Repository navigation

Resolve 2.23.5 conflict - #298

Merged

dilanbhalla merged 581 commits into

mainfrom

resolve-2.23.5-conflict

Nov 16, 2025

Merged

Resolve 2.23.5 conflict#298
dilanbhalla merged 581 commits into
mainfrom
resolve-2.23.5-conflict

This pull request is big! We're only showing the most recent 250 commits

Commits on Oct 24, 2025
Commits on Oct 27, 2025
Commits on Oct 28, 2025
- Merge pull request #20397 from asgerf/js/build-artifact-leak-fp
  Asger F (asgerf)
  authored
  8d49f26
- Actions/OutputClobberingQuery
  Nora Dimitrijević (d10c)
  committed
  3fa8259
- Actions/RequestForgeryQuery
  Nora Dimitrijević (d10c)
  committed
  890ca8e
- Actions/SecretExfiltrationQuery
  Nora Dimitrijević (d10c)
  committed
  bb10307
- Actions/CompositeActionsSinks
  Nora Dimitrijević (d10c)
  committed
  d36b721
- Actions/CompositeActionsSources
  Nora Dimitrijević (d10c)
  committed
  78f2cee
- Actions/CompositeActionsSummaries
  Nora Dimitrijević (d10c)
  committed
  9c24ce0
- Actions/ReusableWorkflowsSinks
  Nora Dimitrijević (d10c)
  committed
  a972ef7
- Actions/ReusableWorkflowsSources
  Nora Dimitrijević (d10c)
  committed
  1243c63
- Actions/ReusableWorkflowsSummaries
  Nora Dimitrijević (d10c)
  committed
  5a1a887
- C++/WordexpTainted
  Nora Dimitrijević (d10c)
  committed
  ad31f1a
- C#/DontInstallRootCert
  Nora Dimitrijević (d10c)
  committed
  ba22f0d
- Go/DivideByZero
  Nora Dimitrijević (d10c)
  committed
  7722f31
- Go/InsufficientKeySize
  Nora Dimitrijević (d10c)
  committed
  59a8e9b
- Java/ArbitraryApkInstallationQuery
  Nora Dimitrijević (d10c)
  committed
  913550f
- Java/ArithmeticTainted
  Nora Dimitrijević (d10c)
  committed
  a228936
- Java/ArithmeticUncontrolledQuery
  Nora Dimitrijević (d10c)
  committed
  1129230
- Java/BrokenCryptoAlgorithmQuery
  Nora Dimitrijević (d10c)
  committed
  b023880
- Java/CommandLineQuery
  Nora Dimitrijević (d10c)
  committed
  4482e83
- Java/ConditionalBypass
  Nora Dimitrijević (d10c)
  committed
  dc1dff9
- Java/ImproperValidationOfArrayConstructionCodeSpecifiedQuery
  Nora Dimitrijević (d10c)
  committed
  9eeeec3
- Java/ImproperValidationOfArrayConstructionFlow
  Nora Dimitrijević (d10c)
  committed
  eebff9c
- Java/MaybeBrokenCryptoAlgorithmQuery
  Nora Dimitrijević (d10c)
  committed
  247ae1d
- Java/NumericCastTaintedQuery
  Nora Dimitrijević (d10c)
  committed
  72a9777
- Java/TaintedEnvironmentVariableQuery
  Nora Dimitrijević (d10c)
  committed
  697f428
- Java/TaintedPermissionsCheckQuery
  Nora Dimitrijević (d10c)
  committed
  2a889f4
- Java/TempDirLocalInformationDisclosureQuery
  Nora Dimitrijević (d10c)
  committed
  4439322
- Java/UnsafeDeserializationQuery
  Nora Dimitrijević (d10c)
  committed
  518c081
- Java/WebviewDebugEnabledQuery
  Nora Dimitrijević (d10c)
  committed
  f24a6f6
- JS/CommandInjectionQuery
  Nora Dimitrijević (d10c)
  committed
  2a30ea9
- JS/IndirectCommandInjectionQuery
  Nora Dimitrijević (d10c)
  committed
  71cf042
- JS/ShellCommandInjectionFromEnvironmentQuery
  Nora Dimitrijević (d10c)
  committed
  9434325
- JS/PolynomialReDoSQuery
  Nora Dimitrijević (d10c)
  committed
  bcdbe0b
- JS/SSRF
  Nora Dimitrijević (d10c)
  committed
  bb80d83
- Python/PolynomialReDoSQuery
  Nora Dimitrijević (d10c)
  committed
  baccdcc
- Python/ServerSideRequestForgeryQuery
  Nora Dimitrijević (d10c)
  committed
  37fff48
- Python/UnsafeUnpackQuery
  Nora Dimitrijević (d10c)
  committed
  6d57316
- Python/UnsafeUsageOfClientSideEncryptionVersion
  Nora Dimitrijević (d10c)
  committed
  4bc9ede
- Python/CorsBypass
  Nora Dimitrijević (d10c)
  committed
  998de14
- Python/LdapInsecureAuth
  Nora Dimitrijević (d10c)
  committed
  1ff24cb
- Ruby/PolynomialReDoSQuery
  Nora Dimitrijević (d10c)
  committed
  6519bd9
- Ruby/ManuallyCheckHttpVerb
  Nora Dimitrijević (d10c)
  committed
  50f2540
- Ruby/WeakParams
  Nora Dimitrijević (d10c)
  committed
  495be51
- Ruby/WeakFilePermissions
  Nora Dimitrijević (d10c)
  committed
  6ede0a7
- Shared: update qldoc
  Nora Dimitrijević (d10c)
  committed
  462d8c5
- Swift/CleartextStorageDatabaseQuery
  Nora Dimitrijević (d10c)
  committed
  2332cea
- Swift/CleartextStoragePreferencesQuery
  Nora Dimitrijević (d10c)
  committed
  c190fae
- Swift/ConstantPasswordQuery
  Nora Dimitrijević (d10c)
  committed
  6c52d4b
- Swift/InsufficientHashIterationsQuery
  Nora Dimitrijević (d10c)
  committed
  7ba7c43
- Swift/StaticInitializationVectorQuery
  Nora Dimitrijević (d10c)
  committed
  5a6f731
- Swift/StringLengthConflationQuery
  Nora Dimitrijević (d10c)
  committed
  cd86e7d
- Swift/UnsafeJsEvalQuery
  Nora Dimitrijević (d10c)
  committed
  895bd93
- Swift/UnsafeUnpackQuery
  Nora Dimitrijević (d10c)
  committed
  8a750b3
- Actions/ArtifactPoisoningQuery
  Nora Dimitrijević (d10c)
  committed
  1f53ffb
- Actions/EnvPathInjectionQuery
  Nora Dimitrijević (d10c)
  committed
  edc72d2
- Actions/EnvVarInjectionQuery
  Nora Dimitrijević (d10c)
  committed
  c402233
- Actions/ArgumentInjectionQuery
  Nora Dimitrijević (d10c)
  committed
  62fde8f
- Actions/CodeInjectionQuery
  Nora Dimitrijević (d10c)
  committed
  974d174
- C++/ConstantSizeArrayOffByOne
  Nora Dimitrijević (d10c)
  committed
  464f6cb
- C++/ExecTainted
  Nora Dimitrijević (d10c)
  committed
  65d79ff
- C++/OverflowDestination
  Nora Dimitrijević (d10c)
  committed
  a4ac039
- C++/UnboundedWrite
  Nora Dimitrijević (d10c)
  committed
  2756e82
- C++/NonConstantFormat
  Nora Dimitrijević (d10c)
  committed
  f7a1a4c
- C++/CleartextSqliteDatabase
  Nora Dimitrijević (d10c)
  committed
  0ed27f4
- C++/AuthenticationBypass
  Nora Dimitrijević (d10c)
  committed
  17b261a
- C++/CleartextBufferWrite
  Nora Dimitrijević (d10c)
  committed
  d89aa0f
- C++/CleartextFileWrite
  Nora Dimitrijević (d10c)
  committed
  b018040
- C++/CleartextTransmission
  Nora Dimitrijević (d10c)
  committed
  bbe2bf2
- C++/DecompressionBombs
  Nora Dimitrijević (d10c)
  committed
  1321cbb
- C++/ArithmeticUncontrolled
  Nora Dimitrijević (d10c)
  committed
  f3d51e0
- C++/TaintedAllocationSize
  Nora Dimitrijević (d10c)
  committed
  a65d4d5
- C++/UseOfHttp
  Nora Dimitrijević (d10c)
  committed
  ec63547
- Go/UnhandledCloseWritableHandle
  Nora Dimitrijević (d10c)
  committed
  d41268f
- Go/SSRF
  Nora Dimitrijević (d10c)
  committed
  0f0bd0f
- Rust/AccessAfterLifetime
  Nora Dimitrijević (d10c)
  committed
  4952cb2
- Rust/InsecureCookie
  Nora Dimitrijević (d10c)
  committed
  8e0c453
- C++/SqlTainted
  Nora Dimitrijević (d10c)
  committed
  96e1536
- Constrain location overrides to actual sources/sinks
  Nora Dimitrijević (d10c)
  committed
  a0975e7
- Rust: Remove more redundant models.
  Geoffrey White (geoffw0)
  committed
  abcc171
- Merge branch 'main' into gen2
  Geoffrey White (geoffw0)
  committed
  d6c4ab2
- Address review comments
  Tom Hvitved (hvitved)
  committed
  409f7fb
- Merge pull request #20607 from d10c/d10c/update-diff-informed-testing
  Nora Dimitrijević (d10c)
  authored
  727bdde
- Rust: Fix bad join
  Tom Hvitved (hvitved)
  committed
  104ba0e
- Rust: Fix bad join
  Tom Hvitved (hvitved)
  committed
  b3bbe78
- Merge pull request #20612 from hvitved/rust/type-inference-blanket-non-satisfaction
  Tom Hvitved (hvitved)
  authored
  f2380d3
- Rust: Make the QLDoc for fromSource a bit more precise.
  Geoffrey White (geoffw0)
  committed
  6f1eca8
- Merge pull request #19539 from yoff/java/conflicting-access
  yoff
  authored
  4461be1
Commits on Oct 29, 2025
Commits on Oct 30, 2025
- Rust: Refactor using shared constraint satisfaction
  Simon Friis Vindum (paldepind)
  committed
  b189f1f
- Rust: More type inference tests
  Tom Hvitved (hvitved)
  committed
  5697a7e
- Merge branch 'main' into macrometric2
  Geoffrey White (geoffw0)
  authored
  0e7d410
- Rust: Address review comments and handle `!` types in type inference
  Tom Hvitved (hvitved)
  committed
  cca458c
- Rust: Rename predicates
  Simon Friis Vindum (paldepind)
  committed
  c648aa6
- Merge pull request #20682 from paldepind/rust/ti-condition
  Simon Friis Vindum (paldepind)
  authored
  a25ae39
- JS: Add compileForOverlayEval
  Asger F (asgerf)
  committed
  39f74d8
- JS: Fix bad join order in getNextToken()
  Asger F (asgerf)
  committed
  a5819a1
- JS: Recursively delete source archive so emptiness detection works
  Asger F (asgerf)
  committed
  0acface
- JS: Ensure integration test contains one valid file
  Asger F (asgerf)
  committed
  1f7671c
- JS: Add pragma[nomagic] just to be safe
  Asger F (asgerf)
  committed
  c583b48
- Rust: Add more variable tests
  Tom Hvitved (hvitved)
  committed
  d71f2de
- Rust: Add variable consistency query
  Tom Hvitved (hvitved)
  committed
  3d7b60a
- Rust: Fix variable access overlap
  Tom Hvitved (hvitved)
  committed
  5a24674
Commits on Oct 31, 2025
Commits on Nov 3, 2025
- Release preparation for version 2.23.4
  github-actions[bot]
  committed
  64fcdd1
- C#: Minor changelog improvements
  Michael B. Gale (mbg)
  committed
  e825a3a
- Merge pull request #20745 from github/release-prep/2.23.4
  Michael B. Gale (mbg)
  authored
  637e12e
Commits on Nov 4, 2025
- Merge pull request #20752 from asgerf/actions/dont-fail-if-no-js
  
  Asger F (asgerf)
  authored and
  Michael B. Gale (mbg)
  committed
  6790684
- Merge pull request #20754 from github/mbg/2.23.4/backport-dont-fail-if-no-js
  Michael B. Gale (mbg)
  authored
  da1e93e
Commits on Nov 7, 2025
- Revert "Merge pull request #20645 from paldepind/cpp/range-analysis-measure"
  Enrico Steffinlongo (esteffin)
  committed
  e7c029a
- Revert "Release preparation for version 2.23.4"
  Michael B. Gale (mbg)
  authored
  6ce8f07
- Merge pull request #20775 from github/esteffin/revert-20645-cpp-range-analysis-measure
  Michael B. Gale (mbg)
  authored
  9d2206b
- Merge pull request #20777 from github/revert-20745-release-prep/2.23.4
  Michael B. Gale (mbg)
  authored
  eb32c32
- Release preparation for version 2.23.4
  github-actions[bot]
  committed
  6342da9
- C#: Minor changelog improvements
  Michael B. Gale (mbg)
  committed
  262bfe0
- Revert C++ range analysis change note
  Michael B. Gale (mbg)
  committed
  0cbc935
- Merge pull request #20778 from github/release-prep/2.23.4
  Michael B. Gale (mbg)
  authored
  714296b
Commits on Nov 10, 2025
- Revert "Release preparation for version 2.23.4"
  Michael B. Gale (mbg)
  authored
  8ba29a7
Commits on Nov 11, 2025
- Merge pull request #20803 from github/revert-20778-release-prep/2.23.4
  Michael B. Gale (mbg)
  authored
  5b1e651
- Release preparation for version 2.23.5
  github-actions[bot]
  committed
  e4f25c9
- C#: Minor changelog improvements
  Michael B. Gale (mbg)
  committed
  ac9a297
- Revert C++ range analysis change note
  Michael B. Gale (mbg)
  committed
  b4fed5b
- Merge pull request #20812 from github/release-prep/2.23.5
  Michael B. Gale (mbg)
  authored
  e5fa4a6
Commits on Nov 14, 2025
- resolved merge conflicts, accepting incoming change
  Chanel (chanel-y)
  committed
  a26da74

Commits

Commits on Oct 24, 2025

Commits on Oct 27, 2025

Commits on Oct 28, 2025