fix(deps): update sonarqube plugins upgrades (alauda-2025.1.0) (patch)

[alaudaa-renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
org.sonarsource.jacoco:sonar-jacoco-plugin (source)	1.5.0.5174 -> 1.5.1.5340
org.sonarsource.flex:sonar-flex-plugin (source)	2.17.0.6043 -> 2.17.0.6211

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

SonarSource/sonar-jacoco (org.sonarsource.jacoco:sonar-jacoco-plugin)

v1.5.1.5340

Compare Source

Release notes - JaCoCo Plugin - 1.5.1

Maintenance

JACOCO-88 Prepare next development iteration 1.5.1

JACOCO-90 Add Windows build and QA during CI

JACOCO-92 Fix windows build and QA

JACOCO-95 Fix warning log for multi-value property

Bug

JACOCO-87 The JaCoCo module sensor should not fail when processing aggregate reports

JACOCO-99 Add gosu to the list of languages that command on-demand downloading

SonarSource/sonar-flex (org.sonarsource.flex:sonar-flex-plugin)

v2.17.0.6211

Compare Source

Release notes - SonarFlex - 2.17

No issues found for this release.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[alaudabot]

🤖 AI Code Review

Property	Value
Model	z-ai/glm-4.7:free
Style	strict
Issues Found	1
Warnings/Errors	0
Personalized Prompt	❌ No
Reviewed at	2026-03-06 23:48:54 UTC

---

Summary

This PR updates the sonar-jacoco-plugin dependency from version 1.5.0.5174 to 1.5.1.5340. The change is a minor version bump within the same major.minor release line, which typically indicates backward-compatible improvements and bug fixes. No code-level issues were identified in this single-line dependency update.

Review Statistics

Category	Count
Critical Issues	0
Warnings	0
Suggestions	1
Files Reviewed	1

Critical Issues

Issues that MUST be addressed before merging (security, bugs, breaking changes)

None identified.

Warnings

Issues that SHOULD be addressed but are not blocking

None identified.

Suggestions

Recommendations for improvement (nice to have)

• source/build.gradle:277 Consider verifying the release notes or changelog for version 1.5.1.5340 to ensure no known issues affect your project before merging.

Positive Feedback

• Using exact version pins (而非动态版本) is a best practice that ensures reproducible builds and prevents unexpected changes from upstream.
• The dependency update follows the standard Gradle dependency declaration format correctly.
• Keeping SonarSource plugins up-to-date helps maintain compatibility with latest SonarQube versions and ensures you receive the latest analysis improvements and security patches.

---

---

ℹ️ About this review

This review was automatically generated using the run-actions workflow.

• Shared prompt: .github/prompts/code-review.md
• No repository-specific prompt configured

[alaudabot]

🚨 Stale Pull Request Warning

This pull request has been inactive for 30 days.

Automated Actions Schedule:

• ⚠️ Warning: After 30 days (now)
• 🔒 Auto-close: After 60 days
• 🗑️ Branch deletion: After 90 days (if not protected)

To keep this PR active:

• Add new commits
• Reply to this comment
• Request reviews

Protected branches (won't be deleted): main,release-*,alauda-*

This is an automated message. Reply to this comment to reset the inactivity timer.

[danielfbm]

PR Assist Bot — Owner Approval Needed

This PR targets release branch alauda-2025.1.0. Per policy, release-branch merges require explicit owner approval before the bot proceeds.

PR: AlaudaDevops/sonarqube-community-build#105
Branch: alauda-2025.1.0
Type: Security / Dependency update (Renovate)

Please reply with /approve-merge or provide explicit approval for the bot to merge this PR on the next sweep.

[alaudabot]

/retest

[alaudabot]

/test sonar-image

[alaudabot]

🔄 Retesting failed pipelines

Triggered retests for:
• sonar-image

[alaudabot]

/retest

[alaudabot]

/test sonar-image

[alaudabot]

🔄 Retesting failed pipelines

Triggered retests for:
• sonar-image

[alaudabot]

/retest

[alaudabot]

/test sonar-image

[alaudabot]

🔄 Retesting failed pipelines

Triggered retests for:
• sonar-image

[alaudabot]

🚨 Stale Pull Request Warning

This pull request has been inactive for 33 days.

Automated Actions Schedule:

• ⚠️ Warning: After 30 days (now)
• 🔒 Auto-close: After 60 days
• 🗑️ Branch deletion: After 90 days (if not protected)

To keep this PR active:

• Add new commits
• Reply to this comment
• Request reviews

Protected branches (won't be deleted): main,release-*,alauda-*

This is an automated message. Reply to this comment to reset the inactivity timer.