Skip to content

build(deps): bump JetBrains/qodana-action from 2026.1.3 to 2026.2.0 - #111

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/JetBrains/qodana-action-2026.2.0
Open

build(deps): bump JetBrains/qodana-action from 2026.1.3 to 2026.2.0#111
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/JetBrains/qodana-action-2026.2.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 3, 2026

Copy link
Copy Markdown
Contributor

Bumps JetBrains/qodana-action from 2026.1.3 to 2026.2.0.

Release notes

Sourced from JetBrains/qodana-action's releases.

v2026.2.0

Changelog

  • 69c00ce 🐛 Fix azure release workflow husky error (#604)
  • f4341f6 QD-14362 bump color able axios version to 1.15.2
  • 97d17d6 QD-13746 pass Qodana exit code in action
  • cf5541e QD-12982 skip pull in action if arg is specified
  • f28920a :docs: Update qodana-maven-plugin version to 2026.1.3
  • 1f6f293 QD-15472 bump tar dependency
  • e11337f QD-15410 check that in case of pr-mode: true the repository checked out to source branch
  • 8069c0f QD-15420 Warn about sanity problems in the summary posted in the pull request comments
  • d37471b 🐛 QD-14507 Add title parameter to gh release create command (#593)
  • b588768 QD-15622 ⬆️ Update qodana to v2026.2.0 (#611)
Commits
  • b588768 QD-15622 ⬆️ Update qodana to v2026.2.0 (#611)
  • d37471b 🐛 QD-14507 Add title parameter to gh release create command (#593)
  • 8069c0f QD-15420 Warn about sanity problems in the summary posted in the pull request...
  • e11337f QD-15410 check that in case of pr-mode: true the repository checked out to so...
  • 1f6f293 QD-15472 bump tar dependency
  • f28920a :docs: Update qodana-maven-plugin version to 2026.1.3
  • cf5541e QD-12982 skip pull in action if arg is specified
  • 97d17d6 QD-13746 pass Qodana exit code in action
  • f4341f6 QD-14362 bump color able axios version to 1.15.2
  • 69c00ce 🐛 Fix azure release workflow husky error (#604)
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Open in Devin Review

Bumps [JetBrains/qodana-action](https://github.com/jetbrains/qodana-action) from 2026.1.3 to 2026.2.0.
- [Release notes](https://github.com/jetbrains/qodana-action/releases)
- [Commits](JetBrains/qodana-action@v2026.1.3...v2026.2.0)

---
updated-dependencies:
- dependency-name: JetBrains/qodana-action
  dependency-version: 2026.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Aug 3, 2026
@afonsoft

afonsoft commented Aug 3, 2026

Copy link
Copy Markdown
Owner

Snyk checks have passed. No issues have been found so far.

Status Scan Engine Critical High Medium Low Total (0)
Open Source Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@devin-ai-integration devin-ai-integration Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Devin Review found 2 potential issues.

Open in Devin Review

- name: 🔍 Qodana Scan
id: qodana
uses: JetBrains/qodana-action@v2026.1.3
uses: JetBrains/qodana-action@v2026.2.0

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔍 Cache keys still reference Qodana 2025.3 while action moves to 2026.2.0

The Qodana step's primary-cache-key/additional-cache-key (.github/workflows/code-quality.yml:38-39) are hardcoded to qodana-2025.3-..., which no longer matches the action version being used (now 2026.2.0). This is pre-existing (the keys were already stale for 2026.1.3), but the bump makes it more misleading: caches produced by different Qodana major versions share the same key, which can lead to reusing incompatible cache contents. Consider parameterizing the version in the cache key.

Open in Devin Review

Was this helpful? React with 👍 or 👎 to provide feedback.

- name: 🔍 Qodana Scan
id: qodana
uses: JetBrains/qodana-action@v2026.1.3
uses: JetBrains/qodana-action@v2026.2.0

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔍 New action release changes exit-code propagation semantics

The 2026.2.0 release notes include "QD-13746 pass Qodana exit code in action" and "QD-15410 check that in case of pr-mode: true the repository checked out to source branch". The step uses continue-on-error: true (.github/workflows/code-quality.yml:31) so a newly propagated non-zero exit (with --fail-threshold 0) won't fail the job, but steps.qodana.outcome semantics may change for any downstream consumers. The checkout step also pins ref: ${{ github.event.pull_request.head.sha }} rather than the source branch, which could interact with the new pr-mode branch check if pr-mode is ever enabled.

Open in Devin Review

Was this helpful? React with 👍 or 👎 to provide feedback.

@sonarqubecloud

sonarqubecloud Bot commented Aug 3, 2026

Copy link
Copy Markdown

@github-actions

github-actions Bot commented Aug 3, 2026

Copy link
Copy Markdown

Qodana Community for .NET

10 new problems were found

Inspection name Severity Problems
Access to a static member of a type via a derived type 🔶 Warning 4
Local variable hides member 🔶 Warning 4
Member can be made private: Non-private accessibility ◽️ Notice 2

💡 Qodana analysis was run in the pull request mode: only the changed files were checked

View the detailed Qodana report

To be able to view the detailed Qodana report, you can either:

To get *.log files or any other Qodana artifacts, run the action with upload-result option set to true,
so that the action will upload the files as the job artifacts:

      - name: 'Qodana Scan'
        uses: JetBrains/qodana-action@v2026.2.0
        with:
          upload-result: true
Contact Qodana team

Contact us at qodana-support@jetbrains.com

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant