Java: Add MaDs for java.lang.ScopedValue

[IdrissRio]

This pull request adds support for modeling and testing dataflow through Java's new ScopedValue API, introduced in Java 25.

Java Docs - Scoped Value: https://docs.oracle.com/en/java/javase/24/docs/api/java.base/java/lang/ScopedValue.html
Java Docs - Carrier: https://docs.oracle.com/en/java/javase/24/docs/api/java.base/java/lang/ScopedValue.Carrier.html
JEP: https://openjdk.org/jeps/506

[github-actions]

⚠️ The head of this PR and the base branch were compared for differences in the framework coverage reports. The generated reports are available in the artifacts of this workflow run. The differences will be picked up by the nightly job after the PR gets merged.

Click to show differences in coverage

java

Generated file changes for java

• Changes to framework-coverage-java.rst:

-    Java Standard Library,``java.*``,10,4621,260,99,,9,,,26
+    Java Standard Library,``java.*``,10,4628,260,99,,9,,,26
-    Totals,,330,26328,2656,404,16,128,33,1,409
+    Totals,,330,26335,2656,404,16,128,33,1,409

• Changes to framework-coverage-java.csv:

- java.lang,38,3,783,,13,,,,,,1,,,,,,,,,,,,8,,,,11,,,4,,,1,,,,,,,,,,,,,,,,3,,,506,277
+ java.lang,38,3,790,,13,,,,,,1,,,,,,,,,,,,8,,,,11,,,4,,,1,,,,,,,,,,,,,,,,3,,,510,280

[Copilot]

Pull Request Overview

This PR adds support for modeling and testing dataflow through Java's new ScopedValue API, introduced in Java 25.

• Adds MaD (Models as Data) entries for ScopedValue operations to enable dataflow tracking
• Creates comprehensive test cases that verify taint propagation through scoped value bindings and retrievals
• Configures the test environment to use Java 25 with preview features enabled

Reviewed Changes

Copilot reviewed 5 out of 5 changed files in this pull request and generated 1 comment.

Show a summary per file

File	Description
java/ql/lib/ext/java.lang.scoped.model.yml	Defines dataflow models for ScopedValue API methods including value binding and retrieval
java/ql/test/library-tests/dataflow/scoped-values/test.ql	Test query that tracks taint flow from command line arguments to sink methods
java/ql/test/library-tests/dataflow/scoped-values/ScopedValueFlowTest.java	Java test code demonstrating various ScopedValue usage patterns for dataflow testing
java/ql/test/library-tests/dataflow/scoped-values/test.expected	Expected test results showing detected dataflow paths
java/ql/test/library-tests/dataflow/scoped-values/options	Compiler options to enable Java 25 preview features