Skip to content

1.5.0.4158

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 07 Aug 08:01
· 4 commits to master since this release
Immutable release. Only release title and notes can be modified.
1.5.0.4158
b40a09e
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

SonarQube CLI v1.5.0

This release brings unified Vortex integration across all supported AI agents, improvements to sonar import, better error messaging for authentication, and several bug fixes.

Features

  • Vortex integration for all agents: sonar integrate now installs a unified Vortex feature (combining SonarQube Agentic Analysis and context augmentation) for Claude Code, Copilot, Codex, Cursor, and Antigravity — with a single entitlement check, a single prompt, and automatic migration of any previously installed separate SQAA/CAG features.
  • Claude Code context augmentation hooks: sonar integrate claude now installs PostToolUse and PostToolUseFailure hooks so Claude can forward relevant tool output for context augmentation.
  • Vortex entitlement awareness: The CLI now distinguishes genuine entitlement loss from usage-limit exhaustion when Vortex API calls are rejected, showing distinct, actionable messages for each case and throttling repeated entitlement-loss warnings.
  • sonar import improvements:
    • Repositories are now fetched and imported incrementally (paginated), so sonar import starts immediately rather than waiting to load an entire organization's repo list upfront.
    • Added --regex selection mode for filtering repositories by a regular expression pattern.
    • sonar import no longer requires an --org flag; it now uses the organization from the active connection automatically.
    • Restricted to GitHub and Azure DevOps organizations.
    • After provisioning completes, Autoscan eligibility is requested automatically.
    • Prints the onboarding dashboard link on successful completion.
  • Alpha command support: Commands marked as alpha are now visible and executable when the SONARQUBE_CLI_ALPHA environment variable is set, displayed with an [ALPHA] tag and a warning on invocation.
  • Keychain error messaging: When the system keychain is unavailable, the error message now mentions environment variable authentication as an alternative, including the relevant variable names.
  • MDM deployment scripts: Reference scripts for enterprise MDM deployment are now published as part of the CLI repository.

Bug Fixes

  • Telemetry proxy support: Telemetry events were bypassing configured proxy and TLS settings. They are now routed through the resolved network configuration, ensuring correct behavior in corporate proxy environments.
  • Telemetry test isolation: Test runs were inadvertently sending fixture data to the production telemetry endpoint; this has been fixed.

Documentation

  • Updated the README to include Codex, Cursor, and Antigravity in the list of supported AI agents.
  • Made the CLI landing page mobile-responsive and updated the quickstart guide.
  • Published sample telemetry events documentation for enterprise customers.

Miscellaneous

  • Continued foundational work on the Vortex (formerly Agentic Analysis / Context Augmentation) product unification, including internal hook dispatch refactoring, a shared entitlement resolver, subfeature resource ownership, post-update migration logic, and allowlist-gating for context augmentation hooks.
  • Extensive internal restructuring of the source tree (moving code under src/core/, src/commands/, and related directories) to improve contributor ergonomics; no user-facing behavior changed.
  • Updated bundled sonar-context-augmentation binary to 0.19.0.3620.
  • Dependency updates including @sonar/scan, js-yaml (security), eslint, typescript-eslint, @sentry/bun, and others.
Assets 3
Loading