All pull requests

Pull requests

• Unified: Add data flow support for getters and setters

  Unified
  #22896·asgerf opened Oct 26, 2026Contributor·

  ·
  6

• Shared: Disable dynamic join ordering for select predicates

  DataFlow Libraryno-change-note-required
  #22894·kaspersv opened Oct 26, 2026Contributor·

  ·
  2

• Java: Disable dynamic join ordering for select predicate

  Javano-change-note-required
  #22893·kaspersv opened Oct 26, 2026Contributor·

  ·
  2

• CPP: Disable dynamic join ordering for select predicates

  C++no-change-note-required
  #22892·kaspersv opened Oct 26, 2026Contributor·

  ·
  2

• C#: Disable dynamic join ordering for select predicate

  C#no-change-note-required
  #22891·kaspersv opened Oct 26, 2026Contributor·

  ·
  1

• JS: Disable dynamic reordering for a few predicates

  JSno-change-note-required
  #22890·kaspersv opened Oct 26, 2026Contributor·

  ·
  1

• C#: Add some more logging to the Dependency Manager.

  C#documentation
  #22889·michaelnebel opened Oct 26, 2026Contributor·

  ·

• C#: Rollback NuGet CLI proxy usage.

  C#documentation
  #22888·michaelnebel opened Oct 26, 2026Contributor·

  ·
  7

• Rust: Add neutral models for spurious actix-web connection_info sink models

  documentationexternal-contributionRust
  #22884·johncarmack1984 opened Oct 25, 2026·

  ·
  2

• Replace dead link in qhelp files

  C#C++documentationGoJavaJSno-change-note-requiredPythonready-for-doc-reviewRubySwift
  #22880·geoffw0 opened Oct 23, 2026Contributor·

  ·
  4

• Unified: Add command injection query.

  documentationno-change-note-requiredUnified
  #22879·geoffw0 opened Oct 23, 2026Contributor·

  ·
  6

• Python: Infer expression contexts in QL rather than in the extractor

  documentationPython
  #22878·tausbn opened Oct 23, 2026Contributor·

  ·
  5

• yeast: Split input/output ASTs

  no-change-note-requiredUnified
  #22875·tausbn opened Oct 22, 2026Contributor·

  ·
  11

• JS: Handle barrier guards on phi inputs

  documentationJS
  #22873·owen-mc opened Oct 22, 2026Contributor·

  ·

• Python: Fix URL redirection validation sanitizers

  documentationPython
  #22872·owen-mc opened Oct 22, 2026Contributor·

  ·
  6

• Unified: Instantiate and expose public SSA api.

  no-change-note-requiredUnified
  #22869·aschackmull opened Oct 22, 2026Contributor·

  ·
  5

• Unified: Type inference for nested types

  Unified
  #22866·hvitved opened Oct 21, 2026Contributor·

  ·
  49

• Migrate Rust to shared control-flow graph

  Rust
  #22864·hvitved opened Oct 21, 2026Contributor·

  ·

• Go: implement shared variable capture library

  DataFlow LibrarydocumentationGo
  #22863·owen-mc opened Oct 21, 2026Contributor·

  ·

• C#: Data flow for implicit deconstruct calls.

  C#
  #22861·michaelnebel opened Oct 21, 2026Contributor·

  ·
  4

• Go: (Refactor) Use makeSsa for SSA classes

  documentationGo
  #22857·owen-mc opened Oct 20, 2026Contributor·

  ·
  13

• Align JavaScript StorageEvent externs with current Web IDL

  documentationJS
  #22852·asgerf with CopilotAI opened Oct 20, 2026·

  ·
  1

  3

  

• Java: java/sensitive-log should follow flow through character-filtering callables

  Java
  #22850·owen-mc opened Oct 20, 2026Contributor·

  ·
  9

• Rust: Prefer richer feature configurations when extracting dependencies

  Rust
  #22847·paldepind opened Oct 20, 2026Contributor·

  ·
  5

• JavaScript: migrate the TypeScript parser to native 7.1

  documentationJS
  #22841·paldepind opened Oct 19, 2026Contributor·

  ·
  6