Commits

Commit history

1. Commits on Aug 4, 2026

   • Java: cover R2DBC fluent execution paths

     Show description for e079fdf
     felickz

     committed
     e079fdfView commit details

     Copy full SHA for e079fdf

     View code at this pointBrowse repository at this point

   • Java: model R2DBC SQL injection sinks

     Show description for 2e4a174
     felickz

     committed
     2e4a174View commit details

     Copy full SHA for 2e4a174

     View code at this pointBrowse repository at this point

   • Fix Micronaut inline test expectations

     nicolaswill

     committed
     126c292View commit details

     Copy full SHA for 126c292

     View code at this pointBrowse repository at this point

   • Merge remote-tracking branch 'origin/main' into nicolaswill-audit-micronaut-pr

     Show description for 9d164d0
     nicolaswill

     committed
     9d164d0View commit details

     Copy full SHA for 9d164d0

     View code at this pointBrowse repository at this point
2. Commits on Aug 2, 2026

   • Java: model org.apache.commons.xml XmlFactories as safe XXE sources

     Show description for dc16cbe
     ppkarwasz

     committed
     dc16cbeView commit details

     Copy full SHA for dc16cbe

     View code at this pointBrowse repository at this point
3. Commits on Jul 29, 2026

   • Merge branch 'main' into post-release-prep/codeql-cli-2.26.2

     oscarsj

     authored
     21c2c97View commit details

     Copy full SHA for 21c2c97

     View code at this pointBrowse repository at this point

   • Correct Micronaut cookie and map coverage

     nicolaswill

     committed
     26b37adView commit details

     Copy full SHA for 26b37ad

     View code at this pointBrowse repository at this point

   • Address Micronaut modeling review feedback

     nicolaswill

     committed
     6ac1a72View commit details

     Copy full SHA for 6ac1a72

     View code at this pointBrowse repository at this point
4. Commits on Jul 28, 2026

   • Update java/ql/test/library-tests/dataflow/taintsources/MicronautConfig.java

     Show description for 3bf0c86
     

     mbaluda

     and

     owen-mc

     authored
     3bf0c86View commit details

     Copy full SHA for 3bf0c86

     View code at this pointBrowse repository at this point

   • Update java/ql/test/library-tests/frameworks/micronaut/MicronautConfigTest.java

     Show description for 2512213
     

     mbaluda

     and

     Copilot

     authored
     2512213View commit details

     Copy full SHA for 2512213

     View code at this pointBrowse repository at this point

   • Update java/ql/lib/ext/io.micronaut.http.model.yml

     Show description for 4c821dd
     

     mbaluda

     and

     owen-mc

     authored
     4c821ddView commit details

     Copy full SHA for 4c821dd

     View code at this pointBrowse repository at this point
5. Commits on Jul 27, 2026

   • Java: Update expected test results

     jketema

     committed
     009ed60View commit details

     Copy full SHA for 009ed60

     View code at this pointBrowse repository at this point

   • Update expected test results after CLI/extractor changes

     jketema

     committed
     4f30042View commit details

     Copy full SHA for 4f30042

     View code at this pointBrowse repository at this point
6. Commits on Jul 23, 2026

   • Post-release preparation for codeql-cli-2.26.2

     

     github-actions[bot]

     committed
     e7b6f91View commit details

     Copy full SHA for e7b6f91

     View code at this pointBrowse repository at this point

   • Release preparation for version 2.26.2

     

     github-actions[bot]

     committed
     6632d2fView commit details

     Copy full SHA for 6632d2f

     View code at this pointBrowse repository at this point

   • Merge pull request #22152 from github/post-release-prep/codeql-cli-2.26.1

     Show description for 9836c1d
     oscarsj

     authored
     9836c1dView commit details

     Copy full SHA for 9836c1d

     View code at this pointBrowse repository at this point
7. Commits on Jul 17, 2026

   • Merge pull request #22207 from github/codeql-spark-run-29493713448

     Show description for 87835f7
     oscarsj

     authored
     87835f7View commit details

     Copy full SHA for 87835f7

     View code at this pointBrowse repository at this point

   • Java: Add java generics test cases.

     michaelnebel

     committed
     f184d28View commit details

     Copy full SHA for f184d28

     View code at this pointBrowse repository at this point
8. Commits on Jul 16, 2026

   • Java: Lift models to source (unbound) declarations.

     michaelnebel

     committed
     0b365b3View commit details

     Copy full SHA for 0b365b3

     View code at this pointBrowse repository at this point
9. Commits on Jul 15, 2026

   • Kotlin: Support Kotlin 2.4.10

     jketema

     committed
     574ef4dView commit details

     Copy full SHA for 574ef4d

     View code at this pointBrowse repository at this point
10. Commits on Jul 14, 2026

    • Merge pull request #22175 from owen-mc/java/fix-path-sanitizer

      Show description for 05734dc
      owen-mc

      authored
      05734dcView commit details

      Copy full SHA for 05734dc

      View code at this pointBrowse repository at this point
11. Commits on Jul 13, 2026

    • Address review comment

      owen-mc

      committed
      2d00958View commit details

      Copy full SHA for 2d00958

      View code at this pointBrowse repository at this point

    • Merge pull request #22159 from aschackmull/java/join-order-effnonvirt

      Show description for 42843f1
      michaelnebel

      authored
      42843f1View commit details

      Copy full SHA for 42843f1

      View code at this pointBrowse repository at this point
12. Commits on Jul 11, 2026

    • Fix path sanitizer

      owen-mc

      committed
      6057b4bView commit details

      Copy full SHA for 6057b4b

      View code at this pointBrowse repository at this point
13. Commits on Jul 10, 2026

    • Java: Improve join order.

      Show description for 33261f4
      aschackmull

      committed
      33261f4View commit details

      Copy full SHA for 33261f4

      View code at this pointBrowse repository at this point
14. Commits on Jul 9, 2026

    • Post-release preparation for codeql-cli-2.26.1

      

      github-actions[bot]

      committed
      ec83894View commit details

      Copy full SHA for ec83894

      View code at this pointBrowse repository at this point

    • Release preparation for version 2.26.1

      

      github-actions[bot]

      committed
      9acbbb8View commit details

      Copy full SHA for 9acbbb8

      View code at this pointBrowse repository at this point

    • Merge pull request #22130 from github/jacknojo/apache_poi_mads

      Show description for d5712ef
      jacknojo

      authored
      d5712efView commit details

      Copy full SHA for d5712ef

      View code at this pointBrowse repository at this point
15. Commits on Jul 8, 2026

    • Merge pull request #22119 from owen-mc/java/fix-tainted-path-pattern-sanitization

      Show description for 134e302
      owen-mc

      authored
      134e302View commit details

      Copy full SHA for 134e302

      View code at this pointBrowse repository at this point

    • Remove `main` entries

      jacknojo

      committed
      6c7b9f7View commit details

      Copy full SHA for 6c7b9f7

      View code at this pointBrowse repository at this point
16. Commits on Jul 7, 2026

    • Merge pull request #22132 from joshimar/java/spring-webclient-uri-ssrf-sink

      Show description for 8363d2d
      owen-mc

      authored
      8363d2dView commit details

      Copy full SHA for 8363d2d

      View code at this pointBrowse repository at this point

    • Update java/ql/lib/change-notes/2026-06-30-spring-webclient-uri-ssrf.md

      Show description for b8f8370
      

      joshimar

      and

      owen-mc

      authored
      b8f8370View commit details

      Copy full SHA for b8f8370

      View code at this pointBrowse repository at this point

    • Apply suggestion from @owen-mc

      Show description for 6ff2a4c
      

      joshimar

      and

      owen-mc

      authored
      6ff2a4cView commit details

      Copy full SHA for 6ff2a4c

      View code at this pointBrowse repository at this point

    • Java: Model Spring reactive `WebClient.uri` as a request forgery sink

      joshimar

      committed
      1db3132View commit details

      Copy full SHA for 1db3132

      View code at this pointBrowse repository at this point

    • Refactor creating barriers with annotations

      owen-mc

      committed
      a812e4aView commit details

      Copy full SHA for a812e4a

      View code at this pointBrowse repository at this point