## 4.2.7

### Minor Analysis Improvements

* The first argument of `Client.Query` in `cloud.google.com/go/bigquery` is now recognized as a SQL injection sink.