Repository navigation

Sync Main (autogenerated) - #293

Merged

dilanbhalla merged 376 commits into

mainfrom

auto/sync-main-pr

Oct 20, 2025

Merged

Sync Main (autogenerated)#293
dilanbhalla merged 376 commits into
mainfrom
auto/sync-main-pr

This pull request is big! We're only showing the most recent 250 commits

Commits on Sep 30, 2025
Commits on Oct 1, 2025
- Merge pull request #20559 from paldepind/rust/string-add-ref
  Simon Friis Vindum (paldepind)
  authored
  a359a24
- Add change note.
  Owen Mansel-Chan (owen-mc)
  committed
  dd3f754
- Rust: Rename predicates
  Simon Friis Vindum (paldepind)
  committed
  daf0cf1
- Improve comments in test file
  Owen Mansel-Chan (owen-mc)
  committed
  c93852d
- Merge branch 'main' into basicquery
  subatoi
  authored
  513dcf1
- Rust: Fix toctree bug.
  Geoffrey White (geoffw0)
  committed
  2c7291d
- Merge pull request #20560 from smowton/smowton/fix/start-in-constructor-fp
  Chris Smowton (smowton)
  authored
  f5ae5be
- C++: Port a test from the experimental directory to show that it works in the non-experimental "new" range analysis.
  Mathias Vorreiter Pedersen (MathiasVP)
  committed
  353ee8b
- Rust: Update graphics.
  Geoffrey White (geoffw0)
  committed
  936702a
- Rust: Slightly cleaner screenshots.
  Geoffrey White (geoffw0)
  committed
  b02c19b
- Merge branch 'main' into use-shared-guards-library
  Mathias Vorreiter Pedersen (MathiasVP)
  committed
  b0e9238
- Guards: Improve performance for uniqueValue.
  Anders Schack-Mulligen (aschackmull)
  committed
  a1028d6
- Address review comments
  Tom Hvitved (hvitved)
  committed
  dd3debc
- Phrase test in terms of safe URLs
  Owen Mansel-Chan (owen-mc)
  committed
  8983ac9
- Merge pull request #20561 from geoffw0/basicquery
  Geoffrey White (geoffw0)
  authored
  f96a42c
- Merge pull request #20556 from owen-mc/go/test/safeurlflow
  Owen Mansel-Chan (owen-mc)
  authored
  ff3d795
- Merge pull request #20557 from paldepind/rust/type-inference-delete-predicates
  Simon Friis Vindum (paldepind)
  authored
  1408c24
- Switch to use-use dataflow. This will make post-update nodes easy to implement.
  Owen Mansel-Chan (owen-mc)
  committed
  16a11b4
- Add missing QLDoc
  Owen Mansel-Chan (owen-mc)
  committed
  4484d5b
- Clean up code in basicLocalFlowStep
  Owen Mansel-Chan (owen-mc)
  committed
  5267671
- Include first step from SsaVariableCapture
  Owen Mansel-Chan (owen-mc)
  committed
  b474315
- Remove local flow step from SSA defn to SSA capture
  Owen Mansel-Chan (owen-mc)
  committed
  49b8b0b
- Adjust SafeFormatArgumentSanitizer to use-use flow
  Owen Mansel-Chan (owen-mc)
  committed
  4e04d27
- Fix Allocation Size Overflow for use-use flow
  Owen Mansel-Chan (owen-mc)
  committed
  b2a9cec
- Fix IncorrectIntegerConversion for use-use flow
  Owen Mansel-Chan (owen-mc)
  committed
  9068315
- Optimise join order for varBlockReaches
  
  Chris Smowton (smowton)
  authored and
  Owen Mansel-Chan (owen-mc)
  committed
  a3eb010
- Use `_` instead of exists variable x2
  Owen Mansel-Chan (owen-mc)
  committed
  32de211
- Make insecure randomness test more realistic
  Owen Mansel-Chan (owen-mc)
  committed
  3594dba
- Test result that was missing is now found
  Owen Mansel-Chan (owen-mc)
  committed
  5210665
- Line numbers change because 3 lines were added
  Owen Mansel-Chan (owen-mc)
  committed
  c20abf6
- Expected changes in dataflow edges
  Owen Mansel-Chan (owen-mc)
  committed
  14301e0
- Fix QLDoc typo
  Owen Mansel-Chan (owen-mc)
  committed
  d13d717
- Pull out post-update node logic into predicate
  Owen Mansel-Chan (owen-mc)
  committed
  7a515c1
- Convert post-update logic to IR (part 1)
  Owen Mansel-Chan (owen-mc)
  committed
  c8b8e25
- Convert post-update logic to IR (part 2)
  Owen Mansel-Chan (owen-mc)
  committed
  203952f
- Implement `writesComponent` at IR level
  Owen Mansel-Chan (owen-mc)
  committed
  ad18018
- Convert post-update logic to IR (part 3)
  Owen Mansel-Chan (owen-mc)
  committed
  05a16dc
- Inline predicate only used once
  Owen Mansel-Chan (owen-mc)
  committed
  89ae0e3
- Switch order of PUN test output
  Owen Mansel-Chan (owen-mc)
  committed
  9892836
- Add Email Injection tests for reverse flow models
  Owen Mansel-Chan (owen-mc)
  committed
  a0c647c
- Make separate post-update nodes
  Owen Mansel-Chan (owen-mc)
  committed
  118def8
- Expected changes in test output
  Owen Mansel-Chan (owen-mc)
  committed
  d2230c5
- Expected change in test output
  Owen Mansel-Chan (owen-mc)
  committed
  ac71f9c
- Make store step to send stmt's channel use post-update node
  Owen Mansel-Chan (owen-mc)
  committed
  3229630
- Fix test expectations for Cleartext Logging
  Owen Mansel-Chan (owen-mc)
  committed
  8a3bd84
- Non-initializing writes should target post-update nodes
  Owen Mansel-Chan (owen-mc)
  committed
  cf6cfe2
- Refactor: Create `writesFieldOnSsaWithFields`
  Owen Mansel-Chan (owen-mc)
  committed
  748c53a
- Fix flow to variable capture
  Owen Mansel-Chan (owen-mc)
  committed
  6215587
- Adjust Stack Exposure test so it passes
  Owen Mansel-Chan (owen-mc)
  committed
  3906f25
- Fix backwards flow through TaintTracking::FunctionModel
  Owen Mansel-Chan (owen-mc)
  committed
  5efc8ac
- Add missing qldocs
  Owen Mansel-Chan (owen-mc)
  committed
  6cb6953
- Fix bad join order
  Owen Mansel-Chan (owen-mc)
  committed
  a9420d4
- Typo
  
  Owen Mansel-Chan (owen-mc)
  and
  Copilot
  committed
  52b6539
- Add change notes
  Owen Mansel-Chan (owen-mc)
  committed
  f5f6d64
- Fix email injection sink that needs local flow
  Owen Mansel-Chan (owen-mc)
  committed
  25f1823
- Delete commented out code
  Owen Mansel-Chan (owen-mc)
  committed
  4ee236d
- Rename helper predicate
  Owen Mansel-Chan (owen-mc)
  committed
  1d9a93a
- Use slightly less confusing syntax
  Owen Mansel-Chan (owen-mc)
  committed
  b1bcbec
- Rename confusing predicate and add qldoc
  Owen Mansel-Chan (owen-mc)
  committed
  630a844
- Rephrase change note to avoid technical terms
  Owen Mansel-Chan (owen-mc)
  committed
  7b42618
- Convert OpenUrlRedirect tests to InlineExpectations
  Owen Mansel-Chan (owen-mc)
  committed
  1144bb9
- Add OpenUrlRedirect tests for Url.Host field
  Owen Mansel-Chan (owen-mc)
  committed
  414bab1
- Fix OpenUrlRedirect barrier for write to Url.Host
  Owen Mansel-Chan (owen-mc)
  committed
  c9a2816
- Add and use `WriteNode.writesFieldPreUpdate`
  Owen Mansel-Chan (owen-mc)
  committed
  489b843
- Delete `WriteNode.writesFieldOnSsaWithFields`
  Owen Mansel-Chan (owen-mc)
  committed
  2ffb638
- Fix pointer content store step for write to field of pointer dereference
  Owen Mansel-Chan (owen-mc)
  committed
  6fcd358
- Add and use `WriteNode.writesElementPreUpdate`
  Owen Mansel-Chan (owen-mc)
  committed
  59e3c14
- Deprecate `WriteNode.writesComponent`
  Owen Mansel-Chan (owen-mc)
  committed
  8a21a4f
- Crypto: Adding necessary model interfaces for MacOperationCall in JCA.
  Ben Rodes (bdrodes)
  committed
  92dac03
- Make SafeUrlFlow test more comprehensive (failing)
  Owen Mansel-Chan (owen-mc)
  committed
  620ae33
- Fix SafeUrlFlow so test passes
  Owen Mansel-Chan (owen-mc)
  committed
  6e4dbe8
- update annotation docs to reference signatures
  Philip Ginsbach-Chen (ginsbach)
  committed
  8160ef6
- update annotation docs to reference type unions
  Philip Ginsbach-Chen (ginsbach)
  committed
  7893768
- Convert SSRF tests to inline expectations tests
  Owen Mansel-Chan (owen-mc)
  committed
  8b04d0a
- Add test for assignment to Url.Host field
  Owen Mansel-Chan (owen-mc)
  committed
  c9ce2c8
- language reference section on 'additional' annotation
  Philip Ginsbach-Chen (ginsbach)
  committed
  bd3bcf9
- Improve SSRF additional flow step
  Owen Mansel-Chan (owen-mc)
  committed
  f0f5fc7
- language reference section on 'extensible' annotation
  Philip Ginsbach-Chen (ginsbach)
  committed
  341a119
- Test PathAssignmentBarrier for OpenUrlRedirect
  Owen Mansel-Chan (owen-mc)
  committed
  6d6852f
- member predicates cannot be 'external'
  Philip Ginsbach-Chen (ginsbach)
  committed
  3159b29
- Simplify PathAssignmentBarrier
  Owen Mansel-Chan (owen-mc)
  committed
  c006777
- discuss 'extensible' whenever the spec mentions 'external'
  Philip Ginsbach-Chen (ginsbach)
  committed
  f0b3909
- Improve additional flow step for Host field
  Owen Mansel-Chan (owen-mc)
  committed
  2629369
- Merge pull request #20569 from aschackmull/guards/uniquevalue-perf
  Mathias Vorreiter Pedersen (MathiasVP)
  authored
  6eb2aad
- Merge branch 'main' into use-shared-guards-library
  Mathias Vorreiter Pedersen (MathiasVP)
  committed
  011739c
- Crypto: Fix for non-monotonic recursion in JCA
  Ben Rodes (bdrodes)
  committed
  d49efef
- Merge branch 'main' into systemwebhttprequest-test-stubs
  ewillonermsft
  authored
  6f57e5a
- C#: Add a stub for the System.Uri class for the CWE-611 test.
  
  Michael Nebel (michaelnebel)
  authored and
  Ethan Willoner
  committed
  191dae4
Commits on Oct 2, 2025
Commits on Oct 3, 2025
Commits on Oct 6, 2025
Commits on Oct 7, 2025
Commits on Oct 8, 2025
Commits on Oct 9, 2025
Commits on Oct 10, 2025
Commits on Oct 13, 2025
Commits on Oct 14, 2025
- Release preparation for version 2.23.3
  github-actions[bot]
  committed
  33542f7
- Fix "be be" typos
  Henry Mercer (henrymercer)
  committed
  9507ec0
- Prefer code quotes for BMN
  Henry Mercer (henrymercer)
  committed
  9466279
- Rephrase C++ BMN changelog note
  Henry Mercer (henrymercer)
  committed
  17352a1
- Merge pull request #20635 from github/release-prep/2.23.3
  Henry Mercer (henrymercer)
  authored
  836e395
- Actions: Update `SecretExfiltration` output for typo fix
  Henry Mercer (henrymercer)
  committed
  5310469
- Python: Fix "be be" typos in qhelp
  Henry Mercer (henrymercer)
  committed
  b737bcc
- Merge pull request #20637 from github/henrymercer/update-expected-output
  Henry Mercer (henrymercer)
  authored
  aa3000d
Commits on Oct 17, 2025
- Merge tag 'codeql-cli/latest' into auto/sync-main-pr
  dilanbhalla
  committed
  76ddb40
Commits on Oct 20, 2025
- Merge branch 'main' of https://github.com/microsoft/codeql into auto/sync-main-pr
  dilanbhalla
  committed
  13ef779

Commits

Commits on Sep 30, 2025

Commits on Oct 1, 2025

Commits on Oct 2, 2025

Commits on Oct 3, 2025