Skip to content

chore(deps)(deps-dev): bump @sonar/scan from 4.3.6 to 5.0.0 - #12

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/sonar/scan-5.0.0
Open

chore(deps)(deps-dev): bump @sonar/scan from 4.3.6 to 5.0.0#12
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/sonar/scan-5.0.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 14, 2026

Copy link
Copy Markdown
Contributor

Bumps @sonar/scan from 4.3.6 to 5.0.0.

Release notes

Sourced from @​sonar/scan's releases.

5.0.0

Description: Require Node.js 22.12+, migrate @​sonar/scan to ES modules, and use sonar-scanner-npm as the only NPM scanner executable.

SonarScanner for NPM 5.0.0

Version 5 is a major release of @sonar/scan with changes to the required Node.js version, JavaScript module format, and command-line executable names.

Please review the migration instructions before upgrading.

Breaking changes and migration

Node.js 22.12.0 or later is required

SonarScanner for NPM now requires Node.js 22.12.0 or later.

Check your current version with:

node --version

If you cannot upgrade Node.js yet, remain on version 4.4.0:

npm install @sonar/scan@4.4.0

Version 4.4.0 supports Node.js 18 and later and provides the new sonar-scanner-npm executable alongside the deprecated aliases.

Use sonar-scanner-npm as the executable

The deprecated sonar and sonar-scanner executable aliases have been removed from both @sonar/scan and the legacy sonarqube-scanner package.

Replace global invocations:

- sonar
- sonar-scanner
+ sonar-scanner-npm

Update package scripts similarly:

{
  "scripts": {
-   "sonar": "sonar"
+   "sonar": "sonar-scanner-npm"
  }
}
</tr></table> 

... (truncated)

Commits
  • b510584 Update dependency @​typescript-eslint/parser to v8.64.0 (#605)
  • 9ac1bba SCANNPM-149 Remove legacy scanner executable aliases in v5 (#602)
  • 27997e4 Update dependency tsx to v4.23.1 (#604)
  • 9f5212d Update actions/setup-node action to v7 (#606)
  • 6e29696 Update dependency eslint-plugin-sonarjs to v4.2.0 (#607)
  • a4252a5 Update dependency c8 to v12 (#608)
  • badaa29 Update dependency adm-zip to v0.6.0 (#599)
  • 939c74d Update slackapi/slack-github-action action to v3.0.5 (#601)
  • 6a605d4 Update dependency prettier to v3.9.5 (#597)
  • 0ee2af8 Update slackapi/slack-github-action action to v3.0.4 (#598)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@sonar/scan](https://github.com/SonarSource/sonar-scanner-npm) from 4.3.6 to 5.0.0.
- [Release notes](https://github.com/SonarSource/sonar-scanner-npm/releases)
- [Commits](SonarSource/sonar-scanner-npm@4.3.6...5.0.0)

---
updated-dependencies:
- dependency-name: "@sonar/scan"
  dependency-version: 5.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Aug 14, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants