4.2.7

Minor Analysis Improvements

• The first argument of Client.Query in cloud.google.com/go/bigquery is now recognized as a SQL injection sink.