{"id":517878,"date":"2025-11-21T04:42:21","date_gmt":"2025-11-21T04:42:21","guid":{"rendered":"https:\/\/Blockchain.News\/news\/codeql-2-23-5-enhances-swift-support-java-queries"},"modified":"2025-11-21T04:42:21","modified_gmt":"2025-11-21T04:42:21","slug":"codeql-2-23-5-enhances-swift-6-2-support-and-introduces-new-java-security-queries","status":"publish","type":"post","link":"https:\/\/e-bitco.in\/index.php\/2025\/11\/21\/codeql-2-23-5-enhances-swift-6-2-support-and-introduces-new-java-security-queries\/","title":{"rendered":"CodeQL 2.23.5 Enhances Swift 6.2 Support and Introduces New Java Security Queries"},"content":{"rendered":"<figure class=\"figure mt-2\">\n<p> <a href=\"https:\/\/blockchain.news\/Profile\/Darius-Baruo\">Darius Baruo<\/a> <span class=\"publication-date ml-2\"> Nov 21, 2025 04:42<\/span> <\/p>\n<p class=\"lead\">GitHub&#8217;s CodeQL 2.23.5 update enhances Swift 6.2 support, introduces new Java security queries, and improves code analysis accuracy, offering developers better tools for code scanning.<\/p>\n<p> <a href=\"https:\/\/image.blockchain.news:443\/features\/24B6EBDC6093F0C1F639A6A7DA12473E2D2C5C390185833B0F398CC7FCE1368C.jpg\"> <img decoding=\"async\" class=\"rounded\" src=\"https:\/\/image.blockchain.news:443\/features\/24B6EBDC6093F0C1F639A6A7DA12473E2D2C5C390185833B0F398CC7FCE1368C.jpg\" alt=\"CodeQL 2.23.5 Enhances Swift 6.2 Support and Introduces New Java Security Queries\"> <\/a> <\/figure>\n<p>GitHub has announced the release of CodeQL 2.23.5, a significant update to its static analysis engine, which enhances support for Swift 6.2 and introduces several new Java security queries. This update aims to improve the accuracy of code scanning results, providing developers with robust tools for identifying security vulnerabilities in their code, according to <a rel=\"nofollow\" href=\"https:\/\/github.blog\/changelog\/2025-11-19-codeql-2-23-5-adds-support-for-swift-6-2-new-java-queries-and-improved-analysis-accuracy\/\">GitHub<\/a>.<\/p>\n<h2>Language and Framework Support<\/h2>\n<p>The latest release of CodeQL expands its capabilities with added support for Swift 6.2, allowing developers to analyze projects developed with this version. Additionally, the update includes enhanced support for the Rust language, particularly for the <code>actix-web<\/code> framework and the <code>mysql<\/code> and <code>mysql_async<\/code> libraries. C# users on macOS and Linux will benefit from improved tracing capabilities, supporting .NET 10 RC2.<\/p>\n<h2>Query Enhancements<\/h2>\n<p>CodeQL 2.23.5 introduces three new Java queries designed to detect concurrency issues in classes marked as <code>@ThreadSafe<\/code>. These include:<\/p>\n<ul>\n<li><code>java\/escaping<\/code> for detecting values escaping from thread-safe classes.<\/li>\n<li><code>java\/not-threadsafe<\/code> for identifying data races.<\/li>\n<li><code>java\/safe-publication<\/code> for spotting unsafe publication in thread-safe classes.<\/li>\n<\/ul>\n<p>In addition to these, the <code>java\/sensitive-cookie-not-httponly<\/code> query has been promoted from experimental to the main query pack, enhancing its reliability.<\/p>\n<h2>Improvements Across Other Languages<\/h2>\n<p>Significant improvements have been made to C# queries, including a complete rewrite of the <code>cs\/dereferenced-value-may-be-null<\/code> query, which reduces false positives by changing it from a <code>path-problem<\/code> to a <code>problem<\/code> query. Python queries have been refined as well, with the <code>py\/insecure-cookie<\/code> query being split into three distinct queries to better handle cookies containing sensitive data.<\/p>\n<h2>Availability and Deployment<\/h2>\n<p>The new features of CodeQL 2.23.5 are automatically available to GitHub code scanning users on github.com, and they will be part of the GitHub Enterprise Server (GHES) release 3.20. Users with older versions of GHES are advised to manually upgrade their CodeQL version to benefit from the latest enhancements.<\/p>\n<p><span><i>Image source: Shutterstock<\/i><\/span> <!-- Divider --> <!-- Author info END --> <!-- Divider --> <a href=\"https:\/\/blockchain.news\/\">Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Darius Baruo Nov 21, 2025 04:42 GitHub&#8217;s CodeQL 2.23.5 update enhances Swift 6.2 support, introduces new Java security queries, and improves code analysis accuracy, offering developers better tools for code scanning. GitHub has announced the release of CodeQL 2.23.5, a significant update to its static analysis engine, which enhances support for Swift 6.2 and introduces [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":517879,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[12],"tags":[22113,8404,23342,25,183,451],"class_list":{"0":"post-517878","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-blockchain","8":"tag-codeql","9":"tag-github","10":"tag-java","11":"tag-news","12":"tag-security","13":"tag-swift"},"_links":{"self":[{"href":"https:\/\/e-bitco.in\/index.php\/wp-json\/wp\/v2\/posts\/517878","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/e-bitco.in\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/e-bitco.in\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/e-bitco.in\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/e-bitco.in\/index.php\/wp-json\/wp\/v2\/comments?post=517878"}],"version-history":[{"count":0,"href":"https:\/\/e-bitco.in\/index.php\/wp-json\/wp\/v2\/posts\/517878\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/e-bitco.in\/index.php\/wp-json\/wp\/v2\/media\/517879"}],"wp:attachment":[{"href":"https:\/\/e-bitco.in\/index.php\/wp-json\/wp\/v2\/media?parent=517878"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/e-bitco.in\/index.php\/wp-json\/wp\/v2\/categories?post=517878"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/e-bitco.in\/index.php\/wp-json\/wp\/v2\/tags?post=517878"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}