| FazBrowse GitHub Viewer | Trending | | Home |
| Tools: [Download Repo ZIP] [Original HTTPS Page] |
This reverts commit c734974. It was making the build fail
Revert "Bump rules_android from 0.6.4 to 0.7.1"
Rust: Small refactor in `TypeMention.qll`
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
…card C/C++ overlay: update discard mechanism
Correct comment about AES crypto algorithm strength
Update the shebang regexp (renamed NODE_INVOCATION -> JS_INVOCATION) to also match 'bun' and 'tsx' so that scripts using these runtimes are correctly identified as JavaScript files. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Add test files with #!/usr/bin/env bun, #!/usr/bin/env tsx, and #!/usr/bin/env node shebangs. The query lists extracted .ts files, verifying that all three shebangs are recognized and the files are not skipped by the extractor. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
We should be using all subtypes of `FieldBase`. This allows us to find more type expressions, and is also simpler to evaluate.
Go: Add and use `exprRefersToNil` predicate
Go: improve detection of type expressions when database is missing some type information
Swift: Limit successfully extracted lines
Swift: Disable stack protector pass
Bumps the extractor-dependencies group with 2 updates in the /go/extractor directory: [golang.org/x/mod](https://github.com/golang/mod) and [golang.org/x/tools](https://github.com/golang/tools). Updates `golang.org/x/mod` from 0.33.0 to 0.34.0 - [Commits](golang/mod@v0.33.0...v0.34.0) Updates `golang.org/x/tools` from 0.42.0 to 0.43.0 - [Release notes](https://github.com/golang/tools/releases) - [Commits](golang/tools@v0.42.0...v0.43.0) --- updated-dependencies: - dependency-name: golang.org/x/mod dependency-version: 0.34.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: extractor-dependencies - dependency-name: golang.org/x/tools dependency-version: 0.43.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: extractor-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
…tions Go: Add overlay annotations from script
JS: Add 'browser' source kinds
…plit C#: Remove splitting-awareness from data flow.
Swift: Ignore some DB-CHECK results on Linux
…-no-split C#: Remove splitting-awareness from Range Analysis.
Release preparation for version 2.25.0
The upstream 2.25.0 release merge dropped codeql/dataflowstack from codeql/java-all and codeql/csharp-all dependencies. This breaks TaintTrackingStack.qll and DataFlowStack.qll which import from that pack. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
The merge of codeql-cli/latest (769aacc) brought the updated Overlay.qll that references @trap_or_tag, @source_file, source_file_name, trap_uses_tag, and in_trap_or_tag, but kept the reverted dbscheme that does not define them. This restores the dbscheme to match the v2.25.0 release so it is consistent with Overlay.qll. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
This reverts commit fca47c2.
| Back | FazBrowse Home | New Git URL |
This PR syncs the latest changes from codeql-cli/latest into main.