SONARJAVA-6242 Deprecate S5042

[dorian-burihabwa-sonarsource]

Changes were pulled from https://github.com/SonarSource/rspec/pull/6752 and selectively picked to only reflect the deprecation status change. This PR does not include the changes related to the rule changing from a hotspot to a code smell or any change in severity.

[hashicorp-vault-sonar-prod]

SONARJAVA-6242

[sonar-review-alpha]

Summary

Rule S5042 (Zip Bomb detection) is being marked as deprecated. The change removes it from default quality profiles, updates its status to "deprecated" with a notice in the rule description, and removes it from autoscan test resources. The PR scope is limited to deprecation only—no changes to rule severity, type, or behavior, as noted in the author's description.

What reviewers should know

Key files to review:

• S5042.json — status changed from "ready" to "deprecated"
• S5042.html — deprecation notice added at the top
• Sonar_way_profile.json and Sonar_agentic_AI_profile.json — rule removed from both profiles
• JavaAgenticWayProfileTest.java — test assertion updated (468 → 467 rules)
• Autoscan test resources — diff_S5042.json deleted, entry removed from autoscan-diff-by-rules.json

Notes for reviewers:

• This PR deliberately does NOT include severity, type, or remediation changes from the upstream rspec PR
• Existing issues flagged by S5042 will still exist in projects; deprecation only affects new scans going forward
• The rule remains functional but is no longer recommended for new quality profiles

---

• Generate Walkthrough
• Generate Diagram

🗣️ Give feedback

[sonarqube-next]

Quality Gate passed

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
0 Dependency risks
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarQube

[sonar-review-alpha]

LGTM! ✅

Clean, complete deprecation. Every expected touch point is covered: rule status, deprecation notice, both quality profiles, the autoscan resources, and the exact-count assertion in JavaAgenticWayProfileTest. The deprecation notice wording in S5042.html is consistent with the pattern used by other deprecated rules in this repo.

🗣️ Give feedback