[aurelien-coet-sonarsource]

---

Summary by Gitar

• Dependency update:
  • Bumped jdt-package from 1.9.0.1840 to 1.10.0.12296 in java-frontend/pom.xml

_{This will update automatically on new commits.}

[hashicorp-vault-sonar-prod]

SONARJAVA-7303

[aurelien-coet-sonarsource]

/pvf

[hashicorp-vault-sonar-prod]

📊 Performance Validation complete
🆕 2 new · 🗑️ 0 lost issues
View dashboard

[aurelien-coet-sonarsource]

/pvf

[gitar-bot]

Code Review ✅ Approved

🟡 Medium risk · Updating the JDT package could alter Java parsing or analysis behavior, potentially changing reported issues or compatibility across projects.

Bumps the Sonar JDT dependency jdt-package from 1.9.0.1840 to 1.10.0.12296 in java-frontend/pom.xml. No issues found.

Verification Rules 1/2 met Repos 1 inspected · PRs 2 inspected

Rules 1 failed 1 passed 1 not applicable

❌ Repository license compliance - LICENSE.txt contains SONAR Source-Available License v1.0 text, but the central exception for sonar-java requires LGPL-3.0; a maintainer should confirm which license applies, as I can't choose legal text.
✅ Internal artifact registries

Functional validation No results

Broader impact Repos 1 inspected PRs 2 inspected

Cross-repo 1 repository inspected 0 open impacts

SonarSource/sonar-java-symbolic-execution Inspected

Cross-PR 2 PRs inspected 0 open impacts

PR 6459: SONARJAVA-7279 Resolve the JDK API of the target release through the new jdt-package option Inspected
PR 169: SONARJAVA-7278 Override ASTParser to expose the JDK API of a requested release (JEP 247) Inspected

Auto-approval Not enabled

Set up

_{For more verification details, comment gitar display:verbose.}

Options

Auto-apply is off → Gitar will not commit updates to this branch.
Display: compact → Showing compact verification results.

Comment with these commands to change the behavior for this request:

Auto-apply	Compact
gitar auto-apply:on	gitar display:verbose

_{Was this helpful? React with 👍 / 👎 | Gitar}

[sonarqube-next]

Quality Gate passed

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
0 Dependency risks
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarQube

[rombirli]

As discussed the 2 newly introduced issues seem correct, LGTM

[hashicorp-vault-sonar-prod]

📊 Performance Validation complete
🆕 2 new · 🗑️ 0 lost issues
View dashboard