You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@daffodil.apache.org by sl...@apache.org on 2026/01/27 17:19:15 UTC
(daffodil) branch main updated: Bump SonarSource/sonarqube-scan-action from 5.3.1 to 7.0.0
This is an automated email from the ASF dual-hosted git repository.
slawrence pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/daffodil.git
The following commit(s) were added to refs/heads/main by this push:
new 52102af99 Bump SonarSource/sonarqube-scan-action from 5.3.1 to 7.0.0
52102af99 is described below
commit 52102af997e7d216d33728bf0c2ebfe9e6fc7d5e
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Tue Dec 9 19:01:57 2025 +0000
Bump SonarSource/sonarqube-scan-action from 5.3.1 to 7.0.0
Bumps [SonarSource/sonarqube-scan-action](https://github.com/sonarsource/sonarqube-scan-action) from 5.3.1 to 7.0.0.
- [Release notes](https://github.com/sonarsource/sonarqube-scan-action/releases)
- [Commits](https://github.com/sonarsource/sonarqube-scan-action/compare/1a6d90ebcb0e6a6b1d87e37ba693fe453195ae25...a31c9398be7ace6bbfaf30c0bd5d415f843d45e9)
---
updated-dependencies:
- dependency-name: SonarSource/sonarqube-scan-action
dependency-version: 7.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <su...@github.com>
---
.github/workflows/main.yml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 6ff9fe01a..a20cc932c 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -223,7 +223,7 @@ jobs:
- name: Run SonarCloud Scan
if: ${{ env.SONARSCAN == 'true' }}
- uses: SonarSource/sonarqube-scan-action@1a6d90ebcb0e6a6b1d87e37ba693fe453195ae25 # v5.3.1
+ uses: SonarSource/sonarqube-scan-action@a31c9398be7ace6bbfaf30c0bd5d415f843d45e9 # v7.0.0
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}