---
title: "GitHub CodeQL tracing and Swift support changes: 2026-10-19 | Harbyn"
description: "GitHub CodeQL tracing and Swift support changes, announced Oct 19, 2026."
canonical: "https://harbyn.com/changes/github/2026-10-19-codeql-changes-for-macos-27-xcode-27-and-swift-6-4-2"
last-updated: 2026-10-25
---

# GitHub CodeQL tracing and Swift support changes

Markdown version of <https://harbyn.com/changes/github/2026-10-19-codeql-changes-for-macos-27-xcode-27-and-swift-6-4-2>.

Breaking change - GitHub. high severity. In effect.

CodeQL cannot support traced scans on macOS 27 or Xcode 27, and does not support Swift 6.4 on any platform. With Xcode 27 installed, traced extraction is unavailable for C/C++, C#, Go, Java, Kotlin, and Swift; on macOS 27 it may be unavailable for those languages. Pin macOS and Xcode to 26 or earlier; C/C++, C# and Java can use build mode none.

## Facts

| Fact | Value |
| --- | --- |
| Vendor | [GitHub](https://harbyn.com/vendors/github.md) |
| Kind | Breaking change |
| Severity | high |
| Status | In effect |
| Announced | Oct 19, 2026 |
| Added to Harbyn | Oct 25, 2026 |
| Lead time | No dated deadline |
| Vendor page | <https://github.blog/changelog/2026-10-19-codeql-changes-for-macos-27-xcode-27-and-swift-6-4> |
| Review | Reviewed by a person, extracted by a model |

## Find it in your code

```sh
npx harbyn scan
```

This change names no identifier the scanner can match line by line, so the scan tells you whether your repository uses GitHub, from its packages and API hosts. Nothing leaves your machine.

## Sources

Where this event comes from: the page we read, when we read it, and the hash of that snapshot.

- <https://github.blog/changelog/feed/> (changelog, fetched 2026-10-19 16:29 UTC, sha256 `395df307c0a7a172c29d14b552129c517d7d24e6f03ea4b5565db971db6bc89c`)

## Related changes

### More from GitHub

- [Intel-based Mac support deprecation](https://harbyn.com/changes/github/2026-10-19-codeql-changes-for-macos-27-xcode-27-and-swift-6-4.md) (Deprecation, effective Dec 2026)
- [GitHub Copilot models deprecated](https://harbyn.com/changes/github/2026-10-19-github-copilot-models-deprecated-on-october-19-2026.md) (Deprecation, effective Oct 19, 2026)
- [Some Git over HTTPS may temporarily require authentication](https://harbyn.com/changes/github/2026-10-19-some-git-over-https-may-temporarily-require-authentication.md) (Behavior change, announced Oct 19, 2026)
- [Dismissal-request webhooks include request number](https://harbyn.com/changes/github/2026-10-20-updates-to-github-secret-scanning.md) (Behavior change, announced Oct 20, 2026)

### Changes at other vendors

- [Amazon Selling Partner API: October listing attribute usage and enumeration value updates](https://harbyn.com/changes/amazon-sp-api/2026-10-14-sp-api-updates-new-listings-items-api-ivp-values-in-eu5-jp-and-ca-stores-oct-2.md) (effective Oct 26, 2026)
- [Supabase: four CBC-mode TLS 1.2 cipher suites will be removed from project HTTP APIs](https://harbyn.com/changes/supabase/2026-10-12-an-outdated-subset-of-tls-1-2-ciphers-will-be-disabled-on-project-http-apis.md) (effective Nov 10, 2026)
- [Google Workspace APIs: OAuth clients must be marked as agentic to call Google Workspace MCP servers](https://harbyn.com/changes/google-workspace/2026-10-12-oauth-clients-must-be-marked-as-agentic-to-call-google-workspace-mcp-servers.md) (effective Nov 11, 2026)
- [Bitbucket Cloud API: Git Credential Manager upgrade required for OAuth 2.0 Git authentication](https://harbyn.com/changes/bitbucket/2026-10-13-git-credential-manager-upgrade-required-for-oauth-2-0-git-authentication.md) (effective Nov 30, 2026)

[All upcoming deadlines](https://harbyn.com/deadlines.md)