This release includes the following enhancements:
Release date: November 5, 2025
Autonomous Unit Test Creation
Jtest UTA can now autonomously generate unit tests within CI/CD pipelines and from the CLI. Unit test generation can be run as part of the build process and fully integrated into existing automation workflows. When new code is committed, Jtest UTA can automatically create unit tests for all uncovered code in the modified classes from your CI/CD pipeline. The generated unit tests can then be reviewed before being committed to the main branch. This helps development teams meet unit testing requirements - streamlining the process and reducing manual effort.
- The scope of test generation can be easily specified using pattern-based selection and filters based on source control integration.
- Integration with Maven and Gradle build systems is supported.
- A new dedicated Create Unit Tests configuration enables easy test creation.
- CLI-based unit test creation supports all functionality provided by the IDE, except for the ability to limit test creation to only modified lines of code. CLI-based unit test creation can be limited to modified files, but tests will be created for all uncovered lines of code in those files.
For configuration and usage details, see Unit Test Creation.
Static Analysis Fixes Using AI Autofix
Jtest can now autonomously fix static analysis violations that it finds within automated CI/CD pipelines. Jtest identifies violations, uses LLM integration to propose fixes for those violations, and verifies each proposed fix to ensure that all issues are fully resolved and no new problems are introduced. Successful fixes result in automatically created commits in the working branch of your project source control repository, enabling manual review and approval before merging. See Fixing Violations Using Aider AI Autofix.
MCP Server Extension for AI Agents
Jtest now includes an MCP (Model Context Protocol) Server extension that enables seamless integration between Jtest and AI agents or LLM-based coding assistants (such as GitHub Copilot). This MCP Server can be used within any LLM-enabled development environment that supports MCP integration, including IntelliJ, VS Code, and others. With this extension, an AI agent can interact directly with Jtest, delivering context-aware guidance, analysis, and automation.
This feature allows you to use an AI coding assistant to:
- Access static analysis results to identify violations, prioritize critical issues based on your recommendations, and propose accurate fixes.
- Interpret rules and documentation, enabling you to ask targeted questions, group or prioritize rules, and more easily customize static analysis configurations, reducing manual effort and ensuring alignment with your projects' internal quality standards.
- Access information from the user guide to explain features and suggest resolutions for your issues.
- Run static analysis and access static analysis results reported to the Problems view directly from Copilot Chat in VS Code.
For details, see Configuring the MCP Server Extension for AI Agents.
Code Coverage Enhancements
- You can now report static coverage to multiple coverage images in DTP using the report.coverage.static.images option. This allows you to reuse static coverage captured during unit test execution for coverage collected from other testing practices, such as functional or manual testing — simplifying the process and reducing the amount of data sent to DTP.
- A license is no longer needed when using the coverage tools to generate static coverage images.
Static Analysis Enhancements
- Flow Analysis now understands the behavior of mathematical functions and uses it to compute results and determine more accurate constraints.
- Support for Jakarta EE has been added for a group of rules.
New and Updated Test Configurations
The Security Compliance Pack has been extended by adding support for the following test configurations:
- CWE 4.18
- The Common Weakness Enumeration (CWE) rule set has been extended to cover new guidelines.
- OWASP ASVS 5.0
The following test configurations have been updated:
- CWE Top 25 2024
- CWE Top 25 + On the Cusp 2024
- UL 2900
The following test configurations have been removed:
- CWE 4.16
- OWASP ASVS 4.0.3
Updated Static Analysis Rules
The following rules have been updated:
Rule ID | Updates |
|---|---|
CODSTA.POD.CIOC | Improved accuracy. Support for Record type has been added. |
EXCEPT.AIOC | Improved accuracy. Support for Record type has been added. |
FORMAT.BLCD | Improved accuracy. Support for Record type has been added. |
FORMAT.IND | Improved accuracy. Fixed a false positive reported by the rule. |
FORMAT.OSPL | Improved accuracy. Fixed a false positive reported by the rule. |
FORMAT.UP | Improved accuracy. Fixed a false positive reported by the rule. |
PROPS.PLAIN | Extended pattern matching in the rule. |
SERVLET.AJDBC | Support for Jakarta EE has been added. |
SERVLET.BINS | Support for Jakarta EE has been added. |
SERVLET.CETS | Support for Jakarta EE has been added. |
SERVLET.IF | Support for Jakarta EE has been added. |
SERVLET.LML | Support for Jakarta EE has been added. |
SERVLET.MDC | Support for Jakarta EE has been added. |
SERVLET.NSIS | Support for Jakarta EE has been added. |
SERVLET.NSSS | Support for Jakarta EE has been added. |
SERVLET.SOP | Support for Jakarta EE has been added. |
SERVLET.STM | Support for Jakarta EE has been added. |
SERVLET.SYN | Support for Jakarta EE has been added. |
SERVLET.UCO | Support for Jakarta EE has been added. |
SECURITY.ESD.PLC | Support for Jakarta EE has been added. |
SECURITY.IBA.RUIM | Support for Jakarta EE has been added. |
SECURITY.IBA.VRD | Support for Jakarta EE has been added. |
SECURITY.WSC.HGRSI | Support for Jakarta EE has been added. |
SECURITY.WSC.HTTPRHA | Support for Jakarta EE has been added. |
SECURITY.WSC.ISL | Support for Jakarta EE has been added. |
SECURITY.WSC.JXCORS | Support for Jakarta EE has been added. |
SECURITY.WSC.SCHTTP | Support for Jakarta EE has been added. |
SECURITY.WSC.SL | Support for Jakarta EE has been added. |
SECURITY.WSC.UOSC | Support for Jakarta EE has been added. |
EJB.ABCS | Support for Jakarta EE has been added. |
EJB.ADCB | Support for Jakarta EE has been added. |
NAMING.THAC | Support for Jakarta EE has been added. |
SERIAL.SNSO | Support for Jakarta EE has been added. |
STRUTS.ACJC | Support for Jakarta EE has been added. |
Support for IDEs
The following IDEs are now supported:
- Eclipse 4.36 (2025-06)
- Eclipse 4.37 (2025-09)
- Eclipse 4.38 (2025-12)
- IntelliJ 2025.2
- IntelliJ 2025.3
Additional Updates
- Support for Lombok 1.18.42 has been added.
Removed Support
Support for the following OS is now removed:
- Windows 10
Resolved Bugs and FRs
Bug/FR ID | Description |
|---|---|
| JT-77639 | Rule FORMAT.IND shows different results in different IDE |
| JT-77641 | APSC_DV.003215.UP reports false positive on nested operation |
| UTA-9795 | Constructor mock does not throw exception required by recipe condition |
| UTA-10024 | Tool claims bulk is canceled with Single Creation only and local license |
| UTA-10193 | Wrong detection of test source folder in some cases |
| XT-43349 | Performance degradation when processing suppressions (AWS cloud server, 96cpu, 768gb) |
| XT-43392 | AI Assistant documentation - index out of bounds exception when no embedding model set |
| XT-43562 | jtestcov does not include errors part when displaying setup problem |
Resolved Bugs and FRs in 2025.2.1
Bug/FR ID | Description |
|---|---|
JT-77769 | Improve accuracy of rule CWE.256.PLAIN |
Resolved Bugs and FRs in 2025.2.2
Bug/FR ID | Description |
|---|---|
JT-78029 | Jtest 2025.2.1 analysis crash on one of the branches |
Resolved Bugs and FRs in 2025.2.3
Bug/FR ID | Description |
|---|---|
CVE-2026-33937 | Critical vulnerability resolved by updating to handlebars version 4.7.9 |
Resolved Bugs and FRs in 2025.2.4
Bug/FR ID | Description |
|---|---|
CVE-2026-22732 | Critical vulnerability resolved by updating to spring-security version 6.5.9 |
Resolved Bugs and FRs in 2025.2.5
Bug/FR ID | Description |
|---|---|
CVE-2026-29145 | Critical vulnerability resolved by updating to Tomcat version 10.1.54 |
Resolved Bugs and FRs in 2025.2.6
Bug/FR ID | Description |
|---|---|
CVE-2026-43515 | Critical vulnerability resolved by upgrading Tomcat to 10.1.56 |
CVE-2026-41842 | Critical vulnerability resolved by upgrading Spring to 6.2.19 |
CVE-2026-47838 | Critical vulnerability resolved by upgrading Spring Security to 6.5.11 |
CVE-2026-54512 | Critical vulnerability resolved by upgrading Jackson to 2.21.4 |
CVE-2026-54513 | Critical vulnerability resolved by upgrading Jackson to 2.21.4 |
CVE-2026-33701 | Critical vulnerability resolved by upgrading opentelemetry-javaagent to 2.28.1 |
Resolved Bugs and FRs in 2025.2.7
Bug/FR ID | Description |
|---|---|
CVE-2016-4000 | Critical vulnerability resolved by upgrading jython to 2.7.4 |
CVE-2026-55276 CVE-2026-53434 CVE-2026-59083 CVE-2026-59084 | Critical vulnerabilities resolved by upgrading Tomcat to 10.1.57 |
Resolved Bugs and FRs in 2025.2.8
Bug/FR ID | Description |
|---|---|
CVE-2026-8763 CVE-2026-58062 | Critical vulnerability resolved by upgrading bc-fips to 2.1.3 |
CVE-2026-59638 | Critical vulnerabilities resolved by upgrading bctls-fips to 2.1.24 |