update dependencies, update readme, small code updates (#202)

Signed-off-by: Nicklas Körtge <nicklas.koertge1@ibm.com>

Author: n1ckl0sk0rtge

README.md

@@ -10,10 +10,11 @@ It is part of **the [CBOMKit](https://github.com/IBM/cbomkit) toolset**.
 
 ## Version compatibility
 
-| Plugin Version | SonarQube Version      |
-|----------------|------------------------|
-| 1.3.2 and up   | SonarQube 9.8 and up   | 
-| 1.2.0 to 1.3.1 | SonarQube 9.8 and 10.4 |      
+| Plugin Version  | SonarQube Version              |
+|-----------------|--------------------------------|
+| 1.3.7 and up    | SonarQube 9.9 (LTS) and up     |
+| 1.3.2 and 1.3.6 | SonarQube 9.8 (LTS) up to 10.8 | 
+| 1.2.0 to 1.3.1  | SonarQube 9.8 (LTS) up to 10.4 |      
 
 
 ## Supported languages and libraries

java/src/test/java/com/ibm/plugin/rules/issues/ClientEncryptionJavaDuplicatedRSADetectionTest.java

@@ -19,6 +19,8 @@
  */
 package com.ibm.plugin.rules.issues;
 
+import static org.assertj.core.api.Assertions.assertThat;
+
 import com.ibm.engine.detection.DetectionStore;
 import com.ibm.engine.model.Algorithm;
 import com.ibm.engine.model.CipherAction;
@@ -34,6 +36,8 @@
 import com.ibm.mapper.model.functionality.Decapsulate;
 import com.ibm.mapper.model.functionality.Encapsulate;
 import com.ibm.plugin.TestBase;
+import java.util.List;
+import javax.annotation.Nonnull;
 import org.junit.jupiter.api.Disabled;
 import org.junit.jupiter.api.Test;
 import org.sonar.java.checks.verifier.CheckVerifier;
@@ -42,11 +46,6 @@
 import org.sonar.plugins.java.api.semantic.Symbol;
 import org.sonar.plugins.java.api.tree.Tree;
 
-import javax.annotation.Nonnull;
-import java.util.List;
-
-import static org.assertj.core.api.Assertions.assertThat;
-
 class ClientEncryptionJavaDuplicatedRSADetectionTest extends TestBase {
 
     @Test

mapper/src/main/java/com/ibm/mapper/mapper/ssl/json/JsonCipherSuites.java

@@ -1,6 +1,6 @@
 /*
  * SonarQube Cryptography Plugin
- * Copyright (C) 2024 IBM
+ * Copyright (C) 2025 IBM
  *
  * Licensed to the Apache Software Foundation (ASF) under one or more
  * contributor license agreements.  See the NOTICE file distributed with

pom.xml

@@ -42,12 +42,12 @@
         <cyclonedx-maven-plugin.version>2.9.1</cyclonedx-maven-plugin.version>
         <checkstyle.version>10.15.0</checkstyle.version>
 
-        <sonar.version>10.7.0.96327</sonar.version>
+        <sonar.version>25.1.0.102122</sonar.version>
         <sonar.minVersion>9.14.0.375</sonar.minVersion>
         <sonar.plugin.api.version>10.14.0.2599</sonar.plugin.api.version>
         <!-- language parser versions -->
-        <sonar.java.version>8.6.0.37351</sonar.java.version>
-        <sonar.python.version>4.23.0.17664</sonar.python.version>
+        <sonar.java.version>8.8.0.37665</sonar.java.version>
+        <sonar.python.version>4.24.0.18631</sonar.python.version>
 
         <junit.jupiter.version>5.11.4</junit.jupiter.version>