Bump org.sonarsource.api.plugin:sonar-plugin-api from 13.11.0.4459 to 14.0.0.4498

[dependabot]

Bumps org.sonarsource.api.plugin:sonar-plugin-api from 13.11.0.4459 to 14.0.0.4498.

Release notes

Sourced from org.sonarsource.api.plugin:sonar-plugin-api's releases.

14.0.0.4498

What's Changed

• PLUGINAPI-175 Upgrade logback and slf4j versions by @​henryju in SonarSource/sonar-plugin-api#316
• PLUGINAPI-219 Update target Java version to 17 and upgrade JUnit to 6.x by @​henryju in SonarSource/sonar-plugin-api#317

Full Changelog: SonarSource/sonar-plugin-api@13.11.0.4459...14.0.0.4498

Changelog

Sourced from org.sonarsource.api.plugin:sonar-plugin-api's changelog.

Changelog

14.0

• Upgrade the provided slf4j-api from 1.7.30 to 2.0.18.
• Raise the minimum required Java version from 11 to 17.
• Upgrade JUnit from 5.x to 6.x for consumers using the test-fixtures module.

13.11

• Add MQR mode metrics for worst issue severity for overall code to org.sonar.api.measures.CoreMetrics:
  • RELIABILITY_ISSUE_SEVERITY, SECURITY_ISSUE_SEVERITY, MAINTAINABILITY_ISSUE_SEVERITY
• Add the MQR issues count flat metrics to org.sonar.api.measures.CoreMetrics:
  • SOFTWARE_QUALITY_MAINTAINABILITY_ISSUES, SOFTWARE_QUALITY_RELIABILITY_ISSUES, SOFTWARE_QUALITY_SECURITY_ISSUES
  • NEW_SOFTWARE_QUALITY_MAINTAINABILITY_ISSUES, NEW_SOFTWARE_QUALITY_RELIABILITY_ISSUES, NEW_SOFTWARE_QUALITY_SECURITY_ISSUES

13.10

• Add the NEW_NCLOC metric to org.sonar.api.measures.CoreMetrics.

13.8

• New public API PropertyDefinition.create(Property) to create properties from a @Property annotations

13.6

• Deprecate org.sonar.api.config.PropertyDefinitions. Use PropertyDefinition.builder(String) to declare properties instead.
• Add severity metric keys to org.sonar.api.measures.CoreMetrics:
  • MQR mode: NEW_RELIABILITY_ISSUE_SEVERITY_KEY, NEW_SECURITY_ISSUE_SEVERITY_KEY, NEW_MAINTAINABILITY_ISSUE_SEVERITY_KEY
  • Standard mode: NEW_BUGS_SEVERITY_KEY, NEW_VULNERABILITIES_SEVERITY_KEY, NEW_CODE_SMELLS_SEVERITY_KEY
• Add org.sonar.api.measures.SeverityValues with integer constants for severity-based metric thresholds

13.5

• Introduce support for issue resolution from sensors:
  • Introduce org.sonar.api.batch.sensor.issue.NewIssueResolution
  • Introduce org.sonar.api.batch.sensor.issue.IssueResolution
  • Introduce org.sonar.api.batch.sensor.SensorContext.newIssueResolution()
  • Introduce org.sonar.api.batch.sensor.internal.SensorStorage.store(IssueResolution)

13.4

• Add org.sonar.api.a3s.A3SContextCollector (internal SonarSource usage)

13.3

• Introduce support for feature availability checks:
  • Introduce org.sonar.api.batch.sensor.SensorContext.isFeatureAvailable.
• Introduce new security standards for OWASP LLM Top 10 2025, OWASP Top 10 2025, ASVS 5, STIG ASD_V6, and MASVS 2

13.2

• Add org.sonar.api.issue.IssueStatus.IN_SANDBOX enum value
• Add org.sonar.api.issue.Issue.STATUS_IN_SANDBOX constant (deprecated immediately)

13.1

• Introduce support for internal tags on issues:
  • Introduce org.sonar.api.batch.sensor.issue.Issue.internalTags()
  • Introduce org.sonar.api.batch.sensor.issue.NewIssue.addInternalTag(String tag)

... (truncated)

Commits

• f7ff374 PLUGINAPI-219 Update target Java version to 17 and upgrade JUnit to 6.x (#317)
• 0e205a0 PLUGINAPI-212 Configure Renovate (#315)
• 63fa538 PLUGINAPI-175 Upgrade logback and slf4j versions (#316)
• 3b840b5 PLUGINAPI-217 Upgrade dependencies and Gradle plugins to latest versions (#314)
• 33cc348 PLUGINAPI-113 Update Gradle build to Gradle 9 (#313)
• 2a53c77 PLUGINAPI-214 Prepare next dev iteration (#312)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)