Mathias Vorreiter Pedersen
2c156994de
C++: Add two more 'fopen'-like models.
2026-05-18 14:47:11 +01:00
Mathias Vorreiter Pedersen
19781e53e7
C++: Add change notes.
2026-05-18 14:06:21 +01:00
Mathias Vorreiter Pedersen
5f10a88208
C++: Handle size arguments in 'getOutputArgument'.
2026-05-18 14:06:18 +01:00
Mathias Vorreiter Pedersen
5add24be59
C++: Add scanf_s models.
2026-05-18 14:06:16 +01:00
Mathias Vorreiter Pedersen
16235d7aca
C++: Add a 'call' column to 'hasRemoteFlowSource' and 'hasLocalFlowSource' to support modeling of 'scanf_s'.
2026-05-18 14:06:05 +01:00
Jeroen Ketema
5f6553490c
Update cpp/ql/lib/change-notes/2026-05-16-alias-template.md
2026-05-18 15:04:52 +02:00
Jeroen Ketema
d14b8064b0
Update cpp/ql/lib/semmle/code/cpp/TypedefType.qll
2026-05-18 15:04:03 +02:00
Jeroen Ketema
7636bf560e
Potential fix for pull request finding
...
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com >
2026-05-18 15:02:34 +02:00
Michael Nebel
9b2b5971fe
Merge pull request #21846 from michaelnebel/csharp/updateextractordependencies
...
C# 14: Update paket and dependencies.
2026-05-18 14:25:55 +02:00
Jeroen Ketema
c2e2770bbf
C++: Simplify type alias class naming
2026-05-18 14:22:04 +02:00
Óscar San José
b551e89ea8
Merge pull request #21859 from github/release-prep/2.25.5
...
Release preparation for version 2.25.5
2026-05-18 14:10:35 +02:00
github-actions[bot]
e38616a2ef
Release preparation for version 2.25.5
2026-05-18 12:05:32 +00:00
Jeroen Ketema
e55edf2f1f
Merge pull request #21853 from jketema/jketema/template-constants
...
C++: Update test results after extractor changes
2026-05-18 13:43:54 +02:00
Anders Schack-Mulligen
cb0fc786c7
Ruby: Minor cleanup, Callable is a StmtSequence.
2026-05-18 13:05:14 +02:00
Óscar San José
8a199f963d
Merge pull request #21692 from github/copilot/update-codeql-query-for-composite-actions
...
Extend `actions/unpinned-tag` to analyze composite action metadata (`action.yml` / `action.yaml`)
2026-05-18 12:17:13 +02:00
Mathias Vorreiter Pedersen
2902a19a50
C++: Add more scanf testing.
2026-05-18 10:58:50 +01:00
Mathias Vorreiter Pedersen
fcdce550e8
Merge pull request #21857 from MathiasVP/fix-cleartext-fp
...
C++: Fix FP on `cpp/cleartext-transmission`
2026-05-18 10:58:13 +01:00
Jeroen Ketema
76f71dd235
Merge pull request #21817 from jketema/go-version
...
Go: Make version parsing robust in the face of custom Go builds
2026-05-18 10:45:55 +02:00
Tom Hvitved
7f1bebe8ba
Potential fix for pull request finding
...
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com >
2026-05-17 20:29:19 +02:00
Jeroen Ketema
305a63bc38
C++: Update dbscheme stats
2026-05-16 16:10:27 +02:00
Jeroen Ketema
963715884e
C++: Add change note
2026-05-16 11:50:00 +02:00
Jeroen Ketema
b6847974f7
C++: Add upgrade and downgrade scripts
2026-05-16 09:26:08 +02:00
Jeroen Ketema
336bbc229e
C++: Add support for alias templates
...
Add other missing cases to `isFromTemplateInstantiationRec` and
`isFromUninstantiatedTemplateRec` while here.
2026-05-16 09:11:54 +02:00
Mathias Vorreiter Pedersen
8ce601b1d7
C++: Add change notes.
2026-05-15 21:22:38 +01:00
Mathias Vorreiter Pedersen
4396e66f35
C++: Fix FP by providing an implementation of 'hasSocketInput'.
2026-05-15 21:12:34 +01:00
Mathias Vorreiter Pedersen
eda33adafd
C++: Add FP.
2026-05-15 21:07:45 +01:00
BazookaMusic
5ef09a102c
add tests for langchain and remove wrong model for guardrails agent
2026-05-15 12:49:36 +02:00
BazookaMusic
fe7eabd56f
Add run from agents into the user prompt and fix an issue with classifying it as a system prompt injection
2026-05-15 12:39:54 +02:00
BazookaMusic
535adc7a31
add barrier when data flows into user messages for system prompt detection, remove embeddings from user prompt injection query
2026-05-15 12:14:14 +02:00
Geoffrey White
a4b2c0f6fd
Update change notes (Copilot's suggestions).
2026-05-15 09:24:29 +01:00
Kristen Newbury
3eaf04ef72
Fix expected files for changes to alert messages UntrustedCheckoutCritical and UntrustedCheckoutHigh
2026-05-14 15:05:08 -04:00
Jeroen Ketema
d47ee6bed9
C++: Update test results after extractor changes
2026-05-14 20:22:47 +02:00
Kristen Newbury
914c7e1a7b
Improve UntrustedCheckoutX helpfiles
2026-05-14 13:34:59 -04:00
Kristen Newbury
29ffd87bf8
Add full stop to alert messages in UntrustedCheckoutHigh and UntrustedCheckoutCritical
2026-05-14 12:58:20 -04:00
Kristen Newbury
eae9c0ef0e
Add one missing changenote actions-queries-untrusted-checkout
2026-05-14 12:06:55 -04:00
Kristen Newbury
c36ad7be37
Adjust untrusted checkout actions queries
2026-05-14 11:59:55 -04:00
Florin Coada
a84332ac15
Merge pull request #21727 from github/docs/customizing-library-models-for-rust
...
docs: Add 'Customizing library models for Rust' documentation
2026-05-14 15:04:12 +01:00
Geoffrey White
59dbd68a5e
Add change notes.
2026-05-14 14:46:05 +01:00
Tom Hvitved
3f7b50ebba
Type inference: Unify getABaseTypeMention and conditionSatisfiesConstraint
2026-05-13 16:24:36 +02:00
Taus
dd9c066c61
unified: Regenerate files
2026-05-13 14:24:12 +00:00
Taus
f4f85b58ca
unified: Remove some pointless fields
...
All of these fields have contents that are uniquely determined by the
node they appear on, so they convey no information.
2026-05-13 14:22:06 +00:00
Taus
caef72b047
unified: Introduced named property_binding node
...
This groups together a bunch of related values that would otherwise be
impossible to match up correctly.
2026-05-13 13:54:21 +00:00
Taus
9787a8b072
unified: Group enum entries
...
Same as in the preceding commit.
2026-05-13 13:51:25 +00:00
Taus
c8f7c3d7f2
unified: Group more paired items
...
Same as in the preceding commit, these items do not make sense as
separate fields on the parent node, so we materialise (or create new)
intermediate nodes to group them together.
2026-05-13 13:49:30 +00:00
Taus
ea6f3a9568
unified: Encapsulate function parameters
...
The field representation would have made it difficult to figure out
which parameters correspond to which default values and attributes, so
instead we now encapsulate these in a new `function_parameter` node.
2026-05-13 13:20:58 +00:00
Taus
5d6dc5c3c3
unified: Clean up statements/block mess
...
Introduces (by making it named) a `block` node, and conversely makes
`statements` anonymous. This enables us to sensibly distinguish between
the "then" and "else" branch of an `if_statement`, which we were not
able to previously.
2026-05-13 13:06:34 +00:00
Owen Mansel-Chan
0c274849be
Merge pull request #21842 from github/workflow/coverage/update
...
Update CSV framework coverage reports
2026-05-13 13:48:35 +01:00
Owen Mansel-Chan
b49b8ff6bd
Give slightly more detail in change note
2026-05-13 13:47:53 +01:00
Mathias Vorreiter Pedersen
25c4d9d09b
Potential fix for pull request finding
...
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com >
2026-05-13 13:27:04 +01:00
Mathias Vorreiter Pedersen
07b8d7eba7
C++: Accept test changes in experimental query.
2026-05-13 13:14:25 +01:00
