Merge branch 'github:main' into main

Author: AndresMaqueo

c/cert/src/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/cert-c-coding-standards
-version: 2.51.0-dev
+version: 2.52.0-dev
 description: CERT C 2016
 suites: codeql-suites
 license: MIT

c/cert/test/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/cert-c-coding-standards-tests
-version: 2.51.0-dev
+version: 2.52.0-dev
 extractor: cpp
 license: MIT
 dependencies:

c/common/src/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/common-c-coding-standards
-version: 2.51.0-dev
+version: 2.52.0-dev
 license: MIT
 dependencies:
   codeql/common-cpp-coding-standards: '*'

c/common/test/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/common-c-coding-standards-tests
-version: 2.51.0-dev
+version: 2.52.0-dev
 extractor: cpp
 license: MIT
 dependencies:

c/misra/src/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/misra-c-coding-standards
-version: 2.51.0-dev
+version: 2.52.0-dev
 description: MISRA C 2012
 suites: codeql-suites
 license: MIT

c/misra/test/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/misra-c-coding-standards-tests
-version: 2.51.0-dev
+version: 2.52.0-dev
 extractor: cpp
 license: MIT
 dependencies:

change_notes/2025-08-15-m5-2-2-virtual-base.md

@@ -0,0 +1,5 @@
+ - `M5-2-2` - `PointerToAVirtualBaseClassCastToAPointer.ql`:
+   - Report casts where the from or to types are typedefs to virtual base classes or derived classes.
+   - Report casts to a reference type which is a derived type.
+   - Report casts where the base class is the parent of a virtual base class.
+   - The alert message has been updated to refer to the virtual base class derivation.

change_notes/2025-08-18-fix-alert-reporting.md

@@ -0,0 +1,3 @@
+ - `RULE-1-2`, `RULE-23-3`, `RULE-23-5`, `RULE-23-6`:
+   - Results that occur in nested macro invocations are now reported in the macro that defines the contravening code, rather than the macro which is first expanded.
+   - Results the occur in arguments to macro invocations are now reported in at the macro invocation site, instead of the macro definition site.

change_notes/2025-11-19-exclude-raii-style-locks-from-con51-cpp.md

@@ -0,0 +1,2 @@
+ - `CON51-CPP` - `EnsureActivelyHeldLocksAreReleasedOnExceptionalConditions.ql`:
+   - Exclude RAII-style locks from query results, as they cannot be leaked, and are recommended to avoid alerts in this rule.

change_notes/2025-11-19-improve-performance-m0-1-3-unused-local-variables.md

@@ -0,0 +1,2 @@
+ - `M0-1-3` - `UnusedLocalVariable.ql`:
+   - Improved performance of the unused local variable analysis by moving constant expression value extraction to a separate pass, eliminating certain expensive joins.