You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 9 Next »


This release includes the following enhancements:

Release date: May 13, 2026

Support for Agentic Development Workflows

This release expands support for agentic development workflows, enabling static analysis and unit testing capabilities to be used directly from agentic AI workflows in CI/CD pipelines, LLM-enabled command-line environments, and IDEs. New agent skills and MCP tools are provided that allow you to easily integrate with AI-first development workflows. See Configuring the MCP Server Extension for AI Agents.

Support for Java 25 Projects

Jtest now fully supports projects developed in and running on Java 25.

Static Analysis Enhancements

  • Jtest can now detect and report unused suppressions. Information about unused suppressions can be found in generated XML reports for review and suppressions can be automatically removed to improve code readability and maintainability. See Reporting and Removing Unused Suppressions.
  • The filter for limiting the number of violations reported per rule has been improved. A new option has been added to not count rule violations that were suppressed. See Advanced Settings.

Report Enhancements

  • A new HTML metrics report can now be generated with details for specified metrics, including aggregated values and statistical summaries associated with each metric. This report simplifies data analysis and helps you make decisions based on metric values. See Metrics Details.
  • Performance of HTML report generation has been enhanced, particularly for complex projects with a large number of violations and suppressions.

New and Updated Test Configurations

The Security Compliance Pack has been extended by adding support for the following test configurations:

  • CWE 4.19.1
  • CWE Top 25 2025
  • CWE Top 25 + On the Cusp 2025
  • OWASP Top 10-2025

The following test configurations have been updated:

  • CERT for Java
  • CERT for Java Guidelines
  • Create Unit Tests
  • CWE Top 25 2024
  • CWE Top 25 + On the Cusp 2024
  • UL 2900

The following test configurations have been removed:

  • CWE 4.18
  • CWE Top 25 2023
  • CWE Top 25 + On the Cusp 2023
  • OWASP Top 10-2017

Updated Static Analysis Rules

Rule ID

Updates

CODSTA.ORG.DINTSupport for Java 25 has been added.
CODSTA.POD.CIOCSupport for Java 25 has been added.
EXCEPT.AIOCSupport for Java 25 has been added.
OOP.HIFSupport for Java 25 has been added.
OOP.INSOFSupport for Java 25 has been added.
OPT.UISOSupport for Java 25 has been added.
OPT.UNCSupport for Java 25 has been added.
PB.CUB.SBCSupport for Java 25 has been added.
EJB.ADCBSupport for Jakarta EE has been improved.
EJB.AIEBCSupport for Jakarta EE has been improved.
EJB.EJB3.AIASupport for Jakarta EE has been improved.
EJB.EJB3.AISESupport for Jakarta EE has been improved.
EJB.EJB3.BMNSupport for Jakarta EE has been improved.
EJB.EJB3.CMFSupport for Jakarta EE has been improved.
EJB.EJB3.CPIMSupport for Jakarta EE has been improved.
EJB.EJB3.EAIISupport for Jakarta EE has been improved.
EJB.EJB3.IDASupport for Jakarta EE has been improved.
EJB.EJB3.IDCSSupport for Jakarta EE has been improved.
EJB.EJB3.ISBSupport for Jakarta EE has been improved.
EJB.EJB3.MDBSSupport for Jakarta EE has been improved.
EJB.EJB3.MDMLSupport for Jakarta EE has been improved.
EJB.EJB3.MTMSupport for Jakarta EE has been improved.
EJB.EJB3.PCUNSupport for Jakarta EE has been improved.
EJB.EJB3.PERMITSupport for Jakarta EE has been improved.
EJB.EJB3.RLISupport for Jakarta EE has been improved.
EJB.EJB3.RMSBSupport for Jakarta EE has been improved.
EJB.EJB3.SIVSSupport for Jakarta EE has been improved.
EJB.EJB3.SRBMSupport for Jakarta EE has been improved.
EJB.LNLSupport for Jakarta EE has been improved.
EJB.MECSupport for Jakarta EE has been improved.
EJB.MNDFSupport for Jakarta EE has been improved.
EJB.RILHSupport for Jakarta EE has been improved.
EJB.STDSupport for Jakarta EE has been improved.
EJB.USFSupport for Jakarta EE has been improved.
EJB.UVOSupport for Jakarta EE has been improved.

Updated Flow Analysis Rules

The following rules have been updated:

Rule ID

Updates

BD-PB-CHECKRETChanged the violation message
BD-PB-ZEROAdded a parameter to disable reporting on floating-point values

Support for IDEs

The following IDEs are now supported:

  • Eclipse 4.38 (2025-12)
  • Eclipse 4.39 (2026-03)
  • IntelliJ 2025.3
  • IntelliJ 2026.1

Breaking Changes

  • In certain AWS or Azure Windows Server 2025 environments, the machineId may change after upgrading. If this happens, you will need to acquire a new license from Parasoft.
  • The jtest:monitor step now generates coverage agent configuration with the REST server disabled by default (previously enabled). If the coverage agent is used as part of test impact analysis workflows, pipeline scripts must be updated to enable the REST server; otherwise, job failures will occur.

  • Parasoft AI Assistant, available in the IntelliJ and Eclipse plugins, has been removed. MCP tools can be used instead. For details, see Configuring the MCP Server Extension for AI Agents.

Additional Updates

  • Support for Lombok 1.18.44 and 1.18.46 has been added.
  • Support for Gradle 9 has been added.

Deprecated and Removed Support

Deprecated Support for IDEs

Support for the following IDEs is now deprecated:

  • Eclipse 2023-03 - 2023-12 (4.27 - 4.30)
  • IntelliJ 2023.1 - 2023.3

Removed Support for IDEs

Support for the following IDEs is now removed:

  • Eclipse 2022-03 - 2022-12 (4.23 - 4.26)
  • IntelliJ 2022.1 - 2022.3

Resolved Bugs and FRs

Bug/FR ID

Description

FA-10509Null-checking methods from Flow Analysis Advanced Settings do not work properly
FA-10646Division by floating-point zero should not change the value of the divisor to an unknown value
JT-77673Rule OOP.HIF should not fire when "this" is used to refer to the current object
JT-78041Inconsistency in rule behavior between Java 17 and 21
JT-78069Missing rt.jar file during project description generation
XT-43968Uploading SARIF with violation from custom rule with double UNKNOWN categories gives an error

Resolved Bugs and FRs in 2026.1.1

Bug/FR ID

Description

CVE-2026-41842

Resolved by upgrading Spring to 6.2.19

CVE-2026-47838

Resolved by upgrading Spring Security to 6.5.11

CVE-2026-54512

Resolved by upgrading Jackson to 2.21.4

CVE-2026-54513

Resolved by upgrading Jackson to 2.21.4

CVE-2026-33701

Resolved by upgrading opentelemetry-javaagent to 2.28.1

  • No labels