Skip to content

v2.27.4

Latest
Latest

Choose a tag to compare

View all tags
@codeql-ci-app codeql-ci-app released this 02 Nov 16:52
Immutable release. Only release title and notes can be modified.
v2.27.4
3899e53

Security Fixes

  • codeql pack bundle and codeql pack publish now check that each file added to the pack archive is still inside the pack root after symbolic links are resolved. Files that resolve to a location outside the pack root are omitted from the archive with a warning.

Bug Fixes

  • The CodeQL CLI now writes messages from the Java virtual machine, such as warnings and initialization errors, to standard error instead of standard output. Previously, these messages could corrupt the output of commands that print JSON or other machine-readable output.

For more information about the changes included in this release, see the CodeQL CLI changelog.

You can download either the codeql-PLATFORM.zip for your platform, or the generic codeql.zip which covers Linux x64, Windows x64 and macOS (including Apple Silicon). Linux arm64 binaries are available as a per-platform codeql-linux-arm64.zip only. Please ignore the additional "source code" downloads below the .zip artifacts.

Warning

The generic codeql.zip (binaries for all x86-64 platforms) is deprecated and will be removed in a future release. Please download the codeql-PLATFORM.zip for your platform instead. Note that arm64 binaries are only available as a per-platform codeql-linux-arm64.zip.

This release is compatible with the CodeQL language packs from github/codeql@codeql-cli/v2.27.4.

Assets 13
Loading