CodeQL 2.26.0 Introduces Kotlin 2.4.0 Support and AI Prompt Injection Detection

The latest CodeQL 2.26.0 release brings compatibility updates and improved security analysis for developers using GitHub code scanning. A primary enhancement is full support for Kotlin 2.4.0, allowing teams working with modern Android and Kotlin applications to scan their codebases without encountering compatibility bottlenecks. In addition to the language update, this release introduces specialized detection for AI prompt injection vulnerabilities. As developers increasingly integrate large language models into their software, protecting applications against malicious or manipulative inputs has become a critical security priority. CodeQL now identifies these vectors to safeguard generative AI features. Organizations planning to adopt CodeQL 2.26.0 should review their existing CI/CD environments to ensure seamless transition. While the update maintains strong backward compatibility, verifying build environments and updating action versions will ensure optimal detection capabilities and prevent deployment friction.