chore(deps): update dependency org.sonarsource.javascript:sonar-javascript-plugin to v12

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
org.sonarsource.javascript:sonar-javascript-plugin (source)	11.7.1.36988 → 12.0.0.38664

---

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

---

Release Notes

SonarSource/sonar-javascript (org.sonarsource.javascript:sonar-javascript-plugin)

v12.0.0.38664

Compare Source

Release notes - SonarJS - 12.0

False Positive

JS-1096 Fix FP on S6324: Control chars in RFC/standards-compliant validation patterns
JS-1099 Fix FP on S6324: Control chars in regex for ANSI escape sequence matching
JS-1100 Fix FP on S6819: Inline SVGs with ARIA roles flagged despite valid use cases
JS-1101 Fix FP on S6819: role="img" flagged on non-image visual content and containers
JS-1102 Fix FP on S6819: Custom table widgets with legitimate ARIA roles
JS-1103 Fix FP on S1848: Framework constructors with DOM initialization side effects
JS-1108 Fix FP on S7739: Custom Promise/Thenable implementations with required then method
JS-1112 Fix FP on S2699: Database operations that validate through exceptions
JS-1113 Fix FP on S7759: Polyfill fallback using Date#getTime() for Date.now()
JS-1114 Fix FP on S3504: TypeScript ambient 'declare var' not runtime declarations
JS-1115 Fix FP on S4335: string & {} and number & {} patterns for type autocomplete
JS-1116 Fix FP on S4335: Intersections with {} in generic type manipulation patterns
JS-1120 Fix FP on S2310: Iterator variable reassignment in for-of/for-in loops
JS-1121 Fix FP on S2310: Intentional loop counter skip-ahead in parsing code
JS-1123 Fix FP on S7718: Minified code with auto-generated catch parameter names
JS-1124 Fix FP on S7718: Semantically meaningful catch parameter names flagged
JS-1135 Fix FP on S3735: Union types containing Promise and void/undefined
JS-1155 Fix FP on S6661: Custom 'assign' functions flagged as Object.assign
JS-1173 Fix S2301 false positive for boolean parameters in JSX contexts
JS-1176 Fix FP on S5256: Reusable table wrapper components flagged incorrectly
JS-1177 Fix FP on S7739: Validation library 'then' config property flagged incorrectly
JS-1179 Fix FP on S5850: Regex anchors with alternation for trimming operations
JS-1303 Fix FP on S6440: underscore-prefixed components flagged despite being valid FC

Bug

JS-1192 Do not crash when semver fails to get minimum version of react

Improvement

JS-168 Fix S4328 (no-implicit-dependencies): Support query parameters
JS-290 Fix FP S4165 (no-redundant-assignments)
JS-627 Fix FP S2699 (assertions-in-tests): support other test libraries

Task

JS-1158 remove failing projects
JS-1159 fix issues
JS-1160 Fix bump-versions workflow to update revision property
JS-1161 fix issues with project
JS-1162 Add new projects 2026-01-26
JS-1163 Add new projects 2026-01-26
JS-1164 Add new projects 2026-01-26
JS-1165 Add new projects 2026-01-27
JS-1166 Add new projects 2026-01-27
JS-1167 remove broken projects, fixed install and added retry around checkout…
JS-1168 Automate eslint-plugin-sonarjs changelog update
JS-1169 Skip eslint-plugin label for external/decorated rules
JS-1172 Add new projects 2026-01-28
JS-1174 Fix SQ quality gate
JS-1175 fix projects
JS-1183 Add new projects 2026-01-28
JS-1184 Add new projects 2026-01-28
JS-1187 Always bundle API classes in the final artifact
JS-1188 remoe failing projects
JS-1189 Add A3S Docker workflow for Repox publishing
JS-1194 feat(S2077): Add use getFullyQualifiedname & add sqlite3
JS-1195 Add new projects 2026-01-30
JS-1196 Add new projects 2026-01-30
JS-1197 feat: add branded types for Unix path handling
JS-1198 Fix S2234 performance issue with complex destructuring patterns
JS-1203 Add Tailwind CSS v4 at-rules to S4662 ignore list
JS-1204 Add new projects 2026-02-02
JS-1205 Add new projects 2026-02-02
JS-1207 Skip minified/bundled JavaScript embedded in HTML/YAML files
JS-1208 feat(S6418): Add support for MemberExpression
JS-1209 feat(S6437): Add support for express-session
JS-1210 Add new projects 2026-02-03
JS-1211 Add new projects 2026-02-03
JS-1212 Add ACLI Jira formatting guide for Claude
JS-1213 Remove raw types
JS-1214 feat (S5247): Add support for Swig
JS-1215 Use aggregate option to report JaCoCo coverage
JS-1216 feat: add test execution reporting for SonarCloud
JS-1218 Simplified sourcefile store
JS-1219 Add ignoreFunctions option to S4653 (unit-no-unknown)
JS-1222 Clean up failing projects
JS-1223 Add new projects 2026-02-06
JS-1229 S3799: Enable allowObjectPatternsAsParameters to fix Playwright FPs
JS-1230 Revert "Update dependency eslint to v10"
JS-1232 Add AWS TLS PFS policies to the valid ones
JS-1234 Use new jacoco aggregate report paths property
JS-1298 Allow bot PRs to trigger eslint-plugin Jira labeling
JS-1311 PoC: Babel parserOverride for TC39 module declarations
JS-1312 Fix ESLint plugin release action
JS-1313 Test: Re-enable rspec-maven-plugin for rule data generation
JS-1314 drop mavenCentralSync and update slack channel
JS-1317 Fix changelog workflow permissions by using default GITHUB_TOKEN
JS-1318 add annotation
JS-1327 Update CssMetricsTest expected ncloc for SonarHtml 3.24
JS-1329 Fix promote job being skipped on non-schedule builds
JS-1332 Fix implementation value for decorated rules in meta.ts
JS-1333 fix(S7790): Prevent references to target FQNs from raising
JS-1336 Fix infinite loop in getFullyQualifiedNameTS when import is shadowed
JS-1338 Remove obsolete release.yml workflow
JS-1339 Fix Jira labeling workflow failing on PR titles with backticks
JS-1340 Add sonar.javascript.createTSProgramForOrphanFiles flag

v11.8.0.37897

Compare Source

Release notes - SonarJS - 11.8

New Feature

JS-222 Create rule: do not provide to map() a callback function that takes (optionally) more than 1 parameter as it might have unexpected results

Bug

JS-999 Avoid infinite loop in module-ts

Improvement

JS-90 Fix FP S3801 (no-inconsistent-returns): Ignore switch handling all variants
JS-106 FP in S3801 when throw is in child functions
JS-121 Add quick fix for S1125 (no-redundant-boolean): Boolean literals should not be used in comparisons
JS-124 Fix FP S3353 (prefer-const): uninitialized variable
JS-384 S1854 Useless assignment false-positive when using variables in try/catch blocks
JS-506 FP in S6759 props should be readonly
JS-638 Fix S4721 (os-command) location error
JS-754 S6418: Should handle ternary expression and obejct assignments
JS-861 Implement new logic for rule S7727 (no-array-callback-reference) and add to Sonarway: only raise when callback has multiple arguments
JS-888 Add exception to S7763 when default export is renamed.
JS-917 Fix S7728 Check if object is iterable before raising issue
JS-1007 Fix S6582: Prefer optional chaining expressions
JS-1008 Fix S4325: Remove unnecessary type assertions
JS-1025 Fix S6478 false positives for react-intl rich text formatting

Task

JS-971 Automatically apply jira label eslint-plugin to tickets touching packages/jsts/src/rules
JS-978 Ignore own version for renovate
JS-979 Prepare for release 10.21.2
JS-983 Remove orchestrator cache from Win Sonarlint job
JS-986 Make nodejs-runtime dependency explicit
JS-990 Cache nodejs-runtime dependency separately in CI
JS-991 Replace config-maven with get-build-number in CI
JS-992 Fix red master
JS-993 Split Windows QA jobs for faster CI
JS-994 Fix S2699 to recognize chained expect expressions
JS-995 Add orchestrator cache to fast-tests jobs
JS-996 Cache SonarJS artifacts per CI run to avoid re-downloading
JS-997 Migrate from deprecated cache action to gh-action_cache
JS-998 Optimize CI caches: save only on master, restore on branches
JS-1000 Experiment: Use artifacts for SonarJS m2 cache
JS-1002 Run DEV tests only on nightly schedule and skip cache
JS-1004 Use rolling cache for orchestrator with monthly invalidation
JS-1005 sonar-jasmine-plugin to follow dev/release versioning
JS-1006 Disable Renovate updates for @​typescript/native-preview
JS-1022 Add automatic ruling update for PRs
JS-1028 Add build-time quickfix validation script
JS-1029 Improve ruling report: compare against master and reuse comments
JS-1033 Add CLAUDE.md for Claude Code guidance
JS-1037 Fix npm vulnerability in dependencies
JS-1062 Fix reliability issues (S7723, S7727)
JS-1063 Fix S7727 false positives on non-array method calls
JS-1064 Fix S7739: Skip no-thenable rule when Yup or Joi are dependencies
JS-1065 Fix S6747: Ignore Next.js and Emotion specific props
JS-1066 Fix S6774: Skip propTypes check for forwardRef in React 19+
JS-1067 Fix S1848: Add Obsidian to exceptions for unused instantiation
JS-1070 Fix S7770: Skip type predicate functions
JS-1125 Bump version to 11.8.0-SNAPSHOT
JS-1127 Fix releasability workflow not running
JS-1128 Fix: Update crypto.verify in S6437
JS-1129 Move releasability check into build workflow
JS-1131 Fix CSS ruling tests
JS-1133 add new projects
JS-1134 Remove redundant npm build scripts
JS-1136 Fix SonarCloud quality gate code smells
JS-1137 Fix maven cache miss on PR branches
JS-1145 Fix projects
JS-1146 Add new projects 2026-01-22
JS-1148 Set runner-environment to github-ubuntu-latest-s for automated-release
JS-1157 Fix automated-release workflow configuration

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Never, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[hashicorp-vault-sonar-prod]

Renovate Jira issue ID: SLCORE-2172