Email content

Sonar Source

May 2026

SonarQube Community Build product news

Hey Sonar community! Here's a rapid rundown of what's new and noteworthy with SonarQube:

💻 New Rust analyzer rules via Clippy report import

📝 Cobertura coverage format support for C#

👩‍💻 IaC false-positive reductions across analyzers

🗓️ Join us for the Meet Gitar: AI code review joins Sonar's multilayered verification platform webinar.

Learn more about the latest SonarQube Community Build update below. 👇

SonarQube Community Build updates

SonarQube Community Build 26.5.0.122743 released

Sonar is excited to announce the availability of the SonarQube Community Build 26.5.0.122743, our May release.

This version brings new rules for Rust, support for Cobertura coverage format for C# along with other enhancements.

What's new:

Rust — The Rust analyzer now supports five new Clippy rules when importing a Clippy report: disallowed_fields, duration_suboptimal_units, manual_checked_ops, manual_take, and unnecessary_trailing_comma.

C# / .NET — Support for the Cobertura coverage file format has been added. Cobertura report paths can be passed via the sonar.cs.cobertura.reportsPaths parameter.

Go — Test files are now only analyzed by rules applicable to test files, reducing noise and improving precision.

IaC — The Infrastructure as Code analyzer was updated with false-positive reductions across analyzers.

For further details on updates, please refer to the documentation where you can find full release notes. Please open a new topic in the

SonarQube Community for any questions you have about these or other features.

As usual, download is available at Sonar.com. SonarQube Docker images are available on Docker Hub. You can find the latest SonarQube Community Build Helm chart and installation instructions on

Artifact Hub.

Read more

Upcoming webinar!

Meet Gitar: AI code review joins Sonar's multilayered verification platform

Join us on Thursday, June 11, 2026 at 10:00am CT for a live demo and Q&A introducing Gitar — the AI-native code review solution Sonar recently acquired. Gitar reviews every pull request, analyzes CI failures, and commits validated fixes directly to the branch. Together with SonarQube, it gives you the most complete code verification solution in the market, from the moment an agent starts writing code to the moment it lands in the codebase.