Upgrade: [dependabot] - bump SonarSource/sonarqube-scan-action from 7.0.0 to 7.1.0 (#132)

dependabot[bot] · web-flow · commit ee2703fdd61c · 2026-04-09T18:20:12.000Z
Bumps [SonarSource/sonarqube-scan-action](https://github.com/sonarsource/sonarqube-scan-action) from 7.0.0 to 7.1.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sonarsource/sonarqube-scan-action/releases">SonarSource/sonarqube-scan-action's releases</a>.</em></p> <blockquote> <h2>v7.1.0</h2> <h2>What's Changed</h2> <ul> <li>SQSCANGHA-128 NO-JIRA Bump actions/cache from 4 to 5 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/SonarSource/sonarqube-scan-action/pull/219">SonarSource/sonarqube-scan-action#219</a></li> <li>SQSCANGHA-130 Bump rollup from 4.50.1 to 4.59.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/SonarSource/sonarqube-scan-action/pull/221">SonarSource/sonarqube-scan-action#221</a></li> <li>SQSCANGHA-131 Bump picomatch from 4.0.3 to 4.0.4 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/SonarSource/sonarqube-scan-action/pull/223">SonarSource/sonarqube-scan-action#223</a></li> <li>SQSCANGHA-132 Upgrade Node to 24 by <a href="https://github.com/claire-villard-sonarsource"><code>@​claire-villard-sonarsource</code></a> in <a href="https://redirect.github.com/SonarSource/sonarqube-scan-action/pull/224">SonarSource/sonarqube-scan-action#224</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/SonarSource/sonarqube-scan-action/compare/v7...v7.1.0">https://github.com/SonarSource/sonarqube-scan-action/compare/v7...v7.1.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/SonarSource/sonarqube-scan-action/commit/299e4b793aaa83bf2aba7c9c14bedbb485688ec4"><code>299e4b7</code></a> SQSCANGHA-132 Upgrade Node to 24 (<a href="https://redirect.github.com/sonarsource/sonarqube-scan-action/issues/224">#224</a>)</li> <li><a href="https://github.com/SonarSource/sonarqube-scan-action/commit/3988e54db2467c7e9583a4af619c3f5647d6b8ad"><code>3988e54</code></a> SQSCANGHA-131 Bump picomatch from 4.0.3 to 4.0.4 (<a href="https://redirect.github.com/sonarsource/sonarqube-scan-action/issues/223">#223</a>)</li> <li><a href="https://github.com/SonarSource/sonarqube-scan-action/commit/9598b8a83feef37de07f549027fab50ecffe6a6e"><code>9598b8a</code></a> SQSCANGHA-130 Bump rollup from 4.50.1 to 4.59.0 (<a href="https://redirect.github.com/sonarsource/sonarqube-scan-action/issues/221">#221</a>)</li> <li><a href="https://github.com/SonarSource/sonarqube-scan-action/commit/dcc5211de53084482f1c6779dda263459f5274f6"><code>dcc5211</code></a> SQSCANGHA-128 NO-JIRA Bump actions/cache from 4 to 5 (<a href="https://redirect.github.com/sonarsource/sonarqube-scan-action/issues/219">#219</a>)</li> <li><a href="https://github.com/SonarSource/sonarqube-scan-action/commit/b9f37f9de00914b9db556335bd46019dbafed98d"><code>b9f37f9</code></a> SQSCANGHA-129 Fix the Analysis Processing team name in CODEOWNERS (<a href="https://redirect.github.com/sonarsource/sonarqube-scan-action/issues/220">#220</a>)</li> <li>See full diff in <a href="https://github.com/sonarsource/sonarqube-scan-action/compare/a31c9398be7ace6bbfaf30c0bd5d415f843d45e9...299e4b793aaa83bf2aba7c9c14bedbb485688ec4">compare view</a></li> </ul> </details> <br /> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
diff --git a/.github/workflows/quality-checks-devcontainer.yml b/.github/workflows/quality-checks-devcontainer.yml
@@ -179,7 +179,7 @@ jobs:
           SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
 
       - name: SonarCloud Scan
-        uses: SonarSource/sonarqube-scan-action@a31c9398be7ace6bbfaf30c0bd5d415f843d45e9
+        uses: SonarSource/sonarqube-scan-action@299e4b793aaa83bf2aba7c9c14bedbb485688ec4
         if: ${{ steps.check_languages.outputs.uses_java == 'false' && env.SONAR_TOKEN_EXISTS == 'true' }}
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
