andreas Dangel <https://github.com/adangel> (@adangel
    <https://sourceforge.net/u/adangel/profile/>)
  * #5510 <https://github.com/pmd/pmd/pull/5510>: [ci] Add signed
    releases - Andreas Dangel <https://github.com/adangel> (@adangel
    <https://sourceforge.net/u/adangel/profile/>)
  * #5524 <https://github.com/pmd/pmd/pull/5524>: [ci] New optimized
    workflow for pull requests - Andreas Dangel
    <https://github.com/adangel> (@adangel
    <https://sourceforge.net/u/adangel/profile/>)
  * #5526 <https://github.com/pmd/pmd/pull/5526>: Fix #5523: [java]
    UnnecessaryCast FP with integer division - Clément Fournier
    <https://github.com/oowekyala> (@oowekyala
    <https://sourceforge.net/u/oowekyala/profile/>)
  * #5527 <https://github.com/pmd/pmd/pull/5527>: Fix #5522: [plsql]
    Allow arbitrary expressions for TRIM - Andreas Dangel
    <https://github.com/adangel> (@adangel
    <https://sourceforge.net/u/adangel/profile/>)
  * #5528 <https://github.com/pmd/pmd/pull/5528>: Fix #5442: [java] Fix
    stackoverflow with recursive generic types - Clément Fournier
    <https://github.com/oowekyala> (@oowekyala
    <https://sourceforge.net/u/oowekyala/profile/>)
  * #5529 <https://github.com/pmd/pmd/pull/5529>: Fix #5493: [java]
    IllegalArgumentException with wildcard bound - Clément Fournier
    <https://github.com/oowekyala> (@oowekyala
    <https://sourceforge.net/u/oowekyala/profile/>)
  * #5530 <https://github.com/pmd/pmd/pull/5530>: Fix #5073: [java]
    UnnecessaryCast FP with lambdas - Clément Fournier
    <https://github.com/oowekyala> (@oowekyala
    <https://sourceforge.net/u/oowekyala/profile/>)
  * #5537 <https://github.com/pmd/pmd/pull/5537>: Fix #5504: [java]
    UnusedAssignment FP with continue in foreach loop - Clément Fournier
    <https://github.com/oowekyala> (@oowekyala
    <https://sourceforge.net/u/oowekyala/profile/>)
  * #5538 <https://github.com/pmd/pmd/pull/5538>: Add project icon for
    IntelliJ IDEA - Vincent Potucek <https://github.com/pankratz227>
    (@pankratz227)
  * #5539 <https://github.com/pmd/pmd/pull/5539>: [plsql] Add
    OracleDBUtils as regression testing project - Andreas Dangel
    <https://github.com/adangel> (@adangel
    <https://sourceforge.net/u/adangel/profile/>)
  * #5541 <https://github.com/pmd/pmd/pull/5541>: [java] Fix
    IdenticalCatchBranch reporting branches that call different
    overloads - Clément Fournier <https://github.com/oowekyala>
    (@oowekyala <https://sourceforge.net/u/oowekyala/profile/>)
  * #5542 <https://github.com/pmd/pmd/pull/5542>: Add GitHub issue links
    in IDEA git log - Andreas Dangel <https://github.com/adangel>
    (@adangel <https://sourceforge.net/u/adangel/profile/>)
  * #5544 <https://github.com/pmd/pmd/pull/5544>: [javacc] Move grammar
    files into src/main/javacc - Andreas Dangel
    <https://github.com/adangel> (@adangel
    <https://sourceforge.net/u/adangel/profile/>)
  * #5551 <https://github.com/pmd/pmd/pull/5551>: [doc] Update
    contributors for 7.11.0 - Andreas Dangel
    <https://github.com/adangel> (@adangel
    <https://sourceforge.net/u/adangel/profile/>)
  * #5552 <https://github.com/pmd/pmd/pull/5552>: Fix #4822: [java]
    UnnecessaryCast FP with unchecked cast - Clément Fournier
    <https://github.com/oowekyala> (@oowekyala
    <https://sourceforge.net/u/oowekyala/profile/>)
  * #5553 <https://github.com/pmd/pmd/pull/5553>: Fix #5018: [java]
    FinalFieldCouldBeStatic FP with super field access - Clément
    Fournier <https://github.com/oowekyala> (@oowekyala
    <https://sourceforge.net/u/oowekyala/profile/>)


      📦 Dependency updates

  * #5490 <https://github.com/pmd/pmd/pull/5490>: Bump PMD from 7.9.0 to
    7.10.0
  * #5494 <https://github.com/pmd/pmd/pull/5494>: Bump liquid from 5.7.1
    to 5.7.2 in the all-gems group across 1 directory
  * #5497 <https://github.com/pmd/pmd/pull/5497>: Bump
    net.bytebuddy:byte-buddy-agent from 1.16.1 to 1.17.0
  * #5498 <https://github.com/pmd/pmd/pull/5498>: Bump
    org.assertj:assertj-core from 3.25.3 to 3.27.3
  * #5499 <https://github.com/pmd/pmd/pull/5499>: Bump
    org.mockito:mockito-core from 5.14.2 to 5.15.2
  * #5500 <https://github.com/pmd/pmd/pull/5500>: Bump
    org.junit:junit-bom from 5.11.2 to 5.11.4
  * #5501 <https://github.com/pmd/pmd/pull/5501>: Bump
    org.scala-lang:scala-reflect from 2.13.15 to 2.13.16
  * #5516 <https://github.com/pmd/pmd/pull/5516>: Bump
    org.jetbrains:annotations from 26.0.1 to 26.0.2
  * #5517 <https://github.com/pmd/pmd/pull/5517>: Bump
    net.bytebuddy:byte-buddy from 1.15.11 to 1.17.0
  * #5518 <https://github.com/pmd/pmd/pull/5518>: Bump
    org.junit.platform:junit-platform-suite from 1.11.3 to 1.11.4
  * #5519 <https://github.com/pmd/pmd/pull/5519>: Bump
    org.checkerframework:checker-qual from 3.48.3 to 3.49.0
  * #5520 <https://github.com/pmd/pmd/pull/5520>: Bump
    com.google.guava:guava from 33.0.0-jre to 33.4.0-jre
  * #5532 <https://github.com/pmd/pmd/pull/5532>: Bump
    net.bytebuddy:byte-buddy-agent from 1.17.0 to 1.17.1
  * #5533 <https://github.com/pmd/pmd/pull/5533>: Bump log4j.version
    from 2.24.2 to 2.24.3
  * #5534 <https://github.com/pmd/pmd/pull/5534>: Bump
    com.google.code.gson:gson from 2.11.0 to 2.12.1
  * #5535 <https://github.com/pmd/pmd/pull/5535>: Bump scalameta.version
    from 4.12.7 to 4.13.1.1
  * #5536 <https://github.com/pmd/pmd/pull/5536>: Bump
    org.apache.groovy:groovy from 4.0.24 to 4.0.25
  * #5545 <https://github.com/pmd/pmd/pull/5545>: Bump
    commons-logging:commons-logging from 1.3.4 to 1.3.5
  * #5546 <https://github.com/pmd/pmd/pull/5546>: Bump scalameta.version
    from 4.13.1.1 to 4.13.2
  * #5547 <https://github.com/pmd/pmd/pull/5547>: Bump
    net.bytebuddy:byte-buddy from 1.17.0 to 1.17.1
  * #5548 <https://github.com/pmd/pmd/pull/5548>: Bump
    com.puppycrawl.tools:checkstyle from 10.21.2 to 10.21.3
  * #5549 <https://github.com/pmd/pmd/pull/5549>: Bump
    org.apache.maven.plugins:maven-compiler-plugin from 3.13.0 to 3.14.0


      📈 Stats

  * 97 commits
  * 35 closed tickets & PRs
  * Days since last release: 28

Welcome to the first OpenJDK Quality Outreach update of 2025!

The first Release Candidate builds of JDK 24 are now available [1] and tt this stage, only P1 issues will be evaluated. With the JDK 24 General Availability set for March 18th, the attention is now turning to JDK 25.

JDK 24 will officially launch at JavaOne in Redwood Shores, CA [2]. If you're attending or planning to attend JavaOne, please reach out as I’m planning a Quality Outreach gathering.

To conclude, make sure to take a look at the heads-up below.

[1] https://jdk.java.net/24/
[2] https://javaone.com/


# Heads-up - JDK 24: Remote Debugging with `jstat` and `jhsdb` is Deprecated for Removal

Java's Remote Method Invocation (RMI), introduced in 1997, enables remote procedure calls between different JVMs. RMI relies on serialization to encode objects into byte streams when sending them as arguments and return values between JVMs. Both technologies have long-term security issues and configuration challenges, and they haven't withstood the test of time. Today, the broader ecosystem has moved away from RMI in favor of more web-friendly protocols, and as a result, Java is also gradually reducing and eliminating its dependencies on it where possilbe.

Among other tools, Java offers these two tools to connect to a local HotSpot JVM and observe or debug it as well as the program it executes:

- `jstat` reads performance counters
- `jhsdb` provides snapshot debugging and analysis features

Both `jstat` and `jhsdb` offer remote capabilities, which are implemented using RMI. Due to the aforementioned effort to reduce dependencies on RMI, the remote capabilities of `jstat` and `jhsdb` are deprecated for removal in JDK 24:

- JDK-8327793 [3]: `jstatd` allows remote connections with jstat
- JDK-8338894 [4]: `jhsdb debugd` (allows remote connections with `jhsdb`) as well as the `--connect` option of the `jhsdb` subcommands `hsdb` and `clhsdb`

Please note that `jstat` and `jhsdb`'s capabilities for local use remain available and there are no plans to change that. It should also be mentionned that JFR (JDK Flight Recorder) offers a modern alternative for getting remote insights into a running HotSpot JVM.

Questions or feedback on these deprecations can be directed at the serviceability-dev mailing list [5] (subscription required).

[3] https://bugs.openjdk.org/browse/JDK-8327793
[4] https://bugs.openjdk.org/browse/JDK-8338894
[5] https://mail.openjdk.org/mailman/listinfo/serviceability-dev


# Heads-up - JDK 25: Proposal to Deprecate for Removal `-UseCompressedClassPointers`

## Reducing Code and Test Complexity

Shortly after the adoption of 64-bit architectures the `-XX:[-|+]UseCompressedClassPointers` and `-XX:[-|+]UseCompressedOops` arguments were added to provide Java users the ability to enable using 32-bit references even when on a 64-bit architecture. This reduces memory overhead and helps reduce cache misses. You can read more about this here [6].

Removing the `-UseCompressedClassPointers` option would make `+UseCompressedClassPointers` the default case and reduce the number of configurations that would need to be supported from three to two (`+UseCompressedClassPointers` and `+UseCompactObjectHeaders`). This would also significantly reduce code complexity as well as testing effort. Along with this, `-UseCompressedClassPointers` does not work well in a 64-bit architecture as can be seen here [7], it’s suspected there are many more examples.

## Minimal Benefit

The `-UseCompressedClassPointers` use rarely provides any tangible benefit to Java users. Any historical connection with the `-UseCompresseedOops`flag has long since been removed, and the net result of using `-UseCompressedClassPointers` is simply increased memory overhead.

## Reasons to Keep `-UseCompressedClassPointers`

There are currently two reasons to continue supporting `-UseCompressedClassPointers`:

- `-UseCompressedClassPointers` works well in 32-bit operating systems. However support for 32-bit operating systems is on its way out with JEP 479: 'Remove the Windows 32-bit x86 Port' [8] and JEP 501: 'Deprecate the 32-bit x86 Port for Removal' [9] which are both in forthcoming JDK 24.
- In cases where more than 5 million classes are loaded. However such cases are rare, likely the result of programmer error, and would also mean loading likely tens of GBs of non-class data into metaspace as well.

For more on this topic, check this thread [10] on the hotspot-dev mailing list.

The engineers working on this are considering marking `-UseCompressedClassPointers` as deprecated for removal in JDK 25 and are looking for feedback on the impact this could have. Please direct questions and feedback to the lilliput-dev [11] mailing list (registration required).

[6] https://stuefe.de/posts/metaspace/what-is-compressed-class-space/
[7] https://github.com/openjdk/jdk/pull/23053
[8] https://openjdk.org/jeps/479
[9] https://openjdk.org/jeps/501
[10] https://mail.openjdk.org/pipermail/hotspot-dev/2025-February/101023.html
[11] https://mail.openjdk.org/pipermail/lilliput-dev/


# Heads-Up - Distrust New TLS Server Certificates Issued by Camerfirma Root Certificates

The Java Cryptographic Roadmap has been updated to reflect how the JDK will stop trusting new TLS server certificates issued by Camerfirma, aligning with similar actions taken by Apple, Google, Microsoft, and Mozilla. In short, TLS Server certificates issued on or before April 15, 2025 will continue to be trusted until they expire while new certificates issued after that date will be rejected. JDK 24 will be one of the many versions affected by this change. For more details, please check the latest Java Cryptographic Roadmap [12].

[12] https://www.java.com/en/jre-jdk-cryptoroadmap.html


# Heads-Up - JavaFX Metal Early-Access builds

Early access builds of JavaFX that implement the new macOS Metal graphics rendering pipeline are now available [13]. These EA builds are provided as a convenience, so users don't have to build from the "metal" branch of the openjdk/jfx-sandbox repository [14]. The goal of these early access builds is to gather feedback as the team works on incorporating this feature into JavaFX. Feedback can be reported to the openjfx-dev mailing list [15] (subscription required). These builds are based on an incomplete version of JavaFX 25.

Moreover, the initial JavaFX 25 early-access builds are now also available [16].

[13] https://jdk.java.net/javafxmetal/
[14] https://github.com/openjdk/jfx-sandbox/tree/metal
[15] https://mail.openjdk.org/pipermail/openjfx-dev/
[16] https://jdk.java.net/javafx25/


# JDK 24 Release Candidates

The JDK 24 Release Candidate builds (builds 36) are available [17] and are provided under the GNU General Public License v2, with the Classpath Exception. The Release Notes are available here [18], and the javadocs here [19].

[17] https://jdk.java.net/24/
[18] https://jdk.java.net/24/release-notes
[19] https://download.java.net/java/early_access/jdk24/docs/api/


# JDK 25 Early-Access Builds

The JDK 25 early-access builds 9 are now available [20] and are provided under the GNU General Public License v2, with the Classpath Exception. The initial Release Notes are available here [21].

## Changes in recent JDK 25 builds that may be of interest:
- JDK-8347949: Currency method to stream available Currencies
- JDK-8344168: Change Unsafe base offset from int to long
- JDK-8347506: Compatible OCSP readtimeout property with OCSP timeout
- JDK-8346587: Distrust TLS server certificates anchored by Camerfirma Root CAs
- JDK-8345045: Remove the jmx.remote.x.buffer.size JMX notification property
- JDK-8345049: Remove the jmx.tabular.data.hash.map compatibility property
- JDK-8344976: Remove the jmx.invoke.getters compatibility property
- JDK-8345048: Remove the jmx.extend.open.types compatibility property
- JDK-8328919: Add BodyHandlers / BodySubscribers methods to handle excessive server input
- JDK-8344966: Remove the allowNonPublic MBean compatibility property
- JDK-8347596: Update HSS/LMS public key encoding
- JDK-8283795: Add TLSv1.3 and CNSA 1.0 algorithms to implementation requirements
- JDK-8225763: Inflater and Deflater should implement AutoCloseable
- JDK-8345432: (ch, fs) Replace anonymous Thread with InnocuousThread
- JDK-8345259: Disallow ALL-MODULE-PATH without explicit --module-path
- JDK-8344137: Update XML Security for Java to 3.0.5
- JDK-8334581: Remove no-arg constructor BasicSliderUI()
- JDK-8335428: `ProcessBuilder` on Windows Quotes Argument Strings Containing Any Space Character
- JDK-8287788: Implement a better allocator for downcalls
- JDK-8347965: (tz) Update Timezone Data to 2025a

Note: A complete list of changes can be found here [22].

[20] https://jdk.java.net/25/
[21] https://jdk.java.net/25/release-notes
[22] https://github.com/openjdk/jdk/compare/jdk-25+1...jdk-25+9


# Topics of Interest

Java Language Evolution in 2025
https://inside.java/2025/01/30/newscast-84/

Java's Plans for 2025
https://inside.java/2025/01/16/newscast-83/

A Deep Dive into JVM Start-up
https://inside.java/2025/01/28/jvm-start-up/

Modern Java Deep Dive
https://inside.java/2025/02/09/devoxxbelgium-modern-java-deepdive/

Java Performance Update
https://inside.java/2025/01/26/devoxxbelgium-java-perfromance-update/

Podcast - “Doc, JavaDoc and Markdown” with Jonathan Gibbons
https://inside.java/2025/01/21/podcast-034/

Evolution of Java Ecosystem for Integrating AI
https://inside.java/2025/01/29/evolution-of-java-ecosystem-for-integrating-ai/

Peaceful and Bright Future of Integrity by Default in Java
https://inside.java/2025/01/03/evolving-default-integrity/

James Gosling on Java - Historical Oddities & Persistent Itches #JVMLS
https://inside.java/2024/12/28/jvmls-jamesgosling/


~

I’d like to thank everyone who has already provided feedback on the JDK 25 builds. Your input is incredibly valuable, especially when received early in the development cycle. And if you encounter any issues, please ping me.

Hope to see some of you at JavaOne!

--David

  * Downloads: https://github.com/pmd/pmd/releases/tag/pmd_releases%2F7.10.0
  * Documentation: https://docs.pmd-code.org/pmd-doc-7.10.0/


    31-January-2025 - 7.10.0

The PMD team is pleased to announce PMD 7.10.0.

This is a minor release.


      Table Of Contents

  * 🚀 New and noteworthy
    <https://sourceforge.net/p/pmd/news/2025/01/pmd-7100-31-january-2025-released/#new-and-noteworthy>

      o 🚀 New: Java 24 Support
        <https://sourceforge.net/p/pmd/news/2025/01/pmd-7100-31-january-2025-released/#new-java-24-support>
      o New GPG Release Signing Key
        <https://sourceforge.net/p/pmd/news/2025/01/pmd-7100-31-january-2025-released/#new-gpg-release-signing-key>
      o Updated PMD Designer
        <https://sourceforge.net/p/pmd/news/2025/01/pmd-7100-31-january-2025-released/#updated-pmd-designer>
  * 🌟 New and changed rules
    <https://sourceforge.net/p/pmd/news/2025/01/pmd-7100-31-january-2025-released/#new-and-changed-rules>

      o New Rules
        <https://sourceforge.net/p/pmd/news/2025/01/pmd-7100-31-january-2025-released/#new-rules>
  * 🐛 Fixed Issues
    <https://sourceforge.net/p/pmd/news/2025/01/pmd-7100-31-january-2025-released/#fixed-issues>
  * 🚨 API Changes
    <https://sourceforge.net/p/pmd/news/2025/01/pmd-7100-31-january-2025-released/#api-changes>

      o Removed Experimental API
        <https://sourceforge.net/p/pmd/news/2025/01/pmd-7100-31-january-2025-released/#removed-experimental-api>
  * ✨ Merged pull requests
    <https://sourceforge.net/p/pmd/news/2025/01/pmd-7100-31-january-2025-released/#merged-pull-requests>
  * 📦 Dependency updates
    <https://sourceforge.net/p/pmd/news/2025/01/pmd-7100-31-january-2025-released/#dependency-updates>
  * 📈 Stats
    <https://sourceforge.net/p/pmd/news/2025/01/pmd-7100-31-january-2025-released/#stats>


      🚀 New and noteworthy


        🚀 New: Java 24 Support

This release of PMD brings support for Java 24. There are no new 
standard language features,
but a couple of preview language features:

  * JEP 488: Primitive Types in Patterns, instanceof, and switch (Second
    Preview) <https://openjdk.org/jeps/488>
  * JEP 492: Flexible Constructor Bodies (Third Preview)
    <https://openjdk.org/jeps/492>
  * JEP 494: Module Import Declarations (Second Preview)
    <https://openjdk.org/jeps/494>
  * JEP 495: Simple Source Files and Instance Main Methods (Fourth
    Preview) <https://openjdk.org/jeps/495>

In order to analyze a project with PMD that uses these preview language 
features,
you'll need to enable it via the environment variable |PMD_JAVA_OPTS| 
and select the new language
version |24-preview|:

|exportPMD_JAVA_OPTS=--enable-preview 
pmdcheck--use-versionjava-24-preview... |

Note: Support for Java 22 preview language features have been removed. 
The version "22-preview"
is no longer available.


        New GPG Release Signing Key

Since January 2025, we switched the GPG Key we use for signing releases 
in Maven Central to be
A0B5CA1A4E086838 
<https://keyserver.ubuntu.com/pks/lookup?search=0x2EFA55D0785C31F956F2F87EA0B5CA1A4E086838&fingerprint=on&op=index>.
The full fingerprint is |2EFA 55D0 785C 31F9 56F2 F87E A0B5 CA1A 4E08 6838|.

This step was necessary, as the passphrase of the old key has been 
compromised and therefore the key is not
safe to use anymore. While the key itself is not compromised as far as 
we know, we still decided to generate a
new key, just to be safe. As until now (January 2025) we are not aware, 
that the key actually has been misused.
The previous releases of PMD in Maven Central can still be considered 
untampered, as Maven Central is read-only.

This unexpected issue was discovered while checking Reproducible Builds 
<https://reproducible-builds.org/> by a
third party.

The security advisory about the compromised passphrase is tracked as
GHSA-88m4-h43f-wx84 
<https://github.com/pmd/pmd/security/advisories/GHSA-88m4-h43f-wx84>
and CVE-2025-23215 <https://www.cve.org/CVERecord?id=CVE-2025-23215>.


        Updated PMD Designer

This PMD release ships a new version of the pmd-designer.
For the changes, see PMD Designer Changelog (7.10.0) 
<https://github.com/pmd/pmd-designer/releases/tag/7.10.0>.


      🌟 New and changed rules


        New Rules

  * The new Java rule |ExhaustiveSwitchHasDefault|
    <https://docs.pmd-code.org/pmd-doc-7.10.0/pmd_rules_java_bestpractices.html#exhaustiveswitchhasdefault>
    finds switch statements and
    expressions, that cover already all cases but still have a default
    case. This default case is unnecessary
    and prevents getting compiler errors when e.g. new enum constants
    are added without extending the switch.


      🐛 Fixed Issues

  * apex
  * #5388 <https://github.com/pmd/pmd/issues/5388>: [apex] Parse error
    with time literal in SOQL query
  * #5456 <https://github.com/pmd/pmd/issues/5456>: [apex] Issue with
    java dependency apex-parser-4.3.1 but apex-parser-4.3.0 works
  * apex-security
  * #3158 <https://github.com/pmd/pmd/issues/3158>: [apex]
    ApexSuggestUsingNamedCred false positive with Named Credential merge
    fields
  * documentation
  * #2492 <https://github.com/pmd/pmd/issues/2492>: [doc] Promote wiki
    pages to standard doc pages
  * java
  * #5154 <https://github.com/pmd/pmd/issues/5154>: [java] Support Java 24
  * java-performance
  * #5311 <https://github.com/pmd/pmd/issues/5311>: [java]
    TooFewBranchesForSwitch false positive for exhaustive switches over
    enums without default case


      🚨 API Changes


        Removed Experimental API

  * pmd-java
  * |net.sourceforge.pmd.lang.java.ast.ASTTemplate|,
    |net.sourceforge.pmd.lang.java.ast.ASTTemplateExpression|,
    |net.sourceforge.pmd.lang.java.ast.ASTTemplateFragment|: These nodes
    were introduced with Java 21 and 22
    Preview to support String Templates. However, the String Template
    preview feature was not finalized
    and has been removed from Java for now. We now cleaned up the PMD
    implementation of it.


      ✨ Merged pull requests

  * #5327 <https://github.com/pmd/pmd/pull/5327>: [apex] Update
    apex-parser and summit-ast - Andreas Dangel
    <https://github.com/adangel> (@adangel
    <https://sourceforge.net/u/adangel/profile/>)
  * #5412 <https://github.com/pmd/pmd/pull/5412>: [java] Support
    exhaustive switches - Andreas Dangel <https://github.com/adangel>
    (@adangel <https://sourceforge.net/u/adangel/profile/>)
  * #5449 <https://github.com/pmd/pmd/pull/5449>: Use new gpg key
    (A0B5CA1A4E086838) - Andreas Dangel <https://github.com/adangel>
    (@adangel <https://sourceforge.net/u/adangel/profile/>)
  * #5458 <https://github.com/pmd/pmd/pull/5458>: [doc] Move Wiki pages
    into main documentation, cleanups - Andreas Dangel
    <https://github.com/adangel> (@adangel
    <https://sourceforge.net/u/adangel/profile/>)
  * #5471 <https://github.com/pmd/pmd/pull/5471>: [java] Support Java 24
    - Andreas Dangel <https://github.com/adangel> (@adangel
    <https://sourceforge.net/u/adangel/profile/>)
  * #5488 <https://github.com/pmd/pmd/pull/5488>: [apex] Fix #3158:
    Recognize Named Credentials merge fields in
    ApexSuggestUsingNamedCredRule - William Brockhus
    <https://github.com/YodaDaCoda> (@YodaDaCoda)


      📦 Dependency updates

  * #5423 <https://github.com/pmd/pmd/pull/5423>: Bump PMD from 7.8.0 to
    7.9.0
  * #5433 <https://github.com/pmd/pmd/pull/5433>: Bump
    org.codehaus.mojo:exec-maven-plugin from 3.2.0 to 3.5.0
  * #5434 <https://github.com/pmd/pmd/pull/5434>: Bump
    commons-logging:commons-logging from 1.3.0 to 1.3.4
  * #5435 <https://github.com/pmd/pmd/pull/5435>: Bump
    org.apache.maven.plugins:maven-enforcer-plugin from 3.4.1 to 3.5.0
  * #5436 <https://github.com/pmd/pmd/pull/5436>: Bump the all-gems
    group across 2 directories with 1 update
  * #5445 <https://github.com/pmd/pmd/pull/5445>: Bump
    org.junit.platform:junit-platform-commons from 1.11.2 to 1.11.4
  * #5446 <https://github.com/pmd/pmd/pull/5446>: Bump
    org.sonarsource.scanner.maven:sonar-maven-plugin from 3.10.0.2594 to
    5.0.0.4389
  * #5459 <https://github.com/pmd/pmd/pull/5459>: Bump
    org.apache.maven.plugins:maven-gpg-plugin from 3.1.0 to 3.2.7
  * #5460 <https://github.com/pmd/pmd/pull/5460>: Bump
    org.apache.commons:commons-text from 1.12.0 to 1.13.0
  * #5461 <https://github.com/pmd/pmd/pull/5461>: Bump
    com.google.protobuf:protobuf-java from 4.29.1 to 4.29.3
  * #5472 <https://github.com/pmd/pmd/pull/5472>: Bump
    net.bytebuddy:byte-buddy-agent from 1.15.11 to 1.16.1
  * #5473 <https://github.com/pmd/pmd/pull/5473>: Bump
    org.sonatype.plugins:nexus-staging-maven-plugin from 1.6.13 to 1.7.0
  * #5474 <https://github.com/pmd/pmd/pull/5474>: Bump
    com.github.siom79.japicmp:japicmp-maven-plugin from 0.23.0 to 0.23.1
  * #5475 <https://github.com/pmd/pmd/pull/5475>: Bump liquid from 5.6.0
    to 5.7.0 in the all-gems group across 1 directory
  * #5479 <https://github.com/pmd/pmd/pull/5479>: Bump pmd-designer from
    7.2.0 to 7.10.0
  * #5480 <https://github.com/pmd/pmd/pull/5480>: Bump scalameta.version
    from 4.9.1 to 4.12.7
  * #5481 <https://github.com/pmd/pmd/pull/5481>: Bump liquid from 5.7.0
    to 5.7.1 in the all-gems group across 1 directory
  * #5482 <https://github.com/pmd/pmd/pull/5482>: Bump
    org.codehaus.mojo:versions-maven-plugin from 2.17.1 to 2.18.0
  * #5483 <https://github.com/pmd/pmd/pull/5483>: Bump
    org.jetbrains.dokka:dokka-maven-plugin from 1.9.20 to 2.0.0
  * #5484 <https://github.com/pmd/pmd/pull/5484>: Bump
    com.github.hazendaz.maven:coveralls-maven-plugin from 4.5.0-M5 to
    4.5.0-M6
  * #5485 <https://github.com/pmd/pmd/pull/5485>: Bump
    com.puppycrawl.tools:checkstyle from 10.20.2 to 10.21.2


      📈 Stats

  * 70 commits
  * 13 closed tickets & PRs
  * Days since last release: 34

  * Downloads: https://github.com/pmd/pmd/releases/tag/pmd_releases%2F7.9.0
  * Documentation: https://docs.pmd-code.org/pmd-doc-7.9.0/


    27-December-2024 - 7.9.0

The PMD team is pleased to announce PMD 7.9.0.

This is a minor release.


      Table Of Contents

  * 🚀 New and noteworthy
    <https://sourceforge.net/p/pmd/news/2024/12/pmd-790-27-december-2024-released/#new-and-noteworthy>

      o New: CPD support for Rust
        <https://sourceforge.net/p/pmd/news/2024/12/pmd-790-27-december-2024-released/#new-cpd-support-for-rust>
  * 🐛 Fixed Issues
    <https://sourceforge.net/p/pmd/news/2024/12/pmd-790-27-december-2024-released/#fixed-issues>
  * 🚨 API Changes
    <https://sourceforge.net/p/pmd/news/2024/12/pmd-790-27-december-2024-released/#api-changes>

      o Experimental API
        <https://sourceforge.net/p/pmd/news/2024/12/pmd-790-27-december-2024-released/#experimental-api>
  * ✨ Merged pull requests
    <https://sourceforge.net/p/pmd/news/2024/12/pmd-790-27-december-2024-released/#merged-pull-requests>
  * 📦 Dependency updates
    <https://sourceforge.net/p/pmd/news/2024/12/pmd-790-27-december-2024-released/#dependency-updates>
  * 📈 Stats
    <https://sourceforge.net/p/pmd/news/2024/12/pmd-790-27-december-2024-released/#stats>


      🚀 New and noteworthy


        New: CPD support for Rust

CPD now supports Rust, a blazingly fast and memory-efficient programming 
language.
It is shipped in the new module |pmd-rust|.


      🐛 Fixed Issues

  * cli
  * #5399 <https://github.com/pmd/pmd/issues/5399>: [cli] Windows: PMD
    fails to start with special characters in path names
  * #5401 <https://github.com/pmd/pmd/issues/5401>: [cli] Windows:
    Console output doesn't use unicode
  * java
  * #5096 <https://github.com/pmd/pmd/issues/5096>: [java]
    StackOverflowError with recursively bound type variable
  * java-bestpractices
  * #4861 <https://github.com/pmd/pmd/issues/4861>: [java]
    UnusedPrivateMethod - false positive with static methods in core JDK
    classes
  * java-documentation
  * #2996 <https://github.com/pmd/pmd/issues/2996>: [java] CommentSize
    rule violation is not suppressed at method level


      🚨 API Changes


        Experimental API

  * pmd-core: |RuleContext#addViolationWithPosition|
    <https://docs.pmd-code.org/apidocs/pmd-core/7.9.0/net/sourceforge/pmd/reporting/RuleContext.html#addViolationWithPosition(net.sourceforge.pmd.reporting.Reportable,net.sourceforge.pmd.lang.ast.AstInfo,net.sourceforge.pmd.lang.document.FileLocation,java.lang.String,java.lang.Object...)>


      ✨ Merged pull requests

  * #4939 <https://github.com/pmd/pmd/pull/4939>: [java] Fix #2996 -
    CommentSize/CommentContent suppression - Clément Fournier
    <https://github.com/oowekyala> (@oowekyala
    <https://sourceforge.net/u/oowekyala/profile/>)
  * #5376 <https://github.com/pmd/pmd/pull/5376>: [java] Fix #4861 -
    UnusedPrivateMethod FP in JDK classes - Clément Fournier
    <https://github.com/oowekyala> (@oowekyala
    <https://sourceforge.net/u/oowekyala/profile/>)
  * #5387 <https://github.com/pmd/pmd/pull/5387>: [java] Fix #5096 -
    StackOverflowError with recursively bounded tvar - Clément Fournier
    <https://github.com/oowekyala> (@oowekyala
    <https://sourceforge.net/u/oowekyala/profile/>)
  * #5400 <https://github.com/pmd/pmd/pull/5400>: Fix #5399: [cli]
    pmd.bat: Quote all variables when using SET - Andreas Dangel
    <https://github.com/adangel> (@adangel
    <https://sourceforge.net/u/adangel/profile/>)
  * #5402 <https://github.com/pmd/pmd/pull/5402>: Fix #5401: [cli]
    pmd.bat: set codepage to 65001 (UTF-8) - Andreas Dangel
    <https://github.com/adangel> (@adangel
    <https://sourceforge.net/u/adangel/profile/>)
  * #5404 <https://github.com/pmd/pmd/pull/5404>: [doc] Update tools /
    integrations / ide plugins / news pages - Andreas Dangel
    <https://github.com/adangel> (@adangel
    <https://sourceforge.net/u/adangel/profile/>)
  * #5414 <https://github.com/pmd/pmd/pull/5414>: Add Rust CPD - Julia
    Paluch <https://github.com/juliapaluch> (@juliapaluch)


      📦 Dependency updates

  * #5375 <https://github.com/pmd/pmd/pull/5375>: Bump pmd from 7.7.0 to
    7.8.0
  * #5377 <https://github.com/pmd/pmd/pull/5377>: Bump
    com.puppycrawl.tools:checkstyle from 10.20.1 to 10.20.2
  * #5378 <https://github.com/pmd/pmd/pull/5378>: Bump
    net.bytebuddy:byte-buddy from 1.14.12 to 1.15.10
  * #5379 <https://github.com/pmd/pmd/pull/5379>: Bump
    io.github.git-commit-id:git-commit-id-maven-plugin from 7.0.0 to 9.0.1
  * #5380 <https://github.com/pmd/pmd/pull/5380>: Bump
    org.apache.maven.plugins:maven-shade-plugin from 3.5.2 to 3.6.0
  * #5384 <https://github.com/pmd/pmd/pull/5384>: Bump
    org.apache.groovy:groovy from 4.0.19 to 4.0.24
  * #5390 <https://github.com/pmd/pmd/pull/5390>: Bump
    com.google.protobuf:protobuf-java from 4.28.2 to 4.29.1
  * #5391 <https://github.com/pmd/pmd/pull/5391>: Bump
    org.hamcrest:hamcrest from 2.2 to 3.0
  * #5392 <https://github.com/pmd/pmd/pull/5392>: Bump
    org.codehaus.mojo:build-helper-maven-plugin from 3.5.0 to 3.6.0
  * #5393 <https://github.com/pmd/pmd/pull/5393>: Bump org.jsoup:jsoup
    from 1.17.2 to 1.18.3
  * #5394 <https://github.com/pmd/pmd/pull/5394>: Bump
    org.apache.maven.plugins:maven-jar-plugin from 3.3.0 to 3.4.2
  * #5395 <https://github.com/pmd/pmd/pull/5395>: Bump webrick from
    1.9.0 to 1.9.1 in /docs in the all-gems group across 1 directory
  * #5405 <https://github.com/pmd/pmd/pull/5405>: Bump
    org.yaml:snakeyaml from 2.2 to 2.3
  * #5406 <https://github.com/pmd/pmd/pull/5406>: Bump
    io.github.apex-dev-tools:apex-ls_2.13 from 5.5.0 to 5.7.0
  * #5407 <https://github.com/pmd/pmd/pull/5407>: Bump
    net.bytebuddy:byte-buddy-agent from 1.14.19 to 1.15.11
  * #5409 <https://github.com/pmd/pmd/pull/5409>: Bump
    net.bytebuddy:byte-buddy from 1.15.10 to 1.15.11
  * #5410 <https://github.com/pmd/pmd/pull/5410>: Bump
    org.apache.maven.plugins:maven-javadoc-plugin from 3.6.3 to 3.11.2
  * #5411 <https://github.com/pmd/pmd/pull/5411>: Bump csv from 3.3.0 to
    3.3.1 in /docs in the all-gems group across 1 directory
  * #5417 <https://github.com/pmd/pmd/pull/5417>: Bump
    org.cyclonedx:cyclonedx-maven-plugin from 2.7.11 to 2.9.1
  * #5418 <https://github.com/pmd/pmd/pull/5418>: Bump
    org.checkerframework:checker-qual from 3.48.1 to 3.48.3
  * #5419 <https://github.com/pmd/pmd/pull/5419>: Bump
    org.apache.maven.plugins:maven-checkstyle-plugin from 3.5.0 to 3.6.0
  * #5422 <https://github.com/pmd/pmd/pull/5422>: Bump the all-gems
    group across 2 directories with 2 updates


      📈 Stats

  * 69 commits
  * 12 closed tickets & PRs
  * Days since last release: 28

Welcome to the final OpenJDK Quality Outreach update of 2024!

JDK 24, scheduled for General Availability on March 18, 2025 [1], is now in Rampdown Phase One (RDP1) [2]. At this point, the overall JDK 24 feature set is frozen and only low-risk enhancements might still be considered. You will find below the final list of the 24 JEPs that were integrated into JDK 24 as well as JDK 24 technical materials in the last section.

This QO update also covers 3 important heads-ups related to security, integrity and JDK 24.

The next key milestone is early February with the first JDK 24 Release Candidate builds. That means that we have a few weeks, modulo the end of year break, to find and hopefully address any issue that your projects might encounter. So, please let us know if you encounter any issue with the JDK early-access builds.

[1] https://openjdk.org/projects/jdk/24/
[2] https://mail.openjdk.org/pipermail/jdk-dev/2024-December/009672.html


# Heads-up - JDK 24: Permanently Disabling the Security Manager

Introduced to enforce the principle of the least privilege, the Security Manager was designed to prevent unauthorized code from accessing sensitive resources (ex. files, network connections, etc.). While effective in theory, it has fallen short in practice for multiple reasons: complexity, limited adoption, maintenance overhead and evolving threat landscape.

In Java 17, the Security Manager was deprecated for removal under JEP 411 [3]. In JDK 24, its functionality will be effectively disabled via JEP 486 [4]. Key changes include:

- Disabling the Security Manager - it will no longer be possible to enable the SM at startup using command-line options, nor will it be possible to install a custom SM during runtime.
- Rendering the Security Manager API non-functional - the SM API will remain present for compatibility but will no longer have any operational effect.
- Improving maintainability - thousands of lines of code dedicated to supporting the Security Manager will be removed, freeing OpenJDK contributors to implement modern security features.

Developers and enterprises using older Java versions or legacy applications relying on the Security Manager will retain access until JDK 24. Beyond that, they are encouraged to transition to alternative sandboxing and API interception mechanisms.

## Call to Action

The deprecation of the Security Manager in JDK 17 had little to no impact on most Java developers. Warnings issued in JDK 17–23 generated minimal discussion in the Java ecosystem, highlighting its limited relevance. Furthermore, major frameworks and tools (ex. Jakarta EE, Ant, Tomcat, etc.) have already removed support for the Security Manager, reinforcing the trend.

For applications still dependent on the Security Manager, the JDK offers options to identify and address its usage:

- jdeprscan [5] scans a JAR file for the usage of deprecated API elements, and it helps find code using these methods.
- Messages on the console warnings highlight Security Manager usage during runtime.
- Check how you launch your Java application - with the Security Manager allowed or enabled via command line options, or policy files that require it to be installed and configured.

These tools give code maintainers the necessary insights to transition away from the Security Manager before its complete removal in future JDK releases. By taking these steps, you will ensure a smooth transition from the Security Manager while adopting more effective security practices.

This is a summary; for more details, make sure to read JEP 486 [4].

[3] https://openjdk.org/jeps/411
[4] https://openjdk.org/jeps/486
[5] https://dev.java/learn/jvm/tools/core/jdeprscan/


# Heads-up - JDK 24: Prepares Restricted Native Access

Any interaction between Java code and native code, be it via the Java Native Interface (JNI) API or the Foreign Function & Memory (FFM) API, is risky in the sense that it can compromise the integrity of applications and of the Java Platform itself, for example by causing JVM crashes, even after the native code completed execution. According to the policy of integrity by default, all JDK features that are capable of breaking integrity must obtain explicit approval from the application’s developer. JDK 24, by means of JEP 472 [6], prepares that by aligning the behaviors of JNI and FFM by:

- Printing warnings for all restricted operations (with the goal to turn these into exceptions in a future release).
- Expanding the command-line options `--enable-native-access` and `--illegal-native-access` to govern restricted operations of both APIs.

Note that this is a change for JNI, which used to not trigger such warnings, as well as for FFM, which used to forbid restricted operations by default. Starting with JDK 24, both APIs behave uniformly by printing warnings. In the future, both APIs will throw exceptions instead. The intent is neither to discourage the use of, deprecate, or even remove JNI nor to restrict the behavior of native code called via JNI or FFM. The goal is to ensure that applications and the Java Platform have integrity by default while giving application operators the tools they need to selectively opt-out where needed.

This is a summary; for more details, please read the full Heads-Up [7] and JEP 472 [6].

[6] https://openjdk.org/jeps/472
[7] https://inside.java/2024/12/09/quality-heads-up/


# Heads-up - JDK 24: Security Properties Files Inclusion


Managing security properties across multiple JDK releases can be a challenge, particularly in environments requiring centralized control and distinct security profiles. To address this and starting with JDK 24, the Java Platform now allows the main security properties file (`${java.home}/conf/security/java.security`) or any file specified via the `java.security.properties` system property to include additional files. This inclusion is recursive, allowing for nested configurations, provided no cycles occur.

The `include` keyword is reserved and cannot be used to define security properties, as any attempt to do so results in an unchecked `IllegalArgumentException`.  The inclusion mechanism enhances security by explicitly listing files in the main configuration file, preventing misconfigurations by throwing a fatal error if a file is missing or inaccessible. It also forbids including directories or URLs, ensuring strict control over which files are included. Users must ensure proper permissions for included files to avoid tampering, such as enforcing secure file permissions. The system supports a clear priority for security property overrides based on the order of inclusion, and updates to a single file automatically propagate across all configurations.

This enhancement offers better control and adaptability over Java security properties for developers, system administrators and infrastructure engineers.

This is a summary; for more details, please read the full Heads-Up [8] and the JDK 24 release notes [9].

[8] https://inside.java/2024/12/10/quality-heads-up/
[9] https://jdk.java.net/24/release-notes#JDK-8319332


# JDK 24 Early-Access Builds

The JDK 24 early-access builds 28 are available [10] and are provided under the GNU General Public License v2, with the Classpath Exception. The Release Notes are available here [11].

## JEPs integrated into JDK 24:
- JEP 404: Generational Shenandoah (Experimental)
- JEP 450: Compact Object Headers (Experimental)
- JEP 472: Prepare to Restrict the Use of JNI
- JEP 475: Late Barrier Expansion for G1
- JEP 478: Key Derivation Function API (Preview)
- JEP 479: Remove the Windows 32-bit x86 Port
- JEP 483: Ahead-of-Time Class Loading & Linking
- JEP 484: Class-File API
- JEP 485: Stream Gatherers
- JEP 486: Permanently Disable the Security Manager
- JEP 487: Scoped Values (4th Preview)
- JEP 488: Primitive Types in Patterns, instanceof, and switch (2nd Preview)
- JEP 489: Vector API (9th Incubator)
- JEP 490: ZGC: Remove the Non-Generational Mode
- JEP 491: Synchronize Virtual Threads without Pinning
- JEP 492: Flexible Constructor Bodies (3rd Preview)
- JEP 493: Linking Run-Time Images without JMODs
- JEP 494: Module Import Declarations (2nd Preview)
- JEP 495: Simple Source Files and Instance Main Methods (4th Preview)
- JEP 496: Quantum-Resistant Module-Lattice-Based Key Encapsulation Mechanism
- JEP 497: Quantum-Resistant Module-Lattice-Based Digital Signature Algorithm
- JEP 498: Warn upon Use of Memory-Access Methods in sun.misc.Unsafe
- JEP 499: Structured Concurrency (4th Preview)
- JEP 501: Deprecate the 32-bit x86 Port for Removal

## Changes in recent JDK 24 builds that may be of interest:
- JDK-8345015: Remove unused method lookup_time_t_function [Reported by JaCoCo]
- JDK-8344352: 32-bit builds crash after JDK-8305895 [Reported by JaCoCo]
- JDK-8344299: SM cleanup in javax.naming modules
- JDK-8343791: Socket.connect API should document whether the socket will be closed…
- JDK-8313367: SunMSCAPI cannot read Local Computer certs w/o Windows elevation
- JDK-8341964: Add mechanism to disable different parts of TLS cipher suite
- JDK-8341553: Remove UseCompactObjectHeaders extra CDS archives
- JDK-8333582: Update CLDR to Version 46.0
- JDK-8343001: Adjust XSLT and XPath Extension Function Property
- JDK-8341551: Revisit jdk.internal.loader.URLClassPath.JarLoader after JEP 486
- JDK-8340359: Remove javax.naming.Context.APPLET
- JDK-8337199: Add jcmd Thread.vthread_scheduler and Thread.vthread_pollers diagnostic commands
- JDK-8341975: Unable to set encoding for IO.println, IO.print and IO.readln
- JDK-8342075: HttpClient: improve HTTP/2 flow control checks
- JDK-8338536: Permanently disable remote code downloading in JNDI
- JDK-8343004: Adjust JAXP limits
- JDK-8343020: (fs) Add support for SecureDirectoryStream on macOS
- JDK-8344882: (bf) Temporary direct buffers should not count against the upper limit on direct buffer memory
- JDK-8326949: Authorization header is removed when a proxy Authenticator is set on HttpClient
- JDK-8245545: Disable TLS_RSA cipher suites
- JDK-8319993: Update Unicode Data Files to 16.0.0
- JDK-8341566: Add Reader.of(CharSequence)
- JDK-8335912: Add an operation mode to the jar command when extracting to not overwriting existing files
- JDK-8343881: java.lang.classfile.Attribute attributeName() method should return Utf8Entry
- JDK-8338021: Support new unsigned and saturating vector operators in VectorAPI
- JDK-8343150: Change URLClassLoader.getPermissions to return empty PermissionCollection

Note: A complete list of changes can be found here [12].

[10] https://jdk.java.net/24/
[11] https://jdk.java.net/24/release-notes
[12] https://github.com/openjdk/jdk/compare/jdk-24+21...jdk-24+28


# Topics of Interest

- Java 24 Performance Improvements & Deprecations
https://www.youtube.com/watch?v=oTc16DAMTqg

- Java 24 Language & API Changes
https://inside.java/2024/12/05/newscast-81/

- Java 24 Stops Pinning Virtual Threads (Almost)
https://inside.java/2024/11/21/newscast-80/

- Detoxifying the JDK Source Code
https://stuartmarks.wordpress.com/2024/12/12/detoxifying-the-jdk-source-code/

- Better Java Streams with Gatherers - JEP Cafe
https://inside.java/2024/11/26/jepcafe23/

- Java Language Futures - Fall 2024 Edition
https://inside.java/2024/10/30/devoxxbelgium-java-language-futures/

- Ask the Java Architects
https://inside.java/2024/11/14/devoxxbelgium-ask-architects/

- Pattern Matching in Java - Past, Present, Future
https://inside.java/2024/11/11/devoxxbelgium-pattern-matching/

- Monitoring Java Application Security with JDK tools and JFR Events
https://inside.java/2024/11/17/devoxxbelgium-security/

- ZGC Automatic Heap Sizing #JVMLS
https://inside.java/2024/11/09/jvmls-zgc/

- Postcards from the Peak of Complexity
https://inside.java/2024/11/03/devoxxbelgium-complexity-peak/

- Release Your (Java) Projects Like OpenJDK
https://inside.java/2024/10/31/newscast-79/

- Are Virtual Threads Going to Make Reactive Programming Irrelevant?
https://inside.java/2024/10/28/javazone-virtual-threads/

- A Sneak Peek at StableValue and SegmentMapper
https://inside.java/2024/10/24/devoxxbelgium-stablevalues/

- Advancing AI by Accelerating Java on Parallel Architectures
https://inside.java/2024/10/23/java-and-ai/


~

As always, ping me if you find any issues while testing your project(s) with the latest JDK early-access builds. And as the year-end is fast approaching, let me wish you all the best for the upcoming holidays. See you in 2025 with Java 24, JavaOne and Java 25!

PS: Please let me know if you don't want to receive these OpenJDK Quality Outreach updates anymore.

--David

  * Downloads: https://github.com/pmd/pmd/releases/tag/pmd_releases%2F7.8.0
  * Documentation: https://docs.pmd-code.org/pmd-doc-7.8.0/


    29-November-2024 - 7.8.0

The PMD team is pleased to announce PMD 7.8.0.

This is a minor release.


      Table Of Contents

  * 🚀 New and noteworthy
    <https://sourceforge.net/p/pmd/news/2024/11/pmd-780-29-november-2024-released/#new-and-noteworthy>
  * 🌟 New and changed rules
    <https://sourceforge.net/p/pmd/news/2024/11/pmd-780-29-november-2024-released/#new-and-changed-rules>

      o New Rules
        <https://sourceforge.net/p/pmd/news/2024/11/pmd-780-29-november-2024-released/#new-rules>
  * 🐛 Fixed Issues
    <https://sourceforge.net/p/pmd/news/2024/11/pmd-780-29-november-2024-released/#fixed-issues>
  * 🚨 API Changes
    <https://sourceforge.net/p/pmd/news/2024/11/pmd-780-29-november-2024-released/#api-changes>

      o Deprecations
        <https://sourceforge.net/p/pmd/news/2024/11/pmd-780-29-november-2024-released/#deprecations>
  * ✨ Merged pull requests
    <https://sourceforge.net/p/pmd/news/2024/11/pmd-780-29-november-2024-released/#merged-pull-requests>
  * 📦 Dependency updates
    <https://sourceforge.net/p/pmd/news/2024/11/pmd-780-29-november-2024-released/#dependency-updates>
  * 📈 Stats
    <https://sourceforge.net/p/pmd/news/2024/11/pmd-780-29-november-2024-released/#stats>


      🚀 New and noteworthy


      🌟 New and changed rules


        New Rules

  * The new Apex rule |QueueableWithoutFinalizer|
    <https://docs.pmd-code.org/pmd-doc-7.8.0/pmd_rules_apex_bestpractices.html#queueablewithoutfinalizer>
    detects when the Queueable interface
    is used but a Finalizer is not attached. Without attaching a
    Finalizer, there is no way of designing error
    recovery actions should the Queueable action fail.


      🐛 Fixed Issues

  * ant
  * #1860 <https://github.com/pmd/pmd/issues/1860>: [ant] Reflective
    access warnings on java > 9 and java < 17
  * apex
  * #5302 <https://github.com/pmd/pmd/issues/5302>: [apex] New Rule:
    Queueable Should Attach Finalizer
  * #5333 <https://github.com/pmd/pmd/issues/5333>: [apex] Token
    recognition errors for string containing unicode escape sequence
  * html
  * #5322 <https://github.com/pmd/pmd/issues/5322>: [html] CPD throws
    exception on when HTML file is missing closing tag
  * java
  * #5283 <https://github.com/pmd/pmd/issues/5283>: [java]
    AssertionError "this should be unreachable" with scala library
  * #5293 <https://github.com/pmd/pmd/issues/5293>: [java] Deadlock when
    executing PMD in multiple threads
  * #5324 <https://github.com/pmd/pmd/issues/5324>: [java] Issue with
    type inference of nested lambdas
  * #5329 <https://github.com/pmd/pmd/issues/5329>: [java] Type
    inference issue with unknown method ref in call chain
  * #5338 <https://github.com/pmd/pmd/issues/5338>: [java] Unresolved
    target type for lambdas make overload resolution fail
  * java-bestpractices
  * #4113 <https://github.com/pmd/pmd/issues/4113>: [java]
    JUnitTestsShouldIncludeAssert - false positive with
    SoftAssertionsExtension
  * #5083 <https://github.com/pmd/pmd/issues/5083>: [java]
    UnusedPrivateMethod false positive when method reference has no
    target type
  * #5097 <https://github.com/pmd/pmd/issues/5097>: [java]
    UnusedPrivateMethod FP with raw type missing from the classpath
  * #5318 <https://github.com/pmd/pmd/issues/5318>: [java]
    PreserveStackTraceRule: false-positive on Pattern Matching with
    instanceof
  * java-codestyle
  * #5214 <https://github.com/pmd/pmd/issues/5214>: [java] Wrong message
    for LambdaCanBeMethodReference with method of enclosing class
  * #5263 <https://github.com/pmd/pmd/issues/5263>: [java]
    UnnecessaryFullyQualifiedName: false-positive in an enum that uses
    its own static variables
  * #5315 <https://github.com/pmd/pmd/issues/5315>: [java]
    UnnecessaryImport false positive for on-demand imports
  * java-design
  * #4763 <https://github.com/pmd/pmd/issues/4763>: [java]
    SimplifyBooleanReturns - wrong suggested solution
  * java-errorprone
  * #5070 <https://github.com/pmd/pmd/issues/5070>: [java]
    ConfusingArgumentToVarargsMethod FP when types are unresolved
  * java-performance
  * #5287 <https://github.com/pmd/pmd/issues/5287>: [java]
    TooFewBranchesForSwitch false-positive with switch using list of
    case constants
  * #5314 <https://github.com/pmd/pmd/issues/5314>: [java]
    InsufficientStringBufferDeclarationRule: Lack of handling for char
    type parameters
  * #5320 <https://github.com/pmd/pmd/issues/5320>: [java]
    UseStringBufferLength: false-negative on StringBuffer of
    sb.toString().equals("")


      🚨 API Changes


        Deprecations

  * pmd-coco
  * |CocoBaseListener|
    <https://docs.pmd-code.org/apidocs/pmd-coco/7.8.0/net/sourceforge/pmd/lang/coco/ast/CocoBaseListener.html#>
    is deprecated for removal. This class was never intended
    to be generated. It will be removed with no replacement.
  * |CocoBaseVisitor|
    <https://docs.pmd-code.org/apidocs/pmd-coco/7.8.0/net/sourceforge/pmd/lang/coco/ast/CocoBaseVisitor.html#>
    is deprecated for removal. This class was never intended
    to be generated. It will be removed with no replacement.
  * |CocoListener|
    <https://docs.pmd-code.org/apidocs/pmd-coco/7.8.0/net/sourceforge/pmd/lang/coco/ast/CocoListener.html#>
    is deprecated for removal. This class was never intended
    to be generated. It will be removed with no replacement.
  * |CocoParser|
    <https://docs.pmd-code.org/apidocs/pmd-coco/7.8.0/net/sourceforge/pmd/lang/coco/ast/CocoParser.html#>
    is deprecated for removal. This class was never intended
    to be generated. It will be removed with no replacement.
  * |CocoVisitor|
    <https://docs.pmd-code.org/apidocs/pmd-coco/7.8.0/net/sourceforge/pmd/lang/coco/ast/CocoVisitor.html#>
    is deprecated for removal. This class was never intended
    to be generated. It will be removed with no replacement.
  * pmd-gherkin
  * |GherkinBaseListener|
    <https://docs.pmd-code.org/apidocs/pmd-gherkin/7.8.0/net/sourceforge/pmd/lang/gherkin/ast/GherkinBaseListener.html#>
    is deprecated for removal. This class was never intended
    to be generated. It will be removed with no replacement.
  * |GherkinBaseVisitor|
    <https://docs.pmd-code.org/apidocs/pmd-gherkin/7.8.0/net/sourceforge/pmd/lang/gherkin/ast/GherkinBaseVisitor.html#>
    is deprecated for removal. This class was never intended
    to be generated. It will be removed with no replacement.
  * |GherkinListener|
    <https://docs.pmd-code.org/apidocs/pmd-gherkin/7.8.0/net/sourceforge/pmd/lang/gherkin/ast/GherkinListener.html#>
    is deprecated for removal. This class was never intended
    to be generated. It will be removed with no replacement.
  * |GherkinParser|
    <https://docs.pmd-code.org/apidocs/pmd-gherkin/7.8.0/net/sourceforge/pmd/lang/gherkin/ast/GherkinParser.html#>
    is deprecated for removal. This class was never intended
    to be generated. It will be removed with no replacement.
  * |GherkinVisitor|
    <https://docs.pmd-code.org/apidocs/pmd-gherkin/7.8.0/net/sourceforge/pmd/lang/gherkin/ast/GherkinVisitor.html#>
    is deprecated for removal. This class was never intended
    to be generated. It will be removed with no replacement.
  * pmd-julia
  * |JuliaBaseListener|
    <https://docs.pmd-code.org/apidocs/pmd-julia/7.8.0/net/sourceforge/pmd/lang/julia/ast/JuliaBaseListener.html#>
    is deprecated for removal. This class was never intended to
    be generated. It will be removed with no replacement.
  * |JuliaBaseVisitor|
    <https://docs.pmd-code.org/apidocs/pmd-julia/7.8.0/net/sourceforge/pmd/lang/julia/ast/JuliaBaseVisitor.html#>
    is deprecated for removal. This class was never intended to
    be generated. It will be removed with no replacement.
  * |JuliaListener|
    <https://docs.pmd-code.org/apidocs/pmd-julia/7.8.0/net/sourceforge/pmd/lang/julia/ast/JuliaListener.html#>
    is deprecated for removal. This class was never intended to
    be generated. It will be removed with no replacement.
  * |JuliaParser|
    <https://docs.pmd-code.org/apidocs/pmd-julia/7.8.0/net/sourceforge/pmd/lang/julia/ast/JuliaParser.html#>
    is deprecated for removal. This class was never intended to
    be generated. It will be removed with no replacement.
  * |JuliaVisitor|
    <https://docs.pmd-code.org/apidocs/pmd-julia/7.8.0/net/sourceforge/pmd/lang/julia/ast/JuliaVisitor.html#>
    is deprecated for removal. This class was never intended to
    be generated. It will be removed with no replacement.
  * pmd-kotlin
  * |UnicodeClasses|
    <https://docs.pmd-code.org/apidocs/pmd-kotlin/7.8.0/net/sourceforge/pmd/lang/kotlin/ast/UnicodeClasses.html#>
    is deprecated for removal. This class was never intended to
    be generated. It will be removed with no replacement.
  * pmd-xml
  * |XMLLexer|
    <https://docs.pmd-code.org/apidocs/pmd-xml/7.8.0/net/sourceforge/pmd/lang/xml/antlr4/XMLLexer.html#>
    is deprecated for removal. Use
    |net.sourceforge.pmd.lang.xml.ast.XMLLexer|
    <https://docs.pmd-code.org/apidocs/pmd-xml/7.8.0/net/sourceforge/pmd/lang/xml/ast/XMLLexer.html#>
    instead (note different package |ast| instead of |antlr4|).


      ✨ Merged pull requests

  * #5240 <https://github.com/pmd/pmd/pull/5240>: Release notes
    improvements - Andreas Dangel <https://github.com/adangel> (@adangel
    <https://sourceforge.net/u/adangel/profile/>)
  * #5284 <https://github.com/pmd/pmd/pull/5284>: [apex] Use
    case-insensitive input stream to avoid choking on Unicode escape
    sequences - Willem A. Hajenius <https://github.com/wahajenius>
    (@wahajenius)
  * #5286 <https://github.com/pmd/pmd/pull/5286>: [ant] Formatter: avoid
    reflective access to determine console encoding - Andreas Dangel
    <https://github.com/adangel> (@adangel
    <https://sourceforge.net/u/adangel/profile/>)
  * #5289 <https://github.com/pmd/pmd/pull/5289>: [java]
    TooFewBranchesForSwitch - allow list of case constants - Andreas
    Dangel <https://github.com/adangel> (@adangel
    <https://sourceforge.net/u/adangel/profile/>)
  * #5296 <https://github.com/pmd/pmd/pull/5296>: [xml] Have pmd-xml
    Lexer in line with other antlr grammars - Juan Martín Sotuyo Dodero
    <https://github.com/jsotuyod> (@jsotuyod)
  * #5300 <https://github.com/pmd/pmd/pull/5300>: Add rule test cases
    for issues fixed with PMD 7.0.0 - Andreas Dangel
    <https://github.com/adangel> (@adangel
    <https://sourceforge.net/u/adangel/profile/>)
  * #5303 <https://github.com/pmd/pmd/pull/5303>: [apex] New Rule:
    Queueable Should Attach Finalizer - Mitch Spano
    <https://github.com/mitchspano> (@mitchspano)
  * #5309 <https://github.com/pmd/pmd/pull/5309>: [java] Fix #5293:
    Parse number of type parameters eagerly - Andreas Dangel
    <https://github.com/adangel> (@adangel
    <https://sourceforge.net/u/adangel/profile/>)
  * #5310 <https://github.com/pmd/pmd/pull/5310>: [java] Fix #5283 -
    inner class has public private modifiers - Clément Fournier
    <https://github.com/oowekyala> (@oowekyala
    <https://sourceforge.net/u/oowekyala/profile/>)
  * #5325 <https://github.com/pmd/pmd/pull/5325>: [java] Fix inference
    dependency issue with nested lambdas - Clément Fournier
    <https://github.com/oowekyala> (@oowekyala
    <https://sourceforge.net/u/oowekyala/profile/>)
  * #5326 <https://github.com/pmd/pmd/pull/5326>: [java]
    UseStringBufferLength - consider sb.toString().equals("") - Andreas
    Dangel <https://github.com/adangel> (@adangel
    <https://sourceforge.net/u/adangel/profile/>)
  * #5328 <https://github.com/pmd/pmd/pull/5328>: [html] Test for a
    closing tag when determining node positions - Andreas Dangel
    <https://github.com/adangel> (@adangel
    <https://sourceforge.net/u/adangel/profile/>)
  * #5330 <https://github.com/pmd/pmd/pull/5330>: [java] Propagate
    unknown type better when mref is unresolved - Clément Fournier
    <https://github.com/oowekyala> (@oowekyala
    <https://sourceforge.net/u/oowekyala/profile/>)
  * #5331 <https://github.com/pmd/pmd/pull/5331>: [java]
    PreserveStackTrace - consider instance type patterns - Andreas
    Dangel <https://github.com/adangel> (@adangel
    <https://sourceforge.net/u/adangel/profile/>)
  * #5332 <https://github.com/pmd/pmd/pull/5332>: [java]
    InsufficientStringBufferDeclaration: Fix CCE for Character - Andreas
    Dangel <https://github.com/adangel> (@adangel
    <https://sourceforge.net/u/adangel/profile/>)
  * #5334 <https://github.com/pmd/pmd/pull/5334>: [java]
    UnitTestShouldIncludeAssert - consider SoftAssertionsExtension -
    Andreas Dangel <https://github.com/adangel> (@adangel
    <https://sourceforge.net/u/adangel/profile/>)
  * #5335 <https://github.com/pmd/pmd/pull/5335>: [kotlin] Prevent
    auxiliary grammars from generating lexers - Juan Martín Sotuyo
    Dodero <https://github.com/jsotuyod> (@jsotuyod)
  * #5336 <https://github.com/pmd/pmd/pull/5336>: [gherkin] Remove
    generated gherkin code from coverage report - Juan Martín Sotuyo
    Dodero <https://github.com/jsotuyod> (@jsotuyod)
  * #5337 <https://github.com/pmd/pmd/pull/5337>: [doc] Introducing PMD
    Guru on Gurubase.io - Kursat Aktas <https://github.com/kursataktas>
    (@kursataktas)
  * #5339 <https://github.com/pmd/pmd/pull/5339>: [java] Allow lambdas
    with unresolved target types to succeed inference - Clément Fournier
    <https://github.com/oowekyala> (@oowekyala
    <https://sourceforge.net/u/oowekyala/profile/>)
  * #5340 <https://github.com/pmd/pmd/pull/5340>: [java] Fix #5097 -
    problem with unchecked conversion - Clément Fournier
    <https://github.com/oowekyala> (@oowekyala
    <https://sourceforge.net/u/oowekyala/profile/>)
  * #5341 <https://github.com/pmd/pmd/pull/5341>: [java] Fix #5083 -
    UnusedPrivateMethod false positive with mref without target type but
    with exact method - Clément Fournier <https://github.com/oowekyala>
    (@oowekyala <https://sourceforge.net/u/oowekyala/profile/>)
  * #5342 <https://github.com/pmd/pmd/pull/5342>: [julia] Ignore
    generated code in Julia module - Juan Martín Sotuyo Dodero
    <https://github.com/jsotuyod> (@jsotuyod)
  * #5345 <https://github.com/pmd/pmd/pull/5345>: [coco] Remove
    generated coco files form coverage - Juan Martín Sotuyo Dodero
    <https://github.com/jsotuyod> (@jsotuyod)
  * #5346 <https://github.com/pmd/pmd/pull/5346>: [typescript] Add
    cleanup after generating ts lexer - Juan Martín Sotuyo Dodero
    <https://github.com/jsotuyod> (@jsotuyod)
  * #5347 <https://github.com/pmd/pmd/pull/5347>: [tsql] Flag generated
    lexer as generated - Juan Martín Sotuyo Dodero
    <https://github.com/jsotuyod> (@jsotuyod)
  * #5352 <https://github.com/pmd/pmd/pull/5352>: [java] Add permitted
    subtypes to symbol API - Clément Fournier
    <https://github.com/oowekyala> (@oowekyala
    <https://sourceforge.net/u/oowekyala/profile/>)
  * #5353 <https://github.com/pmd/pmd/pull/5353>: [java] Fix #5263 -
    UnnecessaryFullyQualifiedName FP with forward references - Clément
    Fournier <https://github.com/oowekyala> (@oowekyala
    <https://sourceforge.net/u/oowekyala/profile/>)
  * #5354 <https://github.com/pmd/pmd/pull/5354>: [apex] Updated the
    docs for UnusedMethod as per discussion #5200 - samc-gearset
    <https://github.com/sam-gearset> (@sam-gearset)
  * #5370 <https://github.com/pmd/pmd/pull/5370>: [java] Fix #5214 -
    LambdaCanBeMethodReference issue with method of enclosing class -
    Clément Fournier <https://github.com/oowekyala> (@oowekyala
    <https://sourceforge.net/u/oowekyala/profile/>)
  * #5371 <https://github.com/pmd/pmd/pull/5371>: [doc] Improve docs on
    adding Antlr languages - Juan Martín Sotuyo Dodero
    <https://github.com/jsotuyod> (@jsotuyod)
  * #5372 <https://github.com/pmd/pmd/pull/5372>: [java] Fix #5315 -
    UnusedImport FP with import on demand - Clément Fournier
    <https://github.com/oowekyala> (@oowekyala
    <https://sourceforge.net/u/oowekyala/profile/>)
  * #5373 <https://github.com/pmd/pmd/pull/5373>: [java] Fix #4763 -
    wrong message for SimplifyBooleanReturns - Clément Fournier
    <https://github.com/oowekyala> (@oowekyala
    <https://sourceforge.net/u/oowekyala/profile/>)
  * #5374 <https://github.com/pmd/pmd/pull/5374>: [java] Fix #5070 -
    confusing argument to varargs method FP when types are unknown -
    Clément Fournier <https://github.com/oowekyala> (@oowekyala
    <https://sourceforge.net/u/oowekyala/profile/>)


      📦 Dependency updates

  * #5285 <https://github.com/pmd/pmd/pull/5285>: Bump pmd from 7.5.0 to
    7.7.0
  * #5288 <https://github.com/pmd/pmd/pull/5288>: Bump asm from 9.7 to 9.7.1
  * #5290 <https://github.com/pmd/pmd/pull/5290>: Bump
    org.apache.maven.plugins:maven-assembly-plugin from 3.6.0 to 3.7.1
  * #5301 <https://github.com/pmd/pmd/pull/5301>: Bump gems and bundler
  * #5307 <https://github.com/pmd/pmd/pull/5307>: Bump
    org.apache.maven.plugins:maven-clean-plugin from 3.3.2 to 3.4.0
  * #5308 <https://github.com/pmd/pmd/pull/5308>: Bump webrick from
    1.8.2 to 1.9.0 in /docs in the all-gems group across 1 directory
  * #5312 <https://github.com/pmd/pmd/pull/5312>: Bump maven-pmd-plugin
    from 3.24.0 to 3.26.0
  * #5316 <https://github.com/pmd/pmd/pull/5316>: Bump rouge from 4.4.0
    to 4.5.0 in the all-gems group across 1 directory
  * #5317 <https://github.com/pmd/pmd/pull/5317>: Bump
    org.apache.commons:commons-compress from 1.26.0 to 1.27.1
  * #5348 <https://github.com/pmd/pmd/pull/5348>: Bump rouge from 4.5.0
    to 4.5.1 in the all-gems group across 1 directory
  * #5350 <https://github.com/pmd/pmd/pull/5350>: Bump
    org.apache.commons:commons-lang3 from 3.14.0 to 3.17.0
  * #5356 <https://github.com/pmd/pmd/pull/5356>: Bump build-tools to 28
  * #5357 <https://github.com/pmd/pmd/pull/5357>: Bump log4j.version
    from 2.23.0 to 2.24.2
  * #5358 <https://github.com/pmd/pmd/pull/5358>: Bump
    org.apache.maven.plugins:maven-dependency-plugin from 3.7.1 to 3.8.1
  * #5359 <https://github.com/pmd/pmd/pull/5359>: Bump
    org.apache.maven.plugins:maven-release-plugin from 3.0.1 to 3.1.1
  * #5360 <https://github.com/pmd/pmd/pull/5360>: Bump
    io.github.apex-dev-tools:apex-ls_2.13 from 5.2.0 to 5.5.0
  * #5361 <https://github.com/pmd/pmd/pull/5361>: Bump ant.version from
    1.10.14 to 1.10.15
  * #5362 <https://github.com/pmd/pmd/pull/5362>: Bump
    org.jetbrains:annotations from 24.1.0 to 26.0.1
  * #5363 <https://github.com/pmd/pmd/pull/5363>: Bump
    com.puppycrawl.tools:checkstyle from 10.18.1 to 10.20.1
  * #5364 <https://github.com/pmd/pmd/pull/5364>: Bump
    info.picocli:picocli from 4.7.5 to 4.7.6
  * #5365 <https://github.com/pmd/pmd/pull/5365>: Bump
    com.github.hazendaz.maven:coveralls-maven-plugin from 4.5.0-M3 to
    4.5.0-M5
  * #5366 <https://github.com/pmd/pmd/pull/5366>: Bump
    org.mockito:mockito-core from 4.11.0 to 5.14.2
  * #5367 <https://github.com/pmd/pmd/pull/5367>: Bump surefire.version
    from 3.2.5 to 3.5.2
  * #5368 <https://github.com/pmd/pmd/pull/5368>: Bump
    org.junit.platform:junit-platform-suite from 1.11.2 to 1.11.3


      📈 Stats

  * 216 commits
  * 55 closed tickets & PRs
  * Days since last release: 35

<!DOCTYPE html>
<html lang="en">
<head>
    <title>Partnership Opportunity for Winter of Code 4.0</title>
    <style>
        body {
            font-family: 'Google Sans', sans-serif;
            color: rgb(32, 33, 36);
            margin: 0;
            padding: 0;
            width: 100%;
            overflow-x: hidden;
        }
        a {
            color: #1a73e8;
            text-decoration: none;
        }
        .container {
            width: 100%;
            max-width: 620px;
            margin: 0 auto;
            padding: 20px;
            box-sizing: border-box;
        }
        .header-img {
            width: 100%;
            height: auto;
            display: block;
            margin-bottom: 2px;
        }
        .content {
            background-color: rgb(250, 250, 250);
            padding: 36px;
            text-align: left;
            word-wrap: break-word;
            line-height: 1.5;
        }
        .footer {
            background-color: rgb(66, 133, 244);
            padding: 18px;
            text-align: center;
        }
        .footer img {
            width: 94px;
            height: auto;
            display: block;
            margin: 0 auto;
        }
        h1, h2, h3, h4, h5, h6 {
            margin: 0;
        }
        p {
            margin: 10px 0;
        }
        ul {
            margin: 10px 0;
            padding-left: 20px;
        }
        ul li {
            margin: 5px 0;
        }
    </style>
</head>
<body>
    <div class="container">
        <!-- Header Image -->
        <img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXeGMXFIOlwtqgTHQIlgb436SxvEAcKKU4wUZbFmCwiGze-uAyJm9t-Bq81hB16V5C1wyGIKnu1zMILpkd0TpVuVtdWgSXb3pw2nq1ACpCvfKxhiRuiuE01k5MHspsR7nEEPC9Zqk2i8S3ERdKj32zCMN48VzYFaBzPpYFrtdw?key=wOT9cdkFRwm6KFiO_bWFhw" alt="Winter of Code Header" class="header-img">

        <!-- Content Section -->
        <div class="content">
            <p><strong>Greetings from GDG on Campus, IIIT Kalyani!</strong></p>
            <p>Dear PMD,</p>
            <p>I hope this email finds you well.</p>
            <p>We are excited to invite your organization to join <strong>Winter of Code 4.0</strong>, an open-source program by GDG on Campus IIIT Kalyani, cheduled to take place from December to January. This year’s event is expected to attract over 3000 participants, with almost 1000 already registered, driven by the collaborative efforts of 30+ Google Developer Groups and our valued community partners.</p>
            <p>Modeled after the structure of Google Summer of Code (GSoC), the program will span two months. During this time, student applicants will send proposals to partner organizations to work on open-source projects. Organizations will receive high-quality contributions that are meaningful and relevant to their codebase. Additionally, mentors will have the opportunity to review contribution proposals and can choose to accept or reject them based on alignment with project goals. As part of this event, we are reaching out to your organization to invite you to participate and contribute to the program. We would love to have your organization onboard.</p>
            <p>To partner, could you please provide the following:</p>
            <ul>
                <li>Number of projects you’d like to propose, along with project names</li>
                <li>Links to the project repositories</li>
                <li>Number of mentors/Points of Contact (PoCs) and their contact details</li>
                <li>Any proposal ideas or specific issues for students to focus on</li>
            </ul>

            <p>More details, including the event timeline, are available on our website at <a href="http://winterofcode.tech/" target="_blank">winterofcode.tech</a>. Please let us know how to proceed to initiate the partnership. Our program brochure and structure are attached for reference.</p>

            <p><a href="https://drive.google.com/file/d/1lzozKgXBw1Czn2MCxXGHrig61oM6Hlc_/view" target="_blank">Sponsorship Brochure</a></p>
            <p><a href="https://drive.google.com/file/d/1n3CBIyKuriTmm3xk4Z4aJkUefQc4Rr5y/view" target="_blank">Organisation Brochure</a></p>

            <p>Thank you for considering this opportunity to contribute to the open-source community. We look forward to the possibility of partnering with you.</p>

            <p><strong>Best regards,</strong></p>
            <p><strong>Arpan Mandal</strong><br>
            <strong>Lead Organiser</strong><br>
            <strong>GDG On Campus, IIIT Kalyani</strong></p>
        </div>

        <!-- Footer Section with Logo -->
        <div class="footer">
            <img src="https://lh4.googleusercontent.com/rk0E5GsGUHjZPiFLnEWoxFlnWm8DI61gmfvmGI_gg4Ju4SyHmbS3j84P67zVAsv-EQYTkfqsyU2NDMsZ-ZtfsX0GJZQSDtQhShzTiTwoepIQGlMVEjw5wYY1FxTpzU13LCcM4OflJegAaFCgMft6QwBHLEDEB96A6w9sgJGx3PqPdnXo-ttkjtjLRel8-HitBLrrIcgr9991iHJQ1MIOD8639umZbTxCIuPjuw" alt="GDG On Campus Logo">
        </div>
    </div>
</body>
</html>

Ok, so, first things first.

I’d suggest you check out the documentation on writing a ruleset:
https://docs.pmd-code.org/latest/pmd_userdocs_making_rulesets.html#referencing-a-single-rule

To reference existing rulesets, it suffices to do just:

<rule ref="category/apex/design.xml/ExcessiveClassLength" />

You don’t need to include the message nor any property unless you want to
*override* the default values for any of these. In your example, you are
just copying the defaults, so none of that is needed. Even if you were
overriding a value, you just need to include the one you want to override,
not all of them.

The rule’s doc shows the difference between just referencing / customizing
it (and neither includes the message attribute).
https://docs.pmd-code.org/latest/pmd_rules_apex_design.html#excessiveclasslength

As for the cc_* attributes in general, *just remove them*. They referenced
CodeClimate <https://codeclimate.com/>. They do not affect the rule itself,
but how it renders data *iff* using the code climate renderer. As this is a
renderer-specific thing, it didn’t make sense to have it as part of each
rule, and hence, was deprecated and eventually removed. If you are not
using Code Climate, you won’t see a difference. If you are, you will simply
stop having category / remediation points info.

Regards

On Mon, Nov 11, 2024 at 1:55 AM Abhinav kumar <abh...@gm...>
wrote:

> Hello Juan,
>
> What will be the impact when we remove these properties   " cc_categories
> , cc_remediation_points_multiplier, cc_block_highlighting  "  in our PMD
> analysis?
> Is there any alternative to these properties which we can include in our
> ruleset file.
> Please find the rule snippet below for your reference. This is how we have
> defined our custom ruleset.
>  <rule ref="category/apex/design.xml/ExcessiveClassLength" message=
> "Avoid really long classes (lines of code)">
>       <priority>3</priority>
>       <properties>
>          <property name="minimum" value="1000" />
>          <!-- relevant for Code Climate output only -->
>          <property name="cc_categories" value="Complexity" />
>          <property name="cc_remediation_points_multiplier" value="150" />
>          <property name="cc_block_highlighting" value="false" />
>       </properties>
>    </rule>
>
> So, how do we rewrite this rule as we will need to remove all the 3
> properties mentioned in the snippet. So how are we going to rewrite the
> rule and also any other property which we need to replace in place of these
> properties?.
>
>
> *NOTE:- These are the properties we are using for all our rulesets, you
> can go through the custom rule set file once which is attached with this
> email, so could you please guide as to how we are rewriting this without
> these properties.*
> Regards,
> Abhinav
>
> On Sun, Nov 10, 2024 at 10:06 AM Juan Martín Sotuyo Dodero <
> jua...@gm...> wrote:
>
>> Yes, simply remove them
>>
>> On Sun, Nov 10, 2024, 1:19 AM Abhinav kumar <abh...@gm...>
>> wrote:
>>
>>> Hello Juan,
>>>
>>> Thank you so much for the response, so what should be the next step?
>>> In Place of these properties  " cc_categories,
>>> cc_remediation_points_multiplier, cc_block_highlighting  "  what should
>>> be used because these are all custom defined rule sets we are using in our
>>> project.
>>>
>>> Should we remove these properties from our file, will that work?
>>>
>>> Awaiting your response.
>>>
>>> Regards,
>>> Abhinav
>>>
>>> On Thu, Nov 7, 2024 at 6:59 PM Juan Martín Sotuyo Dodero <
>>> jua...@gm...> wrote:
>>>
>>>> Abhinav,
>>>>
>>>> PMD 7 is a major release, and as such, introduces breaking changes.
>>>> As per our own policy, we never introduce a breaking change unless the
>>>> relevant feature has already been deprecated in the previous release, and
>>>> ensuring appropriate warnings are emitted with it’s usage, even if still
>>>> supported, with the intention of giving people time to accommodate and
>>>> prepare. Aditionally, with any release, the release notes
>>>> <https://docs.pmd-code.org/latest/pmd_release_notes_pmd7.html>
>>>> comprehensively cover these changes.
>>>>
>>>> As per the error’s self description
>>>>
>>>> 2024-11-04T07:40:49.3666791Z  11|          <property name="cc_categories" value="Complexity" />
>>>> 2024-11-04T07:40:49.3667364Z               ^^^^^^^^^ Cannot set non-existent property 'cc_categories' on rule ExcessiveClassLength
>>>>
>>>> In this particular case, this is the relevant piece
>>>> <https://docs.pmd-code.org/latest/pmd_release_notes_pmd7.html#changed-rules:~:text=Apex%20General%20changes>
>>>> :
>>>>
>>>> *Apex General changes*
>>>>
>>>>    - The properties cc_categories, cc_remediation_points_multiplier,
>>>>    cc_block_highlighting have been removed from all rules. These
>>>>    properties have been deprecated since PMD 6.13.0. See issue #1648
>>>>    <https://github.com/pmd/pmd/issues/1648> for more details.
>>>>
>>>> Hope that helps. Checking the logs for deprecation warnings can
>>>> hopefully help you stay prepared for major changes without affecting your
>>>> workflows.
>>>>
>>>> Regards
>>>>
>>>> On Thu, Nov 7, 2024 at 6:24 AM Abhinav kumar <abh...@gm...>
>>>> wrote:
>>>>
>>>>> Hello Team,
>>>>>
>>>>> I am using sfdx-scanner for my project and custom PMD rule set for the
>>>>> static code analysis.
>>>>> When I upgraded the scanner to 4.0.0, PMD was upgraded to 7.0.0 but
>>>>> then I started getting errors in my pipeline. The same rule set is working
>>>>> fine with the sfdx-scanner 3.25 version. I have attached the error log file.
>>>>>
>>>>> Also, I am attaching the custom ruleset file for your reference.
>>>>>
>>>>>
>>>>> _______________________________________________
>>>>> Pmd-devel mailing list
>>>>> Pmd...@li...
>>>>> https://lists.sourceforge.net/lists/listinfo/pmd-devel
>>>>>
>>>>

Hello Juan,

What will be the impact when we remove these properties   " cc_categories,
cc_remediation_points_multiplier, cc_block_highlighting  "  in our PMD
analysis?
Is there any alternative to these properties which we can include in our
ruleset file.
Please find the rule snippet below for your reference. This is how we have
defined our custom ruleset.
 <rule ref="category/apex/design.xml/ExcessiveClassLength" message=
"Avoid really long classes (lines of code)">
      <priority>3</priority>
      <properties>
         <property name="minimum" value="1000" />
         <!-- relevant for Code Climate output only -->
         <property name="cc_categories" value="Complexity" />
         <property name="cc_remediation_points_multiplier" value="150" />
         <property name="cc_block_highlighting" value="false" />
      </properties>
   </rule>

So, how do we rewrite this rule as we will need to remove all the 3
properties mentioned in the snippet. So how are we going to rewrite the
rule and also any other property which we need to replace in place of these
properties?.


*NOTE:- These are the properties we are using for all our rulesets, you can
go through the custom rule set file once which is attached with this email,
so could you please guide as to how we are rewriting this without these
properties.*
Regards,
Abhinav

On Sun, Nov 10, 2024 at 10:06 AM Juan Martín Sotuyo Dodero <
jua...@gm...> wrote:

> Yes, simply remove them
>
> On Sun, Nov 10, 2024, 1:19 AM Abhinav kumar <abh...@gm...>
> wrote:
>
>> Hello Juan,
>>
>> Thank you so much for the response, so what should be the next step?
>> In Place of these properties  " cc_categories,
>> cc_remediation_points_multiplier, cc_block_highlighting  "  what should
>> be used because these are all custom defined rule sets we are using in our
>> project.
>>
>> Should we remove these properties from our file, will that work?
>>
>> Awaiting your response.
>>
>> Regards,
>> Abhinav
>>
>> On Thu, Nov 7, 2024 at 6:59 PM Juan Martín Sotuyo Dodero <
>> jua...@gm...> wrote:
>>
>>> Abhinav,
>>>
>>> PMD 7 is a major release, and as such, introduces breaking changes.
>>> As per our own policy, we never introduce a breaking change unless the
>>> relevant feature has already been deprecated in the previous release, and
>>> ensuring appropriate warnings are emitted with it’s usage, even if still
>>> supported, with the intention of giving people time to accommodate and
>>> prepare. Aditionally, with any release, the release notes
>>> <https://docs.pmd-code.org/latest/pmd_release_notes_pmd7.html>
>>> comprehensively cover these changes.
>>>
>>> As per the error’s self description
>>>
>>> 2024-11-04T07:40:49.3666791Z  11|          <property name="cc_categories" value="Complexity" />
>>> 2024-11-04T07:40:49.3667364Z               ^^^^^^^^^ Cannot set non-existent property 'cc_categories' on rule ExcessiveClassLength
>>>
>>> In this particular case, this is the relevant piece
>>> <https://docs.pmd-code.org/latest/pmd_release_notes_pmd7.html#changed-rules:~:text=Apex%20General%20changes>
>>> :
>>>
>>> *Apex General changes*
>>>
>>>    - The properties cc_categories, cc_remediation_points_multiplier,
>>>    cc_block_highlighting have been removed from all rules. These
>>>    properties have been deprecated since PMD 6.13.0. See issue #1648
>>>    <https://github.com/pmd/pmd/issues/1648> for more details.
>>>
>>> Hope that helps. Checking the logs for deprecation warnings can
>>> hopefully help you stay prepared for major changes without affecting your
>>> workflows.
>>>
>>> Regards
>>>
>>> On Thu, Nov 7, 2024 at 6:24 AM Abhinav kumar <abh...@gm...>
>>> wrote:
>>>
>>>> Hello Team,
>>>>
>>>> I am using sfdx-scanner for my project and custom PMD rule set for the
>>>> static code analysis.
>>>> When I upgraded the scanner to 4.0.0, PMD was upgraded to 7.0.0 but
>>>> then I started getting errors in my pipeline. The same rule set is working
>>>> fine with the sfdx-scanner 3.25 version. I have attached the error log file.
>>>>
>>>> Also, I am attaching the custom ruleset file for your reference.
>>>>
>>>>
>>>> _______________________________________________
>>>> Pmd-devel mailing list
>>>> Pmd...@li...
>>>> https://lists.sourceforge.net/lists/listinfo/pmd-devel
>>>>
>>>

Yes, simply remove them

On Sun, Nov 10, 2024, 1:19 AM Abhinav kumar <abh...@gm...>
wrote:

> Hello Juan,
>
> Thank you so much for the response, so what should be the next step?
> In Place of these properties  " cc_categories,
> cc_remediation_points_multiplier, cc_block_highlighting  "  what should
> be used because these are all custom defined rule sets we are using in our
> project.
>
> Should we remove these properties from our file, will that work?
>
> Awaiting your response.
>
> Regards,
> Abhinav
>
> On Thu, Nov 7, 2024 at 6:59 PM Juan Martín Sotuyo Dodero <
> jua...@gm...> wrote:
>
>> Abhinav,
>>
>> PMD 7 is a major release, and as such, introduces breaking changes.
>> As per our own policy, we never introduce a breaking change unless the
>> relevant feature has already been deprecated in the previous release, and
>> ensuring appropriate warnings are emitted with it’s usage, even if still
>> supported, with the intention of giving people time to accommodate and
>> prepare. Aditionally, with any release, the release notes
>> <https://docs.pmd-code.org/latest/pmd_release_notes_pmd7.html>
>> comprehensively cover these changes.
>>
>> As per the error’s self description
>>
>> 2024-11-04T07:40:49.3666791Z  11|          <property name="cc_categories" value="Complexity" />
>> 2024-11-04T07:40:49.3667364Z               ^^^^^^^^^ Cannot set non-existent property 'cc_categories' on rule ExcessiveClassLength
>>
>> In this particular case, this is the relevant piece
>> <https://docs.pmd-code.org/latest/pmd_release_notes_pmd7.html#changed-rules:~:text=Apex%20General%20changes>
>> :
>>
>> *Apex General changes*
>>
>>    - The properties cc_categories, cc_remediation_points_multiplier,
>>    cc_block_highlighting have been removed from all rules. These
>>    properties have been deprecated since PMD 6.13.0. See issue #1648
>>    <https://github.com/pmd/pmd/issues/1648> for more details.
>>
>> Hope that helps. Checking the logs for deprecation warnings can hopefully
>> help you stay prepared for major changes without affecting your workflows.
>>
>> Regards
>>
>> On Thu, Nov 7, 2024 at 6:24 AM Abhinav kumar <abh...@gm...>
>> wrote:
>>
>>> Hello Team,
>>>
>>> I am using sfdx-scanner for my project and custom PMD rule set for the
>>> static code analysis.
>>> When I upgraded the scanner to 4.0.0, PMD was upgraded to 7.0.0 but then
>>> I started getting errors in my pipeline. The same rule set is working fine
>>> with the sfdx-scanner 3.25 version. I have attached the error log file.
>>>
>>> Also, I am attaching the custom ruleset file for your reference.
>>>
>>>
>>> _______________________________________________
>>> Pmd-devel mailing list
>>> Pmd...@li...
>>> https://lists.sourceforge.net/lists/listinfo/pmd-devel
>>>
>>

Hello Juan,

Thank you so much for the response, so what should be the next step?
In Place of these properties  " cc_categories,
cc_remediation_points_multiplier, cc_block_highlighting  "  what should be
used because these are all custom defined rule sets we are using in our
project.

Should we remove these properties from our file, will that work?

Awaiting your response.

Regards,
Abhinav

On Thu, Nov 7, 2024 at 6:59 PM Juan Martín Sotuyo Dodero <
jua...@gm...> wrote:

> Abhinav,
>
> PMD 7 is a major release, and as such, introduces breaking changes.
> As per our own policy, we never introduce a breaking change unless the
> relevant feature has already been deprecated in the previous release, and
> ensuring appropriate warnings are emitted with it’s usage, even if still
> supported, with the intention of giving people time to accommodate and
> prepare. Aditionally, with any release, the release notes
> <https://docs.pmd-code.org/latest/pmd_release_notes_pmd7.html>
> comprehensively cover these changes.
>
> As per the error’s self description
>
> 2024-11-04T07:40:49.3666791Z  11|          <property name="cc_categories" value="Complexity" />
> 2024-11-04T07:40:49.3667364Z               ^^^^^^^^^ Cannot set non-existent property 'cc_categories' on rule ExcessiveClassLength
>
> In this particular case, this is the relevant piece
> <https://docs.pmd-code.org/latest/pmd_release_notes_pmd7.html#changed-rules:~:text=Apex%20General%20changes>
> :
>
> *Apex General changes*
>
>    - The properties cc_categories, cc_remediation_points_multiplier,
>    cc_block_highlighting have been removed from all rules. These
>    properties have been deprecated since PMD 6.13.0. See issue #1648
>    <https://github.com/pmd/pmd/issues/1648> for more details.
>
> Hope that helps. Checking the logs for deprecation warnings can hopefully
> help you stay prepared for major changes without affecting your workflows.
>
> Regards
>
> On Thu, Nov 7, 2024 at 6:24 AM Abhinav kumar <abh...@gm...>
> wrote:
>
>> Hello Team,
>>
>> I am using sfdx-scanner for my project and custom PMD rule set for the
>> static code analysis.
>> When I upgraded the scanner to 4.0.0, PMD was upgraded to 7.0.0 but then
>> I started getting errors in my pipeline. The same rule set is working fine
>> with the sfdx-scanner 3.25 version. I have attached the error log file.
>>
>> Also, I am attaching the custom ruleset file for your reference.
>>
>>
>> _______________________________________________
>> Pmd-devel mailing list
>> Pmd...@li...
>> https://lists.sourceforge.net/lists/listinfo/pmd-devel
>>
>

Abhinav,

PMD 7 is a major release, and as such, introduces breaking changes.
As per our own policy, we never introduce a breaking change unless the
relevant feature has already been deprecated in the previous release, and
ensuring appropriate warnings are emitted with it’s usage, even if still
supported, with the intention of giving people time to accommodate and
prepare. Aditionally, with any release, the release notes
<https://docs.pmd-code.org/latest/pmd_release_notes_pmd7.html>
comprehensively cover these changes.

As per the error’s self description

2024-11-04T07:40:49.3666791Z  11|          <property
name="cc_categories" value="Complexity" />
2024-11-04T07:40:49.3667364Z               ^^^^^^^^^ Cannot set
non-existent property 'cc_categories' on rule ExcessiveClassLength

In this particular case, this is the relevant piece
<https://docs.pmd-code.org/latest/pmd_release_notes_pmd7.html#changed-rules:~:text=Apex%20General%20changes>
:

*Apex General changes*

   - The properties cc_categories, cc_remediation_points_multiplier,
   cc_block_highlighting have been removed from all rules. These properties
   have been deprecated since PMD 6.13.0. See issue #1648
   <https://github.com/pmd/pmd/issues/1648> for more details.

Hope that helps. Checking the logs for deprecation warnings can hopefully
help you stay prepared for major changes without affecting your workflows.

Regards

On Thu, Nov 7, 2024 at 6:24 AM Abhinav kumar <abh...@gm...>
wrote:

> Hello Team,
>
> I am using sfdx-scanner for my project and custom PMD rule set for the
> static code analysis.
> When I upgraded the scanner to 4.0.0, PMD was upgraded to 7.0.0 but then I
> started getting errors in my pipeline. The same rule set is working fine
> with the sfdx-scanner 3.25 version. I have attached the error log file.
>
> Also, I am attaching the custom ruleset file for your reference.
>
>
> _______________________________________________
> Pmd-devel mailing list
> Pmd...@li...
> https://lists.sourceforge.net/lists/listinfo/pmd-devel
>

Hello Team,

I am using sfdx-scanner for my project and custom PMD rule set for the
static code analysis.
When I upgraded the scanner to 4.0.0, PMD was upgraded to 7.0.0 but then I
started getting errors in my pipeline. The same rule set is working fine
with the sfdx-scanner 3.25 version. I have attached the error log file.

Also, I am attaching the custom ruleset file for your reference.

  * Downloads: https://github.com/pmd/pmd/releases/tag/pmd_releases%2F7.7.0
  * Documentation: https://docs.pmd-code.org/pmd-doc-7.7.0/


    25-October-2024 - 7.7.0

The PMD team is pleased to announce PMD 7.7.0.

This is a minor release.


      Table Of Contents

  * 🚀 New and noteworthy
    <https://sourceforge.net/p/pmd/news/2024/10/pmd-770-25-october-2024-released/#new-and-noteworthy>

      o CPD can now ignore literals and identifiers in C++ code
        <https://sourceforge.net/p/pmd/news/2024/10/pmd-770-25-october-2024-released/#cpd-can-now-ignore-literals-and-identifiers-in-c-code>
  * 🌟 Rule Changes
    <https://sourceforge.net/p/pmd/news/2024/10/pmd-770-25-october-2024-released/#rule-changes>

      o Changed Rules
        <https://sourceforge.net/p/pmd/news/2024/10/pmd-770-25-october-2024-released/#changed-rules>
      o Renamed Rules
        <https://sourceforge.net/p/pmd/news/2024/10/pmd-770-25-october-2024-released/#renamed-rules>
  * 🐛 Fixed Issues
    <https://sourceforge.net/p/pmd/news/2024/10/pmd-770-25-october-2024-released/#fixed-issues>
  * 🚨 API Changes
    <https://sourceforge.net/p/pmd/news/2024/10/pmd-770-25-october-2024-released/#api-changes>
  * ✨ Merged pull requests
    <https://sourceforge.net/p/pmd/news/2024/10/pmd-770-25-october-2024-released/#merged-pull-requests>
  * 📦 Dependency updates
    <https://sourceforge.net/p/pmd/news/2024/10/pmd-770-25-october-2024-released/#dependency-updates>
  * 📈 Stats
    <https://sourceforge.net/p/pmd/news/2024/10/pmd-770-25-october-2024-released/#stats>


      🚀 New and noteworthy


        CPD can now ignore literals and identifiers in C++ code

When searching for duplicated code in C++ differences in literals or 
identifiers can be
ignored now (like in Java). This can be enabled via the command line 
options |--ignore-literal|
and |--ignore-identifiers|.
See PR #5040 <https://github.com/pmd/pmd/pull/5040> for details.


      🌟 Rule Changes


        Changed Rules

  * |SwitchStmtsShouldHaveDefault|
    <https://docs.pmd-code.org/pmd-doc-7.7.0/pmd_rules_java_bestpractices.html#switchstmtsshouldhavedefault>
    (Java Best Practices) doesn't report empty switch statements anymore.
    To detect these, use |EmptyControlStatement|
    <https://docs.pmd-code.org/pmd-doc-7.7.0/pmd_rules_java_codestyle.html#emptycontrolstatement>.
  * |UnitTestShouldUseAfterAnnotation|
    <https://docs.pmd-code.org/pmd-doc-7.7.0/pmd_rules_java_bestpractices.html#unittestshoulduseafterannotation>
    (Java Best Practices) now also considers JUnit 5 and TestNG tests.
  * |UnitTestShouldUseBeforeAnnotation|
    <https://docs.pmd-code.org/pmd-doc-7.7.0/pmd_rules_java_bestpractices.html#unittestshouldusebeforeannotation>
    (Java Best Practices) now also considers JUnit 5 and TestNG tests.
  * |TooFewBranchesForSwitch|
    <https://docs.pmd-code.org/pmd-doc-7.7.0/pmd_rules_java_performance.html#toofewbranchesforswitch>
    (Java Performance) doesn't report empty switches anymore.
    To detect these, use |EmptyControlStatement|
    <https://docs.pmd-code.org/pmd-doc-7.7.0/pmd_rules_java_codestyle.html#emptycontrolstatement>.


        Renamed Rules

  * Several rules for unit testing have been renamed to better reflect
    their actual scope. Lots of them were called
    after JUnit / JUnit 4, even when they applied to JUnit 5 and / or
    TestNG.
  * |UnitTestAssertionsShouldIncludeMessage|
    <https://docs.pmd-code.org/pmd-doc-7.7.0/pmd_rules_java_bestpractices.html#unittestassertionsshouldincludemessage>
    (Java Best Practices) has been renamed from
    |JUnitAssertionsShouldIncludeMessage|.
  * |UnitTestContainsTooManyAsserts|
    <https://docs.pmd-code.org/pmd-doc-7.7.0/pmd_rules_java_bestpractices.html#unittestcontainstoomanyasserts>
    (Java Best Practices) has been renamed from
    |JUnitTestContainsTooManyAsserts|.
  * |UnitTestShouldIncludeAssert|
    <https://docs.pmd-code.org/pmd-doc-7.7.0/pmd_rules_java_bestpractices.html#unittestshouldincludeassert>
    (Java Best Practices) has been renamed from
    |JUnitTestsShouldIncludeAssert|.
  * |UnitTestShouldUseAfterAnnotation|
    <https://docs.pmd-code.org/pmd-doc-7.7.0/pmd_rules_java_bestpractices.html#unittestshoulduseafterannotation>
    (Java Best Practices) has been renamed from
    |JUnit4TestShouldUseAfterAnnotation|.
  * |UnitTestShouldUseBeforeAnnotation|
    <https://docs.pmd-code.org/pmd-doc-7.7.0/pmd_rules_java_bestpractices.html#unittestshouldusebeforeannotation>
    (Java Best Practices) has been renamed from
    |JUnit4TestShouldUseBeforeAnnotation|.
  * |UnitTestShouldUseTestAnnotation|
    <https://docs.pmd-code.org/pmd-doc-7.7.0/pmd_rules_java_bestpractices.html#unittestshouldusetestannotation>
    (Java Best Practices) has been renamed from
    |JUnit4TestShouldUseTestAnnotation|.
  * Several rules about switch statements and switch expression have
    been renamed, as they apply both to Switch Statements
    and to Switch Expressions:
  * |DefaultLabelNotLastInSwitch|
    <https://docs.pmd-code.org/pmd-doc-7.7.0/pmd_rules_java_bestpractices.html#defaultlabelnotlastinswitch>
    (Java Best Practices) has been renamed from
    |DefaultLabelNotLastInSwitch|.
  * |NonCaseLabelInSwitch|
    <https://docs.pmd-code.org/pmd-doc-7.7.0/pmd_rules_java_errorprone.html#noncaselabelinswitch>
    (Java Error Prone) has been renamed from
    |NonCaseLabelInSwitchStatement|.
  * |TooFewBranchesForSwitch|
    <https://docs.pmd-code.org/pmd-doc-7.7.0/pmd_rules_java_performance.html#toofewbranchesforswitch>
    (Java Performance) has been renamed from
    |TooFewBranchesForASwitchStatement|.
  * |NonExhaustiveSwitch|
    <https://docs.pmd-code.org/pmd-doc-7.7.0/pmd_rules_java_bestpractices.html#nonexhaustiveswitch>
    (Java Best Practices) has been renamed from
    |SwitchStmtsShouldHaveDefault|.

The old rule names still work but are deprecated.


      🐛 Fixed Issues

  * apex-performance
  * #5270 <https://github.com/pmd/pmd/issues/5270>: [apex]
    AvoidNonRestrictiveQueries when LIMIT is followed by bind expression
  * java
  * #4532 <https://github.com/pmd/pmd/issues/4532>: [java] Rule misnomer
    for JUnit* rules
  * #5261 <https://github.com/pmd/pmd/issues/5261>: [java] Record
    patterns with empty deconstructor lists lead to NPE
  * java-bestpractices
  * #4286 <https://github.com/pmd/pmd/issues/4286>: [java] Rename rule
    SwitchStmtsShouldHaveDefault to NonExhaustiveSwitch
  * #4813 <https://github.com/pmd/pmd/issues/4813>: [java]
    SwitchStmtsShouldHaveDefault false positive with pattern matching
  * java-codestyle
  * #5253 <https://github.com/pmd/pmd/issues/5253>: [java]
    BooleanGetMethodName: False-negatives with |Boolean| wrapper
  * java-design
  * #5030 <https://github.com/pmd/pmd/issues/5030>: [java] SwitchDensity
    false positive with pattern matching
  * java-errorprone
  * #3362 <https://github.com/pmd/pmd/issues/3362>: [java]
    ImplicitSwitchFallThrough should consider switch expressions
  * #5067 <https://github.com/pmd/pmd/issues/5067>: [java]
    CloseResource: False positive for FileSystems.getDefault()
  * #5244 <https://github.com/pmd/pmd/issues/5244>: [java]
    UselessOperationOnImmutable should detect java.time types
  * #5257 <https://github.com/pmd/pmd/issues/5257>: [java]
    NonCaseLabelInSwitch should consider switch expressions
  * java-performance
  * #5249 <https://github.com/pmd/pmd/issues/5249>: [java]
    TooFewBranchesForASwitchStatement false positive for Pattern Matching
  * #5250 <https://github.com/pmd/pmd/issues/5250>: [java]
    TooFewBranchesForASwitchStatement should consider Switch Expressions


      🚨 API Changes

  * java-bestpractices
  * The old rule name |JUnit4TestShouldUseAfterAnnotation| has been
    deprecated. Use the new name |UnitTestShouldUseAfterAnnotation|
    <https://docs.pmd-code.org/pmd-doc-7.7.0/pmd_rules_java_bestpractices.html#unittestshoulduseafterannotation>
    instead.
  * The old rule name |JUnit4TestShouldUseBeforeAnnotation| has been
    deprecated. Use the new name |UnitTestShouldUseBeforeAnnotation|
    <https://docs.pmd-code.org/pmd-doc-7.7.0/pmd_rules_java_bestpractices.html#unittestshouldusebeforeannotation>
    instead.
  * The old rule name |JUnit4TestShouldUseTestAnnotation| has been
    deprecated. Use the new name |UnitTestShouldUseTestAnnotation|
    <https://docs.pmd-code.org/pmd-doc-7.7.0/pmd_rules_java_bestpractices.html#unittestshouldusetestannotation>
    instead.
  * The old rule name |JUnitAssertionsShouldIncludeMessage| has been
    deprecated. Use the new name
    |UnitTestAssertionsShouldIncludeMessage|
    <https://docs.pmd-code.org/pmd-doc-7.7.0/pmd_rules_java_bestpractices.html#unittestassertionsshouldincludemessage>
    instead.
  * The old rule name |JUnitTestContainsTooManyAsserts| has been
    deprecated. Use the new name |UnitTestContainsTooManyAsserts|
    <https://docs.pmd-code.org/pmd-doc-7.7.0/pmd_rules_java_bestpractices.html#unittestcontainstoomanyasserts>
    instead.
  * The old rule name |JUnitTestsShouldIncludeAssert| has been
    deprecated. Use the new name |UnitTestShouldIncludeAssert|
    <https://docs.pmd-code.org/pmd-doc-7.7.0/pmd_rules_java_bestpractices.html#unittestshouldincludeassert>
    instead.
  * The old rule name |DefaultLabelNotLastInSwitch| has been deprecated.
    Use the new name |DefaultLabelNotLastInSwitch|
    <https://docs.pmd-code.org/pmd-doc-7.7.0/pmd_rules_java_bestpractices.html#defaultlabelnotlastinswitch>
    instead.
  * The old rule name |SwitchStmtsShouldHaveDefault| has been
    deprecated. USe the new name |NonExhaustiveSwitch|
    <https://docs.pmd-code.org/pmd-doc-7.7.0/pmd_rules_java_bestpractices.html#nonexhaustiveswitch>
    instead.
  * java-errorprone
  * The old rule name |NonCaseLabelInSwitchStatement| has been
    deprecated. Use the new name |NonCaseLabelInSwitch|
    <https://docs.pmd-code.org/pmd-doc-7.7.0/pmd_rules_java_errorprone.html#noncaselabelinswitch>
    instead.
  * java-performance
  * The old rule name |TooFewBranchesForASwitchStatement| has been
    deprecated. Use the new name |TooFewBranchesForSwitch|
    <https://docs.pmd-code.org/pmd-doc-7.7.0/pmd_rules_java_performance.html#toofewbranchesforswitch>
    instead.


      ✨ Merged pull requests

  * #4965 <https://github.com/pmd/pmd/pull/4965>: Fix #4532: [java]
    Rename JUnit rules with overly restrictive names - Juan Martín
    Sotuyo Dodero <https://github.com/jsotuyod> (@jsotuyod)
  * #5040 <https://github.com/pmd/pmd/pull/5040>: [cpp] Ignore literals
    and ignore identifiers capability to C++ CPD - Jakub Dupak
    <https://github.com/jdupak> (@jdupak)
  * #5225 <https://github.com/pmd/pmd/pull/5225>: Fix #5067: [java]
    CloseResource: False positive for FileSystems.getDefault() - Lukas
    Gräf <https://github.com/lukasgraef> (@lukasgraef)
  * #5241 <https://github.com/pmd/pmd/pull/5241>: Ignore javacc code in
    coverage report - Juan Martín Sotuyo Dodero
    <https://github.com/jsotuyod> (@jsotuyod)
  * #5245 <https://github.com/pmd/pmd/pull/5245>: [java] Improve
    UnitTestShouldUse{After,Before}Annotation rules to support JUnit5
    and TestNG - Andreas Dangel <https://github.com/adangel> (@adangel
    <https://sourceforge.net/u/adangel/profile/>)
  * #5247 <https://github.com/pmd/pmd/pull/5247>: Fix #5030: [java]
    SwitchDensity false positive with pattern matching - Andreas Dangel
    <https://github.com/adangel> (@adangel
    <https://sourceforge.net/u/adangel/profile/>)
  * #5248 <https://github.com/pmd/pmd/pull/5248>: Fix #3362: [java]
    ImplicitSwitchFallThrough should consider switch expressions -
    Andreas Dangel <https://github.com/adangel> (@adangel
    <https://sourceforge.net/u/adangel/profile/>)
  * #5251 <https://github.com/pmd/pmd/pull/5251>: Fix #5249 and #5250:
    [java] TooFewBranchesForSwitch ignore pattern matching and support
    switch expressions - Andreas Dangel <https://github.com/adangel>
    (@adangel <https://sourceforge.net/u/adangel/profile/>)
  * #5252 <https://github.com/pmd/pmd/pull/5252>: Fix #4813: [java]
    SwitchStmtsShouldHaveDefault false positive with pattern matching -
    Andreas Dangel <https://github.com/adangel> (@adangel
    <https://sourceforge.net/u/adangel/profile/>)
  * #5255 <https://github.com/pmd/pmd/pull/5255>: [java] Rename rule
    DefaultLabelNotLastInSwitch - Andreas Dangel
    <https://github.com/adangel> (@adangel
    <https://sourceforge.net/u/adangel/profile/>)
  * #5256 <https://github.com/pmd/pmd/pull/5256>: Fix #5257: [java]
    NonCaseLabelInSwitch - support switch expressions - Andreas Dangel
    <https://github.com/adangel> (@adangel
    <https://sourceforge.net/u/adangel/profile/>)
  * #5258 <https://github.com/pmd/pmd/pull/5258>: Ignore generated antlr
    classes in coverage reports - Juan Martín Sotuyo Dodero
    <https://github.com/jsotuyod> (@jsotuyod)
  * #5264 <https://github.com/pmd/pmd/pull/5264>: Fix #5261: [java] Fix
    NPE with empty pattern list - Clément Fournier
    <https://github.com/oowekyala> (@oowekyala
    <https://sourceforge.net/u/oowekyala/profile/>)
  * #5267 <https://github.com/pmd/pmd/pull/5267>: [java] Rename rule
    SwitchStmtsShouldHaveDefault to NonExhaustiveSwitch - Andreas Dangel
    <https://github.com/adangel> (@adangel
    <https://sourceforge.net/u/adangel/profile/>)
  * #5269 <https://github.com/pmd/pmd/pull/5269>: Fix #5253: [java]
    Support Boolean wrapper class for BooleanGetMethodName rule - Aryant
    Tripathi <https://github.com/Aryant-Tripathi> (@Aryant-Tripathi)
  * #5273 <https://github.com/pmd/pmd/pull/5273>: Fix #5270: [apex]
    AvoidNonRestrictiveQueries: Fix regex for detecting LIMIT clause -
    Andreas Dangel <https://github.com/adangel> (@adangel
    <https://sourceforge.net/u/adangel/profile/>)
  * #5275 <https://github.com/pmd/pmd/pull/5275>: Use plugin-classpath
    to simplify javacc-wrapper.xml - Andreas Dangel
    <https://github.com/adangel> (@adangel
    <https://sourceforge.net/u/adangel/profile/>)
  * #5278 <https://github.com/pmd/pmd/pull/5278>: [java]
    CouplingBetweenObjects: improve violation message - Andreas Dangel
    <https://github.com/adangel> (@adangel
    <https://sourceforge.net/u/adangel/profile/>)
  * #5279 <https://github.com/pmd/pmd/pull/5279>: Fix #5244: [java]
    UselessOperationOnImmutable: consider java.time.* types - Andreas
    Dangel <https://github.com/adangel> (@adangel
    <https://sourceforge.net/u/adangel/profile/>)


      📦 Dependency updates

  * #5234 <https://github.com/pmd/pmd/issues/5234>: Bump
    com.google.protobuf:protobuf-java from 3.25.3 to 4.28.2
  * #5274 <https://github.com/pmd/pmd/issues/5274>: Bump org.junit from
    5.8.2 to 5.11.2
  * #5276 <https://github.com/pmd/pmd/issues/5276>: Bump
    org.checkerframework:checker-qual from 2.11.1 to 3.48.1
  * #5280 <https://github.com/pmd/pmd/issues/5280>: Bump danger from
    9.5.0 to 9.5.1 in the all-gems group across 1 directory
  * #5281 <https://github.com/pmd/pmd/issues/5281>: Bump
    org.scala-lang:scala-reflect from 2.13.13 to 2.13.15


      📈 Stats

  * 98 commits
  * 32 closed tickets & PRs
  * Days since last release: 27

  * Downloads: https://github.com/pmd/pmd/releases/tag/pmd_releases%2F7.6.0
  * Documentation: https://docs.pmd-code.org/pmd-doc-7.6.0/


    27-September-2024 - 7.6.0

The PMD team is pleased to announce PMD 7.6.0.

This is a minor release.


      Table Of Contents

  * 🚀 New and noteworthy
    <https://sourceforge.net/p/pmd/news/2024/09/pmd-760-27-september-2024-released/#new-and-noteworthy>

      o New Git default branch - "main"
        <https://sourceforge.net/p/pmd/news/2024/09/pmd-760-27-september-2024-released/#new-git-default-branch---main>
  * 🐛 Fixed Issues
    <https://sourceforge.net/p/pmd/news/2024/09/pmd-760-27-september-2024-released/#fixed-issues>
  * 🚨 API Changes
    <https://sourceforge.net/p/pmd/news/2024/09/pmd-760-27-september-2024-released/#api-changes>
  * ✨ Merged pull requests
    <https://sourceforge.net/p/pmd/news/2024/09/pmd-760-27-september-2024-released/#merged-pull-requests>
  * 📦 Dependency updates
    <https://sourceforge.net/p/pmd/news/2024/09/pmd-760-27-september-2024-released/#dependency-updates>
  * 📈 Stats
    <https://sourceforge.net/p/pmd/news/2024/09/pmd-760-27-september-2024-released/#stats>


      🚀 New and noteworthy


        New Git default branch - "main"

We are joining the Git community and updating "master" to "main". Using 
the term "master" for the main
development branch can be offensive to some people. Existing versions of 
Git have been always capable of
working with any branch name and since 2.28.0 (July 2020) the default 
initial branch is configurable
(|init.defaultBranch|). Since October 2020, the default branch for new 
repositories on GitHub
is "main". Finally, PMD will also use this new name for the main branch 
in all our own repositories.

Why "main"? PMD uses a very simple branching model - pull requests with 
feature branches and one main development
branch, from which releases are created. That's why "main" is currently 
the best fitting name.

More information:
- https://sfconservancy.org/news/2020/jun/23/gitbranchname/
- 
https://github.blog/changelog/2020-10-01-the-default-branch-for-newly-created-repositories-is-now-main/

What changes?
- We change the default branch on GitHub, so that pull requests are 
automatically created against |main| from
now on.
- If you have already a local clone of PMD's repository, you'll need to 
rename the old master branch locally:
|git branch --move master main git fetch origin git branch 
--set-upstream-to=origin/main main git remote set-head origin --auto|

More info:
https://git-scm.com/book/en/v2/Git-Branching-Branch-Management#_changing_master 
and
https://docs.github.com/en/repositories/configuring-branches-and-merges-in-your-repository/managing-branches-in-your-repository/renaming-a-branch#updating-a-local-clone-after-a-branch-name-changes
- If you created a fork on GitHub, you'll need to change the default 
branch in your fork to |main| as
well (Settings > Default Branch).
- Some time after this release, we'll delete the old master branch on 
GitHub. Then only |main| can be used.
- This change is expanded to the other PMD repositories as well, e.g. 
pmd-designer and pmd-regression-tester.


      🐛 Fixed Issues

  * apex
  * #5138 <https://github.com/pmd/pmd/issues/5138>: [apex] Various
    false-negatives since 7.3.0 when using triggers
    (ApexCRUDViolation, CognitiveComplexity, OperationWithLimitsInLoop)
  * #5163 <https://github.com/pmd/pmd/issues/5163>: [apex] Parser error
    when using toLabel in SOSL query
  * #5182 <https://github.com/pmd/pmd/issues/5182>: [apex] Parser error
    when using GROUPING in a SOQL query
  * #5218 <https://github.com/pmd/pmd/issues/5218>: [apex] Parser error
    when using nested subqueries in SOQL
  * #5228 <https://github.com/pmd/pmd/issues/5228>: [apex] Parser error
    when using convertCurrency() in SOQL
  * core
  * #5059 <https://github.com/pmd/pmd/issues/5059>: [core] xml output
    doesn't escape CDATA inside its own CDATA
  * #5201 <https://github.com/pmd/pmd/issues/5201>: [core] PMD sarif
    schema file points to nonexistent location
  * #5222 <https://github.com/pmd/pmd/issues/5222>: [core]
    RuleReference/RuleSetWriter don't handle changed default property
    values correctly
  * #5229 <https://github.com/pmd/pmd/issues/5229>: [doc] CLI flag
    |--show-suppressed| needs to mention xml, html, summaryhtml
  * java
  * #5190 <https://github.com/pmd/pmd/issues/5190>: [java] NPE in type
    inference
  * java-codestyle
  * #5046 <https://github.com/pmd/pmd/issues/5046>: [java]
    LocalVariableCouldBeFinal false positive with try/catch
  * java-errorprone
  * #5068 <https://github.com/pmd/pmd/issues/5068>: [java]
    MissingStaticMethodInNonInstantiatableClass: false positive with
    builder pattern
  * #5207 <https://github.com/pmd/pmd/issues/5207>: [java]
    CheckSkipResult: false positve for a private method |void skip(int)|
    in a subclass of FilterInputStream


      🚨 API Changes

No changes.


      ✨ Merged pull requests

  * #5186 <https://github.com/pmd/pmd/pull/5186>: [java] Cleanup things
    about implicit classes - Clément Fournier
    <https://github.com/oowekyala> (@oowekyala
    <https://sourceforge.net/u/oowekyala/profile/>)
  * #5188 <https://github.com/pmd/pmd/pull/5188>: [apex] Use new
    apex-parser 4.2.0 - Andreas Dangel <https://github.com/adangel>
    (@adangel <https://sourceforge.net/u/adangel/profile/>)
  * #5191 <https://github.com/pmd/pmd/pull/5191>: [java] Fix #5046 - FPs
    in LocalVariableCouldBeFinal - Clément Fournier
    <https://github.com/oowekyala> (@oowekyala
    <https://sourceforge.net/u/oowekyala/profile/>)
  * #5192 <https://github.com/pmd/pmd/pull/5192>: [java] Fix #5190 - NPE
    in type inference caused by null type - Clément Fournier
    <https://github.com/oowekyala> (@oowekyala
    <https://sourceforge.net/u/oowekyala/profile/>)
  * #5195 <https://github.com/pmd/pmd/pull/5195>: [apex] Fix various FNs
    when using triggers - Andreas Dangel <https://github.com/adangel>
    (@adangel <https://sourceforge.net/u/adangel/profile/>)
  * #5202 <https://github.com/pmd/pmd/pull/5202>: [core] Sarif format:
    refer to schemastore.org - David Schach <https://github.com/dschach>
    (@dschach)
  * #5208 <https://github.com/pmd/pmd/pull/5208>: [doc] Added Codety to
    "Tools / Integrations" - Tony <https://github.com/random1223>
    (@random1223)
  * #5210 <https://github.com/pmd/pmd/pull/5210>: [core] Fix PMD's
    XMLRenderer to escape CDATA - Andreas Dangel
    <https://github.com/adangel> (@adangel
    <https://sourceforge.net/u/adangel/profile/>)
  * #5211 <https://github.com/pmd/pmd/pull/5211>: Change branch master
    to main - Andreas Dangel <https://github.com/adangel> (@adangel
    <https://sourceforge.net/u/adangel/profile/>)
  * #5212 <https://github.com/pmd/pmd/pull/5212>: [java] Adjust
    signature matching in CheckSkipResultRule - Juan Martín Sotuyo
    Dodero <https://github.com/jsotuyod> (@jsotuyod)
  * #5223 <https://github.com/pmd/pmd/pull/5223>: [core] Fix
    RuleReference / RuleSetWriter handling of properties - Andreas
    Dangel <https://github.com/adangel> (@adangel
    <https://sourceforge.net/u/adangel/profile/>)
  * #5224 <https://github.com/pmd/pmd/pull/5224>: [java] Fix #5068:
    Class incorrectly identified as non-instantiatable - Lukas Gräf
    <https://github.com/lukasgraef> (@lukasgraef)
  * #5230 <https://github.com/pmd/pmd/pull/5230>: [doc] Documentation
    update for --show-suppressed flag - David Schach
    <https://github.com/dschach> (@dschach)
  * #5237 <https://github.com/pmd/pmd/pull/5237>: [apex] Support
    convertCurrency() in SOQL/SOSL - Andreas Dangel
    <https://github.com/adangel> (@adangel
    <https://sourceforge.net/u/adangel/profile/>)


      📦 Dependency updates

  * #5185 <https://github.com/pmd/pmd/issues/5185>: Bump checkstyle from
    10.14.0 to 10.18.1
  * #5187 <https://github.com/pmd/pmd/issues/5187>: Bump
    org.apache.maven.plugins:maven-install-plugin from 3.1.1 to 3.1.3
  * #5199 <https://github.com/pmd/pmd/issues/5199>: Bump
    org.apache.maven.plugins:maven-deploy-plugin from 3.1.1 to 3.1.3
  * #5216 <https://github.com/pmd/pmd/issues/5216>: Bump
    com.github.siom79.japicmp:japicmp-maven-plugin from 0.20.0 to 0.23.0
  * #5226 <https://github.com/pmd/pmd/issues/5226>: Bump rouge from
    4.3.0 to 4.4.0 in the all-gems group across 1 directory
  * #5227 <https://github.com/pmd/pmd/issues/5227>: Bump
    com.google.code.gson:gson from 2.10.1 to 2.11.0
  * #5232 <https://github.com/pmd/pmd/issues/5232>: Bump
    com.google.protobuf:protobuf-java from 3.25.3 to 3.25.5
  * #5233 <https://github.com/pmd/pmd/issues/5233>: Bump webrick from
    1.8.1 to 1.8.2 in /docs


      📈 Stats

  * 60 commits
  * 27 closed tickets & PRs
  * Days since last release: 27

  * Downloads: https://github.com/pmd/pmd/releases/tag/pmd_releases%2F7.5.0
  * Documentation: https://docs.pmd-code.org/pmd-doc-7.5.0/


    30-August-2024 - 7.5.0

The PMD team is pleased to announce PMD 7.5.0.

This is a minor release.


      Table Of Contents

  * 🚀 New: Java 23 Support
    <https://sourceforge.net/p/pmd/news/2024/08/pmd-750-30-august-2024-released/#new-java-23-support>
  * 🌟 New Rules
    <https://sourceforge.net/p/pmd/news/2024/08/pmd-750-30-august-2024-released/#new-rules>
  * 🐛 Fixed Issues
    <https://sourceforge.net/p/pmd/news/2024/08/pmd-750-30-august-2024-released/#fixed-issues>
  * 🚨 API Changes
    <https://sourceforge.net/p/pmd/news/2024/08/pmd-750-30-august-2024-released/#api-changes>

      o Deprecations
        <https://sourceforge.net/p/pmd/news/2024/08/pmd-750-30-august-2024-released/#deprecations>
      o Experimental
        <https://sourceforge.net/p/pmd/news/2024/08/pmd-750-30-august-2024-released/#experimental>
  * ✨ External Contributions
    <https://sourceforge.net/p/pmd/news/2024/08/pmd-750-30-august-2024-released/#external-contributions>
  * 📦 Dependency updates
    <https://sourceforge.net/p/pmd/news/2024/08/pmd-750-30-august-2024-released/#dependency-updates>
  * 📈 Stats
    <https://sourceforge.net/p/pmd/news/2024/08/pmd-750-30-august-2024-released/#stats>


      🚀 New: Java 23 Support

This release of PMD brings support for Java 23. There are no new 
standard language features,
but a couple of preview language features:

  * JEP 455: Primitive Types in Patterns, instanceof, and switch
    (Preview) <https://openjdk.org/jeps/455>
  * JEP 476: Module Import Declarations (Preview)
    <https://openjdk.org/jeps/476>
  * JEP 477: Implicitly Declared Classes and Instance Main Methods
    (Third Preview) <https://openjdk.org/jeps/477>
  * JEP 482: Flexible Constructor Bodies (Second Preview)
    <https://openjdk.org/jeps/482>

Note that String Templates (introduced as preview in Java 21 and 22) are 
not supported anymore in Java 23,
see JDK-8329949 <https://bugs.openjdk.org/browse/JDK-8329949> for details.

In order to analyze a project with PMD that uses these preview language 
features,
you'll need to enable it via the environment variable |PMD_JAVA_OPTS| 
and select the new language
version |23-preview|:

|exportPMD_JAVA_OPTS=--enable-preview 
pmdcheck--use-versionjava-23-preview... |

Note: Support for Java 21 preview language features have been removed. 
The version "21-preview"
are no longer available.


      🌟 New Rules

  * The new Java rule |AvoidSynchronizedStatement|
    <https://docs.pmd-code.org/pmd-doc-7.5.0/pmd_rules_java_multithreading.html#avoidsynchronizedstatement>
    finds synchronization blocks that
    could cause performance issues with virtual threads due to pinning.
  * The new JavaScript rule |AvoidConsoleStatements|
    <https://docs.pmd-code.org/pmd-doc-7.5.0/pmd_rules_ecmascript_performance.html#avoidconsolestatements>
    finds any function calls
    on the Console API (e.g. |console.log|). Using these in production
    code might negatively impact performance.


      🐛 Fixed Issues

  * apex-performance
  * #5139 <https://github.com/pmd/pmd/issues/5139>: [apex]
    OperationWithHighCostInLoop: false negative for triggers
  * java
  * #5062 <https://github.com/pmd/pmd/issues/5062>: [java] Support Java 23
  * #5167 <https://github.com/pmd/pmd/issues/5167>: [java]
    java.lang.IllegalArgumentException: \<?> cannot be a wildcard bound
  * java-bestpractices
  * #3602 <https://github.com/pmd/pmd/issues/3602>: [java]
    GuardLogStatement: False positive when compile-time constant is
    created from external constants
  * #4731 <https://github.com/pmd/pmd/issues/4731>: [java]
    GuardLogStatement: Documentation is unclear why getters are flagged
  * #5145 <https://github.com/pmd/pmd/issues/5145>: [java]
    UnusedPrivateMethod: False positive with method calls inside lambda
  * #5151 <https://github.com/pmd/pmd/issues/5151>: [java]
    GuardLogStatement: Should not need to guard parameterized log
    messages where the replacement arg is a constant from another class
  * #5152 <https://github.com/pmd/pmd/issues/5152>: [java]
    GuardLogStatement: Should not need to guard parameterized log
    messages where the replacement arg is "this"
  * #5153 <https://github.com/pmd/pmd/issues/5153>: [java]
    GuardLogStatement: Should not need to guard parameterized log
    messages where the replacement arg is an array element
  * java-design
  * #5048 <https://github.com/pmd/pmd/issues/5084>: [java]
    CognitiveComplexity: Exception when using Map.of()
  * #5162 <https://github.com/pmd/pmd/issues/5162>: [java]
    SingularField: False-positive when preceded by synchronized block
  * java-multithreading
  * #5175 <https://github.com/pmd/pmd/issues/5175>: [java] Update
    AvoidSynchronizedAtMethodLevel message to mention ReentrantLock, new
    rule AvoidSynchronizedStatement
  * javascript-performance
  * #5105 <https://github.com/pmd/pmd/issues/5105>: [javascript]
    Prohibit any console methods
  * plsql
  * #5125 <https://github.com/pmd/pmd/pull/5125>: [plsql] Improve merge
    statement (order of merge insert/update flexible, allow prefixes in
    column names)
  * plsql-bestpractices
  * #5132 <https://github.com/pmd/pmd/issues/5132>: [plsql]
    TomKytesDespair: XPathException for more complex exception handler


      🚨 API Changes


        Deprecations

  * pmd-jsp
  * |JspParserImpl|
    <https://docs.pmd-code.org/apidocs/pmd-jsp/7.5.0/net/sourceforge/pmd/lang/jsp/ast/JspParserImpl.html#>
    is deprecated now. It should have been package-private
    because this is an implementation class that should not be used
    directly.
  * pmd-plsql
  * |MergeUpdateClausePrefix|
    <https://docs.pmd-code.org/apidocs/pmd-plsql/7.5.0/net/sourceforge/pmd/lang/plsql/ast/PLSQLParserImpl.html#MergeUpdateClausePrefix()>
    is deprecated. This production is
    not used anymore and will be removed. Note: The whole parser
    implementation class has been deprecated since 7.3.0,
    as it is supposed to be internalized.
  * pmd-velocity
  * |VtlParserImpl|
    <https://docs.pmd-code.org/apidocs/pmd-velocity/7.5.0/net/sourceforge/pmd/lang/velocity/ast/VtlParserImpl.html#>
    is deprecated now. It should have been package-private
    because this is an implementation class that should not be used
    directly.
  * pmd-visualforce
  * |VfParserImpl|
    <https://docs.pmd-code.org/apidocs/pmd-visualforce/7.5.0/net/sourceforge/pmd/lang/visualforce/ast/VfParserImpl.html#>
    is deprecated now. It should have been package-private
    because this is an implementation class that should not be used
    directly.


        Experimental

  * pmd-java
  * Renamed |isUnnamedClass()| to
    |ASTCompilationUnit#isSimpleCompilationUnit|
    <https://docs.pmd-code.org/apidocs/pmd-java/7.5.0/net/sourceforge/pmd/lang/java/ast/ASTCompilationUnit.html#isSimpleCompilationUnit()>
  * |ASTImplicitClassDeclaration|
    <https://docs.pmd-code.org/apidocs/pmd-java/7.5.0/net/sourceforge/pmd/lang/java/ast/ASTImplicitClassDeclaration.html#>
  * |ASTImportDeclaration#isModuleImport|
    <https://docs.pmd-code.org/apidocs/pmd-java/7.5.0/net/sourceforge/pmd/lang/java/ast/ASTImportDeclaration.html#isModuleImport()>
  * |JavaVisitorBase#visit(ASTImplicitClassDeclaration, P)|
    <https://docs.pmd-code.org/apidocs/pmd-java/7.5.0/net/sourceforge/pmd/lang/java/ast/JavaVisitorBase.html#visit(net.sourceforge.pmd.lang.java.ast.ASTImplicitClassDeclaration,P)>


      ✨ External Contributions

  * #5125 <https://github.com/pmd/pmd/pull/5125>: [plsql] Improve merge
    statement (order of merge insert/update flexible, allow prefixes in
    column names) - Arjen Duursma <https://github.com/duursma> (@duursma)
  * #5175 <https://github.com/pmd/pmd/pull/5175>: [java] Update
    AvoidSynchronizedAtMethodLevel message to mention ReentrantLock, new
    rule AvoidSynchronizedStatement - Chas Honton
    <https://github.com/chonton> (@chonton
    <https://sourceforge.net/u/chonton/profile/>)


      📦 Dependency updates

  * #5100 <https://github.com/pmd/pmd/issues/5100>: Enable Dependabot
  * #5141 <https://github.com/pmd/pmd/issues/5141>: Bump
    org.apache.maven.plugins:maven-checkstyle-plugin from 3.3.1 to 3.4.0
  * #5142 <https://github.com/pmd/pmd/issues/5142>: Bump
    org.apache.maven.plugins:maven-compiler-plugin from 3.12.1 to 3.13.0
  * #5144 <https://github.com/pmd/pmd/issues/5144>: Bump
    org.codehaus.mojo:versions-maven-plugin from 2.16.2 to 2.17.1
  * #5148 <https://github.com/pmd/pmd/issues/5148>: Bump
    org.apache.commons:commons-text from 1.11.0 to 1.12.0
  * #5149 <https://github.com/pmd/pmd/issues/5149>: Bump
    org.apache.maven.plugins:maven-site-plugin from 4.0.0-M13 to 4.0.0-M16
  * #5160 <https://github.com/pmd/pmd/issues/5160>: Bump
    org.pcollections:pcollections from 3.2.0 to 4.0.2
  * #5161 <https://github.com/pmd/pmd/issues/5161>: Bump danger from
    9.4.3 to 9.5.0 in the all-gems group across 1 directory
  * #5164 <https://github.com/pmd/pmd/issues/5164>: Bump
    org.apache.maven.plugins:maven-dependency-plugin from 3.6.1 to 3.7.1
  * #5165 <https://github.com/pmd/pmd/issues/5165>: Bump the all-gems
    group across 1 directory with 2 updates
  * #5171 <https://github.com/pmd/pmd/issues/5171>: Bump
    net.bytebuddy:byte-buddy-agent from 1.14.12 to 1.14.19
  * #5180 <https://github.com/pmd/pmd/issues/5180>: Bump
    net.sf.saxon:Saxon-HE from 12.4 to 12.5


      📈 Stats

  * 87 commits
  * 25 closed tickets & PRs
  * Days since last release: 35

Welcome to the latest OpenJDK Quality Outreach update!

Everything is on track for the General Availability of Java 23 on September 17th [1] as the JDK 23 Release Candidate builds (RC2 - builds 37) are now available [2]. And before shifting your attention to JDK 24, make sure to check the Heads-Up below as it is related to an important JAXP update in JDK 23.

The JVM Language Summit took place earlier this month in Santa Clara (California). During this unique conference, key updates around the Java platforms were presented and discussed. So, make sure to watch the JVMLS 2024 playlist [3] as videos are added regularly. And it's not really a surprise but Valhalla was a highly discussed topic. In his session [4], Brian Goetz (Java Language Architect) explained the proposed solution: value classes, null-restricted types, improved definite assignment analysis, and strict initialization. Around the same time-frame, Valhalla Early-Access builds implementing Value Classes and Objects were also made available [5], see the Release Notes [6] for the details. As usual, feedback should be reported to the proper mailing list [7].

[1] https://openjdk.org/projects/jdk/23/
[2] https://jdk.java.net/23/
[3] https://www.youtube.com/playlist?list=PLX8CzqL3ArzUEYnTa6KYORRbP3nhsK0L1
[4] https://www.youtube.com/watch?v=IF9l8fYfSnI
[5] https://jdk.java.net/valhalla/
[6] https://openjdk.org/projects/valhalla/early-access
[7] https://mail.openjdk.org/mailman/listinfo/valhalla-dev


## Heads-up - JDK 23: Prepare for a More Restrictive JAXP Configuration

The Java platform supports XML processing with JAXP (Java APIs for XML Processing) that are based on a wide range of XML technologies and standards, which can make them challenging to secure. To mitigate risks, JAXP offers comprehensive security features [8], but the default settings of some security features are not strict, making them opt-in. To improve out-of-the-box security, future JDK releases will make XML processing more restrictive by default and JDKs 21 to 23 help developers prepare for these changes.

### JDK 21: JAXP Configuration File

JDK 21 added `$JAVA_HOME/conf/jaxp.properties` as the default JAXP configuration file, property settings in this file reflect the current, built-in defaults for the JDK. JDK 21 also added the system property `java.xml.config.file` for specifying the location of a custom configuration file. For details, refer to JDK-8303530 [9] or the `java.xml` documentation [10].

### JDK 23: Restrictive JAXP Configuration File Template

JDK 23 adds `$JAVA_HOME/conf/jaxp-strict.properties.template`, a JAXP configuration file template that specifies more restrictive XML processing settings. It is recommended to test applications on these more restrictive settings to prepare them for a future JDK release that has them as default.

The following steps should be used to test an application with that template:
* copy the template file to a location outside of `$JAVA_HOME/conf`, e.g. `/<my_path>/jaxp-strict.properties`
* run the application with the system property `java.xml.config.file` set to the file's path, e.g. `java -Djava.xml.config.file=/<my_path>/jaxp-strict.properties myApp`

For details, please refer to JDK-8330542 [11].

[8] https://docs.oracle.com/en/java/javase/22/security/java-api-xml-processing-jaxp-security-guide.html#GUID-6E76FE41-A8C5-4F56-AB46-83A89B1E904A
[9] https://bugs.openjdk.org/browse/JDK-8303530
[10] https://docs.oracle.com/en/java/javase/21/docs/api/java.xml/module-summary.html#Conf
[11] https://bugs.openjdk.org/browse/JDK-8330542


## JDK 24 Early-Access Builds

The JDK 24 early-access builds 12 are available [12], and are provided under the GNU General Public License v2, with the Classpath Exception. The Release Notes are available here [13].

### Changes in recent JDK 24 builds that may be of interest:
- JDK-8335638: Calling VarHandle.{access-mode} methods reflectively throws wrong exception
- JDK-8329471: Remove GTK2
- JDK-8333772: Incorrect Kerberos behavior when udp_preference_limit = 0
- JDK-8304929: MethodTypeDesc throws an unchecked exception than ReflectiveOperationException …
- JDK-4966250: SSLSessionContext.setSessionTimeout() documentation could be updated
- JDK-8337506: Disable "best-fit" mapping on Windows command line
- JDK-8336479: Provide Process.waitFor(Duration)
- JDK-8336999: Verification for resource area allocated data structures in C2
- JDK-8335480: Only deoptimize threads if needed when closing shared arena
- JDK-8335939: Hide element writing across the ClassFile API
- JDK-8336489: Track scoped accesses in JVMCI compiled code
- JDK-8334492: DiagnosticCommands (jcmd) should accept %p in output filenames and substitute PID
- JDK-8334495: Use FFM instead of jdk.internal.misc.Unsafe in java.desktop font implementation
- JDK-8333396: Use StringBuilder internally for java.text.Format.* formatting
- JDK-8336815: Several methods in java.net.Socket and ServerSocket do not s…

Note: A more exhaustive list of changes can be found here [14].

[12] https://jdk.java.net/24/
[13] https://jdk.java.net/24/release-notes
[14] https://github.com/openjdk/jdk/compare/jdk-24+7...jdk-24+12


# Project Loom New Early-Access Builds

The latest Loom early access builds (Builds 24-loom+3-33 -2024/7/27) are now available [15]. These builds, based on an incomplete version of JDK 24, improve the implementation of Java monitors (synchronized methods) to work better with virtual threads. These builds are intended for developers looking to "kick the tires" and provide feedback or bug reports. Feedback should be reported to the Loom mailing  list  [16] (subscription required).

[15] https://jdk.java.net/loom/
[16] http://mail.openjdk.org/mailman/listinfo/loom-dev


# JavaFX Early-Access Builds

These are early access builds of the JavaFX 23 and 24 Runtime built from openjdk/jfx [17]. These builds enable JavaFX application developers to build and test their applications with JavaFX 23 and 24 on JDK 23 and 24 respectively. And although these builds are designed to work with JDK 23 EA, they are also known to work with JDK 21 and later versions.

The latest early access builds of JavaFX 23 (Builds 27) are available [18], under the GNU General Public License, version 2, with the Classpath Exception. And similarly, the latest early access builds of JavaFX 24 (Builds 4) are available here [19].

[17] https://github.com/openjdk/jfx
[18] https://jdk.java.net/javafx23/
[19] https://jdk.java.net/javafx24/


## Topics of Interest

- JDK 23 G1/Parallel/Serial GC changes
https://tschatzl.github.io/2024/07/22/jdk23-g1-serial-parallel-gc-changes.html

- How to Read a JDK Enhancement Proposal
https://inside.java/2024/08/01/newscast-74/

- JFR Event to Detect Invocations of Deprecated Methods
https://egahlin.github.io/2024/05/31/deprecated-event.html

- JVMLS: Valhalla - Where Are We?
https://www.youtube.com/watch?v=IF9l8fYfSnI

- JVMLS: An Opinionated Overview on Static Analysis for Java
https://inside.java/2024/08/20/jvmls-static-analysis/

- JVMLS: Rethinking Java String Concatenation
https://inside.java/2024/08/19/jvmls-string-concatention/

- JVMLS: Project Babylon - Code Reflection
https://inside.java/2024/08/14/jvmls-code-reflection/

- JVMLS: A Code Reflection Example - Translating Java to SPIR-V
https://inside.java/2024/08/16/jvmls-spir-v/

- JVMLS: Java in 2024 Keynote
https://inside.java/2024/08/12/jvmls-keynote/


~


As always, please ping me if you encounter issues with an early-access build. And see you next month for the Java 23 launch!

--David

  * Downloads: https://github.com/pmd/pmd/releases/tag/pmd_releases%2F7.4.0
  * Documentation: https://docs.pmd-code.org/pmd-doc-7.4.0/


    26-July-2024 - 7.4.0

The PMD team is pleased to announce PMD 7.4.0.

This is a minor release.


      Table Of Contents

  * 🌟 New and changed rules
    <https://sourceforge.net/p/pmd/news/2024/07/pmd-740-26-july-2024-released/#new-and-changed-rules>

      o New Rules
        <https://sourceforge.net/p/pmd/news/2024/07/pmd-740-26-july-2024-released/#new-rules>
      o Changed rules
        <https://sourceforge.net/p/pmd/news/2024/07/pmd-740-26-july-2024-released/#changed-rules>
      o Renamed rules
        <https://sourceforge.net/p/pmd/news/2024/07/pmd-740-26-july-2024-released/#renamed-rules>
  * 🐛 Fixed Issues
    <https://sourceforge.net/p/pmd/news/2024/07/pmd-740-26-july-2024-released/#fixed-issues>
  * 🚨 API Changes
    <https://sourceforge.net/p/pmd/news/2024/07/pmd-740-26-july-2024-released/#api-changes>
  * ✨ External Contributions
    <https://sourceforge.net/p/pmd/news/2024/07/pmd-740-26-july-2024-released/#external-contributions>
  * 📈 Stats
    <https://sourceforge.net/p/pmd/news/2024/07/pmd-740-26-july-2024-released/#stats>


      🌟 New and changed rules


        New Rules

  * The new Apex rule |AvoidNonRestrictiveQueries|
    <https://docs.pmd-code.org/pmd-doc-7.4.0/pmd_rules_apex_performance.html#avoidnonrestrictivequeries>
    finds SOQL and SOSL queries without a where
    or limit statement. This can quickly cause governor limit exceptions.


        Changed rules

  * |ClassNamingConventions|
    <https://docs.pmd-code.org/pmd-doc-7.4.0/pmd_rules_apex_codestyle.html#classnamingconventions>
    (Apex Codestyle): Two new properties to configure different patterns
    for inner classes and interfaces: |innerClassPattern| and
    |innerInterfacePattern|.


        Renamed rules

  * |InaccurateNumericLiteral|
    <https://docs.pmd-code.org/pmd-doc-7.4.0/pmd_rules_ecmascript_errorprone.html#inaccuratenumericliteral>
    (JavaScript Error Prone) has been renamed from
    |InnaccurateNumericLiteral|.
    The old rule name still works but is deprecated.


      🐛 Fixed Issues

  * apex
      o #5094 <https://github.com/pmd/pmd/issues/5094>: [apex] "No
        adapter exists for type" error message printed to stdout instead
        of stderr
  * apex-bestpractices
      o #5095 <https://github.com/pmd/pmd/issues/5095>: [apex]
        ApexUnitTestShouldNotUseSeeAllDataTrue false negative due to
        casing (regression in PMD 7)
  * apex-codestyle
      o #4800 <https://github.com/pmd/pmd/issues/4800>: [apex]
        ClassNamingConvention: Support naming convention for /inner/ classes
  * apex-performance
      o #635 <https://github.com/pmd/pmd/issues/635>: [apex] New Rule:
        Avoid soql/sosl queries without a where clause or limit statement
  * java-bestpractices
      o #5106 <https://github.com/pmd/pmd/issues/5106>: [java]
        AccessorClassGeneration: Node was null for default constructor
      o #5110 <https://github.com/pmd/pmd/issues/5110>: [java]
        UnusedPrivateMethod for method referenced by
        lombok.Builder.ObtainVia
      o #5117 <https://github.com/pmd/pmd/issues/5117>: [java]
        UnusedPrivateMethod for methods annotated with
        jakarta.annotation.PostConstruct or PreDestroy
  * java-errorprone
      o #1488 <https://github.com/pmd/pmd/issues/1488>: [java]
        MissingStaticMethodInNonInstantiatableClass: False positive with
        Lombok Builder on Constructor
  * javascript-errorprone
      o #2367 <https://github.com/pmd/pmd/issues/2367>: [javascript]
        InnaccurateNumericLiteral is misspelled
      o #4716 <https://github.com/pmd/pmd/issues/4716>: [javascript]
        InaccurateNumericLiteral with number 259200000
  * plsql
      o #5086 <https://github.com/pmd/pmd/pull/5086>: [plsql] Fixed
        issue with missing optional table alias in MERGE usage
      o #5087 <https://github.com/pmd/pmd/pull/5087>: [plsql] Add
        support for SQL_MACRO
      o #5088 <https://github.com/pmd/pmd/pull/5088>: [plsql] Add
        support for 'DEFAULT' clause on the arguments of some oracle
        functions
      o #5133 <https://github.com/pmd/pmd/issues/5133>: [plsql]
        AssertionError: Root of the tree should implement RootNode for a
        PL/SQL type declaration
  * cli
      o #5120 <https://github.com/pmd/pmd/issues/5120>: [cli] Can't
        start designer under Windows
  * core
      o #5091 <https://github.com/pmd/pmd/issues/5091>: [core] PMD CPD
        v7.3.0 gives deprecation warning for skipLexicalErrors even when
        not used


      🚨 API Changes

  * javascript
      o The old rule name |InnaccurateNumericLiteral| has been
        deprecated. Use the new name
        |InaccurateNumericLiteral|
        <https://docs.pmd-code.org/pmd-doc-7.4.0/pmd_rules_ecmascript_errorprone.html#inaccuratenumericliteral>
        instead.


      ✨ External Contributions

  * #5048 <https://github.com/pmd/pmd/pull/5048>: [apex] Added Inner
    Classes to Apex Class Naming Conventions Rule - Justin Stroud
    <https://github.com/justinstroudbah> (@justinstroudbah / @sgnl-labs)
  * #5086 <https://github.com/pmd/pmd/pull/5086>: [plsql] Fixed issue
    with missing optional table alias in MERGE usage - Arjen Duursma
    <https://github.com/duursma> (@duursma)
  * #5087 <https://github.com/pmd/pmd/pull/5087>: [plsql] Add support
    for SQL_MACRO - Arjen Duursma <https://github.com/duursma> (@duursma)
  * #5088 <https://github.com/pmd/pmd/pull/5088>: [plsql] Add support
    for 'DEFAULT' clause on the arguments of some oracle functions -
    Arjen Duursma <https://github.com/duursma> (@duursma)
  * #5107 <https://github.com/pmd/pmd/pull/5107>: [doc] Update maven.md
    - Typo fixed for maven target - karthikaiyasamy
    <https://github.com/karthikaiyasamy> (@karthikaiyasamy)
  * #5109 <https://github.com/pmd/pmd/pull/5109>: [java] Exclude
    constructor with lombok.Builder for
    MissingStaticMethodInNonInstantiatableClass - Krzysztof Debski
    <https://github.com/kdebski85> (@kdebski85)
  * #5111 <https://github.com/pmd/pmd/pull/5111>: [java] Fix
    UnusedPrivateMethod for @lombok.Builder.ObtainVia - Krzysztof Debski
    <https://github.com/kdebski85> (@kdebski85)
  * #5118 <https://github.com/pmd/pmd/pull/5118>: [java] FP for
    UnusedPrivateMethod with Jakarta @PostConstruct/PreDestroy
    annotations - Krzysztof Debski <https://github.com/kdebski85>
    (@kdebski85)
  * #5121 <https://github.com/pmd/pmd/pull/5121>: [plsql] Fixed issue
    with missing optional table alias in MERGE usage - Arjen Duursma
    <https://github.com/duursma> (@duursma)


      📈 Stats

  * 81 commits
  * 32 closed tickets & PRs
  * Days since last release: 27

Welcome to the OpenJDK Quality Outreach summer update.

JDK 23 is now in Rampdown Phase Two [1], its overall feature has been frozen a few weeks ago. Per the JDK Release Process, we have now turned our focus to P1 and P2 bugs, which can be fixed with approval [2]. Late enhancements are still possible, with approval, but the bar is now extraordinarily high. That also means that the JDK 23 Initial Release Candidates are fast approaching, i.e., August 8th [3]! So, and in addition to testing your projects with the latest JDK 23 early-access builds, it is now a good time to start testing with the JDK 24 early-access builds.

Make sure to also check the heads-up below as some are related to JDK 23 and might have some impact, i.e., the first one being related to the eventual removal of the Security Manager and the second one discusses the removal of the legacy COMPAT locale provider.

[1] https://mail.openjdk.org/pipermail/jdk-dev/2024-July/009252.html
[2] https://openjdk.org/jeps/3#rdp-2
[3] https://openjdk.org/projects/jdk/23/


## Heads-up - JDK 23: Subject.getSubject API Requires Allowing the Security Manager

In JDK 17 and as announced in JEP 411 [4], the Security Manager was deprecated for removal. As part of that change, several Security Manager APIs, such as `AccessControlContext`, were deprecated for removal. The `Subject::doAs` and `Subject::getSubject` APIs depend on Security Manager related APIs even though they do not require Security Manager to be installed to use them.

As of JDK 23 [5], to help applications prepare for the eventual removal of the Security Manager, subject authorization and the Subject APIs' behavior depend on allowing the Security Manager:
- If the system property `java.security.manager` is set on the command line to the empty string, a class name, or the value `allow` then there is no behavior change compared to previous releases.
- If the system property `java.security.manager` is not set on the command line or has been set on the command line to the value `disallow`, invoking the `Subject.getSubject` method will throw `UnsupportedOperationException`.

Yet, running an application with `-Djava.security.manager=allow` is a temporary workaround to keep older code working. Maintainers of code using `Subject.doAs` and `Subject.getSubject` are strongly encouraged to migrate it with utmost priority to the replacement APIs, `Subject.callAs` and `Subject.current`. Make sure to check [5] and [6] for additional details.

The jdeprscan tool [7] scans a JAR file for usage of deprecated API elements and is helpful to find code using these methods. Additionally, consider migrating as soon as possible code that stores a `Subject` in an `AccessControlContext` and invokes `AccessController.doPrivileged` with that context. Such code will stop working when the Security Manager is removed.

[4] https://openjdk.org/jeps/411
[5] https://jdk.java.net/23/release-notes#b15
[6] https://inside.java/2024/07/08/quality-heads-up/
[7] https://dev.java/learn/jvm/tools/core/jdeprscan/


## Heads-up - JDK 23: Unicode / Removal of COMPAT Locale Provider

### A Quick History of Locale Data in the JDK

Before the Unicode Consortium created the Common Locale Data Repository (CLDR) in 2003 to manage locale data, the JDK had to provide its own collection. It did so successfully and in JDK 8 supported about 160 locales. To reduce maintenance effort, allow better interoperability between platforms, and improve locale data quality, the JDK started to move towards CLDR in 2014:
- JDK 8 comes with two locale data providers, which can be selected with the system property java.locale.providers:
   . JRE/COMPAT for the JDK’s legacy data collection (default)
   . CLDR for the CLDR data
   . a custom locale provider can be implemented
- JDK 9 picks CLDR by default
- JDK 21 issues a warning on JRE/COMPAT

There are plenty of minor and a few notable differences between the legacy data and CLDR - the recently rewritten JEP 252 [8] lists a few of them.

### Locale Data in JDK 23

JDK 23 [9] removes legacy locale data. As a consequence, setting java.locale.providers to JRE or COMPAT has no effect.

Projects that are still using legacy locale data are highly encouraged to switch to CLDR as soon as possible. Where that is infeasible, two alternatives remain:
- Create custom formatters with patterns that mimic the legacy behavior and use them everywhere where locale-sensitive data is written or parsed.
- Implement a custom locale data provider [10].

For more details on that as well as on CLDR in the JDK in general, please check JEP 252 [8] that has been recently rewritten to provide better information and guidance.

[8] https://openjdk.org/jeps/252
[9] https://bugs.openjdk.org/browse/JDK-8325568
[10] https://docs.oracle.com/en/java/javase/22/docs/api/java.base/java/util/spi/LocaleServiceProvider.html


## Heads-up - JDK 23:  Initial Leyden Early-Access Builds

Project Leyden published its first early-access builds (24-leyden+2-8 2024/6/20) [11]. The initial release is focused on improving Java applications start-up time, but other Leyden optimizations will be explored in future releases.

Below are some of the highlights of these Leyden EA builds:
- Ahead-of-time compilation of Java methods to natively execute them as soon as the application starts up in the production run;
- Ahead-of-time resolution of constant pool entries allows the AOT compiler to generate better code and for your application to start faster;
- Ahead-of-time generation of Dynamic Proxies and reflection data as frameworks use those extensively during start-up time;
- A unified Cache Data Store (CDS) archive to simplify the creation of the CDS archive, while supporting multiple types of optimization artifacts;
- Loaded Classes in the CDS archive as soon the application starts up;
- Class loader lookup cache to help application frameworks perform repeated lookups without repeatedly scanning the classpath;
- Archived Method Profiles to reach Java application peak performance faster.

The easiest way to start with Leyden features is by using the java program in the Leyden Early Access Release with the -XX:CacheDataStore flag. More details of this Leyden EA Build can be found in the release notes [12].

[11] https://jdk.java.net/leyden/
[12] https://github.com/openjdk/leyden/blob/leyden-ea1-release-notes/README.md


## JDK 23 Early-Access Builds

The JDK 23 early-access builds 32 are available [13], and are provided under the GNU General Public License v2, with the Classpath Exception. The Release Notes are available here [14] and the Javadoc here [15].

[13] https://jdk.java.net/23/
[14] https://jdk.java.net/23/release-notes
[15] https://download.java.net/java/early_access/jdk23/docs/api/


## JDK 24 Early-Access Builds

The JDK 24 early-access builds 7 are available [16], and are provided under the GNU General Public License v2, with the Classpath Exception. The Release Notes are available here [17].

### Changes in recent JDK 24 builds that may be of interest:
- JDK-8334299: Deprecate LockingMode option, along with LM_LEGACY and LM_MONITOR
- JDK-8330846: Add stacks of mounted virtual threads to the HotSpot thread …
- JDK-8333649: Allow different NativeCall encodings
- JDK-8333755: NumberFormat integer only parsing breaks when format has suffix
- JDK-8330842: Support AES CBC with Ciphertext Stealing (CTS) in SunPKCS11
- JDK-8327793: Deprecate jstatd for removal
- JDK-8248981: Specify list of standard message digest and mgf algorithms for RSASSA-PSS signature
- JDK-8334580: Deprecate no-arg constructor BasicSliderUI() for removal
- JDK-8320448: Accelerate IndexOf using AVX2
- JDK-8333749: Consolidate ConstantDesc conversion in java.base
- JDK-8329141: Obsolete RTM flags and code
- JDK-8330198: Add some class loading related perf counters to measure VM startup
- JDK-8330699: Obsolete -XX:+UseEmptySlotsInSupers
- JDK-8334734: Remove specialized readXxxEntry methods from ClassReader

This is only a curated list, a complete list of changes can be found here [18].

[16] https://jdk.java.net/24/
[17] https://jdk.java.net/24/release-notes
[18] https://github.com/openjdk/jdk/compare/jdk-24+0...jdk-24+7


## Topics of Interest

- Integrity by Default - Inside Java Newscast
https://inside.java/2024/07/18/newscast-73/

- Java and AI? - Inside Java Newscast
https://inside.java/2024/07/04/newscast-72/

- What Happened to String Templates? - Inside Java Newscast
https://inside.java/2024/06/20/newscast-71/

- Java Language Futures - Spring 2024 Edition
https://inside.java/2024/07/01/java-language-futures/

- Project Loom - Structured Concurrency
https://inside.java/2024/07/13/structured-concurrency/

- How to Build Custom Java Runtimes with Jlink
https://inside.java/2024/06/21/build-runtimes-with-jlink/


## July 2024 Critical Patch Update Released

As part of the July 2024 CPU, Oracle released OpenJDK 22.0.2, JavaFX 22.0.2, JDK 22.0.2, JDK 21.0.4 LTS, JDK 17.0.12 LTS, JDK 11.0.24 LTS, JDK 8u421 as as well as JDK 8u421-perf.

~


We still have a few days before JDK 23 enters into the Release Candidate phase so please make sure to test your projects on the latest early-access builds and report any issue… but that shouldn't be a reason to not enjoy the summer and recharge your batteries! 😎

--David

  * Downloads: https://github.com/pmd/pmd/releases/tag/pmd_releases%2F7.3.0
  * Documentation: https://docs.pmd-code.org/pmd-doc-7.3.0/


    28-June-2024 - 7.3.0

The PMD team is pleased to announce PMD 7.3.0.

This is a minor release.


      Table Of Contents

  * 🚀 New and noteworthy
    <https://sourceforge.net/p/pmd/news/2024/06/pmd-730-28-june-2024-released/#new-and-noteworthy>

      o ✨ New Rules
        <https://sourceforge.net/p/pmd/news/2024/06/pmd-730-28-june-2024-released/#new-rules>
      o 💥 pmd-compat6 removed (breaking)
        <https://sourceforge.net/p/pmd/news/2024/06/pmd-730-28-june-2024-released/#pmd-compat6-removed-breaking>
  * 🐛 Fixed Issues
    <https://sourceforge.net/p/pmd/news/2024/06/pmd-730-28-june-2024-released/#fixed-issues>
  * 🚨 API Changes
    <https://sourceforge.net/p/pmd/news/2024/06/pmd-730-28-june-2024-released/#api-changes>

      o CPD Report Format XML
        <https://sourceforge.net/p/pmd/news/2024/06/pmd-730-28-june-2024-released/#cpd-report-format-xml>
      o CLI
        <https://sourceforge.net/p/pmd/news/2024/06/pmd-730-28-june-2024-released/#cli>
      o Ant
        <https://sourceforge.net/p/pmd/news/2024/06/pmd-730-28-june-2024-released/#ant>
      o Deprecated API
        <https://sourceforge.net/p/pmd/news/2024/06/pmd-730-28-june-2024-released/#deprecated-api>
      o Breaking changes: pmd-compat6 removed
        <https://sourceforge.net/p/pmd/news/2024/06/pmd-730-28-june-2024-released/#breaking-changes-pmd-compat6-removed>
  * 📈 Stats
    <https://sourceforge.net/p/pmd/news/2024/06/pmd-730-28-june-2024-released/#stats>


      🚀 New and noteworthy


        ✨ New Rules

  * The new Java rule |UseEnumCollections|
    <https://docs.pmd-code.org/pmd-doc-7.3.0/pmd_rules_java_bestpractices.html#useenumcollections>
    reports usages for |HashSet| and |HashMap|
    when the keys are of an enum type. The specialized enum collections
    are more space- and time-efficient.


        💥 pmd-compat6 removed (breaking)

The already deprecated PMD 6 compatibility module (pmd-compat6) has been 
removed. It was intended to be used with
older versions of the maven-pmd-plugin, but since maven-pmd-plugin 
3.22.0, PMD 7 is supported directly and this
module is not needed anymore.

If you currently use this dependency 
(|net.sourceforge.pmd:pmd-compat6|), remove it and upgrade maven-pmd-plugin
to the latest version (3.23.0 or newer).

See also Maven PMD Plugin 
<https://docs.pmd-code.org/pmd-doc-7.3.0/pmd_userdocs_tools_maven.html>.


      🐛 Fixed Issues

  * cli
  * #2827 <https://github.com/pmd/pmd/issues/2827>: [cli] Consider
    processing errors in exit status
  * core
  * #4396 <https://github.com/pmd/pmd/issues/4396>: [core] CPD is always
    case sensitive
  * #4992 <https://github.com/pmd/pmd/pull/4992>: [core] CPD: Include
    processing errors in XML report
  * #5066 <https://github.com/pmd/pmd/issues/5066>: [core] CPD throws
    java.lang.OutOfMemoryError: Java heap space (since 7.1.0)
  * apex
  * #4922 <https://github.com/pmd/pmd/issues/4922>: [apex] SOQL syntax
    error with TYPEOF in sub-query
  * #5053 <https://github.com/pmd/pmd/issues/5053>: [apex] CPD fails to
    parse string literals with escaped characters
  * #5055 <https://github.com/pmd/pmd/issues/5055>: [apex] SOSL syntax
    error with WITH USER_MODE or WITH SYSTEM_MODE
  * apex-bestpractices
  * #5000 <https://github.com/pmd/pmd/issues/5000>: [apex]
    UnusedLocalVariable FP with binds in SOSL / SOQL
  * java
  * #4885 <https://github.com/pmd/pmd/issues/4885>: [java]
    AssertionError: Method should be accessible
  * #5050 <https://github.com/pmd/pmd/issues/5050>: [java] Problems with
    pattern variables in switch branches
  * java-bestpractices
  * #577 <https://github.com/pmd/pmd/issues/577>: [java] New Rule: Check
    that Map<k,v> is an EnumMap if K is an enum value</k,v>
  * #5047 <https://github.com/pmd/pmd/issues/5047>: [java]
    UnusedPrivateMethod FP for Generics & Overloads
  * plsql
  * #1934 <https://github.com/pmd/pmd/issues/1934>: [plsql]
    ParseException with MERGE statement in anonymous block
  * #2779 <https://github.com/pmd/pmd/issues/2779>: [plsql] Error while
    parsing statement with (Oracle) DML Error Logging
  * #4270 <https://github.com/pmd/pmd/issues/4270>: [plsql] Parsing
    exception COMPOUND TRIGGER with EXCEPTION handler


      🚨 API Changes


        CPD Report Format XML

There are some important changes:

 1. The XML format will now use an XSD schema, that is available at
    https://pmd.github.io/schema/cpd-report_1_0_0.xsd.
    This schema defines the valid elements and attributes that one can
    expect from a CPD report.
 2. The root element |pmd-cpd| contains the new attributes |pmdVersion|,
    |timestamp| and |version|. The latter is
    the schema version and is currently "1.0.0".
 3. The CPD XML report will now also contain recoverable errors as
    additional |<error>| elements.

See Report formats for CPD 
<https://sourceforge.net/p/pmd/news/2024/06/pmd_userdocs_cpd_report_formats.html#xml> 
for an example.

The XML format should be compatible as only attributes and elements have 
been added. However, if you parse
the document with a namespace aware parser, you might encounter some 
issues like no elements being found.
In case the new format doesn't work for you (e.g. namespaces, unexpected 
error elements), you can
go back using the old format with the renderer "xmlold" 
(|XMLOldRenderer| 
<https://docs.pmd-code.org/apidocs/pmd-core/7.3.0/net/sourceforge/pmd/cpd/XMLOldRenderer.html#>). 
Note, that
this old renderer is deprecated and only there for compatibility 
reasons. Whatever tooling is used to
read the XML format should be updated.


        CLI

  * New exit code 5 introduced. PMD and CPD will exit now by default
    with exit code 5, if any recoverable error
    (e.g. parsing exception, lexing exception or rule exception)
    occurred. PMD will still create a report with
    all detected violations or duplications if recoverable errors
    occurred. Such errors mean, that the report
    might be incomplete, as either violations or duplications for an
    entire file or for a specific rule are missing.
    These cases can be considered as false-negatives.

In any case, the root cause should be investigated. If it's a problem in 
PMD itself, please create a bug report.

  *

    New CLI parameter |--no-fail-on-error| to ignore such errors and not
    exit with code 5. By default,
    a build with errors will now fail and with that parameter, the
    previous behavior can be restored.
    This parameter is available for both PMD and CPD.

  *

    The CLI parameter |--skip-lexical-errors| is deprecated. By default,
    lexical errors are skipped but the
    build is failed. Use the new parameter |--[no-]fail-on-error|
    instead to control whether to fail the build or not.


        Ant

  * CPDTask has a new parameter |failOnError|. It controls, whether to
    fail the build if any recoverable error occurred.
    By default, the build will fail. CPD will still create a report with
    all detected duplications, but the report might
    be incomplete.
  * The parameter |skipLexicalError| in CPDTask is deprecated and
    ignored. Lexical errors are now always skipped.
    Use the new parameter |failOnError| instead to control whether to
    fail the build or not.


        Deprecated API

  * pmd-ant
  * |CPDTask#setSkipLexicalErrors|
    <https://docs.pmd-code.org/apidocs/pmd-ant/7.3.0/net/sourceforge/pmd/ant/CPDTask.html#setSkipLexicalErrors(boolean)>:
    Use |setFailOnError|
    <https://docs.pmd-code.org/apidocs/pmd-ant/7.3.0/net/sourceforge/pmd/ant/CPDTask.html#setFailOnError(boolean)>
    instead to control, whether to ignore errors or fail the build.
  * pmd-core
  * |CPDConfiguration#isSkipLexicalErrors|
    <https://docs.pmd-code.org/apidocs/pmd-core/7.3.0/net/sourceforge/pmd/cpd/CPDConfiguration.html#isSkipLexicalErrors()>
    and |setSkipLexicalErrors|
    <https://docs.pmd-code.org/apidocs/pmd-core/7.3.0/net/sourceforge/pmd/cpd/CPDConfiguration.html#setSkipLexicalErrors(boolean)>:
    Use |setFailOnError|
    <https://docs.pmd-code.org/apidocs/pmd-core/7.3.0/net/sourceforge/pmd/AbstractConfiguration.html#setFailOnError(boolean)>
    to control whether to ignore errors or fail the build.
  * |net.sourceforge.pmd.cpd.XMLOldRenderer|
    <https://docs.pmd-code.org/apidocs/pmd-core/7.3.0/net/sourceforge/pmd/cpd/XMLOldRenderer.html#>
    (the CPD format "xmlold").
  * The constructor
    |AntlrToken#AntlrToken|
    <https://docs.pmd-code.org/apidocs/pmd-core/7.3.0/net/sourceforge/pmd/lang/ast/impl/antlr4/AntlrToken.html#AntlrToken(org.antlr.v4.runtime.Token,net.sourceforge.pmd.lang.ast.impl.antlr4.AntlrToken,net.sourceforge.pmd.lang.document.TextDocument)>
    shouldn't be used directly. Use |AntlrTokenManager|
    <https://docs.pmd-code.org/apidocs/pmd-core/7.3.0/net/sourceforge/pmd/lang/ast/impl/antlr4/AntlrTokenManager.html#>
    instead.
  * pmd-java
  * |ASTResource#getStableName|
    <https://docs.pmd-code.org/apidocs/pmd-java/7.3.0/net/sourceforge/pmd/lang/java/ast/ASTResource.html#getStableName()>
    and the corresponding attribute |@StableName|.
  * |ASTRecordPattern#getVarId|
    <https://docs.pmd-code.org/apidocs/pmd-java/7.3.0/net/sourceforge/pmd/lang/java/ast/ASTRecordPattern.html#getVarId()>
    This method was added here by mistake. Record
    patterns don't declare a pattern variable for the whole pattern, but
    rather for individual record
    components, which can be accessed via |getComponentPatterns|
    <https://docs.pmd-code.org/apidocs/pmd-java/7.3.0/net/sourceforge/pmd/lang/java/ast/ASTRecordPattern.html#getComponentPatterns()>.
  * pmd-plsql
  * |PLSQLParserImpl|
    <https://docs.pmd-code.org/apidocs/pmd-plsql/7.3.0/net/sourceforge/pmd/lang/plsql/ast/PLSQLParserImpl.html#>
    is deprecated now. It should have been package-private
    because this is an implementation class that should not be used
    directly.
  * The node |ASTKEYWORD_UNRESERVED|
    <https://docs.pmd-code.org/apidocs/pmd-plsql/7.3.0/net/sourceforge/pmd/lang/plsql/ast/ASTKEYWORD_UNRESERVED.html#>
    is deprecated and is now removed from the AST.


        Breaking changes: pmd-compat6 removed

The already deprecated PMD 6 compatibility module (pmd-compat6) has been 
removed.
See above for details.


      📈 Stats

  * 88 commits
  * 32 closed tickets & PRs
  * Days since last release: 27

Welcome to the latest OpenJDK Quality Outreach update!

JDK 23, scheduled for General Availability on September 17, 2024, is now in Rampdown Phase One (RDP1) [1]. At this point, the overall JDK 23 feature set is frozen (see the final list of JEPs integrated into JDK 23 below) and only low-risk enhancements might still be considered. The coming weeks should be leveraged to identify and resolve as many issues as possible, i.e. before JDK 23 enters the Release Candidates phase in early August [2]. We count on you to test your projects and help us make JDK 23 another solid release!

This time, we are covering several heads-up related to JDK 23 : Deprecate the Memory-Access Methods in sun.misc.Unsafe for Removal and default annotation processing policy change. Also, make sure to check the new Loom early-access builds which have an improved Java monitors implementation to work better with virtual threads.

[1] https://mail.openjdk.org/pipermail/jdk-dev/2024-June/009053.html
[2] https://openjdk.org/projects/jdk/23/


## Heads-Up - JDK 23: Deprecate the Memory-Access Methods in sun.misc.Unsafe for Removal

As mentioned in a previous communication [3], there’s a plan to ultimately remove the sun.misc.Unsafe memory-access methods as the platform offers safer alternatives. JEP 471 (Deprecate the Memory-Access Methods in sun.misc.Unsafe for Removal) [4] outlines in more detail this plan including the initial step which is happening in JDK 23, i.e., all of the sun.misc unsafe memory-access methods are now marked as deprecated for removal. This will cause, in JDK 23, compile-time deprecation warnings for code that refers to these methods, alerting library developers to their forthcoming removal. A new command-line option also enables application developers and users to receive runtime warnings when those methods are used.

Developers relying on those sun.misc.Unsafe APIs for access memory are strongly encouraged to start, if they haven't done so yet, the migration from the sun.misc.Unsafe APIs to supported replacements. For more details, make sure to read JEP 471 (Deprecate the Memory-Access Methods in sun.misc.Unsafe for Removal).

[3] https://mail.openjdk.org/pipermail/quality-discuss/2024-January/001132.html
[4] https://openjdk.org/jeps/471


## Heads-Up - JDK 23: Changes Default Annotation Processing Policy

Annotation processing is a compile-time feature, where javac scans the to-be-compiled source files for annotations and then the class path for matching annotation processors, so they can generate source code. Up to JDK 22, this feature is enabled by default, which may have been reasonable when it was introduced in JDK 6 circa 2006, but from a current perspective, in the interest of making build output more robust against annotation processors being placed on the class path unintentionally, this is much less reasonable. Hence, starting with JDK 23, javac requires an additional command-line option to enable annotation processing.

### New `-proc` Value
To that end, the pre-existing option `-proc:$policy` was extended, where `$policy` can now have the following values:
- `none`: compilation _without_ annotation processing, this policy exists since JDK 6
- `only`: annotation processing _without_ compilation, this policy exists since JDK 6
- `full`: annotation processing followed by compilation, this policy is the default in JDK ≤22 but the value itself is new (see next section for versions that support it)

Up to and including JDK 22, code bases that require annotation processing before compilation could rely on javac's default behavior to process annotations but that is no longer the case. Starting with JDK 23, at least one annotation-processing command line option needs to be present. If neither `-processor`, `--processor-path`, now `--processor-module-path` is used, `-proc:only` or `-proc:full` has to be provided. In other words, absent other command line options, `-proc:none` is the default on JDK 23.

### Migration to `-proc:full`

Several measures were undertaken to help projects prepare for the switch to `-proc:full`:
- As of the April 2024 JDK security updates, support for `-proc:full` has been backported to 17u (17.0.11) and 11u (11.0.23) for both Oracle JDK and OpenJDK distributions. Additionally, Oracle's 8u release (8u411) also supports `-proc:full`.
- Starting in JDK 21, javac prints an informative message if implicit usage of annotation processing under the default policy is detected.

With `-proc:full` backported, it is possible to configure a build that will work the same before and after the change in javac's default policy.

Additional details can be found in the original proposal [5].

[5] https://mail.openjdk.org/pipermail/jdk-dev/2024-May/009028.html


## Heads-up - Loom: New EA builds with improved Java monitors implementation to work better with virtual threads

Project Loom published new early-access builds [6]. These builds have an improved object monitor implementation that should prevent virtual threads from pinning their carrier thread in the following situations:
- when blocking on entering a synchronized method/statement because the object's associated monitor is held by another thread,
- when parking (e.g. when doing socket I/O) while in a synchronized method,
- when calling `Object.wait` while in a synchronized method.
The changes for `Object.wait`/timed-`wait` is the main change since the previous Loom EA build.

The Loom team is looking for help to test the changes, i.e., trying out these builds with code that is known to use virtual threads and with libraries that are "very synchronized". The primary goal is to gauge both reliability and performance. Right now, the focus is on being functional and reliable. Please note that the performance for some cases isn't yet fully on par with blocking on j.u.concurrent locks and condition objects.

As before, JFR events can be used to identify remaining cases of pinning, parking or blocking in a class initializer for example. The system property `jdk.tracePinnedThreads`, which used to print stack traces when threads are pinned, no longer outputs anything.

Please send feedback via email to the Loom mailing list [7] (subscription required).

[6] https://jdk.java.net/loom/
[7] http://mail.openjdk.org/mailman/listinfo/loom-dev


## JDK 23 Early-Access Builds

JDK 23 early-access builds 26 are now available [8] with the Release Notes here [9] and the javadocs here[10]. Those builds are provided under the GNU GPL v2, with the Classpath Exception.

### JEPs integrated into JDK 23:
- JEP 455: Primitive Types in Patterns, instanceof, and switch (Preview)
- JEP 466: Class-File API (2nd Preview)
- JEP 467: Markdown Documentation Comments
- JEP 469: Vector API (8th Incubator)
- JEP 471: Deprecate the Memory-Access Methods in sun.misc.Unsafe for Removal
- JEP 473: Stream Gatherers (2nd Preview)
- JEP 474: ZGC: Generational Mode by Default
- JEP 476: Module Import Declarations (Preview)
- JEP 477: Implicitly Declared Classes and Instance Main Methods (3rd Preview)
- JEP 480: Structured Concurrency (3rd Preview)
- JEP 481: Scoped Values (3rd Preview)
- JEP 482: Flexible Constructor Bodies (2nd Preview)

### Changes in recent JDK 23 builds that may be of interest:
- JDK-8331670: Deprecate the Memory-Access Methods in sun.misc.Unsafe for Removal
- JDK-8051959: Add thread and timestamp options to java.security.debug system property
- JDK-8321428: Deprecate for removal the package java.beans.beancontext
- JDK-8319990: Update CLDR to Version 45.0
- JDK-8331975: Enable case-insensitive check in ccache and keytab entry lookup
- JDK-8328083: degrade virtual thread support for GetObjectMonitorUsage
- JDK-8326666: Remove the Java Management Extension (JMX) Subject Delegation feature
- JDK-8295111: dpkg appears to have problems resolving symbolically linked native libraries
- JDK-8330077: Allow max number of events to be buffered to be configurable to avoid OVERFLOW_EVENT
- JDK-8332476: j.u.r.RandomGeneratorFactor.create(long|byte[]) should throw rather than silently fallback to no-arg create()
- JDK-8329113: Deprecate -XX:+UseNotificationThread
- JDK-8331202: Support for Duration until another Instant
- JDK-8316138: Add GlobalSign 2 TLS root certificates
- JDK-8330276: Console methods with explicit Locale
- JDK-8330005: RandomGeneratorFactory.getDefault() throws exception when the runtime image only has java.base module
- JDK-6968351: httpserver clashes with delayed TCP ACKs for low Content-Length
- JDK-8331021: Deprecate and then obsolete the DontYieldALot flag
- JDK-8330607: Deprecate -XX:+UseEmptySlotsInSupers
- JDK-8320522: Remove code related to `RegisterFinalizersAtInit`
- JDK-8329636: Deprecate -XX:+PreserveAllAnnotations
- JDK-8322234: Remove obsolete desktop integration from Linux installers
- JDK-8328649: Disallow enclosing instances for local classes in constructor prologues
- JDK-8330734: JFR: Re-engineer mirror class mechanism
- JDK-8300148: Consider using a StoreStore barrier instead of Release barrier on ctor exit
- JDK-8329997: Add provisions for checking memory segment alignment constraints
- JDK-8305457: Implement java.io.IO
- JDK-8321314: Reinstate disabling the compiler's default active annotation processing
- JDK-6942632: Hotspot should be able to use more than 64 logical processors on Windows
- JDK-8332614: Type-checked ConstantPool.entryByIndex and ClassReader.readEntryOrNull
- JDK-8206447: InflaterInputStream.skip receives long but it's limited to Integer.MAX_VALUE

Note: A more exhaustive list of changes can be found here [11].

[8] https://jdk.java.net/23/
[9] https://jdk.java.net/23/release-notes
[10] https://download.java.net/java/early_access/jdk23/docs/api/
[11] https://github.com/openjdk/jdk/compare/jdk-23+17...jdk-23+26


## New Jextract Early-Access Builds

New Jextract early-access builds have been made available [12]. These builds are based on JDK 22 and bring multiple enhancements. For additional details, make sure to check [13]. Moreover, a new jextract guide [14] has been published.

[12] https://jdk.java.net/jextract/
[13] https://mail.openjdk.org/pipermail/jextract-dev/2024-May/001699.html
[14] https://github.com/openjdk/jextract/blob/master/doc/GUIDE.md


## JavaFX Early-Access Builds

These are early access builds of the JavaFX 23 Runtime built from openjdk/jfx [15]. These builds enable JavaFX application developers to build and test their applications with JavaFX 23 on JDK 23. Although these builds are designed to work with JDK 23EA, they are also known to work with JDK 21 and later versions.

The latest early access builds of JavaFX 23 are available here [16], under the GNU General Public License, version 2, with the Classpath Exception. JavaFX 23 API Javadocs [17] are also available.

[15] https://github.com/openjdk/jfx
[16] https://jdk.java.net/javafx23/
[17] https://download.java.net/java/early_access/javafx23/docs/api/overview-summary.html


## Topics of Interest

- All Java 23 Features - Inside Java Newscast
https://inside.java/2024/06/06/newscast-70/

- Module Imports in Java 23 - Inside Java Newscast
https://inside.java/2024/05/16/newscast-69/

- Java 23: JavaDoc Hits the Markdown on Comments - Inside Java Newscast
https://inside.java/2024/05/01/newscast-68/

- Java 23: Restoring the Balance with Primitive Patterns - Inside Java Newscast
https://inside.java/2024/04/04/newscast-66/

- Java in 2024 - Constant evolution, delivered.
https://inside.java/2024/06/01/java-in-2024-keynote/

- Introduction to JDK Mission Control
https://inside.java/2024/05/18/jmc-intro/

- What's New in JMC 9? - Sip of Java
https://inside.java/2024/04/21/sip096/

- Programmer's Guide to JDK Flight Recorder
https://inside.java/2024/04/12/programmer-guide-to-jfr/

- A Decade of JDK Updates in OpenJDK
https://inside.java/2024/04/09/a-decade-of-jdk-updates/

- Data-Oriented Programming - Version 1.1
https://inside.java/2024/05/23/dop-v1-1-introduction/


~

As usual, let us know if you find any issues while testing your project(s) with the latest JDK early-access builds.

Thank you!

--David

  * Downloads: https://github.com/pmd/pmd/releases/tag/pmd_releases%2F7.2.0
  * Documentation: https://docs.pmd-code.org/pmd-doc-7.2.0/


    31-May-2024 - 7.2.0

The PMD team is pleased to announce PMD 7.2.0.

This is a minor release.


      Table Of Contents

  * 🚀 New and noteworthy
    <https://sourceforge.net/p/pmd/news/2024/05/pmd-720-31-may-2024-released/#new-and-noteworthy>

      o Collections exposed as XPath attributes
        <https://sourceforge.net/p/pmd/news/2024/05/pmd-720-31-may-2024-released/#collections-exposed-as-xpath-attributes>
      o Updated PMD Designer
        <https://sourceforge.net/p/pmd/news/2024/05/pmd-720-31-may-2024-released/#updated-pmd-designer>
  * 🐛 Fixed Issues
    <https://sourceforge.net/p/pmd/news/2024/05/pmd-720-31-may-2024-released/#fixed-issues>
  * 🚨 API Changes
    <https://sourceforge.net/p/pmd/news/2024/05/pmd-720-31-may-2024-released/#api-changes>

      o Deprecated API
        <https://sourceforge.net/p/pmd/news/2024/05/pmd-720-31-may-2024-released/#deprecated-api>
  * ✨ External Contributions
    <https://sourceforge.net/p/pmd/news/2024/05/pmd-720-31-may-2024-released/#external-contributions>
  * 📈 Stats
    <https://sourceforge.net/p/pmd/news/2024/05/pmd-720-31-may-2024-released/#stats>


      🚀 New and noteworthy


        Collections exposed as XPath attributes

Up to now, all AST node getters would be exposed to XPath, as long as 
the return type was a primitive (boxed or unboxed), String or Enum. That 
meant that collections, even of these basic types, were not exposed, so 
for instance accessing Apex's |ASTUserClass.getInterfaceNames()| to list 
the interfaces implemented by a class was impossible from XPath, and 
would require writing a Java rule to check it.

Since this release, PMD will also expose any getter returning a 
collection of any supported type as a sequence through an XPath 
attribute. They would require to use apropriate XQuery functions to 
manipulate the sequence. So for instance, to detect any given 
|ASTUserClass| in Apex that implements |Queueable|, it is now possible 
to write:

|/UserClass[@InterfaceNames='Queueable'] |


        Updated PMD Designer

This PMD release ships a new version of the pmd-designer.
For the changes, see PMD Designer Changelog (7.2.0) 
<https://github.com/pmd/pmd-designer/releases/tag/7.2.0>.


      🐛 Fixed Issues

  * core
  * #4467 <https://github.com/pmd/pmd/issues/4467>: [core] Expose
    collections from getters as XPath sequence attributes
  * #4978 <https://github.com/pmd/pmd/issues/4978>: [core] Referenced
    Rulesets do not emit details on validation errors
  * #4983 <https://github.com/pmd/pmd/pull/4983>: [cpd] Fix CPD crashes
    about unicode escapes
  * #5009 <https://github.com/pmd/pmd/issues/5009>: [core] Kotest tests
    aren't picked up by surefire
  * java
  * #4912 <https://github.com/pmd/pmd/issues/4912>: [java] Unable to
    parse some Java9+ resource references
  * #4973 <https://github.com/pmd/pmd/pull/4973>: [java] Stop parsing
    Java for CPD
  * #4980 <https://github.com/pmd/pmd/issues/4980>: [java] Bad
    intersection, unrelated class types java.lang.Object[] and
    java.lang.Number
  * #4988 <https://github.com/pmd/pmd/pull/4988>: [java] Fix impl of
    ASTVariableId::isResourceDeclaration / VariableId/@ResourceDeclaration
  * #4990 <https://github.com/pmd/pmd/issues/4990>: [java] Add an
    attribute @PackageQualifier to ASTClassType
  * #5006 <https://github.com/pmd/pmd/issues/5006>: [java] Bad
    intersection, unrelated class types Child and Parent<? extends Child>
  * #5029 <https://github.com/pmd/pmd/issues/5029>: [java] PMD 7.x
    throws stack overflow in TypeOps$ProjectionVisitor while parsing a
    Java class
  * java-bestpractices
  * #4278 <https://github.com/pmd/pmd/issues/4278>: [java]
    UnusedPrivateMethod FP with Junit 5 @MethodSource and default
    factory method name
  * #4852 <https://github.com/pmd/pmd/issues/4852>: [java]
    ReplaceVectorWithList false-positive (neither Vector nor List usage)
  * #4975 <https://github.com/pmd/pmd/issues/4975>: [java]
    UnusedPrivateMethod false positive when using @MethodSource on a
    @Nested test
  * #4985 <https://github.com/pmd/pmd/issues/4985>: [java]
    UnusedPrivateMethod false-positive / method reference in combination
    with custom object
  * java-codestyle
  * #1619 <https://github.com/pmd/pmd/issues/1619>: [java]
    LocalVariableCouldBeFinal on 'size' variable in for loop
  * #3122 <https://github.com/pmd/pmd/issues/3122>: [java]
    LocalVariableCouldBeFinal should consider blank local variables
  * #4903 <https://github.com/pmd/pmd/issues/4903>: [java]
    UnnecessaryBoxing, but explicit conversion is necessary
  * #4924 <https://github.com/pmd/pmd/issues/4924>: [java]
    UnnecessaryBoxing false positive in PMD 7.0.0 in lambda
  * #4930 <https://github.com/pmd/pmd/issues/4930>: [java]
    EmptyControlStatement should not allow empty try with concise resources
  * #4954 <https://github.com/pmd/pmd/issues/4954>: [java]
    LocalVariableNamingConventions should allow unnamed variables by default
  * #5028 <https://github.com/pmd/pmd/issues/5028>: [java]
    FormalParameterNamingConventions should accept unnamed parameters by
    default
  * java-errorprone
  * #4042 <https://github.com/pmd/pmd/issues/4042>: [java] A false
    negative about the rule StringBufferInstantiationWithChar
  * #5007 <https://github.com/pmd/pmd/issues/5007>: [java]
    AvoidUsingOctalValues triggers on non-octal double literals with a
    leading 0
  * java-multithreading
  * #2368 <https://github.com/pmd/pmd/issues/2368>: [java] False
    positive UnsynchronizedStaticFormatter in static initializer


      🚨 API Changes


        Deprecated API

  * pmd-java
  * |ASTResource#getStableName|
    <https://docs.pmd-code.org/apidocs/pmd-java/7.2.0/net/sourceforge/pmd/lang/java/ast/ASTResource.html#getStableName()>
    and the corresponding attribute |@StableName|


      ✨ External Contributions

  * #5020 <https://github.com/pmd/pmd/issues/5020>: [java] Fix
    AvoidUsingOctalValues false-positive - Gold856
    <https://github.com/Gold856> (@Gold856)


      📈 Stats

  * 152 commits
  * 46 closed tickets & PRs
  * Days since last release: 35

  * Downloads: https://github.com/pmd/pmd/releases/tag/pmd_releases%2F7.1.0
  * Documentation: https://docs.pmd-code.org/pmd-doc-7.1.0/


    26-April-2024 - 7.1.0

The PMD team is pleased to announce PMD 7.1.0.

This is a minor release.


      Table Of Contents

  * 🚀 New and noteworthy
    <https://sourceforge.net/p/pmd/news/2024/04/pmd-710-26-april-2024-released/#new-and-noteworthy>

      o More robust CPD reports
        <https://sourceforge.net/p/pmd/news/2024/04/pmd-710-26-april-2024-released/#more-robust-cpd-reports>
      o ✨ New Rules
        <https://sourceforge.net/p/pmd/news/2024/04/pmd-710-26-april-2024-released/#new-rules>
      o 🌟 Rule Changes
        <https://sourceforge.net/p/pmd/news/2024/04/pmd-710-26-april-2024-released/#rule-changes>
  * 🐛 Fixed Issues
    <https://sourceforge.net/p/pmd/news/2024/04/pmd-710-26-april-2024-released/#fixed-issues>
  * 🚨 API Changes
    <https://sourceforge.net/p/pmd/news/2024/04/pmd-710-26-april-2024-released/#api-changes>

      o Deprecated methods
        <https://sourceforge.net/p/pmd/news/2024/04/pmd-710-26-april-2024-released/#deprecated-methods>
  * ✨ External Contributions
    <https://sourceforge.net/p/pmd/news/2024/04/pmd-710-26-april-2024-released/#external-contributions>
  * 📈 Stats
    <https://sourceforge.net/p/pmd/news/2024/04/pmd-710-26-april-2024-released/#stats>


      🚀 New and noteworthy


        More robust CPD reports

There were a number of circumstances, specially around (but not limited 
to) literal sequences, were CPD would
report duplicate overlapping or partially overlapping matches. These 
have now been fixed, and CPD will report
only the longest non-overlapping duplicate.

These improvements apply to all supported languages, irrespective of 
supported flags.


        ✨ New Rules

  * The new Java rule |UnnecessaryVarargsArrayCreation|
    <https://docs.pmd-code.org/pmd-doc-7.1.0/pmd_rules_java_bestpractices.html#unnecessaryvarargsarraycreation>
    reports explicit array creation
    when a varargs is expected. This is more heavy to read and could be
    simplified.
  * The new Java rule |ConfusingArgumentToVarargsMethod|
    <https://docs.pmd-code.org/pmd-doc-7.1.0/pmd_rules_java_errorprone.html#confusingargumenttovarargsmethod>
    reports some confusing situations
    where a varargs method is called with an inexact argument type.
    These may end up in a mismatch between the expected
    parameter type and the actual value.
  * The new Java rule |LambdaCanBeMethodReference|
    <https://docs.pmd-code.org/pmd-doc-7.1.0/pmd_rules_java_codestyle.html#lambdacanbemethodreference>
    reports lambda expressions that can be replaced
    with a method reference. Please read the documentation of the rule
    for more info. This rule is now part of the Quickstart
    ruleset.


        🌟 Rule Changes

  * |JUnitTestsShouldIncludeAssert|
    <https://docs.pmd-code.org/pmd-doc-7.1.0/pmd_rules_java_bestpractices.html#junittestsshouldincludeassert>
    and |JUnitTestContainsTooManyAsserts|
    <https://docs.pmd-code.org/pmd-doc-7.1.0/pmd_rules_java_bestpractices.html#junittestcontainstoomanyasserts>
    have a new property named |extraAssertMethodNames|. With this
    property, you can configure which additional static
    methods should be considered as valid verification methods. This
    allows to use custom mocking or assertion libraries.


      🐛 Fixed Issues

  * core
  * #494 <https://github.com/pmd/pmd/issues/494>: [core] Adopt JApiCmp
    to enforce control over API changes
  * #4942 <https://github.com/pmd/pmd/issues/4942>: [core] CPD:
    |--skip-duplicate-files| has no effect (7.0.0 regression)
  * #4959 <https://github.com/pmd/pmd/pull/4959>: [core] Upgrade saxon
    to 12.4
  * cli
  * #4791 <https://github.com/pmd/pmd/issues/4791>: [cli] Could not find
    or load main class
  * #4913 <https://github.com/pmd/pmd/issues/4913>: [cli] cpd-gui closes
    immediately
  * doc
  * #4901 <https://github.com/pmd/pmd/issues/4901>: [doc] Improve
    documentation on usage of violationSuppressXPath
  * apex
  * #4418 <https://github.com/pmd/pmd/issues/4418>: [apex]
    ASTAnnotation.getImage() does not return value as written in the class
  * apex-errorprone
  * #3953 <https://github.com/pmd/pmd/issues/3953>: [apex]
    EmptyCatchBlock false positive with formal (doc) comments
  * cpp
  * #2438 <https://github.com/pmd/pmd/issues/2438>: [cpp] Repeated
    Duplication blocks
  * java
  * #4899 <https://github.com/pmd/pmd/issues/4899>: [java] Parsing
    failed in ParseLock#doParse() java.io.IOException: Stream closed
  * #4902 <https://github.com/pmd/pmd/issues/4902>: [java] "Bad
    intersection, unrelated class types" for Constable[] and Enum[]
  * #4947 <https://github.com/pmd/pmd/issues/4947>: [java] Broken
    TextBlock parser
  * java-bestpractices
  * #1084 <https://github.com/pmd/pmd/issues/1084>: [java] Allow
    JUnitTestsShouldIncludeAssert to configure verification methods
  * #3216 <https://github.com/pmd/pmd/issues/3216>: [java] New rule:
    UnnecessaryVarargsArrayCreation
  * #4435 <https://github.com/pmd/pmd/issues/4435>: [java] [7.0-rc1]
    UnusedAssignment for used field
  * #4569 <https://github.com/pmd/pmd/issues/4569>: [java]
    ForLoopCanBeForeach reports on loop |for (int i = 0; i <
    list.size(); i += 2)|
  * #4618 <https://github.com/pmd/pmd/issues/4618>: [java]
    UnusedAssignment false positive with conditional assignments of fields
  * java-codestyle
  * #4602 <https://github.com/pmd/pmd/issues/4602>: [java]
    UnnecessaryImport: false positives with static imports
  * #4785 <https://github.com/pmd/pmd/issues/4785>: [java] False
    Positive: PMD Incorrectly report violation for UnnecessaryImport
  * #4779 <https://github.com/pmd/pmd/issues/4779>: [java] Examples in
    documentation of MethodArgumentCanBeFinal do not trigger the rule
  * #4881 <https://github.com/pmd/pmd/issues/4881>: [java]
    ClassNamingConventions: interfaces are identified as abstract
    classes (regression in 7.0.0)
  * java-design
  * #2440 <https://github.com/pmd/pmd/issues/2440>: [java]
    FinalFieldCouldBeStatic FN when the right side of the assignment is
    a constant expression
  * #3694 <https://github.com/pmd/pmd/issues/3694>: [java] SingularField
    ignores static variables
  * #4873 <https://github.com/pmd/pmd/issues/4873>: [java]
    AvoidCatchingGenericException: Can no longer suppress on the
    exception itself
  * java-errorprone
  * #2056 <https://github.com/pmd/pmd/issues/2056>: [java] CloseResource
    false-positive with URLClassLoader in cast expression
  * #4751 <https://github.com/pmd/pmd/issues/4751>: [java] PMD crashes
    when analyzing CloseResource Rule
  * #4928 <https://github.com/pmd/pmd/issues/4928>: [java]
    EmptyCatchBlock false negative when allowCommentedBlocks=true
  * #4948 <https://github.com/pmd/pmd/issues/4948>: [java]
    ImplicitSwitchFallThrough: False-positive with nested switch statements
  * java-performance
  * #3845 <https://github.com/pmd/pmd/issues/3845>: [java]
    InsufficientStringBufferDeclaration should consider literal expression
  * #4874 <https://github.com/pmd/pmd/issues/4874>: [java]
    StringInstantiation: False-positive when using |new String(charArray)|
  * #4886 <https://github.com/pmd/pmd/issues/4886>: [java]
    BigIntegerInstantiation: False Positive with Java 17 and BigDecimal.TWO
  * pom-errorprone
  * #4388 <https://github.com/pmd/pmd/issues/4388>: [pom]
    InvalidDependencyTypes doesn't consider dependencies at all
  * misc
  * #4967 <https://github.com/pmd/pmd/pull/4967>: Fix reproducible build
    issues with 7.0.0


      🚨 API Changes


        Deprecated methods

  * pmd-java
  * |ASTLambdaExpression#getBlock|
    <https://docs.pmd-code.org/apidocs/pmd-java/7.1.0/net/sourceforge/pmd/lang/java/ast/ASTLambdaExpression.html#getBlock()>
    and |ASTLambdaExpression#getExpression|
    <https://docs.pmd-code.org/apidocs/pmd-java/7.1.0/net/sourceforge/pmd/lang/java/ast/ASTLambdaExpression.html#getExpression()>
  * |SingularFieldRule#mayBeSingular|
    <https://docs.pmd-code.org/apidocs/pmd-java/7.1.0/net/sourceforge/pmd/lang/java/rule/design/SingularFieldRule.html#mayBeSingular(net.sourceforge.pmd.lang.java.ast.ModifierOwner)>
    has been deprecated for
    removal. The method is only useful for the rule itself and shouldn't
    be used otherwise.


      ✨ External Contributions

  * #4864 <https://github.com/pmd/pmd/pull/4864>: Fix #1084 [Java] add
    extra assert method names to Junit rules - Erwan Moutymbo
    <https://github.com/emouty> (@emouty)
  * #4894 <https://github.com/pmd/pmd/pull/4894>: Fix #4791 Error caused
    by space in JDK path - Scrates1 <https://github.com/Scrates1>
    (@Scrates1)


      📈 Stats

  * 205 commits
  * 71 closed tickets & PRs
  * Days since last release: 34