feat: add sonarqube 2026.5.0 enteprise endpoints

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending	OpenSSF
docker.io/library/sonarqube (source)		minor	2026.4.1-enterprise → 2026.5.0-enterprise	2026.5.2-enterprise (+1)
docker.io/library/sonarqube (source)	service	minor	2026.4.1-enterprise → 2026.5.0-enterprise	2026.5.2-enterprise (+1)
github.com/golangci/golangci-lint/v2		minor	v2.13.2 → v2.14.0
github.com/onsi/gomega	require	minor	v1.43.1 → v1.44.0

---

Release Notes

SonarSource/docker-sonarqube (docker.io/library/sonarqube)

v2026.5.0: SonarQube Server 2026.5.0

Compare Source

What's Changed

• REL-4266 Release SonarQube Server 2025.6.1 by @​carminevassallo in #​835

Full Changelog: SonarSource/docker-sonarqube@2026.4.1...2026.5.0

What's Changed

• REL-4839 Bump SonarQube Community Build to 26.8.0.126808 by @​hashicorp-vault-sonar-prod[bot] in #​921
• [SONAR-31958] README update for marketing by @​tom-howlett-sonarsource in #​924
• REL-4931 Bump SonarQube Community Build to 26.9.0.129388 by @​hashicorp-vault-sonar-prod[bot] in #​925
• SONAR-32359: Update MCP version to 1.27.0.4335 by @​emma44-m in #​927
• SONAR-31880 Extend Trivy Scan to all the images and fail the build on medium or higher CVSS band by @​jimil09 in #​926
• SONAR-32529 Release SonarQube Server 2026.5.0 by @​hatem-amairi-sonarsource in #​930

New Contributors

• @​tom-howlett-sonarsource made their first contribution in #​924

Full Changelog: SonarSource/docker-sonarqube@2026.4.1...2026.5.0

golangci/golangci-lint (github.com/golangci/golangci-lint/v2)

v2.14.0

Compare Source

Released on 2026-09-24

1. Bug fixes
   • fix: cache of facts reloading
2. Linters new features or changes
   • bodyclose: from 73d1f95 to 857993a (new directive handled)
   • exhaustive: from 0.12.0 to 0.13.0
   • exhaustruct_v5: from 5.0.3 to 5.2.0 (new option: allow-empty-blank-assignments)
   • go-check-sumtype: from 0.3.1 to ae6904d
   • gocritic: from 0.14.4 to 0.15.0
   • gofumpt: from 0.11.0 to 0.12.0
   • gomoddirectives: from 0.9.0 to 0.10.0
   • gosec: from 2.28.0 to 2.29.0 (re-enable G407)
   • govet-modernize: from 0.49.0 to 0.50.0
   • loggercheck: from 0.11.0 to 0.12.0
   • revive: from 1.15.0 to 1.17.0 (new rules: marshal-receiver, multiline-if-init, use-slices-concat)
   • tagliatelle: from 0.7.2 to 0.8.0
3. Linters bug fixes
   • fatcontext: from 0.10.0 to 0.10.1
   • flock: from 0.13.0 to 0.13.1
   • godoclint: from 0.11.2 to 0.11.4
   • protogetter: from 0.3.21 to 1.0.1
   • recvcheck: from 0.3.0 to 0.3.1
   • tagalign: from 1.4.3 to 1.4.4

onsi/gomega (github.com/onsi/gomega)

v1.44.0

Compare Source

Fixes

• BeNumerically compares signed and unsigned integers by value: -1 no longer equals uint64(math.MaxUint64) and uint(5) is now greater than -3 (#​925) [26e3c6b]
• BeNumerically("~") no longer overflows when computing the distance between extreme integers (#​928) [1955764]
• BeNumerically("==", x, threshold) now honors the threshold for floats, as it already did for integers (#​927) [10e2aca]
• HaveKeyWithValue succeeds if any key accepted by the key matcher has a matching value, rather than depending on map iteration order (#​929) [ffc577a]
• HaveKey and HaveKeyWithValue treat key and value matcher errors like ContainElement does: a match wins, and an error is only reported when nothing matches (#​926) [dc91598]
• MatchJSON no longer treats numbers too large for a float64 as equal to one another (#​930) [9d619a5]
• MatchJSON compares integers beyond ±2^53 exactly, so neighboring large integers (e.g. IDs) no longer match; all other numbers are still compared as float64s (#​931) [8ef1aa7, 630fe12]
• HaveExactElements reports missing or extra elements that start at index 0, and reports the first extra element's index rather than the last (#​934) [af1b777]
• MatchYAML compares every document in a multi-document stream rather than only the first; empty documents (e.g. a leading or trailing ---) are ignored (#​933) [2773796]
• MatchXML ignores namespace prefixes: elements and attributes are compared by namespace URI, and the URIs declared on each element must match whatever prefix they are bound to (#​932) [c0dbd89, 2565350]

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov-commenter]

⚠️ Please install the to ensure uploads and comments are reliably processed by Codecov.

Codecov Report

❌ Patch coverage is 77.92958% with 420 lines in your changes missing coverage. Please review.
✅ All tests successful. No failed tests found.

Files with missing lines	Patch %	Lines
sonar/architecture_organization_v2_service.go	77.89%	105 Missing ⚠️
sonar/cag_v2_service.go	76.14%	47 Missing ⚠️
sonar/a3s_v2_service.go	78.77%	45 Missing ⚠️
sonar/history_v2_resolution_service.go	74.50%	39 Missing ⚠️
sonar/remediation_agent_v2_service.go	78.43%	33 Missing ⚠️
sonar/llm_connectivity_v2_service.go	79.59%	30 Missing ⚠️
sonar/dashboards_v2_service.go	77.04%	28 Missing ⚠️
sonar/detection_agent_v2_service.go	79.43%	22 Missing ⚠️
sonar/billing_v2_service.go	81.35%	11 Missing ⚠️
sonar/onboarding_v2_service.go	75.00%	10 Missing ⚠️
... and 9 more

📢 Thoughts on this report? Let us know!