jdamata/terraform-provider-sonarqube v0.16.23

on GitHub

Maintenance release: dependency updates, CI hardening, and three bug fixes. No new resources; no breaking changes.

Dependencies

• build(deps): bump github.com/tidwall/gjson from 1.17.0 to 1.19.0 by @dependabot in #369
• build(deps): bump github.com/hashicorp/terraform-plugin-log from 0.10.0 to 0.11.0 by @dependabot in #376
• build(deps): bump golang.org/x/crypto from 0.35.0 to 0.52.0 in /tools by @dependabot in #373
• build(deps): bump google.golang.org/grpc from 1.79.3 to 1.82.1 by @dependabot in #375
• build(deps): bump golang.org/x/net from 0.52.0 to 0.55.0 by @dependabot in #372
• build(deps): bump google.golang.org/grpc from 1.82.1 to 1.83.2 by @dependabot in #382
• chore: drop golang.org/x/exp, use stdlib slices by @Cesarsk in #387
• chore(deps): bump indirect dependencies by @Cesarsk in #388 — go-plugin, hcl/v2, terraform-exec, terraform-json, hc-install, terraform-registry-address, protobuf
• fix(deps): keep the Go 1.25 floor, pin x/* below the 1.26 requirement by @Cesarsk in #395 — the newest golang.org/x/* releases require Go 1.26, so they are held at the last 1.25-compatible versions; also returns grpc to 1.83.2, since 1.84.0 carries CVE-2026-84445 (GHSA-2v4p-qf9q-27wj, high) and the only patched build is a 1.85.0-dev pseudo-version

golang.org/x/net 0.54.0 (#374) was skipped: it gates http2/server.go behind !(go1.27 && !http2legacy) and does not compile against grpc on Go 1.27+. 0.55.0 and later are unaffected. terraform-plugin-sdk/v2 stays on 2.40.0 (2.40.1 declined in #368). The module's minimum Go version is unchanged at 1.25.

CI

• ci: build and vet on the latest stable Go by @Cesarsk in #383 — a dependency that compiles on the go.mod floor but breaks on the current toolchain now fails CI instead of merging
• ci: run tfplugindocs check on pull requests by @Cesarsk in #384 — generated docs are verified before merge, not after
• ci: let dependabot cover GitHub Actions and the tools module by @Cesarsk in #386
• build(deps): bump codecov/codecov-action from 2 to 7 by @dependabot in #389
• build(deps): bump goreleaser/goreleaser-action from 6 to 7 by @dependabot in #390
• build(deps): bump actions-js/push from 1.5 to 1.6 by @dependabot in #391
• build(deps): bump github.com/hashicorp/terraform-plugin-docs from 0.20.1 to 0.25.0 in /tools by @dependabot in #392
• build(deps): bump actions/setup-go from 5 to 7 by @dependabot in #393
• build(deps): bump hashicorp/setup-terraform from 3 to 4 by @dependabot in #394

Fixes

• fix: detect SonarQube version from DCE application nodes by @lukehampson in #377 — Data Center Edition puts the version under Application Nodes[].System.Version, so provider initialisation failed with malformed version; fixes #226
• fix: drop sonarqube_user_token from state when it no longer exists by @Cesarsk in #396 — a token revoked in the UI no longer breaks every subsequent plan; fixes #354
• fix: reactivate inherited rules when a deactivation is removed by @Cesarsk in #397 — destroying a sonarqube_qualityprofile_deactivate_rule on an inherited profile now actually reactivates the rule; fixes #366
• docs: commit generated docs for the resources added in v0.16.22 by @Cesarsk in #380 — sonarqube_project_links, sonarqube_secured_setting, sonarqube_permission_template_default, sonarqube_measures
• test: stop TestAccSonarqubeProjectSettingsFieldValues panicking on nil Meta by @Cesarsk in #381 — go test ./... runs again without TF_ACC

Full Changelog: v0.16.22...v0.16.23