Merge pull request #15974 from github/dbartol/rc3.13-mergeback

Mergeback from `rc/3.13`
This commit is contained in:
Arthur Baars
2024-03-20 10:13:32 +01:00
committed by GitHub
207 changed files with 1037 additions and 240 deletions

View File

@@ -1,3 +1,11 @@
## 0.0.18
No user-facing changes.
## 0.0.17
No user-facing changes.
## 0.0.16
No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 0.0.17
No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 0.0.18
No user-facing changes.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 0.0.16
lastReleaseVersion: 0.0.18

View File

@@ -1,5 +1,5 @@
name: codeql/java-automodel-queries
version: 0.0.17-dev
version: 0.0.18
groups:
- java
- automodel

View File

@@ -1,3 +1,18 @@
## 0.8.11
No user-facing changes.
## 0.8.10
### Minor Analysis Improvements
* Java expressions with erroneous types (e.g. the result of a call whose callee couldn't be resolved during extraction) are now given a CodeQL `ErrorType` more often.
### Bug Fixes
* Fixed the Java autobuilder overriding the version of Maven used by a project when the Maven wrapper `mvnw` is in use and the `maven-wrapper.jar` file is not present in the repository.
* Some flow steps related to `android.text.Editable.toString` that were accidentally disabled have been re-enabled.
## 0.8.9
### Deprecated APIs

View File

@@ -1,4 +0,0 @@
---
category: fix
---
* Some flow steps related to `android.text.Editable.toString` that were accidentally disabled have been re-enabled.

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* Java expressions with erroneous types (e.g. the result of a call whose callee couldn't be resolved during extraction) are now given a CodeQL `ErrorType` more often.

View File

@@ -1,4 +0,0 @@
---
category: fix
---
* Fixed the Java autobuilder overriding the version of Maven used by a project when the Maven wrapper `mvnw` is in use and the `maven-wrapper.jar` file is not present in the repository.

View File

@@ -0,0 +1,10 @@
## 0.8.10
### Minor Analysis Improvements
* Java expressions with erroneous types (e.g. the result of a call whose callee couldn't be resolved during extraction) are now given a CodeQL `ErrorType` more often.
### Bug Fixes
* Fixed the Java autobuilder overriding the version of Maven used by a project when the Maven wrapper `mvnw` is in use and the `maven-wrapper.jar` file is not present in the repository.
* Some flow steps related to `android.text.Editable.toString` that were accidentally disabled have been re-enabled.

View File

@@ -0,0 +1,3 @@
## 0.8.11
No user-facing changes.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 0.8.9
lastReleaseVersion: 0.8.11

View File

@@ -1,5 +1,5 @@
name: codeql/java-all
version: 0.8.10-dev
version: 0.8.11
groups: java
dbscheme: config/semmlecode.dbscheme
extractor: java

View File

@@ -1,3 +1,17 @@
## 0.8.11
No user-facing changes.
## 0.8.10
### New Queries
* Added a new query `java/android/insecure-local-key-gen` for finding instances of keys generated for biometric authentication in an insecure way.
### Minor Analysis Improvements
* To reduce the number of false positives in the query "Insertion of sensitive information into log files" (`java/sensitive-log`), variables with names that contain "null" (case-insensitively) are no longer considered sources of sensitive information.
## 0.8.9
### New Queries

View File

@@ -1,4 +0,0 @@
---
category: newQuery
---
* Added a new query `java/android/insecure-local-key-gen` for finding instances of keys generated for biometric authentication in an insecure way.

View File

@@ -1,4 +1,9 @@
---
category: minorAnalysis
---
## 0.8.10
### New Queries
* Added a new query `java/android/insecure-local-key-gen` for finding instances of keys generated for biometric authentication in an insecure way.
### Minor Analysis Improvements
* To reduce the number of false positives in the query "Insertion of sensitive information into log files" (`java/sensitive-log`), variables with names that contain "null" (case-insensitively) are no longer considered sources of sensitive information.

View File

@@ -0,0 +1,3 @@
## 0.8.11
No user-facing changes.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 0.8.9
lastReleaseVersion: 0.8.11

View File

@@ -1,5 +1,5 @@
name: codeql/java-queries
version: 0.8.10-dev
version: 0.8.11
groups:
- java
- queries