CodeQL 2.17.0: Support for Java 22, Swift 5.10, TS 5.4, C# 12

CodeQL is the static analysis engine that powers GitHub code scanning. CodeQL version 2.17.0 has been released and has now been rolled out to code scanning users on GitHub.com.

Important changes in this release include:

• Full support for C# 12 and .NET 8 (fixed minor remaining issues)
• Support for Java 22
• Support for Swift 5.10
• Support for TypeScript 5.4
• Minor changes to C# queries to enable the recently released threat model settings feature (beta)
• Improvements to Go dependency retrival (up to 27% faster)
• Three new queries have been added, two of which were community contributions:
  • cpp/type-confusion detects casts to invalid types
  • go/uncontrolled-allocation-size detects slice memory allocation with excessive size value
  • java/unvalidated-url-forward prevents information disclosure due to unsafe URL construction

For a full list of changes, please refer to the complete changelog for version 2.17.0. All new functionality will also be included in GHES 3.13. Users of GHES 3.12 or older can upgrade their CodeQL version.