Anders Schack-Mulligen
38818f3cd2
Java: Adjust Set.clear model to apply to overrides.
2024-09-30 15:46:42 +02:00
Anders Schack-Mulligen
0459d136d3
Java: Remove neutral model for Object.toString.
2024-09-30 15:17:21 +02:00
Anders Schack-Mulligen
1f95fa10fb
Java: Fix comment re. neutrals and WithoutElement.
...
The remove methods should not have been in this section, as they're
plain neutrals.
2024-09-30 15:08:56 +02:00
Anders Schack-Mulligen
ec0bd4494c
Java: Add overrides to the interpretation of neutral MaD models.
2024-09-30 13:11:49 +02:00
Anders Schack-Mulligen
a017f92b78
Merge pull request #17579 from aschackmull/java/type-sanitizers
...
Java: Add more type-based sanitizers.
2024-09-30 10:07:06 +02:00
Anders Schack-Mulligen
b0ed47c277
Merge pull request #17605 from aschackmull/java/stringbuilder-neutrals
...
Java: Add a couple of neutrals
2024-09-30 10:03:41 +02:00
Anders Schack-Mulligen
fb630d266e
Java: Add a couple of neutrals
2024-09-27 15:24:06 +02:00
Anders Schack-Mulligen
2d76752ca0
Java: Add model for CharArrayWriter.toString().
2024-09-27 11:28:20 +02:00
Rasmus Wriedt Larsen
381ea93ec3
Merge pull request #17424 from RasmusWL/active-threat-model-source
...
Go/Java/C#: Rename `ThreatModelFlowSource` to `ActiveThreatModelSource`
2024-09-26 13:08:17 +02:00
Chris Smowton
76914c40c9
Merge pull request #17591 from github/smowton/admin/java-23-change-note
...
Add change note for Java 23 support
2024-09-26 10:14:21 +01:00
Michael Nebel
dd993c3900
Merge pull request #17509 from michaelnebel/modelgen/parammodule
...
C#/Java: Re-factor the model generator to be a parameterized module.
2024-09-26 10:57:16 +02:00
Chris Smowton
ba5be80814
Typo
2024-09-25 21:32:52 +01:00
Chris Smowton
2c9488e475
Add change note for Java 23 support
2024-09-25 21:32:24 +01:00
Ian Lynagh
a8cad4963e
Kotlin: 2.1.0 is supported
2024-09-25 15:23:31 +01:00
Anders Schack-Mulligen
aaecb9bb7a
Java: Add more type-based sanitizers.
2024-09-25 10:38:17 +02:00
Ian Lynagh
9b8152a44b
Java: Add up/downgrade scripts
2024-09-24 14:06:56 +01:00
Ian Lynagh
76662a6002
Java: Add changenote for deprecation of Field.getSourceDeclaration() and Field.isSourceDeclaration()
2024-09-24 14:06:55 +01:00
Ian Lynagh
bda779a58d
Java: Deprecate Field.getSourceDeclaration() and Field.isSourceDeclaration()
...
Also follows the removal of the sourceid column of fields.
2024-09-24 14:06:54 +01:00
Ian Lynagh
300864a38b
Java: dbscheme: Remove sourceid column of fields/5
...
It was always the same as the id column.
2024-09-24 14:06:53 +01:00
Chuan-kai Lin
1cd8af54f2
Merge pull request #17190 from github/cklin/diff-informed-java-queries
...
Java: add support for alert location restrictions
2024-09-23 08:39:24 -07:00
Rasmus Wriedt Larsen
63c3a71d95
Merge branch 'main' into active-threat-model-source
2024-09-23 11:18:14 +02:00
Chuan-kai Lin
75ec8ce58e
Java: apply query alert restrictions
2024-09-20 07:47:58 -07:00
Anders Schack-Mulligen
3a1e50dcf9
Dataflow: Simplify diff-informed implementation and tweak flag name.
2024-09-20 07:07:10 -07:00
Michael Nebel
2033818e39
Java: Use the shared model generator implementation.
2024-09-19 12:20:51 +02:00
Mauro Baluda
cab35a25a5
Remove duplicate summary for MultipartFile.getInputStream and update .expected file
2024-09-18 20:43:04 +02:00
Mauro Baluda
5ae51f0b56
Address review
2024-09-18 19:28:03 +02:00
Mauro Baluda
cfa14ad5eb
Update org.springframework.core.io.model.yml
...
Model summary for `getInputStream` methods
2024-09-18 18:13:29 +02:00
Anders Schack-Mulligen
2837d2551a
Merge pull request #17490 from aschackmull/java/capture-in-obinit
...
Java: Fix support for variable capture inside object initializers.
2024-09-18 09:29:01 +02:00
Ian Lynagh
9a398aa9a8
Java: Add up/downgrade scripts
2024-09-17 11:39:07 +01:00
Ian Lynagh
9f1c251809
Java: Follow removeal of typeVars.kind in qlls
2024-09-17 11:39:07 +01:00
Ian Lynagh
baace41488
Java: Remove stats for typeVars.kind
2024-09-17 11:39:06 +01:00
Ian Lynagh
c5569cf5ad
Java: Remove long-deprecated 'kind' from typeVars
2024-09-17 11:39:05 +01:00
Ian Lynagh
6968d7c17c
Java: Remove duplicate/similar code from dbscheme
...
It's not been used for some time
2024-09-17 11:39:04 +01:00
Ian Lynagh
6166d061f2
Java: Move diagnostic_for next to diagnostics in the dbscheme
...
No code change, but it makes a bit more sense there
2024-09-17 11:39:04 +01:00
Ian Lynagh
7c99d9c648
Java: Remove snapshotDate from dbscheme
...
It's not been used for some time.
2024-09-17 11:39:03 +01:00
Ian Lynagh
9a62561336
Merge pull request #17484 from igfoo/igfoo/nestedName
...
Java: Deprecate RefType.nestedName(), and add RefType.getNestedName()
2024-09-17 11:37:16 +01:00
Anders Schack-Mulligen
20661a3c56
Java: Fix support for variable capture inside object initializers.
2024-09-17 10:42:21 +02:00
Ian Lynagh
41ed6e6695
Java: Deprecate RefType.nestedName(), and add RefType.getNestedName()
2024-09-16 17:16:25 +01:00
github-actions[bot]
79be301984
Post-release preparation for codeql-cli-2.19.0
2024-09-16 14:09:32 +00:00
Chris Smowton
8f345f9618
Copyedit Java change note
2024-09-16 12:22:20 +01:00
github-actions[bot]
acdafd9646
Release preparation for version 2.19.0
2024-09-16 10:56:10 +00:00
Dave Bartolomeo
485fc04029
Initial merge from main
2024-09-15 08:55:31 -04:00
Rasmus Wriedt Larsen
66b61ee25a
Go/Java/C#: Add change-note
2024-09-12 10:16:55 +02:00
Rasmus Wriedt Larsen
8c10155eb7
mass rename to ActiveThreatModelSource
2024-09-12 10:16:55 +02:00
Chuan-kai Lin
ff78bebf19
Shared support for alert filtering
2024-09-11 13:18:26 -07:00
Rasmus Wriedt Larsen
038bc832a7
Go/Java/C#: Rename to ActiveThreatModelSource
...
As part of adding support for threat-models to Python/JS (see
https://github.com/github/codeql/pull/17203 ), we ran into some trouble
with name clashes.
Naming in existing languages supporting threat-models:
- `SourceNode` (for QL only modeling)
- `ThreatModelFlowSource` (for active sources from QL or data-extensions)
However, since we use `LocalSourceNode` in Python, and `SourceNode` in
JS (for local source nodes), it seems a bit confusing to follow the same
naming convention as other languages, and we had to come up with new names.
Initially I used `ThreatModelSource` for the "QL only modeling", but
that meant that we needed a new name to represent the active sources
coming from either QL or data-extensions... for this I came up with
`ActiveThreatModelSource`, and I really liked it. To me, it's much
clearer that this class only contains the currently active threat
model sources.
So to align languages, I got approval from @michaelnebel to rename the
existing classes.
2024-09-10 14:46:15 +02:00
github-actions[bot]
97edff3f70
Post-release preparation for codeql-cli-2.18.4
2024-09-09 18:45:46 +00:00
github-actions[bot]
91537cdf9a
Release preparation for version 2.18.4
2024-09-09 16:08:48 +00:00
Michael Nebel
a5b462292f
Merge pull request #17330 from michaelnebel/java/modelgenfieldbased
...
Java/C#: Field based model generator (Experimental).
2024-09-06 11:11:46 +02:00
erik-krogh
e2b16bd8f9
add some change-notes
2024-09-03 22:06:07 +02:00
