---
title: "GitHub CodeQL CLI error handling and output changes: 2026-10-09 | Harbyn"
description: "GitHub CodeQL CLI error handling and output changes, announced Oct 9, 2026."
canonical: "https://harbyn.com/changes/github/2026-10-09-codeql-2-27-2-improves-c-go-rust-and-javascript-analysis-3"
last-updated: 2026-10-09
---

# GitHub CodeQL CLI error handling and output changes

Markdown version of <https://harbyn.com/changes/github/2026-10-09-codeql-2-27-2-improves-c-go-rust-and-javascript-analysis-3>.

Behavior change - GitHub. low severity. In effect.

The CLI now reports invalid qlpack: and from: values in query suites as clear errors instead of crashing, rejects YAML data-extension integers outside the signed 32-bit range instead of truncating some values, and prefixes standard-error messages with ERROR: or WARNING:.

## Facts

| Fact | Value |
| --- | --- |
| Vendor | [GitHub](https://harbyn.com/vendors/github.md) |
| Kind | Behavior change |
| Severity | low |
| Status | In effect |
| Announced | Oct 9, 2026 |
| Added to Harbyn | Oct 9, 2026 |
| Lead time | No dated deadline |
| Vendor page | <https://github.blog/changelog/2026-10-09-codeql-2-27-2-improves-c-go-rust-and-javascript-analysis> |
| Review | Reviewed by a person, extracted by a model |

## Find it in your code

```sh
npx harbyn scan
```

This change names no identifier the scanner can match line by line, so the scan tells you whether your repository uses GitHub, from its packages and API hosts. Nothing leaves your machine.

## Sources

Where this event comes from: the page we read, when we read it, and the hash of that snapshot.

- <https://github.blog/changelog/feed/> (changelog, fetched 2026-10-09 22:43 UTC, sha256 `ae8354e61e4221bbe8b3135190028a8f59bcaecefaa7015365abe8775554520a`)

## Related changes

### More from GitHub

- [CodeQL Go library deprecates IfStmt.getCond](https://harbyn.com/changes/github/2026-10-09-codeql-2-27-2-improves-c-go-rust-and-javascript-analysis-2.md) (Deprecation, announced Oct 9, 2026)
- [CodeQL build modes unsupported on macOS 27 and Xcode 27](https://harbyn.com/changes/github/2026-10-09-codeql-2-27-2-improves-c-go-rust-and-javascript-analysis-4.md) (Breaking change, announced Oct 9, 2026)
- [CodeQL Go control-flow graph changes may break custom queries](https://harbyn.com/changes/github/2026-10-09-codeql-2-27-2-improves-c-go-rust-and-javascript-analysis-5.md) (Breaking change, announced Oct 9, 2026)
- [Triage role users or higher can now archive pull requests](https://harbyn.com/changes/github/2026-10-08-triage-role-users-or-higher-can-now-archive-pull-requests.md) (Behavior change, announced Oct 8, 2026)

### Changes at other vendors

- [Amazon Selling Partner API: ORDER\_CHANGE notifications add PreFulfillmentStatusChange for Amazon Autos](https://harbyn.com/changes/amazon-sp-api/2026-10-14-sp-api-updates-new-listings-items-api-ivp-values-in-eu5-jp-and-ca-stores-oct-3.md) (effective Oct 28, 2026)
- [BigCommerce: 301 redirects will apply only to storefront channels](https://harbyn.com/changes/bigcommerce/2026-10-07-301-redirects-now-apply-to-storefront-channels-only.md) (effective Nov 10, 2026)
- [Jira / Atlassian Cloud: New IP address ranges in use from January 1, 2027](https://harbyn.com/changes/atlassian-jira/2026-10-16-atlassian-cloud-adds-new-ip-address-ranges.md) (effective Jan 1, 2027)
- [Let's Encrypt: Default certificate lifetime changes to 64 days](https://harbyn.com/changes/letsencrypt/2026-10-07-64-day-certificate-lifetimes-coming-feb-2027.md) (effective Feb 10, 2027)

[All upcoming deadlines](https://harbyn.com/deadlines.md)