Merge upstream codeql-cli/v2.26.4 - #397
Open
Chanel (chanel-y) wants to merge 347 commits into
Open
Conversation
…rsing) Co-authored-by: jketema <93738568+jketema@users.noreply.github.com>
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
getValue() returns an empty string for various literals
This supports only a minimal set of features but sets up the structure we'll be using for supporting more features.
The restriction to classes was more permanent that anticipated, since top-level scopes instead target a TModuleScope
Scoped imports like 'import class B.C' are mapped to an AST of form
ImportDeclartion
pattern: NamePattern "C"
importedExpr: MemberAccessExpr
base: "B"
member: "C"
The NamePattern introduces a local alias for 'C', but unlike type aliases we also resolve to the ultimate target, when it's coming through an import.
…or-unified-extractor Sync unified docs with in-process swift-syntax-rs parsing (post-github#22290)
…cli-2.26.3 Post-release preparation for codeql-cli-2.26.3
Program was not valid unless these were public
Module names can only be referenced by an import declaration, they cannot appear directly on front of a type name unless the module is also imported.
…nal-taint-step C#: add AdditionalTaintStep extension point for taint-tracking
…geruses C#: Use feed management in the remaining restore flows.
Actions: Fix typo in change note
* C++: Since preliminary support for clang-cl was added, our frontend provider has much improved support. Drop the preliminary note. * Ruby: We require glibc 2.17 everywhere on Linux x86. So, Ruby isn't special here anymore. Drop the note.
The introduction of EventActorIfCheck is technically a breaking change for anything extending or referencing ActorIfCheck, so record the class split separately under the breaking category. Also stop naming a specific query in the analysis note since many queries use ControlCheck. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 4084febb-f9c7-44df-baf3-c8be8e9932a7
…vent-validity Actions: `ActorIfCheck` `ControlCheck` model fix for events that don't populate the checked field
C++/Ruby: Clean up supported compilers
Go: Update to 1.27
…-to-self-unknown-type C#: Harden `cs/useless-cast-to-self` with respect to unknown types.
…nt-workaround Python: Remove redundant collection taint summaries
…king-fix Python: Add taint flow through list.extend and list.insert
Ruby: Document missing BeginExpr flow.
Rust: Change canonical paths for trait items
Release preparation for version 2.26.4
dilanbhalla
approved these changes
Sep 8, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Integrates the upstream \codeql-cli/v2.26.4\ release tag into the Microsoft fork.\n\nUpstream release commit: \1d123a2caa0e4e6256a49d963bfcbd51a01617e8\n\nThe previous \codeql-cli/v2.26.3\ sync from #391 is already in the target branch. The merge completed without conflicts.\n\nSupersedes #396, which GitHub closed when its cross-fork head branch was renamed.