From b284b208ed1a51bc942b92ecceb36836e16e284d Mon Sep 17 00:00:00 2001
From: akivayevdayev-debug <akiva.yevdayev@icloud.com>
Date: Sat, 15 Aug 2026 13:18:28 -0400
Subject: [PATCH] Bump SonarSource/sonarqube-scan-action from v5 to v8.1.0

The pinned v5 action is flagged by SonarCloud as no longer supported
and containing a security vulnerability (surfaced as a CI warning
pointing at sonarsource/sonarqube-scan-action@v6+). Matches the
version SonarCloud's own setup wizard currently recommends.
---
 .github/workflows/ci.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index df20182..a5e7af7 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -35,6 +35,6 @@ jobs:
         run: pytest --cov-report=xml
 
       - name: SonarCloud Scan
-        uses: SonarSource/sonarqube-scan-action@2f77a1ec69fb1d595b06f35ab27e97605bdef703 # v5
+        uses: SonarSource/sonarqube-scan-action@7006c4492b2e0ee0f816d36501671557c97f5995 # v8.1.0
         env:
           SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}