chore: update base images in steps jira-issue-manager, sonar-gate-check

incubating/jira-issue-manager/Dockerfile

@@ -1,10 +1,10 @@
-FROM python:3.7.9-slim-buster
+FROM python:3.14-slim-trixie
 
-ENV LANG C.UTF-8
+ENV LANG=C.UTF-8
 
-RUN pip install --no-cache-dir jira
+RUN pip install --no-cache-dir jira==3.10.5 certifi==2026.10.23
 
 COPY script/. /
 
 ENTRYPOINT ["python", "/jira_issue_manager.py"]
-CMD [""]
+CMD [""]

incubating/jira-issue-manager/step.yaml

@@ -2,7 +2,7 @@ kind: step-type
 version: '1.0'
 metadata:
   name: jira-issue-manager
-  version: 1.0.13
+  version: 1.0.14
   title: Jira Issue Manager
   isPublic: true
   description: Create, Update, & Validate Jira Issues
@@ -246,7 +246,7 @@ spec:
   stepsTemplate: |-
     main:
         name: jira-issue-manager
-        image: quay.io/codefreshplugins/jira-issue-manager:1.0.13
+        image: quay.io/codefreshplugins/jira-issue-manager:1.0.14
         environment:
         [[ range $key, $val := .Arguments ]]
           - '[[ $key ]]=[[ $val ]]'

incubating/sonar-quality-gates-checker/Dockerfile

@@ -1,5 +1,5 @@
-FROM python:3.9.1-alpine3.13
+FROM python:3.14-alpine3.24
 
-RUN pip install --no-cache-dir python-sonarqube-api
+RUN pip install --no-cache-dir requests==2.34.2 certifi==2026.10.23
 
 COPY lib/sonarqube-api.py /sonarqube-api.py

incubating/sonar-quality-gates-checker/codefresh.yml

@@ -1,7 +1,7 @@
 version: '1.0'
 steps:
   Clone:
-    title: Cloning jira issue manager repository
+    title: Cloning steps repository
     type: "git-clone"
     arguments:
       repo: '${{CF_REPO_OWNER}}/${{CF_REPO_NAME}}'
@@ -12,30 +12,30 @@ steps:
     title: Getting Plugin Version
     image: codefresh/cli
     commands:
-      - cf_export PLUGIN_VERSION=$(yq -r .metadata.version ./steps/incubating/sonarqube/step.yaml)
+      - cf_export PLUGIN_VERSION=$(yq -r .metadata.version ./steps/incubating/sonar-quality-gates-checker/step.yaml)
 
   BuildImage:
     title: Building Docker Image
     type: build
-    working_directory: "./steps/incubating/sonarqube"
+    working_directory: "./steps/incubating/sonar-quality-gates-checker"
     dockerfile: "Dockerfile"
-    image_name: codefreshplugins/sonarqube
+    image_name: codefreshplugins/sonar-quality-gates-checker
 
-PushingToRegistries:
-    title: Pushing to Registry
-    type: push
-    candidate: ${{BuildImage}}
-    tags:
-    - "latest"
-    - "${{PLUGIN_VERSION}}"
-    when:
-      branch:
-        only:
-          - master
-    scale:
-      PushingToDockerHubRegistry:
-        title: Pushing To DockerHub Registry
-        registry: dockerhub
-      PushingToQuayRegistry:
-        title: Pushing To Quay Registry
-        registry: cfpluginmgr-quay
+  PushingToRegistries:
+      title: Pushing to Registry
+      type: push
+      candidate: ${{BuildImage}}
+      tags:
+      - "latest"
+      - "${{PLUGIN_VERSION}}"
+      when:
+        branch:
+          only:
+            - master
+      scale:
+        PushingToDockerHubRegistry:
+          title: Pushing To DockerHub Registry
+          registry: dockerhub
+        PushingToQuayRegistry:
+          title: Pushing To Quay Registry
+          registry: cfpluginmgr-quay

incubating/sonar-quality-gates-checker/lib/sonarqube-api.py

@@ -1,31 +1,30 @@
 import os
 import sys
-from sonarqube import SonarCloudClient
-from sonarqube import SonarQubeClient
 import json
+import requests
 
 
-def exportResults(status): 
+def exportResults(status):
     print("\nExporting Results")
 
-    qualitygates_status_json = json.dumps(status) 
+    qualitygates_status_json = json.dumps(status)
     qualitygates_status= status['projectStatus']['status']
 
     env_file_path = "/meta/env_vars_to_export"
 
     if not os.path.exists(env_file_path):
-        print(f"Quality Gates status is \n'{qualitygates_status}'")     
-        print(f"Quality Gates status JSON is \n'{qualitygates_status_json}'")        
+        print(f"Quality Gates status is \n'{qualitygates_status}'")
+        print(f"Quality Gates status JSON is \n'{qualitygates_status_json}'")
     else:
         env_file = open(env_file_path, "a")
-        qualitygates_status_json_file_path = f"/codefresh/volume/sonarqualitygates-{os.getenv('CF_SHORT_REVISION')}.json"          
+        qualitygates_status_json_file_path = f"/codefresh/volume/sonarqualitygates-{os.getenv('CF_SHORT_REVISION')}.json"
         env_file.write("SONAR_QUALITYGATES_STATUS=" + qualitygates_status + "\n")
         env_file.write("SONAR_QUALITYGATES_STATUS_JSON_PATH=" + qualitygates_status_json_file_path + "\n")
         env_file.close()
 
-        qualitygates_status_json_file = open(qualitygates_status_json_file_path, "w") 
-        json.dump(status, qualitygates_status_json_file, indent = 4) 
-        qualitygates_status_json_file.close() 
+        qualitygates_status_json_file = open(qualitygates_status_json_file_path, "w")
+        json.dump(status, qualitygates_status_json_file, indent = 4)
+        qualitygates_status_json_file.close()
 
 def actBasedOnStatus(status):
     qualitygates_status = status['projectStatus']['status']
@@ -51,18 +50,31 @@ def main():
     sonar_url = os.getenv('SONAR_HOST_URL', 'https://sonarcloud.io')
 
     if sonarcloud_token:
-        sonar = SonarCloudClient(sonarcloud_url=sonar_url, token=sonarcloud_token)
+        auth = (sonarcloud_token, "")
+    elif sonarqube_username and sonarqube_password:
+        auth = (sonarqube_username, sonarqube_password)
     else:
-        sonar = SonarQubeClient(sonarqube_url=sonar_url, username=sonarqube_username, password=sonarqube_password)
+        auth = None
 
-    # Code: https://github.com/shijl0925/python-sonarqube-api/blob/376cf1d6ef231ee084694c77dadf551733395d4f/sonarqube/community/qualitygates.py#L182
-    # Docs: https://python-sonarqube-api.readthedocs.io/en/1.2.1/examples/qualitygates.html#
-    if pr is not None: 
+    if pr is not None:
         print(f"PR Quality Gate for PR #{pr}")
         branch = None # since the QG check accepts only branch or PR
-    qualitygates_status = sonar.qualitygates.get_project_qualitygates_status(projectKey=sonar_project, branch=branch, pullRequest=pr)
+
+    # Docs: https://next.sonarqube.com/sonarqube/web_api/api/qualitygates/project_status
+    # requests drops parameters whose value is None, so only one of branch/pullRequest is sent.
+    url = sonar_url.rstrip("/") + "/api/qualitygates/project_status"
+    params = {"projectKey": sonar_project, "branch": branch, "pullRequest": pr}
+    try:
+        response = requests.get(url, params=params, auth=auth, timeout=60)
+    except requests.exceptions.RequestException as exc:
+        print(f"Failed to call {url}: {exc}")
+        sys.exit(1)
+    if not response.ok:
+        print(f"Failed to get Quality Gates status: HTTP {response.status_code} from {url}\n{response.text}")
+        sys.exit(1)
+    qualitygates_status = response.json()
     exportResults(qualitygates_status)
     actBasedOnStatus(qualitygates_status)
 
 if __name__ == "__main__":
-    main()
+    main()

incubating/sonar-quality-gates-checker/step.yaml

@@ -2,7 +2,7 @@ kind: step-type
 version: '1.0'
 metadata:
   name: sonar-quality-gates-checker
-  version: 0.1.3
+  version: 0.1.4
   isPublic: true
   description: Check Quality Gates from Sonarqube or Sonarcloud
   sources:
@@ -84,11 +84,11 @@ spec:
                 "description": "Path to the JSON file response of the Quality Gates status of a Project" 
             }
         }
-    }  
+    }
   stepsTemplate: |-
     sonar:
       name: sonar
-      image: quay.io/codefreshplugins/sonar-quality-gates-checker:0.1.2
+      image: quay.io/codefreshplugins/sonar-quality-gates-checker:0.1.4
       environment:
       [[ range $key, $val := .Arguments ]]
         - '[[ $key ]]=[[ $val ]]'