Michael B. Gale
7623e2bcd6
Go: Bump extractor to go1.24rc1
2025-02-11 22:04:04 +00:00
Michael B. Gale
595e68cd48
Go: Bump go_sdk to 1.24rc1 in MODULE.bazel
2025-02-11 22:04:01 +00:00
Michael B. Gale
52e15f82e4
Go: Use 1.24rc1 in CI
2025-02-11 22:03:58 +00:00
Jami
2a8cc00284
Merge pull request #18288 from jcogs33/jcogs33/csrf-unprotected-request-type
...
Java: add CSRF query
2025-02-11 15:32:56 -05:00
Lindsay Simpkins
c45f13c219
Merge branch 'main' into csharp-update-MaD-upstream
2025-02-11 14:04:34 -05:00
Geoffrey White
f5ab6a6cd6
Rust: Accept integration test changes.
2025-02-11 17:39:03 +00:00
Geoffrey White
4f73429251
Rust: Accept test changes after merging latest main.
2025-02-11 17:38:51 +00:00
Geoffrey White
e7fdfd06bf
Merge branch 'main' into nth
2025-02-11 17:37:11 +00:00
Geoffrey White
0d9e1b410c
Rust: Additional test cases exposing what works and what doesn't.
2025-02-11 17:23:54 +00:00
Asger F
c306f44589
Remove override of final predicate
2025-02-11 17:07:09 +01:00
Asger F
a42480d361
Merge pull request #18733 from asgerf/js/query-string-parse-fn
...
JS: Model query-string parsers that strip off a leading '#' or '?'
2025-02-11 16:54:02 +01:00
Asger F
80e79b11f7
Apply suggestions from code review
...
Co-authored-by: Tom Hvitved <hvitved@github.com >
2025-02-11 16:53:13 +01:00
Michael Nebel
be0b3ba505
Merge pull request #18717 from michaelnebel/csharp/updatenetmodels2
...
C#: Update .NET 9 generated models.
2025-02-11 16:51:50 +01:00
yoff
158430af82
Merge pull request #17765 from yoff/python/test-functional-behaviour
...
Python: Add tests for functional-like programming
2025-02-11 16:28:37 +01:00
Óscar San José
9bd116fcf8
Add actions to codeql analysis workflow
2025-02-11 16:02:40 +01:00
Simon Friis Vindum
608c1523d2
Rust: Add a few tests for modeled flow for Option
2025-02-11 16:02:04 +01:00
Geoffrey White
8a3a0ef24d
Rust: Use Future in the other models as well.
2025-02-11 14:54:52 +00:00
Geoffrey White
f61c157c0a
Rust: Repair test after merging main.
2025-02-11 14:47:42 +00:00
Geoffrey White
e594074421
Merge branch 'main' into http
2025-02-11 14:38:58 +00:00
Nicolas Will
4d44755945
Refactor Model and CBOM print queries
2025-02-11 15:37:15 +01:00
Jonas Jensen
76440120d1
Merge pull request #18737 from jbj/NumericCastTaintedQuery-selectedLocation
...
Java: precise diff-informed NumericCastTainted
2025-02-11 15:33:28 +01:00
Simon Friis Vindum
5a49390615
Merge pull request #18685 from paldepind/rust-future-content
...
Rust: Basic support for future content and `.await`
2025-02-11 15:27:32 +01:00
Simon Friis Vindum
a09b37edc3
Rust: Expand on toString of IdentPat
2025-02-11 15:25:54 +01:00
Simon Friis Vindum
0aa08a3553
Rust: Add CFG test with identifier pattern containing sub pattern, ref, and mut
2025-02-11 15:09:10 +01:00
Arthur Baars
7e569b4fb2
Merge pull request #18713 from github/aibaars-patch-2
...
TreeSitter extractors: log fewer lines
2025-02-11 14:36:36 +01:00
Simon Friis Vindum
58d86fd2a9
Merge pull request #18714 from paldepind/rust-pointer
...
Rust: Handle writes to references and add encoding of reference content
2025-02-11 14:12:56 +01:00
Simon Friis Vindum
c7412cc839
Merge pull request #18696 from paldepind/shared-bb-dominates
...
Shared: Use edge dominance terminology in basic block library
2025-02-11 14:12:07 +01:00
Asger F
7e3f89842d
JS: Provide more precise related locations
2025-02-11 14:12:03 +01:00
Simon Friis Vindum
4c3a2cd111
Change note creation script uses EDITOR environment variable
...
Changes the script for creating change notes to read the EDITOR environment variable, and use the editor specified therein. This makes the script more convenient when used from a terminal. The VSCode task is updated to the set EDITOR to `code -r` which preserves the current behavior.
2025-02-11 14:04:46 +01:00
Taus
a69e3f5236
Python: Add change note
...
Co-authored-by: yoff <yoff@github.com >
2025-02-11 13:02:09 +00:00
Taus
918c05c538
Python: Don't prune any MatchLiteralPatterns
...
Extends the mechanism introduced in
https://github.com/github/codeql/pull/18030
to behave the same for _all_ `MatchLiteralPattern`s, not just the ones
that happen to be the constant `True` or `False`.
Co-authored-by: yoff <yoff@github.com >
2025-02-11 12:58:52 +00:00
Jonas Jensen
71c078dbdd
Java: precise diff-informed NumericCastTainted
...
It was discovered by the upcoming support for exact locations matching
in diff-informed testing that this data-flow configuration did not
correspond exactly to the query.
2025-02-11 13:49:15 +01:00
Michael Nebel
83f8a4057c
C#: Address review comments.
2025-02-11 13:46:28 +01:00
Michael Nebel
fbbdea09a2
C#: Add change note.
2025-02-11 13:42:48 +01:00
Michael Nebel
5d72b29fe9
C#: Update flow summaries test expected output.
2025-02-11 13:42:46 +01:00
Michael Nebel
ff74024f50
C#: Re-generate .NET Runtime models based on .NET 9.
2025-02-11 13:42:45 +01:00
Michael Nebel
54345044ad
C#: Consider properties that has any auto declaration as an auto property in terms of field store.
2025-02-11 13:42:43 +01:00
Michael Nebel
dde28a1bed
C#: Only disregard generated summaries in case there is a static call target in source code.
2025-02-11 13:42:40 +01:00
Michael Nebel
7476d9ed6b
Merge pull request #18734 from michaelnebel/csharp/launchjson
...
C#: Add the standard library to the list of references for debugging …
2025-02-11 13:16:29 +01:00
Asger F
eedfa4dbb2
Merge pull request #18341 from asgerf/py/diff-informed
...
Python: enable diff-informed data flow queries
2025-02-11 13:15:44 +01:00
Simon Friis Vindum
efb5b9b27c
Rust: Add a comment to clearify test
2025-02-11 13:15:32 +01:00
Asger F
56ff9351f2
JS: Update test output again
2025-02-11 12:59:11 +01:00
Asger F
967c0860f9
Test: support queries that don't select a Location
2025-02-11 12:58:49 +01:00
Asger F
5b0eb0f6cc
JS: Move an Alert annotation to its correct line
2025-02-11 12:58:47 +01:00
Asger F
84c02d0863
JS: Enable test post-processing
2025-02-11 12:58:46 +01:00
Asger F
fb79ab1c8c
JS: Update line numbers
2025-02-11 12:58:45 +01:00
Asger F
a1c3dca5de
JS: Convert OK-style to $-style expectations in one test
2025-02-11 12:58:44 +01:00
yoff
0912e3b024
ruby: use inline expectation tests
2025-02-11 12:51:25 +01:00
Simon Friis Vindum
003058c44a
Shared/Ruby: Use e for edges in documentation
2025-02-11 12:48:28 +01:00
Simon Friis Vindum
d6e8acd080
C#/Ruby/Swift: Tweaks to documentation
...
Co-authored-by: Anders Schack-Mulligen <aschackmull@users.noreply.github.com >
2025-02-11 12:44:19 +01:00
