1.3.0.3493

SonarQube CLI v1.3.0

This release brings support for enterprise network configurations, major improvements to the sonar integrate experience, a new version-update notifier, and several bug fixes.

Features

• Mutual TLS — PEM and PKCS12 support: The CLI now supports client certificate authentication via environment variables, covering both PEM (SONAR_TLS_CLIENT_CERT, SONAR_TLS_CLIENT_KEY_FILE, SONAR_TLS_CLIENT_PASSPHRASE) and PKCS12 file formats. These credentials are also forwarded automatically to underlying analysis binaries.*
• sonar integrate bare command: Running sonar integrate with no subcommand now presents an interactive menu to discover and set up any available integration (Claude, Copilot, Codex, Cursor, Git, …), then delegates to that integration's existing flow.
• sonar integrate — Feature uninstall: Re-running sonar integrate <agent> on an already-configured integration now lets you keep or remove individual features. Declining to keep a feature walks you through removal, cleaning up resources, state, and orphaned binaries. Files left empty after uninstallation are deleted automatically rather than left as empty husks.
• New version-available notifier: The CLI now checks once per day whether a newer version is available and displays an update prompt for commands with human-readable output (not --json), so you never miss a new release.
• Graceful handling of revoked Vortex entitlements: If your Vortex entitlement is revoked, hooks that call the Agentic Analysis API now surface a clear, actionable message ("Run sonar integrate to uninstall unavailable hooks") instead of failing silently or with an unhandled error.

Bug Fixes

• Feature name casing: Integration feature names are now consistently lowercase across all agents (Claude, Copilot, Codex, Cursor, Git).