The latest SonarQube Server news and updates

Boost security & supply chain defense

• Fortify your CI/CD pipelines by detecting vulnerabilities in GitHub Actions
• Gain superior accuracy and speed for JavaScript/TypeScript security
• Secure .NET desktop apps with WPF framework vulnerability detection

Reduce developer toil and improve productivity

• Update the server without breaking your CI/CD pipeline
• Accelerate Python automated reviews with a massive performance boost
• Optimize Python serverless functions in AWS Lambda
• Maintain high quality web apps by finding more issues in Angular code

Enterprise-ready compliance & governance

• Achieve compliance with expanded support for MISRA C++:2023
• Roll out Software Composition Analysis (SCA) at your own pace
• Control your messages in global in-product announcements

SonarQube Server 2025.5 release announcement -->

• Expanded core security: SAST for Go, taint analysis for VB.NET, more robust JS/TS taint analysis, best-in-class secrets detection including in YAML, JSON, and Kotlin
• Achieve compliance: more MISRA C++2023 rules now available in your IDE, more comprehensive security and regulatory reports
• Elevate your code: more maintainable and performant Python/Java, faster C/C++ analysis, complex Java bug detection, full support Java 23/24, & Dart 3.8
• Advanced Security: enhanced SCA with continuous vulnerability detection without reanalysis, customizable risk severity, machine-readable reports, PHP dependency support, and dependency risks caught in the IDE

SonarQube Server 2025 Release 4 Announcement -->

• Security advancements: GA of Advanced Security (SCA & advanced SAST), SAST for Kotlin, expanded secrets detection
• AI progress: End of Early Access for AI CodeFix including AI fix suggestions directly within the IDE
• Expanded compliance: MISRA C++:2023, CWE Top 25 2024, OWASP Mobile Top 10
• Enhanced language coverage: new Rust, PySpark and more Java protection

SonarQube Server 2025 Release 3 Announcement -->

• Use your own Azure OpenAI service for AI CodeFix
• Reduce architectural drift in projects
• Support for PySpark and Jupyter Notebooks in PyCharm for AI/ML code
• Improved visibility of .NET test results within your project
• Avoid common pitfalls when using the Spring framework
• New SAST for Golang 
• Updated support for the latest Dart and Kotlin versions
• Run the server in IPv6-only infrastructures

SonarQube Server 2025 Release 2 Announcement -->

• Autodetect code generated by GitHub Copilot
• High-impact AI enhancements
• Cutting-edge security innovations
• Features to supercharge developer productivity
• Enterprise and operational excellence capabilities
• New extensive language support

SonarQube Server 2025.1 LTA Release Announcement -->

• Use your own quality gate for AI Code Assurance
• Early Access to AI CodeFix is extended to Developer Edition
• Standard Experience and Multi-Quality Rule (MQR) Mode
• Introducing architecture rules for Java
• Support for Ansible IaC
• Advanced secrets detection
• Includes many more language updates

SonarQube Server 10.8 Release Announcement -->