Commit history

1. Commits on Sep 1, 2026

   • FlowSummaryImpl: Align source/sink/barrier prioriterization with that for summaries

     Tom Hvitved (hvitved)

     committed
     872aabcView commit details

     Copy full SHA for 872aabc

     View code at this pointBrowse repository at this point
2. Commits on Aug 21, 2026

   • Post-release preparation for codeql-cli-2.26.4

     

     github-actions[bot]

     committed
     dbb6921View commit details

     Copy full SHA for dbb6921

     View code at this pointBrowse repository at this point
3. Commits on Aug 20, 2026

   • Release preparation for version 2.26.4

     

     github-actions[bot]

     committed
     2bbab1bView commit details

     Copy full SHA for 2bbab1b

     View code at this pointBrowse repository at this point
4. Commits on Aug 14, 2026

   • Java: Adapt to FlowSummaryImpl changes

     Tom Hvitved (hvitved)

     committed
     b1c5b5bView commit details

     Copy full SHA for b1c5b5b

     View code at this pointBrowse repository at this point

   • Merge pull request #22347 from github/andersfugmann/fix-maven-enforcer-property-version

     Show description for b196f0c
     Anders Peter Fugmann (andersfugmann)

     authored
     b196f0cView commit details

     Copy full SHA for b196f0c

     View code at this pointBrowse repository at this point

   • Java: test Maven 3.9.16 selection

     Show description for 668f4e8
     Anders Peter Fugmann (andersfugmann)

     committed
     668f4e8View commit details

     Copy full SHA for 668f4e8

     View code at this pointBrowse repository at this point

   • Java: add regression test for Maven version property

     Show description for bb64af0
     Anders Peter Fugmann (andersfugmann)

     committed
     bb64af0View commit details

     Copy full SHA for bb64af0

     View code at this pointBrowse repository at this point

   • Add changed framework coverage reports

     github-actions[bot]

     committed
     5a8f9b8View commit details

     Copy full SHA for 5a8f9b8

     View code at this pointBrowse repository at this point
5. Commits on Aug 13, 2026

   • Merge pull request #22315 from github/copilot/fix-valueof-call-site-issue

     Show description for 9d247d6
     Tom Hvitved (hvitved)

     authored
     9d247d6View commit details

     Copy full SHA for 9d247d6

     View code at this pointBrowse repository at this point

   • Merge pull request #22337 from github/navntoft/expected-files-ctx

     Show description for a80d7e0
     Mads Navntoft (navntoft)

     authored
     a80d7e0View commit details

     Copy full SHA for a80d7e0

     View code at this pointBrowse repository at this point

   • Make android-gradle-incompatibility gating comment self-contained

     Show description for 2c67a08
     Paolo Tranquilli (redsun82)

     committed
     2c67a08View commit details

     Copy full SHA for 2c67a08

     View code at this pointBrowse repository at this point

   • Use expected_files.add as context manager where applicable

     Mads Navntoft (navntoft)

     committed
     d32650eView commit details

     Copy full SHA for d32650e

     View code at this pointBrowse repository at this point

   • Gate remaining Android integration tests off linux-arm64

     Show description for 4321ba1
     

     Paolo Tranquilli (redsun82)

     and

     Copilot

     committed
     4321ba1View commit details

     Copy full SHA for 4321ba1

     View code at this pointBrowse repository at this point
6. Commits on Aug 12, 2026

   • Java: gate AGP-7.x Android integration tests off linux-arm64

     Show description for d12e9dc
     

     Paolo Tranquilli (redsun82)

     and

     Copilot

     committed
     d12e9dcView commit details

     Copy full SHA for d12e9dc

     View code at this pointBrowse repository at this point
7. Commits on Aug 11, 2026

   • Merge pull request #22192 from michaelnebel/shared/modelgengeneric

     Show description for 4e31516
     Michael Nebel (michaelnebel)

     authored
     4e31516View commit details

     Copy full SHA for 4e31516

     View code at this pointBrowse repository at this point

   • Java: Update test expectations

     Tom Hvitved (hvitved)

     committed
     7e3c144View commit details

     Copy full SHA for 7e3c144

     View code at this pointBrowse repository at this point

   • Simplify test method signature

     Show description for c601c6c
     

     Copilot

     and

     Tom Hvitved (hvitved)

     authored
     c601c6cView commit details

     Copy full SHA for c601c6c

     View code at this pointBrowse repository at this point

   • Java: replace non-existent String.valueOf(CharSequence) summary with a synthetic callable for valueOf(Object) on CharSequence arguments

     Show description for 925d3e2
     

     Copilot

     and

     Tom Hvitved (hvitved)

     authored
     925d3e2View commit details

     Copy full SHA for 925d3e2

     View code at this pointBrowse repository at this point

   • Add changed framework coverage reports

     github-actions[bot]

     committed
     5dffc22View commit details

     Copy full SHA for 5dffc22

     View code at this pointBrowse repository at this point
8. Commits on Aug 10, 2026

   • Merge branch 'main' into felickz-add-spring-r2dbc-models

     Chad Bentz (felickz)

     authored
     239b16bView commit details

     Copy full SHA for 239b16b

     View code at this pointBrowse repository at this point

   • Java: test safe R2DBC parameter binding

     Show description for 6919c3d
     Chad Bentz (felickz)

     committed
     6919c3dView commit details

     Copy full SHA for 6919c3d

     View code at this pointBrowse repository at this point

   • Update java/ql/lib/ext/io.r2dbc.spi.model.yml

     Show description for 2214e40
     

     Chad Bentz (felickz)

     and

     Owen Mansel-Chan (owen-mc)

     authored
     2214e40View commit details

     Copy full SHA for 2214e40

     View code at this pointBrowse repository at this point

   • Java: Replace instead of redact to preserve major version

     Mads Navntoft (navntoft)

     committed
     82dfa2dView commit details

     Copy full SHA for 82dfa2d

     View code at this pointBrowse repository at this point

   • Java: Redact java_version in gradle-buildless integration test

     Mads Navntoft (navntoft)

     committed
     08bc837View commit details

     Copy full SHA for 08bc837

     View code at this pointBrowse repository at this point
9. Commits on Aug 6, 2026

   • Post-release preparation for codeql-cli-2.26.3

     

     github-actions[bot]

     committed
     47d6b11View commit details

     Copy full SHA for 47d6b11

     View code at this pointBrowse repository at this point

   • Release preparation for version 2.26.3

     

     github-actions[bot]

     committed
     fae4a92View commit details

     Copy full SHA for fae4a92

     View code at this pointBrowse repository at this point
10. Commits on Aug 4, 2026

    • Java: add R2DBC SPI SQL injection sinks

      Show description for 90b78c9
      Chad Bentz (felickz)

      committed
      90b78c9View commit details

      Copy full SHA for 90b78c9

      View code at this pointBrowse repository at this point

    • Java: cover R2DBC fluent execution paths

      Show description for e079fdf
      Chad Bentz (felickz)

      committed
      e079fdfView commit details

      Copy full SHA for e079fdf

      View code at this pointBrowse repository at this point

    • Java: model R2DBC SQL injection sinks

      Show description for 2e4a174
      Chad Bentz (felickz)

      committed
      2e4a174View commit details

      Copy full SHA for 2e4a174

      View code at this pointBrowse repository at this point
11. Commits on Jul 29, 2026

    • Merge branch 'main' into post-release-prep/codeql-cli-2.26.2

      Óscar San José (oscarsj)

      authored
      21c2c97View commit details

      Copy full SHA for 21c2c97

      View code at this pointBrowse repository at this point
12. Commits on Jul 27, 2026

    • Address review comments

      Jeroen Ketema (jketema)

      committed
      726705bView commit details

      Copy full SHA for 726705b

      View code at this pointBrowse repository at this point

    • Address review comments

      Jeroen Ketema (jketema)

      committed
      9976a7aView commit details

      Copy full SHA for 9976a7a

      View code at this pointBrowse repository at this point

    • Java: Update expected test results

      Jeroen Ketema (jketema)

      committed
      009ed60View commit details

      Copy full SHA for 009ed60

      View code at this pointBrowse repository at this point

    • Kotlin: Resolve `subst`ed drives on Windows

      Jeroen Ketema (jketema)

      committed
      75ee4afView commit details

      Copy full SHA for 75ee4af

      View code at this pointBrowse repository at this point

    • Update expected test results after CLI/extractor changes

      Jeroen Ketema (jketema)

      committed
      4f30042View commit details

      Copy full SHA for 4f30042

      View code at this pointBrowse repository at this point