CodeQL 2.24.3 has been released with Java 26 support and several improvements across multiple languages. Java analysis now selects the Java version based on Maven POM files and prefers Java 17+ for better build compatibility. JavaScript/TypeScript gains support for MobX React observer-wrapped components. Python gets a new SSRF sanitization barrier from the AntiSSRF library with improved guard handling. Ruby improves taint flow tracking through Shellwords methods. Java/Kotlin expands jakarta namespace coverage alongside existing javax support. Rust adds neutral model support, C/C++ reduces false positives in leap-year queries, and C# 14 adds support for the field keyword in properties.
Sort: