Skip to content

October 2025 security updated and sonar cloud scanner version bump up#30

Merged
phaupt merged 2 commits intodevelopfrom
security-fixes-oct-2025
Feb 25, 2026
Merged

October 2025 security updated and sonar cloud scanner version bump up#30
phaupt merged 2 commits intodevelopfrom
security-fixes-oct-2025

Conversation

@thomas4v
Copy link
Collaborator

October 2025 security updated and sonar cloud scanner version bump up

Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates the Maven project/module versions and upgrades a few dependency versions (commons-io and BouncyCastle) for security maintenance, and adjusts the SonarCloud GitHub Actions workflow formatting/inputs.

Changes:

  • Bump parent + module Maven version from 1.5.7 to 1.5.8
  • Upgrade commons-io to 2.16.1 and BouncyCastle artifacts to 1.80
  • Tidy SonarCloud workflow YAML and change args formatting for the scan action

Reviewed changes

Copilot reviewed 6 out of 6 changed files in this pull request and generated 1 comment.

Show a summary per file
File Description
pom.xml Bumps project version and updates managed dependency versions (commons-io, BouncyCastle).
mid-java-client-core/pom.xml Updates parent version reference to 1.5.8.
mid-java-client-rest/pom.xml Updates parent version reference to 1.5.8.
mid-java-client-soap/pom.xml Updates parent version reference to 1.5.8.
mid-java-client-usage/pom.xml Updates parent version reference to 1.5.8.
.github/workflows/sonarcloud.yml Re-formats workflow and adjusts how scanner args are passed.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment on lines +51 to +53
- name: SonarQube Scan
uses: SonarSource/sonarqube-scan-action@v6.0.0 # Ex: v4.1.0, See the latest version at https://github.com/marketplace/actions/official-sonarqube-scan
env:
Copy link

Copilot AI Feb 25, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The PR title/description mention a SonarCloud scanner version bump, but this workflow still pins SonarSource/sonarqube-scan-action@v6.0.0 (no version change in this PR). Either update the action version to the intended target, or adjust the PR title/description to reflect that this is primarily a formatting/args change.

Copilot uses AI. Check for mistakes.
@phaupt phaupt merged commit 9fe3f85 into develop Feb 25, 2026
4 of 5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

3 participants