Josh Brown
|
4c5945f4aa
|
Manual merge
|
2025-07-10 15:08:14 -07:00 |
|
Josh Brown
|
5fb45c89e9
|
Revert "Merge pull request #251 from microsoft/jb1/upstream-zipslip"
This reverts commit 4dfa5d2858, reversing
changes made to 8cd58aa6e8.
|
2025-07-10 14:57:38 -07:00 |
|
Michael Nebel
|
233b54c7fa
|
Merge pull request #19891 from michaelnebel/michaelnebel/freezemoresuites
Go/Ruby/Python: Freeze quality queries in `security-and-quality`.
|
2025-07-01 09:04:19 +02:00 |
|
Asger F
|
3247babfa5
|
Merge pull request #19762 from trailofbits/VF/type-orm-model-improvements
Improve TypeORM model
|
2025-06-30 10:40:38 +02:00 |
|
Michael Nebel
|
145ada53f2
|
C#/Java/JavaScript: Re-factor query suites to use the new selector.
|
2025-06-26 14:19:27 +02:00 |
|
Vasco-jofra
|
8a7516528d
|
Update formatting
|
2025-06-26 09:29:07 +02:00 |
|
Napalys Klicius
|
3d9e2f5438
|
Merge pull request #19858 from Napalys/js/execa
JS: moved `execa` out of experimental
|
2025-06-25 10:34:52 +02:00 |
|
Asger F
|
d39b68cd41
|
Merge pull request #19849 from asgerf/js/remove-legacy-actions-queries
JS: Remove legacy actions queries
|
2025-06-25 09:18:33 +02:00 |
|
Asger F
|
853fc1a7cf
|
Merge pull request #19852 from asgerf/js/react-use-server
JS: Model React 'use' and 'use server'
|
2025-06-25 09:13:56 +02:00 |
|
github-actions[bot]
|
6972c7a872
|
Post-release preparation for codeql-cli-2.22.1
|
2025-06-24 12:55:14 +00:00 |
|
Asger F
|
54bfde9b7a
|
Update javascript/ql/src/change-notes/2025-06-23-remove-legacy-actions-queries.md
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
|
2025-06-24 11:22:37 +02:00 |
|
github-actions[bot]
|
3e074b2425
|
Release preparation for version 2.22.1
|
2025-06-24 08:55:31 +00:00 |
|
Napalys Klicius
|
d8b5cb5862
|
JS: moved execa out of experimental
|
2025-06-24 09:07:43 +02:00 |
|
Asger F
|
4fc5738ded
|
JS: Change note
|
2025-06-23 16:08:21 +02:00 |
|
Asger F
|
b1da23968c
|
JS: Change note
|
2025-06-23 14:50:09 +02:00 |
|
Asger F
|
76b7228160
|
JS: Remove js/actions/command-injection
Superseded by actions/command-injection/{medium,critical}
|
2025-06-23 14:41:26 +02:00 |
|
Asger F
|
9dcb61e771
|
JS: Remove js/actions/actions-artifact-leak
Superseded by actions/secrets-in-artifacts
|
2025-06-23 14:39:28 +02:00 |
|
Asger F
|
3a00e8d1c5
|
JS: Remove js/actions/pull-request-target
Superseded by actions/untrusted-checkout/{medium,high,critical}
|
2025-06-23 14:37:21 +02:00 |
|
Napalys Klicius
|
bca536c5b6
|
Merge remote-tracking branch 'origin/main' into js/quality/loop_shift
|
2025-06-20 11:30:20 +02:00 |
|
Napalys Klicius
|
7c25bcdad1
|
Changed js/duplicate-condition to reliability and correctness
|
2025-06-20 08:06:03 +02:00 |
|
Napalys Klicius
|
aa3e9c6579
|
Changed js/unreachable-statement to reliability and correctness
|
2025-06-19 19:52:03 +02:00 |
|
Napalys Klicius
|
32dd665472
|
Changed js/unused-loop-variable to reliability and correctness
|
2025-06-19 19:45:20 +02:00 |
|
Napalys Klicius
|
4fd3ef8f1c
|
Changed js/useless-assignment-in-return to reliability and correctness
|
2025-06-19 19:37:13 +02:00 |
|
Napalys Klicius
|
4bc97326d1
|
Changed js/label-in-switch to reliability and correctness
|
2025-06-19 19:30:53 +02:00 |
|
Napalys Klicius
|
125add1e19
|
Changed js/node/missing-exports-qualifier to reliability and correctness
|
2025-06-19 19:24:00 +02:00 |
|
Napalys Klicius
|
2ab35d6a45
|
Changed js/node/assignment-to-exports-variable to reliability and correctness
|
2025-06-19 19:21:06 +02:00 |
|
Napalys Klicius
|
c1d29cc48a
|
Changed js/whitespace-contradicts-precedence to reliability and correctness
|
2025-06-19 18:26:12 +02:00 |
|
Napalys Klicius
|
bb9a2289a3
|
Changed js/conditional-comment to reliability and correctness
|
2025-06-19 18:25:31 +02:00 |
|
Napalys Klicius
|
ad6c6b2d26
|
Changed js/angular/dependency-injection-mismatch to reliability and correctness
|
2025-06-19 17:16:32 +02:00 |
|
Napalys Klicius
|
c18fe303d0
|
JS: Changed MissingThisQualifier to reliability and correctness
|
2025-06-19 16:27:00 +02:00 |
|
Napalys Klicius
|
244bf428a1
|
JS: Fixed typo.
|
2025-06-19 16:26:07 +02:00 |
|
Napalys Klicius
|
8679151ace
|
Update javascript/ql/src/change-notes/2025-06-12-loop-iteration.md
Co-authored-by: Taus <tausbn@github.com>
|
2025-06-19 14:21:08 +02:00 |
|
Napalys Klicius
|
5448071e09
|
Update javascript/ql/src/change-notes/2025-06-12-loop-iteration-fix.md
Co-authored-by: Taus <tausbn@github.com>
|
2025-06-19 14:20:37 +02:00 |
|
Napalys Klicius
|
119c1e61ec
|
Merge remote-tracking branch 'origin/main' into js/mass_quality_promotion
|
2025-06-19 10:27:15 +02:00 |
|
Napalys Klicius
|
53cae4fa97
|
Merge remote-tracking branch 'origin/main' into js/quality/loop_shift
|
2025-06-19 10:21:52 +02:00 |
|
Tamas Vajk
|
40274dcd69
|
Add code-quality-extended query suites
|
2025-06-18 13:10:34 +02:00 |
|
Napalys Klicius
|
b14b661cd1
|
JS: add change note
|
2025-06-16 14:12:39 +02:00 |
|
Napalys Klicius
|
0c31838aa5
|
JS: mass add missing quality related tags to relevant queries
|
2025-06-16 14:05:57 +02:00 |
|
Vasco-jofra
|
4ea53773b9
|
Model the TypeORM Repository API
|
2025-06-13 15:35:46 +02:00 |
|
Napalys Klicius
|
0906d85b39
|
Merge pull request #19726 from Napalys/js/quality/string_interpolation
JS: Promote `js/template-syntax-in-string-literal` to the Code Quality suite.
|
2025-06-13 13:36:53 +02:00 |
|
Napalys Klicius
|
28ae39694f
|
Merge pull request #19741 from Napalys/js/quality/suspicious_method_names
JS: Promote `js/suspicious-method-name-declaration` to the Code Quality suite.
|
2025-06-12 15:30:13 +02:00 |
|
Napalys Klicius
|
10d10286f7
|
JS: add change notes
|
2025-06-12 15:23:31 +02:00 |
|
Napalys Klicius
|
885e8369aa
|
JS: add quality and reliability tags to loop-iteration-skipped-due-to-shifting
|
2025-06-12 15:18:26 +02:00 |
|
Napalys Klicius
|
66d66fe87d
|
JS: fix false positives for splice with conditional index decrement
|
2025-06-12 14:51:10 +02:00 |
|
Napalys Klicius
|
d7ad625de3
|
JS: restrict type tracking to strings of interest.
|
2025-06-12 14:28:00 +02:00 |
|
Napalys Klicius
|
da5cd251be
|
Update javascript/ql/src/LanguageFeatures/TemplateSyntaxInStringLiteral.ql
Co-Authored-By: Asger F <316427+asgerf@users.noreply.github.com>
|
2025-06-12 14:25:00 +02:00 |
|
Napalys Klicius
|
e6d26912e0
|
Update javascript/ql/src/Declarations/SuspiciousMethodNameDeclaration.qhelp
Co-authored-by: Asger F <asgerf@github.com>
|
2025-06-12 13:10:27 +02:00 |
|
Napalys Klicius
|
7b91a57eb1
|
JS: add change note.
|
2025-06-12 12:19:39 +02:00 |
|
Napalys Klicius
|
75ee649362
|
JS: add change note
|
2025-06-12 12:14:14 +02:00 |
|
Napalys Klicius
|
923aff2439
|
JS: Fixed false positive on manual string interpolation.
|
2025-06-12 11:35:33 +02:00 |
|