Release preparation for version 2.10.4

This commit is contained in:
github-actions[bot]
2022-08-25 12:52:26 +00:00
parent b0ae12850d
commit 0f63bc077f
106 changed files with 369 additions and 245 deletions

View File

@@ -1,3 +1,17 @@
## 0.3.4
### Deprecated APIs
* The utility files previously in the `codeql.ruby.security.performance` package have been moved to the `codeql.ruby.security.regexp` package.
The previous files still exist as deprecated aliases.
### Minor Analysis Improvements
* Most deprecated predicates/classes/modules that have been deprecated for over a year have been
deleted.
* Calls to `render` in Rails controllers and views are now recognized as HTTP
response bodies.
## 0.3.3
### Minor Analysis Improvements

View File

@@ -1,5 +0,0 @@
---
category: deprecated
---
* The utility files previously in the `codeql.ruby.security.performance` package have been moved to the `codeql.ruby.security.regexp` package.
The previous files still exist as deprecated aliases.

View File

@@ -1,5 +0,0 @@
---
category: minorAnalysis
---
* Calls to `render` in Rails controllers and views are now recognized as HTTP
response bodies.

View File

@@ -1,6 +0,0 @@
---
category: minorAnalysis
---
* Most deprecated predicates/classes/modules that have been deprecated for over a year have been
deleted.

View File

@@ -0,0 +1,13 @@
## 0.3.4
### Deprecated APIs
* The utility files previously in the `codeql.ruby.security.performance` package have been moved to the `codeql.ruby.security.regexp` package.
The previous files still exist as deprecated aliases.
### Minor Analysis Improvements
* Most deprecated predicates/classes/modules that have been deprecated for over a year have been
deleted.
* Calls to `render` in Rails controllers and views are now recognized as HTTP
response bodies.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 0.3.3
lastReleaseVersion: 0.3.4

View File

@@ -1,5 +1,5 @@
name: codeql/ruby-all
version: 0.3.4-dev
version: 0.3.4
groups: ruby
extractor: ruby
dbscheme: ruby.dbscheme

View File

@@ -1,3 +1,14 @@
## 0.3.3
### New Queries
* Added a new query, `rb/log-inection`, to detect cases where a malicious user may be able to forge log entries.
* Added a new query, `rb/incomplete-multi-character-sanitization`. The query
finds string transformations that do not replace all occurrences of a
multi-character substring.
* Added a new query, `rb/suspicious-regexp-range`, to detect character ranges in regular expressions that seem to match
too many characters.
## 0.3.2
## 0.3.1

View File

@@ -1,5 +0,0 @@
---
category: newQuery
---
* Added a new query, `rb/suspicious-regexp-range`, to detect character ranges in regular expressions that seem to match
too many characters.

View File

@@ -1,6 +0,0 @@
---
category: newQuery
---
* Added a new query, `rb/incomplete-multi-character-sanitization`. The query
finds string transformations that do not replace all occurrences of a
multi-character substring.

View File

@@ -1,4 +0,0 @@
---
category: newQuery
---
* Added a new query, `rb/log-inection`, to detect cases where a malicious user may be able to forge log entries.

View File

@@ -0,0 +1,10 @@
## 0.3.3
### New Queries
* Added a new query, `rb/log-inection`, to detect cases where a malicious user may be able to forge log entries.
* Added a new query, `rb/incomplete-multi-character-sanitization`. The query
finds string transformations that do not replace all occurrences of a
multi-character substring.
* Added a new query, `rb/suspicious-regexp-range`, to detect character ranges in regular expressions that seem to match
too many characters.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 0.3.2
lastReleaseVersion: 0.3.3

View File

@@ -1,5 +1,5 @@
name: codeql/ruby-queries
version: 0.3.3-dev
version: 0.3.3
groups:
- ruby
- queries