# \#bug

**URL:** https://community.sonarsource.com/tag/bug/278.md

[Latest](https://community.sonarsource.com/latest.md) · [Categories](https://community.sonarsource.com/categories.md) · [Tags](https://community.sonarsource.com/tags.md)

---

## [Wrong TSConfig import](https://community.sonarsource.com/t/wrong-tsconfig-import/110082)

<div class="topic-metadata">

**Author:** [@MaikelAH](https://community.sonarsource.com/u/MaikelAH)\
**Replies:** 16\
**Last updated:** [October 15, 2026, 12:13pm UTC](https://community.sonarsource.com/t/wrong-tsconfig-import/110082 "2026-10-15T12:13:45Z")

</div>

SonarScanner; 4.8.1.3023 SonarQube server; 10.1.0.73491 In our pipelines we found that sonarscanner appends tsconfig.json behind the tsconfig extends property. One of our apps refers to a package within the monorepo i…

---

## [SonarQube for IDE VS Code extension v6.1.0 fails to launch](https://community.sonarsource.com/t/sonarqube-for-ide-vs-code-extension-v6-1-0-fails-to-launch/189788)

<div class="topic-metadata">

**Author:** [@hb20007](https://community.sonarsource.com/u/hb20007)\
**Replies:** 7\
**Last updated:** [October 14, 2026, 8:35am UTC](https://community.sonarsource.com/t/sonarqube-for-ide-vs-code-extension-v6-1-0-fails-to-launch/189788 "2026-10-14T08:35:52Z")

</div>

Operating system: Windows 111 SonarQube for VS Code plugin version: 6.1.0 Programming language you’re coding in: JS Is connected mode used: No I just updated my SonarQube for IDE VS Code extension from v6.0.1 to 6.1.0.…

---

## [GitLab and GitHub login button icons 404 since 26.9 (SONAR-31253 moved images/alm icons)](https://community.sonarsource.com/t/gitlab-and-github-login-button-icons-404-since-26-9-sonar-31253-moved-images-alm-icons/189753)

<div class="topic-metadata">

**Author:** [@Zadkiel](https://community.sonarsource.com/u/Zadkiel)\
**Replies:** 0\
**Last updated:** [October 12, 2026, 9:43am UTC](https://community.sonarsource.com/t/gitlab-and-github-login-button-icons-404-since-26-9-sonar-31253-moved-images-alm-icons/189753 "2026-10-12T09:43:02Z")

</div>

Must-share information: Versions: SonarQube Community Build 26.9.0.129388. No scanner or plugin involved, built-in GitLab authentication. Deployment: zip (sonarqube-26.9.0.129388.zip from binaries.sonarsource.com) on a…

---

## [Eslint-plugin-sonarjs: pnpm catalogs unresolved when linting from a workspace package](https://community.sonarsource.com/t/eslint-plugin-sonarjs-pnpm-catalogs-unresolved-when-linting-from-a-workspace-package/188188)

<div class="topic-metadata">

**Author:** [@daomtthuan](https://community.sonarsource.com/u/daomtthuan)\
**Replies:** 1\
**Last updated:** [September 22, 2026, 2:33pm UTC](https://community.sonarsource.com/t/eslint-plugin-sonarjs-pnpm-catalogs-unresolved-when-linting-from-a-workspace-package/188188 "2026-09-22T14:33:17Z")

</div>

eslint-plugin-sonarjs: pnpm catalog: lookup stops at the ESLint cwd, so linting a workspace package from its own directory prints Dependency "x" could not be resolved for catalog "y" to stdout Category: Report a bug (esl…

---

## [java:S2637 "@NonNull" values should not be set to null](https://community.sonarsource.com/t/java-s2637-nonnull-values-should-not-be-set-to-null/187789)

<div class="topic-metadata">

**Author:** [@reda-alaoui](https://community.sonarsource.com/u/reda-alaoui)\
**Replies:** 1\
**Last updated:** [September 11, 2026, 3:45pm UTC](https://community.sonarsource.com/t/java-s2637-nonnull-values-should-not-be-set-to-null/187789 "2026-09-11T15:45:11Z")

</div>

System informations: SonarQube Server: 2026.1.5.126862 ( Developer Edition ) How is SonarQube deployed: zip I have the following behavior: import java.util.Objects; import org.jspecify.annotations.NullMarked; import …

---

## [Property 'sonar.cfamily.reproducer' is not declared as multi-values/property set](https://community.sonarsource.com/t/property-sonar-cfamily-reproducer-is-not-declared-as-multi-values-property-set/187950)

<div class="topic-metadata">

**Author:** [@milbrandt](https://community.sonarsource.com/u/milbrandt)\
**Replies:** 1\
**Last updated:** [September 8, 2026, 12:15pm UTC](https://community.sonarsource.com/t/property-sonar-cfamily-reproducer-is-not-declared-as-multi-values-property-set/187950 "2026-09-08T12:15:21Z")

</div>

ALM used: Azure DevOps Service CI system used: Azure DevOps Service Scanner command used when applicable (private details masked) Languages of the repository: C#, C++ Error observed (wrap logs/code around with triple qu…

---

## [SonarQube MCP measure tool drops periods values for New Code metrics on branches](https://community.sonarsource.com/t/sonarqube-mcp-measure-tool-drops-periods-values-for-new-code-metrics-on-branches/186322)

<div class="topic-metadata">

**Author:** [@Yaniv\_Nahoum](https://community.sonarsource.com/u/Yaniv_Nahoum)\
**Replies:** 1\
**Last updated:** [September 2, 2026, 7:31am UTC](https://community.sonarsource.com/t/sonarqube-mcp-measure-tool-drops-periods-values-for-new-code-metrics-on-branches/186322 "2026-09-02T07:31:28Z")

</div>

Environment SonarQube Cloud US VS Code Copilot Description The SonarQube MCP get\_component\_measures tool does not expose values for New Code metrics when the SonarQube API returns those values inside the periods array. …

---

## [JsSecuritySensorV2 (Jasmin) never terminates on a single file — CI analysis runs until the 6h GitHub](https://community.sonarsource.com/t/jssecuritysensorv2-jasmin-never-terminates-on-a-single-file-ci-analysis-runs-until-the-6h-github/187475)

<div class="topic-metadata">

**Author:** [@Michael\_mnt](https://community.sonarsource.com/u/Michael_mnt)\
**Replies:** 2\
**Last updated:** [August 31, 2026, 8:49am UTC](https://community.sonarsource.com/t/jssecuritysensorv2-jasmin-never-terminates-on-a-single-file-ci-analysis-runs-until-the-6h-github/187475 "2026-08-31T08:49:15Z")

</div>

Environment SonarQube Cloud (sonarcloud.io), CI-based analysis (Automatic Analysis disabled) SonarScanner CLI 8.0.1.6346, invoked via SonarSource/sonarqube-scan-action@v7 GitHub Actions, ubuntu-latest Project: private,…

---

## [SonarResolverTask loses task dependencies from standard Java classpaths](https://community.sonarsource.com/t/sonarresolvertask-loses-task-dependencies-from-standard-java-classpaths/187466)

<div class="topic-metadata">

**Author:** [@janeklb](https://community.sonarsource.com/u/janeklb)\
**Replies:** 1\
**Last updated:** [August 20, 2026, 3:43pm UTC](https://community.sonarsource.com/t/sonarresolvertask-loses-task-dependencies-from-standard-java-classpaths/187466 "2026-08-20T15:43:12Z")

</div>

Environment SonarScanner for Gradle: 7.4.0.8496 SonarScanner for Gradle: 7.3.1.8318 (passes) Gradle: 8.14.5 Java: Temurin 21.0.12 A standard single-project Java build Minimal reproduction settings.gradle: rootProject.…

---

## [SonarScanner 7.3.1 double-registers KMP Android source sets → can't be indexed twice (AGP 9.2)](https://community.sonarsource.com/t/sonarscanner-7-3-1-double-registers-kmp-android-source-sets-cant-be-indexed-twice-agp-9-2/183981)

<div class="topic-metadata">

**Author:** [@Harshit\_Pandey](https://community.sonarsource.com/u/Harshit_Pandey)\
**Replies:** 6\
**Last updated:** [August 8, 2026, 6:29am UTC](https://community.sonarsource.com/t/sonarscanner-7-3-1-double-registers-kmp-android-source-sets-cant-be-indexed-twice-agp-9-2/183981 "2026-08-08T06:29:53Z")

</div>

Versions SonarScanner for Gradle: 7.3.1.8318 SonarQube: Community Build 26.6.0.123539 (reproduced locally) Android Gradle Plugin: 9.2.1 Gradle: 9.5.1 Kotlin: 2.3.0 Module type: Kotlin Multiplatform (org.jetbrains.kotlin…

---

## [Cache hit very low when PR directory different from main branch](https://community.sonarsource.com/t/cache-hit-very-low-when-pr-directory-different-from-main-branch/172259)

<div class="topic-metadata">

**Author:** [@Adam\_Birem](https://community.sonarsource.com/u/Adam_Birem)\
**Replies:** 13\
**Last updated:** [July 7, 2026, 11:35am UTC](https://community.sonarsource.com/t/cache-hit-very-low-when-pr-directory-different-from-main-branch/172259 "2026-07-07T11:35:52Z")

</div>

ALM used GitHub CI system used Jenkins Languages of the repository Java 21, Maven 3.8.7 We cannot get the PR incremental cache to work reliably on the CI, whatever we do. We have a project of several thousand files, s…

---

## [Warning on build-wrapper and scanner version mismatch](https://community.sonarsource.com/t/warning-on-build-wrapper-and-scanner-version-mismatch/184406)

<div class="topic-metadata">

**Author:** [@milbrandt](https://community.sonarsource.com/u/milbrandt)\
**Replies:** 2\
**Last updated:** [July 1, 2026, 5:40pm UTC](https://community.sonarsource.com/t/warning-on-build-wrapper-and-scanner-version-mismatch/184406 "2026-07-01T17:40:23Z")

</div>

ALM used: Azure DevOps CI system used: Azure DevOps Scanner command used when applicable (private details masked) Languages of the repository C++23, C# Error observed (wrap logs/code around with triple quotes \`\`\` for pr…

---

## [Sonar-go (26.3+ engine): O(call-exprs × identifiers) blowup — findReturnTypesForIdentifier linearly](https://community.sonarsource.com/t/sonar-go-26-3-engine-o-call-exprs-x-identifiers-blowup-findreturntypesforidentifier-linearly/183238)

<div class="topic-metadata">

**Author:** [@BrindlefordTech](https://community.sonarsource.com/u/BrindlefordTech)\
**Replies:** 1\
**Last updated:** [June 23, 2026, 7:21am UTC](https://community.sonarsource.com/t/sonar-go-26-3-engine-o-call-exprs-x-identifiers-blowup-findreturntypesforidentifier-linearly/183238 "2026-06-23T07:21:29Z")

</div>

TL;DR — Since the rewritten Go engine landed in 26.3, analysing a single Go package with a few hundred files never completes (one CPU core pinned indefinitely). Root cause is in sonar-go-to-slang/nodeImpl.go: findReturnT…

---

## [Bug with encoded url path (plugin does not work)](https://community.sonarsource.com/t/bug-with-encoded-url-path-plugin-does-not-work/182114)

<div class="topic-metadata">

**Author:** [@leCapi](https://community.sonarsource.com/u/leCapi)\
**Replies:** 7\
**Last updated:** [June 19, 2026, 2:15pm UTC](https://community.sonarsource.com/t/bug-with-encoded-url-path-plugin-does-not-work/182114 "2026-06-19T14:15:23Z")

</div>

Hello, It seems vscode sonar plugin struggles with path like src/c++/ The problem seems to be the url encoding use inside the plugin. configuration: \[ baseDir: /home/godardo/git/sonar\_bug extraProperties: {sonar.…

---

## [Project Admins are not able to bind project to Gitlab project](https://community.sonarsource.com/t/project-admins-are-not-able-to-bind-project-to-gitlab-project/182039)

<div class="topic-metadata">

**Author:** [@daniel.schiffl](https://community.sonarsource.com/u/daniel.schiffl)\
**Replies:** 4\
**Last updated:** [May 23, 2026, 9:27am UTC](https://community.sonarsource.com/t/project-admins-are-not-able-to-bind-project-to-gitlab-project/182039 "2026-05-23T09:27:11Z")

</div>

Template for a good new topic, formatted with Markdown: ALM used: GitLab CI system used: GitLab Error observed : Project Admins are not able to bind existing sonar projects to a Gitlab project. Even though the setting…

---

## [Web API /api/issues/search?resolutions=A,B,C silently returns total=0 for valid values (CE 26.4)](https://community.sonarsource.com/t/web-api-api-issues-search-resolutions-a-b-c-silently-returns-total-0-for-valid-values-ce-26-4/181703)

<div class="topic-metadata">

**Author:** [@ignatenkofi](https://community.sonarsource.com/u/ignatenkofi)\
**Replies:** 3\
**Last updated:** [May 22, 2026, 2:03pm UTC](https://community.sonarsource.com/t/web-api-api-issues-search-resolutions-a-b-c-silently-returns-total-0-for-valid-values-ce-26-4/181703 "2026-05-22T14:03:56Z")

</div>

Web API /api/issues/search returns total=0 for valid multi-comma resolutions= filter (CE 26.4) Must-share information Which versions are you using: SonarQube Server 26.4.0.121862 Community Build MQR (Multi-Quality Rule…

---

## [Measures section doesn't reflect SonarCloud rules mode (MQR)](https://community.sonarsource.com/t/measures-section-doesnt-reflect-sonarcloud-rules-mode-mqr/181248)

<div class="topic-metadata">

**Author:** [@acalero](https://community.sonarsource.com/u/acalero)\
**Replies:** 3\
**Last updated:** [April 21, 2026, 7:46am UTC](https://community.sonarsource.com/t/measures-section-doesnt-reflect-sonarcloud-rules-mode-mqr/181248 "2026-04-21T07:46:11Z")

</div>

Hi all! I have just found that the “Measures” section doesn’t reflect the rules mode in SonarCloud and the values are wrong (still using old model) The section is supposed to allow the user to review Reliability, Secur…

---

## [SonarCloud Azure DevOps task fails with Newtonsoft.Json MissingMethodException in scanner ≥ 11.x (wo](https://community.sonarsource.com/t/sonarcloud-azure-devops-task-fails-with-newtonsoft-json-missingmethodexception-in-scanner-11-x-wo/180506)

<div class="topic-metadata">

**Author:** [@esinoheh](https://community.sonarsource.com/u/esinoheh)\
**Replies:** 4\
**Last updated:** [April 2, 2026, 1:49pm UTC](https://community.sonarsource.com/t/sonarcloud-azure-devops-task-fails-with-newtonsoft-json-missingmethodexception-in-scanner-11-x-wo/180506 "2026-04-02T13:49:51Z")

</div>

Title: SonarCloud Azure DevOps task fails with Newtonsoft.Json MissingMethodException in scanner ≥ 11.x (works when pinned to 10.4.1) Description: After upgrading the SonarCloud Azure DevOps integration to versions u…

---

## [/api/system/info failed with java.lang.NumberFormatException: Error at index on IPv6 only](https://community.sonarsource.com/t/api-system-info-failed-with-java-lang-numberformatexception-error-at-index-on-ipv6-only/142184)

<div class="topic-metadata">

**Author:** [@rherold](https://community.sonarsource.com/u/rherold)\
**Replies:** 8\
**Last updated:** [March 31, 2026, 9:38am UTC](https://community.sonarsource.com/t/api-system-info-failed-with-java-lang-numberformatexception-error-at-index-on-ipv6-only/142184 "2026-03-31T09:38:44Z")

</div>

hi, using SonarQube community on IPv6 only network with NAT64. SonarQube version is Community Build v25.6.0.109173 MQR Mode Deployed as docker container. If open in my webbrowser https://sonarqube/admin/system: so…

---

## [NullPointerException in SonarJava LocksNotUnlockedCheck when analyzing RedisDistributedLock](https://community.sonarsource.com/t/nullpointerexception-in-sonarjava-locksnotunlockedcheck-when-analyzing-redisdistributedlock/179965)

<div class="topic-metadata">

**Author:** [@vxtls](https://community.sonarsource.com/u/vxtls)\
**Replies:** 4\
**Last updated:** [March 25, 2026, 10:52am UTC](https://community.sonarsource.com/t/nullpointerexception-in-sonarjava-locksnotunlockedcheck-when-analyzing-redisdistributedlock/179965 "2026-03-25T10:52:28Z")

</div>

Hi Sonar team, I encountered an analyzer crash while scanning a Java class that implements a distributed lock with a local ReentrantLock fallback. Environment: \[INFO\] --- sonar:5.5.0.6356:sonar (default-cli) @ wiki ---…

---

## [Unknown ur: /api/project\_branches/get\_ai\_code\_assurance and /api/support/info](https://community.sonarsource.com/t/unknown-ur-api-project-branches-get-ai-code-assurance-and-api-support-info/179605)

<div class="topic-metadata">

**Author:** [@rherold](https://community.sonarsource.com/u/rherold)\
**Replies:** 1\
**Last updated:** [March 16, 2026, 2:34pm UTC](https://community.sonarsource.com/t/unknown-ur-api-project-branches-get-ai-code-assurance-and-api-support-info/179605 "2026-03-16T14:34:19Z")

</div>

Since some versions we get: Unkown url: /api/support/info and Unkown url: /api/project\_branches/get\_ai\_code\_assurance Current Version: SonarQube ID information Server ID: 9CFC3560-AYe4bwwPHhCtOol2Z5Nt Version: 26.…

---

## [ERROR: Failed to delete temp folder for architecture\_graphsXX.pb](https://community.sonarsource.com/t/error-failed-to-delete-temp-folder-for-architecture-graphsxx-pb/178302)

<div class="topic-metadata">

**Author:** [@milbrandt](https://community.sonarsource.com/u/milbrandt)\
**Replies:** 6\
**Last updated:** [March 10, 2026, 9:41am UTC](https://community.sonarsource.com/t/error-failed-to-delete-temp-folder-for-architecture-graphsxx-pb/178302 "2026-03-10T09:41:37Z")

</div>

Azure DevOps, self-hosted build agents SonarCloud Mixed C#/C++ solution with build wrapper Visual Studio 2026 During SonarCloudAnalyze@4.1.0 task, the temp directory cannot be deleted 09:41:13.907 INFO: -----------…

---

## [Problems generating reproducer files](https://community.sonarsource.com/t/problems-generating-reproducer-files/178357)

<div class="topic-metadata">

**Author:** [@milbrandt](https://community.sonarsource.com/u/milbrandt)\
**Replies:** 3\
**Last updated:** [March 4, 2026, 6:38am UTC](https://community.sonarsource.com/t/problems-generating-reproducer-files/178357 "2026-03-04T06:38:56Z")

</div>

Template for a good new topic, formatted with Markdown: ALM used: Azure DevOps CI system used: Azure DevOps Scanner command used when applicable (private details masked) Languages of the repository C++ Error observed (…

---

## [SonarQube displays suggestions for file outside the workspace when using GitHub Copilot code review](https://community.sonarsource.com/t/sonarqube-displays-suggestions-for-file-outside-the-workspace-when-using-github-copilot-code-review/178005)

<div class="topic-metadata">

**Author:** [@hb20007](https://community.sonarsource.com/u/hb20007)\
**Replies:** 1\
**Last updated:** [March 2, 2026, 7:42pm UTC](https://community.sonarsource.com/t/sonarqube-displays-suggestions-for-file-outside-the-workspace-when-using-github-copilot-code-review/178005 "2026-03-02T19:42:48Z")

</div>

Operating system: Windows 11 SonarQube for VS Code plugin version: 4.43.0 (latest) Programming language: Python Is connected mode used: No. Steps to reproduce: Open a clean installation or new profile of VS Code. Dow…

---

## [Path resolution bug in rust clippy report loading](https://community.sonarsource.com/t/path-resolution-bug-in-rust-clippy-report-loading/178187)

<div class="topic-metadata">

**Author:** [@oj502](https://community.sonarsource.com/u/oj502)\
**Replies:** 1\
**Last updated:** [February 27, 2026, 12:24pm UTC](https://community.sonarsource.com/t/path-resolution-bug-in-rust-clippy-report-loading/178187 "2026-02-27T12:24:46Z")

</div>

I believe there is a potential bug in SonarQube’s parsing of external clippy reports in its native rust support. While I have been able to get issues loaded from external clippy reports when they come from standalone cra…

---

## [PHP #\[SuppressWarnings()\] attribute not working](https://community.sonarsource.com/t/php-suppresswarnings-attribute-not-working/155455)

<div class="topic-metadata">

**Author:** [@floriankraemer](https://community.sonarsource.com/u/floriankraemer)\
**Replies:** 3\
**Last updated:** [February 4, 2026, 5:05pm UTC](https://community.sonarsource.com/t/php-suppresswarnings-attribute-not-working/155455 "2026-02-04T17:05:09Z")

</div>

According to this documentation page, a PHP attribute like this should work \`#\[SuppressWarnings(“php:S2077”)\]\`, but it doesn’t. Is it a bug or are we doing something wrong?

---

## [Sonar Java Analyzer Fails with StackOverflow - Sonar Community](https://community.sonarsource.com/t/sonar-java-analyzer-fails-with-stackoverflow-sonar-community/176639)

<div class="topic-metadata">

**Author:** [@andres123ify](https://community.sonarsource.com/u/andres123ify)\
**Replies:** 3\
**Last updated:** [January 23, 2026, 2:49pm UTC](https://community.sonarsource.com/t/sonar-java-analyzer-fails-with-stackoverflow-sonar-community/176639 "2026-01-23T14:49:51Z")

</div>

Running a Maven-based SonarQube analysis consistently fails due to an internal error in the SonarJava symbolic execution engine. The analyzer enters a recursive constraint propagation loop within RelationalSymbolicValue …

---

## [Typo in rule S6532 for Kotlin](https://community.sonarsource.com/t/typo-in-rule-s6532-for-kotlin/174711)

<div class="topic-metadata">

**Author:** [@Big-Iron-Cheems](https://community.sonarsource.com/u/Big-Iron-Cheems)\
**Replies:** 4\
**Last updated:** [January 23, 2026, 2:48pm UTC](https://community.sonarsource.com/t/typo-in-rule-s6532-for-kotlin/174711 "2026-01-23T14:48:44Z")

</div>

I believe there is a typo in rule S6532 for Kotlin: rspec/rules/S6532/kotlin/rule.adoc at master · SonarSource/rspec · GitHub sonar-kotlin/sonar-kotlin-plugin/src/main/resources/org/sonar/l10n/kotlin/rules/kotlin/S6532…

---

## [New Code line offset in HTML files during SonarCloud analysis](https://community.sonarsource.com/t/new-code-line-offset-in-html-files-during-sonarcloud-analysis/172534)

<div class="topic-metadata">

**Author:** [@dhanush1](https://community.sonarsource.com/u/dhanush1)\
**Replies:** 5\
**Last updated:** [January 22, 2026, 2:12pm UTC](https://community.sonarsource.com/t/new-code-line-offset-in-html-files-during-sonarcloud-analysis/172534 "2026-01-22T14:12:32Z")

</div>

Hello Team, We are observing an issue with SonarCloud New Code detection for an updated HTML file, where the lines highlighted as New Code do not align with the actual changes made in the source file. CI system used L…

---

## [Github Actions integration reporting success when there are Sonar failures](https://community.sonarsource.com/t/github-actions-integration-reporting-success-when-there-are-sonar-failures/153004)

<div class="topic-metadata">

**Author:** [@colelloa](https://community.sonarsource.com/u/colelloa)\
**Replies:** 4\
**Last updated:** [January 5, 2026, 4:56pm UTC](https://community.sonarsource.com/t/github-actions-integration-reporting-success-when-there-are-sonar-failures/153004 "2026-01-05T16:56:28Z")

</div>

ALM: Github CI system: Github Actions Scanner command used when applicable: this is my github actions build.yml ￼push:￼ branches:￼ - main pull\_request:￼ types: \[opened, synchroni…

[Next page](https://community.sonarsource.com/tag/bug/278.md?match_all_tags=true&page=1&tags%5B%5D=bug)
