Merge pull request #20347 from github/post-release-prep/codeql-cli-2.23.0

Post-release preparation for codeql-cli-2.23.0

python/ql/lib/CHANGELOG.md

@@ -1,3 +1,10 @@
+## 4.0.14
+
+### Minor Analysis Improvements
+
+- The modelling of Psycopg2 now supports the use of `psycopg2.pool` connection pools for handling database connections.
+* Removed `lxml` as an XML bomb sink. The underlying libxml2 library now includes [entity reference loop detection](https://github.com/lxml/lxml/blob/f33ac2c2f5f9c4c4c1fc47f363be96db308f2fa6/doc/FAQ.txt#L1077) that prevents XML bomb attacks. 
+
 ## 4.0.13
 
 No user-facing changes.

python/ql/lib/change-notes/2025-08-25-psycopg2-connection-pool-modelling.md

@@ -1,5 +0,0 @@
----
-category: minorAnalysis
----
-
-- The modelling of Psycopg2 now supports the use of `psycopg2.pool` connection pools for handling database connections.

python/ql/lib/change-notes/released/4.0.14.md

@@ -1,4 +1,6 @@
----
-category: minorAnalysis
----
+## 4.0.14
+
+### Minor Analysis Improvements
+
+- The modelling of Psycopg2 now supports the use of `psycopg2.pool` connection pools for handling database connections.
 * Removed `lxml` as an XML bomb sink. The underlying libxml2 library now includes [entity reference loop detection](https://github.com/lxml/lxml/blob/f33ac2c2f5f9c4c4c1fc47f363be96db308f2fa6/doc/FAQ.txt#L1077) that prevents XML bomb attacks. 

python/ql/lib/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 4.0.13
+lastReleaseVersion: 4.0.14

python/ql/lib/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/python-all
-version: 4.0.14-dev
+version: 4.0.15-dev
 groups: python
 dbscheme: semmlecode.python.dbscheme
 extractor: python