chore(deps): update sonarsource/sonarqube-scan-action action to v6 #35

renovate-bot · 2025-09-18T11:09:24+02:00

renovate-bot commented

2025-09-18 11:09:24 +02:00

This PR contains the following updates:

Package	Type	Update	Change
SonarSource/sonarqube-scan-action	action	major	`v5.3.1` -> `v6.0.0`

Release Notes

SonarSource/sonarqube-scan-action (SonarSource/sonarqube-scan-action)

`v6.0.0`

Compare Source

BREAKING CHANGE!

In order to prevent command-line injection, the actions has been rewritten from Bash to JS, and the args input is now parsed differently. When updating to v6, you might have to update your workflow to change how arguments are quoted.
For example, if you were previously passing:

- uses: SonarSource/sonarqube-scan-action@<action version>
  with:
    args: >
      -Dsonar.projectName="My Project"

you should now pass:

- uses: SonarSource/sonarqube-scan-action@<action version>
  with:
    args: >
      "-Dsonar.projectName=My Project"

For more args passing examples, please refer to the README file

What's Changed

SQSCANGHA-106 Migrate from Bash to JS by @jeremy-davis-sonarsource in #208

Full Changelog: https://github.com/SonarSource/sonarqube-scan-action/compare/v5.3.1...v6.0.0

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [SonarSource/sonarqube-scan-action](https://github.com/SonarSource/sonarqube-scan-action) | action | major | `v5.3.1` -> `v6.0.0` | --- ### Release Notes <details> <summary>SonarSource/sonarqube-scan-action (SonarSource/sonarqube-scan-action)</summary> ### [`v6.0.0`](https://github.com/SonarSource/sonarqube-scan-action/releases/tag/v6.0.0) [Compare Source](https://github.com/SonarSource/sonarqube-scan-action/compare/v5.3.1...v6.0.0) ##### BREAKING CHANGE! In order to prevent command-line injection, the actions has been rewritten from Bash to JS, and the `args` input is now parsed differently. When updating to v6, you might have to update your workflow to change how arguments are quoted. For example, if you were previously passing: ```yaml - uses: SonarSource/sonarqube-scan-action@<action version> with: args: > -Dsonar.projectName="My Project" ``` you should now pass: ```yaml - uses: SonarSource/sonarqube-scan-action@<action version> with: args: > "-Dsonar.projectName=My Project" ``` For more `args` passing examples, please refer to the [README](https://github.com/SonarSource/sonarqube-scan-action/tree/master?tab=readme-ov-file#args) file ##### What's Changed - SQSCANGHA-106 Migrate from Bash to JS by [@jeremy-davis-sonarsource](https://github.com/jeremy-davis-sonarsource) in [#208](https://github.com/SonarSource/sonarqube-scan-action/pull/208) **Full Changelog**: <https://github.com/SonarSource/sonarqube-scan-action/compare/v5.3.1...v6.0.0> </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).

renovate-bot added the

type

dependencies

label 2025-09-18 11:09:24 +02:00

renovate-bot added 1 commit 2025-09-18 11:09:26 +02:00

chore(deps): update sonarsource/sonarqube-scan-action action to v6 f14766b238

ai-review-bot commented

2025-09-18 11:09:36 +02:00

Decision: Accept
Change Score: 10/10

The proposed change updates the SonarQube scan action in multiple workflow files from version 5.3.1 to version 6.0.0. This is a straightforward version update. Ensure that the new version doesn't introduce any breaking changes to your workflow or require any configuration updates.

**Decision: Accept** **Change Score: 10/10** The proposed change updates the SonarQube scan action in multiple workflow files from version 5.3.1 to version 6.0.0. This is a straightforward version update. Ensure that the new version doesn't introduce any breaking changes to your workflow or require any configuration updates.

luke merged commit 2c3850834d into main

2025-09-18 21:45:55 +02:00

luke referenced this issue from a commit

2025-09-18 21:45:56 +02:00

chore(deps): update sonarsource/sonarqube-scan-action action to v6 (#35)

luke deleted branch renovate/sonarsource-sonarqube-scan-action-6.x

2025-09-18 21:45:56 +02:00

Sign in to join this conversation.

2 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: actions/gha-workflows#35