SonarLint for VS Code v4.11 supports AI CodeFix.

AI CodeFix streamlines issue resolution for developers by generating AI-driven fix suggestions in SonarCloud or SonarQube with a single click. In connected mode SonarLint now allows developers to view and apply these fixes directly in their VS Code IDE, delivering a diff view.

Plus

• 6 new adaptability rules in JS/TS
• 7 new rules related to PyTorch for Python

Discover more with our release notes and community post. Plus read more about AI CodeFix in this blog.

SonarLint for VS Code v4.10 brings new rules for developers using C++

• 7 new rules to help you write clean C++23 code
• Significantly faster analysis speed for users of Apple Mac with M-series chips

Discover more with our release notes and community post.

SonarLint for VS Code v4.9 brings support for identifying security flaws in Helm files.

SonarLint can now identify security flaws in Helm files within the Kubernetes analysis. This is designed to help cloud native developers using Helm charts to design and implement secure cloud architecture. 

Plus

• We have improved our secret detection capabilities, now detecting 146 secret patterns of 81 cloud services
• Improved our MISRA C++ 2023 inspired rules

Discover more with our release notes and community announcement.

SonarLint for VS Code v4.7 delivers added value for users of SonarCloud. 

With the new Open in IDE button in SonarCloud you can now open any issue you are investigating in SonarCloud directly into VS Code with a single click. SonarLint will automatically open the correct file and take you to the line of code containing the issue.

We have also simplified the connection authentication between SonarLint and SonarCloud, with token generation now achieved with a single click!

Plus, we have enabled the Clean as You Code methodology, allowing you to focus only on issues in your new code. This incremental approach empowers developers to take ownership of all new code and tackle overall technical debt in a manageable and sustainable manner.

Discover more with our release notes and community announcement.

SonarLint for VS Code 4.6 adds detection for six advanced Java issues previously only available through SonarQube or SonarCloud, along with these additions:

• Five Python rules focusing on the machine learning library Scikit-Learn
• Seven new C# rules

Discover more with our release notes and community announcement. 

SonarLint for VS Code 4.5 enables enhanced collaboration by introducing sharing Connected Mode setup among contributors as well as new rules.

• Python received 14 new rules (4.16 and 4.17)
• Improved Javascript/Typescript with 4 new accessibility rules
• For Java, we introduced new Java 21 rules and new sustainability rules

Also of note, we are dropping support of NodeJS v16.

Discover more with our release notes and community announcement. 

SonarLint for VS Code v4.4 delivers new rules for HTML, JS/TS, Java, and C++

• We’ve added 17 new rules for accessibility in HTML.
• For JS/TS we added a rule that will prevent functions from being nested too deeply.
• Improved C++ with the addition of 2 new rules
• For Python, we added 2 new quick fixes and fixed 13 false positive rules

Plus, we have added support for Java 21 and we added 2 new rules for Java.

Discover more with our release notes and community announcement.

SonarLint for VS Code v4.3 enhances the combined power of SonarLint and SonarQube while streamlining the setup process.

Now, a one-click connection setup and project binding option will be shown to a SonarLint for VS Code developer utilizing the SonarQube “Open in IDE” button to investigate an issue directly in their VS Code IDE. This functionality, which requires SonarQube v10.4, assists developers in rapidly examining and resolving issues using SonarLint directly in their VS Code IDE.

Plus, with their SonarLint for VS Code v4.3 connected to SonarQube v10.4, developers can now detect custom secrets in their code, directly in their IDE. Using custom rules based on secret patterns defined in SonarQube allows developers to spot secrets before they can be leaked into repositories. (Requires SonarQube Enterprise or Data Center Edition).

Also, when using connected mode to SonarCloud or SonarQube v10.4, it is now possible to mark an issue as “Accepted”. This results in the unresolved issue becoming part of the project’s technical debt.

In addition:

• 8 new Kubernetes rules
• Support for TypeScript 5.3

Discover more with our release notes and community announcement. For more details on how to set up connected mode check here.

SonarLint for VS Code v4.2 delivers advanced Python rules for users in connected mode. 

SonarLint now has access to 9 rules to detect advanced issues in your Python code that may cause your programs to crash. 

Previously only available in SonarQube and SonarCloud branch and pull request analysis, you can now benefit from these rules directly in your IDE (requires connected mode), enabling you to detect and resolve these advanced issues early, and before sending a pull request or running unit tests.

Plus:

• In-product changes to highlight the additional team benefits available when using SonarLint in connected mode with SonarCloud and SonarQube
• 17 new JavaScript rules for JSX

For a list of the 9 rules and further details, check out our release notes and community announcement.

SonarLint for VS Code v4.1 brings support for additional languages and Cloud technologies.

SonarLint will now detect and help you fix issues in T-SQL files. Available in connected mode with SonarCloud, and commercial editions of SonarQube.

In addition, SonarLint is also able to detect issues in AzureResourceManager templates and Bicep files.

Plus:

• Support for Python 3.12 syntax, and 4 new rules related to Python 3.12 features.
• 9 Java rules for Spring Boot.
• Support for .Net 8 and C# 12

For further details, check out our release notes and community announcement.