CodeQL 2.25.4 release includes new Swift support, C# and Java improvements, and other query changes.

GitHub Updates Blog provides announcements, product updates, and insights into new features and enhancements on the GitHub platform. Developers can stay informed about changes to GitHub's developer tools, collaboration features, and security offerings. With GitHub's commitment to empowering developers and supporting open source communities, the GitHub Updates Blog serves as a resource for staying connected with the latest developments in software development.

GitHub Changelog

CodeQL 2.25.4 has been released with several notable updates: Swift 6.3.1 support, expanded ASP.NET taint flow coverage and C# 14 compound assignment operator support, Vercel serverless function security analysis for JavaScript/TypeScript, and multiple Java/Kotlin query improvements that reduce false positives for path injection, sensitive logging, and trust boundary violations. A cross-language new feature allows adding data flow barriers via data extensions across C/C++, C#, Go, Java/Kotlin, JavaScript/TypeScript, Python, Ruby, and Rust, making it easier to suppress false positives in custom configurations without modifying queries directly.

CodeQL 2.25.4 adds Swift 6.3.1 support, improvements to C# and Java, and more