FazBrowse GitHub Viewer | Trending |
URL:
| Home
Tools: [Download Repo ZIP]   [Original HTTPS Page]

Sync Main (autogenerated) by dilanbhalla · Pull Request #337 · microsoft/codeql · GitHub

forked from github/codeql

Sync Main (autogenerated) - #337

Merged
dilanbhalla merged 67 commits into
mainfrom
auto/sync-main-pr
Mar 24, 2026
Merged

Sync Main (autogenerated)#337
dilanbhalla merged 67 commits into
mainfrom
auto/sync-main-pr

Conversation

Copy link
Copy Markdown
Collaborator

This PR syncs the latest changes from codeql-cli/latest into main.

Tom Hvitved (hvitved) and others added 30 commits March 6, 2026 15:33
This reverts commit c734974.

It was making the build fail
Revert "Bump rules_android from 0.6.4 to 0.7.1"
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
…card

C/C++ overlay: update discard mechanism
Correct comment about AES crypto algorithm strength
Update the shebang regexp (renamed NODE_INVOCATION -> JS_INVOCATION) to
also match 'bun' and 'tsx' so that scripts using these runtimes are
correctly identified as JavaScript files.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Add test files with #!/usr/bin/env bun, #!/usr/bin/env tsx, and
#!/usr/bin/env node shebangs. The query lists extracted .ts files,
verifying that all three shebangs are recognized and the files are
not skipped by the extractor.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
We should be using all subtypes of `FieldBase`. This allows us to find
more type expressions, and is also simpler to evaluate.
Go: improve detection of type expressions when database is missing some type information
Bumps the extractor-dependencies group with 2 updates in the /go/extractor directory: [golang.org/x/mod](https://github.com/golang/mod) and [golang.org/x/tools](https://github.com/golang/tools).


Updates `golang.org/x/mod` from 0.33.0 to 0.34.0
- [Commits](golang/mod@v0.33.0...v0.34.0)

Updates `golang.org/x/tools` from 0.42.0 to 0.43.0
- [Release notes](https://github.com/golang/tools/releases)
- [Commits](golang/tools@v0.42.0...v0.43.0)

---
updated-dependencies:
- dependency-name: golang.org/x/mod
  dependency-version: 0.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: extractor-dependencies
- dependency-name: golang.org/x/tools
  dependency-version: 0.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: extractor-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
…tions

Go: Add overlay annotations from script
…plit

C#: Remove splitting-awareness from data flow.
Swift: Ignore some DB-CHECK results on Linux
…-no-split

C#: Remove splitting-awareness from Range Analysis.
Dilan Bhalla and others added 4 commits March 24, 2026 12:50
The upstream 2.25.0 release merge dropped codeql/dataflowstack from
codeql/java-all and codeql/csharp-all dependencies. This breaks
TaintTrackingStack.qll and DataFlowStack.qll which import from that pack.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
The merge of codeql-cli/latest (769aacc) brought the updated
Overlay.qll that references @trap_or_tag, @source_file, source_file_name,
trap_uses_tag, and in_trap_or_tag, but kept the reverted dbscheme that
does not define them. This restores the dbscheme to match the v2.25.0
release so it is consistent with Overlay.qll.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
dilanbhalla enabled auto-merge March 24, 2026 23:39
dilanbhalla merged commit 4f8cfb3 into main Mar 24, 2026
16 checks passed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.


Back | FazBrowse Home | New Git URL