v2.48.2

Bug fixes

• kosli attest sonar now works for scans on a SonarQube Cloud short-lived branch. Before, it failed with "Branch '...' is not of type LONG".
  • With --sonar-project-key and --sonar-revision, the revision must be the latest commit analysed on that branch. SonarQube Cloud keeps only that analysis.
  • With report-task.txt or --sonar-ce-task-url, the scan is attested only while it is the latest finished task of the project. If another scan has finished since, or another scan of the branch is still running, the command fails and tells you to use --sonar-project-key and --sonar-revision instead.
• Messages containing % now print correctly. Before, a URL-encoded value such as %2F in an error showed as %!F(MISSING).

Improvements

• Built with Go 1.26.10.

What's Changed

• fix: stop error text being read as a format string by @AlexKantor87 in #1280
• test: add helpers for feeding PR evidence code replies with null fields by @AlexKantor87 in #1285
• fix(deps): build with Go 1.26.10 and pin the builder image by digest by @AlexKantor87 in #1291
• fix(sonar): attest a SonarQube Cloud short-lived branch by project key by @AlexKantor87 in #1295
• fix(sonar): attest a SonarQube Cloud short-lived branch scan found by its CE task by @AlexKantor87 in #1297

Full Changelog: v2.48.1...v2.48.2