Bump SonarSource/sonarqube-scan-action from 4 to 5 (#176)

dependabot[bot] · web-flow · commit bf1a7bd26dd4 · 2025-02-18T17:45:29.000+11:00
Bumps [SonarSource/sonarqube-scan-action](https://github.com/sonarsource/sonarqube-scan-action) from 4 to 5. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sonarsource/sonarqube-scan-action/releases">SonarSource/sonarqube-scan-action's releases</a>.</em></p> <blockquote> <h2>v5.0.0</h2> <h2>What's Changed</h2> <ul> <li>SQSCANGHA-81 Update SonarScanner CLI to 7.0.2.4839 by <a href="https://github.com/github-actions"><code>@​github-actions</code></a> in <a href="https://redirect.github.com/SonarSource/sonarqube-scan-action/pull/175">SonarSource/sonarqube-scan-action#175</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/SonarSource/sonarqube-scan-action/compare/v4...v5.0.0">https://github.com/SonarSource/sonarqube-scan-action/compare/v4...v5.0.0</a></p> <h2>v4.2.1</h2> <h2>What's Changed</h2> <ul> <li>SQSCANGHA-77 Change title back to SonarQube Scan Action by <a href="https://github.com/antonioaversa"><code>@​antonioaversa</code></a> in <a href="https://redirect.github.com/SonarSource/sonarqube-scan-action/pull/166">SonarSource/sonarqube-scan-action#166</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/SonarSource/sonarqube-scan-action/compare/v4.2.0...v4.2.1">https://github.com/SonarSource/sonarqube-scan-action/compare/v4.2.0...v4.2.1</a></p> <h2>v4.2.0</h2> <p>We are happy to announce this new version of the GitHub action, which brings <strong>support for C, C++, and Objective-C projects</strong>.</p> <p>The action supports both AutoConfig scenarios, as well as scenarios where Build Wrapper is required, and is a complete replacement of <a href="https://github.com/SonarSource/sonarqube-github-c-cpp"><code>sonarqube-github-c-cpp</code></a> and <a href="https://github.com/SonarSource/sonarcloud-github-c-cpp"><code>sonarcloud-github-c-cpp</code></a>.</p> <p>To install Build Wrapper, a new <code>sonarqube-scan-action/install-build-wrapper</code> sub-action is provided.</p> <p>Check <a href="https://github.com/SonarSource/sonarqube-scan-action/tree/v4.2.0">the README</a> for examples of configuration.</p> <p>On top of C, C++, and Objective-C support, we have also improved our support of self-hosted GitHub runners:</p> <ul> <li>we don't expect anymore the temporary runner folder (<code>RUNNER_TEMP</code>) to be cleaned after every job execution: if present, the action will clean it, before running</li> <li>similarly, we don't expect anymore the Sonar SSL folder (<code>~/sonar/ssl</code>) to be cleaned after every job execution: if present, the action will clean it, before running</li> </ul> <h2>What's Changed</h2> <ul> <li>SQSCANGHA-64 Shorten action description to respect 125 chars limit by <a href="https://github.com/antonioaversa"><code>@​antonioaversa</code></a> in <a href="https://redirect.github.com/SonarSource/sonarqube-scan-action/pull/157">SonarSource/sonarqube-scan-action#157</a></li> <li>SQCPPGHA-9 Extend action to support C, C++, and Objective-C projects by <a href="https://github.com/antonioaversa"><code>@​antonioaversa</code></a> in <a href="https://redirect.github.com/SonarSource/sonarqube-scan-action/pull/161">SonarSource/sonarqube-scan-action#161</a></li> <li>README: required programs for self-hosted and container by <a href="https://github.com/trgalho"><code>@​trgalho</code></a> in <a href="https://redirect.github.com/SonarSource/sonarqube-scan-action/pull/162">SonarSource/sonarqube-scan-action#162</a></li> <li>Force unzip without prompt in sonar scanner installation when files already exist by <a href="https://github.com/blgnksy"><code>@​blgnksy</code></a> in <a href="https://redirect.github.com/SonarSource/sonarqube-scan-action/pull/163">SonarSource/sonarqube-scan-action#163</a></li> <li>SQSCANGHA-75 Support self-hosted runners not clearing temp after run by <a href="https://github.com/antonioaversa"><code>@​antonioaversa</code></a> in <a href="https://redirect.github.com/SonarSource/sonarqube-scan-action/pull/164">SonarSource/sonarqube-scan-action#164</a></li> <li>SQSCANGHA-76 Support self-hosted runners not clearing truststore after run by <a href="https://github.com/antonioaversa"><code>@​antonioaversa</code></a> in <a href="https://redirect.github.com/SonarSource/sonarqube-scan-action/pull/165">SonarSource/sonarqube-scan-action#165</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/trgalho"><code>@​trgalho</code></a> made their first contribution in <a href="https://redirect.github.com/SonarSource/sonarqube-scan-action/pull/162">SonarSource/sonarqube-scan-action#162</a></li> <li><a href="https://github.com/blgnksy"><code>@​blgnksy</code></a> made their first contribution in <a href="https://redirect.github.com/SonarSource/sonarqube-scan-action/pull/163">SonarSource/sonarqube-scan-action#163</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/SonarSource/sonarqube-scan-action/compare/v4.1.0...v4.2.0">https://github.com/SonarSource/sonarqube-scan-action/compare/v4.1.0...v4.2.0</a></p> <h2>v4.1.0</h2> <p>The new version is now the official entrypoint for both Server and Cloud: a single GitHub action to interact with the SonarQube solution, whether on-premise or in the cloud!</p> <p>It also brings several other improvements, including:</p> <ul> <li>the ability to customize the location from where the SonarScanner CLI is downloaded, which can be useful when the runner is self-hosted and has regulated or no access to the Internet</li> <li>the ability to use <code>curl</code> as a fallback <code>when</code> wget is not available in the environment of the runner</li> <li>the requirement of the Java <code>keytool</code> to be available has been lifted</li> </ul> <h2>What's Changed</h2> <ul> <li>SQSCANGHA-51 Make Scanner CLI binaries URL customizable by <a href="https://github.com/antonioaversa"><code>@​antonioaversa</code></a> in <a href="https://redirect.github.com/SonarSource/sonarqube-scan-action/pull/148">SonarSource/sonarqube-scan-action#148</a></li> <li>SQSCANGHA-55 Support GitHub self-hosted runners without wget by <a href="https://github.com/antonioaversa"><code>@​antonioaversa</code></a> in <a href="https://redirect.github.com/SonarSource/sonarqube-scan-action/pull/151">SonarSource/sonarqube-scan-action#151</a></li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/SonarSource/sonarqube-scan-action/commit/0303d6b62e310685c0e34d0b9cde218036885c4d"><code>0303d6b</code></a> Update SonarScanner CLI to 7.0.2.4839</li> <li><a href="https://github.com/SonarSource/sonarqube-scan-action/commit/3ed756013884aab36deebbaf6137d78e6533a664"><code>3ed7560</code></a> SQSCANGHA-82 Automate the update of the Scanner CLI version</li> <li><a href="https://github.com/SonarSource/sonarqube-scan-action/commit/73cb22d49a457b7fc2ba581a30e5b9263161d38c"><code>73cb22d</code></a> Fix permission of the version_update workflow</li> <li><a href="https://github.com/SonarSource/sonarqube-scan-action/commit/994c850d7abc29e4de895f15cf8d39cb51188317"><code>994c850</code></a> SQSCANGHA-81 Update SonarScanner CLI to 7.0.1.4817 (<a href="https://redirect.github.com/sonarsource/sonarqube-scan-action/issues/171">#171</a>)</li> <li><a href="https://github.com/SonarSource/sonarqube-scan-action/commit/7622374390f1d39d4e18e945a12e0afb52e6eb7c"><code>7622374</code></a> SQSCANGHA-79 Update CODEOWNERS (<a href="https://redirect.github.com/sonarsource/sonarqube-scan-action/issues/170">#170</a>)</li> <li><a href="https://github.com/SonarSource/sonarqube-scan-action/commit/6bbc1364b808d558e21b9e63eefb12bfa8518194"><code>6bbc136</code></a> SQSCANGHA-59 Use the new way of having theme sensitive images.</li> <li><a href="https://github.com/SonarSource/sonarqube-scan-action/commit/d6b87b0febe175825faabc65211aea46da0de19a"><code>d6b87b0</code></a> DOC-403 Update links in the README.md file to the documentation (<a href="https://redirect.github.com/sonarsource/sonarqube-scan-action/issues/167">#167</a>)</li> <li>See full diff in <a href="https://github.com/sonarsource/sonarqube-scan-action/compare/v4...v5">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=SonarSource/sonarqube-scan-action&package-manager=github_actions&previous-version=4&new-version=5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
diff --git a/.github/workflows/sonarcloud.yaml b/.github/workflows/sonarcloud.yaml
@@ -88,7 +88,7 @@ jobs:
           overwrite: true
 
       - name: SonarQube Scan
-        uses: SonarSource/sonarqube-scan-action@v4
+        uses: SonarSource/sonarqube-scan-action@v5
         if: ${{ !cancelled() }}
         env:
           SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
