- The query
java/insecure-spring-actuator-confighas been promoted from experimental to the main query pack asjava/spring-boot-exposed-actuators-config. Its results will now appear by default. This query detects exposure of Spring Boot actuators through configuration files. It was originally submitted as an experimental query by @luchua-bc.
- The tag
maintainabilityhas been removed fromjava/run-finalizers-on-exitand the tagsquality,correctness, andperformancehave been added. - The tag
maintainabilityhas been removed fromjava/garbage-collectionand the tagsqualityandcorrectnesshave been added.
- Fixed a bug that was causing false negatives in rare cases in the query
java/dereferenced-value-may-be-null. - Removed the
java/empty-statementquery that was subsumed by thejava/empty-blockquery.