Commits

Breadcrumbs

History for

onmain

User selector

All users

All time

Commit History

Commits on Apr 20, 2026

• Merge pull request #21734 from owen-mc/java/fix-partial-path-traversal

  Show description for 9f310c2
  owen-mc

  authored
  9f310c2

  Copy full SHA for 9f310c2

Commits on Apr 19, 2026

• Add change note

  Show description for c6f641e
  

  owen-mc

  and

  Copilot

  committed
  c6f641e

  Copy full SHA for c6f641e

• Fix bug so `+= File.separator` is recognized

  owen-mc

  committed
  6d4a397

  Copy full SHA for 6d4a397

Commits on Apr 17, 2026

• Address review: inline Woodstox into XmlParsers, move changelog to lib

  

  Salah Baddou

  authored and

  chmodxxx

  committed
  fb2d53e

  Copy full SHA for fb2d53e

• Java: Add XXE sink model for Woodstox WstxInputFactory

  Show description for f5131f9
  

  Salah Baddou

  authored and

  chmodxxx

  committed
  f5131f9

  Copy full SHA for f5131f9

Commits on Apr 14, 2026

• Merge branch 'main' into post-release-prep/codeql-cli-2.25.2

  henrymercer

  authored
  43c9b95

  Copy full SHA for 43c9b95

• Merge pull request #21584 from owen-mc/shared/update-mad-comments

  Show description for 7458674
  owen-mc

  authored
  7458674

  Copy full SHA for 7458674

Commits on Apr 6, 2026

• Post-release preparation for codeql-cli-2.25.2

  

  github-actions[bot]

  committed
  242090e

  Copy full SHA for 242090e

• Release preparation for version 2.25.2

  

  github-actions[bot]

  committed
  4fe2f6d

  Copy full SHA for 4fe2f6d

Commits on Mar 30, 2026

• Merge remote-tracking branch 'origin/main' into wild-crest-ql

  redsun82

  committed
  106d6b9

  Copy full SHA for 106d6b9

• Merge branch 'main' into wild-crest-ql

  redsun82

  committed
  1d02838

  Copy full SHA for 1d02838

• Merge branch 'main' of https://github.com/github/codeql into post-release-prep/codeql-cli-2.25.1

  oscarsj

  committed
  59eec7f

  Copy full SHA for 59eec7f

• Post-release preparation for codeql-cli-2.25.1

  

  github-actions[bot]

  committed
  ce6e6d5

  Copy full SHA for ce6e6d5

Commits on Mar 29, 2026

• Address review: update QLDoc comment and fix expected test output

  Show description for e6adfbc
  MarkLee131

  committed
  e6adfbc

  Copy full SHA for e6adfbc

• Update java/ql/lib/change-notes/2026-03-28-tainted-arithmetic-bounds-check.md

  Show description for b595a70
  

  MarkLee131

  and

  Copilot

  authored
  b595a70

  Copy full SHA for b595a70

• Merge branch 'main' into fix/tainted-arithmetic-bounds-check-barrier

  MarkLee131

  authored
  938039d

  Copy full SHA for 938039d

Commits on Mar 28, 2026

• Add sentence to change note.

  owen-mc

  authored
  2b85587

  Copy full SHA for 2b85587

• Rephrase change note

  owen-mc

  authored
  ea9b99f

  Copy full SHA for ea9b99f

• Exclude bounds-check arithmetic from tainted-arithmetic sinks

  Show description for 0c5e89a
  MarkLee131

  committed
  0c5e89a

  Copy full SHA for 0c5e89a

• Address PR review: add Signature.getInstance sink, HMAC/PBKDF2 whitelist, fix test APIs

  Show description for da4a223
  MarkLee131

  committed
  da4a223

  Copy full SHA for da4a223

• Add EC to secure algorithm whitelist for Java CWE-327 query

  MarkLee131

  committed
  a9449cc

  Copy full SHA for a9449cc

Commits on Mar 27, 2026

• Replace `acceptingvalue` with `acceptingValue`

  owen-mc

  committed
  a7fdc4b

  Copy full SHA for a7fdc4b

• Make description of `acceptingvalue` column clearer

  owen-mc

  committed
  b3285c6

  Copy full SHA for b3285c6

• Shared: document extensible relations rather than CSV

  owen-mc

  committed
  e680d49

  Copy full SHA for e680d49

• Add barriers and barrier guards to MaD format explanations

  owen-mc

  committed
  10fddc7

  Copy full SHA for 10fddc7

Commits on Mar 26, 2026

• Kotlin: update to 2.3.20

  redsun82

  committed
  ded6968

  Copy full SHA for ded6968

Commits on Mar 25, 2026

• Release preparation for version 2.25.1

  

  github-actions[bot]

  committed
  fb01184

  Copy full SHA for fb01184

• Release preparation for version 2.25.1

  

  github-actions[bot]

  committed
  8cf0954

  Copy full SHA for 8cf0954

Commits on Mar 16, 2026

• Post-release preparation for codeql-cli-2.25.0

  

  github-actions[bot]

  committed
  e3dbf5b

  Copy full SHA for e3dbf5b

• Release preparation for version 2.25.0

  

  github-actions[bot]

  committed
  d605575

  Copy full SHA for d605575

Commits on Mar 10, 2026

• Merge pull request #21441 from aschackmull/cfg/switch-sharing

  Show description for 6a6bb5e
  aschackmull

  authored
  6a6bb5e

  Copy full SHA for 6a6bb5e

• Cfg: Update fallsThrough default.

  aschackmull

  committed
  77d4f5a

  Copy full SHA for 77d4f5a

• Cfg: Move Case.getBodyElement to shared code.

  aschackmull

  committed
  edf88b3

  Copy full SHA for edf88b3

• Cfg: Move getCaseControlFlowOrder to shared code.

  aschackmull

  committed
  35ac66d

  Copy full SHA for 35ac66d

Commits on Mar 9, 2026

• Java: Make corresponding predicate private

  owen-mc

  committed
  d8007a8

  Copy full SHA for d8007a8