Fix CI: use Java 21 in plugin QA and bump SpotBugs to 4.9.8.2

Author: tomasz-tylenda-sonarsource

.github/workflows/build.yml

@@ -116,8 +116,8 @@ jobs:
       - uses: jdx/mise-action@5ac50f778e26fac95da98d50503682459e86d566 # v3.2.0
         with:
           version: 2025.7.12
-      - name: Select Java 17
-        run: mise use java@17
+      - name: Select Java 21
+        run: mise use java@21
       - name: Configure Maven
         uses: SonarSource/ci-github-actions/config-maven@v1
         with:

its/plugin/projects/spotbugs-external-report/pom.xml

@@ -14,7 +14,7 @@
       <plugin>
         <groupId>com.github.spotbugs</groupId>
         <artifactId>spotbugs-maven-plugin</artifactId>
-        <version>4.5.3.0</version>
+        <version>4.9.8.2</version>
         <configuration>
           <plugins>
             <plugin>

its/plugin/tests/src/test/java/com/sonar/it/java/suite/ExternalReportTest.java

@@ -74,7 +74,7 @@ public void pmd() {
   public void spotbugs() {
     MavenBuild build = TestUtils.createMavenBuild().setPom(TestUtils.projectPom("spotbugs-external-report"))
       .setProperty("sonar.java.spotbugs.reportPaths", "target" + File.separator + "spotbugsXml.xml")
-      .setGoals("clean package com.github.spotbugs:spotbugs-maven-plugin:4.5.3.0:spotbugs", "sonar:sonar");
+      .setGoals("clean package com.github.spotbugs:spotbugs-maven-plugin:4.9.8.2:spotbugs", "sonar:sonar");
     orchestrator.executeBuild(build);
 
     String projectKey = "org.sonarsource.it.projects:spotbugs-external-report";

mise.toml

@@ -1,3 +1,3 @@
 [tools]
-java = ["24", "17"]
+java = ["24", "21", "17"]
 maven = "3.9"