SonarQube CLI 1.11.0 - Devin and Pi agents integrations, monorepo analysis and architecture commands

Sonar Updates
, , ,
1

We are thrilled to announce the release of SonarQube CLI 1.11.0.

This release adds new agents integrations, fully supports SonarQube analysis when working in a monorepo and adds architecture commands.

What’s new

  • Devin and Pi integrations: Secrets scanning, Vortex for analysis and context augmentation, and the SonarQube MCP server are now available for both agents with the command sonar integrate.
  • OpenCode 2.0 support: Set it up with sonar integrate opencode.
  • Monorepo support for analysis: SCA dependency analysis, Vortex code analysis, and Vortex context augmentation now all work correctly in monorepos. Each affected project is analyzed independently, and ambiguous project resolution produces clear guidance to re-run from the correct subdirectory.
    • sonar link list: New command to look up which SonarQube project covers a given file or directory path, with pagination support — useful in large monorepos with many linked projects.
    • Link multiple projects with sonar link: sonar link can now create and update multi-project configurations, letting you map several subdirectories to different SonarQube projects without editing .sonar-config.json manually..
  • Architecture commands: Read the current and intended architecture of your project, and update intended architecture with your agent.
  • SonarQube Cloud organization switching: Switch organizations more easily with sonar auth org if you are a member of different organizations in SonarQube Cloud.

Improvements

  • MCP networking: Set mcp.container.autoNetwork=true to automatically configure container access to SonarQube Server running on localhost. Disabled by default.
  • Context failure reporting: When the SessionStart hook cannot inject Vortex context (e.g., because the project cannot be resolved), the failure and discovery diagnostics are now reported clearly instead of silently skipped.

For the full release notes, check here.

Finally, if you’re concerned about for eMudhra compromised certificates, SonarQube CLI 1.10.1 and later address it as per this announcement.

Happy coding,
Farah.

3 Likes
Sonar Community Roundup, Oct 24 - 30