This packed release brings a variety of new rules and enhancements!

Firstly, we added new Date & Time rules for .NET. These cover a wide range of topics, and common pitfalls, including time zone conventions, date parsing & formatting, and time arithmetic.

In addition, we’ve added many new MISRA C++ 2023 rules to support mission-critical software environments.

We have also added the ability for SonarLint to detect and report Security Hotspots in local code when used in connected mode to SonarCloud or SonarQube. SonarLint will display any Security Hotspots not yet reviewed as Safe or Fixed. This feature is currently available for C, C++, JavaScript, and TypeScript.

Plus:

• 5 new rules for core JavaScript and TypeScript features
• New rules for C and C++ to detect tricky bugs

Learn more with this community announcement and release notes.

SonarLint for Visual Studio v7.0 brings a modification to the method and location used for storing connected mode settings and data.

Beginning with this version all settings and data will be stored only at this location:

%AppData%\Roaming\SonarLint for Visual Studio\Bindings

SonarLint will automatically propose to migrate the settings, which should take a matter of seconds to complete. A migration guide is also available.

Plus

• New rules to help you avoid performance pitfalls for C# and VB.NET 

Learn more with this community announcement and full release notes.

This release delivers support for CSS analysis.

Designed to help front-end developers write clean code in their Visual Studio IDE we have added CSS to the growing list of supported languages, which includes C#, VB.NET, C, C++, Javascript, and TypeScript. 

A full list of supported rules to detect bugs and code smells in your CSS code can be found here.

Plus:

• New rules for C#, VB.NET, TypeScript

Learn more with this community announcement and full release notes.

This release delivers a new format for the Rule Help feature, plus the ability for SonarLint to retrieve server settings for .NET files.

Now, when clicking on an issue's code in the Error List you will be presented with contextualized guidance as to:

Why this is an issue | How to fix it | More info 

Initially available for the top 15 security vulnerabilities, this feature is being progressively rolled out for all remaining rules, helping developers learn as they code.

Plus, leveraging the power of connected mode to SonarCloud and SonarQube, SonarLint will now retrieve the server settings for .NET files and directories. The following settings are now replicated and applied to your local analysis:

• sonar.inclusions
• sonar.exclusions
• sonar.global.exclusions

Learn more with this community announcement and full release notes.

This release delivers enhancements designed to enhance team productivity and the developer UX when using SonarLint in Connected Mode to SonarQube 9.6 and above.

Now, when an issue is suppressed (i.e. marked as "Won't Fix" or "False Positive") in SonarQube, the new issue status is immediately synced to SonarLint, and no longer reported in the VS IDE. In this way, team decisions regarding issues are rapidly disseminated, and developers are empowered to focus on only the issues that matter.

Plus

• For .NET analysis, new rules for C# and VB.NET
• And for C, C++ users we've added support for TI Arm Clang compiler

Learn more with this community announcement and full release notes.

This release introduces Sonar Rule Help, an enhancement to how issue descriptions are presented in SonarLint, along with other goodies to help you write Clean Code.

SonarLint for Visual Studio v6.13 now allows you to view an issue description and associated educational content directly in your IDE, versus in a separate browser. 

Sonar Rule Help provides the assistance you require, conveniently at your fingertips.

In addition, this release also brings:

• Instant synchronisation of injection vulnerabilities detected by SonarQube to your Visual Studio IDE, when using SonarLint in connected mode with SonarQube version >=9.6
• Support for clang-cl compiler for your C and C++ projects, as well as improved analysis performance of large source files
• 6 new rules for your C# code

Learn more with this community announcement and full release notes.

This release delivers a further enhancement for Visual Studio users of SonarLint when using Connected Mode to SonarQube, plus new rules for C++ users.

SonarLint can already synchronize issue suppressions from SonarQube, ensuring you only focus on relevant issues in your IDE and not be distracted by findings already muted in your SonarQube project. We have extended this feature further by enabling issue synchronization to the specific Git branch you are working in. Simply bind your local project to a SonarQube project using Connected Mode, and SonarLint will do the rest.

In addition, this version also brings:

• 13 new rules to help with C++ 20's std::format feature

Learn more in this community announcement and full release notes.

This release delivers improvements to the SonarLint UX plus new rules for C, C++, Objective-C and JavaScript users.

A restructured menu now groups all SonarLint features under Extensions->SonarLint. It is now easier to find links to product documentation and our Community forum, where you can access support or share your feedback.

In addition, this version also brings:

• 6 new rules to cover C++20’s concepts 3.
• 6 new JavaScript rules for detecting performance issues in React.

Learn more in this community announcement.

This release delivers access to more than fifty SonarLint quick fixes for JavaScript and TypeScript users in Visual Studio. 

SonarLint’s quick fixes present contextual opportunities to rapidly auto-fix issues as you code. With a growing library that also covers C, C++, VB.NET, and C# rules, writing clean code has never been easier.

In addition, this release brings:

• Further help for JS/TS developers, with added support for TypeScript 4.7, plus new rules to catch React-specific bugs and code smells.

• For .NET users, new rules to help C# developers write clean Azure Functions, plus support for Tuple Deconstruction.

Read more in our release notes and learn more in this community announcement. 

This release enables JavaScript & TypeScript users to experience the full end-to-end benefits of connecting SonarLint for Visual Studio 2019 and 2022 to SonarCloud and SonarQube, aligning projects and teams to a single standard of Clean Code.

When binding a project to SonarCloud or SonarQube, SonarLint will automatically synchronize rules and analysis settings to:

• Use the same quality profile locally
• Sync any file or directory inclusions/exclusions
• Mute any issues already flagged as Won’t Fix or False Positive

Discover the full benefits of Connected Mode

Read more in our release notes and learn more in this community announcement.