CodeQL and Go updates for developers #114
Today's Letter
GitHub, CodeQL 2.26.3 improves Actions analysis
- CodeQL 2.26.3 adds JavaScript, TypeScript, and Vue source modeling
- GitHub Actions queries now recognize untrusted data from merge_group workflows
- Vue Composition API helpers and Vue Router useRoute() are modeled as remote flow sources
- Actions cache-poisoning, checkout, and environment-variable queries improve alert accuracy and path tracking
- The codeql.actions.security.SelfHostedQuery module was removed as runner labels are unreliable
- GitHub deploys the release automatically to code scanning users on GitHub.com
- GHES support will arrive in a future release, while older versions require a manual CodeQL upgrade
Source: github.blog
Go 1.27, language and runtime updates released
- Go 1.27 was released on 19 August 2026 with changes across the language, toolchain, runtime, and standard library
- Generic methods, nested struct field selectors, and broader generic type inference are now supported
- go fix adds four modernizers, go doc accepts package@version queries, and go mod tidy consolidates require blocks
- Size-specialized allocation cuts small-object allocation costs by up to 30%, with about 1% gains in allocation-heavy programs
- runtime/pprof makes the goroutineleak profile generally available for detecting permanently blocked goroutines
- encoding/json/v2, post-quantum ML-DSA signatures, native UUID support, experimental SIMD packages, and httptest.NewTestServer are included
Source: go.dev
More: linuxiac.com · chat.whatsapp.com
Jocoletter curates AI, software, and product trends for developers and builders.
#GitHub #Go