github-actions[bot]
e38616a2ef
Release preparation for version 2.25.5
2026-05-18 12:05:32 +00:00
Jeroen Ketema
e55edf2f1f
Merge pull request #21853 from jketema/jketema/template-constants
...
C++: Update test results after extractor changes
2026-05-18 13:43:54 +02:00
Anders Schack-Mulligen
cb0fc786c7
Ruby: Minor cleanup, Callable is a StmtSequence.
2026-05-18 13:05:14 +02:00
Óscar San José
8a199f963d
Merge pull request #21692 from github/copilot/update-codeql-query-for-composite-actions
...
Extend `actions/unpinned-tag` to analyze composite action metadata (`action.yml` / `action.yaml`)
2026-05-18 12:17:13 +02:00
Mathias Vorreiter Pedersen
2902a19a50
C++: Add more scanf testing.
2026-05-18 10:58:50 +01:00
Mathias Vorreiter Pedersen
fcdce550e8
Merge pull request #21857 from MathiasVP/fix-cleartext-fp
...
C++: Fix FP on `cpp/cleartext-transmission`
2026-05-18 10:58:13 +01:00
Jeroen Ketema
76f71dd235
Merge pull request #21817 from jketema/go-version
...
Go: Make version parsing robust in the face of custom Go builds
2026-05-18 10:45:55 +02:00
Tom Hvitved
7f1bebe8ba
Potential fix for pull request finding
...
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com >
2026-05-17 20:29:19 +02:00
Jeroen Ketema
305a63bc38
C++: Update dbscheme stats
2026-05-16 16:10:27 +02:00
Jeroen Ketema
963715884e
C++: Add change note
2026-05-16 11:50:00 +02:00
Jeroen Ketema
b6847974f7
C++: Add upgrade and downgrade scripts
2026-05-16 09:26:08 +02:00
Jeroen Ketema
336bbc229e
C++: Add support for alias templates
...
Add other missing cases to `isFromTemplateInstantiationRec` and
`isFromUninstantiatedTemplateRec` while here.
2026-05-16 09:11:54 +02:00
Mathias Vorreiter Pedersen
8ce601b1d7
C++: Add change notes.
2026-05-15 21:22:38 +01:00
Mathias Vorreiter Pedersen
4396e66f35
C++: Fix FP by providing an implementation of 'hasSocketInput'.
2026-05-15 21:12:34 +01:00
Mathias Vorreiter Pedersen
eda33adafd
C++: Add FP.
2026-05-15 21:07:45 +01:00
BazookaMusic
5ef09a102c
add tests for langchain and remove wrong model for guardrails agent
2026-05-15 12:49:36 +02:00
BazookaMusic
fe7eabd56f
Add run from agents into the user prompt and fix an issue with classifying it as a system prompt injection
2026-05-15 12:39:54 +02:00
BazookaMusic
535adc7a31
add barrier when data flows into user messages for system prompt detection, remove embeddings from user prompt injection query
2026-05-15 12:14:14 +02:00
Geoffrey White
a4b2c0f6fd
Update change notes (Copilot's suggestions).
2026-05-15 09:24:29 +01:00
Kristen Newbury
3eaf04ef72
Fix expected files for changes to alert messages UntrustedCheckoutCritical and UntrustedCheckoutHigh
2026-05-14 15:05:08 -04:00
Jeroen Ketema
d47ee6bed9
C++: Update test results after extractor changes
2026-05-14 20:22:47 +02:00
Kristen Newbury
914c7e1a7b
Improve UntrustedCheckoutX helpfiles
2026-05-14 13:34:59 -04:00
Kristen Newbury
29ffd87bf8
Add full stop to alert messages in UntrustedCheckoutHigh and UntrustedCheckoutCritical
2026-05-14 12:58:20 -04:00
Kristen Newbury
eae9c0ef0e
Add one missing changenote actions-queries-untrusted-checkout
2026-05-14 12:06:55 -04:00
Kristen Newbury
c36ad7be37
Adjust untrusted checkout actions queries
2026-05-14 11:59:55 -04:00
Florin Coada
a84332ac15
Merge pull request #21727 from github/docs/customizing-library-models-for-rust
...
docs: Add 'Customizing library models for Rust' documentation
2026-05-14 15:04:12 +01:00
Geoffrey White
59dbd68a5e
Add change notes.
2026-05-14 14:46:05 +01:00
Tom Hvitved
3f7b50ebba
Type inference: Unify getABaseTypeMention and conditionSatisfiesConstraint
2026-05-13 16:24:36 +02:00
Taus
dd9c066c61
unified: Regenerate files
2026-05-13 14:24:12 +00:00
Taus
f4f85b58ca
unified: Remove some pointless fields
...
All of these fields have contents that are uniquely determined by the
node they appear on, so they convey no information.
2026-05-13 14:22:06 +00:00
Taus
caef72b047
unified: Introduced named property_binding node
...
This groups together a bunch of related values that would otherwise be
impossible to match up correctly.
2026-05-13 13:54:21 +00:00
Taus
9787a8b072
unified: Group enum entries
...
Same as in the preceding commit.
2026-05-13 13:51:25 +00:00
Taus
c8f7c3d7f2
unified: Group more paired items
...
Same as in the preceding commit, these items do not make sense as
separate fields on the parent node, so we materialise (or create new)
intermediate nodes to group them together.
2026-05-13 13:49:30 +00:00
Taus
ea6f3a9568
unified: Encapsulate function parameters
...
The field representation would have made it difficult to figure out
which parameters correspond to which default values and attributes, so
instead we now encapsulate these in a new `function_parameter` node.
2026-05-13 13:20:58 +00:00
Taus
5d6dc5c3c3
unified: Clean up statements/block mess
...
Introduces (by making it named) a `block` node, and conversely makes
`statements` anonymous. This enables us to sensibly distinguish between
the "then" and "else" branch of an `if_statement`, which we were not
able to previously.
2026-05-13 13:06:34 +00:00
Owen Mansel-Chan
0c274849be
Merge pull request #21842 from github/workflow/coverage/update
...
Update CSV framework coverage reports
2026-05-13 13:48:35 +01:00
Owen Mansel-Chan
b49b8ff6bd
Give slightly more detail in change note
2026-05-13 13:47:53 +01:00
Mathias Vorreiter Pedersen
25c4d9d09b
Potential fix for pull request finding
...
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com >
2026-05-13 13:27:04 +01:00
Mathias Vorreiter Pedersen
07b8d7eba7
C++: Accept test changes in experimental query.
2026-05-13 13:14:25 +01:00
Mathias Vorreiter Pedersen
f40d42c575
C++: Perform an SCC reduction to simulate greatest fixed-point semantics.
2026-05-13 13:14:20 +01:00
Mathias Vorreiter Pedersen
8585bb616d
C++: Some writes are always certain regardless of the address.
2026-05-13 13:14:13 +01:00
Mathias Vorreiter Pedersen
fc80a2472d
C++: Slightly refactor certainty computation with a newtype.
2026-05-13 13:09:12 +01:00
Mathias Vorreiter Pedersen
6d5d57acca
C++: Add missing overrides.
2026-05-13 13:09:10 +01:00
Mathias Vorreiter Pedersen
e77d85f23e
C++: Add a new test to test assignment certainty (i.e., whether the entire buffer is overwritten).
2026-05-13 13:09:08 +01:00
Mathias Vorreiter Pedersen
b753e7d228
C++: Make 'toString' on 'Ssa::Definition' more clear.
2026-05-13 13:09:01 +01:00
Mathias Vorreiter Pedersen
8e25240282
C++: Add a FP caused by missing certainty around SSA writes from Uninitialized instructions.
2026-05-13 13:07:56 +01:00
Geoffrey White
c8196e439f
Merge branch 'main' into extsensitive
2026-05-13 13:04:48 +01:00
BazookaMusic
9c136264de
remove guardrails sanitizer for now
2026-05-13 13:37:44 +02:00
Michael Nebel
c8efc34e8b
C#: Update the generated lock, targets and bzl files.
2026-05-13 13:02:14 +02:00
Florin Coada
ab0b492429
Merge branch 'main' into docs/customizing-library-models-for-rust
2026-05-13 11:45:11 +01:00
