Merge branch 'main' into mbaluda/sanitize-content

mbaluda · web-flow · commit 03ebe7fbaff8 · 2025-12-12T00:26:49.000+01:00
diff --git a/extractors/javascript/tools/pre-finalize.sh b/extractors/javascript/tools/pre-finalize.sh
@@ -20,19 +20,20 @@ if [ -z "${CODEQL_EXTRACTOR_CDS_SKIP_EXTRACTION:-}" ]; then
     echo "Finished running database index-files for CDS (.cds) files."
 fi
 
-echo "Running database index-files for UI5 (.view.xml) files ..."
+echo "Running database index-files for UI5 (.view.xml and .fragment.xml) files ..."
 
-# Index UI5 *.view.xml files.
+# Index UI5 *.view.xml and *.fragment.xml files.
 "${CODEQL_DIST}/codeql" database index-files \
     --include-extension=".view.xml" \
+    --include-extension=".fragment.xml" \
     --language="xml" \
     --prune="**/node_modules/**/*" \
     --prune="**/.eslint/**/*" \
     --total-size-limit="10m" \
     -- \
     "$CODEQL_EXTRACTOR_JAVASCRIPT_WIP_DATABASE"
 
-echo "Finished running database index-files for UI5 (.view.xml) files."
+echo "Finished running database index-files for UI5 (.view.xml and .fragment.xml) files."
 
 # UI5 also requires *.view.json files and *.view.html files be indexed, but these are indexed by
 # default by CodeQL.
diff --git a/javascript/frameworks/cap/lib/codeql-pack.lock.yml b/javascript/frameworks/cap/lib/codeql-pack.lock.yml
@@ -2,29 +2,29 @@
 lockVersion: 1.0.0
 dependencies:
   codeql/concepts:
-    version: 0.0.9
+    version: 0.0.12
   codeql/controlflow:
-    version: 2.0.19
+    version: 2.0.22
   codeql/dataflow:
-    version: 2.0.19
+    version: 2.0.22
   codeql/javascript-all:
-    version: 2.6.15
+    version: 2.6.18
   codeql/mad:
-    version: 1.0.35
+    version: 1.0.38
   codeql/regex:
-    version: 1.0.35
+    version: 1.0.38
   codeql/ssa:
-    version: 2.0.11
+    version: 2.0.14
   codeql/threat-models:
-    version: 1.0.35
+    version: 1.0.38
   codeql/tutorial:
-    version: 1.0.35
+    version: 1.0.38
   codeql/typetracking:
-    version: 2.0.19
-  codeql/util:
     version: 2.0.22
+  codeql/util:
+    version: 2.0.25
   codeql/xml:
-    version: 1.0.35
+    version: 1.0.38
   codeql/yaml:
-    version: 1.0.35
+    version: 1.0.38
 compiled: false
diff --git a/javascript/frameworks/cap/src/codeql-pack.lock.yml b/javascript/frameworks/cap/src/codeql-pack.lock.yml
@@ -2,29 +2,29 @@
 lockVersion: 1.0.0
 dependencies:
   codeql/concepts:
-    version: 0.0.9
+    version: 0.0.12
   codeql/controlflow:
-    version: 2.0.19
+    version: 2.0.22
   codeql/dataflow:
-    version: 2.0.19
+    version: 2.0.22
   codeql/javascript-all:
-    version: 2.6.15
+    version: 2.6.18
   codeql/mad:
-    version: 1.0.35
+    version: 1.0.38
   codeql/regex:
-    version: 1.0.35
+    version: 1.0.38
   codeql/ssa:
-    version: 2.0.11
+    version: 2.0.14
   codeql/threat-models:
-    version: 1.0.35
+    version: 1.0.38
   codeql/tutorial:
-    version: 1.0.35
+    version: 1.0.38
   codeql/typetracking:
-    version: 2.0.19
-  codeql/util:
     version: 2.0.22
+  codeql/util:
+    version: 2.0.25
   codeql/xml:
-    version: 1.0.35
+    version: 1.0.38
   codeql/yaml:
-    version: 1.0.35
+    version: 1.0.38
 compiled: false
diff --git a/javascript/frameworks/cap/test/codeql-pack.lock.yml b/javascript/frameworks/cap/test/codeql-pack.lock.yml
@@ -2,29 +2,29 @@
 lockVersion: 1.0.0
 dependencies:
   codeql/concepts:
-    version: 0.0.9
+    version: 0.0.12
   codeql/controlflow:
-    version: 2.0.19
+    version: 2.0.22
   codeql/dataflow:
-    version: 2.0.19
+    version: 2.0.22
   codeql/javascript-all:
-    version: 2.6.15
+    version: 2.6.18
   codeql/mad:
-    version: 1.0.35
+    version: 1.0.38
   codeql/regex:
-    version: 1.0.35
+    version: 1.0.38
   codeql/ssa:
-    version: 2.0.11
+    version: 2.0.14
   codeql/threat-models:
-    version: 1.0.35
+    version: 1.0.38
   codeql/tutorial:
-    version: 1.0.35
+    version: 1.0.38
   codeql/typetracking:
-    version: 2.0.19
-  codeql/util:
     version: 2.0.22
+  codeql/util:
+    version: 2.0.25
   codeql/xml:
-    version: 1.0.35
+    version: 1.0.38
   codeql/yaml:
-    version: 1.0.35
+    version: 1.0.38
 compiled: false
diff --git a/javascript/frameworks/ui5-webcomponents/test/codeql-pack.lock.yml b/javascript/frameworks/ui5-webcomponents/test/codeql-pack.lock.yml
@@ -2,29 +2,29 @@
 lockVersion: 1.0.0
 dependencies:
   codeql/concepts:
-    version: 0.0.7
+    version: 0.0.12
   codeql/controlflow:
-    version: 2.0.17
+    version: 2.0.22
   codeql/dataflow:
-    version: 2.0.17
+    version: 2.0.22
   codeql/javascript-all:
-    version: 2.6.13
+    version: 2.6.18
   codeql/mad:
-    version: 1.0.33
+    version: 1.0.38
   codeql/regex:
-    version: 1.0.33
+    version: 1.0.38
   codeql/ssa:
-    version: 2.0.9
+    version: 2.0.14
   codeql/threat-models:
-    version: 1.0.33
+    version: 1.0.38
   codeql/tutorial:
-    version: 1.0.33
+    version: 1.0.38
   codeql/typetracking:
-    version: 2.0.17
+    version: 2.0.22
   codeql/util:
-    version: 2.0.20
+    version: 2.0.25
   codeql/xml:
-    version: 1.0.33
+    version: 1.0.38
   codeql/yaml:
-    version: 1.0.33
+    version: 1.0.38
 compiled: false
diff --git a/javascript/frameworks/ui5/lib/codeql-pack.lock.yml b/javascript/frameworks/ui5/lib/codeql-pack.lock.yml
@@ -2,29 +2,29 @@
 lockVersion: 1.0.0
 dependencies:
   codeql/concepts:
-    version: 0.0.9
+    version: 0.0.12
   codeql/controlflow:
-    version: 2.0.19
+    version: 2.0.22
   codeql/dataflow:
-    version: 2.0.19
+    version: 2.0.22
   codeql/javascript-all:
-    version: 2.6.15
+    version: 2.6.18
   codeql/mad:
-    version: 1.0.35
+    version: 1.0.38
   codeql/regex:
-    version: 1.0.35
+    version: 1.0.38
   codeql/ssa:
-    version: 2.0.11
+    version: 2.0.14
   codeql/threat-models:
-    version: 1.0.35
+    version: 1.0.38
   codeql/tutorial:
-    version: 1.0.35
+    version: 1.0.38
   codeql/typetracking:
-    version: 2.0.19
-  codeql/util:
     version: 2.0.22
+  codeql/util:
+    version: 2.0.25
   codeql/xml:
-    version: 1.0.35
+    version: 1.0.38
   codeql/yaml:
-    version: 1.0.35
+    version: 1.0.38
 compiled: false
diff --git a/javascript/frameworks/ui5/src/codeql-pack.lock.yml b/javascript/frameworks/ui5/src/codeql-pack.lock.yml
@@ -2,29 +2,29 @@
 lockVersion: 1.0.0
 dependencies:
   codeql/concepts:
-    version: 0.0.9
+    version: 0.0.12
   codeql/controlflow:
-    version: 2.0.19
+    version: 2.0.22
   codeql/dataflow:
-    version: 2.0.19
+    version: 2.0.22
   codeql/javascript-all:
-    version: 2.6.15
+    version: 2.6.18
   codeql/mad:
-    version: 1.0.35
+    version: 1.0.38
   codeql/regex:
-    version: 1.0.35
+    version: 1.0.38
   codeql/ssa:
-    version: 2.0.11
+    version: 2.0.14
   codeql/threat-models:
-    version: 1.0.35
+    version: 1.0.38
   codeql/tutorial:
-    version: 1.0.35
+    version: 1.0.38
   codeql/typetracking:
-    version: 2.0.19
-  codeql/util:
     version: 2.0.22
+  codeql/util:
+    version: 2.0.25
   codeql/xml:
-    version: 1.0.35
+    version: 1.0.38
   codeql/yaml:
-    version: 1.0.35
+    version: 1.0.38
 compiled: false
diff --git a/javascript/frameworks/ui5/test/codeql-pack.lock.yml b/javascript/frameworks/ui5/test/codeql-pack.lock.yml
@@ -2,35 +2,35 @@
 lockVersion: 1.0.0
 dependencies:
   codeql/concepts:
-    version: 0.0.9
+    version: 0.0.12
   codeql/controlflow:
-    version: 2.0.19
+    version: 2.0.22
   codeql/dataflow:
-    version: 2.0.19
+    version: 2.0.22
   codeql/javascript-all:
-    version: 2.6.15
+    version: 2.6.18
   codeql/javascript-queries:
-    version: 2.2.0
+    version: 2.2.3
   codeql/mad:
-    version: 1.0.35
+    version: 1.0.38
   codeql/regex:
-    version: 1.0.35
+    version: 1.0.38
   codeql/ssa:
-    version: 2.0.11
+    version: 2.0.14
   codeql/suite-helpers:
-    version: 1.0.35
+    version: 1.0.38
   codeql/threat-models:
-    version: 1.0.35
+    version: 1.0.38
   codeql/tutorial:
-    version: 1.0.35
+    version: 1.0.38
   codeql/typetracking:
-    version: 2.0.19
+    version: 2.0.22
   codeql/typos:
-    version: 1.0.35
+    version: 1.0.38
   codeql/util:
-    version: 2.0.22
+    version: 2.0.25
   codeql/xml:
-    version: 1.0.35
+    version: 1.0.38
   codeql/yaml:
-    version: 1.0.35
+    version: 1.0.38
 compiled: false
diff --git a/javascript/frameworks/xsjs/lib/codeql-pack.lock.yml b/javascript/frameworks/xsjs/lib/codeql-pack.lock.yml
@@ -2,29 +2,29 @@
 lockVersion: 1.0.0
 dependencies:
   codeql/concepts:
-    version: 0.0.9
+    version: 0.0.12
   codeql/controlflow:
-    version: 2.0.19
+    version: 2.0.22
   codeql/dataflow:
-    version: 2.0.19
+    version: 2.0.22
   codeql/javascript-all:
-    version: 2.6.15
+    version: 2.6.18
   codeql/mad:
-    version: 1.0.35
+    version: 1.0.38
   codeql/regex:
-    version: 1.0.35
+    version: 1.0.38
   codeql/ssa:
-    version: 2.0.11
+    version: 2.0.14
   codeql/threat-models:
-    version: 1.0.35
+    version: 1.0.38
   codeql/tutorial:
-    version: 1.0.35
+    version: 1.0.38
   codeql/typetracking:
-    version: 2.0.19
-  codeql/util:
     version: 2.0.22
+  codeql/util:
+    version: 2.0.25
   codeql/xml:
-    version: 1.0.35
+    version: 1.0.38
   codeql/yaml:
-    version: 1.0.35
+    version: 1.0.38
 compiled: false
diff --git a/javascript/frameworks/xsjs/src/codeql-pack.lock.yml b/javascript/frameworks/xsjs/src/codeql-pack.lock.yml
diff --git a/javascript/frameworks/xsjs/test/codeql-pack.lock.yml b/javascript/frameworks/xsjs/test/codeql-pack.lock.yml
diff --git a/javascript/heuristic-models/tests/codeql-pack.lock.yml b/javascript/heuristic-models/tests/codeql-pack.lock.yml
diff --git a/qlt.conf.json b/qlt.conf.json
