Release preparation for version 2.19.2

This commit is contained in:
github-actions[bot]
2024-10-15 10:29:25 +00:00
parent 1626af0ae1
commit 255f55cf1a
150 changed files with 357 additions and 123 deletions

View File

@@ -1,3 +1,10 @@
## 2.0.2
### Minor Analysis Improvements
* Added taint flow model for `fopen` and related functions.
* The `SimpleRangeAnalysis` library (`semmle.code.cpp.rangeanalysis.SimpleRangeAnalysis`) now generates more precise ranges for calls to `fgetc` and `getc`.
## 2.0.1 ## 2.0.1
No user-facing changes. No user-facing changes.

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* The `SimpleRangeAnalysis` library (`semmle.code.cpp.rangeanalysis.SimpleRangeAnalysis`) now generates more precise ranges for calls to `fgetc` and `getc`.

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* Added taint flow model for `fopen` and related functions.

View File

@@ -0,0 +1,6 @@
## 2.0.2
### Minor Analysis Improvements
* Added taint flow model for `fopen` and related functions.
* The `SimpleRangeAnalysis` library (`semmle.code.cpp.rangeanalysis.SimpleRangeAnalysis`) now generates more precise ranges for calls to `fgetc` and `getc`.

View File

@@ -1,2 +1,2 @@
--- ---
lastReleaseVersion: 2.0.1 lastReleaseVersion: 2.0.2

View File

@@ -1,5 +1,5 @@
name: codeql/cpp-all name: codeql/cpp-all
version: 2.0.2-dev version: 2.0.2
groups: cpp groups: cpp
dbscheme: semmlecode.cpp.dbscheme dbscheme: semmlecode.cpp.dbscheme
extractor: cpp extractor: cpp

View File

@@ -1,3 +1,12 @@
## 1.2.5
### Minor Analysis Improvements
* The `cpp/unclear-array-index-validation` ("Unclear validation of array index") query has been improved to reduce false positives increase true positives.
* Fixed false positives in the `cpp/uninitialized-local` ("Potentially uninitialized local variable") query if there are extraction errors in the function.
* The `cpp/incorrect-string-type-conversion` query now produces fewer false positives caused by failure to detect byte arrays.
* The `cpp/incorrect-string-type-conversion` query now produces fewer false positives caused by failure to recognize dynamic checks prior to possible dangerous widening.
## 1.2.4 ## 1.2.4
### Minor Analysis Improvements ### Minor Analysis Improvements

View File

@@ -1,5 +0,0 @@
---
category: minorAnalysis
---
* The `cpp/incorrect-string-type-conversion` query now produces fewer false positives caused by failure to detect byte arrays.
* The `cpp/incorrect-string-type-conversion` query now produces fewer false positives caused by failure to recognize dynamic checks prior to possible dangerous widening.

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* Fixed false positives in the `cpp/uninitialized-local` ("Potentially uninitialized local variable") query if there are extraction errors in the function.

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* The `cpp/unclear-array-index-validation` ("Unclear validation of array index") query has been improved to reduce false positives increase true positives.

View File

@@ -0,0 +1,8 @@
## 1.2.5
### Minor Analysis Improvements
* The `cpp/unclear-array-index-validation` ("Unclear validation of array index") query has been improved to reduce false positives increase true positives.
* Fixed false positives in the `cpp/uninitialized-local` ("Potentially uninitialized local variable") query if there are extraction errors in the function.
* The `cpp/incorrect-string-type-conversion` query now produces fewer false positives caused by failure to detect byte arrays.
* The `cpp/incorrect-string-type-conversion` query now produces fewer false positives caused by failure to recognize dynamic checks prior to possible dangerous widening.

View File

@@ -1,2 +1,2 @@
--- ---
lastReleaseVersion: 1.2.4 lastReleaseVersion: 1.2.5

View File

@@ -1,5 +1,5 @@
name: codeql/cpp-queries name: codeql/cpp-queries
version: 1.2.5-dev version: 1.2.5
groups: groups:
- cpp - cpp
- queries - queries

View File

@@ -1,3 +1,7 @@
## 1.7.27
No user-facing changes.
## 1.7.26 ## 1.7.26
No user-facing changes. No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 1.7.27
No user-facing changes.

View File

@@ -1,2 +1,2 @@
--- ---
lastReleaseVersion: 1.7.26 lastReleaseVersion: 1.7.27

View File

@@ -1,5 +1,5 @@
name: codeql/csharp-solorigate-all name: codeql/csharp-solorigate-all
version: 1.7.27-dev version: 1.7.27
groups: groups:
- csharp - csharp
- solorigate - solorigate

View File

@@ -1,3 +1,7 @@
## 1.7.27
No user-facing changes.
## 1.7.26 ## 1.7.26
No user-facing changes. No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 1.7.27
No user-facing changes.

View File

@@ -1,2 +1,2 @@
--- ---
lastReleaseVersion: 1.7.26 lastReleaseVersion: 1.7.27

View File

@@ -1,5 +1,5 @@
name: codeql/csharp-solorigate-queries name: codeql/csharp-solorigate-queries
version: 1.7.27-dev version: 1.7.27
groups: groups:
- csharp - csharp
- solorigate - solorigate

View File

@@ -1,3 +1,7 @@
## 3.0.1
No user-facing changes.
## 3.0.0 ## 3.0.0
### Breaking Changes ### Breaking Changes

View File

@@ -0,0 +1,3 @@
## 3.0.1
No user-facing changes.

View File

@@ -1,2 +1,2 @@
--- ---
lastReleaseVersion: 3.0.0 lastReleaseVersion: 3.0.1

View File

@@ -1,5 +1,5 @@
name: codeql/csharp-all name: codeql/csharp-all
version: 3.0.1-dev version: 3.0.1
groups: csharp groups: csharp
dbscheme: semmlecode.csharp.dbscheme dbscheme: semmlecode.csharp.dbscheme
extractor: csharp extractor: csharp

View File

@@ -1,3 +1,7 @@
## 1.0.10
No user-facing changes.
## 1.0.9 ## 1.0.9
### Minor Analysis Improvements ### Minor Analysis Improvements

View File

@@ -0,0 +1,3 @@
## 1.0.10
No user-facing changes.

View File

@@ -1,2 +1,2 @@
--- ---
lastReleaseVersion: 1.0.9 lastReleaseVersion: 1.0.10

View File

@@ -1,5 +1,5 @@
name: codeql/csharp-queries name: codeql/csharp-queries
version: 1.0.10-dev version: 1.0.10
groups: groups:
- csharp - csharp
- queries - queries

View File

@@ -1,3 +1,7 @@
## 1.0.10
No user-facing changes.
## 1.0.9 ## 1.0.9
No user-facing changes. No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 1.0.10
No user-facing changes.

View File

@@ -1,2 +1,2 @@
--- ---
lastReleaseVersion: 1.0.9 lastReleaseVersion: 1.0.10

View File

@@ -1,5 +1,5 @@
name: codeql-go-consistency-queries name: codeql-go-consistency-queries
version: 1.0.10-dev version: 1.0.10
groups: groups:
- go - go
- queries - queries

View File

@@ -1,3 +1,11 @@
## 2.1.1
### Minor Analysis Improvements
* Added member predicates `StructTag.hasOwnFieldWithTag` and `Field.getTag`, which enable CodeQL queries to examine struct field tags.
* Added member predicate `InterfaceType.hasPrivateMethodWithQualifiedName`, which enables CodeQL queries to distinguish interfaces with matching non-exported method names that are declared in different packages, and are therefore incompatible.
* Local source models with the `stdin` source kind have been added for the variable `os.Stdin` and the functions `fmt.Scan`, `fmt.Scanf` and `fmt.Scanln`. You can optionally include threat models as appropriate when using the CodeQL CLI and in GitHub code scanning. For more information, see [Analyzing your code with CodeQL queries](https://docs.github.com/code-security/codeql-cli/getting-started-with-the-codeql-cli/analyzing-your-code-with-codeql-queries#including-model-packs-to-add-potential-sources-of-tainted-data>) and [Customizing your advanced setup for code scanning](https://docs.github.com/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/customizing-your-advanced-setup-for-code-scanning#extending-codeql-coverage-with-threat-models).
## 2.1.0 ## 2.1.0
### Deprecated APIs ### Deprecated APIs

View File

@@ -1,5 +0,0 @@
---
category: minorAnalysis
---
* Added member predicates `StructTag.hasOwnFieldWithTag` and `Field.getTag`, which enable CodeQL queries to examine struct field tags.
* Added member predicate `InterfaceType.hasPrivateMethodWithQualifiedName`, which enables CodeQL queries to distinguish interfaces with matching non-exported method names that are declared in different packages, and are therefore incompatible.

View File

@@ -1,4 +1,7 @@
--- ## 2.1.1
category: minorAnalysis
--- ### Minor Analysis Improvements
* Added member predicates `StructTag.hasOwnFieldWithTag` and `Field.getTag`, which enable CodeQL queries to examine struct field tags.
* Added member predicate `InterfaceType.hasPrivateMethodWithQualifiedName`, which enables CodeQL queries to distinguish interfaces with matching non-exported method names that are declared in different packages, and are therefore incompatible.
* Local source models with the `stdin` source kind have been added for the variable `os.Stdin` and the functions `fmt.Scan`, `fmt.Scanf` and `fmt.Scanln`. You can optionally include threat models as appropriate when using the CodeQL CLI and in GitHub code scanning. For more information, see [Analyzing your code with CodeQL queries](https://docs.github.com/code-security/codeql-cli/getting-started-with-the-codeql-cli/analyzing-your-code-with-codeql-queries#including-model-packs-to-add-potential-sources-of-tainted-data>) and [Customizing your advanced setup for code scanning](https://docs.github.com/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/customizing-your-advanced-setup-for-code-scanning#extending-codeql-coverage-with-threat-models). * Local source models with the `stdin` source kind have been added for the variable `os.Stdin` and the functions `fmt.Scan`, `fmt.Scanf` and `fmt.Scanln`. You can optionally include threat models as appropriate when using the CodeQL CLI and in GitHub code scanning. For more information, see [Analyzing your code with CodeQL queries](https://docs.github.com/code-security/codeql-cli/getting-started-with-the-codeql-cli/analyzing-your-code-with-codeql-queries#including-model-packs-to-add-potential-sources-of-tainted-data>) and [Customizing your advanced setup for code scanning](https://docs.github.com/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/customizing-your-advanced-setup-for-code-scanning#extending-codeql-coverage-with-threat-models).

View File

@@ -1,2 +1,2 @@
--- ---
lastReleaseVersion: 2.1.0 lastReleaseVersion: 2.1.1

View File

@@ -1,5 +1,5 @@
name: codeql/go-all name: codeql/go-all
version: 2.1.1-dev version: 2.1.1
groups: go groups: go
dbscheme: go.dbscheme dbscheme: go.dbscheme
extractor: go extractor: go

View File

@@ -1,3 +1,7 @@
## 1.1.1
No user-facing changes.
## 1.1.0 ## 1.1.0
### Query Metadata Changes ### Query Metadata Changes

View File

@@ -0,0 +1,3 @@
## 1.1.1
No user-facing changes.

View File

@@ -1,2 +1,2 @@
--- ---
lastReleaseVersion: 1.1.0 lastReleaseVersion: 1.1.1

View File

@@ -1,5 +1,5 @@
name: codeql/go-queries name: codeql/go-queries
version: 1.1.1-dev version: 1.1.1
groups: groups:
- go - go
- queries - queries

View File

@@ -1,3 +1,7 @@
## 1.0.10
No user-facing changes.
## 1.0.9 ## 1.0.9
No user-facing changes. No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 1.0.10
No user-facing changes.

View File

@@ -1,2 +1,2 @@
--- ---
lastReleaseVersion: 1.0.9 lastReleaseVersion: 1.0.10

View File

@@ -1,5 +1,5 @@
name: codeql/java-automodel-queries name: codeql/java-automodel-queries
version: 1.0.10-dev version: 1.0.10
groups: groups:
- java - java
- automodel - automodel

View File

@@ -1,3 +1,7 @@
## 4.1.1
No user-facing changes.
## 4.1.0 ## 4.1.0
### Deprecated APIs ### Deprecated APIs

View File

@@ -0,0 +1,3 @@
## 4.1.1
No user-facing changes.

View File

@@ -1,2 +1,2 @@
--- ---
lastReleaseVersion: 4.1.0 lastReleaseVersion: 4.1.1

View File

@@ -1,5 +1,5 @@
name: codeql/java-all name: codeql/java-all
version: 4.1.1-dev version: 4.1.1
groups: java groups: java
dbscheme: config/semmlecode.dbscheme dbscheme: config/semmlecode.dbscheme
extractor: java extractor: java

View File

@@ -1,3 +1,7 @@
## 1.1.7
No user-facing changes.
## 1.1.6 ## 1.1.6
### Minor Analysis Improvements ### Minor Analysis Improvements

View File

@@ -0,0 +1,3 @@
## 1.1.7
No user-facing changes.

View File

@@ -1,2 +1,2 @@
--- ---
lastReleaseVersion: 1.1.6 lastReleaseVersion: 1.1.7

View File

@@ -1,5 +1,5 @@
name: codeql/java-queries name: codeql/java-queries
version: 1.1.7-dev version: 1.1.7
groups: groups:
- java - java
- queries - queries

View File

@@ -1,3 +1,7 @@
## 2.0.2
No user-facing changes.
## 2.0.1 ## 2.0.1
No user-facing changes. No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 2.0.2
No user-facing changes.

View File

@@ -1,2 +1,2 @@
--- ---
lastReleaseVersion: 2.0.1 lastReleaseVersion: 2.0.2

View File

@@ -1,5 +1,5 @@
name: codeql/javascript-all name: codeql/javascript-all
version: 2.0.2-dev version: 2.0.2
groups: javascript groups: javascript
dbscheme: semmlecode.javascript.dbscheme dbscheme: semmlecode.javascript.dbscheme
extractor: javascript extractor: javascript

View File

@@ -1,3 +1,7 @@
## 1.2.2
No user-facing changes.
## 1.2.1 ## 1.2.1
No user-facing changes. No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 1.2.2
No user-facing changes.

View File

@@ -1,2 +1,2 @@
--- ---
lastReleaseVersion: 1.2.1 lastReleaseVersion: 1.2.2

View File

@@ -1,5 +1,5 @@
name: codeql/javascript-queries name: codeql/javascript-queries
version: 1.2.2-dev version: 1.2.2
groups: groups:
- javascript - javascript
- queries - queries

View File

@@ -1,3 +1,7 @@
## 1.0.10
No user-facing changes.
## 1.0.9 ## 1.0.9
No user-facing changes. No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 1.0.10
No user-facing changes.

View File

@@ -1,2 +1,2 @@
--- ---
lastReleaseVersion: 1.0.9 lastReleaseVersion: 1.0.10

View File

@@ -1,4 +1,4 @@
name: codeql/suite-helpers name: codeql/suite-helpers
version: 1.0.10-dev version: 1.0.10
groups: shared groups: shared
warnOnImplicitThis: true warnOnImplicitThis: true

View File

@@ -1,3 +1,13 @@
## 2.1.1
### Minor Analysis Improvements
* Modelled that `re.finditer` returns an iterable of `re.Match` objects. This is now understood by the API graph in many cases.
* Type tracking, and hence the API graph, is now able to correctly trace trough comprehensions.
* More precise modelling of the dataflow through comprehensions. In particular, captured variables are now handled correctly.
* Dataflow out of yield is added, allowing proper tracing through generators.
* Added several models of standard library functions and classes, in anticipation of no longer extracting the standard library in a future release.
## 2.1.0 ## 2.1.0
### New Features ### New Features

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* Added several models of standard library functions and classes, in anticipation of no longer extracting the standard library in a future release.

View File

@@ -1,5 +0,0 @@
---
category: minorAnalysis
---
* More precise modelling of the dataflow through comprehensions. In particular, captured variables are now handled correctly.
* Dataflow out of yield is added, allowing proper tracing through generators.

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* Type tracking, and hence the API graph, is now able to correctly trace trough comprehensions.

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* Modelled that `re.finditer` returns an iterable of `re.Match` objects. This is now understood by the API graph in many cases.

View File

@@ -0,0 +1,9 @@
## 2.1.1
### Minor Analysis Improvements
* Modelled that `re.finditer` returns an iterable of `re.Match` objects. This is now understood by the API graph in many cases.
* Type tracking, and hence the API graph, is now able to correctly trace trough comprehensions.
* More precise modelling of the dataflow through comprehensions. In particular, captured variables are now handled correctly.
* Dataflow out of yield is added, allowing proper tracing through generators.
* Added several models of standard library functions and classes, in anticipation of no longer extracting the standard library in a future release.

View File

@@ -1,2 +1,2 @@
--- ---
lastReleaseVersion: 2.1.0 lastReleaseVersion: 2.1.1

View File

@@ -1,5 +1,5 @@
name: codeql/python-all name: codeql/python-all
version: 2.1.1-dev version: 2.1.1
groups: python groups: python
dbscheme: semmlecode.python.dbscheme dbscheme: semmlecode.python.dbscheme
extractor: python extractor: python

View File

@@ -1,8 +1,12 @@
## 1.3.1
No user-facing changes.
## 1.3.0 ## 1.3.0
### New Queries ### New Queries
* The `py/cors-misconfiguration-with-credentials` query, which finds insecure CORS middleware configurations. * The experimental `py/cors-misconfiguration-with-credentials` query, which finds insecure CORS middleware configurations.
## 1.2.2 ## 1.2.2

View File

@@ -0,0 +1,3 @@
## 1.3.1
No user-facing changes.

View File

@@ -1,2 +1,2 @@
--- ---
lastReleaseVersion: 1.3.0 lastReleaseVersion: 1.3.1

View File

@@ -1,5 +1,5 @@
name: codeql/python-queries name: codeql/python-queries
version: 1.3.1-dev version: 1.3.1
groups: groups:
- python - python
- queries - queries

View File

@@ -1,3 +1,9 @@
## 2.0.2
### Minor Analysis Improvements
* The `ExtractionError` class has been split into `ExtractionError` and `ExtractionWarning`, reporting extraction errors and warnings respectively.
## 2.0.1 ## 2.0.1
No user-facing changes. No user-facing changes.

View File

@@ -1,4 +1,5 @@
--- ## 2.0.2
category: minorAnalysis
--- ### Minor Analysis Improvements
* The `ExtractionError` class has been split into `ExtractionError` and `ExtractionWarning`, reporting extraction errors and warnings respectively. * The `ExtractionError` class has been split into `ExtractionError` and `ExtractionWarning`, reporting extraction errors and warnings respectively.

View File

@@ -1,2 +1,2 @@
--- ---
lastReleaseVersion: 2.0.1 lastReleaseVersion: 2.0.2

View File

@@ -1,5 +1,5 @@
name: codeql/ruby-all name: codeql/ruby-all
version: 2.0.2-dev version: 2.0.2
groups: ruby groups: ruby
extractor: ruby extractor: ruby
dbscheme: ruby.dbscheme dbscheme: ruby.dbscheme

View File

@@ -1,3 +1,9 @@
## 1.1.5
### Minor Analysis Improvements
* The `rb/diagnostics/extraction-errors` diagnostic query has been split into `rb/diagnostics/extraction-errors` and `rb/diagnostics/extraction-warnings`, counting extraction errors and warnings respectively.
## 1.1.4 ## 1.1.4
No user-facing changes. No user-facing changes.

View File

@@ -1,4 +1,5 @@
--- ## 1.1.5
category: minorAnalysis
--- ### Minor Analysis Improvements
* The `rb/diagnostics/extraction-errors` diagnostic query has been split into `rb/diagnostics/extraction-errors` and `rb/diagnostics/extraction-warnings`, counting extraction errors and warnings respectively. * The `rb/diagnostics/extraction-errors` diagnostic query has been split into `rb/diagnostics/extraction-errors` and `rb/diagnostics/extraction-warnings`, counting extraction errors and warnings respectively.

View File

@@ -1,2 +1,2 @@
--- ---
lastReleaseVersion: 1.1.4 lastReleaseVersion: 1.1.5

View File

@@ -1,5 +1,5 @@
name: codeql/ruby-queries name: codeql/ruby-queries
version: 1.1.5-dev version: 1.1.5
groups: groups:
- ruby - ruby
- queries - queries

View File

@@ -1,3 +1,7 @@
## 1.0.10
No user-facing changes.
## 1.0.9 ## 1.0.9
No user-facing changes. No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 1.0.10
No user-facing changes.

View File

@@ -1,2 +1,2 @@
--- ---
lastReleaseVersion: 1.0.9 lastReleaseVersion: 1.0.10

View File

@@ -1,5 +1,5 @@
name: codeql/controlflow name: codeql/controlflow
version: 1.0.10-dev version: 1.0.10
groups: shared groups: shared
library: true library: true
dependencies: dependencies:

View File

@@ -1,3 +1,7 @@
## 1.1.4
No user-facing changes.
## 1.1.3 ## 1.1.3
No user-facing changes. No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 1.1.4
No user-facing changes.

View File

@@ -1,2 +1,2 @@
--- ---
lastReleaseVersion: 1.1.3 lastReleaseVersion: 1.1.4

View File

@@ -1,5 +1,5 @@
name: codeql/dataflow name: codeql/dataflow
version: 1.1.4-dev version: 1.1.4
groups: shared groups: shared
library: true library: true
dependencies: dependencies:

View File

@@ -1,3 +1,7 @@
## 1.0.10
No user-facing changes.
## 1.0.9 ## 1.0.9
No user-facing changes. No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 1.0.10
No user-facing changes.

View File

@@ -1,2 +1,2 @@
--- ---
lastReleaseVersion: 1.0.9 lastReleaseVersion: 1.0.10

View File

@@ -1,5 +1,5 @@
name: codeql/mad name: codeql/mad
version: 1.0.10-dev version: 1.0.10
groups: shared groups: shared
library: true library: true
dependencies: dependencies:

View File

@@ -1,3 +1,7 @@
## 1.0.10
No user-facing changes.
## 1.0.9 ## 1.0.9
No user-facing changes. No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 1.0.10
No user-facing changes.

Some files were not shown because too many files have changed in this diff Show More