Chuan-kai Lin
54ac18092d
Merge pull request #17040 from github/release-prep/2.18.1
...
Release preparation for version 2.18.1
2024-07-22 14:36:26 -07:00
Chuan-kai Lin
a5fe3f4d9c
Minor changelog improvements
2024-07-22 14:34:56 -07:00
github-actions[bot]
368bcb684a
Release preparation for version 2.18.1
2024-07-22 21:30:50 +00:00
Chuan-kai Lin
09f5e19c71
Merge pull request #17039 from github/revert-17032-release-prep/2.18.1
...
Revert "Release preparation for version 2.18.1"
2024-07-22 13:51:37 -07:00
Chuan-kai Lin
23320b6e5e
Revert "Release preparation for version 2.18.1"
2024-07-22 13:22:49 -07:00
Chuan-kai Lin
81ab2025a1
Merge pull request #17032 from github/release-prep/2.18.1
...
Release preparation for version 2.18.1
2024-07-22 09:46:06 -07:00
Chuan-kai Lin
cda4339056
Minor changelog improvements
2024-07-22 09:42:31 -07:00
github-actions[bot]
55935fc123
Release preparation for version 2.18.1
2024-07-22 14:56:15 +00:00
Owen Mansel-Chan
38aac1f444
Merge pull request #17024 from github/workflow/coverage/update
...
Update CSV framework coverage reports
2024-07-20 21:15:45 +01:00
github-actions[bot]
f83b70dbc2
Add changed framework coverage reports
2024-07-20 00:17:36 +00:00
Geoffrey White
183b3fe6b0
Merge pull request #16570 from geoffw0/swiftssn
...
Swift: Use shared library for sensitive private information heuristics
2024-07-19 16:06:47 +01:00
Geoffrey White
1ca0de9067
Swift: Autoformat.
2024-07-19 13:55:33 +01:00
Geoffrey White
68a21663d9
Merge branch 'main' into swiftssn
2024-07-19 13:49:40 +01:00
Cornelius Riemenschneider
a63e70d173
Merge pull request #17015 from github/criemen/pytest-js
...
Integration tests: port to pytest.
2024-07-19 11:33:55 +02:00
Owen Mansel-Chan
24261b29d5
Merge pull request #17012 from owen-mc/go/mad/convert-sources-websockets
...
Go: convert models for websocket readers as remote flow sources to models-as-data
2024-07-19 10:04:27 +01:00
Cornelius Riemenschneider
620582fc09
Address review.
2024-07-19 10:50:11 +02:00
Cornelius Riemenschneider
4d943f8d94
Merge branch 'main' into criemen/pytest-js
2024-07-18 21:51:33 +02:00
Michael B. Gale
9a729144e8
Merge pull request #17016 from github/mbg/go/log-output-for-go-version
...
Go: Output stdout/stderr for `go version` if something goes wrong
2024-07-18 16:50:09 +01:00
Michael B. Gale
3a9ff64780
Go: Output stdout/stderr for go version if something goes wrong
2024-07-18 15:37:59 +01:00
Cornelius Riemenschneider
3badd61a56
Integration tests: port to pytest.
...
Requires an internal PR.
2024-07-18 16:36:11 +02:00
Cornelius Riemenschneider
8fa575d79b
Merge pull request #17010 from github/criemen/disable-remote-cache-zipmerge
...
pkg.bzl: Disable remote caching of zipmerge steps.
2024-07-18 16:18:37 +02:00
Chris Smowton
c1853e04f5
Merge pull request #17013 from smowton/smowton/admin/maven-enforcer-test
...
Java: Add test for autobuild with maven-enforcer
2024-07-18 12:51:06 +01:00
Owen Mansel-Chan
a717c30c02
Merge pull request #16958 from github/max-schaefer-patch-1
...
Java: Tag `java/non-https-url` with CWE-345 ("Insufficient Verification of Data Authenticity")
2024-07-18 12:29:56 +01:00
Owen Mansel-Chan
cb0589dfb7
Tests: accept model numbering changes
2024-07-18 11:35:52 +01:00
Chris Smowton
1abe0d0f6d
Add test for autobuild with maven-enforcer
2024-07-18 11:16:46 +01:00
Owen Mansel-Chan
fc17b905f0
Convert WebSocketReaderAsSource to MaD
2024-07-18 10:53:13 +01:00
Owen Mansel-Chan
e6c1ff573a
Merge branch 'main' into max-schaefer-patch-1
2024-07-18 10:39:42 +01:00
Cornelius Riemenschneider
afb6e412f0
pkg.bzl: Disable remote caching of zipmerge steps.
2024-07-18 08:52:04 +02:00
Owen Mansel-Chan
0a2ed8302a
Add test for websocket remote flow sources
2024-07-18 07:45:03 +01:00
Owen Mansel-Chan
1e4aadfbfd
Trivial: improve variable name
2024-07-18 07:44:19 +01:00
Owen Mansel-Chan
8bc883274f
Minor improvement to jsoniter test
2024-07-18 07:38:23 +01:00
Owen Mansel-Chan
a9bf17ef49
Merge pull request #17000 from github/workflow/coverage/update
...
Update CSV framework coverage reports
2024-07-18 06:48:28 +01:00
github-actions[bot]
ca42eac589
Add changed framework coverage reports
2024-07-18 00:17:53 +00:00
Owen Mansel-Chan
433137ada6
Merge pull request #16960 from owen-mc/go/mad-sources-fasthttp
...
Go: Convert fasthttp sources to MaD
2024-07-17 21:31:49 +01:00
Geoffrey White
98319be3a7
Merge pull request #16985 from geoffw0/madprov
...
C++: Support MaD alert provenance
2024-07-17 16:25:49 +01:00
Mathias Vorreiter Pedersen
45ba0c3319
Merge pull request #16907 from MathiasVP/phi-escape-5
...
C++: Add a new `MemoryLocation` to represent sets of `Allocation`s
2024-07-17 15:44:04 +01:00
Geoffrey White
7029de5989
Swift: Attempt to speed up evaluation of the private information regex for Swift.
2024-07-17 15:43:30 +01:00
Mathias Vorreiter Pedersen
8a3a3fa263
C++: Sync identical files.
2024-07-17 14:39:08 +01:00
Mathias Vorreiter Pedersen
d5ccb2e396
C++: Add a large QLDoc with example to 'getInstructionSuccessor'.
2024-07-17 14:39:02 +01:00
Michael B. Gale
784a07353e
Merge pull request #16916 from github/dependabot/go_modules/go/extractor/extractor-dependencies-5727fbca95
...
Bump the extractor-dependencies group across 1 directory with 2 updates
2024-07-17 13:40:16 +01:00
dependabot[bot]
3641dfebff
Bump the extractor-dependencies group across 1 directory with 2 updates
...
Bumps the extractor-dependencies group with 2 updates in the /go/extractor directory: [golang.org/x/mod](https://github.com/golang/mod ) and [golang.org/x/tools](https://github.com/golang/tools ).
Updates `golang.org/x/mod` from 0.15.0 to 0.19.0
- [Commits](https://github.com/golang/mod/compare/v0.15.0...v0.19.0 )
Updates `golang.org/x/tools` from 0.18.0 to 0.23.0
- [Release notes](https://github.com/golang/tools/releases )
- [Commits](https://github.com/golang/tools/compare/v0.18.0...v0.23.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/mod
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: extractor-dependencies
- dependency-name: golang.org/x/tools
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: extractor-dependencies
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-07-17 11:46:01 +00:00
Paolo Tranquilli
bf69c76829
Merge pull request #16987 from github/redsun82/go
...
Go/Bazel: use gazelle `go_deps` instead of a vendor directory
2024-07-17 13:44:23 +02:00
Owen Mansel-Chan
d109b1e20d
Accept model numbering changes in tests
2024-07-17 12:37:23 +01:00
Owen Mansel-Chan
6b52cd4957
Do not use "request" threat model kind
...
It is not supported yet.
2024-07-17 12:12:00 +01:00
Owen Mansel-Chan
cfdd48711b
Convert Fasthttp::RequestHeader::RemoteFlowSource to MaD
2024-07-17 12:11:59 +01:00
Owen Mansel-Chan
abeca3d9f9
Convert Fasthttp::RequestCtx::RemoteFlowSource to MaD
2024-07-17 12:11:58 +01:00
Owen Mansel-Chan
729069e3d9
Convert Fasthttp::Request::RemoteFlowSource to MaD
2024-07-17 12:11:57 +01:00
Owen Mansel-Chan
c3169d258f
Convert Fasthttp::Args::RemoteFlowSource to MaD
2024-07-17 12:11:57 +01:00
Owen Mansel-Chan
5a00b5ec96
Convert Fasthttp::URI::RemoteFlowSource to MaD
2024-07-17 12:11:56 +01:00
Owen Mansel-Chan
f33927457f
Adapt test to work better for MaD
...
In MaD, `Argument[n]` corresponds to the post-update node of the
argument, which in the old version of the test will be the definition of
`dstReader` for the tests for `ReadBody`, `ReadLimitBody`,
`ContinueReadBodyStream`, `ContinueReadBody`.
2024-07-17 12:11:55 +01:00
