Chris Smowton
4d3a140dd7
Expose whether functions are variadic in their pp() output
2024-09-24 17:18:08 +01:00
Owen Mansel-Chan
6e428d5083
Fix bug where some methods were inappropriately promoted
2024-09-24 16:25:53 +01:00
Chuan-kai Lin
1cd8af54f2
Merge pull request #17190 from github/cklin/diff-informed-java-queries
...
Java: add support for alert location restrictions
2024-09-23 08:39:24 -07:00
Rasmus Wriedt Larsen
63c3a71d95
Merge branch 'main' into active-threat-model-source
2024-09-23 11:18:14 +02:00
Anders Schack-Mulligen
3a1e50dcf9
Dataflow: Simplify diff-informed implementation and tweak flag name.
2024-09-20 07:07:10 -07:00
github-actions[bot]
79be301984
Post-release preparation for codeql-cli-2.19.0
2024-09-16 14:09:32 +00:00
Chris Smowton
be02864281
Copyedit
2024-09-16 12:25:49 +01:00
github-actions[bot]
acdafd9646
Release preparation for version 2.19.0
2024-09-16 10:56:10 +00:00
Dave Bartolomeo
485fc04029
Initial merge from main
2024-09-15 08:55:31 -04:00
Rasmus Wriedt Larsen
66b61ee25a
Go/Java/C#: Add change-note
2024-09-12 10:16:55 +02:00
Rasmus Wriedt Larsen
8c10155eb7
mass rename to ActiveThreatModelSource
2024-09-12 10:16:55 +02:00
Chuan-kai Lin
ff78bebf19
Shared support for alert filtering
2024-09-11 13:18:26 -07:00
Owen Mansel-Chan
270fa8d507
Add change note
2024-09-10 16:58:24 +01:00
Rasmus Wriedt Larsen
038bc832a7
Go/Java/C#: Rename to ActiveThreatModelSource
...
As part of adding support for threat-models to Python/JS (see
https://github.com/github/codeql/pull/17203 ), we ran into some trouble
with name clashes.
Naming in existing languages supporting threat-models:
- `SourceNode` (for QL only modeling)
- `ThreatModelFlowSource` (for active sources from QL or data-extensions)
However, since we use `LocalSourceNode` in Python, and `SourceNode` in
JS (for local source nodes), it seems a bit confusing to follow the same
naming convention as other languages, and we had to come up with new names.
Initially I used `ThreatModelSource` for the "QL only modeling", but
that meant that we needed a new name to represent the active sources
coming from either QL or data-extensions... for this I came up with
`ActiveThreatModelSource`, and I really liked it. To me, it's much
clearer that this class only contains the currently active threat
model sources.
So to align languages, I got approval from @michaelnebel to rename the
existing classes.
2024-09-10 14:46:15 +02:00
github-actions[bot]
97edff3f70
Post-release preparation for codeql-cli-2.18.4
2024-09-09 18:45:46 +00:00
github-actions[bot]
91537cdf9a
Release preparation for version 2.18.4
2024-09-09 16:08:48 +00:00
Michael B. Gale
d69c1e9af6
Accept suggestion from review
...
Co-authored-by: Chris Smowton <smowton@github.com >
2024-09-09 12:19:30 +01:00
Michael B. Gale
c34fe9eda2
Go: Add change note for 1.23 support
2024-09-06 10:52:10 +01:00
Owen Mansel-Chan
013ee34de7
Merge pull request #17381 from owen-mc/go/fix/qldoc/resultvariabledecl
...
Go: Fix QLDoc for ResultVariableDecl
2024-09-05 11:57:45 +01:00
Owen Mansel-Chan
9786934d9a
Remove errant space at end of line
2024-09-05 11:27:20 +01:00
Owen Mansel-Chan
5bafa8ace2
Add comment about x, y int being a single ResultVariableDecl
2024-09-05 10:27:11 +01:00
Owen Mansel-Chan
351c50afc1
Fix QLDoc for ResultVariableDecl
2024-09-04 14:02:35 +01:00
Michael B. Gale
cd8a5d7707
Merge pull request #17378 from github/mbg/go/improve-typeparamtype
...
Go: Add `getParent` and `getIndex` for `TypeParamType`
2024-09-04 13:31:51 +01:00
Michael B. Gale
db72bd4f96
Go: Add getParent and getIndex for TypeParamType
2024-09-04 12:28:58 +01:00
Erik Krogh Kristensen
4258119ba3
Merge branch 'main' into del-deps-sep-2024
2024-09-04 12:43:41 +02:00
erik-krogh
e2b16bd8f9
add some change-notes
2024-09-03 22:06:07 +02:00
erik-krogh
0fdd06fff5
use my script to delete outdated deprecations
2024-09-03 20:30:58 +02:00
Owen Mansel-Chan
f5c195d830
Remove change note from 1.15.md
...
We will include this change note when there is documentation about how to use the functionality.
2024-09-03 16:24:55 +01:00
Henry Mercer
3490067316
Merge branch 'main' into henrymercer/rc-3.15-mergeback
2024-08-29 19:48:01 +01:00
github-actions[bot]
3e774476c6
Post-release preparation for codeql-cli-2.18.3
2024-08-27 18:52:31 +00:00
github-actions[bot]
0db6379602
Release preparation for version 2.18.3
2024-08-27 17:50:22 +00:00
Henry Mercer
0f44cd3f62
Revert "Release preparation for version 2.18.3"
2024-08-27 18:19:25 +01:00
Chris Smowton
7cb67a50be
Add change note for ioutil fix
2024-08-24 17:49:26 +01:00
Chris Smowton
a832730a11
Revert "Convert squirrel sql-injection sinks to MaD (non-existent methods removed)"
...
This reverts commit 06f86dd22f
2024-08-24 17:44:40 +01:00
Chris Smowton
ab88b9b136
Revert "Upgrade and convert gorqlite sql-injection sinks to MaD"
...
This reverts commit ce0cb12c29
2024-08-24 17:43:15 +01:00
Chris Smowton
8fc3b00fb9
Revert "Convert gogf/gf sql-injection sinks to MaD"
...
This reverts commit db559f75b6
2024-08-24 17:43:12 +01:00
Chris Smowton
e7f788ae35
Revert "Convert sqlx sql-injection sinks to MaD"
...
This reverts commit 7ad63fc3e6
2024-08-24 17:43:09 +01:00
Chris Smowton
4e6d7fcb29
Revert "Convert Gorm sql-injection sinks to MaD"
...
This reverts commit ba310417a8
2024-08-24 17:43:06 +01:00
Chris Smowton
d8a2c08f12
Revert "Convert Xorm sql-injection sinks to MaD"
...
This reverts commit 3b2b7d7d1c
2024-08-24 17:43:03 +01:00
Chris Smowton
59bb142e8b
Revert "Convert Bun sql-injection sinks to MaD"
...
This reverts commit 3eb5b2669b
2024-08-24 17:43:00 +01:00
Chris Smowton
ec59492866
Revert "Convert Beego orm sql-injection sinks to MaD"
...
This reverts commit ad213579a1
2024-08-24 17:42:57 +01:00
Chris Smowton
fa07f16bcc
Revert "Convert database/sql sql-injection sinks to MaD"
...
This reverts commit 501bb3eb56
2024-08-24 17:42:55 +01:00
Chris Smowton
b3326babba
Revert "Convert database/sql/driver sql-injection sinks to MaD"
...
This reverts commit 652dd88c36
2024-08-24 17:42:52 +01:00
Chris Smowton
c33568b602
Revert "Convert mongodb nosql-injection sinks to MaD"
...
This reverts commit ec9d88b364
2024-08-24 17:42:49 +01:00
Chris Smowton
437df5c2a5
Revert "Convert gocb nosql-injection sinks to MaD"
...
This reverts commit 2d2afb17ad
2024-08-24 17:42:45 +01:00
Chris Smowton
a6e3b913d0
Revert "Convert logging sinks to use MaD"
...
This reverts commit fa472f5e18
2024-08-24 17:39:24 +01:00
Chris Smowton
686f47af98
Revert "Fix typo in package path"
...
This reverts commit 6f5a045437
2024-08-24 17:34:34 +01:00
Chris Smowton
67d94376e8
Merge pull request #17227 from smowton/smowton/fix/baseline-vs-nonroot-vendor-dirs
...
Go / configure-baseline: account for multiple vendor directories and the `CODEQL_EXTRACTOR_GO_EXTRACT_VENDOR_DIRS` setting
2024-08-22 15:00:51 +01:00
Owen Mansel-Chan
2edadbf423
Try to fix packages in frameworks coverage
2024-08-22 11:44:34 +01:00
github-actions[bot]
17cd9624fb
Release preparation for version 2.18.3
2024-08-21 17:13:52 +00:00
