Asger F
bb15f30ef6
Merge pull request #19192 from asgerf/js/name-resolution-independent-fixes
...
JS: Some preliminary fixes from name resolution branch
2025-04-03 09:36:02 +02:00
Tom Hvitved
65a11984bd
Ruby: Synthesize implicit super arguments
2025-04-03 09:13:06 +02:00
Tom Hvitved
c10b5801b1
Ruby: Add argument-less super call tests
2025-04-03 09:12:23 +02:00
Simon Friis Vindum
52660fa57d
Merge pull request #19149 from paldepind/rust-ti-self-param
...
Rust: Make trait a base type mention of the self type parameter
2025-04-03 08:44:09 +02:00
Jami Cogswell
0380279c39
Java: update qhelp implementation notes for more clarity
2025-04-02 19:43:33 -04:00
Jami Cogswell
05d7b9a19a
Java: add reliability tag
2025-04-02 19:11:26 -04:00
Aditya Sharad
927b26b869
Merge pull request #19190 from adityasharad/actions/initial-docs
...
Docs: Add GitHub Actions as a supported language
2025-04-03 04:39:23 +05:30
Jami Cogswell
6ade97892f
Java: update maintainability tag to reliability instead
2025-04-02 19:06:02 -04:00
Aditya Sharad
4d6afe7d29
Docs: Address comments on Actions docs
2025-04-02 16:00:55 -07:00
Aditya Sharad
8f6dc1cdfc
Docs: Fix more short underlines
2025-04-02 15:56:42 -07:00
Aditya Sharad
67dd301a37
Docs: Add language guide structure for Actions
2025-04-02 15:25:27 -07:00
Jonas Jensen
118abd40c9
Java: add exclude-from-incremental tag to telemetry queries
...
In the future, this tag should signal to the action that the queries
should be excluded from incremental scans because they are too slow
and/or produce too many results.
The three queries tagged here rely on global data-flow analysis to find
all XSS sinks. All other metric and diagnostic queries are fast enough
for incrementality.
2025-04-02 14:19:45 -07:00
Nicolas Will
62fa136506
Merge pull request #19201 from nicolaswill/patch-1
...
Add @ps-codeql to CODEOWNERS for experimental cryptography
2025-04-02 22:15:03 +02:00
Aditya Sharad
d31896bf52
Merge pull request #19166 from yoff/actions/add-actions-permissions-MaD-model
...
actions: add MaD model for permissions needed by actions
2025-04-03 01:24:04 +05:30
Aditya Sharad
4207322719
Docs: Make Actions underlines the right length
...
Fixes warnings in Sphinx build.
2025-04-02 11:39:01 -07:00
Jon Janego
d5130127b1
Merge pull request #19189 from github/jonjanego/useless-expression-tags
...
Update tags for js/useless-expression
2025-04-02 13:24:56 -05:00
Tom Hvitved
a01b211f79
Merge pull request #19185 from hvitved/rust/ssa-capture-psudeo-read-dominate
...
Rust: Fix `capturedCallRead`
2025-04-02 19:16:55 +02:00
Jon Janego
e0d9dad9c2
Merge branch 'main' into jonjanego/useless-expression-tags
2025-04-02 10:51:52 -05:00
Jon Janego
d8ef4fc25d
Update javascript/ql/src/Expressions/ExprHasNoEffect.ql
...
Co-authored-by: Napalys Klicius <napalys@github.com >
2025-04-02 10:22:27 -05:00
Idriss Riouak
145c141e63
Merge pull request #19202 from github/idrissrio/trailing-return
...
C++: update expected test results after extractor changes
2025-04-02 17:01:14 +02:00
Óscar San José
f4515515fe
Merge pull request #19204 from github/oscarsj/migrate-builders-macos-15
...
Run pytest server with `sudo` and higher `nice` value
2025-04-02 16:59:11 +02:00
Chris Smowton
e865d07a70
Merge pull request #19187 from smowton/smowton/feature/jakarta-persistence
...
Java: generalise `javax.persistence` models to also recognise `jakarta.persistence`.
2025-04-02 15:56:29 +01:00
Óscar San José
18c901bee4
Merge branch 'main' into oscarsj/migrate-builders-macos-15
2025-04-02 16:11:58 +02:00
Michael Nebel
16142a287a
C#: Add NoDisposeCallOnLocalIDisposableBad file and update test expected output.
2025-04-02 15:43:52 +02:00
Simon Friis Vindum
001735bfb8
Rust: Take internal IDs of a smaller class
2025-04-02 15:39:58 +02:00
Michael Nebel
2193bece90
C#: Update test expected output.
2025-04-02 15:30:48 +02:00
idrissrio
14a84c3209
C++: update expected test results after extractor changes
2025-04-02 15:20:06 +02:00
Owen Mansel-Chan
ecd09edf64
Add stubs for gogf/gf and uptrace/bun
2025-04-02 14:17:40 +01:00
Owen Mansel-Chan
1687042c3b
Add Bun models and tests
2025-04-02 14:17:39 +01:00
Owen Mansel-Chan
ddb7da4c13
Add gogf models and tests
2025-04-02 14:17:37 +01:00
Ed Minnix
9cf4117120
Add tests for gogf/gf/database/gdb
2025-04-02 14:17:35 +01:00
Ed Minnix
db65a6ff85
[gogf] Model github.com/gogf/gf/database/gdb
...
Co-authored-by: Owen Mansel-Chan <62447351+owen-mc@users.noreply.github.com >
2025-04-02 14:17:34 +01:00
Ed Minnix
c54f0d82e2
[bun] Model github.com/uptrace/bun
2025-04-02 14:17:32 +01:00
Owen Mansel-Chan
89e853b4be
Don't use non-existent dependency
...
This makes some go tooling, like `go mod tidy`, not work.
2025-04-02 14:17:31 +01:00
Owen Mansel-Chan
88b061e27e
Add change note
2025-04-02 14:17:30 +01:00
Michael Nebel
93d0f364d6
C#: Add ConstantConditionBad file.
2025-04-02 15:00:05 +02:00
Nicolas Will
10564fac4d
Add @ps-codeql to CODEOWNERS for experimental cryptography
...
This pull request adds @github/ps-codeql as a code owner of `**/experimental/quantum/` to support the development of post-quantum cryptography-related libraries and queries.
We’ll be committing stable but experimental work to these directories as it becomes ready for public use, with a near-term goal of moving it out of experimental.
To get started, we’d also need write access to `github/codeql`.
cc @adityasharad @lcartey
2025-04-02 14:20:24 +02:00
Asger F
6c3bc941c5
Merge branch 'main' into js/name-resolution-independent-fixes
2025-04-02 14:15:44 +02:00
Asger F
2c40359143
JS: Change note
2025-04-02 14:12:07 +02:00
Asger F
30a9cd7c8a
JS: Include document as a DOM value
2025-04-02 14:09:52 +02:00
Michael Nebel
6820cbabc8
C#: Accept file sync mismatch for C# testfiles if they are identical modulo comments.
2025-04-02 14:01:00 +02:00
Asger F
9ebaac82cf
JS: Add tests for Response object sink
2025-04-02 13:47:18 +02:00
Geoffrey White
fbde235253
Rust: Rename the test as well.
2025-04-02 12:16:10 +01:00
Geoffrey White
02245af3ca
Rust: Rename the query file.
2025-04-02 12:11:55 +01:00
Geoffrey White
9fc0ee185b
Rust: Change the query ID to rust/summary/summary-statistics-reduced.
2025-04-02 12:03:20 +01:00
Taus
f461763938
Merge pull request #19186 from github/tausbn/actions-fix-gettargetpath-performance
...
Actions: Fix bad performance in `getTargetPath`
2025-04-02 12:53:56 +02:00
Napalys
390d9ffe66
Added change note
2025-04-02 12:50:53 +02:00
Napalys
b16b407f89
Add rimraf model and update tests for path injection vulnerabilities
2025-04-02 12:49:48 +02:00
Napalys
14999c19da
Added test cases for rimraf library.
2025-04-02 12:46:48 +02:00
Tom Hvitved
8663f3b8b2
Rust: Add another disjunct to postWithInFlowExclude
2025-04-02 12:32:28 +02:00
