Release preparation for version 2.23.7

javascript/ql/lib/CHANGELOG.md

@@ -1,3 +1,9 @@
+## 2.6.16
+
+### Minor Analysis Improvements
+
+- JavaScript `DataFlow::globalVarRef` now recognizes `document.defaultView` as an alias of `window`, allowing flows such as `document.defaultView.history.pushState(...)` to be modeled and found by queries relying on `globalVarRef("history")`.
+
 ## 2.6.15
 
 No user-facing changes.

javascript/ql/lib/change-notes/released/2.6.16.md

@@ -1,5 +1,5 @@
----
-category: minorAnalysis
----
+## 2.6.16
+
+### Minor Analysis Improvements
 
 - JavaScript `DataFlow::globalVarRef` now recognizes `document.defaultView` as an alias of `window`, allowing flows such as `document.defaultView.history.pushState(...)` to be modeled and found by queries relying on `globalVarRef("history")`.

javascript/ql/lib/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 2.6.15
+lastReleaseVersion: 2.6.16

javascript/ql/lib/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/javascript-all
-version: 2.6.16-dev
+version: 2.6.16
 groups: javascript
 dbscheme: semmlecode.javascript.dbscheme
 extractor: javascript

javascript/ql/src/CHANGELOG.md

@@ -1,3 +1,9 @@
+## 2.2.1
+
+### Minor Analysis Improvements
+
+* Fixed a bug in the Next.js model that would cause the analysis to miss server-side taint sources in the `app/pages` folder.
+
 ## 2.2.0
 
 ### Query Metadata Changes

javascript/ql/src/change-notes/released/2.2.1.md

@@ -1,4 +1,5 @@
----
-category: minorAnalysis
----
+## 2.2.1
+
+### Minor Analysis Improvements
+
 * Fixed a bug in the Next.js model that would cause the analysis to miss server-side taint sources in the `app/pages` folder.

javascript/ql/src/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 2.2.0
+lastReleaseVersion: 2.2.1

javascript/ql/src/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/javascript-queries
-version: 2.2.1-dev
+version: 2.2.1
 groups:
   - javascript
   - queries