Skip to content

Add changelog entry for CodeQL CLI version 2.22.4 #20268

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

coadaflorin
Copy link
Contributor

Include a new entry in the changelog for CodeQL CLI version 2.22.4, summarizing the updates and improvements made in this release.

@Copilot Copilot AI review requested due to automatic review settings August 22, 2025 09:19
Copy link
Contributor

@Copilot Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR adds a changelog entry for CodeQL CLI version 2.22.4 released on August 21, 2025. The changelog documents security improvements, query updates, and library enhancements across multiple programming languages.

Key changes:

  • Added new changelog file for version 2.22.4 with comprehensive release notes
  • Updated the main changelog index to include the new version entry
  • Documented 2 new security queries, various bug fixes, and analysis improvements

Reviewed Changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 3 comments.

File Description
docs/codeql/codeql-overview/codeql-changelog/index.rst Added reference to new 2.22.4 changelog entry in the table of contents
docs/codeql/codeql-overview/codeql-changelog/codeql-cli-2.22.4.rst Complete changelog documentation for version 2.22.4 covering CLI changes, query improvements, and library updates

* |link-code-let-chains-in-code-if-and-code-while-1|_ are now supported, as well as |link-code-if-let-guards-in-code-match-expressions-2|_.
* Added more detail to models of :code:`postgres`, :code:`rusqlite`, :code:`sqlx` and :code:`tokio-postgres`. This may improve query results, particularly for :code:`rust/sql-injection` and :code:`rust/cleartext-storage-database`.

.. |link-code-let-chains-in-code-if-and-code-while-1| replace:: :code:`let` chains in :code:`if` and :code:`while`\
Copy link
Preview

Copilot AI Aug 22, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

There's an unnecessary trailing backslash and space at the end of the line. The backslash should be removed.

Suggested change
.. |link-code-let-chains-in-code-if-and-code-while-1| replace:: :code:`let` chains in :code:`if` and :code:`while`\
.. |link-code-let-chains-in-code-if-and-code-while-1| replace:: :code:`let` chains in :code:`if` and :code:`while`

Copilot uses AI. Check for mistakes.

@@ -0,0 +1,103 @@
.. _codeql-cli-2.22.4:
Copy link
Preview

Copilot AI Aug 22, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot detected a code snippet with 50+ occurrences. See search results for more details.

Matched Code Snippet
21)
==========================

.. contents:: Contents
   :depth: 2
   :local:
   :backlinks: none

This is an overview of changes in the CodeQL CLI and relevant CodeQL query and library packs. For additional updates on changes to the CodeQL code scanning experience, check out the `code scanning section on the GitHub blog <https://github.blog/tag/code-scanning/>`__, `relevant GitHub Changelog updates <https://github.blog/changelog/label/code-scanning/>`__, `changes in the CodeQL extension for Visual Studio Code <https://marketplace.visualstudio.com/items/GitHub.vscode-codeql/changelog>`__, and the `CodeQL Action changelog <https://github.com/github/codeql-action/blob/main/CHANGELOG.md>`__.

Security Coverage
-----------------

CodeQL 2

Copilot uses AI. Check for mistakes.

@@ -0,0 +1,103 @@
.. _codeql-cli-2.22.4:
Copy link
Preview

Copilot AI Aug 22, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot detected a code snippet with 21 occurrences. See search results for more details.

Matched Code Snippet
. 2 security queries have been added with this release.

CodeQL CLI
----------

There are no user-facing CLI changes in this release.

Query Packs
-----------

Minor Analysis Improvements
~~~~~~~~~~~~~~~~~~~~~~~~~~~

C/C++
"""""

*   The :code

Copilot uses AI. Check for mistakes.

@smowton
Copy link
Contributor

smowton commented Aug 22, 2025

Suggest adding a note that Go has gained Go 1.25 support in this timeframe.

@coadaflorin
Copy link
Contributor Author

coadaflorin commented Aug 22, 2025

@smowton do you know who added the support? We should actually have a changenote for that. If it's not showing up here it means that we don't have one.

@smowton
Copy link
Contributor

smowton commented Aug 22, 2025

Yes, @jketema did it and has since added an instruction to their Go version upgrade script about adding a language-pack change-note. I meant to insert one during the release process, but forgot. I suggest adding one in so it's documented somewhere (the language-support docs have been updated, so anyone searching anew to check should find support mentioned there).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants