Rasmus Wriedt Larsen
121ca129bc
Update qhelp with https:/example.com handling
2024-06-03 10:17:10 +02:00
Tom Hvitved
58ce3e805e
Merge pull request #16633 from hvitved/dataflow/inline-pred
...
Data flow: Inline `isUnreachableInCall1`
2024-05-31 20:12:14 +02:00
Chuan-kai Lin
8d5bb21643
Merge pull request #16642 from github/post-release-prep/codeql-cli-2.17.4
...
Post-release preparation for codeql-cli-2.17.4
2024-05-31 09:08:03 -07:00
github-actions[bot]
a19149032f
Post-release preparation for codeql-cli-2.17.4
2024-05-31 14:49:11 +00:00
Paolo Tranquilli
58fb0270fb
Merge pull request #16641 from github/redsun82/legacy-integration-test-marker
...
Mark all integration tests as legacy
2024-05-31 16:18:00 +02:00
Paolo Tranquilli
096a31dbef
Mark all integration tests as legacy
...
This is in preparation for the new integration test framework. Tests
marked thus will be run by the current framework and ignored by the new
one.
2024-05-31 16:04:50 +02:00
Chuan-kai Lin
a7bbcf3eb8
Merge pull request #16640 from github/release-prep/2.17.4
...
Release preparation for version 2.17.4
2024-05-31 06:43:37 -07:00
github-actions[bot]
a22e70373a
Release preparation for version 2.17.4
2024-05-31 13:40:51 +00:00
Anders Schack-Mulligen
06ce40c687
Merge pull request #16561 from aschackmull/java/typeflow-effectively-private
...
Java: Improve dispatch through TypeFlow of effectively private calls.
2024-05-31 15:11:18 +02:00
Owen Mansel-Chan
ca2faa7ef0
Merge pull request #16624 from owen-mc/go/append-taint-models
...
Go: Add back taint models for `append` and `copy`
2024-05-31 13:35:14 +01:00
Paolo Tranquilli
01c1acd43f
Merge pull request #16632 from github/redsun82/bazel-fix
...
Bazel: fix non-swift macOS builds
2024-05-31 14:33:55 +02:00
Paolo Tranquilli
25ab1a934d
Merge branch 'main' into redsun82/bazel-fix
2024-05-31 14:03:20 +02:00
Paolo Tranquilli
67e2ea195f
Merge pull request #16634 from github/redsun82/swift-integration-tests
...
Swift: remove integration test running in CI
2024-05-31 13:55:14 +02:00
Cornelius Riemenschneider
f27d48d03d
Merge pull request #16622 from github/criemen/pkg-lib-nolang
...
`pkg.bzl`: Add features to support the nolang dist.
2024-05-31 13:15:23 +02:00
Paolo Tranquilli
959aa3515c
Swift: remove integration test running in CI
...
They are being triggered by QLucie now, so there's no need to also
trigger them in the `codeql` specific CI.
2024-05-31 12:59:38 +02:00
Tom Hvitved
be4fce26c0
Merge pull request #16631 from hvitved/tree-sitter/multi-file-lists
...
Tree-sitter: Allow for multiple file lists in simple extractor
2024-05-31 12:47:11 +02:00
Paolo Tranquilli
bfc37fddff
Bazel: move --build_tests_only from swift action to .bazelrc
2024-05-31 12:35:52 +02:00
Cornelius Riemenschneider
14988002fa
Address review.
2024-05-31 12:35:03 +02:00
Tom Hvitved
42d87f6d19
Data flow: Inline isUnreachableInCall1
2024-05-31 12:25:11 +02:00
Paolo Tranquilli
3f19974bb6
Bazel: fix transition on non-macOS
2024-05-31 12:14:13 +02:00
Paolo Tranquilli
b3e29bd8b5
Bazel: add --build_tests_only in swift CI
2024-05-31 12:13:26 +02:00
Paolo Tranquilli
07f4288e1f
Fix zipmerge build and test
2024-05-31 12:12:58 +02:00
Paolo Tranquilli
8e26f64f89
Bazel: fix non-swift macOS builds
...
This is meant to be cleaned up in a later PR with respect to the TODOs.
2024-05-31 11:49:36 +02:00
Tom Hvitved
d6a3765597
Tree-sitter: Allow for multiple file lists in simple extractor
2024-05-31 11:15:21 +02:00
Tony Torralba
2d3d49f957
Merge pull request #16628 from mbaluda/main
...
Disable csrf for ServerHttpSecurity
2024-05-31 10:31:28 +02:00
Mauro Baluda
48fc44baff
Add release notes
2024-05-30 23:21:12 +02:00
Mauro Baluda
bbe888c2b3
Update SpringCsrfProtection.qll
2024-05-30 23:13:08 +02:00
Mauro Baluda
e2479a7ce2
Disable csrf for ServerHttpSecurity
2024-05-30 23:08:57 +02:00
Owen Mansel-Chan
d112073a13
Edit change note
2024-05-30 21:04:05 +01:00
Owen Mansel-Chan
ffc25add70
Accept test changes
2024-05-30 21:01:06 +01:00
Owen Mansel-Chan
a5c392ed4b
Add back taint models for append and copy
...
This is needed when they are used with string arguments.
2024-05-30 21:01:03 +01:00
Chuan-kai Lin
0369f8f5df
Merge pull request #16625 from github/revert-16605-release-prep/2.17.4
...
Revert "Release preparation for version 2.17.4"
2024-05-30 10:08:31 -07:00
Chuan-kai Lin
b41835a7d9
Revert "Release preparation for version 2.17.4"
2024-05-30 09:25:15 -07:00
Cornelius Riemenschneider
e43b773d7c
Fix comment to indicate the correct order in the zip dict.
2024-05-30 17:58:22 +02:00
Cornelius Riemenschneider
9f3310d3d2
pkg.bzl: Add features to support the nolang dist.
...
In order to build the language-independent parts of our dist with `pkg.bzl`,
we need two override features:
* A way to set the prefix in the zip files to the empty string, so that our top-level files
stay top-level.
* A way to put `codeql.exe` into the arch-specific zip, despite it not being under `CODEQL_PLATFORM`.
This PR implements both.
2024-05-30 13:03:57 +02:00
Owen Mansel-Chan
61593aed7d
Merge pull request #16617 from owen-mc/go/side-effects-on-global-variables
...
Go: Add tests (mostly failing) for writes to global variables
2024-05-30 08:02:45 +01:00
Cornelius Riemenschneider
2c4a216dd9
Merge pull request #16616 from github/redsun82/fix-pkg
...
Reinstate bazel packaging library with a backward compatibility fix
2024-05-29 23:02:30 +02:00
Owen Mansel-Chan
7ff1eabfc3
Add tests (mostly failing) for writes to global variables
...
This was based on the equivalent for java:
https://github.com/github/codeql/pull/16500
2024-05-29 16:07:16 +01:00
Paolo Tranquilli
655f079329
Swift: fix legacy extractor-pack-arch target
2024-05-29 16:17:59 +02:00
Paolo Tranquilli
2606d3f6d1
Reapply "Bazel: add codeql specific packaging library"
...
This reverts commit 31d6b9be4d
2024-05-29 15:46:29 +02:00
Paolo Tranquilli
8509bcae58
Merge pull request #16615 from github/revert-16432-redsun82/pkg
...
Revert "Bazel: add codeql specific packaging library"
2024-05-29 15:39:23 +02:00
Paolo Tranquilli
31d6b9be4d
Revert "Bazel: add codeql specific packaging library"
2024-05-29 15:27:10 +02:00
Paolo Tranquilli
3b246b2422
Merge pull request #16432 from github/redsun82/pkg
...
Bazel: add codeql specific packaging library
2024-05-29 12:58:47 +02:00
Paolo Tranquilli
1e6820b6ed
Merge branch 'main' into redsun82/pkg
2024-05-29 12:02:31 +02:00
Paolo Tranquilli
336ec089cc
Bazel: use extend(...) instead of += list(...)
2024-05-29 12:02:02 +02:00
Paolo Tranquilli
e8061ecd38
Bazel: fix _zipmerge rule
2024-05-29 11:59:18 +02:00
Tom Hvitved
775625968a
Merge pull request #16602 from hvitved/dataflow/fix-bad-join
...
Data flow: Fix bad join
2024-05-29 09:53:56 +02:00
Paolo Tranquilli
5672ddf8f3
Fix bazel formatting
2024-05-29 09:53:31 +02:00
Anders Schack-Mulligen
2f95851537
Merge pull request #16603 from aschackmull/dataflow/location
...
Dataflow/Go: Add getLocation to DataFlowCall and DataFlowCallable for easier debugging.
2024-05-29 08:58:22 +02:00
Paolo Tranquilli
491e3a44be
Merge branch 'main' into redsun82/pkg
2024-05-29 08:55:48 +02:00
