21 Pull requests merged by 11 people

• Java: Move extractorInformationSkipKey predicate to library pack

  #20134 merged Jul 29, 2025

• Rust: Type inference for impl trait types with type parameters

  #20119 merged Jul 28, 2025

• Copilot: Remove the formatting instructions, as they're confusing CCR.

  #20128 merged Jul 28, 2025

• Rust: Fix type inference for trait objects for traits with associated types

  #20122 merged Jul 26, 2025

• Rust: Update DotDotCheck to use getCanonicalPath

  #19804 merged Jul 25, 2025

• Rust: Replace QL model for Clone with MaD

  #20124 merged Jul 25, 2025

• Python: Modernise raise-not-implemented query

  #20086 merged Jul 24, 2025

• Kotlin: Add Kotlin 2.2.20 support

  #20114 merged Jul 24, 2025

• Python: Minor documantation updates to several quality queries

  #20052 merged Jul 24, 2025

• Rust: Implement type inference for trait objects/dyn types

  #20084 merged Jul 24, 2025

• C++: Add some more Windows specific memory copy models

  #20115 merged Jul 23, 2025

• Shared: Improve sensitive data heuristics

  #20024 merged Jul 23, 2025

• Rust: Diff-informed queries: phase 3 (non-trivial locations)

  #20081 merged Jul 23, 2025

• Rust: Remove sourceModelDeprecated, summaryModelDeprecated and sinkModelDeprecated

  #20109 merged Jul 23, 2025

• C++: Add more barriers to cpp/overrun-write

  #20107 merged Jul 23, 2025

• Rust: Type inference refactor and improve join orders

  #20076 merged Jul 23, 2025

• Post-release preparation for codeql-cli-2.22.2

  #20113 merged Jul 23, 2025

• Swift: Diff-informed queries: phase 3 (non-trivial locations)

  #20082 merged Jul 23, 2025

• Release preparation for version 2.22.2

  #20112 merged Jul 23, 2025

• Revert "Release preparation for version 2.22.2"

  #20110 merged Jul 23, 2025

• Rust: Type inference for tuples

  #20041 merged Jul 23, 2025

13 Pull requests opened by 8 people

• Java: Add support to Compact Source Files

  #20116 opened Jul 23, 2025

• Python: Modernize Unexpected Raise In Special Method query

  #20120 opened Jul 24, 2025

• Guards: Improve support for wrapped guards

  #20121 opened Jul 24, 2025

• C++: Fix missing global variable flow

  #20126 opened Jul 25, 2025

• Java: Improve a couple of join-orders

  #20127 opened Jul 25, 2025

• C++: Static variables are initialized to zero or null by compiler

  #20129 opened Jul 27, 2025

• Rust: Implement type inference for closures and calls to closures

  #20130 opened Jul 27, 2025

• SSA: Update data flow integration and BarrierGuard interface to use GuardValue.

  #20132 opened Jul 28, 2025

• Rust: Support blanket implementations

  #20133 opened Jul 28, 2025

• Js: Modeling of `dynamodb`

  #20135 opened Jul 28, 2025

• Java: Add test for flexible constructor support

  #20136 opened Jul 29, 2025

• Rust: New Query rust/cleartext-storage-database

  #20137 opened Jul 29, 2025

• C++: Fix missing guard conditions for C++ code

  #20138 opened Jul 29, 2025

3 Issues closed by 3 people

• Spread unidentified

  #19914 closed Jul 26, 2025

• Python: Aiopg.qll misses some SQL injection sinks in aiopg

  #20111 closed Jul 24, 2025

• Rust: Remove sourceModelDeprecated, summaryModelDeprecated and sinkModelDeprecated.

  #20108 closed Jul 23, 2025

3 Issues opened by 3 people

• CWE 134

  #20131 opened Jul 28, 2025

• For an abstract class in the CodeQL source code, how can I quickly find all the classes that extend this abstract class from the CodeQL library?

  #20125 opened Jul 25, 2025

• CWE-918 (SSRF) - Java - False Positive Justification

  #20117 opened Jul 23, 2025

12 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• Code scanning is waiting for results from CodeQL; CodeQL is stuck

  #19671 commented on Jul 23, 2025 • 0 new comments

• CodeQL detected code written in `some language`, but not any written in GitHub Actions. Confirm that there is some source code for GitHub Actions in the project.

  #20102 commented on Jul 24, 2025 • 0 new comments

• [python] The tuple (*) argument of a call cannot step to function parameter for the CommandInjectionCustomizations flow

  #19900 commented on Jul 25, 2025 • 0 new comments

• Better explain how to exclude paths for compiled languages

  #8689 commented on Jul 28, 2025 • 0 new comments

• General issue - When using `--build-mode=none`, Windows builds produce `Extraction error: 'MsvcCompiler' object has no attribute 'clangpp'`

  #20071 commented on Jul 28, 2025 • 0 new comments

• UnvalidatedDynamicMethodCall query does not detect flow inside try/catch

  #20098 commented on Jul 28, 2025 • 0 new comments

• Question: C# analysis without building the code, on Azure DevOps

  #16070 commented on Jul 29, 2025 • 0 new comments

• Idea/Feature request: codeql as MCP Server

  #19150 commented on Jul 29, 2025 • 0 new comments

• Rust: Update SqlxQuery, SqlxExecute to use getCanonicalPath

  #19802 commented on Jul 24, 2025 • 0 new comments

• Python: Modernize 4 queries for missing/multiple calls to init/del methods

  #19932 commented on Jul 24, 2025 • 0 new comments

• Java: Add support to `ModuleImportDeclaration`

  #20097 commented on Jul 28, 2025 • 0 new comments

• Fix #19294, Ruby NetHttpRequest improvements

  #20101 commented on Jul 23, 2025 • 0 new comments