[krishnprakash/codeql] 9dddd9: unified: add field declarations for statements and...
0 views
Skip to first unread message
Phileco
May 28, 2026, 12:04:39 AM (11 days ago) May 28
to philecodi...@googlegroups.com
Branch: refs/heads/main
Home: https://github.com/krishnprakash/codeql
Commit: 9dddd93460cf70dd2802101bb9fc68b3d26d7769
https://github.com/krishnprakash/codeql/commit/9dddd93460cf70dd2802101bb9fc68b3d26d7769
Author: Taus <tau...@github.com>
Date: 2026-05-12 (Tue, 12 May 2026)
Changed paths:
M unified/extractor/tree-sitter-swift/grammar.js
M unified/extractor/tree-sitter-swift/node-types.yml
Log Message:
-----------
unified: add field declarations for statements and members
Part 1 of N of "getting rid of $children" in node-types.yml
Note: in one of the cases the affected node still has the $children
field present. This is because there's some weirdness about recording
multiline comments as class member separators that I did not want to
figure out how to address right now.
Commit: 75c07996f38184cbbc0467f35a4f8b05c3afd804
https://github.com/krishnprakash/codeql/commit/75c07996f38184cbbc0467f35a4f8b05c3afd804
Author: Taus <tau...@github.com>
Date: 2026-05-12 (Tue, 12 May 2026)
Changed paths:
M unified/ql/lib/codeql/unified/Ast.qll
M unified/ql/lib/unified.dbscheme
Log Message:
-----------
unified: regenerate files
Commit: c75d819a928d8ca4b3a7c486e05d9f3abf387567
https://github.com/krishnprakash/codeql/commit/c75d819a928d8ca4b3a7c486e05d9f3abf387567
Author: Taus <tau...@github.com>
Date: 2026-05-12 (Tue, 12 May 2026)
Changed paths:
M unified/extractor/tree-sitter-swift/grammar.js
M unified/extractor/tree-sitter-swift/node-types.yml
Log Message:
-----------
unified: Add `effect` field
I ended up also aliasing `_async_keyword` to a named node to make it
more consistent with the other node kinds that can be in this field (as
it would be awkward to have two named types and a token here).
Elsewhere in the node types, we'll still have `async?: "async"`, and I
think that's okay.
Commit: d6ef467fba82e0ddab0f86e0458a1ad413a8501c
https://github.com/krishnprakash/codeql/commit/d6ef467fba82e0ddab0f86e0458a1ad413a8501c
Author: Taus <tau...@github.com>
Date: 2026-05-12 (Tue, 12 May 2026)
Changed paths:
M unified/extractor/tree-sitter-swift/grammar.js
M unified/extractor/tree-sitter-swift/node-types.yml
Log Message:
-----------
unified: Add more fields
A lot of changes, but for the most part these are just adding named
fields in places where they make sense.
After this, there are still ~20 instances of unnamed children appearing.
Commit: 853a98842da041bb251355111f9521a88972f9ba
https://github.com/krishnprakash/codeql/commit/853a98842da041bb251355111f9521a88972f9ba
Author: Taus <tau...@github.com>
Date: 2026-05-12 (Tue, 12 May 2026)
Changed paths:
M unified/ql/lib/codeql/unified/Ast.qll
M unified/ql/lib/unified.dbscheme
Log Message:
-----------
unified: Regenerate files
Commit: 732cc7bee00d734bd07d5cad8cadc9b56c2ba584
https://github.com/krishnprakash/codeql/commit/732cc7bee00d734bd07d5cad8cadc9b56c2ba584
Author: Taus <tau...@github.com>
Date: 2026-05-12 (Tue, 12 May 2026)
Changed paths:
M unified/extractor/tree-sitter-swift/grammar.js
M unified/extractor/tree-sitter-swift/node-types.yml
Log Message:
-----------
unified: Add fields to inheritance specifiers and calls
Commit: 0499932ba0c037ca8a7b315a2163c73d3600fe2b
https://github.com/krishnprakash/codeql/commit/0499932ba0c037ca8a7b315a2163c73d3600fe2b
Author: Taus <tau...@github.com>
Date: 2026-05-12 (Tue, 12 May 2026)
Changed paths:
M unified/extractor/tree-sitter-swift/grammar.js
M unified/extractor/tree-sitter-swift/node-types.yml
Log Message:
-----------
unified: Fix fields in await_expression
This required a change in a different place, due to aliasing.
Commit: 15d84b3e532473978cf4a24e7bd3d9615096a1a5
https://github.com/krishnprakash/codeql/commit/15d84b3e532473978cf4a24e7bd3d9615096a1a5
Author: Taus <tau...@github.com>
Date: 2026-05-12 (Tue, 12 May 2026)
Changed paths:
M unified/extractor/tree-sitter-swift/grammar.js
M unified/extractor/tree-sitter-swift/node-types.yml
Log Message:
-----------
unified: More $children fixes
Some nodes with a single child (arguably redundant to do, but I think
it's nice to have the types be consistent), and also an instance of
ensuring that all branches of a `choice` expose consistent field names.
Commit: bc96ae6e475671cbeb9c8ce159cc568f55d9008e
https://github.com/krishnprakash/codeql/commit/bc96ae6e475671cbeb9c8ce159cc568f55d9008e
Author: Taus <tau...@github.com>
Date: 2026-05-12 (Tue, 12 May 2026)
Changed paths:
M unified/extractor/tree-sitter-swift/grammar.js
M unified/extractor/tree-sitter-swift/node-types.yml
Log Message:
-----------
unified: Add `lambda` and `arguments` fields
Commit: 5784ef22f68d6d310f77a5c821e988c6a4dad72d
https://github.com/krishnprakash/codeql/commit/5784ef22f68d6d310f77a5c821e988c6a4dad72d
Author: Taus <tau...@github.com>
Date: 2026-05-12 (Tue, 12 May 2026)
Changed paths:
M unified/extractor/tree-sitter-swift/grammar.js
M unified/extractor/tree-sitter-swift/node-types.yml
Log Message:
-----------
unified: Unify more fields
Not entirely happy about the mixed nature of the `kind` filed (having
both tokens and the named node `throw_keyword` in there), but that's a
problem for a different time.
Commit: e6eac3784a741e8eb47d0badf38bccdd83e56feb
https://github.com/krishnprakash/codeql/commit/e6eac3784a741e8eb47d0badf38bccdd83e56feb
Author: Taus <tau...@github.com>
Date: 2026-05-12 (Tue, 12 May 2026)
Changed paths:
M unified/extractor/tree-sitter-swift/grammar.js
M unified/extractor/tree-sitter-swift/node-types.yml
Log Message:
-----------
unified: Consolidate fields in `if_let_binding`
Commit: 9902beddec7a888c20f269d05f8dcf0b79786035
https://github.com/krishnprakash/codeql/commit/9902beddec7a888c20f269d05f8dcf0b79786035
Author: Taus <tau...@github.com>
Date: 2026-05-12 (Tue, 12 May 2026)
Changed paths:
M unified/extractor/tree-sitter-swift/grammar.js
M unified/extractor/tree-sitter-swift/node-types.yml
Log Message:
-----------
unified: add proper fields for availability_condition
Commit: 6ff404a6d05c626b20c4966ad41326af950ed40f
https://github.com/krishnprakash/codeql/commit/6ff404a6d05c626b20c4966ad41326af950ed40f
Author: Taus <tau...@github.com>
Date: 2026-05-12 (Tue, 12 May 2026)
Changed paths:
M unified/extractor/tree-sitter-swift/grammar.js
M unified/extractor/tree-sitter-swift/node-types.yml
Log Message:
-----------
unified: More miscellaneous field additions
Commit: 5e14a7574e0adcf20815d92e878319a5607f4c99
https://github.com/krishnprakash/codeql/commit/5e14a7574e0adcf20815d92e878319a5607f4c99
Author: Taus <tau...@github.com>
Date: 2026-05-12 (Tue, 12 May 2026)
Changed paths:
M unified/extractor/tree-sitter-swift/grammar.js
M unified/extractor/tree-sitter-swift/node-types.yml
Log Message:
-----------
unified: make compilation_condition named and add fields
Commit: e1a0e204b13b9844eacace70a35cccb0b040b1e0
https://github.com/krishnprakash/codeql/commit/e1a0e204b13b9844eacace70a35cccb0b040b1e0
Author: Taus <tau...@github.com>
Date: 2026-05-12 (Tue, 12 May 2026)
Changed paths:
M unified/extractor/tree-sitter-swift/grammar.js
M unified/extractor/tree-sitter-swift/node-types.yml
Log Message:
-----------
unified: Promote enum_type_parameter to named and add fields
Commit: eba9f35673465e2576020b8ce8c66ad53418785a
https://github.com/krishnprakash/codeql/commit/eba9f35673465e2576020b8ce8c66ad53418785a
Author: Taus <tau...@github.com>
Date: 2026-05-12 (Tue, 12 May 2026)
Changed paths:
M unified/extractor/tree-sitter-swift/grammar.js
M unified/extractor/tree-sitter-swift/node-types.yml
Log Message:
-----------
unified: Get rid of $children* on key_path_expression
Doing this involved materialising a lot of previously anonymous nodes,
and I'm not entirely sure it's the best solution, but the node types
look decent enough.
Commit: 6e5e650b426351f18d7ac38edf43aae449a319cd
https://github.com/krishnprakash/codeql/commit/6e5e650b426351f18d7ac38edf43aae449a319cd
Author: Taus <tau...@github.com>
Date: 2026-05-12 (Tue, 12 May 2026)
Changed paths:
M unified/extractor/tree-sitter-swift/grammar.js
M unified/extractor/tree-sitter-swift/node-types.yml
Log Message:
-----------
unified: Add fields for macro_declaration
Commit: 406a02fa49a7835336b029814baf02ef36514eb5
https://github.com/krishnprakash/codeql/commit/406a02fa49a7835336b029814baf02ef36514eb5
Author: Taus <tau...@github.com>
Date: 2026-05-12 (Tue, 12 May 2026)
Changed paths:
M unified/extractor/tree-sitter-swift/grammar.js
M unified/extractor/tree-sitter-swift/node-types.yml
Log Message:
-----------
unified: Add fields to switch_entry
Of note: this involved un-inlining where_clause.
Commit: 2010844b1eb531e44fcc9c474a4c498f03bf1a17
https://github.com/krishnprakash/codeql/commit/2010844b1eb531e44fcc9c474a4c498f03bf1a17
Author: Taus <tau...@github.com>
Date: 2026-05-12 (Tue, 12 May 2026)
Changed paths:
M unified/extractor/tree-sitter-swift/grammar.js
M unified/extractor/tree-sitter-swift/node-types.yml
Log Message:
-----------
unified: Add fields to property_declaration
Not entirely sure about the `binding?` field on `pattern`, but it looks
like that might actually be useful.
Commit: 2eee2e50dc3829a91500eea2fd62f9e0721b2556
https://github.com/krishnprakash/codeql/commit/2eee2e50dc3829a91500eea2fd62f9e0721b2556
Author: Taus <tau...@github.com>
Date: 2026-05-12 (Tue, 12 May 2026)
Changed paths:
M unified/extractor/tree-sitter-swift/grammar.js
M unified/extractor/tree-sitter-swift/node-types.yml
Log Message:
-----------
unified: clean up patterns
Mostly by materialising a bunch of (useful) intermediate nodes.
Commit: eb480d1de47424e700692ccc4349b5ba7ecedab3
https://github.com/krishnprakash/codeql/commit/eb480d1de47424e700692ccc4349b5ba7ecedab3
Author: Taus <tau...@github.com>
Date: 2026-05-12 (Tue, 12 May 2026)
Changed paths:
M unified/extractor/tree-sitter-swift/grammar.js
M unified/extractor/tree-sitter-swift/node-types.yml
Log Message:
-----------
unified: Make parenthesized_type named
I'm not entirely happy about this solution, but it seemed to be the most
straightforward way of avoiding various kinds of token bleeding.
Commit: 52d72836f904996278dc745ae96984f3f299ad6b
https://github.com/krishnprakash/codeql/commit/52d72836f904996278dc745ae96984f3f299ad6b
Author: Taus <tau...@github.com>
Date: 2026-05-12 (Tue, 12 May 2026)
Changed paths:
M unified/extractor/tree-sitter-swift/grammar.js
M unified/extractor/tree-sitter-swift/node-types.yml
Log Message:
-----------
unified: Fix multiline_comment issue
This named node (which is in fact emitted by the scanner as an
`external`) was appearing as a child of `class_body` because of inlining
via `_class_member_separator`. This, in itself, appears to be somewhat
of a hack, to handle cases where a multiline comment signals the end of
a class member.
To fix this, we make the external node _unnamed_, but keep the `extras`
node _named_ (so we can still extract it from the parse tree), and we
add a new rule `multiline_comment` that mediates between the two. That
way, the use inside `_class_member_separator` can use the unnamed
variant, and no node is pushed into $children.
Commit: bfe5aa8d42e2f7b5064928e77c9ffa0791c98c2c
https://github.com/krishnprakash/codeql/commit/bfe5aa8d42e2f7b5064928e77c9ffa0791c98c2c
Author: Taus <tau...@github.com>
Date: 2026-05-12 (Tue, 12 May 2026)
Changed paths:
M unified/ql/lib/codeql/unified/Ast.qll
M unified/ql/lib/unified.dbscheme
Log Message:
-----------
unified: Regenerate files
Commit: 5d6dc5c3c34e3e0e82809b70ecc05df6c88467b7
https://github.com/krishnprakash/codeql/commit/5d6dc5c3c34e3e0e82809b70ecc05df6c88467b7
Author: Taus <tau...@github.com>
Date: 2026-05-13 (Wed, 13 May 2026)
Changed paths:
M unified/extractor/tree-sitter-swift/grammar.js
M unified/extractor/tree-sitter-swift/node-types.yml
Log Message:
-----------
unified: Clean up statements/block mess
Introduces (by making it named) a `block` node, and conversely makes
`statements` anonymous. This enables us to sensibly distinguish between
the "then" and "else" branch of an `if_statement`, which we were not
able to previously.
Commit: ea6f3a9568223b554c7c4434051859c335dcff2a
https://github.com/krishnprakash/codeql/commit/ea6f3a9568223b554c7c4434051859c335dcff2a
Author: Taus <tau...@github.com>
Date: 2026-05-13 (Wed, 13 May 2026)
Changed paths:
M unified/extractor/tree-sitter-swift/grammar.js
M unified/extractor/tree-sitter-swift/node-types.yml
Log Message:
-----------
unified: Encapsulate function parameters
The field representation would have made it difficult to figure out
which parameters correspond to which default values and attributes, so
instead we now encapsulate these in a new `function_parameter` node.
Commit: c8f7c3d7f2d199f593104f91bfb125e0c854e8a4
https://github.com/krishnprakash/codeql/commit/c8f7c3d7f2d199f593104f91bfb125e0c854e8a4
Author: Taus <tau...@github.com>
Date: 2026-05-13 (Wed, 13 May 2026)
Changed paths:
M unified/extractor/tree-sitter-swift/grammar.js
M unified/extractor/tree-sitter-swift/node-types.yml
Log Message:
-----------
unified: Group more paired items
Same as in the preceding commit, these items do not make sense as
separate fields on the parent node, so we materialise (or create new)
intermediate nodes to group them together.
Commit: 9787a8b072802b3ba5777c218f47b4e87ee08f32
https://github.com/krishnprakash/codeql/commit/9787a8b072802b3ba5777c218f47b4e87ee08f32
Author: Taus <tau...@github.com>
Date: 2026-05-13 (Wed, 13 May 2026)
Changed paths:
M unified/extractor/tree-sitter-swift/grammar.js
M unified/extractor/tree-sitter-swift/node-types.yml
Log Message:
-----------
unified: Group enum entries
Same as in the preceding commit.
Commit: caef72b0476bda5012e9d3b7303f4e3de25cd77a
https://github.com/krishnprakash/codeql/commit/caef72b0476bda5012e9d3b7303f4e3de25cd77a
Author: Taus <tau...@github.com>
Date: 2026-05-13 (Wed, 13 May 2026)
Changed paths:
M unified/extractor/tree-sitter-swift/grammar.js
M unified/extractor/tree-sitter-swift/node-types.yml
Log Message:
-----------
unified: Introduced named `property_binding` node
This groups together a bunch of related values that would otherwise be
impossible to match up correctly.
Commit: f4f85b58ca7181cb5b0d3a3e954bee972b762d48
https://github.com/krishnprakash/codeql/commit/f4f85b58ca7181cb5b0d3a3e954bee972b762d48
Author: Taus <tau...@github.com>
Date: 2026-05-13 (Wed, 13 May 2026)
Changed paths:
M unified/extractor/tree-sitter-swift/grammar.js
M unified/extractor/tree-sitter-swift/node-types.yml
Log Message:
-----------
unified: Remove some pointless fields
All of these fields have contents that are uniquely determined by the
node they appear on, so they convey no information.
Commit: dd9c066c6139ccc4eeba6610a780e8cfffef7d8a
https://github.com/krishnprakash/codeql/commit/dd9c066c6139ccc4eeba6610a780e8cfffef7d8a
Author: Taus <tau...@github.com>
Date: 2026-05-13 (Wed, 13 May 2026)
Changed paths:
M unified/ql/lib/codeql/unified/Ast.qll
M unified/ql/lib/unified.dbscheme
Log Message:
-----------
unified: Regenerate files
Commit: fbc861e7a407fea2f809e0094a6f0457bdd2a5ed
https://github.com/krishnprakash/codeql/commit/fbc861e7a407fea2f809e0094a6f0457bdd2a5ed
Author: Taus <tau...@github.com>
Date: 2026-05-26 (Tue, 26 May 2026)
Changed paths:
M unified/extractor/tree-sitter-swift/grammar.js
Log Message:
-----------
unified: Clarify grammar comment
Co-authored-by: Copilot Autofix powered by AI <17572847...@users.noreply.github.com>
Commit: d6e7e38e1cb2741955f89e16f3819863ec7cea5d
https://github.com/krishnprakash/codeql/commit/d6e7e38e1cb2741955f89e16f3819863ec7cea5d
Author: Taus <tau...@github.com>
Date: 2026-05-27 (Wed, 27 May 2026)
Changed paths:
M actions/ql/examples/snippets/uses_pinned_sha.ql
M actions/ql/lib/CHANGELOG.md
R actions/ql/lib/change-notes/2026-04-15-poisonable-steps-additions-alterations.md
A actions/ql/lib/change-notes/2026-05-12-improved-alphanumeric-regex.md
A actions/ql/lib/change-notes/released/0.4.36.md
M actions/ql/lib/codeql-pack.release.yml
M actions/ql/lib/codeql/actions/Bash.qll
M actions/ql/lib/qlpack.yml
M actions/ql/src/CHANGELOG.md
M actions/ql/src/Security/CWE-829/UnpinnedActionsTag.ql
M actions/ql/src/Security/CWE-829/UntrustedCheckoutCritical.md
M actions/ql/src/Security/CWE-829/UntrustedCheckoutCritical.ql
M actions/ql/src/Security/CWE-829/UntrustedCheckoutHigh.md
M actions/ql/src/Security/CWE-829/UntrustedCheckoutHigh.ql
M actions/ql/src/Security/CWE-829/UntrustedCheckoutMedium.md
M actions/ql/src/Security/CWE-829/UntrustedCheckoutMedium.ql
R actions/ql/src/change-notes/2026-04-15-untrusted-checkout-improvements-helpfile.md
R actions/ql/src/change-notes/2026-04-15-untrusted-checkout-improvements-metadata.md
A actions/ql/src/change-notes/2026-05-05-untrusted-checkout-high.md
A actions/ql/src/change-notes/2026-05-12-sha256-pinned-actions.md
A actions/ql/src/change-notes/2026-05-14-further-iteration-untrusted-checkout-improvements-alert.md
A actions/ql/src/change-notes/2026-05-14-further-iteration-untrusted-checkout-improvements-helpfile.md
A actions/ql/src/change-notes/2026-05-14-further-iteration-untrusted-checkout-improvements-metadata.md
A actions/ql/src/change-notes/released/0.6.28.md
M actions/ql/src/codeql-pack.release.yml
M actions/ql/src/qlpack.yml
A actions/ql/test/query-tests/Security/CWE-829/.github/actions/unpinned-tag/action.yml
M actions/ql/test/query-tests/Security/CWE-829/.github/workflows/unpinned_tags.yml
M actions/ql/test/query-tests/Security/CWE-829/UnpinnedActionsTag.expected
M actions/ql/test/query-tests/Security/CWE-829/UntrustedCheckoutCritical.expected
M actions/ql/test/query-tests/Security/CWE-829/UntrustedCheckoutHigh.expected
A cpp/downgrades/837c4e02326aee4582405d069263092e80a15d82/old.dbscheme
A cpp/downgrades/837c4e02326aee4582405d069263092e80a15d82/semmlecode.cpp.dbscheme
A cpp/downgrades/837c4e02326aee4582405d069263092e80a15d82/upgrade.properties
A cpp/downgrades/ef8d209a22e27413aaaeff4446f0ecb9fa2c227b/old.dbscheme
A cpp/downgrades/ef8d209a22e27413aaaeff4446f0ecb9fa2c227b/semmlecode.cpp.dbscheme
A cpp/downgrades/ef8d209a22e27413aaaeff4446f0ecb9fa2c227b/upgrade.properties
M cpp/ql/lib/CHANGELOG.md
M cpp/ql/lib/DefaultOptions.qll
M cpp/ql/lib/Options.qll
A cpp/ql/lib/change-notes/2026-05-15-secure-scanf.md
A cpp/ql/lib/change-notes/2026-05-16-alias-template.md
A cpp/ql/lib/change-notes/2026-05-18-alias-type.md
A cpp/ql/lib/change-notes/2026-05-21-generated-from.md
A cpp/ql/lib/change-notes/2026-05-27-deprecated-removal.md
A cpp/ql/lib/change-notes/released/10.1.1.md
M cpp/ql/lib/codeql-pack.release.yml
M cpp/ql/lib/cpp.qll
M cpp/ql/lib/qlpack.yml
M cpp/ql/lib/semmle/code/cpp/Class.qll
M cpp/ql/lib/semmle/code/cpp/Declaration.qll
M cpp/ql/lib/semmle/code/cpp/Element.qll
M cpp/ql/lib/semmle/code/cpp/Function.qll
M cpp/ql/lib/semmle/code/cpp/Location.qll
R cpp/ql/lib/semmle/code/cpp/Member.qll
M cpp/ql/lib/semmle/code/cpp/TemplateParameter.qll
M cpp/ql/lib/semmle/code/cpp/TypedefType.qll
M cpp/ql/lib/semmle/code/cpp/Variable.qll
M cpp/ql/lib/semmle/code/cpp/commons/Scanf.qll
M cpp/ql/lib/semmle/code/cpp/internal/ResolveClass.qll
M cpp/ql/lib/semmle/code/cpp/ir/dataflow/internal/SsaImpl.qll
M cpp/ql/lib/semmle/code/cpp/ir/dataflow/internal/SsaImplCommon.qll
M cpp/ql/lib/semmle/code/cpp/models/implementations/Fopen.qll
M cpp/ql/lib/semmle/code/cpp/models/implementations/Scanf.qll
M cpp/ql/lib/semmle/code/cpp/models/interfaces/FlowSource.qll
M cpp/ql/lib/semmle/code/cpp/security/FlowSources.qll
M cpp/ql/lib/semmlecode.cpp.dbscheme
M cpp/ql/lib/semmlecode.cpp.dbscheme.stats
A cpp/ql/lib/upgrades/770002bb02322e04fa25345838ce6e82af285a0b/old.dbscheme
A cpp/ql/lib/upgrades/770002bb02322e04fa25345838ce6e82af285a0b/semmlecode.cpp.dbscheme
A cpp/ql/lib/upgrades/770002bb02322e04fa25345838ce6e82af285a0b/upgrade.properties
A cpp/ql/lib/upgrades/837c4e02326aee4582405d069263092e80a15d82/old.dbscheme
A cpp/ql/lib/upgrades/837c4e02326aee4582405d069263092e80a15d82/semmlecode.cpp.dbscheme
A cpp/ql/lib/upgrades/837c4e02326aee4582405d069263092e80a15d82/upgrade.properties
M cpp/ql/src/CHANGELOG.md
M cpp/ql/src/Security/CWE/CWE-020/ExternalAPIsSpecific.qll
M cpp/ql/src/Security/CWE/CWE-311/CleartextTransmission.ql
A cpp/ql/src/change-notes/released/1.6.3.md
M cpp/ql/src/codeql-pack.release.yml
M cpp/ql/src/qlpack.yml
M cpp/ql/test/experimental/query-tests/Security/CWE/CWE-193/constant-size/ConstantSizeArrayOffByOne.expected
A cpp/ql/test/library-tests/dataflow/certain/test.cpp
A cpp/ql/test/library-tests/dataflow/certain/test.expected
A cpp/ql/test/library-tests/dataflow/certain/test.ql
M cpp/ql/test/library-tests/dataflow/dataflow-tests/dataflow-consistency.expected
M cpp/ql/test/library-tests/dataflow/dataflow-tests/localFlow-ir.expected
M cpp/ql/test/library-tests/dataflow/dataflow-tests/test-source-sink.expected
M cpp/ql/test/library-tests/dataflow/dataflow-tests/test.cpp
M cpp/ql/test/library-tests/dataflow/dataflow-tests/uninitialized.expected
M cpp/ql/test/library-tests/dataflow/source-sink-tests/sources-and-sinks.cpp
M cpp/ql/test/library-tests/dataflow/taint-tests/localTaint.expected
M cpp/ql/test/library-tests/friends/loop/friends.expected
M cpp/ql/test/library-tests/ir/ir/PrintAST.expected
M cpp/ql/test/library-tests/scanf/scanfFormatLiteral.expected
M cpp/ql/test/library-tests/scanf/scanfFunctionCall.expected
A cpp/ql/test/library-tests/scanf/scanfFunctionCallOutput.expected
A cpp/ql/test/library-tests/scanf/scanfFunctionCallOutput.ql
M cpp/ql/test/library-tests/scanf/test.c
M cpp/ql/test/library-tests/using-aliases/using-alias.expected
M cpp/ql/test/query-tests/Security/CWE/CWE-311/semmle/tests/test3.cpp
M csharp/.config/dotnet-tools.json
M csharp/.paket/Paket.Restore.targets
M csharp/extractor/Semmle.Extraction.CSharp.Util/SymbolExtensions.cs
M csharp/extractor/Semmle.Extraction.CSharp/Entities/Compilations/Compilation.cs
M csharp/extractor/Semmle.Extraction.CSharp/Entities/Expression.cs
M csharp/extractor/Semmle.Extraction.CSharp/Entities/Expressions/Factory.cs
M csharp/extractor/Semmle.Extraction.CSharp/Entities/Expressions/Invocation.cs
M csharp/extractor/Semmle.Extraction.CSharp/Entities/Expressions/PostfixUnary.cs
A csharp/extractor/Semmle.Extraction.CSharp/Entities/Expressions/PrefixUnary.cs
R csharp/extractor/Semmle.Extraction.CSharp/Entities/Expressions/Unary.cs
M csharp/paket.lock
M csharp/paket.main.bzl
M csharp/ql/campaigns/Solorigate/lib/CHANGELOG.md
A csharp/ql/campaigns/Solorigate/lib/change-notes/released/1.7.67.md
M csharp/ql/campaigns/Solorigate/lib/codeql-pack.release.yml
M csharp/ql/campaigns/Solorigate/lib/qlpack.yml
M csharp/ql/campaigns/Solorigate/src/CHANGELOG.md
A csharp/ql/campaigns/Solorigate/src/change-notes/released/1.7.67.md
M csharp/ql/campaigns/Solorigate/src/codeql-pack.release.yml
M csharp/ql/campaigns/Solorigate/src/qlpack.yml
M csharp/ql/lib/CHANGELOG.md
A csharp/ql/lib/change-notes/2026-05-12-user-increment-decrement.md
A csharp/ql/lib/change-notes/2026-05-20-csharp14-dotnet10.md
A csharp/ql/lib/change-notes/released/6.0.1.md
M csharp/ql/lib/codeql-pack.release.yml
M csharp/ql/lib/qlpack.yml
M csharp/ql/lib/semmle/code/csharp/Callable.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/internal/ControlFlowGraph.qll
M csharp/ql/lib/semmle/code/csharp/dispatch/Dispatch.qll
M csharp/ql/lib/semmle/code/csharp/exprs/Call.qll
M csharp/ql/src/CHANGELOG.md
M csharp/ql/src/Security Features/CWE-502/UnsafeDeserialization.qhelp
M csharp/ql/src/Security Features/CWE-502/UnsafeDeserializationUntrustedInput.qhelp
A csharp/ql/src/change-notes/released/1.7.3.md
M csharp/ql/src/codeql-pack.release.yml
M csharp/ql/src/qlpack.yml
M csharp/ql/test/library-tests/dataflow/operators/Operator.cs
M csharp/ql/test/library-tests/dataflow/operators/operatorFlow.expected
M csharp/ql/test/library-tests/extension/PrintAst.expected
M csharp/ql/test/library-tests/extension/extensionTypes.expected
M csharp/ql/test/library-tests/extension/extensions.cs
M csharp/ql/test/library-tests/extension/extensions.expected
M csharp/ql/test/library-tests/operators/Operators3.expected
M csharp/ql/test/library-tests/operators/Operators4.expected
M csharp/ql/test/library-tests/operators/Operators5.expected
A csharp/ql/test/library-tests/operators/Operators6.expected
A csharp/ql/test/library-tests/operators/Operators6.ql
M csharp/ql/test/library-tests/operators/PrintAst.expected
M csharp/ql/test/library-tests/operators/operators.cs
M docs/codeql/codeql-language-guides/codeql-for-rust.rst
A docs/codeql/codeql-language-guides/customizing-library-models-for-rust.rst
A docs/codeql/codeql-overview/codeql-changelog/codeql-cli-2.25.5.rst
M docs/codeql/codeql-overview/codeql-changelog/index.rst
M docs/codeql/reusables/supported-versions-compilers.rst
M go/extractor/toolchain/toolchain.go
M go/extractor/toolchain/toolchain_test.go
M go/ql/consistency-queries/CHANGELOG.md
A go/ql/consistency-queries/change-notes/released/1.0.50.md
M go/ql/consistency-queries/codeql-pack.release.yml
M go/ql/consistency-queries/qlpack.yml
M go/ql/lib/CHANGELOG.md
A go/ql/lib/change-notes/released/7.1.1.md
M go/ql/lib/codeql-pack.release.yml
M go/ql/lib/qlpack.yml
M go/ql/src/CHANGELOG.md
A go/ql/src/change-notes/released/1.6.3.md
M go/ql/src/codeql-pack.release.yml
M go/ql/src/qlpack.yml
M java/documentation/library-coverage/coverage.csv
M java/documentation/library-coverage/coverage.rst
M java/ql/integration-tests/java/buildless-maven-existing-settings-xml/maven-fetches.expected
M java/ql/integration-tests/java/buildless-maven-mirrorof/maven-fetches.expected
M java/ql/integration-tests/java/buildless-maven-timeout/diagnostics.expected
M java/ql/integration-tests/java/buildless-maven-tolerate-unavailable-dependency/diagnostics.expected
M java/ql/integration-tests/java/buildless-maven/maven-fetches.expected
A java/ql/integration-tests/update-ferstl-depgraph-dependencies.sh
M java/ql/lib/CHANGELOG.md
R java/ql/lib/change-notes/2026-04-21-path-injection-read-subkind.md
A java/ql/lib/change-notes/2026-05-19-avro-mads.md
A java/ql/lib/change-notes/released/9.1.1.md
M java/ql/lib/codeql-pack.release.yml
A java/ql/lib/ext/generated/llmgenerator/org.apache.avro.file.model.yml
A java/ql/lib/ext/generated/llmgenerator/org.apache.avro.model.yml
A java/ql/lib/ext/generated/llmgenerator/org.apache.avro.util.model.yml
M java/ql/lib/qlpack.yml
M java/ql/lib/semmle/code/java/ControlFlowGraph.qll
M java/ql/src/CHANGELOG.md
M java/ql/src/Security/CWE/CWE-502/UnsafeDeserialization.qhelp
R java/ql/src/change-notes/2026-04-21-zipslip-exclude-read-sinks.md
A java/ql/src/change-notes/released/1.11.3.md
M java/ql/src/codeql-pack.release.yml
M java/ql/src/qlpack.yml
M javascript/ql/lib/CHANGELOG.md
A javascript/ql/lib/change-notes/2026-05-14-sensitive-data.md
A javascript/ql/lib/change-notes/released/2.7.1.md
M javascript/ql/lib/codeql-pack.release.yml
M javascript/ql/lib/qlpack.yml
M javascript/ql/src/CHANGELOG.md
A javascript/ql/src/change-notes/released/2.3.10.md
M javascript/ql/src/codeql-pack.release.yml
M javascript/ql/src/qlpack.yml
M misc/suite-helpers/CHANGELOG.md
A misc/suite-helpers/change-notes/released/1.0.50.md
M misc/suite-helpers/codeql-pack.release.yml
M misc/suite-helpers/qlpack.yml
M python/extractor/cli-integration-test/writing-diagnostics/diagnostics.expected
M python/extractor/semmle/logging.py
M python/ql/lib/CHANGELOG.md
A python/ql/lib/change-notes/2026-05-14-sensitive-data.md
A python/ql/lib/change-notes/released/7.1.1.md
M python/ql/lib/codeql-pack.release.yml
M python/ql/lib/qlpack.yml
M python/ql/src/CHANGELOG.md
M python/ql/src/Security/CWE-502/UnsafeDeserialization.qhelp
A python/ql/src/change-notes/released/1.8.3.md
M python/ql/src/codeql-pack.release.yml
M python/ql/src/qlpack.yml
M python/ql/test/query-tests/Security/CWE-312-CleartextLogging/CleartextLogging.expected
M python/ql/test/query-tests/Security/CWE-312-CleartextLogging/test.py
M ql/Cargo.lock
M ruby/extractor/src/extractor.rs
M ruby/ql/integration-tests/diagnostics/syntax-error/diagnostics.expected
M ruby/ql/integration-tests/diagnostics/unknown-encoding/diagnostics.expected
M ruby/ql/lib/CHANGELOG.md
A ruby/ql/lib/change-notes/released/5.2.1.md
M ruby/ql/lib/codeql-pack.release.yml
M ruby/ql/lib/qlpack.yml
M ruby/ql/src/CHANGELOG.md
A ruby/ql/src/change-notes/released/1.6.3.md
M ruby/ql/src/codeql-pack.release.yml
M ruby/ql/src/qlpack.yml
M ruby/ql/src/queries/security/cwe-502/UnsafeDeserialization.qhelp
M rust/ql/lib/CHANGELOG.md
A rust/ql/lib/change-notes/2026-05-14-sensitive-data.md
A rust/ql/lib/change-notes/released/0.2.14.md
M rust/ql/lib/codeql-pack.release.yml
M rust/ql/lib/codeql/rust/internal/typeinference/TypeInference.qll
M rust/ql/lib/qlpack.yml
M rust/ql/src/CHANGELOG.md
A rust/ql/src/change-notes/released/0.1.35.md
M rust/ql/src/codeql-pack.release.yml
M rust/ql/src/qlpack.yml
M rust/ql/test/library-tests/sensitivedata/test.rs
M shared/concepts/CHANGELOG.md
A shared/concepts/change-notes/released/0.0.24.md
M shared/concepts/codeql-pack.release.yml
M shared/concepts/codeql/concepts/internal/SensitiveDataHeuristics.qll
M shared/concepts/qlpack.yml
M shared/controlflow/CHANGELOG.md
A shared/controlflow/change-notes/released/2.0.34.md
M shared/controlflow/codeql-pack.release.yml
M shared/controlflow/codeql/controlflow/ControlFlowGraph.qll
M shared/controlflow/qlpack.yml
M shared/dataflow/CHANGELOG.md
A shared/dataflow/change-notes/released/2.1.6.md
M shared/dataflow/codeql-pack.release.yml
M shared/dataflow/qlpack.yml
M shared/mad/CHANGELOG.md
A shared/mad/change-notes/released/1.0.50.md
M shared/mad/codeql-pack.release.yml
M shared/mad/qlpack.yml
M shared/quantum/CHANGELOG.md
A shared/quantum/change-notes/released/0.0.28.md
M shared/quantum/codeql-pack.release.yml
M shared/quantum/qlpack.yml
M shared/rangeanalysis/CHANGELOG.md
A shared/rangeanalysis/change-notes/released/1.0.50.md
M shared/rangeanalysis/codeql-pack.release.yml
M shared/rangeanalysis/qlpack.yml
M shared/regex/CHANGELOG.md
A shared/regex/change-notes/released/1.0.50.md
M shared/regex/codeql-pack.release.yml
M shared/regex/qlpack.yml
M shared/ssa/CHANGELOG.md
A shared/ssa/change-notes/released/2.0.26.md
M shared/ssa/codeql-pack.release.yml
M shared/ssa/qlpack.yml
M shared/threat-models/CHANGELOG.md
A shared/threat-models/change-notes/released/1.0.50.md
M shared/threat-models/codeql-pack.release.yml
M shared/threat-models/qlpack.yml
M shared/tree-sitter-extractor/src/extractor/mod.rs
M shared/tree-sitter-extractor/src/file_paths.rs
M shared/tree-sitter-extractor/src/generator/mod.rs
M shared/tutorial/CHANGELOG.md
A shared/tutorial/change-notes/released/1.0.50.md
M shared/tutorial/codeql-pack.release.yml
M shared/tutorial/qlpack.yml
M shared/typeflow/CHANGELOG.md
A shared/typeflow/change-notes/released/1.0.50.md
M shared/typeflow/codeql-pack.release.yml
M shared/typeflow/qlpack.yml
M shared/typeinference/CHANGELOG.md
A shared/typeinference/change-notes/released/0.0.31.md
M shared/typeinference/codeql-pack.release.yml
M shared/typeinference/codeql/typeinference/internal/TypeInference.qll
M shared/typeinference/qlpack.yml
M shared/typetracking/CHANGELOG.md
A shared/typetracking/change-notes/released/2.0.34.md
M shared/typetracking/codeql-pack.release.yml
M shared/typetracking/qlpack.yml
M shared/typos/CHANGELOG.md
A shared/typos/change-notes/released/1.0.50.md
M shared/typos/codeql-pack.release.yml
M shared/typos/qlpack.yml
M shared/util/CHANGELOG.md
A shared/util/change-notes/released/2.0.37.md
M shared/util/codeql-pack.release.yml
M shared/util/codeql/util/DenseRank.qll
M shared/util/qlpack.yml
M shared/xml/CHANGELOG.md
A shared/xml/change-notes/released/1.0.50.md
M shared/xml/codeql-pack.release.yml
M shared/xml/qlpack.yml
M shared/yaml/CHANGELOG.md
A shared/yaml/change-notes/released/1.0.50.md
M shared/yaml/codeql-pack.release.yml
M shared/yaml/qlpack.yml
M shared/yeast-macros/src/parse.rs
M shared/yeast/doc/yeast.md
M shared/yeast/src/captures.rs
M shared/yeast/src/dump.rs
M shared/yeast/src/lib.rs
M shared/yeast/src/node_types_yaml.rs
M shared/yeast/src/schema.rs
M shared/yeast/src/visitor.rs
M shared/yeast/tests/test.rs
M swift/ql/lib/CHANGELOG.md
R swift/ql/lib/change-notes/2026-05-11-declared-interface-type.md
A swift/ql/lib/change-notes/2026-05-14-sensitive-data.md
A swift/ql/lib/change-notes/2026-05-19-swift-6.3.2.md
A swift/ql/lib/change-notes/released/6.6.0.md
M swift/ql/lib/codeql-pack.release.yml
M swift/ql/lib/qlpack.yml
M swift/ql/src/CHANGELOG.md
A swift/ql/src/change-notes/released/1.3.3.md
M swift/ql/src/codeql-pack.release.yml
M swift/ql/src/qlpack.yml
M swift/ql/test/query-tests/Security/CWE-311/CleartextTransmission.expected
M swift/ql/test/query-tests/Security/CWE-311/SensitiveExprs.expected
M swift/ql/test/query-tests/Security/CWE-311/testSend.swift
M swift/ql/test/query-tests/Security/CWE-328/WeakPasswordHashing.expected
M swift/ql/test/query-tests/Security/CWE-328/WeakSensitiveDataHashing.expected
M swift/ql/test/query-tests/Security/CWE-328/testCryptoKit.swift
M swift/third_party/resources/resource-dir-linux.zip
M swift/third_party/resources/resource-dir-macos.zip
M swift/third_party/resources/swift-prebuilt-linux.tar.zst
M swift/third_party/resources/swift-prebuilt-macos.tar.zst
M unified/AGENTS.md
A unified/extractor/ast_types.yml
M unified/extractor/src/extractor.rs
M unified/extractor/src/generator.rs
A unified/extractor/src/languages/mod.rs
M unified/extractor/src/languages/swift/swift.rs
M unified/extractor/src/main.rs
A unified/extractor/tests/corpus/swift/closures.txt
A unified/extractor/tests/corpus/swift/collections.txt
A unified/extractor/tests/corpus/swift/control-flow.txt
A unified/extractor/tests/corpus/swift/desugar.txt
A unified/extractor/tests/corpus/swift/functions.txt
A unified/extractor/tests/corpus/swift/literals.txt
A unified/extractor/tests/corpus/swift/loops.txt
A unified/extractor/tests/corpus/swift/operators.txt
A unified/extractor/tests/corpus/swift/optionals-and-errors.txt
A unified/extractor/tests/corpus/swift/types.txt
A unified/extractor/tests/corpus/swift/variables.txt
A unified/extractor/tests/corpus_tests.rs
A unified/ql/test/library-tests/BasicTest/name_expr.swift
M unified/ql/test/library-tests/BasicTest/test.expected
M unified/ql/test/library-tests/BasicTest/test.ql
A unified/scripts/update-corpus.sh
Log Message:
-----------
Unified: merge in `main`
Keeps our version of the conflicting files. They will be regenerated in
the next commit.
Commit: 41fd59c1c1a5927d945718afaf63aee1a9819db9
https://github.com/krishnprakash/codeql/commit/41fd59c1c1a5927d945718afaf63aee1a9819db9
Author: Taus <tau...@github.com>
Date: 2026-05-27 (Wed, 27 May 2026)
Changed paths:
M unified/ql/lib/codeql/unified/Ast.qll
M unified/ql/lib/unified.dbscheme
Log Message:
-----------
Unified: regenerate Ast.qll and dbscheme
Commit: 6be9e2315d493e2f1e10f771a9107b8895f2d1b5
https://github.com/krishnprakash/codeql/commit/6be9e2315d493e2f1e10f771a9107b8895f2d1b5
Author: Asger F <asg...@github.com>
Date: 2026-05-27 (Wed, 27 May 2026)
Changed paths:
M unified/extractor/tree-sitter-swift/grammar.js
M unified/extractor/tree-sitter-swift/node-types.yml
Log Message:
-----------
Merge pull request #21841 from github/tausbn/unified-swift-named-body-fields
Unified: Get rid of all `$children` fields
Commit: ad56ebd3615131cb34643749e05651f2b6fd4da7
https://github.com/krishnprakash/codeql/commit/ad56ebd3615131cb34643749e05651f2b6fd4da7
Author: Asger F <asg...@github.com>
Date: 2026-05-27 (Wed, 27 May 2026)
Changed paths:
M unified/ql/test/library-tests/BasicTest/test.expected
Log Message:
-----------
Unified: update test output
Commit: 313500e5812c00a6b7069f4eee07b1de70d401f8
https://github.com/krishnprakash/codeql/commit/313500e5812c00a6b7069f4eee07b1de70d401f8
Author: Asger F <asg...@github.com>
Date: 2026-05-27 (Wed, 27 May 2026)
Changed paths:
M unified/extractor/tests/corpus/swift/closures.txt
M unified/extractor/tests/corpus/swift/collections.txt
M unified/extractor/tests/corpus/swift/control-flow.txt
M unified/extractor/tests/corpus/swift/desugar.txt
M unified/extractor/tests/corpus/swift/functions.txt
M unified/extractor/tests/corpus/swift/literals.txt
M unified/extractor/tests/corpus/swift/loops.txt
M unified/extractor/tests/corpus/swift/operators.txt
M unified/extractor/tests/corpus/swift/optionals-and-errors.txt
M unified/extractor/tests/corpus/swift/types.txt
M unified/extractor/tests/corpus/swift/variables.txt
Log Message:
-----------
Unified: update test outputs
Commit: 17fe3e4e319e1b19077f07557a700ad7bdcacfa1
https://github.com/krishnprakash/codeql/commit/17fe3e4e319e1b19077f07557a700ad7bdcacfa1
Author: Asger F <asg...@github.com>
Date: 2026-05-27 (Wed, 27 May 2026)
Changed paths:
M unified/extractor/tests/corpus/swift/closures.txt
M unified/extractor/tests/corpus/swift/collections.txt
M unified/extractor/tests/corpus/swift/control-flow.txt
M unified/extractor/tests/corpus/swift/desugar.txt
M unified/extractor/tests/corpus/swift/functions.txt
M unified/extractor/tests/corpus/swift/literals.txt
M unified/extractor/tests/corpus/swift/loops.txt
M unified/extractor/tests/corpus/swift/operators.txt
M unified/extractor/tests/corpus/swift/optionals-and-errors.txt
M unified/extractor/tests/corpus/swift/types.txt
M unified/extractor/tests/corpus/swift/variables.txt
M unified/ql/test/library-tests/BasicTest/test.expected
Log Message:
-----------
Merge pull request #21901 from asgerf/unified-fix-test
Unified: fix test output
Commit: 39f1af57ffa29cd008efed596cb79a8be643fd4a
https://github.com/krishnprakash/codeql/commit/39f1af57ffa29cd008efed596cb79a8be643fd4a
Author: Phileco <132178579+k...@users.noreply.github.com>
Date: 2026-05-28 (Thu, 28 May 2026)
Changed paths:
M unified/extractor/tests/corpus/swift/closures.txt
M unified/extractor/tests/corpus/swift/collections.txt
M unified/extractor/tests/corpus/swift/control-flow.txt
M unified/extractor/tests/corpus/swift/desugar.txt
M unified/extractor/tests/corpus/swift/functions.txt
M unified/extractor/tests/corpus/swift/literals.txt
M unified/extractor/tests/corpus/swift/loops.txt
M unified/extractor/tests/corpus/swift/operators.txt
M unified/extractor/tests/corpus/swift/optionals-and-errors.txt
M unified/extractor/tests/corpus/swift/types.txt
M unified/extractor/tests/corpus/swift/variables.txt
M unified/extractor/tree-sitter-swift/grammar.js
M unified/extractor/tree-sitter-swift/node-types.yml
M unified/ql/test/library-tests/BasicTest/test.expected
Log Message:
-----------
Merge branch 'github:main' into main
Compare: https://github.com/krishnprakash/codeql/compare/f1cf442d7d77...39f1af57ffa2
To unsubscribe from these emails, change your notification settings at https://github.com/krishnprakash/codeql/settings/notifications
Home: https://github.com/krishnprakash/codeql
Commit: 9dddd93460cf70dd2802101bb9fc68b3d26d7769
https://github.com/krishnprakash/codeql/commit/9dddd93460cf70dd2802101bb9fc68b3d26d7769
Author: Taus <tau...@github.com>
Date: 2026-05-12 (Tue, 12 May 2026)
Changed paths:
M unified/extractor/tree-sitter-swift/grammar.js
M unified/extractor/tree-sitter-swift/node-types.yml
Log Message:
-----------
unified: add field declarations for statements and members
Part 1 of N of "getting rid of $children" in node-types.yml
Note: in one of the cases the affected node still has the $children
field present. This is because there's some weirdness about recording
multiline comments as class member separators that I did not want to
figure out how to address right now.
Commit: 75c07996f38184cbbc0467f35a4f8b05c3afd804
https://github.com/krishnprakash/codeql/commit/75c07996f38184cbbc0467f35a4f8b05c3afd804
Author: Taus <tau...@github.com>
Date: 2026-05-12 (Tue, 12 May 2026)
Changed paths:
M unified/ql/lib/codeql/unified/Ast.qll
M unified/ql/lib/unified.dbscheme
Log Message:
-----------
unified: regenerate files
Commit: c75d819a928d8ca4b3a7c486e05d9f3abf387567
https://github.com/krishnprakash/codeql/commit/c75d819a928d8ca4b3a7c486e05d9f3abf387567
Author: Taus <tau...@github.com>
Date: 2026-05-12 (Tue, 12 May 2026)
Changed paths:
M unified/extractor/tree-sitter-swift/grammar.js
M unified/extractor/tree-sitter-swift/node-types.yml
Log Message:
-----------
unified: Add `effect` field
I ended up also aliasing `_async_keyword` to a named node to make it
more consistent with the other node kinds that can be in this field (as
it would be awkward to have two named types and a token here).
Elsewhere in the node types, we'll still have `async?: "async"`, and I
think that's okay.
Commit: d6ef467fba82e0ddab0f86e0458a1ad413a8501c
https://github.com/krishnprakash/codeql/commit/d6ef467fba82e0ddab0f86e0458a1ad413a8501c
Author: Taus <tau...@github.com>
Date: 2026-05-12 (Tue, 12 May 2026)
Changed paths:
M unified/extractor/tree-sitter-swift/grammar.js
M unified/extractor/tree-sitter-swift/node-types.yml
Log Message:
-----------
unified: Add more fields
A lot of changes, but for the most part these are just adding named
fields in places where they make sense.
After this, there are still ~20 instances of unnamed children appearing.
Commit: 853a98842da041bb251355111f9521a88972f9ba
https://github.com/krishnprakash/codeql/commit/853a98842da041bb251355111f9521a88972f9ba
Author: Taus <tau...@github.com>
Date: 2026-05-12 (Tue, 12 May 2026)
Changed paths:
M unified/ql/lib/codeql/unified/Ast.qll
M unified/ql/lib/unified.dbscheme
Log Message:
-----------
unified: Regenerate files
Commit: 732cc7bee00d734bd07d5cad8cadc9b56c2ba584
https://github.com/krishnprakash/codeql/commit/732cc7bee00d734bd07d5cad8cadc9b56c2ba584
Author: Taus <tau...@github.com>
Date: 2026-05-12 (Tue, 12 May 2026)
Changed paths:
M unified/extractor/tree-sitter-swift/grammar.js
M unified/extractor/tree-sitter-swift/node-types.yml
Log Message:
-----------
unified: Add fields to inheritance specifiers and calls
Commit: 0499932ba0c037ca8a7b315a2163c73d3600fe2b
https://github.com/krishnprakash/codeql/commit/0499932ba0c037ca8a7b315a2163c73d3600fe2b
Author: Taus <tau...@github.com>
Date: 2026-05-12 (Tue, 12 May 2026)
Changed paths:
M unified/extractor/tree-sitter-swift/grammar.js
M unified/extractor/tree-sitter-swift/node-types.yml
Log Message:
-----------
unified: Fix fields in await_expression
This required a change in a different place, due to aliasing.
Commit: 15d84b3e532473978cf4a24e7bd3d9615096a1a5
https://github.com/krishnprakash/codeql/commit/15d84b3e532473978cf4a24e7bd3d9615096a1a5
Author: Taus <tau...@github.com>
Date: 2026-05-12 (Tue, 12 May 2026)
Changed paths:
M unified/extractor/tree-sitter-swift/grammar.js
M unified/extractor/tree-sitter-swift/node-types.yml
Log Message:
-----------
unified: More $children fixes
Some nodes with a single child (arguably redundant to do, but I think
it's nice to have the types be consistent), and also an instance of
ensuring that all branches of a `choice` expose consistent field names.
Commit: bc96ae6e475671cbeb9c8ce159cc568f55d9008e
https://github.com/krishnprakash/codeql/commit/bc96ae6e475671cbeb9c8ce159cc568f55d9008e
Author: Taus <tau...@github.com>
Date: 2026-05-12 (Tue, 12 May 2026)
Changed paths:
M unified/extractor/tree-sitter-swift/grammar.js
M unified/extractor/tree-sitter-swift/node-types.yml
Log Message:
-----------
unified: Add `lambda` and `arguments` fields
Commit: 5784ef22f68d6d310f77a5c821e988c6a4dad72d
https://github.com/krishnprakash/codeql/commit/5784ef22f68d6d310f77a5c821e988c6a4dad72d
Author: Taus <tau...@github.com>
Date: 2026-05-12 (Tue, 12 May 2026)
Changed paths:
M unified/extractor/tree-sitter-swift/grammar.js
M unified/extractor/tree-sitter-swift/node-types.yml
Log Message:
-----------
unified: Unify more fields
Not entirely happy about the mixed nature of the `kind` filed (having
both tokens and the named node `throw_keyword` in there), but that's a
problem for a different time.
Commit: e6eac3784a741e8eb47d0badf38bccdd83e56feb
https://github.com/krishnprakash/codeql/commit/e6eac3784a741e8eb47d0badf38bccdd83e56feb
Author: Taus <tau...@github.com>
Date: 2026-05-12 (Tue, 12 May 2026)
Changed paths:
M unified/extractor/tree-sitter-swift/grammar.js
M unified/extractor/tree-sitter-swift/node-types.yml
Log Message:
-----------
unified: Consolidate fields in `if_let_binding`
Commit: 9902beddec7a888c20f269d05f8dcf0b79786035
https://github.com/krishnprakash/codeql/commit/9902beddec7a888c20f269d05f8dcf0b79786035
Author: Taus <tau...@github.com>
Date: 2026-05-12 (Tue, 12 May 2026)
Changed paths:
M unified/extractor/tree-sitter-swift/grammar.js
M unified/extractor/tree-sitter-swift/node-types.yml
Log Message:
-----------
unified: add proper fields for availability_condition
Commit: 6ff404a6d05c626b20c4966ad41326af950ed40f
https://github.com/krishnprakash/codeql/commit/6ff404a6d05c626b20c4966ad41326af950ed40f
Author: Taus <tau...@github.com>
Date: 2026-05-12 (Tue, 12 May 2026)
Changed paths:
M unified/extractor/tree-sitter-swift/grammar.js
M unified/extractor/tree-sitter-swift/node-types.yml
Log Message:
-----------
unified: More miscellaneous field additions
Commit: 5e14a7574e0adcf20815d92e878319a5607f4c99
https://github.com/krishnprakash/codeql/commit/5e14a7574e0adcf20815d92e878319a5607f4c99
Author: Taus <tau...@github.com>
Date: 2026-05-12 (Tue, 12 May 2026)
Changed paths:
M unified/extractor/tree-sitter-swift/grammar.js
M unified/extractor/tree-sitter-swift/node-types.yml
Log Message:
-----------
unified: make compilation_condition named and add fields
Commit: e1a0e204b13b9844eacace70a35cccb0b040b1e0
https://github.com/krishnprakash/codeql/commit/e1a0e204b13b9844eacace70a35cccb0b040b1e0
Author: Taus <tau...@github.com>
Date: 2026-05-12 (Tue, 12 May 2026)
Changed paths:
M unified/extractor/tree-sitter-swift/grammar.js
M unified/extractor/tree-sitter-swift/node-types.yml
Log Message:
-----------
unified: Promote enum_type_parameter to named and add fields
Commit: eba9f35673465e2576020b8ce8c66ad53418785a
https://github.com/krishnprakash/codeql/commit/eba9f35673465e2576020b8ce8c66ad53418785a
Author: Taus <tau...@github.com>
Date: 2026-05-12 (Tue, 12 May 2026)
Changed paths:
M unified/extractor/tree-sitter-swift/grammar.js
M unified/extractor/tree-sitter-swift/node-types.yml
Log Message:
-----------
unified: Get rid of $children* on key_path_expression
Doing this involved materialising a lot of previously anonymous nodes,
and I'm not entirely sure it's the best solution, but the node types
look decent enough.
Commit: 6e5e650b426351f18d7ac38edf43aae449a319cd
https://github.com/krishnprakash/codeql/commit/6e5e650b426351f18d7ac38edf43aae449a319cd
Author: Taus <tau...@github.com>
Date: 2026-05-12 (Tue, 12 May 2026)
Changed paths:
M unified/extractor/tree-sitter-swift/grammar.js
M unified/extractor/tree-sitter-swift/node-types.yml
Log Message:
-----------
unified: Add fields for macro_declaration
Commit: 406a02fa49a7835336b029814baf02ef36514eb5
https://github.com/krishnprakash/codeql/commit/406a02fa49a7835336b029814baf02ef36514eb5
Author: Taus <tau...@github.com>
Date: 2026-05-12 (Tue, 12 May 2026)
Changed paths:
M unified/extractor/tree-sitter-swift/grammar.js
M unified/extractor/tree-sitter-swift/node-types.yml
Log Message:
-----------
unified: Add fields to switch_entry
Of note: this involved un-inlining where_clause.
Commit: 2010844b1eb531e44fcc9c474a4c498f03bf1a17
https://github.com/krishnprakash/codeql/commit/2010844b1eb531e44fcc9c474a4c498f03bf1a17
Author: Taus <tau...@github.com>
Date: 2026-05-12 (Tue, 12 May 2026)
Changed paths:
M unified/extractor/tree-sitter-swift/grammar.js
M unified/extractor/tree-sitter-swift/node-types.yml
Log Message:
-----------
unified: Add fields to property_declaration
Not entirely sure about the `binding?` field on `pattern`, but it looks
like that might actually be useful.
Commit: 2eee2e50dc3829a91500eea2fd62f9e0721b2556
https://github.com/krishnprakash/codeql/commit/2eee2e50dc3829a91500eea2fd62f9e0721b2556
Author: Taus <tau...@github.com>
Date: 2026-05-12 (Tue, 12 May 2026)
Changed paths:
M unified/extractor/tree-sitter-swift/grammar.js
M unified/extractor/tree-sitter-swift/node-types.yml
Log Message:
-----------
unified: clean up patterns
Mostly by materialising a bunch of (useful) intermediate nodes.
Commit: eb480d1de47424e700692ccc4349b5ba7ecedab3
https://github.com/krishnprakash/codeql/commit/eb480d1de47424e700692ccc4349b5ba7ecedab3
Author: Taus <tau...@github.com>
Date: 2026-05-12 (Tue, 12 May 2026)
Changed paths:
M unified/extractor/tree-sitter-swift/grammar.js
M unified/extractor/tree-sitter-swift/node-types.yml
Log Message:
-----------
unified: Make parenthesized_type named
I'm not entirely happy about this solution, but it seemed to be the most
straightforward way of avoiding various kinds of token bleeding.
Commit: 52d72836f904996278dc745ae96984f3f299ad6b
https://github.com/krishnprakash/codeql/commit/52d72836f904996278dc745ae96984f3f299ad6b
Author: Taus <tau...@github.com>
Date: 2026-05-12 (Tue, 12 May 2026)
Changed paths:
M unified/extractor/tree-sitter-swift/grammar.js
M unified/extractor/tree-sitter-swift/node-types.yml
Log Message:
-----------
unified: Fix multiline_comment issue
This named node (which is in fact emitted by the scanner as an
`external`) was appearing as a child of `class_body` because of inlining
via `_class_member_separator`. This, in itself, appears to be somewhat
of a hack, to handle cases where a multiline comment signals the end of
a class member.
To fix this, we make the external node _unnamed_, but keep the `extras`
node _named_ (so we can still extract it from the parse tree), and we
add a new rule `multiline_comment` that mediates between the two. That
way, the use inside `_class_member_separator` can use the unnamed
variant, and no node is pushed into $children.
Commit: bfe5aa8d42e2f7b5064928e77c9ffa0791c98c2c
https://github.com/krishnprakash/codeql/commit/bfe5aa8d42e2f7b5064928e77c9ffa0791c98c2c
Author: Taus <tau...@github.com>
Date: 2026-05-12 (Tue, 12 May 2026)
Changed paths:
M unified/ql/lib/codeql/unified/Ast.qll
M unified/ql/lib/unified.dbscheme
Log Message:
-----------
unified: Regenerate files
Commit: 5d6dc5c3c34e3e0e82809b70ecc05df6c88467b7
https://github.com/krishnprakash/codeql/commit/5d6dc5c3c34e3e0e82809b70ecc05df6c88467b7
Author: Taus <tau...@github.com>
Date: 2026-05-13 (Wed, 13 May 2026)
Changed paths:
M unified/extractor/tree-sitter-swift/grammar.js
M unified/extractor/tree-sitter-swift/node-types.yml
Log Message:
-----------
unified: Clean up statements/block mess
Introduces (by making it named) a `block` node, and conversely makes
`statements` anonymous. This enables us to sensibly distinguish between
the "then" and "else" branch of an `if_statement`, which we were not
able to previously.
Commit: ea6f3a9568223b554c7c4434051859c335dcff2a
https://github.com/krishnprakash/codeql/commit/ea6f3a9568223b554c7c4434051859c335dcff2a
Author: Taus <tau...@github.com>
Date: 2026-05-13 (Wed, 13 May 2026)
Changed paths:
M unified/extractor/tree-sitter-swift/grammar.js
M unified/extractor/tree-sitter-swift/node-types.yml
Log Message:
-----------
unified: Encapsulate function parameters
The field representation would have made it difficult to figure out
which parameters correspond to which default values and attributes, so
instead we now encapsulate these in a new `function_parameter` node.
Commit: c8f7c3d7f2d199f593104f91bfb125e0c854e8a4
https://github.com/krishnprakash/codeql/commit/c8f7c3d7f2d199f593104f91bfb125e0c854e8a4
Author: Taus <tau...@github.com>
Date: 2026-05-13 (Wed, 13 May 2026)
Changed paths:
M unified/extractor/tree-sitter-swift/grammar.js
M unified/extractor/tree-sitter-swift/node-types.yml
Log Message:
-----------
unified: Group more paired items
Same as in the preceding commit, these items do not make sense as
separate fields on the parent node, so we materialise (or create new)
intermediate nodes to group them together.
Commit: 9787a8b072802b3ba5777c218f47b4e87ee08f32
https://github.com/krishnprakash/codeql/commit/9787a8b072802b3ba5777c218f47b4e87ee08f32
Author: Taus <tau...@github.com>
Date: 2026-05-13 (Wed, 13 May 2026)
Changed paths:
M unified/extractor/tree-sitter-swift/grammar.js
M unified/extractor/tree-sitter-swift/node-types.yml
Log Message:
-----------
unified: Group enum entries
Same as in the preceding commit.
Commit: caef72b0476bda5012e9d3b7303f4e3de25cd77a
https://github.com/krishnprakash/codeql/commit/caef72b0476bda5012e9d3b7303f4e3de25cd77a
Author: Taus <tau...@github.com>
Date: 2026-05-13 (Wed, 13 May 2026)
Changed paths:
M unified/extractor/tree-sitter-swift/grammar.js
M unified/extractor/tree-sitter-swift/node-types.yml
Log Message:
-----------
unified: Introduced named `property_binding` node
This groups together a bunch of related values that would otherwise be
impossible to match up correctly.
Commit: f4f85b58ca7181cb5b0d3a3e954bee972b762d48
https://github.com/krishnprakash/codeql/commit/f4f85b58ca7181cb5b0d3a3e954bee972b762d48
Author: Taus <tau...@github.com>
Date: 2026-05-13 (Wed, 13 May 2026)
Changed paths:
M unified/extractor/tree-sitter-swift/grammar.js
M unified/extractor/tree-sitter-swift/node-types.yml
Log Message:
-----------
unified: Remove some pointless fields
All of these fields have contents that are uniquely determined by the
node they appear on, so they convey no information.
Commit: dd9c066c6139ccc4eeba6610a780e8cfffef7d8a
https://github.com/krishnprakash/codeql/commit/dd9c066c6139ccc4eeba6610a780e8cfffef7d8a
Author: Taus <tau...@github.com>
Date: 2026-05-13 (Wed, 13 May 2026)
Changed paths:
M unified/ql/lib/codeql/unified/Ast.qll
M unified/ql/lib/unified.dbscheme
Log Message:
-----------
unified: Regenerate files
Commit: fbc861e7a407fea2f809e0094a6f0457bdd2a5ed
https://github.com/krishnprakash/codeql/commit/fbc861e7a407fea2f809e0094a6f0457bdd2a5ed
Author: Taus <tau...@github.com>
Date: 2026-05-26 (Tue, 26 May 2026)
Changed paths:
M unified/extractor/tree-sitter-swift/grammar.js
Log Message:
-----------
unified: Clarify grammar comment
Co-authored-by: Copilot Autofix powered by AI <17572847...@users.noreply.github.com>
Commit: d6e7e38e1cb2741955f89e16f3819863ec7cea5d
https://github.com/krishnprakash/codeql/commit/d6e7e38e1cb2741955f89e16f3819863ec7cea5d
Author: Taus <tau...@github.com>
Date: 2026-05-27 (Wed, 27 May 2026)
Changed paths:
M actions/ql/examples/snippets/uses_pinned_sha.ql
M actions/ql/lib/CHANGELOG.md
R actions/ql/lib/change-notes/2026-04-15-poisonable-steps-additions-alterations.md
A actions/ql/lib/change-notes/2026-05-12-improved-alphanumeric-regex.md
A actions/ql/lib/change-notes/released/0.4.36.md
M actions/ql/lib/codeql-pack.release.yml
M actions/ql/lib/codeql/actions/Bash.qll
M actions/ql/lib/qlpack.yml
M actions/ql/src/CHANGELOG.md
M actions/ql/src/Security/CWE-829/UnpinnedActionsTag.ql
M actions/ql/src/Security/CWE-829/UntrustedCheckoutCritical.md
M actions/ql/src/Security/CWE-829/UntrustedCheckoutCritical.ql
M actions/ql/src/Security/CWE-829/UntrustedCheckoutHigh.md
M actions/ql/src/Security/CWE-829/UntrustedCheckoutHigh.ql
M actions/ql/src/Security/CWE-829/UntrustedCheckoutMedium.md
M actions/ql/src/Security/CWE-829/UntrustedCheckoutMedium.ql
R actions/ql/src/change-notes/2026-04-15-untrusted-checkout-improvements-helpfile.md
R actions/ql/src/change-notes/2026-04-15-untrusted-checkout-improvements-metadata.md
A actions/ql/src/change-notes/2026-05-05-untrusted-checkout-high.md
A actions/ql/src/change-notes/2026-05-12-sha256-pinned-actions.md
A actions/ql/src/change-notes/2026-05-14-further-iteration-untrusted-checkout-improvements-alert.md
A actions/ql/src/change-notes/2026-05-14-further-iteration-untrusted-checkout-improvements-helpfile.md
A actions/ql/src/change-notes/2026-05-14-further-iteration-untrusted-checkout-improvements-metadata.md
A actions/ql/src/change-notes/released/0.6.28.md
M actions/ql/src/codeql-pack.release.yml
M actions/ql/src/qlpack.yml
A actions/ql/test/query-tests/Security/CWE-829/.github/actions/unpinned-tag/action.yml
M actions/ql/test/query-tests/Security/CWE-829/.github/workflows/unpinned_tags.yml
M actions/ql/test/query-tests/Security/CWE-829/UnpinnedActionsTag.expected
M actions/ql/test/query-tests/Security/CWE-829/UntrustedCheckoutCritical.expected
M actions/ql/test/query-tests/Security/CWE-829/UntrustedCheckoutHigh.expected
A cpp/downgrades/837c4e02326aee4582405d069263092e80a15d82/old.dbscheme
A cpp/downgrades/837c4e02326aee4582405d069263092e80a15d82/semmlecode.cpp.dbscheme
A cpp/downgrades/837c4e02326aee4582405d069263092e80a15d82/upgrade.properties
A cpp/downgrades/ef8d209a22e27413aaaeff4446f0ecb9fa2c227b/old.dbscheme
A cpp/downgrades/ef8d209a22e27413aaaeff4446f0ecb9fa2c227b/semmlecode.cpp.dbscheme
A cpp/downgrades/ef8d209a22e27413aaaeff4446f0ecb9fa2c227b/upgrade.properties
M cpp/ql/lib/CHANGELOG.md
M cpp/ql/lib/DefaultOptions.qll
M cpp/ql/lib/Options.qll
A cpp/ql/lib/change-notes/2026-05-15-secure-scanf.md
A cpp/ql/lib/change-notes/2026-05-16-alias-template.md
A cpp/ql/lib/change-notes/2026-05-18-alias-type.md
A cpp/ql/lib/change-notes/2026-05-21-generated-from.md
A cpp/ql/lib/change-notes/2026-05-27-deprecated-removal.md
A cpp/ql/lib/change-notes/released/10.1.1.md
M cpp/ql/lib/codeql-pack.release.yml
M cpp/ql/lib/cpp.qll
M cpp/ql/lib/qlpack.yml
M cpp/ql/lib/semmle/code/cpp/Class.qll
M cpp/ql/lib/semmle/code/cpp/Declaration.qll
M cpp/ql/lib/semmle/code/cpp/Element.qll
M cpp/ql/lib/semmle/code/cpp/Function.qll
M cpp/ql/lib/semmle/code/cpp/Location.qll
R cpp/ql/lib/semmle/code/cpp/Member.qll
M cpp/ql/lib/semmle/code/cpp/TemplateParameter.qll
M cpp/ql/lib/semmle/code/cpp/TypedefType.qll
M cpp/ql/lib/semmle/code/cpp/Variable.qll
M cpp/ql/lib/semmle/code/cpp/commons/Scanf.qll
M cpp/ql/lib/semmle/code/cpp/internal/ResolveClass.qll
M cpp/ql/lib/semmle/code/cpp/ir/dataflow/internal/SsaImpl.qll
M cpp/ql/lib/semmle/code/cpp/ir/dataflow/internal/SsaImplCommon.qll
M cpp/ql/lib/semmle/code/cpp/models/implementations/Fopen.qll
M cpp/ql/lib/semmle/code/cpp/models/implementations/Scanf.qll
M cpp/ql/lib/semmle/code/cpp/models/interfaces/FlowSource.qll
M cpp/ql/lib/semmle/code/cpp/security/FlowSources.qll
M cpp/ql/lib/semmlecode.cpp.dbscheme
M cpp/ql/lib/semmlecode.cpp.dbscheme.stats
A cpp/ql/lib/upgrades/770002bb02322e04fa25345838ce6e82af285a0b/old.dbscheme
A cpp/ql/lib/upgrades/770002bb02322e04fa25345838ce6e82af285a0b/semmlecode.cpp.dbscheme
A cpp/ql/lib/upgrades/770002bb02322e04fa25345838ce6e82af285a0b/upgrade.properties
A cpp/ql/lib/upgrades/837c4e02326aee4582405d069263092e80a15d82/old.dbscheme
A cpp/ql/lib/upgrades/837c4e02326aee4582405d069263092e80a15d82/semmlecode.cpp.dbscheme
A cpp/ql/lib/upgrades/837c4e02326aee4582405d069263092e80a15d82/upgrade.properties
M cpp/ql/src/CHANGELOG.md
M cpp/ql/src/Security/CWE/CWE-020/ExternalAPIsSpecific.qll
M cpp/ql/src/Security/CWE/CWE-311/CleartextTransmission.ql
A cpp/ql/src/change-notes/released/1.6.3.md
M cpp/ql/src/codeql-pack.release.yml
M cpp/ql/src/qlpack.yml
M cpp/ql/test/experimental/query-tests/Security/CWE/CWE-193/constant-size/ConstantSizeArrayOffByOne.expected
A cpp/ql/test/library-tests/dataflow/certain/test.cpp
A cpp/ql/test/library-tests/dataflow/certain/test.expected
A cpp/ql/test/library-tests/dataflow/certain/test.ql
M cpp/ql/test/library-tests/dataflow/dataflow-tests/dataflow-consistency.expected
M cpp/ql/test/library-tests/dataflow/dataflow-tests/localFlow-ir.expected
M cpp/ql/test/library-tests/dataflow/dataflow-tests/test-source-sink.expected
M cpp/ql/test/library-tests/dataflow/dataflow-tests/test.cpp
M cpp/ql/test/library-tests/dataflow/dataflow-tests/uninitialized.expected
M cpp/ql/test/library-tests/dataflow/source-sink-tests/sources-and-sinks.cpp
M cpp/ql/test/library-tests/dataflow/taint-tests/localTaint.expected
M cpp/ql/test/library-tests/friends/loop/friends.expected
M cpp/ql/test/library-tests/ir/ir/PrintAST.expected
M cpp/ql/test/library-tests/scanf/scanfFormatLiteral.expected
M cpp/ql/test/library-tests/scanf/scanfFunctionCall.expected
A cpp/ql/test/library-tests/scanf/scanfFunctionCallOutput.expected
A cpp/ql/test/library-tests/scanf/scanfFunctionCallOutput.ql
M cpp/ql/test/library-tests/scanf/test.c
M cpp/ql/test/library-tests/using-aliases/using-alias.expected
M cpp/ql/test/query-tests/Security/CWE/CWE-311/semmle/tests/test3.cpp
M csharp/.config/dotnet-tools.json
M csharp/.paket/Paket.Restore.targets
M csharp/extractor/Semmle.Extraction.CSharp.Util/SymbolExtensions.cs
M csharp/extractor/Semmle.Extraction.CSharp/Entities/Compilations/Compilation.cs
M csharp/extractor/Semmle.Extraction.CSharp/Entities/Expression.cs
M csharp/extractor/Semmle.Extraction.CSharp/Entities/Expressions/Factory.cs
M csharp/extractor/Semmle.Extraction.CSharp/Entities/Expressions/Invocation.cs
M csharp/extractor/Semmle.Extraction.CSharp/Entities/Expressions/PostfixUnary.cs
A csharp/extractor/Semmle.Extraction.CSharp/Entities/Expressions/PrefixUnary.cs
R csharp/extractor/Semmle.Extraction.CSharp/Entities/Expressions/Unary.cs
M csharp/paket.lock
M csharp/paket.main.bzl
M csharp/ql/campaigns/Solorigate/lib/CHANGELOG.md
A csharp/ql/campaigns/Solorigate/lib/change-notes/released/1.7.67.md
M csharp/ql/campaigns/Solorigate/lib/codeql-pack.release.yml
M csharp/ql/campaigns/Solorigate/lib/qlpack.yml
M csharp/ql/campaigns/Solorigate/src/CHANGELOG.md
A csharp/ql/campaigns/Solorigate/src/change-notes/released/1.7.67.md
M csharp/ql/campaigns/Solorigate/src/codeql-pack.release.yml
M csharp/ql/campaigns/Solorigate/src/qlpack.yml
M csharp/ql/lib/CHANGELOG.md
A csharp/ql/lib/change-notes/2026-05-12-user-increment-decrement.md
A csharp/ql/lib/change-notes/2026-05-20-csharp14-dotnet10.md
A csharp/ql/lib/change-notes/released/6.0.1.md
M csharp/ql/lib/codeql-pack.release.yml
M csharp/ql/lib/qlpack.yml
M csharp/ql/lib/semmle/code/csharp/Callable.qll
M csharp/ql/lib/semmle/code/csharp/controlflow/internal/ControlFlowGraph.qll
M csharp/ql/lib/semmle/code/csharp/dispatch/Dispatch.qll
M csharp/ql/lib/semmle/code/csharp/exprs/Call.qll
M csharp/ql/src/CHANGELOG.md
M csharp/ql/src/Security Features/CWE-502/UnsafeDeserialization.qhelp
M csharp/ql/src/Security Features/CWE-502/UnsafeDeserializationUntrustedInput.qhelp
A csharp/ql/src/change-notes/released/1.7.3.md
M csharp/ql/src/codeql-pack.release.yml
M csharp/ql/src/qlpack.yml
M csharp/ql/test/library-tests/dataflow/operators/Operator.cs
M csharp/ql/test/library-tests/dataflow/operators/operatorFlow.expected
M csharp/ql/test/library-tests/extension/PrintAst.expected
M csharp/ql/test/library-tests/extension/extensionTypes.expected
M csharp/ql/test/library-tests/extension/extensions.cs
M csharp/ql/test/library-tests/extension/extensions.expected
M csharp/ql/test/library-tests/operators/Operators3.expected
M csharp/ql/test/library-tests/operators/Operators4.expected
M csharp/ql/test/library-tests/operators/Operators5.expected
A csharp/ql/test/library-tests/operators/Operators6.expected
A csharp/ql/test/library-tests/operators/Operators6.ql
M csharp/ql/test/library-tests/operators/PrintAst.expected
M csharp/ql/test/library-tests/operators/operators.cs
M docs/codeql/codeql-language-guides/codeql-for-rust.rst
A docs/codeql/codeql-language-guides/customizing-library-models-for-rust.rst
A docs/codeql/codeql-overview/codeql-changelog/codeql-cli-2.25.5.rst
M docs/codeql/codeql-overview/codeql-changelog/index.rst
M docs/codeql/reusables/supported-versions-compilers.rst
M go/extractor/toolchain/toolchain.go
M go/extractor/toolchain/toolchain_test.go
M go/ql/consistency-queries/CHANGELOG.md
A go/ql/consistency-queries/change-notes/released/1.0.50.md
M go/ql/consistency-queries/codeql-pack.release.yml
M go/ql/consistency-queries/qlpack.yml
M go/ql/lib/CHANGELOG.md
A go/ql/lib/change-notes/released/7.1.1.md
M go/ql/lib/codeql-pack.release.yml
M go/ql/lib/qlpack.yml
M go/ql/src/CHANGELOG.md
A go/ql/src/change-notes/released/1.6.3.md
M go/ql/src/codeql-pack.release.yml
M go/ql/src/qlpack.yml
M java/documentation/library-coverage/coverage.csv
M java/documentation/library-coverage/coverage.rst
M java/ql/integration-tests/java/buildless-maven-existing-settings-xml/maven-fetches.expected
M java/ql/integration-tests/java/buildless-maven-mirrorof/maven-fetches.expected
M java/ql/integration-tests/java/buildless-maven-timeout/diagnostics.expected
M java/ql/integration-tests/java/buildless-maven-tolerate-unavailable-dependency/diagnostics.expected
M java/ql/integration-tests/java/buildless-maven/maven-fetches.expected
A java/ql/integration-tests/update-ferstl-depgraph-dependencies.sh
M java/ql/lib/CHANGELOG.md
R java/ql/lib/change-notes/2026-04-21-path-injection-read-subkind.md
A java/ql/lib/change-notes/2026-05-19-avro-mads.md
A java/ql/lib/change-notes/released/9.1.1.md
M java/ql/lib/codeql-pack.release.yml
A java/ql/lib/ext/generated/llmgenerator/org.apache.avro.file.model.yml
A java/ql/lib/ext/generated/llmgenerator/org.apache.avro.model.yml
A java/ql/lib/ext/generated/llmgenerator/org.apache.avro.util.model.yml
M java/ql/lib/qlpack.yml
M java/ql/lib/semmle/code/java/ControlFlowGraph.qll
M java/ql/src/CHANGELOG.md
M java/ql/src/Security/CWE/CWE-502/UnsafeDeserialization.qhelp
R java/ql/src/change-notes/2026-04-21-zipslip-exclude-read-sinks.md
A java/ql/src/change-notes/released/1.11.3.md
M java/ql/src/codeql-pack.release.yml
M java/ql/src/qlpack.yml
M javascript/ql/lib/CHANGELOG.md
A javascript/ql/lib/change-notes/2026-05-14-sensitive-data.md
A javascript/ql/lib/change-notes/released/2.7.1.md
M javascript/ql/lib/codeql-pack.release.yml
M javascript/ql/lib/qlpack.yml
M javascript/ql/src/CHANGELOG.md
A javascript/ql/src/change-notes/released/2.3.10.md
M javascript/ql/src/codeql-pack.release.yml
M javascript/ql/src/qlpack.yml
M misc/suite-helpers/CHANGELOG.md
A misc/suite-helpers/change-notes/released/1.0.50.md
M misc/suite-helpers/codeql-pack.release.yml
M misc/suite-helpers/qlpack.yml
M python/extractor/cli-integration-test/writing-diagnostics/diagnostics.expected
M python/extractor/semmle/logging.py
M python/ql/lib/CHANGELOG.md
A python/ql/lib/change-notes/2026-05-14-sensitive-data.md
A python/ql/lib/change-notes/released/7.1.1.md
M python/ql/lib/codeql-pack.release.yml
M python/ql/lib/qlpack.yml
M python/ql/src/CHANGELOG.md
M python/ql/src/Security/CWE-502/UnsafeDeserialization.qhelp
A python/ql/src/change-notes/released/1.8.3.md
M python/ql/src/codeql-pack.release.yml
M python/ql/src/qlpack.yml
M python/ql/test/query-tests/Security/CWE-312-CleartextLogging/CleartextLogging.expected
M python/ql/test/query-tests/Security/CWE-312-CleartextLogging/test.py
M ql/Cargo.lock
M ruby/extractor/src/extractor.rs
M ruby/ql/integration-tests/diagnostics/syntax-error/diagnostics.expected
M ruby/ql/integration-tests/diagnostics/unknown-encoding/diagnostics.expected
M ruby/ql/lib/CHANGELOG.md
A ruby/ql/lib/change-notes/released/5.2.1.md
M ruby/ql/lib/codeql-pack.release.yml
M ruby/ql/lib/qlpack.yml
M ruby/ql/src/CHANGELOG.md
A ruby/ql/src/change-notes/released/1.6.3.md
M ruby/ql/src/codeql-pack.release.yml
M ruby/ql/src/qlpack.yml
M ruby/ql/src/queries/security/cwe-502/UnsafeDeserialization.qhelp
M rust/ql/lib/CHANGELOG.md
A rust/ql/lib/change-notes/2026-05-14-sensitive-data.md
A rust/ql/lib/change-notes/released/0.2.14.md
M rust/ql/lib/codeql-pack.release.yml
M rust/ql/lib/codeql/rust/internal/typeinference/TypeInference.qll
M rust/ql/lib/qlpack.yml
M rust/ql/src/CHANGELOG.md
A rust/ql/src/change-notes/released/0.1.35.md
M rust/ql/src/codeql-pack.release.yml
M rust/ql/src/qlpack.yml
M rust/ql/test/library-tests/sensitivedata/test.rs
M shared/concepts/CHANGELOG.md
A shared/concepts/change-notes/released/0.0.24.md
M shared/concepts/codeql-pack.release.yml
M shared/concepts/codeql/concepts/internal/SensitiveDataHeuristics.qll
M shared/concepts/qlpack.yml
M shared/controlflow/CHANGELOG.md
A shared/controlflow/change-notes/released/2.0.34.md
M shared/controlflow/codeql-pack.release.yml
M shared/controlflow/codeql/controlflow/ControlFlowGraph.qll
M shared/controlflow/qlpack.yml
M shared/dataflow/CHANGELOG.md
A shared/dataflow/change-notes/released/2.1.6.md
M shared/dataflow/codeql-pack.release.yml
M shared/dataflow/qlpack.yml
M shared/mad/CHANGELOG.md
A shared/mad/change-notes/released/1.0.50.md
M shared/mad/codeql-pack.release.yml
M shared/mad/qlpack.yml
M shared/quantum/CHANGELOG.md
A shared/quantum/change-notes/released/0.0.28.md
M shared/quantum/codeql-pack.release.yml
M shared/quantum/qlpack.yml
M shared/rangeanalysis/CHANGELOG.md
A shared/rangeanalysis/change-notes/released/1.0.50.md
M shared/rangeanalysis/codeql-pack.release.yml
M shared/rangeanalysis/qlpack.yml
M shared/regex/CHANGELOG.md
A shared/regex/change-notes/released/1.0.50.md
M shared/regex/codeql-pack.release.yml
M shared/regex/qlpack.yml
M shared/ssa/CHANGELOG.md
A shared/ssa/change-notes/released/2.0.26.md
M shared/ssa/codeql-pack.release.yml
M shared/ssa/qlpack.yml
M shared/threat-models/CHANGELOG.md
A shared/threat-models/change-notes/released/1.0.50.md
M shared/threat-models/codeql-pack.release.yml
M shared/threat-models/qlpack.yml
M shared/tree-sitter-extractor/src/extractor/mod.rs
M shared/tree-sitter-extractor/src/file_paths.rs
M shared/tree-sitter-extractor/src/generator/mod.rs
M shared/tutorial/CHANGELOG.md
A shared/tutorial/change-notes/released/1.0.50.md
M shared/tutorial/codeql-pack.release.yml
M shared/tutorial/qlpack.yml
M shared/typeflow/CHANGELOG.md
A shared/typeflow/change-notes/released/1.0.50.md
M shared/typeflow/codeql-pack.release.yml
M shared/typeflow/qlpack.yml
M shared/typeinference/CHANGELOG.md
A shared/typeinference/change-notes/released/0.0.31.md
M shared/typeinference/codeql-pack.release.yml
M shared/typeinference/codeql/typeinference/internal/TypeInference.qll
M shared/typeinference/qlpack.yml
M shared/typetracking/CHANGELOG.md
A shared/typetracking/change-notes/released/2.0.34.md
M shared/typetracking/codeql-pack.release.yml
M shared/typetracking/qlpack.yml
M shared/typos/CHANGELOG.md
A shared/typos/change-notes/released/1.0.50.md
M shared/typos/codeql-pack.release.yml
M shared/typos/qlpack.yml
M shared/util/CHANGELOG.md
A shared/util/change-notes/released/2.0.37.md
M shared/util/codeql-pack.release.yml
M shared/util/codeql/util/DenseRank.qll
M shared/util/qlpack.yml
M shared/xml/CHANGELOG.md
A shared/xml/change-notes/released/1.0.50.md
M shared/xml/codeql-pack.release.yml
M shared/xml/qlpack.yml
M shared/yaml/CHANGELOG.md
A shared/yaml/change-notes/released/1.0.50.md
M shared/yaml/codeql-pack.release.yml
M shared/yaml/qlpack.yml
M shared/yeast-macros/src/parse.rs
M shared/yeast/doc/yeast.md
M shared/yeast/src/captures.rs
M shared/yeast/src/dump.rs
M shared/yeast/src/lib.rs
M shared/yeast/src/node_types_yaml.rs
M shared/yeast/src/schema.rs
M shared/yeast/src/visitor.rs
M shared/yeast/tests/test.rs
M swift/ql/lib/CHANGELOG.md
R swift/ql/lib/change-notes/2026-05-11-declared-interface-type.md
A swift/ql/lib/change-notes/2026-05-14-sensitive-data.md
A swift/ql/lib/change-notes/2026-05-19-swift-6.3.2.md
A swift/ql/lib/change-notes/released/6.6.0.md
M swift/ql/lib/codeql-pack.release.yml
M swift/ql/lib/qlpack.yml
M swift/ql/src/CHANGELOG.md
A swift/ql/src/change-notes/released/1.3.3.md
M swift/ql/src/codeql-pack.release.yml
M swift/ql/src/qlpack.yml
M swift/ql/test/query-tests/Security/CWE-311/CleartextTransmission.expected
M swift/ql/test/query-tests/Security/CWE-311/SensitiveExprs.expected
M swift/ql/test/query-tests/Security/CWE-311/testSend.swift
M swift/ql/test/query-tests/Security/CWE-328/WeakPasswordHashing.expected
M swift/ql/test/query-tests/Security/CWE-328/WeakSensitiveDataHashing.expected
M swift/ql/test/query-tests/Security/CWE-328/testCryptoKit.swift
M swift/third_party/resources/resource-dir-linux.zip
M swift/third_party/resources/resource-dir-macos.zip
M swift/third_party/resources/swift-prebuilt-linux.tar.zst
M swift/third_party/resources/swift-prebuilt-macos.tar.zst
M unified/AGENTS.md
A unified/extractor/ast_types.yml
M unified/extractor/src/extractor.rs
M unified/extractor/src/generator.rs
A unified/extractor/src/languages/mod.rs
M unified/extractor/src/languages/swift/swift.rs
M unified/extractor/src/main.rs
A unified/extractor/tests/corpus/swift/closures.txt
A unified/extractor/tests/corpus/swift/collections.txt
A unified/extractor/tests/corpus/swift/control-flow.txt
A unified/extractor/tests/corpus/swift/desugar.txt
A unified/extractor/tests/corpus/swift/functions.txt
A unified/extractor/tests/corpus/swift/literals.txt
A unified/extractor/tests/corpus/swift/loops.txt
A unified/extractor/tests/corpus/swift/operators.txt
A unified/extractor/tests/corpus/swift/optionals-and-errors.txt
A unified/extractor/tests/corpus/swift/types.txt
A unified/extractor/tests/corpus/swift/variables.txt
A unified/extractor/tests/corpus_tests.rs
A unified/ql/test/library-tests/BasicTest/name_expr.swift
M unified/ql/test/library-tests/BasicTest/test.expected
M unified/ql/test/library-tests/BasicTest/test.ql
A unified/scripts/update-corpus.sh
Log Message:
-----------
Unified: merge in `main`
Keeps our version of the conflicting files. They will be regenerated in
the next commit.
Commit: 41fd59c1c1a5927d945718afaf63aee1a9819db9
https://github.com/krishnprakash/codeql/commit/41fd59c1c1a5927d945718afaf63aee1a9819db9
Author: Taus <tau...@github.com>
Date: 2026-05-27 (Wed, 27 May 2026)
Changed paths:
M unified/ql/lib/codeql/unified/Ast.qll
M unified/ql/lib/unified.dbscheme
Log Message:
-----------
Unified: regenerate Ast.qll and dbscheme
Commit: 6be9e2315d493e2f1e10f771a9107b8895f2d1b5
https://github.com/krishnprakash/codeql/commit/6be9e2315d493e2f1e10f771a9107b8895f2d1b5
Author: Asger F <asg...@github.com>
Date: 2026-05-27 (Wed, 27 May 2026)
Changed paths:
M unified/extractor/tree-sitter-swift/grammar.js
M unified/extractor/tree-sitter-swift/node-types.yml
Log Message:
-----------
Merge pull request #21841 from github/tausbn/unified-swift-named-body-fields
Unified: Get rid of all `$children` fields
Commit: ad56ebd3615131cb34643749e05651f2b6fd4da7
https://github.com/krishnprakash/codeql/commit/ad56ebd3615131cb34643749e05651f2b6fd4da7
Author: Asger F <asg...@github.com>
Date: 2026-05-27 (Wed, 27 May 2026)
Changed paths:
M unified/ql/test/library-tests/BasicTest/test.expected
Log Message:
-----------
Unified: update test output
Commit: 313500e5812c00a6b7069f4eee07b1de70d401f8
https://github.com/krishnprakash/codeql/commit/313500e5812c00a6b7069f4eee07b1de70d401f8
Author: Asger F <asg...@github.com>
Date: 2026-05-27 (Wed, 27 May 2026)
Changed paths:
M unified/extractor/tests/corpus/swift/closures.txt
M unified/extractor/tests/corpus/swift/collections.txt
M unified/extractor/tests/corpus/swift/control-flow.txt
M unified/extractor/tests/corpus/swift/desugar.txt
M unified/extractor/tests/corpus/swift/functions.txt
M unified/extractor/tests/corpus/swift/literals.txt
M unified/extractor/tests/corpus/swift/loops.txt
M unified/extractor/tests/corpus/swift/operators.txt
M unified/extractor/tests/corpus/swift/optionals-and-errors.txt
M unified/extractor/tests/corpus/swift/types.txt
M unified/extractor/tests/corpus/swift/variables.txt
Log Message:
-----------
Unified: update test outputs
Commit: 17fe3e4e319e1b19077f07557a700ad7bdcacfa1
https://github.com/krishnprakash/codeql/commit/17fe3e4e319e1b19077f07557a700ad7bdcacfa1
Author: Asger F <asg...@github.com>
Date: 2026-05-27 (Wed, 27 May 2026)
Changed paths:
M unified/extractor/tests/corpus/swift/closures.txt
M unified/extractor/tests/corpus/swift/collections.txt
M unified/extractor/tests/corpus/swift/control-flow.txt
M unified/extractor/tests/corpus/swift/desugar.txt
M unified/extractor/tests/corpus/swift/functions.txt
M unified/extractor/tests/corpus/swift/literals.txt
M unified/extractor/tests/corpus/swift/loops.txt
M unified/extractor/tests/corpus/swift/operators.txt
M unified/extractor/tests/corpus/swift/optionals-and-errors.txt
M unified/extractor/tests/corpus/swift/types.txt
M unified/extractor/tests/corpus/swift/variables.txt
M unified/ql/test/library-tests/BasicTest/test.expected
Log Message:
-----------
Merge pull request #21901 from asgerf/unified-fix-test
Unified: fix test output
Commit: 39f1af57ffa29cd008efed596cb79a8be643fd4a
https://github.com/krishnprakash/codeql/commit/39f1af57ffa29cd008efed596cb79a8be643fd4a
Author: Phileco <132178579+k...@users.noreply.github.com>
Date: 2026-05-28 (Thu, 28 May 2026)
Changed paths:
M unified/extractor/tests/corpus/swift/closures.txt
M unified/extractor/tests/corpus/swift/collections.txt
M unified/extractor/tests/corpus/swift/control-flow.txt
M unified/extractor/tests/corpus/swift/desugar.txt
M unified/extractor/tests/corpus/swift/functions.txt
M unified/extractor/tests/corpus/swift/literals.txt
M unified/extractor/tests/corpus/swift/loops.txt
M unified/extractor/tests/corpus/swift/operators.txt
M unified/extractor/tests/corpus/swift/optionals-and-errors.txt
M unified/extractor/tests/corpus/swift/types.txt
M unified/extractor/tests/corpus/swift/variables.txt
M unified/extractor/tree-sitter-swift/grammar.js
M unified/extractor/tree-sitter-swift/node-types.yml
M unified/ql/test/library-tests/BasicTest/test.expected
Log Message:
-----------
Merge branch 'github:main' into main
Compare: https://github.com/krishnprakash/codeql/compare/f1cf442d7d77...39f1af57ffa2
To unsubscribe from these emails, change your notification settings at https://github.com/krishnprakash/codeql/settings/notifications
Reply all
Reply to author
Forward
0 new messages