Commit history

1. Commits on Jul 8, 2026

   • Merge pull request #22119 from owen-mc/java/fix-tainted-path-pattern-sanitization

     Show description for 134e302
     owen-mc

     authored
     134e302View commit details

     Copy full SHA for 134e302

     View code at this pointBrowse repository at this point

   • Add changed framework coverage reports

     github-actions[bot]

     committed
     bc966f6View commit details

     Copy full SHA for bc966f6

     View code at this pointBrowse repository at this point
2. Commits on Jul 7, 2026

   • Merge pull request #22132 from joshimar/java/spring-webclient-uri-ssrf-sink

     Show description for 8363d2d
     owen-mc

     authored
     8363d2dView commit details

     Copy full SHA for 8363d2d

     View code at this pointBrowse repository at this point

   • Update java/ql/lib/change-notes/2026-06-30-spring-webclient-uri-ssrf.md

     Show description for b8f8370
     

     joshimar

     and

     owen-mc

     authored
     b8f8370View commit details

     Copy full SHA for b8f8370

     View code at this pointBrowse repository at this point

   • Apply suggestion from @owen-mc

     Show description for 6ff2a4c
     

     joshimar

     and

     owen-mc

     authored
     6ff2a4cView commit details

     Copy full SHA for 6ff2a4c

     View code at this pointBrowse repository at this point

   • Java: Model Spring reactive `WebClient.uri` as a request forgery sink

     joshimar

     committed
     1db3132View commit details

     Copy full SHA for 1db3132

     View code at this pointBrowse repository at this point

   • Refactor creating barriers with annotations

     owen-mc

     committed
     a812e4aView commit details

     Copy full SHA for a812e4a

     View code at this pointBrowse repository at this point
3. Commits on Jul 3, 2026

   • Add change note

     owen-mc

     committed
     e5bd62dView commit details

     Copy full SHA for e5bd62d

     View code at this pointBrowse repository at this point

   • Fix @Pattern sanitizer for TaintedPath

     owen-mc

     committed
     76b4f4fView commit details

     Copy full SHA for 76b4f4f

     View code at this pointBrowse repository at this point

   • Add failing TaintedPath test for @Pattern sanitizer

     owen-mc

     committed
     077b531View commit details

     Copy full SHA for 077b531

     View code at this pointBrowse repository at this point
4. Commits on Jul 2, 2026

   • Merge pull request #22106 from github/workflow/coverage/update

     Show description for 4aef485
     owen-mc

     authored
     4aef485View commit details

     Copy full SHA for 4aef485

     View code at this pointBrowse repository at this point

   • Merge pull request #22061 from MathiasVP/mad-write-through-model

     Show description for 4f4cdf4
     MathiasVP

     authored
     4f4cdf4View commit details

     Copy full SHA for 4f4cdf4

     View code at this pointBrowse repository at this point

   • Add changed framework coverage reports

     github-actions[bot]

     committed
     d8b89d2View commit details

     Copy full SHA for d8b89d2

     View code at this pointBrowse repository at this point
5. Commits on Jul 1, 2026

   • Merge pull request #22103 from owen-mc/java/fix-mad-file-names

     Show description for cb4a1d0
     owen-mc

     authored
     cb4a1d0View commit details

     Copy full SHA for cb4a1d0

     View code at this pointBrowse repository at this point

   • Merge pull request #22087 from jketema/subst

     Show description for d664d17
     jketema

     authored
     d664d17View commit details

     Copy full SHA for d664d17

     View code at this pointBrowse repository at this point

   • Fix misnamed MaD models files

     owen-mc

     committed
     7263c00View commit details

     Copy full SHA for 7263c00

     View code at this pointBrowse repository at this point

   • Merge pull request #22079 from geoffw0/kotlininline

     Show description for e976608
     geoffw0

     authored
     e976608View commit details

     Copy full SHA for e976608

     View code at this pointBrowse repository at this point

   • Fix expected file

     jketema

     committed
     d551ab3View commit details

     Copy full SHA for d551ab3

     View code at this pointBrowse repository at this point

   • Add Windows integration tests showing that subst is handled inconsistently

     jketema

     committed
     daf97f7View commit details

     Copy full SHA for daf97f7

     View code at this pointBrowse repository at this point
6. Commits on Jun 30, 2026

   • Merge branch 'main' into mad-write-through-model

     MathiasVP

     committed
     b7b731bView commit details

     Copy full SHA for b7b731b

     View code at this pointBrowse repository at this point

   • Merge pull request #22077 from geoffw0/javainline

     Show description for c0871de
     geoffw0

     authored
     c0871deView commit details

     Copy full SHA for c0871de

     View code at this pointBrowse repository at this point
7. Commits on Jun 29, 2026

   • Kotlin: Update .expected to exactly match reality.

     geoffw0

     committed
     8fc2f7cView commit details

     Copy full SHA for 8fc2f7c

     View code at this pointBrowse repository at this point

   • Kotlin: Address inline expectations testFailures.

     geoffw0

     committed
     35cd0f8View commit details

     Copy full SHA for 35cd0f8

     View code at this pointBrowse repository at this point
8. Commits on Jun 26, 2026

   • Merge pull request #22062 from github/mario-campos/mirror-maven-central/gradle

     Show description for da3d0cf
     mario-campos

     authored
     da3d0cfView commit details

     Copy full SHA for da3d0cf

     View code at this pointBrowse repository at this point

   • Java: Add missing $ Source annotations.

     geoffw0

     committed
     897d169View commit details

     Copy full SHA for 897d169

     View code at this pointBrowse repository at this point

   • Java: Label spurious results.

     geoffw0

     committed
     6f997aeView commit details

     Copy full SHA for 6f997ae

     View code at this pointBrowse repository at this point

   • Java: Move $ Source annotations that were incorrectly placed.

     geoffw0

     committed
     300e48eView commit details

     Copy full SHA for 300e48e

     View code at this pointBrowse repository at this point

   • Java: Make some $ Source annotations query specific.

     geoffw0

     committed
     f840f61View commit details

     Copy full SHA for f840f61

     View code at this pointBrowse repository at this point

   • Java: Fix a library test.

     MathiasVP

     committed
     7861e9eView commit details

     Copy full SHA for 7861e9e

     View code at this pointBrowse repository at this point

   • Fix buildless-fetches.expected for buildless-sibling-projects

     mario-campos

     authored
     1b6ff24View commit details

     Copy full SHA for 1b6ff24

     View code at this pointBrowse repository at this point
9. Commits on Jun 25, 2026

   • Add Maven Central mirror settings for Maven test project `buildless-sibling-projects`

     mario-campos

     committed
     221a54dView commit details

     Copy full SHA for 221a54d

     View code at this pointBrowse repository at this point

   • Fix expected URL fetches for buildless-sibling-projects

     mario-campos

     committed
     cc21585View commit details

     Copy full SHA for cc21585

     View code at this pointBrowse repository at this point

   • Delete extra blank line

     Show description for 56a1b12
     

     mario-campos

     and

     Copilot

     authored
     56a1b12View commit details

     Copy full SHA for 56a1b12

     View code at this pointBrowse repository at this point

   • Replace deprecated `jcenter()` with Maven Central mirror URL for dependency resolution in Gradle build scripts

     mario-campos

     committed
     6882130View commit details

     Copy full SHA for 6882130

     View code at this pointBrowse repository at this point

   • Replace mavenCentral() with Maven Central mirror URL for dependency resolution in Gradle build scripts

     mario-campos

     committed
     1c37688View commit details

     Copy full SHA for 1c37688

     View code at this pointBrowse repository at this point