…ubclassed

Co-authored-by: Anders Schack-Mulligen <aschackmull@users.noreply.github.com>

Rust: New query rust/insecure-cookie

Rust: Consistency fix for reusables/extractors.rst.

Rust: Add taint model for add on `String`

…structor-fp

Java: note that classes with entirely private constructors can't be subclassed

…s in the non-experimental "new" range analysis.

Rust: Add Basic query for Rust code doc

Go: Add tests for SafeUrlFlow, and fix a latent bug

…lete-predicates

Rust: Remove member predicates on `Type`

…and user defined operators and use this in the QL code.

…bs-and-catchall

Add code owners for `/shared/` and a catch-all

…request-forgery

Go: sanitize simple types in `go/request-forgery`

…ssable

Rust: Include tuple structs/variants in `CallExprBase.getStaticTarget()`

…ions

C#: Reduce location TRAP creation for Fields, Parameters, Constructors, Destructors and Operators.

Bumps the extractor-dependencies group in /go/extractor with 2 updates: [golang.org/x/mod](https://github.com/golang/mod) and [golang.org/x/tools](https://github.com/golang/tools).


Updates `golang.org/x/mod` from 0.28.0 to 0.29.0
- [Commits](golang/mod@v0.28.0...v0.29.0)

Updates `golang.org/x/tools` from 0.37.0 to 0.38.0
- [Release notes](https://github.com/golang/tools/releases)
- [Commits](golang/tools@v0.37.0...v0.38.0)

---
updated-dependencies:
- dependency-name: golang.org/x/mod
  dependency-version: 0.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: extractor-dependencies
- dependency-name: golang.org/x/tools
  dependency-version: 0.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: extractor-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>

…extractor/extractor-dependencies-5148baeadc

Bump the extractor-dependencies group in /go/extractor with 2 updates

…-joinorder

Rangeanalysis: Fix a bad join-order in boundedPhiRankStep.

It seems `_ERR_MSG` was silently removed in Python 3.14, leading to an
`ImportError` when running the extractor.

To fix this, we explicitly set `_ERR_MSG` when the existing import fails
(using `_ERR_MSG_PREFIX` which is available in Python 3.14+, along with
the bits that make up the difference between this and `_ERR_MSG`).

…rror-in-imp

Python: Fix `ImportError` in `imp.py` under Python 3.14

Release preparation for version 2.23.3

…ed-output

Actions: Update `SecretExfiltration` output for typo fix

Compatible with the latest released version of the CodeQL CLI