Skip to content
Navigation Menu
Sign in
Products
Platform
GitHub
Repository hosting, code review, and collaboration
Copilot
AI coding agent for tasks, projects and automated work
Build & Ship
Actions
CI/CD and automation
Code Quality
Quality analysis, fixes, and enforcement
Codespaces
Cloud development environments
Secure
Code Security
Vulnerability detection and remediation
Secret Protection
Secret scanning and leak prevention
All Features
Developers
Learn
Documentation
Training
Certifications
Build
Build with Copilot
Customize Copilot
Integrations
Explore
Trending repos
GitHub Sponsors
Developer articles
Changelog
Changelog
Your source for the latest features, improvements, and fixes across GitHub products, all in one place.
Businesses
By Stage
Enterprises
Team
Startups
Nonprofits
By Industry
Healthcare
Financial services
Manufacturing
Government
See all industries
Evaluate GitHub
Why GitHub
Customer Stories
Business insights
Trust Center
Add-ons
GitHub Advanced Security
Enterprise-grade code security
Copilot for business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Resources
Learn & Connect
Documentation
Resource center
Blog
Events & webinars
Community Forum
Customer Stories
Integrations
Support
Customer support
Training
GitHub Status
Company
About
Partners
Changelog
GitHub Universe
GitHub Universe
The event for developers, by developers — talks, workshops, and what’s next for GitHub.
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
szsam
codeql
Repository navigation
Code
Pull requests
Actions
Projects
Security and quality
Insights
More
items
Commits
Breadcrumbs
History for
codeql
javascript
on
main
User selector
All users
Datepicker
All time
Commit history
Commits on Nov 18, 2025
Post-release preparation for codeql-cli-2.23.6
github-actions[bot]
committed
5ee45af
View commit details
Copy full SHA for 5ee45af
View code at this point
Browse repository at this point
Commits on Nov 17, 2025
Release preparation for version 2.23.6
github-actions[bot]
committed
18fa679
View commit details
Copy full SHA for 18fa679
View code at this point
Browse repository at this point
Commits on Nov 11, 2025
Javascript: fix compilation error after scripted replacement
redsun82
committed
8243521
View commit details
Copy full SHA for 8243521
View code at this point
Browse repository at this point
Merge branch 'main' into redsun82/update-rules_java
redsun82
committed
9d51932
View commit details
Copy full SHA for 9d51932
View code at this point
Browse repository at this point
Merge pull request #20671 from github/napalys/adjust_query_severity
Show description for d122534
Napalys
authored
d122534
View commit details
Copy full SHA for d122534
View code at this point
Browse repository at this point
Javascript: avoid null pointer exception on boolean values
redsun82
committed
ff62c65
View commit details
Copy full SHA for ff62c65
View code at this point
Browse repository at this point
Javascript: fix errors from upcoming `rules_java` update
redsun82
committed
6ef314e
View commit details
Copy full SHA for 6ef314e
View code at this point
Browse repository at this point
Commits on Nov 4, 2025
Post-release preparation for codeql-cli-2.23.4
github-actions[bot]
committed
4014df9
View commit details
Copy full SHA for 4014df9
View code at this point
Browse repository at this point
Merge pull request #20752 from asgerf/actions/dont-fail-if-no-js
Show description for 6790684
asgerf
authored and
mbg
committed
6790684
View commit details
Copy full SHA for 6790684
View code at this point
Browse repository at this point
Commits on Nov 3, 2025
Release preparation for version 2.23.4
github-actions[bot]
committed
64fcdd1
View commit details
Copy full SHA for 64fcdd1
View code at this point
Browse repository at this point
Commits on Oct 30, 2025
JS: Add pragma[nomagic] just to be safe
Show description for c583b48
asgerf
committed
c583b48
View commit details
Copy full SHA for c583b48
View code at this point
Browse repository at this point
JS: Ensure integration test contains one valid file
asgerf
committed
1f7671c
View commit details
Copy full SHA for 1f7671c
View code at this point
Browse repository at this point
JS: Recursively delete source archive so emptiness detection works
asgerf
committed
0acface
View commit details
Copy full SHA for 0acface
View code at this point
Browse repository at this point
JS: Fix bad join order in getNextToken()
asgerf
committed
a5819a1
View commit details
Copy full SHA for a5819a1
View code at this point
Browse repository at this point
JS: Add compileForOverlayEval
asgerf
committed
39f74d8
View commit details
Copy full SHA for 39f74d8
View code at this point
Browse repository at this point
Commits on Oct 28, 2025
Constrain location overrides to actual sources/sinks
d10c
committed
a0975e7
View commit details
Copy full SHA for a0975e7
View code at this point
Browse repository at this point
JS/SSRF
Show description for bb80d83
d10c
committed
bb80d83
View commit details
Copy full SHA for bb80d83
View code at this point
Browse repository at this point
JS/PolynomialReDoSQuery
Show description for bcdbe0b
d10c
committed
bcdbe0b
View commit details
Copy full SHA for bcdbe0b
View code at this point
Browse repository at this point
JS/ShellCommandInjectionFromEnvironmentQuery
Show description for 9434325
d10c
committed
9434325
View commit details
Copy full SHA for 9434325
View code at this point
Browse repository at this point
JS/IndirectCommandInjectionQuery
Show description for 71cf042
d10c
committed
71cf042
View commit details
Copy full SHA for 71cf042
View code at this point
Browse repository at this point
JS/CommandInjectionQuery
Show description for 2a30ea9
d10c
committed
2a30ea9
View commit details
Copy full SHA for 2a30ea9
View code at this point
Browse repository at this point
Merge pull request #20397 from asgerf/js/build-artifact-leak-fp
Show description for 8d49f26
asgerf
authored
8d49f26
View commit details
Copy full SHA for 8d49f26
View code at this point
Browse repository at this point
Commits on Oct 24, 2025
JS: Remove two invalid QHelp links
hvitved
committed
eb9df00
View commit details
Copy full SHA for eb9df00
View code at this point
Browse repository at this point
Commits on Oct 22, 2025
Add change note
Napalys
committed
9c70ae0
View commit details
Copy full SHA for 9c70ae0
View code at this point
Browse repository at this point
CWE-020: Lower security-severity for OverlyLargeRange queries to 4.0
Napalys
committed
fa47174
View commit details
Copy full SHA for fa47174
View code at this point
Browse repository at this point
JS: Align DOM XSS query severity with other XSS queries
Napalys
committed
7b6720c
View commit details
Copy full SHA for 7b6720c
View code at this point
Browse repository at this point
Commits on Oct 20, 2025
Merge pull request #20647 from asgerf/js/type-resolution-cache
Show description for d7cf5ef
asgerf
authored
d7cf5ef
View commit details
Copy full SHA for d7cf5ef
View code at this point
Browse repository at this point
Commits on Oct 17, 2025
Merge pull request #20603 from owen-mc/update-broken-algo-qhelp
Show description for 66f95bc
owen-mc
authored
66f95bc
View commit details
Copy full SHA for 66f95bc
View code at this point
Browse repository at this point
Commits on Oct 15, 2025
JS: Avoid magic and improve a join in type resolution
asgerf
committed
c6577c8
View commit details
Copy full SHA for c6577c8
View code at this point
Browse repository at this point
JS: remove quality tag from SyntaxError query
Napalys
committed
45e8164
View commit details
Copy full SHA for 45e8164
View code at this point
Browse repository at this point
Commits on Oct 14, 2025
Post-release preparation for codeql-cli-2.23.3
github-actions[bot]
committed
6dd0779
View commit details
Copy full SHA for 6dd0779
View code at this point
Browse repository at this point
Release preparation for version 2.23.3
github-actions[bot]
committed
33542f7
View commit details
Copy full SHA for 33542f7
View code at this point
Browse repository at this point
Commits on Oct 8, 2025
Improve qhelp for broken crypto algo queries
Show description for 0bcdb91
owen-mc
committed
0bcdb91
View commit details
Copy full SHA for 0bcdb91
View code at this point
Browse repository at this point
Merge pull request #20586 from asgerf/js/api-graphs-block-this
Show description for 10c9b74
asgerf
authored
10c9b74
View commit details
Copy full SHA for 10c9b74
View code at this point
Browse repository at this point
Commits on Oct 6, 2025
JS: Refine criteria so that explicit this-passing is not affected
asgerf
committed
587ad5c
View commit details
Copy full SHA for 587ad5c
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.