[sonar-platform-bot]

BUILD-13176 Move the release workflow to gh-action_release v7.
EngXP squad is moving the repositories that do not publish to Maven Central to the latest gh-action_release v7, as announced on Discuss. The upgrade is recommended, not required.

v7 keeps the release as a draft until every publication step succeeds, which complies with GitHub release immutability, and receives the later improvements of the action.

Changes

• release.yml: gh-action_release moves from the 7.4.0 tag to @v7, which always resolves to the latest 7.x. The quality-corelang-squad Renovate preset disables Renovate on SonarSource actions and expects the branch ref, so there is no Renovate update to wait for.
• A dryRun input is added and passed to the action, to validate a change without releasing.

Questions

Ask in #ask-platform-eng-xp, or request an update of this pull request there.

Test plan

• Dry run started from this branch: gh workflow run release.yml --ref chore/jcarsique/BUILD-13176-nodejsMavenPluginMoveReleaseToV7 -f version=24.22.1.10233 -f dryRun=true, the Release job succeeded and the publication jobs are skipped, as in any dry run: https://github.com/SonarSource/nodejs-maven-plugin/actions/runs/40351698813.

[julien-carsique-sonarsource]

gitar review

[hashicorp-vault-sonar-prod]

BUILD-13176

[sonarqube-next]

Quality Gate passed for 'NodeJS Maven Plugin'

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
0 Dependency risks
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarQube

[gitar-bot]

Code Review ✅ Approved

🟡 Medium risk

Moves the release workflow to gh-action_release @v7 (from 7.4.0) and adds a dryRun input passed to the action. The dry run from this branch succeeded. No issues found.

Verification Rules 3/3 met

Functional validation No results

Rules 3 passed

✅ Approved GitHub Actions runners
✅ Internal artifact registries
✅ Repository license compliance

Auto-approval Not enabled

Set up

_{For more verification details, comment gitar display:verbose.}

Options

Auto-apply is off → Gitar will not commit updates to this branch.
Display: compact → Showing compact verification results.

Comment with these commands to change the behavior for this request:

Auto-apply	Compact
gitar auto-apply:on	gitar display:verbose

_{Was this helpful? React with 👍 / 👎 | Gitar}