Jon Janego
ba8eebe2b5
Merge pull request #21948 from github/codeql-spark-run-26974832191
...
Update changelog documentation site for codeql-cli-2.25.6
2026-06-04 14:55:17 -05:00
github-actions[bot]
dc1409e5f4
update codeql documentation
2026-06-04 19:36:45 +00:00
Jon Janego
2a8f295a65
Merge pull request #21947 from github/copilot/codeql-cli-2256
...
Fix changelog copy errors in change-notes and CHANGELOG.md files (codeql-cli-2.25.6)
2026-06-04 14:29:33 -05:00
copilot-swe-agent[bot]
b8501f1ec5
Fix changelog copy errors in change-notes and CHANGELOG.md files (codeql-cli-2.25.6)
2026-06-04 18:35:06 +00:00
copilot-swe-agent[bot]
3214253adb
Initial plan
2026-06-04 18:29:50 +00:00
Henry Mercer
f4dc86e645
Correct query metadata for actions/untrusted-checkout/medium
2026-06-04 19:12:02 +01:00
Mario Campos
284f42bb9e
Merge pull request #21945 from github/codeql-spark-run-26947645690
...
Update changelog documentation site for codeql-cli-2.25.6
2026-06-04 13:09:04 -05:00
Mathias Vorreiter Pedersen
44c8a97e2f
JS: Update test output.
2026-06-04 17:55:09 +01:00
Mathias Vorreiter Pedersen
1d884a3979
QL: Add support for YAML comments.
2026-06-04 17:55:07 +01:00
Mathias Vorreiter Pedersen
8c35e089d8
Unified: Add support for YAML comments.
2026-06-04 17:55:04 +01:00
Mathias Vorreiter Pedersen
e1fde60988
Rust: Add upgrade and downgrade scripts.
2026-06-04 17:55:02 +01:00
Mathias Vorreiter Pedersen
1b29c12049
Rust: Add support for YAML comments.
2026-06-04 17:55:00 +01:00
Mathias Vorreiter Pedersen
d38091fe28
Ruby: Add upgrade and downgrade scripts.
2026-06-04 17:54:57 +01:00
Mathias Vorreiter Pedersen
303cb11609
Ruby: Add support for YAML comments.
2026-06-04 17:54:55 +01:00
Mathias Vorreiter Pedersen
b877943b42
Python: Add upgrade and downgrade scripts.
2026-06-04 17:54:53 +01:00
Mathias Vorreiter Pedersen
0aa1abe432
Python: Add support for YAML comments.
2026-06-04 17:54:48 +01:00
Mathias Vorreiter Pedersen
b6521e7c0e
Actions: Support YAML comments.
2026-06-04 17:54:46 +01:00
Mathias Vorreiter Pedersen
e8f7454ea1
JS: Add tests.
2026-06-04 17:54:42 +01:00
Mathias Vorreiter Pedersen
3a90e8c77e
JS: Add upgrade and downgrade scripts.
2026-06-04 17:54:40 +01:00
Mathias Vorreiter Pedersen
58b1a05985
JS: Support YAML comments.
2026-06-04 17:54:37 +01:00
Henry Mercer
2f3524de74
Merge branch 'rc/3.22' into codeql-spark-run-26947645690
2026-06-04 16:01:11 +01:00
github-actions[bot]
b32573b060
update codeql documentation
2026-06-04 14:57:38 +00:00
BazookaMusic
078d15e165
add openrouter support
2026-06-04 16:42:49 +02:00
Mathias Vorreiter Pedersen
e87f7fb3f7
Shared: Support YAML comments.
2026-06-04 14:53:02 +01:00
Owen Mansel-Chan
c170002fb1
Update test output
2026-06-04 13:52:05 +01:00
Owen Mansel-Chan
14e3ee2fb0
Add change note
2026-06-04 13:39:42 +01:00
Owen Mansel-Chan
50e0354911
Tidy up comments in isSink
2026-06-04 13:39:36 +01:00
Owen Mansel-Chan
101812310c
Inline isCloseCall into isSink
2026-06-04 13:39:24 +01:00
Owen Mansel-Chan
c87bfd5f28
Remove redundant call to isCloseSink
2026-06-04 13:09:10 +01:00
Owen Mansel-Chan
05e21adc53
Accept test changes
2026-06-04 13:09:07 +01:00
Owen Mansel-Chan
f67d0ea961
Go: Account for deferred Close in writable-file-close query
...
A deferred Close runs at function exit, but the CFG splices it in at the exit node where it can be reached along paths that never execute Sync. The previous dominance check therefore produced a false positive when a statement followed the if-block that registered the defer (e.g. deferredCloseWithSync2). For deferred closes, require instead that a handled Sync post-dominates the point where the defer is registered, which guarantees Sync runs before Close on every path on which Close is registered. Non-deferred closes keep the existing dominance check.
2026-06-04 13:09:05 +01:00
Owen Mansel-Chan
5217ede621
Go: Tidy up comments in writable-file-close query
...
Correct the doc for unhandledCall (it also matches expression statements where the result is discarded) and remove a stale commented-out line in isWritableFileHandle.
2026-06-04 13:09:03 +01:00
Owen Mansel-Chan
cd2398aeea
Merge pull request #21936 from github/workflow/coverage/update
...
Update CSV framework coverage reports
2026-06-04 12:45:21 +01:00
Owen Mansel-Chan
59908124c1
Add test showing limits of DeferStmt in CFG
...
There are paths to the exit of the function which go through the defer
statement and paths which don't, so we add an optional call to the
deferred function. This causes FPs in the query as it stands.
2026-06-04 12:21:38 +01:00
Sotiris Dragonas
d6892eaf0d
Merge pull request #21900 from github/bazookamusic/range-analysis-bound-move-to-shared
...
Bound.qll - Replace utility for range analysis duplicate across java and cs with shared file
2026-06-04 12:45:11 +02:00
BazookaMusic
d2972cb53f
Add back alias for module
2026-06-04 11:08:49 +02:00
github-actions[bot]
5576d30780
Add changed framework coverage reports
2026-06-04 01:04:50 +00:00
Owen Mansel-Chan
da999ee440
Address review comments
2026-06-03 21:24:16 +01:00
Tom Hvitved
3da195f50f
Merge pull request #21918 from hvitved/rust/expose-resolution
...
Rust: Add `Impl::getSelf()` and `Impl::getTrait()`
2026-06-03 20:18:05 +02:00
Henry Mercer
93a4b427e3
Merge pull request #21933 from github/post-release-prep/codeql-cli-2.25.6
...
Post-release preparation for codeql-cli-2.25.6
2026-06-03 16:57:48 +01:00
Tom Hvitved
0430c71318
Merge pull request #21922 from hvitved/rust/static-const-resolution
...
Rust: Path resolution for `static` items
2026-06-03 17:48:21 +02:00
Owen Mansel-Chan
52f2a5825a
Merge pull request #21804 from github/copilot/add-tests-for-models
...
Java: Update CWE-918 model coverage for Apache HttpClient `execute` sinks
2026-06-03 12:55:56 +01:00
Owen Mansel-Chan
d55ff83568
Merge pull request #21269 from owen-mc/go/improve-tests-for-varargs-flow
...
Go: improve tests for varargs flow
2026-06-03 12:39:46 +01:00
BazookaMusic
f34275636c
No duplicate Ssa and remove release changenot
2026-06-03 11:54:24 +02:00
BazookaMusic
0a801440b9
review comments
2026-06-03 10:48:50 +02:00
Asger F
7edf0100cc
Merge pull request #21924 from asgerf/asgerf/yeast-changes
...
Yeast: some fixes
2026-06-03 10:32:38 +02:00
Owen Mansel-Chan
167c837088
Merge pull request #21914 from owen-mc/shared/cfg/if-init
...
Shared CFG: allow init stmts for IfStmt
2026-06-02 22:01:02 +01:00
Owen Mansel-Chan
6f2cc43f32
Remove imprecise model for tuple()
2026-06-02 21:59:48 +01:00
Owen Mansel-Chan
5042fdee84
Remove imprecise model for list()
2026-06-02 21:59:46 +01:00
Owen Mansel-Chan
04341c47bd
Tweak model for str.join
2026-06-02 21:59:44 +01:00
