v2.5.8
- The bundled extractors are updated to match the versions currently used on LGTM.com. These are newer than the last release (1.27) of LGTM Enterprise. If you plan to upload databases to an LGTM Enterprise 1.27 instance, you need to create them with release 2.4.6.
Potentially breaking changes
- The QL compiler now verifies that
@security-severityquery metadata is numeric. You can disable this verification by passing the--no-metadata-verificationflag.
New features
- The
database index-filesanddatabase trace-commandCLI commands now support--threadsand--ramoptions, which are passed to extractors as suggestions. - The
database finalizeCLI command now supports the--ramoption, which controls memory usage for finalization. - The
database createCLI command now supports the--ramoption, which controls memory usage for database creation. - The
generate query-helpCLI command now support rendering query help in SARIF format.
For more information about the changes included in this release, see the CodeQL CLI changelog.
You can download either the codeql-PLATFORM.zip for your platform, or the generic codeql.zip which contains binaries for all supported platforms. Please ignore the additional "source code" downloads below the .zip artifacts.