Update to latest FindBugs 3.0.1-SNAPSHOT (+7 rules). Use sonar-java 2.6.