Merge pull request #20347 from github/post-release-prep/codeql-cli-2.23.0

Post-release preparation for codeql-cli-2.23.0
This commit is contained in:
Arthur Baars
2025-09-02 14:14:03 +02:00
committed by GitHub
185 changed files with 473 additions and 184 deletions

View File

@@ -1,3 +1,7 @@
## 7.6.1
No user-facing changes.
## 7.6.0
### Major Analysis Improvements

View File

@@ -0,0 +1,3 @@
## 7.6.1
No user-facing changes.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 7.6.0
lastReleaseVersion: 7.6.1

View File

@@ -1,5 +1,5 @@
name: codeql/java-all
version: 7.6.1-dev
version: 7.6.2-dev
groups: java
dbscheme: config/semmlecode.dbscheme
extractor: java

View File

@@ -1,3 +1,19 @@
## 1.7.0
### New Queries
* The query `java/insecure-spring-actuator-config` has been promoted from experimental to the main query pack as `java/spring-boot-exposed-actuators-config`. Its results will now appear by default. This query detects exposure of Spring Boot actuators through configuration files. It was originally submitted as an experimental query [by @luchua-bc](https://github.com/github/codeql/pull/5384).
### Query Metadata Changes
* The tag `maintainability` has been removed from `java/run-finalizers-on-exit` and the tags `quality`, `correctness`, and `performance` have been added.
* The tag `maintainability` has been removed from `java/garbage-collection` and the tags `quality` and `correctness` have been added.
### Minor Analysis Improvements
* Fixed a bug that was causing false negatives in rare cases in the query `java/dereferenced-value-may-be-null`.
* Removed the `java/empty-statement` query that was subsumed by the `java/empty-block` query.
## 1.6.3
No user-facing changes.

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* Removed the `java/empty-statement` query that was subsumed by the `java/empty-block` query.

View File

@@ -1,4 +0,0 @@
---
category: newQuery
---
* The query `java/insecure-spring-actuator-config` has been promoted from experimental to the main query pack as `java/spring-boot-exposed-actuators-config`. Its results will now appear by default. This query detects exposure of Spring Boot actuators through configuration files. It was originally submitted as an experimental query [by @luchua-bc](https://github.com/github/codeql/pull/5384).

View File

@@ -1,5 +0,0 @@
---
category: queryMetadata
---
* The tag `maintainability` has been removed from `java/run-finalizers-on-exit` and the tags `quality`, `correctness`, and `performance` have been added.
* The tag `maintainability` has been removed from `java/garbage-collection` and the tags `quality` and `correctness` have been added.

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* Fixed a bug that was causing false negatives in rare cases in the query `java/dereferenced-value-may-be-null`.

View File

@@ -0,0 +1,15 @@
## 1.7.0
### New Queries
* The query `java/insecure-spring-actuator-config` has been promoted from experimental to the main query pack as `java/spring-boot-exposed-actuators-config`. Its results will now appear by default. This query detects exposure of Spring Boot actuators through configuration files. It was originally submitted as an experimental query [by @luchua-bc](https://github.com/github/codeql/pull/5384).
### Query Metadata Changes
* The tag `maintainability` has been removed from `java/run-finalizers-on-exit` and the tags `quality`, `correctness`, and `performance` have been added.
* The tag `maintainability` has been removed from `java/garbage-collection` and the tags `quality` and `correctness` have been added.
### Minor Analysis Improvements
* Fixed a bug that was causing false negatives in rare cases in the query `java/dereferenced-value-may-be-null`.
* Removed the `java/empty-statement` query that was subsumed by the `java/empty-block` query.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 1.6.3
lastReleaseVersion: 1.7.0

View File

@@ -1,5 +1,5 @@
name: codeql/java-queries
version: 1.6.4-dev
version: 1.7.1-dev
groups:
- java
- queries