-
Notifications
You must be signed in to change notification settings - Fork 1.8k
Add changelog entry for CodeQL CLI version 2.22.4 #20268
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Pull Request Overview
This PR adds a changelog entry for CodeQL CLI version 2.22.4 released on August 21, 2025. The changelog documents security improvements, query updates, and library enhancements across multiple programming languages.
Key changes:
- Added new changelog file for version 2.22.4 with comprehensive release notes
- Updated the main changelog index to include the new version entry
- Documented 2 new security queries, various bug fixes, and analysis improvements
Reviewed Changes
Copilot reviewed 2 out of 2 changed files in this pull request and generated 3 comments.
File | Description |
---|---|
docs/codeql/codeql-overview/codeql-changelog/index.rst | Added reference to new 2.22.4 changelog entry in the table of contents |
docs/codeql/codeql-overview/codeql-changelog/codeql-cli-2.22.4.rst | Complete changelog documentation for version 2.22.4 covering CLI changes, query improvements, and library updates |
* |link-code-let-chains-in-code-if-and-code-while-1|_ are now supported, as well as |link-code-if-let-guards-in-code-match-expressions-2|_. | ||
* Added more detail to models of :code:`postgres`, :code:`rusqlite`, :code:`sqlx` and :code:`tokio-postgres`. This may improve query results, particularly for :code:`rust/sql-injection` and :code:`rust/cleartext-storage-database`. | ||
|
||
.. |link-code-let-chains-in-code-if-and-code-while-1| replace:: :code:`let` chains in :code:`if` and :code:`while`\ |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
There's an unnecessary trailing backslash and space at the end of the line. The backslash should be removed.
.. |link-code-let-chains-in-code-if-and-code-while-1| replace:: :code:`let` chains in :code:`if` and :code:`while`\ | |
.. |link-code-let-chains-in-code-if-and-code-while-1| replace:: :code:`let` chains in :code:`if` and :code:`while` |
Copilot uses AI. Check for mistakes.
@@ -0,0 +1,103 @@ | |||
.. _codeql-cli-2.22.4: |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Copilot detected a code snippet with 50+ occurrences. See search results for more details.
Matched Code Snippet
21)
==========================
.. contents:: Contents
:depth: 2
:local:
:backlinks: none
This is an overview of changes in the CodeQL CLI and relevant CodeQL query and library packs. For additional updates on changes to the CodeQL code scanning experience, check out the `code scanning section on the GitHub blog <https://github.blog/tag/code-scanning/>`__, `relevant GitHub Changelog updates <https://github.blog/changelog/label/code-scanning/>`__, `changes in the CodeQL extension for Visual Studio Code <https://marketplace.visualstudio.com/items/GitHub.vscode-codeql/changelog>`__, and the `CodeQL Action changelog <https://github.com/github/codeql-action/blob/main/CHANGELOG.md>`__.
Security Coverage
-----------------
CodeQL 2
Copilot uses AI. Check for mistakes.
@@ -0,0 +1,103 @@ | |||
.. _codeql-cli-2.22.4: |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Copilot detected a code snippet with 21 occurrences. See search results for more details.
Matched Code Snippet
. 2 security queries have been added with this release.
CodeQL CLI
----------
There are no user-facing CLI changes in this release.
Query Packs
-----------
Minor Analysis Improvements
~~~~~~~~~~~~~~~~~~~~~~~~~~~
C/C++
"""""
* The :code
Copilot uses AI. Check for mistakes.
Suggest adding a note that Go has gained Go 1.25 support in this timeframe. |
@smowton do you know who added the support? We should actually have a changenote for that. If it's not showing up here it means that we don't have one. |
Yes, @jketema did it and has since added an instruction to their Go version upgrade script about adding a language-pack change-note. I meant to insert one during the release process, but forgot. I suggest adding one in so it's documented somewhere (the language-support docs have been updated, so anyone searching anew to check should find support mentioned there). |
Include a new entry in the changelog for CodeQL CLI version 2.22.4, summarizing the updates and improvements made in this release.