8 Pull requests merged by 5 people

• C++: Expose SSA definitions from dataflow

  #20149 merged Aug 1, 2025

• Kotlin: Support 2.2.20-beta2

  #20141 merged Jul 31, 2025

• Rust: Implement type inference for closures and calls to closures

  #20130 merged Jul 30, 2025

• SSA: Update data flow integration and BarrierGuard interface to use GuardValue.

  #20132 merged Jul 30, 2025

• Java: Move extractorInformationSkipKey predicate to library pack

  #20134 merged Jul 29, 2025

• Rust: Type inference for impl trait types with type parameters

  #20119 merged Jul 28, 2025

• Copilot: Remove the formatting instructions, as they're confusing CCR.

  #20128 merged Jul 28, 2025

• Rust: Fix type inference for trait objects for traits with associated types

  #20122 merged Jul 26, 2025

16 Pull requests opened by 7 people

• C++: Static variables are initialized to zero or null by compiler

  #20129 opened Jul 27, 2025

• Rust: Support blanket implementations

  #20133 opened Jul 28, 2025

• JS: Modeling of `aws-sdk` clients*

  #20135 opened Jul 28, 2025

• Java: Add test for flexible constructor support

  #20136 opened Jul 29, 2025

• Rust: New Query rust/cleartext-storage-database

  #20137 opened Jul 29, 2025

• C++: Fix missing guard conditions for C++ code

  #20138 opened Jul 29, 2025

• Rust: Improve handling of where clauses in type inference and path resolution

  #20140 opened Jul 30, 2025

• Python: Modernise Superclass attribute shadows subclass method query

  #20142 opened Jul 30, 2025

• Rust: Don't use constraint implementations for type parameters

  #20143 opened Jul 30, 2025

• C++: Fix missing `bool` -> `int` conversions in C code

  #20145 opened Jul 30, 2025

• JS: Move cors-misconfiguration query from experimental to Security

  #20146 opened Jul 31, 2025

• Rust: Add metric for DCA and debug predicates for type that reach the length limit

  #20147 opened Jul 31, 2025

• JS: Exclude environment variables from `js/regex-injection` query by default

  #20148 opened Jul 31, 2025

• Rust: Update BadCtorInitialization.ql to use getCanonicalPath.

  #20150 opened Jul 31, 2025

• JS: Enhance command injection detection for CLI argument parsing libraries

  #20151 opened Aug 1, 2025

• C++: Remove redundants casts from IR

  #20154 opened Aug 1, 2025

4 Issues opened by 4 people

• False positive "use of implicit PendingIntents" alert

  #20153 opened Aug 1, 2025

• False positives for py/file-not-closed even when using `with` statements

  #20152 opened Aug 1, 2025

• Java SSRF Findings

  #20144 opened Jul 30, 2025

• CWE 134

  #20131 opened Jul 28, 2025

12 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• Java: Add support to `ModuleImportDeclaration`

  #20097 commented on Jul 30, 2025 • 1 new comment

• Java: Add support to Compact Source Files

  #20116 commented on Jul 30, 2025 • 1 new comment

• CWE-918 (SSRF) - Java - False Positive Justification

  #20117 commented on Jul 27, 2025 • 0 new comments

• Better explain how to exclude paths for compiled languages

  #8689 commented on Jul 28, 2025 • 0 new comments

• General issue - When using `--build-mode=none`, Windows builds produce `Extraction error: 'MsvcCompiler' object has no attribute 'clangpp'`

  #20071 commented on Jul 28, 2025 • 0 new comments

• UnvalidatedDynamicMethodCall query does not detect flow inside try/catch

  #20098 commented on Jul 28, 2025 • 0 new comments

• Question: C# analysis without building the code, on Azure DevOps

  #16070 commented on Jul 29, 2025 • 0 new comments

• Idea/Feature request: codeql as MCP Server

  #19150 commented on Jul 29, 2025 • 0 new comments

• Rust: Update SqlxQuery, SqlxExecute to use getCanonicalPath

  #19802 commented on Jul 31, 2025 • 0 new comments

• Python: Modernize Unexpected Raise In Special Method query

  #20120 commented on Aug 1, 2025 • 0 new comments

• Guards: Improve support for wrapped guards

  #20121 commented on Jul 28, 2025 • 0 new comments

• Java: Improve a couple of join-orders

  #20127 commented on Jul 28, 2025 • 0 new comments