hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-02 04:05:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #14074 from github/post-release-prep/codeql-cli-2.14.3

Browse Source 
Post-release preparation for codeql-cli-2.14.3
This commit is contained in:
Dave Bartolomeo
2023-08-28 13:34:10 -04:00
committed by GitHub
parent 2e981e330b 3eba77421a
commit 3343b78015
129 changed files with 323 additions and 122 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
python/ql/lib/change-notes/2023-07-12-aiohttp-improvements.md
View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* Improvements of the `aiohttp` models including remote-flow-sources from type annotations, new path manipulation, and SSRF sinks.

4
python/ql/lib/change-notes/2023-08-07-serverless-sources.md
View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* Added modeling of AWS Lambda handlers that can be identified with `AWS::Serverless::Function` in YAML files, where the event parameter is modeled as a remote-flow-source.

4
python/ql/lib/change-notes/2023-08-08-relax-module-resolution.md
View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* Support analyzing packages (folders with python code) that do not have `__init__.py` files, although this is technically required, we see real world projects that don't have this.

4
python/ql/lib/change-notes/2023-08-10-fix-alias-locations.md
View File

@@ -1,4 +0,0 @@
---
category: fix
---
* Fixed the computation of locations for imports with aliases in jump-to-definition.

11
python/ql/lib/change-notes/released/0.10.3.md Normal file
View File

@@ -0,0 +1,11 @@
## 0.10.3
### Minor Analysis Improvements
* Support analyzing packages (folders with python code) that do not have `__init__.py` files, although this is technically required, we see real world projects that don't have this.
* Added modeling of AWS Lambda handlers that can be identified with `AWS::Serverless::Function` in YAML files, where the event parameter is modeled as a remote-flow-source.
* Improvements of the `aiohttp` models including remote-flow-sources from type annotations, new path manipulation, and SSRF sinks.
### Bug Fixes
* Fixed the computation of locations for imports with aliases in jump-to-definition.