From f3723d9479d399a5918415196e39942df099ec37 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Wed, 29 Apr 2026 07:32:14 +0000 Subject: [PATCH 01/15] Add renovate.json --- renovate.json | 6 ++++++ 1 file changed, 6 insertions(+) create mode 100644 renovate.json diff --git a/renovate.json b/renovate.json new file mode 100644 index 0000000000..df87e18d23 --- /dev/null +++ b/renovate.json @@ -0,0 +1,6 @@ +{ + "$schema": "https://docs.renovatebot.com/renovate-schema.json", + "extends": [ + "local>SonarSource/renovate-config" + ] +} From 8c1d14a76486ee28bc7f70d5cf4ed9d2a187d454 Mon Sep 17 00:00:00 2001 From: Tomasz Tylenda Date: Wed, 29 Apr 2026 12:23:31 +0200 Subject: [PATCH 02/15] Custom config --- renovate.json | 6 ------ renovate.json5 | 12 ++++++++++++ 2 files changed, 12 insertions(+), 6 deletions(-) delete mode 100644 renovate.json create mode 100644 renovate.json5 diff --git a/renovate.json b/renovate.json deleted file mode 100644 index df87e18d23..0000000000 --- a/renovate.json +++ /dev/null @@ -1,6 +0,0 @@ -{ - "$schema": "https://docs.renovatebot.com/renovate-schema.json", - "extends": [ - "local>SonarSource/renovate-config" - ] -} diff --git a/renovate.json5 b/renovate.json5 new file mode 100644 index 0000000000..db8ce04149 --- /dev/null +++ b/renovate.json5 @@ -0,0 +1,12 @@ +{ + "$schema": "https://docs.renovatebot.com/renovate-schema.json", + extends: [ "github>SonarSource/renovate-config:languages-team" ], + enabledManagers: [ + "maven", + "github-actions", + "regex" + ], + ignorePaths: [ + "its/sources/**", + ], +} From 92b76adf2c3c727318183389a9dc0e34e23acff4 Mon Sep 17 00:00:00 2001 From: Tomasz Tylenda Date: Wed, 29 Apr 2026 12:26:24 +0200 Subject: [PATCH 03/15] Exclude more paths --- renovate.json5 | 2 ++ 1 file changed, 2 insertions(+) diff --git a/renovate.json5 b/renovate.json5 index db8ce04149..65fcff89d4 100644 --- a/renovate.json5 +++ b/renovate.json5 @@ -8,5 +8,7 @@ ], ignorePaths: [ "its/sources/**", + "its/plugin/projects/**", + "java-checks-test-sources/**", ], } From e2e9e06072321815bd2b1ab867352faaf0b17993 Mon Sep 17 00:00:00 2001 From: Tomasz Tylenda Date: Wed, 29 Apr 2026 12:33:11 +0200 Subject: [PATCH 04/15] Add GHA rules --- renovate.json5 | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/renovate.json5 b/renovate.json5 index 65fcff89d4..bf7413c4cd 100644 --- a/renovate.json5 +++ b/renovate.json5 @@ -11,4 +11,15 @@ "its/plugin/projects/**", "java-checks-test-sources/**", ], + packageRules: [ + { + description: "SonarSource GitHub actions do not need version pinning (neither fixed SHA, nor v3 -> v3.1.2)", + matchManagers: [ "github-actions" ], + "matchPackagePatterns": [ + "^SonarSource/" + ], + matchUpdateTypes: [ "pin", "rollback"], + enabled: false + }, + ], } From d19466429b906288a19c9d19a0758408a8b1e557 Mon Sep 17 00:00:00 2001 From: Tomasz Tylenda Date: Wed, 29 Apr 2026 14:48:34 +0200 Subject: [PATCH 05/15] plugin api --- renovate.json5 | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/renovate.json5 b/renovate.json5 index bf7413c4cd..b19db9c397 100644 --- a/renovate.json5 +++ b/renovate.json5 @@ -21,5 +21,16 @@ matchUpdateTypes: [ "pin", "rollback"], enabled: false }, + { + "matchManagers": [ + "maven" + ], + "matchPackageNames": [ + "org.sonarsource.api.plugin:sonar-plugin-api*" + ], + "groupName": "sonar-plugin-api", + "groupSlug": "sonar-plugin-api", + "prHeader": "**Before updating the plugin-api version, make sure to check the [compatibility matrix](https://github.com/SonarSource/sonar-plugin-api?tab=readme-ov-file#compatibility) and stick to the lowest denominator.**" + }, ], } From 901e620946cbef91dca30903c5219db47aa27185 Mon Sep 17 00:00:00 2001 From: Tomasz Tylenda Date: Wed, 29 Apr 2026 14:55:26 +0200 Subject: [PATCH 06/15] steal --- renovate.json5 | 31 ++++++++++++++++++++++--------- 1 file changed, 22 insertions(+), 9 deletions(-) diff --git a/renovate.json5 b/renovate.json5 index b19db9c397..af5bb3bf79 100644 --- a/renovate.json5 +++ b/renovate.json5 @@ -12,15 +12,28 @@ "java-checks-test-sources/**", ], packageRules: [ - { - description: "SonarSource GitHub actions do not need version pinning (neither fixed SHA, nor v3 -> v3.1.2)", - matchManagers: [ "github-actions" ], - "matchPackagePatterns": [ - "^SonarSource/" - ], - matchUpdateTypes: [ "pin", "rollback"], - enabled: false - }, + // { + // description: "SonarSource GitHub actions do not need version pinning (neither fixed SHA, nor v3 -> v3.1.2)", + // matchManagers: [ "github-actions" ], + // "matchPackagePatterns": [ + // "^SonarSource/" + // ], + // matchUpdateTypes: [ "pin", "rollback"], + // enabled: false + // }, + { + "matchManagers": [ + "github-actions" + ], + "matchPackageNames": [ + "SonarSource/**" + ], + "pinDigests": false, + "versioning": "regex:^v(?\\d+)$", + "extractVersion": "^v(?\\d+)", + "groupName": "all Sonar GitHub Actions", + "groupSlug": "all-sonar-github-actions" + }, { "matchManagers": [ "maven" From 61ab228dd4c5b5747f9420ace516d75e86612786 Mon Sep 17 00:00:00 2001 From: Tomasz Tylenda Date: Wed, 29 Apr 2026 15:07:59 +0200 Subject: [PATCH 07/15] Go back --- renovate.json5 | 31 +++++++++---------------------- 1 file changed, 9 insertions(+), 22 deletions(-) diff --git a/renovate.json5 b/renovate.json5 index af5bb3bf79..b19db9c397 100644 --- a/renovate.json5 +++ b/renovate.json5 @@ -12,28 +12,15 @@ "java-checks-test-sources/**", ], packageRules: [ - // { - // description: "SonarSource GitHub actions do not need version pinning (neither fixed SHA, nor v3 -> v3.1.2)", - // matchManagers: [ "github-actions" ], - // "matchPackagePatterns": [ - // "^SonarSource/" - // ], - // matchUpdateTypes: [ "pin", "rollback"], - // enabled: false - // }, - { - "matchManagers": [ - "github-actions" - ], - "matchPackageNames": [ - "SonarSource/**" - ], - "pinDigests": false, - "versioning": "regex:^v(?\\d+)$", - "extractVersion": "^v(?\\d+)", - "groupName": "all Sonar GitHub Actions", - "groupSlug": "all-sonar-github-actions" - }, + { + description: "SonarSource GitHub actions do not need version pinning (neither fixed SHA, nor v3 -> v3.1.2)", + matchManagers: [ "github-actions" ], + "matchPackagePatterns": [ + "^SonarSource/" + ], + matchUpdateTypes: [ "pin", "rollback"], + enabled: false + }, { "matchManagers": [ "maven" From 8cc8b7fd0e9fe4b5c8f4907bec040d472b653f10 Mon Sep 17 00:00:00 2001 From: Tomasz Tylenda Date: Wed, 29 Apr 2026 16:43:11 +0200 Subject: [PATCH 08/15] Use shared config --- renovate.json5 | 13 +++---------- 1 file changed, 3 insertions(+), 10 deletions(-) diff --git a/renovate.json5 b/renovate.json5 index b19db9c397..088ddfea31 100644 --- a/renovate.json5 +++ b/renovate.json5 @@ -1,6 +1,8 @@ { "$schema": "https://docs.renovatebot.com/renovate-schema.json", - extends: [ "github>SonarSource/renovate-config:languages-team" ], + extends: [ + "github>SonarSource/renovate-config:quality-jvm-squad#tt/quality-jvm-squad", + ], enabledManagers: [ "maven", "github-actions", @@ -12,15 +14,6 @@ "java-checks-test-sources/**", ], packageRules: [ - { - description: "SonarSource GitHub actions do not need version pinning (neither fixed SHA, nor v3 -> v3.1.2)", - matchManagers: [ "github-actions" ], - "matchPackagePatterns": [ - "^SonarSource/" - ], - matchUpdateTypes: [ "pin", "rollback"], - enabled: false - }, { "matchManagers": [ "maven" From 58f44e4ae16907c8d69269826a92d7b7571278c6 Mon Sep 17 00:00:00 2001 From: Tomasz Tylenda Date: Thu, 30 Apr 2026 13:57:42 +0200 Subject: [PATCH 09/15] GHA update major --- renovate.json5 | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/renovate.json5 b/renovate.json5 index 088ddfea31..9c6c8cfb55 100644 --- a/renovate.json5 +++ b/renovate.json5 @@ -25,5 +25,10 @@ "groupSlug": "sonar-plugin-api", "prHeader": "**Before updating the plugin-api version, make sure to check the [compatibility matrix](https://github.com/SonarSource/sonar-plugin-api?tab=readme-ov-file#compatibility) and stick to the lowest denominator.**" }, + { + "matchManagers": ["github-actions"], + "matchUpdateTypes": ["major"], + "enabled": true + }, ], } From 55a039f9105f0943d8d370d714735808f2fbd478 Mon Sep 17 00:00:00 2001 From: Tomasz Tylenda Date: Thu, 30 Apr 2026 14:04:20 +0200 Subject: [PATCH 10/15] dont pin digest --- renovate.json5 | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) diff --git a/renovate.json5 b/renovate.json5 index 9c6c8cfb55..923664204f 100644 --- a/renovate.json5 +++ b/renovate.json5 @@ -26,9 +26,13 @@ "prHeader": "**Before updating the plugin-api version, make sure to check the [compatibility matrix](https://github.com/SonarSource/sonar-plugin-api?tab=readme-ov-file#compatibility) and stick to the lowest denominator.**" }, { - "matchManagers": ["github-actions"], - "matchUpdateTypes": ["major"], - "enabled": true + matchManagers: [ + "github-actions" + ], + matchPackagePatterns: [ + "^SonarSource/" + ], + pinDigest: false, }, ], } From a2823a82b33bd7203be77d325128924b75cdc860 Mon Sep 17 00:00:00 2001 From: Tomasz Tylenda Date: Thu, 30 Apr 2026 14:19:00 +0200 Subject: [PATCH 11/15] Remove docs/** --- renovate.json5 | 1 + 1 file changed, 1 insertion(+) diff --git a/renovate.json5 b/renovate.json5 index 923664204f..1b71df6199 100644 --- a/renovate.json5 +++ b/renovate.json5 @@ -9,6 +9,7 @@ "regex" ], ignorePaths: [ + "docs/**", "its/sources/**", "its/plugin/projects/**", "java-checks-test-sources/**", From 0647cb63be5f3c76759da84b1784adedc7747366 Mon Sep 17 00:00:00 2001 From: Tomasz Tylenda Date: Thu, 30 Apr 2026 14:22:00 +0200 Subject: [PATCH 12/15] remove more --- renovate.json5 | 1 + 1 file changed, 1 insertion(+) diff --git a/renovate.json5 b/renovate.json5 index 1b71df6199..1ce35390eb 100644 --- a/renovate.json5 +++ b/renovate.json5 @@ -13,6 +13,7 @@ "its/sources/**", "its/plugin/projects/**", "java-checks-test-sources/**", + "java-surefire/src/test/resources/**", ], packageRules: [ { From 5889c20d06f1582a7052b724ef92e8c3712d8bfc Mon Sep 17 00:00:00 2001 From: Tomasz Tylenda Date: Thu, 30 Apr 2026 15:42:07 +0200 Subject: [PATCH 13/15] Use merged shared config --- renovate.json5 | 9 +-------- 1 file changed, 1 insertion(+), 8 deletions(-) diff --git a/renovate.json5 b/renovate.json5 index 1ce35390eb..2a016de141 100644 --- a/renovate.json5 +++ b/renovate.json5 @@ -1,13 +1,6 @@ { "$schema": "https://docs.renovatebot.com/renovate-schema.json", - extends: [ - "github>SonarSource/renovate-config:quality-jvm-squad#tt/quality-jvm-squad", - ], - enabledManagers: [ - "maven", - "github-actions", - "regex" - ], + extends: [ "github>SonarSource/renovate-config:quality-jvm-squad" ], ignorePaths: [ "docs/**", "its/sources/**", From 9f43d5abc82eec6773de200aa8964c9cf87f3f37 Mon Sep 17 00:00:00 2001 From: Tomasz Tylenda Date: Thu, 30 Apr 2026 17:39:03 +0200 Subject: [PATCH 14/15] extractVersion --- renovate.json5 | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/renovate.json5 b/renovate.json5 index 2a016de141..112024f200 100644 --- a/renovate.json5 +++ b/renovate.json5 @@ -27,7 +27,7 @@ matchPackagePatterns: [ "^SonarSource/" ], - pinDigest: false, + extractVersion: "^(?v\\d+)$" }, ], } From cd7673cc0c699595e64304e0b47eccd5e2ee7ee7 Mon Sep 17 00:00:00 2001 From: Tomasz Tylenda Date: Thu, 30 Apr 2026 17:44:46 +0200 Subject: [PATCH 15/15] regex --- renovate.json5 | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/renovate.json5 b/renovate.json5 index 112024f200..1610eba065 100644 --- a/renovate.json5 +++ b/renovate.json5 @@ -27,7 +27,7 @@ matchPackagePatterns: [ "^SonarSource/" ], - extractVersion: "^(?v\\d+)$" + extractVersion: "^v(?\\d+)$" }, ], }