Commit history

1. Commits on Feb 12, 2026

   • Merge pull request #21138 from github/tausbn/python-prepare-for-overlay-annotations

     Show description for 7d17454
     tausbn

     authored
     7d17454View commit details

     Copy full SHA for 7d17454

     View code at this pointBrowse repository at this point

   • Rewordings per copilot

     smowton

     authored
     5f970d9View commit details

     Copy full SHA for 5f970d9

     View code at this pointBrowse repository at this point
2. Commits on Feb 11, 2026

   • Enhance path validation recommendations

     Show description for bed1ec8
     smowton

     authored
     bed1ec8View commit details

     Copy full SHA for bed1ec8

     View code at this pointBrowse repository at this point
3. Commits on Feb 9, 2026

   • Merge pull request #20563 from microsoft/azure_python_sdk_url_summary_upstream

     Show description for 5ad42f8
     yoff

     authored
     5ad42f8View commit details

     Copy full SHA for 5ad42f8

     View code at this pointBrowse repository at this point
4. Commits on Feb 6, 2026

   • Moving the SsrfSink concept into Concepts.qll, and renaming to HttpClientRequestFromModel as suggested in PR review.

     bdrodes

     committed
     8459eecView commit details

     Copy full SHA for 8459eec

     View code at this pointBrowse repository at this point
5. Commits on Feb 5, 2026

   • Update python/ql/lib/change-notes/2025-09-30-azure_ssrf_models.md

     Show description for ac1987f
     

     bdrodes

     and

     owen-mc

     authored
     ac1987fView commit details

     Copy full SHA for ac1987f

     View code at this pointBrowse repository at this point

   • Python: Bump extractor version and add change note

     tausbn

     committed
     8c27437View commit details

     Copy full SHA for 8c27437

     View code at this pointBrowse repository at this point

   • Python: Add tests

     tausbn

     committed
     12ee930View commit details

     Copy full SHA for 12ee930

     View code at this pointBrowse repository at this point

   • Python: Regenerate parser files

     tausbn

     committed
     bac356cView commit details

     Copy full SHA for bac356c

     View code at this pointBrowse repository at this point

   • Python: Fix syntax error when `=` is used as a format fill character

     Show description for 68c1a3d
     tausbn

     committed
     68c1a3dView commit details

     Copy full SHA for 68c1a3d

     View code at this pointBrowse repository at this point
6. Commits on Feb 4, 2026

   • Python: Altering SSRF MaD to use 'request-forgery' tag. Update to test cases expected results, off by one line. Changed to using ModelOutput::sinkNode.

     bdrodes

     committed
     0a88425View commit details

     Copy full SHA for 0a88425

     View code at this pointBrowse repository at this point

   • Merge branch 'main' into azure_python_sdk_url_summary_upstream

     bdrodes

     authored
     cd73dcfView commit details

     Copy full SHA for cd73dcf

     View code at this pointBrowse repository at this point

   • Pretty print models in test

     Show description for 3f08ff8
     owen-mc

     committed
     3f08ff8View commit details

     Copy full SHA for 3f08ff8

     View code at this pointBrowse repository at this point
7. Commits on Feb 3, 2026

   • Python: Rename `otherArgs` to `implicitArgumentNode`

     Show description for 62fb38d
     

     tausbn

     and

     yoff

     committed
     62fb38dView commit details

     Copy full SHA for 62fb38d

     View code at this pointBrowse repository at this point
8. Commits on Feb 2, 2026

   • Post-release preparation for codeql-cli-2.24.1

     

     github-actions[bot]

     committed
     73d06f2View commit details

     Copy full SHA for 73d06f2

     View code at this pointBrowse repository at this point

   • Merge branch 'main' into azure_python_sdk_url_summary_upstream

     bdrodes

     authored
     7ddfa80View commit details

     Copy full SHA for 7ddfa80

     View code at this pointBrowse repository at this point

   • Release preparation for version 2.24.1

     

     github-actions[bot]

     committed
     0db542eView commit details

     Copy full SHA for 0db542e

     View code at this pointBrowse repository at this point
9. Commits on Jan 30, 2026

   • Merge pull request #21234 from owen-mc/python/convert-sanitizers-to-mad

     Show description for 5204255
     owen-mc

     authored
     5204255View commit details

     Copy full SHA for 5204255

     View code at this pointBrowse repository at this point

   • Specify vulnerable args instead of safe ones

     owen-mc

     committed
     0222159View commit details

     Copy full SHA for 0222159

     View code at this pointBrowse repository at this point

   • Python: Accept dataflow test changes

     Show description for 958c798
     tausbn

     committed
     958c798View commit details

     Copy full SHA for 958c798

     View code at this pointBrowse repository at this point

   • Python: Fix consistency test failures

     Show description for fb6175d
     tausbn

     committed
     fb6175dView commit details

     Copy full SHA for fb6175d

     View code at this pointBrowse repository at this point

   • Python: Make capturing closure arguments synthetic and non-global

     Show description for 3f71812
     tausbn

     committed
     3f71812View commit details

     Copy full SHA for 3f71812

     View code at this pointBrowse repository at this point

   • Python: Fix test issues

     Show description for 6113d4b
     tausbn

     committed
     6113d4bView commit details

     Copy full SHA for 6113d4b

     View code at this pointBrowse repository at this point

   • Python: Make `ExtractedArgumentNode` local

     Show description for 7fccc23
     tausbn

     committed
     7fccc23View commit details

     Copy full SHA for 7fccc23

     View code at this pointBrowse repository at this point

   • Python: Fix tests

     Show description for ac5a744
     tausbn

     committed
     ac5a744View commit details

     Copy full SHA for ac5a744

     View code at this pointBrowse repository at this point

   • Python: Remove global restriction on `ModuleVariableNode`

     Show description for 30ce406
     tausbn

     committed
     30ce406View commit details

     Copy full SHA for 30ce406

     View code at this pointBrowse repository at this point

   • Python: Prepare `LocalSourceNode` for locality

     Show description for 4543c66
     tausbn

     committed
     4543c66View commit details

     Copy full SHA for 4543c66

     View code at this pointBrowse repository at this point

   • Merge pull request #21141 from mbaluda/prompt-injection

     Show description for 8c0baef
     yoff

     authored
     8c0baefView commit details

     Copy full SHA for 8c0baef

     View code at this pointBrowse repository at this point

   • Replace sanitizer by exclusion from sink definition

     owen-mc

     committed
     a3885cdView commit details

     Copy full SHA for a3885cd

     View code at this pointBrowse repository at this point

   • Make qldoc slightly more specific

     owen-mc

     committed
     b4cb2c3View commit details

     Copy full SHA for b4cb2c3

     View code at this pointBrowse repository at this point

   • Allow MaD sanitizers for queries with MaD sinks

     owen-mc

     committed
     ef6332cView commit details

     Copy full SHA for ef6332c

     View code at this pointBrowse repository at this point

   • Pretty print model numbers in tests

     owen-mc

     committed
     ad6f800View commit details

     Copy full SHA for ad6f800

     View code at this pointBrowse repository at this point
10. Commits on Jan 29, 2026

    • python: Add query for prompt injection

      Show description for e7a0fc7
      yoff

      committed
      e7a0fc7View commit details

      Copy full SHA for e7a0fc7

      View code at this pointBrowse repository at this point

    • Update CHANGELOG.md

      jonjanego

      authored
      e54d7c7View commit details

      Copy full SHA for e54d7c7

      View code at this pointBrowse repository at this point

    • Fix typo in taint flow model for urllib.parse

      jonjanego

      authored
      813d463View commit details

      Copy full SHA for 813d463

      View code at this pointBrowse repository at this point