SCANNPM-127 Fix release

[vdiez]

…20.6 (#379)"

This reverts commit 7a75b64.

Part of

[hashicorp-vault-sonar-prod]

SCANNPM-127

[zglicz]

🤞 for QA

[sonarqubecloud]

SonarQube reviewer guide

Important

We are currently testing different models for AI Summary.
Please give us your feedback by filling this form.

Model A:

Summary: Update mise version to 2025.11.2, configure Java 21, rename scanner entry file from .ts to .js, add knip for dead code detection, and remove build validation step.

Review Focus: The TypeScript to JavaScript rename in bin/sonar-scanner (no extension change in functionality, just file extension), the new knip dependency and configuration for unused code detection, and the removal of build validation logic in the release workflow.

Start review at: bin/sonar-scanner.js and tsconfig.json. These files reflect the main structural change from TypeScript to JavaScript entry point, which affects the build process and may indicate a broader shift in how the scanner is executed.

Model B:

Summary: Update mise tool version, add dead code detection tooling, refactor entry point from TypeScript to JavaScript, and remove redundant build validation.

Review Focus:

• The conversion of bin/sonar-scanner.ts to .js and corresponding tsconfig changes—verify the JavaScript file is functionally equivalent and properly configured
• The addition of knip (dead code detector) with its configuration in knip.json—ensure entry points and ignore patterns are correctly defined
• The removal of build validation step in release workflow—confirm this validation is no longer necessary or is covered elsewhere
• Java 21 explicit configuration in one CI job—verify this is intentional and doesn't cause version conflicts

Start review at: knip.json. This is a new configuration file that establishes the project's dead code detection rules and entry points. It's critical to validate that all actual entry points are captured and that legitimate build artifacts/fixtures aren't incorrectly flagged as unused code, which could cause false positives in future CI runs.

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud