You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
SCANMAVEN-317 Support encryption of sonar.token, and other new secure properties SCANMAVEN-332 support modular-jar artifact type SCANMAVEN-341 Rework the support of encrypted properties
Maintenance
SCANMAVEN-370 Prepare next development iteration 5.7.0 SCANMAVEN-372 Configure Renovate for sonar-scanner-maven SCANMAVEN-373 SubmitReview: Use Vault token SCANMAVEN-374 Unpin internal GitHub actions SCANMAVEN-376 Use SonarSource/.../sonar-update-center-release@v1 instead of @master SCANMAVEN-377 Update dependency org.assertj:assertj-core to v3.27.7 [SECURITY]
SCANMAVEN-318 Update Orchestrator and fix e2e matrix SCANMAVEN-324 Convert e2e tests to invoker SCANMAVEN-346 Fix CI failure SCANMAVEN-347 Automate detection of sonar:sonar shorthand failure SCANMAVEN-348 Bump org.assertj:assertj-core from 3.26.3 to 3.27.7 in /sonar-maven-plugin SCANMAVEN-349 Remove Maven 4 e2e tests from promotion requirements SCANMAVEN-356 Add automated release workflow SCANMAVEN-357 Licence packaging standard - Maven Scanner SCANMAVEN-358 Create SonarUpdateCenterRelease.yml SCANMAVEN-361 Add issue-categories in automated release SCANMAVEN-363 Fix e2e tests with Maven 4 SCANMAVEN-364 Do not run nightly builds on weekends SCANMAVEN-365 Set up orchestrator cache SCANMAVEN-366 Update sonar-scanner-java-library to 4.1.0.1619 SCANMAVEN-367 Update sonar-scanner-java-library to 4.1.1.1633 SCANMAVEN-369 Update parent pom to 87.0.0.3057
Feature
SCANMAVEN-281 Irrelevant encrypted properties are not filtered out in multi-module project with "sonar" in the name
Note: This is not a supported build and is only here for the purposes of testing.
Do not run this on a live server and do not report bugs anywhere but this PR!
renovateBot
changed the title
Update dependency org.sonarsource.scanner.maven:sonar-maven-plugin to v5.1.0.4751
Update dependency org.sonarsource.scanner.maven:sonar-maven-plugin to v5.2.0.4988
Aug 31, 2025
renovateBot
changed the title
Update dependency org.sonarsource.scanner.maven:sonar-maven-plugin to v5.2.0.4988
Update dependency org.sonarsource.scanner.maven:sonar-maven-plugin to v5.3.0.6276
Nov 10, 2025
renovateBot
changed the title
Update dependency org.sonarsource.scanner.maven:sonar-maven-plugin to v5.3.0.6276
Update dependency org.sonarsource.scanner.maven:sonar-maven-plugin to v5.4.0.6343
Dec 2, 2025
renovateBot
changed the title
Update dependency org.sonarsource.scanner.maven:sonar-maven-plugin to v5.4.0.6343
Update dependency org.sonarsource.scanner.maven:sonar-maven-plugin to v5.5.0.6356
Dec 5, 2025
renovateBot
changed the title
Update dependency org.sonarsource.scanner.maven:sonar-maven-plugin to v5.5.0.6356
Update dependency org.sonarsource.scanner.maven:sonar-maven-plugin to v5.6.0.6792
Apr 20, 2026
renovateBot
changed the title
Update dependency org.sonarsource.scanner.maven:sonar-maven-plugin to v5.6.0.6792
Update dependency org.sonarsource.scanner.maven:sonar-maven-plugin to v5.7.0.6970
May 27, 2026
renovateBot
changed the title
Update dependency org.sonarsource.scanner.maven:sonar-maven-plugin to v5.7.0.6970
Update dependency org.sonarsource.scanner.maven:sonar-maven-plugin to v5.8.0.7211
Sep 19, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
github-actions
Bot
added
the
🚨 Dependency Update
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
This PR contains the following updates:
5.0.0.4389→5.8.0.7211Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
SonarSource/sonar-scanner-maven (org.sonarsource.scanner.maven:sonar-maven-plugin)
v5.8.0.7211Compare Source
Release notes - Sonar Scanner for Maven - 5.8
Maintenance
SCANMAVEN-382 Prepare next development iteration 5.8.0
SCANMAVEN-384 Fix QG broken by the new testing rules
SCANMAVEN-385 Code Quality reorganization from jvm to CI Experience Squad
SCANMAVEN-386 ToggleLockBranch: Add additional-message
SCANMAVEN-387 Code Quality Slack channel reorganization
SCANMAVEN-390 Upgrade orchestrator to version 6.3.0
SCANMAVEN-392 Upgrade jetty test dependencies to version 9.4.58.v20250814
SCANMAVEN-395 Remove scheduled invocation of sonar:sonar shorthand test
SCANMAVEN-397 Replace Maven 4.0.0-rc-5 in ITs with Maven 4.0.0-rc-6
SCANMAVEN-398 Upgrade orchestrator to version 6.4.0
SCANMAVEN-399 Update sonar-scanner-java-library to 4.1.2.1663
SCANMAVEN-401 Upgrade Jetty used by e2e tests
SCANMAVEN-402 Upgrade orchestrator to version 6.4.3.4676
Feature
SCANMAVEN-403 Releasability status fails on property-dump-plugin version
v5.7.0.6970Compare Source
Release notes - Sonar Scanner for Maven - 5.7
Feature
SCANMAVEN-317 Support encryption of sonar.token, and other new secure properties
SCANMAVEN-332 support
modular-jarartifact typeSCANMAVEN-341 Rework the support of encrypted properties
Maintenance
SCANMAVEN-370 Prepare next development iteration 5.7.0
SCANMAVEN-372 Configure Renovate for sonar-scanner-maven
SCANMAVEN-373 SubmitReview: Use Vault token
SCANMAVEN-374 Unpin internal GitHub actions
SCANMAVEN-376 Use SonarSource/.../sonar-update-center-release@v1 instead of @master
SCANMAVEN-377 Update dependency org.assertj:assertj-core to v3.27.7 [SECURITY]
v5.6.0.6792Compare Source
Release notes - Sonar Scanner for Maven - 5.6
Maintenance
SCANMAVEN-318 Update Orchestrator and fix e2e matrix
SCANMAVEN-324 Convert e2e tests to invoker
SCANMAVEN-346 Fix CI failure
SCANMAVEN-347 Automate detection of sonar:sonar shorthand failure
SCANMAVEN-348 Bump org.assertj:assertj-core from 3.26.3 to 3.27.7 in /sonar-maven-plugin
SCANMAVEN-349 Remove Maven 4 e2e tests from promotion requirements
SCANMAVEN-356 Add automated release workflow
SCANMAVEN-357 Licence packaging standard - Maven Scanner
SCANMAVEN-358 Create SonarUpdateCenterRelease.yml
SCANMAVEN-361 Add issue-categories in automated release
SCANMAVEN-363 Fix e2e tests with Maven 4
SCANMAVEN-364 Do not run nightly builds on weekends
SCANMAVEN-365 Set up orchestrator cache
SCANMAVEN-366 Update sonar-scanner-java-library to 4.1.0.1619
SCANMAVEN-367 Update sonar-scanner-java-library to 4.1.1.1633
SCANMAVEN-369 Update parent pom to 87.0.0.3057
Feature
SCANMAVEN-281 Irrelevant encrypted properties are not filtered out in multi-module project with "sonar" in the name
v5.5.0.6356Compare Source
Release notes - Sonar Scanner for Maven - 5.5
Task
SCANMAVEN-339 Update parent pom to 86.0.0.3040 and scanner-java-library to 3.5.2.1586
v5.4.0.6343Compare Source
Release notes - Sonar Scanner for Maven - 5.4
Task
SCANMAVEN-323 Split build and SQ scan to speed-up the pipeline
SCANMAVEN-328 Create unified dogfooding GitHub action
SCANMAVEN-329 Prepare next development iteration
SCANMAVEN-331 Add Maven 4.0.0-rc5 to the test suite
SCANMAVEN-337 Update the scanner library to 3.5.1.1568
SCANMAVEN-338 Update parent pom
v5.3.0.6276Compare Source
Release notes - Sonar Scanner for Maven - 5.3
Bug
SCANMAVEN-283 Mvn 4.0.0-rc-3 breaks scanner because change of API
SCANMAVEN-308 Toolchains are not properly discovered by the scanner with Maven 4
Task
SCANMAVEN-297 Update README.md with copy from Product Marketing
SCANMAVEN-301 PrepareNextIteration.yml: add recent improvements
SCANMAVEN-302 Update GH release and releasability actions
SCANMAVEN-303 Delete mend_scan_task
SCANMAVEN-305 Migrate Cirrus build to Github actions
SCANMAVEN-307 Migrate QA from Cirrus to Github action
SCANMAVEN-309 Prevent injection in PrepareNextIteration GHA
SCANMAVEN-310 Exclude test projects from SCA
SCANMAVEN-311 Upgrade dependencies
SCANMAVEN-314 Fix ProxyTest on GitHub actions
SCANMAVEN-315 Rework QA: split invoker-based ITs and Orchestrator-based e2e
SCANMAVEN-325 Update license header from SonarSource SA to SonarSource Sàrl
SCANMAVEN-326 Delete Cirrus CI config
SCANMAVEN-327 Use explicit build number
v5.2.0.4988Compare Source
Release notes - Sonar Scanner for Maven - 5.2
New Feature
SCANMAVEN-296 Include github actions folder in the scan
Task
SCANMAVEN-286 Update Slack notification in .github/workflows/slack_notify.yml
SCANMAVEN-287 Bump orchestrator to version 5.5 or greater
SCANMAVEN-294 Update sonar-scanner-java-library to 3.4.0.514
SCANMAVEN-298 Populate name in pom.xml
SCANMAVEN-299 Exclude tests from publication.
v5.1.0.4751Compare Source
Release notes - Sonar Scanner for Maven - 5.1
New Feature
SCANMAVEN-264 Add support for SonarQube Cloud regions
Bug
SCANMAVEN-228 Irrelevant encrypted properties should not be passed to the scanner engine
Task
SCANMAVEN-242 Migrate from single module to a multi-module structure
SCANMAVEN-250 Fix broken links coming from the relocation-pom's parent
SCANMAVEN-254 Update parent pom to version 81.0.0.2300
SCANMAVEN-257 Update headers for 2025
SCANMAVEN-258 Conditionally run tests using sonar.password in ITs
SCANMAVEN-260 Update CODEOWNERS after reorg
SCANMAVEN-261 Validate IT using the latest maven 4 release candidate 2
SCANMAVEN-262 Fix quality flaws: remove unnecessary public modifiers
SCANMAVEN-265 Upgrade sonar-scanner-java-library to latest version
SCANMAVEN-266 Analyze integration tests
SCANMAVEN-269 Prepare next development iteration 5.1
SCANMAVEN-271 Fix readability issues in ProxyTest
SCANMAVEN-272 Increase memory because maven 4.0.0-rc-2 fails with out of memory exception
SCANMAVEN-274 Fix quality flaws
SCANMAVEN-277 remove unused third-party-licenses.sh
SCANMAVEN-278 Fix quality flaws
SCANMAVEN-279 Clean up tech debt in Maven Scanner
SCANMAVEN-282 Update plexus-sec-dispatcher to fix CVE-2017-1000487
SCANMAVEN-284 Migrate releasability check to v2, fix property-dump-plugin to be excluded by releasability check (not released)
Improvement
SCANMAVEN-256 Remove (now redundant) server type logging
SCANMAVEN-276 ScannerEngineBootstrapper.isSuccessful() should be verified before calling getEngineFacade()
SCANMAVEN-280 Log the SonarQube Cloud Region
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.