⚠️ This is a beta release containing a new CodeQL packaging feature. It may not be compatible with existing workflows.

New features

• This release contains beta support for CodeQL packs. Please read the documentation below for more information:
  • Using CodeQL packs with the CodeQL CLI
  • Using CodeQL packs in Code Scanning on GitHub Actions
  • Using CodeQL packs in Code Scanning on 3rd-party CI systems
• codeql database create and codeql database init can now automatically recognise the languages present in checkouts of GitHub repositories by making an API call to the GitHub server. This requires a PAT token to either be set in the GITHUB_TOKEN environment variable, or passed by stdin with the --github-auth-stdin argument.
• Operations that make outgoing HTTP calls (that is, codeql github upload-results and the language-detection feature described above) now support the use of HTTP proxies. To use a proxy, specify an $https_proxy environment variable for HTTPS requests or a $http_proxy environment variable for HTTP requests. If the $no_proxy variable is also set, these variables will be ignored and requests will be made without a proxy.

New language features

• The QL language now has a new method toUnicode on the int type. This method converts Unicode codepoint to a one-character string. For example, 65.toUnicode() = "A", 128512.toUnicode() results in a smiley, and any(int i | i.toUnicode() = "A") = 65.

Downloads

You can download either the codeql-PLATFORM.zip for your platform, or the generic codeql.zip which contains binaries for all supported platforms. Please ignore the additional "source code" downloads below the .zip artifacts.

Compatibility notes

• If you plan to upload databases to an LGTM Enterprise 1.27 instance, please create them with release 2.4.6.
• For other uses of CodeQL in a production environment, please use the latest stable release 2.5.8, or await the final release of 2.6.0.