Update changelog documentation site for codeql-cli-2.25.6#21945
Merged
Conversation
…25.6 Post-release preparation for codeql-cli-2.25.6
Contributor
There was a problem hiding this comment.
Pull request overview
Updates the CodeQL changelog documentation site to include the autogenerated release notes for CodeQL CLI 2.25.6, and links it from the changelog index.
Changes:
- Added a new changelog page:
CodeQL 2.25.6 (2026-06-04). - Updated the changelog
toctreeto include the new 2.25.6 entry.
Show a summary per file
| File | Description |
|---|---|
| docs/codeql/codeql-overview/codeql-changelog/index.rst | Adds codeql-cli-2.25.6 to the changelog toctree. |
| docs/codeql/codeql-overview/codeql-changelog/codeql-cli-2.25.6.rst | Introduces the release notes page for CodeQL CLI 2.25.6 (needs minor copy edits). |
Copilot's findings
- Files reviewed: 2/2 changed files
- Comments generated: 3
| GitHub Actions | ||
| """""""""""""" | ||
|
|
||
| * Adjusted (minor) help file descriptions for queries: :code:`actions/untrusted-checkout/critical`, :code:`actions/untrusted-checkout/high`, :code:`actions/untrusted-checkout/medium`. Clarified wording on in minor point, added one more listed resource and added one more recommendation for things to check. |
| Python | ||
| """""" | ||
|
|
||
| * The sensitive data heuristics used to identify code that handles passwords and private data have been improved. Most of the changes permit more variations of established patterns, thereby finding more sensitive data. Queries that use the sensitive data library (for example :code:`py/clear-text-logging-sensitive-data`) may find more correct results and less fewer positive results after these changes. |
| GitHub Actions | ||
| """""""""""""" | ||
|
|
||
| * The GitHub Actions analysis now recognizes more Bash regex checks that restrict a value to alphanumeric characters, include regexes like :code:`^[0-9a-zA-Z]{40}([0-9a-zA-Z]{24})?$` which check for a sha1 or sha256 hash. This may reduce false positive results where command output is validated with grouped or optional alphanumeric patterns before being used. |
mario-campos
approved these changes
Jun 4, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This pull request was automatically generated to synchronize the CodeQL changelog documentation based on recent changes to CodeQL.
Overview
Next Steps