Post-release preparation for codeql-cli-2.24.1 #21250

Copilot · 2026-02-02T14:45:42Z

The formatting has been corrected from "2.1.0\ x" to "2.1.0x". However, this appears to be inconsistent formatting. The "x" suffix seems intended to indicate "2.1.0.x" (any patch version), but the markdown formatting is unclear. Consider using clearer notation such as "2.1.0.x" or "2.1.0 and later" to avoid ambiguity.

This issue also appears in the following locations of the same file:

line 142

line 101

-Original file line number
+Diff line change
@@ -1,3 +1,9 @@
+    ## 0.4.27
+    ### Bug Fixes
+    * Fixed a crash when analysing a `${{ ... }}` expression over around 300 characters in length.
     ## 0.4.26
     ### Major Analysis Improvements
@@ Expand Down @@

-Original file line number
+Diff line change
@@ -1,4 +1,5 @@
-    ---
-    category: fix
-    ---
+    ## 0.4.27
+    ### Bug Fixes
     * Fixed a crash when analysing a `${{ ... }}` expression over around 300 characters in length.

-Original file line number
+Diff line change
@@ -1,2 +1,2 @@
     ---
-    lastReleaseVersion: 0.4.26
+    lastReleaseVersion: 0.4.27

-Original file line number
+Diff line change
@@ -1,5 +1,5 @@
     name: codeql/actions-all
-    version: 0.4.27-dev
+    version: 0.4.28-dev
     library: true
     warnOnImplicitThis: true
     dependencies:
@@ Expand Down @@

-Original file line number
+Diff line change
@@ -1,3 +1,7 @@
+    ## 0.6.19
+    No user-facing changes.
     ## 0.6.18
     No user-facing changes.
@@ Expand Down @@

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Post-release preparation for codeql-cli-2.24.1 #21250

Diff view

Diff view

There are no files selected for viewing

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Copilot AI Feb 2, 2026

Uh oh!

Uh oh!

Uh oh!

-Original file line number
+Diff line change
@@ -1,3 +1,21 @@
+    ## 7.1.0
+    ### New Features
+    * Added a subclass `Embed` of `PreprocessorDirective` for C23 and C++26 `#embed` preprocessor directives.
+    * Added modules `DataFlow::ParameterizedBarrierGuard` and `DataFlow::ParameterizedInstructionBarrierGuard`. These modules provide the same features as `DataFlow::BarrierGuard` and `DataFlow::InstructionBarrierGuard`, but allow for an additional parameter to support properly using them in dataflow configurations that uses flow states.
+    ### Minor Analysis Improvements
+    * The `Buffer.qll` library will no longer report incorrect buffer sizes on certain malformed databases. As a result, the queries `cpp/static-buffer-overflow`, `cpp/overflow-buffer`, `cpp/badly-bounded-write`, `cpp/overrunning-write`, `cpp/overrunning-write-with-float`, and `cpp/very-likely-overrunning-write` will report fewer false positives on such databases.
+    * Added `taint` summary models and `sql-injection` barrier models for the MySQL `mysql_real_escape_string` and `mysql_real_escape_string_quote` escaping functions.
+    * The predicate `SummarizedCallable.propagatesFlow` has been extended with the columns `Provenance p` and `boolean isExact`, and as a consequence the predicates `SummarizedCallable.hasProvenance` and `SummarizedCallable.hasExactModel` have been removed.
+    ### Bug Fixes
+    * Fixed a bug in the `GuardCondition` library which sometimes prevented binary logical operators from being recognized as guard conditions. As a result, queries using `GuardCondition` may see improved results.
+    * Fixed a bug which caused `Node.asDefinition()` to not have a result for certain assignments.
     ## 7.0.0
     ### Breaking Changes
@@ Expand Down @@

-Original file line number
+Diff line change
@@ -1,5 +1,5 @@
     name: codeql/cpp-all
-    version: 7.0.1-dev
+    version: 7.1.1-dev
     groups: cpp
     dbscheme: semmlecode.cpp.dbscheme
     extractor: cpp
@@ Expand Down @@

-Original file line number
+Diff line change
@@ -1,5 +1,5 @@
     name: codeql/csharp-all
-    version: 5.4.6-dev
+    version: 5.4.7-dev
     groups: csharp
     dbscheme: semmlecode.csharp.dbscheme
     extractor: csharp
@@ Expand Down @@

-Original file line number
+Diff line change
@@ -1,5 +1,5 @@
     name: codeql/go-all
-    version: 6.0.1-dev
+    version: 6.0.2-dev
     groups: go
     dbscheme: go.dbscheme
     extractor: go
@@ Expand Down @@

-Original file line number
+Diff line change
@@ -1,3 +1,24 @@
+    ## 8.0.0
+    ### Breaking Changes
+    * Support for Kotlin 1.6.x and 1.7.x series has been dropped
+    ### New Features
+    * Kotlin versions up to 2.3.0*x* are now supported.
+    ### Minor Analysis Improvements
+    * Added support for Struts 7.x package names in the Struts framework library. The library now recognizes both the legacy `com.opensymphony.xwork2` package names (Struts 2.x-6.x) and the new `org.apache.struts2` package names (Struts 7.x+), maintaining backward compatibility while enabling analysis of code using the latest Struts versions.
+    * The query `java/unreleased-lock` no longer applies to lock types with names ending in "Pool", as these typically manage a collection of resources and the `lock` and `unlock` methods typically only lock one resource at a time. This may lead to a reduction in false positives.
+    * The predicate `SummarizedCallable.propagatesFlow` has been extended with the columns `Provenance p` and `boolean isExact`, and as a consequence the predicates `SummarizedCallable.hasProvenance` and `SummarizedCallable.hasExactModel` have been removed.
+    * When Maven-compatible private package registries are configured for an organisation for Default Setup, CodeQL will now configure Maven to also use these as plugin repositories. CodeQL previously already configured Maven to use them as regular package repositories. This should now allow Maven plugins to be obtained from private registries.
+    ### Bug Fixes
+    * Kotlin: The Kotlin extractor now registers as the last IR generation extension, ensuring that code generated by other compiler plugins (such as kotlinx.serialization) is correctly captured.
     ## 7.8.4
     ### Minor Analysis Improvements
@@ Expand Down Expand Up / @@ -77,7 +98,7 @@ No user-facing changes. @@
     ### New Features
-    * Kotlin versions up to 2.2.2\ *x* are now supported.
+    * Kotlin versions up to 2.2.2*x* are now supported.
     ## 7.4.0
@@ Expand Down Expand Up / @@ -118,7 +139,7 @@ No user-facing changes. @@
     ### New Features
-    * Kotlin versions up to 2.2.0\ *x* are now supported. Support for the Kotlin 1.5.x series is dropped (so the minimum Kotlin version is now 1.6.0).
+    * Kotlin versions up to 2.2.0*x* are now supported. Support for the Kotlin 1.5.x series is dropped (so the minimum Kotlin version is now 1.6.0).
     ## 7.1.4
@@ Expand Down Expand Up / @@ -255,7 +276,7 @@ No user-facing changes. @@
     ### New Features
     * The Java extractor and QL libraries now support Java 23.
-    * Kotlin versions up to 2.1.0\ *x* are now supported.
+    * Kotlin versions up to 2.1.0*x* are now supported.
     ## 4.0.0
@@ Expand Down @@

Post-release preparation for codeql-cli-2.24.1 #21250

Post-release preparation for codeql-cli-2.24.1 #21250

Uh oh!

Uh oh!

Diff view

Diff view

There are no files selected for viewing

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Copilot AI Feb 2, 2026

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!