Release preparation for version 2.13.1

This commit is contained in:
github-actions[bot]
2023-04-28 12:14:35 +00:00
parent 205bb76036
commit 3bd29171fb
106 changed files with 276 additions and 106 deletions

View File

@@ -1,3 +1,18 @@
## 0.6.1
### Deprecated APIs
* The `sensitiveResultReceiver` predicate in `SensitiveResultReceiverQuery.qll` has been deprecated and replaced with `isSensitiveResultReceiver` in order to use the new dataflow API.
### Minor Analysis Improvements
* Changed some models of Spring's `FileCopyUtils.copy` to be path injection sinks instead of summaries.
* Added models for the following packages:
* java.nio.file
* Added models for [Apache HttpComponents](https://hc.apache.org/) versions 4 and 5.
* Added sanitizers that recognize line breaks to the query `java/log-injection`.
* Added new flow steps for `java.util.StringJoiner`.
## 0.6.0
### Deprecated APIs

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* Added new flow steps for `java.util.StringJoiner`.

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* Added sanitizers that recognize line breaks to the query `java/log-injection`.

View File

@@ -1,4 +0,0 @@
---
category: deprecated
---
* The `sensitiveResultReceiver` predicate in `SensitiveResultReceiverQuery.qll` has been deprecated and replaced with `isSensitiveResultReceiver` in order to use the new dataflow API.

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* Added models for [Apache HttpComponents](https://hc.apache.org/) versions 4 and 5.

View File

@@ -1,5 +0,0 @@
---
category: minorAnalysis
---
* Added models for the following packages:
* java.nio.file

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* Changed some models of Spring's `FileCopyUtils.copy` to be path injection sinks instead of summaries.

View File

@@ -0,0 +1,14 @@
## 0.6.1
### Deprecated APIs
* The `sensitiveResultReceiver` predicate in `SensitiveResultReceiverQuery.qll` has been deprecated and replaced with `isSensitiveResultReceiver` in order to use the new dataflow API.
### Minor Analysis Improvements
* Changed some models of Spring's `FileCopyUtils.copy` to be path injection sinks instead of summaries.
* Added models for the following packages:
* java.nio.file
* Added models for [Apache HttpComponents](https://hc.apache.org/) versions 4 and 5.
* Added sanitizers that recognize line breaks to the query `java/log-injection`.
* Added new flow steps for `java.util.StringJoiner`.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 0.6.0
lastReleaseVersion: 0.6.1

View File

@@ -1,5 +1,5 @@
name: codeql/java-all
version: 0.6.1-dev
version: 0.6.1
groups: java
dbscheme: config/semmlecode.dbscheme
extractor: java

View File

@@ -1,3 +1,7 @@
## 0.6.1
No user-facing changes.
## 0.6.0
### New Queries

View File

@@ -0,0 +1,3 @@
## 0.6.1
No user-facing changes.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 0.6.0
lastReleaseVersion: 0.6.1

View File

@@ -1,5 +1,5 @@
name: codeql/java-queries
version: 0.6.1-dev
version: 0.6.1
groups:
- java
- queries