Skip to content

Update major dependencies (major)#331

Draft
renovate[bot] wants to merge 1 commit intodevelopfrom
renovate/major-major-dependencies
Draft

Update major dependencies (major)#331
renovate[bot] wants to merge 1 commit intodevelopfrom
renovate/major-major-dependencies

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Dec 10, 2025

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
com.diffplug.spotless:spotless-maven-plugin 2.46.13.4.0 age confidence
org.sonarsource.scanner.maven:sonar-maven-plugin (source) 3.7.0.17465.5.0.6356 age confidence
com.google.j2objc:j2objc-annotations 2.83.1 age confidence
com.google.guava:guava 32.0.1-jre33.5.0-jre age confidence
org.springdoc:springdoc-openapi-starter-webmvc-ui (source) 2.8.133.0.2 age confidence
org.springdoc:springdoc-openapi-starter-common (source) 2.8.133.0.2 age confidence
org.springframework.boot:spring-boot-maven-plugin (source) 3.5.114.0.4 age confidence
org.springframework.boot:spring-boot-starter-test (source) 3.5.114.0.4 age confidence
org.springframework.boot:spring-boot-dependencies (source) 3.5.114.0.4 age confidence
org.springframework.boot:spring-boot-starter-parent (source) 3.5.114.0.4 age confidence

Release Notes

diffplug/spotless (com.diffplug.spotless:spotless-maven-plugin)

v3.3.0

Added
  • Allow specifying path to Biome JSON config file directly in biome step. Requires biome 2.x. (#​2548)
  • GitPrePushHookInstaller, a reusable library component for installing a Git pre-push hook that runs formatter checks. (#​2553)
  • Allow setting Eclipse XML config from a string, not only from files (#​2361)

v3.2.0

Added
  • Support for idea (#​2020, #​2535)
  • Add support for removing wildcard imports via removeWildcardImports step. (#​2517)
  • scalafmt: enforce version consistency between the version configured in Spotless and the version declared in Scalafmt config file (#​2460)
Fixed
  • SortPom disable expandEmptyElements, to avoid empty body warnings. (#​2520)
  • Fix biome formatter for new major release 2.x of biome (#​2537)
  • Make sure npm-based formatters use the correct node_modules directory when running in parallel. (#​2542)
Changed
  • Bump internal dependencies for npm-based formatters (#​2542)

v3.1.0

Added
  • Support forclang-format on maven-plugin (#​2406)
  • Allow overriding classLoader for all JarStates to enable spotless-cli (#​2427)

v3.0.0

[3.0.0] - 2025-01-06

SonarSource/sonar-scanner-maven (org.sonarsource.scanner.maven:sonar-maven-plugin)

v5.5.0.6356

Compare Source

Release notes - Sonar Scanner for Maven - 5.5

Task

SCANMAVEN-339 Update parent pom to 86.0.0.3040 and scanner-java-library to 3.5.2.1586

v5.4.0.6343

Compare Source

Release notes - Sonar Scanner for Maven - 5.4

Task

SCANMAVEN-323 Split build and SQ scan to speed-up the pipeline

SCANMAVEN-328 Create unified dogfooding GitHub action

SCANMAVEN-329 Prepare next development iteration

SCANMAVEN-331 Add Maven 4.0.0-rc5 to the test suite

SCANMAVEN-337 Update the scanner library to 3.5.1.1568

SCANMAVEN-338 Update parent pom

v5.3.0.6276

Compare Source

Release notes - Sonar Scanner for Maven - 5.3

Bug

SCANMAVEN-283 Mvn 4.0.0-rc-3 breaks scanner because change of API

SCANMAVEN-308 Toolchains are not properly discovered by the scanner with Maven 4

Task

SCANMAVEN-297 Update README.md with copy from Product Marketing

SCANMAVEN-301 PrepareNextIteration.yml: add recent improvements

SCANMAVEN-302 Update GH release and releasability actions

SCANMAVEN-303 Delete mend_scan_task

SCANMAVEN-305 Migrate Cirrus build to Github actions

SCANMAVEN-307 Migrate QA from Cirrus to Github action

SCANMAVEN-309 Prevent injection in PrepareNextIteration GHA

SCANMAVEN-310 Exclude test projects from SCA

SCANMAVEN-311 Upgrade dependencies

SCANMAVEN-314 Fix ProxyTest on GitHub actions

SCANMAVEN-315 Rework QA: split invoker-based ITs and Orchestrator-based e2e

SCANMAVEN-325 Update license header from SonarSource SA to SonarSource Sàrl

SCANMAVEN-326 Delete Cirrus CI config

SCANMAVEN-327 Use explicit build number

v5.2.0.4988

Compare Source

Release notes - Sonar Scanner for Maven - 5.2

New Feature

SCANMAVEN-296 Include github actions folder in the scan

Task

SCANMAVEN-286 Update Slack notification in .github/workflows/slack_notify.yml

SCANMAVEN-287 Bump orchestrator to version 5.5 or greater

SCANMAVEN-294 Update sonar-scanner-java-library to 3.4.0.514

SCANMAVEN-298 Populate name in pom.xml

SCANMAVEN-299 Exclude tests from publication.

v5.1.0.4751

Compare Source

Release notes - Sonar Scanner for Maven - 5.1

New Feature

SCANMAVEN-264 Add support for SonarQube Cloud regions

Bug

SCANMAVEN-228 Irrelevant encrypted properties should not be passed to the scanner engine

Task

SCANMAVEN-242 Migrate from single module to a multi-module structure

SCANMAVEN-250 Fix broken links coming from the relocation-pom's parent

SCANMAVEN-254 Update parent pom to version 81.0.0.2300

SCANMAVEN-257 Update headers for 2025

SCANMAVEN-258 Conditionally run tests using sonar.password in ITs

SCANMAVEN-260 Update CODEOWNERS after reorg

SCANMAVEN-261 Validate IT using the latest maven 4 release candidate 2

SCANMAVEN-262 Fix quality flaws: remove unnecessary public modifiers

SCANMAVEN-265 Upgrade sonar-scanner-java-library to latest version

SCANMAVEN-266 Analyze integration tests

SCANMAVEN-269 Prepare next development iteration 5.1

SCANMAVEN-271 Fix readability issues in ProxyTest

SCANMAVEN-272 Increase memory because maven 4.0.0-rc-2 fails with out of memory exception

SCANMAVEN-274 Fix quality flaws

SCANMAVEN-277 remove unused third-party-licenses.sh

SCANMAVEN-278 Fix quality flaws

SCANMAVEN-279 Clean up tech debt in Maven Scanner

SCANMAVEN-282 Update plexus-sec-dispatcher to fix CVE-2017-1000487

SCANMAVEN-284 Migrate releasability check to v2, fix property-dump-plugin to be excluded by releasability check (not released)

Improvement

SCANMAVEN-256 Remove (now redundant) server type logging

SCANMAVEN-276 ScannerEngineBootstrapper.isSuccessful() should be verified before calling getEngineFacade()

SCANMAVEN-280 Log the SonarQube Cloud Region

v5.0.0.4389

Compare Source

Release notes - Sonar Scanner for Maven - 5.0

Documentation

SCANMAVEN-231 Gather details for a community post about the new scanner JRE provisioning

SCANMAVEN-234 Document env variable `SONAR_SCANNER_JAVA_OPTS` and property `sonar.scanner.javaOpts` as options to tweak analysis runtime

SCANMAVEN-235 Update JRE auto-provisioning section to add the SonarScanner for Maven

SCANMAVEN-239 Update develop.md file for the new dump-plugin

SCANMAVEN-240 Remove outdated URL from pom.xml

Task

SCANMAVEN-229 Add Jira integration

SCANMAVEN-230 Update scanner library to support new bootstrapper

SCANMAVEN-236 Remove obsolete site folder

SCANMAVEN-237 Test sensor context config, system properties, and environment variables passed to the bootstrapped JRE

SCANMAVEN-238 Remove unauthenticated REST API call to SonarQube during IT

SCANMAVEN-246 Bump to version 5.0

SCANMAVEN-248 Add static documentation of the scanner

Improvement

SCANMAVEN-233 The SonarScanner for Maven provides a sane default value for `sonar.java.jdkHome`

SCANMAVEN-243 The SonarScanner for Maven does not try to contact the server when the project is skipped

v4.0.1.6619

Compare Source

Release notes - Sonar Scanner for Maven - 4.0.1

Maintenance

SCANMAVEN-352 Prepare branch 4.0

SCANMAVEN-353 Review dependency risks for version 4.0.1

SCANMAVEN-354 Prepare next development iteration 4.0.1

SCANMAVEN-355 Upgrade parent pom to version 86.0.0.3040

Feature

SCANMAVEN-335 Escalate log message about non-versioned usage from warning to error

v4.0.0.4121

Compare Source

Release notes - Sonar Scanner for Maven - 4.0

Bug

SCANMAVEN-183 Maven HTTPS proxies not taken into account

SCANMAVEN-217 Broken integration with maven encrypted secret

SCANMAVEN-218 The scanner should index pom.xml instead of generated pom

Improvement

SCANMAVEN-210 Move to Java 11 and drop Java 8 support

SCANMAVEN-214 scanAll should be disabled when `sonar.tests` is overridden

SCANMAVEN-215 scanAll exludes external report files

SCANMAVEN-216 scanAll includes Java and Kotlin files if `sonar.java.binaries` and `sonar.java.libraries` are set

SCANMAVEN-219 Support HTTPS Proxy System Properties

SCANMAVEN-224 Log a warning message when the version of the scanner is not specified

v3.11.0.3922

Compare Source

Release notes - Sonar Scanner for Maven - 3.11

Bug

MSONAR-205 Undesired behaviour when sonar.projectKey is specified in root pom or as user property

Documentation

MSONAR-203 Update license headers

Task

MSONAR-208 Migrate tests to JUnit 5

Improvement

MSONAR-202 Improve logging : log information about Maven options, Java version and the OS

MSONAR-204 "SonarQube version" is not displayed when communicating with SonarCloud

MSONAR-207 The scanner for Maven collects files outside of conventional sonar.sources

v3.10.0.2594

Compare Source

Release notes - Sonar Scanner for Maven - 3.10

New Feature

MSONAR-193 Set property `sonar.java.enablePreview` when Java's enablePreview feature is set

Task

MSONAR-184 Properly escape multi-valued properties if some paths contain comma

MSONAR-187 Upgrade github-action_release to v4

MSONAR-188 Stop leaking Maven classes in the scanner engine classloader

MSONAR-189 Add ITs with java 17

MSONAR-192 Run all tests nightly

MSONAR-195 Reduce the scope of the maven-compat dependency

MSONAR-198 Add Maven 4 tests to the pipeline

MSONAR-199 Use master build for peachee jobs

Improvement

MSONAR-190 Default sources to "src/main" instead of "src/main/java"

MSONAR-197 Maven Scanner relies on old slf4j version

v3.9.1.2184

Compare Source

v3.9.0.2155

Compare Source

v3.8.0.2131

Compare Source

google/j2objc (com.google.j2objc:j2objc-annotations)

v3.1: J2ObjC 3.1

Compare Source

J2ObjC 3.1 is an interim release that updates the j2objc-annotations Maven artifact, as well as includes all source changes since 3.0. We'll be releasing more frequently as we start moving the build to use Bazel instead of Make.

What's Changed


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot force-pushed the renovate/major-major-dependencies branch 9 times, most recently from b2c6f15 to f3540e2 Compare December 12, 2025 15:24
@renovate renovate bot force-pushed the renovate/major-major-dependencies branch 12 times, most recently from c21785f to 8ababbd Compare December 18, 2025 18:05
@renovate renovate bot force-pushed the renovate/major-major-dependencies branch 2 times, most recently from 0b62d8f to b7fcfc4 Compare January 5, 2026 08:12
@renovate renovate bot force-pushed the renovate/major-major-dependencies branch 6 times, most recently from 97337f3 to 0bb8030 Compare January 29, 2026 09:28
@renovate renovate bot force-pushed the renovate/major-major-dependencies branch from 0bb8030 to 33f119b Compare January 29, 2026 09:33
@renovate renovate bot force-pushed the renovate/major-major-dependencies branch 5 times, most recently from ae001cc to a16b773 Compare February 20, 2026 15:47
@renovate renovate bot force-pushed the renovate/major-major-dependencies branch 2 times, most recently from 5797845 to 25354a6 Compare March 3, 2026 01:06
@renovate renovate bot force-pushed the renovate/major-major-dependencies branch from 25354a6 to db6ef72 Compare March 18, 2026 22:00
@renovate renovate bot force-pushed the renovate/major-major-dependencies branch from db6ef72 to ce0847e Compare March 19, 2026 18:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants