From 375738c4f231a2873eadbfe3516b98a5e476a7f6 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 7 Apr 2026 18:10:36 +0000
Subject: [PATCH 1/2] Bump koffi from 2.15.1 to 2.15.2 in /extensions/ql-vscode

Bumps [koffi](https://github.com/Koromix/koffi) from 2.15.1 to 2.15.2.
- [Commits](https://github.com/Koromix/koffi/commits)

---
updated-dependencies:
- dependency-name: koffi
  dependency-version: 2.15.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 extensions/ql-vscode/package-lock.json | 8 ++++----
 extensions/ql-vscode/package.json      | 2 +-
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/extensions/ql-vscode/package-lock.json b/extensions/ql-vscode/package-lock.json
index 086dc58ee68..d61638aca80 100644
--- a/extensions/ql-vscode/package-lock.json
+++ b/extensions/ql-vscode/package-lock.json
@@ -25,7 +25,7 @@
         "d3-graphviz": "^5.6.0",
         "fs-extra": "^11.1.1",
         "js-yaml": "^4.1.1",
-        "koffi": "^2.15.1",
+        "koffi": "^2.15.5",
         "msw": "^2.12.7",
         "nanoid": "^5.0.7",
         "p-queue": "^8.0.1",
@@ -20016,9 +20016,9 @@
       }
     },
     "node_modules/koffi": {
-      "version": "2.15.1",
-      "resolved": "https://registry.npmjs.org/koffi/-/koffi-2.15.1.tgz",
-      "integrity": "sha512-mnc0C0crx/xMSljb5s9QbnLrlFHprioFO1hkXyuSuO/QtbpLDa0l/uM21944UfQunMKmp3/r789DTDxVyyH6aA==",
+      "version": "2.15.5",
+      "resolved": "https://registry.npmjs.org/koffi/-/koffi-2.15.5.tgz",
+      "integrity": "sha512-4/35/oOpnH9tzrpWAC3ObjAERBSe0Q0Dh2NP1eBBPRGpohEj4vFw2+7tej9W9MTExvk0vtF0PjMqIGG4rf6feQ==",
       "hasInstallScript": true,
       "license": "MIT",
       "funding": {
diff --git a/extensions/ql-vscode/package.json b/extensions/ql-vscode/package.json
index 702e970bbba..0873a0e4bbb 100644
--- a/extensions/ql-vscode/package.json
+++ b/extensions/ql-vscode/package.json
@@ -2076,7 +2076,7 @@
     "@hpcc-js/wasm-graphviz": "^1.21.1",
     "fs-extra": "^11.1.1",
     "js-yaml": "^4.1.1",
-    "koffi": "^2.15.1",
+    "koffi": "^2.15.5",
     "msw": "^2.12.7",
     "nanoid": "^5.0.7",
     "p-queue": "^8.0.1",

From 4573af4b710be365d3ce0d369d677ca34dd426c9 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Tue, 7 Apr 2026 18:31:49 +0000
Subject: [PATCH 2/2] Fix off-by-one error in expandShortPathNative buffer
 conversion

Agent-Logs-Url: https://github.com/github/vscode-codeql/sessions/8f55b472-80f3-41e0-8d94-0a7cf66671e4

Co-authored-by: cklin <1418580+cklin@users.noreply.github.com>
---
 extensions/ql-vscode/src/common/short-paths.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/extensions/ql-vscode/src/common/short-paths.ts b/extensions/ql-vscode/src/common/short-paths.ts
index 860544c38d4..3f6698d7ec6 100644
--- a/extensions/ql-vscode/src/common/short-paths.ts
+++ b/extensions/ql-vscode/src/common/short-paths.ts
@@ -170,7 +170,7 @@ async function expandShortPathNative(shortPath: string, logger: BaseLogger) {
     throw new Error("Failed to get long path name");
   }
 
-  const longPath = buffer.toString("utf16le", 0, (result - 1) * 2);
+  const longPath = buffer.toString("utf16le", 0, result * 2);
 
   void logger.log(`Expanded short path ${shortPath} to ${longPath}`);