Tom Hvitved
e2eaf80202
Rust: Fix QL4QL finding
2026-01-09 11:28:37 +01:00
Owen Mansel-Chan
d7acb75f9d
Merge pull request #21055 from owen-mc/java/allow-mad-barriers
...
Java: allow MaD barriers
2026-01-09 10:27:48 +00:00
Tom Hvitved
6028cd6636
Address review comments
2026-01-09 11:14:23 +01:00
Owen Mansel-Chan
ca805e9d84
Fix QLDoc
2026-01-09 10:09:22 +00:00
Owen Mansel-Chan
c271e52fe5
Validate models for barriers and barrier guards
2026-01-09 10:04:56 +00:00
Owen Mansel-Chan
8c9318b1a0
Minor tweaks to QLDocs
2026-01-09 09:38:10 +00:00
Anders Schack-Mulligen
e35fa923c7
C#: Add support for MaD barriers and barrier guards.
2026-01-09 10:32:19 +01:00
Owen Mansel-Chan
70c90a1063
Merge pull request #21129 from owen-mc/java/delete-promoted-experimental-models
...
Java: Delete experimental models that have been promoted
2026-01-09 09:30:32 +00:00
Simon Friis Vindum
3a135888c7
C++: Improve bounds from inequalities on integers
2026-01-09 10:26:36 +01:00
Simon Friis Vindum
9af432d2f9
C++: Add simple range analysis tests for inequalities
2026-01-09 10:12:36 +01:00
github-actions[bot]
bea93ae03e
Add changed framework coverage reports
2026-01-09 00:26:15 +00:00
Owen Mansel-Chan
cce6823d3b
Delete experimental models that have been promoted
...
They were promoted in https://github.com/github/codeql/pull/17590
2026-01-08 15:33:59 +00:00
Anders Schack-Mulligen
af5adbac30
SSA: Improve performance of finding relevant phi input nodes.
2026-01-08 15:02:34 +01:00
Owen Mansel-Chan
8a80158959
Merge pull request #17590 from Kwstubbs/java-mad-test
...
Java: FileUpload Support MaD
2026-01-08 13:33:55 +00:00
Jeroen Ketema
72f1aa9381
C++: Add change notes
2026-01-08 13:59:39 +01:00
Jeroen Ketema
9ceb091f85
C++: Update predicate after getAnArrayOffset/0 deprecation
2026-01-08 13:54:02 +01:00
Simon Friis Vindum
c8728c24dc
Merge pull request #21125 from paldepind/rust/builtin-refactor
...
Rust: Use `getAssocItem` consistently in stdlib classes
2026-01-08 13:43:40 +01:00
Jeroen Ketema
4c3fb0c7c4
C++: Deprecate getArrayOffset/0
2026-01-08 13:22:38 +01:00
yoff
608fa1a0a3
Merge pull request #20910 from yoff/java/more-thread-safe-initialisers
2026-01-08 13:16:39 +01:00
Jeroen Ketema
e0f8b1254e
C++: Update expected test results
2026-01-08 13:13:20 +01:00
Jeroen Ketema
3907fc7e5a
C++: Add predicates to support multidimensional subscript operators
2026-01-08 13:13:10 +01:00
Simon Friis Vindum
26bd332617
Merge pull request #21113 from paldepind/cpp/range-analysis-float-ceil
...
C++: Remove `safeFloor` in simple range analysis
2026-01-08 13:07:30 +01:00
Jeroen Ketema
647d11a6ce
C++: Add test for C++23 multidimensional subscript operators
2026-01-08 13:02:31 +01:00
Jeroen Ketema
0c8fd833af
Merge pull request #21124 from jketema/jketema/vec-expr
...
C++: Add tests for logical vector operations
2026-01-08 12:50:31 +01:00
Owen Mansel-Chan
c419b51efd
Merge pull request #21120 from github/workflow/coverage/update
...
Update CSV framework coverage reports
2026-01-08 11:32:08 +00:00
Simon Friis Vindum
56f5328530
Rust: Use getAssocItem consistently in stdlib classes
2026-01-08 11:59:10 +01:00
Jeroen Ketema
217c5cb78b
C++: Update tests after adding extractor support for logical vector operations
2026-01-08 11:55:47 +01:00
Jeroen Ketema
89c11b8daf
C++: Add tests for logical vector operations
2026-01-08 11:54:49 +01:00
Jeroen Ketema
1ebf623541
C++: Add space in tests for adding new tests in a logical place
2026-01-08 11:54:42 +01:00
Paolo Tranquilli
22b88aea06
Merge pull request #21119 from github/redsun82/cmake
...
Cmake: fix bazel not generating files for the cmake generator
2026-01-08 09:59:08 +01:00
Asger F
2ea3c0e366
Merge pull request #20938 from tesseractjh/js/use-cache-directives
...
JS: Add use cache directives from Next.js 16
2026-01-08 09:51:53 +01:00
Simon Friis Vindum
7c0054bf25
C++: Tweak a comment in simple range analysis
...
Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com >
2026-01-08 08:51:04 +01:00
github-actions[bot]
614a05133e
Add changed framework coverage reports
2026-01-08 00:26:30 +00:00
Chris Smowton
d048d394b4
Merge pull request #21117 from smowton/smowton/admin/revert-java-paths-directives
...
Java: revert filtering of ancillary data extraction
2026-01-07 16:13:21 +00:00
Jeroen Ketema
a5f6806239
Merge pull request #21105 from jketema/load-this
...
C++: Use the loaded `this` instead of the `this` initialization
2026-01-07 16:51:14 +01:00
Paolo Tranquilli
e3503be1d1
Cmake: fix bazel not generating files for the cmake generator
2026-01-07 16:36:36 +01:00
Taus
8602a2d59b
Python: Use correct first parameter name for zstd call
...
Co-authored-by: yoff <yoff@github.com >
2026-01-07 14:47:11 +01:00
Owen Mansel-Chan
6a3c74c989
Merge pull request #20999 from joefarebrother/java-spring-websocket
...
Java: Add models for spring WebSocketHandler
2026-01-07 13:29:19 +00:00
Chris Smowton
688f10daf1
Revert "Change note"
...
This reverts commit 6fb6923f63
2026-01-07 13:20:17 +00:00
Chris Smowton
9db11f73c5
Revert "Add integration test for paths and paths-ignore vs. Java buildless mode"
...
This reverts commit 102cfd06a7
2026-01-07 13:20:12 +00:00
Tom Hvitved
fef00c1668
Add change note
2026-01-07 14:17:48 +01:00
Tom Hvitved
2d4da807c1
Merge pull request #21114 from hvitved/rust/exclude-result-err-taint-step
...
Rust: Add `Result::Err` to `excludeFieldTaintStep`
2026-01-07 14:01:49 +01:00
Michael Nebel
7ed3d3f3e1
Merge pull request #21065 from michaelnebel/csharp/implicitspanconversions
...
C# 14: Implicit span conversions.
2026-01-07 13:39:58 +01:00
Simon Friis Vindum
f5ddb1d51d
C++: Remove safeFloor in simple range analysis
2026-01-07 12:49:09 +01:00
Owen Mansel-Chan
6c291e1e7f
Add model for handlePongMessage and update test
2026-01-07 11:09:59 +00:00
Tom Hvitved
1e792132ba
Rust: Add Result::Err to excludeFieldTaintStep
2026-01-07 11:37:08 +01:00
Asger F
cf0b77074f
JS: Workaround forceLocal not supporting 'result' column
...
A bug made it into the release which causes compilation errors when
forceLocal is used on a predicate with a result column.
This commit works around the issue by converting the result column
to a positional parameter, for the predicates that we use forceLocal on.
It should be safe to revert this commit once the compiler fix has made
it into a stable release.
2026-01-07 11:05:41 +01:00
Asger F
e16cacd48d
JS: Rename "in scope" to "in active file"
2026-01-07 11:05:41 +01:00
Asger F
87049bd07e
Update javascript/ql/lib/semmle/javascript/ApiGraphs.qll
...
Co-authored-by: Taus <tausbn@github.com >
2026-01-07 11:05:41 +01:00
Asger F
56a6fe4c08
Update javascript/ql/lib/semmle/javascript/ApiGraphs.qll
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2026-01-07 11:05:41 +01:00
