Skip to content

PLUGINAPI-223 Update SonarSource/sonar-plugin-api monorepo to v14 - #361

Merged
vdiez merged 1 commit into
masterfrom
renovate/major-sonarsourcesonar-plugin-api
Sep 1, 2026
Merged

PLUGINAPI-223 Update SonarSource/sonar-plugin-api monorepo to v14#361
vdiez merged 1 commit into
masterfrom
renovate/major-sonarsourcesonar-plugin-api

Conversation

@hashicorp-vault-sonar-prod

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
org.sonarsource.api.plugin:sonar-plugin-api-test-fixtures (source) 13.11.0.445914.0.0.4498 age confidence
org.sonarsource.api.plugin:sonar-plugin-api (source) 13.11.0.445914.0.0.4498 age confidence

Release Notes

SonarSource/sonar-plugin-api (org.sonarsource.api.plugin:sonar-plugin-api-test-fixtures)

v14.0.0.4498

Compare Source

What's Changed

Full Changelog: SonarSource/sonar-plugin-api@13.11.0.4459...14.0.0.4498


Configuration

📅 Schedule: (in timezone CET)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Never, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

@hashicorp-vault-sonar-prod hashicorp-vault-sonar-prod Bot changed the title Update SonarSource/sonar-plugin-api monorepo to v14 PLUGINAPI-223 Update SonarSource/sonar-plugin-api monorepo to v14 Sep 1, 2026
@hashicorp-vault-sonar-prod

hashicorp-vault-sonar-prod Bot commented Sep 1, 2026

Copy link
Copy Markdown
Contributor Author

PLUGINAPI-223

Comment on lines +26 to 28
val sonarApiVersion = "14.0.0.4498"
val scannerEngineVersion = "13.10.0.4657"
val analyzerCommonsVersion = "2.30.0.5193"

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Quality: Test classpath now mixes plugin-api 14 with scanner-engine 13

Before this PR the test classpath paired sonar-plugin-api 13.11.0.4459 with org.sonarsource.scanner.engine:plugin-api-scanner-impl / sensor-test-fixtures 13.10.0.4657 (matching major lines); after the bump the API is 14.x while its scanner-side implementation and sensor test fixtures stay on 13.x, and Gradle silently resolves the impl's own plugin-api dependency up to 14.0.0.4498. The 14.0.0 release notes list only a slf4j/logback upgrade and a Java 17 / JUnit 6 retarget, so no API removal is confirmed, but the two artifacts are no longer version-aligned and scannerEngineVersion is not in the same Renovate group, so nothing will re-align them. Bump scannerEngineVersion to a build published against plugin-api 14, or add a Renovate packageRules group so the scanner-engine artifacts move together with the plugin API.

Was this helpful? React with 👍 / 👎

@gitar-bot

gitar-bot Bot commented Sep 1, 2026

Copy link
Copy Markdown
Code Review 👍 Approved with suggestions 0 resolved / 1 findings

Updates SonarSource/sonar-plugin-api monorepo to v14 (slf4j/logback upgrade and Java 17/JUnit 6 retarget). Consider aligning scannerEngineVersion to a build published against plugin-api 14, or add a Renovate packageRules group so scanner-engine artifacts stay synchronized with the plugin API rather than remaining on v13.

💡 Quality: Test classpath now mixes plugin-api 14 with scanner-engine 13

📄 sonar-rust-plugin/build.gradle.kts:26-28 📄 sonar-rust-plugin/build.gradle.kts:36-38 📄 sonar-rust-plugin/gradle.lockfile:49-56

Before this PR the test classpath paired sonar-plugin-api 13.11.0.4459 with org.sonarsource.scanner.engine:plugin-api-scanner-impl / sensor-test-fixtures 13.10.0.4657 (matching major lines); after the bump the API is 14.x while its scanner-side implementation and sensor test fixtures stay on 13.x, and Gradle silently resolves the impl's own plugin-api dependency up to 14.0.0.4498. The 14.0.0 release notes list only a slf4j/logback upgrade and a Java 17 / JUnit 6 retarget, so no API removal is confirmed, but the two artifacts are no longer version-aligned and scannerEngineVersion is not in the same Renovate group, so nothing will re-align them. Bump scannerEngineVersion to a build published against plugin-api 14, or add a Renovate packageRules group so the scanner-engine artifacts move together with the plugin API.

🤖 Prompt for agents
Code Review: Updates SonarSource/sonar-plugin-api monorepo to v14 (slf4j/logback upgrade and Java 17/JUnit 6 retarget). Consider aligning `scannerEngineVersion` to a build published against plugin-api 14, or add a Renovate `packageRules` group so scanner-engine artifacts stay synchronized with the plugin API rather than remaining on v13.

1. 💡 Quality: Test classpath now mixes plugin-api 14 with scanner-engine 13
   Files: sonar-rust-plugin/build.gradle.kts:26-28, sonar-rust-plugin/build.gradle.kts:36-38, sonar-rust-plugin/gradle.lockfile:49-56

   Before this PR the test classpath paired `sonar-plugin-api` 13.11.0.4459 with `org.sonarsource.scanner.engine:plugin-api-scanner-impl` / `sensor-test-fixtures` 13.10.0.4657 (matching major lines); after the bump the API is 14.x while its scanner-side implementation and sensor test fixtures stay on 13.x, and Gradle silently resolves the impl's own plugin-api dependency up to 14.0.0.4498. The 14.0.0 release notes list only a slf4j/logback upgrade and a Java 17 / JUnit 6 retarget, so no API removal is confirmed, but the two artifacts are no longer version-aligned and `scannerEngineVersion` is not in the same Renovate group, so nothing will re-align them. Bump `scannerEngineVersion` to a build published against plugin-api 14, or add a Renovate `packageRules` group so the scanner-engine artifacts move together with the plugin API.

Options

Auto-apply is off → Gitar will not commit updates to this branch.
Display: compact → Showing less information.

Comment with these commands to change the behavior for this request:

Auto-apply Compact
gitar auto-apply:on         
gitar display:verbose         

Was this helpful? React with 👍 / 👎 | Gitar

@sonarqube-next

sonarqube-next Bot commented Sep 1, 2026

Copy link
Copy Markdown

Quality Gate passed Quality Gate passed for 'sonar-rust'

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
0 Dependency risks
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarQube

@vdiez vdiez left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Auto-approved: Renovate dependency update.

@vdiez
vdiez merged commit eadbc4f into master Sep 1, 2026
16 checks passed
@vdiez
vdiez deleted the renovate/major-sonarsourcesonar-plugin-api branch September 1, 2026 08:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant