Breaking change on sonarqube-scan-action v3?

Yes, and there will be other new endpoints used by the scanner, to provision the JRE.

In general, we want to keep the freedom to add new endpoint calls to the analysis process, so I am not sure if whitelisting them one-by-one is going to scale.