Repository navigation
Kotlin 2.4.20 is about to be released - please prepare to be ready asap #22381
Description
Kotlin 2.4.20 is very close to release. Please do NOT wait until that day to update CodeQL. Use the available 2.4.20-RC today to adopt CodeQL, please.
As there is a security problem with Kotlin 2.4.10, we need to update quickly and cannot wait another month for CodeQL to adopt.
Thanks!
Activity
jketema commentedon Aug 20, 2026
The advisory for reference: GHSA-r937-wjx7-w2jp
hfhbd commentedon Sep 7, 2026
PR: #22404
Zordid commentedon Sep 10, 2026
Now it happened again... :-( Kotlin is out and every user is waiting for CodeQL to catch up. Why can't you enable CodeQL support on the RC versions of Kotlin, so that on release day people can use the latest Kotlin version without desperately waiting for CodeQL??
redsun82 commentedon Sep 10, 2026
@Zordid and others, first of all our sincerest apologies we didn't make it in time. While we started working on this in advance, unfortunately #22404 required some back and forth and then missed the release cut for CodeQL 2.27.0. This unfortunately means support will only land in 2.27.1, approximately two weeks from now.
We will still try to improve on this 🙌
If you are still really desperate to update, you can try using one of the nightly releases. The caveat is that we can't offer any kind of support if you do, and we rather recommend sitting tight and waiting for a stable release.
amundsor commentedon Sep 14, 2026
Is there any chance you will find a solution to this ongoing problem? CodeQL is not free anymore, and to have this recurring problem every time a new kotlin-version is released is not ideal.
HatsyRei commentedon Sep 16, 2026
Is there a reason why CodeQL documentation claims Kotlin 2.4.20 support before it landed?
https://codeql.github.com/docs/codeql-overview/supported-languages-and-frameworks/
ci: disable CodeQL job pending Kotlin 2.4.20 support, bump codeql-act…
Park CodeQL's Kotlin analysis until it supports 2.4.20
ci: fix CodeQL failure on Kotlin 2.4.20 via advanced setup
jketema commentedon Sep 28, 2026
Apologies for this. Is has to do with the way we generate the documentation. I'll discuss internally whether we can avoid this out-of-sync behavior in the future.
jketema commentedon Sep 28, 2026
For some discussion on this see #21938. We would absolutely like to change this, but this is a substantial amount of work, so this is not going to happen overnight.
I'm not aware that our license has changed over the last 5+ years.
jketema commentedon Sep 28, 2026
Closing this, as CodeQL 2.27.1 has been released.
Park CodeQL's Kotlin analysis until it supports 2.4.20
Re-enable CodeQL java-kotlin analysis