Great! I hope it is informative for you.
The blog link I mentioned talks about this point precisely. You should always upgrade to the latest scanner plugin, which is much less low risk than upgrading SonarQube itself. The sonar-maven-plugin is backwards-compatible, so you should not encounter any issues with it if you upgrade it to 3.9.0, but you should verify and test it yourself to convince yourself.