Merge remote-tracking branch 'origin/main' into criemen/pytest-swift

swift/ql/lib/CHANGELOG.md

@@ -1,3 +1,10 @@
+## 1.1.1
+
+### Minor Analysis Improvements
+
+* The model for `FileManager` no longer considers methods that return paths on the file system as taint sources. This is because these sources have been found to produce results of low value.
+* An error in the model for `URL.withUnsafeFileSystemRepresentation(_:)` has been corrected. This may result in new data flow paths being found during analysis.
+
 ## 1.1.0
 
 ### New Features

swift/ql/lib/change-notes/2024-07-24-url-model.md

@@ -1,4 +0,0 @@
----
-category: minorAnalysis
----
-* An error in the model for `URL.withUnsafeFileSystemRepresentation(_:)` has been corrected. This may result in new data flow paths being found during analysis.

swift/ql/lib/change-notes/2024-08-01-filemanager-model.md

@@ -1,4 +0,0 @@
----
-category: minorAnalysis
----
-* The model for `FileManager` no longer considers methods that return paths on the file system as taint sources. This is because these sources have been found to produce results of low value.

swift/ql/lib/change-notes/released/1.1.1.md

@@ -0,0 +1,6 @@
+## 1.1.1
+
+### Minor Analysis Improvements
+
+* The model for `FileManager` no longer considers methods that return paths on the file system as taint sources. This is because these sources have been found to produce results of low value.
+* An error in the model for `URL.withUnsafeFileSystemRepresentation(_:)` has been corrected. This may result in new data flow paths being found during analysis.

swift/ql/lib/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 1.1.0
+lastReleaseVersion: 1.1.1

swift/ql/lib/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/swift-all
-version: 1.1.1-dev
+version: 1.1.2-dev
 groups: swift
 extractor: swift
 dbscheme: swift.dbscheme

swift/ql/src/CHANGELOG.md

@@ -1,3 +1,10 @@
+## 1.0.5
+
+### Minor Analysis Improvements
+
+* The `swift/constant-salt` ("Use of constant salts") query now considers string concatenation and interpolation as a barrier. As a result, there will be fewer false positive results from this query involving constructed strings.
+* The `swift/constant-salt` ("Use of constant salts") query message now contains a link to the source node.
+
 ## 1.0.4
 
 No user-facing changes.

swift/ql/src/change-notes/released/1.0.5.md

@@ -1,5 +1,6 @@
----
-category: minorAnalysis
----
+## 1.0.5
+
+### Minor Analysis Improvements
+
 * The `swift/constant-salt` ("Use of constant salts") query now considers string concatenation and interpolation as a barrier. As a result, there will be fewer false positive results from this query involving constructed strings.
 * The `swift/constant-salt` ("Use of constant salts") query message now contains a link to the source node.

swift/ql/src/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 1.0.4
+lastReleaseVersion: 1.0.5

swift/ql/src/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/swift-queries
-version: 1.0.5-dev
+version: 1.0.6-dev
 groups:
   - swift
   - queries