fix(deps): update all non-major dependencies by renovate[bot] · Pull Request #1565 · SonarSource/sonar-php

renovate · 2025-11-16T23:26:13Z

This PR contains the following updates:

Package	Change	Age	Confidence
org.sonarqube	`7.0.1.6134` → `7.2.3.7755`
ch.qos.logback:logback-classic (source, changelog)	`1.5.26` → `1.5.32`
org.mockito:mockito-core	`5.20.0` → `5.23.0`
org.junit.jupiter:junit-jupiter (source)	`6.0.0` → `6.0.3`
org.sonarsource.sslr:sslr-testing-harness	`1.24.0.633` → `1.25.1.3886`
org.sonarsource.sslr:sslr-core	`1.24.0.633` → `1.25.1.3886`
org.sonarsource.sonarlint.core:sonarlint-rpc-impl (source)	`10.34.1.83453` → `10.47.0.84936`
org.sonarsource.sonarlint.core:sonarlint-rpc-java-client (source)	`10.34.1.83453` → `10.47.0.84936`
org.sonarsource.sonarlint.core:sonarlint-core (source)	`10.34.1.83453` → `10.47.0.84936`
org.sonarsource.sonarqube:sonar-ws (source)	`26.2.0.118776` → `26.3.0.120487`
org.sonarsource.sonarqube:sonar-testing-harness (source)	`26.2.0.118776` → `26.3.0.120487`
org.sonarsource.sonarqube:sonar-plugin-api-impl (source)	`26.2.0.118776` → `26.3.0.120487`
org.sonarsource.analyzer-commons:sonar-regex-parsing (source)	`2.18.0.3393` → `2.21.0.4626`
org.sonarsource.analyzer-commons:sonar-analyzer-test-commons (source)	`2.18.0.3393` → `2.21.0.4626`
org.sonarsource.analyzer-commons:sonar-analyzer-commons (source)	`2.18.0.3393` → `2.21.0.4626`

Release Notes

mockito/mockito (org.mockito:mockito-core)

`v5.23.0`

^{^{Changelog generated by Shipkit Changelog Gradle Plugin}}

5.23.0

2026-03-11 - 6 commit(s) by Brice Dutheil, Joshua Selbo, Philippe Kernevez
Replace mockito-android mock maker implementation with dexmaker-mockito-inline (#3792)
Fix StackOverflowError with AbstractList after using mockSingleton (#3790)
Mark parameters of Mockito.when @Nullable (#3503)

`v5.22.0`

Compare Source

`v5.21.0`

^{^{Changelog generated by Shipkit Changelog Gradle Plugin}}

5.21.0

2025-12-09 - 17 commit(s) by Giulio Longfils, Joshua Selbo, Woongi9, Zylox, dependabot[bot]
Bump graalvm/setup-graalvm from 1.4.3 to 1.4.4 (#3768)
Bump graalvm/setup-graalvm from 1.4.2 to 1.4.3 (#3767)
Bump actions/checkout from 5 to 6 (#3765)
Adds output of matchers to potential mismatch; Fixes #2468 (#3760)
Forbid mocking WeakReference with inline mock maker (#3759)
StackOverflowError when mocking WeakReference (#3758)
Bump actions/upload-artifact from 4 to 5 (#3756)
Bump graalvm/setup-graalvm from 1.4.1 to 1.4.2 (#3755)
Support primitives in GenericArrayReturnType. (#3753)
ClassNotFoundException when stubbing array of primitive type on Android (#3752)
Bump graalvm/setup-graalvm from 1.4.0 to 1.4.1 (#3744)
Bump gradle/actions from 4 to 5 (#3743)
Bump org.graalvm.buildtools.native from 0.11.0 to 0.11.1 (#3738)
Bump com.diffplug.spotless:spotless-plugin-gradle from 7.2.1 to 8.0.0 (#3735)
Bump graalvm/setup-graalvm from 1.3.7 to 1.4.0 (#3734)
Bump org.assertj:assertj-core from 3.27.5 to 3.27.6 (#3733)
Bump errorprone from 2.41.0 to 2.42.0 (#3732)
Feat: automatically detect class to mock in mockStatic and mockConstruction (#3731)
Return completed futures for unstubbed Future/CompletionStage in ReturnsEmptyValues (#3727)
automatically detect class to mock (#2779)
Incorrect "has following stubbing(s) with different arguments" message when using Argument Matchers (#2468)

SonarSource/sslr (org.sonarsource.sslr:sslr-testing-harness)

`v1.25.1.3886`

Compare Source

1.25.1.3886

`v1.25.0.3878`

1.25.0.3878

SonarSource/sonarqube (org.sonarsource.sonarqube:sonar-ws)

`v26.3.0.120487`

Compare Source

`v26.2.0.119303`

See details in the community announcement, and more in the release notes.

SonarSource/sonar-analyzer-commons (org.sonarsource.analyzer-commons:sonar-regex-parsing)

`v2.21.0.4626`

Compare Source

Rotations of binary signing keys

`v2.20.0.4607`

Compare Source

Release notes - Sonar Analyzer Commons - 2.20

Task

ACOMMONS-36 Prepare next development iteration

Improvement

ACOMMONS-40 Improve internal xml parser to support long attributes

`v2.19.0.3575`

Compare Source

What's Changed

Prepare next development iteration by @Godin in #369
BUILD-8875: Migrate to standardized GitHub runner names by @SonarTech in #368
ACOMMONS-34 Expose Standards OWASP LLM Top 10 2025, OWASP Top 10 2025, ASVS 5.0, STIG ASD_V6, MASVS 2 metadata by @nicolas-gauthier-sonarsource in #370
ACOMMONS-35 Remove commons-lang dependency by @nicolas-gauthier-sonarsource in #371

New Contributors

@SonarTech made their first contribution in #368
@nicolas-gauthier-sonarsource made their first contribution in #370

Full Changelog: SonarSource/sonar-analyzer-commons@2.18.0.3393...2.19.0.3575

Configuration

📅 Schedule: Branch creation - "before 4am on Monday" in timezone CET, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

sonarqube-next · 2025-11-25T13:06:01Z

Quality Gate passed

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
0 Dependency risks
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarQube

sonarqube-next · 2025-12-22T14:23:52Z

Quality Gate passed

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
0 Dependency risks
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarQube

sonarqube-next · 2026-03-04T16:14:32Z

Quality Gate passed

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
0 Dependency risks
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarQube

sonar-review-alpha

Routine automated dependency bump — all updates are non-major. The SSLR parser bump (1.24 → 1.25.1) is worth noting as a core AST dependency, but the passing quality gate (with full test suite) gives confidence there are no regressions.

🗣️ Give feedback

…API changes Replace removed FeatureFlagsDto with Set<BackendCapability> in SonarLint RPC initialization to align with the breaking API change in sonarlint-core 10.47.0.84936. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

sonarqube-next · 2026-03-23T12:36:06Z

Quality Gate passed

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
0 Dependency risks
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarQube

sonar-review-alpha

Conclusion: Straightforward dependency bump PR with a clean API adaptation for the sonarlint-core 10.47 breaking change. The migration from positional boolean FeatureFlagsDto to named BackendCapability enum values is correct — all previously-true flags are present, previously-false ones are correctly absent from the EnumSet.

🗣️ Give feedback

renovate · 2026-03-23T15:02:20Z

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

renovate Bot added the dependencies Pull requests that update a dependency file label Nov 16, 2025

renovate Bot requested a review from a team November 16, 2025 23:26

renovate Bot added the dependencies Pull requests that update a dependency file label Nov 16, 2025

renovate Bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from 9da3509 to 60cb9d0 Compare November 24, 2025 19:01

renovate Bot force-pushed the renovate/all-minor-patch branch from 60cb9d0 to 5d32e15 Compare November 25, 2025 13:01

renovate Bot force-pushed the renovate/all-minor-patch branch 9 times, most recently from f5581fe to ba3cf9f Compare December 9, 2025 05:02

renovate Bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from 15c2ce6 to 3b021f2 Compare December 16, 2025 20:09

renovate Bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from cd0d979 to aae5e29 Compare December 22, 2025 14:18

renovate Bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from edc7472 to 02533a9 Compare January 6, 2026 14:55

renovate Bot force-pushed the renovate/all-minor-patch branch from 5fd2c99 to 40f700b Compare February 4, 2026 10:38

renovate Bot changed the title ~~Update all non-major dependencies~~ fix(deps): update all non-major dependencies Feb 5, 2026

renovate Bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from ba65cd0 to 39c58b1 Compare February 13, 2026 15:43

renovate Bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from 150e4d7 to 34b162c Compare February 16, 2026 11:53

renovate Bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 5de4081 to 3ea04c4 Compare February 27, 2026 10:43

renovate Bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from 779e6ca to b0bba7d Compare March 4, 2026 16:06

renovate Bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 5e2e745 to dcff8e4 Compare March 13, 2026 12:57

fix(deps): update all non-major dependencies

6e3bdc2

nils-werner-sonarsource force-pushed the renovate/all-minor-patch branch from dcff8e4 to 6e3bdc2 Compare March 23, 2026 08:20

nils-werner-sonarsource changed the title ~~fix(deps): update all non-major dependencies~~ Update all non-major dependencies Mar 23, 2026

sonar-review-alpha Bot reviewed Mar 23, 2026

View reviewed changes

renovate Bot changed the title ~~Update all non-major dependencies~~ fix(deps): update all non-major dependencies Mar 23, 2026

nils-werner-sonarsource changed the title ~~fix(deps): update all non-major dependencies~~ Update all non-major dependencies Mar 23, 2026

renovate Bot changed the title ~~Update all non-major dependencies~~ fix(deps): update all non-major dependencies Mar 23, 2026

sonar-review-alpha Bot reviewed Mar 23, 2026

View reviewed changes

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

fix(deps): update all non-major dependencies#1565

fix(deps): update all non-major dependencies#1565
renovate[bot] wants to merge 2 commits intomasterfrom
renovate/all-minor-patch

renovate Bot commented Nov 16, 2025 •

edited by atlassian Bot

Loading

Uh oh!

sonarqube-next Bot commented Nov 25, 2025

Uh oh!

sonarqube-next Bot commented Dec 22, 2025

Uh oh!

sonarqube-next Bot commented Mar 4, 2026

Uh oh!

sonar-review-alpha Bot left a comment

Uh oh!

sonarqube-next Bot commented Mar 23, 2026

Uh oh!

sonar-review-alpha Bot left a comment

Uh oh!

renovate Bot commented Mar 23, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

renovate Bot commented Nov 16, 2025 • edited by atlassian Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

5.23.0

5.21.0

Release notes - Sonar Analyzer Commons - 2.20

Task

Improvement

What's Changed

New Contributors

Configuration

Uh oh!

sonarqube-next Bot commented Nov 25, 2025

Quality Gate passed

Uh oh!

sonarqube-next Bot commented Dec 22, 2025

Quality Gate passed

Uh oh!

sonarqube-next Bot commented Mar 4, 2026

Quality Gate passed

Uh oh!

sonar-review-alpha Bot left a comment

Choose a reason for hiding this comment

Uh oh!

sonarqube-next Bot commented Mar 23, 2026

Quality Gate passed

Uh oh!

sonar-review-alpha Bot left a comment

Choose a reason for hiding this comment

Uh oh!

renovate Bot commented Mar 23, 2026

Edited/Blocked Notification

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

renovate Bot commented Nov 16, 2025 •

edited by atlassian Bot

Loading