SonarQube Server 2025 Release 2 released

Hi all,

Sonar is excited to announce the release of the SonarQube Server 2025 Release 2.

This version expands AI CodeFix rule coverage and introduces the ability to use your own Azure OpenAI service for AI CodeFix. It also adds the possibility to configure architectural constraints for Java, and 24 new security rules for Go. Enjoy these and many other exciting features in this release.

Details are in the official announcement and the Release Notes (and full release notes in Jira). For upgrade instructions, refer to the upgrade notes.

As usual, downloads are available at sonarsource.com. Docker images are also available on Docker Hub.

Elena

5 Likes

:partying_face:

We have just deployed the 2025.2-enterprise Docker image. Do you know where the JavaScript and TypeScript Architecture rules are? We would like to give them a try.

When searching for Architecture repositories, we only see the Java repository.

This is also the case in next.sonarqube.com:

We also searched for javascript and js, without success.

Using rules.sonarsource.com, we were not able to find the “circular” rule either:

The “circular” Java rules are successfully found:

The binary doesn’t seem to contain a JavaScript Architecture plugin - but maybe the rules are included in the JavaScript plugin itself.

1 Like

:backhand_index_pointing_up: i think this is the question that is looking for an answer :nerd_face:

1 Like

@daniel, definitely.

I think something went wrong. The release notes say:

Through its new Design & Architecture feature, SonarQube Server can now verify the architecture and design of Java, JavaScript, or TypeScript source code by:

And @Lena mentions that we can read the full release notes in Jira:

But, in these “full” release notes, there is no mention of any architecture change for JavaScript, or TypeScript:

How can they be the “full” release notes if they mention less things than the “partial” ones?

This is confirmed when looking at SonarQube itself:

Digging further, we find this Jira ticket, linked to SonarJS version 10.22.

Not only is this ticket in ToDo, but SonarQube 2025.2 embeds SonarJS 10.21:

So, @Lena, are you sure about your release notes?

  • i think there are multiple moving parts involved. coordinating those is a daunting task. therefore i presume(hope?) the involved ppl might already be investigating behind the curtain :ninja:
  • i, too, think that the question at hand is worth asking
  • i, additionaly, think that this part of the thread might well be split off into its own topic starting with @Philippe_Formulain s first reply :nerd_face:

i, additionaly, think that this part of the thread might well be split off into its own topic starting with @Philippe_Formulain s first reply :nerd_face:

I agree. I wanted to get an actual confirmation from @Lena that I’m not missing something obvious - like the rules are located somewhere else or within another rule repository not named after “architecture”.

But I didn’t get any answer, so, let’s open a topic.

Hi Philippe,

Thank you for bringing this up!

Unfortunately this is a mistake on our side, the architecture analysis for JavaScript and TypeScript is currently only available in SonarQube Cloud.

We will amend the announcement and documentation. Sorry for the confusion.

Kind regards,

1 Like

Thank you @gab, I appreciate.

Can we assume that the JS and TS rules are coming to SonarQube Server in a - not too far away - upcoming release?

Hi @Philippe_Formulain, yes, that would be a fair assumption :slightly_smiling_face: