Jon Janego
18a2aca42f
Merge pull request #21237 from github/urllib-typo-fix
...
Urllib typo fix
2026-01-29 17:32:12 -06:00
Jon Janego
f14ccd8c81
Fix typo in taint flow model for urllib.parse
2026-01-29 16:21:14 -06:00
Jon Janego
e54d7c7c73
Update CHANGELOG.md
2026-01-29 16:20:25 -06:00
Jon Janego
813d4639ca
Fix typo in taint flow model for urllib.parse
2026-01-29 16:18:21 -06:00
Taus
34800d1519
Merge pull request #20945 from joefarebrother/python-websockets
...
Python: Model remote flow sources for the `websockets` library
2026-01-29 15:47:46 +01:00
Jon Janego
1644376cc9
Merge pull request #21222 from github/codeql-spark-run-21376405640
...
Update changelog documentation site
2026-01-29 08:44:11 -06:00
Mathias Vorreiter Pedersen
1b1c9c680c
Merge pull request #21227 from MathiasVP/postfix-fix
...
C++: Get rid of an ugly workaround in dataflow
2026-01-29 12:25:02 +00:00
Mathias Vorreiter Pedersen
61a53fadc0
C++: Fix spelling.
2026-01-29 11:50:44 +00:00
Owen Mansel-Chan
a35e7b27af
Merge pull request #21226 from owen-mc/java/update-qhelp-unrelease-lock
...
Java: Improve qhelp for `java/unreleased-lock` and add lock type exclusion
2026-01-28 09:46:31 +00:00
Anders Peter Fugmann
f4edff9452
Merge pull request #21216 from github/andersfugmann/kotlin_extractor_load_last
...
Kotlin: Load kotlin extractor last
2026-01-28 09:22:46 +01:00
Mathias Vorreiter Pedersen
4503c625b4
C++: Implement copilot suggestions.
2026-01-27 19:02:28 +00:00
Mathias Vorreiter Pedersen
28fec0c129
C++: Accept test changes.
2026-01-27 18:29:21 +00:00
Mathias Vorreiter Pedersen
445cca1432
C++: Proper SSA support for post-crement reads.
2026-01-27 18:29:12 +00:00
Henry Mercer
497135593c
Merge branch 'main' into codeql-spark-run-21376405640
2026-01-27 09:11:02 -08:00
Henry Mercer
2214a944bb
Merge pull request #21225 from github/rc/3.20
...
Merge `rc/3.20` back to `main`
2026-01-27 07:56:58 -08:00
Owen Mansel-Chan
a0c35516bd
Add change note
2026-01-27 15:48:04 +00:00
Owen Mansel-Chan
42cbe0734e
Specify what lock types are considered in qhelp
2026-01-27 15:39:03 +00:00
Owen Mansel-Chan
516b84b59a
Add test for *Pool exclusion
2026-01-27 15:38:29 +00:00
Owen Mansel-Chan
4f1ad0ff5d
Exclude *Pool classes from LockType
2026-01-27 15:38:06 +00:00
Jon Janego
ccc4d8ae3f
Update docs/codeql/codeql-overview/codeql-changelog/codeql-cli-2.24.0.rst
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2026-01-27 09:18:25 -06:00
Jon Janego
1c5a9053f9
Fix typo in call graph description in change notes
2026-01-27 09:17:40 -06:00
Jon Janego
5a08adc06c
Update docs/codeql/codeql-overview/codeql-changelog/codeql-cli-2.23.1.rst
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2026-01-27 09:11:01 -06:00
Jon Janego
0b8b75ac25
Update codeql-cli-2.23.1.rst
2026-01-27 09:10:37 -06:00
Mads Navntoft
b7125a009e
Merge pull request #21221 from github/navntoft/struts
...
Java: Add support for Struts 7.x package names
2026-01-27 15:53:26 +01:00
Owen Mansel-Chan
97a0b9f0ca
(trivial) Remove double spaces in qhelp
2026-01-27 14:40:23 +00:00
Ian Lynagh
46a5035543
Merge pull request #21200 from github/igfoo/rename-holdsInBase-to-isBase
...
C++: Rename `holdsInBase` to `isBase`
2026-01-27 13:50:04 +00:00
Ian Lynagh
bb71790a53
Merge pull request #21199 from github/igfoo/refactorOverlayFunctionCalls
...
C++ overlay: Simplify QL
2026-01-27 13:03:01 +00:00
Mathias Vorreiter Pedersen
db3f22a2e8
C++: Another small refactor.
2026-01-27 12:46:52 +00:00
Mathias Vorreiter Pedersen
3d445be926
C++: Small refactor.
2026-01-27 12:46:48 +00:00
Mads Navntoft
ede05b54ea
Java: Add change note for Struts 7.x package name support
2026-01-27 13:00:16 +01:00
Mads Navntoft
9a94d0474c
Java: Add support for Struts 7.x package names
...
Updates Struts library to recognize both legacy xwork2 and new struts2
packages:
- StrutsActions.qll: Add org.apache.struts2 alternatives for Action,
Preparable, ActionSupport
- StrutsConventions.qll: Add org.apache.struts2.action.Action
alternative
This maintains backward compatibility for analyzing Struts 2.x-6.x apps
while supporting Struts 7.x which renamed packages from
com.opensymphony.xwork2 to org.apache.struts2.
2026-01-27 12:57:55 +01:00
Mathias Vorreiter Pedersen
9e9d57bac5
Merge pull request #21219 from MathiasVP/force-more-uniquess-in-buffer-overflow
...
C++: Enforce more uniqueness in `Buffer.qll`
2026-01-27 11:00:40 +00:00
Owen Mansel-Chan
8e3c373548
Merge pull request #21223 from github/workflow/coverage/update
...
Update CSV framework coverage reports
2026-01-27 10:35:28 +00:00
github-actions[bot]
f49531b3ca
Add changed framework coverage reports
2026-01-27 00:28:39 +00:00
github-actions[bot]
0f4f0b880a
update codeql documentation
2026-01-26 22:32:02 +00:00
Mathias Vorreiter Pedersen
e0a7889b71
C++: Undo the hack.
2026-01-26 21:28:21 +00:00
Mathias Vorreiter Pedersen
bd09aad7d5
C++: Add tests.
2026-01-26 21:24:22 +00:00
Mathias Vorreiter Pedersen
980c4cf5f4
Update cpp/ql/lib/semmle/code/cpp/commons/Buffer.qll
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2026-01-26 19:12:38 +00:00
Mathias Vorreiter Pedersen
544015d0a6
C++: Add change note.
2026-01-26 19:12:14 +00:00
Tom Hvitved
b974a84bef
Merge pull request #21051 from hvitved/shared/flow-summary-provenance-filtering
...
Shared: Provenance-based filtering of flow summaries
2026-01-26 17:24:34 +01:00
Mathias Vorreiter Pedersen
aed0e688f5
C++: Remove uniqueness since it is enforced earlier now.
2026-01-26 15:01:40 +00:00
Mathias Vorreiter Pedersen
13a5249a9d
C++: Enforce uniqueness in the other branch of 'getSize'.
2026-01-26 15:00:58 +00:00
Mathias Vorreiter Pedersen
91752e5307
C++: Enforce uniqueness in 'getVariableSize'.
2026-01-26 15:00:00 +00:00
Anders Fugmann
73850f1b56
Kotlin: Add changenote
2026-01-26 13:27:34 +01:00
yoff
2bd4ccee45
Merge pull request #21004 from yoff/python/mad-barriers
...
Python: MaD barriers
2026-01-26 13:11:21 +01:00
Tom Hvitved
df09f02981
Shared: Shadow hasManualModel in RelevantSummarizedCallable
2026-01-26 12:40:25 +01:00
Tom Hvitved
732c60c07c
C#: Revert change to getASummarizedCallableTarget
2026-01-26 12:40:24 +01:00
Tom Hvitved
0f6bae0ae1
Add change notes
2026-01-26 12:40:22 +01:00
Tom Hvitved
93dad867cd
JS: Adapt to changes in FlowSummaryImpl
2026-01-26 12:40:21 +01:00
Tom Hvitved
3b1e062985
C++: Adapt to changes in FlowSummaryImpl
2026-01-26 12:40:20 +01:00
