Hi all,
Like every week, we’d like to take a moment to recognize you, the users, who help improve the ecosystem for everyone by sparking valuable discussions and providing feedback that drives continuous improvement in our products.
SonarQube Server & Community Build:
-
@estesb1 asked for clarity on Reliability Issues in the measures API, noting that the count seemed to include both bugs and code smells rather than just bugs. The docs need to be updated, and we’re on it. Thanks!
-
Portfolio reliability ratings show mismatched counts between summary and detail views, as @henri discovered. The portfolio summary shows 57 projects rated E, but drilling down reveals only 12 actually have that rating. This appears related to MQR mode and SONAR-26226 has been moved to the top of the backlog. Thanks for the detailed screenshots!
SonarQube MCP Server:
- The SonarQube MCP Server Docker image couldn’t use HTTP transport, as @Tuguldur reported. The HTTP endpoint wasn’t responding after container startup. The Docker image has been updated, and a follow-up bug with the
search_sonar_issues_in_projectsmethod handling multiple severities was also quickly fixed. Thanks for the testing and feedback!
Rules & Languages Improvements:
-
cpp:S1103incorrectly flags comments inside Doxygen code blocks, as @terok noted. Comments within@code...@endcodeblocks trigger the “comment-in-comment” rule, even thoughcpp:S125correctly excludes them. A ticket was created to reevaluate the rule. Thanks! -
java:S4449doesn’t understand Guava’s@ParametricNullnessannotation, as @ahubold discovered. The rule incorrectly flags null parameters forIterables.getLast()andMultimap.put(), even though these methods explicitly allow null via the@Nullabletype bounds. SONARJAVA-5854 was created to cover both cases. Thanks for the excellent reproducers! -
Community feedback continues to roll in about
javascript:S7728andtypescript:S7728suggestingfor...ofover.forEach(). @sickhippie posted a detailed critique of the rule, and finally we’ve decided to remove it from the built-in Sonar Way. Thank you for your feedback! -
csharpsquid:S2325doesn’t recognize C# 14 extension syntax, as @Corniel reported. A ticket was created. Thanks for catching this new language feature!
Thank you again to everyone mentioned—and to those we may have missed—for your ongoing contributions in making this community stronger and helping us improve Sonar products.
If you’d like to give a shout-out to someone, whether a community member or a SonarSourcer who helped you, please do so below. And if there’s someone you think we should acknowledge next week, let us know!