Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
Accelerator
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
Uh oh!
There was an error while loading.
Please reload this page
.
github
/
codeql
Public
Notifications
You must be signed in to change notification settings
Fork
2.1k
Star
9.9k
Code
Issues
995
Pull requests
447
Discussions
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Discussions
Actions
Projects
Security and quality
Insights
Commits
Breadcrumbs
History for
codeql
java
ql
on
codeql-cli/v2.25.6
User selector
All users
All time
Commit history
Commits on May 29, 2026
Release preparation for version 2.25.6
github-actions[bot]
committed
8b6f969
View commit details
Copy full SHA for 8b6f969
View code at this point
Browse repository at this point
Revert "Release preparation for version 2.25.6"
henrymercer
authored
9bc0c1b
View commit details
Copy full SHA for 9bc0c1b
View code at this point
Browse repository at this point
Commits on May 25, 2026
Release preparation for version 2.25.6
github-actions[bot]
committed
44a914e
View commit details
Copy full SHA for 44a914e
View code at this point
Browse repository at this point
Commits on May 22, 2026
Merge branch 'main' into post-release-prep/codeql-cli-2.25.5
oscarsj
authored
996e791
View commit details
Copy full SHA for 996e791
View code at this point
Browse repository at this point
Commits on May 21, 2026
Merge pull request #21868 from github/copilot/bump-jackson-core-to-2150
Show description for c25398e
oscarsj
authored
c25398e
View commit details
Copy full SHA for c25398e
View code at this point
Browse repository at this point
Java: add ForStmt wrapper class
owen-mc
committed
2070daf
View commit details
Copy full SHA for 2070daf
View code at this point
Browse repository at this point
Fix remaining macOS bash 3.2 portability issues in update script (step 5)
Copilot
authored
0f3c9ab
View commit details
Copy full SHA for 0f3c9ab
View code at this point
Browse repository at this point
Fix macOS bash 3.2 heredoc-in-$() portability issue in update script
Copilot
authored
8170c20
View commit details
Copy full SHA for 8170c20
View code at this point
Browse repository at this point
update-ferstl-depgraph-dependencies.sh: address review feedback
Show description for 38a2101
Copilot
authored
38a2101
View commit details
Copy full SHA for 38a2101
View code at this point
Browse repository at this point
Commits on May 20, 2026
Merge branch 'main' into copilot/bump-jackson-core-to-2150
oscarsj
authored
b9bf81e
View commit details
Copy full SHA for b9bf81e
View code at this point
Browse repository at this point
Commits on May 19, 2026
Add change note entry
jacknojo
committed
aa136a3
View commit details
Copy full SHA for aa136a3
View code at this point
Browse repository at this point
Do not remove zip file if the process succeeds
oscarsj
committed
8b799f8
View commit details
Copy full SHA for 8b799f8
View code at this point
Browse repository at this point
Bump jackson-core to 2.18.6 in ferstl-depgraph-dependencies (CVE-2025-52999)
Show description for b161531
Copilot
authored
b161531
View commit details
Copy full SHA for b161531
View code at this point
Browse repository at this point
Add MaDs for Apache Avro
jacknojo
committed
3119ef6
View commit details
Copy full SHA for 3119ef6
View code at this point
Browse repository at this point
Commits on May 18, 2026
Post-release preparation for codeql-cli-2.25.5
github-actions[bot]
committed
9f64000
View commit details
Copy full SHA for 9f64000
View code at this point
Browse repository at this point
Release preparation for version 2.25.5
github-actions[bot]
committed
e38616a
View commit details
Copy full SHA for e38616a
View code at this point
Browse repository at this point
Commits on May 12, 2026
Merge pull request #21807 from owen-mc/java/improve-qhelp-unsafe-deserialization
Show description for 0b808e1
owen-mc
authored
0b808e1
View commit details
Copy full SHA for 0b808e1
View code at this point
Browse repository at this point
Commits on May 8, 2026
Note that common standard library types can be vulnerable to gadget-chain attacks
owen-mc
committed
a5ef036
View commit details
Copy full SHA for a5ef036
View code at this point
Browse repository at this point
Merge pull request #21741 from MarkLee131/fix/path-injection-read-subkind
Show description for 36554d1
owen-mc
authored
36554d1
View commit details
Copy full SHA for 36554d1
View code at this point
Browse repository at this point
Merge pull request #21808 from aschackmull/cfg/switch-pattern-eval
Show description for 81e1ab7
aschackmull
authored
81e1ab7
View commit details
Copy full SHA for 81e1ab7
View code at this point
Browse repository at this point
Commits on May 7, 2026
Merge branch 'main' into fix/path-injection-read-subkind
MarkLee131
authored
26af528
View commit details
Copy full SHA for 26af528
View code at this point
Browse repository at this point
Fix QL formatting
owen-mc
authored
f9240e7
View commit details
Copy full SHA for f9240e7
View code at this point
Browse repository at this point
C#/Java: Accept test changes.
aschackmull
committed
6b6df37
View commit details
Copy full SHA for 6b6df37
View code at this point
Browse repository at this point
C#/Java: Adjust Guards instantiations.
aschackmull
committed
072166b
View commit details
Copy full SHA for 072166b
View code at this point
Browse repository at this point
Cfg: Rework CFG for switch case patterns.
aschackmull
committed
48785a0
View commit details
Copy full SHA for 48785a0
View code at this point
Browse repository at this point
Fix yaml formatting
owen-mc
authored
33035db
View commit details
Copy full SHA for 33035db
View code at this point
Browse repository at this point
Do not make such a strong security claim
Show description for f2ea3b9
owen-mc
and
Copilot
authored
f2ea3b9
View commit details
Copy full SHA for f2ea3b9
View code at this point
Browse repository at this point
Clarify that deserialization that follows a schema is safe
owen-mc
committed
427b73e
View commit details
Copy full SHA for 427b73e
View code at this point
Browse repository at this point
Remove double spaces from qhelp
owen-mc
committed
7aa3fd8
View commit details
Copy full SHA for 7aa3fd8
View code at this point
Browse repository at this point
Commits on May 5, 2026
Post-release preparation for codeql-cli-2.25.4
github-actions[bot]
committed
7610277
View commit details
Copy full SHA for 7610277
View code at this point
Browse repository at this point
Release preparation for version 2.25.4
github-actions[bot]
committed
88e1d86
View commit details
Copy full SHA for 88e1d86
View code at this point
Browse repository at this point
Commits on May 4, 2026
Merge branch 'main' into fix/path-injection-read-subkind
MarkLee131
authored
4673941
View commit details
Copy full SHA for 4673941
View code at this point
Browse repository at this point
Merge pull request #21781 from aschackmull/java/rm-deprecated
Show description for f663ecc
aschackmull
authored
f663ecc
View commit details
Copy full SHA for f663ecc
View code at this point
Browse repository at this point
Java: Fix reference in deprecated code.
aschackmull
committed
c7904b1
View commit details
Copy full SHA for c7904b1
View code at this point
Browse repository at this point
Java: Delete old deprecated code.
aschackmull
committed
17fded4
View commit details
Copy full SHA for 17fded4
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.
github-actions[bot]
