TL;DR overview
- SonarQube Server 2025.6 delivers up to 40% faster analysis for JavaScript/TypeScript, 58 new quick fixes in the IDE for JS/TS, and full SAST and secrets detection support for Swift (5.9 to 6.2).
- The release introduces Jira Cloud and Slack integrations to accelerate issue remediation workflows, reducing the context-switching overhead of managing code issues and project tickets in separate tools.
- Advanced Security enhancements include SBOM import support for CycloneDX and SPDX formats, enabling comprehensive dependency visibility for components that SonarQube did not analyze directly.
- New compliance coverage adds Python 3.14 support, PyTorch AI/ML assurance, Go code quality rules, Shell/Bash code quality and security analysis, and completes full MISRA C++:2023 coverage with all 179 rules.
AI has shifted the development bottleneck from writing code to verifying it. Ensuring that code is reliable, secure, and maintainable is now the most critical step in the software development lifecycle. SonarQube Server 2025.6 accelerates this verification process, embedding it directly into your daily workflow. With deeper integrations, dramatically faster analysis, and expanded language support, this release empowers your team to embrace a "vibe, then verify" philosophy and ship with confidence.
2025.6 at a glance
- Accelerated workflow: New integrations with Jira Cloud and Slack.
- Faster feedback: Up to 40% faster analysis for JavaScript/TypeScript.
- Instant fixes: 58 new quick fixes for JavaScript/TypeScript in the IDE.
- Modern language support: Full coverage for Swift (5.9–6.2) and Python 3.14.
- AI/ML assurance: Efficient analysis for PyTorch, Apex, and Ruby.
- Infrastructure coding: New code quality rules for Go and Shell/Bash.
- Compliance: Complete coverage for MISRA C++:2023, OWASP Top 10 2025, and STIG V6R3.
- Supply chain security: Import CycloneDX and SPDX SBOMs.
Accelerate your team with deep workflow integrations
To help teams keep up with the volume of code, we've focused on eliminating friction and speeding up your feedback loops. Developers working with JavaScript/TypeScript will immediately notice up to 40% faster analysis for large projects, cutting down wait times and speeding up code reviews. We've made it easier than ever to fix issues quickly with 58 new quick fixes for JavaScript/TypeScript that allow immediate remediation right within your IDE. Furthermore, integrating code quality into your organizational workflow is more seamless than ever: the new Jira Cloud integration instantly turns code issues into trackable tickets, and the Slack integration provides real-time alerts on quality gates status changes in a Slack channel, so your team can act faster when a build does not pass a quality gate.
Unmatched language and compliance coverage
SonarQube 2025.6 significantly expands its lead as the industry standard for language coverage, enabling you to confidently adopt new technology and meet the strictest regulatory standards. We now offer full code security and code quality support for the newest versions of Python 3.14 and Swift (5.9 to 6.2), including SAST and secrets detection for Swift. For developers building machine learning applications, we now provide AI/ML assurance for efficient PyTorch code. In the cloud-native space, you get extensive new rules for Go and new code quality and code security analysis for essential Shell/Bash scripts. Finally, in SonarQube Server Enterprise and Data Center editions we've delivered complete coverage of all 179 MISRA C++:2023 guidelines, STIG V6R3 and the new OWASP Top 10 2025, giving your compliance and risk teams the assurance they need to pass these rigorous standards.
Secure your supply chain with Advanced SAST and SBOMs
In an era of rising supply chain attacks, code security can't be an afterthought. This release enhances our core mission of providing integrated code quality and code security. Our Advanced SAST capability in SonarQube Advanced Security is now refreshed and optimized for the most popular libraries in C#, Java, and now for Python to discover complex, hidden vulnerabilities other tools miss. To give you comprehensive visibility across all components, SonarQube Advanced Security now supports importing SBOMs (Software Bill of Materials) in CycloneDX and SPDX formats, ensuring universal dependency and vulnerability reporting for arbitrary components. With these advancements, SonarQube ensures your organization maintains the governance needed to verify every line of code, both developer written and AI-generated, with speed and confidence.
Start using SonarQube Server 2025.6 now!
The 2025.6 What's New page and our SonarQube Server release notes provide more details about the release.
Are you still using an older version of SonarQube Server? If you’re on an earlier version than the 2025.4 LTA release, update to the latest LTA before moving to the current release. Check out our LTA Update Hub for useful information on how to update.