TL;DR overview
- SonarQube Server 2025 Release 2 delivers expanded AI CodeFix coverage with new language support and improved fix quality, enabling developers to resolve a broader range of detected issues with a single click directly in the SonarQube UI.
- New IDE integrations and Connected Mode improvements deepen the feedback loop between SonarQube Server analysis and the developer's local environment, surfacing server-side findings inline while writing code.
- Security rule additions and taint analysis improvements expand detection coverage for injection vulnerabilities, authentication weaknesses, and secrets patterns across supported languages.
- Teams on the 2025.x series should upgrade to Release 2 before the 2025.3 release to receive the full set of improvements and maintain a supported configuration with current patch coverage.
Sonar is excited to announce SonarQube Server 2025 Release 2.
Key Capabilities of Release 2
- Use your own Azure OpenAI service for AI CodeFix
- Reduce architectural drift in your projects
- Added support for PySpark and Jupyter Notebooks in PyCharm for AI/ML developers
- Improved visibility of .NET test results within your project
- Avoid common pitfalls when using the Spring framework
- New SAST for Golang
- Updated support for the latest Dart and Kotlin versions
- Run the server in IPv6-only infrastructures
SonarQube Server 2025 Release 2 delivers significant enhancements across code quality, code security, and issue remediation. AI CodeFix rule coverage is expanded, and users can now use their own Azure OpenAI service for enhanced privacy when using AI CodeFix. Dev teams will benefit from the enforcement of architectural constraints to prevent architectural drift in your projects. AI/ML developers gain support for finding issues when using PySpark and when developing Python code in Jupyter Notebooks within PyCharm. Developers will find improved test metric visibility for .NET projects. Spring developers receive added protection with new rules to help avoid common pitfalls. Security is strengthened for Go with our introduction of SAST for Golang. You’ll find updated support for the latest Dart and Kotlin versions. Platform updates include IPv6-only infrastructure support, ensuring SonarQube Server remains adaptable to modern environments.
The 2025 Release 2 announcement and our SonarQube Server release notes provide more details about the release.
Are you still using an older version of SonarQube Server?
If you’re on a version older than the 2025 Release 1 LTA, upgrade to the SonarQube Server LTA before upgrading to the latest version. Check out this helpful checklist for a smoother upgrade. Watch the on-demand LTA upgrade webinar, which explains a step-by-step approach and highlights common pitfalls encountered during the upgrade.
