Commit history

1. Commits on Oct 15, 2026

   • Release preparation for version 2.27.3

     

     github-actions[bot]

     committed
     5dfcc34View commit details

     Copy full SHA for 5dfcc34

     View code at this pointBrowse repository at this point
2. Commits on Oct 14, 2026

   • Merge main into java-uri-host-allowlist

     theinfosecguy

     committed
     1766509View commit details

     Copy full SHA for 1766509

     View code at this pointBrowse repository at this point
3. Commits on Oct 1, 2026

   • Release preparation for version 2.27.2

     

     github-actions[bot]

     committed
     1317b66View commit details

     Copy full SHA for 1317b66

     View code at this pointBrowse repository at this point
4. Commits on Sep 17, 2026

   • Release preparation for version 2.27.1

     

     github-actions[bot]

     committed
     903466fView commit details

     Copy full SHA for 903466f

     View code at this pointBrowse repository at this point
5. Commits on Sep 15, 2026

   • Improve URI host allowlist checks

     theinfosecguy

     committed
     b9af1d0View commit details

     Copy full SHA for b9af1d0

     View code at this pointBrowse repository at this point
6. Commits on Sep 9, 2026

   • Kotlin: Fix findTopLevelPropertyOrWarn for K2

     Show description for 19dc506
     david-allison

     committed
     19dc506View commit details

     Copy full SHA for 19dc506

     View code at this pointBrowse repository at this point
7. Commits on Sep 7, 2026

   • Kotlin: use 2.4.20 GA

     Show description for 47cc7d8
     

     andersfugmann

     and

     Copilot

     committed
     47cc7d8View commit details

     Copy full SHA for 47cc7d8

     View code at this pointBrowse repository at this point

   • Kotlin: document preliminary 2.4.20 support

     Show description for 8301109
     

     andersfugmann

     and

     Copilot

     committed
     8301109View commit details

     Copy full SHA for 8301109

     View code at this pointBrowse repository at this point

   • Kotlin: support 2.4.20-RC2

     Show description for b1c4fe7
     

     andersfugmann

     and

     Copilot

     committed
     b1c4fe7View commit details

     Copy full SHA for b1c4fe7

     View code at this pointBrowse repository at this point

   • Kotlin: document preliminary 2.4.20-RC support

     Show description for 352483f
     

     andersfugmann

     and

     Copilot

     committed
     352483fView commit details

     Copy full SHA for 352483f

     View code at this pointBrowse repository at this point
8. Commits on Sep 3, 2026

   • Release preparation for version 2.27.0

     

     github-actions[bot]

     committed
     da93726View commit details

     Copy full SHA for da93726

     View code at this pointBrowse repository at this point

   • Merge pull request #22269 from ppkarwasz/feat/xml-commons

     Show description for 18dae28
     owen-mc

     authored
     18dae28View commit details

     Copy full SHA for 18dae28

     View code at this pointBrowse repository at this point
9. Commits on Sep 2, 2026

   • Merge pull request #21387 from github/nicolaswill/micronaut

     Show description for ed2b77e
     owen-mc

     authored
     ed2b77eView commit details

     Copy full SHA for ed2b77e

     View code at this pointBrowse repository at this point
10. Commits on Aug 31, 2026

    • Merge remote-tracking branch 'ppkarwasz/feat/xml-commons' into feat/xml-commons

      ppkarwasz

      committed
      619da40View commit details

      Copy full SHA for 619da40

      View code at this pointBrowse repository at this point

    • Java: update the Commons XML model to the commons-secure-xml 1.0.0 API

      Show description for 546e64d
      ppkarwasz

      committed
      546e64dView commit details

      Copy full SHA for 546e64d

      View code at this pointBrowse repository at this point
11. Commits on Aug 25, 2026

    • Merge branch 'main' into feat/xml-commons

      ppkarwasz

      authored
      af6d1daView commit details

      Copy full SHA for af6d1da

      View code at this pointBrowse repository at this point
12. Commits on Aug 20, 2026

    • Release preparation for version 2.26.4

      

      github-actions[bot]

      committed
      2bbab1bView commit details

      Copy full SHA for 2bbab1b

      View code at this pointBrowse repository at this point
13. Commits on Aug 11, 2026

    • Java: replace non-existent String.valueOf(CharSequence) summary with a synthetic callable for valueOf(Object) on CharSequence arguments

      Show description for 925d3e2
      

      Copilot

      and

      hvitved

      authored
      925d3e2View commit details

      Copy full SHA for 925d3e2

      View code at this pointBrowse repository at this point
14. Commits on Aug 10, 2026

    • Merge branch 'main' into felickz-add-spring-r2dbc-models

      felickz

      authored
      239b16bView commit details

      Copy full SHA for 239b16b

      View code at this pointBrowse repository at this point
15. Commits on Aug 6, 2026

    • Release preparation for version 2.26.3

      

      github-actions[bot]

      committed
      fae4a92View commit details

      Copy full SHA for fae4a92

      View code at this pointBrowse repository at this point
16. Commits on Aug 4, 2026

    • Java: model R2DBC SQL injection sinks

      Show description for 2e4a174
      felickz

      committed
      2e4a174View commit details

      Copy full SHA for 2e4a174

      View code at this pointBrowse repository at this point

    • Merge remote-tracking branch 'origin/main' into nicolaswill-audit-micronaut-pr

      Show description for 9d164d0
      nicolaswill

      committed
      9d164d0View commit details

      Copy full SHA for 9d164d0

      View code at this pointBrowse repository at this point
17. Commits on Aug 2, 2026

    • Java: model org.apache.commons.xml XmlFactories as safe XXE sources

      Show description for dc16cbe
      ppkarwasz

      committed
      dc16cbeView commit details

      Copy full SHA for dc16cbe

      View code at this pointBrowse repository at this point
18. Commits on Jul 23, 2026

    • Release preparation for version 2.26.2

      

      github-actions[bot]

      committed
      6632d2fView commit details

      Copy full SHA for 6632d2f

      View code at this pointBrowse repository at this point
19. Commits on Jul 17, 2026

    • Merge pull request #22207 from github/codeql-spark-run-29493713448

      Show description for 87835f7
      oscarsj

      authored
      87835f7View commit details

      Copy full SHA for 87835f7

      View code at this pointBrowse repository at this point
20. Commits on Jul 15, 2026

    • Kotlin: Support Kotlin 2.4.10

      jketema

      committed
      574ef4dView commit details

      Copy full SHA for 574ef4d

      View code at this pointBrowse repository at this point
21. Commits on Jul 11, 2026

    • Fix path sanitizer

      owen-mc

      committed
      6057b4bView commit details

      Copy full SHA for 6057b4b

      View code at this pointBrowse repository at this point
22. Commits on Jul 9, 2026

    • Release preparation for version 2.26.1

      

      github-actions[bot]

      committed
      9acbbb8View commit details

      Copy full SHA for 9acbbb8

      View code at this pointBrowse repository at this point

    • Merge pull request #22130 from github/jacknojo/apache_poi_mads

      Show description for d5712ef
      jacknojo

      authored
      d5712efView commit details

      Copy full SHA for d5712ef

      View code at this pointBrowse repository at this point
23. Commits on Jul 8, 2026

    • Merge pull request #22119 from owen-mc/java/fix-tainted-path-pattern-sanitization

      Show description for 134e302
      owen-mc

      authored
      134e302View commit details

      Copy full SHA for 134e302

      View code at this pointBrowse repository at this point
24. Commits on Jul 7, 2026

    • Update java/ql/lib/change-notes/2026-06-30-spring-webclient-uri-ssrf.md

      Show description for b8f8370
      

      joshimar

      and

      owen-mc

      authored
      b8f8370View commit details

      Copy full SHA for b8f8370

      View code at this pointBrowse repository at this point

    • Java: Model Spring reactive `WebClient.uri` as a request forgery sink

      joshimar

      committed
      1db3132View commit details

      Copy full SHA for 1db3132

      View code at this pointBrowse repository at this point
25. Commits on Jul 6, 2026

    • Add Changenote

      jacknojo

      committed
      0ca353dView commit details

      Copy full SHA for 0ca353d

      View code at this pointBrowse repository at this point
26. Commits on Jul 3, 2026

    • Add change note

      owen-mc

      committed
      e5bd62dView commit details

      Copy full SHA for e5bd62d

      View code at this pointBrowse repository at this point
27. Commits on Jun 25, 2026

    • Release preparation for version 2.26.0

      

      github-actions[bot]

      committed
      237c563View commit details

      Copy full SHA for 237c563

      View code at this pointBrowse repository at this point