What’s new

Automatic analysis for .NET projects has been enhanced.

It will now discover issues in your cshtml and razor files, plus take advantage of new Blazor-specific rules. 

And, as we now analyze the templates, it will also uncover XSS security-impacting issues.

Discover more about automatic analysis here. Plus the supporting Community announcement.

We have introduced 7 new rules to help Pythonistas avoid pitfalls when using Date & Time libraries (even when using the Numpy & Panda libraries).

For further information on each new rule, please refer to the Community announcement.

Plus check here to provide feedback, and see what’s coming up for Python in SonarQube Cloud.

GitHub projects have a new feature to setup project binding. This feature will allow the binding of SonarQube Cloud projects to GitHub repositories and the option to change this binding when needed.

Bound projects benefit from Automatic PR decoration, Automatic analysis, and more.

For further information, please refer to the Community announcement.

SonarQube Cloud now enables Maven users to scan more files from their projects, with less configuration.

This is an opt-in feature. We invite you to refer to the Community Announcement for more details.

SonarQube Cloud now displays the number of issues marked as Accepted in the Pull Request summary, as well as for the branch.

In addition, the SonarQube Cloud PR decoration within GitHub, GitLab, BitBucket, and Azure DevOps has also been updated to reflect the accepted issues metric.

This improvement is intended to help teams monitor the technical debt accumulating from accepting issues, enabling informed decisions regarding new code.

For further information, please refer to the Community Announcement.

SonarQube Cloud now supports the scanning of Java 21 code. 

For further information, please refer to the Community Announcement.