Paolo Tranquilli
df305d6b52
Python: run bazel vendoring
2025-02-17 14:18:48 +01:00
Simon Friis Vindum
a253b77894
Rust: Add clarifying comment
2025-02-17 14:14:30 +01:00
Erik Krogh Kristensen
7fa41c438f
Merge pull request #18794 from erik-krogh/v-flag
...
JS: Add support for the regex V flag
2025-02-17 13:56:48 +01:00
Anders Schack-Mulligen
a90bd68796
Merge pull request #18786 from aschackmull/ssa/cleanup
...
Rust/Ruby: Minor SSA cleanup.
2025-02-17 13:51:17 +01:00
Simon Friis Vindum
12a5766f31
Sanitize path when generating MaD files
2025-02-17 13:45:33 +01:00
Simon Friis Vindum
b08f5356dd
Merge pull request #18772 from paldepind/rust-method-call
...
Rust: Adjust argument position when call expression is for method
2025-02-17 13:39:24 +01:00
Simon Friis Vindum
dcfe65bc66
Rust: Address review comments
2025-02-17 13:35:46 +01:00
yoff
4b53e1c034
Merge pull request #18304 from yoff/ruby/performance-queries
...
Ruby: Query for database calls in a loop
2025-02-17 13:16:07 +01:00
Asger F
4e325d9f1c
JS: Convert some exception steps to legacy
2025-02-17 11:53:50 +01:00
Owen Mansel-Chan
6045d9bb22
Merge pull request #18792 from github/workflow/coverage/update
...
Update CSV framework coverage reports
2025-02-17 10:45:36 +00:00
Asger F
08b9d934c0
JS: Add a negative test
2025-02-17 11:37:44 +01:00
Asger F
352924fb8c
JS: Handle a few other stringification contexts
2025-02-17 11:36:28 +01:00
Asger F
33ab7db98a
JS: Handle Array.prototype.toString calls
2025-02-17 11:25:03 +01:00
Asger F
a74b203c86
JS: Add test with implicit array stringification
2025-02-17 11:21:46 +01:00
Asger F
d87534c7d0
JS: Model Array#toString
2025-02-17 11:13:36 +01:00
Asger F
e8d1703224
JS: Add test for flow through Buffer.concat
...
This flow was lost since the existing model of concat() boxes its return value in ArrayElement. There is no explicit model of Buffer.concat.
2025-02-17 11:12:51 +01:00
Simon Friis Vindum
0c3e8a0f5b
Rust: Adapt tests and existing models to account for generated models
2025-02-17 11:08:42 +01:00
Paolo Tranquilli
91b3d108bb
Python: upgrade cargo dependencies
...
This required some code changes because of some breaking changes in
`clap` and `tree-sitter`.
Also needed to assign a new bazel repo name to the `crates_vendor` to
avoid name conflicts in `MODULE.bazel`.
2025-02-17 10:56:36 +01:00
Simon Friis Vindum
8b3c1ab698
Merge branch 'main' into rust-ref-pattern
2025-02-17 10:36:39 +01:00
Asger F
d79f429978
JS: Update changes to nodes/edges/subpaths
...
No changes in actual alerts
2025-02-17 10:36:05 +01:00
Asger F
0ca9b2285b
Merge pull request #18740 from asgerf/js/more-precise-diff-informed
...
JS: Provide more precise related locations
2025-02-17 10:27:15 +01:00
Asger F
b8f48aa711
JS: Change note
2025-02-17 10:24:57 +01:00
Asger F
97eb09fef8
JS: Accept updated test output
2025-02-17 10:19:49 +01:00
Tom Hvitved
3644de007f
Merge pull request #18767 from hvitved/ql4ql/inline-expectations
...
QL4QL: Add query suggesting use of inline test expectations
2025-02-17 10:04:35 +01:00
Joe Farebrother
180e45d66a
Merge pull request #18599 from joefarebrother/python-qual-not-named-self-cls
...
Python: Modernize py/not-named-self and py/not-named-cls queries
2025-02-17 08:58:34 +00:00
Asger F
e02577d3e9
Merge pull request #18768 from asgerf/js/url-search-params
...
JS: Migrate model of URLSearchParams
2025-02-17 09:10:35 +01:00
github-actions[bot]
5af60bba80
Add changed framework coverage reports
2025-02-17 00:22:08 +00:00
erik-krogh
6ebffd59f6
add change-note
2025-02-16 19:23:44 +01:00
erik-krogh
55b8e8b748
fix the ECMAScript version to be ES2024
2025-02-16 19:06:14 +01:00
erik-krogh
01d70a6d73
add test of the new v flag
2025-02-16 19:01:02 +01:00
Napalys
3ec038e7b6
JS: Added predicate to check if v flag is used on regular expression
2025-02-16 18:31:08 +01:00
Napalys
4097aa9f78
JS: Added ecma2021, thus extractor now can deal with RegExp v flag
2025-02-16 18:31:06 +01:00
Sarita Iyer
1fe46ccfd6
fix table alignment
2025-02-14 16:37:37 -05:00
Jami Cogswell
61a184c1d7
Java: update more tests
2025-02-14 16:08:06 -05:00
Jami Cogswell
2bb6a3914b
Java: update tests
2025-02-14 15:16:08 -05:00
Aditya Sharad
5f4871d609
Merge pull request #18785 from martincostello/gh-18782
...
Fix docker SHA false positive
2025-02-15 01:33:39 +05:30
martincostello
31913c4a55
Fix test
...
Fix failing test.
2025-02-14 19:46:46 +00:00
Jami Cogswell
c0ebeb9c7b
Java: use AdditionalTaintStep
2025-02-14 13:52:43 -05:00
martincostello
f1723321fa
Format Document
...
Fix lint warning.
2025-02-14 18:06:00 +00:00
Martin Costello
979d604bf6
Apply suggestions from code review
...
Co-authored-by: Aditya Sharad <6874315+adityasharad@users.noreply.github.com >
2025-02-14 17:21:24 +00:00
Paolo Tranquilli
ea0bd74728
Merge pull request #18567 from github/redsun82/env-dump-integration-test
...
Rust/Swift: add integration tests checking env dumping
2025-02-14 16:52:20 +01:00
Asger F
283954d515
JS: Do not store into arrays implicitly
2025-02-14 16:06:43 +01:00
Simon Friis Vindum
925d6ac234
Rust: Add generated models for standard libraries including core
2025-02-14 14:44:22 +01:00
Mathias Vorreiter Pedersen
89fd2876b6
Merge pull request #18773 from MathiasVP/cleanup-ssa-internals-2
...
C++: Clean up some stuff in `SsaInternals`
2025-02-14 13:38:43 +00:00
martincostello
5d2409e652
Fix query
...
Forgot to move the `and`.
2025-02-14 13:36:09 +00:00
martincostello
9a7ed7f3f7
Re-order conditions
...
Makes for a neater diff.
2025-02-14 13:35:20 +00:00
martincostello
99bb0f0b4f
Use if then else
...
Apply code review suggestion.
Co-Authored-By: Taus <1104778+tausbn@users.noreply.github.com >
2025-02-14 13:30:55 +00:00
martincostello
cf8abb7989
Add change note
...
Add change note.
2025-02-14 13:27:36 +00:00
Anders Schack-Mulligen
c84087cd19
Ruby: Deprecate dependencies of deprecated predicates for clarity.
2025-02-14 14:18:20 +01:00
Anders Schack-Mulligen
28cb37364c
Rust: delete dead code.
2025-02-14 14:16:21 +01:00