Files
codeql/javascript/ql/lib/change-notes/released/2.8.0.md
2026-06-25 15:27:00 +00:00

753 B

2.8.0

New Features

  • Added UseMemoDirective and UseNoMemoDirective classes to model the React compiler directives "use memo" and "use no memo".

Minor Analysis Improvements

  • Added more prompt-injection sinks for the OpenAI, Anthropic, and Google GenAI SDKs: OpenAI videos.create/edit/extend/remix (Sora) prompts and beta.realtime.sessions.create instructions, Anthropic legacy completions.create prompts, and Google GenAI caches.create cached contents and system instructions.
  • The OpenAI legacy completions.create prompt is now treated as a user-prompt-injection sink instead of a system-prompt-injection sink, since the legacy /v1/completions endpoint takes a single free-form prompt with no role separation.