Claude Code has released version 2.1.223, focusing on security and usability improvements. Key updates include fixes for permission bypass vulnerabilities in Bash commands and workflow scripts, enhancing security measures. The release also improves session management and model ID handling, ensuring smoother operation and error handling. These updates aim to provide a more secure and reliable experience for developers using Claude Code.
Read original
© GitHub ChangelogGitHub has introduced a new feature that allows developers to apply custom configuration files to the CodeQL code scanning setup, enhancing security analysis across repositories. This update provides granular control over security scans without the need to maintain separate GitHub Actions workflows for each repository. Organizations can now centralize their security configurations, ensuring consistency while allowing flexibility for individual repositories to tailor settings as needed. This feature is now available on GitHub.com and will be included in GitHub Enterprise Server 3.23, marking a significant step in scalable security management.
© GitHub ChangelogGitHub is making it easier to set up code coverage by introducing an AI-driven feature in its Code Quality settings. This new capability allows users to automatically generate a coverage workflow, significantly cutting down the time and effort usually required. By initiating a pull request for review, GitHub ensures that users can seamlessly integrate this feature into their repositories. This development is currently in public preview for GitHub Code Quality users on github.com, enhancing the efficiency of code quality management without the need for manual workflow authoring.
© GitHub ChangelogThe latest update to CodeQL, version 2.26.2, enhances its static analysis capabilities by adding support for Swift 6.3.3 and Kotlin 2.4.10. This means developers using these languages can now leverage CodeQL's security scanning features more effectively. The update also refines several queries, improving the detection of path injection and URL redirection vulnerabilities. These changes aim to provide more accurate results, helping developers identify and fix potential security issues in their codebases. This release is automatically available to GitHub code scanning users, ensuring immediate access to these improvements.