Add change note

owen-mc · owen-mc · commit 46a6b8ad0734 · 2025-05-22T15:21:51.000+01:00
diff --git a/go/ql/lib/change-notes/2025-05-22-bigquery-client-query-sql-injection.md b/go/ql/lib/change-notes/2025-05-22-bigquery-client-query-sql-injection.md
@@ -0,0 +1,4 @@
+---
+category: minorAnalysis
+---
+* The first argument of `Client.Query` in `cloud.google.com/go/bigquery` is now recognized as a SQL injection sink.

-Original file line number
+Diff line change
@@ @@ -0,0 +1,4 @@ @@
 +---
 +category: minorAnalysis
 +---
 +* The first argument of `Client.Query` in `cloud.google.com/go/bigquery` is now recognized as a SQL injection sink.