8 Pull requests merged by 6 people

• C++: Turn header variant tests that use PCH files into integration tests

  #19410 merged Apr 30, 2025

• Rust: Add type inference debug predicates

  #19425 merged Apr 30, 2025

• Ruby: disable diff-informed mode on regex queries

  #19416 merged Apr 30, 2025

• Rust: Crate graph extraction workarounds

  #19362 merged Apr 30, 2025

• JS: Better type-tracking through Promise.all()

  #19412 merged Apr 30, 2025

• C++: Do not limit second level scopes to the top-level

  #19269 merged Apr 30, 2025

• Codegen: make missing codeql error clearer

  #19418 merged Apr 30, 2025

• Python: Improve performance of FileNotClosed query by using an explicit fastTC

  #19411 merged Apr 30, 2025

16 Pull requests opened by 13 people

• Rust: Use type inference to insert implicit borrows and derefs

  #19419 opened Apr 30, 2025

• Swift: Support new Swift 6.1 AST elements

  #19420 opened Apr 30, 2025

• Rust: extract declarations of builtin types

  #19421 opened Apr 30, 2025

• JS: Modeling of `ShellJS` functions

  #19422 opened Apr 30, 2025

• Rust: Rework visibility logic in path resolution and also apply to method call resolution

  #19423 opened Apr 30, 2025

• Python: Extract hidden files/dirs by default

  #19424 opened Apr 30, 2025

• Update .gitattributes

  #19426 opened Apr 30, 2025

• Adding comprehensive docs for customizing `actions/unpinned-tag` query

  #19427 opened Apr 30, 2025

• QL tests: run with --check-diff-informed

  #19428 opened Apr 30, 2025

• Fix cwe tags to include leading zero

  #19429 opened Apr 30, 2025

• Rust: Remove visibility check in path resolution

  #19431 opened Apr 30, 2025

• python: model `send_header` from `http.server`

  #19432 opened Apr 30, 2025

• Shared: Generate more value-preserving flow summaries

  #19433 opened Apr 30, 2025

• C++: Limit flow through sinks and sources in `cpp/upcast-array-pointer-arithmetic`

  #19434 opened Apr 30, 2025

• Actions: Retroactively add GA changenote

  #19436 opened Apr 30, 2025

• Docs: Fix escaping in 2.21.0 changelog

  #19437 opened Apr 30, 2025

2 Issues opened by 2 people

• Windows: AccessDeniedException during `codeql database create` TRAP finalization (`pools/0` move fails)

  #19438 opened May 1, 2025

• False positive - 'Vulnerable package' is not the package version resolved

  #19435 opened Apr 30, 2025

10 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• Rust: expand attribute macros

  #19334 commented on Apr 30, 2025 • 7 new comments

• C#: Improve precision of `cs/uncontrolled-format-string`.

  #19271 commented on Apr 30, 2025 • 3 new comments

• Add code quality suite selector and use that in the code quality suites

  #19413 commented on Apr 30, 2025 • 3 new comments

• C++: Update expected test results and compiler version documentation after frontend update

  #18931 commented on Apr 30, 2025 • 0 new comments

• Rust: Make `SummarizedCallable` extend `Function` instead of `string`

  #19268 commented on Apr 30, 2025 • 0 new comments

• JS: Merge `ES6Class` to `FunctionStyleClass`

  #19356 commented on Apr 30, 2025 • 0 new comments

• Rust: Type inference for `?` expressions

  #19367 commented on Apr 30, 2025 • 0 new comments

• Shared: Re-factor summary, source and sink model generators into separate modules.

  #19382 commented on Apr 30, 2025 • 0 new comments

• .qll Contribution for Sink Detection

  #19403 commented on May 1, 2025 • 0 new comments

• Shared: Generate more value-preserving summaries

  #19409 commented on Apr 30, 2025 • 0 new comments