Revert "Release preparation for version 2.20.1"

This commit is contained in:
Dave Bartolomeo
2025-01-07 12:14:27 -05:00
committed by GitHub
parent 5d0c55ec33
commit 22e030584c
168 changed files with 197 additions and 447 deletions

View File

@@ -1,14 +1,3 @@
## 3.1.0
### New Features
* Added support for parameter annotations in API graphs. This means that in a function definition such as `def foo(x: Bar): ...`, you can now use the `getInstanceFromAnnotation()` method to step from `Bar` to `x`. In addition to this, the `getAnInstance` method now also includes instances arising from parameter annotations.
### Minor Analysis Improvements
* Added modeling of `fastapi.Request` and `starlette.requests.Request` as sources of untrusted input,
and modeling of tainted data flow out of these request objects.
## 3.0.0
### Breaking Changes

View File

@@ -1,10 +1,5 @@
## 3.1.0
### New Features
---
category: feature
---
- Added support for parameter annotations in API graphs. This means that in a function definition such as `def foo(x: Bar): ...`, you can now use the `getInstanceFromAnnotation()` method to step from `Bar` to `x`. In addition to this, the `getAnInstance` method now also includes instances arising from parameter annotations.
### Minor Analysis Improvements
* Added modeling of `fastapi.Request` and `starlette.requests.Request` as sources of untrusted input,
and modeling of tainted data flow out of these request objects.

View File

@@ -0,0 +1,5 @@
---
category: minorAnalysis
---
* Added modeling of `fastapi.Request` and `starlette.requests.Request` as sources of untrusted input,
and modeling of tainted data flow out of these request objects.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 3.1.0
lastReleaseVersion: 3.0.0

View File

@@ -1,5 +1,5 @@
name: codeql/python-all
version: 3.1.0
version: 3.0.1-dev
groups: python
dbscheme: semmlecode.python.dbscheme
extractor: python

View File

@@ -1,9 +1,3 @@
## 1.4.0
### New Queries
* The Server Side Template Injection query (`py/template-injection`), originally contributed to the experimental query pack by @porcupineyhairs, has been promoted to the main query suite. This query finds instances of templates for a template engine such as Jinja being constructed with user input.
## 1.3.4
No user-facing changes.

View File

@@ -1,5 +1,4 @@
## 1.4.0
### New Queries
* The Server Side Template Injection query (`py/template-injection`), originally contributed to the experimental query pack by @porcupineyhairs, has been promoted to the main query suite. This query finds instances of templates for a template engine such as Jinja being constructed with user input.
---
category: newQuery
---
* The Server Side Template Injection query (`py/template-injection`), originally contributed to the experimental query pack by @porcupineyhairs, has been promoted to the main query suite. This query finds instances of templates for a template engine such as Jinja being constructed with user input.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 1.4.0
lastReleaseVersion: 1.3.4

View File

@@ -1,5 +1,5 @@
name: codeql/python-queries
version: 1.4.0
version: 1.3.5-dev
groups:
- python
- queries