19 Pull requests merged by 12 people

• Rust: make MacroStmts expressions

  #19335 merged May 3, 2025

• Swift: Support new Swift 6.1 AST elements

  #19420 merged May 2, 2025

• Rust: Remove visibility check in path resolution

  #19431 merged May 2, 2025

• Rust: extract declarations of builtin types

  #19421 merged May 2, 2025

• JS: Modeling of ShellJS functions

  #19422 merged May 2, 2025

• Shared: Re-factor summary, source and sink model generators into separate modules.

  #19382 merged May 2, 2025

• Add code quality suite selector and use that in the code quality suites

  #19413 merged May 2, 2025

• Python: modeling of hdbcli

  #19444 merged May 1, 2025

• Rust: Strengthen modeling of the Clone trait

  #19442 merged May 1, 2025

• C++: Limit flow through sinks and sources in cpp/upcast-array-pointer-arithmetic

  #19434 merged May 1, 2025

• python: model send_header from http.server

  #19432 merged May 1, 2025

• Misc: Add script for calculating totals for a MRVA run

  #18449 merged May 1, 2025

• Fix cwe tags to include leading zero

  #19429 merged May 1, 2025

• Merge back 2.21.2 release branch

  #19441 merged May 1, 2025

• JS: Modeling of fastify

  #19439 merged May 1, 2025

• Rust: Type inference for ? expressions

  #19367 merged May 1, 2025

• Docs: Fix escaping in 2.21.0 changelog

  #19437 merged May 1, 2025

• Actions: Retroactively add GA changenote

  #19436 merged May 1, 2025

• Rust: Use type inference to insert implicit borrows and derefs

  #19419 merged May 1, 2025

12 Pull requests opened by 8 people

• Rust: Update generated models for core and std

  #19440 opened May 1, 2025

• Shared: Generate more value-preserving flow summaries

  #19443 opened May 1, 2025

• JS: Generate flow summaries from summaryModels; only generate steps as a fallback

  #19445 opened May 1, 2025

• Rust: Model std::net and tokio `fs`, `io`, `net`

  #19446 opened May 1, 2025

• Ruby printAst: fix order for synth children of real parents

  #19448 opened May 1, 2025

• Rust: Update query severities

  #19449 opened May 1, 2025

• Add Microsoft to trusted actions owner

  #19450 opened May 1, 2025

• Shared: Remove the language-specific model generator scripts

  #19452 opened May 2, 2025

• Redsun82/kotlin 2.2.0 support

  #19453 opened May 2, 2025

• Rust: Add Operation class

  #19454 opened May 2, 2025

• Rust: Use the new 'quality' tag.

  #19455 opened May 2, 2025

• Add new stubs definitions to System.Web and System.Net

  #19456 opened May 2, 2025

1 Issue closed by 1 person

• False positive - 'Vulnerable package' is not the package version resolved

  #19435 closed May 1, 2025

5 Issues opened by 5 people

• `codeql` and `codacy` give spurious `remote: error: GH013: Repository rule violations found for refs/heads/trunk.` `remote: - Code scanning is waiting for results from CodeQL for the commit`

  #19459 opened May 3, 2025

• [Java] Issue resolving dependences

  #19458 opened May 3, 2025

• C++: Multi-Level Member Function Calls Not Modeled as DataFlow::Node

  #19457 opened May 2, 2025

• Support alternate solution for bazel based C++ builds

  #19447 opened May 1, 2025

• Windows: AccessDeniedException during `codeql database create` TRAP finalization (`pools/0` move fails)

  #19438 opened May 1, 2025

19 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• JS: Overhaul import resolution

  #19391 commented on May 2, 2025 • 14 new comments

• Rust: Support non-universal `impl` blocks

  #19372 commented on May 2, 2025 • 14 new comments

• Misc: Add script creating DCA source suites from MRVA

  #19232 commented on May 1, 2025 • 3 new comments

• Rust: expand attribute macros

  #19334 commented on May 2, 2025 • 2 new comments

• Adding comprehensive docs for customizing `actions/unpinned-tag` query

  #19427 commented on May 1, 2025 • 1 new comment

• Add support for Kotlin 2.2.0; drop Kotlin 1.5.x

  #19402 commented on May 2, 2025 • 1 new comment

• Rust: update supported languages and frameworks

  #19280 commented on May 2, 2025 • 1 new comment

• Python: Extract files in hidden dirs by default

  #19424 commented on May 2, 2025 • 0 new comments

• python: make content sets an IPA type

  #19407 commented on May 2, 2025 • 0 new comments

• .qll Contribution for Sink Detection

  #19403 commented on May 1, 2025 • 0 new comments

• Go: promote `html-template-escaping-bypass-xss`

  #19386 commented on May 1, 2025 • 0 new comments

• JS: Merge `ES6Class` to `FunctionStyleClass`

  #19356 commented on May 2, 2025 • 0 new comments

• Handling of axios in functions and making axios create function recur…

  #19337 commented on May 1, 2025 • 0 new comments

• JS: Port `firebase` to data as models

  #19316 commented on May 1, 2025 • 0 new comments

• Rust: Make `SummarizedCallable` extend `Function` instead of `string`

  #19268 commented on May 2, 2025 • 0 new comments

• JS: QL-side type/name resolution for TypeScript and JSDoc

  #19078 commented on May 2, 2025 • 0 new comments

• C++: Update expected test results and compiler version documentation after frontend update

  #18931 commented on May 1, 2025 • 0 new comments

• Code scanning results should be visible to everyone, not only those with write permission on the repository

  #11021 commented on May 2, 2025 • 0 new comments

• False positives in cpp/user-after-free

  #19387 commented on May 1, 2025 • 0 new comments