From c5e1b7ee2033b6349b95633734a89f22d22fe927 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Mon, 19 Oct 2026 14:15:56 +0000
Subject: [PATCH 1/3] Update Maven dependencies

---
 batch/pom.xml | 4 ++--
 pom.xml       | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/batch/pom.xml b/batch/pom.xml
index 47aa704e..192f3c58 100644
--- a/batch/pom.xml
+++ b/batch/pom.xml
@@ -11,7 +11,7 @@
   <name>SonarScanner Java Library - Batch</name>
 
   <properties>
-    <sonarQubeVersion>25.9.0.112764</sonarQubeVersion>
+    <sonarQubeVersion>26.4.0.121862</sonarQubeVersion>
   </properties>
 
   <dependencies>
@@ -71,7 +71,7 @@
     <dependency>
       <groupId>org.sonarsource.api.plugin</groupId>
       <artifactId>sonar-plugin-api</artifactId>
-      <version>13.2.0.3137</version>
+      <version>14.2.0.5584</version>
       <scope>test</scope>
     </dependency>
     <dependency>
diff --git a/pom.xml b/pom.xml
index 1c524c47..83fe08d2 100644
--- a/pom.xml
+++ b/pom.xml
@@ -117,7 +117,7 @@
       <dependency>
         <groupId>de.siegmar</groupId>
         <artifactId>fastcsv</artifactId>
-        <version>3.7.0</version>
+        <version>4.4.0</version>
       </dependency>
     </dependencies>
   </dependencyManagement>

From df39282ce399abee3ed9747bc301f814a9845c9e Mon Sep 17 00:00:00 2001
From: Michal Zgliczynski <michal.zgliczynski@sonarsource.com>
Date: Tue, 20 Oct 2026 14:31:33 +0200
Subject: [PATCH 2/3] Check bootstrap dependency bytecode against supported
 Java version

---
 lib/pom.xml | 33 +++++++++++++++++++++++++++++++++
 1 file changed, 33 insertions(+)

diff --git a/lib/pom.xml b/lib/pom.xml
index cfb54602..d4afd84f 100644
--- a/lib/pom.xml
+++ b/lib/pom.xml
@@ -109,6 +109,39 @@
 
   <build>
     <plugins>
+      <plugin>
+        <groupId>org.apache.maven.plugins</groupId>
+        <artifactId>maven-enforcer-plugin</artifactId>
+        <executions>
+          <execution>
+            <id>enforce-runtime-java-compatibility</id>
+            <phase>verify</phase>
+            <goals>
+              <goal>enforce</goal>
+            </goals>
+            <configuration>
+              <rules>
+                <!-- The compiler release setting only checks our sources. Bootstrap dependencies must also run on the host JVM,
+                     before JRE provisioning can launch the scanner engine on a newer Java version. -->
+                <enforceBytecodeVersion>
+                  <maxJdkVersion>${maven.compiler.release}</maxJdkVersion>
+                  <ignoredScopes>
+                    <ignoredScope>test</ignoredScope>
+                    <ignoredScope>provided</ignoredScope>
+                  </ignoredScopes>
+                </enforceBytecodeVersion>
+              </rules>
+            </configuration>
+          </execution>
+        </executions>
+        <dependencies>
+          <dependency>
+            <groupId>org.codehaus.mojo</groupId>
+            <artifactId>extra-enforcer-rules</artifactId>
+            <version>1.12.1</version>
+          </dependency>
+        </dependencies>
+      </plugin>
       <plugin>
         <groupId>org.apache.maven.plugins</groupId>
         <artifactId>maven-dependency-plugin</artifactId>

From dab8cbc1d3a7868a38f74a4fd6dc7472d2240848 Mon Sep 17 00:00:00 2001
From: Michal Zgliczynski <michal.zgliczynski@sonarsource.com>
Date: Tue, 20 Oct 2026 14:35:43 +0200
Subject: [PATCH 3/3] Keep FastCSV compatible with Java 11 bootstrapping

---
 pom.xml       | 2 +-
 renovate.json | 7 +++++++
 2 files changed, 8 insertions(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 83fe08d2..1c524c47 100644
--- a/pom.xml
+++ b/pom.xml
@@ -117,7 +117,7 @@
       <dependency>
         <groupId>de.siegmar</groupId>
         <artifactId>fastcsv</artifactId>
-        <version>4.4.0</version>
+        <version>3.7.0</version>
       </dependency>
     </dependencies>
   </dependencyManagement>
diff --git a/renovate.json b/renovate.json
index 14916104..864ef1ac 100644
--- a/renovate.json
+++ b/renovate.json
@@ -7,6 +7,13 @@
     "org.sonarsource.scanner.lib:it"
   ],
   "packageRules": [
+    {
+      "description": "Keep FastCSV on 3.x while scanner bootstrapping supports Java 11; FastCSV 4.x requires Java 17.",
+      "matchPackageNames": [
+        "de.siegmar:fastcsv"
+      ],
+      "allowedVersions": "<4.0.0"
+    },
     {
       "description": "Keep SLF4J 1.x compatibility for Scanner for Maven with Maven < 4.",
       "matchPackageNames": [