[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
org.sonarsource.analyzer-commons:sonar-performance-measure (source)	2.34.0.15495 → 2.35.0.15509
org.sonarsource.analyzer-commons:sonar-regex-parsing (source)	2.34.0.15495 → 2.35.0.15509
org.sonarsource.analyzer-commons:sonar-analyzer-test-commons (source)	2.34.0.15495 → 2.35.0.15509
org.sonarsource.analyzer-commons:sonar-xml-parsing (source)	2.34.0.15495 → 2.35.0.15509
org.sonarsource.analyzer-commons:sonar-analyzer-recognizers (source)	2.34.0.15495 → 2.35.0.15509
org.sonarsource.analyzer-commons:sonar-analyzer-commons (source)	2.34.0.15495 → 2.35.0.15509

---

Release Notes

SonarSource/sonar-analyzer-commons (org.sonarsource.analyzer-commons:sonar-performance-measure)

v2.35.0.15509

Compare Source

Release notes - Sonar Analyzer Commons - 2.35

Maintenance

ACOMMONS-220 Prepare next development iteration 2.35
ACOMMONS-223 Update CI mise pins to 2026.10.17 for the eMudhra fix
ACOMMONS-224 Update jdx/mise-action action to v5.2.1

---

Configuration

📅 Schedule: (in timezone CET)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Never, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[hashicorp-vault-sonar-prod]

Renovate Jira issue ID: SONARJAVA-7245

[gitar-bot]

Code Review ✅ Approved

🟡 Medium risk · Upgrading analyzer-commons from 2.34 to 2.35 could change shared parsing and analysis behavior across Java checks.

Updates the SonarSource analyzer-commons monorepo dependencies (sonar-performance-measure, sonar-regex-parsing, sonar-xml-parsing, and related modules) from 2.34.0.15495 to 2.35.0.15509. No issues found.

Verification Rules 2/2 met Repos 4 inspected

Functional validation No results

Rules 2 passed 1 not applicable

✅ Internal artifact registries
✅ Repository license compliance

Broader impact Repos 4 inspected

Cross-repo 4 repositories inspected 0 open impacts

SonarSource/sonar-java-symbolic-execution Inspected
SonarSource/sonarlint-intellij Inspected
SonarSource/sonarlint-language-server Inspected
SonarSource/sonarlint-vscode Inspected

Auto-approval Not enabled

Set up

_{For more verification details, comment gitar display:verbose.}

Options

Auto-apply is off → Gitar will not commit updates to this branch.
Display: compact → Showing compact verification results.

Comment with these commands to change the behavior for this request:

Auto-apply	Compact
gitar auto-apply:on	gitar display:verbose

_{Was this helpful? React with 👍 / 👎 | Gitar}

[sonarqube-next]

Quality Gate passed

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
0 Dependency risks
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarQube

[vdiez]

Auto-approved: Renovate dependency update.