Commits

Commit history

1. Commits on Oct 30, 2026

   • Merge pull request #22913 from hvitved/rust/try-in-closure-test

     Show description for 1de0ff0
     hvitved

     authored
     1de0ff0View commit details

     Copy full SHA for 1de0ff0

     View code at this pointBrowse repository at this point

   • Merge pull request #22958 from github/post-release-prep/codeql-cli-2.27.4

     Show description for c4d0804
     henrymercer

     authored
     c4d0804View commit details

     Copy full SHA for c4d0804

     View code at this pointBrowse repository at this point

   • Merge pull request #22914 from aschackmull/ssa/postupdate

     Show description for e68cb84
     aschackmull

     authored
     e68cb84View commit details

     Copy full SHA for e68cb84

     View code at this pointBrowse repository at this point

   • Rust: Add data flow test for `?` in a closure

     hvitved

     committed
     540f85bView commit details

     Copy full SHA for 540f85b

     View code at this pointBrowse repository at this point

   • Merge pull request #22917 from hvitved/rust/captured-flow-fixes

     Show description for fdf5c84
     hvitved

     authored
     fdf5c84View commit details

     Copy full SHA for fdf5c84

     View code at this pointBrowse repository at this point

   • Post-release preparation for codeql-cli-2.27.4

     

     github-actions[bot]

     committed
     ef44058View commit details

     Copy full SHA for ef44058

     View code at this pointBrowse repository at this point

   • Merge pull request #22324 from lcmangalagiri/rust-cwe-502-unsafe-deserialization

     Show description for d088e54
     geoffw0

     authored
     d088e54View commit details

     Copy full SHA for d088e54

     View code at this pointBrowse repository at this point

   • Merge pull request #22847 from github/rust/inconsistent-feature

     Show description for 181431e
     paldepind

     authored
     181431eView commit details

     Copy full SHA for 181431e

     View code at this pointBrowse repository at this point

   • Merge CI fixes for Rust unsafe deserialization

     Show description for 2399460
     

     CHMANG

     and

     Copilot

     committed
     2399460View commit details

     Copy full SHA for 2399460

     View code at this pointBrowse repository at this point

   • Update rust/ql/src/queries/security/CWE-502/UnsafeDeserialization.qhelp

     Show description for c93737e
     

     lcmangalagiri

     and

     mchammer01

     authored
     c93737eView commit details

     Copy full SHA for c93737e

     View code at this pointBrowse repository at this point

   • Update rust/ql/src/queries/security/CWE-502/UnsafeDeserialization.qhelp

     Show description for 795c488
     

     lcmangalagiri

     and

     mchammer01

     authored
     795c488View commit details

     Copy full SHA for 795c488

     View code at this pointBrowse repository at this point

   • Update rust/ql/src/queries/security/CWE-502/UnsafeDeserialization.ql

     Show description for 325475d
     

     lcmangalagiri

     and

     mchammer01

     authored
     325475dView commit details

     Copy full SHA for 325475d

     View code at this pointBrowse repository at this point
2. Commits on Oct 29, 2026

   • Release preparation for version 2.27.4

     

     github-actions[bot]

     committed
     beaf5dcView commit details

     Copy full SHA for beaf5dc

     View code at this pointBrowse repository at this point

   • SSA: Switch consistency counts to strictcount.

     aschackmull

     committed
     51690fdView commit details

     Copy full SHA for 51690fd

     View code at this pointBrowse repository at this point

   • Rust: Fixes to flow through captured variables

     hvitved

     committed
     6afe533View commit details

     Copy full SHA for 6afe533

     View code at this pointBrowse repository at this point

   • Rust: Add more captured variables flow tests

     hvitved

     committed
     cd08b22View commit details

     Copy full SHA for cd08b22

     View code at this pointBrowse repository at this point

   • Rust: Add FP test for CWE-022

     hvitved

     committed
     d0e764dView commit details

     Copy full SHA for d0e764d

     View code at this pointBrowse repository at this point
3. Commits on Oct 28, 2026

   • Merge pull request #22903 from LucaCappelletti94/upstream/rust-cleartext-logging-redacted-debug

     Show description for e931898
     hvitved

     authored
     e931898View commit details

     Copy full SHA for e931898

     View code at this pointBrowse repository at this point

   • Avoid eager dependency semantics when selecting Rust configurations

     Show description for 977d09a
     

     paldepind

     and

     Copilot

     committed
     977d09aView commit details

     Copy full SHA for 977d09a

     View code at this pointBrowse repository at this point

   • Rust: Test dependency modules disabled by richer configurations

     Show description for b57a67c
     

     paldepind

     and

     Copilot

     committed
     b57a67cView commit details

     Copy full SHA for b57a67c

     View code at this pointBrowse repository at this point
4. Commits on Oct 27, 2026

   • Rust: Update suite .expected lists.

     geoffw0

     committed
     a5b3d3aView commit details

     Copy full SHA for a5b3d3a

     View code at this pointBrowse repository at this point

   • Rust: Import UnsafeDeserializationExtensions into Stats.qll so that sinks for the query are visible in metrics.

     geoffw0

     committed
     b8959e3View commit details

     Copy full SHA for b8959e3

     View code at this pointBrowse repository at this point

   • Rust: Share the returned-value check with callback return sinks

     LucaCappelletti94

     committed
     6f89834View commit details

     Copy full SHA for 6f89834

     View code at this pointBrowse repository at this point

   • Merge branch 'main' into rust-cwe-502-unsafe-deserialization

     geoffw0

     authored
     eb26f52View commit details

     Copy full SHA for eb26f52

     View code at this pointBrowse repository at this point

   • Rust: Do not treat the early return of ? as returning the unwrapped value

     LucaCappelletti94

     committed
     af7dd28View commit details

     Copy full SHA for af7dd28

     View code at this pointBrowse repository at this point

   • Merge branch 'main' into rust-cwe-502-unsafe-deserialization

     lcmangalagiri

     authored
     86fb1d1View commit details

     Copy full SHA for 86fb1d1

     View code at this pointBrowse repository at this point
5. Commits on Oct 25, 2026

   • Rust: Add change note

     johncarmack1984

     committed
     2a21b03View commit details

     Copy full SHA for 2a21b03

     View code at this pointBrowse repository at this point

   • Rust: Add neutral models for spurious actix-web `connection_info` sink models

     johncarmack1984

     committed
     fd836f5View commit details

     Copy full SHA for fd836f5

     View code at this pointBrowse repository at this point

   • Rust: Add tests for spurious actix-web `connection_info` sink models

     johncarmack1984

     committed
     b659cc8View commit details

     Copy full SHA for b659cc8

     View code at this pointBrowse repository at this point
6. Commits on Oct 24, 2026

   • Rust: Address unsafe deserialization review feedback

     Show description for bccfc94
     lcmangalagiri

     committed
     bccfc94View commit details

     Copy full SHA for bccfc94

     View code at this pointBrowse repository at this point
7. Commits on Oct 22, 2026

   • Rust: Update extraction-step expectations for dependency reloads

     Show description for c3fdbd8
     

     paldepind

     and

     Copilot

     committed
     c3fdbd8View commit details

     Copy full SHA for c3fdbd8

     View code at this pointBrowse repository at this point

   • Rust: Test deterministic dependency configuration selection

     Show description for 34886ac
     

     paldepind

     and

     Copilot

     committed
     34886acView commit details

     Copy full SHA for 34886ac

     View code at this pointBrowse repository at this point

   • Rust: Select dependency extraction contexts by feature configuration

     Show description for f874e86
     

     paldepind

     and

     Copilot

     committed
     f874e86View commit details

     Copy full SHA for f874e86

     View code at this pointBrowse repository at this point

   • Rust: Add neutral models for spurious Vec and VecDeque sink models

     LucaCappelletti94

     committed
     b4e2188View commit details

     Copy full SHA for b4e2188

     View code at this pointBrowse repository at this point
8. Commits on Oct 20, 2026

   • Rust: Extract workspace grouping into a helper

     paldepind

     committed
     87754beView commit details

     Copy full SHA for 87754be

     View code at this pointBrowse repository at this point