Asger F
a11732ef25
Merge branch 'js/expose-internal-module-naming' into js/vea-hacking
2024-04-25 13:34:14 +02:00
Asger F
d0c9e3f7ad
JS: Expose InternalModuleNaming
2024-04-25 13:33:17 +02:00
Asger F
9082972842
Merge pull request #16061 from RasmusWL/js-extractor-fix
...
JS: More robust CommonJS/ES2015 detection logic for extractor
2024-04-25 13:26:56 +02:00
Nick Rolfe
116873c9b0
Merge pull request #16314 from github/nickrolfe/rb-sensitive
...
Ruby: do fewer regexp matches in SensitiveActions
2024-04-25 11:56:41 +01:00
Rasmus Wriedt Larsen
290b0fc4ab
Merge pull request #16308 from asgerf/js/model-generation-quote
...
JS: Fix naming issue in generated models
2024-04-25 11:36:36 +02:00
Paolo Tranquilli
332d118d93
Merge pull request #16315 from github/redsun82/buildifier
...
Bazel: introduce buildifier formatting
2024-04-25 10:48:18 +02:00
Owen Mansel-Chan
82bbecc9c4
Merge pull request #16307 from owen-mc/go/fix/incomplete-hostname-regex
...
Go: fix flow through string concatenation in `go/incomplete-hostname-regex`
2024-04-25 09:43:51 +01:00
Rasmus Wriedt Larsen
13ff9412a4
Merge pull request #16252 from RasmusWL/move-dataflow-tests
...
Python: Move dataflow tests out of experimental
2024-04-25 10:05:06 +02:00
Jeroen Ketema
9d24b5afa6
Merge pull request #16319 from jketema/ir-comment-fix
...
C++: Fix comment in IR test
2024-04-25 09:59:58 +02:00
Jeroen Ketema
95ec4e8d26
C++: Fix comment in IR test
2024-04-24 21:47:47 +02:00
Tom Hvitved
17e0cc5648
Merge pull request #16313 from hvitved/dataflow/fix-bad-join3
...
Data flow: Fix bad join
2024-04-24 17:09:14 +02:00
Paolo Tranquilli
196b6d7a1d
CI: simplify reporting
2024-04-24 16:43:38 +02:00
Paolo Tranquilli
9def57250d
CI: make reporting better
2024-04-24 16:35:50 +02:00
Paolo Tranquilli
9af9873e04
CI: add names to steps
2024-04-24 16:20:54 +02:00
Paolo Tranquilli
9f5782b67b
Bazel: introduce buildifier formatting
...
This introduces tooling and enforcement for formatting bazel files.
The tooling is provided as a bazel run target from
[keith/buildifier-prebuilt](https://github.com/keith/buildifier-prebuilt ).
This is used in a [`pre-commit`](https://pre-commit.com/ ) hook for those
having that installed. In turn this is used in a CI check. Relying on a
`pre-commit` action gives us easy checking that buildifying did not
change anything in the files and printing the diff, without having to
hand-roll the check ourselves.
This enforcement will make usage of gazelle easier, as gazelle itself
might reformat files, even outside of `go`. Having them properly
formatted will allow gazelle to leave them unchanged, without needing
to configure awkward exclude directives.
2024-04-24 15:49:48 +02:00
Owen Mansel-Chan
c61177cf42
Add change note
2024-04-24 14:21:59 +01:00
Owen Mansel-Chan
4140942479
Update tests
2024-04-24 14:19:33 +01:00
Owen Mansel-Chan
fd306ed79b
Exclude constant names from sources to avoid duplicate results
2024-04-24 14:19:30 +01:00
Owen Mansel-Chan
8962307291
Add second good go file to tests
2024-04-24 14:19:29 +01:00
Owen Mansel-Chan
0000c72329
Remove attempt at avoiding duplicate alerts
2024-04-24 14:19:26 +01:00
Owen Mansel-Chan
3ef7a0932a
Add flow through string concatenation
2024-04-24 14:19:25 +01:00
Tamás Vajk
f29d2c21bd
Merge pull request #16312 from tamasvajk/fix/buildless/file-lookup
...
C#: Fix `global.json` and `packages.config` lookup
2024-04-24 15:05:55 +02:00
Tamás Vajk
3b44b131b9
Merge pull request #16311 from tamasvajk/fix/resx
...
C#: Do not download `Microsoft.CodeAnalysis.ResxSourceGenerator` when…
2024-04-24 13:49:55 +02:00
Tamas Vajk
4a97f95890
Improve code quality
2024-04-24 13:47:25 +02:00
Tamás Vajk
84ea3a9a2c
Merge pull request #16310 from tamasvajk/buildless/nuget_versions
...
C#: Add integration test with multiple versions of the same nuget pac…
2024-04-24 13:33:27 +02:00
Nick Rolfe
8f2e51faa6
Ruby: do fewer regexp matches in SensitiveActions
2024-04-24 12:32:49 +01:00
Owen Mansel-Chan
f828f8ea65
Merge pull request #16250 from owen-mc/go/rename-untrusted-flow-source
...
Go: Rename `UntrustedFlowSource` to `RemoteFlowSource` to match other language libraries
2024-04-24 11:37:00 +01:00
Tom Hvitved
95d579d9de
Data flow: Fix bad join
...
```
Evaluated relational algebra for predicate _DataFlowImpl::Impl<HardcodedDataInterpretedAsCodeQuery::HardcodedDataInterpretedAsCodeFlow::C>::ret__#count_range@d112335l with tuple counts:
285176 ~2% {3} r1 = SCAN `_DataFlowDispatch::DataFlowCall.getEnclosingCallable/0#dispred#b7b78b19_DataFlowImpl::Impl<Hardcoded__#shared` OUTPUT In.1, In.0, In.2
3265592261 ~3% {5} | JOIN WITH `DataFlowImpl::Impl<HardcodedDataInterpretedAsCodeQuery::HardcodedDataInterpretedAsCodeFlow::C>::returnCallEdge1/4#d02cae42_2301#join_rhs` ON FIRST 2 OUTPUT Lhs.0, Lhs.2, Rhs.2, Lhs.1, Rhs.3
39070 ~8% {6} | JOIN WITH `DataFlowImplCommon::Cached::viableImplInCallContextExt/2#58e931ad` ON FIRST 3 OUTPUT Lhs.0, Lhs.3, Lhs.1, Lhs.2, Lhs.4, _
39070 ~0% {6} | REWRITE WITH Out.5 := 1
return r1
```
2024-04-24 12:22:28 +02:00
Tamas Vajk
f3daba510b
C#: Fix global.json and packages.config lookup
2024-04-24 11:57:45 +02:00
Tamas Vajk
88e67715a1
C#: Do not download Microsoft.CodeAnalysis.ResxSourceGenerator when there are no resx files to process
2024-04-24 11:53:29 +02:00
Tamas Vajk
53eb753346
C#: Add integration test with multiple versions of the same nuget package
2024-04-24 11:50:43 +02:00
Mathias Vorreiter Pedersen
037114b336
Merge pull request #16309 from geoffw0/newtests
...
C++: Add test cases
2024-04-24 10:06:51 +01:00
Nick Rolfe
af72c0848e
Merge pull request #16306 from github/nickrolfe/js-sensitive
...
JS: do fewer regexp matches in SensitiveActions
2024-04-24 09:49:44 +01:00
Asger F
a05636876b
Merge branch 'js/model-generation-quote' into js/vea-hacking
2024-04-24 10:26:10 +02:00
Tamás Vajk
de58ee5a22
Merge pull request #16225 from tamasvajk/buildless/resx
...
C#: Add resource generator
2024-04-24 10:10:45 +02:00
Tom Hvitved
a1a93c7331
Merge pull request #16304 from hvitved/csharp/fix-bad-join
...
C#: Fix a bad join
2024-04-24 08:11:25 +02:00
Asger F
db07c162e4
JS: Allow generated models to use (package)
2024-04-23 20:25:55 +02:00
Asger F
9d00f660f1
Update ModelGeneration.expected
2024-04-23 20:08:21 +02:00
Owen Mansel-Chan
0311888fd4
Update change note
...
Co-authored-by: Michael B. Gale <mbg@github.com >
2024-04-23 19:07:02 +01:00
Asger F
e4f23b31c6
JS: Add quotes around package name to correct parsing
2024-04-23 20:04:23 +02:00
Geoffrey White
57a53891e9
C++: Effect of recent QL changes.
2024-04-23 18:12:05 +01:00
Geoffrey White
b6703bc25c
C++: Add test cases inspired by QA results differences.
2024-04-23 18:06:12 +01:00
Nick Rolfe
003d208574
JS: do fewer regexp matches in SensitiveActions
2024-04-23 15:31:38 +01:00
Tom Hvitved
d8d7688f88
C#: Fix another bad join
2024-04-23 15:39:59 +02:00
Mathias Vorreiter Pedersen
3592e76269
Merge pull request #16302 from MathiasVP/fieldflowbranchlimit-follow-up-1
...
C++: `fieldFlowBranchLimit` follow-up (1)
2024-04-23 11:35:49 +01:00
Tom Hvitved
6aa4c5c187
C#: Fix a bad join
2024-04-23 11:47:55 +02:00
Michael B. Gale
fb8ee07b43
Merge pull request #16262 from github/dependabot/go_modules/go/ql/integration-tests/all-platforms/go/two-go-mods-not-nested/src/subdir1/golang.org/x/net-0.23.0
2024-04-23 10:44:54 +01:00
Michael B. Gale
4ccff1a630
Merge pull request #16263 from github/dependabot/go_modules/go/ql/integration-tests/all-platforms/go/ninja-sample/src/golang.org/x/net-0.23.0
2024-04-23 10:44:17 +01:00
Michael B. Gale
4b7160d4b2
Merge pull request #16267 from github/dependabot/go_modules/go/ql/integration-tests/all-platforms/go/go-mod-without-version/src/golang.org/x/net-0.23.0
2024-04-23 10:43:43 +01:00
Michael B. Gale
5cce5008a3
Merge pull request #16264 from github/dependabot/go_modules/go/ql/integration-tests/all-platforms/go/single-go-work-not-in-root/src/modules/subdir2/golang.org/x/net-0.23.0
2024-04-23 10:42:53 +01:00
