Next week's August Static Analysis Release includes the following:

Updated language and framework support

Android

• Enhanced support for Android 16.
• Improved third-party detection.

Dart and Flutter

• Adds support for hardcoded value detection in get assignments modeled as getter functions.

Java

• Improves Java scan performance when analyzing common template patterns.
• Improved detection of CWE-78 flaws.

JavaScript

• Adds support for Next.js 16.x

PHP

• Enhanced detection of third-party code.

PL/SQL

• Improved scan performance.

Python

• Improves detection of hardcoded passwords and credentials (CWE-259 and CWE-798).
• Adds support for the Python google-cloud-bigquery library.

RPG

• Improves remediation guidance for flaws associated with CWE-78, CWE-114, CWE-200, CWE-338, CWE-359, CWE-628, CWE-787, and CWE-823.
• Improved detection of CWE-787 flaws to reduce false positives.
• Improved RPG parsing.

Other languages

• Improves detection of CWE-259 and CWE-798 flaws across all languages to reduce false positives.