Joe Farebrother
15115f50c1
Remove old tests
2025-07-15 09:50:21 +01:00
Simon Friis Vindum
8858f213ff
Rust: Add a change note
2025-07-15 10:23:30 +02:00
Simon Friis Vindum
97e77944eb
Rust: Accept test changes
2025-07-15 10:21:53 +02:00
Simon Friis Vindum
7c04c9f969
Rust: Store arity in tuple type parameters
...
Type parameters are required to belong to a single type only. Since we store the arity for tuple types, we need to store the arity in tuple type parameters as well such that we can associate them to the tuple type of the same arity.
2025-07-15 09:50:15 +02:00
Napalys Klicius
887d80f49f
Added change note
2025-07-15 09:37:34 +02:00
Napalys Klicius
1851deb929
Removed libxmljs from being marked as sink for xml-bomb.
2025-07-15 09:33:11 +02:00
Mathias Vorreiter Pedersen
29cceeba1a
C++: Don't use asExpr to mark the sink in 'cpp/uncontrolled-process-operation'.
2025-07-14 18:08:58 +01:00
Jeroen Ketema
2ed54d52ad
Merge pull request #20040 from MathiasVP/fix-global-variable-recursion-fp
...
C++: Fix global variable dataflow FP
2025-07-14 18:59:34 +02:00
Geoffrey White
26dae8144c
Rust: Make rust/summary/query-sinks less noisy and thus more useful. This is the one in the DCA meta queries output, not the grand total used in metrics.
2025-07-14 17:26:43 +01:00
Jeroen Ketema
d33cd71685
Merge pull request #20030 from github/tausbn/javascript-ignore-tsconfig-outdirs-that-exclude-everything
...
JavaScript: Ignore `outDir`s that would exclude everything
2025-07-14 17:36:30 +02:00
Paolo Tranquilli
85d1e06335
Merge pull request #20039 from github/redsun82/kotlin-plugin-test
...
Kotlin: tweak plugin test
2025-07-14 17:20:27 +02:00
Mathias Vorreiter Pedersen
c83895fdd2
Merge branch 'main' into fix-global-variable-recursion-fp
2025-07-14 16:08:46 +01:00
Mathias Vorreiter Pedersen
1d36405084
C++: Accept path changes.
2025-07-14 15:47:06 +01:00
Simon Friis Vindum
03a9a1688e
Rust: Add type inference for tuples
2025-07-14 16:37:05 +02:00
Jeroen Ketema
199587095a
Add overlay annotations
2025-07-14 16:31:04 +02:00
Jeroen Ketema
cbde11ddc9
Properly share ConceptsShared.qll
2025-07-14 16:30:45 +02:00
Simon Friis Vindum
21c030fa46
Rust: Expand on type inference test for tuples
2025-07-14 16:24:11 +02:00
Mathias Vorreiter Pedersen
a825213c05
C++: Fix FP by not generating a global def entry node for variable 'v' in the 'IRfunction' for 'v' itself.
2025-07-14 15:22:52 +01:00
Mathias Vorreiter Pedersen
46627c677d
C++: Add FP in dataflow through global variables.
2025-07-14 15:20:08 +01:00
Simon Friis Vindum
87a8dccf7a
Merge pull request #20037 from paldepind/rust/type-inference-rename-expectations
...
Rust: Rename type inference test inline expectation tag
2025-07-14 15:54:18 +02:00
Joe Farebrother
0f04a8b2c0
Update integration test output
2025-07-14 14:35:12 +01:00
Paolo Tranquilli
31d0897f74
Kotlin: disable bazel cache in plugin test
2025-07-14 15:30:11 +02:00
Joe Farebrother
f784bb0a35
Fix qldoc errors + typos
2025-07-14 14:26:49 +01:00
Nick Rolfe
c941e917e7
Merge pull request #19731 from github/nickrolfe/ruby-compile-for-overlay-eval
...
Ruby: enable overlay compilation
2025-07-14 08:20:28 -04:00
Simon Friis Vindum
72854537f4
Merge branch 'main' into rust/type-inference-rename-expectations
2025-07-14 14:15:59 +02:00
Paolo Tranquilli
77cab9d068
Kotlin: tweak plugin test
...
Put less emphasis on plugin build isolation, to get a better DevEx out
of it. The crux of the test is the database extraction part, not the
plugin build.
2025-07-14 13:52:22 +02:00
Geoffrey White
918700ff6f
Merge branch 'main' into moresensitive2
2025-07-14 11:58:08 +01:00
Geoffrey White
da0742f3ec
Rust: Update path resolution consistency .expected.
2025-07-14 11:45:45 +01:00
Geoffrey White
30c6082b5d
Sync identical files.
2025-07-14 11:45:34 +01:00
Geoffrey White
b43a0e758b
Merge pull request #19946 from geoffw0/models3b
...
Rust: Update legacy MaD models 3
2025-07-14 11:19:47 +01:00
Geoffrey White
e121579a85
Rust: Adjust the test labels slightly.
2025-07-14 11:19:31 +01:00
Geoffrey White
9f59a3501c
Rust: Revert ipaddr and fingerprint terms (too many FPs).
2025-07-14 11:17:09 +01:00
Joe Farebrother
61af4e4514
Add changenote and update integraion test output
2025-07-14 11:00:05 +01:00
Geoffrey White
be7db8079a
Rust: Accept consistency check change (from CI).
2025-07-14 10:59:03 +01:00
Joe Farebrother
ea48fcca8f
Update doc for equalsNotEquals
2025-07-14 10:49:28 +01:00
Ian Lynagh
86ebf3d9f6
Merge pull request #20034 from github/igfoo/fix_regex_in_dbscheme_parser
...
Kotlin: Update regex patterns to use raw string notation
2025-07-14 10:43:45 +01:00
Jeroen Ketema
f07d8ee493
Remove duplicate copies of CryptoAlgorithms and CryptoAlgorithmNames
2025-07-14 11:39:06 +02:00
Jeroen Ketema
f4ba2e1fd0
Properly share CryptoAlgorithms and CryptoAlgorithmNames
2025-07-14 11:39:00 +02:00
Jeroen Ketema
c582a9ccd6
Remove duplicate copies of SensitiveDataHeuristics
2025-07-14 11:38:52 +02:00
Jeroen Ketema
8b828cecf1
Use shared SensitiveDataHeuristics
2025-07-14 11:38:47 +02:00
Jeroen Ketema
01ee3f7011
Shared: Add shared concepts library
2025-07-14 11:38:39 +02:00
Michael B. Gale
27f2000eff
Merge pull request #20035 from github/dependabot/go_modules/go/extractor/extractor-dependencies-5538d87460
...
Bump golang.org/x/tools from 0.34.0 to 0.35.0 in /go/extractor in the extractor-dependencies group
2025-07-14 10:12:38 +01:00
Simon Friis Vindum
1f2e0683e7
Rust: Rename type inference test inline expectation tag
2025-07-14 11:02:22 +02:00
Napalys Klicius
cb6978063e
Merge pull request #19388 from AdnaneKhan/patch-1
...
Actions: Fix Critical Artifact poisoning False Positive
2025-07-14 09:58:18 +02:00
dependabot[bot]
c267a88f88
Bump golang.org/x/tools
...
---
updated-dependencies:
- dependency-name: golang.org/x/tools
dependency-version: 0.35.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: extractor-dependencies
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-07-14 03:37:24 +00:00
Ian Lynagh
a6701ced8d
Kotlin: Update regex patterns to use raw string notation
...
Fixes warnings like
SyntaxWarning: invalid escape sequence '\S'
2025-07-13 23:42:50 +01:00
Jeroen Ketema
d82d5c23bf
Merge pull request #20026 from jketema/concept-fix
...
C++: Fix C++20 concept related class extensions
2025-07-13 10:20:10 +02:00
Owen Mansel-Chan
391e9f7471
Merge pull request #20000 from owen-mc/go/request-forgery
...
Go: Add `Head` and `Client.Head` from `net/http` as request forgery sinks
2025-07-12 00:30:23 +01:00
Owen Mansel-Chan
03e8865933
Merge pull request #20025 from owen-mc/java/unsafe-deserialization
...
Java: add extra sink for `java/unsafe-deserialization`
2025-07-11 23:59:22 +01:00
Joe Farebrother
58f503de38
Update docs for incomplete ordering + inconsistent hashing
2025-07-11 23:08:50 +01:00
