Simplified PR summary and decoration

PRs show issues that will be fixed by the merge

Modern User Interface

Allow a new branch to become the Main branch

Clean Code Taxonomy

Clean Code to the core: Issue and rule pages adopt the Clean Code Taxonomy

Third-party issues are dismissible in SonarQube

Updated Issue Lifecycle

Provide AI-based fix suggestions for Sonar issues

Clean as You Code criterion to keep the new code clean

Quality Profile pages adopt the Clean Code Taxonomy

Deactivate rules in an 'extended' Quality Profile

Recommend a quality gate for projects with AI-generated code

Mute individual issues on the fly in your IDE

Activate SonarQube for IDE connected mode from SonarQube Server or SonarQube Cloud web interface

Investigate and fix SonarQube Server issues in IDE

Users and tokens deprovisioning with Azure/SCIM

SonarQube can provision and synchronize users and groups from GitHub

SonarQube can provision and synchronize permissions from GitHub

Project permissions synchronized from GitHub can be customized

User and group management can be fully delegated to GitLab

Synchronize project permissions on SonarQube with GitLab

Password complexity for local accounts

Faster access to the projects after the upgrade

Autoscaling for SonarQube cluster in Kubernetes

SonarQube runs in a FIPS-enforced environment

Modern SMTP authentication (OAuth)

Support OpenShift

Security analysis is available in GitLab

Support C and C++ analysis in the official GitHub Action

Simplified Monorepo configuration

Bulk import GitLab projects

SonarLint adoption metrics

Usage of the customizable severity

Support "CWE Top 25 2022"

Support "CWE Top 25 2023"

Sonar helps to assess issues related to CASA security requirements

Sonar helps to assess issues related to DoD STIG DISA requirements

Admin users can disable the "Confidential" header in Portfolio PDF Reports

Analyze multiple code variants built on the same host

Natively import Cobertura coverage files for C and C++ projects

Make the Build-Wrapper or an alternative to it available on MacOS Apple Silicon

Reduce the number of Scanner for .NET versions

C++ AutoConfig for SonarQube

Support C/C++/Objective-C analysis on Linux ARM64 (a.k.a. aarch64)

No Java dependency for SonarScanner for .NET

Scanners Download Only Required Analyzers

Download only required analyzers

Improved multi-language support for .Net scanner

.NET Logging Rules

Support Standalone JavaScript projects in .NET solutions

Java analyzer supports "jakarta" namespace (formerly javax)

Find issues in inline JavaScript code inside your HTML files

More rules to check for commonly found security misconfiguration in Dockerfiles

Load Hadolint Reports

Load "TFLint" Reports

Rules to detect 50+ app secrets/tokens

Rules to detect 100+ app secrets/tokens

Find Custom Secrets

Detect security misconfigurations on ARM templates

Detect security misconfigurations on Bicep files

Detect security misconfigurations in Helm files

Write Clean Code with Python Date and Time libraries

Support Ruff external analyzer reports

Gradle Kotlin DSL Support

Support Kotlin Multiplatform projects

Import Valgrind Memcheck issues

Analyze Python code in Jupyter Notebooks

Avoid common pitfalls in ASP.NET WebAPI

Analyze code featuring C++20 modules

Support of Maven 4

FastAPI support in security analysis

Avoid common pitfalls in MVC controllers

Rules for Blazor

Going further with Spring Boot support

Spring Framework 5 advanced support

TensorFlow library support in Python analysis

Numpy library support in Python analysis

Pandas library support in Python analysis

Scikit-Learn library support in Python analysis

PyTorch library support in Python analysis

Detect security misconfigurations in Ansible files

Support Ansible Playbooks

Support for .NET 8 and C#12

Support C++23 code

Support Python 3.12

Support Java 21

Support JCL

Dart/Flutter support

Support for .NET 9

C# 13 support