hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-07-29 06:46:46 +02:00
Code Issues Packages Projects Releases Wiki Activity
88,610 Commits 1,815 Branches 171 Tags
16ad0a3c31cfb301b75bf281fd6fc7d396e14e87
Commit Graph

88610 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Mathias Vorreiter Pedersen
16ad0a3c31 C++: Add flow sources for 'winreg.h'. 2026-07-28 12:20:14 +01:00
Mathias Vorreiter Pedersen
b5cb703f2e C++: Add tests with missing flow sources. 2026-07-28 12:19:15 +01:00
Michael B. Gale
07514086a1 Merge pull request #22204 from github/dependabot/bazel/rules_nodejs-6.7.5 
build(deps): bump rules_nodejs from 6.7.3 to 6.7.5
 2026-07-27 16:55:19 +01:00
Asger F
9c5cd36ab7 Merge pull request #22222 from cysp/fastify-scoped-rate-limit 
JS: Recognize @fastify/rate-limit as a rate limiter
 2026-07-27 13:02:25 +02:00
Kristen Newbury
d1fed84daf Merge pull request #22154 from knewbury01/knewbury01/adjust-environmentcheck 
Actions Query Fix: UntrustedCheckoutTOCTOU[High|Critical] ControlCheck model fix
 2026-07-23 09:30:34 -04:00
dependabot[bot]
8facacd6a1 build(deps): bump rules_nodejs from 6.7.3 to 6.7.5 
Bumps [rules_nodejs](https://github.com/bazel-contrib/rules_nodejs) from 6.7.3 to 6.7.5.
- [Release notes](https://github.com/bazel-contrib/rules_nodejs/releases)
- [Changelog](https://github.com/bazel-contrib/rules_nodejs/blob/main/CHANGELOG.md)
- [Commits](https://github.com/bazel-contrib/rules_nodejs/compare/v6.7.3...v6.7.5)

---
updated-dependencies:
- dependency-name: rules_nodejs
  dependency-version: 6.7.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-23 12:14:51 +00:00
Taus
a39eab3e8c Merge pull request #22195 from github/tausbn/swift-syntax-rs 
unified: Add Swift parser based on `swift-syntax`
 2026-07-23 14:11:54 +02:00
Óscar San José
9836c1de57 Merge pull request #22152 from github/post-release-prep/codeql-cli-2.26.1 
Post-release preparation for codeql-cli-2.26.1
 2026-07-23 12:55:50 +02:00
Scott Talbot
c6448548a3 JS: Recognize @fastify/rate-limit as a rate limiter 2026-07-22 23:47:09 +10:00
Jeroen Ketema
38c9c84dcb Use 22.04 Swift toolchain 2026-07-21 11:08:46 +02:00
Jeroen Ketema
cf8eeb8e44 Only depend on the runtime libraries from the Swift toolchain 2026-07-21 11:01:37 +02:00
Jeroen Ketema
bf575868bc Simplify Xcode transition per review comments 2026-07-21 10:53:03 +02:00
Jeroen Ketema
0a1139c230 Fix Bazel formatting 2026-07-21 10:49:18 +02:00
Kristen Newbury
c5844ad6bd Merge branch 'main' into knewbury01/adjust-environmentcheck 2026-07-20 16:20:15 -04:00
Jeroen Ketema
5690ec71b0 Merge pull request #22111 from jketema/jketema/swift-more-autobuild 
Swift: Turn off caching and integrated driver in autobuild
 2026-07-20 13:54:46 +02:00
Taus
f384e291d7 unified: Clean up build 
Co-authored-by: Jeroen Ketema <93738568+jketema@users.noreply.github.com>
 2026-07-20 13:10:02 +02:00
Jeroen Ketema
14450f5bf3 Merge pull request #22211 from jketema/jketema/qldoc 
Shared: Add missing QLdoc
 2026-07-17 19:13:52 +02:00
Jeroen Ketema
a3eee6204b Shared: Add missing QLdoc 2026-07-17 17:22:11 +02:00
Óscar San José
87835f7f3d Merge pull request #22207 from github/codeql-spark-run-29493713448 
Update changelog documentation site for codeql-cli-2.26.1
 2026-07-17 12:10:28 +02:00
github-actions[bot]
e9e360ae44 update codeql documentation 2026-07-16 11:18:13 +00:00
Michael Nebel
2eb0158b09 Merge pull request #22193 from michaelnebel/csharp/diableuselessassignment 
C#: Remove the query `cs/useless-assignment-to-local` from the `code-quality` suite.
 2026-07-16 08:07:29 +02:00
Taus
da1bbb7fac Bazel: regenerate vendored cargo dependencies 
Registers the `unified/swift-syntax-rs` workspace member (added in
"unified:
Add swift-syntax-rs") in the tree-sitter extractors crate universe. It
has no
external Rust dependencies, so its dependency entries are empty.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
 2026-07-15 13:15:06 +00:00
Taus
7474a33132 unified: Hardcode swift_version 
It seems that using swift_version_file has some issues when `codeql` is
consumed as a dependency module. I'm hoping hardcoding the version
instead will fix this, but ideally we should find a more robust
solution.
 2026-07-15 12:47:26 +00:00
Taus
205c9a9346 swift-syntax-rs: Fix bazel formatting 
aCo-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
 2026-07-15 12:20:24 +00:00
Taus
46d6a118f4 yeast: Clarify Ast::with_schema registration doc 
The doc claimed the schema passed to `Ast::with_schema` must already
have
every node kind and field name registered, contradicting the
registration
methods just below and the swift-syntax adapter, which starts from
`Schema::new()` and registers names on demand during construction.
Document
that up-front registration is optional.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
 2026-07-15 12:15:14 +00:00
Taus
3eb353ecf7 swift-syntax-rs: Address PR review feedback 
- BUILD.bazel: require x86_64 on the Linux branch of the compatibility
  select. The only registered standalone Linux Swift toolchain is
  x86_64-only, so without the CPU constraint Linux/aarch64 targets
stayed
  "compatible" and then failed toolchain resolution instead of being
  skipped cleanly.
- build.rs: emitting `rerun-if-changed` disables Cargo's default
  whole-package scan, so list every input to `swift build` — the package
  manifests, `Package.resolved`, `.swift-version`, and the whole Sources
  tree — so stale shim/toolchain output can't linger. (`.build/` is left
  unwatched, as it is this build's own output.)
- src/lib.rs: a null result from the shim is not a parse failure —
  SwiftParser recovers from invalid syntax and always yields a tree — so
it
  means the shim failed to serialize/allocate the JSON. Fix the error
  message and the variant doc accordingly.
- README.md: `.swift-version` is not honored by the macOS Bazel build
  (which uses the host Xcode toolchain); document that it pins the Linux
  and local builds only.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
 2026-07-15 12:14:56 +00:00
Jeroen Ketema
64df10409a Merge pull request #22191 from jketema/jketema/swift-6.3.3 
Swift: Update to Swift 6.3.3
 2026-07-15 14:09:47 +02:00
Jeroen Ketema
a701922dbd Swift: Update to Swift 6.3.3 2026-07-15 13:28:15 +02:00
copilot-swe-agent[bot]
1577d82ebd Upgrade swift-syntax-rs to swift-syntax 603.0.2 / Swift 6.3.2 2026-07-15 12:23:18 +02:00
Jeroen Ketema
303f81ee14 Merge pull request #22194 from github/jketema/kotlin-2.4.10 
Kotlin: Support Kotlin 2.4.10
 2026-07-15 11:46:21 +02:00
Michael Nebel
2c161e6b8f Merge pull request #22180 from michaelnebel/csharp/rawurl 
C#: Remove the RawUrl sanitizer.
 2026-07-15 11:38:28 +02:00
Jeroen Ketema
574ef4d1ac Kotlin: Support Kotlin 2.4.10 2026-07-15 10:17:58 +02:00
Michael Nebel
cb3f8a8394 C#: Add change-note. 2026-07-15 09:16:01 +02:00
Michael Nebel
2395053ed6 C#: Update integration test expected output. 2026-07-15 09:12:52 +02:00
Michael Nebel
b15c243eca C#: Exclude cs/useless-assignment-to-local from the code-quality suite. 2026-07-15 09:12:49 +02:00
copilot-swe-agent[bot]
3e2daf2258 Support building swift-syntax-rs on macOS 2026-07-14 16:28:13 +02:00
Owen Mansel-Chan
05734dcc38 Merge pull request #22175 from owen-mc/java/fix-path-sanitizer 
Java: Fix `File.getName()` path sanitizer
 2026-07-14 13:12:56 +01:00
Jeroen Ketema
8b477059fe Merge pull request #22178 from jketema/jketema/go-recv 
Go: Track whether a type parameter type was declared as part of a receiver
 2026-07-14 10:49:52 +02:00
Jeroen Ketema
09da46d8bd Go: Address review comments 2026-07-14 10:23:43 +02:00
Owen Mansel-Chan
2d0095826b Address review comment 2026-07-13 19:40:31 +01:00
Michael Nebel
42843f155e Merge pull request #22159 from aschackmull/java/join-order-effnonvirt 
Java: Improve join order.
 2026-07-13 16:45:54 +02:00
Jeroen Ketema
2656b5d87d Merge pull request #22179 from jketema/jketema.new-free 
C++: Update the CWE tag of `cpp/new-free-mismatch`
 2026-07-13 16:25:58 +02:00
Michael Nebel
ae06b778e5 C#: Add change-note. 2026-07-13 15:29:18 +02:00
Michael Nebel
03e44f548f C#: Update test and expected output. 2026-07-13 15:19:04 +02:00
Michael Nebel
a8885aeebd C#: Remove the HttpRequest.RawUrl barrier model. 2026-07-13 15:18:38 +02:00
Jeroen Ketema
b3c16b48c2 Merge pull request #21516 from github/dependabot/bazel/nlohmann_json-3.12.0.bcr.1 
Bump nlohmann_json from 3.11.3 to 3.12.0.bcr.1
 2026-07-13 14:25:20 +02:00
Jeroen Ketema
5caa29a465 Merge branch 'main' into dependabot/bazel/nlohmann_json-3.12.0.bcr.1 2026-07-13 13:40:25 +02:00
Jeroen Ketema
e0f0987b81 Go: Make isFromReceiver and actual predicate 2026-07-13 13:24:23 +02:00
Jeroen Ketema
fe0d1af079 Merge pull request #22177 from github/workflow/go-version-update 
Go: Update to 1.26.5
 2026-07-13 13:21:01 +02:00
Jeroen Ketema
9efcc49af7 C++: Update the CWE tag of cpp/new-free-mismatch 2026-07-13 13:06:15 +02:00