SonarLint for VS Code v4.10 brings new rules for developers using C++

• 7 new rules to help you write clean C++23 code
• Significantly faster analysis speed for users of Apple Mac with M-series chips

Discover more with our release notes and community post.

SonarLint for VS Code v4.9 brings support for identifying security flaws in Helm files.

SonarLint can now identify security flaws in Helm files within the Kubernetes analysis. This is designed to help cloud native developers using Helm charts to design and implement secure cloud architecture. 

Plus

• We have improved our secret detection capabilities, now detecting 146 secret patterns of 81 cloud services
• Improved our MISRA C++ 2023 inspired rules

Discover more with our release notes and community announcement.

SonarLint for VS Code v4.7 delivers added value for users of SonarCloud. 

With the new Open in IDE button in SonarCloud you can now open any issue you are investigating in SonarCloud directly into VS Code with a single click. SonarLint will automatically open the correct file and take you to the line of code containing the issue.

We have also simplified the connection authentication between SonarLint and SonarCloud, with token generation now achieved with a single click!

Plus, we have enabled the Clean as You Code methodology, allowing you to focus only on issues in your new code. This incremental approach empowers developers to take ownership of all new code and tackle overall technical debt in a manageable and sustainable manner.

Discover more with our release notes and community announcement.

SonarLint for VS Code 4.6 adds detection for six advanced Java issues previously only available through SonarQube or SonarCloud, along with these additions:

• Five Python rules focusing on the machine learning library Scikit-Learn
• Seven new C# rules

Discover more with our release notes and community announcement. 

SonarLint for VS Code 4.5 enables enhanced collaboration by introducing sharing Connected Mode setup among contributors as well as new rules.

• Python received 14 new rules (4.16 and 4.17)
• Improved Javascript/Typescript with 4 new accessibility rules
• For Java, we introduced new Java 21 rules and new sustainability rules

Also of note, we are dropping support of NodeJS v16.

Discover more with our release notes and community announcement. 

SonarLint for VS Code v4.4 delivers new rules for HTML, JS/TS, Java, and C++

• We’ve added 17 new rules for accessibility in HTML.
• For JS/TS we added a rule that will prevent functions from being nested too deeply.
• Improved C++ with the addition of 2 new rules
• For Python, we added 2 new quick fixes and fixed 13 false positive rules

Plus, we have added support for Java 21 and we added 2 new rules for Java.

Discover more with our release notes and community announcement.

SonarLint for VS Code v4.3 enhances the combined power of SonarLint and SonarQube while streamlining the setup process.

Now, a one-click connection setup and project binding option will be shown to a SonarLint for VS Code developer utilizing the SonarQube “Open in IDE” button to investigate an issue directly in their VS Code IDE. This functionality, which requires SonarQube v10.4, assists developers in rapidly examining and resolving issues using SonarLint directly in their VS Code IDE.

Plus, with their SonarLint for VS Code v4.3 connected to SonarQube v10.4, developers can now detect custom secrets in their code, directly in their IDE. Using custom rules based on secret patterns defined in SonarQube allows developers to spot secrets before they can be leaked into repositories. (Requires SonarQube Enterprise or Data Center Edition).

Also, when using connected mode to SonarCloud or SonarQube v10.4, it is now possible to mark an issue as “Accepted”. This results in the unresolved issue becoming part of the project’s technical debt.

In addition:

• 8 new Kubernetes rules
• Support for TypeScript 5.3

Discover more with our release notes and community announcement. For more details on how to set up connected mode check here.

SonarLint for VS Code v4.2 delivers advanced Python rules for users in connected mode. 

SonarLint now has access to 9 rules to detect advanced issues in your Python code that may cause your programs to crash. 

Previously only available in SonarQube and SonarCloud branch and pull request analysis, you can now benefit from these rules directly in your IDE (requires connected mode), enabling you to detect and resolve these advanced issues early, and before sending a pull request or running unit tests.

Plus:

• In-product changes to highlight the additional team benefits available when using SonarLint in connected mode with SonarCloud and SonarQube
• 17 new JavaScript rules for JSX

For a list of the 9 rules and further details, check out our release notes and community announcement.

SonarLint for VS Code v4.1 brings support for additional languages and Cloud technologies.

SonarLint will now detect and help you fix issues in T-SQL files. Available in connected mode with SonarCloud, and commercial editions of SonarQube.

In addition, SonarLint is also able to detect issues in AzureResourceManager templates and Bicep files.

Plus:

• Support for Python 3.12 syntax, and 4 new rules related to Python 3.12 features.
• 9 Java rules for Spring Boot.
• Support for .Net 8 and C# 12

For further details, check out our release notes and community announcement.

SonarLint for VS Code v4.0 brings initial support for C# analysis, plus further benefits when using SonarLint in connected mode to SonarCloud and SonarQube.

We are excited to announce support for C# analysis, available both in standalone or connected mode to SonarQube and SonarCloud. The most requested feature in our roadmap this initial support is designed to help those developing .NET applications to create clean code.

In addition, we have also added additional team benefits - available when using SonarLint in connected mode:

With SonarQube v10.3, you can now open any issue you’re investigating in SonarQube directly into the IDE, with just a click of a button, thanks to connected mode. This allows you to leverage SonarLint’s dataflow navigation, rule descriptions, and quick fixes for efficient issue investigation and resolution.

Using connected mode to SonarCloud, any issue or status change (e.g. Won’t Fix, False Positive) made in SonarCloud will be instantly synchronized to your IDE, ensuring you can focus on relevant issues.

Plus:

• 6 Java rules dedicated to the Spring framework
• 5 Python rules 2 for the Pandas library
• Many new JavaScript and TypeScript rules for React

Lastly, please be advised that we are raising the minimum required Java runtime version to 17. See here for more details.

For further details, check out our release notes and community announcement.