- The sensitive data library has been improved so that
snake_casestyle variable names are recognized more reliably. This may result in more sensitive data being identified, and more results from queries that use the sensitive data library. - Types are now being tracked in data flow, but only when the type of an object is obvious from the context. For example,
C.newhas guaranteed typeC, while indef add(x, y) { x + y }we cannot assign a type tox + y(it could, for instance, be bothStringandInteger). Tracking types allows us to remove false-positive results when type incompatibility can be established.