From 271567c88f64e9e054e973fd467bbd171e1959e6 Mon Sep 17 00:00:00 2001
From: Asger F <asgerf@github.com>
Date: Fri, 28 Nov 2025 10:13:13 +0100
Subject: [PATCH] JS: Add missing def-node roots

---
 javascript/ql/lib/semmle/javascript/ApiGraphs.qll | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/javascript/ql/lib/semmle/javascript/ApiGraphs.qll b/javascript/ql/lib/semmle/javascript/ApiGraphs.qll
index a78c23a8f9b..0dca3c1dd8e 100644
--- a/javascript/ql/lib/semmle/javascript/ApiGraphs.qll
+++ b/javascript/ql/lib/semmle/javascript/ApiGraphs.qll
@@ -1008,6 +1008,9 @@ module API {
         rhs(_, _, rhs) and
         S::inScope(rhs) and
         nd = MkDef(rhs)
+        or
+        S::isAdditionalDefRoot(nd) and
+        nd = mkDefLate(rhs)
       }
 
       /**
@@ -1287,6 +1290,10 @@ module API {
       pragma[inline_late]
       private TApiNode mkUseLate(DataFlow::Node node) { result = MkUse(node) }
 
+      bindingset[node]
+      pragma[inline_late]
+      private TApiNode mkDefLate(DataFlow::Node node) { result = MkDef(node) }
+
       private import semmle.javascript.dataflow.TypeTracking
 
       /**