Owen Mansel-Chan
a16e19a3b1
Merge pull request #22127 from owen-mc/cpp/convert-qlref-inline-expectations
...
C++: Convert qlref tests to inline expectations
2026-07-08 11:36:35 +01:00
Owen Mansel-Chan
69ed2da241
Merge pull request #22134 from github/workflow/coverage/update
...
Update CSV framework coverage reports
2026-07-08 11:19:06 +01:00
Jeroen Ketema
36af59adbf
Swift: Update integration test
2026-07-08 09:35:06 +02:00
Jeroen Ketema
b4db71a38b
Swift: Update autobuild tests
2026-07-08 09:35:05 +02:00
Jeroen Ketema
8ecdb2cde0
Swift: update integration tests to not use the integrated driver
2026-07-08 09:35:03 +02:00
Jeroen Ketema
662c7b08e8
Swift: Turn of caching and integrated driver in autobuild
...
* Caching cases compiler invocations to be omitted. You can try this for
yourself by turning on caching while building the project from the
`xcode-hello` integration test, then cleaning of the build artifacts
and building the project again while caching is enabled. This yields
a database that is practically empty.
* The integrated driver causes compiler invocations to depend on modules
shipped with Xcode. Those are unfortunately incompatible with our
extractor.
2026-07-08 09:35:02 +02:00
Jack Nørskov Jørgensen
6c7b9f71d6
Remove main entries
2026-07-08 09:28:47 +02:00
github-actions[bot]
bc966f62e2
Add changed framework coverage reports
2026-07-08 00:38:59 +00:00
Owen Mansel-Chan
b6d588c1a8
Revert inline expectations for blazor integration tests with BMN
2026-07-08 00:56:43 +01:00
Owen Mansel-Chan
5ba1fe315d
Accept updated .expected output
2026-07-08 00:56:16 +01:00
Owen Mansel-Chan
8363d2d66d
Merge pull request #22132 from joshimar/java/spring-webclient-uri-ssrf-sink
...
Java: Model Spring reactive `WebClient.uri` as a request forgery sink
2026-07-08 00:40:33 +01:00
Luis Azanza
b8f8370c33
Update java/ql/lib/change-notes/2026-06-30-spring-webclient-uri-ssrf.md
...
Update change note to be more technically accurate
Co-authored-by: Owen Mansel-Chan <62447351+owen-mc@users.noreply.github.com >
2026-07-07 16:21:09 -07:00
Luis Azanza
6ff2a4c0d6
Apply suggestion from @owen-mc
...
Removing Apple Inc notice per feedback provided by GitHub
Co-authored-by: Owen Mansel-Chan <62447351+owen-mc@users.noreply.github.com >
2026-07-07 16:10:05 -07:00
Luis Azanza
1db31327a7
Java: Model Spring reactive WebClient.uri as a request forgery sink
2026-07-07 13:30:48 -07:00
Owen Mansel-Chan
19745e13b5
Fix some lines with // $ ... // $ MISSING:
...
Note that when a line is marked `// BAD [NOT DETECTED]` but actually has
an alert, I assume that the `[NOT DETECTED]` is outdated and should be
deleted.
2026-07-07 20:48:39 +01:00
Owen Mansel-Chan
9d9590623d
Address review comments
2026-07-07 20:48:36 +01:00
Geoffrey White
117a0bb87e
Copilot fix for missing module pygments - regenerating the lockfile fully.
2026-07-07 16:02:36 +01:00
Owen Mansel-Chan
f67b7299f9
Update query example (synced file)
2026-07-07 14:09:50 +01:00
Owen Mansel-Chan
366d70bfee
Convert qlref tests to inline expectations
2026-07-07 14:09:48 +01:00
Owen Mansel-Chan
a812e4aa99
Refactor creating barriers with annotations
2026-07-07 12:44:19 +01:00
Owen Mansel-Chan
fa16728522
Fix comments in one test
2026-07-07 12:06:43 +01:00
Owen Mansel-Chan
76d8ae8694
Add MISSING: tag
2026-07-07 10:59:21 +01:00
Owen Mansel-Chan
843ac7c6b0
Add SPURIOUS: tags
2026-07-07 10:54:11 +01:00
Owen Mansel-Chan
a2c5d4c818
C++: Convert qlref tests to inline expectations
2026-07-07 09:49:50 +01:00
Jack Nørskov Jørgensen
0ca353dc7f
Add Changenote
2026-07-06 20:40:08 +02:00
Owen Mansel-Chan
8f026b1dc2
Allow inline expectation comments in more file formats
2026-07-06 13:43:31 +01:00
Owen Mansel-Chan
de7723f214
Add SPURIOUS and MISSING tags
2026-07-05 17:41:06 +01:00
Owen Mansel-Chan
5c2e5bfe8e
Convert qlref tests to inline expectations
2026-07-05 17:41:04 +01:00
Asger F
bfb3ead314
Apply suggestions from code review
...
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com >
2026-07-03 14:29:54 +02:00
Owen Mansel-Chan
e5bd62dbd3
Add change note
2026-07-03 11:34:11 +01:00
Owen Mansel-Chan
76b4f4f223
Fix @Pattern sanitizer for TaintedPath
2026-07-03 11:34:06 +01:00
Owen Mansel-Chan
077b531e41
Add failing TaintedPath test for @Pattern sanitizer
2026-07-03 11:34:03 +01:00
Asger F
c23c3d9e79
unified: Translate bare names in patterns correctly
...
- Context is fully reset when stepping into an expr/stmt/body.
- Binding modifier is rolled into outer_modifiers.
2026-07-03 11:59:58 +02:00
Asger F
036ed04eee
unified: Support OrPattern bindings
2026-07-03 11:59:57 +02:00
Asger F
891e244116
unified: Add WhileStmt as a Conditional
2026-07-03 11:59:55 +02:00
Asger F
c8eb2071d8
unified: Add tests with 'while let'
2026-07-03 11:59:53 +02:00
Asger F
e7bff859e8
unified: More fixes in test cases
2026-07-03 11:59:51 +02:00
Asger F
6ea146f65b
unified: Fix broken block syntax
...
The original test was not valid Swift syntax
2026-07-03 11:59:50 +02:00
Asger F
a86c7ba422
unified: Flatten GuardIfStmt into the enclosing block
2026-07-03 11:59:47 +02:00
Asger F
d0cd4ac536
Shared: remove unused getLhs() predicate
2026-07-03 11:54:26 +02:00
Owen Mansel-Chan
c3a0b65c0c
Merge pull request #22115 from owen-mc/java/update-mad-docs
...
Java: Add section in models docs about specifying java types
2026-07-03 09:16:29 +01:00
Owen Mansel-Chan
268e9eadac
Add section on specifying java types
2026-07-02 22:09:51 +01:00
Tom Hvitved
05ce686d43
Type inference: Small join-order tweak
2026-07-02 21:05:50 +02:00
Geoffrey White
ab1bc853fc
Merge pull request #22053 from geoffw0/arith
...
Rust: Fix FPs in rust/hard-coded-cryptographic-value
2026-07-02 17:37:38 +01:00
Michael B. Gale
f4d8358454
Merge pull request #22110 from github/post-release-prep/codeql-cli-2.26.0
...
Post-release preparation for codeql-cli-2.26.0
2026-07-02 15:32:22 +01:00
Nora Dimitrijević
0a02b16c43
Merge pull request #22095 from d10c/d10c/drop-bracket-style-links
...
Remove [[ link syntax from C# XSS sink
2026-07-02 15:45:30 +02:00
Owen Mansel-Chan
4aef485d3c
Merge pull request #22106 from github/workflow/coverage/update
...
Update CSV framework coverage reports
2026-07-02 14:08:20 +01:00
github-actions[bot]
5e50fc8471
Post-release preparation for codeql-cli-2.26.0
2026-07-02 12:26:43 +00:00
Michael B. Gale
e4a7b4ff51
Merge pull request #22109 from github/release-prep/2.26.0
...
Release preparation for version 2.26.0
2026-07-02 13:02:15 +01:00
Michael B. Gale
66ddf3b4c6
Remove unnecessary changenote for the hotfix
2026-07-02 12:58:05 +01:00
