Commits

Commit history

1. Commits on Jul 9, 2026

   • Release preparation for version 2.26.1

     

     github-actions[bot]

     committed
     9acbbb8View commit details

     Copy full SHA for 9acbbb8

     View code at this pointBrowse repository at this point
2. Commits on Jul 2, 2026

   • Merge pull request #22061 from MathiasVP/mad-write-through-model

     Show description for 4f4cdf4
     MathiasVP

     authored
     4f4cdf4View commit details

     Copy full SHA for 4f4cdf4

     View code at this pointBrowse repository at this point
3. Commits on Jul 1, 2026

   • Add Windows integration tests showing that subst is handled inconsistently

     jketema

     committed
     daf97f7View commit details

     Copy full SHA for daf97f7

     View code at this pointBrowse repository at this point
4. Commits on Jun 30, 2026

   • Merge branch 'main' into mad-write-through-model

     MathiasVP

     committed
     b7b731bView commit details

     Copy full SHA for b7b731b

     View code at this pointBrowse repository at this point
5. Commits on Jun 26, 2026

   • Merge pull request #22036 from forks-felickz/felickz/js-angular-hostlistener-postmessage

     Show description for cacdc46
     asgerf

     authored
     cacdc46View commit details

     Copy full SHA for cacdc46

     View code at this pointBrowse repository at this point
6. Commits on Jun 25, 2026

   • Post-release preparation for codeql-cli-2.26.0

     

     github-actions[bot]

     committed
     456e337View commit details

     Copy full SHA for 456e337

     View code at this pointBrowse repository at this point

   • Release preparation for version 2.26.0

     

     github-actions[bot]

     committed
     237c563View commit details

     Copy full SHA for 237c563

     View code at this pointBrowse repository at this point
7. Commits on Jun 23, 2026

   • JS: Fixes after changes to the flow summary API.

     MathiasVP

     committed
     be56df7View commit details

     Copy full SHA for be56df7

     View code at this pointBrowse repository at this point

   • Address review: restrict @HostListener handler to window/document message targets

     Show description for d1d9df7
     

     felickz

     and

     Copilot

     committed
     d1d9df7View commit details

     Copy full SHA for d1d9df7

     View code at this pointBrowse repository at this point

   • JavaScript: Recognize Angular @HostListener('window:message') as a postMessage handler

     Show description for 9bffcf8
     

     felickz

     and

     Copilot

     committed
     9bffcf8View commit details

     Copy full SHA for 9bffcf8

     View code at this pointBrowse repository at this point
8. Commits on Jun 18, 2026

   • JS: Add and reclassify prompt-injection sinks for AI SDKs

     Show description for ea87f59
     

     BazookaMusic

     and

     Copilot

     committed
     ea87f59View commit details

     Copy full SHA for ea87f59

     View code at this pointBrowse repository at this point
9. Commits on Jun 17, 2026

   • Merge branch 'main' into bazookamusic/cwe-1427

     BazookaMusic

     authored
     57f2006View commit details

     Copy full SHA for 57f2006

     View code at this pointBrowse repository at this point

   • 1. Enable inline expectations for tests

     Show description for c444f41
     BazookaMusic

     committed
     c444f41View commit details

     Copy full SHA for c444f41

     View code at this pointBrowse repository at this point

   • Fix prompt injection severity

     BazookaMusic

     committed
     b9025a5View commit details

     Copy full SHA for b9025a5

     View code at this pointBrowse repository at this point

   • Merge branch 'main' into add-yaml-comments

     MathiasVP

     committed
     c12cf88View commit details

     Copy full SHA for c12cf88

     View code at this pointBrowse repository at this point
10. Commits on Jun 16, 2026

    • Grammar

      Show description for 8f965a9
      

      BazookaMusic

      and

      Copilot

      authored
      8f965a9View commit details

      Copy full SHA for 8f965a9

      View code at this pointBrowse repository at this point

    • Fix system prompt injection description and title

      Show description for d72372c
      

      BazookaMusic

      and

      Copilot

      authored
      d72372cView commit details

      Copy full SHA for d72372c

      View code at this pointBrowse repository at this point
11. Commits on Jun 15, 2026

    • Merge branch 'main' into bazookamusic/cwe-1427

      BazookaMusic

      authored
      7c11f19View commit details

      Copy full SHA for 7c11f19

      View code at this pointBrowse repository at this point
12. Commits on Jun 11, 2026

    • Merge branch 'main' into patch-1

      mattcosta7

      authored
      923fe2dView commit details

      Copy full SHA for 923fe2d

      View code at this pointBrowse repository at this point

    • Merge branch 'main' into bazookamusic/cwe-1427

      BazookaMusic

      authored
      17dbf03View commit details

      Copy full SHA for 17dbf03

      View code at this pointBrowse repository at this point

    • Update not_included_in_qls.expected for promoted prompt injection queries

      Show description for ef56787
      BazookaMusic

      committed
      ef56787View commit details

      Copy full SHA for ef56787

      View code at this pointBrowse repository at this point

    • Refine SystemPromptInjection alert message and move test to stable

      Show description for 7bd5abf
      BazookaMusic

      committed
      7bd5abfView commit details

      Copy full SHA for 7bd5abf

      View code at this pointBrowse repository at this point

    • Promote user prompt injection query to stable security

      Show description for e612db2
      BazookaMusic

      committed
      e612db2View commit details

      Copy full SHA for e612db2

      View code at this pointBrowse repository at this point
13. Commits on Jun 10, 2026

    • Add SsrfIpv6TransitionIncompleteGuard.ql to not_included_in_qls.expected

      Show description for 4c1a005
      tonghuaroot

      committed
      4c1a005View commit details

      Copy full SHA for 4c1a005

      View code at this pointBrowse repository at this point
14. Commits on Jun 8, 2026

    • Em-dash - of course :D

      BazookaMusic

      committed
      d0ffde8View commit details

      Copy full SHA for d0ffde8

      View code at this pointBrowse repository at this point

    • Remove redundant file

      BazookaMusic

      committed
      b6c951eView commit details

      Copy full SHA for b6c951e

      View code at this pointBrowse repository at this point

    • 1. Rename AgentSDK -> AgentSdk

      Show description for 2cb0851
      BazookaMusic

      committed
      2cb0851View commit details

      Copy full SHA for 2cb0851

      View code at this pointBrowse repository at this point

    • QLDoc + include the queries in the correct expected files per query suite

      BazookaMusic

      committed
      e370af6View commit details

      Copy full SHA for e370af6

      View code at this pointBrowse repository at this point

    • Formatting

      BazookaMusic

      committed
      61be37dView commit details

      Copy full SHA for 61be37d

      View code at this pointBrowse repository at this point

    • Better document the new queries

      BazookaMusic

      committed
      da05992View commit details

      Copy full SHA for da05992

      View code at this pointBrowse repository at this point
15. Commits on Jun 6, 2026

    • Add experimental JS query for SSRF guards missing IPv6-transition unwrap

      Show description for e93bc11
      tonghuaroot

      committed
      e93bc11View commit details

      Copy full SHA for e93bc11

      View code at this pointBrowse repository at this point
16. Commits on Jun 4, 2026

    • JS: Update test output.

      MathiasVP

      committed
      44c8a97View commit details

      Copy full SHA for 44c8a97

      View code at this pointBrowse repository at this point

    • JS: Add tests.

      MathiasVP

      committed
      e8f7454View commit details

      Copy full SHA for e8f7454

      View code at this pointBrowse repository at this point

    • JS: Add upgrade and downgrade scripts.

      MathiasVP

      committed
      3a90e8cView commit details

      Copy full SHA for 3a90e8c

      View code at this pointBrowse repository at this point

    • JS: Support YAML comments.

      MathiasVP

      committed
      58b1a05View commit details

      Copy full SHA for 58b1a05

      View code at this pointBrowse repository at this point