Philip Ginsbach
977eb5c79a
Avoid inconsistent implicit toString on potential string subtypes
...
Fix cases where the compiler cannot prove types don't extend string:
1. FileSystem.qll: Add toString() to ContainerBase signature. The
instantiation sites already provide toString(), so no changes needed
there. Container.toString() now delegates to super.toString().
No behaviour change.
2. DataFlowImplCommon.qll: Content.toString() now delegates to
super.toString() instead of returning the literal "Content".
This is a behaviour change: Content now displays its actual
description (e.g. field names) rather than the generic "Content".
2026-02-12 12:05:34 +00:00
github-actions[bot]
73d06f26cb
Post-release preparation for codeql-cli-2.24.1
2026-02-02 14:04:26 +00:00
github-actions[bot]
0db542e9f0
Release preparation for version 2.24.1
2026-02-02 12:09:09 +00:00
Owen Mansel-Chan
8b936c5dbe
Add missing QLDocs
2026-01-29 16:45:23 +00:00
Tom Hvitved
df09f02981
Shared: Shadow hasManualModel in RelevantSummarizedCallable
2026-01-26 12:40:25 +01:00
Tom Hvitved
4ce04e4749
Shared: Provenance-based filtering of flow summaries
2026-01-26 12:39:37 +01:00
github-actions[bot]
48475e66af
Post-release preparation for codeql-cli-2.24.0
2026-01-19 15:49:08 +00:00
github-actions[bot]
4142b9c4ce
Release preparation for version 2.24.0
2026-01-19 14:49:14 +00:00
Ian Lynagh
dcd0a69759
Merge remote-tracking branch 'upstream/main' into igfoo/mb
2026-01-13 01:01:35 +00:00
github-actions[bot]
2cb932cf5d
Post-release preparation for codeql-cli-2.23.9
2026-01-06 15:42:16 +00:00
github-actions[bot]
c00663766e
Release preparation for version 2.23.9
2026-01-05 11:57:06 +00:00
Óscar San José
2824c98efb
Merge pull request #21025 from github/oscarsj/mergeback-rc-3-20-into-main
...
Mergeback rc/3.20 into main
2025-12-15 11:59:58 +01:00
Óscar San José
d972af9ef8
Merge branch 'main' of https://github.com/github/codeql into oscarsj/mergeback-rc-3-20-into-main
2025-12-12 13:22:08 +01:00
Tom Hvitved
c4a8e9df21
Shared: Prefer source/sink models with manual provenance over generated
2025-12-12 11:16:13 +01:00
Anders Schack-Mulligen
8da65ec6d0
Java: Add support for boolean MaD barrier guards.
2025-12-11 16:24:25 +01:00
Anders Schack-Mulligen
d24b0ff596
Java: Basic support for pass-through barrier models.
2025-12-11 16:24:25 +01:00
github-actions[bot]
2854330759
Post-release preparation for codeql-cli-2.23.8
2025-12-08 15:49:10 +00:00
github-actions[bot]
66c51e979e
Release preparation for version 2.23.8
2025-12-08 14:38:23 +00:00
Óscar San José
bc6133de5c
Merge branch 'main' of https://github.com/github/codeql into oscarsj/merge-back-rc-3.20
2025-12-05 19:31:47 +01:00
Anders Schack-Mulligen
607ad1f886
Merge pull request #20961 from aschackmull/dataflow/flowfrom
...
Dataflow: Add flowFrom predicates to mirror flowTo.
2025-12-04 10:09:29 +01:00
Tom Hvitved
ca9d327280
Merge pull request #20915 from hvitved/content-flow-ap-limit
...
Shared: Improvements to content-sensitive model generation
2025-12-03 15:54:57 +01:00
Anders Schack-Mulligen
4191b18410
Dataflow: Add flowFrom predicates to mirror flowTo.
2025-12-03 13:46:44 +01:00
github-actions[bot]
085faa2bdb
Post-release preparation for codeql-cli-2.23.7
2025-12-02 16:39:43 +00:00
github-actions[bot]
a045b317ac
Release preparation for version 2.23.7
2025-12-02 15:31:27 +00:00
Tom Hvitved
666855dbd7
Shared: Improvements to content-sensitive model generation
2025-12-01 21:23:14 +01:00
github-actions[bot]
19a13467e0
Release preparation for version 2.23.7
2025-12-01 16:07:37 +00:00
Owen Mansel-Chan
9481fc9451
Add QLDoc explaining reverseRead
2025-11-26 14:30:23 +00:00
Owen Mansel-Chan
a2e68487ea
Shared: allow exclusions to localFlowIsLocal
2025-11-26 11:00:30 +00:00
github-actions[bot]
5ee45af3aa
Post-release preparation for codeql-cli-2.23.6
2025-11-18 09:53:12 +00:00
github-actions[bot]
18fa6799ce
Release preparation for version 2.23.6
2025-11-17 16:38:07 +00:00
github-actions[bot]
4014df9a6e
Post-release preparation for codeql-cli-2.23.4
2025-11-04 17:57:52 +00:00
github-actions[bot]
64fcdd1f2f
Release preparation for version 2.23.4
2025-11-03 14:52:23 +00:00
Anders Schack-Mulligen
4ea90e06a5
Dataflow: Minor drive-by qldoc addition.
2025-10-29 12:58:56 +01:00
Nora Dimitrijević
462d8c5dc4
Shared: update qldoc
2025-10-28 09:40:48 +01:00
Tom Hvitved
f71cfac40a
Data flow: Add various debug predicates
2025-10-20 09:59:40 +02:00
github-actions[bot]
6dd07790ac
Post-release preparation for codeql-cli-2.23.3
2025-10-14 11:16:33 +00:00
github-actions[bot]
33542f7d40
Release preparation for version 2.23.3
2025-10-14 09:30:24 +00:00
Alex Eyers-Taylor
193cd46a76
DataFlow: Adress comments on overlay informed dataflow
2025-10-07 17:52:12 +01:00
Alex Eyers-Taylor
7a8d2392ee
Daatflow: Fix bug
2025-10-07 17:52:12 +01:00
Alex Eyers-Taylor
3c110f2eb8
DataFlow: Add code for merging base with overlay.
2025-10-07 17:52:12 +01:00
Alex Eyers-Taylor
c49e2ab2da
DataFlow: Add code to do overlay informed dataflow.
2025-10-07 17:52:12 +01:00
Alex Eyers-Taylor
8c02130bcf
DataFlow: Rearrange files to group the parts that can be shared with overlay aware.
2025-10-07 17:52:12 +01:00
github-actions[bot]
a7a4e43991
Post-release preparation for codeql-cli-2.23.2
2025-09-29 15:10:19 +00:00
github-actions[bot]
d2130a589b
Release preparation for version 2.23.2
2025-09-29 10:28:45 +00:00
Simon Friis Vindum
45b84ffb31
Rust: Ensure singleton
2025-09-22 14:23:50 +02:00
Simon Friis Vindum
265e8b3623
Shared: Pass SummaryComponentStack to isSource and getSourceType
2025-09-22 14:18:54 +02:00
github-actions[bot]
4e8343664f
Post-release preparation for codeql-cli-2.23.1
2025-09-17 10:13:40 +00:00
github-actions[bot]
02a1b1efcb
Release preparation for version 2.23.1
2025-09-16 14:14:42 +00:00
Asger F
511308746c
DataFlow: Permit local flow between post-update nodes
2025-09-11 14:49:56 +02:00
github-actions[bot]
e8a2600a0c
Post-release preparation for codeql-cli-2.23.0
2025-09-02 11:46:23 +00:00
