·
3 commits
to master
since this release
Immutable
release. Only release title and notes can be modified.
SonarQube MCP Server v1.26.0
This release improves issue triage workflows, expands new code filtering, enhances startup error reporting, and resolves a security vulnerability.
New Features
- New code filtering — Tools now support filtering results on new code, allowing you to focus analysis and triage on recently introduced issues
- Comment on issue status change — The
change_sonar_issue_statustool now accepts an optionalcommentparameter, letting you attach a justification or note when transitioning an issue's status — matching the existing behavior of the hotspot status change tool - Clearer startup error messages — When the MCP Server fails to start in stdio mode (e.g. due to a missing token, URL, or organization), it now responds to the MCP
initializerequest with a descriptive error message instead of silently closing the connection
Security
- Bumped Jackson dependencies to address CVE-2026-77310 (SSRF, medium severity)
Miscellaneous
- Enabled Vortex (
run_advanced_code_analysis) tools on SonarQube Server when both required hubs are entitled — foundational work aligning Server entitlement with SonarQube Cloud (in progress) - Internal code quality improvements and refactoring