René's URL Explorer Experiment


Title: CLI/Library Upgrade: 2.25.5 by dilanbhalla · Pull Request #21928 · github/codeql · GitHub

Open Graph Title: CLI/Library Upgrade: 2.25.5 by dilanbhalla · Pull Request #21928 · github/codeql

Description: CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security - CLI/Library Upgrade: 2.25.5 by dilanbhalla · Pull Request #21928 · github/codeql

Opengraph URL: https://github.com/github/codeql/pull/21928

direct link

Domain: github.com

react-profiling0
react-import-mapreact,react-dom,react-dom/client,react-dom/profiling,react-is,react-reconciler,react/compiler-runtime,react/jsx-dev-runtime,react/jsx-runtime,scheduler@d5750093facf
route-pattern/:user_id/:repository/pull/:id/files(.:format)
route-controllerpull_requests
route-actionfiles
fetch-noncev2:62467f46-6391-1900-34f5-731dee68e2ad
current-catalog-service-hashae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b
request-id853C:2C467D:D55DFE:1293FA0:6AF89146
html-safe-noncef4990c953ea6f9ac01c52e65dec936ccac2dac96c563ca093d3d9b91e276cc45
visitor-payloadeyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiI4NTNDOjJDNDY3RDpENTVERkU6MTI5M0ZBMDo2QUY4OTE0NiIsInZpc2l0b3JfaWQiOiI5MDE3MDA0NTk4MTUyOTU4Mjc4IiwicmVnaW9uX2VkZ2UiOiJpYWQiLCJyZWdpb25fcmVuZGVyIjoiaWFkIn0=
visitor-hmac5bb03a86534fc60a175617c62b2d2a33c720f61298df3def5dbfafb0389c4a7e
hovercard-subject-tagpull_request:3784039473
github-keyboard-shortcutsrepository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot
google-site-verificationApib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I
octolytics-urlhttps://collector.github.com/github/collect
analytics-location///pull_requests/show/files
fb:app_id1401488693436528
apple-itunes-appapp-id=1477376905, app-argument=https://github.com/github/codeql/pull/21928/files
og:imagehttps://avatars.githubusercontent.com/u/35575727?s=400&v=4
og:site_nameGitHub
og:typeobject
hostnamegithub.com
expected-hostnamegithub.com
None612d3e6ffd693e7ea8d9fcf452370995872baef31d825b1fedef704cd3d24ac7
turbo-cache-controlno-preview
diff-viewunified
go-importgithub.com/github/codeql git https://github.com/github/codeql.git
octolytics-dimension-user_id9919
octolytics-dimension-user_logingithub
octolytics-dimension-repository_id143040428
octolytics-dimension-repository_nwogithub/codeql
octolytics-dimension-repository_publictrue
octolytics-dimension-repository_is_forkfalse
octolytics-dimension-repository_network_root_id143040428
octolytics-dimension-repository_network_root_nwogithub/codeql
turbo-body-classeslogged-out env-production page-responsive full-width
disable-turbotrue
browser-stats-urlhttps://api.github.com/_private/browser/stats
browser-errors-urlhttps://api.github.com/_private/browser/errors
release072e34035c13c31543fba9f025cbbbda4210dae4
ui-targetfull
theme-color#1e2327
color-schemelight dark

Links:

Skip to contenthttps://github.com/github/codeql/pull/21928/files#start-of-content
https://github.com/
Sign inhttps://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F21928%2Ffiles
GitHubRepository hosting, code review, and collaborationhttps://github.com/platform
CopilotAI coding agent for tasks, projects, and automated workhttps://github.com/features/copilot
ActionsCI/CD and automationhttps://github.com/features/actions
Code QualityQuality analysis, fixes, and enforcementhttps://github.com/features/code-quality
CodespacesCloud development environmentshttps://github.com/features/codespaces
Code SecurityVulnerability detection and remediationhttps://github.com/security/advanced-security/code-security
Secret ProtectionSecret scanning and leak preventionhttps://github.com/security/advanced-security/secret-protection
All Featureshttps://github.com/features
Documentationhttps://docs.github.com/en
Traininghttps://learn.github.com/skills
Certificationshttps://learn.github.com/credentials
Build with Copilothttps://github.com/features/ai
Customize Copilothttps://docs.github.com/en/copilot/how-tos/copilot-on-github/customize-copilot/customize-copilot-overview
Integrationshttps://github.com/marketplace
Trending reposhttps://github.com/trending
GitHub Sponsorshttps://github.com/open-source/sponsors
Developer articleshttps://github.com/resources/articles
ChangelogYour source for the latest features, improvements, and fixes across GitHub products, all in one place.https://github.blog/changelog/
Enterpriseshttps://github.com/enterprise
Teamhttps://github.com/team
Startupshttps://github.com/enterprise/startups
Nonprofitshttps://github.com/solutions/industry/nonprofits
Healthcarehttps://github.com/solutions/industry/healthcare
Financial serviceshttps://github.com/solutions/industry/financial-services
Manufacturinghttps://github.com/solutions/industry/manufacturing
Governmenthttps://github.com/solutions/industry/government
See all industrieshttps://github.com/solutions/industry
Why GitHubhttps://github.com/why-github
Customer Storieshttps://github.com/customer-stories
Business insightshttps://github.com/solutions/executive-insights
Trust Centerhttps://github.com/trust-center
GitHub Advanced SecurityEnterprise-grade code securityhttps://github.com/security/advanced-security
Copilot for businessEnterprise-grade AI featureshttps://github.com/features/copilot/copilot-business
Premium SupportEnterprise-grade 24/7 supporthttps://github.com/enterprise/premium-support
Documentationhttps://docs.github.com/en
Resource centerhttps://github.com/resources
Bloghttps://github.blog/
Events & webinarshttps://github.com/resources/events
Community Forumhttps://github.com/orgs/community/discussions
Customer Storieshttps://github.com/customer-stories
Integrationshttps://github.com/marketplace
Customer supporthttps://help.github.com/
Traininghttps://learn.github.com/skills
GitHub Statushttps://www.githubstatus.com/
Abouthttps://github.com/about
Partnershttps://github.com/partners
Changeloghttps://github.blog/changelog/
GitHub UniverseThe event for developers, by developers — talks, workshops, and what’s next for GitHub.https://githubuniverse.com/
Pricinghttps://github.com/pricing
Sign inhttps://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F21928%2Ffiles
Sign uphttps://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fpull_requests%2Fshow%2Ffiles&source=header-repo&source_repo=github%2Fcodeql
Reloadhttps://github.com/github/codeql/pull/21928/files
Reloadhttps://github.com/github/codeql/pull/21928/files
Reloadhttps://github.com/github/codeql/pull/21928/files
githubhttps://github.com/github
codeqlhttps://github.com/github/codeql
Codehttps://github.com/github/codeql
Issues1k (1k)https://github.com/github/codeql/issues
Pull requests516 (516)https://github.com/github/codeql/pulls
Discussionshttps://github.com/github/codeql/discussions
Actionshttps://github.com/github/codeql/actions
Projectshttps://github.com/github/codeql/projects
Security and qualityhttps://github.com/github/codeql/security
Insightshttps://github.com/github/codeql/pulse
Sign up for GitHub https://github.com/signup?return_to=%2Fgithub%2Fcodeql%2Fissues%2Fnew%2Fchoose
terms of servicehttps://docs.github.com/terms
privacy statementhttps://docs.github.com/privacy
Sign inhttps://github.com/login?return_to=%2Fgithub%2Fcodeql%2Fissues%2Fnew%2Fchoose
dilanbhallahttps://github.com/dilanbhalla
github:mainhttps://github.com/github/codeql/tree/main
microsoft:dilan/upgrade-2.25.5https://github.com/microsoft/codeql/tree/dilan/upgrade-2.25.5
Conversation 2 https://github.com/github/codeql/pull/21928
Commits 250 https://github.com/github/codeql/pull/21928/commits
Checks 55 https://github.com/github/codeql/pull/21928/checks
Findings https://github.com/github/codeql/pull/21928/findings
Files changed https://github.com/github/codeql/pull/21928/files
Please reload this pagehttps://github.com/github/codeql/pull/21928/files
CLI/Library Upgrade: 2.25.5 https://github.com/github/codeql/pull/21928/files#top
Show all changes 1532 commits https://github.com/github/codeql/pull/21928/files
4378da4 Binary: Add IR for 'dup' instructions. MathiasVP Dec 16, 2025 https://github.com/github/codeql/pull/21928/commits/4378da47c9023c14459c3b26f0daf22a25c77f9f
79817dc Binary: Extract field references. MathiasVP Dec 16, 2025 https://github.com/github/codeql/pull/21928/commits/79817dc241ea75b025b0a89f7e8fb91193bcd579
ecf00f9 Binary: Add a FieldAddress instruction to the IR. MathiasVP Dec 16, 2025 https://github.com/github/codeql/pull/21928/commits/ecf00f95b43d347b4cb9139b56759036cd002b3d
03a907e Binary: Translate 'CilStfld' to IR. MathiasVP Dec 16, 2025 https://github.com/github/codeql/pull/21928/commits/03a907e88a2632f489940d589c27a4930a92f9c9
85d9007 Binary: Translate 'CilLdfld' to IR. MathiasVP Dec 16, 2025 https://github.com/github/codeql/pull/21928/commits/85d9007241123672de84c26cb648468a8323ff5d
286fc27 Brodes/nested sizeof or operation in sizeof audit fixes (#310) bdrodes Dec 16, 2025 https://github.com/github/codeql/pull/21928/commits/286fc277a1023ff8d2ed8cd299a3f8bd2c2b6b04
4919660 Merge branch 'main' of https://github.com/microsoft/codeql into auto/… Dec 16, 2025 https://github.com/github/codeql/pull/21928/commits/491966079564cdadd62c9ab39f7bbe4d962959ac
9d5a797 Porting over PR adding bad wchar query #226 (#229) dilanbhalla Dec 16, 2025 https://github.com/github/codeql/pull/21928/commits/9d5a797f552ab9972d4761c17c154517f9af9868
95c7a7c Merge branch 'main' of https://github.com/microsoft/codeql into auto/… Dec 16, 2025 https://github.com/github/codeql/pull/21928/commits/95c7a7cd91ce26fb9112c19bb52cfb02be6351f0
6a1f66b C#: Fix a merge conflict. MathiasVP Dec 17, 2025 https://github.com/github/codeql/pull/21928/commits/6a1f66b1375dc1bbc18f26dbacd9497eca3d928e
636d726 C#: Fix another merge conflict. MathiasVP Dec 17, 2025 https://github.com/github/codeql/pull/21928/commits/636d726e6ccde397469dd12c4e749ae5a9d63b71
c9b45fd Merge pull request #311 from microsoft/fix-merge-conflict-inTaintedPa… dilanbhalla Dec 17, 2025 https://github.com/github/codeql/pull/21928/commits/c9b45fd3c4a9ba8cbf3583e7a611dbe7cfc62a00
10b13f2 Merge branch 'main' of https://github.com/microsoft/codeql into auto/… Dec 17, 2025 https://github.com/github/codeql/pull/21928/commits/10b13f2b5af9269b5cfafaa55ec0e0881dff0f6d
9d04abb C#: Fix an incorrect merge conflict resolution. MathiasVP Dec 18, 2025 https://github.com/github/codeql/pull/21928/commits/9d04abbce37a9312ed6df2fa9079fcbf88f27141
fa9f02a C#: Drive-by fix. The 'GOOD' test was not actually MathiasVP Dec 18, 2025 https://github.com/github/codeql/pull/21928/commits/fa9f02a6f3e7ca3572c0de750015be1d7bb91003
55a3dae Minor fix to the query that should not alter prior semantics. Previou… bdrodes Dec 18, 2025 https://github.com/github/codeql/pull/21928/commits/55a3dae3b2fd5260d4034d6473edfab28ab3d37b
676c6b2 Merge pull request #313 from microsoft/brodes/nested_sizeof_or_operat… MathiasVP Dec 18, 2025 https://github.com/github/codeql/pull/21928/commits/676c6b294cf1c601958a80d812dad6b812fdfd5a
f9e1165 Merge branch 'main' into fix-merge-conflict-inTaintedPathQuery-2 MathiasVP Dec 18, 2025 https://github.com/github/codeql/pull/21928/commits/f9e116583137398275235502d5e0848a00ece359
47a0d22 Merge branch 'main' of https://github.com/microsoft/codeql into auto/… Dec 18, 2025 https://github.com/github/codeql/pull/21928/commits/47a0d22f17ee8384839ae34485d4ee4acbd89d44
626127b Merge pull request #312 from microsoft/fix-merge-conflict-inTaintedPa… dilanbhalla Dec 18, 2025 https://github.com/github/codeql/pull/21928/commits/626127b9c5cff353f26db805bfae41796ece92d4
15325a7 Merge branch 'main' of https://github.com/microsoft/codeql into auto/… Dec 18, 2025 https://github.com/github/codeql/pull/21928/commits/15325a762c348f1620c54c78f233cfc103284277
aba87c5 Massaging cpp leap year AP1 ropwareJB Dec 18, 2025 https://github.com/github/codeql/pull/21928/commits/aba87c5124c706a4953fff7795cfc58b0a62c565
e63e19b Break out query into subcomponents, comments ropwareJB Dec 23, 2025 https://github.com/github/codeql/pull/21928/commits/e63e19b67eb434a168e43bc250dd0d322dba9c4a
7b5163c init precise version ropwareJB Dec 23, 2025 https://github.com/github/codeql/pull/21928/commits/7b5163c80898e057361b6fbbde0c10b1921ad1a1
7649370 Test case qlref ropwareJB Dec 23, 2025 https://github.com/github/codeql/pull/21928/commits/7649370e5510f579ba24b05907d32fc3a8116cf9
c7a6543 Use Bens version + Autoformat ropwareJB Dec 26, 2025 https://github.com/github/codeql/pull/21928/commits/c7a6543ed1b8d40d1de3e3ecc30cb601fd202359
f6f63cb Refactoring common class between dataflow ropwareJB Dec 26, 2025 https://github.com/github/codeql/pull/21928/commits/f6f63cbd54d67e00383380f247fb0f86a2150618
50e182e Hashcons definition of exprEq_propertyPermissive ropwareJB Dec 26, 2025 https://github.com/github/codeql/pull/21928/commits/50e182ee5800ecc31492d1ca72aab74bdbb67073
ca9f66c Misc. updates. Removed the ignorable function mechanic, and switched … bdrodes Dec 29, 2025 https://github.com/github/codeql/pull/21928/commits/ca9f66c9f13b8967d1c734918d3cbefc5e0140cf
ec2e5f7 Code Commenting ropwareJB Dec 30, 2025 https://github.com/github/codeql/pull/21928/commits/ec2e5f786d98837eaa82d262a18b0e1a1916747a
fb72602 Autoformat ropwareJB Dec 30, 2025 https://github.com/github/codeql/pull/21928/commits/fb7260270d03db88dbc87fe605c64ca44b3b8129
c94edcf Add failing test case ropwareJB Dec 30, 2025 https://github.com/github/codeql/pull/21928/commits/c94edcf4bee92b38d65fb5d2f93b5fa5ff000cb8
6d7bd97 Check for leap day ropwareJB Dec 30, 2025 https://github.com/github/codeql/pull/21928/commits/6d7bd97e94520e78898d4e641f98121a50c8c7a0
662119a Adding a test for setting a year field through a return arg. Misc. tw… bdrodes Dec 30, 2025 https://github.com/github/codeql/pull/21928/commits/662119a52ff0f4b6a403edec8694e2d832e9e24f
1169f9e Assignment through out arg is causing too many FPs. bdrodes Dec 30, 2025 https://github.com/github/codeql/pull/21928/commits/1169f9e641c59253cfa32c1a452bd6db759a52f4
800abae Fix mislabeled test case ropwareJB Dec 31, 2025 https://github.com/github/codeql/pull/21928/commits/800abae831c2a336a8f970eceb364890ac07de53
d743fbf Add initial Java bytecode extractor and QL support gfs Jan 5, 2026 https://github.com/github/codeql/pull/21928/commits/d743fbfdb6b7bd67aa2606b4bb6e5c54cc5a2659
1c3a107 Handle null names in JVM extractor gfs Jan 5, 2026 https://github.com/github/codeql/pull/21928/commits/1c3a107d59454900cb21d545e8a14639b9f0c2c4
d5a8da2 Refactor JVM extractor indexing and opcode handling gfs Jan 6, 2026 https://github.com/github/codeql/pull/21928/commits/d5a8da276e3448ffff74df5f257d32ee44bdfa5f
31dd0e8 Add JVM IR translation support and test model gfs Jan 6, 2026 https://github.com/github/codeql/pull/21928/commits/31dd0e8092512b7e807cb4bda684c2be5ca685c8
f66db26 Refactor JVM instruction hierarchy and translation gfs Jan 6, 2026 https://github.com/github/codeql/pull/21928/commits/f66db262d6ef44b22d2d43f9254977c94d00184e
83e1236 Extract and expose JVM method access flags gfs Jan 6, 2026 https://github.com/github/codeql/pull/21928/commits/83e123634b296300244ae66ebd90f3be803d28cb
13f79e6 Extract and expose CIL method access flags gfs Jan 6, 2026 https://github.com/github/codeql/pull/21928/commits/13f79e6eec0931ffddded3f7dfcf25eac8cc2807
d80ab2d Update dependencies in qlpack.yml files gfs Jan 6, 2026 https://github.com/github/codeql/pull/21928/commits/d80ab2d3dd12807e7c3183ae4991b589c5ffd9c6
5e83ca4 Improve detection of transitive vulnerable calls gfs Jan 6, 2026 https://github.com/github/codeql/pull/21928/commits/5e83ca42fa7ef51ade555e35ec77187fdb5957af
7256e95 Add JVM stack state extraction and QL accessors gfs Jan 9, 2026 https://github.com/github/codeql/pull/21928/commits/7256e955a45ef09b73eade75516907320855659f
60e0fcd Merge tag 'codeql-cli/latest' into auto/sync-main-pr Jan 9, 2026 https://github.com/github/codeql/pull/21928/commits/60e0fcd196a695b709df1a4e9e07617fe8bd7bde
c2f683b Refactor stack element access to use getInputStackVariable gfs Jan 9, 2026 https://github.com/github/codeql/pull/21928/commits/c2f683b15b8a23fb35442a7e7e819baf506b4b18
02fd414 Optimize vulnerable call detection and summarization gfs Jan 9, 2026 https://github.com/github/codeql/pull/21928/commits/02fd4148b6d603250d60626bb0b161b72d92716f
5dedaee Cleanup state gfs Jan 9, 2026 https://github.com/github/codeql/pull/21928/commits/5dedaee1ff16ddaa545f61f0fd268970eaee7119
ec3b350 Misc. tweaks addressing FPs and cases observed during auditing. bdrodes Jan 12, 2026 https://github.com/github/codeql/pull/21928/commits/ec3b350dc84a9dc5d2bab0041d5a2d885bbdb96e
9b7f986 Fixed FP issue with ignorable constants, now no longer relying on the… bdrodes Jan 12, 2026 https://github.com/github/codeql/pull/21928/commits/9b7f98622e7f140080d2d534fadcdb5b54f73051
9b04b42 A leap year check sink can be a ExprCheckLeapYear component. bdrodes Jan 12, 2026 https://github.com/github/codeql/pull/21928/commits/9b04b42ae3611e33a851e4e728668cdce341c664
0926f3d Use single TRAP file for JVM extraction gfs Jan 12, 2026 https://github.com/github/codeql/pull/21928/commits/0926f3da628b2361dcf4c3f9a92bf6e93e7ca192
bc98a0f Revert JVM stack state precomputation gfs Jan 13, 2026 https://github.com/github/codeql/pull/21928/commits/bc98a0fe5faf8cda49ed223d6bf7df50caff980d
b9ccfee Revert VulnerableCalls pragma[nomagic] optimizations gfs Jan 13, 2026 https://github.com/github/codeql/pull/21928/commits/b9ccfee42457cf45235934808ebb4b73c73dbcc4
43109f5 Refactor call graph predicates for vulnerable method detection gfs Jan 13, 2026 https://github.com/github/codeql/pull/21928/commits/43109f57b70bc43a1fe2c5d9403e49378bb96df8
0fd33da Revert "Refactor call graph predicates for vulnerable method detection" gfs Jan 13, 2026 https://github.com/github/codeql/pull/21928/commits/0fd33da84bfe61f01b09130446651500956fa9b6
2f1a850 Check if there is a guard checking for a month that isnt a february v… ropwareJB Jan 13, 2026 https://github.com/github/codeql/pull/21928/commits/2f1a850ffaa781c5d7f1d37c0cdad61c267a37e7
b013012 Misc. updates. Specifically including how constant values are used to… bdrodes Jan 13, 2026 https://github.com/github/codeql/pull/21928/commits/b0130121ce29a7391d6286a9e9f406b8e8e7ec17
ce802bd More ignorable functions, and adding 0 as an ignorable constant. bdrodes Jan 13, 2026 https://github.com/github/codeql/pull/21928/commits/ce802bdd19d3e6db473e0833af616d342fd6660e
ba28175 Binary: Small cleanup by moving some x86 stuff into another file like… MathiasVP Jan 13, 2026 https://github.com/github/codeql/pull/21928/commits/ba28175e6dfcae678a207e97725665ae15f2a542
3282718 Add TIME_FIELDS struct and test case ropwareJB Jan 15, 2026 https://github.com/github/codeql/pull/21928/commits/328271838e8d6f78d17cecf466272e2b4e7f70c4
938b42a Removed unused predicates ropwareJB Jan 15, 2026 https://github.com/github/codeql/pull/21928/commits/938b42aca03a4015ebbb7b65754b89c016590908
4aaad23 "Precise" query overwrites previous version ropwareJB Jan 15, 2026 https://github.com/github/codeql/pull/21928/commits/4aaad2381522c57b1002658012c43a72fc0514d1
4bdb2e2 unit tests for weak hash chanel-y Jan 15, 2026 https://github.com/github/codeql/pull/21928/commits/4bdb2e2691af2f1727e001ead3aa4d731bee7dc3
021cdeb initial query, updated .expected file chanel-y Jan 15, 2026 https://github.com/github/codeql/pull/21928/commits/021cdeb197521bc8a628ea2d41c075b9b049929c
8756089 Removing hashcons usages from LeapYear.qll, inefficient and I'm not s… bdrodes Jan 15, 2026 https://github.com/github/codeql/pull/21928/commits/87560891605dcdf2631a7f230957b93bb7800a56
2e7dba2 Comment cleanup bdrodes Jan 15, 2026 https://github.com/github/codeql/pull/21928/commits/2e7dba2a1750699215b0496d3305352e93685356
9446a6b Updating query alert message. bdrodes Jan 15, 2026 https://github.com/github/codeql/pull/21928/commits/9446a6b8e555a8a5663deb8c19a114ce1404a0f0
aebaa87 Merge pull request #309 from microsoft/auto/sync-main-pr dilanbhalla Jan 16, 2026 https://github.com/github/codeql/pull/21928/commits/aebaa87fd9a4e2ef547a68c573a0c6008188ed14
bc76018 Misc. false positive and false negative updates. as a response to rev… bdrodes Jan 16, 2026 https://github.com/github/codeql/pull/21928/commits/bc76018c40fdffa911b545fb32312551700bfbdd
63639ea More FP tweaks. bdrodes Jan 20, 2026 https://github.com/github/codeql/pull/21928/commits/63639eaf647983d42b4550a2a6467dd97347a784
e55ee18 Updating test for UncheckedReturnValueForTImeFunctions. That query ne… bdrodes Jan 20, 2026 https://github.com/github/codeql/pull/21928/commits/e55ee18f8799ac21b07fbcaac285e106c17cf95b
c909338 Merge branch 'main' into ql-for-x86-and-cil gfs Jan 20, 2026 https://github.com/github/codeql/pull/21928/commits/c90933858f09dae20241200aacf6a6cc501919f0
f507239 New additions to the set of TimeConversionFunctions. bdrodes Jan 20, 2026 https://github.com/github/codeql/pull/21928/commits/f507239e243ea53e10e3ed69fc8d38435ab93297
2f64978 Binary/JVM: Add warning for implicit 'this' and slightly modify a pre… MathiasVP Jan 21, 2026 https://github.com/github/codeql/pull/21928/commits/2f649780a3619699cf3a1d4e46f074d5ff9e193a
2dec095 Binary/JVM: Autoformat. MathiasVP Jan 21, 2026 https://github.com/github/codeql/pull/21928/commits/2dec0958926cc338112e118047a21a699c649b18
2aa84f4 PS: Fix bug in 'getConstructedTypeExpr' and add a helper predicate to… MathiasVP Jan 21, 2026 https://github.com/github/codeql/pull/21928/commits/2aa84f4b1f7bfb82af6403c741b19446c3055b70
b3e1f57 PS: Add intermediate api graph nodes for 'New-Object' calls similar t… MathiasVP Jan 21, 2026 https://github.com/github/codeql/pull/21928/commits/b3e1f57ec8b4d6162848b34e0f6ef6ca89c6794e
0b06fcd PS: Add instance edges for New-Object in API graphs. MathiasVP Jan 21, 2026 https://github.com/github/codeql/pull/21928/commits/0b06fcdedb86d3477611816b147ab7af640712bf
8c883e9 PS: Add instance edges for static constructor-like functions. MathiasVP Jan 21, 2026 https://github.com/github/codeql/pull/21928/commits/8c883e9a8b901b13fcee99c3d9bd0eca81e9b6aa
634f7b0 PS: Allow non-read member access from 'memberEdge'. MathiasVP Jan 21, 2026 https://github.com/github/codeql/pull/21928/commits/634f7b03da4200fd48c9ce8f2e630e0f8e6f62c8
6c7715b PS: Accept test changes. MathiasVP Jan 21, 2026 https://github.com/github/codeql/pull/21928/commits/6c7715b14bead64f55e92df8081677f28208bcee
e485d98 Created a new leap year check guard condition. Found that the prior d… bdrodes Jan 21, 2026 https://github.com/github/codeql/pull/21928/commits/e485d98105a9f38eb5c900c7f3db67d70878c914
74f46a9 Merge pull request #316 from microsoft/ql-for-x86-and-cil MathiasVP Jan 21, 2026 https://github.com/github/codeql/pull/21928/commits/74f46a94d900dd501e0dbd4f77999b84a7b59384
f299fef Merge branch 'main' into api-graphs-improvements-for-chanel chanel-y Jan 21, 2026 https://github.com/github/codeql/pull/21928/commits/f299fef26ae02bbde3ba495a929f01faa0fef4b9
657686b Merge pull request #317 from microsoft/api-graphs-improvements-for-ch… chanel-y Jan 21, 2026 https://github.com/github/codeql/pull/21928/commits/657686bbce14668afbf7959661b9d7b4862911f8
8e7ff2d Removing most dependencies from UncheckedLeapYearAfterYearMOdificatio… bdrodes Jan 21, 2026 https://github.com/github/codeql/pull/21928/commits/8e7ff2d102c8b8ec774367fb215c83599b0a41b5
0469eac additional weak hash cases, initial queries for cipher mode and KDF alg chanel-y Jan 21, 2026 https://github.com/github/codeql/pull/21928/commits/0469eac7a18c2e3fd8bf845ef348089f6f541912
2a0945c Merge remote-tracking branch 'origin/main' into powershell-crypto chanel-y Jan 21, 2026 https://github.com/github/codeql/pull/21928/commits/2a0945cbc9ef4d53e6fd1473772c38c19fcafc9d
6c103a9 Time conversion results that are checked in a ternary operator condit… bdrodes Jan 21, 2026 https://github.com/github/codeql/pull/21928/commits/6c103a98450fa7e7dbd7fc290c8683817d338571
1aec7fc PS: Fix example. MathiasVP Jan 22, 2026 https://github.com/github/codeql/pull/21928/commits/1aec7fcf0b0e190307d1a9c0b1452c33ff940a26
6c56bbf Merge pull request #318 from microsoft/fix-example-in-sql-injection MathiasVP Jan 22, 2026 https://github.com/github/codeql/pull/21928/commits/6c56bbfd91789e3f38a8cbe6708a234f38bdaabe
d36a4df Misc. FP fixes. bdrodes Jan 23, 2026 https://github.com/github/codeql/pull/21928/commits/d36a4dfc02bf10182ecf852594c2fb0eb0d09217
f8a2f5c More FP tweaks. bdrodes Jan 23, 2026 https://github.com/github/codeql/pull/21928/commits/f8a2f5c73c9fc8a5691dc86ffe31d62fb839e0c0
acdbb8d Adding FP checks for assignment of a constant safe date regardless of… bdrodes Jan 23, 2026 https://github.com/github/codeql/pull/21928/commits/acdbb8d7f629913e66fe80312e7e802eda1576ec
5818330 Merge tag 'codeql-cli/latest' into auto/sync-main-pr Jan 26, 2026 https://github.com/github/codeql/pull/21928/commits/5818330687c13f01c1b38d93a7a44d1052a976de
c4a73dd Merge pull request #320 from microsoft/auto/sync-main-pr dilanbhalla Jan 26, 2026 https://github.com/github/codeql/pull/21928/commits/c4a73ddfec1c771b188056d327f25a0f568344d7
983fbc1 Port github/codeql#21202 to our fork (#319) MathiasVP Jan 27, 2026 https://github.com/github/codeql/pull/21928/commits/983fbc170859db7c8b426eca74e673621d510a3e
0c0b2f2 added unit tests for cipher mode, obsolete kdf alg, weak symmetric alg chanel-y Jan 27, 2026 https://github.com/github/codeql/pull/21928/commits/0c0b2f2d6866ab98df7b4c5c8a1b9e7e72273d2b
6648a6f added qhelps, initial queries for cipher mode, symmetric, obsolete KD… chanel-y Jan 27, 2026 https://github.com/github/codeql/pull/21928/commits/6648a6fcf489c4cbbb6829f8b0df5c47fab9c734
1dc5ebf C++: Port github/codeql#21212 to our fork (#321) MathiasVP Jan 28, 2026 https://github.com/github/codeql/pull/21928/commits/1dc5ebf55fb65890e7326fc9790cad9e0ead1ae2
4dcb6f1 Additional test cases and comments bdrodes Jan 28, 2026 https://github.com/github/codeql/pull/21928/commits/4dcb6f163a7988d251bf22ac5fb118079b1433f2
8f1d8d4 Merge branch 'main' into jb1/ap1-maturity bdrodes Jan 28, 2026 https://github.com/github/codeql/pull/21928/commits/8f1d8d474069aa9065ba21d5e7700171a4d35713
65d9a9d Now using asDefinition to detect assignment to a year field. Misc cle… bdrodes Jan 28, 2026 https://github.com/github/codeql/pull/21928/commits/65d9a9dfa0b5917f02cd0f1b3d95bef1a3e05c06
2e613ac Fixed expected results due to a line shift. bdrodes Jan 28, 2026 https://github.com/github/codeql/pull/21928/commits/2e613aca153974d2b78e10175e6e174fe9944709
a8d5357 Added an additional test case and fixed a false positive. Also noted … bdrodes Jan 29, 2026 https://github.com/github/codeql/pull/21928/commits/a8d5357026c362aba4f319e856261032fe7846be
7604938 Added more heuristic ignorable functions. bdrodes Jan 29, 2026 https://github.com/github/codeql/pull/21928/commits/7604938960c0d7af72d9dd783748ce83c11b39ec
27edb07 Adding new div 4 check and false positive test cases bdrodes Jan 29, 2026 https://github.com/github/codeql/pull/21928/commits/27edb0743bde3cd967692a22b62f1ca76fe97dae
93c7e5d Comment fix. bdrodes Jan 29, 2026 https://github.com/github/codeql/pull/21928/commits/93c7e5d5ad294feddffcaca32bd3e4a13f316c4f
4ca54e9 moved crypto classes/methods to folder under lib chanel-y Jan 30, 2026 https://github.com/github/codeql/pull/21928/commits/4ca54e9abdffa3ba553797cd1df1729e7ea1a0ec
af5c15e updated qhelps chanel-y Jan 30, 2026 https://github.com/github/codeql/pull/21928/commits/af5c15e8c49d40eb0dd59aafbcaa341f5fdcf77f
0949e96 query format chanel-y Jan 30, 2026 https://github.com/github/codeql/pull/21928/commits/0949e96d6467f11c6c888befbb11fe805faadbdd
2081c6f addiitonal minor fixes chanel-y Jan 30, 2026 https://github.com/github/codeql/pull/21928/commits/2081c6fc887c2822cfd7e323f4166d6991e8c6c0
b0d9776 added query tests chanel-y Jan 30, 2026 https://github.com/github/codeql/pull/21928/commits/b0d9776299f092adc56837e7ee03965c3067eb5a
738a697 added query, qhelp chanel-y Jan 30, 2026 https://github.com/github/codeql/pull/21928/commits/738a6971254bd7f851d8fcb46e2c34f3b5180a87
86dfe52 Adding a fix and test case for a new false positive, also added a fal… bdrodes Jan 30, 2026 https://github.com/github/codeql/pull/21928/commits/86dfe52105dd705cc04e976a563db31147743106
7ff7006 Adding more false positive cases, and fixing prior test cases to be m… bdrodes Jan 30, 2026 https://github.com/github/codeql/pull/21928/commits/7ff70069aaf9a3147e9ba1ba7e0620b02dbaf9a0
3ba543e More heuristics for culling non-gregorian year calculations. bdrodes Jan 30, 2026 https://github.com/github/codeql/pull/21928/commits/3ba543ec301f41685597668f9ca0ad1666efcfc6
e2d3d15 Minor comment/description clean up, and added a test case and support… bdrodes Jan 30, 2026 https://github.com/github/codeql/pull/21928/commits/e2d3d1587c85ec1e2ec6b8f68a97fffd33ba5861
df3fcfc Changing the name of a predicate to be more precise. bdrodes Jan 30, 2026 https://github.com/github/codeql/pull/21928/commits/df3fcfc075febb99beafe9bdaa19f313302fd1aa
ae2d156 update qhelp phrasing chanel-y Jan 30, 2026 https://github.com/github/codeql/pull/21928/commits/ae2d156e382df30043b46730c208693977c9d8dc
bf5e0ee Apply suggestion from @MathiasVP chanel-y Jan 30, 2026 https://github.com/github/codeql/pull/21928/commits/bf5e0ee6184ef32aaeedf6dfcc0805b8d86fe308
67b0bf1 updated shared crypto classes to be abstract, simplified logic for is… chanel-y Jan 30, 2026 https://github.com/github/codeql/pull/21928/commits/67b0bf124219f7837abb58237c83ae815d7cf292
9c2525e Apply suggestions from code review ty mathias <3 chanel-y Jan 30, 2026 https://github.com/github/codeql/pull/21928/commits/9c2525ea684946c255ef7af37399ec95f32b496a
936a5c2 fixed test regression chanel-y Jan 30, 2026 https://github.com/github/codeql/pull/21928/commits/936a5c2cf806eeb51293385314cf1c92f24d2641
2924f2b Update cpp/ql/src/Likely Bugs/Leap Year/UncheckedLeapYearAfterYearMod… bdrodes Jan 30, 2026 https://github.com/github/codeql/pull/21928/commits/2924f2b0758dcf2c9a2bf9b6a27d61e7c95ab1b2
afb058c Update cpp/ql/src/Likely Bugs/Leap Year/UncheckedLeapYearAfterYearMod… bdrodes Jan 30, 2026 https://github.com/github/codeql/pull/21928/commits/afb058c9b116126b8eab42102cbc029b39b90f5e
56e9c1f Update cpp/ql/src/Likely Bugs/Leap Year/UncheckedLeapYearAfterYearMod… bdrodes Jan 30, 2026 https://github.com/github/codeql/pull/21928/commits/56e9c1fba39a1f91c3eca84f6a69a6b51dde6028
606dfa7 minor refactor for readability ropwareJB Feb 2, 2026 https://github.com/github/codeql/pull/21928/commits/606dfa72b95059c2142ed1ccf87a74c867677df3
c7553d5 Update cpp/ql/src/Likely Bugs/Leap Year/UncheckedLeapYearAfterYearMod… bdrodes Feb 2, 2026 https://github.com/github/codeql/pull/21928/commits/c7553d515d93c791bc759b88752f9a7c90804c45
b1dff11 Add dry_run input to CodeQL pack publish workflow dilanbhalla Feb 2, 2026 https://github.com/github/codeql/pull/21928/commits/b1dff114f42239428705c1ebd21644764ec0f808
4c29fb8 Merge pull request #326 from microsoft/dilan/microsoft-pack-dryrun dilanbhalla Feb 2, 2026 https://github.com/github/codeql/pull/21928/commits/4c29fb884ea177629b312e6d2e077ffc1fd33ae1
1f63bee Added a FP test case and corrected the leap year logic to no longer f… bdrodes Feb 3, 2026 https://github.com/github/codeql/pull/21928/commits/1f63bee6746693423a09b5c93ae885a9ed660bc9
c88b877 Merge branch 'jb1/ap1-maturity' of https://github.com/microsoft/codeq… bdrodes Feb 3, 2026 https://github.com/github/codeql/pull/21928/commits/c88b877f818ef1deb63738e775afc533ba3a9aa9
93eb345 Misc comments and added test cases. bdrodes Feb 3, 2026 https://github.com/github/codeql/pull/21928/commits/93eb3452e08dbd305a9e3613bd213de508e56868
fcab399 Add dry run option for CodeQL pack publish dilanbhalla Feb 3, 2026 https://github.com/github/codeql/pull/21928/commits/fcab39910b3cdb74547f050996ae7f21faffe481
8aff770 Merge pull request #327 from microsoft/dilan/microsoft-pack-dryrun-bug dilanbhalla Feb 3, 2026 https://github.com/github/codeql/pull/21928/commits/8aff770804453fc1831f5f1f8b65910c6457f919
557e86b System to Variant time and Variant to System Time auto correct leap y… bdrodes Feb 6, 2026 https://github.com/github/codeql/pull/21928/commits/557e86b7969edfae5963362958576ca8171488f3
9205924 Update cpp/ql/src/Likely Bugs/Leap Year/UncheckedLeapYearAfterYearMod… bdrodes Feb 6, 2026 https://github.com/github/codeql/pull/21928/commits/9205924430fd61bfd8daab2fe04b630a144a23e3
aab59f6 Update cpp/ql/src/Likely Bugs/Leap Year/LeapYear.qll bdrodes Feb 6, 2026 https://github.com/github/codeql/pull/21928/commits/aab59f659f18bfd947a967bb6100c0f002600e15
45bff11 Update cpp/ql/src/Likely Bugs/Leap Year/UncheckedLeapYearAfterYearMod… bdrodes Feb 6, 2026 https://github.com/github/codeql/pull/21928/commits/45bff1121203d6f6c4ee6495f71a77d4f950b9f0
321c2fa Update cpp/ql/src/Likely Bugs/Leap Year/UncheckedLeapYearAfterYearMod… bdrodes Feb 6, 2026 https://github.com/github/codeql/pull/21928/commits/321c2fa8e8bf2c8053af5466bd30a7c443826f2a
31b9606 Update cpp/ql/src/Likely Bugs/Leap Year/UncheckedLeapYearAfterYearMod… bdrodes Feb 6, 2026 https://github.com/github/codeql/pull/21928/commits/31b96067d8ab46568af03748ee9f589fff3f14bc
09f852e PR suggestion fixes. bdrodes Feb 6, 2026 https://github.com/github/codeql/pull/21928/commits/09f852e33c3c072d00c232b41f13ac13fa3c6c0e
77da7fd Merge branch 'jb1/ap1-maturity' of https://github.com/microsoft/codeq… bdrodes Feb 6, 2026 https://github.com/github/codeql/pull/21928/commits/77da7fdb8cdd82ff89bd083be38e1f3797ea2686
8d59b4c Bug introduced in merge, missing "and" bdrodes Feb 6, 2026 https://github.com/github/codeql/pull/21928/commits/8d59b4c6bc522754a5578176983eb64e03d06934
a209bd6 Correcting UnchedReturnValueForTimeFunctions to take into accoutn isA… bdrodes Feb 6, 2026 https://github.com/github/codeql/pull/21928/commits/a209bd68a482aaa5d5cad4fef428af6bce213ea0
e64bf9b Merge branch 'main' into powershell-crypto MathiasVP Feb 9, 2026 https://github.com/github/codeql/pull/21928/commits/e64bf9b4fcbc84d53e1ec31bdf7c60dbfe09baf1
25df927 Merge pull request #322 from microsoft/powershell-crypto MathiasVP Feb 10, 2026 https://github.com/github/codeql/pull/21928/commits/25df927c8dec7a96b94e3f93df0636ad9e4bac25
c05e8a0 PS: Add script to generate PowerShell typemodels from a C# database. MathiasVP Feb 17, 2026 https://github.com/github/codeql/pull/21928/commits/c05e8a04bcdd62d9afc91f3afcc6ca5c407780d7
255aa39 C#: Generate type models for dotnet/sqlclient. MathiasVP Feb 17, 2026 https://github.com/github/codeql/pull/21928/commits/255aa3901172e2100b011755bd6c0ba7f9bef141
800f6dd PS: Add a test demonstraing missing arguments for object creations. MathiasVP Feb 18, 2026 https://github.com/github/codeql/pull/21928/commits/800f6ddcf499cc195f8008f50cb70c44471a0efa
2eb8b1a PS: Fix two cases where a class was overriding the relevantChild pred… MathiasVP Feb 18, 2026 https://github.com/github/codeql/pull/21928/commits/2eb8b1a4b8ac27db74de2e9b9eab9b8ff0710f47
2b4ac31 PS: Accept test changes. MathiasVP Feb 18, 2026 https://github.com/github/codeql/pull/21928/commits/2b4ac31ecdc742c8dab3df52097566fe06fc5437
065ff29 manual merge ropwareJB Feb 23, 2026 https://github.com/github/codeql/pull/21928/commits/065ff294997f448a65ffc435bb28c248e62d6a84
80deee8 PS: Fixup PowerShell after https://github.com/github/codeql/pull/21051. MathiasVP Feb 23, 2026 https://github.com/github/codeql/pull/21928/commits/80deee81f8e83db3a2a43adc4737fc26a5426130
fbbb13a Merge pull request #330 from microsoft/chanel-fixes chanel-y Feb 23, 2026 https://github.com/github/codeql/pull/21928/commits/fbbb13a74df53347255adf5d00fb5380a086e0f4
9cf0c79 Merge pull request #331 from microsoft/jb1/merge-upstream-latest dilanbhalla Feb 23, 2026 https://github.com/github/codeql/pull/21928/commits/9cf0c795726677d20562998bccd5c8697fe50fa1
d30c56f C++: Provide barrier node API without the unit column when instantiat… MathiasVP Feb 24, 2026 https://github.com/github/codeql/pull/21928/commits/d30c56faf988daee3ff9821a3616fd1dba98b682
99b32b6 C++: Add change note. MathiasVP Feb 24, 2026 https://github.com/github/codeql/pull/21928/commits/99b32b6caa090824ed93ef3b58ce22c7f31d94d5
5f91a9d C++: Make a test slightly more verbose to catch this issue in the fut… MathiasVP Feb 24, 2026 https://github.com/github/codeql/pull/21928/commits/5f91a9de90599b638f2db74d96ab5b44028386d9
d1d2417 Merge pull request #332 from microsoft/unbreak-changes-2 ropwareJB Feb 24, 2026 https://github.com/github/codeql/pull/21928/commits/d1d24174e10a68b94a43beaa20139396ffa94d73
a3421d0 Merge branch 'main' into jb1/ap1-maturity ropwareJB Mar 11, 2026 https://github.com/github/codeql/pull/21928/commits/a3421d01be4375bc4dc2f6468e542904cb4930f3
f37ac50 Merge pull request #315 from microsoft/jb1/ap1-maturity ropwareJB Mar 11, 2026 https://github.com/github/codeql/pull/21928/commits/f37ac5042374bafef5632bebb44d19085d2b9bf4
097e96c Manual merge of codeql-cli/latest ropwareJB Mar 11, 2026 https://github.com/github/codeql/pull/21928/commits/097e96c588b569ff3bf8089f6df87f8e5dbb0212
b4f81e7 Merge pull request #333 from microsoft/jb1/update-submodule dilanbhalla Mar 11, 2026 https://github.com/github/codeql/pull/21928/commits/b4f81e745d2411e95d9e70cde165c1786e4859c2
f0cf910 fix powershell extractor on Linux LWSimpkins Mar 16, 2026 https://github.com/github/codeql/pull/21928/commits/f0cf910dba8cae60662a05307f14290ac8a8094f
2d1a722 Merge branch 'main' into lwsimpkins/powershell-extractor-linux LWSimpkins Mar 16, 2026 https://github.com/github/codeql/pull/21928/commits/2d1a7224e68c44841cd26c8f5750f25b82b94815
fca47c2 Revert upstream commits synced past codeql-cli/v2.24.3 Mar 18, 2026 https://github.com/github/codeql/pull/21928/commits/fca47c24c5f2572c539313036cf1efc3f57e0e71
51ea591 Merge pull request #334 from microsoft/lwsimpkins/powershell-extracto… MathiasVP Mar 18, 2026 https://github.com/github/codeql/pull/21928/commits/51ea591170af18df4bdc3c07cff6aea024a09ae8
9eb5b93 Merge branch 'main' into fix/revert-sync-past-v2.24.3 dilanbhalla Mar 19, 2026 https://github.com/github/codeql/pull/21928/commits/9eb5b9315269e27e9f596475673369b47d6abe53
a02bf27 Merge pull request #335 from microsoft/fix/revert-sync-past-v2.24.3 dilanbhalla Mar 20, 2026 https://github.com/github/codeql/pull/21928/commits/a02bf2706c0ec73c9767b2104f5b4e08517ac425
769aacc Merge codeql-cli/latest into auto/sync-main-pr chanel-y Mar 20, 2026 https://github.com/github/codeql/pull/21928/commits/769aacc7def08c2faaec5d323ddd30a890cdb992
c830ac7 Restore codeql/dataflowstack dependency in Java and C# qlpacks Mar 24, 2026 https://github.com/github/codeql/pull/21928/commits/c830ac7b8e313a8558b560d6e949668f650dd01e
58c515b Restore cpp dbscheme overlay types from v2.25.0 release Mar 24, 2026 https://github.com/github/codeql/pull/21928/commits/58c515b3bb805293719e5bb955bc8cfd9870fda5
ed72ad5 fix expr.qll and dbscheme merge issue Mar 24, 2026 https://github.com/github/codeql/pull/21928/commits/ed72ad51b6bd27455e7d64111c15815783427d5c
ba3f298 Revert "Revert upstream commits synced past codeql-cli/v2.24.3" Mar 24, 2026 https://github.com/github/codeql/pull/21928/commits/ba3f2980d40a88e1f1b72095506795ec2a666e5b
4f8cfb3 Merge pull request #337 from microsoft/auto/sync-main-pr dilanbhalla Mar 24, 2026 https://github.com/github/codeql/pull/21928/commits/4f8cfb35f74c0492dcf0f411000cd8413e7e2867
a3f6a98 Add Get-FileHash weak hash algorithm detection to powershell/weak-has… Copilot Mar 25, 2026 https://github.com/github/codeql/pull/21928/commits/a3f6a98809ff08aa94dca467ae7665c6996379dd
32ea6a8 Merge pull request #338 from microsoft/copilot/update-powershell-weak… chanel-y Mar 26, 2026 https://github.com/github/codeql/pull/21928/commits/32ea6a8925b1fbd3b045896cdf2b7f4d7c296424
782b38a C++: Switch to doublyBoundedFastTC when computing virtual dispatch ed… MathiasVP Mar 26, 2026 https://github.com/github/codeql/pull/21928/commits/782b38ab6bf32cb676155fab4c6845f0f22e2f80
da64e54 Merge pull request #341 from microsoft/ms-restrict-pair-cand LWSimpkins Mar 26, 2026 https://github.com/github/codeql/pull/21928/commits/da64e54ff611e2781004ceff50a7901e98c3a580
5758c7b Merge tag 'codeql-cli/latest' into auto/sync-main-pr Mar 27, 2026 https://github.com/github/codeql/pull/21928/commits/5758c7be5287630700a0d2bdbbc5a6156ae050a3
2534dcf Merge pull request #342 from microsoft/auto/sync-main-pr dilanbhalla Apr 1, 2026 https://github.com/github/codeql/pull/21928/commits/2534dcfa4a7faf847c217ff2913d6a7a6461eae0
fe2b23f Shared: Also expose dataflow stage 1's forward flow predicate. MathiasVP Apr 2, 2026 https://github.com/github/codeql/pull/21928/commits/fe2b23f9c51b237b03864fb269ca4e29b9344530
708283c Shared: Respond to review comments. MathiasVP Apr 7, 2026 https://github.com/github/codeql/pull/21928/commits/708283c917b70809164ac788deaa708650138c75
cccecc4 Merge pull request #343 from microsoft/ms-expose-fwd-stage-1 MathiasVP Apr 7, 2026 https://github.com/github/codeql/pull/21928/commits/cccecc49e44c40e991756e86f6e4a0c7b89a7ac3
5abc596 Add weak HMAC algorithm detection query for PowerShell chanel-y Apr 9, 2026 https://github.com/github/codeql/pull/21928/commits/5abc596162e5f1fa6fbb7c1386df0da36d7f74a1
cabf6d0 Add weak asymmetric key size detection query for PowerShell chanel-y Apr 9, 2026 https://github.com/github/codeql/pull/21928/commits/cabf6d056a84c3d35501cfbdc3f11ca16944b274
125468d Add deprecated TLS/SSL version detection query for PowerShell chanel-y Apr 9, 2026 https://github.com/github/codeql/pull/21928/commits/125468deb3b1a598c297a19242bfd390fae00b8f
07dfa9b Add JWT none algorithm detection query for PowerShell chanel-y Apr 9, 2026 https://github.com/github/codeql/pull/21928/commits/07dfa9b58c5477cdaaa01a7b82d0f4a66f9230d9
dfd2553 Weak RSA key size query, docs, test chanel-y Apr 9, 2026 https://github.com/github/codeql/pull/21928/commits/dfd2553aab00faf23f9d07a9763fa8e060866200
2e342de remove example from qhelp chanel-y Apr 9, 2026 https://github.com/github/codeql/pull/21928/commits/2e342de706b075dfe4d23224b09e1df12628e4a7
9bafbaf Merge pull request #344 from microsoft/users/chanely/weak-asymmetric-key MathiasVP Apr 10, 2026 https://github.com/github/codeql/pull/21928/commits/9bafbafe4cbc89e0e3d563fb5ebca1b06b13eeea
1f0f8e5 changed to just detect the .net usage, updated tests, added qhelp chanel-y Apr 13, 2026 https://github.com/github/codeql/pull/21928/commits/1f0f8e5a31c07e85600d119d2aabd9ce698ebf69
424ba6a refactor classes to go into existing cryptography modules, added qhelp chanel-y Apr 13, 2026 https://github.com/github/codeql/pull/21928/commits/424ba6a30b0c1f8d8b18d745e22e87bc9b25a561
decbe38 make abstract class, remove microsoft from id, add qhelp chanel-y Apr 13, 2026 https://github.com/github/codeql/pull/21928/commits/decbe387db9a1c2b0443eec5bef08dd5d8af47a8
bd5be06 added additional unsafe deserializers to powershell query chanel-y Apr 13, 2026 https://github.com/github/codeql/pull/21928/commits/bd5be0657f99c016592ef99eb1e5b16316bd8122
f8fa93d remove the tls query from this branch chanel-y Apr 14, 2026 https://github.com/github/codeql/pull/21928/commits/f8fa93d753413ca5ffd8b1d5bb33be17a6138e6e
6da1c01 PS: Add false positive with GUID. MathiasVP Apr 15, 2026 https://github.com/github/codeql/pull/21928/commits/6da1c01058c0ab699c6249d0b7ddb155003d502b
6465ecd PS: Add GUIDs as a simple sanitizer, and accept test changes. MathiasVP Apr 15, 2026 https://github.com/github/codeql/pull/21928/commits/6465ecddba61ca11e41aa4c2f1b09bd253c0bb44
49336e3 added initial unsafe typenamehandling queries chanel-y Apr 15, 2026 https://github.com/github/codeql/pull/21928/commits/49336e311f11047712582c7ca57775b70938782d
ac52680 Merge pull request #350 from microsoft/guid-sanitizer-ps MathiasVP Apr 16, 2026 https://github.com/github/codeql/pull/21928/commits/ac52680dee9f6c961d22e30c6d5f6b7cdd7ec96c
d824fd9 Merge branch 'main' into users/chanely/deprecated-tls chanel-y Apr 16, 2026 https://github.com/github/codeql/pull/21928/commits/d824fd9567ba68dc55d16ce292487f6589078223
20f33c9 Merge branch 'main' into users/chanely/jwt-none-algorithm chanel-y Apr 16, 2026 https://github.com/github/codeql/pull/21928/commits/20f33c919eab5670c2bcb3a2b5e460bdb633c509
9a9e8ad Merge pull request #347 from microsoft/users/chanely/deprecated-tls chanel-y Apr 16, 2026 https://github.com/github/codeql/pull/21928/commits/9a9e8ad24bb444d90b71ae55d61741ca589da648
1c8fe05 mathias PR feedback, quwery id update chanel-y Apr 16, 2026 https://github.com/github/codeql/pull/21928/commits/1c8fe05048904074b9b2b8772c9978785e467918
d3c338e Merge branch 'main' into users/chanely/jwt-none-algorithm chanel-y Apr 16, 2026 https://github.com/github/codeql/pull/21928/commits/d3c338ecfe982fc11e911b73bfb601014c679552
54da53b Merge pull request #345 from microsoft/users/chanely/jwt-none-algorithm chanel-y Apr 16, 2026 https://github.com/github/codeql/pull/21928/commits/54da53b60e1aaade32d73965d65279d40586d98c
65fd69e added queries + unit tests chanel-y Apr 17, 2026 https://github.com/github/codeql/pull/21928/commits/65fd69e21712ef16f33b0240b978e884124bce23
f63c714 added InlineExpectationsTest query chanel-y Apr 17, 2026 https://github.com/github/codeql/pull/21928/commits/f63c7147691aa2cafbd5eaab6f1744583bce5b12
b3626db updated all powershell tests to use inline expectatoins chanel-y Apr 17, 2026 https://github.com/github/codeql/pull/21928/commits/b3626dbdd7458541784963a45d4ce29cfff8a4ce
ce35618 fixed tests, comments were put on wrong line ty copilot chanel-y Apr 17, 2026 https://github.com/github/codeql/pull/21928/commits/ce35618f9a3d97ef4545961b4d07e165ae3eed81
a2d5377 reorganize without-binder query to use the existing typenamehandling … chanel-y Apr 17, 2026 https://github.com/github/codeql/pull/21928/commits/a2d5377d06a36cd9110ce0e371315acf5bdf0562
378e74a making TypeNameHandlingQuery.qll file readable chanel-y Apr 17, 2026 https://github.com/github/codeql/pull/21928/commits/378e74aaeef9397cf7e44d9e167f06bb0fc77dc5
1788a53 Merge branch 'main' into typenamehandling-queries ropwareJB Apr 20, 2026 https://github.com/github/codeql/pull/21928/commits/1788a53d0efe7e02869ff762db185066be014152
702deb4 Merge pull request #352 from microsoft/typenamehandling-queries ropwareJB Apr 20, 2026 https://github.com/github/codeql/pull/21928/commits/702deb44a7aefb3868c1ca6e028f4d577c8da169
341fba0 Merge tag 'codeql-cli/latest' into auto/sync-main-pr MathiasVP Apr 21, 2026 https://github.com/github/codeql/pull/21928/commits/341fba05af87b857d7517893f236ae58b3f2829b
313a9c8 Merge branch 'main' into users/chanely/weak-hmac MathiasVP Apr 22, 2026 https://github.com/github/codeql/pull/21928/commits/313a9c88b6c6354636899cf879b99a94fec99d4a
2f075f0 Merge branch 'main' into domain-squatting-powershell MathiasVP Apr 22, 2026 https://github.com/github/codeql/pull/21928/commits/2f075f0fe3f06136e2a4bc8222bd2ed64bd53dfc
c76571c Merge pull request #348 from microsoft/users/chanely/weak-hmac MathiasVP Apr 22, 2026 https://github.com/github/codeql/pull/21928/commits/c76571c056448ca173d81e2310031df9e58b46f9
f25e2f3 Merge branch 'main' of https://github.com/microsoft/codeql into auto/… Apr 22, 2026 https://github.com/github/codeql/pull/21928/commits/f25e2f3f6900369d4affccd143f3fa0378884755
41736a4 Merge branch 'main' into additional-unsafe-deserializers MathiasVP Apr 24, 2026 https://github.com/github/codeql/pull/21928/commits/41736a4f4f8017639d4652622cce0ac4e6dcbc03
0ff3ae8 Merge pull request #349 from microsoft/additional-unsafe-deserializers MathiasVP Apr 24, 2026 https://github.com/github/codeql/pull/21928/commits/0ff3ae889eddf20b15a187300c939a5d52195cca
e5284ea Merge branch 'main' of https://github.com/microsoft/codeql into auto/… Apr 24, 2026 https://github.com/github/codeql/pull/21928/commits/e5284ea309e04a3c51088c6cbf48c0a499d413e3
cf72f5c Merge pull request #353 from microsoft/auto/sync-main-pr dilanbhalla Apr 24, 2026 https://github.com/github/codeql/pull/21928/commits/cf72f5c172e05f79ac675f5851328e0aa4515151
e90b4be Merge branch 'main' into domain-squatting-powershell chanel-y Apr 24, 2026 https://github.com/github/codeql/pull/21928/commits/e90b4be8d2dd6f63b236d6586bce1196672775e3
beed435 Merge pull request #323 from microsoft/domain-squatting-powershell MathiasVP Apr 24, 2026 https://github.com/github/codeql/pull/21928/commits/beed4354f3036d1f77181b0631e35e678bb901d1
ccd89e2 re-added deprecated TLS query chanel-y Apr 24, 2026 https://github.com/github/codeql/pull/21928/commits/ccd89e2e1be88ef59cbe2e84a94b20aca6cca51e
4239e8e Merge pull request #354 from microsoft/deprecated-tls2 chanel-y Apr 24, 2026 https://github.com/github/codeql/pull/21928/commits/4239e8e63d1089a6b47a9d392e903e4a7eda0add
967a210 PS: Fix two bad joins. MathiasVP Apr 27, 2026 https://github.com/github/codeql/pull/21928/commits/967a210f0bbf41f5bfbcccc217b0fb24a32267ce
d77eb9c Merge branch 'main' into fix-joins-in-powershell MathiasVP Apr 27, 2026 https://github.com/github/codeql/pull/21928/commits/d77eb9c7d323945eaa2bfe7d1f33424b9c3bfb60
b6567f9 Merge pull request #355 from microsoft/fix-joins-in-powershell MathiasVP Apr 27, 2026 https://github.com/github/codeql/pull/21928/commits/b6567f9acfc759d77232a4e6c95495918fc47b2f
d39e54a Merge branch 'main' into powershell-inline-expectationstests MathiasVP Apr 28, 2026 https://github.com/github/codeql/pull/21928/commits/d39e54a76551ddda69ae54613bee1a3631916ed1
e702680 Merge pull request #351 from microsoft/powershell-inline-expectations… MathiasVP Apr 28, 2026 https://github.com/github/codeql/pull/21928/commits/e702680f0a6f668f187f6c01ce2f342f035d827f
3f39c88 PS: Optimize 'ChildMapping' using forward/reverse pruning. MathiasVP May 5, 2026 https://github.com/github/codeql/pull/21928/commits/3f39c88a32a7d30cbb9a97187f14af06729a921c
d52f413 Merge pull request #356 from microsoft/powershell-reverse-child-recur… MathiasVP May 5, 2026 https://github.com/github/codeql/pull/21928/commits/d52f413223c290c210cd41238d3fb9b8d524b960
c99b4de explicitly add iac to workspace ropwareJB Oct 20, 2025 https://github.com/github/codeql/pull/21928/commits/c99b4de97dc19cb1b5aeb643b2c190e00aa226a4
0bb42f7 Rename ConditionKind to BinaryConditionKind to resolve name conflict … gfs May 15, 2026 https://github.com/github/codeql/pull/21928/commits/0bb42f7ae96ad8e00219cd87fcc8a638689dfa7f
555456a Merge pull request #357 from microsoft/gfs/RenameBinaryPackConditionKind gfs May 15, 2026 https://github.com/github/codeql/pull/21928/commits/555456a44daa707a1e087828497899374beb7c78
dea11e1 Merge branch 'main' into jb1/iac-qlpack ropwareJB May 15, 2026 https://github.com/github/codeql/pull/21928/commits/dea11e143ae605cea9784bbe98aa561392faba10
3f4d327 Merge pull request #359 from microsoft/jb1/iac-qlpack ropwareJB May 15, 2026 https://github.com/github/codeql/pull/21928/commits/3f4d32781c5807b90ca10bf20d6237080d373af8
a3cc253 Add parameter type signatures for IL and JVM methods (#358) gfs May 15, 2026 https://github.com/github/codeql/pull/21928/commits/a3cc25321681266bd371c33c9652356fccfbc4c6
6e238a7 Update ApprovedCipherMode query and tests chanel-y May 20, 2026 https://github.com/github/codeql/pull/21928/commits/6e238a761342afd4773446b958c98f7c4b5bb4da
a5e5379 predicate -> abstract class, updated inline expectations chanel-y May 21, 2026 https://github.com/github/codeql/pull/21928/commits/a5e53797b31cc67428227912a244710701e61414
b18703e update to use .getValue() chanel-y May 26, 2026 https://github.com/github/codeql/pull/21928/commits/b18703e2a890240decbabfcd2081346329a20d86
8635eaf Merge pull request #361 from microsoft/approved-cipher-mode-changes chanel-y May 27, 2026 https://github.com/github/codeql/pull/21928/commits/8635eaf7a3e9b8c3cb527a45d2d42dca063fb9c5
c1ca997 merge upstream 2.25.5 Jun 1, 2026 https://github.com/github/codeql/pull/21928/commits/c1ca9971585301667200ae6daa4818d18efa6909
Clear filters https://github.com/github/codeql/pull/21928/files
Please reload this pagehttps://github.com/github/codeql/pull/21928/files
Please reload this pagehttps://github.com/github/codeql/pull/21928/files
https://github.com/github/codeql/blob/main/CODEOWNERS#L2
.gitattributeshttps://github.com/github/codeql/pull/21928/files#diff-618cd5b83d62060ba3d027e314a21ceaf75d36067ff820db126642944145393e
View file https://github.com/microsoft/codeql/blob/c1ca9971585301667200ae6daa4818d18efa6909/.gitattributes
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/21928/{{ revealButtonHref }}
https://github.com/github/codeql/pull/21928/files#diff-618cd5b83d62060ba3d027e314a21ceaf75d36067ff820db126642944145393e
https://github.com/github/codeql/blob/main/CODEOWNERS#L60
.github/workflows/microsoft-codeql-pack-publish.ymlhttps://github.com/github/codeql/pull/21928/files#diff-f297e534d732ad4b1f3f3fb13eb1281e73635b237120b57303144f2b4b19f593
View file https://github.com/microsoft/codeql/blob/c1ca9971585301667200ae6daa4818d18efa6909/.github/workflows/microsoft-codeql-pack-publish.yml
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/21928/{{ revealButtonHref }}
https://github.com/github/codeql/blob/main/CODEOWNERS#L60
.github/workflows/powershell-pr-check.ymlhttps://github.com/github/codeql/pull/21928/files#diff-3de7089c3cfa033a5a1aeec21cace8927c27e6338bd999ddf06224ebf5c33b24
View file https://github.com/microsoft/codeql/blob/c1ca9971585301667200ae6daa4818d18efa6909/.github/workflows/powershell-pr-check.yml
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/21928/{{ revealButtonHref }}
https://github.com/github/codeql/blob/main/CODEOWNERS#L60
.github/workflows/sync-main-tags.ymlhttps://github.com/github/codeql/pull/21928/files#diff-0edd713634c6f6e8fc0d936ca28ff35549c266683ebab0cf05b066c7682fbe41
View file https://github.com/microsoft/codeql/blob/c1ca9971585301667200ae6daa4818d18efa6909/.github/workflows/sync-main-tags.yml
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/21928/{{ revealButtonHref }}
https://github.com/github/codeql/blob/main/CODEOWNERS#L60
.github/workflows/sync-main.ymlhttps://github.com/github/codeql/pull/21928/files#diff-56e8bcbe2912c5d0b0a2423a007aabc54ebf4bacf3b611f45ee47d6ff462ffbe
View file https://github.com/microsoft/codeql/blob/c1ca9971585301667200ae6daa4818d18efa6909/.github/workflows/sync-main.yml
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/21928/{{ revealButtonHref }}
https://github.com/github/codeql/blob/main/CODEOWNERS#L2
.gitmoduleshttps://github.com/github/codeql/pull/21928/files#diff-fe7afb5c9c916e521401d3fcfb4277d5071798c3baf83baf11d6071742823584
View file https://github.com/microsoft/codeql/blob/c1ca9971585301667200ae6daa4818d18efa6909/.gitmodules
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/21928/{{ revealButtonHref }}
https://github.com/github/codeql/blob/main/CODEOWNERS#L56
README.mdhttps://github.com/github/codeql/pull/21928/files#diff-b335630551682c19a781afebcf4d07bf978fb1f8ac04c6bf87428ed5106870f5
View file https://github.com/microsoft/codeql/blob/c1ca9971585301667200ae6daa4818d18efa6909/README.md
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/21928/{{ revealButtonHref }}
https://github.com/github/codeql/pull/21928/files#diff-b335630551682c19a781afebcf4d07bf978fb1f8ac04c6bf87428ed5106870f5
https://github.com/github/codeql/blob/main/CODEOWNERS#L56
SECURITY.mdhttps://github.com/github/codeql/pull/21928/files#diff-f6ed156e4bf5c791680662464b94ea5d753f219ee816b385f67870e2c0d7d4c7
View file https://github.com/microsoft/codeql/blob/c1ca9971585301667200ae6daa4818d18efa6909/SECURITY.md
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/21928/{{ revealButtonHref }}
https://github.com/github/codeql/blob/main/CODEOWNERS#L2
binary/.gitignorehttps://github.com/github/codeql/pull/21928/files#diff-8bf682e50148a5a67367a761dbe3257f2d685cff76a90285bab8f1d24856ff56
View file https://github.com/microsoft/codeql/blob/c1ca9971585301667200ae6daa4818d18efa6909/binary/.gitignore
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/21928/{{ revealButtonHref }}
Please reload this pagehttps://github.com/github/codeql/pull/21928/files
Please reload this pagehttps://github.com/github/codeql/pull/21928/files
https://github.com
Termshttps://docs.github.com/site-policy/github-terms/github-terms-of-service
Privacyhttps://docs.github.com/site-policy/privacy-policies/github-privacy-statement
Securityhttps://github.com/security
Statushttps://www.githubstatus.com/
Communityhttps://github.community/
Docshttps://docs.github.com/
Contacthttps://support.github.com?tags=dotcom-footer

Viewport: width=device-width


URLs of crawlers that visited me.