SONARJAVA-5942 Fix CI: use Java 21 in plugin QA and bump SpotBugs to 4.9.8.2 (#5384)

Author: tomasz-tylenda-sonarsource

.github/workflows/build.yml

@@ -96,9 +96,13 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        sq_version:
-          - LATEST_RELEASE
-          - DEV
+        item:
+          - sq_version: LATEST_RELEASE
+            java_version: 21
+          - sq_version: LATEST_RELEASE
+            java_version: 17
+          - sq_version: DEV
+            java_version: 21
     name: Plugin QA
     needs:
       - build
@@ -116,8 +120,8 @@ jobs:
       - uses: jdx/mise-action@5ac50f778e26fac95da98d50503682459e86d566 # v3.2.0
         with:
           version: 2025.7.12
-      - name: Select Java 17
-        run: mise use java@17
+      - name: Select Java Version
+        run: mise use java@${{ matrix.item.java_version}}
       - name: Configure Maven
         uses: SonarSource/ci-github-actions/config-maven@v1
         with:
@@ -133,7 +137,7 @@ jobs:
           GITHUB_TOKEN: ${{ fromJSON(steps.secrets.outputs.vault).GITHUB_TOKEN }}
         run: |
           cd its/plugin
-          mvn package --batch-mode -Pit-plugin -Dsonar.runtimeVersion=${{ matrix.sq_version }} -Dmaven.test.redirectTestOutputToFile=false -B -e -V -Dparallel=classes -DuseUnlimitedThreads=true
+          mvn package --batch-mode -Pit-plugin -Dsonar.runtimeVersion=${{ matrix.item.sq_version }} -Dmaven.test.redirectTestOutputToFile=false -B -e -V -Dparallel=classes -DuseUnlimitedThreads=true
 
   sanity:
     name: Sanity Test

its/plugin/projects/spotbugs-external-report/pom.xml

@@ -14,7 +14,7 @@
       <plugin>
         <groupId>com.github.spotbugs</groupId>
         <artifactId>spotbugs-maven-plugin</artifactId>
-        <version>4.5.3.0</version>
+        <version>4.9.8.2</version>
         <configuration>
           <plugins>
             <plugin>

its/plugin/tests/src/test/java/com/sonar/it/java/suite/ExternalReportTest.java

@@ -74,7 +74,7 @@ public void pmd() {
   public void spotbugs() {
     MavenBuild build = TestUtils.createMavenBuild().setPom(TestUtils.projectPom("spotbugs-external-report"))
       .setProperty("sonar.java.spotbugs.reportPaths", "target" + File.separator + "spotbugsXml.xml")
-      .setGoals("clean package com.github.spotbugs:spotbugs-maven-plugin:4.5.3.0:spotbugs", "sonar:sonar");
+      .setGoals("clean package com.github.spotbugs:spotbugs-maven-plugin:spotbugs", "sonar:sonar");
     orchestrator.executeBuild(build);
 
     String projectKey = "org.sonarsource.it.projects:spotbugs-external-report";

mise.toml

@@ -1,3 +1,3 @@
 [tools]
-java = ["24", "17"]
+java = ["24", "21", "17"]
 maven = "3.9"