Cornelius Riemenschneider
1657b314c1
Re-pin ruby extractor deps.
2024-02-26 11:21:23 +00:00
Cornelius Riemenschneider
688b9955a0
Address review, start accomodating bzlmod.
2024-02-26 11:21:23 +00:00
Cornelius Riemenschneider
b82ffd40e7
Fix windows CI build.
...
As we're now checking out the `codeql` repo in a sub-path,
we need to enable long paths on Windows.
2024-02-26 11:21:23 +00:00
Cornelius Riemenschneider
fd85c44129
Ruby: Start building the language pack using bazel.
...
This PR introduces a bazel and `rules_rust`-based build system
for the ruby extractor and language pack.
This replacese the existing, `cargo` and `cross`-based build system.
For local development, nothing changes, and the existing `cargo`-based
build still keeps working as-is.
We no longer need to use `cross` to compile our Linux binaries,
as we now can link against our hermetic C++ toolchain, which ships
with an old enough glibc, so that we don't run into symbol version issues
when deploying the binaries to older systems.
Besides the one change in dependency (explained in detail in `Cargo.toml`
and in https://github.com/github/codeql/pull/15595 ), nothing ought to
change in how we build the extractor.
2024-02-26 11:21:22 +00:00
Joe Farebrother
386defc3c7
Update test output
2024-02-26 11:21:03 +00:00
Anders Schack-Mulligen
c22cbf5b01
Merge pull request #15721 from aschackmull/workflows/format-check-shared
...
Workflows: Run format check on shared.
2024-02-26 12:12:29 +01:00
Joe Farebrother
fb06e9f6b2
Merge pull request #15719 from joefarebrother/ruby-changenote-formatting
...
Ruby: Fix change note formatting
2024-02-26 11:12:01 +00:00
Harry Maclean
dd092fd18f
Ruby: Fix CSRF test
2024-02-26 11:02:54 +00:00
Jeroen Ketema
acf3a99dff
Merge pull request #15716 from jketema/command-line-options
...
C++: Update test after extractor changes
2024-02-26 12:01:03 +01:00
Rasmus Wriedt Larsen
4ede553b21
Merge pull request #15365 from RasmusWL/lgtm_index_filter_handling
...
Tree sitter extractor: Proper handling of `LGTM_INDEX_FILTERS`
2024-02-26 11:59:45 +01:00
Tom Hvitved
5f5bcf686d
Update csharp/ql/lib/semmle/code/csharp/AnnotatedType.qll
...
Co-authored-by: Michael Nebel <michaelnebel@github.com >
2024-02-26 11:35:28 +01:00
Anders Schack-Mulligen
dab8e237e6
Workflows: Run format check on shared.
2024-02-26 11:33:00 +01:00
Tom Hvitved
5b1fb8789a
C#: Implement View CFG query
2024-02-26 11:23:49 +01:00
Tom Hvitved
5b6e76c030
Move View CFG implementation from Ruby/Swift into shared library
2024-02-26 11:23:49 +01:00
Rasmus Wriedt Larsen
1cfac50749
Python: Add precision to NoSQL query
...
Due to this, it was not part of any query suite :O
2024-02-26 11:23:43 +01:00
Joe Farebrother
403a1ac483
Fix change note formatting
2024-02-26 10:21:26 +00:00
Joe Farebrother
2257df5c6f
Model Arel::Nodes::SqlLiteral.new
2024-02-26 10:09:33 +00:00
Tom Hvitved
8fbe62ccae
Swift: Implement getExtension and getStem
2024-02-26 10:33:57 +01:00
Jeroen Ketema
788100d475
C++: Update test after extractor changes
2024-02-26 10:04:42 +01:00
Tom Hvitved
03a125de38
Merge pull request #15562 from Marcono1234/patch-2
...
Ruby: Fix formatting in changelog
2024-02-26 10:03:29 +01:00
Tom Hvitved
4bd79c0eb3
Add change note
2024-02-26 09:58:23 +01:00
Rasmus Wriedt Larsen
07223031e8
Merge branch 'main' into lgtm_index_filter_handling
2024-02-26 09:56:02 +01:00
Tom Hvitved
acd52192d1
C#: Adopt shared variable capture library
2024-02-26 09:53:30 +01:00
Tom Hvitved
7197c64e2d
C#: Add more variable capture tests
2024-02-26 09:53:29 +01:00
erik-krogh
0056067a17
Merge branch 'main' into ts-54
2024-02-25 21:20:43 +01:00
erik-krogh
083f56921c
update to 5.4.1-rc
2024-02-25 21:20:41 +01:00
Tom Hvitved
2683e40038
Merge pull request #15708 from hvitved/share-ide-contextual
...
Share `getFileBySourceArchiveName` implementation
2024-02-23 19:56:33 +01:00
Chris Smowton
12213a0a08
Add test
2024-02-23 18:39:16 +00:00
Ian Lynagh
bfea40fca0
Kotlin 2: Accept some PrintAst changes in library-tests/exprs
2024-02-23 18:39:06 +00:00
Chris Smowton
d57160db5c
Direct map stores via a post-update node
2024-02-23 16:37:26 +00:00
Robert Marsh
da5e3d64ac
C++: autoformat
2024-02-23 16:20:42 +00:00
Robert Marsh
dd97584eff
C++: fix for duplicated parent of ReturnVoid statements
2024-02-23 16:19:34 +00:00
Ian Lynagh
1abd81ec34
Kotlin 2: Accept loc changes in library-tests/reflection
2024-02-23 13:52:05 +00:00
Ian Lynagh
f43e929d1a
Kotlin: More generated elements in Kotlin 2 in library-tests/reflection
2024-02-23 13:45:58 +00:00
Paolo Tranquilli
6b63492d6b
Merge pull request #15699 from github/criemen/bazel7-2
...
Upgrade to bazel 7.0.2.
2024-02-23 14:15:00 +01:00
Tamás Vajk
72f73553ca
Merge pull request #15692 from tamasvajk/buildless/no-dotnet-sdk
...
C#: Download latest dotnet SDK when missing
2024-02-23 13:24:46 +01:00
Tony Torralba
759b74791c
Java: Re-enable Widget.qll flow steps
...
The library Widget.qll was accidentally removed from the global context when its sources were migrated to models-as-data in #13136 . This re-adds it so that its flow steps are enabled again.
2024-02-23 13:07:35 +01:00
Harry Maclean
f5be407989
Ruby: deprecate old ProtectFromForgeryCall class
2024-02-23 12:02:26 +00:00
Ian Lynagh
047a8b400e
Merge pull request #15703 from igfoo/igfoo/k2mf
...
Kotlin: Accept changes in library-tests/multiple_files
2024-02-23 11:49:05 +00:00
Ian Lynagh
ee967e62e1
Merge pull request #15704 from igfoo/igfoo/k2ministdlib
...
Kotlin: Remove the Kotlin 2 ministdlib test
2024-02-23 11:48:55 +00:00
Owen Mansel-Chan
3dc6918356
Merge pull request #15648 from github/workflow/coverage/update
...
Update CSV framework coverage reports
2024-02-23 11:48:17 +00:00
Harry Maclean
7b3f1a0982
Ruby: fix comment
2024-02-23 11:14:52 +00:00
Harry Maclean
081c1201ed
Ruby: Make csrf query more specific
...
CSRF protection only needs to be explicitly enabled on Rails
applications < 5.2 _or_ those that don't include a `load_defaults` call
with a version >= 5.2.
2024-02-23 11:13:17 +00:00
Harry Maclean
3ee425cc47
Ruby: Identify ActionController::API
...
`ActionController::API < ActionController::Base` is a base controller
class, so we should recognise it as such.
2024-02-23 11:13:17 +00:00
Harry Maclean
32b775fdc3
Ruby: reduce duplicate alerts for csrf query
...
Only generate an alert on the top-most vulnerable Rails controller in
the controller tree.
2024-02-23 11:13:17 +00:00
Harry Maclean
1fbf177b54
Ruby: QLDoc fix
2024-02-23 11:13:16 +00:00
Harry Maclean
3499d169f9
Ruby: Add missing QLDoc
2024-02-23 11:13:16 +00:00
Harry Maclean
0597b2ed1b
Ruby: recognise csrf_meta_tag
...
csrf_meta_tag is an alias for csrf_meta_tags, retained for backwards
compatibility.
2024-02-23 11:13:16 +00:00
Harry Maclean
f19a5a9837
Ruby: Add tests for Gemfile modeling
2024-02-23 11:13:16 +00:00
Harry Maclean
3c69ab10f2
Ruby: Restrict rb/csrf-protection-not-enabled
...
This query only applies to codebases using Ruby on Rails < 5.2, or where
there is no call to `csrf_meta_tags` in the base ERb template.
2024-02-23 11:13:15 +00:00
