chore(actions)(deps): bump SonarSource/sonarqube-scan-action from 4.1.0 to 4.2.1 #16

Merged
dependabot[bot] merged 1 commits from dependabot/github_actions/SonarSource/sonarqube-scan-action-4.2.1 into main 2024-12-18 08:03:15 +01:00
dependabot[bot] commented 2024-12-18 06:17:58 +01:00 (Migrated from github.com)

Bumps SonarSource/sonarqube-scan-action from 4.1.0 to 4.2.1.

Release notes

Sourced from SonarSource/sonarqube-scan-action's releases.

v4.2.1

What's Changed

Full Changelog: https://github.com/SonarSource/sonarqube-scan-action/compare/v4.2.0...v4.2.1

v4.2.0

We are happy to announce this new version of the GitHub action, which brings support for C, C++, and Objective-C projects.

The action supports both AutoConfig scenarios, as well as scenarios where Build Wrapper is required, and is a complete replacement of sonarqube-github-c-cpp and sonarcloud-github-c-cpp.

To install Build Wrapper, a new sonarqube-scan-action/install-build-wrapper sub-action is provided.

Check the README for examples of configuration.

On top of C, C++, and Objective-C support, we have also improved our support of self-hosted GitHub runners:

  • we don't expect anymore the temporary runner folder (RUNNER_TEMP) to be cleaned after every job execution: if present, the action will clean it, before running
  • similarly, we don't expect anymore the Sonar SSL folder (~/sonar/ssl) to be cleaned after every job execution: if present, the action will clean it, before running

What's Changed

New Contributors

Full Changelog: https://github.com/SonarSource/sonarqube-scan-action/compare/v4.1.0...v4.2.0

Commits
  • bfd4e55 SQSCANGHA-77 Change title back to SonarQube Scan Action (#166)
  • 26c5182 SQSCANGHA-76 Support self-hosted runners not clearing truststore after run (#...
  • 0ab314b SQSCANGHA-75 Support self-hosted runners not clearing temp after run (#164)
  • ea0362b Force unzip without prompt in sonar scanner installation when files already e...
  • d1fd0eb README: required programs for self-hosted and container (#162)
  • 00e62e1 SQCPPGHA-9 Extend action to support C, C++, and Objective-C projects (#161)
  • 844ce27 Add Jira integration
  • a36db76 SQSCANGHA-64 Shorten action description to respect 125 chars limit (#157)
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Bumps [SonarSource/sonarqube-scan-action](https://github.com/sonarsource/sonarqube-scan-action) from 4.1.0 to 4.2.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sonarsource/sonarqube-scan-action/releases">SonarSource/sonarqube-scan-action's releases</a>.</em></p> <blockquote> <h2>v4.2.1</h2> <h2>What's Changed</h2> <ul> <li>SQSCANGHA-77 Change title back to SonarQube Scan Action by <a href="https://github.com/antonioaversa"><code>@​antonioaversa</code></a> in <a href="https://redirect.github.com/SonarSource/sonarqube-scan-action/pull/166">SonarSource/sonarqube-scan-action#166</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/SonarSource/sonarqube-scan-action/compare/v4.2.0...v4.2.1">https://github.com/SonarSource/sonarqube-scan-action/compare/v4.2.0...v4.2.1</a></p> <h2>v4.2.0</h2> <p>We are happy to announce this new version of the GitHub action, which brings <strong>support for C, C++, and Objective-C projects</strong>.</p> <p>The action supports both AutoConfig scenarios, as well as scenarios where Build Wrapper is required, and is a complete replacement of <a href="https://github.com/SonarSource/sonarqube-github-c-cpp"><code>sonarqube-github-c-cpp</code></a> and <a href="https://github.com/SonarSource/sonarcloud-github-c-cpp"><code>sonarcloud-github-c-cpp</code></a>.</p> <p>To install Build Wrapper, a new <code>sonarqube-scan-action/install-build-wrapper</code> sub-action is provided.</p> <p>Check <a href="https://github.com/SonarSource/sonarqube-scan-action/tree/v4.2.0">the README</a> for examples of configuration.</p> <p>On top of C, C++, and Objective-C support, we have also improved our support of self-hosted GitHub runners:</p> <ul> <li>we don't expect anymore the temporary runner folder (<code>RUNNER_TEMP</code>) to be cleaned after every job execution: if present, the action will clean it, before running</li> <li>similarly, we don't expect anymore the Sonar SSL folder (<code>~/sonar/ssl</code>) to be cleaned after every job execution: if present, the action will clean it, before running</li> </ul> <h2>What's Changed</h2> <ul> <li>SQSCANGHA-64 Shorten action description to respect 125 chars limit by <a href="https://github.com/antonioaversa"><code>@​antonioaversa</code></a> in <a href="https://redirect.github.com/SonarSource/sonarqube-scan-action/pull/157">SonarSource/sonarqube-scan-action#157</a></li> <li>SQCPPGHA-9 Extend action to support C, C++, and Objective-C projects by <a href="https://github.com/antonioaversa"><code>@​antonioaversa</code></a> in <a href="https://redirect.github.com/SonarSource/sonarqube-scan-action/pull/161">SonarSource/sonarqube-scan-action#161</a></li> <li>README: required programs for self-hosted and container by <a href="https://github.com/trgalho"><code>@​trgalho</code></a> in <a href="https://redirect.github.com/SonarSource/sonarqube-scan-action/pull/162">SonarSource/sonarqube-scan-action#162</a></li> <li>Force unzip without prompt in sonar scanner installation when files already exist by <a href="https://github.com/blgnksy"><code>@​blgnksy</code></a> in <a href="https://redirect.github.com/SonarSource/sonarqube-scan-action/pull/163">SonarSource/sonarqube-scan-action#163</a></li> <li>SQSCANGHA-75 Support self-hosted runners not clearing temp after run by <a href="https://github.com/antonioaversa"><code>@​antonioaversa</code></a> in <a href="https://redirect.github.com/SonarSource/sonarqube-scan-action/pull/164">SonarSource/sonarqube-scan-action#164</a></li> <li>SQSCANGHA-76 Support self-hosted runners not clearing truststore after run by <a href="https://github.com/antonioaversa"><code>@​antonioaversa</code></a> in <a href="https://redirect.github.com/SonarSource/sonarqube-scan-action/pull/165">SonarSource/sonarqube-scan-action#165</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/trgalho"><code>@​trgalho</code></a> made their first contribution in <a href="https://redirect.github.com/SonarSource/sonarqube-scan-action/pull/162">SonarSource/sonarqube-scan-action#162</a></li> <li><a href="https://github.com/blgnksy"><code>@​blgnksy</code></a> made their first contribution in <a href="https://redirect.github.com/SonarSource/sonarqube-scan-action/pull/163">SonarSource/sonarqube-scan-action#163</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/SonarSource/sonarqube-scan-action/compare/v4.1.0...v4.2.0">https://github.com/SonarSource/sonarqube-scan-action/compare/v4.1.0...v4.2.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/SonarSource/sonarqube-scan-action/commit/bfd4e558cda28cda6b5defafb9232d191be8c203"><code>bfd4e55</code></a> SQSCANGHA-77 Change title back to SonarQube Scan Action (<a href="https://redirect.github.com/sonarsource/sonarqube-scan-action/issues/166">#166</a>)</li> <li><a href="https://github.com/SonarSource/sonarqube-scan-action/commit/26c51824c8330b026f261a3205f94958d4b1bc5c"><code>26c5182</code></a> SQSCANGHA-76 Support self-hosted runners not clearing truststore after run (#...</li> <li><a href="https://github.com/SonarSource/sonarqube-scan-action/commit/0ab314b63d8b8578bc90420663b12835ed33ecf4"><code>0ab314b</code></a> SQSCANGHA-75 Support self-hosted runners not clearing temp after run (<a href="https://redirect.github.com/sonarsource/sonarqube-scan-action/issues/164">#164</a>)</li> <li><a href="https://github.com/SonarSource/sonarqube-scan-action/commit/ea0362bf7b35097068b985d005f8c0887f251063"><code>ea0362b</code></a> Force unzip without prompt in sonar scanner installation when files already e...</li> <li><a href="https://github.com/SonarSource/sonarqube-scan-action/commit/d1fd0ebe222583088aac37b404dcb1f5e170b5cd"><code>d1fd0eb</code></a> README: required programs for self-hosted and container (<a href="https://redirect.github.com/sonarsource/sonarqube-scan-action/issues/162">#162</a>)</li> <li><a href="https://github.com/SonarSource/sonarqube-scan-action/commit/00e62e119083df8c4315d967fb0fcfb4a1895444"><code>00e62e1</code></a> SQCPPGHA-9 Extend action to support C, C++, and Objective-C projects (<a href="https://redirect.github.com/sonarsource/sonarqube-scan-action/issues/161">#161</a>)</li> <li><a href="https://github.com/SonarSource/sonarqube-scan-action/commit/844ce2710b50b043b790ffc12eff424c7427d9e0"><code>844ce27</code></a> Add Jira integration</li> <li><a href="https://github.com/SonarSource/sonarqube-scan-action/commit/a36db763ac8d69398c0bf7d6f6fafe853fc16029"><code>a36db76</code></a> SQSCANGHA-64 Shorten action description to respect 125 chars limit (<a href="https://redirect.github.com/sonarsource/sonarqube-scan-action/issues/157">#157</a>)</li> <li>See full diff in <a href="https://github.com/sonarsource/sonarqube-scan-action/compare/v4.1.0...v4.2.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=SonarSource/sonarqube-scan-action&package-manager=github_actions&previous-version=4.1.0&new-version=4.2.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>
luketainton (Migrated from github.com) reviewed 2024-12-18 06:17:58 +01:00
Sign in to join this conversation.
No description provided.