CodeQL - 1

2026 (11)

September (5)

github: CodeQL 2.27.1 adds C and C++ query and Kotlin 2.4.20 support

GitHub

2026-09-25

CodeQL 2.27.1 adds new queries for C/C++ and C#, support for Kotlin 2.4.20, and query-accuracy improvements. It is the static analysis engine used by GitHub code scanning.

github: Deprecation notice: All-platform CodeQL bundle

GitHub

2026-09-22

GitHub has deprecated the all-platform CodeQL bundle starting with CodeQL CLI 2.27.0. The deprecated artifacts are codeql-bundle.tar.gz and codeql-bundle.tar.zst, which previously included binaries for all supported platforms.

github: Code scanning AI Scan no longer requires CodeQL default setup

GitHub

2026-09-16

AI Scan for pull requests can now find security vulnerabilities even when CodeQL default setup is not enabled on a repository. Previously, AI Scan for pull requests required CodeQL default setup.

github: CodeQL 2.27.0 adds support for Linux ARM64

GitHub

2026-09-09

CodeQL 2.27.0 is available on Linux ARM64. The release also adds a new Rust security query, expands framework coverage for Java/Kotlin and C#, and includes analysis accuracy improvements across multiple languages.

github: CodeQL 2.26.4 improves GitHub actions security detections

GitHub

2026-09-03

CodeQL 2.26.4 is a new release that adds support for Go 1.27 and improves GitHub Actions security detections. It is part of the static analysis engine used by GitHub code scanning.

August (4)

github: Separate GitHub Actions path for GitHub Code Quality

GitHub

2026-08-20

GitHub Code Quality CodeQL Actions workflows now have a dedicated workflow path and are generally available. Run history and Actions usage reports can now distinguish GitHub Code Quality runs from other Actions workflows.

github: CodeQL 2.26.3 improves GitHub Actions queries and JavaScript modeling

GitHub

2026-08-19

CodeQL 2.26.3 adds source modeling for JavaScript, TypeScript, and Vue, and updates several GitHub Actions queries for better accuracy. It is a CodeQL release used by GitHub code scanning.

github: Customize code scanning default setup at scale

GitHub

2026-08-04

GitHub added a new repository property, `github-codeql-config-file`, that lets you apply a custom configuration file to code scanning default setup. This gives you control over how CodeQL runs on repositories at scale.

github: CodeQL 2.26.2 adds Swift 6.3.3 and Kotlin 2.4.10 support

GitHub

2026-08-04

CodeQL 2.26.2 has been released with support for Swift 6.3.3 and Kotlin 2.4.10. It is the static analysis engine used by GitHub code scanning.

July (2)

github: CodeQL 2.26.1 improves analysis accuracy and framework coverage

GitHub

2026-07-29

CodeQL 2.26.1 has been released with improvements to analysis accuracy and broader framework coverage, including Go. The changelog item is brief and does not list additional specific fixes or language/framework details.

github: CodeQL 2.26.0 adds Kotlin 2.4.0 support and AI prompt injection detection

GitHub

2026-07-10

CodeQL 2.26.0 adds support for Kotlin 2.4.0 and introduces detection for AI prompt injection issues in code scanning. The release updates the static analysis engine used by GitHub code scanning.