All pull requests

Pull requests

• JS: TypeScript extractor cleanup

  JS
  #22860·by paldepind was merged Oct 21, 2026Contributor·

  ·
  5

• Only run workflow on github/codeql

  #22859·by owen-mc was merged Oct 21, 2026Contributor·

  ·
  1

• Update changelog documentation site for codeql-cli-2.27.3

  documentation
  #22858·by codeql-ci-app[bot] was merged Oct 20, 2026Bot·

  ·
  

• Update instructions for .expected files

  no-change-note-required
  #22856·by geoffw0 was merged Oct 21, 2026Contributor·

  ·
  5

• [rc/3.23] Java: isolate Maven integration test repositories

  Java
  #22855·by jketema was merged Oct 20, 2026Contributor·

  ·
  1

• JS: Add taint steps for trimStart, trimEnd and normalize

  documentationexternal-contributionJS
  #22853·by stonechoe was merged Oct 21, 2026Contributor·

  ·
  2

• Swift: Do not terminate the extractor when a file cannot be opened

  Swift
  #22851·by jketema was merged Oct 21, 2026Contributor·

  ·
  4

• JS: Fix flatMap thisArg flowing to the callback index

  documentationexternal-contributionJS
  #22844·by stonechoe was merged Oct 20, 2026Contributor·

  ·
  2

• yeast: Add nicer location syntax

  documentationno-change-note-requiredUnified
  #22842·by tausbn was merged Oct 21, 2026Contributor·

  ·
  5

• Add GitHub Actions workflow for .NET project

  external-contribution
  #22840·by sn109946 was closed Oct 19, 2026·

  ·

• Post-release preparation for codeql-cli-2.27.3

  ActionsC#C++DataFlow LibrarydocumentationGoJavaJSPythonRubyRustSwift
  #22838·by codeql-ci-app[bot] was merged Oct 16, 2026Bot·

  ·
  1

  

• Java/Ruby: Replace recursive algorithm string builders

  Javano-change-note-requiredRuby
  #22837·by jketema was merged Oct 17, 2026Contributor·

  ·
  2

• C++: Replace recursive string builders with concat

  C++no-change-note-required
  #22836·by jketema was merged Oct 16, 2026Contributor·

  ·
  5

• Release preparation for version 2.27.3

  ActionsC#C++DataFlow LibrarydocumentationGoJavaJSPythonRubyRustSwift
  #22834·by codeql-ci-app[bot] was merged Oct 15, 2026Bot·

  ·
  

• unified: Avoid overflow in taint reach per million nodes

  no-change-note-requiredUnified
  #22833·by asgerf was merged Oct 19, 2026Contributor·

  ·
  1

• C++: Add support for more builtin operations

  C++depends on internal PRdocumentation
  #22832·by jketema was merged Oct 16, 2026Contributor·

  ·
  12

• Rust: Update rust-analyzer to 0.0.358

  RubyRustUnified
  #22831·by github-actions[bot] was merged Oct 16, 2026Bot·

  ·
  3

• C++: Introduce getBitWidth predicate for Type

  C++documentation
  #22830·by jketema was merged Oct 15, 2026Contributor·

  ·
  15

• JS: Do not flag computed __proto__ properties

  documentationexternal-contributionJS
  #22829·by eugeniodepalo was merged Oct 19, 2026Contributor·

  ·
  2

• Rust: Add documentation and type inference for CfgPredExpr and CfgPredPat

  no-change-note-requiredRust
  #22828·by paldepind was merged Oct 16, 2026Contributor·

  ·
  5

• Rust: Update instructions for rust-analyzer update automation

  documentationRust
  #22827·by paldepind was merged Oct 15, 2026Contributor·

  ·
  9

• Python: fix 3 queries to use sources for the active threat model

  documentationPython
  #22822·by owen-mc was merged Oct 15, 2026Contributor·

  ·
  5

• build(deps): bump the extractor-dependencies group across 1 directory with 2 updates

  dependenciesGo
  #22821·by dependabot[bot] was merged Oct 15, 2026Bot·

  ·

• cpp: Model BlazingMQ bmqa message and property taint flow

  C++documentation
  #22820·by geoffw0 was merged Oct 15, 2026Contributor·

  ·
  12

• JS: Fix typo (occured -> occurred)

  JSno-change-note-required
  #22819·by owen-mc was merged Oct 14, 2026Contributor·

  ·
  2