dependabot[bot]
3d7ab2e0b0
Bump actions/setup-go from 4 to 5
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 4 to 5.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](https://github.com/actions/setup-go/compare/v4...v5 )
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-12-07 03:43:13 +00:00
github-actions[bot]
92af5f5386
Post-release preparation for codeql-cli-2.15.4
2023-12-06 22:59:22 +00:00
Rasmus Lerchedahl Petersen
263c0aade7
Python: adjust test expectations
...
mostly removing of nodes from the graph.
One result lost:
```
check("submodule.submodule_attr", submodule.submodule_attr, "submodule_attr", globals()) #$ MISSING:prints=submodule_attr
```
2023-12-06 23:00:51 +01:00
Mathias Vorreiter Pedersen
04c2ce97fd
Merge pull request #15027 from jketema/more-exit
...
C++: Also support the `__noreturn__` attribute in `exits`
2023-12-06 21:48:26 +00:00
Chuan-kai Lin
ff0c1ca2d6
Merge pull request #15031 from github/release-prep/2.15.4
...
Release preparation for version 2.15.4
codeql-cli/v2.15.4
2023-12-06 13:35:26 -08:00
github-actions[bot]
c04457e9e7
Release preparation for version 2.15.4
2023-12-06 21:11:50 +00:00
Chuan-kai Lin
4a7e816a30
Merge pull request #15029 from github/copy-alexdenisov/update-docs
...
docs: update supported Swift version
2023-12-06 13:08:54 -08:00
Rasmus Lerchedahl Petersen
8c5ca3f564
Python: remove control flow nodes
...
for module entry definitions from the dataflow graph.
2023-12-06 21:47:03 +01:00
Alex Denisov
7923c33a7b
docs: update supported Swift version
2023-12-06 12:25:31 -08:00
Robert Marsh
1087087acb
Merge pull request #14570 from rdmarsh2/rdmarsh2/swift/extract-pattern-types
...
Swift: extract types for patterns
2023-12-06 14:11:53 -05:00
Geoffrey White
366a9f1b7e
Swift: Convert unsafepointer.swift test to use labelled sources.
2023-12-06 18:57:30 +00:00
Jeroen Ketema
af1da1e9ae
C++: Also support the __noreturn__ attribute in exits
...
Observed this attribute while working on coding standards test regression
when replacing Guards by IRGuards.
2023-12-06 18:08:39 +01:00
Mathias Vorreiter Pedersen
1bc6f88f58
Merge pull request #14992 from jketema/ir-guards-replacement
...
C++: replace Guards with IRGuards
2023-12-06 15:55:22 +00:00
amammad
20a3211d06
move sanitizers from sharedxss::sanitizer to EscapeFunction::Range, added proper inline tests
2023-12-06 16:19:34 +01:00
Tamas Vajk
eeabb81973
Adjust expected test files
2023-12-06 16:00:43 +01:00
amammad
3e0ed0090f
added BodyWriter Sink, added proper content-type header in tests to comply new changed xss strategy
2023-12-06 16:00:36 +01:00
Tamas Vajk
a705f6dc0d
C#: Change StringBuilder flow models to not use Element access path
2023-12-06 15:54:34 +01:00
amammad
d3099ff482
fix tests, move from SharedXss::Sink to Http::* classes
2023-12-06 15:52:50 +01:00
Ian Lynagh
c1cc441da7
Merge pull request #15023 from igfoo/igfoo/df-wrapper
...
Kotlin: Fix dataflow with Array.set wrappers
2023-12-06 14:48:54 +00:00
Tamas Vajk
50b7ab8448
C#: Add interpolated string handler attributes to generated stubs
2023-12-06 15:40:48 +01:00
Tamás Vajk
faa63dda8b
Merge pull request #14994 from tamasvajk/standalone/framework-assembly-reshuffle
...
C#: Only consider latest version of dotnet framework flavors
2023-12-06 14:54:11 +01:00
Ian Lynagh
fc11a87882
Kotlin: Fix dataflow with Array.set wrappers
2023-12-06 12:19:46 +00:00
Ian Lynagh
7fc7b96ed7
Kotlin: Add a test for dataflow with an Array.set wrapper
2023-12-06 12:19:25 +00:00
Ian Lynagh
49c188e612
Merge pull request #15009 from igfoo/igfoo/qual
...
Docs: DataFlow: Add a missing qualifier
2023-12-06 12:10:56 +00:00
Jeroen Ketema
edf178696d
C++: accept test changes for IR Guards replacement
2023-12-06 12:47:20 +01:00
Robert Marsh
88073a5fb2
C++: change note for IRGuards replacing Guards
2023-12-06 12:47:20 +01:00
Robert Marsh
172445f5e7
C++: replace Guards with IRGuards
2023-12-06 12:47:20 +01:00
Jeroen Ketema
db1dc6fa2c
Merge pull request #15021 from jketema/ir-guards-unreached-fix
...
C++: Fix handling of unreached instructions in IRGuards
2023-12-06 12:46:09 +01:00
Paolo Tranquilli
db0fc3775a
Merge pull request #15004 from github/alexdenisov/fix-swift-autobuilder-bug
...
Swift: fix autobuilder bug when Xcode failure breaks the whole autobuild process
2023-12-06 11:29:26 +01:00
Mathias Vorreiter Pedersen
9fa20f5f39
Merge pull request #14799 from MathiasVP/solve-modify-copy-problem
...
DataFlow: Add language-specific predicate for ignoring steps in flow-through calculation
2023-12-06 09:55:34 +00:00
Jeroen Ketema
4390e4cad3
C++: Fix handling of unreached instructions in IRGuards
2023-12-06 10:23:27 +01:00
Jeroen Ketema
d6e30cd828
C++: Add test showing unreachable instructions give spurious blocks in IRGuards
2023-12-06 10:23:27 +01:00
Tamas Vajk
efa7408491
C#: Use latest asp.net core/windows desktop framework DLLs from nuget folder
2023-12-06 10:17:02 +01:00
Geoffrey White
ff8b796731
Merge pull request #14692 from geoffw0/webview3
...
Swift: Simplify AdoptsWkNavigationDelegate in WebView.qll.
2023-12-06 09:11:33 +00:00
Jeroen Ketema
49a4306514
Merge pull request #15015 from jketema/exit
...
C++: Add `_Exit` to the list of exiting (non-returning) functions
2023-12-06 10:07:55 +01:00
Geoffrey White
4cec14657e
Merge pull request #14853 from geoffw0/logsinks
...
Swift: More sinks for swift/cleartext-logging
2023-12-06 09:00:26 +00:00
Owen Mansel-Chan
aad847497b
Merge pull request #14962 from owen-mc/go/improve-tests-incorrect-integer-conversion
...
Go: Improve tests for Incorrect Integer Conversion
2023-12-06 07:40:00 +00:00
Nora Dimitrijević
6d24eb4814
Merge pull request #14897 from d10c/d10c/relax-cpp-dbscheme
...
C++: Relax the dbscheme for `link_targets/2`
2023-12-05 23:27:03 +01:00
Nora Dimitrijević
66c0a4af5a
Upgrade/downgrade script
2023-12-05 22:03:40 +01:00
Nora Dimitrijević
0307354d6e
Relax the C++ dbscheme for link_targets/2
2023-12-05 22:03:40 +01:00
Chuan-kai Lin
5b62c0cb53
Merge pull request #15016 from github/revert-15003-dependabot/github_actions/actions/labeler-5
...
Revert "Bump actions/labeler from 4 to 5"
2023-12-05 12:43:16 -08:00
Chuan-kai Lin
ba57a0363c
Revert "Bump actions/labeler from 4 to 5"
2023-12-05 12:09:56 -08:00
Jeroen Ketema
696cbeae5c
C++: Add _Exit to the list of exiting (non-returning) functions
2023-12-05 20:33:43 +01:00
Tom Hvitved
dde83b6415
Merge pull request #14709 from hvitved/ruby/shared-type-tracking
...
Ruby: Adopt shared type tracking library
2023-12-05 20:12:06 +01:00
Ian Lynagh
2c625e34b5
Merge pull request #15008 from igfoo/igfoo/kot-arr-taint
...
Kotlin: Track taint through Array.get/set
2023-12-05 18:30:21 +00:00
Geoffrey White
521d98ed8d
C++: Make the encryption words a tiny bit more flexible.
2023-12-05 18:03:17 +00:00
Geoffrey White
e95098f61f
C++: Add 'experimental' tag.
2023-12-05 18:03:11 +00:00
Geoffrey White
cde975dc24
C++: Add even more test cases.
2023-12-05 18:02:51 +00:00
Geoffrey White
2f0be40f37
C++: Exclude results in some common libraries.
2023-12-05 18:00:00 +00:00
amammad
1547cd0546
added inline tests, move to experimental dir
2023-12-05 18:59:46 +01:00