chore(deps): update sonarsource/sonarqube-scan-action action to v5.2.0 #4

renovate-bot · 2025-05-06T23:09:31+02:00

renovate-bot commented

2025-05-06 23:09:31 +02:00

This PR contains the following updates:

Package	Type	Update	Change
SonarSource/sonarqube-scan-action	action	minor	`v5.1.0` -> `v5.2.0`

Release Notes

SonarSource/sonarqube-scan-action (SonarSource/sonarqube-scan-action)

`v5.2.0`

Compare Source

What's Changed

SQSCANGHA-90 remove mend dead conf by @pierre-guillot-gh in https://github.com/SonarSource/sonarqube-scan-action/pull/184
SQSCANGHA-89 Attempt to fix command injection by @henryju in https://github.com/SonarSource/sonarqube-scan-action/pull/186
SQSCANGHA-93 Fix madhead/semver-utils' version by @csaba-feher-sonarsource in https://github.com/SonarSource/sonarqube-scan-action/pull/187
SQSCANGHA-94 Update version update logic by @csaba-feher-sonarsource in https://github.com/SonarSource/sonarqube-scan-action/pull/188
SQSCANGHA-92 Validate scanner version by @csaba-feher-sonarsource in https://github.com/SonarSource/sonarqube-scan-action/pull/189

Full Changelog: https://github.com/SonarSource/sonarqube-scan-action/compare/v5...v5.2.0

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [SonarSource/sonarqube-scan-action](https://github.com/SonarSource/sonarqube-scan-action) | action | minor | `v5.1.0` -> `v5.2.0` | --- ### Release Notes <details> <summary>SonarSource/sonarqube-scan-action (SonarSource/sonarqube-scan-action)</summary> ### [`v5.2.0`](https://github.com/SonarSource/sonarqube-scan-action/releases/tag/v5.2.0) [Compare Source](https://github.com/SonarSource/sonarqube-scan-action/compare/v5.1.0...v5.2.0) ##### What's Changed - SQSCANGHA-90 remove mend dead conf by [@pierre-guillot-gh](https://github.com/pierre-guillot-gh) in https://github.com/SonarSource/sonarqube-scan-action/pull/184 - SQSCANGHA-89 Attempt to fix command injection by [@henryju](https://github.com/henryju) in https://github.com/SonarSource/sonarqube-scan-action/pull/186 - SQSCANGHA-93 Fix madhead/semver-utils' version by [@csaba-feher-sonarsource](https://github.com/csaba-feher-sonarsource) in https://github.com/SonarSource/sonarqube-scan-action/pull/187 - SQSCANGHA-94 Update version update logic by [@csaba-feher-sonarsource](https://github.com/csaba-feher-sonarsource) in https://github.com/SonarSource/sonarqube-scan-action/pull/188 - SQSCANGHA-92 Validate scanner version by [@csaba-feher-sonarsource](https://github.com/csaba-feher-sonarsource) in https://github.com/SonarSource/sonarqube-scan-action/pull/189 **Full Changelog**: https://github.com/SonarSource/sonarqube-scan-action/compare/v5...v5.2.0 </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).

renovate-bot added 1 commit 2025-05-06 23:09:34 +02:00

chore(deps): update sonarsource/sonarqube-scan-action action to v5.2.0 35821882d8

ai-review-bot commented

2025-05-06 23:09:39 +02:00

Decision: Accept
Change Score: 95%

The change updates the version of the SonarQube scan action. This is generally a good practice to keep dependencies up to date and benefit from potential bug fixes, performance improvements, and new features.

However, consider the following points:

Compatibility: While updating to the latest version is generally good, ensure the new version v5.2.0 is compatible with your SonarQube server and the rest of your workflow. Check the SonarQube Scan Action release notes for any breaking changes or migration steps.
Testing: After the update, it's crucial to monitor the SonarQube scan results to ensure the update didn't introduce any unexpected behavior or issues.

I would accept this change with those considerations.

**Decision: Accept** **Change Score: 95%** The change updates the version of the SonarQube scan action. This is generally a good practice to keep dependencies up to date and benefit from potential bug fixes, performance improvements, and new features. However, consider the following points: * **Compatibility:** While updating to the latest version is generally good, ensure the new version `v5.2.0` is compatible with your SonarQube server and the rest of your workflow. Check the SonarQube Scan Action release notes for any breaking changes or migration steps. * **Testing:** After the update, it's crucial to monitor the SonarQube scan results to ensure the update didn't introduce any unexpected behavior or issues. I would accept this change with those considerations.

luke merged commit 877e89fc66 into main

2025-05-06 23:10:12 +02:00

luke deleted branch renovate/sonarsource-sonarqube-scan-action-5.x

2025-05-06 23:10:13 +02:00

luke referenced this issue from a commit

2025-05-06 23:10:15 +02:00

chore(deps): update sonarsource/sonarqube-scan-action action to v5.2.0 (#4)

Sign in to join this conversation.

2 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: repos/runner-ubuntu-custom#4