Update SonarSource/sonar-java monorepo to v8.40.0.46617

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
org.sonarsource.java:it-java-plugin-plugins (source)	8.40.0-SNAPSHOT → 8.40.0.46617
org.sonarsource.java:it-java-plugin (source)	8.40.0-SNAPSHOT → 8.40.0.46617
org.sonarsource.java:java-its (source)	8.40.0-SNAPSHOT → 8.40.0.46617

---

Release Notes

SonarSource/sonar-java (org.sonarsource.java:it-java-plugin-plugins)

v8.40.0.46617

Compare Source

Release notes - SonarJava - 8.40

Feature

SONARJAVA-6721 Extend rule S2442: Intrinsic locks should not be used on "java.util.concurrent" objects
SONARJAVA-6722 Create rule S9142: Expensive compilation or preparation operations should not be performed inside loops
SONARJAVA-6754 Update RSPEC before 8.40 release
SONARJAVA-6767 Create rule S9341: Redundant Spring annotations should be removed
SONARJAVA-6768 Port S7438: Incompatible bit masks should not be used in comparisons
SONARJAVA-6769 Create rule S9342: Archive entries should not be empty
SONARJAVA-6770 Provide a reusable aggressive heuristic to identify Java test files
SONARJAVA-6781 Create rule S9344: Bitwise AND operations with zero should be corrected
SONARJAVA-6782 S9355: use Javadoc syntax for almost-Javadoc comments
SONARJAVA-6787 S9351: "BigDecimal.compareTo()" should be used instead of "equals()" for numerical comparison
SONARJAVA-6789 S9353: disallow unescaped '.' as a regex literal
SONARJAVA-6790 S9350: equals() implementations should not compare mismatched members

False Positive

SONARJAVA-6455 S7467: FP on broken semantics
SONARJAVA-6756 Fix FPs is S8989, NOT_SUPPORTED and readOnly clusters
SONARJAVA-6757 Fix FP in S9149 in the case of Intentional Hiding with Deprecation Annotations
SONARJAVA-6758 Fix FPs in S5673, redundant annotations and controllers without mapping clusters and improve RSPEC

Maintenance

SONARJAVA-6730 Update dependency jdx/mise to v2026.8.0
SONARJAVA-6735 Update SonarSource/sonar-plugin-api monorepo to v13.10.0.4437
SONARJAVA-6746 Update SonarSource/sonar-scanner-engine monorepo to v13.7.0.4455
SONARJAVA-6748 Update dependency org.junit:junit-bom to v6.1.3
SONARJAVA-6749 Update SonarSource/sonar-analyzer-commons monorepo to v2.30.0.5193
SONARJAVA-6753 Update dependency org.sonarsource.orchestrator:sonar-orchestrator-junit4 to v6.4.1.4618
SONARJAVA-6755 Prepare next development iteration 8.40.0
SONARJAVA-6759 Ensure S1244 and S9147 do not overlap
SONARJAVA-6766 Update SonarSource/parent-oss monorepo to v11.9.0.86162
SONARJAVA-6773 Update astral-sh/setup-uv action to v10
SONARJAVA-6792 Use imported tree type names in transactional exception check
SONARJAVA-6793 Update dependency org.apache.tomcat.embed:tomcat-embed-jasper to v9.0.121
SONARJAVA-6794 Update dependency org.sonarsource.orchestrator:sonar-orchestrator-junit4 to v6.4.2.4626
SONARJAVA-6795 Update SonarSource/sonar-plugin-api monorepo to v13.11.0.4459
SONARJAVA-6797 Update jdx/mise-action action to v4.2.5
SONARJAVA-6803 Update astral-sh/setup-uv action to v10.0.1
SONARJAVA-6805 Fix QG: Move regex patterns outside of loop
SONARJAVA-6806 Update SonarSource/sonar-scanner-engine monorepo to v13.8.0.4534
SONARJAVA-6807 Update dependency jdx/mise to v2026.8.6
SONARJAVA-6815 Update rule metadata
SONARJAVA-6816 Fix a javadoc comment
SONARJAVA-6817 Update expected Agentic Way profile count

---

Configuration

📅 Schedule: (in timezone CET)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Never, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[hashicorp-vault-sonar-prod]

Renovate Jira issue ID: SONARJAVA-6739

[sonarqube-next]

Quality Gate passed

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
0 Dependency risks
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarQube

[datadog-sonarsource]

⚠️ Warnings

🚦 2 Pipeline jobs failed

Build | Ruling QA (warp-custom-ubuntu-24-04, without-sonarqube-project, LATEST_RELEASE)

View in Datadog · View in GitHub Actions

1 failed test in org.sonar.java.it.JavaRulingTest: Expecting empty but was: 'Issues differences: 2' at JavaRulingTest.spring_mall:200.

Build | Test Analyze

View in Datadog · View in GitHub Actions

Call to URL [***/api/v2/analysis/engine] failed: closed: Received RST_STREAM: Internal error

Useful? React with 👍 / 👎

_{This comment will be updated automatically if new data arrives.
🔗 Commit SHA: 6d7a807 | Docs | View more details | Give us feedback!}

[github-actions]

❌ Ruling needs updating. A fix PR has been created: #5977

Please review and merge it into your branch.