Release preparation for version 2.22.1

javascript/ql/lib/CHANGELOG.md

@@ -1,3 +1,15 @@
+## 2.6.6
+
+### Minor Analysis Improvements
+
+* Calls to `sinon.match()` are no longer incorrectly identified as regular expression operations.
+* Improved data flow tracking through middleware to handle default value and similar patterns.
+* Added `req._parsedUrl` as a remote input source.
+* Improved taint tracking through calls to `serialize-javascript`.
+* Removed `encodeURI` and `escape` functions from the sanitizer list for request forgery.
+* The JavaScript extractor now skips generated JavaScript files if the original TypeScript files are already present. It also skips any files in the output directory specified in the `compilerOptions` part of the `tsconfig.json` file.
+* Added support for Axios instances in the `axios` module.
+
 ## 2.6.5
 
 ### Minor Analysis Improvements

javascript/ql/lib/change-notes/2025-06-03-axios-instance-support.md

@@ -1,4 +0,0 @@
----
-category: minorAnalysis
----
-* Added support for Axios instances in the `axios` module.

javascript/ql/lib/change-notes/2025-06-05-skip-obviously-generated-files.md

@@ -1,4 +0,0 @@
----
-category: minorAnalysis
----
-* The JavaScript extractor now skips generated JavaScript files if the original TypeScript files are already present. It also skips any files in the output directory specified in the `compilerOptions` part of the `tsconfig.json` file.

javascript/ql/lib/change-notes/2025-06-13-remove-encodeuri.md

@@ -1,4 +0,0 @@
----
-category: minorAnalysis
----
-* Removed `encodeURI` and `escape` functions from the sanitizer list for request forgery.

javascript/ql/lib/change-notes/2025-06-16-middleware-express.md

@@ -1,5 +0,0 @@
----
-category: minorAnalysis
----
-* Improved data flow tracking through middleware to handle default value and similar patterns.
-* Added `req._parsedUrl` as a remote input source.

javascript/ql/lib/change-notes/2025-06-16-serialize-js.md

@@ -1,4 +0,0 @@
----
-category: minorAnalysis
----
-* Improved taint tracking through calls to `serialize-javascript`.

javascript/ql/lib/change-notes/2025-06-20-sinon.md

@@ -1,4 +0,0 @@
----
-category: minorAnalysis
----
-* Calls to `sinon.match()` are no longer incorrectly identified as regular expression operations.

javascript/ql/lib/change-notes/released/2.6.6.md

@@ -0,0 +1,11 @@
+## 2.6.6
+
+### Minor Analysis Improvements
+
+* Calls to `sinon.match()` are no longer incorrectly identified as regular expression operations.
+* Improved data flow tracking through middleware to handle default value and similar patterns.
+* Added `req._parsedUrl` as a remote input source.
+* Improved taint tracking through calls to `serialize-javascript`.
+* Removed `encodeURI` and `escape` functions from the sanitizer list for request forgery.
+* The JavaScript extractor now skips generated JavaScript files if the original TypeScript files are already present. It also skips any files in the output directory specified in the `compilerOptions` part of the `tsconfig.json` file.
+* Added support for Axios instances in the `axios` module.

javascript/ql/lib/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 2.6.5
+lastReleaseVersion: 2.6.6

javascript/ql/lib/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/javascript-all
-version: 2.6.6-dev
+version: 2.6.6
 groups: javascript
 dbscheme: semmlecode.javascript.dbscheme
 extractor: javascript