Michael Nebel
d05c5e3d94
Java: Deprecate the content of NumericCastTaintedLocalQuery, remove the local query variant and update the non-local query variant.
2024-05-01 13:07:21 +02:00
Michael Nebel
301a6cc191
Java: Deprecate the content of ImproperValidationOrArray and remove local query variants.
2024-05-01 13:07:21 +02:00
Michael Nebel
acd0fa4b7b
Java: Deprecate the content of ExternallyControlledFormatStringLocalQuery and remove the externally controlled format string local query variant.
2024-05-01 13:07:21 +02:00
Michael Nebel
85a4dd0325
Java: Deprecate the local content of CommandLineQuery and remove the exec tainted local query variant.
2024-05-01 13:07:20 +02:00
Michael Nebel
072f19008a
Java: Deprecate the content of ArithmeticTaintedLocalQuery and remove the arithmetic tainted local query variant.
2024-05-01 08:59:51 +02:00
Michael Nebel
93988e5834
Java: Deprecate the content of XxeLocalQuery and remove the Xxe local query variant.
2024-05-01 08:59:50 +02:00
Michael Nebel
e0c2a43780
Java: Deprecate the content of XssLocalQuery and remove the Xss local query variant.
2024-05-01 08:59:50 +02:00
Henry Mercer
797f675285
Merge pull request #16365 from github/post-release-prep/codeql-cli-2.17.2
...
Post-release preparation for codeql-cli-2.17.2
2024-04-30 14:51:01 +01:00
Ian Lynagh
0715c4ac5a
Merge pull request #16341 from igfoo/igfoo/ODASA_BUILD_ERROR_DIR
...
Java: Remove support for deprecated ODASA_BUILD_ERROR_DIR env var
2024-04-30 13:18:51 +01:00
github-actions[bot]
99928b82ed
Post-release preparation for codeql-cli-2.17.2
2024-04-30 12:15:35 +00:00
github-actions[bot]
5228d94d42
Release preparation for version 2.17.2
2024-04-30 10:25:51 +00:00
Ian Lynagh
676bcf39a5
Java: Remove support for deprecated ODASA_BUILD_ERROR_DIR env var
2024-04-29 18:02:28 +01:00
Paolo Tranquilli
d4e0a5629d
Kotlin: update wrapper location
2024-04-29 17:33:40 +02:00
Paolo Tranquilli
d7ecaae245
Kotlin: back off from lazy LFS rules
...
Those have shown to cause problems with too many concurrent downloads.
This changes kotlinc dependencies fetching to:
* use `resource/kotlinc-dependencies` if available (which is the case
for the internal repo)
* otherwise, download them from maven.
This means sha256 hashes need to be written down for bazel.
2024-04-29 17:26:25 +02:00
erik-krogh
800d7546fa
change all the change-notes to breaking
2024-04-26 17:17:23 +02:00
Michael Nebel
f95b33049e
Java: Improve the Api sources and sinks implementation.
2024-04-26 14:12:41 +02:00
erik-krogh
14d88eb3ce
add change-notes
2024-04-26 12:56:28 +02:00
Michael Nebel
b754706e44
Java: Update SupportedExternalApi expected test output.
2024-04-26 12:39:46 +02:00
Michael Nebel
9db32f4d26
Java: Identify more APIs as supported in the telemetry queries (as QL defined sinks).
2024-04-26 12:39:46 +02:00
Michael Nebel
acb2bbb2a3
Java: Identify more APIs as supported in the telemetry queries (as QL defined sources).
2024-04-26 12:39:46 +02:00
Michael Nebel
06f987ad58
Java: Add test example of a supported sink defined in QL.
2024-04-26 12:39:46 +02:00
erik-krogh
fb376a1cfd
revert the deletion of explorationLimit. It'll be deleted along with the entire class later
2024-04-25 22:31:11 +02:00
erik-krogh
baa31e1469
delete outdated deprecations
2024-04-25 22:19:28 +02:00
Paolo Tranquilli
8e1d77bcb2
Bazel: format file
2024-04-25 11:05:57 +02:00
Paolo Tranquilli
4aa0a8ebae
Kotlin: make wrapper more robust for windows
2024-04-24 13:39:32 +02:00
Paolo Tranquilli
c014cd84f4
Bazel: fix kotlin wrapper version dependency
2024-04-23 15:15:38 +02:00
Paolo Tranquilli
5b143cee96
Kotlin: make wrapper install quietly unless --select is explicit
...
This allows `kotlinc -version` to always produce something parseable.
2024-04-23 15:15:38 +02:00
Paolo Tranquilli
072e2edd34
Merge branch 'main' into redsun82/kotlin
2024-04-23 14:29:33 +02:00
Anders Schack-Mulligen
b2f09949df
Merge pull request #15599 from aschackmull/dataflow/fieldflowbranchlimit-v2
...
Dataflow: update fieldFlowBranchLimit semantics
2024-04-23 10:08:05 +02:00
Paolo Tranquilli
aaa29d8982
Remove unneeded slash in kotlinc.bat
2024-04-22 18:13:55 +02:00
Paolo Tranquilli
7952f0e237
Merge branch 'main' into redsun82/kotlin
2024-04-22 08:30:22 +02:00
Anders Schack-Mulligen
874d9d14bc
Merge pull request #16290 from aschackmull/java/oscheck-perf
...
Java: Fix join-order.
2024-04-19 16:55:56 +02:00
Anders Schack-Mulligen
c45fd4080d
Java: Fix join-order.
...
The TC was being fully materialised but all we need is unary
reachability.
2024-04-19 15:41:35 +02:00
Paolo Tranquilli
3678e51f0b
Merge branch 'main' into redsun82/kotlin
2024-04-17 15:09:27 +02:00
Alexander Eyers-Taylor
da3fa22cbd
Merge pull request #16228 from github/post-release-prep/codeql-cli-2.17.1
...
Post-release preparation for codeql-cli-2.17.1
2024-04-17 11:24:34 +01:00
Paolo Tranquilli
c5f6c65ff1
Merge branch 'main' into redsun82/kotlin
2024-04-16 18:23:33 +02:00
Cornelius Riemenschneider
6ba27dc863
Upgrade rules_pkg to 0.10.1.
2024-04-16 16:29:56 +02:00
github-actions[bot]
622e176a16
Post-release preparation for codeql-cli-2.17.1
2024-04-16 14:21:32 +00:00
Paolo Tranquilli
a7411700ef
Merge branch 'main' into redsun82/kotlin
2024-04-16 16:13:31 +02:00
Paolo Tranquilli
306f0f172d
Kotlin: accept --select default in kotlinc wrapper to select the default version
2024-04-16 13:55:20 +02:00
Paolo Tranquilli
27ab4875fd
Kotlin: simplify kotlinc wrapper
2024-04-16 13:37:06 +02:00
github-actions[bot]
9bfe4ea90a
Release preparation for version 2.17.1
2024-04-15 17:34:47 +00:00
Paolo Tranquilli
8c705adbe9
Kotlin/Bazel: fix java release to 8 for java code
2024-04-15 15:38:06 +02:00
Anders Schack-Mulligen
3c69f8f607
Java: Count second level scopes for fieldFlowBranchLimit.
2024-04-15 15:17:43 +02:00
Anders Schack-Mulligen
2f0987e980
Dataflow: Add dummy DataFlowSecondLevelScope implementations.
...
These could be an empty type, but Unit was available and it probably
doesn't matter.
2024-04-15 15:16:30 +02:00
Anders Schack-Mulligen
b87b8329a0
Dataflow: Use default fieldFlowBranchLimit in qltests.
2024-04-15 15:13:03 +02:00
Paolo Tranquilli
1b5675eb21
Kotlin/Bazel: tweak wrapper
2024-04-15 13:31:29 +02:00
Paolo Tranquilli
e53ef4acd2
Kotlin/Bazel: fix wrapper on Windows
2024-04-15 13:13:31 +02:00
Paolo Tranquilli
b07fa70133
Kotlin/Bazel: provide wrapper for managing versions of kotlinc
...
By adding `java/kotlinc-extractor/deps/dev` to `PATH`, one gets a
`kotlinc` wrapper that takes care of downloading and extracting the
desired version of `kotlinc` on demand. The desired version can be
selected with `kotlinc --select x.y.z`, or left to the current default
of `1.9.0`.
Moreover, this default version is integrated with the Bazel build, so
that when using this wrapper, changes in the selected version will be
picked up to define the default single version kotlin extractor build,
without needing to do anything else (like `bazel fetch --force` or
similar).
Selected and installed version data is stored in `.gitignore`d files
in the same directory, and can be cleared with `kotlinc --clear`.
2024-04-15 10:48:57 +02:00
Paolo Tranquilli
a78124b2d5
Bazel/Kotlin: use a wrapper to get the current kotlin version
2024-04-12 14:47:21 +02:00
