Skip to content

0.14.0.2245

Choose a tag to compare

View all tags
@github-actions github-actions released this 03 Jun 14:45
Immutable release. Only release title and notes can be modified.
0.14.0.2245
9c5eb1b
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

SonarQube CLI v0.14.0

This release introduces Codex support alongside Context Augmentation, which equips AI assistants with crucial code architecture and SonarQube-based coding guidelines. We’ve also added Software Composition Analysis (SCA) to proactively flag security and license issues in your project dependencies. Finally, the CLI gets a major usability boost with streamlined authentication, installation, and error handling.

Features

  • Codex integration: Added sonar integrate codex, including prompt secret-scanning hooks, Codex instructions, and SonarQube MCP configuration.
  • Context Augmentation: Added the sonar context command and setup for supported Claude, Copilot, and Codex integrations.
  • Dependency risk analysis: Added sonar analyze dependency-risks to analyze project dependencies for security and license risks.
  • Analysis command: sonar analyze is now the primary entry point for Agentic Analysis.
  • Authentication flow: sonar auth login now guides Server vs Cloud selection and confirms the selected server before continuing.
  • Telemetry: Setting the DO_NOT_TRACK=1 environment variable now disables both usage telemetry and crash reporting. sonar config telemetry reports when telemetry is disabled this way.
  • Project auto-resolution: The CLI now explicitly shows when and how a project key was resolved automatically, removing implicit "magic" from the output.

Bug Fixes

  • Error handling: Fixed CLI and API error rendering so common failures now show clearer and more consistent remediation hints.
  • Agentic Analysis feedback: Fixed cases where SonarQube Agentic Analysis could be skipped silently; the CLI now reports the problem explicitly.
  • Installation compatibility: Unix release artifacts now use the .bin extension, and the install scripts automatically fall back to .exe for older releases.

Miscellaneous

  • Removed sonar auth purge and the --with-token login option. For CI and automation, use environment variables instead.
  • Continued foundational work on declarative integration management and Context Augmentation support across agent integrations.
Assets 3
Loading