What changed
GitHub released CodeQL 2.27.2 with C++ regex parsing and SQL-injection sink models, improved Go websocket routing, and Rust and JavaScript analysis changes. GitHub code scanning receives it automatically; manual installations and older GitHub Enterprise Server instances require an upgrade path.
Why it matters
The update changes both detection coverage and query behavior in a security layer used to review AI-generated and human-written code. A Go control-flow-graph change can also affect custom queries, so an automatic engine update is not operationally invisible.
What to do
Review the language-specific notes, rerun representative repositories, inspect new alerts, and regression-test custom Go queries before promoting a manual bundle. GitHub Enterprise Server users should confirm which bundle their release includes.
Caveat
GitHub documents query and library changes, not measured false-positive or false-negative rates on each workload. Automatic deployment applies to GitHub code scanning, while self-managed and older enterprise environments can lag.