28 Pull requests merged by 14 people

• QL tests: run with --check-diff-informed

  #19428 merged May 28, 2025

• Rust: delete leftover log statement

  #19612 merged May 28, 2025

• Ruby, Rust: add zstd compression option (and fix compression in Rust)

  #19613 merged May 28, 2025

• Rust: add more macro expansion tests

  #19600 merged May 28, 2025

• C++: Specify GNU version on min/max test

  #19606 merged May 28, 2025

• Go: Make type param test independent of standard library version

  #19532 merged May 28, 2025

• Go: Check more things while running tests

  #19491 merged May 28, 2025

• Rust: Also include prelude path resolution in Core

  #19580 merged May 28, 2025

• Post-release preparation for codeql-cli-2.21.4

  #19602 merged May 27, 2025

• Release preparation for version 2.21.4

  #19601 merged May 27, 2025

• Rust: Recognize more sensitive data sources

  #19470 merged May 27, 2025

• C++: Address comments from earlier Windows MaD PRs

  #19599 merged May 27, 2025

• Go: Explicitly check whether proxy env vars are empty

  #19598 merged May 27, 2025

• C++: Add missing ReadFileEx flow summary

  #19595 merged May 27, 2025

• Rust: Model Pin

  #19529 merged May 27, 2025

• Rust: add option to extract dependencies as source files

  #19583 merged May 27, 2025

• C#: Improve cs/missed-readonly-modifier and to code-quality suite.

  #19520 merged May 27, 2025

• C++: Add more Win32 flow sources

  #19591 merged May 27, 2025

• Rust: Only include relevant AST nodes in TypeMention

  #19557 merged May 27, 2025

• C++: Add Windows command line and environment models

  #19563 merged May 27, 2025

• Swift: Update to Swift 6.1.1

  #19576 merged May 27, 2025

• JS: Explicitly Filter Quality Queries for Inclusion in Security-and-Quality

  #19578 merged May 27, 2025

• Swift: Fix type string representation

  #19582 merged May 27, 2025

• Rust: Add more Operation subclasses

  #19562 merged May 27, 2025

• Rust: Resolve function calls to traits methods

  #19575 merged May 27, 2025

• Rust: turn off macro expansion in code to be expanded by attribute macros

  #19572 merged May 27, 2025

• Rangeanalysis: Simplify Guards integration.

  #19571 merged May 26, 2025

• Type inference: Simplify internal representation of type paths

  #19570 merged May 26, 2025

21 Pull requests opened by 13 people

• Rust: Remove source vs library deduplication logic

  #19577 opened May 26, 2025

• JS: Enhance `isDomProperty`

  #19579 opened May 26, 2025

• Rust: skip private items when extracting library files

  #19581 opened May 26, 2025

• Rust: Type inference for `.await` expressions

  #19584 opened May 26, 2025

• Rust: skip unexpanded stuff in library emission

  #19585 opened May 27, 2025

• Diff-informed queries via primary/secondary abstractions

  #19586 opened May 27, 2025

• JS: Mark AngularJS $location as client-side remote flow source

  #19587 opened May 27, 2025

• Rust: re-enable attribute macro expansion in library mode

  #19588 opened May 27, 2025

• C#: Improve `cs/dereference-*` queries and add to the Code Quality suite.

  #19589 opened May 27, 2025

• Add QL for QL query to warn about possible non-inlining across overlay frontier

  #19590 opened May 27, 2025

• Rust: Type inference for operator overloading

  #19593 opened May 27, 2025

• Python: Add Pandas SQLi sinks

  #19594 opened May 27, 2025

• C++: Generate flow summaries for `curl/curl`

  #19596 opened May 27, 2025

• C++: Add support for getting literals in using declarations

  #19603 opened May 28, 2025

• Rust: Extend jump-to-def to include paths and `mod file;` imports

  #19605 opened May 28, 2025

• Quantum: Add base classes for OpenSSL EVP methods

  #19607 opened May 28, 2025

• Experiment: Mark predicate inline to test QL-for-QL query

  #19609 opened May 28, 2025

• Experiment: Test QL-for-QL overlay[caller] query

  #19610 opened May 28, 2025

• Rust: Also take the `std` prelude into account when resolving paths

  #19611 opened May 28, 2025

• Rust: Path resolution for `extern crate`s

  #19614 opened May 28, 2025

• Rust: restrict line and file counts to include only extracted source …

  #19616 opened May 28, 2025

1 Issue closed by 1 person

• JAVA:could not resolve type MethodAccess

  #19615 closed May 28, 2025

1 Issue opened by 1 person

• Java: static field access of unknown class breaks dataflow (build-mode=none)

  #19597 opened May 27, 2025

16 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• Python: Modernize iter not returning self query

  #19554 commented on May 27, 2025 • 7 new comments

• Quantum: Add initial qltests for OpenSSL modeling

  #19564 commented on May 28, 2025 • 5 new comments

• Rust: use all features by default

  #19551 commented on May 27, 2025 • 2 new comments

• Rust: upgrade `rust-analyzer` to 0.0.281

  #19524 commented on May 28, 2025 • 1 new comment

• Java: Queries for thread-safe classes

  #19539 commented on May 28, 2025 • 1 new comment

• JS: new `Quality` query - Unhandled errors in `.pipe()` chain

  #19544 commented on May 28, 2025 • 1 new comment

• Quantum: Initial support for BouncyCastle signature algorithms

  #19568 commented on May 28, 2025 • 1 new comment

• CodeQL DB missing half the source C files, getting compiled with no errors.

  #19066 commented on May 27, 2025 • 0 new comments

• Java: Generic Class Methods not connected when type parameter is unknown (build-mode=none)

  #19538 commented on May 27, 2025 • 0 new comments

• How to speed up the execution

  #19471 commented on May 28, 2025 • 0 new comments

• C++: Multi-Level Member Function Calls Not Modeled as DataFlow::Node

  #19457 commented on May 28, 2025 • 0 new comments

• C++: Update expected test results and compiler version documentation after frontend update

  #18931 commented on May 28, 2025 • 0 new comments

• Rust: Make `SummarizedCallable` extend `Function` instead of `string`

  #19268 commented on May 27, 2025 • 0 new comments

• C++: accept new test results after changes

  #19533 commented on May 28, 2025 • 0 new comments

• Rust: move body skipping logic to code generation

  #19559 commented on May 28, 2025 • 0 new comments

• Shared/Java: Add shared Guards library and switch Java to use it.

  #19573 commented on May 27, 2025 • 0 new comments