11 Pull requests merged by 9 people

• Post-release preparation for codeql-cli-2.22.3

  #20166 merged Aug 4, 2025

• Release preparation for version 2.22.3

  #20165 merged Aug 4, 2025

• Rust: Fix two bad joins introduced by magic

  #20161 merged Aug 4, 2025

• Rust: Add type inference test cases resembling missing call targets in SQLx.

  #20160 merged Aug 4, 2025

• C++: Static variables are initialized to zero or null by compiler

  #20129 merged Aug 4, 2025

• Rust: Add metric for DCA and debug predicates for type that reach the length limit

  #20147 merged Aug 4, 2025

• C++: Expose SSA definitions from dataflow

  #20149 merged Aug 1, 2025

• Kotlin: Support 2.2.20-beta2

  #20141 merged Jul 31, 2025

• Rust: Implement type inference for closures and calls to closures

  #20130 merged Jul 30, 2025

• SSA: Update data flow integration and BarrierGuard interface to use GuardValue.

  #20132 merged Jul 30, 2025

• Java: Move extractorInformationSkipKey predicate to library pack

  #20134 merged Jul 29, 2025

19 Pull requests opened by 8 people

• Java: Add test for flexible constructor support

  #20136 opened Jul 29, 2025

• Rust: New Query rust/cleartext-storage-database

  #20137 opened Jul 29, 2025

• C++: Fix missing guard conditions for C++ code

  #20138 opened Jul 29, 2025

• Rust: Improve handling of where clauses in type inference and path resolution

  #20140 opened Jul 30, 2025

• Python: Modernise Superclass attribute shadows subclass method query

  #20142 opened Jul 30, 2025

• Rust: Don't use constraint implementations for type parameters

  #20143 opened Jul 30, 2025

• C++: Fix missing `bool` -> `int` conversions in C code

  #20145 opened Jul 30, 2025

• JS: Move cors-misconfiguration query from experimental to Security

  #20146 opened Jul 31, 2025

• JS: Exclude environment variables from `js/regex-injection` query by default

  #20148 opened Jul 31, 2025

• Rust: Update BadCtorInitialization.ql to use getCanonicalPath.

  #20150 opened Jul 31, 2025

• JS: Enhance command injection detection for CLI argument parsing libraries

  #20151 opened Aug 1, 2025

• C++: Remove redundants casts from IR

  #20154 opened Aug 1, 2025

• Rust: Add predicate for certain type information

  #20155 opened Aug 2, 2025

• C++: Value numbering for casts that only modify specifiers

  #20156 opened Aug 2, 2025

• C#: Include constructors in `ValueOrRefType.hasCallable`

  #20158 opened Aug 4, 2025

• Python: Add jump steps for global variable nested field access

  #20162 opened Aug 4, 2025

• Java: Assume normal termination in post-dominance.

  #20163 opened Aug 4, 2025

• Rust: Fix bad join

  #20164 opened Aug 4, 2025

• Rust: Clean up some odds and ends

  #20167 opened Aug 4, 2025

1 Issue closed by 1 person

• github-recovery-codes.txt.

  #20157 closed Aug 4, 2025

5 Issues opened by 5 people

• False positive in python/ql/src/Security/CWE-312/CleartextLogging.ql

  #20168 opened Aug 4, 2025

• How to write CodeQL rules?

  #20159 opened Aug 4, 2025

• False positive "use of implicit PendingIntents" alert

  #20153 opened Aug 1, 2025

• False positives for py/file-not-closed even when using `with` statements

  #20152 opened Aug 1, 2025

• Java SSRF Findings

  #20144 opened Jul 30, 2025

11 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• JS: Modeling of `aws-sdk` clients*

  #20135 commented on Jul 30, 2025 • 4 new comments

• Fix #19294, Ruby NetHttpRequest improvements

  #20101 commented on Aug 4, 2025 • 2 new comments

• Rust: Support blanket implementations

  #20133 commented on Aug 4, 2025 • 2 new comments

• Java: Add support to `ModuleImportDeclaration`

  #20097 commented on Jul 30, 2025 • 1 new comment

• Java: Add support to Compact Source Files

  #20116 commented on Jul 30, 2025 • 1 new comment

• Question: C# analysis without building the code, on Azure DevOps

  #16070 commented on Jul 29, 2025 • 0 new comments

• Idea/Feature request: codeql as MCP Server

  #19150 commented on Jul 29, 2025 • 0 new comments

• CWE 134

  #20131 commented on Aug 4, 2025 • 0 new comments

• Rust: Update SqlxQuery, SqlxExecute to use getCanonicalPath

  #19802 commented on Jul 31, 2025 • 0 new comments

• Python: Modernize Unexpected Raise In Special Method query

  #20120 commented on Aug 4, 2025 • 0 new comments

• C++: Fix missing global variable flow

  #20126 commented on Aug 2, 2025 • 0 new comments