This release includes the following enhancements: Release date: May 13, 2026 Support for Agentic Development WorkflowsThis release expands support for agentic development workflows, enabling static analysis and unit testing capabilities to be used directly from agentic AI workflows in CI/CD pipelines, LLM-enabled command-line environments, and IDEs. New agent skills and MCP tools are provided that allow you to easily integrate with AI-first development workflows. See Configuring the MCP Server Extension for LLM Agents. Support for Java 25 ProjectsJtest now fully supports projects developed in and running on Java 25. Static Analysis Enhancements- Jtest can now detect and report unused suppressions. Information about unused suppressions can be found in generated XML reports for review and suppressions can be automatically removed to improve code readability and maintainability. See Reporting and Removing Unused Suppressions.
- The filter for limiting the number of violations reported per rule has been improved. A new option has been added to not count rule violations that were suppressed. See Advanced Settings.
Report Enhancements- A new HTML metrics report can now be generated with details for specified metrics, including aggregated values and statistical summaries associated with each metric. This report simplifies data analysis and helps you make decisions based on metric values. See Metrics Details.
- Performance of HTML report generation has been enhanced, particularly for complex projects with a large number of violations and suppressions.
| Anchor |
|---|
| new_and_updated_configs_jtest |
|---|
| new_and_updated_configs_jtest |
|---|
|
New and Updated Test ConfigurationsThe Security Compliance Pack has been extended by adding support for the following test configurations: - CWE 4.19.1
- CWE Top 25 2025
- CWE Top 25 + On the Cusp 2025
- OWASP Top 10-2025
The following test configurations have been updated: - CERT for Java
- CERT for Java Guidelines
- Create Unit Tests
- CWE Top 25 2024
- CWE Top 25 + On the Cusp 2024
- UL 2900
The following test configurations have been removed: - CWE 4.18
- CWE Top 25 2023
- CWE Top 25 + On the Cusp 2023
- OWASP Top 10-2017
| Anchor |
|---|
| Updated Static Analysis Rules |
|---|
| Updated Static Analysis Rules |
|---|
|
Updated Static Analysis RulesRule ID | Updates |
|---|
| CODSTA.ORG.DINT | Support for Java 25 has been added. | | CODSTA.POD.CIOC | Support for Java 25 has been added. | | EXCEPT.AIOC | Support for Java 25 has been added. | | OOP.HIF | Support for Java 25 has been added. | | OOP.INSOF | Support for Java 25 has been added. | | OPT.UISO | Support for Java 25 has been added. | | OPT.UNC | Support for Java 25 has been added. | | PB.CUB.SBC | Support for Java 25 has been added. | | EJB.ADCB | Support for Jakarta EE has been improved. | | EJB.AIEBC | Support for Jakarta EE has been improved. | | EJB.EJB3.AIA | Support for Jakarta EE has been improved. | | EJB.EJB3.AISE | Support for Jakarta EE has been improved. | | EJB.EJB3.BMN | Support for Jakarta EE has been improved. | | EJB.EJB3.CMF | Support for Jakarta EE has been improved. | | EJB.EJB3.CPIM | Support for Jakarta EE has been improved. | | EJB.EJB3.EAII | Support for Jakarta EE has been improved. | | EJB.EJB3.IDA | Support for Jakarta EE has been improved. | | EJB.EJB3.IDCS | Support for Jakarta EE has been improved. | | EJB.EJB3.ISB | Support for Jakarta EE has been improved. | | EJB.EJB3.MDBS | Support for Jakarta EE has been improved. | | EJB.EJB3.MDML | Support for Jakarta EE has been improved. | | EJB.EJB3.MTM | Support for Jakarta EE has been improved. | | EJB.EJB3.PCUN | Support for Jakarta EE has been improved. | | EJB.EJB3.PERMIT | Support for Jakarta EE has been improved. | | EJB.EJB3.RLI | Support for Jakarta EE has been improved. | | EJB.EJB3.RMSB | Support for Jakarta EE has been improved. | | EJB.EJB3.SIVS | Support for Jakarta EE has been improved. | | EJB.EJB3.SRBM | Support for Jakarta EE has been improved. | | EJB.LNL | Support for Jakarta EE has been improved. | | EJB.MEC | Support for Jakarta EE has been improved. | | EJB.MNDF | Support for Jakarta EE has been improved. | | EJB.RILH | Support for Jakarta EE has been improved. | | EJB.STD | Support for Jakarta EE has been improved. | | EJB.USF | Support for Jakarta EE has been improved. | | EJB.UVO | Support for Jakarta EE has been improved. |
Updated Flow Analysis RulesThe following rules have been updated: Rule ID | Updates |
|---|
| BD-PB-CHECKRET | Changed the violation message | | BD-PB-ZERO | Added a parameter to disable reporting on floating-point values |
Support for IDEsThe following IDEs are now supported: - Eclipse 4.38 (2025-12)
- Eclipse 4.39 (2026-03)
- Eclipse 4.40 (2026-06)
- IntelliJ 2025.3
- IntelliJ 2026.1
Breaking Changes- In certain AWS or Azure Windows Server 2025 environments, the
machineId may change after upgrading. If this happens, you will need to acquire a new license from Parasoft. The jtest:monitor step now generates coverage agent configuration with the REST server disabled by default (previously enabled). If the coverage agent is used as part of test impact analysis workflows, pipeline scripts must be updated to enable the REST server; otherwise, job failures will occur. - Parasoft AI Assistant, available in the IntelliJ and Eclipse plugins, has been removed. MCP tools can be used instead. For details, see Configuring the MCP Server Extension for LLM Agents.
Additional Updates- Support for Lombok 1.18.44 and 1.18.46 has been added.
- Support for Gradle 9 has been added.
Deprecated and Removed SupportDeprecated Support for IDEsSupport for the following IDEs is now deprecated: - Eclipse 2023-03 - 2023-12 (4.27 - 4.30)
- IntelliJ 2023.1 - 2023.3
Removed Support for IDEsSupport for the following IDEs is now removed: - Eclipse 2022-03 - 2022-12 (4.23 - 4.26)
- IntelliJ 2022.1 - 2022.3
Resolved Bugs and FRsBug/FR ID | Description |
|---|
| FA-10509 | Null-checking methods from Flow Analysis Advanced Settings do not work properly | | FA-10646 | Division by floating-point zero should not change the value of the divisor to an unknown value | | JT-77673 | Rule OOP.HIF should not fire when "this" is used to refer to the current object | | JT-78041 | Inconsistency in rule behavior between Java 17 and 21 | | JT-78069 | Missing rt.jar file during project description generation | | XT-43968 | Uploading SARIF with violation from custom rule with double UNKNOWN categories gives an error |
Resolved Bugs and FRs in 2026.1.1Bug/FR ID | Description |
|---|
CVE-2026-41842 | Critical vulnerability resolved by upgrading Spring to 6.2.19 | CVE-2026-47838 | Critical vulnerability resolved by upgrading Spring Security to 6.5.11 | CVE-2026-54512 | Critical vulnerability resolved by upgrading Jackson to 2.21.4 | CVE-2026-54513 | Critical vulnerability resolved by upgrading Jackson to 2.21.4 | CVE-2026-33701 | Critical vulnerability resolved by upgrading opentelemetry-javaagent to 2.28.1 |
Resolved Bugs and FRs in 2026.1.2Bug/FR ID | Description |
|---|
CVE-2016-4000 | Critical vulnerability resolved by upgrading jython to 2.7.4 | CVE-2026-55276 CVE-2026-53434 CVE-2026-59083 CVE-2026-59084 | Critical vulnerabilities resolved by upgrading Tomcat to 10.1.57 | JT-78555 | Issue with PB.PDS rule - Java switch expression |
Resolved Bugs and FRs in 2026.1.3Bug/FR ID | Description |
|---|
CVE-2026-8763 CVE-2026-58062 | Critical vulnerability resolved by upgrading bc-fips to 2.1.3 | CVE-2026-59638 | Critical vulnerabilities resolved by upgrading bctls-fips to 2.1.24 | JT-78536 | Violations are not detected in the Android project |
|