> For the complete documentation index, see [llms.txt](https://docs.sonarsource.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.sonarsource.com/sonarqube-cloud/deprecations-and-removals.md).

# Deprecations and removals

This page contains information on the deprecation and removal of SonarQube Cloud features and API endpoints.

## Deprecation policy <a href="#deprecation-policy" id="deprecation-policy"></a>

A backward-incompatible change or dropping of a public API endpoint, a workflow, or a feature can be considered deprecation. Once deprecated, they will be removed after a defined period of time.

Before making a backward-incompatible change or dropping a public API endpoint, it is marked as obsolete or deprecated. Once deprecated, they will be removed after a defined period of time.

### Deprecation timeframe <a href="#deprecation-timeframe" id="deprecation-timeframe"></a>

* When a public API endpoint is to be dropped, Sonar will announce this at least **180 days** before to the users.
* When a feature is to be dropped, Sonar will announce this at least **90 days** before to the users.
* The feature or API endpoint will be removed on the expiry of the deprecation period.

### Deprecation communication <a href="#deprecation-communication" id="deprecation-communication"></a>

1. Deprecation notices will be published in SonarCloud documentation under the dedicated *Deprecation announcements* section below.
2. Users will be notified about an API endpoint deprecation in the [Sonar community](https://community.sonarsource.com/c/announce/20) (future deprecation announcements will be available at this link).
3. Users (organization owner and token owner if the endpoint is used by the organization) will be notified about the deprecation of an API endpoint via email. If you have used the API endpoint that is about to be deprecated within the last 30 days prior to deprecation, you will receive an email announcing the deprecation.
4. A reminder of the deprecation will be delivered through email 90, 60, and 30 days prior to the removal of the endpoint.
5. Deprecation of a feature or workflow will be communicated to existing users within the product UI.
6. Notification will include the scope of deprecation, timeframe of deprecation, and alternative solution (if available).

## Deprecation and removal announcements <a href="#deprecation-announcements" id="deprecation-announcements"></a>

### Java 17 support for SonarScanners has been removed <a href="#java-21-requirement-for-scanner-runtime" id="java-21-requirement-for-scanner-runtime"></a>

As of July 20, 2026, Java 17 is no longer supported as a scanner runtime environment. Java 21 or later is required.

If you use a supported scanner with JRE auto-provisioning, no action is required. The scanner manages the required Java runtime automatically.

If you're using a scanner setup without JRE auto-provisioning, or if your pipelines or build agents still run analysis with Java 17 or an earlier version, update them to Java 21 or later now to avoid analysis failures.

### Deprecation of types and type severities

Types and type severities are deprecated in favor of software qualities and their severities.

Nothing is removed. Your existing quality gate conditions, saved filters, and bookmarked URLs continue to work, and the deprecated metrics, fields, and parameters return the same values as before.

#### Deprecated metrics and their replacements

<table><thead><tr><th width="248">Deprecated metric</th><th width="286">Use instead</th><th>Measures</th></tr></thead><tbody><tr><td><code>bugs</code>, <code>new_bugs</code></td><td><code>software_quality_reliability_issues</code>, <code>new_software_quality_reliability_issues</code></td><td>Number of issues</td></tr><tr><td><code>vulnerabilities</code>, <code>new_vulnerabilities</code></td><td><code>software_quality_security_issues</code>, <code>new_software_quality_security_issues</code></td><td>Number of issues</td></tr><tr><td><code>code_smells</code>, <code>new_code_smells</code></td><td><code>software_quality_maintainability_issues</code>, <code>new_software_quality_maintainability_issues</code></td><td>Number of issues</td></tr><tr><td><code>new_bugs_severity</code></td><td><code>new_reliability_issue_severity</code></td><td>Severity of the most severe issue</td></tr><tr><td><code>new_vulnerabilities_severity</code></td><td><code>new_security_issue_severity</code></td><td>Severity of the most severe issue</td></tr><tr><td><code>new_code_smells_severity</code></td><td><code>new_maintainability_issue_severity</code></td><td>Severity of the most severe issue</td></tr><tr><td><code>blocker_violations</code>, <code>critical_violations</code>, <code>major_violations</code>, <code>minor_violations</code>, <code>info_violations</code>, and their new code counterparts</td><td><code>reliability_issue_severity</code>, <code>security_issue_severity</code>, <code>maintainability_issue_severity</code>, and their new code counterparts, set to the matching severity level</td><td>Severity of the most severe issue, rather than a count at one level</td></tr></tbody></table>

The severity metrics measure the most severe issue impacting a software quality, so they replace a count at a given level with a threshold on that level. Type severity levels map to software quality severity levels as follows: Blocker to Blocker, Critical to High, Major to Medium, Minor to Low, and Info to Info.

#### Where you can use the replacement metrics

* Quality gate conditions. See [Managing custom quality gates](/sonarqube-cloud/standards/managing-quality-gates/managing-custom-quality-gates.md).
* Measure queries and the `api/measures/*` endpoints.
* Project badges. See [Configuring end-user settings for your project](/sonarqube-cloud/managing-your-projects/managing-your-project-as-developer.md#using-project-badge).
* Issue and rule filters, through **Software Quality** and **Severity**.
* Rule severities in a quality profile. See [Editing a quality profile](/sonarqube-cloud/standards/managing-quality-profiles/editing-a-custom-quality-profile.md).

Rating measures are unchanged and continue to use types and type severities.

#### Deprecated API fields and parameters

The `type` and `severity` fields returned per issue and per rule are deprecated, as are the `types` and `severities` parameters, in the `api/issues/*`, `api/rules/*`, and `api/qualityprofiles/*` endpoints. Use the impact fields and parameters instead.

### Deprecation of Security Hotspots

To simplify the classification of findings, we are gradually transitioning security hotspots to vulnerabilities. As a result, rules that previously raised security hotspots will start raising vulnerabilities (type) or security issues (software quality).

### Replacement of *Sonar way for AI code* quality gate

The *Sonar way for agentic AI* quality gate replaces the *Sonar way for AI code* quality gate. If your projects used the *Sonar way for AI code* quality gate, they are now marked as *legacy*. See [Quality gate for agentic AI](/sonarqube-cloud/standards/ai-code-assurance/quality-gate-for-agentic-ai.md) for more information.

### Deprecation of Automatic AI Code Detection

Autodetect AI-Generated Code has been deprecated. Sonar will adjust the AI Code Assurance offering to adapt to the industry changes with high AI adoption. A warning callout has been added to the SonarQube UI in global and project settings. See the [Set your AI standards](/sonarqube-cloud/standards/ai-code-assurance/overview.md) for more information.

### Deprecated SonarCloud with Travis CI add-on <a href="#deprecated-build-wrapper-output-property" id="deprecated-build-wrapper-output-property"></a>

Support for the Travis CI add-on will end on March 9th, 2026. Please see [this page](/sonarqube-cloud/analyzing-source-code/ci-based-analysis/other-cis.md) for information on alternative options.

### Deprecated Amazon CodeCatalyst <a href="#deprecated-build-wrapper-output-property" id="deprecated-build-wrapper-output-property"></a>

On October 7th, 2025, AWS announced the retirement of CodeCatalyst. Starting November 7th, 2025, no new spaces can be created, and access is limited to existing customers. As a consequence, [this tool](/sonarqube-cloud/analyzing-source-code/ci-based-analysis/amazon-codecatalyst.md) won't be maintained anymore starting December 16th, 2025.

* Your code is built with Maven: run `org.sonarsource.scanner.maven:sonar-maven-plugin:3.11.0.3922:sonar` during the build (more info in the [SonarScanner for Maven](/sonarqube-cloud/analyzing-source-code/scanners/sonarscanner-for-maven.md) documentation)
* Your code is built with Gradle: use the [SonarScanner for Gradle](/sonarqube-cloud/analyzing-source-code/scanners/sonarscanner-for-gradle.md) during the build
* You want to analyze a .NET solution: follow our interactive tutorial for other CI's
* You want to analyze C and C++ code: rely on our [SonarQube Cloud Scan for C and C++](https://github.com/marketplace/actions/sonarcloud-scan-for-c-and-c) and look at [our sample C and C++ project](https://github.com/sonarsource-cfamily-examples?q=gh-actions-sc\&type=all\&language=\&sort=)
* Your code uses another language or ecosystem: use [SonarScanner CLI](/sonarqube-cloud/analyzing-source-code/scanners/sonarscanner-cli.md)

### Deprecated Design and Architecture features <a href="#deprecated-build-wrapper-output-property" id="deprecated-build-wrapper-output-property"></a>

* Announced in October 2025
* Removal after January 17 2026

The Design and Architecture features are deprecated and will be removed in the future.

### Deprecated build wrapper output property <a href="#deprecated-build-wrapper-output-property" id="deprecated-build-wrapper-output-property"></a>

* Announced in May 2024
* Removal after July 10 2024

Build Wrapper collects information from the build in two separate JSON formats: `compile_commands.json` and `build-wrapper-dump.json`. Both these files are generated in the specified output directory. The `build-wrapper-dump.json` format and its associated property `sonar.cfamily.build-wrapper-output` are deprecated. The `sonar.cfamily.compile-commands` property should be used instead to specify the path to the `compile_commands.json` file.

## Additional API updates <a href="#api-updates" id="api-updates"></a>

When querying rules or issues, INFO and BLOCKER may appear as statuses at the quality level (i.e. a rule might have a reliability severity of BLOCKER). It is also possible to create rules/issues with these additional severities.

The affected APIs:

* api/issues/\*
* api/rules/\*
* api/projects/export\_findings
* api/qualityprofiles/compare
* api/qualityprofiles/changelog


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.sonarsource.com/sonarqube-cloud/deprecations-and-removals.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.