Skip to content

Update dependency org.jetbrains.kotlin:kotlin-stdlib to v2.5.20-dev-3282 #672

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
vdiez merged 1 commit into from
Nov 12, 2026
Merged

Update dependency org.jetbrains.kotlin:kotlin-stdlib to v2.5.20-dev-3282 #672

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion pom.xml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -70,7 +70,7 @@
<sonar.scanner.version>13.19.0.6869</sonar.scanner.version>
<!-- Version required by sonar-orchestrator due to okhttp3.
If it is not explicit, then we will use the version used by sonarlint-core, which is not compatible. -->
<kotlin.version>2.4.21</kotlin.version>
<kotlin.version>2.5.20-dev-3282</kotlin.version>
Comment on lines 71 to +73

@gitar-bot gitar-bot Bot Nov 12, 2026 •
edited
Loading

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Bug: Kotlin pinned to an unstable dev build (2.5.20-dev-3282)

This PR changes the pinned kotlin.version from the stable 2.4.21 to 2.5.20-dev-3282. That is a JetBrains internal dev build, not a release, beta or RC. JetBrains normally publishes these builds to its own dev repository rather than Maven Central. This pom declares no <repositories>, so resolution depends on whatever the SonarSource parent or repox proxies, and such builds can be removed or rebuilt at any time.

The comment above the property (pom.xml:71-72) says this version is pinned on purpose so that sonar-orchestrator's okhttp3 gets a compatible kotlin-stdlib. A dev snapshot gives no compatibility guarantee for that, so the IT classpath could break or become non-reproducible.

Fix: keep 2.4.21 or move to the latest stable Kotlin release. Also add a Renovate rule to renovate.json that ignores -dev- versions of org.jetbrains.kotlin, so this PR doesn't come back.

Was this helpful? React with 👍 / 👎

<!-- `its/` are intentionally scanned; only the test project sources are excluded, as we don't have much control over them. -->
<sonar.sca.exclusions>its/sources/**,sonar-xml-plugin/src/test/resources/**</sonar.sca.exclusions>
<maven.test.redirectTestOutputToFile>true</maven.test.redirectTestOutputToFile>
Expand Down
Loading