Commit history

1. Commits on Apr 30, 2026

   • Merge pull request #21654 from MarkLee131/fix/sensitive-log-hash-sanitizer

     Show description for 87c35e6
     owen-mc

     authored
     87c35e6View commit details

     Copy full SHA for 87c35e6

     View code at this pointBrowse repository at this point

   • Merge pull request #21759 from hvitved/csharp/cfg-params

     Show description for a473fdb
     hvitved

     authored
     a473fdbView commit details

     Copy full SHA for a473fdb

     View code at this pointBrowse repository at this point
2. Commits on Apr 29, 2026

   • Merge remote-tracking branch 'origin/main' into fix/sensitive-log-hash-sanitizer

     Show description for 28a6ff2
     MarkLee131

     committed
     28a6ff2View commit details

     Copy full SHA for 28a6ff2

     View code at this pointBrowse repository at this point

   • Java: move EncryptedSensitiveMethodCall into Sanitizers.qll

     Show description for 51e2a54
     MarkLee131

     committed
     51e2a54View commit details

     Copy full SHA for 51e2a54

     View code at this pointBrowse repository at this point

   • Update java/ql/test/query-tests/security/CWE-532/Test.java

     Show description for 75162bb
     

     MarkLee131

     and

     owen-mc

     authored
     75162bbView commit details

     Copy full SHA for 75162bb

     View code at this pointBrowse repository at this point

   • Merge branch 'main' into fix/trust-boundary-regexp-barrier

     MarkLee131

     authored
     49d014cView commit details

     Copy full SHA for 49d014c

     View code at this pointBrowse repository at this point

   • Java: refactor trust-boundary sanitizers into TrustBoundaryValidationSanitizer subclasses

     Show description for d27ee86
     MarkLee131

     committed
     d27ee86View commit details

     Copy full SHA for d27ee86

     View code at this pointBrowse repository at this point

   • Merge pull request #21751 from github/jacknojo/move_java_generated_mads

     Show description for 0192ffa
     jacknojo

     authored
     0192ffaView commit details

     Copy full SHA for 0192ffa

     View code at this pointBrowse repository at this point

   • Java: Adapt to changes in shared CFG library

     hvitved

     committed
     99b5cecView commit details

     Copy full SHA for 99b5cec

     View code at this pointBrowse repository at this point
3. Commits on Apr 25, 2026

   • Add changed framework coverage reports

     github-actions[bot]

     committed
     be8c35aView commit details

     Copy full SHA for be8c35a

     View code at this pointBrowse repository at this point
4. Commits on Apr 24, 2026

   • Move generated MaDs for Java into modelgenerator/

     jacknojo

     committed
     6ec2509View commit details

     Copy full SHA for 6ec2509

     View code at this pointBrowse repository at this point

   • Merge pull request #21749 from github/copilot/add-hibernate-sql-injection-tests

     Show description for 9fbe447
     owen-mc

     authored
     9fbe447View commit details

     Copy full SHA for 9fbe447

     View code at this pointBrowse repository at this point
5. Commits on Apr 23, 2026

   • Add Java change note for Hibernate sinks

     Show description for 083909e
     

     Copilot

     and

     owen-mc

     authored
     083909eView commit details

     Copy full SHA for 083909e

     View code at this pointBrowse repository at this point

   • Model additional Hibernate query sinks

     Show description for 25d232b
     

     Copilot

     and

     owen-mc

     authored
     25d232bView commit details

     Copy full SHA for 25d232b

     View code at this pointBrowse repository at this point

   • Merge pull request #21743 from hvitved/cfg/body-parts

     Show description for eee5b06
     hvitved

     authored
     eee5b06View commit details

     Copy full SHA for eee5b06

     View code at this pointBrowse repository at this point

   • Add Hibernate SQL injection sink tests

     Show description for 081ad03
     

     Copilot

     and

     owen-mc

     authored
     081ad03View commit details

     Copy full SHA for 081ad03

     View code at this pointBrowse repository at this point

   • Merge branch 'main' into fix/path-injection-torealpath

     owen-mc

     authored
     9f19791View commit details

     Copy full SHA for 9f19791

     View code at this pointBrowse repository at this point
6. Commits on Apr 22, 2026

   • Java: Adapt to changes in CFG library

     hvitved

     committed
     6ebf4eeView commit details

     Copy full SHA for 6ebf4ee

     View code at this pointBrowse repository at this point
7. Commits on Apr 21, 2026

   • Merge pull request #21565 from aschackmull/csharp/cfg2

     Show description for f912731
     aschackmull

     authored
     f912731View commit details

     Copy full SHA for f912731

     View code at this pointBrowse repository at this point

   • Merge branch 'main' into fix/trust-boundary-regexp-barrier

     MarkLee131

     authored
     af794edView commit details

     Copy full SHA for af794ed

     View code at this pointBrowse repository at this point

   • Merge pull request #21523 from owen-mc/docs/mad/barriers

     Show description for 6efb213
     owen-mc

     authored
     6efb213View commit details

     Copy full SHA for 6efb213

     View code at this pointBrowse repository at this point

   • Merge pull request #21650 from MarkLee131/fix/sensitive-log-fp-regex

     Show description for c91b5b3
     owen-mc

     authored
     c91b5b3View commit details

     Copy full SHA for c91b5b3

     View code at this pointBrowse repository at this point

   • Merge pull request #21737 from github/post-release-prep/codeql-cli-2.25.3

     Show description for 58e9bad
     mbg

     authored
     58e9badView commit details

     Copy full SHA for 58e9bad

     View code at this pointBrowse repository at this point
8. Commits on Apr 20, 2026

   • Post-release preparation for codeql-cli-2.25.3

     

     github-actions[bot]

     committed
     a0bab53View commit details

     Copy full SHA for a0bab53

     View code at this pointBrowse repository at this point

   • Merge pull request #21734 from owen-mc/java/fix-partial-path-traversal

     Show description for 9f310c2
     owen-mc

     authored
     9f310c2View commit details

     Copy full SHA for 9f310c2

     View code at this pointBrowse repository at this point

   • Release preparation for version 2.25.3

     

     github-actions[bot]

     committed
     c861d99View commit details

     Copy full SHA for c861d99

     View code at this pointBrowse repository at this point

   • Use set literal for getCommonSensitiveInfoFPRegex

     Show description for 92d205d
     MarkLee131

     committed
     92d205dView commit details

     Copy full SHA for 92d205d

     View code at this pointBrowse repository at this point
9. Commits on Apr 19, 2026

   • Add change note

     Show description for c6f641e
     

     owen-mc

     and

     Copilot

     committed
     c6f641eView commit details

     Copy full SHA for c6f641e

     View code at this pointBrowse repository at this point

   • Fix bug so `+= File.separator` is recognized

     owen-mc

     committed
     6d4a397View commit details

     Copy full SHA for 6d4a397

     View code at this pointBrowse repository at this point

   • Add SPURIOUS test for `+= File.separator`

     owen-mc

     committed
     6099c5dView commit details

     Copy full SHA for 6099c5d

     View code at this pointBrowse repository at this point

   • Use inline expectations with second test

     Show description for 63d20a5
     

     owen-mc

     and

     Copilot

     committed
     63d20a5View commit details

     Copy full SHA for 63d20a5

     View code at this pointBrowse repository at this point
10. Commits on Apr 18, 2026

    • Make inline expectation comments specify query

      owen-mc

      committed
      dca7046View commit details

      Copy full SHA for dca7046

      View code at this pointBrowse repository at this point
11. Commits on Apr 17, 2026

    • Address review: inline Woodstox into XmlParsers, move changelog to lib

      

      Salah Baddou

      authored and

      chmodxxx

      committed
      fb2d53eView commit details

      Copy full SHA for fb2d53e

      View code at this pointBrowse repository at this point

    • Java: Add XXE sink model for Woodstox WstxInputFactory

      Show description for f5131f9
      

      Salah Baddou

      authored and

      chmodxxx

      committed
      f5131f9View commit details

      Copy full SHA for f5131f9

      View code at this pointBrowse repository at this point
12. Commits on Apr 14, 2026

    • Fix link formatting in change notes

      owen-mc

      committed
      8f17b73View commit details

      Copy full SHA for 8f17b73

      View code at this pointBrowse repository at this point