Commit Graph

85654 Commits

Author SHA1 Message Date
Tom Hvitved
d6ec174e0c Rust: Remove MacroBlockExpr class 2026-01-13 10:20:47 +01:00
Geoffrey White
b2d19b610e Rust: US spelling. 2026-01-13 09:01:12 +00:00
Anders Schack-Mulligen
1151fc3be2 Update csharp/ql/lib/semmle/code/csharp/dataflow/internal/ExternalFlow.qll
Co-authored-by: Owen Mansel-Chan <62447351+owen-mc@users.noreply.github.com>
2026-01-13 09:14:33 +01:00
Simon Friis Vindum
e7791120fa Rust: Address review comments 2026-01-13 07:53:39 +01:00
dependabot[bot]
37bb9d77d3 Bump golang.org/x/tools
Bumps the extractor-dependencies group in /go/extractor with 1 update: [golang.org/x/tools](https://github.com/golang/tools).


Updates `golang.org/x/tools` from 0.40.0 to 0.41.0
- [Release notes](https://github.com/golang/tools/releases)
- [Commits](https://github.com/golang/tools/compare/v0.40.0...v0.41.0)

---
updated-dependencies:
- dependency-name: golang.org/x/tools
  dependency-version: 0.41.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: extractor-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-01-13 05:38:36 +00:00
Ian Lynagh
dcd0a69759 Merge remote-tracking branch 'upstream/main' into igfoo/mb 2026-01-13 01:01:35 +00:00
Mathias Vorreiter Pedersen
4f4baee888 C++: Fix Code Scanning alerts. 2026-01-12 21:08:02 +00:00
Mathias Vorreiter Pedersen
aa058c2cca C++: Generate IR for assertions in release builds. 2026-01-12 21:07:55 +00:00
Mathias Vorreiter Pedersen
a18f3b6859 C++: Avoid generating IR for a few cases where we will be synthesizing assertions. 2026-01-12 21:06:09 +00:00
Mathias Vorreiter Pedersen
67ab0fee83 C++: Add a few helper predicates. 2026-01-12 21:06:07 +00:00
Mathias Vorreiter Pedersen
6e3fd25b09 C++: Add tests for assertions in release builds. 2026-01-12 21:06:02 +00:00
Taus
de1d183ca6 Misc: Add CLI interface to create-change-note.py
This may be useful when working in "the other place", where the VSCode
task may not be easily accessible. (Also, some people may just prefer to
use a CLI interface.)
2026-01-12 15:32:03 +00:00
Simon Friis Vindum
9e74a7869a Rust: Move everything type inference related into the typeinference directory 2026-01-12 16:31:34 +01:00
Taus
8c90c113c2 Update change note to reflect Python 2 changes 2026-01-12 15:27:38 +00:00
Taus
659ec3999b Mark generated files as generated 2026-01-12 15:24:01 +00:00
Tom Hvitved
c666fc71ca Merge pull request #21147 from hvitved/rust/fix-more-models
Rust: Add missing `.Reference` in various models
2026-01-12 15:27:51 +01:00
Geoffrey White
a78756ff8b Merge branch 'main' into splitoff 2026-01-12 14:21:01 +00:00
Geoffrey White
479c58bef5 Rust: Add a barrier. 2026-01-12 13:52:54 +00:00
Geoffrey White
7658ebb449 Rust: Add spurious test case for rust/uncontrolled-allocation-size. 2026-01-12 13:52:53 +00:00
Tom Hvitved
17441a5462 Rust: Add missing .Reference in various models 2026-01-12 14:21:45 +01:00
Anders Schack-Mulligen
c28062aff5 Merge pull request #21127 from aschackmull/ssa/phi-input-perf
SSA: Improve performance of finding relevant phi input nodes.
2026-01-12 13:29:58 +01:00
Anders Schack-Mulligen
8e2d74a7b1 Java: Add TypeFlow base case for partially unbound types. 2026-01-12 12:45:06 +01:00
Tom Hvitved
6b34d0d250 Merge pull request #21123 from hvitved/rust/fix-path-models
Rust: Improve/add various models
2026-01-12 12:20:56 +01:00
Simon Friis Vindum
e4db3b17b4 Merge pull request #20584 from paldepind/cpp/range-analysis-fix
C++: Range analysis guard improvement
2026-01-12 11:23:48 +01:00
Simon Friis Vindum
c9e6d4235f Merge pull request #21139 from paldepind/rust/fn-syntax-return
Rust: Make function trait syntax without return type default to unit
2026-01-12 11:22:50 +01:00
Owen Mansel-Chan
57ec850397 Merge pull request #21146 from github/dependabot/go_modules/go/extractor/extractor-dependencies-555680b348
Bump golang.org/x/mod from 0.31.0 to 0.32.0 in /go/extractor in the extractor-dependencies group
2026-01-12 09:44:33 +00:00
Anders Schack-Mulligen
aae8ec2240 SSA: Use fastTC for even better performance. 2026-01-12 09:39:15 +01:00
dependabot[bot]
4318c285cb Bump golang.org/x/mod
Bumps the extractor-dependencies group in /go/extractor with 1 update: [golang.org/x/mod](https://github.com/golang/mod).


Updates `golang.org/x/mod` from 0.31.0 to 0.32.0
- [Commits](https://github.com/golang/mod/compare/v0.31.0...v0.32.0)

---
updated-dependencies:
- dependency-name: golang.org/x/mod
  dependency-version: 0.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: extractor-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-01-12 03:07:33 +00:00
Mauro Baluda
0464e64469 Merge branch 'github:main' into couchdb 2026-01-09 17:24:01 +01:00
Chris Smowton
44089d84a3 Merge pull request #21102 from github/smowton/admin/respect-config-paths-filters-pre-finalize
All languages: account for paths and paths-ignore in XML and other ancillary extraction
2026-01-09 16:23:26 +00:00
Chris Smowton
fa0e8cc4a4 Merge pull request #21137 from smowton/smowton/admin/reapply-java-xml-paths-filtering
Java: revert revert of `paths` / `paths-ignore` handling in XML and other ancillary extractor
2026-01-09 16:22:26 +00:00
Mauro Baluda
4c8058d97b Merge branch 'github:main' into couchdb 2026-01-09 17:20:40 +01:00
Simon Friis Vindum
41921a85bb Rust: Make function trait syntax without return type default to unit 2026-01-09 16:08:01 +01:00
Simon Friis Vindum
d45269609a Rust: Add test with fn trait syntax without return type 2026-01-09 15:38:12 +01:00
Chris Smowton
634e9e6c39 Reapply "Change note"
This reverts commit 688f10daf1.
2026-01-09 13:42:48 +00:00
Chris Smowton
13e0e6c694 Reapply "Add integration test for paths and paths-ignore vs. Java buildless mode"
This reverts commit 9db11f73c5.
2026-01-09 13:42:43 +00:00
Tom Hvitved
f3d78a4e0b Rust: Update expected test output 2026-01-09 14:40:04 +01:00
Tom Hvitved
609eb17e30 Rust: Add more models 2026-01-09 14:40:03 +01:00
Tom Hvitved
0d0029f5a3 Rust: Update expected test output 2026-01-09 14:40:01 +01:00
Tom Hvitved
792908586a Rust: Add some ffi models 2026-01-09 14:40:00 +01:00
Tom Hvitved
31b0d3eb1d Rust: Fix some models in fs.model.yml 2026-01-09 14:39:59 +01:00
Tom Hvitved
636bbe30f9 Merge pull request #21122 from hvitved/rust/summary-read-taint-step
Rust: Also lift read steps in summaries as taint steps
2026-01-09 14:39:39 +01:00
Simon Friis Vindum
ac62a9fe57 Merge pull request #21133 from paldepind/rust/type-item-path-resolution
Rust: Use `TypeItem` in path resolution
2026-01-09 14:35:12 +01:00
Taus
89ddd67ebe Merge pull request #21002 from github/tausbn/python-add-models-for-zstd-compression
Python: Add modelling for `zstd.compression`
2026-01-09 14:05:06 +01:00
Michael B. Gale
157487d8f2 Java: Add change note for plugin repo support 2026-01-09 12:49:12 +00:00
yoff
1ac3706e75 Python support ListElement in MaD 2026-01-09 13:08:06 +01:00
Tom Hvitved
209ee9236b Rust: Also lift read steps in summaries as taint steps 2026-01-09 12:13:46 +01:00
Tom Hvitved
1a29b32af9 Merge pull request #20987 from hvitved/rust/type-inference-deref-trait
Rust: Handle `Deref` trait in type inference and data flow
2026-01-09 12:10:46 +01:00
Owen Mansel-Chan
9493d9d5ab Merge pull request #21131 from github/workflow/coverage/update
Update CSV framework coverage reports
2026-01-09 10:48:36 +00:00
Simon Friis Vindum
11bd334370 Rust: Use TypeItem in path resolution 2026-01-09 11:40:16 +01:00