Repository navigation

Sync Main (autogenerated) - #291

Merged

dilanbhalla merged 279 commits into

mainfrom

auto/sync-main-pr

Oct 2, 2025

Merged

Sync Main (autogenerated)#291
dilanbhalla merged 279 commits into
mainfrom
auto/sync-main-pr

This pull request is big! We're only showing the most recent 250 commits

Commits on Sep 9, 2025
Commits on Sep 10, 2025
Commits on Sep 11, 2025
Commits on Sep 12, 2025
- JS: Add test that calls .json or .jsonp
  Asger F (asgerf)
  committed
  d729ab5
- JS: Model json and jsonp methods
  Asger F (asgerf)
  committed
  132a8b8
- Bazel: regenerate vendored cargo dependencies
  Simon Friis Vindum (paldepind)
  committed
  f48b643
- Cargo: upgrade dependencies
  Simon Friis Vindum (paldepind)
  committed
  3cf1a16
- Bazel: regenerate vendored cargo dependencies
  Simon Friis Vindum (paldepind)
  committed
  19c529e
- Add initial support for Ruby Grape
  Chad Bentz (felickz)
  committed
  d295acc
- Refactor Grape framework code for improved readability and consistency
  Chad Bentz (felickz)
  committed
  738ab6f
Commits on Sep 13, 2025
- Enhance Grape framework with additional data flow modeling and helper method support
  Chad Bentz (felickz)
  committed
  3252bd3
- Add support for route parameters(+ blocks), headers, and cookies in Grape API
  Chad Bentz (felickz)
  committed
  5cfa6e8
Commits on Sep 15, 2025
- Initial plan
  Copilot
  committed
  459f00a
- Implement Rust non-HTTPS URL query (CWE-319)
  
  Copilot
  and
  Geoffrey White (geoffw0)
  committed
  e630bf8
- Rust: Add a couple of simple data flow test cases.
  Geoffrey White (geoffw0)
  committed
  8442146
- Merge branch 'main' into assignment
  Geoffrey White (geoffw0)
  committed
  3ca2874
Commits on Sep 16, 2025
- Apply naming standards + changenote
  Chad Bentz (felickz)
  committed
  a8d4d6b
- Merge branch 'main' into ruby-framework-grape
  Chad Bentz (felickz)
  authored
  6cea939
- Update ruby/ql/lib/codeql/ruby/frameworks/Grape.qll
  
  Chad Bentz (felickz)
  and
  Copilot
  authored
  19cb187
- Fix naming standards
  Chad Bentz (felickz)
  committed
  fc98cd8
- Merge branch 'ruby-framework-grape' of github.com:felickz/codeql into ruby-framework-grape
  Chad Bentz (felickz)
  committed
  0d0ce32
- Rust: Accept consistency check changes.
  Geoffrey White (geoffw0)
  committed
  49de716
- Rust: Add self-assignment variable test
  Tom Hvitved (hvitved)
  committed
  4e77b1b
- Rust: Adjust SSA write node for (compound) assignments
  Tom Hvitved (hvitved)
  committed
  7cac226
- Rust: Fix up the test annotations.
  Geoffrey White (geoffw0)
  committed
  7b04cf1
- Rust: Make the tests of the example code closer to the actual example code.
  Geoffrey White (geoffw0)
  committed
  0924dec
- Rust: Add tests for a few more edge cases.
  Geoffrey White (geoffw0)
  committed
  9c7fc58
- Rust: Remove unnecessary import.
  Geoffrey White (geoffw0)
  committed
  0f5aa85
- Update javascript/ql/lib/semmle/javascript/frameworks/Express.qll
  
  Asger F (asgerf)
  and
  Copilot
  authored
  0b90071
- Rust: Make the private address spaces URL more accurate.
  Geoffrey White (geoffw0)
  committed
  80ce55a
- C#: Add queries medium precision queries to the code-quality-extended suite (and update tags).
  Michael Nebel (michaelnebel)
  committed
  17735a9
- C#: Update query-suite integration tests expected output.
  Michael Nebel (michaelnebel)
  committed
  906e9de
- C#: Remove the cs/xmldoc/missing-xmldoc from the code-quality-extended.
  Michael Nebel (michaelnebel)
  committed
  c9a761f
- C#: Fix incorrect tagging.
  Michael Nebel (michaelnebel)
  committed
  47873c2
- C#: Remove cs/captured-foreach-variable from the code-quality-extended suite.
  Michael Nebel (michaelnebel)
  committed
  cdd3791
- C#: Update integration tests expected output.
  Michael Nebel (michaelnebel)
  committed
  0ce0e83
- C#: Remove all cs/xmldoc/* queries from the code-quality-extended suite.
  Michael Nebel (michaelnebel)
  committed
  98a7cd2
- C#: Update integration test expected output.
  Michael Nebel (michaelnebel)
  committed
  f9cecfb
- C#: Add change note.
  Michael Nebel (michaelnebel)
  committed
  d903448
- Rust: Use case insensitive regexps.
  Geoffrey White (geoffw0)
  committed
  4b281fd
- Merge branch 'main' into assignment
  Geoffrey White (geoffw0)
  committed
  5d40075
- Rust: Update a redirected URL.
  Geoffrey White (geoffw0)
  committed
  0eb602a
- Rust: Improve the flow around the qhelp example.
  Geoffrey White (geoffw0)
  committed
  31bf86f
- codeql query format
  Chad Bentz (felickz)
  committed
  ffd32ef
- Merge branch 'main' into https
  Geoffrey White (geoffw0)
  committed
  7c22fe2
- Jave: Use force local to make parsing local after global regex finding.
  Alex ET (alexet)
  committed
  2201974
- Python: Updated PathInjection tests to use inline test expectations
  Napalys Klicius (Napalys)
  committed
  f209e3a
- Python: Added extra test cases for path injection with FastAPI
  Napalys Klicius (Napalys)
  committed
  6c779c7
- Python: Added extra test for global variable nested attribute reads/writes.
  Napalys Klicius (Napalys)
  committed
  9d4b168
- Python: Add global variable nested field jump steps
  Napalys Klicius (Napalys)
  committed
  e60d0c8
- Python: Keep track of access path
  
  Taus (tausbn)
  authored and
  Napalys Klicius (Napalys)
  committed
  69b5853
- Python: Rewrite access path computation
  
  Taus (tausbn)
  authored and
  Napalys Klicius (Napalys)
  committed
  6133f01
- Python: Update `globalVariableAttrPathAtDepth` base case
  Napalys Klicius (Napalys)
  committed
  8393ccf
- Python: Add `AttrWrite.writes` and `AttrRead.reads`
  
  Taus (tausbn)
  authored and
  Napalys Klicius (Napalys)
  committed
  6f9e06c
- Python: Use `AttrWrite.writes`
  
  Taus (tausbn)
  authored and
  Napalys Klicius (Napalys)
  committed
  e228aac
- Python: Updated doc string and removed redundant predicate.
  Napalys Klicius (Napalys)
  committed
  e82fe9d
- Python: Add change note
  Napalys Klicius (Napalys)
  committed
  431fc88
- Python: Fix bad join in `globalVariableNestedFieldJumpStep`
  
  Taus (tausbn)
  authored and
  Napalys Klicius (Napalys)
  committed
  8fd6225
- Rust: Add IPv6 private address range (and explanatory comments).
  Geoffrey White (geoffw0)
  committed
  6f1fcbf
- Grape - detect params calls inside helper methods
  Chad Bentz (felickz)
  committed
  c5e3be2
Commits on Sep 17, 2025
Commits on Sep 18, 2025
Commits on Sep 19, 2025
Commits on Sep 20, 2025
- Merge pull request #20454 from paldepind/rust/path-resolution-attribute-expansion
  Tom Hvitved (hvitved)
  authored
  fdb0c6e
- Rust: Add path resolution tests
  Tom Hvitved (hvitved)
  committed
  bdeeb32
Commits on Sep 21, 2025
- Rust: Add missing model
  Tom Hvitved (hvitved)
  committed
  223ab5e
- Rust: Update expected test output
  Tom Hvitved (hvitved)
  committed
  8d5d219
Commits on Sep 22, 2025
Commits on Sep 23, 2025
- Add expected output for VariablesConsistency test case
  Chad Bentz (felickz)
  committed
  37e0c30
- Merge branch 'ruby-framework-grape' of github.com:felickz/codeql into ruby-framework-grape
  Chad Bentz (felickz)
  committed
  46d330c
Commits on Sep 24, 2025
Commits on Sep 25, 2025
Commits on Sep 26, 2025
Commits on Sep 28, 2025
- Merge pull request #20514 from jketema/permissive
  Jeroen Ketema (jketema)
  authored
  9dfd87c
Commits on Sep 29, 2025
- Release preparation for version 2.23.2
  github-actions[bot]
  committed
  d2130a5
- C#: tweak changelog wording
  Nick Rolfe (nickrolfe)
  committed
  a76d736
- Merge pull request #20545 from github/release-prep/2.23.2
  Nick Rolfe (nickrolfe)
  authored
  a05ffdb
Commits on Oct 2, 2025
- Merge tag 'codeql-cli/latest' into auto/sync-main-pr
  dilanbhalla
  committed
  a0ab6c4
- Merge branch 'main' of https://github.com/microsoft/codeql into auto/sync-main-pr
  dilanbhalla
  committed
  8ab8e67
- PS: Mirror the changes from github/codeql#20452.
  Mathias Vorreiter Pedersen (MathiasVP)
  committed
  9bc74bd

Commits

Commits on Sep 9, 2025

Commits on Sep 10, 2025

Commits on Sep 11, 2025

Commits on Sep 12, 2025

Commits on Sep 13, 2025

Commits on Sep 15, 2025

Commits on Sep 16, 2025

Commits on Sep 17, 2025

Commits on Sep 18, 2025