codeql/actions/ql/lib/change-notes/released/0.4.37.md

0.4.37

Minor Analysis Improvements

• The GitHub Actions analysis now recognizes more Bash regex checks that restrict a value to alphanumeric characters, including regexes like ^[0-9a-zA-Z]{40}([0-9a-zA-Z]{24})?$ which check for a SHA-1 or SHA-256 hash. This may reduce false positive results where command output is validated with grouped or optional alphanumeric patterns before being used.