Loading feed…
GitHub Changelog0 Hot0 comments3 min read
CodeQL 2.27.1 adds C and C++ query and Kotlin 2.4.20 support
CodeQL 2.27.1 ships new queries and data flow model improvements across multiple languages. C/C++ gains taint flow models for Boost.Asio, Bloomberg's BDE Blob buffer, and Protocol Buffers, plus a new query detecting ambiguous comparison-to-assignment expressions. Go gains data flow models for Go 1.27 standard-library APIs including the new encoding/json/jsontext package. CodeQL now supports Kotlin 2.4.20, with a fix for Foo::class.java extraction under the K2 compiler that reduces false positives in Android PendingIntent queries. JavaScript/TypeScript analysis now recognizes Fastify servers configured via chainable methods, improving route attribution for rate-limiting queries. Rust gets fixed path resolution for trait self-paths, new data flow models for core::fmt::Write, and an updated rust-analyzer (0.0.347) requiring migration attention. New C# queries flag foreach loops replaceable by LINQ FirstOrDefault, and the GitHub Actions unpinned-tag query no longer flags actions pinned via actions.lock or self-repository references. GitHub automatically deploys this version to github.com code scanning users; GHES 3.24 will include it.
Source: https://github.blog/changelog/2026-09-25-codeql-2-27-1-adds-c-and-c-query-and-kotlin-2-4-20-support. 8 Sync News only summarizes and links out; content copyright belongs to the authors and original sources.
Recommended for you
Bình luận
Đang tải bình luận…
