mirror of
https://github.com/github/codeql.git
synced 2026-04-23 07:45:17 +02:00
Release preparation for version 2.22.1
This commit is contained in:
github-actions[bot]
@@ -1,3 +1,15 @@
|
||||
## 2.6.6
|
||||
|
||||
### Minor Analysis Improvements
|
||||
|
||||
* Calls to `sinon.match()` are no longer incorrectly identified as regular expression operations.
|
||||
* Improved data flow tracking through middleware to handle default value and similar patterns.
|
||||
* Added `req._parsedUrl` as a remote input source.
|
||||
* Improved taint tracking through calls to `serialize-javascript`.
|
||||
* Removed `encodeURI` and `escape` functions from the sanitizer list for request forgery.
|
||||
* The JavaScript extractor now skips generated JavaScript files if the original TypeScript files are already present. It also skips any files in the output directory specified in the `compilerOptions` part of the `tsconfig.json` file.
|
||||
* Added support for Axios instances in the `axios` module.
|
||||
|
||||
## 2.6.5
|
||||
|
||||
### Minor Analysis Improvements
|
||||
|
||||
@@ -1,4 +0,0 @@
|
||||
---
|
||||
category: minorAnalysis
|
||||
---
|
||||
* Added support for Axios instances in the `axios` module.
|
||||
@@ -1,4 +0,0 @@
|
||||
---
|
||||
category: minorAnalysis
|
||||
---
|
||||
* The JavaScript extractor now skips generated JavaScript files if the original TypeScript files are already present. It also skips any files in the output directory specified in the `compilerOptions` part of the `tsconfig.json` file.
|
||||
@@ -1,4 +0,0 @@
|
||||
---
|
||||
category: minorAnalysis
|
||||
---
|
||||
* Removed `encodeURI` and `escape` functions from the sanitizer list for request forgery.
|
||||
@@ -1,5 +0,0 @@
|
||||
---
|
||||
category: minorAnalysis
|
||||
---
|
||||
* Improved data flow tracking through middleware to handle default value and similar patterns.
|
||||
* Added `req._parsedUrl` as a remote input source.
|
||||
@@ -1,4 +0,0 @@
|
||||
---
|
||||
category: minorAnalysis
|
||||
---
|
||||
* Improved taint tracking through calls to `serialize-javascript`.
|
||||
@@ -1,4 +0,0 @@
|
||||
---
|
||||
category: minorAnalysis
|
||||
---
|
||||
* Calls to `sinon.match()` are no longer incorrectly identified as regular expression operations.
|
||||
11
javascript/ql/lib/change-notes/released/2.6.6.md
Normal file
11
javascript/ql/lib/change-notes/released/2.6.6.md
Normal file
@@ -0,0 +1,11 @@
|
||||
## 2.6.6
|
||||
|
||||
### Minor Analysis Improvements
|
||||
|
||||
* Calls to `sinon.match()` are no longer incorrectly identified as regular expression operations.
|
||||
* Improved data flow tracking through middleware to handle default value and similar patterns.
|
||||
* Added `req._parsedUrl` as a remote input source.
|
||||
* Improved taint tracking through calls to `serialize-javascript`.
|
||||
* Removed `encodeURI` and `escape` functions from the sanitizer list for request forgery.
|
||||
* The JavaScript extractor now skips generated JavaScript files if the original TypeScript files are already present. It also skips any files in the output directory specified in the `compilerOptions` part of the `tsconfig.json` file.
|
||||
* Added support for Axios instances in the `axios` module.
|
||||
@@ -1,2 +1,2 @@
|
||||
---
|
||||
lastReleaseVersion: 2.6.5
|
||||
lastReleaseVersion: 2.6.6
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
name: codeql/javascript-all
|
||||
version: 2.6.6-dev
|
||||
version: 2.6.6
|
||||
groups: javascript
|
||||
dbscheme: semmlecode.javascript.dbscheme
|
||||
extractor: javascript
|
||||
|
||||
@@ -1,3 +1,18 @@
|
||||
## 1.7.0
|
||||
|
||||
### Query Metadata Changes
|
||||
|
||||
* The `quality` tag has been added to multiple JavaScript quality queries, with tags for `reliability` or `maintainability` categories and their sub-categories. See [Query file metadata and alert message style guide](https://github.com/github/codeql/blob/main/docs/query-metadata-style-guide.md#quality-query-sub-category-tags) for more information about these categories.
|
||||
* Added `reliability` tag to the `js/suspicious-method-name-declaration` query.
|
||||
* Added `reliability` and `language-features` tags to the `js/template-syntax-in-string-literal` query.
|
||||
|
||||
### Minor Analysis Improvements
|
||||
|
||||
* The `js/loop-iteration-skipped-due-to-shifting` query now has the `reliability` tag.
|
||||
* Fixed false positives in the `js/loop-iteration-skipped-due-to-shifting` query when the return value of `splice` is used to decide whether to adjust the loop counter.
|
||||
* Fixed false positives in the `js/template-syntax-in-string-literal` query where template syntax in string concatenation and "manual string interpolation" patterns were incorrectly flagged.
|
||||
* The `js/useless-expression` query now correctly flags only the innermost expressions with no effect, avoiding duplicate alerts on compound expressions.
|
||||
|
||||
## 1.6.2
|
||||
|
||||
No user-facing changes.
|
||||
|
||||
@@ -1,4 +0,0 @@
|
||||
---
|
||||
category: minorAnalysis
|
||||
---
|
||||
* The `js/useless-expression` query now correctly flags only the innermost expressions with no effect, avoiding duplicate alerts on compound expressions.
|
||||
@@ -1,4 +0,0 @@
|
||||
---
|
||||
category: minorAnalysis
|
||||
---
|
||||
* Fixed false positives in the `js/loop-iteration-skipped-due-to-shifting` query when the return value of `splice` is used to decide whether to adjust the loop counter.
|
||||
@@ -1,4 +0,0 @@
|
||||
---
|
||||
category: minorAnalysis
|
||||
---
|
||||
* The `js/loop-iteration-skipped-due-to-shifting` query now has the `reliability` tag.
|
||||
@@ -1,4 +0,0 @@
|
||||
---
|
||||
category: minorAnalysis
|
||||
---
|
||||
* Fixed false positives in the `js/template-syntax-in-string-literal` query where template syntax in string concatenation and "manual string interpolation" patterns were incorrectly flagged.
|
||||
@@ -1,4 +0,0 @@
|
||||
---
|
||||
category: queryMetadata
|
||||
---
|
||||
* Added `reliability` tag to the `js/suspicious-method-name-declaration` query.
|
||||
@@ -1,4 +0,0 @@
|
||||
---
|
||||
category: queryMetadata
|
||||
---
|
||||
* Added `reliability` and `language-features` tags to the `js/template-syntax-in-string-literal` query.
|
||||
@@ -1,4 +0,0 @@
|
||||
---
|
||||
category: queryMetadata
|
||||
---
|
||||
* The `quality` tag has been added to multiple JavaScript quality queries, with tags for `reliability` or `maintainability` categories and their sub-categories. See [Query file metadata and alert message style guide](https://github.com/github/codeql/blob/main/docs/query-metadata-style-guide.md#quality-query-sub-category-tags) for more information about these categories.
|
||||
14
javascript/ql/src/change-notes/released/1.7.0.md
Normal file
14
javascript/ql/src/change-notes/released/1.7.0.md
Normal file
@@ -0,0 +1,14 @@
|
||||
## 1.7.0
|
||||
|
||||
### Query Metadata Changes
|
||||
|
||||
* The `quality` tag has been added to multiple JavaScript quality queries, with tags for `reliability` or `maintainability` categories and their sub-categories. See [Query file metadata and alert message style guide](https://github.com/github/codeql/blob/main/docs/query-metadata-style-guide.md#quality-query-sub-category-tags) for more information about these categories.
|
||||
* Added `reliability` tag to the `js/suspicious-method-name-declaration` query.
|
||||
* Added `reliability` and `language-features` tags to the `js/template-syntax-in-string-literal` query.
|
||||
|
||||
### Minor Analysis Improvements
|
||||
|
||||
* The `js/loop-iteration-skipped-due-to-shifting` query now has the `reliability` tag.
|
||||
* Fixed false positives in the `js/loop-iteration-skipped-due-to-shifting` query when the return value of `splice` is used to decide whether to adjust the loop counter.
|
||||
* Fixed false positives in the `js/template-syntax-in-string-literal` query where template syntax in string concatenation and "manual string interpolation" patterns were incorrectly flagged.
|
||||
* The `js/useless-expression` query now correctly flags only the innermost expressions with no effect, avoiding duplicate alerts on compound expressions.
|
||||
@@ -1,2 +1,2 @@
|
||||
---
|
||||
lastReleaseVersion: 1.6.2
|
||||
lastReleaseVersion: 1.7.0
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
name: codeql/javascript-queries
|
||||
version: 1.6.3-dev
|
||||
version: 1.7.0
|
||||
groups:
|
||||
- javascript
|
||||
- queries
|
||||
|
||||
Reference in New Issue
Block a user