Jeroen Ketema
b6847974f7
C++: Add upgrade and downgrade scripts
2026-05-16 09:26:08 +02:00
Jeroen Ketema
336bbc229e
C++: Add support for alias templates
...
Add other missing cases to `isFromTemplateInstantiationRec` and
`isFromUninstantiatedTemplateRec` while here.
2026-05-16 09:11:54 +02:00
Mathias Vorreiter Pedersen
8ce601b1d7
C++: Add change notes.
2026-05-15 21:22:38 +01:00
Mathias Vorreiter Pedersen
4396e66f35
C++: Fix FP by providing an implementation of 'hasSocketInput'.
2026-05-15 21:12:34 +01:00
Mathias Vorreiter Pedersen
eda33adafd
C++: Add FP.
2026-05-15 21:07:45 +01:00
Geoffrey White
a4b2c0f6fd
Update change notes (Copilot's suggestions).
2026-05-15 09:24:29 +01:00
Kristen Newbury
3eaf04ef72
Fix expected files for changes to alert messages UntrustedCheckoutCritical and UntrustedCheckoutHigh
2026-05-14 15:05:08 -04:00
Jeroen Ketema
d47ee6bed9
C++: Update test results after extractor changes
2026-05-14 20:22:47 +02:00
Kristen Newbury
914c7e1a7b
Improve UntrustedCheckoutX helpfiles
2026-05-14 13:34:59 -04:00
Kristen Newbury
29ffd87bf8
Add full stop to alert messages in UntrustedCheckoutHigh and UntrustedCheckoutCritical
2026-05-14 12:58:20 -04:00
Kristen Newbury
eae9c0ef0e
Add one missing changenote actions-queries-untrusted-checkout
2026-05-14 12:06:55 -04:00
Kristen Newbury
c36ad7be37
Adjust untrusted checkout actions queries
2026-05-14 11:59:55 -04:00
Florin Coada
a84332ac15
Merge pull request #21727 from github/docs/customizing-library-models-for-rust
...
docs: Add 'Customizing library models for Rust' documentation
2026-05-14 15:04:12 +01:00
Geoffrey White
59dbd68a5e
Add change notes.
2026-05-14 14:46:05 +01:00
Tom Hvitved
3f7b50ebba
Type inference: Unify getABaseTypeMention and conditionSatisfiesConstraint
2026-05-13 16:24:36 +02:00
Owen Mansel-Chan
0c274849be
Merge pull request #21842 from github/workflow/coverage/update
...
Update CSV framework coverage reports
2026-05-13 13:48:35 +01:00
Owen Mansel-Chan
b49b8ff6bd
Give slightly more detail in change note
2026-05-13 13:47:53 +01:00
Mathias Vorreiter Pedersen
25c4d9d09b
Potential fix for pull request finding
...
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com >
2026-05-13 13:27:04 +01:00
Mathias Vorreiter Pedersen
07b8d7eba7
C++: Accept test changes in experimental query.
2026-05-13 13:14:25 +01:00
Mathias Vorreiter Pedersen
f40d42c575
C++: Perform an SCC reduction to simulate greatest fixed-point semantics.
2026-05-13 13:14:20 +01:00
Mathias Vorreiter Pedersen
8585bb616d
C++: Some writes are always certain regardless of the address.
2026-05-13 13:14:13 +01:00
Mathias Vorreiter Pedersen
fc80a2472d
C++: Slightly refactor certainty computation with a newtype.
2026-05-13 13:09:12 +01:00
Mathias Vorreiter Pedersen
6d5d57acca
C++: Add missing overrides.
2026-05-13 13:09:10 +01:00
Mathias Vorreiter Pedersen
e77d85f23e
C++: Add a new test to test assignment certainty (i.e., whether the entire buffer is overwritten).
2026-05-13 13:09:08 +01:00
Mathias Vorreiter Pedersen
b753e7d228
C++: Make 'toString' on 'Ssa::Definition' more clear.
2026-05-13 13:09:01 +01:00
Mathias Vorreiter Pedersen
8e25240282
C++: Add a FP caused by missing certainty around SSA writes from Uninitialized instructions.
2026-05-13 13:07:56 +01:00
Geoffrey White
c8196e439f
Merge branch 'main' into extsensitive
2026-05-13 13:04:48 +01:00
Michael Nebel
c8efc34e8b
C#: Update the generated lock, targets and bzl files.
2026-05-13 13:02:14 +02:00
Florin Coada
ab0b492429
Merge branch 'main' into docs/customizing-library-models-for-rust
2026-05-13 11:45:11 +01:00
Florin Coada
8abd3b93c9
Update docs/codeql/codeql-language-guides/customizing-library-models-for-rust.rst
...
Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com >
2026-05-13 11:44:43 +01:00
Paolo Tranquilli
ee13ea0f6b
Harden _relative_path for Windows and mixed-form inputs
...
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com >
2026-05-13 11:35:02 +02:00
Paolo Tranquilli
d28792537b
Python extractor: use relative paths in diagnostic locations
...
Diagnostic `Location.file` fields contained absolute filesystem paths,
causing the GitHub UI to generate broken file links with runner paths
like `/home/runner/work/...`. Now paths are relativized against the
source root (`LGTM_SRC` or cwd), falling back to absolute if the file
is outside the source root.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com >
2026-05-13 10:32:05 +02:00
Paolo Tranquilli
c2fc0cf111
Fix Windows path handling in diagnostic relativization
...
Canonicalize `current_dir()` to match canonicalized file paths (avoids
`\\?\` prefix mismatch on Windows), and normalize backslashes to
forward slashes in relative diagnostic paths.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com >
2026-05-13 10:31:48 +02:00
Paolo Tranquilli
c3cf7c2bca
Use absolute path fallback instead of file: URI
...
Drop the `url` crate dependency. When a path can't be relativized
against the source root, emit it as a bare absolute path and let the
CLI's SARIF generator handle URI conversion downstream.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com >
2026-05-13 10:28:27 +02:00
Michael Nebel
1e6570ec97
C#: Update paket to 10.3.1.
2026-05-13 10:22:45 +02:00
Asger F
cfa175357b
Merge pull request #21815 from asgerf/asgerf/missing-node-kind-error
...
Shared: Nicer panic message if node kind is missing
2026-05-13 10:11:14 +02:00
Paolo Tranquilli
57ac0192c0
Fix formatting
...
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com >
2026-05-13 09:48:45 +02:00
Paolo Tranquilli
d16bc36e83
Use relative paths in tree-sitter extractor diagnostics
...
Diagnostic `location.file` entries were using absolute paths (e.g.
`/home/runner/work/...`), causing broken links in the GitHub UI.
Now relativize against CWD (the source root during extraction), falling
back to a properly percent-encoded `file:` URI for paths outside it.
Fixes https://github.com/github/codeql/issues/21802
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com >
2026-05-13 09:45:37 +02:00
Michael Nebel
fa2d633596
C#: Address co-pilot review comments.
2026-05-13 09:24:59 +02:00
Michael Nebel
5ed3014f7d
C#: Add change-note.
2026-05-13 09:24:56 +02:00
Michael Nebel
4bd9005f9a
C#: Add data flow testcases for mutation operators.
2026-05-13 09:24:54 +02:00
Michael Nebel
0c3ab803ef
C#: Update the dispatch logic to account for all instance operator calls.
2026-05-13 09:24:51 +02:00
Michael Nebel
27e6b5c0fa
C#: Introduce a class for instance mutator operator calls.
2026-05-13 09:24:48 +02:00
Michael Nebel
23328e90d4
C#: Add extension increment/decrement examples.
2026-05-13 09:24:46 +02:00
Michael Nebel
9a805080ea
C#: Improve the GetCallType method to also take extension operators into account.
2026-05-13 09:24:43 +02:00
Michael Nebel
25274a1df2
C#: Add an increment/decrement operator test case.
2026-05-13 09:24:40 +02:00
Michael Nebel
1c50c0c2c6
C#: Update PrintAst expected output.
2026-05-13 09:24:37 +02:00
Michael Nebel
4ae4d7d78d
C#: Update condition for UnaryOperators to also handle user-defined instance increment and decrement operators.
2026-05-13 09:24:35 +02:00
Michael Nebel
3c9d89851d
C#: Adjust the extractor to correctly handle names for user defined increment and decrement operators.
2026-05-13 09:24:32 +02:00
Michael Nebel
ac7eb01817
C#: Add Increment/Decrement instance operator test example and update test expected output.
2026-05-13 09:24:29 +02:00