Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Apr 1, 2025

Bumps org.sonarsource.scanner.maven:sonar-maven-plugin from 4.0.0.4121 to 5.1.0.4751.

Release notes

Sourced from org.sonarsource.scanner.maven:sonar-maven-plugin's releases.

5.1.0.4751

Release notes - Sonar Scanner for Maven - 5.1

New Feature

SCANMAVEN-264 Add support for SonarQube Cloud regions

Bug

SCANMAVEN-228 Irrelevant encrypted properties should not be passed to the scanner engine

Task

SCANMAVEN-242 Migrate from single module to a multi-module structure

SCANMAVEN-250 Fix broken links coming from the relocation-pom's parent

SCANMAVEN-254 Update parent pom to version 81.0.0.2300

SCANMAVEN-257 Update headers for 2025

SCANMAVEN-258 Conditionally run tests using sonar.password in ITs

SCANMAVEN-260 Update CODEOWNERS after reorg

SCANMAVEN-261 Validate IT using the latest maven 4 release candidate 2

SCANMAVEN-262 Fix quality flaws: remove unnecessary public modifiers

SCANMAVEN-265 Upgrade sonar-scanner-java-library to latest version

SCANMAVEN-266 Analyze integration tests

SCANMAVEN-269 Prepare next development iteration 5.1

SCANMAVEN-271 Fix readability issues in ProxyTest

SCANMAVEN-272 Increase memory because maven 4.0.0-rc-2 fails with out of memory exception

SCANMAVEN-274 Fix quality flaws

SCANMAVEN-277 remove unused third-party-licenses.sh

SCANMAVEN-278 Fix quality flaws

SCANMAVEN-279 Clean up tech debt in Maven Scanner

SCANMAVEN-282 Update plexus-sec-dispatcher to fix CVE-2017-1000487

SCANMAVEN-284 Migrate releasability check to v2, fix property-dump-plugin to be excluded by releasability check (not released)

... (truncated)

Commits
  • e284917 SCANMAVEN-284 Bump releasability workflow version (#294)
  • cb6dd58 SCANMAVEN-282 Update plexus-sec-dispatcher from 1.4 (sonatype) to 2.0 (codeha...
  • 460e710 SCANMAVEN-280 Log the SonarQube Cloud Region (#291)
  • 8e0570b SCANMAVEN-228 Ignore Irrelevant Encrypted Properties (#289)
  • 7d5574f SCANMAVEN-279 Clean up old code (#290)
  • c472cfd SCANMAVEN-271 Fix readability issues in ProxyTest (#279)
  • 0783ad3 SCANMAVEN-264 Add support for SonarQube Cloud regions (#284)
  • 8f52888 SCANMAVEN-278 Fix quality flaws (#288)
  • 4c796c8 SCANMAVEN-276 ScannerEngineBootstrapper.isSuccessful() should be verified bef...
  • a09d151 SCANMAVEN-242 update readme quality gate badge, because project key has chang...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [org.sonarsource.scanner.maven:sonar-maven-plugin](https://github.com/SonarSource/sonar-scanner-maven) from 4.0.0.4121 to 5.1.0.4751.
- [Release notes](https://github.com/SonarSource/sonar-scanner-maven/releases)
- [Commits](SonarSource/sonar-scanner-maven@4.0.0.4121...5.1.0.4751)

---
updated-dependencies:
- dependency-name: org.sonarsource.scanner.maven:sonar-maven-plugin
  dependency-version: 5.1.0.4751
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot requested a review from hantsy April 1, 2025 22:34
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Apr 1, 2025

Labels

The following labels could not be found: maven. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Apr 1, 2025
@qodo-code-review
Copy link

qodo-code-review bot commented Apr 1, 2025

CI Feedback 🧐

(Feedback updated until commit 82c94df)

A test triggered by this PR failed. Here is an AI-generated analysis of the failure:

Action: build-client

Failed stage: Install Dependencies & Build Docker Image [❌]

Failure summary:

The action failed during the npm installation process due to a Node.js version compatibility issue.
Specifically:

1. The error occurred during the postinstall script of [email protected] (line 1060-1063)
2. The root cause
is a syntax error in the nx package: SyntaxError: Unexpected token '??=' (line 194)
3. The nullish
coalescing assignment operator (??=) is not supported in Node.js 14.21.3 which is being used in the
runner
4. Multiple packages require Node.js version 16, 18 or higher, but the current environment is
using Node.js 14.21.3 (as shown in numerous "Unsupported engine" warnings)

Relevant error logs:
1:  ##[group]Operating System
2:  Ubuntu
...

179:  > [email protected] install /home/runner/work/angular-spring-reactive-sample/angular-spring-reactive-sample/ui/node_modules/lmdb
180:  > node-gyp-build-optional-packages
181:  > [email protected] postinstall /home/runner/work/angular-spring-reactive-sample/angular-spring-reactive-sample/ui/node_modules/@angular-devkit/build-angular/node_modules/esbuild
182:  > node install.js
183:  > [email protected] postinstall /home/runner/work/angular-spring-reactive-sample/angular-spring-reactive-sample/ui/node_modules/@angular/build/node_modules/esbuild
184:  > node install.js
185:  > [email protected] postinstall /home/runner/work/angular-spring-reactive-sample/angular-spring-reactive-sample/ui/node_modules/esbuild
186:  > node install.js
187:  > [email protected] postinstall /home/runner/work/angular-spring-reactive-sample/angular-spring-reactive-sample/ui/node_modules/vite/node_modules/esbuild
188:  > node install.js
189:  > [email protected] postinstall /home/runner/work/angular-spring-reactive-sample/angular-spring-reactive-sample/ui/node_modules/nx
190:  > node ./bin/post-install
191:  /home/runner/work/angular-spring-reactive-sample/angular-spring-reactive-sample/ui/node_modules/nx/src/utils/delayed-spinner.js:76
192:  opts ??= {};
193:  ^^^
194:  SyntaxError: Unexpected token '??='
195:  at wrapSafe (internal/modules/cjs/loader.js:1029:16)
...

300:  npm WARN notsup Not compatible with your version of node/npm: [email protected]
301:  npm WARN notsup Unsupported engine for [email protected]: wanted: {"node":">=16.17"} (current: {"node":"14.21.3","npm":"6.14.18"})
302:  npm WARN notsup Not compatible with your version of node/npm: [email protected]
303:  npm WARN notsup Unsupported engine for [email protected]: wanted: {"node":">= 18.12.0"} (current: {"node":"14.21.3","npm":"6.14.18"})
304:  npm WARN notsup Not compatible with your version of node/npm: [email protected]
305:  npm WARN notsup Unsupported engine for [email protected]: wanted: {"node":">=16"} (current: {"node":"14.21.3","npm":"6.14.18"})
306:  npm WARN notsup Not compatible with your version of node/npm: [email protected]
307:  npm WARN notsup Unsupported engine for [email protected]: wanted: {"node":">=18"} (current: {"node":"14.21.3","npm":"6.14.18"})
308:  npm WARN notsup Not compatible with your version of node/npm: [email protected]
309:  npm WARN notsup Unsupported engine for [email protected]: wanted: {"node":">=18"} (current: {"node":"14.21.3","npm":"6.14.18"})
310:  npm WARN notsup Not compatible with your version of node/npm: [email protected]
311:  npm WARN notsup Unsupported engine for [email protected]: wanted: {"node":">=18"} (current: {"node":"14.21.3","npm":"6.14.18"})
312:  npm WARN notsup Not compatible with your version of node/npm: [email protected]
313:  npm WARN notsup Unsupported engine for [email protected]: wanted: {"node":">=18"} (current: {"node":"14.21.3","npm":"6.14.18"})
314:  npm WARN notsup Not compatible with your version of node/npm: [email protected]
315:  npm WARN notsup Unsupported engine for [email protected]: wanted: {"node":">=16"} (current: {"node":"14.21.3","npm":"6.14.18"})
316:  npm WARN notsup Not compatible with your version of node/npm: [email protected]
317:  npm WARN notsup Unsupported engine for [email protected]: wanted: {"node":">=18.12"} (current: {"node":"14.21.3","npm":"6.14.18"})
...

346:  npm WARN notsup SKIPPING OPTIONAL DEPENDENCY: Unsupported platform for @napi-rs/[email protected]: wanted {"os":"freebsd","arch":"x64"} (current: {"os":"linux","arch":"x64"})
347:  npm WARN optional SKIPPING OPTIONAL DEPENDENCY: @napi-rs/[email protected] (node_modules/@napi-rs/nice/node_modules/@napi-rs/nice-android-arm-eabi):
348:  npm WARN notsup SKIPPING OPTIONAL DEPENDENCY: Unsupported platform for @napi-rs/[email protected]: wanted {"os":"android","arch":"arm"} (current: {"os":"linux","arch":"x64"})
349:  npm WARN optional SKIPPING OPTIONAL DEPENDENCY: @napi-rs/[email protected] (node_modules/@napi-rs/nice/node_modules/@napi-rs/nice-linux-arm64-musl):
350:  npm WARN notsup SKIPPING OPTIONAL DEPENDENCY: Unsupported platform for @napi-rs/[email protected]: wanted {"os":"linux","arch":"arm64"} (current: {"os":"linux","arch":"x64"})
351:  npm WARN optional SKIPPING OPTIONAL DEPENDENCY: @napi-rs/[email protected] (node_modules/@napi-rs/nice/node_modules/@napi-rs/nice-win32-arm64-msvc):
352:  npm WARN notsup SKIPPING OPTIONAL DEPENDENCY: Unsupported platform for @napi-rs/[email protected]: wanted {"os":"win32","arch":"arm64"} (current: {"os":"linux","arch":"x64"})
353:  npm WARN optional SKIPPING OPTIONAL DEPENDENCY: @napi-rs/[email protected] (node_modules/@napi-rs/nice/node_modules/@napi-rs/nice-linux-ppc64-gnu):
354:  npm WARN notsup SKIPPING OPTIONAL DEPENDENCY: Unsupported platform for @napi-rs/[email protected]: wanted {"os":"linux","arch":"ppc64"} (current: {"os":"linux","arch":"x64"})
355:  npm WARN optional SKIPPING OPTIONAL DEPENDENCY: @napi-rs/[email protected] (node_modules/@napi-rs/nice/node_modules/@napi-rs/nice-linux-s390x-gnu):
356:  npm WARN notsup SKIPPING OPTIONAL DEPENDENCY: Unsupported platform for @napi-rs/[email protected]: wanted {"os":"linux","arch":"s390x"} (current: {"os":"linux","arch":"x64"})
357:  npm WARN optional SKIPPING OPTIONAL DEPENDENCY: @napi-rs/[email protected] (node_modules/@napi-rs/nice/node_modules/@napi-rs/nice-linux-riscv64-gnu):
358:  npm WARN notsup SKIPPING OPTIONAL DEPENDENCY: Unsupported platform for @napi-rs/[email protected]: wanted {"os":"linux","arch":"riscv64"} (current: {"os":"linux","arch":"x64"})
359:  npm WARN notsup Unsupported engine for @testing-library/[email protected]: wanted: {"node":">=18"} (current: {"node":"14.21.3","npm":"6.14.18"})
360:  npm WARN notsup Not compatible with your version of node/npm: @testing-library/[email protected]
361:  npm WARN notsup Unsupported engine for [email protected]: wanted: {"node":">= 16"} (current: {"node":"14.21.3","npm":"6.14.18"})
362:  npm WARN notsup Not compatible with your version of node/npm: [email protected]
363:  npm WARN notsup Unsupported engine for [email protected]: wanted: {"node":">=18"} (current: {"node":"14.21.3","npm":"6.14.18"})
...

940:  npm WARN notsup Not compatible with your version of node/npm: [email protected]
941:  npm WARN notsup Unsupported engine for [email protected]: wanted: {"node":"^18.17.0 || >=20.5.0"} (current: {"node":"14.21.3","npm":"6.14.18"})
942:  npm WARN notsup Not compatible with your version of node/npm: [email protected]
943:  npm WARN notsup Unsupported engine for [email protected]: wanted: {"node":"^18.17.0 || >=20.5.0"} (current: {"node":"14.21.3","npm":"6.14.18"})
944:  npm WARN notsup Not compatible with your version of node/npm: [email protected]
945:  npm WARN notsup Unsupported engine for [email protected]: wanted: {"node":">=16"} (current: {"node":"14.21.3","npm":"6.14.18"})
946:  npm WARN notsup Not compatible with your version of node/npm: [email protected]
947:  npm WARN notsup Unsupported engine for [email protected]: wanted: {"node":">=16"} (current: {"node":"14.21.3","npm":"6.14.18"})
948:  npm WARN notsup Not compatible with your version of node/npm: [email protected]
949:  npm WARN notsup Unsupported engine for [email protected]: wanted: {"node":"^18.17.0 || >=20.5.0"} (current: {"node":"14.21.3","npm":"6.14.18"})
950:  npm WARN notsup Not compatible with your version of node/npm: [email protected]
951:  npm WARN notsup Unsupported engine for [email protected]: wanted: {"node":"^18.17.0 || >=20.5.0"} (current: {"node":"14.21.3","npm":"6.14.18"})
952:  npm WARN notsup Not compatible with your version of node/npm: [email protected]
953:  npm WARN notsup Unsupported engine for [email protected]: wanted: {"node":"^18.17.0 || >=20.5.0"} (current: {"node":"14.21.3","npm":"6.14.18"})
954:  npm WARN notsup Not compatible with your version of node/npm: [email protected]
955:  npm WARN notsup Unsupported engine for [email protected]: wanted: {"node":"^18.17.0 || >=20.5.0"} (current: {"node":"14.21.3","npm":"6.14.18"})
956:  npm WARN notsup Not compatible with your version of node/npm: [email protected]
957:  npm WARN notsup Unsupported engine for @npmcli/[email protected]: wanted: {"node":"^18.17.0 || >=20.5.0"} (current: {"node":"14.21.3","npm":"6.14.18"})
...

1048:  npm WARN notsup Not compatible with your version of node/npm: @typescript-eslint/[email protected]
1049:  npm WARN notsup Unsupported engine for @typescript-eslint/[email protected]: wanted: {"node":"^18.18.0 || >=20.0.0"} (current: {"node":"14.21.3","npm":"6.14.18"})
1050:  npm WARN notsup Not compatible with your version of node/npm: @typescript-eslint/[email protected]
1051:  npm WARN notsup Unsupported engine for [email protected]: wanted: {"node":">=16"} (current: {"node":"14.21.3","npm":"6.14.18"})
1052:  npm WARN notsup Not compatible with your version of node/npm: [email protected]
1053:  npm WARN notsup Unsupported engine for [email protected]: wanted: {"node":">=18"} (current: {"node":"14.21.3","npm":"6.14.18"})
1054:  npm WARN notsup Not compatible with your version of node/npm: [email protected]
1055:  npm WARN [email protected] requires a peer of @angular/compiler@>=2.3.1 <13.0.0 || ^12.0.0-next || ^12.1.0-next || ^12.2.0-next but none is installed. You must install peer dependencies yourself.
1056:  npm WARN [email protected] requires a peer of @angular/core@>=2.3.1 <13.0.0 || ^12.0.0-next || ^12.1.0-next || ^12.2.0-next but none is installed. You must install peer dependencies yourself.
1057:  npm WARN @mdx-js/[email protected] requires a peer of @types/react@>=16 but none is installed. You must install peer dependencies yourself.
1058:  npm ERR! code ELIFECYCLE
1059:  npm ERR! errno 1
1060:  npm ERR! [email protected] postinstall: `node ./bin/post-install`
1061:  npm ERR! Exit status 1
1062:  npm ERR! 
1063:  npm ERR! Failed at the [email protected] postinstall script.
1064:  npm ERR! This is probably not a problem with npm. There is likely additional logging output above.
1065:  npm ERR! A complete log of this run can be found in:
1066:  npm ERR!     /home/runner/.npm/_logs/2025-04-01T22_35_56_409Z-debug.log
1067:  ##[error]Process completed with exit code 1.
1068:  Post job cleanup.

@hantsy hantsy merged commit fedeb12 into master Apr 7, 2025
2 of 4 checks passed
@dependabot dependabot bot deleted the dependabot/maven/api/org.sonarsource.scanner.maven-sonar-maven-plugin-5.1.0.4751 branch April 7, 2025 01:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants