An open index of dependabot pull requests across open source projects.

Upgrade: [dependabot] - bump SonarSource/sonarqube-scan-action from 6.0.0 to 7.0.0

Open
Number: #32
Type: Pull Request
State: Open
Author: dependabot[bot] dependabot[bot]
Association: Unknown
Comments: 3
Created: December 11, 2025 at 06:07 PM UTC
(6 months ago)
Updated: December 14, 2025 at 12:00 PM UTC
(6 months ago)
Labels:
dependencies github_actions
Description:

Bumps SonarSource/sonarqube-scan-action from 6.0.0 to 7.0.0.

Release notes

Sourced from SonarSource/sonarqube-scan-action's releases.

v7.0.0

What's Changed

New Contributors

Full Changelog: https://github.com/SonarSource/sonarqube-scan-action/compare/v6.0.0...v7.0.0

Commits
  • a31c939 SQSCANGHA-126 Update SonarScanner CLI to 8.0.1.6346 (#218)
  • 40f5b61 SQSCANGHA-123 NO-JIRA Bump actions/setup-node from 5 to 6 (#214)
  • 9bf7c12 SQSCANGHA-122 Include caveats for running SCA (#213)
  • ba6563c Update SonarScanner CLI to 7.3.0.5189 (#212)
  • 5ffbad4 SQSCANGHA-120 Bump actions/setup-node from 4 to 5 (#211)
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Package Dependencies
Ecosystem:
actions
Version Change:
6.0.0 → 7.0.0
Update Type:
Major
Technical Details
ID: 11918062
UUID: 3720439885
Node ID: PR_kwDOQVmwD864aX30
Host: GitHub
Repository: NHSDigital/eps-common-workflows