Repository navigation

Update changelog documentation site for codeql-cli-2.25.6 - #21944

Closed

codeql-ci wants to merge 199 commits into

rc/3.22from

codeql-spark-run-26960844232

Closed

Update changelog documentation site for codeql-cli-2.25.6#21944
codeql-ci wants to merge 199 commits into
rc/3.22from
codeql-spark-run-26960844232

Commits on Feb 4, 2026
- Test flow out of varargs parameter in source function
  owen-mc
  committed
  ec81539
- Test flow out of varargs parameter in function model
  owen-mc
  committed
  d6c8767
- Test varargs flow with models-as-data
  owen-mc
  committed
  4b830c1
- (Misc) fix variable names
  owen-mc
  committed
  7632bdb
- (Misc) Delete spuriously committed binary file
  owen-mc
  committed
  408ba2e
Commits on Feb 5, 2026
- Accept data flow consistency result
  owen-mc
  committed
  57ce0b3
Commits on May 6, 2026
- Initial plan
  Copilot
  authored
  26dca55
- Add SSRF tests and stubs for Apache Http fluent Request models
  
  Copilot
  and
  owen-mc
  authored
  f5b17b0
- Replace fluent SSRF changes with Apache HttpClient execute model tests
  
  Copilot
  and
  owen-mc
  authored
  043ec85
Commits on May 7, 2026
- Update test output
  owen-mc
  committed
  dd35bc0
- Add change note
  owen-mc
  committed
  dc86476
Commits on May 12, 2026
- Python: Add self-validating CFG tests
  tausbn
  committed
  71cd5be
- Python: Add some CFG-validation queries
  tausbn
  committed
  3a979ac
- Python: Add BasicBlockOrdering test
  tausbn
  committed
  fc2bc26
- Python: Add NeverReachable test
  tausbn
  committed
  c30d6ae
- Python: Add ConsecutiveTimestamps test
  tausbn
  committed
  f5c3b63
- unified: add field declarations for statements and members
  tausbn
  committed
  9dddd93
- unified: regenerate files
  tausbn
  committed
  75c0799
- unified: Add `effect` field
  tausbn
  committed
  c75d819
- unified: Add more fields
  tausbn
  committed
  d6ef467
- unified: Regenerate files
  tausbn
  committed
  853a988
- unified: Add fields to inheritance specifiers and calls
  tausbn
  committed
  732cc7b
- unified: Fix fields in await_expression
  tausbn
  committed
  0499932
- unified: More $children fixes
  tausbn
  committed
  15d84b3
- unified: Add `lambda` and `arguments` fields
  tausbn
  committed
  bc96ae6
- unified: Unify more fields
  tausbn
  committed
  5784ef2
- unified: Consolidate fields in `if_let_binding`
  tausbn
  committed
  e6eac37
- unified: add proper fields for availability_condition
  tausbn
  committed
  9902bed
- unified: More miscellaneous field additions
  tausbn
  committed
  6ff404a
- unified: make compilation_condition named and add fields
  tausbn
  committed
  5e14a75
- unified: Promote enum_type_parameter to named and add fields
  tausbn
  committed
  e1a0e20
- unified: Get rid of $children* on key_path_expression
  tausbn
  committed
  eba9f35
- unified: Add fields for macro_declaration
  tausbn
  committed
  6e5e650
- unified: Add fields to switch_entry
  tausbn
  committed
  406a02f
- unified: Add fields to property_declaration
  tausbn
  committed
  2010844
- unified: clean up patterns
  tausbn
  committed
  2eee2e5
- Python: Address Copilot's comments
  tausbn
  committed
  1ef557c
- unified: Make parenthesized_type named
  tausbn
  committed
  eb480d1
- unified: Fix multiline_comment issue
  tausbn
  committed
  52d7283
- unified: Regenerate files
  tausbn
  committed
  bfe5aa8
Commits on May 13, 2026
- Unified: Add support for tree-sitter-style corpus tests
  asgerf
  committed
  f668b99
- Yeast: add reachable_node_ids()
  asgerf
  committed
  49f1909
- Yeast: add type-checking errors in AST dump
  asgerf
  committed
  a049850
- Yeast: Add one-shot phase kind
  asgerf
  committed
  c3a9218
- Shared: Do not emit ReservedWord class when there are no unnamed tokens
  asgerf
  committed
  bb9e996
- YEAST: fix one-shot rules for unnamed nodes and self-captures
  
  asgerf
  and
  Copilot
  committed
  5d0cb9e
- Unified extractor: add AST schema, swift translation rules, and corpus framework
  
  asgerf
  and
  Copilot
  committed
  8a2a48d
- Unified: Add Swift corpus tests
  
  asgerf
  and
  Copilot
  committed
  72b683d
- YEAST: add NodeRef type, YeastDisplay trait, and source text storage
  
  asgerf
  and
  Copilot
  committed
  5772ee4
- Unified: Add some more AST nodes and rules
  asgerf
  committed
  9283801
- Yeast: Change how patterns with repetition are parsed
  asgerf
  committed
  2307839
- Yeast: Fix text associated with synthesized nodes
  asgerf
  committed
  6b58482
- Unified: Add more patterns and some fixes to the AST
  asgerf
  committed
  a966dff
- Unified: Add tuple_pattern
  asgerf
  committed
  ccc1dd5
- yeast-macros: merge repeated field declarations and support repetition in field patterns
  asgerf
  committed
  3b7a53f
- Unified: add tuple_pattern and sequence_condition; refine if-let/guard mapping
  asgerf
  committed
  cbe4c81
- Unified: Support for calls and member access
  asgerf
  committed
  55194dd
- Unified: Simplify concatenation of arguments
  asgerf
  committed
  600a496
- Unified: Update test output after rebasing on grammar changes
  asgerf
  committed
  7fa6c4e
- Unified: regenerate QL and make tests not crash
  asgerf
  committed
  b031e5b
- Yeast: fix warning about unnecessary mutability
  asgerf
  committed
  554bdf1
- unified: Clean up statements/block mess
  tausbn
  committed
  5d6dc5c
- unified: Encapsulate function parameters
  tausbn
  committed
  ea6f3a9
- unified: Group more paired items
  tausbn
  committed
  c8f7c3d
- unified: Group enum entries
  tausbn
  committed
  9787a8b
- unified: Introduced named `property_binding` node
  tausbn
  committed
  caef72b
- unified: Remove some pointless fields
  tausbn
  committed
  f4f85b5
- unified: Regenerate files
  tausbn
  committed
  dd9c066
Commits on May 18, 2026
- Ruby: Minor cleanup, Callable is a StmtSequence.
  aschackmull
  committed
  cb0fc78
Commits on May 19, 2026
- C#: Add test case for property calls and update test expected for other files.
  michaelnebel
  committed
  42aaae7
- C#: Add test case for indexer calls and update test expected for other files.
  michaelnebel
  committed
  a2ac0ab
- C#: Add ref return info for accessors.
  michaelnebel
  committed
  9d0d4e4
- C#: Use ref return getters for properties/indexers in write contexts.
  michaelnebel
  committed
  c3bb5e8
- C#: Update test expected output.
  michaelnebel
  committed
  1c01bb3
- C#: Update other affected tests (including database quality).
  michaelnebel
  committed
  c0273ae
- C#: Add change-note.
  michaelnebel
  committed
  6825ccc
Commits on May 22, 2026
- Ruby: Split callable and its body into two AST nodes.
  aschackmull
  committed
  b6c2915
- Ruby: Adjust CFG to updated AST.
  aschackmull
  committed
  7dcd2d6
- Ruby: Fix pre-existing bug.
  aschackmull
  committed
  3adb704
- Ruby: Accept test changes.
  aschackmull
  committed
  e07f45f
Commits on May 26, 2026
- C#: Update Roslyn and other pinned dependencies.
  michaelnebel
  committed
  26da373
- C#: Update generated files.
  michaelnebel
  committed
  769b195
- C#: Use the generic version of the associated implementation.
  michaelnebel
  committed
  7f2fb2e
- unified: Clarify grammar comment
  
  tausbn
  and
  Copilot
  authored
  fbc861e
- C++: Remove deprecated code
  jketema
  committed
  7862922
- Merge pull request #21848 from asgerf/asgerf/swift-yeast
  asgerf
  authored
  f18cdcf
Commits on May 27, 2026
- Ruby: Skip BodyStmt in ErbDirective.getAChildStmt.
  aschackmull
  committed
  3aa6982
- Ruby: Remove spurious parent-child edges for Ruby::SimpleSymbol.
  aschackmull
  committed
  780591d
- C++: Update expected test results after extractor changes
  jketema
  committed
  35364a0
- C++: Add change note
  jketema
  committed
  362c48c
- Potential fix for pull request finding
  
  jketema
  and
  Copilot
  authored
  e66b1e4
- Swift: Add HashFunction protocol and other realism to the CryptoKit test stubs (this is needed for new cases to work as intended).
  geoffw0
  committed
  b44bca9
- Swift: Additional test cases for CryptoKit.
  geoffw0
  committed
  d9c0b9c
- Swift: Add a special case sink for weak sensitive data hashing sinks that are calls through a metatype.
  geoffw0
  committed
  98b7659
- Swift: Add a similar sink for password hashing as well.
  geoffw0
  committed
  2b4ea18
- Swift: Add change note.
  geoffw0
  committed
  c902c75
- Swift: Widen the new sinks to cover more cases the MaD sinks are missing.
  geoffw0
  committed
  94e6ec6
- Swift: Add a few more test cases for simple missing models.
  geoffw0
  committed
  c6c3e14
- Swift: Fill the simple gaps in modelling.
  geoffw0
  committed
  f962eac
- Merge pull request #21897 from jketema/jketema/missing-friend
  jketema
  authored
  42c4d8a
- C#: Update integration test expected output.
  michaelnebel
  committed
  6b55f86
- C#: Update encoding of SBCS to UTF8 with BOM.
  michaelnebel
  committed
  d4c7b5b
- Merge pull request #21896 from jketema/jketema/deprecated
  jketema
  authored
  7723324
- Unified: merge in `main`
  tausbn
  committed
  d6e7e38
- Unified: regenerate Ast.qll and dbscheme
  tausbn
  committed
  41fd59c
- C++: Small cleanup. This has no effect on semantics.
  MathiasVP
  committed
  5f54a86
- move identical java and cs bound.qll to shared library
  BazookaMusic
  committed
  6042ade
- missed changes
  BazookaMusic
  committed
  acb5c0e
- Python: Address review comments
  tausbn
  committed
  35faec3
- Swift: Autoformat.
  geoffw0
  committed
  4fbea4e
- Swift: Fix typo.
  geoffw0
  committed
  5c2488e
- remove check for files in sync
  BazookaMusic
  committed
  cc12740
- Merge pull request #21841 from github/tausbn/unified-swift-named-body-fields
  asgerf
  authored
  6be9e23
- Unified: update test output
  asgerf
  committed
  ad56ebd
- Unified: update test outputs
  asgerf
  committed
  313500e
- Merge pull request #21901 from asgerf/unified-fix-test
  asgerf
  authored
  17fe3e4
Commits on May 28, 2026
- Shared: Add local name binding library
  hvitved
  committed
  3e09961
- Rust: More local variable tests
  hvitved
  committed
  e061586
- Rust: Adopt shared local name resolution library
  hvitved
  committed
  c08cf81
- Rust: Run codegen
  hvitved
  committed
  aeb8285
- Ruby: Add more variable tests
  hvitved
  committed
  7718fe4
- Change variable name in test
  owen-mc
  committed
  a159dc1
- Improve how `org.apache.http.client.HttpClient` is created in test
  owen-mc
  committed
  37589dd
- Add summary models for `org.apache.http.client.methods.RequestBuilder`
  owen-mc
  committed
  8937e22
- Build `RequestBuilder` more realistically
  owen-mc
  committed
  d95d998
- Merge pull request #21866 from michaelnebel/csharp/refreturnindexerproperty
  michaelnebel
  authored
  ed8b9c2
- Merge pull request #21898 from geoffw0/swiftflow
  geoffw0
  authored
  34d4e9a
- Swift: Update the new metatype sinks to not rely on name matching '.Type'.
  geoffw0
  committed
  f8ab76e
- C++: Use the new extensionals to map template functions and classes to their fully templated versions.
  MathiasVP
  committed
  8393b40
- C++: Accept test changes.
  MathiasVP
  committed
  9f211ce
- C++: Fix Copilot comments.
  MathiasVP
  committed
  2d58150
- Merge pull request #21893 from michaelnebel/cshar/updateroslyn
  michaelnebel
  authored
  2eac889
- Merge pull request #21724 from github/tausbn/python-add-self-validating-cfg-tests
  tausbn
  authored
  6165623
Commits on May 29, 2026
- Ruby: Adopt shared local name resolution library
  hvitved
  committed
  0937133
- Merge pull request #21867 from aschackmull/ruby/callable-body
  aschackmull
  authored
  4c31866
- Apply suggestions from code review
  
  hvitved
  and
  Copilot
  authored
  caae5a8
- Merge pull request #21905 from geoffw0/swiftflow2
  geoffw0
  authored
  43c1152
- Merge pull request #21912 from github/post-release-prep/codeql-cli-2.25.6
  henrymercer
  authored
  a16f1c5
- C++: Add more tests.
  MathiasVP
  committed
  e18448d
Commits on May 30, 2026
- Shared CFG: allow init stmts for IfStmt
  owen-mc
  committed
  5e5a043
Commits on May 31, 2026
- C++: Add a test with a kind of "partial function template" instantiation.
  MathiasVP
  committed
  22b08f1
Commits on Jun 1, 2026
- Address review comments
  hvitved
  committed
  d2f474d
- Merge pull request #21899 from MathiasVP/use-new-prototype-extensionals
  jketema
  authored
  ab4a575
- Rust: Rename `Impl::getTrait` to `Impl::getTraitTy`
  hvitved
  committed
  c695c15
- Rust: Add `Impl::getSelf()` and `Impl::getTrait()`
  hvitved
  committed
  00e95a0
- Rust: DB upgrade/downgrade scripts
  hvitved
  committed
  d5f9447
- Potential fix for pull request finding
  
  hvitved
  and
  Copilot
  authored
  62207f1
- Tree-sitter-extactor: More helpful panic message
  asgerf
  committed
  56822f8
- Yeast: Allow rules that return an empty sequence
  asgerf
  committed
  ef9306d
- Yeast: Fix handling of captures with multiple results
  asgerf
  committed
  e3b3888
- Yeast: Fix matching against extras like comments
  asgerf
  committed
  1ecdc36
- Yeast: Allow 'r#type' to escape the 'type' keyword in macro
  asgerf
  committed
  ac8eb50
- Fix parsing of corpus tests when --- delimiter is missing
  asgerf
  committed
  1751d70
- yeast-macros: omit empty fields produced by .. splice
  
  asgerf
  and
  Copilot
  committed
  21f216a
- yeast: type-check for missing required fields
  
  asgerf
  and
  Copilot
  committed
  3f3bed6
- formatting
  BazookaMusic
  committed
  71a3635
- formatting
  BazookaMusic
  committed
  d1226b7
- restore file header
  BazookaMusic
  committed
  c1c9287
- Merge branch 'main' into bazookamusic/range-analysis-bound-move-to-shared
  BazookaMusic
  authored
  019a5c0
- change note
  BazookaMusic
  committed
  fa63dad
- fix comment and add overlay[local?]
  BazookaMusic
  committed
  c610af8
- more specific comment
  BazookaMusic
  committed
  2a3cff3
- Merge pull request #21873 from hvitved/local-name-resolution
  hvitved
  authored
  9618e9b
- Recognize more non-returning logging functions
  owen-mc
  committed
  8d099cb
- Improve noretFunctions test
  owen-mc
  committed
  f3e3647
- Improve glog (and klog) modelling
  owen-mc
  committed
  c99dab1
- Improve glog and klog tests
  owen-mc
  committed
  45b1253
- Add change note
  owen-mc
  committed
  28bb1a6
- (Trivial) Fix QLDoc grammar
  owen-mc
  committed
  1a747dd
- Add missing QLDocs
  owen-mc
  committed
  8a1e6d4
- Improve test for non-returning fns
  owen-mc
  committed
  e706c5f
- Accept changed test output
  owen-mc
  committed
  adc9b77
Commits on Jun 2, 2026
- Taint doesn't flow through panicking functions
  owen-mc
  committed
  e6e8e3d
- Model panicking log functions better
  owen-mc
  committed
  703cea2
- Rust: Path resolution for `static` items
  hvitved
  committed
  0547e9c
- Rust: Run codegen
  hvitved
  committed
  c4e3720
- Rust: Data flow for `const`s and `static`s
  hvitved
  committed
  1fd31d0
- Fix incorrect QLDoc
  
  owen-mc
  and
  hvitved
  authored
  be9c785
- Update tests
  owen-mc
  committed
  9dbe9ad
- formatting again
  BazookaMusic
  committed
  566a92e
- Merge branch 'main' into bazookamusic/range-analysis-bound-move-to-shared
  BazookaMusic
  authored
  61a5cec
- Merge pull request #21929 from owen-mc/go/no-ret-functions
  owen-mc
  authored
  aaa3b36
- Fix `commment` typos
  hvitved
  committed
  dc0c7d7
- JS: Add Vue to `file_coverage_languages` and `github_api_languages`
  jketema
  committed
  9d5dfea
- Merge pull request #21932 from jketema/jketema/vue
  jketema
  authored
  d11fc3a
- Rust: Rename parameter in DB upgrade script
  hvitved
  committed
  af45e53
- Merge pull request #21914 from owen-mc/shared/cfg/if-init
  owen-mc
  authored
  167c837
Commits on Jun 3, 2026
Commits on Jun 4, 2026
- Add changed framework coverage reports
  github-actions[bot]
  committed
  5576d30
- Add back alias for module
  BazookaMusic
  committed
  d2972cb
- Merge pull request #21900 from github/bazookamusic/range-analysis-bound-move-to-shared
  BazookaMusic
  authored
  d6892ea
- Merge pull request #21936 from github/workflow/coverage/update
  owen-mc
  authored
  cd2398a
- update codeql documentation
  github-actions[bot]
  committed
  e947b5e

Commits

Commits on Feb 4, 2026

Commits on Feb 5, 2026

Commits on May 6, 2026

Commits on May 7, 2026

Commits on May 12, 2026

Commits on May 13, 2026

Commits on May 18, 2026

Commits on May 19, 2026

Commits on May 22, 2026

Commits on May 26, 2026

Commits on May 27, 2026

Commits on May 28, 2026