#Release Notes

#Compatibility and support matrix

The following table shows the compatibility and support matrix between the Alauda Build of SonarQube operator and ACP versions.

#v2026.1.2

#Features and Enhancements

Security Updates: This release includes important security patches to address potential vulnerabilities in the operator and its dependencies.

Key improvements in this release:

• RBAC Hardening: Removed wildcard verb permissions that previously granted bind, escalate, and impersonate capabilities, reducing the operator's privilege surface.

#Fixed Issues

• Before this update, when a SonarQube instance was configured with external PostgreSQL (spec.helmValues.jdbcOverwrite.enabled=true), any restart of the main container (e.g., database not yet ready, slow initial schema migration, OOM kill) caused the instance to silently fall back to the embedded H2 database. The instance status showed Running/Successful, but all data was written to the H2 file on the PVC while the external PostgreSQL remained empty. With this update, the JDBC configuration is idempotent across container restarts, so the instance consistently connects to the external PostgreSQL and no longer falls back to H2.

#Known Issues

No issues in this release.

#v2026.1.1

#Features and Enhancements

Security Updates: This release includes important security patches to address potential vulnerabilities in the operator and its dependencies.

#Fixed Issues

No issues in this release.

#Known Issues

No issues in this release.

#v2026.1.0

#Features and Enhancements

To know more about SonarQube v2026.1.0 features, please visit SonarQube v2026.1 Release Notes.

Security Updates: This release includes important security patches to address potential vulnerabilities in the operator and its dependencies.

#Fixed Issues

No issues in this release.

#Known Issues

No issues in this release.