Repository navigation

Merge upstream codeql-cli/v2.26.4 - #397

Merged

Chanel (chanel-y) merged 348 commits into

microsoft:mainfrom

chanel-y:manual-cli-bump-2.26.4

Sep 9, 2026

This pull request is big! We're only showing the most recent 250 commits

Commits on Aug 6, 2026
- Potential fix for pull request finding
  
  Jeroen Ketema (jketema)
  and
  Copilot
  authored
  381ef18
- Rust: Add another captured varible flow test
  Tom Hvitved (hvitved)
  committed
  1e6ef80
Commits on Aug 7, 2026
- unified: Add test showing problem with literal getValue()
  Asger F (asgerf)
  committed
  60baec6
- unified: Fix extraction of literals
  Asger F (asgerf)
  committed
  51fe273
- unified: Factor some code into CommentUtil.qll
  Asger F (asgerf)
  committed
  b71ff8f
- unified: Fix mapping for compound type names
  Asger F (asgerf)
  committed
  c9fc793
- unified: Initial static name binding pass
  Asger F (asgerf)
  committed
  f50c80a
- unified: Track through aliases
  Asger F (asgerf)
  committed
  375924e
- unified: Add inheritance steps
  Asger F (asgerf)
  committed
  db8b97a
- unified: Support unqualified access
  Asger F (asgerf)
  committed
  6341bba
- unified: Allow numbers in key=value comments
  Asger F (asgerf)
  committed
  ee8753b
- unified: Cross-file name binding
  Asger F (asgerf)
  committed
  7e3a4e3
- unified: Handle bracketed generic array constructors
  Asger F (asgerf)
  committed
  574a5c9
- unified: Handle bracketed generic array metatypes
  Asger F (asgerf)
  committed
  55b96f1
- unified: Use '.' as location for inferred_type_expr
  Asger F (asgerf)
  committed
  171aa7a
- unified: Fix handling of exprPattern
  Asger F (asgerf)
  committed
  a9792e5
- unified: Add newlines at EOF
  Asger F (asgerf)
  committed
  8080bac
- unified: Update comment
  Asger F (asgerf)
  committed
  0cf2871
- unified: Support scoped imports
  Asger F (asgerf)
  committed
  a3f21a5
- unified: Don't track trivial name aliasse
  Asger F (asgerf)
  committed
  50f934b
- Merge pull request #22294 from github/copilot/update-md-files-for-unified-extractor
  Jeroen Ketema (jketema)
  authored
  bf213e7
- Merge pull request #22292 from github/post-release-prep/codeql-cli-2.26.3
  Henry Mercer (henrymercer)
  authored
  c914268
- Ruby: Switch regex tracking from TypeTracking to DataFlow.
  Anders Schack-Mulligen (aschackmull)
  committed
  cfa81b1
- unified: Bulk imports
  Asger F (asgerf)
  committed
  a79c32a
- unified: Fix access level in test case
  Asger F (asgerf)
  committed
  05fe395
- Ruby: Accept test improvement.
  Anders Schack-Mulligen (aschackmull)
  committed
  a2b6c1f
- unified: Fix incorrect expectation
  Asger F (asgerf)
  committed
  659da08
- unified: Fix toString and getLocation for TLocalNamespace
  Asger F (asgerf)
  committed
  35c54b1
- unified: Remove location of TModuleRoot
  Asger F (asgerf)
  committed
  af2f5a2
Commits on Aug 10, 2026
Commits on Aug 11, 2026
Commits on Aug 12, 2026
Commits on Aug 13, 2026
Commits on Aug 14, 2026
Commits on Aug 15, 2026
- C#: add AdditionalTaintStep extension point for taint-tracking
  
  hugo-syn
  and
  Claude (claude)
  committed
  ce7fee4
- Docs: list psycopg (v3) in supported frameworks
  jtabsbm
  committed
  c88eb8e
Commits on Aug 17, 2026
Commits on Aug 18, 2026
Commits on Aug 19, 2026
- unified: Update error message
  Asger F (asgerf)
  committed
  bb6b3b9
- Merge pull request #22372 from github/redsun82-go-checks-debazel
  Paolo Tranquilli (redsun82)
  authored
  152c73a
- Merge pull request #22373 from github/unified/disable-arm64-build
  Asger F (asgerf)
  authored
  c1b19fb
- Rust: Change canonical paths for trait items
  Tom Hvitved (hvitved)
  committed
  8a9ef4c
- Rust: Update trait item canonical path references
  
  Tom Hvitved (hvitved)
  and
  Copilot
  committed
  2a7c932
- Rust: Use `zstd` compression for TRAP files by default
  Tom Hvitved (hvitved)
  committed
  29f91cc
- Rust: Document trait item canonical path change
  
  Tom Hvitved (hvitved)
  and
  Copilot
  committed
  f902541
- Potential fix for pull request finding
  
  Tom Hvitved (hvitved)
  and
  Copilot
  authored
  4f48b45
- Merge pull request #22345 from theinfosecguy/csharp-simplifiable-operator-recursion
  Michael Nebel (michaelnebel)
  authored
  3ed2370
- Merge pull request #22375 from hvitved/rust/trap-compression-zstd-default
  Tom Hvitved (hvitved)
  authored
  7f60101
- C#: inline TestAdditionalTaintStep.qll into AdditionalTaintStep.ql
  
  hugo-syn
  and
  Claude (claude)
  committed
  946e116
- Merge branch 'main' of https://github.com/github/codeql into hugo-syn/csharp-additional-taint-step
  hugo-syn
  committed
  522bcd9
- Merge pull request #22360 from hugo-syn/hugo-syn/csharp-additional-taint-step
  Tom Hvitved (hvitved)
  authored
  715da38
- C#: Address review comments.
  Michael Nebel (michaelnebel)
  committed
  5475078
- Merge pull request #22041 from michaelnebel/csharp/morefeedmanageruses
  Michael Nebel (michaelnebel)
  authored
  01755ec
- Actions: Fix typo in change note
  Jeroen Ketema (jketema)
  committed
  9919db5
- Merge pull request #22385 from jketema/jketema/type
  Jeroen Ketema (jketema)
  authored
  7c2b8b4
- C++/Ruby: Clean up supported compilers
  Jeroen Ketema (jketema)
  committed
  f6e24e3
- Split change note into breaking and minorAnalysis notes
  
  Jordan Pike (computersarebad)
  and
  Copilot
  committed
  0a376e8
- Merge pull request #22368 from computersarebad/actor-if-check-event-validity
  Jeroen Ketema (jketema)
  authored
  039c2b5
- Merge pull request #22389 from jketema/jketema/clang
  Jeroen Ketema (jketema)
  authored
  87c77cc
- Go: Update to 1.27
  Jeroen Ketema (jketema)
  committed
  50455bd
- Go: Bump `maxGoVersion` to 1.27
  Jeroen Ketema (jketema)
  committed
  3dfe5e6
- Go: Update test formatting
  Jeroen Ketema (jketema)
  committed
  f404c6a
- Go: Add change note
  Jeroen Ketema (jketema)
  committed
  3185185
- Go: Update supported versions to include 1.27
  Jeroen Ketema (jketema)
  committed
  777c089
- Go: Fix `findMethodOnTypeWithGivenReceiver` for Go 1.27
  Jeroen Ketema (jketema)
  committed
  9db5585
- Go: Add generic method test
  Jeroen Ketema (jketema)
  committed
  28d44f7
- Go: Fix crash in `getTypeParamParentLabel`
  Jeroen Ketema (jketema)
  committed
  072b298
Commits on Aug 20, 2026
Commits on Sep 8, 2026
- Merge upstream codeql-cli/v2.26.4
  Chanel (chanel-y)
  committed
  1ca05ad
Commits on Sep 9, 2026
- PS: Fix dataflow after the changes in github/codeql#22145.
  
  Mathias Vorreiter Pedersen (MathiasVP)
  authored and
  Chanel (chanel-y)
  committed
  d45eed1

Commits

Commits on Aug 6, 2026

Commits on Aug 7, 2026

Commits on Aug 10, 2026

Commits on Aug 11, 2026

Commits on Aug 12, 2026

Commits on Aug 13, 2026