All pull requests

Pull requests

• Unified: Use getAnArgument() to check argument of a MaD token

  no-change-note-required
  #22956·asgerf opened Oct 30, 2026Contributor·

  ·

• Shared: Add missing QLDoc in variable capture library

  DataFlow Library
  #22955·owen-mc opened Oct 30, 2026Contributor·

  ·
  1

• Use patched latest fmt and rules_dotnet modules

  #22954·jketema opened Oct 30, 2026Contributor·

  ·
  5

• build(deps): bump fmt from 12.1.0-codeql.1 to 12.2.0.bcr.1

  bazeldependencies
  #22951·dependabot[bot] opened Oct 30, 2026Bot·

  ·

• build(deps): bump rules_kotlin from 2.2.2-codeql.1 to 2.4.21-codeql.1

  Kotlin
  #22950·jketema opened Oct 30, 2026Contributor·

  ·

• C#: Exclude private registries from NuGet CLI restores

  C#documentation
  #22948·michaelnebel opened Oct 30, 2026Contributor·

  ·
  7

• [Copilot Dreams] Avoid incorrect ARM Linux build assumptions

  #22947·CopilotAI opened Oct 30, 2026·

  ·
  2

• Update CSV framework coverage reports

  Java
  #22946·github-actions[bot] opened Oct 30, 2026Bot·

  ·

• yeast: Emit tokens for leaf nodes on AST

  no-change-note-requiredUnified
  #22945·tausbn opened Oct 29, 2026Contributor·

  ·
  14

• Unified: Add SQL injection query

  documentationno-change-note-requiredUnified
  #22942·geoffw0 opened Oct 29, 2026Contributor·

  ·
  1

• C++: Replace QL models for std::map (and friends) with MaD models

  C++documentation
  #22939·MathiasVP opened Oct 29, 2026Contributor·

  ·
  9

• Respect initializer side effects in unused-variable queries

  C++documentation
  #22938·jketema opened Oct 29, 2026Contributor·

  ·
  1

  3

• JS: Use shared SSA library

  documentationJS
  #22937·owen-mc opened Oct 29, 2026Contributor·

  ·
  6

• Unified: Support property source/sink models in LegacyMaD

  Unified
  #22935·asgerf opened Oct 29, 2026Contributor·

  ·

• build(deps): bump rules_pkg from 1.2.0 to 1.3.0

  bazeldependencies
  #22926·dependabot[bot] opened Oct 28, 2026Bot·

  ·

• build(deps): bump rules_swift from 4.0.0-rc5-codeql.3 to 4.2.2

  bazeldependencies
  #22925·dependabot[bot] opened Oct 28, 2026Bot·

  ·

• build(deps): bump rules_kotlin from 2.2.2-codeql.1 to 2.4.21

  bazeldependencies
  #22921·dependabot[bot] opened Oct 28, 2026Bot·

  ·

• build(deps): bump abseil-cpp from 20260107.1 to 20260817.0

  bazeldependencies
  #22920·dependabot[bot] opened Oct 28, 2026Bot·

  ·
  1

• Rust: Fixes to flow through captured variables

  no-change-note-requiredRust
  #22917·hvitved opened Oct 28, 2026Contributor·

  ·
  9

• Rust: Remove argfile dependency and read file list manually

  Rust
  #22916·paldepind opened Oct 28, 2026Contributor·

  ·
  5

• C#: Attempt to parse as XML instead of reading everything as text in the FileContent processing.

  C#
  #22915·michaelnebel opened Oct 28, 2026Contributor·

  ·

• SSA: Refactor post-update support in DataFlowIntegration.

  C++no-change-note-requiredRustUnified
  #22914·aschackmull opened Oct 28, 2026Contributor·

  ·
  10

• Rust: Add data flow test for ? in a closure

  no-change-note-requiredRust
  #22913·hvitved opened Oct 28, 2026Contributor·

  ·
  1

• C#: Don't use the NuGet CLI for restoring packages.config in case private registries are configured.

  C#documentation
  #22911·michaelnebel opened Oct 28, 2026Contributor·

  ·
  6

• yeast: Add support for template choices

  documentationno-change-note-requiredUnified
  #22902·tausbn opened Oct 27, 2026Contributor·

  ·
  11