The Kotlin 2.4 / Gradle 9 toolchain migration (PR #25) bumps Kotlin to 2.4.0, which the current CodeQL Kotlin extractor does not support:
KotlinInterceptor$KotlinVersionTooRecentError: Kotlin version 2.4.0 is too recent.
CodeQL currently supports versions below 2.3.30
CodeQL 2.25.2 (Apr 2026) supports Kotlin only up to 2.3.20. Upstream tracking: github/codeql#21938 (fix PR github/codeql#21970, unreleased).
Temporary mitigation (in this repo)
.github/workflows/codeql.yml marks the java-kotlin analysis job continue-on-error so it no longer blocks merges. Kotlin CodeQL scanning is effectively disabled while this is in place. The javascript-typescript analysis remains fully enforced.
Action to take when CodeQL ships Kotlin 2.4.0 support
- Bump
github/codeql-action in codeql.yml to the version whose CodeQL bundle supports Kotlin 2.4.0.
- Remove the
continue-on-error from the java-kotlin job.
- Confirm the
analyze (java-kotlin, manual) check runs a real analysis and passes on main.
- Close this issue.
The Kotlin 2.4 / Gradle 9 toolchain migration (PR #25) bumps Kotlin to 2.4.0, which the current CodeQL Kotlin extractor does not support:
CodeQL 2.25.2 (Apr 2026) supports Kotlin only up to 2.3.20. Upstream tracking: github/codeql#21938 (fix PR github/codeql#21970, unreleased).
Temporary mitigation (in this repo)
.github/workflows/codeql.ymlmarks the java-kotlin analysis jobcontinue-on-errorso it no longer blocks merges. Kotlin CodeQL scanning is effectively disabled while this is in place. The javascript-typescript analysis remains fully enforced.Action to take when CodeQL ships Kotlin 2.4.0 support
github/codeql-actionincodeql.ymlto the version whose CodeQL bundle supports Kotlin 2.4.0.continue-on-errorfrom the java-kotlin job.analyze (java-kotlin, manual)check runs a real analysis and passes onmain.