Owen Mansel-Chan
|
e5bd62dbd3
|
Add change note
|
2026-07-03 11:34:11 +01:00 |
|
Owen Mansel-Chan
|
76b4f4f223
|
Fix @Pattern sanitizer for TaintedPath
|
2026-07-03 11:34:06 +01:00 |
|
Owen Mansel-Chan
|
077b531e41
|
Add failing TaintedPath test for @Pattern sanitizer
|
2026-07-03 11:34:03 +01:00 |
|
Asger F
|
c23c3d9e79
|
unified: Translate bare names in patterns correctly
- Context is fully reset when stepping into an expr/stmt/body.
- Binding modifier is rolled into outer_modifiers.
|
2026-07-03 11:59:58 +02:00 |
|
Asger F
|
036ed04eee
|
unified: Support OrPattern bindings
|
2026-07-03 11:59:57 +02:00 |
|
Asger F
|
891e244116
|
unified: Add WhileStmt as a Conditional
|
2026-07-03 11:59:55 +02:00 |
|
Asger F
|
c8eb2071d8
|
unified: Add tests with 'while let'
|
2026-07-03 11:59:53 +02:00 |
|
Asger F
|
e7bff859e8
|
unified: More fixes in test cases
|
2026-07-03 11:59:51 +02:00 |
|
Asger F
|
6ea146f65b
|
unified: Fix broken block syntax
The original test was not valid Swift syntax
|
2026-07-03 11:59:50 +02:00 |
|
Asger F
|
a86c7ba422
|
unified: Flatten GuardIfStmt into the enclosing block
|
2026-07-03 11:59:47 +02:00 |
|
Asger F
|
d0cd4ac536
|
Shared: remove unused getLhs() predicate
|
2026-07-03 11:54:26 +02:00 |
|
Owen Mansel-Chan
|
c3a0b65c0c
|
Merge pull request #22115 from owen-mc/java/update-mad-docs
Java: Add section in models docs about specifying java types
|
2026-07-03 09:16:29 +01:00 |
|
Owen Mansel-Chan
|
268e9eadac
|
Add section on specifying java types
|
2026-07-02 22:09:51 +01:00 |
|
Tom Hvitved
|
05ce686d43
|
Type inference: Small join-order tweak
|
2026-07-02 21:05:50 +02:00 |
|
Geoffrey White
|
ab1bc853fc
|
Merge pull request #22053 from geoffw0/arith
Rust: Fix FPs in rust/hard-coded-cryptographic-value
|
2026-07-02 17:37:38 +01:00 |
|
Michael B. Gale
|
f4d8358454
|
Merge pull request #22110 from github/post-release-prep/codeql-cli-2.26.0
Post-release preparation for codeql-cli-2.26.0
|
2026-07-02 15:32:22 +01:00 |
|
Nora Dimitrijević
|
0a02b16c43
|
Merge pull request #22095 from d10c/d10c/drop-bracket-style-links
Remove [[ link syntax from C# XSS sink
|
2026-07-02 15:45:30 +02:00 |
|
Owen Mansel-Chan
|
4aef485d3c
|
Merge pull request #22106 from github/workflow/coverage/update
Update CSV framework coverage reports
|
2026-07-02 14:08:20 +01:00 |
|
github-actions[bot]
|
5e50fc8471
|
Post-release preparation for codeql-cli-2.26.0
|
2026-07-02 12:26:43 +00:00 |
|
Michael B. Gale
|
e4a7b4ff51
|
Merge pull request #22109 from github/release-prep/2.26.0
Release preparation for version 2.26.0
codeql-cli/v2.26.0
|
2026-07-02 13:02:15 +01:00 |
|
Michael B. Gale
|
66ddf3b4c6
|
Remove unnecessary changenote for the hotfix
|
2026-07-02 12:58:05 +01:00 |
|
github-actions[bot]
|
1af9609eed
|
Release preparation for version 2.26.0
|
2026-07-02 11:43:30 +00:00 |
|
Mathias Vorreiter Pedersen
|
4f4cdf434b
|
Merge pull request #22061 from MathiasVP/mad-write-through-model
Shared: Support flow summaries from `ReturnValue`s
|
2026-07-02 12:38:44 +01:00 |
|
Michael B. Gale
|
79eeaa2028
|
Merge pull request #22108 from hvitved/python-hot-fix
Python: release hotfix
|
2026-07-02 12:31:20 +01:00 |
|
Geoffrey White
|
1f4ae86a84
|
Apply suggestions from code review
Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com>
|
2026-07-02 11:26:26 +01:00 |
|
Tom Hvitved
|
797f58b5d5
|
Merge pull request #22052 from hvitved/rust/type-constraint-base-type-match-gen
Type inference: Generalize `typeConstraintBaseTypeMatch`
|
2026-07-02 11:57:28 +02:00 |
|
Tom Hvitved
|
2308981665
|
Python: Update inline test expectations
|
2026-07-02 11:54:36 +02:00 |
|
Tom Hvitved
|
32181cd7e8
|
Python: Improve some flow summaries
|
2026-07-02 11:54:28 +02:00 |
|
Geoffrey White
|
9aaf3f15eb
|
Merge pull request #22105 from geoffw0/rubyinline3
Ruby: Address testFailures in inline expectations tests (part 3)
|
2026-07-02 08:29:39 +01:00 |
|
github-actions[bot]
|
d8b89d2581
|
Add changed framework coverage reports
|
2026-07-02 00:54:34 +00:00 |
|
Michael B. Gale
|
f4d6f582c8
|
Merge pull request #22096 from github/revert-22059-release-prep/2.26.0
Revert "Release preparation for version 2.26.0"
|
2026-07-01 22:11:34 +01:00 |
|
Asger F
|
36b31a855c
|
unified: Add debug query for local scoping graph
|
2026-07-01 21:51:41 +02:00 |
|
Asger F
|
bced7bb6d2
|
unified: Add local name binding and tests
As documented in the test, 'guard if' statements are still not properly supported.
|
2026-07-01 21:51:21 +02:00 |
|
Asger F
|
970e991b2c
|
unified: Add a few more AST helper classes
|
2026-07-01 21:50:04 +02:00 |
|
Asger F
|
982f6a5e8a
|
unified: Move Comments.ql into AstExtra.qll
Also move into 'internal' and expose through a Public module
|
2026-07-01 21:49:48 +02:00 |
|
Tom Hvitved
|
6c3c5ea8af
|
Merge pull request #22101 from hvitved/python/flow-summaries-improvements
Python: Improve some flow summaries
|
2026-07-01 19:36:13 +02:00 |
|
Geoffrey White
|
226efb3ad7
|
Potential fix for pull request finding
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
|
2026-07-01 16:52:38 +01:00 |
|
Geoffrey White
|
73ec4b8d02
|
Ruby: Fix one last inline expectations testFailure.
|
2026-07-01 16:44:12 +01:00 |
|
Owen Mansel-Chan
|
cb4a1d0929
|
Merge pull request #22103 from owen-mc/java/fix-mad-file-names
Java: Fix misnamed MaD models files
|
2026-07-01 14:04:44 +01:00 |
|
Jeroen Ketema
|
d664d17a11
|
Merge pull request #22087 from jketema/subst
Add Windows integration tests showing that `subst` is handled inconsistently
|
2026-07-01 14:48:22 +02:00 |
|
Owen Mansel-Chan
|
7263c00b00
|
Fix misnamed MaD models files
|
2026-07-01 13:13:01 +01:00 |
|
Geoffrey White
|
e9766086cd
|
Merge pull request #22079 from geoffw0/kotlininline
Kotlin: Address inline expectations testFailures.
|
2026-07-01 12:39:11 +01:00 |
|
Jeroen Ketema
|
d551ab3afb
|
Fix expected file
|
2026-07-01 13:24:05 +02:00 |
|
Jack Nørskov Jørgensen
|
4328031ff7
|
Add MaDs for Apache POI
|
2026-07-01 13:17:56 +02:00 |
|
Tom Hvitved
|
2bf6031c0f
|
Python: Update inline test expectations
|
2026-07-01 13:10:41 +02:00 |
|
Jeroen Ketema
|
daf97f7139
|
Add Windows integration tests showing that subst is handled inconsistently
|
2026-07-01 12:51:05 +02:00 |
|
Tom Hvitved
|
a5444b573a
|
Python: Improve some flow summaries
|
2026-07-01 12:05:53 +02:00 |
|
Mathias Vorreiter Pedersen
|
3410f39b3c
|
Merge pull request #22089 from MathiasVP/remove-mad-support-for-variables
C++: Remove support for global variables as sources and sinks in MaD
|
2026-07-01 10:31:59 +01:00 |
|
Owen Mansel-Chan
|
cf51664d69
|
Merge pull request #22099 from github/workflow/coverage/update
Update CSV framework coverage reports
|
2026-07-01 10:03:46 +01:00 |
|
github-actions[bot]
|
3cbb8ba87e
|
Add changed framework coverage reports
|
2026-07-01 00:58:10 +00:00 |
|