Commits

Commit history

1. Commits on Apr 25, 2026

   • Add changed framework coverage reports

     github-actions[bot]

     committed
     be8c35aView commit details

     Copy full SHA for be8c35a

     View code at this pointBrowse repository at this point
2. Commits on Apr 24, 2026

   • Merge pull request #21749 from github/copilot/add-hibernate-sql-injection-tests

     Show description for 9fbe447
     owen-mc

     authored
     9fbe447View commit details

     Copy full SHA for 9fbe447

     View code at this pointBrowse repository at this point
3. Commits on Apr 23, 2026

   • Add Java change note for Hibernate sinks

     Show description for 083909e
     

     Copilot

     and

     owen-mc

     authored
     083909eView commit details

     Copy full SHA for 083909e

     View code at this pointBrowse repository at this point

   • Model additional Hibernate query sinks

     Show description for 25d232b
     

     Copilot

     and

     owen-mc

     authored
     25d232bView commit details

     Copy full SHA for 25d232b

     View code at this pointBrowse repository at this point

   • Merge pull request #21743 from hvitved/cfg/body-parts

     Show description for eee5b06
     hvitved

     authored
     eee5b06View commit details

     Copy full SHA for eee5b06

     View code at this pointBrowse repository at this point

   • Add Hibernate SQL injection sink tests

     Show description for 081ad03
     

     Copilot

     and

     owen-mc

     authored
     081ad03View commit details

     Copy full SHA for 081ad03

     View code at this pointBrowse repository at this point

   • Merge branch 'main' into fix/path-injection-torealpath

     owen-mc

     authored
     9f19791View commit details

     Copy full SHA for 9f19791

     View code at this pointBrowse repository at this point
4. Commits on Apr 22, 2026

   • Java: Adapt to changes in CFG library

     hvitved

     committed
     6ebf4eeView commit details

     Copy full SHA for 6ebf4ee

     View code at this pointBrowse repository at this point
5. Commits on Apr 21, 2026

   • Merge pull request #21565 from aschackmull/csharp/cfg2

     Show description for f912731
     aschackmull

     authored
     f912731View commit details

     Copy full SHA for f912731

     View code at this pointBrowse repository at this point

   • Merge pull request #21523 from owen-mc/docs/mad/barriers

     Show description for 6efb213
     owen-mc

     authored
     6efb213View commit details

     Copy full SHA for 6efb213

     View code at this pointBrowse repository at this point

   • Merge pull request #21650 from MarkLee131/fix/sensitive-log-fp-regex

     Show description for c91b5b3
     owen-mc

     authored
     c91b5b3View commit details

     Copy full SHA for c91b5b3

     View code at this pointBrowse repository at this point

   • Merge pull request #21737 from github/post-release-prep/codeql-cli-2.25.3

     Show description for 58e9bad
     mbg

     authored
     58e9badView commit details

     Copy full SHA for 58e9bad

     View code at this pointBrowse repository at this point
6. Commits on Apr 20, 2026

   • Post-release preparation for codeql-cli-2.25.3

     

     github-actions[bot]

     committed
     a0bab53View commit details

     Copy full SHA for a0bab53

     View code at this pointBrowse repository at this point

   • Merge pull request #21734 from owen-mc/java/fix-partial-path-traversal

     Show description for 9f310c2
     owen-mc

     authored
     9f310c2View commit details

     Copy full SHA for 9f310c2

     View code at this pointBrowse repository at this point

   • Release preparation for version 2.25.3

     

     github-actions[bot]

     committed
     c861d99View commit details

     Copy full SHA for c861d99

     View code at this pointBrowse repository at this point

   • Use set literal for getCommonSensitiveInfoFPRegex

     Show description for 92d205d
     MarkLee131

     committed
     92d205dView commit details

     Copy full SHA for 92d205d

     View code at this pointBrowse repository at this point
7. Commits on Apr 19, 2026

   • Add change note

     Show description for c6f641e
     

     owen-mc

     and

     Copilot

     committed
     c6f641eView commit details

     Copy full SHA for c6f641e

     View code at this pointBrowse repository at this point

   • Fix bug so `+= File.separator` is recognized

     owen-mc

     committed
     6d4a397View commit details

     Copy full SHA for 6d4a397

     View code at this pointBrowse repository at this point

   • Add SPURIOUS test for `+= File.separator`

     owen-mc

     committed
     6099c5dView commit details

     Copy full SHA for 6099c5d

     View code at this pointBrowse repository at this point

   • Use inline expectations with second test

     Show description for 63d20a5
     

     owen-mc

     and

     Copilot

     committed
     63d20a5View commit details

     Copy full SHA for 63d20a5

     View code at this pointBrowse repository at this point
8. Commits on Apr 18, 2026

   • Make inline expectation comments specify query

     owen-mc

     committed
     dca7046View commit details

     Copy full SHA for dca7046

     View code at this pointBrowse repository at this point
9. Commits on Apr 17, 2026

   • Address review: inline Woodstox into XmlParsers, move changelog to lib

     

     Salah Baddou

     authored and

     chmodxxx

     committed
     fb2d53eView commit details

     Copy full SHA for fb2d53e

     View code at this pointBrowse repository at this point

   • Java: Add XXE sink model for Woodstox WstxInputFactory

     Show description for f5131f9
     

     Salah Baddou

     authored and

     chmodxxx

     committed
     f5131f9View commit details

     Copy full SHA for f5131f9

     View code at this pointBrowse repository at this point
10. Commits on Apr 14, 2026

    • Fix link formatting in change notes

      owen-mc

      committed
      8f17b73View commit details

      Copy full SHA for 8f17b73

      View code at this pointBrowse repository at this point

    • Add change notes

      owen-mc

      committed
      c86ba38View commit details

      Copy full SHA for c86ba38

      View code at this pointBrowse repository at this point

    • Merge branch 'main' into post-release-prep/codeql-cli-2.25.2

      henrymercer

      authored
      43c9b95View commit details

      Copy full SHA for 43c9b95

      View code at this pointBrowse repository at this point

    • Merge pull request #21584 from owen-mc/shared/update-mad-comments

      Show description for 7458674
      owen-mc

      authored
      7458674View commit details

      Copy full SHA for 7458674

      View code at this pointBrowse repository at this point
11. Commits on Apr 10, 2026

    • Cfg/Java: Move InstanceOfExpr CFG into shared lib.

      aschackmull

      committed
      6ffed85View commit details

      Copy full SHA for 6ffed85

      View code at this pointBrowse repository at this point

    • Cfg: Support short-circuiting compound assignments.

      aschackmull

      committed
      0b6c416View commit details

      Copy full SHA for 0b6c416

      View code at this pointBrowse repository at this point

    • Cfg: Support GotoStmt.

      aschackmull

      committed
      a53cffcView commit details

      Copy full SHA for a53cffc

      View code at this pointBrowse repository at this point

    • Cfg: Support Throw expressions.

      aschackmull

      committed
      93a594eView commit details

      Copy full SHA for 93a594e

      View code at this pointBrowse repository at this point
12. Commits on Apr 7, 2026

    • Java: Accept new test results for JDK 26

      Show description for 6f199b9
      IdrissRio

      committed
      6f199b9View commit details

      Copy full SHA for 6f199b9

      View code at this pointBrowse repository at this point

    • Java: Accept new test results for JDK 26

      Show description for 3ccbd80
      IdrissRio

      committed
      3ccbd80View commit details

      Copy full SHA for 3ccbd80

      View code at this pointBrowse repository at this point

    • Java: Pin CWE-676 test to --release 25

      Show description for 5a6eb79
      IdrissRio

      committed
      5a6eb79View commit details

      Copy full SHA for 5a6eb79

      View code at this pointBrowse repository at this point

    • Java: Accept new test results after JDK 26 extractor upgrade

      IdrissRio

      committed
      74b0e8cView commit details

      Copy full SHA for 74b0e8c

      View code at this pointBrowse repository at this point