Skip to content

build(deps): bump SonarSource/sonarqube-scan-action from 7 to 8#129

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/SonarSource/sonarqube-scan-action-8
Open

build(deps): bump SonarSource/sonarqube-scan-action from 7 to 8#129
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/SonarSource/sonarqube-scan-action-8

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 4, 2026

Bumps SonarSource/sonarqube-scan-action from 7 to 8.

Release notes

Sourced from SonarSource/sonarqube-scan-action's releases.

v8.0.0

What's Changed

Breaking change

Full Changelog: SonarSource/sonarqube-scan-action@v7...v8.0.0

v7.2.1

What's Changed

Full Changelog: SonarSource/sonarqube-scan-action@v7...v7.2.1

v7.2.0

What's Changed

Full Changelog: SonarSource/sonarqube-scan-action@v7...v7.2.0

v7.1.0

What's Changed

Full Changelog: SonarSource/sonarqube-scan-action@v7...v7.1.0

Commits
  • 7006c44 Update SonarScanner CLI to 8.1.0.6389
  • edd319f NO-JIRA Bump actions/setup-node from 6.3.0 to 6.4.0 (#234)
  • e050aa9 NO-JIRA Bump actions/cache from 5.0.4 to 5.0.5 (#231)
  • 6cd3d8f NO-JIRA Bump madhead/semver-utils from 4.3.0 to 5.0.0
  • 5656853 SQSCANGHA-146 Add proxy support for GPG keyserver access (#244)
  • c444753 SQSCANGHA-140 Add the missing requirements in README.md (#243)
  • 59db25f SQSCANGHA-145 Set skipSignatureVerification default value to false (#241)
  • ca30b65 SQSCANGHA-143 SubmitReview: Use Vault token (#238)
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels May 4, 2026
@qplevier
Copy link
Copy Markdown
Contributor

@dependabot recreate

Bumps [SonarSource/sonarqube-scan-action](https://github.com/sonarsource/sonarqube-scan-action) from 7 to 8.
- [Release notes](https://github.com/sonarsource/sonarqube-scan-action/releases)
- [Commits](SonarSource/sonarqube-scan-action@v7...v8)

---
updated-dependencies:
- dependency-name: SonarSource/sonarqube-scan-action
  dependency-version: '8'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/github_actions/SonarSource/sonarqube-scan-action-8 branch from 5ad51a8 to f520261 Compare May 20, 2026 07:38
@sonarqubecloud
Copy link
Copy Markdown

Quality Gate Failed Quality Gate failed

Failed conditions
C Security Rating on New Code (required ≥ A)

See analysis details on SonarQube Cloud

Catch issues before they fail your Quality Gate with our IDE extension SonarQube for IDE

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant