Commit Graph

85286 Commits

Author SHA1 Message Date
Jeroen Ketema
bb33ea383c C++: Add change note for new builtins 2026-01-14 13:35:49 +01:00
Jeroen Ketema
93535d1c86 C++: Add tests for new builtin operations 2026-01-14 13:35:47 +01:00
Jeroen Ketema
3d959abdeb C++: Support new builtin operations 2026-01-14 13:35:46 +01:00
Jeroen Ketema
5d00a4df86 Merge pull request #21143 from jketema/jketema/friends
C++: Update test expectations after extractor changes
2026-01-14 13:31:40 +01:00
Owen Mansel-Chan
e01b674581 Merge pull request #21082 from mbaluda/couchdb
This PR adds models Java client APIs for CouchBase and adds tests for 2 queries
2026-01-14 12:06:47 +00:00
Asger F
ff580410fe Merge pull request #20733 from asgerf/js/incremental-api-graphs
JS: Incremental API graph
2026-01-14 12:49:41 +01:00
Mauro Baluda
9f725f7098 Merge branch 'main' into couchdb 2026-01-14 12:33:47 +01:00
Mauro Baluda
f71b6c1bfd Improved models for Supplier arguments 2026-01-14 12:32:42 +01:00
Jeroen Ketema
54f75653ba C++: Update test expectations after extractor changes 2026-01-14 12:01:51 +01:00
Mauro Baluda
5cef0376a9 Update java/ql/test/query-tests/security/CWE-798/semmle/tests/HardcodedCouchBaseCredentials.java
Co-authored-by: Owen Mansel-Chan <62447351+owen-mc@users.noreply.github.com>
2026-01-14 11:50:52 +01:00
Asger F
e430aa97f3 Merge pull request #20916 from asgerf/js/next-folders2
JS: Handle Next.js files named 'page' or 'route'
2026-01-14 11:10:57 +01:00
Jeroen Ketema
40a91367ab Merge pull request #21110 from jketema/jketema/rm-decimal
C++: Remove decimal floating point types
2026-01-14 10:58:39 +01:00
Tom Hvitved
cc4926ad37 Merge pull request #21148 from hvitved/rust/remove-macro-block-expr
Rust: Remove `MacroBlockExpr` class
2026-01-14 10:11:22 +01:00
Simon Friis Vindum
519f0d2780 Merge pull request #21023 from paldepind/rust/regenerate-models-1212
Rust: Regenerate models
2026-01-14 09:30:06 +01:00
Mauro Baluda
9efefa6120 Fix test expectations 2026-01-13 22:46:42 +01:00
Mauro Baluda
29f23ee192 Fix extraction error 2026-01-13 22:33:01 +01:00
Mauro Baluda
4b7662f652 Merge branch 'main' into couchdb 2026-01-13 21:50:44 +01:00
Mauro Baluda
d335f039ef Improve model for CWE-089 2026-01-13 21:48:43 +01:00
yoff
6c4a0bb52b Merge pull request #20990 from github/tausbn/python-support-relaxed-exception-groups
Python: Add support for PEP-758 exception syntax
2026-01-13 19:04:27 +01:00
Simon Friis Vindum
76a1e22ddc Rust: Remove manual models that are now generated 2026-01-13 16:11:18 +01:00
Jeroen Ketema
f4980bede3 Update cpp/ql/lib/change-notes/2026-01-02-decimal-removal.md 2026-01-13 16:11:11 +01:00
Jeroen Ketema
9ba73ba4f0 C++: Update stats file 2026-01-13 16:11:10 +01:00
Jeroen Ketema
ffdd6f7d91 C++: Add change note 2026-01-13 16:11:09 +01:00
Jeroen Ketema
273f517a37 C++: Remove decimal types from the dbscheme 2026-01-13 16:11:08 +01:00
Jeroen Ketema
a20f0a11e8 C++: No longer expose _Decimal{32,64,128} 2026-01-13 16:11:06 +01:00
Jeroen Ketema
d20cd68a05 C++: Update expected test results after extractor changes 2026-01-13 16:11:05 +01:00
Simon Friis Vindum
da43e8cad8 Rust: Regenerate models 2026-01-13 16:02:32 +01:00
Simon Friis Vindum
d78491294a Rust: Exclude reqwest response timeout field as a taint step 2026-01-13 15:58:27 +01:00
Simon Friis Vindum
862adec081 Rust: Disable dynamic dispatch when generating models 2026-01-13 15:58:25 +01:00
Simon Friis Vindum
1fbf0387f5 Rust: Skip model generation for Rocket due to performance issue 2026-01-13 15:58:24 +01:00
Simon Friis Vindum
8bfce6b284 Shared, rust: Add option to disable reads steps as taint steps in model generator 2026-01-13 15:58:23 +01:00
Simon Friis Vindum
9cdf63e175 Rust: Skip model generation for functions with a ; in their canonical path 2026-01-13 15:58:22 +01:00
Owen Mansel-Chan
8cb0f5faa6 Merge pull request #21140 from owen-mc/csharp/mad-barriers
C#: Allow MaD barriers and barrier guards, and convert some existing ones
2026-01-13 14:24:22 +00:00
Mauro Baluda
89f0e79ea1 Fix SqlTainted test 2026-01-13 13:55:14 +01:00
Ian Lynagh
63f78e7609 Merge pull request #21156 from igfoo/igfoo/mb
Merge rc/3.20 into main
2026-01-13 12:11:37 +00:00
Mauro Baluda
dda042f7df rename change notes 2026-01-13 13:07:14 +01:00
Taus
5fc9b2de44 Merge pull request #21154 from github/tausbn/misc-add-cli-mode-for-change-note-script
Misc: Add CLI interface to `create-change-note.py`
2026-01-13 12:38:55 +01:00
Anders Schack-Mulligen
9c1351c3fe Merge pull request #21149 from aschackmull/java/typeflow-partially-unbound
Java: Add TypeFlow base case for partially unbound types.
2026-01-13 12:31:38 +01:00
Geoffrey White
69de17ecf2 Merge pull request #21153 from geoffw0/splitoff
Rust: Add barrier for split_off
2026-01-13 10:44:31 +00:00
Owen Mansel-Chan
130f8f148b Convert barrier to MaD
I confirmed that without the model a test fails.
2026-01-13 10:29:16 +00:00
Owen Mansel-Chan
68b618176e Convert barrier guard to MaD
I checked that without the model a test fails.
2026-01-13 10:29:15 +00:00
Owen Mansel-Chan
b30bc5ea44 Allow MaD barriers relating to ExternalLocationSink 2026-01-13 10:29:13 +00:00
Owen Mansel-Chan
004d40ee93 Allow MaD barriers using sink kinds 2026-01-13 10:29:12 +00:00
Anders Schack-Mulligen
8b555ca514 Java: Add test. 2026-01-13 11:20:13 +01:00
Anders Schack-Mulligen
8257475ffb Merge pull request #21132 from aschackmull/csharp/mad-barriers
C#: Add support for MaD barriers and barrier guards.
2026-01-13 11:00:02 +01:00
Owen Mansel-Chan
a96cd399b1 Merge pull request #21157 from github/dependabot/go_modules/go/extractor/extractor-dependencies-0d17b202ee
Bump golang.org/x/tools from 0.40.0 to 0.41.0 in /go/extractor in the extractor-dependencies group
2026-01-13 09:56:37 +00:00
Asger F
da9aafc3b0 JS: Also track additional use-steps crossing the overlay boundary 2026-01-13 10:54:16 +01:00
Simon Friis Vindum
7f092e418e Merge pull request #21152 from paldepind/rust/typeinference-dir
Rust: Move everything type inference related into the typeinference directory
2026-01-13 10:41:13 +01:00
Asger F
ca52fe59e8 Merge pull request #20918 from asgerf/js/response-default-content-type
JS: Handle default 'content-type' header in Response() objects
2026-01-13 10:34:40 +01:00
Asger F
d2e6ae5e14 Update javascript/ql/lib/semmle/javascript/frameworks/Next.qll
Co-authored-by: Napalys Klicius <napalys@github.com>
2026-01-13 10:34:25 +01:00