6.4

This release adds rules to detect cloud secrets that are hard-coded in source files.

Improvements

• 2677 - Implement S6336: Alibaba Cloud AccessKeys should not be disclosed
• 2676 - Implement S6337: IBM API keys should not be disclosed
• 2675 - Implement S6335: Google Cloud service account keys should not be disclosed
• 2674 - Implement S6334: Google API keys should not be disclosed
• 2670 - Implement S6338: Azure Storage Account Keys should not be disclosed
• 2668 - Implement S6292: Amazon MWS credentials should not be disclosed
• 2667 - Implement S6290: Amazon Web Service credentials should not be disclosed

6.3

This version brings new functionalities for JavaScript and TypeScript analysis, including many new rules for regular expressions and for unit tests with Mocha and Chai.

Improvements

• 3013 - Update embedded JS/TS analyzer to 8.6.0.16913

Bug Fixes

• 2977 - Goldbar with NullReferenceException when navigating to a secondary location in a different file
• 2443 - [TypeScript] File-level are not displayed in the Error List

6.2

This version improves the performance of some of the C# and VB.NET rules, adds initial support for record structs, and fixes some false positives (S1172 included) and false negatives.

### Improvements

• 2989 - Embed SonarC# 8.38 and SonarVB 8.38

6.1

Improvements

• 2969 - Update embedded CFamily analyzer from 6.29.0.41127 to 6.31.0.44497
• 2961 - Embed SonarC# 8.37 and SonarVB 8.37
• 2904 - Embed SonarC# 8.36.1 and SonarVB 8.36.1
• 2875 - Support more C&C++ compiler options and enable Z3 refutation for symbolic execution rules
• 2680 - Support old VS toolsets that doesn't have the windows runtime extension option
• 1778 - Add support for /Tp and /Tc options

6.0

Improvements

• 2892 - Increase minimum supported VS2019 version to v16.3
• 2882 - Drop support for VS 2017

Bug Fixes

• 1005 - Fix C# connected mode suppressions mechanism

5.5

Improvements

• 2879 - Support Quick Fixes in C++
• 2846 - Embed SonarC# 8.35 and SonarVB 8.35
• 2840 - [Quick fixes] Add documentation

Bug Fixes

• 2867 - Error recording analysis telemetry
• 2857 - Remove "??" from SLVS 2019 extension description

5.4

Improvements

• 2821 - Embed SonarC# 8.34 and SonarVB 8.34
• 2506 - Add "show visualization pane" command to taint list context menu

Bug Fixes

• 2694 - Light bulb "hide issue visualization" suggested action appears for all selected SL issues

5.3

Improvements

• 2814 - Update embedded CFamily analyzer to v6.29.0.41127
• 2807 - Optimise processing CPP issues
• 2796 - Embed SonarC# 8.33 and SonarVB 8.33

5.2

The following release contains performance improvements and bug fixes.

Improvements

• 2791 - Checking for unbound solutions causes VS to be unresponsive

Bug Fixes

• 2788 - Taint vulnerabilities package fails to load when the bound solution's server is inaccessable
• 2783 - Unsafe thread access to dictionary causes VS to lock up
• 2781 - platformName should be compared in a case insensitive way

5.1

Improvements

• 2773 - Embed SonarC# 8.32 and SonarVB 8.32

Bug Fixes

• 2753 - [SonarCloud] "View in SonarQube" link gives a 404 error