Taus
8a9e53cc58
yeast: Add YAML node-types format and converter
...
Human-friendly YAML alternative to tree-sitter node-types.json with
three sections: supertypes, named, unnamed. Supports bidirectional
conversion and building Schema objects from YAML.
Includes CLI binary (node_types_yaml) and documentation.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com >
2026-05-06 11:34:09 +00:00
Taus
04f587190e
yeast: AST desugaring framework with proc-macro DSL
...
YEAST (YEAST Elaborates Abstract Syntax Trees) is a framework for
transforming tree-sitter parse trees before CodeQL extraction.
Core components:
- shared/yeast/ — Ast, Node, Schema, query matching engine, captures,
FreshScope, BuildCtx
- shared/yeast-macros/ — proc macros: query!, tree!, trees!, rule!
The query language is inspired by tree-sitter queries:
(assignment left: (_) @lhs right: (_) @rhs)
Templates support embedded Rust ({expr}), splicing ({..expr}),
computed literals (#{expr}), and fresh identifiers ($name).
The rule! macro combines query and transform:
rule!((for pattern: (_) @pat ...) => (call receiver: {val} ...))
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com >
2026-05-06 11:34:09 +00:00
Owen Mansel-Chan
e6f587e761
Merge pull request #21715 from knewbury01/knewbury01/adjust-actions-queries-untrusted-checkout
...
Improve actions/ql/src/Security/CWE-829/UntrustedCheckoutX queries
2026-05-06 11:52:30 +01:00
Jack Nørskov Jørgensen
2d2b690b5d
Merge pull request #21799 from github/jacknojo/fix_python_formatting
...
Fix issue with Python formatting and expand scope of python-tooling
2026-05-06 12:24:21 +02:00
Geoffrey White
dc863c39a9
Swift: Add test cases for an alternative pattern of calls to Insecure.MD5.hash.
2026-05-06 10:27:54 +01:00
Geoffrey White
b6155ff443
Swift: Test spacing.
2026-05-06 10:27:06 +01:00
Jack Nørskov Jørgensen
52b02a0581
Fix path to generated models
2026-05-06 08:39:41 +02:00
Matthew Costabile
e10750b35e
Merge branch 'main' into patch-1
2026-05-05 22:09:09 -04:00
Tom Hvitved
00fb11b028
Merge pull request #21778 from hvitved/rust/type-inference-verbose-type-path-expectations
...
Rust: Use verbose type paths in inline expectation comments
2026-05-05 20:23:25 +02:00
Kristen Newbury
3f44a23cf2
Adjust alert location UntrustedCheckoutCritical
2026-05-05 13:35:52 -04:00
Kristen Newbury
6a8f9a950c
Fix unit test expected file
2026-05-05 13:27:09 -04:00
Matthew Costabile
18550039f2
Update KnownDirective.expected
2026-05-05 11:06:40 -04:00
Jack Nørskov Jørgensen
ebc759d830
Fix issue with Python formatting and expand scope of python-tooling
2026-05-05 16:14:05 +02:00
Matthew Costabile
0caa483925
change note and test
2026-05-05 13:20:39 +00:00
Matthew Costabile
640b17ec78
Add UseMemoDirective and UseNoMemoDirective classes
2026-05-05 07:41:36 -04:00
github-actions[bot]
7610277199
Post-release preparation for codeql-cli-2.25.4
2026-05-05 10:10:06 +00:00
Paolo Tranquilli
6a95251206
Merge pull request #21793 from github/release-prep/2.25.4
...
Release preparation for version 2.25.4
codeql-cli/v2.25.4
2026-05-05 11:39:13 +02:00
github-actions[bot]
88e1d86c27
Release preparation for version 2.25.4
2026-05-05 09:34:30 +00:00
Tom Hvitved
4c1461ad5b
Merge pull request #21786 from hvitved/inline-test-ignore-tags
...
Inline test expectations: Rename `tagIsOptional` to `tagIsIgnored`
2026-05-05 09:01:58 +02:00
Kristen Newbury
f9f1349a0d
Undo larger change in this PR
2026-05-04 16:50:55 -04:00
Kristen Newbury
39b6cf9468
Address review comments
2026-05-04 16:47:44 -04:00
Anders Schack-Mulligen
b67ebd11e0
Merge pull request #21762 from aschackmull/csharp/ssa2
...
C#: Replace SSA classes with shared code.
2026-05-04 14:21:01 +02:00
MarkLee131
467394123c
Merge branch 'main' into fix/path-injection-read-subkind
2026-05-04 18:56:12 +08:00
BazookaMusic
74a3ba1f0d
changes for spliting into system and user
2026-05-04 11:57:43 +02:00
Anders Schack-Mulligen
02f5fe9a42
C#: Address some review comments.
2026-05-04 11:49:24 +02:00
Tom Hvitved
04a8ef0f81
Merge pull request #21777 from hvitved/swift/type-inference-tests
...
Swift: Add type inference tests
2026-05-04 11:45:32 +02:00
Anders Schack-Mulligen
f663eccf66
Merge pull request #21781 from aschackmull/java/rm-deprecated
...
Java: Delete old deprecated code.
2026-05-04 11:35:09 +02:00
Tom Hvitved
80ccdcc696
Inline test expectations: Rename tagIsOptional to tagIsIgnored
2026-05-04 11:21:33 +02:00
Tom Hvitved
224934645e
Swift: Add type inference tests for key path expressions
2026-05-04 11:00:38 +02:00
Tom Hvitved
038f9a2c2f
Swift: Split type inference tests into multiple files
2026-05-04 10:55:06 +02:00
Anders Schack-Mulligen
c7904b12c8
Java: Fix reference in deprecated code.
2026-05-04 10:52:27 +02:00
Anders Schack-Mulligen
17fded4aa5
Java: Delete old deprecated code.
2026-05-04 10:52:27 +02:00
Paolo Tranquilli
77cdafd55e
Merge pull request #21785 from github/codeql-spark-run-25308467256
...
Update changelog documentation site for codeql-cli-2.25.3
2026-05-04 10:42:33 +02:00
Paolo Tranquilli
1c20e78593
Docs: replace build mode: none with build-mode: none
2026-05-04 10:26:50 +02:00
github-actions[bot]
5546025f12
update codeql documentation
2026-05-04 08:19:28 +00:00
Tom Hvitved
1f3a8319ed
Update csharp/ql/lib/semmle/code/csharp/dataflow/internal/SsaImpl.qll
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2026-05-04 09:41:00 +02:00
MarkLee131
49e5886a06
Update java/ql/lib/ext/org.apache.commons.io.model.yml
...
Co-authored-by: Owen Mansel-Chan <62447351+owen-mc@users.noreply.github.com >
2026-05-04 12:56:11 +08:00
MarkLee131
c10a05f26a
Update java/ql/lib/ext/org.apache.commons.io.model.yml
...
Co-authored-by: Owen Mansel-Chan <62447351+owen-mc@users.noreply.github.com >
2026-05-03 14:14:48 +08:00
MarkLee131
8710e63011
Update java/ql/lib/ext/javax.servlet.model.yml
...
Co-authored-by: Owen Mansel-Chan <62447351+owen-mc@users.noreply.github.com >
2026-05-03 14:14:15 +08:00
MarkLee131
dbc9d0de4a
Update java/ql/lib/ext/org.apache.commons.io.model.yml
...
Co-authored-by: Owen Mansel-Chan <62447351+owen-mc@users.noreply.github.com >
2026-05-03 14:14:07 +08:00
MarkLee131
9194cdad9c
Update java/ql/lib/ext/java.nio.file.model.yml
...
Co-authored-by: Owen Mansel-Chan <62447351+owen-mc@users.noreply.github.com >
2026-05-03 14:08:31 +08:00
MarkLee131
7050241a54
Update java/ql/lib/ext/java.nio.file.model.yml
...
Co-authored-by: Owen Mansel-Chan <62447351+owen-mc@users.noreply.github.com >
2026-05-03 14:08:21 +08:00
MarkLee131
62a0a3e384
Update java/ql/lib/ext/java.nio.file.model.yml
...
Co-authored-by: Owen Mansel-Chan <62447351+owen-mc@users.noreply.github.com >
2026-05-03 14:08:12 +08:00
MarkLee131
3ad2d8ca3d
Update java/ql/lib/ext/java.nio.file.model.yml
...
Co-authored-by: Owen Mansel-Chan <62447351+owen-mc@users.noreply.github.com >
2026-05-03 14:04:35 +08:00
Anders Schack-Mulligen
21a0d1444f
C#: Add change note.
2026-05-01 13:13:40 +02:00
Anders Schack-Mulligen
e012981e5b
C#: Accept test changes for out/ref SSA location changes.
2026-05-01 10:32:18 +02:00
Anders Schack-Mulligen
351e9cc914
C#: Accept test changes.
2026-05-01 10:28:15 +02:00
Anders Schack-Mulligen
439a67a3fe
C#: Fix toString for capture definitions.
2026-05-01 10:26:50 +02:00
Anders Schack-Mulligen
5fbba0e9fe
C#: Delete ParameterDefaultDefinition.
2026-05-01 10:24:23 +02:00
Anders Schack-Mulligen
d3df5ce110
C#: Deprecate ParameterDefinition in favour of SsaParameterInit.
2026-05-01 10:22:53 +02:00