Skip to main content

2026 Self-Hosted IQ Server Release Notes

This page contains a list of Sonatype IQ Server self-hosted releases, links to each release's detailed release notes, and a brief list of major changes.

If you are using Sonatype IQ Server Cloud, see our Sonatype IQ Server Cloud release notes instead.

Ready to Upgrade?

Before upgrading to a new self-hosted Sonatype IQ Server version, check the Known Issues and Upgrade Guidance section in that version's release notes to determine whether any known issues or upgrade recommendations apply to your environment.

Version(s)

Release Date(s)

Highlights

207 – 207.1

September 9, 2026 (207.1)

September 3, 2026 (207)

Improvements Impacting Multiple Solutions

  • Improved user token authentication performance.

Sonatype Lifecycle

  • Mythos Readiness dashboard enhancements, including KPI cards, visualizations, and clearer Mythos Affected visibility.

  • Best Practices dashboard enhancements for clearer adoption, scan activity, and projected time-savings insights.

  • Sonatype Lifecycle now provides complete transitive dependency coverage for Yarn Berry v2, v3, and v4 workspace monorepos across PnP and node_modules install modes

Sonatype AI Developer

  • Self-hosted Lifecycle customers can enable AI Developer for their organization through a simple in-product opt-in.

206

August 5, 2026

Sonatype Lifecycle

  • Withdraw pending policy waiver requests through the API.

  • Enhanced component identification in the HeroDevs End-of-Life Components dashboard.

  • Support IAM Roles for Service Accounts (IRSA) with Amazon S3 file stores.

Sonatype AI Developer

  • AI Developer Preview for self-hosted Lifecycle customers.

205 – 205.3

July 31, 2026 (205.3)

July 7, 2026 (205)

Improvements Impacting Multiple Solutions

  • Extended .NET Reachability Analysis across IQ CLI and supported CI integrations.

  • Added Reachability Evidence for vulnerable execution paths.

  • Improved visibility into embedded components in uber JARs.

  • Automatically close stale automated remediation pull requests in Bitbucket Cloud and Bitbucket Data Center.

Sonatype Lifecycle

  • Mythos Readiness dashboard for Enterprise Reporting.

Sonatype Repository Firewall

  • Support for conda-forge upstreams.

204 – 204.2

June 9, 2026 (204.2)

June 8, 2026 (204.1)

June 2, 2026 (204)

Improvements Impacting Multiple Solutions

  • Java 25 is required for IQ Server 204 and later.

  • New Policy Configuration Export API.

  • Improved startup time for large data migrations.

Sonatype Lifecycle

  • Redesigned Success Metrics Enterprise Reporting experience with Program Health and Remediation Ops dashboards.

Sonatype SBOM Manager

  • Enhanced legal visibility and advanced search capabilities.

203 – 203.4

June 9, 2026 (203.4)

June 6, 2026 (203.3)

May 25, 2026 (203.2)

May 14, 2026 (203.1)

May 5, 2026 (203)

Improvements Impacting Multiple Solutions

  • Optional external log aggregation for IQ Server Helm deployments.

Sonatype Lifecycle

  • Enhanced filtering and cross-filtering for AI/ML Dashboard reporting.

  • Mythos Readiness data added to the Supply Chain Monitoring report.

Sonatype SBOM Manager

  • Legal tab in component details and expanded Advanced Search filters.

202 – 202.1

April 20, 2026 (202.1)

April 7, 2026 (202)

Improvements Impacting Multiple Solutions

  • Sonatype Container Scanner is now the default container scanner.

  • Improved consistency of container vulnerability results.

  • Centralized CI configuration through a REST API.

201

March 5, 2026

Improvements Impacting Multiple Solutions

  • Clearer Advanced Search instructions and error messages.

Sonatype Lifecycle

  • HeroDevs End-of-Life Components dashboard under Enterprise Reporting.

  • Operational Reporting access point for the React2Shell Impact Report.

Sonatype SBOM Manager

  • Case-insensitive search in the Original BOM tab.

200

February 4, 2026

Sonatype Lifecycle

  • HeroDevs End-of-Life Components dashboard under Enterprise Reporting.

  • Expanded React2Shell Impact Report with in-product insights.

Sonatype SBOM Manager

  • Original BOM tab for viewing uploaded CycloneDX and SPDX SBOM details.

Sonatype Repository Firewall

  • Automatic re-evaluation for components quarantined by age-based policy constraints.