Owen Mansel-Chan
134e30260d
Merge pull request #22119 from owen-mc/java/fix-tainted-path-pattern-sanitization
...
Java: fix `@Pattern` sanitization for `java/path-injection`
2026-07-08 11:37:15 +01:00
github-actions[bot]
bc966f62e2
Add changed framework coverage reports
2026-07-08 00:38:59 +00:00
Owen Mansel-Chan
8363d2d66d
Merge pull request #22132 from joshimar/java/spring-webclient-uri-ssrf-sink
...
Java: Model Spring reactive `WebClient.uri` as a request forgery sink
2026-07-08 00:40:33 +01:00
Luis Azanza
b8f8370c33
Update java/ql/lib/change-notes/2026-06-30-spring-webclient-uri-ssrf.md
...
Update change note to be more technically accurate
Co-authored-by: Owen Mansel-Chan <62447351+owen-mc@users.noreply.github.com >
2026-07-07 16:21:09 -07:00
Luis Azanza
6ff2a4c0d6
Apply suggestion from @owen-mc
...
Removing Apple Inc notice per feedback provided by GitHub
Co-authored-by: Owen Mansel-Chan <62447351+owen-mc@users.noreply.github.com >
2026-07-07 16:10:05 -07:00
Luis Azanza
1db31327a7
Java: Model Spring reactive WebClient.uri as a request forgery sink
2026-07-07 13:30:48 -07:00
Owen Mansel-Chan
a812e4aa99
Refactor creating barriers with annotations
2026-07-07 12:44:19 +01:00
Owen Mansel-Chan
e5bd62dbd3
Add change note
2026-07-03 11:34:11 +01:00
Owen Mansel-Chan
76b4f4f223
Fix @Pattern sanitizer for TaintedPath
2026-07-03 11:34:06 +01:00
Owen Mansel-Chan
077b531e41
Add failing TaintedPath test for @Pattern sanitizer
2026-07-03 11:34:03 +01:00
Owen Mansel-Chan
4aef485d3c
Merge pull request #22106 from github/workflow/coverage/update
...
Update CSV framework coverage reports
2026-07-02 14:08:20 +01:00
Mathias Vorreiter Pedersen
4f4cdf434b
Merge pull request #22061 from MathiasVP/mad-write-through-model
...
Shared: Support flow summaries from `ReturnValue`s
2026-07-02 12:38:44 +01:00
github-actions[bot]
d8b89d2581
Add changed framework coverage reports
2026-07-02 00:54:34 +00:00
Owen Mansel-Chan
cb4a1d0929
Merge pull request #22103 from owen-mc/java/fix-mad-file-names
...
Java: Fix misnamed MaD models files
2026-07-01 14:04:44 +01:00
Jeroen Ketema
d664d17a11
Merge pull request #22087 from jketema/subst
...
Add Windows integration tests showing that `subst` is handled inconsistently
2026-07-01 14:48:22 +02:00
Owen Mansel-Chan
7263c00b00
Fix misnamed MaD models files
2026-07-01 13:13:01 +01:00
Geoffrey White
e9766086cd
Merge pull request #22079 from geoffw0/kotlininline
...
Kotlin: Address inline expectations testFailures.
2026-07-01 12:39:11 +01:00
Jeroen Ketema
d551ab3afb
Fix expected file
2026-07-01 13:24:05 +02:00
Jeroen Ketema
daf97f7139
Add Windows integration tests showing that subst is handled inconsistently
2026-07-01 12:51:05 +02:00
Mathias Vorreiter Pedersen
b7b731bab7
Merge branch 'main' into mad-write-through-model
2026-06-30 15:12:02 +01:00
Geoffrey White
c0871defe9
Merge pull request #22077 from geoffw0/javainline
...
Java: Address testFailures in inline expectations tests
2026-06-30 10:49:24 +01:00
Geoffrey White
8fc2f7c92e
Kotlin: Update .expected to exactly match reality.
2026-06-29 10:57:05 +01:00
Geoffrey White
35cd0f829f
Kotlin: Address inline expectations testFailures.
2026-06-29 09:56:48 +01:00
Mario Campos
da3d0cf977
Merge pull request #22062 from github/mario-campos/mirror-maven-central/gradle
...
Replace `jcenter()` and `mavenCentral()` with Maven Central mirror URL
2026-06-26 11:35:10 -05:00
Geoffrey White
897d16929b
Java: Add missing $ Source annotations.
2026-06-26 16:22:05 +01:00
Geoffrey White
6f997ae15c
Java: Label spurious results.
2026-06-26 16:22:03 +01:00
Geoffrey White
300e48e48e
Java: Move $ Source annotations that were incorrectly placed.
2026-06-26 16:21:49 +01:00
Geoffrey White
f840f6104a
Java: Make some $ Source annotations query specific.
2026-06-26 16:21:46 +01:00
Mathias Vorreiter Pedersen
7861e9e596
Java: Fix a library test.
2026-06-26 14:18:23 +01:00
Mario Campos
1b6ff24642
Fix buildless-fetches.expected for buildless-sibling-projects
2026-06-25 22:57:35 -05:00
Mario Campos
221a54d22e
Add Maven Central mirror settings for Maven test project buildless-sibling-projects
2026-06-25 21:44:20 +00:00
Mario Campos
cc215858e4
Fix expected URL fetches for buildless-sibling-projects
2026-06-25 21:12:33 +00:00
Mario Campos
56a1b12c9e
Delete extra blank line
...
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com >
2026-06-25 15:01:20 -05:00
Mario Campos
688213056c
Replace deprecated jcenter() with Maven Central mirror URL for dependency resolution in Gradle build scripts
2026-06-25 19:02:43 +00:00
Mario Campos
1c37688ec1
Replace mavenCentral() with Maven Central mirror URL for dependency resolution in Gradle build scripts
2026-06-25 19:02:37 +00:00
github-actions[bot]
456e33773b
Post-release preparation for codeql-cli-2.26.0
2026-06-25 16:24:06 +00:00
github-actions[bot]
237c5639e2
Release preparation for version 2.26.0
2026-06-25 15:27:00 +00:00
Jeroen Ketema
969ab78225
Merge pull request #22048 from github/jketema/kotlin1-pytest
...
Kotlin: Update tests to use new `kotlin_2_3_20` fixture
2026-06-25 15:01:33 +02:00
Jeroen Ketema
9b2e6077f1
Kotlin: Address review comments
2026-06-25 12:58:27 +02:00
Mario Campos
3324d07985
Merge pull request #22046 from github/mario-campos/mirror-maven-central/maven
...
Use Maven Central mirror in Java Maven integration tests
2026-06-24 16:42:29 -05:00
Jeroen Ketema
f6b3d1eade
Kotlin: Remove unneeded pytest imports
2026-06-24 23:34:39 +02:00
Jeroen Ketema
402c0f89bc
Kotlin: Update tests to use new kotlin_2_3_20 fixture
2026-06-24 22:50:32 +02:00
Mario Campos
af11f6e618
Use Maven Central mirror in Java Maven integration tests
2026-06-24 17:45:27 +00:00
Jeroen Ketema
b8c78fdcb7
Merge pull request #21970 from github/andersfugmann/kotlin-2.4-v2
...
Kotlin: add Kotlin 2.4.0 support
2026-06-24 16:40:40 +02:00
Mathias Vorreiter Pedersen
9865b66308
Java: Fixes after changes to the flow summary API.
2026-06-23 20:33:17 +01:00
Anders Schack-Mulligen
11725e8921
Java: Accept test changes.
2026-06-23 14:28:44 +02:00
Anders Schack-Mulligen
41297c588c
Cfg: Change AST/CFG for CatchClauses to use a pattern.
2026-06-23 14:28:44 +02:00
Jeroen Ketema
cd23341dab
Merge branch 'main' into andersfugmann/kotlin-2.4-v2
2026-06-23 11:45:17 +02:00
Idriss Riouak
568a147f77
Merge pull request #22007 from github/java-update-ferstl-depgraph-cves
...
Java: update ferstl depgraph cves
2026-06-22 10:08:05 +02:00
Anders Fugmann
0f83586757
Kotlin 2.4.0: Address peer review
...
* Update documentation to only claim support for 2.4.0x
* Python test code; remove newlines between imports.
* Sync comments between kotlin 1.8 and 1.9
* Update code comments to attach where actually relevant,
and improve comments on IrMemberAccessExpression<*>.extensionReceiverParameterIndex()
2026-06-19 13:45:28 +02:00
