CodeQL is the static analysis engine behind GitHub code scanning, which finds and remediates security issues in your code. We’ve recently released version 2.21.3 of CodeQL. Here’s what’s new and improved in this release.

Kotlin

  • We’ve added support for analyzing Kotlin applications up to version 2.2.0x and dropped support for the 1.5.x series of Kotlin. Therefore, the minimum supported Kotlin version is now 1.6.0.

JavaScript/TypeScript

  • We’ve improved modeling of the fastify framework and the shelljs and async-shelljs libraries, which could result in improved analysis results for apps using them.

For a full list of changes, check out the complete changelog for version 2.21.3, where you’ll find details on all updates and enhancements.

Every new version of CodeQL is automatically deployed to users of GitHub code scanning on github.com. The new features in CodeQL 2.21.3 will also be included in GitHub Enterprise Server (GHES) version 3.18. If you’re using an older version of GHES, you can manually upgrade your CodeQL version.