Merge branch 'github:main' into couchdb

java/ql/integration-tests/java/buildless-paths/codescanning-config.yml

@@ -0,0 +1,4 @@
+paths:
+  - include
+paths-ignore:
+  - include/exclude

java/ql/integration-tests/java/buildless-paths/include/ShouldAppear2.java

@@ -0,0 +1 @@
+public class ShouldAppear2 { }

java/ql/integration-tests/java/buildless-paths/include/ShouldAppear2.xml

@@ -0,0 +1 @@
+<tag></tag>

java/ql/integration-tests/java/buildless-paths/include/exclude/ShouldNotAppear3.java

@@ -0,0 +1 @@
+public class ShouldNotAppear3 { }

java/ql/integration-tests/java/buildless-paths/include/exclude/ShouldNotAppear3.xml

@@ -0,0 +1 @@
+<tag></tag>

java/ql/integration-tests/java/buildless-paths/sibling/ShouldNotAppear1.java

@@ -0,0 +1 @@
+public class ShouldNotAppear1 { }

java/ql/integration-tests/java/buildless-paths/sibling/ShouldNotAppear1.xml

@@ -0,0 +1 @@
+<tag></tag>

java/ql/integration-tests/java/buildless-paths/test.expected

@@ -0,0 +1,4 @@
+javaFiles
+| include/ShouldAppear2.java:0:0:0:0 | ShouldAppear2 |
+#select
+| include/ShouldAppear2.xml:0:0:0:0 | include/ShouldAppear2.xml |

java/ql/integration-tests/java/buildless-paths/test.py

@@ -0,0 +1,5 @@
+import os
+import os.path
+
+def test(codeql, java):
+    codeql.database.create(build_mode = "none", codescanning_config = "codescanning-config.yml")

java/ql/integration-tests/java/buildless-paths/test.ql

@@ -0,0 +1,6 @@
+import java
+
+query predicate javaFiles(File f) { f.isJavaSourceFile() }
+
+from XmlFile f
+select f

java/ql/lib/change-notes/2025-12-16-java-xml-paths.md

@@ -0,0 +1,4 @@
+---
+category: minorAnalysis
+---
+* When a code-scanning configuration specifies the `paths:` and/or `paths-ignore:` settings, these are now taken into account by the Java extractor's search for XML and properties files.