Merge pull request #13690 from github/post-release-prep/codeql-cli-2.14.0

Post-release preparation for codeql-cli-2.14.0
This commit is contained in:
Mathias Vorreiter Pedersen
2023-07-07 23:39:38 +01:00
committed by GitHub
139 changed files with 444 additions and 217 deletions

View File

@@ -1,3 +1,7 @@
## 1.6.0
No user-facing changes.
## 1.5.4
No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 1.6.0
No user-facing changes.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 1.5.4
lastReleaseVersion: 1.6.0

View File

@@ -1,5 +1,5 @@
name: codeql/csharp-solorigate-all
version: 1.6.0-dev
version: 1.6.1-dev
groups:
- csharp
- solorigate

View File

@@ -1,3 +1,7 @@
## 1.6.0
No user-facing changes.
## 1.5.4
No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 1.6.0
No user-facing changes.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 1.5.4
lastReleaseVersion: 1.6.0

View File

@@ -1,5 +1,5 @@
name: codeql/csharp-solorigate-queries
version: 1.6.0-dev
version: 1.6.1-dev
groups:
- csharp
- solorigate

View File

@@ -1,3 +1,13 @@
## 0.7.0
### Major Analysis Improvements
* The data flow library now performs type strengthening. This increases precision for all data flow queries by excluding paths that can be inferred to be impossible due to incompatible types.
### Minor Analysis Improvements
* Additional support for `command-injection`, `ldap-injection`, `log-injection`, and `url-redirection` sink kinds for Models as Data.
## 0.6.4
No user-facing changes.

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* Additional support for `command-injection`, `ldap-injection`, `log-injection`, and `url-redirection` sink kinds for Models as Data.

View File

@@ -1,4 +0,0 @@
---
category: majorAnalysis
---
* The data flow library now performs type strengthening. This increases precision for all data flow queries by excluding paths that can be inferred to be impossible due to incompatible types.

View File

@@ -0,0 +1,9 @@
## 0.7.0
### Major Analysis Improvements
* The data flow library now performs type strengthening. This increases precision for all data flow queries by excluding paths that can be inferred to be impossible due to incompatible types.
### Minor Analysis Improvements
* Additional support for `command-injection`, `ldap-injection`, `log-injection`, and `url-redirection` sink kinds for Models as Data.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 0.6.4
lastReleaseVersion: 0.7.0

View File

@@ -1,5 +1,5 @@
name: codeql/csharp-all
version: 0.7.0-dev
version: 0.7.1-dev
groups: csharp
dbscheme: semmlecode.csharp.dbscheme
extractor: csharp

View File

@@ -1,3 +1,13 @@
## 0.7.0
### New Queries
* Added a new query, `cs/web/missing-function-level-access-control`, to find instances of missing authorization checks.
### Bug Fixes
* The query "Arbitrary file write during zip extraction ("Zip Slip")" (`cs/zipslip`) has been renamed to "Arbitrary file access during archive extraction ("Zip Slip")."
## 0.6.4
No user-facing changes.

View File

@@ -1,4 +0,0 @@
---
category: newQuery
---
* Added a new query, `cs/web/missing-function-level-access-control`, to find instances of missing authorization checks.

View File

@@ -1,4 +1,9 @@
---
category: fix
---
## 0.7.0
### New Queries
* Added a new query, `cs/web/missing-function-level-access-control`, to find instances of missing authorization checks.
### Bug Fixes
* The query "Arbitrary file write during zip extraction ("Zip Slip")" (`cs/zipslip`) has been renamed to "Arbitrary file access during archive extraction ("Zip Slip")."

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 0.6.4
lastReleaseVersion: 0.7.0

View File

@@ -1,5 +1,5 @@
name: codeql/csharp-queries
version: 0.7.0-dev
version: 0.7.1-dev
groups:
- csharp
- queries