Take control of your dependencies directly within your IDE. 

SonarQube for IDE: Visual Studio v8.24 introduces robust dependency risk management.

In connected mode, simply access the new Dependency Risks view from the connected mode menu. This powerful view clearly displays dependency risks and license violations identified in your SonarQube Server project analysis. For insights into analyzing your projects for dependencies, refer to the SonarQube documentation. 

Act on issues instantly: Don't just see the problems—solve them! Interact directly with these issues by opening them in SonarQube Server or changing their status right from your IDE.

Streamline your setup: We’ve enhanced binding detection between your local projects and SonarQube Server or Cloud analyzed projects using Git information. This improvement simplifies the connected mode setup after your initial SonarQube for IDE connection.

Expanded .NET capabilities: This release includes a significant .NET enterprise analyzer update. Discover more here.

C++ analysis using MISRA C++:2023 rules: These early access rules are now available in the IDE enabling local analysis.

Discover additional details and screenshots in the release notes and community post. 

SonarQube for IDE: Visual Studio v8.19 delivers simplified management of security hotspots.

• Simplified Security Hotspot Management: The "SonarQube Local Security Hotspots" and "SonarQube Server Security Hotspots" windows have been unified into a single "SonarQube Security Hotspots" window, accessible via SonarQube > Connected Mode > View Security Hotspots.

• Clear Differentiation: Easily distinguish between locally found hotspots and those from SonarQube Cloud or Server with icons.

• Improved CI/CD Integration: Review, acknowledge, fix, or mark hotspots as safe after pushing code to the CI/CD pipeline, with status synced to SonarQube Cloud or Server.

• Enhanced Filtering: Filter security hotspots by issue location and priority for better workflow.

Find more information and screenshots in the release notes and community post.

SonarQube for IDE: Visual Studio v8.13 simplifies project binding to SonarQube Cloud and Server.

Key improvements:

Automated connection
Clicking "Open in IDE" in SonarQube Cloud or Server (without connected mode) now automatically creates the connection and opens Visual Studio, prompting you to trust the connection.

Simplified token generation
Token generation is now automated within SonarQube for IDE: Visual Studio. To begin, click 'Generate' in the 'Edit Authentication Details' window. This will open a SonarQube Cloud or Server webpage where a token is automatically created. The generated token will then be automatically filled into the 'Token' field in SonarQube for IDE.

Updated .NET analyzer

Discover more details in our release notes and community post.

SonarQube for IDE: Visual Studio v8.11 introduces support for two new languages, and enhancements!

• New language support: 
  • HTML analysis is now available for all users.
  • T-SQL analysis is available for SonarQube Cloud users, and SonarQube Server users with Developer or Enterprise editions.

• Enhanced AI CodeFix suggestions: A diff view has been added for easy comparison between current code and the suggested modifications.

• Updated .NET enterprise edition analyzer: Now supports raising issues on .razor and .cshtml files.

Discover more details in our release notes and community post. 

SonarQube for IDE: Visual Studio v8.10 brings a host of analyzer updates, plus deprecates username/password-based authentication for connected mode.

Discover more with our release notes and community post. 

SonarQube for IDE: Visual Studio v8.9 introduces a new flow to unbind a project.

With this final round of enhancements to connected mode setup, we introduce easily unbinding a project that is connected to SonarQube Cloud or Server directly within the IDE. Check here for detailed instructions.

Discover more with our release notes and community post.

SonarQube for IDE: Visual Studio v8.8 introduces two new modes for visualization of issue categorization.

In parallel with SonarQube Server 10.8, we have introduced the option to select either:

• Multi-Quality Rule (MQR) mode - enabling issues to have multiple qualities, and leveraging the newer categorization and severities from SonarQube Server 10.8
• Standard Experience mode - which maintains the issue categorization from SonarQube 9.9 (bug, vulnerability and code smell)

Plus, two important updates:

• A new .NET analyzer is available with support for .NET 9 and C#13.
• SonarQube open-source analyzers bundled by SonarQube for IDE are now using the new Sonar Source-Available License.

Discover more with our release notes and community post.

SonarQube for IDE: Visual Studio v8.7 brings changes related to rebranding plus improvements to the connected mode experience.

Following the recent rebranding you will now see updated labels and logos inside the extension and in the Visual Studio Marketplace.

Plus, to enhance the connected mode experience, you can now easily edit your connection credentials to update your token once it’s expired, for example.

Finally, 

• An update to the C++ analyzer is available with 2 new quick fixes for the rules S824 and S3630.

Discover more with our release notes and community post.

SonarQube for IDE: Visual Studio v8.6 delivers an enhancement to the connected mode setup experience.

You can now search through a list of available projects for the organization in SonarQube Cloud or SonarQube Server. These docs provide more information on configuring connected mode.

Discover more with our release notes and community post.

SonarQube for IDE: Visual Studio v8.5 supports AI CodeFix.

AI CodeFix streamlines issue resolution for developers by generating AI-driven fix suggestions in SonarQube Cloud or SonarQube Server with a single click. In connected mode SonarQube for IDE now allows developers to view and apply these fixes directly in their Visual Studio IDE.

Discover more with our release notes and community post. Plus read more about AI CodeFix in this blog.