Merge branch 'main' into data-douser/cds-extractor-windows-os-3

Author: data-douser

.github/workflows/javascript.sarif.expected

@@ -110,7 +110,11 @@ class AsyncStyleCommunication extends InterServiceCommunication {
       [
         srvEmit.getEmitter().getDefinition().getManifestName(),
         srvEmit.getEmitter().getDefinition().getUnqualifiedName()
-      ] = orchestratingRegistration.getReceiver().(ServiceInstanceFromCdsConnectTo).getServiceDesignator() and
+      ] =
+        orchestratingRegistration
+            .getReceiver()
+            .(ServiceInstanceFromCdsConnectTo)
+            .getServiceDesignator() and
       recipient = methodCallOnReceiver.getReceiver() and
       methodCallOnReceiver.getEnclosingFunction() = orchestratingRegistration.getHandler().asExpr()
     )

javascript/frameworks/cap/lib/advanced_security/javascript/frameworks/cap/dataflow/DataFlow.qll

@@ -1,5 +1,5 @@
 import javascript
 import advanced_security.javascript.frameworks.cap.CDS
 
-from ServiceInstance svc 
-select svc
+from ServiceInstance svc
+select svc

javascript/frameworks/cap/test/models/cds/applicationserviceinstance/applicationserviceinstance.ql

@@ -2,4 +2,4 @@ import javascript
 import advanced_security.javascript.frameworks.cap.dataflow.DataFlow
 
 from ParseSink sink
-select sink
+select sink

javascript/frameworks/cap/test/models/cds/cxn/parseexpr.ql

@@ -3,7 +3,7 @@
   "version": "1.0.0",
   "dependencies": {
     "@sap/cds": "^7",
-    "express": "^4.21.2",
+    "express": "^4.22.1",
     "@cap-js/sqlite": "*"
   },
   "scripts": {

javascript/frameworks/cap/test/models/cds/entityreference/package-lock.json

@@ -2,4 +2,4 @@ import javascript
 import advanced_security.javascript.frameworks.cap.CAPLogInjectionQuery
 
 from CdsLogSink sink
-select sink
+select sink

javascript/frameworks/cap/test/models/cds/entityreference/package.json

@@ -2,4 +2,4 @@ import javascript
 import advanced_security.javascript.frameworks.cap.RemoteFlowSources
 
 from HandlerParameterOfExposedService handlerParameterOfExposedService
-select handlerParameterOfExposedService
+select handlerParameterOfExposedService

javascript/frameworks/cap/test/models/cds/logger/logger.ql

@@ -2,4 +2,4 @@ import javascript
 import advanced_security.javascript.frameworks.cap.CDS
 
 from Handler handler
-select handler.getAParameter()
+select handler.getAParameter()

javascript/frameworks/cap/test/models/cds/remoteflowsources/HandlerParameterOfExposedService.ql

@@ -2,4 +2,4 @@ import javascript
 import advanced_security.javascript.frameworks.cap.CDS
 
 from UserDefinedService svc
-select svc
+select svc