hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-16 08:43:11 +01:00
Code Issues Packages Projects Releases Wiki Activity
84,768 Commits 1,670 Branches 157 Tags
1142f4a54aa06cce1193c418dccabbf10775c4c3
Commit Graph

84768 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Anders Schack-Mulligen
1142f4a54a C#: Connect shared Guards to SSA BarrierGuards. 2025-12-11 15:41:47 +01:00
Jeroen Ketema
004dfbdf24 Merge pull request #21005 from jketema/swift-filter-arg 
Swift: Update tracer configuration
 2025-12-11 12:40:25 +01:00
Michael Nebel
c79cdea690 Merge pull request #20898 from michaelnebel/csharp/dotnet10extractor 
C#: Use .NET 10 for building the extractor and running tests.
 2025-12-11 12:05:35 +01:00
Tom Hvitved
3ab0ade9dc Merge pull request #21010 from hvitved/rust/type-inference-fix-blowup 
Rust: Strengthen `isNotInstantiationOf` uses
 2025-12-11 12:04:30 +01:00
Michael Nebel
c69bbce176 C#: Add change-note. 2025-12-11 11:34:58 +01:00
Michael Nebel
3bb12f6236 C#: Cleanup dependencies. 2025-12-11 11:34:56 +01:00
Michael Nebel
af6809e93e C#: Update integration test expected files. 2025-12-11 11:34:55 +01:00
Michael Nebel
2d4127fdb7 C#: Partially update test expected files by search and replace. 2025-12-11 11:34:53 +01:00
Michael Nebel
16bfcc3882 C#: Update language test expected output files to .NET 10. 2025-12-11 11:34:52 +01:00
Michael Nebel
4c3176ef1a C#: Update integration tests to target and request .NET 10. 2025-12-11 11:34:50 +01:00
Michael Nebel
66aaa62ad9 C#: Manually update the existing stubs to target .NET 10. 2025-12-11 11:34:46 +01:00
Michael Nebel
ff3d2d5b8d C#: Update stub generator script to target .NET 10. 2025-12-11 11:34:39 +01:00
Michael Nebel
9e395936dc C#: Update extractor to target .NET 10. 2025-12-11 11:34:38 +01:00
Michael Nebel
682195bd57 C#: Update workflows. 2025-12-11 11:34:36 +01:00
Michael Nebel
cf43c6170a C#: Update Paket version and dependencies. 2025-12-11 11:34:34 +01:00
Michael Nebel
3c0e3c4336 C#: Remove custom rules_dotnet 0.19.2. 2025-12-11 11:34:33 +01:00
Michael Nebel
aa964362ef C#: Update rules_dotnet to 0.21.5. 2025-12-11 11:34:28 +01:00
Michael Nebel
577a2e1974 C#: Copy the 0.19.2 custom rules_dotnet. 2025-12-11 11:34:21 +01:00
Tom Hvitved
d5a95a8099 Rust: Strengthen isNotInstantiationOf uses 2025-12-10 20:48:21 +01:00
Tom Hvitved
f30a3b3712 Rust: Add type inference blowup test 2025-12-10 20:48:18 +01:00
Anders Schack-Mulligen
000f2c345e Merge pull request #21001 from aschackmull/guards/generalise-validationwrapper 
Guards: Generalise ValidationWrapper to support GuardValue-based BarrierGuards
 2025-12-10 15:52:53 +01:00
Simon Friis Vindum
cd721b85e9 Merge pull request #20941 from paldepind/rust/invalid-pointer-barriers 
Rust: Reduce the number of sinks in `DereferenceSink`
 2025-12-10 14:22:05 +01:00
Anders Schack-Mulligen
eaa96864f7 Java: Extend test to cover assertion-like barrier guards. 2025-12-10 12:23:52 +01:00
Anders Schack-Mulligen
9cd2247b91 Java: expose support for more general BarrierGuards. 2025-12-10 12:23:52 +01:00
Anders Schack-Mulligen
09058e48aa Guards: Rename -WithState to Parameterized-. 2025-12-10 12:23:51 +01:00
Anders Schack-Mulligen
ebb989962c Guards: Generalise ValidationWrapper to support GuardValue-based BarrierGuards. 2025-12-10 12:23:51 +01:00
Simon Friis Vindum
c5a44cf8ff Rust: Accept changes to expected files 2025-12-10 11:35:32 +01:00
Geoffrey White
506a1ea0b8 Rust: Add test case for rust/access-after-lifetime-ended involving an invalidated reference. 2025-12-10 11:35:31 +01:00
Simon Friis Vindum
ade7815125 Rust: Add change note 2025-12-10 11:35:29 +01:00
Simon Friis Vindum
7d1acbcb87 Rust: Restrict the scope of DereferenceSink to dereferences of raw pointers 2025-12-10 11:35:28 +01:00
Simon Friis Vindum
4a1abc7beb Merge pull request #21007 from hvitved/rust/update-expected 
Rust: Update expected test output
 2025-12-10 11:19:37 +01:00
Tom Hvitved
30b903604d Rust: Update expected test output 2025-12-10 11:02:04 +01:00
Jeroen Ketema
3cabcfef75 Swift: Skip -scan-dependencies compiler calls 
These do not produce any useful data and just crash our frontend.
 2025-12-10 10:11:41 +01:00
Jeroen Ketema
e9aa6ddf53 Swift: Strip more unsupported arguments 
We had customer reports where these occur in practise, although we have not
observed these ourselves in frontend calls.
 2025-12-10 10:08:21 +01:00
Tom Hvitved
fe18e0e414 Merge pull request #20997 from paldepind/rust/fix-expected 
Rust: Accept changes to expected files
 2025-12-09 14:25:36 +01:00
Tom Hvitved
a5f513f178 Merge pull request #20954 from hvitved/rust/stats-more-calls 
Rust: Include more calls in DB quality metrics
 2025-12-09 14:14:07 +01:00
Simon Friis Vindum
53ad3282c3 Rust: Accept changes to expected files 2025-12-09 14:01:31 +01:00
Owen Mansel-Chan
cf19586516 Merge pull request #20993 from github/dependabot/go_modules/go/extractor/extractor-dependencies-955632e86c 
Bump the extractor-dependencies group in /go/extractor with 2 updates
 2025-12-09 09:36:16 +00:00
Anders Schack-Mulligen
139dc0acaf Merge pull request #20922 from aschackmull/csharp/object-initializer 
C#: Replace initializer splitting with an ObjectInitMethod.
 2025-12-09 10:35:02 +01:00
yoff
5c6d83ed65 Merge pull request #20877 from joefarebrother/python-tornado-websocket 
Python: Add models for websocket handlers for Tornado
 2025-12-09 10:08:59 +01:00
Michael Nebel
8ecae77887 Merge pull request #20991 from github/dependabot/nuget/csharp/ql/integration-tests/posix/standalone_dependencies_no_framework/nuget-335537b6a2 
Bump the nuget group with 1 update
 2025-12-09 10:01:15 +01:00
Tom Hvitved
e054741061 Update expected test output 2025-12-09 09:13:26 +01:00
Tom Hvitved
31b184a404 Rust: Exclude deref expressions on raw pointers from call resolution stats 2025-12-09 08:54:51 +01:00
dependabot[bot]
9eb1eb8f0d Bump the extractor-dependencies group in /go/extractor with 2 updates 
Bumps the extractor-dependencies group in /go/extractor with 2 updates: [golang.org/x/mod](https://github.com/golang/mod) and [golang.org/x/tools](https://github.com/golang/tools).


Updates `golang.org/x/mod` from 0.30.0 to 0.31.0
- [Commits](https://github.com/golang/mod/compare/v0.30.0...v0.31.0)

Updates `golang.org/x/tools` from 0.39.0 to 0.40.0
- [Release notes](https://github.com/golang/tools/releases)
- [Commits](https://github.com/golang/tools/compare/v0.39.0...v0.40.0)

---
updated-dependencies:
- dependency-name: golang.org/x/mod
  dependency-version: 0.31.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: extractor-dependencies
- dependency-name: golang.org/x/tools
  dependency-version: 0.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: extractor-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-12-09 03:07:27 +00:00
Owen Mansel-Chan
e7147244e8 Merge pull request #20992 from myvyang/main 
Change MethodAccess to MethodCall in query example.
 2025-12-09 01:22:55 +00:00
Owen Mansel-Chan
d15342db1f Fix table padding 2025-12-09 01:12:53 +00:00
i
134312173f MethodAccess has been deprecated, Change MethodAccess to MethodCall in query example. 2025-12-09 08:41:01 +08:00
dependabot[bot]
c8992fc834 Bump the nuget group with 1 update 
Bumps Newtonsoft.Json from 6.0.4 to 13.0.1

---
updated-dependencies:
- dependency-name: Newtonsoft.Json
  dependency-version: 13.0.1
  dependency-type: direct:production
  dependency-group: nuget
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-12-09 00:33:13 +00:00
Chris Smowton
359a28e409 Merge pull request #20984 from github/rc/3.20 
Java: Add change note for Maven compiler flags
 2025-12-08 14:24:58 +00:00
Tom Hvitved
0280771c51 Merge pull request #20953 from hvitved/rust/data-flow-call-models 
Rust: Model more data flow constructs as calls using MaD
 2025-12-08 15:22:02 +01:00