4.9.0

This version introduces the possibility of detecting security misconfigurations in Helm files. We also improved our secret detection capabilities.

More details in the Sonar Community announcement and in the release notes.

NOTE: artifacts for this release could not be published to VS Marketplace due to the marketplace issue. You can find artifacts attached to this release, or through OpenVSX.

4.8.0

• Update IaC analyzer 1.31 -> 1.32, new rules for Kubernetes, improvements and bug fixes
• Update CFamily analyzer 6.56 -> 6.57, improvements and bug fixes
• Update text and secrets analyzer 2.12.1 -> 2.13, 34 new secret types
• Update C# analyzer 9.27 -> 9.28 -> 9.29 -> 9.30, improvements and bug fixes

4.7.0

This version enables developers to open any issue they are investigating in SonarCloud into VS Code and also enables users of SonarLint not using Connected Mode to apply the Clean as You Code methodology in the IDE by focusing on new code.

More details in the Sonar Community announcement and in the release notes.

4.6.0

This version introduces the possibility of detecting more advanced issues in Java in Connected Mode. We also added 5 new rules in Python and 7 rules in C#.

More details in the Sonar Community announcement and in the release notes.

4.5.1

Fix an issue related to product telemetry

4.5.0

This version introduces the possibility of sharing Connected Mode setup among contributors to empower teams' collaboration. We also added 14 rules in Python and 4 accessibility rules in JS/TS. Note that we are dropping the support of NodeJS v16.

More details in the Sonar Community announcement and in the release notes.

4.4.2

This version fixes misreported analysis readiness of workspace folders with URI-encoded path and also restores the connected mode behind proxy connections.

More details in the release notes.

4.4.1

This version adds 17 new HTML rules for accessibility, support for Java 21 with 2 new rules in Java, 2 quick fixes in Python and one rule in JS/TS that will prevent functions from being nested too deeply.

More details in the Sonar Community announcement and in the release notes.

4.3.0

This version adds an automatic connected mode setup with SonarQube (10.4+), new secret detections, a possibility to mark issues as "Accepted" and some new rules (including 8 new Kubernetes rules, support for TS 5.3)

More details in the Sonar Community announcement and in the release notes.

4.2.2

This version adds more critical Python issues detection (requires connected mode with SonarCloud).

More details in the Sonar Community announcement and in the release notes.