SCANMAVEN-317 Support encryption of sonar.token, and other new secure properties SCANMAVEN-332 support modular-jar artifact type SCANMAVEN-341 Rework the support of encrypted properties
Maintenance
SCANMAVEN-370 Prepare next development iteration 5.7.0 SCANMAVEN-372 Configure Renovate for sonar-scanner-maven SCANMAVEN-373 SubmitReview: Use Vault token SCANMAVEN-374 Unpin internal GitHub actions SCANMAVEN-376 Use SonarSource/.../sonar-update-center-release@v1 instead of @master SCANMAVEN-377 Update dependency org.assertj:assertj-core to v3.27.7 [SECURITY]
SCANMAVEN-318 Update Orchestrator and fix e2e matrix SCANMAVEN-324 Convert e2e tests to invoker SCANMAVEN-346 Fix CI failure SCANMAVEN-347 Automate detection of sonar:sonar shorthand failure SCANMAVEN-348 Bump org.assertj:assertj-core from 3.26.3 to 3.27.7 in /sonar-maven-plugin SCANMAVEN-349 Remove Maven 4 e2e tests from promotion requirements SCANMAVEN-356 Add automated release workflow SCANMAVEN-357 Licence packaging standard - Maven Scanner SCANMAVEN-358 Create SonarUpdateCenterRelease.yml SCANMAVEN-361 Add issue-categories in automated release SCANMAVEN-363 Fix e2e tests with Maven 4 SCANMAVEN-364 Do not run nightly builds on weekends SCANMAVEN-365 Set up orchestrator cache SCANMAVEN-366 Update sonar-scanner-java-library to 4.1.0.1619 SCANMAVEN-367 Update sonar-scanner-java-library to 4.1.1.1633 SCANMAVEN-369 Update parent pom to 87.0.0.3057
Feature
SCANMAVEN-281 Irrelevant encrypted properties are not filtered out in multi-module project with "sonar" in the name
Configuration
📅Schedule: (UTC)
Branch creation
At any time (no schedule defined)
Automerge
At any time (no schedule defined)
🚦Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕Ignore: Close this PR and you won't be reminded about this update again.
If you want to rebase/retry this PR, check this box
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [org.sonarsource.scanner.maven:sonar-maven-plugin](https://docs.sonarsource.com/sonarqube-server/latest/extension-guide/developing-a-plugin/plugin-basics/) ([source](https://github.com/SonarSource/sonar-scanner-maven)) | build | minor | `5.5.0.6356` → `5.7.0.6970` |
---
### Release Notes
<details>
<summary>SonarSource/sonar-scanner-maven (org.sonarsource.scanner.maven:sonar-maven-plugin)</summary>
### [`v5.7.0.6970`](https://github.com/SonarSource/sonar-scanner-maven/releases/tag/5.7.0.6970)
[Compare Source](https://github.com/SonarSource/sonar-scanner-maven/compare/5.6.0.6792...5.7.0.6970)
### Release notes - Sonar Scanner for Maven - 5.7
##### Feature
[SCANMAVEN-317](https://sonarsource.atlassian.net/browse/SCANMAVEN-317) Support encryption of sonar.token, and other new secure properties
[SCANMAVEN-332](https://sonarsource.atlassian.net/browse/SCANMAVEN-332) support `modular-jar` artifact type
[SCANMAVEN-341](https://sonarsource.atlassian.net/browse/SCANMAVEN-341) Rework the support of encrypted properties
##### Maintenance
[SCANMAVEN-370](https://sonarsource.atlassian.net/browse/SCANMAVEN-370) Prepare next development iteration 5.7.0
[SCANMAVEN-372](https://sonarsource.atlassian.net/browse/SCANMAVEN-372) Configure Renovate for sonar-scanner-maven
[SCANMAVEN-373](https://sonarsource.atlassian.net/browse/SCANMAVEN-373) SubmitReview: Use Vault token
[SCANMAVEN-374](https://sonarsource.atlassian.net/browse/SCANMAVEN-374) Unpin internal GitHub actions
[SCANMAVEN-376](https://sonarsource.atlassian.net/browse/SCANMAVEN-376) Use SonarSource/.../sonar-update-center-release\@​v1 instead of [@​master](https://github.com/master)
[SCANMAVEN-377](https://sonarsource.atlassian.net/browse/SCANMAVEN-377) Update dependency org.assertj:assertj-core to v3.27.7 \[SECURITY]
### [`v5.6.0.6792`](https://github.com/SonarSource/sonar-scanner-maven/releases/tag/5.6.0.6792)
[Compare Source](https://github.com/SonarSource/sonar-scanner-maven/compare/5.5.0.6356...5.6.0.6792)
### Release notes - Sonar Scanner for Maven - 5.6
##### Maintenance
[SCANMAVEN-318](https://sonarsource.atlassian.net/browse/SCANMAVEN-318) Update Orchestrator and fix e2e matrix
[SCANMAVEN-324](https://sonarsource.atlassian.net/browse/SCANMAVEN-324) Convert e2e tests to invoker
[SCANMAVEN-346](https://sonarsource.atlassian.net/browse/SCANMAVEN-346) Fix CI failure
[SCANMAVEN-347](https://sonarsource.atlassian.net/browse/SCANMAVEN-347) Automate detection of sonar:sonar shorthand failure
[SCANMAVEN-348](https://sonarsource.atlassian.net/browse/SCANMAVEN-348) Bump org.assertj:assertj-core from 3.26.3 to 3.27.7 in /sonar-maven-plugin
[SCANMAVEN-349](https://sonarsource.atlassian.net/browse/SCANMAVEN-349) Remove Maven 4 e2e tests from promotion requirements
[SCANMAVEN-356](https://sonarsource.atlassian.net/browse/SCANMAVEN-356) Add automated release workflow
[SCANMAVEN-357](https://sonarsource.atlassian.net/browse/SCANMAVEN-357) Licence packaging standard - Maven Scanner
[SCANMAVEN-358](https://sonarsource.atlassian.net/browse/SCANMAVEN-358) Create SonarUpdateCenterRelease.yml
[SCANMAVEN-361](https://sonarsource.atlassian.net/browse/SCANMAVEN-361) Add issue-categories in automated release
[SCANMAVEN-363](https://sonarsource.atlassian.net/browse/SCANMAVEN-363) Fix e2e tests with Maven 4
[SCANMAVEN-364](https://sonarsource.atlassian.net/browse/SCANMAVEN-364) Do not run nightly builds on weekends
[SCANMAVEN-365](https://sonarsource.atlassian.net/browse/SCANMAVEN-365) Set up orchestrator cache
[SCANMAVEN-366](https://sonarsource.atlassian.net/browse/SCANMAVEN-366) Update sonar-scanner-java-library to 4.1.0.1619
[SCANMAVEN-367](https://sonarsource.atlassian.net/browse/SCANMAVEN-367) Update sonar-scanner-java-library to 4.1.1.1633
[SCANMAVEN-369](https://sonarsource.atlassian.net/browse/SCANMAVEN-369) Update parent pom to 87.0.0.3057
##### Feature
[SCANMAVEN-281](https://sonarsource.atlassian.net/browse/SCANMAVEN-281) Irrelevant encrypted properties are not filtered out in multi-module project with "sonar" in the name
</details>
---
### Configuration
📅 **Schedule**: (UTC)
- Branch creation
- At any time (no schedule defined)
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMzIuMyIsInVwZGF0ZWRJblZlciI6IjQ0LjMuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
renovate
force-pushed renovate/org.sonarsource.scanner.maven-sonar-maven-plugin-5.x from 0b4843d803 to 6814b336ff2026-05-27 15:06:36 +02:00Compare
renovate
changed title from Update dependency org.sonarsource.scanner.maven:sonar-maven-plugin to v5.6.0.6792 to Update dependency org.sonarsource.scanner.maven:sonar-maven-plugin to v5.7.0.69702026-05-27 15:06:39 +02:00
You are not authorized to merge this pull request.
This pull request can be merged automatically.
View command line instructions
Checkout
From your project repository, check out a new branch and test the changes.
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
This PR contains the following updates:
5.5.0.6356→5.7.0.6970Release Notes
SonarSource/sonar-scanner-maven (org.sonarsource.scanner.maven:sonar-maven-plugin)
v5.7.0.6970Compare Source
Release notes - Sonar Scanner for Maven - 5.7
Feature
SCANMAVEN-317 Support encryption of sonar.token, and other new secure properties
SCANMAVEN-332 support
modular-jarartifact typeSCANMAVEN-341 Rework the support of encrypted properties
Maintenance
SCANMAVEN-370 Prepare next development iteration 5.7.0
SCANMAVEN-372 Configure Renovate for sonar-scanner-maven
SCANMAVEN-373 SubmitReview: Use Vault token
SCANMAVEN-374 Unpin internal GitHub actions
SCANMAVEN-376 Use SonarSource/.../sonar-update-center-release@v1 instead of @master
SCANMAVEN-377 Update dependency org.assertj:assertj-core to v3.27.7 [SECURITY]
v5.6.0.6792Compare Source
Release notes - Sonar Scanner for Maven - 5.6
Maintenance
SCANMAVEN-318 Update Orchestrator and fix e2e matrix
SCANMAVEN-324 Convert e2e tests to invoker
SCANMAVEN-346 Fix CI failure
SCANMAVEN-347 Automate detection of sonar:sonar shorthand failure
SCANMAVEN-348 Bump org.assertj:assertj-core from 3.26.3 to 3.27.7 in /sonar-maven-plugin
SCANMAVEN-349 Remove Maven 4 e2e tests from promotion requirements
SCANMAVEN-356 Add automated release workflow
SCANMAVEN-357 Licence packaging standard - Maven Scanner
SCANMAVEN-358 Create SonarUpdateCenterRelease.yml
SCANMAVEN-361 Add issue-categories in automated release
SCANMAVEN-363 Fix e2e tests with Maven 4
SCANMAVEN-364 Do not run nightly builds on weekends
SCANMAVEN-365 Set up orchestrator cache
SCANMAVEN-366 Update sonar-scanner-java-library to 4.1.0.1619
SCANMAVEN-367 Update sonar-scanner-java-library to 4.1.1.1633
SCANMAVEN-369 Update parent pom to 87.0.0.3057
Feature
SCANMAVEN-281 Irrelevant encrypted properties are not filtered out in multi-module project with "sonar" in the name
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate CLI.
0b4843d803to6814b336ffUpdate dependency org.sonarsource.scanner.maven:sonar-maven-plugin to v5.6.0.6792to Update dependency org.sonarsource.scanner.maven:sonar-maven-plugin to v5.7.0.6970View command line instructions
Checkout
From your project repository, check out a new branch and test the changes.