Update sonar-plugin-api to v13.6.0.4371

[renovate]

Before updating the plugin-api version, make sure to check the compatibility matrix and stick to the lowest denominator.

This PR contains the following updates:

Package	Change	Age	Confidence
org.sonarsource.api.plugin:sonar-plugin-api-test-fixtures (source)	13.5.0.4319 → 13.6.0.4371
org.sonarsource.api.plugin:sonar-plugin-api (source)	13.5.0.4319 → 13.6.0.4371

---

Release Notes

SonarSource/sonar-plugin-api (org.sonarsource.api.plugin:sonar-plugin-api-test-fixtures)

v13.6.0.4371

Compare Source

What's Changed

• PLUGINAPI-182 Rework the new manifest module by @​henryju in #​280
• PLUGINAPI-183 Update compatibility list for 26.3 and 2025.1.6 by @​hatem-amairi-sonarsource in #​281
• PLUGINAPI-184 Update README for 2025.4.5, 2026.1.1 and 2026.2 compati… by @​emma44-m in #​282
• PLUGINAPI-185 Update README for 2025.4.6, 2026.1.2 and 2026.2.1 and 2… by @​emma44-m in #​283
• PLUGINAPI-186 Deprecate PropertyDefinitions by @​antoine-vinot-sonarsource in #​284
• SC-45756 Migrate to dateless headers by @​claire-villard-sonarsource in #​285
• PLUGINAPI-187 SubmitReview: Use Vault token by @​pavel-mikula-sonarsource in #​287
• PLUGINAPI-189 Add new metrics by @​OrlovAlexander85 in #​289
• PLUGINAPI-189 Add mapper from Severities by @​OrlovAlexander85 in #​291
• PLUGINAPI-188 Update README for sqcb 26.5 by @​emma44-m in #​288

New Contributors

• @​hatem-amairi-sonarsource made their first contribution in #​281
• @​emma44-m made their first contribution in #​282

Full Changelog: SonarSource/sonar-plugin-api@13.5.0.4319...13.6.0.4371

---

Configuration

📅 Schedule: (in timezone CET)

• Branch creation
  • "before 4am on Monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: gradle/libs.versions.toml

Command failed: ./gradlew -Dorg.gradle.jvmargs=-Xms512m -Xmx512m --console=plain --dependency-verification lenient -q properties

FAILURE: Build failed with an exception.

* Where:
Settings file '/tmp/renovate/repos/github/SonarSource/sonar-php/settings.gradle.kts' line: 21

* What went wrong:
Plugin [id: 'org.sonarsource.cloud-native.common-settings'] was not found in any of the following sources:

- Gradle Core Plugins (plugin is not in 'org.gradle' namespace)
- Included Builds (No included builds contain this plugin)
- Plugin Repositories (plugin dependency must include a version number for this source)

* Try:
> Run with --stacktrace option to get the stack trace.
> Run with --info or --debug option to get more log output.
> Run with --scan to get full insights from a Build Scan (powered by Develocity).
> Get more help at https://help.gradle.org.

BUILD FAILED in 44s

[sonar-review-alpha]

Summary

⚠️ The PR description exceeded the analysis limit and was truncated. The review may not reflect all context.

This PR updates the sonar-plugin-api dependency from v13.5.0.4319 to v13.6.0.4371 (patch update). The change is minimal—only one version number updated in the Gradle version catalog. The release includes manifest module rework, compatibility updates for SonarQube 26.5 and future versions, new metrics, and deprecation of PropertyDefinitions.

What reviewers should know

What to check:

• Verify compatibility with sonar-plugin-api 13.6.0.4371 is confirmed for SonarQube 26.2 (the version currently in use according to libs.versions.toml)
• Confirm that the new metrics added in this release don't require plugin changes or adjustments
• Note that PropertyDefinitions is deprecated in this release—if used, plan a migration path (though this may not impact sonar-php)

Where to start:

• The actual code change is only in gradle/libs.versions.toml
• No breaking changes are evident from the release notes, but the manifest module rework (PLUGINAPI-182) should be monitored for any integration concerns
• Build and test execution will validate compatibility with the rest of the plugin codebase

Key insight from release notes:
PropertyDefinitions deprecation and new metrics additions are backward-compatible changes, so this should be a safe update if the plugin doesn't have specific compatibility constraints.

---

• Generate Walkthrough
• Generate Diagram

🗣️ Give feedback

[hashicorp-vault-sonar-prod]

Renovate Jira issue ID: SONARPHP-1820

[sonar-review-alpha]

LGTM! ✅

Clean, minimal dependency bump — nothing to flag.

🗣️ Give feedback