[krishnprakash/codeql] 20cfe2: Java: reduce false positives in sensitive-log by e...
0 views
Skip to first unread message
Phileco
Apr 21, 2026, 10:14:51 AM (6 days ago) Apr 21
to philecodi...@googlegroups.com
Branch: refs/heads/main
Home: https://github.com/krishnprakash/codeql
Commit: 20cfe291995f1631f9672a8f19aab75a7bfbf511
https://github.com/krishnprakash/codeql/commit/20cfe291995f1631f9672a8f19aab75a7bfbf511
Author: MarkLee131 <kaixu...@ntu.edu.sg>
Date: 2026-04-04 (Sat, 04 Apr 2026)
Changed paths:
A java/ql/lib/change-notes/2026-04-04-sensitive-log-fp-reduction.md
M java/ql/lib/semmle/code/java/security/SensitiveActions.qll
M java/ql/test/query-tests/security/CWE-532/SensitiveLogInfo.expected
M java/ql/test/query-tests/security/CWE-532/Test.java
Log Message:
-----------
Java: reduce false positives in sensitive-log by expanding FP exclusion regex
The getCommonSensitiveInfoFPRegex() only excluded "null", "tokenizer", and
"tokenImage", causing widespread false positives for common non-sensitive
variable names containing "token" or "secret".
This adds exclusions for three categories:
- Pagination/iteration tokens: nextToken (AWS SDK), pageToken (GCP),
continuationToken (Azure), etc.
- Token metadata: tokenType (OAuth), tokenEndpoint (OIDC), tokenCount,
tokenIndex, tokenLength, tokenUrl, etc.
- Secret metadata: secretName (K8s/AWS), secretId (Azure),
secretVersion, secretArn, secretPath, etc.
All truly sensitive variable names (accessToken, clientSecret, secretKey,
refreshToken, etc.) remain correctly flagged.
Commit: 46ef0204ef019d7b073ae1d5c275660be157e5b4
https://github.com/krishnprakash/codeql/commit/46ef0204ef019d7b073ae1d5c275660be157e5b4
Author: MarkLee131 <kaixu...@ntu.edu.sg>
Date: 2026-04-04 (Sat, 04 Apr 2026)
Changed paths:
M java/ql/lib/semmle/code/java/security/SensitiveActions.qll
M java/ql/test/query-tests/security/CWE-532/SensitiveLogInfo.expected
M java/ql/test/query-tests/security/CWE-532/Test.java
Log Message:
-----------
Remove secretQuestion from FP exclusion list
secretQuestion is ambiguous: it could be the question text (not
sensitive) or a security question answer. Worse, the regex
secrets?(question) also matches secretQuestionAnswer, which is
clearly sensitive. Drop it to avoid false negatives.
Commit: 93a594e9c0974f0298a9206277610c23d63d4ab7
https://github.com/krishnprakash/codeql/commit/93a594e9c0974f0298a9206277610c23d63d4ab7
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M java/ql/lib/semmle/code/java/ControlFlowGraph.qll
M shared/controlflow/codeql/controlflow/ControlFlowGraph.qll
Log Message:
-----------
Cfg: Support Throw expressions.
Commit: a53cffc1217cacf57c369e22eabf793ab2f8402e
https://github.com/krishnprakash/codeql/commit/a53cffc1217cacf57c369e22eabf793ab2f8402e
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M java/ql/lib/semmle/code/java/ControlFlowGraph.qll
M shared/controlflow/codeql/controlflow/ControlFlowGraph.qll
Log Message:
-----------
Cfg: Support GotoStmt.
Commit: 0b6c416fd44d4d595655e9d5995e6c197d07ddd8
https://github.com/krishnprakash/codeql/commit/0b6c416fd44d4d595655e9d5995e6c197d07ddd8
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M java/ql/lib/semmle/code/java/ControlFlowGraph.qll
M shared/controlflow/codeql/controlflow/ControlFlowGraph.qll
Log Message:
-----------
Cfg: Support short-circuiting compound assignments.
Commit: 035b83c0e4d46842169f69ab5586037afdc7db7f
https://github.com/krishnprakash/codeql/commit/035b83c0e4d46842169f69ab5586037afdc7db7f
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M csharp/ql/lib/semmle/code/csharp/Callable.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/ControlFlowElement.qll
Log Message:
-----------
C#: Introduce ControlFlowElementOrCallable.
Commit: 6ffed8523cc7f2b401f6b14c8a050957cb93ddc2
https://github.com/krishnprakash/codeql/commit/6ffed8523cc7f2b401f6b14c8a050957cb93ddc2
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M java/ql/lib/semmle/code/java/ControlFlowGraph.qll
M shared/controlflow/codeql/controlflow/ControlFlowGraph.qll
Log Message:
-----------
Cfg/Java: Move InstanceOfExpr CFG into shared lib.
Commit: 88aaff863b58db9f255f78532b1732503213f56e
https://github.com/krishnprakash/codeql/commit/88aaff863b58db9f255f78532b1732503213f56e
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M shared/controlflow/codeql/controlflow/ControlFlowGraph.qll
Log Message:
-----------
Cfg: Extend consistency checks.
Commit: 61976e3ef0d4f2d61bd3e25918554765f0122e39
https://github.com/krishnprakash/codeql/commit/61976e3ef0d4f2d61bd3e25918554765f0122e39
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M csharp/ql/lib/semmle/code/csharp/Assignable.qll
M csharp/ql/lib/semmle/code/csharp/Caching.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/BasicBlocks.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/ControlFlowElement.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/ControlFlowGraph.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/ControlFlowReachability.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/Guards.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/Nullness.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/SSA.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/SignAnalysis.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/DataFlowDispatch.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/DataFlowPrivate.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/DataFlowPublic.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/SsaImpl.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/RangeUtils.qll
M csharp/ql/src/Concurrency/UnsynchronizedStaticAccess.ql
M csharp/ql/src/Likely Bugs/NestedLoopsSameVariable.ql
M csharp/ql/src/Likely Bugs/Statements/UseBraces.ql
M csharp/ql/src/Likely Bugs/UncheckedCastInEquals.ql
M csharp/ql/src/Performance/StringBuilderInLoop.ql
M csharp/ql/src/Security Features/CWE-384/AbandonSession.ql
M csharp/ql/test/library-tests/controlflow/graph/Common.qll
M csharp/ql/test/library-tests/controlflow/graph/Condition.ql
M csharp/ql/test/library-tests/csharp7/IsFlow.ql
M csharp/ql/test/library-tests/csharp8/NullCoalescingControlFlow.ql
M csharp/ql/test/library-tests/csharp8/NullableRefTypes.ql
M csharp/ql/test/library-tests/csharp8/UsingControlFlow.ql
M csharp/ql/test/library-tests/csharp8/ispatternflow.ql
M csharp/ql/test/library-tests/csharp8/switchexprcontrolflow.ql
M csharp/ql/test/library-tests/csharp8/switchstmtctrlflow.ql
M csharp/ql/test/library-tests/dataflow/defuse/defUseEquivalence.ql
M csharp/ql/test/library-tests/dataflow/defuse/parameterUseEquivalence.ql
M csharp/ql/test/library-tests/dataflow/defuse/useUseEquivalence.ql
M csharp/ql/test/library-tests/dataflow/ssa/SSAPhiRead.ql
M csharp/ql/test/library-tests/goto/Goto1.ql
M csharp/ql/test/library-tests/standalone/controlflow/cfg.ql
Log Message:
-----------
C#: Rename ControlFlow::Node to ControlFlowNode.
Commit: b85b02abb43dc0261be0bf55c13224bfb60cd7e6
https://github.com/krishnprakash/codeql/commit/b85b02abb43dc0261be0bf55c13224bfb60cd7e6
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M shared/controlflow/codeql/controlflow/ControlFlowGraph.qll
Log Message:
-----------
Cfg: Add dominance predicates to shared ControlFlowNode.
Commit: 03f6bdbdd2aa034a04b92e36fd4f075e3d9982c6
https://github.com/krishnprakash/codeql/commit/03f6bdbdd2aa034a04b92e36fd4f075e3d9982c6
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M csharp/ql/lib/semmle/code/csharp/controlflow/ControlFlowGraph.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/Guards.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/Nullness.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/SSA.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/BaseSSA.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/DataFlowDispatch.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/DataFlowPrivate.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/DataFlowPublic.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/SsaImpl.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/SsaReadPositionSpecific.qll
M csharp/ql/src/Concurrency/UnsynchronizedStaticAccess.ql
M csharp/ql/src/Likely Bugs/NestedLoopsSameVariable.ql
M csharp/ql/src/Likely Bugs/Statements/UseBraces.ql
M csharp/ql/src/Likely Bugs/UncheckedCastInEquals.ql
M csharp/ql/src/Security Features/CWE-384/AbandonSession.ql
M csharp/ql/test/library-tests/controlflow/graph/EnclosingCallable.ql
M csharp/ql/test/library-tests/controlflow/graph/Nodes.ql
M csharp/ql/test/library-tests/csharp7/IsFlow.ql
M csharp/ql/test/library-tests/csharp8/NullCoalescingControlFlow.ql
M csharp/ql/test/library-tests/csharp8/NullableRefTypes.ql
M csharp/ql/test/library-tests/csharp8/UsingControlFlow.ql
M csharp/ql/test/library-tests/csharp8/ispatternflow.ql
M csharp/ql/test/library-tests/csharp8/switchexprcontrolflow.ql
M csharp/ql/test/library-tests/csharp8/switchstmtctrlflow.ql
M csharp/ql/test/library-tests/goto/Goto1.ql
Log Message:
-----------
C#: Update some references in preparation for CFG swap.
Commit: b878ae3f21e37c4348490237217aef73831b1b11
https://github.com/krishnprakash/codeql/commit/b878ae3f21e37c4348490237217aef73831b1b11
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M csharp/ql/lib/semmle/code/csharp/Callable.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/ControlFlowGraph.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/Guards.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/DataFlowDispatch.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/SsaImpl.qll
Log Message:
-----------
C#: Update some references to ControlFlow::Nodes.
Commit: 13a4141cc66e9681ff0d8be2f72b37fdb21d19c5
https://github.com/krishnprakash/codeql/commit/13a4141cc66e9681ff0d8be2f72b37fdb21d19c5
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M csharp/ql/consistency-queries/DataFlowConsistency.ql
M csharp/ql/lib/semmle/code/csharp/controlflow/ControlFlowElement.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/ControlFlowGraph.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/Guards.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/SSA.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/SignAnalysis.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/DataFlowDispatch.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/DataFlowPrivate.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/DataFlowPublic.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/SsaImpl.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/BoundSpecific.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/ConstantUtils.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/ModulusAnalysisSpecific.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/RangeUtils.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/SignAnalysisSpecific.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/SsaReadPositionSpecific.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/SsaUtils.qll
M csharp/ql/test/library-tests/controlflow/graph/Nodes.ql
M csharp/ql/test/library-tests/csharp11/signAnalysis.ql
M csharp/ql/test/library-tests/dataflow/modulusanalysis/ModulusAnalysis.ql
M csharp/ql/test/library-tests/dataflow/signanalysis/MissingSign.ql
M csharp/ql/test/library-tests/dataflow/signanalysis/SignAnalysis.ql
Log Message:
-----------
C#: Rename remaining references to ControlFlow::Nodes.
Commit: 9cf9a36d0da67c451109850a58c81d1d67834a76
https://github.com/krishnprakash/codeql/commit/9cf9a36d0da67c451109850a58c81d1d67834a76
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M csharp/ql/lib/semmle/code/csharp/Assignable.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/ControlFlowGraph.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/ControlFlowReachability.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/Guards.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/SSA.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/BaseSSA.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/DataFlowDispatch.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/DataFlowPrivate.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/SsaImpl.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/ModulusAnalysisSpecific.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/RangeUtils.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/SsaReadPositionSpecific.qll
M csharp/ql/src/Bad Practices/Control-Flow/ConstantCondition.ql
M csharp/ql/test/library-tests/controlflow/graph/Common.qll
M csharp/ql/test/library-tests/dataflow/defuse/useUseEquivalence.ql
M csharp/ql/test/library-tests/dataflow/ssa-large/countssa.ql
M csharp/ql/test/library-tests/dataflow/ssa/SSAPhiRead.ql
Log Message:
-----------
C#: Rename ControlFlow::BasicBlock to BasicBlock.
Commit: ff978d1a8cf75df365c2bf79160ef83a3a75fd96
https://github.com/krishnprakash/codeql/commit/ff978d1a8cf75df365c2bf79160ef83a3a75fd96
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M csharp/ql/campaigns/Solorigate/src/ModifiedFnvFunctionDetection.ql
M csharp/ql/consistency-queries/CfgConsistency.ql
M csharp/ql/consistency-queries/DataFlowConsistency.ql
M csharp/ql/consistency-queries/VariableCaptureConsistency.ql
M csharp/ql/lib/printCfg.ql
M csharp/ql/lib/semmle/code/csharp/Caching.qll
R csharp/ql/lib/semmle/code/csharp/controlflow/BasicBlocks.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/ControlFlowElement.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/ControlFlowGraph.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/ControlFlowReachability.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/Guards.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/internal/Completion.qll
R csharp/ql/lib/semmle/code/csharp/controlflow/internal/ControlFlowGraphImpl.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/internal/NonReturning.qll
R csharp/ql/lib/semmle/code/csharp/controlflow/internal/Splitting.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/SSA.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/BaseSSA.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/DataFlowDispatch.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/DataFlowPrivate.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/SsaImpl.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/ModulusAnalysisSpecific.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/RangeUtils.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/SsaReadPositionSpecific.qll
M csharp/ql/lib/semmle/code/csharp/security/dataflow/ConditionalBypassQuery.qll
M csharp/ql/src/Bad Practices/Control-Flow/ConstantCondition.ql
M csharp/ql/src/Likely Bugs/NestedLoopsSameVariable.ql
M csharp/ql/src/Performance/StringBuilderInLoop.ql
M csharp/ql/test/library-tests/controlflow/graph/Condition.ql
M csharp/ql/test/library-tests/controlflow/graph/EntryElement.ql
R csharp/ql/test/library-tests/controlflow/graph/ExitElement.expected
R csharp/ql/test/library-tests/controlflow/graph/ExitElement.ql
M csharp/ql/test/library-tests/controlflow/graph/NodeGraph.ql
M csharp/ql/test/library-tests/controlflow/graph/Nodes.ql
M csharp/ql/test/library-tests/csharp8/NullCoalescingControlFlow.ql
M csharp/ql/test/library-tests/csharp8/UsingControlFlow.ql
M csharp/ql/test/library-tests/obinit/ObInit.ql
M shared/controlflow/codeql/controlflow/ControlFlowGraph.qll
Log Message:
-----------
C#: Replace CFG.
Commit: b1790335c09febc0d6bb1d7383b688511ad38ad0
https://github.com/krishnprakash/codeql/commit/b1790335c09febc0d6bb1d7383b688511ad38ad0
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M csharp/ql/test/library-tests/dataflow/defuse/useUseEquivalence.ql
Log Message:
-----------
C#: Fix test.
Commit: 700d56f3abdf505118b1e37b9993ae98e83455d6
https://github.com/krishnprakash/codeql/commit/700d56f3abdf505118b1e37b9993ae98e83455d6
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M csharp/ql/src/Likely Bugs/UncheckedCastInEquals.ql
Log Message:
-----------
C#: Fix UncheckedCastInEquals.
Commit: ac88b73b65e8abbb6bfcf525d5e6f802cadefb1a
https://github.com/krishnprakash/codeql/commit/ac88b73b65e8abbb6bfcf525d5e6f802cadefb1a
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M csharp/ql/lib/semmle/code/csharp/ExprOrStmtParent.qll
Log Message:
-----------
C#: Bugfix in enclosing callable.
Commit: 093eb57ad0ba3b56a4fa354efbc28558408aeb18
https://github.com/krishnprakash/codeql/commit/093eb57ad0ba3b56a4fa354efbc28558408aeb18
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/SsaImpl.qll
M csharp/ql/lib/semmle/code/csharp/dispatch/Dispatch.qll
M csharp/ql/lib/semmle/code/csharp/exprs/Call.qll
Log Message:
-----------
C#: Fix CFG position of property setter calls.
Commit: 43fe411585ddb083ce2db0999dbdc970efd82c18
https://github.com/krishnprakash/codeql/commit/43fe411585ddb083ce2db0999dbdc970efd82c18
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M csharp/ql/test/library-tests/dataflow/ssa/SSAPhi.expected
M csharp/ql/test/library-tests/dataflow/ssa/SSAPhiRead.expected
M csharp/ql/test/library-tests/dataflow/ssa/SsaDef.expected
M csharp/ql/test/library-tests/dataflow/ssa/SsaRead.expected
M csharp/ql/test/library-tests/dataflow/ssa/SsaUltimateDef.expected
Log Message:
-----------
C#: Accept SSA location changes.
Commit: 1a6670a6bba566e12179213e4a599087e176a60c
https://github.com/krishnprakash/codeql/commit/1a6670a6bba566e12179213e4a599087e176a60c
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M csharp/ql/test/library-tests/dataflow/ssa/SsaDefElement.expected
Log Message:
-----------
C#: Phi nodes are not expected to have associated Elements.
Commit: 6010640cea875e083b897b8070448d17ed90822c
https://github.com/krishnprakash/codeql/commit/6010640cea875e083b897b8070448d17ed90822c
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M csharp/ql/test/library-tests/controlflow/guards/BooleanGuardedExpr.expected
M csharp/ql/test/library-tests/controlflow/guards/GuardedControlFlowNode.expected
M csharp/ql/test/library-tests/controlflow/guards/GuardedExpr.expected
M csharp/ql/test/library-tests/controlflow/guards/Guards.cs
Log Message:
-----------
C#: Accept bugfix.
Commit: a5c99f96931a040540932d991fba945f2db079f3
https://github.com/krishnprakash/codeql/commit/a5c99f96931a040540932d991fba945f2db079f3
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M csharp/ql/test/library-tests/controlflow/guards/BooleanGuardedExpr.expected
M csharp/ql/test/library-tests/controlflow/guards/GuardedControlFlowNode.expected
M csharp/ql/test/library-tests/controlflow/guards/GuardedExpr.expected
Log Message:
-----------
C#: Accept harmless CFG changes.
Commit: 5d589093cf0cd93d17f7000efcbd96a3eac86b13
https://github.com/krishnprakash/codeql/commit/5d589093cf0cd93d17f7000efcbd96a3eac86b13
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M csharp/ql/test/library-tests/csharp7/LocalTaintFlow.expected
Log Message:
-----------
C#: Accept CFG changes.
Commit: 49cc931f920eca03f87e32b98b0213e8ea812519
https://github.com/krishnprakash/codeql/commit/49cc931f920eca03f87e32b98b0213e8ea812519
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M csharp/ql/test/library-tests/dataflow/modulusanalysis/ModulusAnalysis.expected
Log Message:
-----------
C#: Compile-time constants no longer have CFG nodes.
Commit: e90243c34850c27cabc680aaf25688bf6164724b
https://github.com/krishnprakash/codeql/commit/e90243c34850c27cabc680aaf25688bf6164724b
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M csharp/ql/test/library-tests/dataflow/signanalysis/SignAnalysis.expected
Log Message:
-----------
C#: Accept irrelevant changes.
The additions are unintentional, but the fault lies with the shared
SignAnalysis code. The removals are due to compile-time constant
initializers no longer having CFG nodes.
Commit: 88256eeee8a6da8fc37dcaed713ac3e41855bdf7
https://github.com/krishnprakash/codeql/commit/88256eeee8a6da8fc37dcaed713ac3e41855bdf7
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M csharp/ql/test/library-tests/controlflow/guards-large/GuardedExpr.expected
Log Message:
-----------
C#: GuardedExpr no longer contains expressions guarded solely by disjunctions.
Commit: 773881f333b0bfdaf40d2d1f4b67511effa9df2d
https://github.com/krishnprakash/codeql/commit/773881f333b0bfdaf40d2d1f4b67511effa9df2d
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M csharp/ql/consistency-queries/DataFlowConsistency.ql
Log Message:
-----------
C#: Accept data flow inconsistency check for read+write calls.
Commit: a997d9f80c92766c30e6d294f2d75f1095337ee7
https://github.com/krishnprakash/codeql/commit/a997d9f80c92766c30e6d294f2d75f1095337ee7
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
R csharp/ql/test/library-tests/controlflow/graph/CONSISTENCY/CfgConsistency.expected
Log Message:
-----------
C#: Accept fixed consistency check.
Commit: a69581966b63ffaea492490a0a94e71f28e1c118
https://github.com/krishnprakash/codeql/commit/a69581966b63ffaea492490a0a94e71f28e1c118
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M csharp/ql/test/library-tests/controlflow/graph/EntryElement.expected
Log Message:
-----------
C#: Accept CFG changes for "first" relation.
Commit: a7d4b00d06ee2632fc1a357162c4e5b15539761a
https://github.com/krishnprakash/codeql/commit/a7d4b00d06ee2632fc1a357162c4e5b15539761a
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M csharp/ql/test/library-tests/dataflow/local/DataFlowStep.expected
M csharp/ql/test/library-tests/dataflow/local/TaintTrackingStep.expected
Log Message:
-----------
C#: Accept changed location for phi nodes.
Commit: 371bc3012e913af0641d101179c4b79d073fcdbc
https://github.com/krishnprakash/codeql/commit/371bc3012e913af0641d101179c4b79d073fcdbc
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M csharp/ql/test/library-tests/security/dataflow/flowsources/StoredFlowSources.expected
Log Message:
-----------
C#: CFG and data flow nodes now exist for LHSs.
Commit: 1d9c0ae3884eee039d6bbaf93fd4a09b42b60e93
https://github.com/krishnprakash/codeql/commit/1d9c0ae3884eee039d6bbaf93fd4a09b42b60e93
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/DataFlowPublic.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/TaintTrackingPublic.qll
Log Message:
-----------
C#: Fix perf.
Commit: bfbd0f77e8c8a823d37864919999abd7c81cb549
https://github.com/krishnprakash/codeql/commit/bfbd0f77e8c8a823d37864919999abd7c81cb549
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M csharp/ql/lib/semmle/code/csharp/dataflow/SSA.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/DataFlowPrivate.qll
M csharp/ql/src/Likely Bugs/UncheckedCastInEquals.ql
Log Message:
-----------
C#: Fix some bad join orders.
Commit: bbd403dbc3cb35c550b6bd88f05f17212b82f81c
https://github.com/krishnprakash/codeql/commit/bbd403dbc3cb35c550b6bd88f05f17212b82f81c
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/DataFlowDispatch.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/DataFlowPrivate.qll
Log Message:
-----------
C#: Rework DataFlowCallable-to-cfg relation in terms of basic blocks for performance.
Commit: 2d5a1840f42639ac34c945c20263c7e22cecc0da
https://github.com/krishnprakash/codeql/commit/2d5a1840f42639ac34c945c20263c7e22cecc0da
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M csharp/ql/test/library-tests/controlflow/graph/BasicBlock.expected
M csharp/ql/test/library-tests/controlflow/graph/Condition.expected
M csharp/ql/test/library-tests/controlflow/graph/Dominance.expected
M csharp/ql/test/library-tests/controlflow/graph/EnclosingCallable.expected
M csharp/ql/test/library-tests/controlflow/graph/NodeGraph.expected
M csharp/ql/test/library-tests/controlflow/graph/Nodes.expected
M csharp/ql/test/library-tests/csharp7/IsFlow.expected
M csharp/ql/test/library-tests/csharp8/NullCoalescingControlFlow.expected
M csharp/ql/test/library-tests/csharp8/NullableRefTypes.expected
M csharp/ql/test/library-tests/csharp8/UsingControlFlow.expected
M csharp/ql/test/library-tests/csharp8/ispatternflow.expected
M csharp/ql/test/library-tests/csharp8/switchexprcontrolflow.expected
M csharp/ql/test/library-tests/csharp8/switchstmtctrlflow.expected
M csharp/ql/test/library-tests/dataflow/ssa-large/countssa.expected
M csharp/ql/test/library-tests/goto/Goto1.expected
M csharp/ql/test/library-tests/obinit/ObInit.expected
M csharp/ql/test/library-tests/standalone/controlflow/cfg.expected
Log Message:
-----------
C#: Accept new CFG in tests.
Commit: aaf9bb2e9e11471ab209f4522139c168dd71f2bf
https://github.com/krishnprakash/codeql/commit/aaf9bb2e9e11471ab209f4522139c168dd71f2bf
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M csharp/ql/test/library-tests/dataflow/call-sensitivity/CallSensitivityFlow.expected
Log Message:
-----------
C#: Accept fewer CallContextSpecificCall due to no splitting.
Commit: 452913f336b220870a51688bb62068d2ca55462c
https://github.com/krishnprakash/codeql/commit/452913f336b220870a51688bb62068d2ca55462c
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M csharp/ql/src/Concurrency/UnsynchronizedStaticAccess.ql
Log Message:
-----------
C#: Improve perf of UnsynchronizedStaticAccess.ql.
Commit: d5c9fd1085da2faf6b3a868b37f134d87b0296c4
https://github.com/krishnprakash/codeql/commit/d5c9fd1085da2faf6b3a868b37f134d87b0296c4
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M csharp/ql/lib/semmle/code/csharp/controlflow/ControlFlowElement.qll
M shared/controlflow/codeql/controlflow/ControlFlowGraph.qll
Log Message:
-----------
C#/Cfg: A bit more qldoc.
Commit: 88160ef2e28e203085b1b7e1a07e5639bbbbcf86
https://github.com/krishnprakash/codeql/commit/88160ef2e28e203085b1b7e1a07e5639bbbbcf86
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-13 (Mon, 13 Apr 2026)
Changed paths:
A csharp/ql/lib/change-notes/2026-04-13-cfg.md
Log Message:
-----------
C#: Add change note.
Commit: f02ccd36cc3311a7e0366a9770a80a09e2fb3ad4
https://github.com/krishnprakash/codeql/commit/f02ccd36cc3311a7e0366a9770a80a09e2fb3ad4
Author: Owen Mansel-Chan <owe...@github.com>
Date: 2026-04-14 (Tue, 14 Apr 2026)
Changed paths:
M docs/codeql/codeql-language-guides/customizing-library-models-for-go.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-python.rst
Log Message:
-----------
(Trivial) Remove trailing spaces in some docs
Commit: ef9136c0539d8002730ab79d62760b5f5972797c
https://github.com/krishnprakash/codeql/commit/ef9136c0539d8002730ab79d62760b5f5972797c
Author: Owen Mansel-Chan <owe...@github.com>
Date: 2026-04-14 (Tue, 14 Apr 2026)
Changed paths:
M docs/codeql/codeql-language-guides/customizing-library-models-for-ruby.rst
Log Message:
-----------
(Formatting) Remove erroneous bullet point in ruby docs
Commit: 05e3073165021fa2bf235f146d415ecd9ba0694f
https://github.com/krishnprakash/codeql/commit/05e3073165021fa2bf235f146d415ecd9ba0694f
Author: Owen Mansel-Chan <owe...@github.com>
Date: 2026-04-14 (Tue, 14 Apr 2026)
Changed paths:
M docs/codeql/codeql-language-guides/customizing-library-models-for-cpp.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-csharp.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-go.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-java-and-kotlin.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-javascript.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-python.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-ruby.rst
Log Message:
-----------
List extensible predicates for barriers and barrier guards
Commit: 415330d5eb383d19da05a9892218f1bcc5e0de9b
https://github.com/krishnprakash/codeql/commit/415330d5eb383d19da05a9892218f1bcc5e0de9b
Author: Owen Mansel-Chan <owe...@github.com>
Date: 2026-04-14 (Tue, 14 Apr 2026)
Changed paths:
M docs/codeql/codeql-language-guides/customizing-library-models-for-cpp.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-csharp.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-go.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-java-and-kotlin.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-javascript.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-python.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-ruby.rst
Log Message:
-----------
Update docs for barriers and barrier guards
Commit: c86ba38a4e52c595b35cbcc0990d0deb8ef5288e
https://github.com/krishnprakash/codeql/commit/c86ba38a4e52c595b35cbcc0990d0deb8ef5288e
Author: Owen Mansel-Chan <owe...@github.com>
Date: 2026-04-14 (Tue, 14 Apr 2026)
Changed paths:
A cpp/ql/lib/change-notes/2026-03-20-data-extensions-barriers.md
A csharp/ql/lib/change-notes/2026-03-20-data-extensions-barriers.md
A go/ql/lib/change-notes/2026-03-20-data-extensions-barriers.md
A java/ql/lib/change-notes/2026-03-20-data-extensions-barriers.md
A javascript/ql/lib/change-notes/2026-03-20-data-extensions-barriers.md
A python/ql/lib/change-notes/2026-03-20-data-extensions-barriers.md
A ruby/ql/lib/change-notes/2026-03-20-data-extensions-barriers.md
A rust/ql/lib/change-notes/2026-03-20-data-extensions-barriers.md
Log Message:
-----------
Add change notes
Commit: a2a0c087e15569a3aef8b9018dbd2d6d58b43481
https://github.com/krishnprakash/codeql/commit/a2a0c087e15569a3aef8b9018dbd2d6d58b43481
Author: Owen Mansel-Chan <62447351...@users.noreply.github.com>
Date: 2026-04-14 (Tue, 14 Apr 2026)
Changed paths:
M docs/codeql/codeql-language-guides/customizing-library-models-for-python.rst
Log Message:
-----------
Remove incorrect parameter of extensible predicate
Co-authored-by: Copilot <17572847...@users.noreply.github.com>
Commit: 6d4e8bfcb29ab98925ea4e69c146d6451b3878a5
https://github.com/krishnprakash/codeql/commit/6d4e8bfcb29ab98925ea4e69c146d6451b3878a5
Author: Owen Mansel-Chan <62447351...@users.noreply.github.com>
Date: 2026-04-14 (Tue, 14 Apr 2026)
Changed paths:
M docs/codeql/codeql-language-guides/customizing-library-models-for-cpp.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-csharp.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-go.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-java-and-kotlin.rst
Log Message:
-----------
Correct extensible predicate signatures in docs
Co-authored-by: Copilot <17572847...@users.noreply.github.com>
Commit: 8f17b7379663d6b38f621d48ed4c8ff370a206f0
https://github.com/krishnprakash/codeql/commit/8f17b7379663d6b38f621d48ed4c8ff370a206f0
Author: Owen Mansel-Chan <owe...@github.com>
Date: 2026-04-14 (Tue, 14 Apr 2026)
Changed paths:
M cpp/ql/lib/change-notes/2026-03-20-data-extensions-barriers.md
M csharp/ql/lib/change-notes/2026-03-20-data-extensions-barriers.md
M go/ql/lib/change-notes/2026-03-20-data-extensions-barriers.md
M java/ql/lib/change-notes/2026-03-20-data-extensions-barriers.md
M javascript/ql/lib/change-notes/2026-03-20-data-extensions-barriers.md
M python/ql/lib/change-notes/2026-03-20-data-extensions-barriers.md
M ruby/ql/lib/change-notes/2026-03-20-data-extensions-barriers.md
Log Message:
-----------
Fix link formatting in change notes
Commit: 76d165e71ead77b2992c1e2e2af8d0ad4601a6b9
https://github.com/krishnprakash/codeql/commit/76d165e71ead77b2992c1e2e2af8d0ad4601a6b9
Author: Owen Mansel-Chan <owe...@github.com>
Date: 2026-04-14 (Tue, 14 Apr 2026)
Changed paths:
M docs/codeql/codeql-language-guides/customizing-library-models-for-cpp.rst
M docs/ql-libraries/dataflow/dataflow.md
M ruby/ql/docs/flow_summaries.md
Log Message:
-----------
"modelling" -> "modeling" in docs
Commit: 2ecf0863333b20957e1d354945646b96055adc42
https://github.com/krishnprakash/codeql/commit/2ecf0863333b20957e1d354945646b96055adc42
Author: Owen Mansel-Chan <owe...@github.com>
Date: 2026-04-14 (Tue, 14 Apr 2026)
Changed paths:
M docs/codeql/codeql-language-guides/customizing-library-models-for-cpp.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-csharp.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-go.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-java-and-kotlin.rst
Log Message:
-----------
Include parameters when quoting extensible predicate name
Commit: 8081d4602bf406ac2cb78f0839e0717dc952f238
https://github.com/krishnprakash/codeql/commit/8081d4602bf406ac2cb78f0839e0717dc952f238
Author: Owen Mansel-Chan <owe...@github.com>
Date: 2026-04-14 (Tue, 14 Apr 2026)
Changed paths:
M docs/codeql/codeql-language-guides/customizing-library-models-for-cpp.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-csharp.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-go.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-java-and-kotlin.rst
Log Message:
-----------
Use hyphens in column names: "access-path", "accepting-value"
Commit: 6321482a46b8d538d11331e5e0e137be8942279a
https://github.com/krishnprakash/codeql/commit/6321482a46b8d538d11331e5e0e137be8942279a
Author: Owen Mansel-Chan <owe...@github.com>
Date: 2026-04-14 (Tue, 14 Apr 2026)
Changed paths:
M docs/codeql/codeql-language-guides/customizing-library-models-for-python.rst
Log Message:
-----------
Remove mention of extension ID
Commit: 87f2e21ae9851ccb49ab8ebe77961327c8aa103b
https://github.com/krishnprakash/codeql/commit/87f2e21ae9851ccb49ab8ebe77961327c8aa103b
Author: Owen Mansel-Chan <owe...@github.com>
Date: 2026-04-14 (Tue, 14 Apr 2026)
Changed paths:
M docs/codeql/codeql-language-guides/customizing-library-models-for-cpp.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-csharp.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-go.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-java-and-kotlin.rst
Log Message:
-----------
Fix docs: "acceptingvalue" -> "acceptingValue"
Commit: f79ffe792ed547feab80c1b6fccf69ec26ccc8c6
https://github.com/krishnprakash/codeql/commit/f79ffe792ed547feab80c1b6fccf69ec26ccc8c6
Author: Owen Mansel-Chan <owe...@github.com>
Date: 2026-04-14 (Tue, 14 Apr 2026)
Changed paths:
M docs/codeql/codeql-language-guides/customizing-library-models-for-javascript.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-python.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-ruby.rst
Log Message:
-----------
Fix docs: "branch" -> "acceptingValue"
Commit: 2c16cb46ad66c19ba280d48b1de4983cbc5eddee
https://github.com/krishnprakash/codeql/commit/2c16cb46ad66c19ba280d48b1de4983cbc5eddee
Author: Owen Mansel-Chan <62447351...@users.noreply.github.com>
Date: 2026-04-16 (Thu, 16 Apr 2026)
Changed paths:
M docs/codeql/codeql-language-guides/customizing-library-models-for-go.rst
Log Message:
-----------
Quote library name in backticks
Co-authored-by: Sarita Iyer <66540150...@users.noreply.github.com>
Commit: 5a7b1b91e0328f7527e8c74da3b9675178d06a48
https://github.com/krishnprakash/codeql/commit/5a7b1b91e0328f7527e8c74da3b9675178d06a48
Author: Owen Mansel-Chan <owe...@github.com>
Date: 2026-04-16 (Thu, 16 Apr 2026)
Changed paths:
M docs/codeql/codeql-language-guides/customizing-library-models-for-cpp.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-csharp.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-go.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-java-and-kotlin.rst
Log Message:
-----------
Fix mistakes in explanation of override column
To avoid copy-paste mistakes and make them more consistent we just use
the word "model".
Commit: 82d9d46fdedb7ade555e64729980d2a6f1a4c894
https://github.com/krishnprakash/codeql/commit/82d9d46fdedb7ade555e64729980d2a6f1a4c894
Author: Owen Mansel-Chan <owe...@github.com>
Date: 2026-04-16 (Thu, 16 Apr 2026)
Changed paths:
M docs/codeql/codeql-language-guides/customizing-library-models-for-cpp.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-csharp.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-go.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-java-and-kotlin.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-javascript.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-python.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-ruby.rst
Log Message:
-----------
Remove duplication and standardize wording
Co-authored-by: Copilot <cop...@github.com>
Commit: 69c150d5f6d637f684077a643a381d9d79abea2b
https://github.com/krishnprakash/codeql/commit/69c150d5f6d637f684077a643a381d9d79abea2b
Author: Owen Mansel-Chan <owe...@github.com>
Date: 2026-04-16 (Thu, 16 Apr 2026)
Changed paths:
M docs/codeql/codeql-language-guides/customizing-library-models-for-actions.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-javascript.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-python.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-ruby.rst
Log Message:
-----------
Use monospace instead of bold for predicate signatures
Commit: 73cc54c10d39567cb406db6a29f3c81e79e84ad3
https://github.com/krishnprakash/codeql/commit/73cc54c10d39567cb406db6a29f3c81e79e84ad3
Author: Owen Mansel-Chan <owe...@github.com>
Date: 2026-04-16 (Thu, 16 Apr 2026)
Changed paths:
M docs/codeql/codeql-language-guides/customizing-library-models-for-javascript.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-python.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-ruby.rst
Log Message:
-----------
Use monospace instead of bold for quoted code
Commit: 92d205d1a832dfb018aeef20ff64f1d6f556b749
https://github.com/krishnprakash/codeql/commit/92d205d1a832dfb018aeef20ff64f1d6f556b749
Author: MarkLee131 <kaixu...@ntu.edu.sg>
Date: 2026-04-19 (Sun, 19 Apr 2026)
Changed paths:
M java/ql/lib/semmle/code/java/security/SensitiveActions.qll
Log Message:
-----------
Use set literal for getCommonSensitiveInfoFPRegex
Replace the five-way result = ... or result = ... disjunction with a
single equality on a set literal. Addresses the CodeQL style alert
"Use a set literal in place of or" reported by the self-scan on this
PR. Pure refactor, no semantic change.
Commit: c861d99802a76469906837fe9af3bdba66231d78
https://github.com/krishnprakash/codeql/commit/c861d99802a76469906837fe9af3bdba66231d78
Author: github-actions[bot] <github-...@github.com>
Date: 2026-04-20 (Mon, 20 Apr 2026)
Changed paths:
M actions/ql/lib/CHANGELOG.md
R actions/ql/lib/change-notes/2026-03-26-remove-false-positive-sinks.md
A actions/ql/lib/change-notes/released/0.4.34.md
M actions/ql/lib/codeql-pack.release.yml
M actions/ql/lib/qlpack.yml
M actions/ql/src/CHANGELOG.md
R actions/ql/src/change-notes/2026-04-02-alert-msg-poisoning.md
R actions/ql/src/change-notes/2026-04-02-permissions.md
A actions/ql/src/change-notes/released/0.6.26.md
M actions/ql/src/codeql-pack.release.yml
M actions/ql/src/qlpack.yml
M cpp/ql/lib/CHANGELOG.md
R cpp/ql/lib/change-notes/2026-04-07-autoconf.md
R cpp/ql/lib/change-notes/2026-04-14-throwing.md
A cpp/ql/lib/change-notes/released/10.0.0.md
M cpp/ql/lib/codeql-pack.release.yml
M cpp/ql/lib/qlpack.yml
M cpp/ql/src/CHANGELOG.md
R cpp/ql/src/change-notes/2026-03-23-implicit-function-declaration.md
R cpp/ql/src/change-notes/2026-04-02-comparison-with-wider-type.md
R cpp/ql/src/change-notes/2026-04-02-implicit-function-declaration.md
R cpp/ql/src/change-notes/2026-04-02-integer-multiplication-cast-to-long.md
R cpp/ql/src/change-notes/2026-04-02-suspicious-add-sizeof.md
R cpp/ql/src/change-notes/2026-04-02-wrong-type-format-argument.md
R cpp/ql/src/change-notes/2026-04-16-add-model-for-aligned-alloc.md
A cpp/ql/src/change-notes/released/1.6.1.md
M cpp/ql/src/codeql-pack.release.yml
M cpp/ql/src/qlpack.yml
M csharp/ql/campaigns/Solorigate/lib/CHANGELOG.md
A csharp/ql/campaigns/Solorigate/lib/change-notes/released/1.7.65.md
M csharp/ql/campaigns/Solorigate/lib/codeql-pack.release.yml
M csharp/ql/campaigns/Solorigate/lib/qlpack.yml
M csharp/ql/campaigns/Solorigate/src/CHANGELOG.md
A csharp/ql/campaigns/Solorigate/src/change-notes/released/1.7.65.md
M csharp/ql/campaigns/Solorigate/src/codeql-pack.release.yml
M csharp/ql/campaigns/Solorigate/src/qlpack.yml
M csharp/ql/lib/CHANGELOG.md
R csharp/ql/lib/change-notes/2026-04-01-getlrvalue.md
A csharp/ql/lib/change-notes/released/5.5.0.md
M csharp/ql/lib/codeql-pack.release.yml
M csharp/ql/lib/qlpack.yml
M csharp/ql/src/CHANGELOG.md
R csharp/ql/src/change-notes/2026-04-17-useless-to-string.md
A csharp/ql/src/change-notes/released/1.7.1.md
M csharp/ql/src/codeql-pack.release.yml
M csharp/ql/src/qlpack.yml
M go/ql/consistency-queries/CHANGELOG.md
A go/ql/consistency-queries/change-notes/released/1.0.48.md
M go/ql/consistency-queries/codeql-pack.release.yml
M go/ql/consistency-queries/qlpack.yml
M go/ql/lib/CHANGELOG.md
A go/ql/lib/change-notes/released/7.0.6.md
M go/ql/lib/codeql-pack.release.yml
M go/ql/lib/qlpack.yml
M go/ql/src/CHANGELOG.md
A go/ql/src/change-notes/released/1.6.1.md
M go/ql/src/codeql-pack.release.yml
M go/ql/src/qlpack.yml
M java/ql/lib/CHANGELOG.md
R java/ql/lib/change-notes/2026-04-16-woodstox-xxe.md
A java/ql/lib/change-notes/released/9.0.4.md
M java/ql/lib/codeql-pack.release.yml
M java/ql/lib/qlpack.yml
M java/ql/src/CHANGELOG.md
A java/ql/src/change-notes/released/1.11.1.md
M java/ql/src/codeql-pack.release.yml
M java/ql/src/qlpack.yml
M javascript/ql/lib/CHANGELOG.md
A javascript/ql/lib/change-notes/released/2.6.28.md
M javascript/ql/lib/codeql-pack.release.yml
M javascript/ql/lib/qlpack.yml
M javascript/ql/src/CHANGELOG.md
R javascript/ql/src/change-notes/2026-04-13-fastify-per-route-rate-limit.md
A javascript/ql/src/change-notes/released/2.3.8.md
M javascript/ql/src/codeql-pack.release.yml
M javascript/ql/src/qlpack.yml
M misc/suite-helpers/CHANGELOG.md
A misc/suite-helpers/change-notes/released/1.0.48.md
M misc/suite-helpers/codeql-pack.release.yml
M misc/suite-helpers/qlpack.yml
M python/ql/lib/CHANGELOG.md
R python/ql/lib/change-notes/2026-04-10-support-lazy-keyword.md
A python/ql/lib/change-notes/released/7.0.5.md
M python/ql/lib/codeql-pack.release.yml
M python/ql/lib/qlpack.yml
M python/ql/src/CHANGELOG.md
R python/ql/src/change-notes/2026-03-26-improve-bind-all-interfaces-query.md
A python/ql/src/change-notes/released/1.8.1.md
M python/ql/src/codeql-pack.release.yml
M python/ql/src/qlpack.yml
M ruby/ql/lib/CHANGELOG.md
A ruby/ql/lib/change-notes/released/5.1.16.md
M ruby/ql/lib/codeql-pack.release.yml
M ruby/ql/lib/qlpack.yml
M ruby/ql/src/CHANGELOG.md
A ruby/ql/src/change-notes/released/1.6.1.md
M ruby/ql/src/codeql-pack.release.yml
M ruby/ql/src/qlpack.yml
M rust/ql/lib/CHANGELOG.md
A rust/ql/lib/change-notes/released/0.2.12.md
M rust/ql/lib/codeql-pack.release.yml
M rust/ql/lib/qlpack.yml
M rust/ql/src/CHANGELOG.md
A rust/ql/src/change-notes/released/0.1.33.md
M rust/ql/src/codeql-pack.release.yml
M rust/ql/src/qlpack.yml
M shared/concepts/CHANGELOG.md
A shared/concepts/change-notes/released/0.0.22.md
M shared/concepts/codeql-pack.release.yml
M shared/concepts/qlpack.yml
M shared/controlflow/CHANGELOG.md
A shared/controlflow/change-notes/released/2.0.32.md
M shared/controlflow/codeql-pack.release.yml
M shared/controlflow/qlpack.yml
M shared/dataflow/CHANGELOG.md
A shared/dataflow/change-notes/released/2.1.4.md
M shared/dataflow/codeql-pack.release.yml
M shared/dataflow/qlpack.yml
M shared/mad/CHANGELOG.md
A shared/mad/change-notes/released/1.0.48.md
M shared/mad/codeql-pack.release.yml
M shared/mad/qlpack.yml
M shared/quantum/CHANGELOG.md
A shared/quantum/change-notes/released/0.0.26.md
M shared/quantum/codeql-pack.release.yml
M shared/quantum/qlpack.yml
M shared/rangeanalysis/CHANGELOG.md
A shared/rangeanalysis/change-notes/released/1.0.48.md
M shared/rangeanalysis/codeql-pack.release.yml
M shared/rangeanalysis/qlpack.yml
M shared/regex/CHANGELOG.md
A shared/regex/change-notes/released/1.0.48.md
M shared/regex/codeql-pack.release.yml
M shared/regex/qlpack.yml
M shared/ssa/CHANGELOG.md
A shared/ssa/change-notes/released/2.0.24.md
M shared/ssa/codeql-pack.release.yml
M shared/ssa/qlpack.yml
M shared/threat-models/CHANGELOG.md
A shared/threat-models/change-notes/released/1.0.48.md
M shared/threat-models/codeql-pack.release.yml
M shared/threat-models/qlpack.yml
M shared/tutorial/CHANGELOG.md
A shared/tutorial/change-notes/released/1.0.48.md
M shared/tutorial/codeql-pack.release.yml
M shared/tutorial/qlpack.yml
M shared/typeflow/CHANGELOG.md
A shared/typeflow/change-notes/released/1.0.48.md
M shared/typeflow/codeql-pack.release.yml
M shared/typeflow/qlpack.yml
M shared/typeinference/CHANGELOG.md
A shared/typeinference/change-notes/released/0.0.29.md
M shared/typeinference/codeql-pack.release.yml
M shared/typeinference/qlpack.yml
M shared/typetracking/CHANGELOG.md
A shared/typetracking/change-notes/released/2.0.32.md
M shared/typetracking/codeql-pack.release.yml
M shared/typetracking/qlpack.yml
M shared/typos/CHANGELOG.md
A shared/typos/change-notes/released/1.0.48.md
M shared/typos/codeql-pack.release.yml
M shared/typos/qlpack.yml
M shared/util/CHANGELOG.md
A shared/util/change-notes/released/2.0.35.md
M shared/util/codeql-pack.release.yml
M shared/util/qlpack.yml
M shared/xml/CHANGELOG.md
A shared/xml/change-notes/released/1.0.48.md
M shared/xml/codeql-pack.release.yml
M shared/xml/qlpack.yml
M shared/yaml/CHANGELOG.md
A shared/yaml/change-notes/released/1.0.48.md
M shared/yaml/codeql-pack.release.yml
M shared/yaml/qlpack.yml
M swift/ql/lib/CHANGELOG.md
R swift/ql/lib/change-notes/2026-04-06-swift-6.3.md
A swift/ql/lib/change-notes/released/6.4.0.md
M swift/ql/lib/codeql-pack.release.yml
M swift/ql/lib/qlpack.yml
M swift/ql/src/CHANGELOG.md
A swift/ql/src/change-notes/released/1.3.1.md
M swift/ql/src/codeql-pack.release.yml
M swift/ql/src/qlpack.yml
Log Message:
-----------
Release preparation for version 2.25.3
Commit: 34b5dcfd5f88c73990b4a69fa289c20a0e7f7275
https://github.com/krishnprakash/codeql/commit/34b5dcfd5f88c73990b4a69fa289c20a0e7f7275
Author: Michael B. Gale <m...@github.com>
Date: 2026-04-20 (Mon, 20 Apr 2026)
Changed paths:
M actions/ql/src/CHANGELOG.md
M actions/ql/src/change-notes/released/0.6.26.md
Log Message:
-----------
Improve wording of `actions` note
Commit: abf374433b4e05ec4d4f0d0ae077766c2eebe241
https://github.com/krishnprakash/codeql/commit/abf374433b4e05ec4d4f0d0ae077766c2eebe241
Author: Michael B. Gale <m...@github.com>
Date: 2026-04-20 (Mon, 20 Apr 2026)
Changed paths:
M cpp/ql/src/CHANGELOG.md
M cpp/ql/src/change-notes/released/1.6.1.md
Log Message:
-----------
Merge changelog entries for `cpp/implicit-function-declaration`
Commit: a73f7cb79d18ec80a11c16b49c2e3118bfbdf2ef
https://github.com/krishnprakash/codeql/commit/a73f7cb79d18ec80a11c16b49c2e3118bfbdf2ef
Author: Michael B. Gale <m...@github.com>
Date: 2026-04-20 (Mon, 20 Apr 2026)
Changed paths:
M actions/ql/lib/CHANGELOG.md
R actions/ql/lib/change-notes/2026-03-26-remove-false-positive-sinks.md
A actions/ql/lib/change-notes/released/0.4.34.md
M actions/ql/lib/codeql-pack.release.yml
M actions/ql/lib/qlpack.yml
M actions/ql/src/CHANGELOG.md
R actions/ql/src/change-notes/2026-04-02-alert-msg-poisoning.md
R actions/ql/src/change-notes/2026-04-02-permissions.md
A actions/ql/src/change-notes/released/0.6.26.md
M actions/ql/src/codeql-pack.release.yml
M actions/ql/src/qlpack.yml
M cpp/ql/lib/CHANGELOG.md
R cpp/ql/lib/change-notes/2026-04-07-autoconf.md
R cpp/ql/lib/change-notes/2026-04-14-throwing.md
A cpp/ql/lib/change-notes/released/10.0.0.md
M cpp/ql/lib/codeql-pack.release.yml
M cpp/ql/lib/qlpack.yml
M cpp/ql/src/CHANGELOG.md
R cpp/ql/src/change-notes/2026-03-23-implicit-function-declaration.md
R cpp/ql/src/change-notes/2026-04-02-comparison-with-wider-type.md
R cpp/ql/src/change-notes/2026-04-02-implicit-function-declaration.md
R cpp/ql/src/change-notes/2026-04-02-integer-multiplication-cast-to-long.md
R cpp/ql/src/change-notes/2026-04-02-suspicious-add-sizeof.md
R cpp/ql/src/change-notes/2026-04-02-wrong-type-format-argument.md
R cpp/ql/src/change-notes/2026-04-16-add-model-for-aligned-alloc.md
A cpp/ql/src/change-notes/released/1.6.1.md
M cpp/ql/src/codeql-pack.release.yml
M cpp/ql/src/qlpack.yml
M csharp/ql/campaigns/Solorigate/lib/CHANGELOG.md
A csharp/ql/campaigns/Solorigate/lib/change-notes/released/1.7.65.md
M csharp/ql/campaigns/Solorigate/lib/codeql-pack.release.yml
M csharp/ql/campaigns/Solorigate/lib/qlpack.yml
M csharp/ql/campaigns/Solorigate/src/CHANGELOG.md
A csharp/ql/campaigns/Solorigate/src/change-notes/released/1.7.65.md
M csharp/ql/campaigns/Solorigate/src/codeql-pack.release.yml
M csharp/ql/campaigns/Solorigate/src/qlpack.yml
M csharp/ql/lib/CHANGELOG.md
R csharp/ql/lib/change-notes/2026-04-01-getlrvalue.md
A csharp/ql/lib/change-notes/released/5.5.0.md
M csharp/ql/lib/codeql-pack.release.yml
M csharp/ql/lib/qlpack.yml
M csharp/ql/src/CHANGELOG.md
R csharp/ql/src/change-notes/2026-04-17-useless-to-string.md
A csharp/ql/src/change-notes/released/1.7.1.md
M csharp/ql/src/codeql-pack.release.yml
M csharp/ql/src/qlpack.yml
M go/ql/consistency-queries/CHANGELOG.md
A go/ql/consistency-queries/change-notes/released/1.0.48.md
M go/ql/consistency-queries/codeql-pack.release.yml
M go/ql/consistency-queries/qlpack.yml
M go/ql/lib/CHANGELOG.md
A go/ql/lib/change-notes/released/7.0.6.md
M go/ql/lib/codeql-pack.release.yml
M go/ql/lib/qlpack.yml
M go/ql/src/CHANGELOG.md
A go/ql/src/change-notes/released/1.6.1.md
M go/ql/src/codeql-pack.release.yml
M go/ql/src/qlpack.yml
M java/ql/lib/CHANGELOG.md
R java/ql/lib/change-notes/2026-04-16-woodstox-xxe.md
A java/ql/lib/change-notes/released/9.0.4.md
M java/ql/lib/codeql-pack.release.yml
M java/ql/lib/qlpack.yml
M java/ql/src/CHANGELOG.md
A java/ql/src/change-notes/released/1.11.1.md
M java/ql/src/codeql-pack.release.yml
M java/ql/src/qlpack.yml
M javascript/ql/lib/CHANGELOG.md
A javascript/ql/lib/change-notes/released/2.6.28.md
M javascript/ql/lib/codeql-pack.release.yml
M javascript/ql/lib/qlpack.yml
M javascript/ql/src/CHANGELOG.md
R javascript/ql/src/change-notes/2026-04-13-fastify-per-route-rate-limit.md
A javascript/ql/src/change-notes/released/2.3.8.md
M javascript/ql/src/codeql-pack.release.yml
M javascript/ql/src/qlpack.yml
M misc/suite-helpers/CHANGELOG.md
A misc/suite-helpers/change-notes/released/1.0.48.md
M misc/suite-helpers/codeql-pack.release.yml
M misc/suite-helpers/qlpack.yml
M python/ql/lib/CHANGELOG.md
R python/ql/lib/change-notes/2026-04-10-support-lazy-keyword.md
A python/ql/lib/change-notes/released/7.0.5.md
M python/ql/lib/codeql-pack.release.yml
M python/ql/lib/qlpack.yml
M python/ql/src/CHANGELOG.md
R python/ql/src/change-notes/2026-03-26-improve-bind-all-interfaces-query.md
A python/ql/src/change-notes/released/1.8.1.md
M python/ql/src/codeql-pack.release.yml
M python/ql/src/qlpack.yml
M ruby/ql/lib/CHANGELOG.md
A ruby/ql/lib/change-notes/released/5.1.16.md
M ruby/ql/lib/codeql-pack.release.yml
M ruby/ql/lib/qlpack.yml
M ruby/ql/src/CHANGELOG.md
A ruby/ql/src/change-notes/released/1.6.1.md
M ruby/ql/src/codeql-pack.release.yml
M ruby/ql/src/qlpack.yml
M rust/ql/lib/CHANGELOG.md
A rust/ql/lib/change-notes/released/0.2.12.md
M rust/ql/lib/codeql-pack.release.yml
M rust/ql/lib/qlpack.yml
M rust/ql/src/CHANGELOG.md
A rust/ql/src/change-notes/released/0.1.33.md
M rust/ql/src/codeql-pack.release.yml
M rust/ql/src/qlpack.yml
M shared/concepts/CHANGELOG.md
A shared/concepts/change-notes/released/0.0.22.md
M shared/concepts/codeql-pack.release.yml
M shared/concepts/qlpack.yml
M shared/controlflow/CHANGELOG.md
A shared/controlflow/change-notes/released/2.0.32.md
M shared/controlflow/codeql-pack.release.yml
M shared/controlflow/qlpack.yml
M shared/dataflow/CHANGELOG.md
A shared/dataflow/change-notes/released/2.1.4.md
M shared/dataflow/codeql-pack.release.yml
M shared/dataflow/qlpack.yml
M shared/mad/CHANGELOG.md
A shared/mad/change-notes/released/1.0.48.md
M shared/mad/codeql-pack.release.yml
M shared/mad/qlpack.yml
M shared/quantum/CHANGELOG.md
A shared/quantum/change-notes/released/0.0.26.md
M shared/quantum/codeql-pack.release.yml
M shared/quantum/qlpack.yml
M shared/rangeanalysis/CHANGELOG.md
A shared/rangeanalysis/change-notes/released/1.0.48.md
M shared/rangeanalysis/codeql-pack.release.yml
M shared/rangeanalysis/qlpack.yml
M shared/regex/CHANGELOG.md
A shared/regex/change-notes/released/1.0.48.md
M shared/regex/codeql-pack.release.yml
M shared/regex/qlpack.yml
M shared/ssa/CHANGELOG.md
A shared/ssa/change-notes/released/2.0.24.md
M shared/ssa/codeql-pack.release.yml
M shared/ssa/qlpack.yml
M shared/threat-models/CHANGELOG.md
A shared/threat-models/change-notes/released/1.0.48.md
M shared/threat-models/codeql-pack.release.yml
M shared/threat-models/qlpack.yml
M shared/tutorial/CHANGELOG.md
A shared/tutorial/change-notes/released/1.0.48.md
M shared/tutorial/codeql-pack.release.yml
M shared/tutorial/qlpack.yml
M shared/typeflow/CHANGELOG.md
A shared/typeflow/change-notes/released/1.0.48.md
M shared/typeflow/codeql-pack.release.yml
M shared/typeflow/qlpack.yml
M shared/typeinference/CHANGELOG.md
A shared/typeinference/change-notes/released/0.0.29.md
M shared/typeinference/codeql-pack.release.yml
M shared/typeinference/qlpack.yml
M shared/typetracking/CHANGELOG.md
A shared/typetracking/change-notes/released/2.0.32.md
M shared/typetracking/codeql-pack.release.yml
M shared/typetracking/qlpack.yml
M shared/typos/CHANGELOG.md
A shared/typos/change-notes/released/1.0.48.md
M shared/typos/codeql-pack.release.yml
M shared/typos/qlpack.yml
M shared/util/CHANGELOG.md
A shared/util/change-notes/released/2.0.35.md
M shared/util/codeql-pack.release.yml
M shared/util/qlpack.yml
M shared/xml/CHANGELOG.md
A shared/xml/change-notes/released/1.0.48.md
M shared/xml/codeql-pack.release.yml
M shared/xml/qlpack.yml
M shared/yaml/CHANGELOG.md
A shared/yaml/change-notes/released/1.0.48.md
M shared/yaml/codeql-pack.release.yml
M shared/yaml/qlpack.yml
M swift/ql/lib/CHANGELOG.md
R swift/ql/lib/change-notes/2026-04-06-swift-6.3.md
A swift/ql/lib/change-notes/released/6.4.0.md
M swift/ql/lib/codeql-pack.release.yml
M swift/ql/lib/qlpack.yml
M swift/ql/src/CHANGELOG.md
A swift/ql/src/change-notes/released/1.3.1.md
M swift/ql/src/codeql-pack.release.yml
M swift/ql/src/qlpack.yml
Log Message:
-----------
Merge pull request #21736 from github/release-prep/2.25.3
Release preparation for version 2.25.3
Commit: a0bab539bb2176af27fd717c78920db60b82229d
https://github.com/krishnprakash/codeql/commit/a0bab539bb2176af27fd717c78920db60b82229d
Author: github-actions[bot] <github-...@github.com>
Date: 2026-04-20 (Mon, 20 Apr 2026)
Changed paths:
M actions/ql/lib/qlpack.yml
M actions/ql/src/qlpack.yml
M cpp/ql/lib/qlpack.yml
M cpp/ql/src/qlpack.yml
M csharp/ql/campaigns/Solorigate/lib/qlpack.yml
M csharp/ql/campaigns/Solorigate/src/qlpack.yml
M csharp/ql/lib/qlpack.yml
M csharp/ql/src/qlpack.yml
M go/ql/consistency-queries/qlpack.yml
M go/ql/lib/qlpack.yml
M go/ql/src/qlpack.yml
M java/ql/lib/qlpack.yml
M java/ql/src/qlpack.yml
M javascript/ql/lib/qlpack.yml
M javascript/ql/src/qlpack.yml
M misc/suite-helpers/qlpack.yml
M python/ql/lib/qlpack.yml
M python/ql/src/qlpack.yml
M ruby/ql/lib/qlpack.yml
M ruby/ql/src/qlpack.yml
M rust/ql/lib/qlpack.yml
M rust/ql/src/qlpack.yml
M shared/concepts/qlpack.yml
M shared/controlflow/qlpack.yml
M shared/dataflow/qlpack.yml
M shared/mad/qlpack.yml
M shared/quantum/qlpack.yml
M shared/rangeanalysis/qlpack.yml
M shared/regex/qlpack.yml
M shared/ssa/qlpack.yml
M shared/threat-models/qlpack.yml
M shared/tutorial/qlpack.yml
M shared/typeflow/qlpack.yml
M shared/typeinference/qlpack.yml
M shared/typetracking/qlpack.yml
M shared/typos/qlpack.yml
M shared/util/qlpack.yml
M shared/xml/qlpack.yml
M shared/yaml/qlpack.yml
M swift/ql/lib/qlpack.yml
M swift/ql/src/qlpack.yml
Log Message:
-----------
Post-release preparation for codeql-cli-2.25.3
Commit: e928c224ae1aa7bc4a9f850a2c2d1522d6e04724
https://github.com/krishnprakash/codeql/commit/e928c224ae1aa7bc4a9f850a2c2d1522d6e04724
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-20 (Mon, 20 Apr 2026)
Changed paths:
M csharp/ql/lib/semmle/code/csharp/controlflow/ControlFlowElement.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/ControlFlowGraph.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/internal/Completion.qll
M shared/controlflow/codeql/controlflow/ControlFlowGraph.qll
Log Message:
-----------
C#/Cfg: Some simple review fixes.
Commit: 3ceb96a45fa3290eaacb7dad20eecf2386d492dd
https://github.com/krishnprakash/codeql/commit/3ceb96a45fa3290eaacb7dad20eecf2386d492dd
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-20 (Mon, 20 Apr 2026)
Changed paths:
M csharp/ql/lib/semmle/code/csharp/controlflow/ControlFlowGraph.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/Guards.qll
R csharp/ql/lib/semmle/code/csharp/controlflow/internal/Completion.qll
Log Message:
-----------
C#: Eliminate Completion.qll.
Commit: b6f50f599283b627b63e4fba830b96c25c878a3a
https://github.com/krishnprakash/codeql/commit/b6f50f599283b627b63e4fba830b96c25c878a3a
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-20 (Mon, 20 Apr 2026)
Changed paths:
M csharp/ql/lib/semmle/code/csharp/controlflow/ControlFlowGraph.qll
Log Message:
-----------
C#: Simplify.
Commit: 9de02b7ae6d1a7cf77fd30d3ad69979b2e7f7e61
https://github.com/krishnprakash/codeql/commit/9de02b7ae6d1a7cf77fd30d3ad69979b2e7f7e61
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-21 (Tue, 21 Apr 2026)
Changed paths:
M csharp/ql/test/library-tests/controlflow/graph/BasicBlock.expected
M csharp/ql/test/library-tests/controlflow/graph/Condition.expected
M csharp/ql/test/library-tests/controlflow/graph/Dominance.expected
M csharp/ql/test/library-tests/controlflow/graph/EnclosingCallable.expected
M csharp/ql/test/library-tests/controlflow/graph/NodeGraph.expected
M csharp/ql/test/library-tests/csharp7/IsFlow.expected
M csharp/ql/test/library-tests/csharp8/ispatternflow.expected
M csharp/ql/test/library-tests/csharp8/switchexprcontrolflow.expected
M shared/controlflow/codeql/controlflow/ControlFlowGraph.qll
Log Message:
-----------
Cfg: Use consistent casing in additional node tags.
Commit: a2a4e8288ebc749ae1b2fa1a7f7c24b71f56f700
https://github.com/krishnprakash/codeql/commit/a2a4e8288ebc749ae1b2fa1a7f7c24b71f56f700
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-21 (Tue, 21 Apr 2026)
Changed paths:
M csharp/ql/campaigns/Solorigate/src/ModifiedFnvFunctionDetection.ql
M csharp/ql/lib/experimental/code/csharp/Cryptography/NonCryptographicHashes.qll
M csharp/ql/lib/semmle/code/csharp/Assignable.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/ControlFlowElement.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/Guards.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/Nullness.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/SSA.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/SignAnalysis.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/BaseSSA.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/DataFlowPrivate.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/SsaImpl.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/SignAnalysisSpecific.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/SsaReadPositionSpecific.qll
M csharp/ql/lib/semmle/code/csharp/frameworks/Format.qll
M csharp/ql/src/Concurrency/UnsynchronizedStaticAccess.ql
M csharp/ql/src/Dead Code/DeadStoreOfLocal.ql
M csharp/ql/src/Likely Bugs/Statements/UseBraces.ql
M csharp/ql/src/Likely Bugs/UncheckedCastInEquals.ql
M csharp/ql/src/Performance/StringBuilderInLoop.ql
M csharp/ql/src/Useless code/DefaultToStringQuery.qll
M csharp/ql/test/library-tests/assignables/AssignableDefinitionNode.ql
M csharp/ql/test/library-tests/csharp7/IsFlow.ql
M csharp/ql/test/library-tests/dataflow/defuse/defUseEquivalence.ql
M csharp/ql/test/library-tests/dataflow/defuse/parameterUseEquivalence.ql
M csharp/ql/test/library-tests/dataflow/defuse/useUseEquivalence.ql
Log Message:
-----------
C#: Deprecate ControlFlowElement.getAControlFlowNode and remove some splitting quantification.
Commit: 58e9bad0a086bf93788621999212bcf446a32b5f
https://github.com/krishnprakash/codeql/commit/58e9bad0a086bf93788621999212bcf446a32b5f
Author: Michael B. Gale <m...@github.com>
Date: 2026-04-21 (Tue, 21 Apr 2026)
Changed paths:
M actions/ql/lib/CHANGELOG.md
R actions/ql/lib/change-notes/2026-03-26-remove-false-positive-sinks.md
A actions/ql/lib/change-notes/released/0.4.34.md
M actions/ql/lib/codeql-pack.release.yml
M actions/ql/lib/qlpack.yml
M actions/ql/src/CHANGELOG.md
R actions/ql/src/change-notes/2026-04-02-alert-msg-poisoning.md
R actions/ql/src/change-notes/2026-04-02-permissions.md
A actions/ql/src/change-notes/released/0.6.26.md
M actions/ql/src/codeql-pack.release.yml
M actions/ql/src/qlpack.yml
M cpp/ql/lib/CHANGELOG.md
R cpp/ql/lib/change-notes/2026-04-07-autoconf.md
R cpp/ql/lib/change-notes/2026-04-14-throwing.md
A cpp/ql/lib/change-notes/released/10.0.0.md
M cpp/ql/lib/codeql-pack.release.yml
M cpp/ql/lib/qlpack.yml
M cpp/ql/src/CHANGELOG.md
R cpp/ql/src/change-notes/2026-03-23-implicit-function-declaration.md
R cpp/ql/src/change-notes/2026-04-02-comparison-with-wider-type.md
R cpp/ql/src/change-notes/2026-04-02-implicit-function-declaration.md
R cpp/ql/src/change-notes/2026-04-02-integer-multiplication-cast-to-long.md
R cpp/ql/src/change-notes/2026-04-02-suspicious-add-sizeof.md
R cpp/ql/src/change-notes/2026-04-02-wrong-type-format-argument.md
R cpp/ql/src/change-notes/2026-04-16-add-model-for-aligned-alloc.md
A cpp/ql/src/change-notes/released/1.6.1.md
M cpp/ql/src/codeql-pack.release.yml
M cpp/ql/src/qlpack.yml
M csharp/ql/campaigns/Solorigate/lib/CHANGELOG.md
A csharp/ql/campaigns/Solorigate/lib/change-notes/released/1.7.65.md
M csharp/ql/campaigns/Solorigate/lib/codeql-pack.release.yml
M csharp/ql/campaigns/Solorigate/lib/qlpack.yml
M csharp/ql/campaigns/Solorigate/src/CHANGELOG.md
A csharp/ql/campaigns/Solorigate/src/change-notes/released/1.7.65.md
M csharp/ql/campaigns/Solorigate/src/codeql-pack.release.yml
M csharp/ql/campaigns/Solorigate/src/qlpack.yml
M csharp/ql/lib/CHANGELOG.md
R csharp/ql/lib/change-notes/2026-04-01-getlrvalue.md
A csharp/ql/lib/change-notes/released/5.5.0.md
M csharp/ql/lib/codeql-pack.release.yml
M csharp/ql/lib/qlpack.yml
M csharp/ql/src/CHANGELOG.md
R csharp/ql/src/change-notes/2026-04-17-useless-to-string.md
A csharp/ql/src/change-notes/released/1.7.1.md
M csharp/ql/src/codeql-pack.release.yml
M csharp/ql/src/qlpack.yml
M go/ql/consistency-queries/CHANGELOG.md
A go/ql/consistency-queries/change-notes/released/1.0.48.md
M go/ql/consistency-queries/codeql-pack.release.yml
M go/ql/consistency-queries/qlpack.yml
M go/ql/lib/CHANGELOG.md
A go/ql/lib/change-notes/released/7.0.6.md
M go/ql/lib/codeql-pack.release.yml
M go/ql/lib/qlpack.yml
M go/ql/src/CHANGELOG.md
A go/ql/src/change-notes/released/1.6.1.md
M go/ql/src/codeql-pack.release.yml
M go/ql/src/qlpack.yml
M java/ql/lib/CHANGELOG.md
R java/ql/lib/change-notes/2026-04-16-woodstox-xxe.md
A java/ql/lib/change-notes/released/9.0.4.md
M java/ql/lib/codeql-pack.release.yml
M java/ql/lib/qlpack.yml
M java/ql/src/CHANGELOG.md
A java/ql/src/change-notes/released/1.11.1.md
M java/ql/src/codeql-pack.release.yml
M java/ql/src/qlpack.yml
M javascript/ql/lib/CHANGELOG.md
A javascript/ql/lib/change-notes/released/2.6.28.md
M javascript/ql/lib/codeql-pack.release.yml
M javascript/ql/lib/qlpack.yml
M javascript/ql/src/CHANGELOG.md
R javascript/ql/src/change-notes/2026-04-13-fastify-per-route-rate-limit.md
A javascript/ql/src/change-notes/released/2.3.8.md
M javascript/ql/src/codeql-pack.release.yml
M javascript/ql/src/qlpack.yml
M misc/suite-helpers/CHANGELOG.md
A misc/suite-helpers/change-notes/released/1.0.48.md
M misc/suite-helpers/codeql-pack.release.yml
M misc/suite-helpers/qlpack.yml
M python/ql/lib/CHANGELOG.md
R python/ql/lib/change-notes/2026-04-10-support-lazy-keyword.md
A python/ql/lib/change-notes/released/7.0.5.md
M python/ql/lib/codeql-pack.release.yml
M python/ql/lib/qlpack.yml
M python/ql/src/CHANGELOG.md
R python/ql/src/change-notes/2026-03-26-improve-bind-all-interfaces-query.md
A python/ql/src/change-notes/released/1.8.1.md
M python/ql/src/codeql-pack.release.yml
M python/ql/src/qlpack.yml
M ruby/ql/lib/CHANGELOG.md
A ruby/ql/lib/change-notes/released/5.1.16.md
M ruby/ql/lib/codeql-pack.release.yml
M ruby/ql/lib/qlpack.yml
M ruby/ql/src/CHANGELOG.md
A ruby/ql/src/change-notes/released/1.6.1.md
M ruby/ql/src/codeql-pack.release.yml
M ruby/ql/src/qlpack.yml
M rust/ql/lib/CHANGELOG.md
A rust/ql/lib/change-notes/released/0.2.12.md
M rust/ql/lib/codeql-pack.release.yml
M rust/ql/lib/qlpack.yml
M rust/ql/src/CHANGELOG.md
A rust/ql/src/change-notes/released/0.1.33.md
M rust/ql/src/codeql-pack.release.yml
M rust/ql/src/qlpack.yml
M shared/concepts/CHANGELOG.md
A shared/concepts/change-notes/released/0.0.22.md
M shared/concepts/codeql-pack.release.yml
M shared/concepts/qlpack.yml
M shared/controlflow/CHANGELOG.md
A shared/controlflow/change-notes/released/2.0.32.md
M shared/controlflow/codeql-pack.release.yml
M shared/controlflow/qlpack.yml
M shared/dataflow/CHANGELOG.md
A shared/dataflow/change-notes/released/2.1.4.md
M shared/dataflow/codeql-pack.release.yml
M shared/dataflow/qlpack.yml
M shared/mad/CHANGELOG.md
A shared/mad/change-notes/released/1.0.48.md
M shared/mad/codeql-pack.release.yml
M shared/mad/qlpack.yml
M shared/quantum/CHANGELOG.md
A shared/quantum/change-notes/released/0.0.26.md
M shared/quantum/codeql-pack.release.yml
M shared/quantum/qlpack.yml
M shared/rangeanalysis/CHANGELOG.md
A shared/rangeanalysis/change-notes/released/1.0.48.md
M shared/rangeanalysis/codeql-pack.release.yml
M shared/rangeanalysis/qlpack.yml
M shared/regex/CHANGELOG.md
A shared/regex/change-notes/released/1.0.48.md
M shared/regex/codeql-pack.release.yml
M shared/regex/qlpack.yml
M shared/ssa/CHANGELOG.md
A shared/ssa/change-notes/released/2.0.24.md
M shared/ssa/codeql-pack.release.yml
M shared/ssa/qlpack.yml
M shared/threat-models/CHANGELOG.md
A shared/threat-models/change-notes/released/1.0.48.md
M shared/threat-models/codeql-pack.release.yml
M shared/threat-models/qlpack.yml
M shared/tutorial/CHANGELOG.md
A shared/tutorial/change-notes/released/1.0.48.md
M shared/tutorial/codeql-pack.release.yml
M shared/tutorial/qlpack.yml
M shared/typeflow/CHANGELOG.md
A shared/typeflow/change-notes/released/1.0.48.md
M shared/typeflow/codeql-pack.release.yml
M shared/typeflow/qlpack.yml
M shared/typeinference/CHANGELOG.md
A shared/typeinference/change-notes/released/0.0.29.md
M shared/typeinference/codeql-pack.release.yml
M shared/typeinference/qlpack.yml
M shared/typetracking/CHANGELOG.md
A shared/typetracking/change-notes/released/2.0.32.md
M shared/typetracking/codeql-pack.release.yml
M shared/typetracking/qlpack.yml
M shared/typos/CHANGELOG.md
A shared/typos/change-notes/released/1.0.48.md
M shared/typos/codeql-pack.release.yml
M shared/typos/qlpack.yml
M shared/util/CHANGELOG.md
A shared/util/change-notes/released/2.0.35.md
M shared/util/codeql-pack.release.yml
M shared/util/qlpack.yml
M shared/xml/CHANGELOG.md
A shared/xml/change-notes/released/1.0.48.md
M shared/xml/codeql-pack.release.yml
M shared/xml/qlpack.yml
M shared/yaml/CHANGELOG.md
A shared/yaml/change-notes/released/1.0.48.md
M shared/yaml/codeql-pack.release.yml
M shared/yaml/qlpack.yml
M swift/ql/lib/CHANGELOG.md
R swift/ql/lib/change-notes/2026-04-06-swift-6.3.md
A swift/ql/lib/change-notes/released/6.4.0.md
M swift/ql/lib/codeql-pack.release.yml
M swift/ql/lib/qlpack.yml
M swift/ql/src/CHANGELOG.md
A swift/ql/src/change-notes/released/1.3.1.md
M swift/ql/src/codeql-pack.release.yml
M swift/ql/src/qlpack.yml
Log Message:
-----------
Merge pull request #21737 from github/post-release-prep/codeql-cli-2.25.3
Post-release preparation for codeql-cli-2.25.3
Commit: 67c0515d3c39d98378d43ef0183277b52532908e
https://github.com/krishnprakash/codeql/commit/67c0515d3c39d98378d43ef0183277b52532908e
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-21 (Tue, 21 Apr 2026)
Changed paths:
M shared/controlflow/codeql/controlflow/ControlFlowGraph.qll
Log Message:
-----------
Cfg: Undo consistency check change.
Commit: c91b5b3c2e9443aa892dddbe3056adee79ba3eb1
https://github.com/krishnprakash/codeql/commit/c91b5b3c2e9443aa892dddbe3056adee79ba3eb1
Author: Owen Mansel-Chan <62447351...@users.noreply.github.com>
Date: 2026-04-21 (Tue, 21 Apr 2026)
Changed paths:
A java/ql/lib/change-notes/2026-04-04-sensitive-log-fp-reduction.md
M java/ql/lib/semmle/code/java/security/SensitiveActions.qll
M java/ql/test/query-tests/security/CWE-532/SensitiveLogInfo.expected
M java/ql/test/query-tests/security/CWE-532/Test.java
Log Message:
-----------
Merge pull request #21650 from MarkLee131/fix/sensitive-log-fp-regex
Java: reduce false positives in sensitive-log
Commit: 6efb21314ad641717f566524433159dd01ce1ef8
https://github.com/krishnprakash/codeql/commit/6efb21314ad641717f566524433159dd01ce1ef8
Author: Owen Mansel-Chan <62447351...@users.noreply.github.com>
Date: 2026-04-21 (Tue, 21 Apr 2026)
Changed paths:
A cpp/ql/lib/change-notes/2026-03-20-data-extensions-barriers.md
A csharp/ql/lib/change-notes/2026-03-20-data-extensions-barriers.md
M docs/codeql/codeql-language-guides/customizing-library-models-for-actions.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-cpp.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-csharp.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-go.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-java-and-kotlin.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-javascript.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-python.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-ruby.rst
M docs/ql-libraries/dataflow/dataflow.md
A go/ql/lib/change-notes/2026-03-20-data-extensions-barriers.md
A java/ql/lib/change-notes/2026-03-20-data-extensions-barriers.md
A javascript/ql/lib/change-notes/2026-03-20-data-extensions-barriers.md
A python/ql/lib/change-notes/2026-03-20-data-extensions-barriers.md
M ruby/ql/docs/flow_summaries.md
A ruby/ql/lib/change-notes/2026-03-20-data-extensions-barriers.md
A rust/ql/lib/change-notes/2026-03-20-data-extensions-barriers.md
Log Message:
-----------
Merge pull request #21523 from owen-mc/docs/mad/barriers
Document models-as-data barriers and barrier guards and add change notes
Commit: f912731cd4880aab09a3fb236ec7c558785f126e
https://github.com/krishnprakash/codeql/commit/f912731cd4880aab09a3fb236ec7c558785f126e
Author: Anders Schack-Mulligen <ascha...@users.noreply.github.com>
Date: 2026-04-21 (Tue, 21 Apr 2026)
Changed paths:
M csharp/ql/campaigns/Solorigate/src/ModifiedFnvFunctionDetection.ql
M csharp/ql/consistency-queries/CfgConsistency.ql
M csharp/ql/consistency-queries/DataFlowConsistency.ql
M csharp/ql/consistency-queries/VariableCaptureConsistency.ql
A csharp/ql/lib/change-notes/2026-04-13-cfg.md
M csharp/ql/lib/experimental/code/csharp/Cryptography/NonCryptographicHashes.qll
M csharp/ql/lib/printCfg.ql
M csharp/ql/lib/semmle/code/csharp/Assignable.qll
M csharp/ql/lib/semmle/code/csharp/Caching.qll
M csharp/ql/lib/semmle/code/csharp/Callable.qll
M csharp/ql/lib/semmle/code/csharp/ExprOrStmtParent.qll
R csharp/ql/lib/semmle/code/csharp/controlflow/BasicBlocks.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/ControlFlowElement.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/ControlFlowGraph.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/ControlFlowReachability.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/Guards.qll
R csharp/ql/lib/semmle/code/csharp/controlflow/internal/Completion.qll
R csharp/ql/lib/semmle/code/csharp/controlflow/internal/ControlFlowGraphImpl.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/internal/NonReturning.qll
R csharp/ql/lib/semmle/code/csharp/controlflow/internal/Splitting.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/Nullness.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/SSA.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/SignAnalysis.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/BaseSSA.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/DataFlowDispatch.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/DataFlowPrivate.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/DataFlowPublic.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/SsaImpl.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/TaintTrackingPublic.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/BoundSpecific.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/ConstantUtils.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/ModulusAnalysisSpecific.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/RangeUtils.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/SignAnalysisSpecific.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/SsaReadPositionSpecific.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/SsaUtils.qll
M csharp/ql/lib/semmle/code/csharp/dispatch/Dispatch.qll
M csharp/ql/lib/semmle/code/csharp/exprs/Call.qll
M csharp/ql/lib/semmle/code/csharp/frameworks/Format.qll
M csharp/ql/lib/semmle/code/csharp/security/dataflow/ConditionalBypassQuery.qll
M csharp/ql/src/Bad Practices/Control-Flow/ConstantCondition.ql
M csharp/ql/src/Concurrency/UnsynchronizedStaticAccess.ql
M csharp/ql/src/Dead Code/DeadStoreOfLocal.ql
M csharp/ql/src/Likely Bugs/NestedLoopsSameVariable.ql
M csharp/ql/src/Likely Bugs/Statements/UseBraces.ql
M csharp/ql/src/Likely Bugs/UncheckedCastInEquals.ql
M csharp/ql/src/Performance/StringBuilderInLoop.ql
M csharp/ql/src/Security Features/CWE-384/AbandonSession.ql
M csharp/ql/src/Useless code/DefaultToStringQuery.qll
M csharp/ql/test/library-tests/assignables/AssignableDefinitionNode.ql
M csharp/ql/test/library-tests/controlflow/graph/BasicBlock.expected
R csharp/ql/test/library-tests/controlflow/graph/CONSISTENCY/CfgConsistency.expected
M csharp/ql/test/library-tests/controlflow/graph/Common.qll
M csharp/ql/test/library-tests/controlflow/graph/Condition.expected
M csharp/ql/test/library-tests/controlflow/graph/Condition.ql
M csharp/ql/test/library-tests/controlflow/graph/Dominance.expected
M csharp/ql/test/library-tests/controlflow/graph/EnclosingCallable.expected
M csharp/ql/test/library-tests/controlflow/graph/EnclosingCallable.ql
M csharp/ql/test/library-tests/controlflow/graph/EntryElement.expected
M csharp/ql/test/library-tests/controlflow/graph/EntryElement.ql
R csharp/ql/test/library-tests/controlflow/graph/ExitElement.expected
R csharp/ql/test/library-tests/controlflow/graph/ExitElement.ql
M csharp/ql/test/library-tests/controlflow/graph/NodeGraph.expected
M csharp/ql/test/library-tests/controlflow/graph/NodeGraph.ql
M csharp/ql/test/library-tests/controlflow/graph/Nodes.expected
M csharp/ql/test/library-tests/controlflow/graph/Nodes.ql
M csharp/ql/test/library-tests/controlflow/guards-large/GuardedExpr.expected
M csharp/ql/test/library-tests/controlflow/guards/BooleanGuardedExpr.expected
M csharp/ql/test/library-tests/controlflow/guards/GuardedControlFlowNode.expected
M csharp/ql/test/library-tests/controlflow/guards/GuardedExpr.expected
M csharp/ql/test/library-tests/controlflow/guards/Guards.cs
M csharp/ql/test/library-tests/csharp11/signAnalysis.ql
M csharp/ql/test/library-tests/csharp7/IsFlow.expected
M csharp/ql/test/library-tests/csharp7/IsFlow.ql
M csharp/ql/test/library-tests/csharp7/LocalTaintFlow.expected
M csharp/ql/test/library-tests/csharp8/NullCoalescingControlFlow.expected
M csharp/ql/test/library-tests/csharp8/NullCoalescingControlFlow.ql
M csharp/ql/test/library-tests/csharp8/NullableRefTypes.expected
M csharp/ql/test/library-tests/csharp8/NullableRefTypes.ql
M csharp/ql/test/library-tests/csharp8/UsingControlFlow.expected
M csharp/ql/test/library-tests/csharp8/UsingControlFlow.ql
M csharp/ql/test/library-tests/csharp8/ispatternflow.expected
M csharp/ql/test/library-tests/csharp8/ispatternflow.ql
M csharp/ql/test/library-tests/csharp8/switchexprcontrolflow.expected
M csharp/ql/test/library-tests/csharp8/switchexprcontrolflow.ql
M csharp/ql/test/library-tests/csharp8/switchstmtctrlflow.expected
M csharp/ql/test/library-tests/csharp8/switchstmtctrlflow.ql
M csharp/ql/test/library-tests/dataflow/call-sensitivity/CallSensitivityFlow.expected
M csharp/ql/test/library-tests/dataflow/defuse/defUseEquivalence.ql
M csharp/ql/test/library-tests/dataflow/defuse/parameterUseEquivalence.ql
M csharp/ql/test/library-tests/dataflow/defuse/useUseEquivalence.ql
M csharp/ql/test/library-tests/dataflow/local/DataFlowStep.expected
M csharp/ql/test/library-tests/dataflow/local/TaintTrackingStep.expected
M csharp/ql/test/library-tests/dataflow/modulusanalysis/ModulusAnalysis.expected
M csharp/ql/test/library-tests/dataflow/modulusanalysis/ModulusAnalysis.ql
M csharp/ql/test/library-tests/dataflow/signanalysis/MissingSign.ql
M csharp/ql/test/library-tests/dataflow/signanalysis/SignAnalysis.expected
M csharp/ql/test/library-tests/dataflow/signanalysis/SignAnalysis.ql
M csharp/ql/test/library-tests/dataflow/ssa-large/countssa.expected
M csharp/ql/test/library-tests/dataflow/ssa-large/countssa.ql
M csharp/ql/test/library-tests/dataflow/ssa/SSAPhi.expected
M csharp/ql/test/library-tests/dataflow/ssa/SSAPhiRead.expected
M csharp/ql/test/library-tests/dataflow/ssa/SSAPhiRead.ql
M csharp/ql/test/library-tests/dataflow/ssa/SsaDef.expected
M csharp/ql/test/library-tests/dataflow/ssa/SsaDefElement.expected
M csharp/ql/test/library-tests/dataflow/ssa/SsaRead.expected
M csharp/ql/test/library-tests/dataflow/ssa/SsaUltimateDef.expected
M csharp/ql/test/library-tests/goto/Goto1.expected
M csharp/ql/test/library-tests/goto/Goto1.ql
M csharp/ql/test/library-tests/obinit/ObInit.expected
M csharp/ql/test/library-tests/obinit/ObInit.ql
M csharp/ql/test/library-tests/security/dataflow/flowsources/StoredFlowSources.expected
M csharp/ql/test/library-tests/standalone/controlflow/cfg.expected
M csharp/ql/test/library-tests/standalone/controlflow/cfg.ql
M java/ql/lib/semmle/code/java/ControlFlowGraph.qll
M shared/controlflow/codeql/controlflow/ControlFlowGraph.qll
Log Message:
-----------
Merge pull request #21565 from aschackmull/csharp/cfg2
C#: Replace CFG with the shared implementation
Commit: 5a069e1838ad30de1267a00e347110762949600b
https://github.com/krishnprakash/codeql/commit/5a069e1838ad30de1267a00e347110762949600b
Author: Phileco <132178579+k...@users.noreply.github.com>
Date: 2026-04-21 (Tue, 21 Apr 2026)
Changed paths:
M actions/ql/lib/CHANGELOG.md
R actions/ql/lib/change-notes/2026-03-26-remove-false-positive-sinks.md
A actions/ql/lib/change-notes/released/0.4.34.md
M actions/ql/lib/codeql-pack.release.yml
M actions/ql/lib/qlpack.yml
M actions/ql/src/CHANGELOG.md
R actions/ql/src/change-notes/2026-04-02-alert-msg-poisoning.md
R actions/ql/src/change-notes/2026-04-02-permissions.md
A actions/ql/src/change-notes/released/0.6.26.md
M actions/ql/src/codeql-pack.release.yml
M actions/ql/src/qlpack.yml
M cpp/ql/lib/CHANGELOG.md
A cpp/ql/lib/change-notes/2026-03-20-data-extensions-barriers.md
R cpp/ql/lib/change-notes/2026-04-07-autoconf.md
R cpp/ql/lib/change-notes/2026-04-14-throwing.md
A cpp/ql/lib/change-notes/released/10.0.0.md
M cpp/ql/lib/codeql-pack.release.yml
M cpp/ql/lib/qlpack.yml
M cpp/ql/src/CHANGELOG.md
R cpp/ql/src/change-notes/2026-03-23-implicit-function-declaration.md
R cpp/ql/src/change-notes/2026-04-02-comparison-with-wider-type.md
R cpp/ql/src/change-notes/2026-04-02-implicit-function-declaration.md
R cpp/ql/src/change-notes/2026-04-02-integer-multiplication-cast-to-long.md
R cpp/ql/src/change-notes/2026-04-02-suspicious-add-sizeof.md
R cpp/ql/src/change-notes/2026-04-02-wrong-type-format-argument.md
R cpp/ql/src/change-notes/2026-04-16-add-model-for-aligned-alloc.md
A cpp/ql/src/change-notes/released/1.6.1.md
M cpp/ql/src/codeql-pack.release.yml
M cpp/ql/src/qlpack.yml
M csharp/ql/campaigns/Solorigate/lib/CHANGELOG.md
A csharp/ql/campaigns/Solorigate/lib/change-notes/released/1.7.65.md
M csharp/ql/campaigns/Solorigate/lib/codeql-pack.release.yml
M csharp/ql/campaigns/Solorigate/lib/qlpack.yml
M csharp/ql/campaigns/Solorigate/src/CHANGELOG.md
M csharp/ql/campaigns/Solorigate/src/ModifiedFnvFunctionDetection.ql
A csharp/ql/campaigns/Solorigate/src/change-notes/released/1.7.65.md
M csharp/ql/campaigns/Solorigate/src/codeql-pack.release.yml
M csharp/ql/campaigns/Solorigate/src/qlpack.yml
M csharp/ql/consistency-queries/CfgConsistency.ql
M csharp/ql/consistency-queries/DataFlowConsistency.ql
M csharp/ql/consistency-queries/VariableCaptureConsistency.ql
M csharp/ql/lib/CHANGELOG.md
A csharp/ql/lib/change-notes/2026-03-20-data-extensions-barriers.md
R csharp/ql/lib/change-notes/2026-04-01-getlrvalue.md
A csharp/ql/lib/change-notes/2026-04-13-cfg.md
A csharp/ql/lib/change-notes/released/5.5.0.md
M csharp/ql/lib/codeql-pack.release.yml
M csharp/ql/lib/experimental/code/csharp/Cryptography/NonCryptographicHashes.qll
M csharp/ql/lib/printCfg.ql
M csharp/ql/lib/qlpack.yml
M csharp/ql/lib/semmle/code/csharp/Assignable.qll
M csharp/ql/lib/semmle/code/csharp/Caching.qll
M csharp/ql/lib/semmle/code/csharp/Callable.qll
M csharp/ql/lib/semmle/code/csharp/ExprOrStmtParent.qll
R csharp/ql/lib/semmle/code/csharp/controlflow/BasicBlocks.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/ControlFlowElement.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/ControlFlowGraph.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/ControlFlowReachability.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/Guards.qll
R csharp/ql/lib/semmle/code/csharp/controlflow/internal/Completion.qll
R csharp/ql/lib/semmle/code/csharp/controlflow/internal/ControlFlowGraphImpl.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/internal/NonReturning.qll
R csharp/ql/lib/semmle/code/csharp/controlflow/internal/Splitting.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/Nullness.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/SSA.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/SignAnalysis.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/BaseSSA.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/DataFlowDispatch.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/DataFlowPrivate.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/DataFlowPublic.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/SsaImpl.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/TaintTrackingPublic.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/BoundSpecific.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/ConstantUtils.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/ModulusAnalysisSpecific.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/RangeUtils.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/SignAnalysisSpecific.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/SsaReadPositionSpecific.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/SsaUtils.qll
M csharp/ql/lib/semmle/code/csharp/dispatch/Dispatch.qll
M csharp/ql/lib/semmle/code/csharp/exprs/Call.qll
M csharp/ql/lib/semmle/code/csharp/frameworks/Format.qll
M csharp/ql/lib/semmle/code/csharp/security/dataflow/ConditionalBypassQuery.qll
M csharp/ql/src/Bad Practices/Control-Flow/ConstantCondition.ql
M csharp/ql/src/CHANGELOG.md
M csharp/ql/src/Concurrency/UnsynchronizedStaticAccess.ql
M csharp/ql/src/Dead Code/DeadStoreOfLocal.ql
M csharp/ql/src/Likely Bugs/NestedLoopsSameVariable.ql
M csharp/ql/src/Likely Bugs/Statements/UseBraces.ql
M csharp/ql/src/Likely Bugs/UncheckedCastInEquals.ql
M csharp/ql/src/Performance/StringBuilderInLoop.ql
M csharp/ql/src/Security Features/CWE-384/AbandonSession.ql
M csharp/ql/src/Useless code/DefaultToStringQuery.qll
R csharp/ql/src/change-notes/2026-04-17-useless-to-string.md
A csharp/ql/src/change-notes/released/1.7.1.md
M csharp/ql/src/codeql-pack.release.yml
M csharp/ql/src/qlpack.yml
M csharp/ql/test/library-tests/assignables/AssignableDefinitionNode.ql
M csharp/ql/test/library-tests/controlflow/graph/BasicBlock.expected
R csharp/ql/test/library-tests/controlflow/graph/CONSISTENCY/CfgConsistency.expected
M csharp/ql/test/library-tests/controlflow/graph/Common.qll
M csharp/ql/test/library-tests/controlflow/graph/Condition.expected
M csharp/ql/test/library-tests/controlflow/graph/Condition.ql
M csharp/ql/test/library-tests/controlflow/graph/Dominance.expected
M csharp/ql/test/library-tests/controlflow/graph/EnclosingCallable.expected
M csharp/ql/test/library-tests/controlflow/graph/EnclosingCallable.ql
M csharp/ql/test/library-tests/controlflow/graph/EntryElement.expected
M csharp/ql/test/library-tests/controlflow/graph/EntryElement.ql
R csharp/ql/test/library-tests/controlflow/graph/ExitElement.expected
R csharp/ql/test/library-tests/controlflow/graph/ExitElement.ql
M csharp/ql/test/library-tests/controlflow/graph/NodeGraph.expected
M csharp/ql/test/library-tests/controlflow/graph/NodeGraph.ql
M csharp/ql/test/library-tests/controlflow/graph/Nodes.expected
M csharp/ql/test/library-tests/controlflow/graph/Nodes.ql
M csharp/ql/test/library-tests/controlflow/guards-large/GuardedExpr.expected
M csharp/ql/test/library-tests/controlflow/guards/BooleanGuardedExpr.expected
M csharp/ql/test/library-tests/controlflow/guards/GuardedControlFlowNode.expected
M csharp/ql/test/library-tests/controlflow/guards/GuardedExpr.expected
M csharp/ql/test/library-tests/controlflow/guards/Guards.cs
M csharp/ql/test/library-tests/csharp11/signAnalysis.ql
M csharp/ql/test/library-tests/csharp7/IsFlow.expected
M csharp/ql/test/library-tests/csharp7/IsFlow.ql
M csharp/ql/test/library-tests/csharp7/LocalTaintFlow.expected
M csharp/ql/test/library-tests/csharp8/NullCoalescingControlFlow.expected
M csharp/ql/test/library-tests/csharp8/NullCoalescingControlFlow.ql
M csharp/ql/test/library-tests/csharp8/NullableRefTypes.expected
M csharp/ql/test/library-tests/csharp8/NullableRefTypes.ql
M csharp/ql/test/library-tests/csharp8/UsingControlFlow.expected
M csharp/ql/test/library-tests/csharp8/UsingControlFlow.ql
M csharp/ql/test/library-tests/csharp8/ispatternflow.expected
M csharp/ql/test/library-tests/csharp8/ispatternflow.ql
M csharp/ql/test/library-tests/csharp8/switchexprcontrolflow.expected
M csharp/ql/test/library-tests/csharp8/switchexprcontrolflow.ql
M csharp/ql/test/library-tests/csharp8/switchstmtctrlflow.expected
M csharp/ql/test/library-tests/csharp8/switchstmtctrlflow.ql
M csharp/ql/test/library-tests/dataflow/call-sensitivity/CallSensitivityFlow.expected
M csharp/ql/test/library-tests/dataflow/defuse/defUseEquivalence.ql
M csharp/ql/test/library-tests/dataflow/defuse/parameterUseEquivalence.ql
M csharp/ql/test/library-tests/dataflow/defuse/useUseEquivalence.ql
M csharp/ql/test/library-tests/dataflow/local/DataFlowStep.expected
M csharp/ql/test/library-tests/dataflow/local/TaintTrackingStep.expected
M csharp/ql/test/library-tests/dataflow/modulusanalysis/ModulusAnalysis.expected
M csharp/ql/test/library-tests/dataflow/modulusanalysis/ModulusAnalysis.ql
M csharp/ql/test/library-tests/dataflow/signanalysis/MissingSign.ql
M csharp/ql/test/library-tests/dataflow/signanalysis/SignAnalysis.expected
M csharp/ql/test/library-tests/dataflow/signanalysis/SignAnalysis.ql
M csharp/ql/test/library-tests/dataflow/ssa-large/countssa.expected
M csharp/ql/test/library-tests/dataflow/ssa-large/countssa.ql
M csharp/ql/test/library-tests/dataflow/ssa/SSAPhi.expected
M csharp/ql/test/library-tests/dataflow/ssa/SSAPhiRead.expected
M csharp/ql/test/library-tests/dataflow/ssa/SSAPhiRead.ql
M csharp/ql/test/library-tests/dataflow/ssa/SsaDef.expected
M csharp/ql/test/library-tests/dataflow/ssa/SsaDefElement.expected
M csharp/ql/test/library-tests/dataflow/ssa/SsaRead.expected
M csharp/ql/test/library-tests/dataflow/ssa/SsaUltimateDef.expected
M csharp/ql/test/library-tests/goto/Goto1.expected
M csharp/ql/test/library-tests/goto/Goto1.ql
M csharp/ql/test/library-tests/obinit/ObInit.expected
M csharp/ql/test/library-tests/obinit/ObInit.ql
M csharp/ql/test/library-tests/security/dataflow/flowsources/StoredFlowSources.expected
M csharp/ql/test/library-tests/standalone/controlflow/cfg.expected
M csharp/ql/test/library-tests/standalone/controlflow/cfg.ql
M docs/codeql/codeql-language-guides/customizing-library-models-for-actions.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-cpp.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-csharp.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-go.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-java-and-kotlin.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-javascript.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-python.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-ruby.rst
M docs/ql-libraries/dataflow/dataflow.md
M go/ql/consistency-queries/CHANGELOG.md
A go/ql/consistency-queries/change-notes/released/1.0.48.md
M go/ql/consistency-queries/codeql-pack.release.yml
M go/ql/consistency-queries/qlpack.yml
M go/ql/lib/CHANGELOG.md
A go/ql/lib/change-notes/2026-03-20-data-extensions-barriers.md
A go/ql/lib/change-notes/released/7.0.6.md
M go/ql/lib/codeql-pack.release.yml
M go/ql/lib/qlpack.yml
M go/ql/src/CHANGELOG.md
A go/ql/src/change-notes/released/1.6.1.md
M go/ql/src/codeql-pack.release.yml
M go/ql/src/qlpack.yml
M java/ql/lib/CHANGELOG.md
A java/ql/lib/change-notes/2026-03-20-data-extensions-barriers.md
A java/ql/lib/change-notes/2026-04-04-sensitive-log-fp-reduction.md
R java/ql/lib/change-notes/2026-04-16-woodstox-xxe.md
A java/ql/lib/change-notes/released/9.0.4.md
M java/ql/lib/codeql-pack.release.yml
M java/ql/lib/qlpack.yml
M java/ql/lib/semmle/code/java/ControlFlowGraph.qll
M java/ql/lib/semmle/code/java/security/SensitiveActions.qll
M java/ql/src/CHANGELOG.md
A java/ql/src/change-notes/released/1.11.1.md
M java/ql/src/codeql-pack.release.yml
M java/ql/src/qlpack.yml
M java/ql/test/query-tests/security/CWE-532/SensitiveLogInfo.expected
M java/ql/test/query-tests/security/CWE-532/Test.java
M javascript/ql/lib/CHANGELOG.md
A javascript/ql/lib/change-notes/2026-03-20-data-extensions-barriers.md
A javascript/ql/lib/change-notes/released/2.6.28.md
M javascript/ql/lib/codeql-pack.release.yml
M javascript/ql/lib/qlpack.yml
M javascript/ql/src/CHANGELOG.md
R javascript/ql/src/change-notes/2026-04-13-fastify-per-route-rate-limit.md
A javascript/ql/src/change-notes/released/2.3.8.md
M javascript/ql/src/codeql-pack.release.yml
M javascript/ql/src/qlpack.yml
M misc/suite-helpers/CHANGELOG.md
A misc/suite-helpers/change-notes/released/1.0.48.md
M misc/suite-helpers/codeql-pack.release.yml
M misc/suite-helpers/qlpack.yml
M python/ql/lib/CHANGELOG.md
A python/ql/lib/change-notes/2026-03-20-data-extensions-barriers.md
R python/ql/lib/change-notes/2026-04-10-support-lazy-keyword.md
A python/ql/lib/change-notes/released/7.0.5.md
M python/ql/lib/codeql-pack.release.yml
M python/ql/lib/qlpack.yml
M python/ql/src/CHANGELOG.md
R python/ql/src/change-notes/2026-03-26-improve-bind-all-interfaces-query.md
A python/ql/src/change-notes/released/1.8.1.md
M python/ql/src/codeql-pack.release.yml
M python/ql/src/qlpack.yml
M ruby/ql/docs/flow_summaries.md
M ruby/ql/lib/CHANGELOG.md
A ruby/ql/lib/change-notes/2026-03-20-data-extensions-barriers.md
A ruby/ql/lib/change-notes/released/5.1.16.md
M ruby/ql/lib/codeql-pack.release.yml
M ruby/ql/lib/qlpack.yml
M ruby/ql/src/CHANGELOG.md
A ruby/ql/src/change-notes/released/1.6.1.md
M ruby/ql/src/codeql-pack.release.yml
M ruby/ql/src/qlpack.yml
M rust/ql/lib/CHANGELOG.md
A rust/ql/lib/change-notes/2026-03-20-data-extensions-barriers.md
A rust/ql/lib/change-notes/released/0.2.12.md
M rust/ql/lib/codeql-pack.release.yml
M rust/ql/lib/qlpack.yml
M rust/ql/src/CHANGELOG.md
A rust/ql/src/change-notes/released/0.1.33.md
M rust/ql/src/codeql-pack.release.yml
M rust/ql/src/qlpack.yml
M shared/concepts/CHANGELOG.md
A shared/concepts/change-notes/released/0.0.22.md
M shared/concepts/codeql-pack.release.yml
M shared/concepts/qlpack.yml
M shared/controlflow/CHANGELOG.md
A shared/controlflow/change-notes/released/2.0.32.md
M shared/controlflow/codeql-pack.release.yml
M shared/controlflow/codeql/controlflow/ControlFlowGraph.qll
M shared/controlflow/qlpack.yml
M shared/dataflow/CHANGELOG.md
A shared/dataflow/change-notes/released/2.1.4.md
M shared/dataflow/codeql-pack.release.yml
M shared/dataflow/qlpack.yml
M shared/mad/CHANGELOG.md
A shared/mad/change-notes/released/1.0.48.md
M shared/mad/codeql-pack.release.yml
M shared/mad/qlpack.yml
M shared/quantum/CHANGELOG.md
A shared/quantum/change-notes/released/0.0.26.md
M shared/quantum/codeql-pack.release.yml
M shared/quantum/qlpack.yml
M shared/rangeanalysis/CHANGELOG.md
A shared/rangeanalysis/change-notes/released/1.0.48.md
M shared/rangeanalysis/codeql-pack.release.yml
M shared/rangeanalysis/qlpack.yml
M shared/regex/CHANGELOG.md
A shared/regex/change-notes/released/1.0.48.md
M shared/regex/codeql-pack.release.yml
M shared/regex/qlpack.yml
M shared/ssa/CHANGELOG.md
A shared/ssa/change-notes/released/2.0.24.md
M shared/ssa/codeql-pack.release.yml
M shared/ssa/qlpack.yml
M shared/threat-models/CHANGELOG.md
A shared/threat-models/change-notes/released/1.0.48.md
M shared/threat-models/codeql-pack.release.yml
M shared/threat-models/qlpack.yml
M shared/tutorial/CHANGELOG.md
A shared/tutorial/change-notes/released/1.0.48.md
M shared/tutorial/codeql-pack.release.yml
M shared/tutorial/qlpack.yml
M shared/typeflow/CHANGELOG.md
A shared/typeflow/change-notes/released/1.0.48.md
M shared/typeflow/codeql-pack.release.yml
M shared/typeflow/qlpack.yml
M shared/typeinference/CHANGELOG.md
A shared/typeinference/change-notes/released/0.0.29.md
M shared/typeinference/codeql-pack.release.yml
M shared/typeinference/qlpack.yml
M shared/typetracking/CHANGELOG.md
A shared/typetracking/change-notes/released/2.0.32.md
M shared/typetracking/codeql-pack.release.yml
M shared/typetracking/qlpack.yml
M shared/typos/CHANGELOG.md
A shared/typos/change-notes/released/1.0.48.md
M shared/typos/codeql-pack.release.yml
M shared/typos/qlpack.yml
M shared/util/CHANGELOG.md
A shared/util/change-notes/released/2.0.35.md
M shared/util/codeql-pack.release.yml
M shared/util/qlpack.yml
M shared/xml/CHANGELOG.md
A shared/xml/change-notes/released/1.0.48.md
M shared/xml/codeql-pack.release.yml
M shared/xml/qlpack.yml
M shared/yaml/CHANGELOG.md
A shared/yaml/change-notes/released/1.0.48.md
M shared/yaml/codeql-pack.release.yml
M shared/yaml/qlpack.yml
M swift/ql/lib/CHANGELOG.md
R swift/ql/lib/change-notes/2026-04-06-swift-6.3.md
A swift/ql/lib/change-notes/released/6.4.0.md
M swift/ql/lib/codeql-pack.release.yml
M swift/ql/lib/qlpack.yml
M swift/ql/src/CHANGELOG.md
A swift/ql/src/change-notes/released/1.3.1.md
M swift/ql/src/codeql-pack.release.yml
M swift/ql/src/qlpack.yml
Log Message:
-----------
Merge branch 'github:main' into main
Compare: https://github.com/krishnprakash/codeql/compare/7b62228c01ce...5a069e1838ad
To unsubscribe from these emails, change your notification settings at https://github.com/krishnprakash/codeql/settings/notifications
Home: https://github.com/krishnprakash/codeql
Commit: 20cfe291995f1631f9672a8f19aab75a7bfbf511
https://github.com/krishnprakash/codeql/commit/20cfe291995f1631f9672a8f19aab75a7bfbf511
Author: MarkLee131 <kaixu...@ntu.edu.sg>
Date: 2026-04-04 (Sat, 04 Apr 2026)
Changed paths:
A java/ql/lib/change-notes/2026-04-04-sensitive-log-fp-reduction.md
M java/ql/lib/semmle/code/java/security/SensitiveActions.qll
M java/ql/test/query-tests/security/CWE-532/SensitiveLogInfo.expected
M java/ql/test/query-tests/security/CWE-532/Test.java
Log Message:
-----------
Java: reduce false positives in sensitive-log by expanding FP exclusion regex
The getCommonSensitiveInfoFPRegex() only excluded "null", "tokenizer", and
"tokenImage", causing widespread false positives for common non-sensitive
variable names containing "token" or "secret".
This adds exclusions for three categories:
- Pagination/iteration tokens: nextToken (AWS SDK), pageToken (GCP),
continuationToken (Azure), etc.
- Token metadata: tokenType (OAuth), tokenEndpoint (OIDC), tokenCount,
tokenIndex, tokenLength, tokenUrl, etc.
- Secret metadata: secretName (K8s/AWS), secretId (Azure),
secretVersion, secretArn, secretPath, etc.
All truly sensitive variable names (accessToken, clientSecret, secretKey,
refreshToken, etc.) remain correctly flagged.
Commit: 46ef0204ef019d7b073ae1d5c275660be157e5b4
https://github.com/krishnprakash/codeql/commit/46ef0204ef019d7b073ae1d5c275660be157e5b4
Author: MarkLee131 <kaixu...@ntu.edu.sg>
Date: 2026-04-04 (Sat, 04 Apr 2026)
Changed paths:
M java/ql/lib/semmle/code/java/security/SensitiveActions.qll
M java/ql/test/query-tests/security/CWE-532/SensitiveLogInfo.expected
M java/ql/test/query-tests/security/CWE-532/Test.java
Log Message:
-----------
Remove secretQuestion from FP exclusion list
secretQuestion is ambiguous: it could be the question text (not
sensitive) or a security question answer. Worse, the regex
secrets?(question) also matches secretQuestionAnswer, which is
clearly sensitive. Drop it to avoid false negatives.
Commit: 93a594e9c0974f0298a9206277610c23d63d4ab7
https://github.com/krishnprakash/codeql/commit/93a594e9c0974f0298a9206277610c23d63d4ab7
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M java/ql/lib/semmle/code/java/ControlFlowGraph.qll
M shared/controlflow/codeql/controlflow/ControlFlowGraph.qll
Log Message:
-----------
Cfg: Support Throw expressions.
Commit: a53cffc1217cacf57c369e22eabf793ab2f8402e
https://github.com/krishnprakash/codeql/commit/a53cffc1217cacf57c369e22eabf793ab2f8402e
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M java/ql/lib/semmle/code/java/ControlFlowGraph.qll
M shared/controlflow/codeql/controlflow/ControlFlowGraph.qll
Log Message:
-----------
Cfg: Support GotoStmt.
Commit: 0b6c416fd44d4d595655e9d5995e6c197d07ddd8
https://github.com/krishnprakash/codeql/commit/0b6c416fd44d4d595655e9d5995e6c197d07ddd8
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M java/ql/lib/semmle/code/java/ControlFlowGraph.qll
M shared/controlflow/codeql/controlflow/ControlFlowGraph.qll
Log Message:
-----------
Cfg: Support short-circuiting compound assignments.
Commit: 035b83c0e4d46842169f69ab5586037afdc7db7f
https://github.com/krishnprakash/codeql/commit/035b83c0e4d46842169f69ab5586037afdc7db7f
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M csharp/ql/lib/semmle/code/csharp/Callable.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/ControlFlowElement.qll
Log Message:
-----------
C#: Introduce ControlFlowElementOrCallable.
Commit: 6ffed8523cc7f2b401f6b14c8a050957cb93ddc2
https://github.com/krishnprakash/codeql/commit/6ffed8523cc7f2b401f6b14c8a050957cb93ddc2
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M java/ql/lib/semmle/code/java/ControlFlowGraph.qll
M shared/controlflow/codeql/controlflow/ControlFlowGraph.qll
Log Message:
-----------
Cfg/Java: Move InstanceOfExpr CFG into shared lib.
Commit: 88aaff863b58db9f255f78532b1732503213f56e
https://github.com/krishnprakash/codeql/commit/88aaff863b58db9f255f78532b1732503213f56e
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M shared/controlflow/codeql/controlflow/ControlFlowGraph.qll
Log Message:
-----------
Cfg: Extend consistency checks.
Commit: 61976e3ef0d4f2d61bd3e25918554765f0122e39
https://github.com/krishnprakash/codeql/commit/61976e3ef0d4f2d61bd3e25918554765f0122e39
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M csharp/ql/lib/semmle/code/csharp/Assignable.qll
M csharp/ql/lib/semmle/code/csharp/Caching.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/BasicBlocks.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/ControlFlowElement.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/ControlFlowGraph.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/ControlFlowReachability.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/Guards.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/Nullness.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/SSA.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/SignAnalysis.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/DataFlowDispatch.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/DataFlowPrivate.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/DataFlowPublic.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/SsaImpl.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/RangeUtils.qll
M csharp/ql/src/Concurrency/UnsynchronizedStaticAccess.ql
M csharp/ql/src/Likely Bugs/NestedLoopsSameVariable.ql
M csharp/ql/src/Likely Bugs/Statements/UseBraces.ql
M csharp/ql/src/Likely Bugs/UncheckedCastInEquals.ql
M csharp/ql/src/Performance/StringBuilderInLoop.ql
M csharp/ql/src/Security Features/CWE-384/AbandonSession.ql
M csharp/ql/test/library-tests/controlflow/graph/Common.qll
M csharp/ql/test/library-tests/controlflow/graph/Condition.ql
M csharp/ql/test/library-tests/csharp7/IsFlow.ql
M csharp/ql/test/library-tests/csharp8/NullCoalescingControlFlow.ql
M csharp/ql/test/library-tests/csharp8/NullableRefTypes.ql
M csharp/ql/test/library-tests/csharp8/UsingControlFlow.ql
M csharp/ql/test/library-tests/csharp8/ispatternflow.ql
M csharp/ql/test/library-tests/csharp8/switchexprcontrolflow.ql
M csharp/ql/test/library-tests/csharp8/switchstmtctrlflow.ql
M csharp/ql/test/library-tests/dataflow/defuse/defUseEquivalence.ql
M csharp/ql/test/library-tests/dataflow/defuse/parameterUseEquivalence.ql
M csharp/ql/test/library-tests/dataflow/defuse/useUseEquivalence.ql
M csharp/ql/test/library-tests/dataflow/ssa/SSAPhiRead.ql
M csharp/ql/test/library-tests/goto/Goto1.ql
M csharp/ql/test/library-tests/standalone/controlflow/cfg.ql
Log Message:
-----------
C#: Rename ControlFlow::Node to ControlFlowNode.
Commit: b85b02abb43dc0261be0bf55c13224bfb60cd7e6
https://github.com/krishnprakash/codeql/commit/b85b02abb43dc0261be0bf55c13224bfb60cd7e6
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M shared/controlflow/codeql/controlflow/ControlFlowGraph.qll
Log Message:
-----------
Cfg: Add dominance predicates to shared ControlFlowNode.
Commit: 03f6bdbdd2aa034a04b92e36fd4f075e3d9982c6
https://github.com/krishnprakash/codeql/commit/03f6bdbdd2aa034a04b92e36fd4f075e3d9982c6
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M csharp/ql/lib/semmle/code/csharp/controlflow/ControlFlowGraph.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/Guards.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/Nullness.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/SSA.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/BaseSSA.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/DataFlowDispatch.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/DataFlowPrivate.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/DataFlowPublic.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/SsaImpl.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/SsaReadPositionSpecific.qll
M csharp/ql/src/Concurrency/UnsynchronizedStaticAccess.ql
M csharp/ql/src/Likely Bugs/NestedLoopsSameVariable.ql
M csharp/ql/src/Likely Bugs/Statements/UseBraces.ql
M csharp/ql/src/Likely Bugs/UncheckedCastInEquals.ql
M csharp/ql/src/Security Features/CWE-384/AbandonSession.ql
M csharp/ql/test/library-tests/controlflow/graph/EnclosingCallable.ql
M csharp/ql/test/library-tests/controlflow/graph/Nodes.ql
M csharp/ql/test/library-tests/csharp7/IsFlow.ql
M csharp/ql/test/library-tests/csharp8/NullCoalescingControlFlow.ql
M csharp/ql/test/library-tests/csharp8/NullableRefTypes.ql
M csharp/ql/test/library-tests/csharp8/UsingControlFlow.ql
M csharp/ql/test/library-tests/csharp8/ispatternflow.ql
M csharp/ql/test/library-tests/csharp8/switchexprcontrolflow.ql
M csharp/ql/test/library-tests/csharp8/switchstmtctrlflow.ql
M csharp/ql/test/library-tests/goto/Goto1.ql
Log Message:
-----------
C#: Update some references in preparation for CFG swap.
Commit: b878ae3f21e37c4348490237217aef73831b1b11
https://github.com/krishnprakash/codeql/commit/b878ae3f21e37c4348490237217aef73831b1b11
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M csharp/ql/lib/semmle/code/csharp/Callable.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/ControlFlowGraph.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/Guards.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/DataFlowDispatch.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/SsaImpl.qll
Log Message:
-----------
C#: Update some references to ControlFlow::Nodes.
Commit: 13a4141cc66e9681ff0d8be2f72b37fdb21d19c5
https://github.com/krishnprakash/codeql/commit/13a4141cc66e9681ff0d8be2f72b37fdb21d19c5
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M csharp/ql/consistency-queries/DataFlowConsistency.ql
M csharp/ql/lib/semmle/code/csharp/controlflow/ControlFlowElement.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/ControlFlowGraph.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/Guards.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/SSA.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/SignAnalysis.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/DataFlowDispatch.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/DataFlowPrivate.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/DataFlowPublic.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/SsaImpl.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/BoundSpecific.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/ConstantUtils.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/ModulusAnalysisSpecific.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/RangeUtils.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/SignAnalysisSpecific.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/SsaReadPositionSpecific.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/SsaUtils.qll
M csharp/ql/test/library-tests/controlflow/graph/Nodes.ql
M csharp/ql/test/library-tests/csharp11/signAnalysis.ql
M csharp/ql/test/library-tests/dataflow/modulusanalysis/ModulusAnalysis.ql
M csharp/ql/test/library-tests/dataflow/signanalysis/MissingSign.ql
M csharp/ql/test/library-tests/dataflow/signanalysis/SignAnalysis.ql
Log Message:
-----------
C#: Rename remaining references to ControlFlow::Nodes.
Commit: 9cf9a36d0da67c451109850a58c81d1d67834a76
https://github.com/krishnprakash/codeql/commit/9cf9a36d0da67c451109850a58c81d1d67834a76
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M csharp/ql/lib/semmle/code/csharp/Assignable.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/ControlFlowGraph.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/ControlFlowReachability.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/Guards.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/SSA.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/BaseSSA.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/DataFlowDispatch.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/DataFlowPrivate.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/SsaImpl.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/ModulusAnalysisSpecific.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/RangeUtils.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/SsaReadPositionSpecific.qll
M csharp/ql/src/Bad Practices/Control-Flow/ConstantCondition.ql
M csharp/ql/test/library-tests/controlflow/graph/Common.qll
M csharp/ql/test/library-tests/dataflow/defuse/useUseEquivalence.ql
M csharp/ql/test/library-tests/dataflow/ssa-large/countssa.ql
M csharp/ql/test/library-tests/dataflow/ssa/SSAPhiRead.ql
Log Message:
-----------
C#: Rename ControlFlow::BasicBlock to BasicBlock.
Commit: ff978d1a8cf75df365c2bf79160ef83a3a75fd96
https://github.com/krishnprakash/codeql/commit/ff978d1a8cf75df365c2bf79160ef83a3a75fd96
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M csharp/ql/campaigns/Solorigate/src/ModifiedFnvFunctionDetection.ql
M csharp/ql/consistency-queries/CfgConsistency.ql
M csharp/ql/consistency-queries/DataFlowConsistency.ql
M csharp/ql/consistency-queries/VariableCaptureConsistency.ql
M csharp/ql/lib/printCfg.ql
M csharp/ql/lib/semmle/code/csharp/Caching.qll
R csharp/ql/lib/semmle/code/csharp/controlflow/BasicBlocks.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/ControlFlowElement.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/ControlFlowGraph.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/ControlFlowReachability.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/Guards.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/internal/Completion.qll
R csharp/ql/lib/semmle/code/csharp/controlflow/internal/ControlFlowGraphImpl.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/internal/NonReturning.qll
R csharp/ql/lib/semmle/code/csharp/controlflow/internal/Splitting.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/SSA.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/BaseSSA.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/DataFlowDispatch.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/DataFlowPrivate.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/SsaImpl.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/ModulusAnalysisSpecific.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/RangeUtils.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/SsaReadPositionSpecific.qll
M csharp/ql/lib/semmle/code/csharp/security/dataflow/ConditionalBypassQuery.qll
M csharp/ql/src/Bad Practices/Control-Flow/ConstantCondition.ql
M csharp/ql/src/Likely Bugs/NestedLoopsSameVariable.ql
M csharp/ql/src/Performance/StringBuilderInLoop.ql
M csharp/ql/test/library-tests/controlflow/graph/Condition.ql
M csharp/ql/test/library-tests/controlflow/graph/EntryElement.ql
R csharp/ql/test/library-tests/controlflow/graph/ExitElement.expected
R csharp/ql/test/library-tests/controlflow/graph/ExitElement.ql
M csharp/ql/test/library-tests/controlflow/graph/NodeGraph.ql
M csharp/ql/test/library-tests/controlflow/graph/Nodes.ql
M csharp/ql/test/library-tests/csharp8/NullCoalescingControlFlow.ql
M csharp/ql/test/library-tests/csharp8/UsingControlFlow.ql
M csharp/ql/test/library-tests/obinit/ObInit.ql
M shared/controlflow/codeql/controlflow/ControlFlowGraph.qll
Log Message:
-----------
C#: Replace CFG.
Commit: b1790335c09febc0d6bb1d7383b688511ad38ad0
https://github.com/krishnprakash/codeql/commit/b1790335c09febc0d6bb1d7383b688511ad38ad0
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M csharp/ql/test/library-tests/dataflow/defuse/useUseEquivalence.ql
Log Message:
-----------
C#: Fix test.
Commit: 700d56f3abdf505118b1e37b9993ae98e83455d6
https://github.com/krishnprakash/codeql/commit/700d56f3abdf505118b1e37b9993ae98e83455d6
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M csharp/ql/src/Likely Bugs/UncheckedCastInEquals.ql
Log Message:
-----------
C#: Fix UncheckedCastInEquals.
Commit: ac88b73b65e8abbb6bfcf525d5e6f802cadefb1a
https://github.com/krishnprakash/codeql/commit/ac88b73b65e8abbb6bfcf525d5e6f802cadefb1a
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M csharp/ql/lib/semmle/code/csharp/ExprOrStmtParent.qll
Log Message:
-----------
C#: Bugfix in enclosing callable.
Commit: 093eb57ad0ba3b56a4fa354efbc28558408aeb18
https://github.com/krishnprakash/codeql/commit/093eb57ad0ba3b56a4fa354efbc28558408aeb18
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/SsaImpl.qll
M csharp/ql/lib/semmle/code/csharp/dispatch/Dispatch.qll
M csharp/ql/lib/semmle/code/csharp/exprs/Call.qll
Log Message:
-----------
C#: Fix CFG position of property setter calls.
Commit: 43fe411585ddb083ce2db0999dbdc970efd82c18
https://github.com/krishnprakash/codeql/commit/43fe411585ddb083ce2db0999dbdc970efd82c18
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M csharp/ql/test/library-tests/dataflow/ssa/SSAPhi.expected
M csharp/ql/test/library-tests/dataflow/ssa/SSAPhiRead.expected
M csharp/ql/test/library-tests/dataflow/ssa/SsaDef.expected
M csharp/ql/test/library-tests/dataflow/ssa/SsaRead.expected
M csharp/ql/test/library-tests/dataflow/ssa/SsaUltimateDef.expected
Log Message:
-----------
C#: Accept SSA location changes.
Commit: 1a6670a6bba566e12179213e4a599087e176a60c
https://github.com/krishnprakash/codeql/commit/1a6670a6bba566e12179213e4a599087e176a60c
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M csharp/ql/test/library-tests/dataflow/ssa/SsaDefElement.expected
Log Message:
-----------
C#: Phi nodes are not expected to have associated Elements.
Commit: 6010640cea875e083b897b8070448d17ed90822c
https://github.com/krishnprakash/codeql/commit/6010640cea875e083b897b8070448d17ed90822c
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M csharp/ql/test/library-tests/controlflow/guards/BooleanGuardedExpr.expected
M csharp/ql/test/library-tests/controlflow/guards/GuardedControlFlowNode.expected
M csharp/ql/test/library-tests/controlflow/guards/GuardedExpr.expected
M csharp/ql/test/library-tests/controlflow/guards/Guards.cs
Log Message:
-----------
C#: Accept bugfix.
Commit: a5c99f96931a040540932d991fba945f2db079f3
https://github.com/krishnprakash/codeql/commit/a5c99f96931a040540932d991fba945f2db079f3
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M csharp/ql/test/library-tests/controlflow/guards/BooleanGuardedExpr.expected
M csharp/ql/test/library-tests/controlflow/guards/GuardedControlFlowNode.expected
M csharp/ql/test/library-tests/controlflow/guards/GuardedExpr.expected
Log Message:
-----------
C#: Accept harmless CFG changes.
Commit: 5d589093cf0cd93d17f7000efcbd96a3eac86b13
https://github.com/krishnprakash/codeql/commit/5d589093cf0cd93d17f7000efcbd96a3eac86b13
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M csharp/ql/test/library-tests/csharp7/LocalTaintFlow.expected
Log Message:
-----------
C#: Accept CFG changes.
Commit: 49cc931f920eca03f87e32b98b0213e8ea812519
https://github.com/krishnprakash/codeql/commit/49cc931f920eca03f87e32b98b0213e8ea812519
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M csharp/ql/test/library-tests/dataflow/modulusanalysis/ModulusAnalysis.expected
Log Message:
-----------
C#: Compile-time constants no longer have CFG nodes.
Commit: e90243c34850c27cabc680aaf25688bf6164724b
https://github.com/krishnprakash/codeql/commit/e90243c34850c27cabc680aaf25688bf6164724b
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M csharp/ql/test/library-tests/dataflow/signanalysis/SignAnalysis.expected
Log Message:
-----------
C#: Accept irrelevant changes.
The additions are unintentional, but the fault lies with the shared
SignAnalysis code. The removals are due to compile-time constant
initializers no longer having CFG nodes.
Commit: 88256eeee8a6da8fc37dcaed713ac3e41855bdf7
https://github.com/krishnprakash/codeql/commit/88256eeee8a6da8fc37dcaed713ac3e41855bdf7
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M csharp/ql/test/library-tests/controlflow/guards-large/GuardedExpr.expected
Log Message:
-----------
C#: GuardedExpr no longer contains expressions guarded solely by disjunctions.
Commit: 773881f333b0bfdaf40d2d1f4b67511effa9df2d
https://github.com/krishnprakash/codeql/commit/773881f333b0bfdaf40d2d1f4b67511effa9df2d
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M csharp/ql/consistency-queries/DataFlowConsistency.ql
Log Message:
-----------
C#: Accept data flow inconsistency check for read+write calls.
Commit: a997d9f80c92766c30e6d294f2d75f1095337ee7
https://github.com/krishnprakash/codeql/commit/a997d9f80c92766c30e6d294f2d75f1095337ee7
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
R csharp/ql/test/library-tests/controlflow/graph/CONSISTENCY/CfgConsistency.expected
Log Message:
-----------
C#: Accept fixed consistency check.
Commit: a69581966b63ffaea492490a0a94e71f28e1c118
https://github.com/krishnprakash/codeql/commit/a69581966b63ffaea492490a0a94e71f28e1c118
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M csharp/ql/test/library-tests/controlflow/graph/EntryElement.expected
Log Message:
-----------
C#: Accept CFG changes for "first" relation.
Commit: a7d4b00d06ee2632fc1a357162c4e5b15539761a
https://github.com/krishnprakash/codeql/commit/a7d4b00d06ee2632fc1a357162c4e5b15539761a
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M csharp/ql/test/library-tests/dataflow/local/DataFlowStep.expected
M csharp/ql/test/library-tests/dataflow/local/TaintTrackingStep.expected
Log Message:
-----------
C#: Accept changed location for phi nodes.
Commit: 371bc3012e913af0641d101179c4b79d073fcdbc
https://github.com/krishnprakash/codeql/commit/371bc3012e913af0641d101179c4b79d073fcdbc
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M csharp/ql/test/library-tests/security/dataflow/flowsources/StoredFlowSources.expected
Log Message:
-----------
C#: CFG and data flow nodes now exist for LHSs.
Commit: 1d9c0ae3884eee039d6bbaf93fd4a09b42b60e93
https://github.com/krishnprakash/codeql/commit/1d9c0ae3884eee039d6bbaf93fd4a09b42b60e93
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/DataFlowPublic.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/TaintTrackingPublic.qll
Log Message:
-----------
C#: Fix perf.
Commit: bfbd0f77e8c8a823d37864919999abd7c81cb549
https://github.com/krishnprakash/codeql/commit/bfbd0f77e8c8a823d37864919999abd7c81cb549
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M csharp/ql/lib/semmle/code/csharp/dataflow/SSA.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/DataFlowPrivate.qll
M csharp/ql/src/Likely Bugs/UncheckedCastInEquals.ql
Log Message:
-----------
C#: Fix some bad join orders.
Commit: bbd403dbc3cb35c550b6bd88f05f17212b82f81c
https://github.com/krishnprakash/codeql/commit/bbd403dbc3cb35c550b6bd88f05f17212b82f81c
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/DataFlowDispatch.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/DataFlowPrivate.qll
Log Message:
-----------
C#: Rework DataFlowCallable-to-cfg relation in terms of basic blocks for performance.
Commit: 2d5a1840f42639ac34c945c20263c7e22cecc0da
https://github.com/krishnprakash/codeql/commit/2d5a1840f42639ac34c945c20263c7e22cecc0da
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M csharp/ql/test/library-tests/controlflow/graph/BasicBlock.expected
M csharp/ql/test/library-tests/controlflow/graph/Condition.expected
M csharp/ql/test/library-tests/controlflow/graph/Dominance.expected
M csharp/ql/test/library-tests/controlflow/graph/EnclosingCallable.expected
M csharp/ql/test/library-tests/controlflow/graph/NodeGraph.expected
M csharp/ql/test/library-tests/controlflow/graph/Nodes.expected
M csharp/ql/test/library-tests/csharp7/IsFlow.expected
M csharp/ql/test/library-tests/csharp8/NullCoalescingControlFlow.expected
M csharp/ql/test/library-tests/csharp8/NullableRefTypes.expected
M csharp/ql/test/library-tests/csharp8/UsingControlFlow.expected
M csharp/ql/test/library-tests/csharp8/ispatternflow.expected
M csharp/ql/test/library-tests/csharp8/switchexprcontrolflow.expected
M csharp/ql/test/library-tests/csharp8/switchstmtctrlflow.expected
M csharp/ql/test/library-tests/dataflow/ssa-large/countssa.expected
M csharp/ql/test/library-tests/goto/Goto1.expected
M csharp/ql/test/library-tests/obinit/ObInit.expected
M csharp/ql/test/library-tests/standalone/controlflow/cfg.expected
Log Message:
-----------
C#: Accept new CFG in tests.
Commit: aaf9bb2e9e11471ab209f4522139c168dd71f2bf
https://github.com/krishnprakash/codeql/commit/aaf9bb2e9e11471ab209f4522139c168dd71f2bf
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M csharp/ql/test/library-tests/dataflow/call-sensitivity/CallSensitivityFlow.expected
Log Message:
-----------
C#: Accept fewer CallContextSpecificCall due to no splitting.
Commit: 452913f336b220870a51688bb62068d2ca55462c
https://github.com/krishnprakash/codeql/commit/452913f336b220870a51688bb62068d2ca55462c
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M csharp/ql/src/Concurrency/UnsynchronizedStaticAccess.ql
Log Message:
-----------
C#: Improve perf of UnsynchronizedStaticAccess.ql.
Commit: d5c9fd1085da2faf6b3a868b37f134d87b0296c4
https://github.com/krishnprakash/codeql/commit/d5c9fd1085da2faf6b3a868b37f134d87b0296c4
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-10 (Fri, 10 Apr 2026)
Changed paths:
M csharp/ql/lib/semmle/code/csharp/controlflow/ControlFlowElement.qll
M shared/controlflow/codeql/controlflow/ControlFlowGraph.qll
Log Message:
-----------
C#/Cfg: A bit more qldoc.
Commit: 88160ef2e28e203085b1b7e1a07e5639bbbbcf86
https://github.com/krishnprakash/codeql/commit/88160ef2e28e203085b1b7e1a07e5639bbbbcf86
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-13 (Mon, 13 Apr 2026)
Changed paths:
A csharp/ql/lib/change-notes/2026-04-13-cfg.md
Log Message:
-----------
C#: Add change note.
Commit: f02ccd36cc3311a7e0366a9770a80a09e2fb3ad4
https://github.com/krishnprakash/codeql/commit/f02ccd36cc3311a7e0366a9770a80a09e2fb3ad4
Author: Owen Mansel-Chan <owe...@github.com>
Date: 2026-04-14 (Tue, 14 Apr 2026)
Changed paths:
M docs/codeql/codeql-language-guides/customizing-library-models-for-go.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-python.rst
Log Message:
-----------
(Trivial) Remove trailing spaces in some docs
Commit: ef9136c0539d8002730ab79d62760b5f5972797c
https://github.com/krishnprakash/codeql/commit/ef9136c0539d8002730ab79d62760b5f5972797c
Author: Owen Mansel-Chan <owe...@github.com>
Date: 2026-04-14 (Tue, 14 Apr 2026)
Changed paths:
M docs/codeql/codeql-language-guides/customizing-library-models-for-ruby.rst
Log Message:
-----------
(Formatting) Remove erroneous bullet point in ruby docs
Commit: 05e3073165021fa2bf235f146d415ecd9ba0694f
https://github.com/krishnprakash/codeql/commit/05e3073165021fa2bf235f146d415ecd9ba0694f
Author: Owen Mansel-Chan <owe...@github.com>
Date: 2026-04-14 (Tue, 14 Apr 2026)
Changed paths:
M docs/codeql/codeql-language-guides/customizing-library-models-for-cpp.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-csharp.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-go.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-java-and-kotlin.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-javascript.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-python.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-ruby.rst
Log Message:
-----------
List extensible predicates for barriers and barrier guards
Commit: 415330d5eb383d19da05a9892218f1bcc5e0de9b
https://github.com/krishnprakash/codeql/commit/415330d5eb383d19da05a9892218f1bcc5e0de9b
Author: Owen Mansel-Chan <owe...@github.com>
Date: 2026-04-14 (Tue, 14 Apr 2026)
Changed paths:
M docs/codeql/codeql-language-guides/customizing-library-models-for-cpp.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-csharp.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-go.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-java-and-kotlin.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-javascript.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-python.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-ruby.rst
Log Message:
-----------
Update docs for barriers and barrier guards
Commit: c86ba38a4e52c595b35cbcc0990d0deb8ef5288e
https://github.com/krishnprakash/codeql/commit/c86ba38a4e52c595b35cbcc0990d0deb8ef5288e
Author: Owen Mansel-Chan <owe...@github.com>
Date: 2026-04-14 (Tue, 14 Apr 2026)
Changed paths:
A cpp/ql/lib/change-notes/2026-03-20-data-extensions-barriers.md
A csharp/ql/lib/change-notes/2026-03-20-data-extensions-barriers.md
A go/ql/lib/change-notes/2026-03-20-data-extensions-barriers.md
A java/ql/lib/change-notes/2026-03-20-data-extensions-barriers.md
A javascript/ql/lib/change-notes/2026-03-20-data-extensions-barriers.md
A python/ql/lib/change-notes/2026-03-20-data-extensions-barriers.md
A ruby/ql/lib/change-notes/2026-03-20-data-extensions-barriers.md
A rust/ql/lib/change-notes/2026-03-20-data-extensions-barriers.md
Log Message:
-----------
Add change notes
Commit: a2a0c087e15569a3aef8b9018dbd2d6d58b43481
https://github.com/krishnprakash/codeql/commit/a2a0c087e15569a3aef8b9018dbd2d6d58b43481
Author: Owen Mansel-Chan <62447351...@users.noreply.github.com>
Date: 2026-04-14 (Tue, 14 Apr 2026)
Changed paths:
M docs/codeql/codeql-language-guides/customizing-library-models-for-python.rst
Log Message:
-----------
Remove incorrect parameter of extensible predicate
Co-authored-by: Copilot <17572847...@users.noreply.github.com>
Commit: 6d4e8bfcb29ab98925ea4e69c146d6451b3878a5
https://github.com/krishnprakash/codeql/commit/6d4e8bfcb29ab98925ea4e69c146d6451b3878a5
Author: Owen Mansel-Chan <62447351...@users.noreply.github.com>
Date: 2026-04-14 (Tue, 14 Apr 2026)
Changed paths:
M docs/codeql/codeql-language-guides/customizing-library-models-for-cpp.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-csharp.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-go.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-java-and-kotlin.rst
Log Message:
-----------
Correct extensible predicate signatures in docs
Co-authored-by: Copilot <17572847...@users.noreply.github.com>
Commit: 8f17b7379663d6b38f621d48ed4c8ff370a206f0
https://github.com/krishnprakash/codeql/commit/8f17b7379663d6b38f621d48ed4c8ff370a206f0
Author: Owen Mansel-Chan <owe...@github.com>
Date: 2026-04-14 (Tue, 14 Apr 2026)
Changed paths:
M cpp/ql/lib/change-notes/2026-03-20-data-extensions-barriers.md
M csharp/ql/lib/change-notes/2026-03-20-data-extensions-barriers.md
M go/ql/lib/change-notes/2026-03-20-data-extensions-barriers.md
M java/ql/lib/change-notes/2026-03-20-data-extensions-barriers.md
M javascript/ql/lib/change-notes/2026-03-20-data-extensions-barriers.md
M python/ql/lib/change-notes/2026-03-20-data-extensions-barriers.md
M ruby/ql/lib/change-notes/2026-03-20-data-extensions-barriers.md
Log Message:
-----------
Fix link formatting in change notes
Commit: 76d165e71ead77b2992c1e2e2af8d0ad4601a6b9
https://github.com/krishnprakash/codeql/commit/76d165e71ead77b2992c1e2e2af8d0ad4601a6b9
Author: Owen Mansel-Chan <owe...@github.com>
Date: 2026-04-14 (Tue, 14 Apr 2026)
Changed paths:
M docs/codeql/codeql-language-guides/customizing-library-models-for-cpp.rst
M docs/ql-libraries/dataflow/dataflow.md
M ruby/ql/docs/flow_summaries.md
Log Message:
-----------
"modelling" -> "modeling" in docs
Commit: 2ecf0863333b20957e1d354945646b96055adc42
https://github.com/krishnprakash/codeql/commit/2ecf0863333b20957e1d354945646b96055adc42
Author: Owen Mansel-Chan <owe...@github.com>
Date: 2026-04-14 (Tue, 14 Apr 2026)
Changed paths:
M docs/codeql/codeql-language-guides/customizing-library-models-for-cpp.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-csharp.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-go.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-java-and-kotlin.rst
Log Message:
-----------
Include parameters when quoting extensible predicate name
Commit: 8081d4602bf406ac2cb78f0839e0717dc952f238
https://github.com/krishnprakash/codeql/commit/8081d4602bf406ac2cb78f0839e0717dc952f238
Author: Owen Mansel-Chan <owe...@github.com>
Date: 2026-04-14 (Tue, 14 Apr 2026)
Changed paths:
M docs/codeql/codeql-language-guides/customizing-library-models-for-cpp.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-csharp.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-go.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-java-and-kotlin.rst
Log Message:
-----------
Use hyphens in column names: "access-path", "accepting-value"
Commit: 6321482a46b8d538d11331e5e0e137be8942279a
https://github.com/krishnprakash/codeql/commit/6321482a46b8d538d11331e5e0e137be8942279a
Author: Owen Mansel-Chan <owe...@github.com>
Date: 2026-04-14 (Tue, 14 Apr 2026)
Changed paths:
M docs/codeql/codeql-language-guides/customizing-library-models-for-python.rst
Log Message:
-----------
Remove mention of extension ID
Commit: 87f2e21ae9851ccb49ab8ebe77961327c8aa103b
https://github.com/krishnprakash/codeql/commit/87f2e21ae9851ccb49ab8ebe77961327c8aa103b
Author: Owen Mansel-Chan <owe...@github.com>
Date: 2026-04-14 (Tue, 14 Apr 2026)
Changed paths:
M docs/codeql/codeql-language-guides/customizing-library-models-for-cpp.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-csharp.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-go.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-java-and-kotlin.rst
Log Message:
-----------
Fix docs: "acceptingvalue" -> "acceptingValue"
Commit: f79ffe792ed547feab80c1b6fccf69ec26ccc8c6
https://github.com/krishnprakash/codeql/commit/f79ffe792ed547feab80c1b6fccf69ec26ccc8c6
Author: Owen Mansel-Chan <owe...@github.com>
Date: 2026-04-14 (Tue, 14 Apr 2026)
Changed paths:
M docs/codeql/codeql-language-guides/customizing-library-models-for-javascript.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-python.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-ruby.rst
Log Message:
-----------
Fix docs: "branch" -> "acceptingValue"
Commit: 2c16cb46ad66c19ba280d48b1de4983cbc5eddee
https://github.com/krishnprakash/codeql/commit/2c16cb46ad66c19ba280d48b1de4983cbc5eddee
Author: Owen Mansel-Chan <62447351...@users.noreply.github.com>
Date: 2026-04-16 (Thu, 16 Apr 2026)
Changed paths:
M docs/codeql/codeql-language-guides/customizing-library-models-for-go.rst
Log Message:
-----------
Quote library name in backticks
Co-authored-by: Sarita Iyer <66540150...@users.noreply.github.com>
Commit: 5a7b1b91e0328f7527e8c74da3b9675178d06a48
https://github.com/krishnprakash/codeql/commit/5a7b1b91e0328f7527e8c74da3b9675178d06a48
Author: Owen Mansel-Chan <owe...@github.com>
Date: 2026-04-16 (Thu, 16 Apr 2026)
Changed paths:
M docs/codeql/codeql-language-guides/customizing-library-models-for-cpp.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-csharp.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-go.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-java-and-kotlin.rst
Log Message:
-----------
Fix mistakes in explanation of override column
To avoid copy-paste mistakes and make them more consistent we just use
the word "model".
Commit: 82d9d46fdedb7ade555e64729980d2a6f1a4c894
https://github.com/krishnprakash/codeql/commit/82d9d46fdedb7ade555e64729980d2a6f1a4c894
Author: Owen Mansel-Chan <owe...@github.com>
Date: 2026-04-16 (Thu, 16 Apr 2026)
Changed paths:
M docs/codeql/codeql-language-guides/customizing-library-models-for-cpp.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-csharp.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-go.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-java-and-kotlin.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-javascript.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-python.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-ruby.rst
Log Message:
-----------
Remove duplication and standardize wording
Co-authored-by: Copilot <cop...@github.com>
Commit: 69c150d5f6d637f684077a643a381d9d79abea2b
https://github.com/krishnprakash/codeql/commit/69c150d5f6d637f684077a643a381d9d79abea2b
Author: Owen Mansel-Chan <owe...@github.com>
Date: 2026-04-16 (Thu, 16 Apr 2026)
Changed paths:
M docs/codeql/codeql-language-guides/customizing-library-models-for-actions.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-javascript.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-python.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-ruby.rst
Log Message:
-----------
Use monospace instead of bold for predicate signatures
Commit: 73cc54c10d39567cb406db6a29f3c81e79e84ad3
https://github.com/krishnprakash/codeql/commit/73cc54c10d39567cb406db6a29f3c81e79e84ad3
Author: Owen Mansel-Chan <owe...@github.com>
Date: 2026-04-16 (Thu, 16 Apr 2026)
Changed paths:
M docs/codeql/codeql-language-guides/customizing-library-models-for-javascript.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-python.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-ruby.rst
Log Message:
-----------
Use monospace instead of bold for quoted code
Commit: 92d205d1a832dfb018aeef20ff64f1d6f556b749
https://github.com/krishnprakash/codeql/commit/92d205d1a832dfb018aeef20ff64f1d6f556b749
Author: MarkLee131 <kaixu...@ntu.edu.sg>
Date: 2026-04-19 (Sun, 19 Apr 2026)
Changed paths:
M java/ql/lib/semmle/code/java/security/SensitiveActions.qll
Log Message:
-----------
Use set literal for getCommonSensitiveInfoFPRegex
Replace the five-way result = ... or result = ... disjunction with a
single equality on a set literal. Addresses the CodeQL style alert
"Use a set literal in place of or" reported by the self-scan on this
PR. Pure refactor, no semantic change.
Commit: c861d99802a76469906837fe9af3bdba66231d78
https://github.com/krishnprakash/codeql/commit/c861d99802a76469906837fe9af3bdba66231d78
Author: github-actions[bot] <github-...@github.com>
Date: 2026-04-20 (Mon, 20 Apr 2026)
Changed paths:
M actions/ql/lib/CHANGELOG.md
R actions/ql/lib/change-notes/2026-03-26-remove-false-positive-sinks.md
A actions/ql/lib/change-notes/released/0.4.34.md
M actions/ql/lib/codeql-pack.release.yml
M actions/ql/lib/qlpack.yml
M actions/ql/src/CHANGELOG.md
R actions/ql/src/change-notes/2026-04-02-alert-msg-poisoning.md
R actions/ql/src/change-notes/2026-04-02-permissions.md
A actions/ql/src/change-notes/released/0.6.26.md
M actions/ql/src/codeql-pack.release.yml
M actions/ql/src/qlpack.yml
M cpp/ql/lib/CHANGELOG.md
R cpp/ql/lib/change-notes/2026-04-07-autoconf.md
R cpp/ql/lib/change-notes/2026-04-14-throwing.md
A cpp/ql/lib/change-notes/released/10.0.0.md
M cpp/ql/lib/codeql-pack.release.yml
M cpp/ql/lib/qlpack.yml
M cpp/ql/src/CHANGELOG.md
R cpp/ql/src/change-notes/2026-03-23-implicit-function-declaration.md
R cpp/ql/src/change-notes/2026-04-02-comparison-with-wider-type.md
R cpp/ql/src/change-notes/2026-04-02-implicit-function-declaration.md
R cpp/ql/src/change-notes/2026-04-02-integer-multiplication-cast-to-long.md
R cpp/ql/src/change-notes/2026-04-02-suspicious-add-sizeof.md
R cpp/ql/src/change-notes/2026-04-02-wrong-type-format-argument.md
R cpp/ql/src/change-notes/2026-04-16-add-model-for-aligned-alloc.md
A cpp/ql/src/change-notes/released/1.6.1.md
M cpp/ql/src/codeql-pack.release.yml
M cpp/ql/src/qlpack.yml
M csharp/ql/campaigns/Solorigate/lib/CHANGELOG.md
A csharp/ql/campaigns/Solorigate/lib/change-notes/released/1.7.65.md
M csharp/ql/campaigns/Solorigate/lib/codeql-pack.release.yml
M csharp/ql/campaigns/Solorigate/lib/qlpack.yml
M csharp/ql/campaigns/Solorigate/src/CHANGELOG.md
A csharp/ql/campaigns/Solorigate/src/change-notes/released/1.7.65.md
M csharp/ql/campaigns/Solorigate/src/codeql-pack.release.yml
M csharp/ql/campaigns/Solorigate/src/qlpack.yml
M csharp/ql/lib/CHANGELOG.md
R csharp/ql/lib/change-notes/2026-04-01-getlrvalue.md
A csharp/ql/lib/change-notes/released/5.5.0.md
M csharp/ql/lib/codeql-pack.release.yml
M csharp/ql/lib/qlpack.yml
M csharp/ql/src/CHANGELOG.md
R csharp/ql/src/change-notes/2026-04-17-useless-to-string.md
A csharp/ql/src/change-notes/released/1.7.1.md
M csharp/ql/src/codeql-pack.release.yml
M csharp/ql/src/qlpack.yml
M go/ql/consistency-queries/CHANGELOG.md
A go/ql/consistency-queries/change-notes/released/1.0.48.md
M go/ql/consistency-queries/codeql-pack.release.yml
M go/ql/consistency-queries/qlpack.yml
M go/ql/lib/CHANGELOG.md
A go/ql/lib/change-notes/released/7.0.6.md
M go/ql/lib/codeql-pack.release.yml
M go/ql/lib/qlpack.yml
M go/ql/src/CHANGELOG.md
A go/ql/src/change-notes/released/1.6.1.md
M go/ql/src/codeql-pack.release.yml
M go/ql/src/qlpack.yml
M java/ql/lib/CHANGELOG.md
R java/ql/lib/change-notes/2026-04-16-woodstox-xxe.md
A java/ql/lib/change-notes/released/9.0.4.md
M java/ql/lib/codeql-pack.release.yml
M java/ql/lib/qlpack.yml
M java/ql/src/CHANGELOG.md
A java/ql/src/change-notes/released/1.11.1.md
M java/ql/src/codeql-pack.release.yml
M java/ql/src/qlpack.yml
M javascript/ql/lib/CHANGELOG.md
A javascript/ql/lib/change-notes/released/2.6.28.md
M javascript/ql/lib/codeql-pack.release.yml
M javascript/ql/lib/qlpack.yml
M javascript/ql/src/CHANGELOG.md
R javascript/ql/src/change-notes/2026-04-13-fastify-per-route-rate-limit.md
A javascript/ql/src/change-notes/released/2.3.8.md
M javascript/ql/src/codeql-pack.release.yml
M javascript/ql/src/qlpack.yml
M misc/suite-helpers/CHANGELOG.md
A misc/suite-helpers/change-notes/released/1.0.48.md
M misc/suite-helpers/codeql-pack.release.yml
M misc/suite-helpers/qlpack.yml
M python/ql/lib/CHANGELOG.md
R python/ql/lib/change-notes/2026-04-10-support-lazy-keyword.md
A python/ql/lib/change-notes/released/7.0.5.md
M python/ql/lib/codeql-pack.release.yml
M python/ql/lib/qlpack.yml
M python/ql/src/CHANGELOG.md
R python/ql/src/change-notes/2026-03-26-improve-bind-all-interfaces-query.md
A python/ql/src/change-notes/released/1.8.1.md
M python/ql/src/codeql-pack.release.yml
M python/ql/src/qlpack.yml
M ruby/ql/lib/CHANGELOG.md
A ruby/ql/lib/change-notes/released/5.1.16.md
M ruby/ql/lib/codeql-pack.release.yml
M ruby/ql/lib/qlpack.yml
M ruby/ql/src/CHANGELOG.md
A ruby/ql/src/change-notes/released/1.6.1.md
M ruby/ql/src/codeql-pack.release.yml
M ruby/ql/src/qlpack.yml
M rust/ql/lib/CHANGELOG.md
A rust/ql/lib/change-notes/released/0.2.12.md
M rust/ql/lib/codeql-pack.release.yml
M rust/ql/lib/qlpack.yml
M rust/ql/src/CHANGELOG.md
A rust/ql/src/change-notes/released/0.1.33.md
M rust/ql/src/codeql-pack.release.yml
M rust/ql/src/qlpack.yml
M shared/concepts/CHANGELOG.md
A shared/concepts/change-notes/released/0.0.22.md
M shared/concepts/codeql-pack.release.yml
M shared/concepts/qlpack.yml
M shared/controlflow/CHANGELOG.md
A shared/controlflow/change-notes/released/2.0.32.md
M shared/controlflow/codeql-pack.release.yml
M shared/controlflow/qlpack.yml
M shared/dataflow/CHANGELOG.md
A shared/dataflow/change-notes/released/2.1.4.md
M shared/dataflow/codeql-pack.release.yml
M shared/dataflow/qlpack.yml
M shared/mad/CHANGELOG.md
A shared/mad/change-notes/released/1.0.48.md
M shared/mad/codeql-pack.release.yml
M shared/mad/qlpack.yml
M shared/quantum/CHANGELOG.md
A shared/quantum/change-notes/released/0.0.26.md
M shared/quantum/codeql-pack.release.yml
M shared/quantum/qlpack.yml
M shared/rangeanalysis/CHANGELOG.md
A shared/rangeanalysis/change-notes/released/1.0.48.md
M shared/rangeanalysis/codeql-pack.release.yml
M shared/rangeanalysis/qlpack.yml
M shared/regex/CHANGELOG.md
A shared/regex/change-notes/released/1.0.48.md
M shared/regex/codeql-pack.release.yml
M shared/regex/qlpack.yml
M shared/ssa/CHANGELOG.md
A shared/ssa/change-notes/released/2.0.24.md
M shared/ssa/codeql-pack.release.yml
M shared/ssa/qlpack.yml
M shared/threat-models/CHANGELOG.md
A shared/threat-models/change-notes/released/1.0.48.md
M shared/threat-models/codeql-pack.release.yml
M shared/threat-models/qlpack.yml
M shared/tutorial/CHANGELOG.md
A shared/tutorial/change-notes/released/1.0.48.md
M shared/tutorial/codeql-pack.release.yml
M shared/tutorial/qlpack.yml
M shared/typeflow/CHANGELOG.md
A shared/typeflow/change-notes/released/1.0.48.md
M shared/typeflow/codeql-pack.release.yml
M shared/typeflow/qlpack.yml
M shared/typeinference/CHANGELOG.md
A shared/typeinference/change-notes/released/0.0.29.md
M shared/typeinference/codeql-pack.release.yml
M shared/typeinference/qlpack.yml
M shared/typetracking/CHANGELOG.md
A shared/typetracking/change-notes/released/2.0.32.md
M shared/typetracking/codeql-pack.release.yml
M shared/typetracking/qlpack.yml
M shared/typos/CHANGELOG.md
A shared/typos/change-notes/released/1.0.48.md
M shared/typos/codeql-pack.release.yml
M shared/typos/qlpack.yml
M shared/util/CHANGELOG.md
A shared/util/change-notes/released/2.0.35.md
M shared/util/codeql-pack.release.yml
M shared/util/qlpack.yml
M shared/xml/CHANGELOG.md
A shared/xml/change-notes/released/1.0.48.md
M shared/xml/codeql-pack.release.yml
M shared/xml/qlpack.yml
M shared/yaml/CHANGELOG.md
A shared/yaml/change-notes/released/1.0.48.md
M shared/yaml/codeql-pack.release.yml
M shared/yaml/qlpack.yml
M swift/ql/lib/CHANGELOG.md
R swift/ql/lib/change-notes/2026-04-06-swift-6.3.md
A swift/ql/lib/change-notes/released/6.4.0.md
M swift/ql/lib/codeql-pack.release.yml
M swift/ql/lib/qlpack.yml
M swift/ql/src/CHANGELOG.md
A swift/ql/src/change-notes/released/1.3.1.md
M swift/ql/src/codeql-pack.release.yml
M swift/ql/src/qlpack.yml
Log Message:
-----------
Release preparation for version 2.25.3
Commit: 34b5dcfd5f88c73990b4a69fa289c20a0e7f7275
https://github.com/krishnprakash/codeql/commit/34b5dcfd5f88c73990b4a69fa289c20a0e7f7275
Author: Michael B. Gale <m...@github.com>
Date: 2026-04-20 (Mon, 20 Apr 2026)
Changed paths:
M actions/ql/src/CHANGELOG.md
M actions/ql/src/change-notes/released/0.6.26.md
Log Message:
-----------
Improve wording of `actions` note
Commit: abf374433b4e05ec4d4f0d0ae077766c2eebe241
https://github.com/krishnprakash/codeql/commit/abf374433b4e05ec4d4f0d0ae077766c2eebe241
Author: Michael B. Gale <m...@github.com>
Date: 2026-04-20 (Mon, 20 Apr 2026)
Changed paths:
M cpp/ql/src/CHANGELOG.md
M cpp/ql/src/change-notes/released/1.6.1.md
Log Message:
-----------
Merge changelog entries for `cpp/implicit-function-declaration`
Commit: a73f7cb79d18ec80a11c16b49c2e3118bfbdf2ef
https://github.com/krishnprakash/codeql/commit/a73f7cb79d18ec80a11c16b49c2e3118bfbdf2ef
Author: Michael B. Gale <m...@github.com>
Date: 2026-04-20 (Mon, 20 Apr 2026)
Changed paths:
M actions/ql/lib/CHANGELOG.md
R actions/ql/lib/change-notes/2026-03-26-remove-false-positive-sinks.md
A actions/ql/lib/change-notes/released/0.4.34.md
M actions/ql/lib/codeql-pack.release.yml
M actions/ql/lib/qlpack.yml
M actions/ql/src/CHANGELOG.md
R actions/ql/src/change-notes/2026-04-02-alert-msg-poisoning.md
R actions/ql/src/change-notes/2026-04-02-permissions.md
A actions/ql/src/change-notes/released/0.6.26.md
M actions/ql/src/codeql-pack.release.yml
M actions/ql/src/qlpack.yml
M cpp/ql/lib/CHANGELOG.md
R cpp/ql/lib/change-notes/2026-04-07-autoconf.md
R cpp/ql/lib/change-notes/2026-04-14-throwing.md
A cpp/ql/lib/change-notes/released/10.0.0.md
M cpp/ql/lib/codeql-pack.release.yml
M cpp/ql/lib/qlpack.yml
M cpp/ql/src/CHANGELOG.md
R cpp/ql/src/change-notes/2026-03-23-implicit-function-declaration.md
R cpp/ql/src/change-notes/2026-04-02-comparison-with-wider-type.md
R cpp/ql/src/change-notes/2026-04-02-implicit-function-declaration.md
R cpp/ql/src/change-notes/2026-04-02-integer-multiplication-cast-to-long.md
R cpp/ql/src/change-notes/2026-04-02-suspicious-add-sizeof.md
R cpp/ql/src/change-notes/2026-04-02-wrong-type-format-argument.md
R cpp/ql/src/change-notes/2026-04-16-add-model-for-aligned-alloc.md
A cpp/ql/src/change-notes/released/1.6.1.md
M cpp/ql/src/codeql-pack.release.yml
M cpp/ql/src/qlpack.yml
M csharp/ql/campaigns/Solorigate/lib/CHANGELOG.md
A csharp/ql/campaigns/Solorigate/lib/change-notes/released/1.7.65.md
M csharp/ql/campaigns/Solorigate/lib/codeql-pack.release.yml
M csharp/ql/campaigns/Solorigate/lib/qlpack.yml
M csharp/ql/campaigns/Solorigate/src/CHANGELOG.md
A csharp/ql/campaigns/Solorigate/src/change-notes/released/1.7.65.md
M csharp/ql/campaigns/Solorigate/src/codeql-pack.release.yml
M csharp/ql/campaigns/Solorigate/src/qlpack.yml
M csharp/ql/lib/CHANGELOG.md
R csharp/ql/lib/change-notes/2026-04-01-getlrvalue.md
A csharp/ql/lib/change-notes/released/5.5.0.md
M csharp/ql/lib/codeql-pack.release.yml
M csharp/ql/lib/qlpack.yml
M csharp/ql/src/CHANGELOG.md
R csharp/ql/src/change-notes/2026-04-17-useless-to-string.md
A csharp/ql/src/change-notes/released/1.7.1.md
M csharp/ql/src/codeql-pack.release.yml
M csharp/ql/src/qlpack.yml
M go/ql/consistency-queries/CHANGELOG.md
A go/ql/consistency-queries/change-notes/released/1.0.48.md
M go/ql/consistency-queries/codeql-pack.release.yml
M go/ql/consistency-queries/qlpack.yml
M go/ql/lib/CHANGELOG.md
A go/ql/lib/change-notes/released/7.0.6.md
M go/ql/lib/codeql-pack.release.yml
M go/ql/lib/qlpack.yml
M go/ql/src/CHANGELOG.md
A go/ql/src/change-notes/released/1.6.1.md
M go/ql/src/codeql-pack.release.yml
M go/ql/src/qlpack.yml
M java/ql/lib/CHANGELOG.md
R java/ql/lib/change-notes/2026-04-16-woodstox-xxe.md
A java/ql/lib/change-notes/released/9.0.4.md
M java/ql/lib/codeql-pack.release.yml
M java/ql/lib/qlpack.yml
M java/ql/src/CHANGELOG.md
A java/ql/src/change-notes/released/1.11.1.md
M java/ql/src/codeql-pack.release.yml
M java/ql/src/qlpack.yml
M javascript/ql/lib/CHANGELOG.md
A javascript/ql/lib/change-notes/released/2.6.28.md
M javascript/ql/lib/codeql-pack.release.yml
M javascript/ql/lib/qlpack.yml
M javascript/ql/src/CHANGELOG.md
R javascript/ql/src/change-notes/2026-04-13-fastify-per-route-rate-limit.md
A javascript/ql/src/change-notes/released/2.3.8.md
M javascript/ql/src/codeql-pack.release.yml
M javascript/ql/src/qlpack.yml
M misc/suite-helpers/CHANGELOG.md
A misc/suite-helpers/change-notes/released/1.0.48.md
M misc/suite-helpers/codeql-pack.release.yml
M misc/suite-helpers/qlpack.yml
M python/ql/lib/CHANGELOG.md
R python/ql/lib/change-notes/2026-04-10-support-lazy-keyword.md
A python/ql/lib/change-notes/released/7.0.5.md
M python/ql/lib/codeql-pack.release.yml
M python/ql/lib/qlpack.yml
M python/ql/src/CHANGELOG.md
R python/ql/src/change-notes/2026-03-26-improve-bind-all-interfaces-query.md
A python/ql/src/change-notes/released/1.8.1.md
M python/ql/src/codeql-pack.release.yml
M python/ql/src/qlpack.yml
M ruby/ql/lib/CHANGELOG.md
A ruby/ql/lib/change-notes/released/5.1.16.md
M ruby/ql/lib/codeql-pack.release.yml
M ruby/ql/lib/qlpack.yml
M ruby/ql/src/CHANGELOG.md
A ruby/ql/src/change-notes/released/1.6.1.md
M ruby/ql/src/codeql-pack.release.yml
M ruby/ql/src/qlpack.yml
M rust/ql/lib/CHANGELOG.md
A rust/ql/lib/change-notes/released/0.2.12.md
M rust/ql/lib/codeql-pack.release.yml
M rust/ql/lib/qlpack.yml
M rust/ql/src/CHANGELOG.md
A rust/ql/src/change-notes/released/0.1.33.md
M rust/ql/src/codeql-pack.release.yml
M rust/ql/src/qlpack.yml
M shared/concepts/CHANGELOG.md
A shared/concepts/change-notes/released/0.0.22.md
M shared/concepts/codeql-pack.release.yml
M shared/concepts/qlpack.yml
M shared/controlflow/CHANGELOG.md
A shared/controlflow/change-notes/released/2.0.32.md
M shared/controlflow/codeql-pack.release.yml
M shared/controlflow/qlpack.yml
M shared/dataflow/CHANGELOG.md
A shared/dataflow/change-notes/released/2.1.4.md
M shared/dataflow/codeql-pack.release.yml
M shared/dataflow/qlpack.yml
M shared/mad/CHANGELOG.md
A shared/mad/change-notes/released/1.0.48.md
M shared/mad/codeql-pack.release.yml
M shared/mad/qlpack.yml
M shared/quantum/CHANGELOG.md
A shared/quantum/change-notes/released/0.0.26.md
M shared/quantum/codeql-pack.release.yml
M shared/quantum/qlpack.yml
M shared/rangeanalysis/CHANGELOG.md
A shared/rangeanalysis/change-notes/released/1.0.48.md
M shared/rangeanalysis/codeql-pack.release.yml
M shared/rangeanalysis/qlpack.yml
M shared/regex/CHANGELOG.md
A shared/regex/change-notes/released/1.0.48.md
M shared/regex/codeql-pack.release.yml
M shared/regex/qlpack.yml
M shared/ssa/CHANGELOG.md
A shared/ssa/change-notes/released/2.0.24.md
M shared/ssa/codeql-pack.release.yml
M shared/ssa/qlpack.yml
M shared/threat-models/CHANGELOG.md
A shared/threat-models/change-notes/released/1.0.48.md
M shared/threat-models/codeql-pack.release.yml
M shared/threat-models/qlpack.yml
M shared/tutorial/CHANGELOG.md
A shared/tutorial/change-notes/released/1.0.48.md
M shared/tutorial/codeql-pack.release.yml
M shared/tutorial/qlpack.yml
M shared/typeflow/CHANGELOG.md
A shared/typeflow/change-notes/released/1.0.48.md
M shared/typeflow/codeql-pack.release.yml
M shared/typeflow/qlpack.yml
M shared/typeinference/CHANGELOG.md
A shared/typeinference/change-notes/released/0.0.29.md
M shared/typeinference/codeql-pack.release.yml
M shared/typeinference/qlpack.yml
M shared/typetracking/CHANGELOG.md
A shared/typetracking/change-notes/released/2.0.32.md
M shared/typetracking/codeql-pack.release.yml
M shared/typetracking/qlpack.yml
M shared/typos/CHANGELOG.md
A shared/typos/change-notes/released/1.0.48.md
M shared/typos/codeql-pack.release.yml
M shared/typos/qlpack.yml
M shared/util/CHANGELOG.md
A shared/util/change-notes/released/2.0.35.md
M shared/util/codeql-pack.release.yml
M shared/util/qlpack.yml
M shared/xml/CHANGELOG.md
A shared/xml/change-notes/released/1.0.48.md
M shared/xml/codeql-pack.release.yml
M shared/xml/qlpack.yml
M shared/yaml/CHANGELOG.md
A shared/yaml/change-notes/released/1.0.48.md
M shared/yaml/codeql-pack.release.yml
M shared/yaml/qlpack.yml
M swift/ql/lib/CHANGELOG.md
R swift/ql/lib/change-notes/2026-04-06-swift-6.3.md
A swift/ql/lib/change-notes/released/6.4.0.md
M swift/ql/lib/codeql-pack.release.yml
M swift/ql/lib/qlpack.yml
M swift/ql/src/CHANGELOG.md
A swift/ql/src/change-notes/released/1.3.1.md
M swift/ql/src/codeql-pack.release.yml
M swift/ql/src/qlpack.yml
Log Message:
-----------
Merge pull request #21736 from github/release-prep/2.25.3
Release preparation for version 2.25.3
Commit: a0bab539bb2176af27fd717c78920db60b82229d
https://github.com/krishnprakash/codeql/commit/a0bab539bb2176af27fd717c78920db60b82229d
Author: github-actions[bot] <github-...@github.com>
Date: 2026-04-20 (Mon, 20 Apr 2026)
Changed paths:
M actions/ql/lib/qlpack.yml
M actions/ql/src/qlpack.yml
M cpp/ql/lib/qlpack.yml
M cpp/ql/src/qlpack.yml
M csharp/ql/campaigns/Solorigate/lib/qlpack.yml
M csharp/ql/campaigns/Solorigate/src/qlpack.yml
M csharp/ql/lib/qlpack.yml
M csharp/ql/src/qlpack.yml
M go/ql/consistency-queries/qlpack.yml
M go/ql/lib/qlpack.yml
M go/ql/src/qlpack.yml
M java/ql/lib/qlpack.yml
M java/ql/src/qlpack.yml
M javascript/ql/lib/qlpack.yml
M javascript/ql/src/qlpack.yml
M misc/suite-helpers/qlpack.yml
M python/ql/lib/qlpack.yml
M python/ql/src/qlpack.yml
M ruby/ql/lib/qlpack.yml
M ruby/ql/src/qlpack.yml
M rust/ql/lib/qlpack.yml
M rust/ql/src/qlpack.yml
M shared/concepts/qlpack.yml
M shared/controlflow/qlpack.yml
M shared/dataflow/qlpack.yml
M shared/mad/qlpack.yml
M shared/quantum/qlpack.yml
M shared/rangeanalysis/qlpack.yml
M shared/regex/qlpack.yml
M shared/ssa/qlpack.yml
M shared/threat-models/qlpack.yml
M shared/tutorial/qlpack.yml
M shared/typeflow/qlpack.yml
M shared/typeinference/qlpack.yml
M shared/typetracking/qlpack.yml
M shared/typos/qlpack.yml
M shared/util/qlpack.yml
M shared/xml/qlpack.yml
M shared/yaml/qlpack.yml
M swift/ql/lib/qlpack.yml
M swift/ql/src/qlpack.yml
Log Message:
-----------
Post-release preparation for codeql-cli-2.25.3
Commit: e928c224ae1aa7bc4a9f850a2c2d1522d6e04724
https://github.com/krishnprakash/codeql/commit/e928c224ae1aa7bc4a9f850a2c2d1522d6e04724
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-20 (Mon, 20 Apr 2026)
Changed paths:
M csharp/ql/lib/semmle/code/csharp/controlflow/ControlFlowElement.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/ControlFlowGraph.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/internal/Completion.qll
M shared/controlflow/codeql/controlflow/ControlFlowGraph.qll
Log Message:
-----------
C#/Cfg: Some simple review fixes.
Commit: 3ceb96a45fa3290eaacb7dad20eecf2386d492dd
https://github.com/krishnprakash/codeql/commit/3ceb96a45fa3290eaacb7dad20eecf2386d492dd
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-20 (Mon, 20 Apr 2026)
Changed paths:
M csharp/ql/lib/semmle/code/csharp/controlflow/ControlFlowGraph.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/Guards.qll
R csharp/ql/lib/semmle/code/csharp/controlflow/internal/Completion.qll
Log Message:
-----------
C#: Eliminate Completion.qll.
Commit: b6f50f599283b627b63e4fba830b96c25c878a3a
https://github.com/krishnprakash/codeql/commit/b6f50f599283b627b63e4fba830b96c25c878a3a
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-20 (Mon, 20 Apr 2026)
Changed paths:
M csharp/ql/lib/semmle/code/csharp/controlflow/ControlFlowGraph.qll
Log Message:
-----------
C#: Simplify.
Commit: 9de02b7ae6d1a7cf77fd30d3ad69979b2e7f7e61
https://github.com/krishnprakash/codeql/commit/9de02b7ae6d1a7cf77fd30d3ad69979b2e7f7e61
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-21 (Tue, 21 Apr 2026)
Changed paths:
M csharp/ql/test/library-tests/controlflow/graph/BasicBlock.expected
M csharp/ql/test/library-tests/controlflow/graph/Condition.expected
M csharp/ql/test/library-tests/controlflow/graph/Dominance.expected
M csharp/ql/test/library-tests/controlflow/graph/EnclosingCallable.expected
M csharp/ql/test/library-tests/controlflow/graph/NodeGraph.expected
M csharp/ql/test/library-tests/csharp7/IsFlow.expected
M csharp/ql/test/library-tests/csharp8/ispatternflow.expected
M csharp/ql/test/library-tests/csharp8/switchexprcontrolflow.expected
M shared/controlflow/codeql/controlflow/ControlFlowGraph.qll
Log Message:
-----------
Cfg: Use consistent casing in additional node tags.
Commit: a2a4e8288ebc749ae1b2fa1a7f7c24b71f56f700
https://github.com/krishnprakash/codeql/commit/a2a4e8288ebc749ae1b2fa1a7f7c24b71f56f700
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-21 (Tue, 21 Apr 2026)
Changed paths:
M csharp/ql/campaigns/Solorigate/src/ModifiedFnvFunctionDetection.ql
M csharp/ql/lib/experimental/code/csharp/Cryptography/NonCryptographicHashes.qll
M csharp/ql/lib/semmle/code/csharp/Assignable.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/ControlFlowElement.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/Guards.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/Nullness.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/SSA.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/SignAnalysis.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/BaseSSA.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/DataFlowPrivate.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/SsaImpl.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/SignAnalysisSpecific.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/SsaReadPositionSpecific.qll
M csharp/ql/lib/semmle/code/csharp/frameworks/Format.qll
M csharp/ql/src/Concurrency/UnsynchronizedStaticAccess.ql
M csharp/ql/src/Dead Code/DeadStoreOfLocal.ql
M csharp/ql/src/Likely Bugs/Statements/UseBraces.ql
M csharp/ql/src/Likely Bugs/UncheckedCastInEquals.ql
M csharp/ql/src/Performance/StringBuilderInLoop.ql
M csharp/ql/src/Useless code/DefaultToStringQuery.qll
M csharp/ql/test/library-tests/assignables/AssignableDefinitionNode.ql
M csharp/ql/test/library-tests/csharp7/IsFlow.ql
M csharp/ql/test/library-tests/dataflow/defuse/defUseEquivalence.ql
M csharp/ql/test/library-tests/dataflow/defuse/parameterUseEquivalence.ql
M csharp/ql/test/library-tests/dataflow/defuse/useUseEquivalence.ql
Log Message:
-----------
C#: Deprecate ControlFlowElement.getAControlFlowNode and remove some splitting quantification.
Commit: 58e9bad0a086bf93788621999212bcf446a32b5f
https://github.com/krishnprakash/codeql/commit/58e9bad0a086bf93788621999212bcf446a32b5f
Author: Michael B. Gale <m...@github.com>
Date: 2026-04-21 (Tue, 21 Apr 2026)
Changed paths:
M actions/ql/lib/CHANGELOG.md
R actions/ql/lib/change-notes/2026-03-26-remove-false-positive-sinks.md
A actions/ql/lib/change-notes/released/0.4.34.md
M actions/ql/lib/codeql-pack.release.yml
M actions/ql/lib/qlpack.yml
M actions/ql/src/CHANGELOG.md
R actions/ql/src/change-notes/2026-04-02-alert-msg-poisoning.md
R actions/ql/src/change-notes/2026-04-02-permissions.md
A actions/ql/src/change-notes/released/0.6.26.md
M actions/ql/src/codeql-pack.release.yml
M actions/ql/src/qlpack.yml
M cpp/ql/lib/CHANGELOG.md
R cpp/ql/lib/change-notes/2026-04-07-autoconf.md
R cpp/ql/lib/change-notes/2026-04-14-throwing.md
A cpp/ql/lib/change-notes/released/10.0.0.md
M cpp/ql/lib/codeql-pack.release.yml
M cpp/ql/lib/qlpack.yml
M cpp/ql/src/CHANGELOG.md
R cpp/ql/src/change-notes/2026-03-23-implicit-function-declaration.md
R cpp/ql/src/change-notes/2026-04-02-comparison-with-wider-type.md
R cpp/ql/src/change-notes/2026-04-02-implicit-function-declaration.md
R cpp/ql/src/change-notes/2026-04-02-integer-multiplication-cast-to-long.md
R cpp/ql/src/change-notes/2026-04-02-suspicious-add-sizeof.md
R cpp/ql/src/change-notes/2026-04-02-wrong-type-format-argument.md
R cpp/ql/src/change-notes/2026-04-16-add-model-for-aligned-alloc.md
A cpp/ql/src/change-notes/released/1.6.1.md
M cpp/ql/src/codeql-pack.release.yml
M cpp/ql/src/qlpack.yml
M csharp/ql/campaigns/Solorigate/lib/CHANGELOG.md
A csharp/ql/campaigns/Solorigate/lib/change-notes/released/1.7.65.md
M csharp/ql/campaigns/Solorigate/lib/codeql-pack.release.yml
M csharp/ql/campaigns/Solorigate/lib/qlpack.yml
M csharp/ql/campaigns/Solorigate/src/CHANGELOG.md
A csharp/ql/campaigns/Solorigate/src/change-notes/released/1.7.65.md
M csharp/ql/campaigns/Solorigate/src/codeql-pack.release.yml
M csharp/ql/campaigns/Solorigate/src/qlpack.yml
M csharp/ql/lib/CHANGELOG.md
R csharp/ql/lib/change-notes/2026-04-01-getlrvalue.md
A csharp/ql/lib/change-notes/released/5.5.0.md
M csharp/ql/lib/codeql-pack.release.yml
M csharp/ql/lib/qlpack.yml
M csharp/ql/src/CHANGELOG.md
R csharp/ql/src/change-notes/2026-04-17-useless-to-string.md
A csharp/ql/src/change-notes/released/1.7.1.md
M csharp/ql/src/codeql-pack.release.yml
M csharp/ql/src/qlpack.yml
M go/ql/consistency-queries/CHANGELOG.md
A go/ql/consistency-queries/change-notes/released/1.0.48.md
M go/ql/consistency-queries/codeql-pack.release.yml
M go/ql/consistency-queries/qlpack.yml
M go/ql/lib/CHANGELOG.md
A go/ql/lib/change-notes/released/7.0.6.md
M go/ql/lib/codeql-pack.release.yml
M go/ql/lib/qlpack.yml
M go/ql/src/CHANGELOG.md
A go/ql/src/change-notes/released/1.6.1.md
M go/ql/src/codeql-pack.release.yml
M go/ql/src/qlpack.yml
M java/ql/lib/CHANGELOG.md
R java/ql/lib/change-notes/2026-04-16-woodstox-xxe.md
A java/ql/lib/change-notes/released/9.0.4.md
M java/ql/lib/codeql-pack.release.yml
M java/ql/lib/qlpack.yml
M java/ql/src/CHANGELOG.md
A java/ql/src/change-notes/released/1.11.1.md
M java/ql/src/codeql-pack.release.yml
M java/ql/src/qlpack.yml
M javascript/ql/lib/CHANGELOG.md
A javascript/ql/lib/change-notes/released/2.6.28.md
M javascript/ql/lib/codeql-pack.release.yml
M javascript/ql/lib/qlpack.yml
M javascript/ql/src/CHANGELOG.md
R javascript/ql/src/change-notes/2026-04-13-fastify-per-route-rate-limit.md
A javascript/ql/src/change-notes/released/2.3.8.md
M javascript/ql/src/codeql-pack.release.yml
M javascript/ql/src/qlpack.yml
M misc/suite-helpers/CHANGELOG.md
A misc/suite-helpers/change-notes/released/1.0.48.md
M misc/suite-helpers/codeql-pack.release.yml
M misc/suite-helpers/qlpack.yml
M python/ql/lib/CHANGELOG.md
R python/ql/lib/change-notes/2026-04-10-support-lazy-keyword.md
A python/ql/lib/change-notes/released/7.0.5.md
M python/ql/lib/codeql-pack.release.yml
M python/ql/lib/qlpack.yml
M python/ql/src/CHANGELOG.md
R python/ql/src/change-notes/2026-03-26-improve-bind-all-interfaces-query.md
A python/ql/src/change-notes/released/1.8.1.md
M python/ql/src/codeql-pack.release.yml
M python/ql/src/qlpack.yml
M ruby/ql/lib/CHANGELOG.md
A ruby/ql/lib/change-notes/released/5.1.16.md
M ruby/ql/lib/codeql-pack.release.yml
M ruby/ql/lib/qlpack.yml
M ruby/ql/src/CHANGELOG.md
A ruby/ql/src/change-notes/released/1.6.1.md
M ruby/ql/src/codeql-pack.release.yml
M ruby/ql/src/qlpack.yml
M rust/ql/lib/CHANGELOG.md
A rust/ql/lib/change-notes/released/0.2.12.md
M rust/ql/lib/codeql-pack.release.yml
M rust/ql/lib/qlpack.yml
M rust/ql/src/CHANGELOG.md
A rust/ql/src/change-notes/released/0.1.33.md
M rust/ql/src/codeql-pack.release.yml
M rust/ql/src/qlpack.yml
M shared/concepts/CHANGELOG.md
A shared/concepts/change-notes/released/0.0.22.md
M shared/concepts/codeql-pack.release.yml
M shared/concepts/qlpack.yml
M shared/controlflow/CHANGELOG.md
A shared/controlflow/change-notes/released/2.0.32.md
M shared/controlflow/codeql-pack.release.yml
M shared/controlflow/qlpack.yml
M shared/dataflow/CHANGELOG.md
A shared/dataflow/change-notes/released/2.1.4.md
M shared/dataflow/codeql-pack.release.yml
M shared/dataflow/qlpack.yml
M shared/mad/CHANGELOG.md
A shared/mad/change-notes/released/1.0.48.md
M shared/mad/codeql-pack.release.yml
M shared/mad/qlpack.yml
M shared/quantum/CHANGELOG.md
A shared/quantum/change-notes/released/0.0.26.md
M shared/quantum/codeql-pack.release.yml
M shared/quantum/qlpack.yml
M shared/rangeanalysis/CHANGELOG.md
A shared/rangeanalysis/change-notes/released/1.0.48.md
M shared/rangeanalysis/codeql-pack.release.yml
M shared/rangeanalysis/qlpack.yml
M shared/regex/CHANGELOG.md
A shared/regex/change-notes/released/1.0.48.md
M shared/regex/codeql-pack.release.yml
M shared/regex/qlpack.yml
M shared/ssa/CHANGELOG.md
A shared/ssa/change-notes/released/2.0.24.md
M shared/ssa/codeql-pack.release.yml
M shared/ssa/qlpack.yml
M shared/threat-models/CHANGELOG.md
A shared/threat-models/change-notes/released/1.0.48.md
M shared/threat-models/codeql-pack.release.yml
M shared/threat-models/qlpack.yml
M shared/tutorial/CHANGELOG.md
A shared/tutorial/change-notes/released/1.0.48.md
M shared/tutorial/codeql-pack.release.yml
M shared/tutorial/qlpack.yml
M shared/typeflow/CHANGELOG.md
A shared/typeflow/change-notes/released/1.0.48.md
M shared/typeflow/codeql-pack.release.yml
M shared/typeflow/qlpack.yml
M shared/typeinference/CHANGELOG.md
A shared/typeinference/change-notes/released/0.0.29.md
M shared/typeinference/codeql-pack.release.yml
M shared/typeinference/qlpack.yml
M shared/typetracking/CHANGELOG.md
A shared/typetracking/change-notes/released/2.0.32.md
M shared/typetracking/codeql-pack.release.yml
M shared/typetracking/qlpack.yml
M shared/typos/CHANGELOG.md
A shared/typos/change-notes/released/1.0.48.md
M shared/typos/codeql-pack.release.yml
M shared/typos/qlpack.yml
M shared/util/CHANGELOG.md
A shared/util/change-notes/released/2.0.35.md
M shared/util/codeql-pack.release.yml
M shared/util/qlpack.yml
M shared/xml/CHANGELOG.md
A shared/xml/change-notes/released/1.0.48.md
M shared/xml/codeql-pack.release.yml
M shared/xml/qlpack.yml
M shared/yaml/CHANGELOG.md
A shared/yaml/change-notes/released/1.0.48.md
M shared/yaml/codeql-pack.release.yml
M shared/yaml/qlpack.yml
M swift/ql/lib/CHANGELOG.md
R swift/ql/lib/change-notes/2026-04-06-swift-6.3.md
A swift/ql/lib/change-notes/released/6.4.0.md
M swift/ql/lib/codeql-pack.release.yml
M swift/ql/lib/qlpack.yml
M swift/ql/src/CHANGELOG.md
A swift/ql/src/change-notes/released/1.3.1.md
M swift/ql/src/codeql-pack.release.yml
M swift/ql/src/qlpack.yml
Log Message:
-----------
Merge pull request #21737 from github/post-release-prep/codeql-cli-2.25.3
Post-release preparation for codeql-cli-2.25.3
Commit: 67c0515d3c39d98378d43ef0183277b52532908e
https://github.com/krishnprakash/codeql/commit/67c0515d3c39d98378d43ef0183277b52532908e
Author: Anders Schack-Mulligen <ascha...@github.com>
Date: 2026-04-21 (Tue, 21 Apr 2026)
Changed paths:
M shared/controlflow/codeql/controlflow/ControlFlowGraph.qll
Log Message:
-----------
Cfg: Undo consistency check change.
Commit: c91b5b3c2e9443aa892dddbe3056adee79ba3eb1
https://github.com/krishnprakash/codeql/commit/c91b5b3c2e9443aa892dddbe3056adee79ba3eb1
Author: Owen Mansel-Chan <62447351...@users.noreply.github.com>
Date: 2026-04-21 (Tue, 21 Apr 2026)
Changed paths:
A java/ql/lib/change-notes/2026-04-04-sensitive-log-fp-reduction.md
M java/ql/lib/semmle/code/java/security/SensitiveActions.qll
M java/ql/test/query-tests/security/CWE-532/SensitiveLogInfo.expected
M java/ql/test/query-tests/security/CWE-532/Test.java
Log Message:
-----------
Merge pull request #21650 from MarkLee131/fix/sensitive-log-fp-regex
Java: reduce false positives in sensitive-log
Commit: 6efb21314ad641717f566524433159dd01ce1ef8
https://github.com/krishnprakash/codeql/commit/6efb21314ad641717f566524433159dd01ce1ef8
Author: Owen Mansel-Chan <62447351...@users.noreply.github.com>
Date: 2026-04-21 (Tue, 21 Apr 2026)
Changed paths:
A cpp/ql/lib/change-notes/2026-03-20-data-extensions-barriers.md
A csharp/ql/lib/change-notes/2026-03-20-data-extensions-barriers.md
M docs/codeql/codeql-language-guides/customizing-library-models-for-actions.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-cpp.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-csharp.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-go.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-java-and-kotlin.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-javascript.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-python.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-ruby.rst
M docs/ql-libraries/dataflow/dataflow.md
A go/ql/lib/change-notes/2026-03-20-data-extensions-barriers.md
A java/ql/lib/change-notes/2026-03-20-data-extensions-barriers.md
A javascript/ql/lib/change-notes/2026-03-20-data-extensions-barriers.md
A python/ql/lib/change-notes/2026-03-20-data-extensions-barriers.md
M ruby/ql/docs/flow_summaries.md
A ruby/ql/lib/change-notes/2026-03-20-data-extensions-barriers.md
A rust/ql/lib/change-notes/2026-03-20-data-extensions-barriers.md
Log Message:
-----------
Merge pull request #21523 from owen-mc/docs/mad/barriers
Document models-as-data barriers and barrier guards and add change notes
Commit: f912731cd4880aab09a3fb236ec7c558785f126e
https://github.com/krishnprakash/codeql/commit/f912731cd4880aab09a3fb236ec7c558785f126e
Author: Anders Schack-Mulligen <ascha...@users.noreply.github.com>
Date: 2026-04-21 (Tue, 21 Apr 2026)
Changed paths:
M csharp/ql/campaigns/Solorigate/src/ModifiedFnvFunctionDetection.ql
M csharp/ql/consistency-queries/CfgConsistency.ql
M csharp/ql/consistency-queries/DataFlowConsistency.ql
M csharp/ql/consistency-queries/VariableCaptureConsistency.ql
A csharp/ql/lib/change-notes/2026-04-13-cfg.md
M csharp/ql/lib/experimental/code/csharp/Cryptography/NonCryptographicHashes.qll
M csharp/ql/lib/printCfg.ql
M csharp/ql/lib/semmle/code/csharp/Assignable.qll
M csharp/ql/lib/semmle/code/csharp/Caching.qll
M csharp/ql/lib/semmle/code/csharp/Callable.qll
M csharp/ql/lib/semmle/code/csharp/ExprOrStmtParent.qll
R csharp/ql/lib/semmle/code/csharp/controlflow/BasicBlocks.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/ControlFlowElement.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/ControlFlowGraph.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/ControlFlowReachability.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/Guards.qll
R csharp/ql/lib/semmle/code/csharp/controlflow/internal/Completion.qll
R csharp/ql/lib/semmle/code/csharp/controlflow/internal/ControlFlowGraphImpl.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/internal/NonReturning.qll
R csharp/ql/lib/semmle/code/csharp/controlflow/internal/Splitting.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/Nullness.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/SSA.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/SignAnalysis.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/BaseSSA.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/DataFlowDispatch.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/DataFlowPrivate.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/DataFlowPublic.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/SsaImpl.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/TaintTrackingPublic.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/BoundSpecific.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/ConstantUtils.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/ModulusAnalysisSpecific.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/RangeUtils.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/SignAnalysisSpecific.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/SsaReadPositionSpecific.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/SsaUtils.qll
M csharp/ql/lib/semmle/code/csharp/dispatch/Dispatch.qll
M csharp/ql/lib/semmle/code/csharp/exprs/Call.qll
M csharp/ql/lib/semmle/code/csharp/frameworks/Format.qll
M csharp/ql/lib/semmle/code/csharp/security/dataflow/ConditionalBypassQuery.qll
M csharp/ql/src/Bad Practices/Control-Flow/ConstantCondition.ql
M csharp/ql/src/Concurrency/UnsynchronizedStaticAccess.ql
M csharp/ql/src/Dead Code/DeadStoreOfLocal.ql
M csharp/ql/src/Likely Bugs/NestedLoopsSameVariable.ql
M csharp/ql/src/Likely Bugs/Statements/UseBraces.ql
M csharp/ql/src/Likely Bugs/UncheckedCastInEquals.ql
M csharp/ql/src/Performance/StringBuilderInLoop.ql
M csharp/ql/src/Security Features/CWE-384/AbandonSession.ql
M csharp/ql/src/Useless code/DefaultToStringQuery.qll
M csharp/ql/test/library-tests/assignables/AssignableDefinitionNode.ql
M csharp/ql/test/library-tests/controlflow/graph/BasicBlock.expected
R csharp/ql/test/library-tests/controlflow/graph/CONSISTENCY/CfgConsistency.expected
M csharp/ql/test/library-tests/controlflow/graph/Common.qll
M csharp/ql/test/library-tests/controlflow/graph/Condition.expected
M csharp/ql/test/library-tests/controlflow/graph/Condition.ql
M csharp/ql/test/library-tests/controlflow/graph/Dominance.expected
M csharp/ql/test/library-tests/controlflow/graph/EnclosingCallable.expected
M csharp/ql/test/library-tests/controlflow/graph/EnclosingCallable.ql
M csharp/ql/test/library-tests/controlflow/graph/EntryElement.expected
M csharp/ql/test/library-tests/controlflow/graph/EntryElement.ql
R csharp/ql/test/library-tests/controlflow/graph/ExitElement.expected
R csharp/ql/test/library-tests/controlflow/graph/ExitElement.ql
M csharp/ql/test/library-tests/controlflow/graph/NodeGraph.expected
M csharp/ql/test/library-tests/controlflow/graph/NodeGraph.ql
M csharp/ql/test/library-tests/controlflow/graph/Nodes.expected
M csharp/ql/test/library-tests/controlflow/graph/Nodes.ql
M csharp/ql/test/library-tests/controlflow/guards-large/GuardedExpr.expected
M csharp/ql/test/library-tests/controlflow/guards/BooleanGuardedExpr.expected
M csharp/ql/test/library-tests/controlflow/guards/GuardedControlFlowNode.expected
M csharp/ql/test/library-tests/controlflow/guards/GuardedExpr.expected
M csharp/ql/test/library-tests/controlflow/guards/Guards.cs
M csharp/ql/test/library-tests/csharp11/signAnalysis.ql
M csharp/ql/test/library-tests/csharp7/IsFlow.expected
M csharp/ql/test/library-tests/csharp7/IsFlow.ql
M csharp/ql/test/library-tests/csharp7/LocalTaintFlow.expected
M csharp/ql/test/library-tests/csharp8/NullCoalescingControlFlow.expected
M csharp/ql/test/library-tests/csharp8/NullCoalescingControlFlow.ql
M csharp/ql/test/library-tests/csharp8/NullableRefTypes.expected
M csharp/ql/test/library-tests/csharp8/NullableRefTypes.ql
M csharp/ql/test/library-tests/csharp8/UsingControlFlow.expected
M csharp/ql/test/library-tests/csharp8/UsingControlFlow.ql
M csharp/ql/test/library-tests/csharp8/ispatternflow.expected
M csharp/ql/test/library-tests/csharp8/ispatternflow.ql
M csharp/ql/test/library-tests/csharp8/switchexprcontrolflow.expected
M csharp/ql/test/library-tests/csharp8/switchexprcontrolflow.ql
M csharp/ql/test/library-tests/csharp8/switchstmtctrlflow.expected
M csharp/ql/test/library-tests/csharp8/switchstmtctrlflow.ql
M csharp/ql/test/library-tests/dataflow/call-sensitivity/CallSensitivityFlow.expected
M csharp/ql/test/library-tests/dataflow/defuse/defUseEquivalence.ql
M csharp/ql/test/library-tests/dataflow/defuse/parameterUseEquivalence.ql
M csharp/ql/test/library-tests/dataflow/defuse/useUseEquivalence.ql
M csharp/ql/test/library-tests/dataflow/local/DataFlowStep.expected
M csharp/ql/test/library-tests/dataflow/local/TaintTrackingStep.expected
M csharp/ql/test/library-tests/dataflow/modulusanalysis/ModulusAnalysis.expected
M csharp/ql/test/library-tests/dataflow/modulusanalysis/ModulusAnalysis.ql
M csharp/ql/test/library-tests/dataflow/signanalysis/MissingSign.ql
M csharp/ql/test/library-tests/dataflow/signanalysis/SignAnalysis.expected
M csharp/ql/test/library-tests/dataflow/signanalysis/SignAnalysis.ql
M csharp/ql/test/library-tests/dataflow/ssa-large/countssa.expected
M csharp/ql/test/library-tests/dataflow/ssa-large/countssa.ql
M csharp/ql/test/library-tests/dataflow/ssa/SSAPhi.expected
M csharp/ql/test/library-tests/dataflow/ssa/SSAPhiRead.expected
M csharp/ql/test/library-tests/dataflow/ssa/SSAPhiRead.ql
M csharp/ql/test/library-tests/dataflow/ssa/SsaDef.expected
M csharp/ql/test/library-tests/dataflow/ssa/SsaDefElement.expected
M csharp/ql/test/library-tests/dataflow/ssa/SsaRead.expected
M csharp/ql/test/library-tests/dataflow/ssa/SsaUltimateDef.expected
M csharp/ql/test/library-tests/goto/Goto1.expected
M csharp/ql/test/library-tests/goto/Goto1.ql
M csharp/ql/test/library-tests/obinit/ObInit.expected
M csharp/ql/test/library-tests/obinit/ObInit.ql
M csharp/ql/test/library-tests/security/dataflow/flowsources/StoredFlowSources.expected
M csharp/ql/test/library-tests/standalone/controlflow/cfg.expected
M csharp/ql/test/library-tests/standalone/controlflow/cfg.ql
M java/ql/lib/semmle/code/java/ControlFlowGraph.qll
M shared/controlflow/codeql/controlflow/ControlFlowGraph.qll
Log Message:
-----------
Merge pull request #21565 from aschackmull/csharp/cfg2
C#: Replace CFG with the shared implementation
Commit: 5a069e1838ad30de1267a00e347110762949600b
https://github.com/krishnprakash/codeql/commit/5a069e1838ad30de1267a00e347110762949600b
Author: Phileco <132178579+k...@users.noreply.github.com>
Date: 2026-04-21 (Tue, 21 Apr 2026)
Changed paths:
M actions/ql/lib/CHANGELOG.md
R actions/ql/lib/change-notes/2026-03-26-remove-false-positive-sinks.md
A actions/ql/lib/change-notes/released/0.4.34.md
M actions/ql/lib/codeql-pack.release.yml
M actions/ql/lib/qlpack.yml
M actions/ql/src/CHANGELOG.md
R actions/ql/src/change-notes/2026-04-02-alert-msg-poisoning.md
R actions/ql/src/change-notes/2026-04-02-permissions.md
A actions/ql/src/change-notes/released/0.6.26.md
M actions/ql/src/codeql-pack.release.yml
M actions/ql/src/qlpack.yml
M cpp/ql/lib/CHANGELOG.md
A cpp/ql/lib/change-notes/2026-03-20-data-extensions-barriers.md
R cpp/ql/lib/change-notes/2026-04-07-autoconf.md
R cpp/ql/lib/change-notes/2026-04-14-throwing.md
A cpp/ql/lib/change-notes/released/10.0.0.md
M cpp/ql/lib/codeql-pack.release.yml
M cpp/ql/lib/qlpack.yml
M cpp/ql/src/CHANGELOG.md
R cpp/ql/src/change-notes/2026-03-23-implicit-function-declaration.md
R cpp/ql/src/change-notes/2026-04-02-comparison-with-wider-type.md
R cpp/ql/src/change-notes/2026-04-02-implicit-function-declaration.md
R cpp/ql/src/change-notes/2026-04-02-integer-multiplication-cast-to-long.md
R cpp/ql/src/change-notes/2026-04-02-suspicious-add-sizeof.md
R cpp/ql/src/change-notes/2026-04-02-wrong-type-format-argument.md
R cpp/ql/src/change-notes/2026-04-16-add-model-for-aligned-alloc.md
A cpp/ql/src/change-notes/released/1.6.1.md
M cpp/ql/src/codeql-pack.release.yml
M cpp/ql/src/qlpack.yml
M csharp/ql/campaigns/Solorigate/lib/CHANGELOG.md
A csharp/ql/campaigns/Solorigate/lib/change-notes/released/1.7.65.md
M csharp/ql/campaigns/Solorigate/lib/codeql-pack.release.yml
M csharp/ql/campaigns/Solorigate/lib/qlpack.yml
M csharp/ql/campaigns/Solorigate/src/CHANGELOG.md
M csharp/ql/campaigns/Solorigate/src/ModifiedFnvFunctionDetection.ql
A csharp/ql/campaigns/Solorigate/src/change-notes/released/1.7.65.md
M csharp/ql/campaigns/Solorigate/src/codeql-pack.release.yml
M csharp/ql/campaigns/Solorigate/src/qlpack.yml
M csharp/ql/consistency-queries/CfgConsistency.ql
M csharp/ql/consistency-queries/DataFlowConsistency.ql
M csharp/ql/consistency-queries/VariableCaptureConsistency.ql
M csharp/ql/lib/CHANGELOG.md
A csharp/ql/lib/change-notes/2026-03-20-data-extensions-barriers.md
R csharp/ql/lib/change-notes/2026-04-01-getlrvalue.md
A csharp/ql/lib/change-notes/2026-04-13-cfg.md
A csharp/ql/lib/change-notes/released/5.5.0.md
M csharp/ql/lib/codeql-pack.release.yml
M csharp/ql/lib/experimental/code/csharp/Cryptography/NonCryptographicHashes.qll
M csharp/ql/lib/printCfg.ql
M csharp/ql/lib/qlpack.yml
M csharp/ql/lib/semmle/code/csharp/Assignable.qll
M csharp/ql/lib/semmle/code/csharp/Caching.qll
M csharp/ql/lib/semmle/code/csharp/Callable.qll
M csharp/ql/lib/semmle/code/csharp/ExprOrStmtParent.qll
R csharp/ql/lib/semmle/code/csharp/controlflow/BasicBlocks.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/ControlFlowElement.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/ControlFlowGraph.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/ControlFlowReachability.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/Guards.qll
R csharp/ql/lib/semmle/code/csharp/controlflow/internal/Completion.qll
R csharp/ql/lib/semmle/code/csharp/controlflow/internal/ControlFlowGraphImpl.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/internal/NonReturning.qll
R csharp/ql/lib/semmle/code/csharp/controlflow/internal/Splitting.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/Nullness.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/SSA.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/SignAnalysis.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/BaseSSA.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/DataFlowDispatch.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/DataFlowPrivate.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/DataFlowPublic.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/SsaImpl.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/TaintTrackingPublic.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/BoundSpecific.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/ConstantUtils.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/ModulusAnalysisSpecific.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/RangeUtils.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/SignAnalysisSpecific.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/SsaReadPositionSpecific.qll
M csharp/ql/lib/semmle/code/csharp/dataflow/internal/rangeanalysis/SsaUtils.qll
M csharp/ql/lib/semmle/code/csharp/dispatch/Dispatch.qll
M csharp/ql/lib/semmle/code/csharp/exprs/Call.qll
M csharp/ql/lib/semmle/code/csharp/frameworks/Format.qll
M csharp/ql/lib/semmle/code/csharp/security/dataflow/ConditionalBypassQuery.qll
M csharp/ql/src/Bad Practices/Control-Flow/ConstantCondition.ql
M csharp/ql/src/CHANGELOG.md
M csharp/ql/src/Concurrency/UnsynchronizedStaticAccess.ql
M csharp/ql/src/Dead Code/DeadStoreOfLocal.ql
M csharp/ql/src/Likely Bugs/NestedLoopsSameVariable.ql
M csharp/ql/src/Likely Bugs/Statements/UseBraces.ql
M csharp/ql/src/Likely Bugs/UncheckedCastInEquals.ql
M csharp/ql/src/Performance/StringBuilderInLoop.ql
M csharp/ql/src/Security Features/CWE-384/AbandonSession.ql
M csharp/ql/src/Useless code/DefaultToStringQuery.qll
R csharp/ql/src/change-notes/2026-04-17-useless-to-string.md
A csharp/ql/src/change-notes/released/1.7.1.md
M csharp/ql/src/codeql-pack.release.yml
M csharp/ql/src/qlpack.yml
M csharp/ql/test/library-tests/assignables/AssignableDefinitionNode.ql
M csharp/ql/test/library-tests/controlflow/graph/BasicBlock.expected
R csharp/ql/test/library-tests/controlflow/graph/CONSISTENCY/CfgConsistency.expected
M csharp/ql/test/library-tests/controlflow/graph/Common.qll
M csharp/ql/test/library-tests/controlflow/graph/Condition.expected
M csharp/ql/test/library-tests/controlflow/graph/Condition.ql
M csharp/ql/test/library-tests/controlflow/graph/Dominance.expected
M csharp/ql/test/library-tests/controlflow/graph/EnclosingCallable.expected
M csharp/ql/test/library-tests/controlflow/graph/EnclosingCallable.ql
M csharp/ql/test/library-tests/controlflow/graph/EntryElement.expected
M csharp/ql/test/library-tests/controlflow/graph/EntryElement.ql
R csharp/ql/test/library-tests/controlflow/graph/ExitElement.expected
R csharp/ql/test/library-tests/controlflow/graph/ExitElement.ql
M csharp/ql/test/library-tests/controlflow/graph/NodeGraph.expected
M csharp/ql/test/library-tests/controlflow/graph/NodeGraph.ql
M csharp/ql/test/library-tests/controlflow/graph/Nodes.expected
M csharp/ql/test/library-tests/controlflow/graph/Nodes.ql
M csharp/ql/test/library-tests/controlflow/guards-large/GuardedExpr.expected
M csharp/ql/test/library-tests/controlflow/guards/BooleanGuardedExpr.expected
M csharp/ql/test/library-tests/controlflow/guards/GuardedControlFlowNode.expected
M csharp/ql/test/library-tests/controlflow/guards/GuardedExpr.expected
M csharp/ql/test/library-tests/controlflow/guards/Guards.cs
M csharp/ql/test/library-tests/csharp11/signAnalysis.ql
M csharp/ql/test/library-tests/csharp7/IsFlow.expected
M csharp/ql/test/library-tests/csharp7/IsFlow.ql
M csharp/ql/test/library-tests/csharp7/LocalTaintFlow.expected
M csharp/ql/test/library-tests/csharp8/NullCoalescingControlFlow.expected
M csharp/ql/test/library-tests/csharp8/NullCoalescingControlFlow.ql
M csharp/ql/test/library-tests/csharp8/NullableRefTypes.expected
M csharp/ql/test/library-tests/csharp8/NullableRefTypes.ql
M csharp/ql/test/library-tests/csharp8/UsingControlFlow.expected
M csharp/ql/test/library-tests/csharp8/UsingControlFlow.ql
M csharp/ql/test/library-tests/csharp8/ispatternflow.expected
M csharp/ql/test/library-tests/csharp8/ispatternflow.ql
M csharp/ql/test/library-tests/csharp8/switchexprcontrolflow.expected
M csharp/ql/test/library-tests/csharp8/switchexprcontrolflow.ql
M csharp/ql/test/library-tests/csharp8/switchstmtctrlflow.expected
M csharp/ql/test/library-tests/csharp8/switchstmtctrlflow.ql
M csharp/ql/test/library-tests/dataflow/call-sensitivity/CallSensitivityFlow.expected
M csharp/ql/test/library-tests/dataflow/defuse/defUseEquivalence.ql
M csharp/ql/test/library-tests/dataflow/defuse/parameterUseEquivalence.ql
M csharp/ql/test/library-tests/dataflow/defuse/useUseEquivalence.ql
M csharp/ql/test/library-tests/dataflow/local/DataFlowStep.expected
M csharp/ql/test/library-tests/dataflow/local/TaintTrackingStep.expected
M csharp/ql/test/library-tests/dataflow/modulusanalysis/ModulusAnalysis.expected
M csharp/ql/test/library-tests/dataflow/modulusanalysis/ModulusAnalysis.ql
M csharp/ql/test/library-tests/dataflow/signanalysis/MissingSign.ql
M csharp/ql/test/library-tests/dataflow/signanalysis/SignAnalysis.expected
M csharp/ql/test/library-tests/dataflow/signanalysis/SignAnalysis.ql
M csharp/ql/test/library-tests/dataflow/ssa-large/countssa.expected
M csharp/ql/test/library-tests/dataflow/ssa-large/countssa.ql
M csharp/ql/test/library-tests/dataflow/ssa/SSAPhi.expected
M csharp/ql/test/library-tests/dataflow/ssa/SSAPhiRead.expected
M csharp/ql/test/library-tests/dataflow/ssa/SSAPhiRead.ql
M csharp/ql/test/library-tests/dataflow/ssa/SsaDef.expected
M csharp/ql/test/library-tests/dataflow/ssa/SsaDefElement.expected
M csharp/ql/test/library-tests/dataflow/ssa/SsaRead.expected
M csharp/ql/test/library-tests/dataflow/ssa/SsaUltimateDef.expected
M csharp/ql/test/library-tests/goto/Goto1.expected
M csharp/ql/test/library-tests/goto/Goto1.ql
M csharp/ql/test/library-tests/obinit/ObInit.expected
M csharp/ql/test/library-tests/obinit/ObInit.ql
M csharp/ql/test/library-tests/security/dataflow/flowsources/StoredFlowSources.expected
M csharp/ql/test/library-tests/standalone/controlflow/cfg.expected
M csharp/ql/test/library-tests/standalone/controlflow/cfg.ql
M docs/codeql/codeql-language-guides/customizing-library-models-for-actions.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-cpp.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-csharp.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-go.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-java-and-kotlin.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-javascript.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-python.rst
M docs/codeql/codeql-language-guides/customizing-library-models-for-ruby.rst
M docs/ql-libraries/dataflow/dataflow.md
M go/ql/consistency-queries/CHANGELOG.md
A go/ql/consistency-queries/change-notes/released/1.0.48.md
M go/ql/consistency-queries/codeql-pack.release.yml
M go/ql/consistency-queries/qlpack.yml
M go/ql/lib/CHANGELOG.md
A go/ql/lib/change-notes/2026-03-20-data-extensions-barriers.md
A go/ql/lib/change-notes/released/7.0.6.md
M go/ql/lib/codeql-pack.release.yml
M go/ql/lib/qlpack.yml
M go/ql/src/CHANGELOG.md
A go/ql/src/change-notes/released/1.6.1.md
M go/ql/src/codeql-pack.release.yml
M go/ql/src/qlpack.yml
M java/ql/lib/CHANGELOG.md
A java/ql/lib/change-notes/2026-03-20-data-extensions-barriers.md
A java/ql/lib/change-notes/2026-04-04-sensitive-log-fp-reduction.md
R java/ql/lib/change-notes/2026-04-16-woodstox-xxe.md
A java/ql/lib/change-notes/released/9.0.4.md
M java/ql/lib/codeql-pack.release.yml
M java/ql/lib/qlpack.yml
M java/ql/lib/semmle/code/java/ControlFlowGraph.qll
M java/ql/lib/semmle/code/java/security/SensitiveActions.qll
M java/ql/src/CHANGELOG.md
A java/ql/src/change-notes/released/1.11.1.md
M java/ql/src/codeql-pack.release.yml
M java/ql/src/qlpack.yml
M java/ql/test/query-tests/security/CWE-532/SensitiveLogInfo.expected
M java/ql/test/query-tests/security/CWE-532/Test.java
M javascript/ql/lib/CHANGELOG.md
A javascript/ql/lib/change-notes/2026-03-20-data-extensions-barriers.md
A javascript/ql/lib/change-notes/released/2.6.28.md
M javascript/ql/lib/codeql-pack.release.yml
M javascript/ql/lib/qlpack.yml
M javascript/ql/src/CHANGELOG.md
R javascript/ql/src/change-notes/2026-04-13-fastify-per-route-rate-limit.md
A javascript/ql/src/change-notes/released/2.3.8.md
M javascript/ql/src/codeql-pack.release.yml
M javascript/ql/src/qlpack.yml
M misc/suite-helpers/CHANGELOG.md
A misc/suite-helpers/change-notes/released/1.0.48.md
M misc/suite-helpers/codeql-pack.release.yml
M misc/suite-helpers/qlpack.yml
M python/ql/lib/CHANGELOG.md
A python/ql/lib/change-notes/2026-03-20-data-extensions-barriers.md
R python/ql/lib/change-notes/2026-04-10-support-lazy-keyword.md
A python/ql/lib/change-notes/released/7.0.5.md
M python/ql/lib/codeql-pack.release.yml
M python/ql/lib/qlpack.yml
M python/ql/src/CHANGELOG.md
R python/ql/src/change-notes/2026-03-26-improve-bind-all-interfaces-query.md
A python/ql/src/change-notes/released/1.8.1.md
M python/ql/src/codeql-pack.release.yml
M python/ql/src/qlpack.yml
M ruby/ql/docs/flow_summaries.md
M ruby/ql/lib/CHANGELOG.md
A ruby/ql/lib/change-notes/2026-03-20-data-extensions-barriers.md
A ruby/ql/lib/change-notes/released/5.1.16.md
M ruby/ql/lib/codeql-pack.release.yml
M ruby/ql/lib/qlpack.yml
M ruby/ql/src/CHANGELOG.md
A ruby/ql/src/change-notes/released/1.6.1.md
M ruby/ql/src/codeql-pack.release.yml
M ruby/ql/src/qlpack.yml
M rust/ql/lib/CHANGELOG.md
A rust/ql/lib/change-notes/2026-03-20-data-extensions-barriers.md
A rust/ql/lib/change-notes/released/0.2.12.md
M rust/ql/lib/codeql-pack.release.yml
M rust/ql/lib/qlpack.yml
M rust/ql/src/CHANGELOG.md
A rust/ql/src/change-notes/released/0.1.33.md
M rust/ql/src/codeql-pack.release.yml
M rust/ql/src/qlpack.yml
M shared/concepts/CHANGELOG.md
A shared/concepts/change-notes/released/0.0.22.md
M shared/concepts/codeql-pack.release.yml
M shared/concepts/qlpack.yml
M shared/controlflow/CHANGELOG.md
A shared/controlflow/change-notes/released/2.0.32.md
M shared/controlflow/codeql-pack.release.yml
M shared/controlflow/codeql/controlflow/ControlFlowGraph.qll
M shared/controlflow/qlpack.yml
M shared/dataflow/CHANGELOG.md
A shared/dataflow/change-notes/released/2.1.4.md
M shared/dataflow/codeql-pack.release.yml
M shared/dataflow/qlpack.yml
M shared/mad/CHANGELOG.md
A shared/mad/change-notes/released/1.0.48.md
M shared/mad/codeql-pack.release.yml
M shared/mad/qlpack.yml
M shared/quantum/CHANGELOG.md
A shared/quantum/change-notes/released/0.0.26.md
M shared/quantum/codeql-pack.release.yml
M shared/quantum/qlpack.yml
M shared/rangeanalysis/CHANGELOG.md
A shared/rangeanalysis/change-notes/released/1.0.48.md
M shared/rangeanalysis/codeql-pack.release.yml
M shared/rangeanalysis/qlpack.yml
M shared/regex/CHANGELOG.md
A shared/regex/change-notes/released/1.0.48.md
M shared/regex/codeql-pack.release.yml
M shared/regex/qlpack.yml
M shared/ssa/CHANGELOG.md
A shared/ssa/change-notes/released/2.0.24.md
M shared/ssa/codeql-pack.release.yml
M shared/ssa/qlpack.yml
M shared/threat-models/CHANGELOG.md
A shared/threat-models/change-notes/released/1.0.48.md
M shared/threat-models/codeql-pack.release.yml
M shared/threat-models/qlpack.yml
M shared/tutorial/CHANGELOG.md
A shared/tutorial/change-notes/released/1.0.48.md
M shared/tutorial/codeql-pack.release.yml
M shared/tutorial/qlpack.yml
M shared/typeflow/CHANGELOG.md
A shared/typeflow/change-notes/released/1.0.48.md
M shared/typeflow/codeql-pack.release.yml
M shared/typeflow/qlpack.yml
M shared/typeinference/CHANGELOG.md
A shared/typeinference/change-notes/released/0.0.29.md
M shared/typeinference/codeql-pack.release.yml
M shared/typeinference/qlpack.yml
M shared/typetracking/CHANGELOG.md
A shared/typetracking/change-notes/released/2.0.32.md
M shared/typetracking/codeql-pack.release.yml
M shared/typetracking/qlpack.yml
M shared/typos/CHANGELOG.md
A shared/typos/change-notes/released/1.0.48.md
M shared/typos/codeql-pack.release.yml
M shared/typos/qlpack.yml
M shared/util/CHANGELOG.md
A shared/util/change-notes/released/2.0.35.md
M shared/util/codeql-pack.release.yml
M shared/util/qlpack.yml
M shared/xml/CHANGELOG.md
A shared/xml/change-notes/released/1.0.48.md
M shared/xml/codeql-pack.release.yml
M shared/xml/qlpack.yml
M shared/yaml/CHANGELOG.md
A shared/yaml/change-notes/released/1.0.48.md
M shared/yaml/codeql-pack.release.yml
M shared/yaml/qlpack.yml
M swift/ql/lib/CHANGELOG.md
R swift/ql/lib/change-notes/2026-04-06-swift-6.3.md
A swift/ql/lib/change-notes/released/6.4.0.md
M swift/ql/lib/codeql-pack.release.yml
M swift/ql/lib/qlpack.yml
M swift/ql/src/CHANGELOG.md
A swift/ql/src/change-notes/released/1.3.1.md
M swift/ql/src/codeql-pack.release.yml
M swift/ql/src/qlpack.yml
Log Message:
-----------
Merge branch 'github:main' into main
Compare: https://github.com/krishnprakash/codeql/compare/7b62228c01ce...5a069e1838ad
To unsubscribe from these emails, change your notification settings at https://github.com/krishnprakash/codeql/settings/notifications
Reply all
Reply to author
Forward
0 new messages