CodeQL 2.27.0 runs native on Linux ARM64, adds a Rust query
GitHub auto-deployed it to code scanning today; the generic CLI download is retiring, plus new C#/Java/C++ coverage and a Copilot bulk-autofix batch.
Copy markdown
Native on ARM64, no more emulation
CodeQL 2.27.0 now ships linux-arm64 CLI and bundle assets, so scans run natively on Apple Silicon containers and ARM cloud runners like Graviton and Ampere instead of under x86 emulation. GitHub auto-deployed it to code scanning on github.com today.
A new Rust query and wider language reach
Adds rust/command-line-injection to catch uncontrolled command lines in Rust, plus C# OData taint tracking and better ASP.NET Core MVC discovery, Micronaut modeling for Java/Kotlin, and libpq now flagged as a C/C++ SQL-injection sink.
Heads-up: the generic CLI download is retiring
GitHub is phasing out the one-size-fits-all multi-platform CodeQL distribution in favor of per-platform assets, and Java 9/10 support drops in January 2027. If your CI pins the generic bundle, switch to the platform-specific asset now.
GitHub also: hand Copilot 25 fixes at once
A new 'Assign to Copilot' bulk action sends up to 25 code-quality findings for automated fixing in one click; Copilot patches on a branch, validates, and opens a PR. Team/Enterprise Cloud with Code Quality enabled, and it burns AI credits.
Elsewhere: OpenAI's image models reach the API
gpt-image-2.5-flare and gpt-image-2.5-sunburst are now callable through the Image and Responses APIs, adding xhigh and max quality tiers at GPT Image 2 token rates, the same engine behind ChatGPT's @Sketch.