Release preparation for version 2.7.3

cpp/ql/lib/CHANGELOG.md

@@ -1,7 +1,7 @@
----
+## 0.0.4
-category: feature
+
-tags: [lgtm,codescanning]
+### New Features
----
+
 * The QL library `semmle.code.cpp.commons.Exclusions` now contains a predicate
   `isFromSystemMacroDefinition` for identifying code that originates from a
   macro outside the project being analyzed.

cpp/ql/lib/change-notes/released/0.0.4.md

@@ -0,0 +1,7 @@
+## 0.0.4
+
+### New Features
+
+* The QL library `semmle.code.cpp.commons.Exclusions` now contains a predicate
+  `isFromSystemMacroDefinition` for identifying code that originates from a
+  macro outside the project being analyzed.

cpp/ql/lib/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.3
+lastReleaseVersion: 0.0.4

cpp/ql/lib/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/cpp-all
-version: 0.0.3
+version: 0.0.4
 groups: cpp
 dbscheme: semmlecode.cpp.dbscheme
 extractor: cpp

cpp/ql/src/CHANGELOG.md

@@ -1,5 +1,5 @@
----
+## 0.0.4
-category: newQuery
+
-tags: [lgtm,codescanning]
+### New Queries
----
+
 * A new query `cpp/non-https-url` has been added for C/C++. The query flags uses of `http` URLs that might be better replaced with `https`.

cpp/ql/src/change-notes/released/0.0.4.md

@@ -0,0 +1,5 @@
+## 0.0.4
+
+### New Queries
+
+* A new query `cpp/non-https-url` has been added for C/C++. The query flags uses of `http` URLs that might be better replaced with `https`.

cpp/ql/src/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.3
+lastReleaseVersion: 0.0.4

cpp/ql/src/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/cpp-queries
-version: 0.0.3
+version: 0.0.4
 groups: cpp
 dependencies:
     codeql/cpp-all: "*"

cpp/upgrades/CHANGELOG.md

@@ -0,0 +1 @@
+## 0.0.4

cpp/upgrades/change-notes/released/0.0.4.md

@@ -0,0 +1 @@
+## 0.0.4

cpp/upgrades/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.3
+lastReleaseVersion: 0.0.4

cpp/upgrades/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/cpp-upgrades
 groups: cpp
 upgrades: .
-version: 0.0.3
+version: 0.0.4
 library: true

csharp/ql/lib/CHANGELOG.md

@@ -0,0 +1 @@
+## 0.0.4

csharp/ql/lib/change-notes/released/0.0.4.md

@@ -0,0 +1 @@
+## 0.0.4

csharp/ql/lib/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.3
+lastReleaseVersion: 0.0.4

csharp/ql/lib/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/csharp-all
-version: 0.0.3
+version: 0.0.4
 groups: csharp
 dbscheme: semmlecode.csharp.dbscheme
 extractor: csharp

csharp/ql/src/CHANGELOG.md

@@ -0,0 +1 @@
+## 0.0.4

csharp/ql/src/change-notes/released/0.0.4.md

@@ -0,0 +1 @@
+## 0.0.4

csharp/ql/src/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.3
+lastReleaseVersion: 0.0.4

csharp/ql/src/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/csharp-queries
-version: 0.0.3
+version: 0.0.4
 groups: csharp
 suites: codeql-suites
 extractor: csharp

csharp/upgrades/CHANGELOG.md

@@ -0,0 +1 @@
+## 0.0.4

csharp/upgrades/change-notes/released/0.0.4.md

@@ -0,0 +1 @@
+## 0.0.4

csharp/upgrades/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.3
+lastReleaseVersion: 0.0.4

csharp/upgrades/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/csharp-upgrades
 groups: csharp
-version: 0.0.3
+version: 0.0.4
 upgrades: .
 library: true

java/ql/lib/CHANGELOG.md

@@ -1,6 +1,7 @@
----
+## 0.0.4
-category: fix
+
-tags: [lgtm,codescanning]
+### Bug Fixes
----
+
 * `CharacterLiteral`'s `getCodePointValue` predicate now returns the correct value for UTF-16 surrogates.
 * The `RangeAnalysis` module and the `java/constant-comparison` queries no longer raise false alerts regarding comparisons with Unicode surrogate character literals.
+* The predicate `Method.overrides(Method)` was accidentally transitive. This has been fixed. This fix also affects `Method.overridesOrInstantiates(Method)` and `Method.getASourceOverriddenMethod()`.

java/ql/lib/change-notes/2021-11-15-overrides.md

@@ -1,5 +0,0 @@
----
-category: fix
-tags: [lgtm,codescanning]
----
-* The predicate `Method.overrides(Method)` was accidentally transitive. This has been fixed. This fix also affects `Method.overridesOrInstantiates(Method)` and `Method.getASourceOverriddenMethod()`.

java/ql/lib/change-notes/released/0.0.4.md

@@ -0,0 +1,7 @@
+## 0.0.4
+
+### Bug Fixes
+
+* `CharacterLiteral`'s `getCodePointValue` predicate now returns the correct value for UTF-16 surrogates.
+* The `RangeAnalysis` module and the `java/constant-comparison` queries no longer raise false alerts regarding comparisons with Unicode surrogate character literals.
+* The predicate `Method.overrides(Method)` was accidentally transitive. This has been fixed. This fix also affects `Method.overridesOrInstantiates(Method)` and `Method.getASourceOverriddenMethod()`.

java/ql/lib/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.3
+lastReleaseVersion: 0.0.4

java/ql/lib/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/java-all
-version: 0.0.3
+version: 0.0.4
 groups: java
 dbscheme: config/semmlecode.dbscheme
 extractor: java

java/ql/src/CHANGELOG.md

@@ -0,0 +1 @@
+## 0.0.4

java/ql/src/change-notes/released/0.0.4.md

@@ -0,0 +1 @@
+## 0.0.4

java/ql/src/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.3
+lastReleaseVersion: 0.0.4

java/ql/src/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/java-queries
-version: 0.0.3
+version: 0.0.4
 groups: java
 suites: codeql-suites
 extractor: java

java/upgrades/CHANGELOG.md

@@ -0,0 +1 @@
+## 0.0.4

java/upgrades/change-notes/released/0.0.4.md

@@ -0,0 +1 @@
+## 0.0.4

java/upgrades/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.3
+lastReleaseVersion: 0.0.4

java/upgrades/qlpack.yml

@@ -2,4 +2,4 @@ name: codeql/java-upgrades
 groups: java
 upgrades: .
 library: true
-version: 0.0.3
+version: 0.0.4

javascript/ql/lib/CHANGELOG.md

@@ -0,0 +1 @@
+## 0.0.5

javascript/ql/lib/change-notes/released/0.0.5.md

@@ -0,0 +1 @@
+## 0.0.5

javascript/ql/lib/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.4
+lastReleaseVersion: 0.0.5

javascript/ql/lib/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/javascript-all
-version: 0.0.4
+version: 0.0.5
 groups: javascript
 dbscheme: semmlecode.javascript.dbscheme
 extractor: javascript

javascript/ql/src/CHANGELOG.md

@@ -0,0 +1,7 @@
+## 0.0.5
+
+### New Queries
+
+* The `js/sensitive-get-query` query has been added. It highlights GET requests that read sensitive information from the query string.
+* The `js/insufficient-key-size` query has been added. It highlights the creation of cryptographic keys with a short key size.
+* The `js/session-fixation` query has been added. It highlights servers that reuse a session after a user has logged in.

javascript/ql/src/change-notes/2021-11-02-insufficient-key-size.md

@@ -1,5 +0,0 @@
----
-category: newQuery
-tags: [lgtm, codescanning]
----
-* The `js/insufficient-key-size` query has been added. It highlights the creation of cryptographic keys with a short key size.

javascript/ql/src/change-notes/2021-11-02-session-fixation.md

@@ -1,5 +0,0 @@
----
-category: newQuery
-tags: [lgtm, codescanning]
----
-* The `js/session-fixation` query has been added. It highlights servers that reuse a session after a user has logged in.

javascript/ql/src/change-notes/2021-11-04-sensitive-get-query.md

@@ -1,5 +0,0 @@
----
-category: newQuery
-tags: [lgtm, codescanning]
----
-* The `js/sensitive-get-query` query has been added. It highlights GET requests that read sensitive information from the query string.

javascript/ql/src/change-notes/released/0.0.5.md

@@ -0,0 +1,7 @@
+## 0.0.5
+
+### New Queries
+
+* The `js/sensitive-get-query` query has been added. It highlights GET requests that read sensitive information from the query string.
+* The `js/insufficient-key-size` query has been added. It highlights the creation of cryptographic keys with a short key size.
+* The `js/session-fixation` query has been added. It highlights servers that reuse a session after a user has logged in.

javascript/ql/src/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.4
+lastReleaseVersion: 0.0.5

javascript/ql/src/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/javascript-queries
-version: 0.0.4
+version: 0.0.5
 groups: javascript
 suites: codeql-suites
 extractor: javascript

javascript/upgrades/CHANGELOG.md

@@ -0,0 +1 @@
+## 0.0.5

javascript/upgrades/change-notes/released/0.0.5.md

@@ -0,0 +1 @@
+## 0.0.5

javascript/upgrades/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.4
+lastReleaseVersion: 0.0.5

javascript/upgrades/qlpack.yml

@@ -2,4 +2,4 @@ name: codeql/javascript-upgrades
 groups: javascript
 upgrades: .
 library: true
-version: 0.0.4
+version: 0.0.5

python/ql/lib/CHANGELOG.md

@@ -0,0 +1,10 @@
+## 0.0.4
+
+### Major Analysis Improvements
+
+* Added modeling of `os.stat`, `os.lstat`, `os.statvfs`, `os.fstat`, and `os.fstatvfs`, which are new sinks for the _Uncontrolled data used in path expression_ (`py/path-injection`) query.
+* Added modeling of the `posixpath`, `ntpath`, and `genericpath` modules for path operations (although these are not supposed to be used), resulting in new sinks for the _Uncontrolled data used in path expression_ (`py/path-injection`) query.
+* Added modeling of `wsgiref.simple_server` applications, leading to new remote flow sources.
+* Added modeling of `aiopg` for sinks executing SQL.
+* Added modeling of HTTP requests and responses when using `flask_admin` (`Flask-Admin` PyPI package), which leads to additional remote flow sources.
+* Added modeling of the PyPI package `toml`, which provides encoding/decoding of TOML documents, leading to new taint-tracking steps.

python/ql/lib/change-notes/2021-11-02-flask_admin.md

@@ -1,5 +0,0 @@
----
-category: majorAnalysis
-tags: [lgtm, codescanning]
----
-* Added modeling of HTTP requests and responses when using `flask_admin` (`Flask-Admin` PyPI package), which leads to additional remote flow sources.

python/ql/lib/change-notes/2021-11-02-toml.md

@@ -1,5 +0,0 @@
----
-category: majorAnalysis
-tags: [lgtm, codescanning]
----
-* Added modeling of the PyPI package `toml`, which provides encoding/decoding of TOML documents, leading to new taint-tracking steps.

python/ql/lib/change-notes/2021-11-09-model-aiopg.md

@@ -1,5 +0,0 @@
----
-category: majorAnalysis
-tags: [lgtm, codescanning]
----
-* Added modeling of `aiopg` for sinks executing SQL.

python/ql/lib/change-notes/2021-11-15-model-wsgiref-simple-server-app.md

@@ -1,5 +0,0 @@
----
-category: majorAnalysis
-tags: [lgtm,codescanning]
----
-* Added modeling of `wsgiref.simple_server` applications, leading to new remote flow sources.

python/ql/lib/change-notes/2021-11-16-os-stat.md

@@ -1,5 +0,0 @@
----
-category: majorAnalysis
-tags: [lgtm,codescanning]
----
-* Added modeling of `os.stat`, `os.lstat`, `os.statvfs`, `os.fstat`, and `os.fstatvfs`, which are new sinks for the _Uncontrolled data used in path expression_ (`py/path-injection`) query.

python/ql/lib/change-notes/2021-11-16-posixpath.md

@@ -1,5 +0,0 @@
----
-category: majorAnalysis
-tags: [lgtm,codescanning]
----
-* Added modeling of the `posixpath`, `ntpath`, and `genericpath` modules for path operations (although these are not supposed to be used), resulting in new sinks for the _Uncontrolled data used in path expression_ (`py/path-injection`) query.

python/ql/lib/change-notes/released/0.0.4.md

@@ -0,0 +1,10 @@
+## 0.0.4
+
+### Major Analysis Improvements
+
+* Added modeling of `os.stat`, `os.lstat`, `os.statvfs`, `os.fstat`, and `os.fstatvfs`, which are new sinks for the _Uncontrolled data used in path expression_ (`py/path-injection`) query.
+* Added modeling of the `posixpath`, `ntpath`, and `genericpath` modules for path operations (although these are not supposed to be used), resulting in new sinks for the _Uncontrolled data used in path expression_ (`py/path-injection`) query.
+* Added modeling of `wsgiref.simple_server` applications, leading to new remote flow sources.
+* Added modeling of `aiopg` for sinks executing SQL.
+* Added modeling of HTTP requests and responses when using `flask_admin` (`Flask-Admin` PyPI package), which leads to additional remote flow sources.
+* Added modeling of the PyPI package `toml`, which provides encoding/decoding of TOML documents, leading to new taint-tracking steps.

python/ql/lib/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.3
+lastReleaseVersion: 0.0.4

python/ql/lib/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/python-all
-version: 0.0.3
+version: 0.0.4
 groups: python
 dbscheme: semmlecode.python.dbscheme
 extractor: python

python/ql/src/CHANGELOG.md

@@ -1,5 +1,5 @@
----
+## 0.0.4
-category: queryMetadata
+
-tags: [lgtm,codescanning]
+### Query Metadata Changes
----
+
 * Fixed the query ids of two queries that are meant for manual exploration: `python/count-untrusted-data-external-api` and `python/untrusted-data-to-external-api` have been changed to `py/count-untrusted-data-external-api` and `py/untrusted-data-to-external-api`.

python/ql/src/change-notes/released/0.0.4.md

@@ -0,0 +1,5 @@
+## 0.0.4
+
+### Query Metadata Changes
+
+* Fixed the query ids of two queries that are meant for manual exploration: `python/count-untrusted-data-external-api` and `python/untrusted-data-to-external-api` have been changed to `py/count-untrusted-data-external-api` and `py/untrusted-data-to-external-api`.

python/ql/src/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.3
+lastReleaseVersion: 0.0.4

python/ql/src/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/python-queries
-version: 0.0.3
+version: 0.0.4
 groups: python
 dependencies:
     codeql/python-all: "*"

python/upgrades/CHANGELOG.md

@@ -0,0 +1 @@
+## 0.0.4

python/upgrades/change-notes/released/0.0.4.md

@@ -0,0 +1 @@
+## 0.0.4

python/upgrades/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.3
+lastReleaseVersion: 0.0.4

python/upgrades/qlpack.yml

@@ -2,4 +2,4 @@ name: codeql/python-upgrades
 groups: python
 upgrades: .
 library: true
-version: 0.0.3
+version: 0.0.4

ruby/ql/lib/CHANGELOG.md

@@ -0,0 +1 @@
+## 0.0.4

ruby/ql/lib/change-notes/released/0.0.4.md

@@ -0,0 +1 @@
+## 0.0.4

ruby/ql/lib/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.3
+lastReleaseVersion: 0.0.4

ruby/ql/lib/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/ruby-all
-version: 0.0.3
+version: 0.0.4
 groups: ruby
 extractor: ruby
 dbscheme: ruby.dbscheme

ruby/ql/src/CHANGELOG.md

@@ -0,0 +1,10 @@
+## 0.0.4
+
+### New Queries
+
+* A new query (`rb/request-forgery`) has been added. The query finds HTTP requests made with user-controlled URLs.
+* A new query (`rb/csrf-protection-disabled`) has been added. The query finds cases where cross-site forgery protection is explictly disabled.
+
+### Query Metadata Changes
+
+* The precision of "Hard-coded credentials" (`rb/hardcoded-credentials`) has been decreased from "high" to "medium". This query will no longer be run and displayed by default on Code Scanning and LGTM.

ruby/ql/src/change-notes/2021-11-04-csrf-protection-disabled.md

@@ -1,5 +0,0 @@
----
-category: newQuery
-tags: [lgtm,codescanning]
----
-* A new query (`rb/csrf-protection-disabled`) has been added. The query finds cases where cross-site forgery protection is explictly disabled.

ruby/ql/src/change-notes/2021-11-08-hardcoded-credentials-downgrade.md

@@ -1,5 +0,0 @@
----
-category: queryMetadata
-tags: [lgtm, codescanning]
----
-* The precision of "Hard-coded credentials" (`rb/hardcoded-credentials`) has been decreased from "high" to "medium". This query will no longer be run and displayed by default on Code Scanning and LGTM.

ruby/ql/src/change-notes/2021-11-09-request-forgery.md

@@ -1,5 +0,0 @@
----
-category: newQuery
-tags: [lgtm,codescanning]
----
-* A new query (`rb/request-forgery`) has been added. The query finds HTTP requests made with user-controlled URLs.

ruby/ql/src/change-notes/released/0.0.4.md

@@ -0,0 +1,10 @@
+## 0.0.4
+
+### New Queries
+
+* A new query (`rb/request-forgery`) has been added. The query finds HTTP requests made with user-controlled URLs.
+* A new query (`rb/csrf-protection-disabled`) has been added. The query finds cases where cross-site forgery protection is explictly disabled.
+
+### Query Metadata Changes
+
+* The precision of "Hard-coded credentials" (`rb/hardcoded-credentials`) has been decreased from "high" to "medium". This query will no longer be run and displayed by default on Code Scanning and LGTM.

ruby/ql/src/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.3
+lastReleaseVersion: 0.0.4

ruby/ql/src/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/ruby-queries
-version: 0.0.3
+version: 0.0.4
 groups: ruby
 suites: codeql-suites
 defaultSuiteFile: codeql-suites/ruby-code-scanning.qls