Update SonarQube plugin version to 2.6.0

[Krosovok]

Pull Request Checklist

• I have read and followed the CONTRIBUTING.md guidelines.
• I have read and followed the Guidance for submissions involving paid services.
• My contribution adds a new instruction, prompt, agent, skill, workflow, or canvas extension file in the correct directory.
• The file follows the required naming convention.
• The content is clearly structured and follows the example format.
• I have tested my instructions, prompt, agent, skill, workflow, or canvas extension with GitHub Copilot.
• I have run npm start and verified that README.md is up to date.
• I am targeting the main branch for this pull request.

---

Description

New version adds instructions to use new SonarQube CLI command when available to fetch Quality Gate status.

---

Type of Contribution

• New instruction file.
• New prompt file.
• New agent file.
• New plugin.
• New skill file.
• New agentic workflow.
• New canvas extension.
• Update to existing instruction, prompt, agent, plugin, skill, workflow, or canvas extension.
• Other (please specify):

---

Additional Notes

---

By submitting this pull request, I confirm that my contribution abides by the Code of Conduct and will be licensed under the MIT License.

[github-actions]

🔒 PR Risk Scan Results

Scanned 2 changed file(s).

Severity	Count
🔴 High	0
🟠 Medium	0
ℹ️ Info	0

✅ No matching risk patterns were detected in changed files.

This is an automated soft-gate report. Findings indicate review targets and do not block merge by themselves.

[github-actions]

🛑 External plugin PR checks failed (submitter fixes required)

• Changed entries detected: 3
• Workflow state label: requires-submitter-fixes
• Status legend: ✅ pass · ⚠️ warning · 🛑 fail

Per-plugin quality summary

Plugin	spec compliance (non-blocking)	vally lint	install smoke test	version match	ref/sha consistency	canvas structure	overall	source tree
gh-skills-builder	⚠️ warning	✅ pass	✅ pass	✅ pass	✅ pass	⚪ not_run	✅ pass	6ec77a69d7203e5df01fd4caa4745089f6930f5d
sonarqube	⚠️ warning	✅ pass	✅ pass	✅ pass	⚪ not_run	⚪ not_run	✅ pass	2.6.0
sumo-logic	✅ pass	✅ pass	✅ pass	✅ pass	🛑 fail	⚪ not_run	🛑 fail	804c0909c20cf3b247df3b5de60bb94f8b65c315

Gate output details

gh-skills-builder - spec compliance (⚠️ warning)

Agent Plugins v1.0.0 manifest warnings:
- manifest location is ".github/plugin/plugin.json"; expected "plugin.json" at plugin root
- $schema should be "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json"
- top-level field "agents" is not part of Agent Plugins v1.0.0
- top-level field "skills" is not part of Agent Plugins v1.0.0
- schema validation: manifest must have required property '$schema'
- schema validation: manifest must NOT have additional properties
- schema validation: manifest must NOT have additional properties

gh-skills-builder - vally lint (✅ pass)

✅ create-github-skills-outline (2/2 checks passed)
    ✓ [spec-compliance] All 1 skill(s) are spec-compliant.
        ✓ spec-compliance: All spec checks passed.
    ✓ [valid-refs] All file references across 1 skill(s) are valid.
        ✓ valid-refs: All file references resolve to existing files within the skill directory.

1 skill(s) linted, 1 passed

✅ bootstrap-github-skills-exercise (2/2 checks passed)
    ✓ [spec-compliance] All 1 skill(s) are spec-compliant.
        ✓ spec-compliance: All spec checks passed.
    ✓ [valid-refs] All file references across 1 skill(s) are valid.
        ✓ valid-refs: All file references resolve to existing files within the skill directory.

1 skill(s) linted, 1 passed

✅ review-github-skills-exercise (2/2 checks passed)
    ✓ [spec-compliance] All 1 skill(s) are spec-compliant.
        ✓ spec-compliance: All spec checks passed.
    ✓ [valid-refs] All file references across 1 skill(s) are valid.
        ✓ valid-refs: All file references resolve to existing files within the skill directory.

1 skill(s) linted, 1 passed

✅ publish-github-skills-exercise (2/2 checks passed)
    ✓ [spec-compliance] All 1 skill(s) are spec-compliant.
        ✓ spec-compliance: All spec checks passed.
    ✓ [valid-refs] All file references across 1 skill(s) are valid.
        ✓ valid-refs: All file references resolve to existing files within the skill directory.

1 skill(s) linted, 1 passed

gh-skills-builder - install smoke test (✅ pass)

Install smoke test succeeded. Verified /tmp/external-plugin-quality-uZcTWz/copilot-home/.copilot/installed-plugins/external-plugin-intake/gh-skills-builder/.github/plugin/plugin.json.

gh-skills-builder - version match (pass)

- v1.0.4: matched version "1.0.4" at ".github/plugin/plugin.json".
- 6ec77a69d7203e5df01fd4caa4745089f6930f5d: matched version "1.0.4" at ".github/plugin/plugin.json".

gh-skills-builder - ref/sha consistency (pass)

source.ref "v1.0.4" resolves to the same commit as source.sha "6ec77a69d7203e5df01fd4caa4745089f6930f5d".

gh-skills-builder - canvas structure (not_run)

Canvas structure gate skipped because plugin is not tagged with "canvas".

sonarqube - spec compliance (⚠️ warning)

Agent Plugins v1.0.0 manifest warnings:
- manifest location is ".github/plugin/plugin.json"; expected "plugin.json" at plugin root
- $schema should be "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json"
- schema validation: manifest must have required property '$schema'

sonarqube - vally lint (✅ pass)

✅ sonar-analyze (2/2 checks passed)
    ✓ [spec-compliance] All 1 skill(s) are spec-compliant.
        ✓ spec-compliance: All spec checks passed.
    ✓ [valid-refs] All file references across 1 skill(s) are valid.
        ✓ valid-refs: All file references resolve to existing files within the skill directory.
✅ sonar-coverage (2/2 checks passed)
    ✓ [spec-compliance] All 1 skill(s) are spec-compliant.
        ✓ spec-compliance: All spec checks passed.
    ✓ [valid-refs] All file references across 1 skill(s) are valid.
        ✓ valid-refs: All file references resolve to existing files within the skill directory.
✅ sonar-dependency-risks (2/2 checks passed)
    ✓ [spec-compliance] All 1 skill(s) are spec-compliant.
        ✓ spec-compliance: All spec checks passed.
    ✓ [valid-refs] All file references across 1 skill(s) are valid.
        ✓ valid-refs: All file references resolve to existing files within the skill directory.
✅ sonar-duplication (2/2 checks passed)
    ✓ [spec-compliance] All 1 skill(s) are spec-compliant.
        ✓ spec-compliance: All spec checks passed.
    ✓ [valid-refs] All file references across 1 skill(s) are valid.
        ✓ valid-refs: All file references resolve to existing files within the skill directory.
✅ sonar-fix-issue (2/2 checks passed)
    ✓ [spec-compliance] All 1 skill(s) are spec-compliant.
        ✓ spec-compliance: All spec checks passed.
    ✓ [valid-refs] All file references across 1 skill(s) are valid.
        ✓ valid-refs: All file references resolve to existing files within the skill directory.
✅ sonar-integrate (2/2 checks passed)
    ✓ [spec-compliance] All 1 skill(s) are spec-compliant.
        ✓ spec-compliance: All spec checks passed.
    ✓ [valid-refs] All file references across 1 skill(s) are valid.
        ✓ valid-refs: All file references resolve to existing files within the skill directory.
✅ sonar-list-issues (2/2 checks passed)
    ✓ [spec-compliance] All 1 skill(s) are spec-compliant.

...output truncated...

sonarqube - install smoke test (✅ pass)

Install smoke test succeeded. Verified /tmp/external-plugin-quality-o4UAVN/copilot-home/.copilot/installed-plugins/external-plugin-intake/sonarqube/.github/plugin/plugin.json.

sonarqube - version match (pass)

- 2.6.0: matched version "2.6.0" at ".github/plugin/plugin.json".

sonarqube - ref/sha consistency (not_run)

Ref/SHA consistency gate skipped because one of source.ref or source.sha was not provided.

sonarqube - canvas structure (not_run)

Canvas structure gate skipped because plugin is not tagged with "canvas".

sumo-logic - spec compliance (✅ pass)

Agent Plugins v1.0.0 manifest checks passed for plugin.json.

sumo-logic - vally lint (✅ pass)

✅ sumo-investigator (2/2 checks passed)
    ✓ [spec-compliance] All 1 skill(s) are spec-compliant.
        ✓ spec-compliance: All spec checks passed.
    ✓ [valid-refs] All file references across 1 skill(s) are valid.
        ✓ valid-refs: All file references resolve to existing files within the skill directory.
✅ sumosetup (2/2 checks passed)
    ✓ [spec-compliance] All 1 skill(s) are spec-compliant.
        ✓ spec-compliance: All spec checks passed.
    ✓ [valid-refs] All file references across 1 skill(s) are valid.
        ✓ valid-refs: All file references resolve to existing files within the skill directory.

2 skill(s) linted, 2 passed

sumo-logic - install smoke test (✅ pass)

Install smoke test succeeded. Verified /tmp/external-plugin-quality-Zwk5Ch/copilot-home/.copilot/installed-plugins/external-plugin-intake/sumo-logic/plugin.json.

sumo-logic - version match (pass)

- v1.0.0: matched version "1.0.0" at "plugin.json".
- 804c0909c20cf3b247df3b5de60bb94f8b65c315: matched version "1.0.0" at "plugin.json".

sumo-logic - ref/sha consistency (fail)

source.ref "v1.0.0" resolves to "607c742cfb18ca8a9b150b3c93589dad1a842345", which does not match source.sha "804c0909c20cf3b247df3b5de60bb94f8b65c315".

sumo-logic - canvas structure (not_run)

Canvas structure gate skipped because plugin is not tagged with "canvas".

- gh-skills-builder: spec=warning, vally-lint=pass, install-smoke=pass, version-match=pass, ref-sha-consistency=pass, canvas-structure=not_run, overall=pass
- sonarqube: spec=warning, vally-lint=pass, install-smoke=pass, version-match=pass, ref-sha-consistency=not_run, canvas-structure=not_run, overall=pass
- sumo-logic: spec=pass, vally-lint=pass, install-smoke=pass, version-match=pass, ref-sha-consistency=fail, canvas-structure=not_run, overall=fail

[Copilot]

🟢 Approval recommended

The source and generated marketplace entries are valid and synchronized.

Pull request overview

Updates the external SonarQube plugin from 2.5.0 to 2.6.0.

Changes:

• Updates the plugin version and GitHub source ref.
• Synchronizes generated marketplace metadata.

File summaries

File	Description
plugins/external.json	Updates SonarQube metadata to 2.6.0.
.github/plugin/marketplace.json	Mirrors the updated external plugin entry.

Review details

• Files reviewed: 2/2 changed files
• Comments generated: 0
• Review effort level: Balanced

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.