[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending	OpenSSF	Age	Adoption	Passing	Confidence
docker.io/library/sonarqube (source)		minor	26.7.0.124771-community → 26.8.0.126808-community	26.9.0.129388-community
docker.io/library/sonarqube (source)	service	minor	26.7.0.124771-community → 26.8.0.126808-community	26.9.0.129388-community
github.com/golangci/golangci-lint/v2		minor	v2.12.2 → v2.13.2
github.com/onsi/ginkgo/v2		patch	v2.32.0 → v2.32.1	v2.32.2
github.com/onsi/gomega	require	minor	v1.42.1 → v1.43.0
go	uses-with	minor	1.26.7 → 1.27.1
golang.org/x/vuln		minor	v1.3.0 → v1.7.0	v1.8.0
orhun/git-cliff-action	action	minor	v4.8.0 → v4.9.0
softprops/action-gh-release	action	patch	v3.0.2 → v3.0.3

---

Release Notes

SonarSource/docker-sonarqube (docker.io/library/sonarqube)

v26.8.0.126808: SonarQube Community Build 26.8.0.126808

Compare Source

SonarQube Community Build 26.8.0.126808.

Tracked by REL-4839.

What's Changed

• SONAR-30823 Update MCP version to 1.22.0.3040 by @​emma44-m in #​915
• SONAR-24340 Resolve DCE cluster node IP for IPv4 and IPv6 by @​hatem-amairi-sonarsource in #​914
• REL-4802 Release SonarQube Server 2026.4.0 by @​hatem-amairi-sonarsource in #​916
• Revert "REL-4802 Release SonarQube Server 2026.4.0" by @​hatem-amairi-sonarsource in #​917
• REL-4802 Release SonarQube Server 2026.4.0 by @​hatem-amairi-sonarsource in #​919
• REL-4839 Bump SonarQube Community Build to 26.8.0.126808 by @​hashicorp-vault-sonar-prod[bot] in #​921

Full Changelog: SonarSource/docker-sonarqube@26.7.0.124771...26.8.0.126808

golangci/golangci-lint (github.com/golangci/golangci-lint/v2)

v2.13.2

Compare Source

Released on 2026-08-28

1. Bug fixes
   • Decrease cache entropy
2. Linters bug fixes
   • iface: from 1.5.0 to 1.5.1
   • staticcheck: from 0.8.0 to 0.8.1
   • unparam: from 3f964bc to 2fa3d84
   • canonicalheader: from v1.1.2 to a temporary fork

v2.13.1

Compare Source

Released on 2026-08-20

1. Linters bug fixes
   • ginkgolinter: from 0.23.1 to 0.24.0
   • gofmt: from d62b90e to e84e050
   • staticcheck: from 0.8.0-rc.1 to 0.8.0
   • wsl_v5: from 5.8.0 to 5.9.0

v2.13.0

Compare Source

Released on 2026-08-19

1. Enhancements
   • 🎉 go1.27 support
2. Bug fixes
   • fix: cache package facts
3. Linters new features or changes
   • dupword: from 0.1.7 to 0.1.8 (new option skip-raw-strings)
   • errcheck: from 1.10.0 to 1.20.0
   • exhaustruct_v5: from 4.0.0 to 5.0.2 (new configuration)
   • exhaustruct: deprecated and replaced by exhaustruct_v5
   • fatcontext: from 0.9.0 to 0.10.0 (new options: check-loops, check-function-literals)
   • goconst: from 1.10.0 to 1.11.0 (new options: ignore-map-keys, exclude-types)
   • gofumpt: from 0.9.2 to 0.11.0 (new options: extra.group-params, extra.clothe-returns, extra.balance-calls)
   • gomoddirectives: from 0.8.0 to 0.9.0 (new option: replace-allow-all)
   • gosec: from 2.26.1 to 2.27.1
   • govet-modernize: from 0.44.0 to 0.49.0 (fmtappendf is removed. New analyzers atomictypes, embedlit, errorsastype, importcomment, reflecttypeassert, slicesclip, and slicesbackward. waitgroup is renamed waitgroupgo)
   • iface: from 1.4.3 to 1.5.0 (new analyzer: unusedmethod)
   • noinlineerr: from 1.0.5 to 1.0.6
   • nonamedreturns: from 1.0.6 to 1.0.8 (new option: allow-unused-named-returns)
   • recvcheck: from 0.2.0 to 0.3.0 (new default exclusions)
   • unparam: from 5beb8c8 to 3f964bc
4. Linters bug fixes
   • clickhouse-go-linter: from 1.2.0 to 1.2.1
   • errname: from 1.1.1 to 1.1.2
   • exhaustruct: from 5.0.2 to 5.0.3
   • funcorder: add missing Function field
   • ginkgolinter: from 0.23.0 to 0.23.1
   • gocheckcompilerdirectives: from 1.3.0 to 1.4.0
   • gocritic: from 0.14.3 to 0.14.4
   • gomoddirectives: add missing IgnoreForbidden field
   • iface: from 1.4.2 to 1.4.3
   • mirror: from 1.3.0 to 1.3.3
   • nilnil: from 1.1.1 to 1.1.2
   • protogetter: from 0.3.20 to 0.3.21

onsi/ginkgo (github.com/onsi/ginkgo/v2)

v2.32.1

Compare Source

2.32.1

Fixes

• Defer AfterAll until repeated spec completes [e647b3b]

onsi/gomega (github.com/onsi/gomega)

v1.43.0

Compare Source

1.43.0

Features

Add gomock adaptor extension for using Gomega matchers with gomock

actions/go-versions (go)

v1.27.1: 1.27.1

Compare Source

Go 1.27.1

v1.27.0: 1.27.0

Compare Source

Go 1.27.0

v1.26.8: 1.26.8

Compare Source

Go 1.26.8

orhun/git-cliff-action (orhun/git-cliff-action)

v4.9.0

Compare Source

[4.9.0] - 2026-09-01

🐛 Bug Fixes

• Use BSD-compatible stat format on macOS (#​80)
• (action) Terminate content output with a newline (#​81)

⚙️ Miscellaneous Tasks

• (sync) Resolve github cli login (#​79)
• Bump git-cliff to v2.14.1 (#​85)

softprops/action-gh-release (softprops/action-gh-release)

v3.0.3

Compare Source

3.0.3 is a maintenance release with updated dependencies. It also safely
classifies malformed GitHub API errors to avoid secondary failures (#​822).

What's Changed

Bug fixes 🐛

• fix: safely classify GitHub API errors by @​chenrui333 in #​822

Other Changes 🔄

• dependency updates

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov-commenter]

⚠️ Please install the to ensure uploads and comments are reliably processed by Codecov.

Codecov Report

❌ Patch coverage is 89.89899% with 10 lines in your changes missing coverage. Please review.
✅ All tests successful. No failed tests found.

Files with missing lines	Patch %	Lines
sonar/history_v2_service.go	90.47%	8 Missing ⚠️
sonar/dop_translation_v2_service.go	85.71%	2 Missing ⚠️

📢 Thoughts on this report? Let us know!