Release Notes - 2.0

  • 2.0.18-funcrel
    Functionally equivalent (i.e. includes all fixes and changes) to com.castsoftware.jee 1.3.29 (these are also listed below). Please take note of the section Isofunctionality which explains some of the result changes in comparison to previous releases.
    Fixes an issue that caused a crash in Linux builds. 📝 57939
    Fixes a parsing issue (“[ERROR] cannot parse file”) that interrupted object and link generation. 📝 58129
    Fixes a Jar extraction issue that led to incorrect generation of some objects and links.
    Fixes a parsing issue (“Syntax not recognized”) that interrupted object and link generation. The warnings were due to the lack of support for a Java 21 feature which is now supported in this release. 📝 58687
    Updates the analyzer to store Json files in a minified format, reducing file size and improving storage efficiency.
    Updates internal runtime.
    Adds analysis statistics and reports including information on analysis time, memory usage, objects, links and violations.
    Fixes a looping issue and improves processing of inheritance links in the inference engine. 📝 58000
  • 2.0.17-funcrel
    Functionally equivalent (i.e. includes all fixes and changes) to com.castsoftware.jee 1.3.28 (these are also listed below). Please take note of the section Isofunctionality which explains some of the result changes in comparison to previous releases.
    fixes runtime error with bad variant access in inference engine 📝 56766
    fixes missing violation Avoid instantiations inside loops 📝 53446
    fixes difference on quality rule “Avoid directly instantiating a Class used as a managed bean” between windows and linux
    Fixes parsing error when there several analysis unit with different version of JDK. 📝 55793
    Resolves an issue that impacted certain core metrics and caused duplicate bookmarks.
    Fixes missing violation “Avoid indirect String concatenation inside loops” 📝 53448
    Fixes missing Pages should use error handling page
  • 2.0.16-funcrel
    Functionally equivalent (i.e. includes all fixes and changes) to com.castsoftware.jee 1.3.26 (these are also listed below). Please take note of the section Isofunctionality which explains some of the result changes in comparison to previous releases.
    Fixes missing objects JSP_BEAN and JSP_BEAN_PROP
    Fixes security violations JEE done by security analyzer
    Add position for external method.
    Remove false dynamic links with extension com.castsoftware.java.internal.grep is activated when links comes from Java Properties Files and Java Property Mapping and for Spring framework
    Fixes missing bookmarks for jee objects. 📝 54773
    Fixes crash when there is an empty jpa named native query. 📝 54914
    Fixes an issue where jeeAnalyzer does not analyze a application with JDK < 1.8 📝 55302
    Fixes segmentation error in executable jeepreparesecurityforjava on linux when there is a syntax error in jsp page. 📝 55550
    Fixes missing objects, links properties and fixes crash when analysis is large due of saving file. (cannot open ObjectDescriptor_xxx.json) 📝 55484
  • 2.0.15-funcrel
    Functionally equivalent (i.e. includes all fixes and changes) to com.castsoftware.jee 1.3.26 (these are also listed below). Please take note of the section Isofunctionality which explains some of the result changes in comparison to previous releases.
    Fixes an issue where some Java MongoDB Collection objects are missing in com.castsoftware.jee 2.0.x compared to 1.3.x.
    Reduces consumption of memory to allow the analysis of larger applications.
    Fixes an issue where com.castsoftware.jee 2.0.x does not take into account the com.castsoftware.java.internal.grep extension.
    Fixes an unexpected error in when analyzing JEE frameworks.
    Fixes a dynamic resolution error between Java methods and Struts Forwards objects.
    Eliminates generated objects resulting from JSP pages.
    Fixes an issue where the analysis stalls when analyzing JEE frameworks. 📝 53791
    Fixes a resolution error between Java methods when there are several Java applications with indentical packages/classes. 📝 54013
    Fixes an issue where bookmarks are missing for external Java Field objects. 📝 54317
  • 2.0.14-funcrel
    Functionally equivalent (i.e. includes all fixes and changes) to com.castsoftware.jee 1.3.23 (these are also listed below). Please take note of the section Isofunctionality which explains some of the result changes in comparison to previous releases.
    Fixes an issue causing missing override links when instanciated classes/interfaces are involved in inheritance.
    Fixes an issue causing an “out of memory” error during the “linker” step when analyzing a large application.
    1.3.23: Fixes an issue that removes incorrect links from “Java lambda Expressions” to “Java Enums”. 📝 40637
    1.3.23: Fixes an issue that removes incorrect links from “Java lambda Expressions” to “Java Enums”. 📝 49059
    1.3.23: Fixes an issue that removes incorrect links from “Java Methods” to “Java Lambda Expressions” or “Java Methods” using method reference. 📝 49098
    1.3.23: Fixes an issue that removes incorrect links from “Java Methods” to “Java Lambda Expressions” or “Java Methods” using method reference. 📝 47806
    1.3.23: Improves accurary of 💎 8214 - “Avoid operating on resource after expiration or release”. 📝 49448
    1.3.23: Fixes an issue that removes incorrect links from “Java lambda Expressions” to “Java Enums”.
    1.3.23: Improve documentation of 💎 8220 - “Avoid using deprecated method, constructor, field, type or package”. 📝 39623
    1.3.23: Improve documentation of 💎 8220 - “Avoid using deprecated method, constructor, field, type or package”. 📝 48992
  • 2.0.13-funcrel
    Functionally equivalent (i.e. includes all fixes and changes) to com.castsoftware.jee 1.3.22 (these are also listed below). Please take note of the section Isofunctionality which explains some of the result changes in comparison to previous releases.
    Stabilizes the JEE analyzer.
    Stabilizes the analyzer when a large number of files are open during the analysis.
    Fixes an internal failure.
    Fixes an issue causing the creation of duplicate objects.
    Resolves an issue where “eDirectory” objects were missing.
    1.3.22: Fixes erroneous JAVA124 warning for package ‘com.fasterxml.jackson.databind’. 📝 51514
    1.3.22: Fixes erroneous JAVA124 warning for ‘NamedPackage’ from package ‘java.lang’. 📝 42229
    1.3.22: Fixes incorrect links between Struts Actions and Java Property Mappings.
    1.3.22: Fixes an instability in links between Struts Results and their corresponding packages.
    1.3.22: Updates rule 7682 “Avoid having Hibernate domain model depending on other Java APIs” with a rule parameter entry for the “jakarta.jms” package.
    1.3.22: Rule 7682 “Avoid having Hibernate domain model depending on other Java APIs” was updated with a rule parameter entry for the “jakarta.jms” package.
    Updated embedded libraries.
    1.3.22: Logging options can now be set programmatically.
    Better performance for applications containing over 30,000 .java files.
  • 2.0.12-funcrel
    Extension withdrawn.
  • 2.0.11-funcrel
    Functionally equivalent (i.e. includes all fixes and changes) to com.castsoftware.jee 1.3.21-funcrel (these are also listed below). Please take note of the section Isofunctionality which explains some of the result changes in comparison to previous releases.
    1.3.21-funcrel: Update Hibernate validation Environment profile. 📝 51131
    1.3.21-funcrel: Upgrades the Struts Environment Profile jars to the latest version. 📝 50821
    1.3.21-funcrel: Fixed the cause of the unexpected JAVA124 logs messages. 📝 50020
    2.0.11-funcrel: Fixes an issue causing missing CRC values when an object is both internal and external.
    2.0.11-funcrel: Fixes an error preventing com.castsoftware.python from providing correct link resolution on “java.lang.Runtime.exec” when com.castsoftware.jee has the option “saveInheritanceInExternalLibraries =0”.
    2.0.11-funcrel: Fixes an issue causing the “JSP_XMLCONFIG_FILE” to be missing in a Linux/Docker installation.
    2.0.11-funcrel: Fixes an issue causing the path property for “JSP pages” to be erroneously converted to lowercase.
    2.0.11-funcrel: Fixes an issue causing ‘call close Connection pool’ and ‘super clone’ metrics to not be saved.
    2.0.11-funcrel: Fixes an issue causing the number of Spring DATA JPQL/JPA JPQL queries to differ in v. 2.x of the extension (in comparison to 1.3 releases).
    2.0.11-funcrel: Fixes an issue where a “JSP_APPDESCRIPTOR” object type (resulting from an environment profile) is missing on Linux/Docker installations but present on Microsoft Windows installations.
    2.0.11-funcrel: Fixes an issue causing the creation of many erroneous “overloading” type links between Java Method objects when running the extension on Linux/Docker.
    2.0.11-funcrel: Fixes an issue causing missing violation bookmarks for various Java objects and links.
    2.0.11-funcrel: Fixes an issue where a missing object (*.xsl) negatively impacts transaction values when running the extension on Linux (in compared to a Microsoft Windows deployment).
    2.0.11-funcrel: Fixes an issue where fewer Java Resource Service objects are created when comparing the results of the extension with a V2 deployment.
    1.3.21-funcrel: Two Hibernate related rules have been deprecated - see the details in the “Rules” section below.
    1.3.21-funcrel: Fixes a bug where some Hibernate Mapping files were neither being analyzed nor passed on to Python extensions.
    1.3.21-funcrel: Fixes a bug where some Hibernate Mapping files were neither being analyzed nor passed on to Python extensions.
    1.3.21-funcrel: Fixes some missing links from Java to Property Mappings.
    1.3.21-funcrel: “Avoid public/protected setter for the generated identifier field” has been deprecated in JEE. The same rule is now implemented in com.castsoftware.java.hibernate with Rule ID 1045012. 💎 7712
    1.3.21-funcrel: “Lazy fetching should be used for Hibernate collection” has been deprecated in JEE. The same rule is now implemented in com.castsoftware.java.hibernate with Rule ID 1045000. 💎 7488
  • 2.0.10-funcrel
    Functionally equivalent (i.e. includes all fixes and changes) to com.castsoftware.jee 1.3.20-funcrel. Please take note of https://doc.castsoftware.com/technologies/jee/extensions/com.castsoftware.jee/2.0/#isofunctionality external link which explains some of the result changes in comparison to previous releases.
    Fixes an issue where the associated extension com.castsoftware.jeerules causes the following error: “During start_xml_file. FileNotFoundError: [Errno 2] No such file or directory”.
    Fixes an issue causing missing overloading links when compared to results generated with v2/8.3.
    Fixes an issue where JSP Generated classes were erroneously exposed as regular classes in comparison to results produced with v2/8.3.
    Fixes an issue where post migration to v3/8.4, “J2EE Scoped Bean” object types erroneously underwent a GUID change causing “added/deleted” object records.
    Fixes an issue where post migration to v3/8.4, “JV_INST_CLASS” object types erroneously underwent a GUID change causing “added/deleted” object records.
    Fixes an issue where post migration to v3/8.4, some “JV_GENERIC_INTERFACE” object types were missing in comparison to results produced with v2/8.3.
    Fixes an issue where post migration to v3/8.4, some “JV_INST_CLASS” object types were missing in comparison to results produced with v2/8.3.
    Fixes an issue where post migration to v3/8.4, “CDI_BEAN” object types erroneously underwent a GUID change causing “added/deleted” object records.
    Fixes an issue where post migration to v3/8.4, some “JSP_BEAN” object types were missing in comparison to results produced with v2/8.3.
    Fixes an issue where post migration to v3/8.4, “Lambda Expression” objects types were duplicated and also erroneously underwent a GUID change causing “added/deleted” object records.
    Fixes an issue causing missing violations for the rule 1039050 “Add @Override on methods overriding or implementing a method declared in a super type”.
    Fixes an issue where post migration to v3/8.4, the LOC values for JEE source code erroneously increased in comparison to results produced with v2/8.3.
    Fixes an issue where post migration to v3/8.4, some client/server links are erroneously matched without matching to the WholeWord parameter.
    Fixes an issue where post migration to v3/8.4, “JSP_BEAN” object types erroneously underwent a GUID change causing “added/deleted” object records.
    Fixes an issue where post migration to v3/8.4, links between “Struts Action Mapping” and “eFile” object types were missing in comparison to results produced with v2/8.3.
    Fixes an issue where post migration to v3/8.4, links between “J2EE Scoped Bean” and “Java Class” object types were missing in comparison to results produced with v2/8.3.
    Fixes an issue where post migration to v3/8.4, links between “Struts Form Bean” (with “requestScope” in the fullname) and “Java Class” object types were missing in comparison to results produced with v2/8.3.
    Fixes an issue causing missing violations for the rule 1039050 “Add @Override on methods overriding or implementing a method declared in a super type”. 💎 1039051
  • 2.0.9-funcrel
    Functionally equivalent to com.castsoftware.jee 1.3.19-funcrel. Please take note of https://doc.castsoftware.com/technologies/jee/extensions/com.castsoftware.jee/2.0/#isofunctionality external link which explains some of the result changes in comparison to previous releases.
    Fixes an issue where some “CAST_Java_Lambda” type objects are missing in v3/8.4 when compared to the same source code analyzed with v2/8.3.
    An internal technical change to add improved verbose mode logging for JEE analyses.
    Fixes an issue where some “CAST_Java_Service_CallToPost” type objects are missing in v3/8.4 when compared to the same source code analyzed with v2/8.3.
    Fixes an issue causing the error “[TRACEBACK] Extension com.castsoftware.jeerules has encountered an issue with jee-2.0.8-build927 During start_xml_file on File” to appear in the analysis log.
    Fixes an issue where there is a difference in the number of “SPRING_BEAN” type objects in v3/8.4 when compared to the same source code analyzed with v2/8.3.
    Fixes an issue causing “JSP_BEAN_PROP_TILES_DEF_ATTRIBUTE” type objects to be recorded as added/deleted during the first rescan post migration to v3/8.4.
    Fixes an issue causing modified object GUIDs for many JEE related objects (and therefore added/deleted objects) during the first rescan post migration to v3/8.4.
    Fixes an causing a missing bookmark on “JSP_PROPERTY_MAPPING” objects.
    Fixes an issue causing missing links to “Entity” type objects.
  • 2.0.8-funcrel
    Functionally equivalent to com.castsoftware.jee 1.3.19-funcrel. Please take note of https://doc.castsoftware.com/technologies/jee/extensions/com.castsoftware.jee/2.0/#isofunctionality external link which explains some of the result changes in comparison to previous releases.
    Fixes an issue where some objects of type “CAST_Java_Lambda” are missing in CAST Imaging V3 when using com.castsoftware.jee 2.0.5 and comparing to results generated with CAST Imaging V2 and com.castsoftware.jee 1.3.19.
    Fixes an issue where some objects of type “CAST_Java_Service_CallToPost” are missing in CAST Imaging V3 when using com.castsoftware.jee 2.0.5 and comparing to results generated with CAST Imaging V2 and com.castsoftware.jee 1.3.19.
    Fixes an issue causing the JEE analysis to fail with “Cannot compute sets from analysis units that have not been analyzed or that are not up to date”.
    Fixes an issue causing an error in the analysis log: “[TRACEBACK] Extension com.castsoftware.jeerules has encountered an issue”.
    Fixes an issue causing the object GUIDs to change for many objects when performing a full rescan of an application in CAST Imaging V3 post migration V2 to V3.
    Fixes an issue causing some objects of type “JSP_BEAN_PROP_TILES_DEF_ATTRIBUTE” to be recorded as deleted and then added.
  • 2.0.7-funcrel
    Functionally equivalent to com.castsoftware.jee 1.3.19-funcrel. Please take note of https://doc.castsoftware.com/technologies/jee/extensions/com.castsoftware.jee/2.0/#isofunctionality external link which explains some of the result changes in comparison to previous releases
    Fixes an issue where JEE Lombok environment profile configuration was missing from previous releases of the extension, causing some objects to be missing from the analysis results.
  • 2.0.6-funcrel
    Functionally equivalent to com.castsoftware.jee 1.3.19-funcrel. Please take note of https://doc.castsoftware.com/technologies/jee/extensions/com.castsoftware.jee/2.0/#isofunctionality external link which explains some of the result changes in comparison to previous releases
    Fixes an issue where the analysis fails with an “out of memory” error in the “external link” step for application source code containing both java and SQL.
  • 2.0.5-funcrel
    Functionally equivalent to com.castsoftware.jee 1.3.19-funcrel. Please take note of https://doc.castsoftware.com/technologies/jee/extensions/com.castsoftware.jee/2.0/#isofunctionality which explains some of the result changes in comparison to previous releases.
    Fixes an issue causing the JEE analyzer (release 2.0.4-funcrel, specifically when used in a Linux via Docker installation) to fail when a second analysis unit is analyzed. 📝 50409
  • 2.0.4-funcrel
    Functionally equivalent to com.castsoftware.jee 1.3.19-funcrel. Please take note of https://doc.castsoftware.com/technologies/jee/extensions/com.castsoftware.jee/2.0/#isofunctionality which explains some of the result changes in comparison to previous releases.
    Fixes an issue identified in the previous release of this extension (2.0.3-funcrel) where attempting to install the extension with CAST Imaging Core 8.4.0 on Linux via Docker fails with the error “Incompatible version on extension dependency: CAIP.8.4.1, actual version: 8.4.0”.
  • 2.0.3-funcrel
    Functionally equivalent to com.castsoftware.jee 1.3.19-funcrel. Please take note of https://doc.castsoftware.com/technologies/jee/extensions/com.castsoftware.jee/2.0/#isofunctionality which explains some of the result changes in comparison to previous releases.
    Fixes an issue where when comparing the results of an analysis of the same source code with v2/1.3.19 there are differences in the number of objects, specifically for JSP_BEAN, JPA_ENTITY_PROPERTY, JV_PACKAGES objects, in turn causing missing links to JPA_ENTITY objects and virtual methods.
    Fixes an issue where when comparing the results of an analysis of the same source code with v2/1.3.19 there are differences in the number of Hibernate objects
    Fixes an issue where when comparing the results of an analysis of the same source code with v2/1.3.19 there are differences in the number of objects such as CAST_Java_JPA_Entity, CAST_Java_JPA_Entity_Operation, CAST_Java_JPA_SQLQuery, CAST_JAVA_JDBC_SQLQuery, CAST_Java_JPA_JPQLQuery, CAST_Java_Unknown_JPA_SQLQuery, CAST_Java_Unknown_JPA_Entity and CAST_Java_Unknown_JPA_Entity_Operation.
  • 2.0.2-funcrel

    Functionally equivalent to com.castsoftware.jee 1.3.19-funcrel. Please take note of https://doc.castsoftware.com/technologies/jee/extensions/com.castsoftware.jee/2.0/#isofunctionality which explains some of the result changes in comparison to previous releases.

    Note also that this release requires CAST Imaging Core ≥ 8.4.1 when working with CAST Imaging 3.x installed on Linux via Docker (due to a change in the compilation engine). When working with CAST Imaging 3.x installed on Microsoft Windows, CAST Imaging Core ≥ 8.4.0 is supported.

    Fixes an issue causing a missing devirtualisation call.
    Fixes an issue causing missing links between jee objects and SQL table columns.
    Fixes an issue causing a bad comment line number for JSP page objects.
    Fixes an issue causing JSP page objects to have no checksum property.
    Fixes an issue causing missing links between JSP and java objects.
    Fixes an issue causing a bad name for the webDirectory folder.
    Fixes an issue causing the tag “<%@ taglib” to not be correctly managed.
    Fixes an issue causing the generation of an erroneous GUID for “taglib”.
    Fixes an issue causing the analyzer to fail to find taglib references in jar files when used in JSP pages.
    Fixes an issue causing missing violations for the rule “Pages should use error handling page”. 💎 2232
    Fixes a missing violation for the rule “Avoid using deprecated method, constructor, field, type or package” due to an incorrect property. 💎 8220
  • 2.0.1-funcrel
    A release of the JEE Analyzer to support installation on Linux and Windows with CAST Imaging Core ≥ 8.4. Functionally equivalent to com.castsoftware.jee 1.3.19-funcrel. Please take note of https://doc.castsoftware.com/technologies/jee/extensions/com.castsoftware.jee/2.0/#isofunctionality external link which explains some of the result changes in comparison to previous releases.
    Fixes an “XPath error” when analyzing XML files: “Undefined namespace prefix”.
    Fixes differences found in results produced in 1.3.18 and 2.0.0 regarding CAST_JEE_StrutsPackage and JSP_ATTRIBUTES_SCOPE objects.
    Fixes a regression introduced between release 1.3.18 and 2.0.0 on JPA objects.
    Fixes a regression between release 1.3.18 and 2.0.0 with regard to JPA Entity Operation objects.
    Fixes an issue where Java Resource Services objects were duplicated.
    Fixes an issue where in 2.0.0 some objects were created with ID and _jsp in their object names contrary to the results generated in 1.3.18.
    Fixes an issue where CAST_JAVA_JDBC_SQLQuery object for truncate tables (sql code in java classes) were missing in previous releases.
    Fixes an issue where extracted files associated to objects related to Struts, OpenSymphony and Java Faces frameworks differed with 1.3.18.
    Fixes an issue where JSP_XMLCONFIG_FILES were missing in 2.x when compared to results generated with 1.3.18.
    Fixes an issue where JSP Bean objects were missing in 2.x when compared to results generated with 1.3.17.
    Fixes an issue where STXX objects were missing in 2.x when compared to results generated with 1.3.18.
    Fixes an issue (related to activation.xml files) causing missing objects and differences related to environment profile jars.
    Fixes an issue where metamodel icons were not shipped in “configuration/Languages/java/res” causing missing icons.
  • 2.0.0-funcrel
    A new release of the JEE Analyzer to support installation on Linux and Windows with CAST Imaging Core ≥ 8.4. Functionally equivalent to com.castsoftware.jee 1.3.17-funcrel. Please take note of https://doc.castsoftware.com/technologies/jee/extensions/com.castsoftware.jee/2.0/#isofunctionality external link which explains some of the result changes in comparison to previous releases.
    Fixes an issue causing a difference in the number of violations (structural flaws) produced, compared with com.castsoftware.com 1.3.x and CAST AIP 8.3. Previously, the rule “Avoid using deprecated method, constructor, field, type or package” was not computed on anonymous classes.
    Fixes an error during the analysis when incorrect UTF-8 is identified in the source code.
    Fixes a traceback error in the analysis log with regard to extensibility: “traceback on start_type”.
    Fixes an issue where some logs generated by the extension are not visible in CAST Imaging UI.
  • 2.0.0-beta5
    A new release of the JEE Analyzer to support installation on Linux and Windows with CAST Imaging Core ≥ 8.4. Functionally equivalent to com.castsoftware.jee 1.3.17.
    Fixes an issue causing an error when several applications are analyzed at the same time.
    Fixes an issue where the com.castsoftware.securityforjava extension fails to run therefore causing the com.castsoftware.securityanalyzer to fail.
    Fixes two issues: 1) fixes an issue with the JEE environment profile “Log4J 1_2_14” which contained an incorrect JAR file and caused the “[WARNING] JAVA048: %CAUSE%” message to appear in the analysis log, and 2) fixes a secondary problem with the “[WARNING] JAVA048: %CAUSE%” message itself.
  • 2.0.0-beta4
    A new release of the JEE Analyzer to support installation on Linux and Windows with CAST Imaging Core ≥ 8.4. Functionally equivalent to com.castsoftware.jee 1.3.17.
    Manage upgrade between 1.3.x and 2.0.0 releases of the extension and also between AIP Core 8.3.x and Imaging Core 8.4.x
  • 2.0.0-beta3
    A new release of the JEE Analyzer to support installation on Linux and Windows with CAST Imaging Core ≥ 8.4. Functionally equivalent to com.castsoftware.jee 1.3.17.
    Fixes an issue where the analyzer fails to run on Microsoft Windows 10.
  • 2.0.0-beta2
    A new release of the JEE Analyzer to support installation on Linux and Windows with CAST Imaging Core ≥ 8.4. Functionally equivalent to com.castsoftware.jee 1.3.17.
  • 2.0.0-beta1
    A new release of the JEE Analyzer to support installation on Linux server with CAST Imaging Core ≥ 8.4. Functionally equivalent to com.castsoftware.jee 1.3.16, however, some functionality has been removed (see documentation).
  • 2.0.0-alpha6
    A new release of the JEE Analyzer to support installation on Linux server with CAST Imaging Core ≥ 8.4. Functionally equivalent to com.castsoftware.jee 1.3.10, however, some functionality has been removed (see documentation).