SonarSource, the company behind SonarQube, follows a predictable and transparent release schedule. Historically, this cadence has settled into a reliable rhythm:
: These versions (e.g., 10.x series) introduce the latest features, AI-powered code reviews , and support for new language versions like Java 21 . They are ideal for teams wanting the "bleeding edge" of static analysis. sonarqube versions
For production environments supporting critical infrastructure, the LTS version remains the gold standard. However, for teams focused on eradicating the latest security flaws in their code, staying closer to the current version provides a competitive edge. Whichever path you choose, remember that standing still is not an option—staying on an EOL version eventually becomes a security liability in itself. the company behind SonarQube