Sonar is excited to announce SonarQube Server 2025 Release 2. Inside, you’ll find that we’ve expanded AI CodeFix rule coverage, and you can now use your own LLM for AI CodeFix. You can set architectural constraints for your projects to prevent them from drifting away from your designed architecture. AI/ML developers using PySpark or developing Python code in Jupyter Notebooks within PyCharm get added support. Read on to find out more…
Expanding AI CodeFix
In an effort to open up AI CodeFix to use alternate LLMs from what Sonar provides by default, you can now use your own Azure OpenAI service for AI CodeFix. You maintain complete control over access to AI CodeFix with a secure LLM endpoint in your Azure environment for enhanced data privacy and security. Using your own Azure OpenAI service gives you better control over the performance and scalability of AI CodeFix. It ensures you remain in compliance with data privacy regulations and internal security policies. Additionally, Sonar is extending AI CodeFix to help developers quickly and efficiently remediate more of the issues raised by SonarQube. This extension increases the rule coverage by AI CodeFix across multiple programming languages, ultimately improving code quality and developer productivity with relative ease.
Reduce Architecture Drift
Using a script format, developers and technical leads can define the architectural constraints of a project. When code diverges from the specified constraints, SonarQube Server will raise issues that developers must address to bring the code back in line with the defined architectural constraints. Poor architecture leads to architectural technical debt and this new capability helps reduce the need to rework code to stay inline with your designed architecture.
More Protection for AI/ML Code
Python developers building apps that leverage Apache Spark for large-scale data processing will be excited to discover that SonarQube Server now includes over ten rules to help find and fix issues when using the PySpark Python library. Are you using Jupyter Notebooks in PyCharm? In this release, SonarQube for IDE adds issue detection in PyCharm for developers who create Python code in code cells within Jupyter Notebooks. SonarQube for IDE now supports the two most popular IDEs, VS Code and PyCharm, for building Jupyter Notebooks.
File-level Test Metrics for .NET
.NET developers will see test-related metrics down to the file level in their .NET projects like other languages, such as Java, already do. The SonarScaner for .NET will calculate and pass to the server the per-file metrics of your unit tests, giving .NET developers much-needed details of their unit test results right within the SonarQube UI.
More Protection for Spring
We’ve added about a dozen new rules for a total of 53 rules in SonarQube to help developers avoid common pitfalls in Java code when using the Spring framework to build enterprise-ready applications.
Introducing Security for Golang
We’ve extended our coverage of Go to include code security. Twenty-four new security rules have been added for our introductory SAST coverage in Go. The new rules cover security issues, including cryptographic misconfigurations and security misconfigurations such as cookies, hashing algorithms, and sending information in clear text. Now, Go developers can confidently write more secure code.
Latest Dart and Kotlin Versions
We’ve updated our Dart analyzer to support Dart 3.6 and 3.7. For Kotlin developers, we rebuilt over eighty rules to support Kotlin 2.0 and the new K2 compiler. As a result, Kotlin analysis is now 50% faster than before this release. Kotlin developers can now not only use Sonar to analyze Kotlin 2.0 and newer, but it also performs better than before.
Run in an IPv6-only Infrastructure
You can now operate SonarQube Server in an IPv6-only environment. This benefits companies that are operating large environments with workloads taking up a huge number of IP addresses, such as serverless and container applications.
Details of SonarQube Server Release 2 are in the SonarQube Server release notes.
Ready to experience the power of SonarQube Server? Get it today and find out.