mirror of
https://github.com/github/codeql.git
synced 2025-12-17 01:03:14 +01:00
Revert "Release preparation for version 2.20.1"
This commit is contained in:
@@ -1,14 +1,3 @@
|
||||
## 3.1.0
|
||||
|
||||
### New Features
|
||||
|
||||
* Added support for parameter annotations in API graphs. This means that in a function definition such as `def foo(x: Bar): ...`, you can now use the `getInstanceFromAnnotation()` method to step from `Bar` to `x`. In addition to this, the `getAnInstance` method now also includes instances arising from parameter annotations.
|
||||
|
||||
### Minor Analysis Improvements
|
||||
|
||||
* Added modeling of `fastapi.Request` and `starlette.requests.Request` as sources of untrusted input,
|
||||
and modeling of tainted data flow out of these request objects.
|
||||
|
||||
## 3.0.0
|
||||
|
||||
### Breaking Changes
|
||||
|
||||
@@ -1,10 +1,5 @@
|
||||
## 3.1.0
|
||||
|
||||
### New Features
|
||||
---
|
||||
category: feature
|
||||
---
|
||||
|
||||
- Added support for parameter annotations in API graphs. This means that in a function definition such as `def foo(x: Bar): ...`, you can now use the `getInstanceFromAnnotation()` method to step from `Bar` to `x`. In addition to this, the `getAnInstance` method now also includes instances arising from parameter annotations.
|
||||
|
||||
### Minor Analysis Improvements
|
||||
|
||||
* Added modeling of `fastapi.Request` and `starlette.requests.Request` as sources of untrusted input,
|
||||
and modeling of tainted data flow out of these request objects.
|
||||
@@ -0,0 +1,5 @@
|
||||
---
|
||||
category: minorAnalysis
|
||||
---
|
||||
* Added modeling of `fastapi.Request` and `starlette.requests.Request` as sources of untrusted input,
|
||||
and modeling of tainted data flow out of these request objects.
|
||||
@@ -1,2 +1,2 @@
|
||||
---
|
||||
lastReleaseVersion: 3.1.0
|
||||
lastReleaseVersion: 3.0.0
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
name: codeql/python-all
|
||||
version: 3.1.0
|
||||
version: 3.0.1-dev
|
||||
groups: python
|
||||
dbscheme: semmlecode.python.dbscheme
|
||||
extractor: python
|
||||
|
||||
@@ -1,9 +1,3 @@
|
||||
## 1.4.0
|
||||
|
||||
### New Queries
|
||||
|
||||
* The Server Side Template Injection query (`py/template-injection`), originally contributed to the experimental query pack by @porcupineyhairs, has been promoted to the main query suite. This query finds instances of templates for a template engine such as Jinja being constructed with user input.
|
||||
|
||||
## 1.3.4
|
||||
|
||||
No user-facing changes.
|
||||
|
||||
@@ -1,5 +1,4 @@
|
||||
## 1.4.0
|
||||
|
||||
### New Queries
|
||||
|
||||
* The Server Side Template Injection query (`py/template-injection`), originally contributed to the experimental query pack by @porcupineyhairs, has been promoted to the main query suite. This query finds instances of templates for a template engine such as Jinja being constructed with user input.
|
||||
---
|
||||
category: newQuery
|
||||
---
|
||||
* The Server Side Template Injection query (`py/template-injection`), originally contributed to the experimental query pack by @porcupineyhairs, has been promoted to the main query suite. This query finds instances of templates for a template engine such as Jinja being constructed with user input.
|
||||
@@ -1,2 +1,2 @@
|
||||
---
|
||||
lastReleaseVersion: 1.4.0
|
||||
lastReleaseVersion: 1.3.4
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
name: codeql/python-queries
|
||||
version: 1.4.0
|
||||
version: 1.3.5-dev
|
||||
groups:
|
||||
- python
|
||||
- queries
|
||||
|
||||
Reference in New Issue
Block a user