copilot-swe-agent[bot]
|
b1615312b8
|
Bump jackson-core to 2.18.6 in ferstl-depgraph-dependencies (CVE-2025-52999)
- Update 3 maven-fetches.expected files: jackson 2.14.1→2.18.6,
jackson-parent 2.14→2.18.4, oss-parent 48→69,
plugin version 4.0.3-CodeQL→4.0.3-CodeQL-2
- Update 2 diagnostics.expected files: plugin version reference
4.0.3-CodeQL→4.0.3-CodeQL-2
- Add update-ferstl-depgraph-dependencies.sh auto-update script
|
2026-05-19 11:52:46 +00:00 |
|
copilot-swe-agent[bot]
|
63a09484a0
|
Initial plan
|
2026-05-19 11:44:18 +00:00 |
|
Michael Nebel
|
7a1a90b5a4
|
C#: Address review comment.
|
2026-05-19 13:23:22 +02:00 |
|
Paolo Tranquilli
|
06c908756f
|
Merge branch 'main' into redsun82/issue-21802-ruby-absolute-paths-in-sarif-diagnostics-a02887
|
2026-05-19 13:17:23 +02:00 |
|
Mathias Vorreiter Pedersen
|
d93de54397
|
C++: Consistent use of 'this.getIndirection()' in 'toString'.
|
2026-05-19 12:16:37 +01:00 |
|
Paolo Tranquilli
|
adf59f3ee5
|
Merge branch 'main' into redsun82/redsun82-python-absolute-paths-in-diagno
|
2026-05-19 13:09:04 +02:00 |
|
Jeroen Ketema
|
22a8123ee1
|
Merge pull request #21860 from jketema/jketema/alias-template
C++: Support alias templates
|
2026-05-19 10:46:56 +02:00 |
|
Jack Nørskov Jørgensen
|
3119ef6c1a
|
Add MaDs for Apache Avro
|
2026-05-19 09:27:32 +02:00 |
|
Jeroen Ketema
|
01ff9aa91f
|
Swift: Update to Swift 6.3.2
|
2026-05-19 06:50:59 +02:00 |
|
Mathias Vorreiter Pedersen
|
0633bc7b91
|
Merge pull request #21862 from MathiasVP/more-fopen-models
C++: Add two more `fopen`-like models.
|
2026-05-18 22:43:48 +01:00 |
|
Owen Mansel-Chan
|
ad69cfb721
|
Merge pull request #21838 from github/copilot/widen-regex-for-pinned-actions
Align `alphaNumericRegex()` with the documented grouped SHA pattern
|
2026-05-18 17:35:27 +01:00 |
|
github-actions[bot]
|
9f64000962
|
Post-release preparation for codeql-cli-2.25.5
|
2026-05-18 15:20:31 +00:00 |
|
Mathias Vorreiter Pedersen
|
2c156994de
|
C++: Add two more 'fopen'-like models.
|
2026-05-18 14:47:11 +01:00 |
|
Mathias Vorreiter Pedersen
|
19781e53e7
|
C++: Add change notes.
|
2026-05-18 14:06:21 +01:00 |
|
Mathias Vorreiter Pedersen
|
5f10a88208
|
C++: Handle size arguments in 'getOutputArgument'.
|
2026-05-18 14:06:18 +01:00 |
|
Mathias Vorreiter Pedersen
|
5add24be59
|
C++: Add scanf_s models.
|
2026-05-18 14:06:16 +01:00 |
|
Mathias Vorreiter Pedersen
|
16235d7aca
|
C++: Add a 'call' column to 'hasRemoteFlowSource' and 'hasLocalFlowSource' to support modeling of 'scanf_s'.
|
2026-05-18 14:06:05 +01:00 |
|
Jeroen Ketema
|
5f6553490c
|
Update cpp/ql/lib/change-notes/2026-05-16-alias-template.md
|
2026-05-18 15:04:52 +02:00 |
|
Jeroen Ketema
|
d14b8064b0
|
Update cpp/ql/lib/semmle/code/cpp/TypedefType.qll
|
2026-05-18 15:04:03 +02:00 |
|
Jeroen Ketema
|
7636bf560e
|
Potential fix for pull request finding
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
|
2026-05-18 15:02:34 +02:00 |
|
Michael Nebel
|
9b2b5971fe
|
Merge pull request #21846 from michaelnebel/csharp/updateextractordependencies
C# 14: Update paket and dependencies.
|
2026-05-18 14:25:55 +02:00 |
|
Jeroen Ketema
|
c2e2770bbf
|
C++: Simplify type alias class naming
|
2026-05-18 14:22:04 +02:00 |
|
Óscar San José
|
b551e89ea8
|
Merge pull request #21859 from github/release-prep/2.25.5
Release preparation for version 2.25.5
codeql-cli/v2.25.5
|
2026-05-18 14:10:35 +02:00 |
|
github-actions[bot]
|
e38616a2ef
|
Release preparation for version 2.25.5
|
2026-05-18 12:05:32 +00:00 |
|
Jeroen Ketema
|
e55edf2f1f
|
Merge pull request #21853 from jketema/jketema/template-constants
C++: Update test results after extractor changes
|
2026-05-18 13:43:54 +02:00 |
|
Anders Schack-Mulligen
|
cb0fc786c7
|
Ruby: Minor cleanup, Callable is a StmtSequence.
|
2026-05-18 13:05:14 +02:00 |
|
Óscar San José
|
8a199f963d
|
Merge pull request #21692 from github/copilot/update-codeql-query-for-composite-actions
Extend `actions/unpinned-tag` to analyze composite action metadata (`action.yml` / `action.yaml`)
|
2026-05-18 12:17:13 +02:00 |
|
Mathias Vorreiter Pedersen
|
2902a19a50
|
C++: Add more scanf testing.
|
2026-05-18 10:58:50 +01:00 |
|
Mathias Vorreiter Pedersen
|
fcdce550e8
|
Merge pull request #21857 from MathiasVP/fix-cleartext-fp
C++: Fix FP on `cpp/cleartext-transmission`
|
2026-05-18 10:58:13 +01:00 |
|
Jeroen Ketema
|
76f71dd235
|
Merge pull request #21817 from jketema/go-version
Go: Make version parsing robust in the face of custom Go builds
|
2026-05-18 10:45:55 +02:00 |
|
Tom Hvitved
|
7f1bebe8ba
|
Potential fix for pull request finding
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
|
2026-05-17 20:29:19 +02:00 |
|
Jeroen Ketema
|
305a63bc38
|
C++: Update dbscheme stats
|
2026-05-16 16:10:27 +02:00 |
|
Jeroen Ketema
|
963715884e
|
C++: Add change note
|
2026-05-16 11:50:00 +02:00 |
|
Jeroen Ketema
|
b6847974f7
|
C++: Add upgrade and downgrade scripts
|
2026-05-16 09:26:08 +02:00 |
|
Jeroen Ketema
|
336bbc229e
|
C++: Add support for alias templates
Add other missing cases to `isFromTemplateInstantiationRec` and
`isFromUninstantiatedTemplateRec` while here.
|
2026-05-16 09:11:54 +02:00 |
|
Mathias Vorreiter Pedersen
|
8ce601b1d7
|
C++: Add change notes.
|
2026-05-15 21:22:38 +01:00 |
|
Mathias Vorreiter Pedersen
|
4396e66f35
|
C++: Fix FP by providing an implementation of 'hasSocketInput'.
|
2026-05-15 21:12:34 +01:00 |
|
Mathias Vorreiter Pedersen
|
eda33adafd
|
C++: Add FP.
|
2026-05-15 21:07:45 +01:00 |
|
Geoffrey White
|
a4b2c0f6fd
|
Update change notes (Copilot's suggestions).
|
2026-05-15 09:24:29 +01:00 |
|
Kristen Newbury
|
3eaf04ef72
|
Fix expected files for changes to alert messages UntrustedCheckoutCritical and UntrustedCheckoutHigh
|
2026-05-14 15:05:08 -04:00 |
|
Jeroen Ketema
|
d47ee6bed9
|
C++: Update test results after extractor changes
|
2026-05-14 20:22:47 +02:00 |
|
Kristen Newbury
|
914c7e1a7b
|
Improve UntrustedCheckoutX helpfiles
|
2026-05-14 13:34:59 -04:00 |
|
Kristen Newbury
|
29ffd87bf8
|
Add full stop to alert messages in UntrustedCheckoutHigh and UntrustedCheckoutCritical
|
2026-05-14 12:58:20 -04:00 |
|
Kristen Newbury
|
eae9c0ef0e
|
Add one missing changenote actions-queries-untrusted-checkout
|
2026-05-14 12:06:55 -04:00 |
|
Kristen Newbury
|
c36ad7be37
|
Adjust untrusted checkout actions queries
|
2026-05-14 11:59:55 -04:00 |
|
Florin Coada
|
a84332ac15
|
Merge pull request #21727 from github/docs/customizing-library-models-for-rust
docs: Add 'Customizing library models for Rust' documentation
|
2026-05-14 15:04:12 +01:00 |
|
Geoffrey White
|
59dbd68a5e
|
Add change notes.
|
2026-05-14 14:46:05 +01:00 |
|
Tom Hvitved
|
3f7b50ebba
|
Type inference: Unify getABaseTypeMention and conditionSatisfiesConstraint
|
2026-05-13 16:24:36 +02:00 |
|
Taus
|
dd9c066c61
|
unified: Regenerate files
|
2026-05-13 14:24:12 +00:00 |
|
Taus
|
f4f85b58ca
|
unified: Remove some pointless fields
All of these fields have contents that are uniquely determined by the
node they appear on, so they convey no information.
|
2026-05-13 14:22:06 +00:00 |
|