Commits

Commit history

1. Commits on Nov 4, 2026

   • Merge pull request #22966 from owen-mc/owen-mc/22845-multiline-regexp-sanitizer

     Show description for 26b5f26
     owen-mc

     authored
     26b5f26View commit details

     Copy full SHA for 26b5f26

     View code at this pointBrowse repository at this point

   • Merge pull request #22962 from LucaCappelletti94/upstream/trusted-schema-not-secret

     Show description for c9bbcf9
     geoffw0

     authored
     c9bbcf9View commit details

     Copy full SHA for c9bbcf9

     View code at this pointBrowse repository at this point
2. Commits on Nov 1, 2026

   • Merge pull request #22749 from Alex-Hofer/js-mcp-models

     Show description for 1c866c7
     owen-mc

     authored
     1c866c7View commit details

     Copy full SHA for 1c866c7

     View code at this pointBrowse repository at this point
3. Commits on Oct 31, 2026

   • Add tests documenting limitations of multiline detection

     owen-mc

     committed
     a986a00View commit details

     Copy full SHA for a986a00

     View code at this pointBrowse repository at this point
4. Commits on Oct 30, 2026

   • Shared: Treat 'trusted_schema' names as non-sensitive.

     LucaCappelletti94

     committed
     f3c4972View commit details

     Copy full SHA for f3c4972

     View code at this pointBrowse repository at this point

   • Post-release preparation for codeql-cli-2.27.4

     

     github-actions[bot]

     committed
     ef44058View commit details

     Copy full SHA for ef44058

     View code at this pointBrowse repository at this point
5. Commits on Oct 29, 2026

   • Release preparation for version 2.27.4

     

     github-actions[bot]

     committed
     beaf5dcView commit details

     Copy full SHA for beaf5dc

     View code at this pointBrowse repository at this point

   • Merge branch 'main' into js-mcp-models

     Alex-Hofer

     committed
     20c6662View commit details

     Copy full SHA for 20c6662

     View code at this pointBrowse repository at this point
6. Commits on Oct 26, 2026

   • Merge pull request #22880 from geoffw0/deadlink2

     Show description for ee9ff23
     geoffw0

     authored
     ee9ff23View commit details

     Copy full SHA for ee9ff23

     View code at this pointBrowse repository at this point
7. Commits on Oct 23, 2026

   • Replace dead link in many qhelp files.

     geoffw0

     committed
     e0654e0View commit details

     Copy full SHA for e0654e0

     View code at this pointBrowse repository at this point
8. Commits on Oct 22, 2026

   • Merge pull request #22862 from github/remove-cwe-730

     Show description for 926ce24
     jketema

     authored
     926ce24View commit details

     Copy full SHA for 926ce24

     View code at this pointBrowse repository at this point

   • Fix multiline regular expression sanitizer guards

     Show description for 5dcdf16
     

     owen-mc

     and

     Copilot

     committed
     5dcdf16View commit details

     Copy full SHA for 5dcdf16

     View code at this pointBrowse repository at this point

   • Use queryMetadata category for CWE-730 change notes

     Show description for 69efb77
     

     jketema

     and

     Copilot

     committed
     69efb77View commit details

     Copy full SHA for 69efb77

     View code at this pointBrowse repository at this point

   • JS: Note removal of `SEMMLE_TYPESCRIPT_HOME`

     paldepind

     committed
     c8c7820View commit details

     Copy full SHA for c8c7820

     View code at this pointBrowse repository at this point
9. Commits on Oct 21, 2026

   • Merge pull request #22853 from ku-plrg/js/string-trim-normalize

     Show description for 00fd5ae
     asgerf

     authored
     00fd5aeView commit details

     Copy full SHA for 00fd5ae

     View code at this pointBrowse repository at this point

   • Remove prohibited CWE-730 tag from queries

     Show description for bd80295
     

     jketema

     and

     Copilot

     committed
     bd80295View commit details

     Copy full SHA for bd80295

     View code at this pointBrowse repository at this point
10. Commits on Oct 20, 2026

    • JS: Add taint steps for trimStart, trimEnd and normalize

      stonechoe

      committed
      407029aView commit details

      Copy full SHA for 407029a

      View code at this pointBrowse repository at this point

    • JS: Fix flatMap thisArg flowing to the callback index

      stonechoe

      committed
      0d5f3aaView commit details

      Copy full SHA for 0d5f3aa

      View code at this pointBrowse repository at this point
11. Commits on Oct 19, 2026

    • Merge pull request #22829 from eugeniodepalo/js/computed-proto-property

      Show description for f4659c7
      asgerf

      authored
      f4659c7View commit details

      Copy full SHA for f4659c7

      View code at this pointBrowse repository at this point
12. Commits on Oct 16, 2026

    • Post-release preparation for codeql-cli-2.27.3

      

      github-actions[bot]

      committed
      e412307View commit details

      Copy full SHA for e412307

      View code at this pointBrowse repository at this point
13. Commits on Oct 15, 2026

    • Release preparation for version 2.27.3

      

      github-actions[bot]

      committed
      5dfcc34View commit details

      Copy full SHA for 5dfcc34

      View code at this pointBrowse repository at this point

    • JS: Do not flag computed `__proto__` properties

      Show description for 9ae2f03
      eugeniodepalo

      committed
      9ae2f03View commit details

      Copy full SHA for 9ae2f03

      View code at this pointBrowse repository at this point

    • JS: Use the ai threat model for MCP handler input

      Show description for 3460d05
      Alex-Hofer

      committed
      3460d05View commit details

      Copy full SHA for 3460d05

      View code at this pointBrowse repository at this point

    • JS: Add flow summaries for zod schema parsing

      Alex-Hofer

      committed
      2341a58View commit details

      Copy full SHA for 2341a58

      View code at this pointBrowse repository at this point

    • JS: Add models for the MCP server SDKs

      Alex-Hofer

      committed
      ef9a0a1View commit details

      Copy full SHA for ef9a0a1

      View code at this pointBrowse repository at this point

    • Add opt-in AI output threat model

      Show description for e15ba8e
      

      jacknojo

      and

      Copilot

      committed
      e15ba8eView commit details

      Copy full SHA for e15ba8e

      View code at this pointBrowse repository at this point
14. Commits on Oct 14, 2026

    • Fix typo: occured -> occurred

      owen-mc

      committed
      9fe8eabView commit details

      Copy full SHA for 9fe8eab

      View code at this pointBrowse repository at this point
15. Commits on Oct 9, 2026

    • Merge pull request #22784 from asgerf/js/fix-member-token

      Show description for 14a7f46
      asgerf

      authored
      14a7f46View commit details

      Copy full SHA for 14a7f46

      View code at this pointBrowse repository at this point
16. Commits on Oct 8, 2026

    • Merge pull request #22744 from asgerf/ssa/multiple-reads-v2

      Show description for e8c7105
      asgerf

      authored
      e8c7105View commit details

      Copy full SHA for e8c7105

      View code at this pointBrowse repository at this point

    • JS: Update test output

      asgerf

      committed
      3f9e584View commit details

      Copy full SHA for 3f9e584

      View code at this pointBrowse repository at this point

    • JS: Fix parsing of Member[num] tokens

      Show description for 5ef9e37
      asgerf

      committed
      5ef9e37View commit details

      Copy full SHA for 5ef9e37

      View code at this pointBrowse repository at this point

    • JS: Add a failing test.

      MathiasVP

      committed
      bd0ebd8View commit details

      Copy full SHA for bd0ebd8

      View code at this pointBrowse repository at this point
17. Commits on Oct 7, 2026

    • Merge pull request #22778 from github/codeql-spark-run-37617747858

      Show description for 8e71347
      navntoft

      authored
      8e71347View commit details

      Copy full SHA for 8e71347

      View code at this pointBrowse repository at this point

    • JavaScript: Align Restify link protocol

      Show description for 87db22d
      navntoft

      committed
      87db22dView commit details

      Copy full SHA for 87db22d

      View code at this pointBrowse repository at this point
18. Commits on Oct 2, 2026

    • ssa: Record ambiguousReadNode errors from VariableCapture

      Show description for b2f9e09
      asgerf

      committed
      b2f9e09View commit details

      Copy full SHA for b2f9e09

      View code at this pointBrowse repository at this point