Merge upstream codeql-cli/v2.26.4 - #397

Open

Chanel (chanel-y) wants to merge 347 commits into

microsoft:mainfrom

chanel-y:manual-cli-bump-2.26.4

This pull request is big! We're only showing the most recent 250 commits

Commits on Aug 6, 2026

Sync unified docs with PR #22290 (in-process swift-syntax-rs parsing)

Copilot
and
Jeroen Ketema (jketema)
committed
51c5d65
Potential fix for pull request finding

Jeroen Ketema (jketema)
and
Copilot
authored
381ef18
Rust: Add another captured varible flow test
Tom Hvitved (hvitved)
committed
1e6ef80

Commits on Aug 7, 2026

unified: Add test showing problem with literal getValue()
Asger F (asgerf)
committed
60baec6
unified: Fix extraction of literals
Asger F (asgerf)
committed
51fe273
unified: Factor some code into CommentUtil.qll
Asger F (asgerf)
committed
b71ff8f
unified: Fix mapping for compound type names
Asger F (asgerf)
committed
c9fc793
unified: Initial static name binding pass
Asger F (asgerf)
committed
f50c80a
unified: Track through aliases
Asger F (asgerf)
committed
375924e
unified: Add inheritance steps
Asger F (asgerf)
committed
db8b97a
unified: Support unqualified access
Asger F (asgerf)
committed
6341bba
unified: Allow numbers in key=value comments
Asger F (asgerf)
committed
ee8753b
unified: Cross-file name binding
Asger F (asgerf)
committed
7e3a4e3
unified: Handle bracketed generic array constructors
Asger F (asgerf)
committed
574a5c9
unified: Handle bracketed generic array metatypes
Asger F (asgerf)
committed
55b96f1
unified: Use '.' as location for inferred_type_expr
Asger F (asgerf)
committed
171aa7a
unified: Fix handling of exprPattern
Asger F (asgerf)
committed
a9792e5
unified: Add newlines at EOF
Asger F (asgerf)
committed
8080bac
unified: Update comment
Asger F (asgerf)
committed
0cf2871
unified: Support scoped imports
Asger F (asgerf)
committed
a3f21a5
unified: Don't track trivial name aliasse
Asger F (asgerf)
committed
50f934b
Merge pull request #22294 from github/copilot/update-md-files-for-unified-extractor
Jeroen Ketema (jketema)
authored
bf213e7
Merge pull request #22292 from github/post-release-prep/codeql-cli-2.26.3
Henry Mercer (henrymercer)
authored
c914268
Ruby: Switch regex tracking from TypeTracking to DataFlow.
Anders Schack-Mulligen (aschackmull)
committed
cfa81b1
unified: Bulk imports
Asger F (asgerf)
committed
a79c32a
unified: Fix access level in test case
Asger F (asgerf)
committed
05fe395
Ruby: Accept test improvement.
Anders Schack-Mulligen (aschackmull)
committed
a2b6c1f
unified: Fix incorrect expectation
Asger F (asgerf)
committed
659da08
unified: Fix toString and getLocation for TLocalNamespace
Asger F (asgerf)
committed
35c54b1
unified: Remove location of TModuleRoot
Asger F (asgerf)
committed
af2f5a2

Commits on Aug 10, 2026

Commits on Aug 11, 2026

Commits on Aug 12, 2026

Commits on Aug 13, 2026

Commits on Aug 14, 2026

Commits on Aug 15, 2026

C#: add AdditionalTaintStep extension point for taint-tracking

hugo-syn
and
Claude (claude)
committed
ce7fee4
Docs: list psycopg (v3) in supported frameworks
jtabsbm
committed
c88eb8e

Commits on Aug 17, 2026

Commits on Aug 18, 2026

Commits on Aug 19, 2026

unified: Update error message
Asger F (asgerf)
committed
bb6b3b9
Merge pull request #22372 from github/redsun82-go-checks-debazel
Paolo Tranquilli (redsun82)
authored
152c73a
Merge pull request #22373 from github/unified/disable-arm64-build
Asger F (asgerf)
authored
c1b19fb
Rust: Change canonical paths for trait items
Tom Hvitved (hvitved)
committed
8a9ef4c
Rust: Update trait item canonical path references

Tom Hvitved (hvitved)
and
Copilot
committed
2a7c932
Rust: Use `zstd` compression for TRAP files by default
Tom Hvitved (hvitved)
committed
29f91cc
Rust: Document trait item canonical path change

Tom Hvitved (hvitved)
and
Copilot
committed
f902541
Potential fix for pull request finding

Tom Hvitved (hvitved)
and
Copilot
authored
4f48b45
Merge pull request #22345 from theinfosecguy/csharp-simplifiable-operator-recursion
Michael Nebel (michaelnebel)
authored
3ed2370
Merge pull request #22375 from hvitved/rust/trap-compression-zstd-default
Tom Hvitved (hvitved)
authored
7f60101
C#: inline TestAdditionalTaintStep.qll into AdditionalTaintStep.ql

hugo-syn
and
Claude (claude)
committed
946e116
Merge branch 'main' of https://github.com/github/codeql into hugo-syn/csharp-additional-taint-step
hugo-syn
committed
522bcd9
Merge pull request #22360 from hugo-syn/hugo-syn/csharp-additional-taint-step
Tom Hvitved (hvitved)
authored
715da38
C#: Address review comments.
Michael Nebel (michaelnebel)
committed
5475078
Merge pull request #22041 from michaelnebel/csharp/morefeedmanageruses
Michael Nebel (michaelnebel)
authored
01755ec
Actions: Fix typo in change note
Jeroen Ketema (jketema)
committed
9919db5
Merge pull request #22385 from jketema/jketema/type
Jeroen Ketema (jketema)
authored
7c2b8b4
C++/Ruby: Clean up supported compilers
Jeroen Ketema (jketema)
committed
f6e24e3
Split change note into breaking and minorAnalysis notes

Jordan Pike (computersarebad)
and
Copilot
committed
0a376e8
Merge pull request #22368 from computersarebad/actor-if-check-event-validity
Jeroen Ketema (jketema)
authored
039c2b5
Merge pull request #22389 from jketema/jketema/clang
Jeroen Ketema (jketema)
authored
87c77cc
Go: Update to 1.27
Jeroen Ketema (jketema)
committed
50455bd
Go: Bump `maxGoVersion` to 1.27
Jeroen Ketema (jketema)
committed
3dfe5e6
Go: Update test formatting
Jeroen Ketema (jketema)
committed
f404c6a
Go: Add change note
Jeroen Ketema (jketema)
committed
3185185
Go: Update supported versions to include 1.27
Jeroen Ketema (jketema)
committed
777c089
Go: Fix `findMethodOnTypeWithGivenReceiver` for Go 1.27
Jeroen Ketema (jketema)
committed
9db5585
Go: Add generic method test
Jeroen Ketema (jketema)
committed
28d44f7
Go: Fix crash in `getTypeParamParentLabel`
Jeroen Ketema (jketema)
committed
072b298

Commits on Aug 20, 2026

Commits on Sep 8, 2026

Merge upstream codeql-cli/v2.26.4
Chanel (chanel-y)
committed
1ca05ad