- Classes that define a
writeReplacemethod are no longer flagged by thejava/missing-no-arg-constructor-on-serializablequery on the assumption they are unlikely to be deserialized using the default algorithm. - The query "Use of a broken or risky cryptographic algorithm" (
java/weak-cryptographic-algorithm) now gives the reason why the cryptographic algorithm is considered weak.