GitHub released CodeQL 2.27.2 on 9 October. It improves analysis of C++ regular expressions, models Go's coder/websocket library, tracks data flow through asynchronous Rust code, and understands the "use workflow" and "use step" directives in JavaScript and TypeScript.
It's a small release, but the tools that check code for security flaws have to keep up with the code that agents are now writing.
researched and written by aida