Merge pull request #18549 from github/release-prep/2.20.2

Release preparation for version 2.20.2

actions/ql/lib/CHANGELOG.md

@@ -1,3 +1,7 @@
+## 0.4.1
+
+No user-facing changes.
+
 ## 0.4.0
 
 ### New Features

actions/ql/lib/change-notes/released/0.4.1.md

@@ -0,0 +1,3 @@
+## 0.4.1
+
+No user-facing changes.

actions/ql/lib/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.4.0
+lastReleaseVersion: 0.4.1

actions/ql/lib/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/actions-all
-version: 0.4.1-dev
+version: 0.4.1
 library: true
 warnOnImplicitThis: true
 dependencies:

actions/ql/src/CHANGELOG.md

@@ -1,3 +1,7 @@
+## 0.4.1
+
+No user-facing changes.
+
 ## 0.4.0
 
 ### New Queries

actions/ql/src/change-notes/released/0.4.1.md

@@ -0,0 +1,3 @@
+## 0.4.1
+
+No user-facing changes.

actions/ql/src/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.4.0
+lastReleaseVersion: 0.4.1

actions/ql/src/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/actions-queries
-version: 0.4.1-dev
+version: 0.4.1
 library: false
 warnOnImplicitThis: true
 groups: [actions, queries]

cpp/ql/lib/CHANGELOG.md

@@ -1,3 +1,27 @@
+## 3.2.0
+
+### New Features
+
+* Add a new predicate `getAnIndirectBarrier` to the parameterized module `InstructionBarrierGuard` in `semmle.code.cpp.dataflow.new.DataFlow` for computing indirect dataflow nodes that are guarded by a given instruction. This predicate is similar to the `getAnIndirectBarrier` predicate on the parameterized module `BarrierGuard`.
+* A new predicate `getDecltype` was added to the `ProxyClass` class, which yields the decltype for the proxy class.
+* Template classes that are of `struct` type are now also instances of the `Struct` class.
+* Template classes that are of `union` type are now also instances of the `Union` class.
+* A new abstract class `ConfigurationTestFile` (`semmle.code.cpp.ConfigurationTestFile.ConfigurationTestFile`) was introduced, which represents files created to test the build configuration. A subclass `CmakeTryCompileFile` of `ConfigurationTestFile` was also introduced, which represents files created by CMake to test the build configuration.
+* New predicates `getARequiresClause`, `getTemplateRequiresClause` and `getFunctionRequiresClause` were added to the `FunctionDeclarationEntry` class, which yield the requires clauses when the entry represents a function template declaration with requires clauses.
+* A new predicate `getRequiresClause` was added to the `TypeDeclarationEntry` class, which yields the requires clause when the entry represents a class template declaration with a requires clause.
+* A new predicate `getRequiresClause` was added to the `VariableDeclarationEntry` class, which yields the requires clause when the entry represents a variable template declaration with a requires clause.
+* A new predicate `getTypeConstraint` was added to the `TypeTemplateParameter` class, which yields the type constraint of the parameter if it exists.
+* A new class `VariableTemplateSpecialization` was introduced, which represents explicit specializations of variable templates.
+* A new predicate `isSpecialization` was added to the `Variable` class, which holds if the variable is a template specialization.
+* A new class `ConceptIdExpr` was introduced, which represents C++20 concept id expressions.
+* A new class `Concept` was introduced, which represents C++20 concepts.
+* The `getTemplateArgumentType` and `getTemplateArgumentValue` predicates of the `Declaration` class now also yield template arguments of concepts.
+* A new class `ConstevalIfStmt` was introduced, which represents the C++23 `if consteval` and `if ! consteval` statements.
+
+### Minor Analysis Improvements
+
+* `DefaultOptions::exits` now holds for C23 functions with the `_Noreturn` or `___Noreturn__` attribute.
+
 ## 3.1.0
 
 ### Deprecated APIs

cpp/ql/lib/change-notes/2024-01-16-consteval-if.md

@@ -1,4 +0,0 @@
----
-category: feature
----
-* A new class `ConstevalIfStmt` was introduced, which represents the C++23 `if consteval` and `if ! consteval` statements.

cpp/ql/lib/change-notes/2024-12-23-concept-template.md

@@ -1,5 +0,0 @@
----
-category: feature
----
-* A new class `Concept` was introduced, which represents C++20 concepts.
-* The `getTemplateArgumentType` and `getTemplateArgumentValue` predicates of the `Declaration` class now also yield template arguments of concepts.

cpp/ql/lib/change-notes/2024-12-24-concept-id.md

@@ -1,5 +0,0 @@
----
-category: feature
----
-* A new class `ConceptIdExpr` was introduced, which represents C++20 concept id expressions.
-

cpp/ql/lib/change-notes/2024-12-25-variable-specialization.md

@@ -1,5 +0,0 @@
----
-category: feature
----
-* A new class `VariableTemplateSpecialization` was introduced, which represents explicit specializations of variable templates.
-* A new predicate `isSpecialization` was added to the `Variable` class, which holds if the variable is a template specialization.

cpp/ql/lib/change-notes/2024-12-26-requires-clause.md

@@ -1,7 +0,0 @@
----
-category: feature
----
-* New predicates `getARequiresClause`, `getTemplateRequiresClause` and `getFunctionRequiresClause` were added to the `FunctionDeclarationEntry` class, which yield the requires clauses when the entry represents a function template declaration with requires clauses.
-* A new predicate `getRequiresClause` was added to the `TypeDeclarationEntry` class, which yields the requires clause when the entry represents a class template declaration with a requires clause.
-* A new predicate `getRequiresClause` was added to the `VariableDeclarationEntry` class, which yields the requires clause when the entry represents a variable template declaration with a requires clause.
-* A new predicate `getTypeConstraint` was added to the `TypeTemplateParameter` class, which yields the type constraint of the parameter if it exists.

cpp/ql/lib/change-notes/2025-01-07-config.md

@@ -1,4 +0,0 @@
----
-category: feature
----
-* A new abstract class `ConfigurationTestFile` (`semmle.code.cpp.ConfigurationTestFile.ConfigurationTestFile`) was introduced, which represents files created to test the build configuration. A subclass `CmakeTryCompileFile` of `ConfigurationTestFile` was also introduced, which represents files created by CMake to test the build configuration.

cpp/ql/lib/change-notes/2025-01-13-indirect-instruction-barrier-guard.md

@@ -1,4 +0,0 @@
----
-category: feature
----
-* Add a new predicate `getAnIndirectBarrier` to the parameterized module `InstructionBarrierGuard` in `semmle.code.cpp.dataflow.new.DataFlow` for computing indirect dataflow nodes that are guarded by a given instruction. This predicate is similar to the `getAnIndirectBarrier` predicate on the parameterized module `BarrierGuard`.

cpp/ql/lib/change-notes/2025-01-13-struct-proxy.md

@@ -1,6 +0,0 @@
----
-category: feature
----
-* A new predicate `getDecltype`was added to the `ProxyClass` class, which yields the decltype for the proxy class.
-* Template classes that are of `struct` type are now also instances of the `Struct` class.
-* Template classes that are of `union` type are now also instances of the `Union` class.

cpp/ql/lib/change-notes/2025-01-16-noreturn.md

@@ -1,4 +0,0 @@
----
-category: minorAnalysis
----
-* `DefaultOptions::exits` now holds for C23 functions with the `_Noreturn` or `___Noreturn__` attribute.

cpp/ql/lib/change-notes/released/3.2.0.md

@@ -0,0 +1,23 @@
+## 3.2.0
+
+### New Features
+
+* Add a new predicate `getAnIndirectBarrier` to the parameterized module `InstructionBarrierGuard` in `semmle.code.cpp.dataflow.new.DataFlow` for computing indirect dataflow nodes that are guarded by a given instruction. This predicate is similar to the `getAnIndirectBarrier` predicate on the parameterized module `BarrierGuard`.
+* A new predicate `getDecltype` was added to the `ProxyClass` class, which yields the decltype for the proxy class.
+* Template classes that are of `struct` type are now also instances of the `Struct` class.
+* Template classes that are of `union` type are now also instances of the `Union` class.
+* A new abstract class `ConfigurationTestFile` (`semmle.code.cpp.ConfigurationTestFile.ConfigurationTestFile`) was introduced, which represents files created to test the build configuration. A subclass `CmakeTryCompileFile` of `ConfigurationTestFile` was also introduced, which represents files created by CMake to test the build configuration.
+* New predicates `getARequiresClause`, `getTemplateRequiresClause` and `getFunctionRequiresClause` were added to the `FunctionDeclarationEntry` class, which yield the requires clauses when the entry represents a function template declaration with requires clauses.
+* A new predicate `getRequiresClause` was added to the `TypeDeclarationEntry` class, which yields the requires clause when the entry represents a class template declaration with a requires clause.
+* A new predicate `getRequiresClause` was added to the `VariableDeclarationEntry` class, which yields the requires clause when the entry represents a variable template declaration with a requires clause.
+* A new predicate `getTypeConstraint` was added to the `TypeTemplateParameter` class, which yields the type constraint of the parameter if it exists.
+* A new class `VariableTemplateSpecialization` was introduced, which represents explicit specializations of variable templates.
+* A new predicate `isSpecialization` was added to the `Variable` class, which holds if the variable is a template specialization.
+* A new class `ConceptIdExpr` was introduced, which represents C++20 concept id expressions.
+* A new class `Concept` was introduced, which represents C++20 concepts.
+* The `getTemplateArgumentType` and `getTemplateArgumentValue` predicates of the `Declaration` class now also yield template arguments of concepts.
+* A new class `ConstevalIfStmt` was introduced, which represents the C++23 `if consteval` and `if ! consteval` statements.
+
+### Minor Analysis Improvements
+
+* `DefaultOptions::exits` now holds for C23 functions with the `_Noreturn` or `___Noreturn__` attribute.

cpp/ql/lib/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 3.1.0
+lastReleaseVersion: 3.2.0

cpp/ql/lib/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/cpp-all
-version: 3.1.1-dev
+version: 3.2.0
 groups: cpp
 dbscheme: semmlecode.cpp.dbscheme
 extractor: cpp

cpp/ql/src/CHANGELOG.md

@@ -1,3 +1,10 @@
+## 1.3.2
+
+### Minor Analysis Improvements
+
+* Added dataflow models for `SysAllocString` and related functions.
+* The `cpp/badly-bounded-write`, `cpp/equality-on-floats`, `cpp/short-global-name`, `cpp/static-buffer-overflow`, `cpp/too-few-arguments`, `cpp/useless-expression`, `cpp/world-writable-file-creation` queries no longer produce alerts on files created by CMake to test the build configuration.
+
 ## 1.3.1
 
 ### Minor Analysis Improvements

cpp/ql/src/change-notes/2025-01-09-SysAllocString.md

@@ -1,4 +0,0 @@
----
-category: minorAnalysis
----
-* Added dataflow models for `SysAllocString` and related functions.

cpp/ql/src/change-notes/released/1.3.2.md

@@ -1,4 +1,6 @@
----
-category: minorAnalysis
----
+## 1.3.2
+
+### Minor Analysis Improvements
+
+* Added dataflow models for `SysAllocString` and related functions.
 * The `cpp/badly-bounded-write`, `cpp/equality-on-floats`, `cpp/short-global-name`, `cpp/static-buffer-overflow`, `cpp/too-few-arguments`, `cpp/useless-expression`, `cpp/world-writable-file-creation` queries no longer produce alerts on files created by CMake to test the build configuration.

cpp/ql/src/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 1.3.1
+lastReleaseVersion: 1.3.2

cpp/ql/src/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/cpp-queries
-version: 1.3.2-dev
+version: 1.3.2
 groups:
   - cpp
   - queries

csharp/ql/campaigns/Solorigate/lib/CHANGELOG.md

@@ -1,3 +1,7 @@
+## 1.7.32
+
+No user-facing changes.
+
 ## 1.7.31
 
 No user-facing changes.

csharp/ql/campaigns/Solorigate/lib/change-notes/released/1.7.32.md

@@ -0,0 +1,3 @@
+## 1.7.32
+
+No user-facing changes.

csharp/ql/campaigns/Solorigate/lib/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 1.7.31
+lastReleaseVersion: 1.7.32

csharp/ql/campaigns/Solorigate/lib/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/csharp-solorigate-all
-version: 1.7.32-dev
+version: 1.7.32
 groups:
   - csharp
   - solorigate

csharp/ql/campaigns/Solorigate/src/CHANGELOG.md

@@ -1,3 +1,7 @@
+## 1.7.32
+
+No user-facing changes.
+
 ## 1.7.31
 
 No user-facing changes.

csharp/ql/campaigns/Solorigate/src/change-notes/released/1.7.32.md

@@ -0,0 +1,3 @@
+## 1.7.32
+
+No user-facing changes.

csharp/ql/campaigns/Solorigate/src/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 1.7.31
+lastReleaseVersion: 1.7.32

csharp/ql/campaigns/Solorigate/src/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/csharp-solorigate-queries
-version: 1.7.32-dev
+version: 1.7.32
 groups:
   - csharp
   - solorigate

csharp/ql/lib/CHANGELOG.md

@@ -1,3 +1,11 @@
+## 4.0.2
+
+### Minor Analysis Improvements
+
+* Added extractor support for extracting implicit `ToString` calls in binary `+` expressions and string interpolation expressions.
+* The Razor source generator invocation in `build-mode:none` extraction has been changed to use relative file paths instead of absolute ones.
+* C# 13: Added extractor support and call dispatch logic (data flow) for the (negative) type parameter constraint `allows ref struct`. Added extractor support for the type parameter constraint `notnull`.
+
 ## 4.0.1
 
 ### Minor Analysis Improvements

csharp/ql/lib/change-notes/2025-01-03-allow-ref-struct.md

@@ -1,4 +0,0 @@
----
-category: minorAnalysis
----
-* C# 13: Added extractor support and call dispatch logic (data flow) for the (negative) type parameter constraint `allows ref struct`. Added extractor support for the type parameter constraint `notnull`.

csharp/ql/lib/change-notes/2025-01-06-razor-relative-path.md

@@ -1,4 +0,0 @@
----
-category: minorAnalysis
----
-* The Razor source generator invocation in `build-mode:none` extraction has been changed to use relative file paths instead of absolute ones.

csharp/ql/lib/change-notes/2025-01-09-implicit-to-string.md

@@ -1,4 +0,0 @@
----
-category: minorAnalysis
----
-* Added extractor support for extracting implicit `ToString` calls in binary `+` expressions and string interpolation expressions.

csharp/ql/lib/change-notes/released/4.0.2.md

@@ -0,0 +1,7 @@
+## 4.0.2
+
+### Minor Analysis Improvements
+
+* Added extractor support for extracting implicit `ToString` calls in binary `+` expressions and string interpolation expressions.
+* The Razor source generator invocation in `build-mode:none` extraction has been changed to use relative file paths instead of absolute ones.
+* C# 13: Added extractor support and call dispatch logic (data flow) for the (negative) type parameter constraint `allows ref struct`. Added extractor support for the type parameter constraint `notnull`.

csharp/ql/lib/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 4.0.1
+lastReleaseVersion: 4.0.2

csharp/ql/lib/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/csharp-all
-version: 4.0.2-dev
+version: 4.0.2
 groups: csharp
 dbscheme: semmlecode.csharp.dbscheme
 extractor: csharp

csharp/ql/src/CHANGELOG.md

@@ -1,3 +1,7 @@
+## 1.0.15
+
+No user-facing changes.
+
 ## 1.0.14
 
 ### Minor Analysis Improvements

csharp/ql/src/change-notes/released/1.0.15.md

@@ -0,0 +1,3 @@
+## 1.0.15
+
+No user-facing changes.

csharp/ql/src/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 1.0.14
+lastReleaseVersion: 1.0.15

csharp/ql/src/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/csharp-queries
-version: 1.0.15-dev
+version: 1.0.15
 groups:
   - csharp
   - queries

go/ql/consistency-queries/CHANGELOG.md

@@ -1,3 +1,7 @@
+## 1.0.15
+
+No user-facing changes.
+
 ## 1.0.14
 
 No user-facing changes.

go/ql/consistency-queries/change-notes/released/1.0.15.md

@@ -0,0 +1,3 @@
+## 1.0.15
+
+No user-facing changes.

go/ql/consistency-queries/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 1.0.14
+lastReleaseVersion: 1.0.15

go/ql/consistency-queries/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql-go-consistency-queries
-version: 1.0.15-dev
+version: 1.0.15
 groups:
   - go
   - queries

go/ql/lib/CHANGELOG.md

@@ -1,3 +1,12 @@
+## 3.0.2
+
+### Minor Analysis Improvements
+
+* `database` local source models have been added for the Beego ORM package.
+* `database` local source models have been added for the `github.com/jmoiron/sqlx` package.
+* Added `database` source models for database methods from the `gorm.io/gorm` package.
+* `database` local source models have been added for the `database/sql` and `database/sql/driver` packages.
+
 ## 3.0.1
 
 ### Minor Analysis Improvements

go/ql/lib/change-notes/2025-01-03-database-sql-and-database-sql-driver-source-models.md

@@ -1,4 +0,0 @@
----
-category: minorAnalysis
----
-* `database` local source models have been added for the `database/sql` and `database/sql/driver` packages.

go/ql/lib/change-notes/2025-01-05-gorm-database-sources.md

@@ -1,5 +0,0 @@
----
-category: minorAnalysis
----
-* Added `database` source models for database methods from the `gorm.io/gorm` package.
-`

go/ql/lib/change-notes/2025-01-07-sqlx-source-models.md

@@ -1,4 +0,0 @@
----
-category: minorAnalysis
----
-* `database` local source models have been added for the `github.com/jmoiron/sqlx` package.

go/ql/lib/change-notes/2025-01-09-beego-orm-models.md

@@ -1,4 +0,0 @@
----
-category: minorAnalysis
----
-* `database` local source models have been added for the Beego ORM package.

go/ql/lib/change-notes/released/3.0.2.md

@@ -0,0 +1,8 @@
+## 3.0.2
+
+### Minor Analysis Improvements
+
+* `database` local source models have been added for the Beego ORM package.
+* `database` local source models have been added for the `github.com/jmoiron/sqlx` package.
+* Added `database` source models for database methods from the `gorm.io/gorm` package.
+* `database` local source models have been added for the `database/sql` and `database/sql/driver` packages.

go/ql/lib/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 3.0.1
+lastReleaseVersion: 3.0.2

go/ql/lib/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/go-all
-version: 3.0.2-dev
+version: 3.0.2
 groups: go
 dbscheme: go.dbscheme
 extractor: go

go/ql/src/CHANGELOG.md

@@ -1,3 +1,7 @@
+## 1.1.6
+
+No user-facing changes.
+
 ## 1.1.5
 
 No user-facing changes.

go/ql/src/change-notes/released/1.1.6.md

@@ -0,0 +1,3 @@
+## 1.1.6
+
+No user-facing changes.

go/ql/src/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 1.1.5
+lastReleaseVersion: 1.1.6

go/ql/src/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/go-queries
-version: 1.1.6-dev
+version: 1.1.6
 groups:
   - go
   - queries

java/ql/lib/CHANGELOG.md

@@ -1,3 +1,15 @@
+## 6.1.0
+
+### New Features
+
+* The Java and Kotlin extractors now support `CODEQL_PATH_TRANSFORMER`. `SEMMLE_PATH_TRANSFORMER` is still supported, but deprecated.
+
+### Minor Analysis Improvements
+
+* `JavacTool`-based compiler interception no longer requires an `--add-opens` directive when `FileObject.toUri` is accessible.
+* `JavacTool`-based compiler interception no longer throws an exception visible to the program using `JavacTool` on failure to extract a file path from a passed `JavaFileObject`.
+* `JavacTool`-based compiler interception now supports files that don't simply wrap a `file://` URL, such as a source file inside a JAR, or an in-memory file, but which do implement `getCharContent`.
+
 ## 6.0.0
 
 ### Breaking Changes

java/ql/lib/change-notes/2025-01-03-path-transformer.md

@@ -1,5 +0,0 @@
----
-category: feature
----
-* The Java and Kotlin extractors now support `CODEQL_PATH_TRANSFORMER`. `SEMMLE_PATH_TRANSFORMER` is still supported, but deprecated.
-

java/ql/lib/change-notes/released/6.1.0.md

@@ -1,6 +1,11 @@
----
-category: minorAnalysis
----
+## 6.1.0
+
+### New Features
+
+* The Java and Kotlin extractors now support `CODEQL_PATH_TRANSFORMER`. `SEMMLE_PATH_TRANSFORMER` is still supported, but deprecated.
+
+### Minor Analysis Improvements
+
 * `JavacTool`-based compiler interception no longer requires an `--add-opens` directive when `FileObject.toUri` is accessible.
 * `JavacTool`-based compiler interception no longer throws an exception visible to the program using `JavacTool` on failure to extract a file path from a passed `JavaFileObject`.
 * `JavacTool`-based compiler interception now supports files that don't simply wrap a `file://` URL, such as a source file inside a JAR, or an in-memory file, but which do implement `getCharContent`.

java/ql/lib/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 6.0.0
+lastReleaseVersion: 6.1.0

java/ql/lib/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/java-all
-version: 6.0.1-dev
+version: 6.1.0
 groups: java
 dbscheme: config/semmlecode.dbscheme
 extractor: java

java/ql/src/CHANGELOG.md

@@ -1,3 +1,10 @@
+## 1.1.12
+
+### Bug Fixes
+
+* Classes that define a `writeReplace` method are no longer flagged by the `java/missing-no-arg-constructor-on-serializable` query on the assumption they are unlikely to be deserialized using the default algorithm.
+* The query "Use of a broken or risky cryptographic algorithm" (`java/weak-cryptographic-algorithm`) now gives the reason why the cryptographic algorithm is considered weak.
+
 ## 1.1.11
 
 No user-facing changes.

java/ql/src/change-notes/2024-11-29-java-weak-crypto-algorithm-explanation.md

@@ -1,4 +0,0 @@
----
-category: fix
----
-* The query "Use of a broken or risky cryptographic algorithm" (`java/weak-cryptographic-algorithm`) now gives the reason why the cryptographic algorithm is considered weak.

java/ql/src/change-notes/released/1.1.12.md

@@ -1,4 +1,6 @@
----
-category: fix
----
+## 1.1.12
+
+### Bug Fixes
+
 * Classes that define a `writeReplace` method are no longer flagged by the `java/missing-no-arg-constructor-on-serializable` query on the assumption they are unlikely to be deserialized using the default algorithm.
+* The query "Use of a broken or risky cryptographic algorithm" (`java/weak-cryptographic-algorithm`) now gives the reason why the cryptographic algorithm is considered weak.

java/ql/src/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 1.1.11
+lastReleaseVersion: 1.1.12

java/ql/src/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/java-queries
-version: 1.1.12-dev
+version: 1.1.12
 groups:
   - java
   - queries

javascript/ql/lib/CHANGELOG.md

@@ -1,3 +1,20 @@
+## 2.3.0
+
+### Deprecated APIs
+
+* Custom data flow queries will need to be migrated in order to use the shared data flow library. Until migrated, such queries will compile with deprecation warnings and run with a
+  deprecated copy of the old data flow library. The deprecation layer will be removed in early 2026, after which any unmigrated queries will stop working.
+  See more information in the [migration guide](https://codeql.github.com/docs/codeql-language-guides/migrating-javascript-dataflow-queries).
+
+### Major Analysis Improvements
+
+* All data flow queries are now using the same underlying data flow library as the other languages analyses, replacing the old one written specifically for JavaScript/TypeScript.
+  This is a significant change and users may consequently observe differences in the alerts generated by the analysis.
+
+### Minor Analysis Improvements
+
+* The sensitive data library has been improved so that `snake_case` style variable names are recognized more reliably. This may result in more sensitive data being identified, and more results from queries that use the sensitive data library.
+
 ## 2.2.1
 
 No user-facing changes.

javascript/ql/lib/change-notes/2025-01-07-dataflow-deprecation.md

@@ -1,6 +0,0 @@
----
-category: deprecated
----
-* Custom data flow queries will need to be migrated in order to use the shared data flow library. Until migrated, such queries will compile with deprecation warnings and run with a
-  deprecated copy of the old data flow library. The deprecation layer will be removed in early 2026, after which any unmigrated queries will stop working.
-  See more information in the [migration guide](https://codeql.github.com/docs/codeql-language-guides/migrating-javascript-dataflow-queries).

javascript/ql/lib/change-notes/2025-01-07-dataflow.md

@@ -1,5 +0,0 @@
----
-category: majorAnalysis
----
-* All data flow queries are now using the same underlying data flow library as the other languages analyses, replacing the old one written specifically for JavaScript/TypeScript.
-  This is a significant change and users may consequently observe differences in the alerts generated by the analysis.

javascript/ql/lib/change-notes/released/2.3.0.md

@@ -0,0 +1,16 @@
+## 2.3.0
+
+### Deprecated APIs
+
+* Custom data flow queries will need to be migrated in order to use the shared data flow library. Until migrated, such queries will compile with deprecation warnings and run with a
+  deprecated copy of the old data flow library. The deprecation layer will be removed in early 2026, after which any unmigrated queries will stop working.
+  See more information in the [migration guide](https://codeql.github.com/docs/codeql-language-guides/migrating-javascript-dataflow-queries).
+
+### Major Analysis Improvements
+
+* All data flow queries are now using the same underlying data flow library as the other languages analyses, replacing the old one written specifically for JavaScript/TypeScript.
+  This is a significant change and users may consequently observe differences in the alerts generated by the analysis.
+
+### Minor Analysis Improvements
+
+* The sensitive data library has been improved so that `snake_case` style variable names are recognized more reliably. This may result in more sensitive data being identified, and more results from queries that use the sensitive data library.

javascript/ql/lib/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 2.2.1
+lastReleaseVersion: 2.3.0

javascript/ql/lib/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/javascript-all
-version: 2.2.2-dev
+version: 2.3.0
 groups: javascript
 dbscheme: semmlecode.javascript.dbscheme
 extractor: javascript

javascript/ql/src/CHANGELOG.md

@@ -1,3 +1,14 @@
+## 1.3.0
+
+### Major Analysis Improvements
+
+* The `js/xss-through-dom` query now recognises sources of DOM input originating from Angular templates.
+
+### Bug Fixes
+
+* Fixed a TypeScript extractor crash that would occur when encountering an export specifier
+  whose local specifier was a string literal.
+
 ## 1.2.6
 
 No user-facing changes.

javascript/ql/src/change-notes/2025-01-09-angular2-xss-through-dom.md

@@ -1,4 +0,0 @@
----
-category: majorAnalysis
----
-* The `js/xss-through-dom` query now recognises sources of DOM input originating from Angular templates.

javascript/ql/src/change-notes/2025-01-09-import-spec-strings.md

@@ -1,5 +0,0 @@
----
-category: fix
----
-* Fixed a TypeScript extractor crash that would occur when encountering an export specifier
-  whose local specifier was a string literal.

javascript/ql/src/change-notes/released/1.3.0.md

@@ -0,0 +1,10 @@
+## 1.3.0
+
+### Major Analysis Improvements
+
+* The `js/xss-through-dom` query now recognises sources of DOM input originating from Angular templates.
+
+### Bug Fixes
+
+* Fixed a TypeScript extractor crash that would occur when encountering an export specifier
+  whose local specifier was a string literal.

javascript/ql/src/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 1.2.6
+lastReleaseVersion: 1.3.0

javascript/ql/src/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/javascript-queries
-version: 1.2.7-dev
+version: 1.3.0
 groups:
   - javascript
   - queries

misc/suite-helpers/CHANGELOG.md

@@ -1,3 +1,7 @@
+## 1.0.15
+
+No user-facing changes.
+
 ## 1.0.14
 
 No user-facing changes.

misc/suite-helpers/change-notes/released/1.0.15.md

@@ -0,0 +1,3 @@
+## 1.0.15
+
+No user-facing changes.

misc/suite-helpers/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 1.0.14
+lastReleaseVersion: 1.0.15

misc/suite-helpers/qlpack.yml

@@ -1,4 +1,4 @@
 name: codeql/suite-helpers
-version: 1.0.15-dev
+version: 1.0.15
 groups: shared
 warnOnImplicitThis: true

python/ql/lib/CHANGELOG.md

@@ -1,3 +1,10 @@
+## 3.1.1
+
+### Minor Analysis Improvements
+
+* The sensitive data library has been improved so that `snake_case` style variable names are recognized more reliably. This may result in more sensitive data being identified, and more results from queries that use the sensitive data library.
+- Additional taint steps through methods of `lxml.etree.Element` and `lxml.etree.ElementTree` objects from the `lxml` PyPI package have been modeled. 
+
 ## 3.1.0
 
 ### New Features

python/ql/lib/change-notes/2024-12-11-lxml-flowsteps.md

@@ -1,4 +0,0 @@
----
-category: minorAnalysis
----
-- Additional taint steps through methods of `lxml.etree.Element` and `lxml.etree.ElementTree` objects from the `lxml` PyPI package have been modeled. 

python/ql/lib/change-notes/2025-01-10-sensitive-data.md

@@ -1,4 +0,0 @@
----
-category: minorAnalysis
----
-* The sensitive data library has been improved so that `snake_case` style variable names are recognized more reliably. This may result in more sensitive data being identified, and more results from queries that use the sensitive data library.

python/ql/lib/change-notes/released/3.1.1.md

@@ -1,4 +1,6 @@
----
-category: minorAnalysis
----
+## 3.1.1
+
+### Minor Analysis Improvements
+
 * The sensitive data library has been improved so that `snake_case` style variable names are recognized more reliably. This may result in more sensitive data being identified, and more results from queries that use the sensitive data library.
+- Additional taint steps through methods of `lxml.etree.Element` and `lxml.etree.ElementTree` objects from the `lxml` PyPI package have been modeled. 

python/ql/lib/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 3.1.0
+lastReleaseVersion: 3.1.1

python/ql/lib/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/python-all
-version: 3.1.1-dev
+version: 3.1.1
 groups: python
 dbscheme: semmlecode.python.dbscheme
 extractor: python

python/ql/src/CHANGELOG.md

@@ -1,3 +1,7 @@
+## 1.4.1
+
+No user-facing changes.
+
 ## 1.4.0
 
 ### New Queries

python/ql/src/change-notes/released/1.4.1.md

@@ -0,0 +1,3 @@
+## 1.4.1
+
+No user-facing changes.

python/ql/src/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 1.4.0
+lastReleaseVersion: 1.4.1

python/ql/src/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/python-queries
-version: 1.4.1-dev
+version: 1.4.1
 groups:
   - python
   - queries

ruby/ql/lib/CHANGELOG.md

@@ -1,3 +1,10 @@
+## 3.0.2
+
+### Minor Analysis Improvements
+
+* The sensitive data library has been improved so that `snake_case` style variable names are recognized more reliably. This may result in more sensitive data being identified, and more results from queries that use the sensitive data library.
+* Types are now being tracked in data flow, but only when the type of an object is obvious from the context. For example, `C.new` has guaranteed type `C`, while in `def add(x, y) { x + y }` we cannot assign a type to `x + y` (it could, for instance, be both `String` and `Integer`). Tracking types allows us to remove false-positive results when type incompatibility can be established.
+
 ## 3.0.1
 
 No user-facing changes.

ruby/ql/lib/change-notes/2025-01-10-sensitive-data.md

@@ -1,4 +0,0 @@
----
-category: minorAnalysis
----
-* The sensitive data library has been improved so that `snake_case` style variable names are recognized more reliably. This may result in more sensitive data being identified, and more results from queries that use the sensitive data library.

ruby/ql/lib/change-notes/released/3.0.2.md

@@ -1,4 +1,6 @@
----
-category: minorAnalysis
----
-* Types are now being tracked in data flow, but only when the type of an object is obvious from the context. For example, `C.new` has guaranteed type `C`, while in `def add(x, y) { x + y }` we cannot assign a type to `x + y` (it could, for instance, be both `String` and `Integer`). Tracking types allows us to remove false-positive results when type incompatibility can be established.
+## 3.0.2
+
+### Minor Analysis Improvements
+
+* The sensitive data library has been improved so that `snake_case` style variable names are recognized more reliably. This may result in more sensitive data being identified, and more results from queries that use the sensitive data library.
+* Types are now being tracked in data flow, but only when the type of an object is obvious from the context. For example, `C.new` has guaranteed type `C`, while in `def add(x, y) { x + y }` we cannot assign a type to `x + y` (it could, for instance, be both `String` and `Integer`). Tracking types allows us to remove false-positive results when type incompatibility can be established.