Release preparation for version 2.12.4

This commit is contained in:
github-actions[bot]
2023-03-03 14:11:51 +00:00
parent f2f972567d
commit 462da63970
107 changed files with 267 additions and 115 deletions

View File

@@ -1,3 +1,7 @@
## 0.5.4
No user-facing changes.
## 0.5.3 ## 0.5.3
No user-facing changes. No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 0.5.4
No user-facing changes.

View File

@@ -1,2 +1,2 @@
--- ---
lastReleaseVersion: 0.5.3 lastReleaseVersion: 0.5.4

View File

@@ -1,5 +1,5 @@
name: codeql/cpp-all name: codeql/cpp-all
version: 0.5.4-dev version: 0.5.4
groups: cpp groups: cpp
dbscheme: semmlecode.cpp.dbscheme dbscheme: semmlecode.cpp.dbscheme
extractor: cpp extractor: cpp

View File

@@ -1,3 +1,7 @@
## 0.5.4
No user-facing changes.
## 0.5.3 ## 0.5.3
No user-facing changes. No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 0.5.4
No user-facing changes.

View File

@@ -1,2 +1,2 @@
--- ---
lastReleaseVersion: 0.5.3 lastReleaseVersion: 0.5.4

View File

@@ -1,5 +1,5 @@
name: codeql/cpp-queries name: codeql/cpp-queries
version: 0.5.4-dev version: 0.5.4
groups: groups:
- cpp - cpp
- queries - queries

View File

@@ -1,3 +1,7 @@
## 1.4.4
No user-facing changes.
## 1.4.3 ## 1.4.3
No user-facing changes. No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 1.4.4
No user-facing changes.

View File

@@ -1,2 +1,2 @@
--- ---
lastReleaseVersion: 1.4.3 lastReleaseVersion: 1.4.4

View File

@@ -1,5 +1,5 @@
name: codeql/csharp-solorigate-all name: codeql/csharp-solorigate-all
version: 1.4.4-dev version: 1.4.4
groups: groups:
- csharp - csharp
- solorigate - solorigate

View File

@@ -1,3 +1,7 @@
## 1.4.4
No user-facing changes.
## 1.4.3 ## 1.4.3
No user-facing changes. No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 1.4.4
No user-facing changes.

View File

@@ -1,2 +1,2 @@
--- ---
lastReleaseVersion: 1.4.3 lastReleaseVersion: 1.4.4

View File

@@ -1,5 +1,5 @@
name: codeql/csharp-solorigate-queries name: codeql/csharp-solorigate-queries
version: 1.4.4-dev version: 1.4.4
groups: groups:
- csharp - csharp
- solorigate - solorigate

View File

@@ -1,3 +1,14 @@
## 0.5.4
### Minor Analysis Improvements
* The query `cs/static-field-written-by-instance` is updated to handle properties.
* C# 11: Support for explicit interface member implementation of operators.
* The extraction of member modifiers has been generalised, which could lead to the extraction of more modifiers.
* C# 11: Added extractor and library support for `file` scoped types.
* C# 11: Added extractor support for `required` fields and properties.
* C# 11: Added library support for `checked` operators.
## 0.5.3 ## 0.5.3
### Minor Analysis Improvements ### Minor Analysis Improvements

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* C# 11: Added library support for `checked` operators.

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* C# 11: Added extractor support for `required` fields and properties.

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* C# 11: Added extractor and library support for `file` scoped types.

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* The extraction of member modifiers has been generalised, which could lead to the extraction of more modifiers.

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* C# 11: Support for explicit interface member implementation of operators.

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* The query `cs/static-field-written-by-instance` is updated to handle properties.

View File

@@ -0,0 +1,10 @@
## 0.5.4
### Minor Analysis Improvements
* The query `cs/static-field-written-by-instance` is updated to handle properties.
* C# 11: Support for explicit interface member implementation of operators.
* The extraction of member modifiers has been generalised, which could lead to the extraction of more modifiers.
* C# 11: Added extractor and library support for `file` scoped types.
* C# 11: Added extractor support for `required` fields and properties.
* C# 11: Added library support for `checked` operators.

View File

@@ -1,2 +1,2 @@
--- ---
lastReleaseVersion: 0.5.3 lastReleaseVersion: 0.5.4

View File

@@ -1,5 +1,5 @@
name: codeql/csharp-all name: codeql/csharp-all
version: 0.5.4-dev version: 0.5.4
groups: csharp groups: csharp
dbscheme: semmlecode.csharp.dbscheme dbscheme: semmlecode.csharp.dbscheme
extractor: csharp extractor: csharp

View File

@@ -1,3 +1,7 @@
## 0.5.4
No user-facing changes.
## 0.5.3 ## 0.5.3
No user-facing changes. No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 0.5.4
No user-facing changes.

View File

@@ -1,2 +1,2 @@
--- ---
lastReleaseVersion: 0.5.3 lastReleaseVersion: 0.5.4

View File

@@ -1,5 +1,5 @@
name: codeql/csharp-queries name: codeql/csharp-queries
version: 0.5.4-dev version: 0.5.4
groups: groups:
- csharp - csharp
- queries - queries

View File

@@ -1,3 +1,7 @@
## 0.4.4
No user-facing changes.
## 0.4.3 ## 0.4.3
### New Features ### New Features

View File

@@ -0,0 +1,3 @@
## 0.4.4
No user-facing changes.

View File

@@ -1,2 +1,2 @@
--- ---
lastReleaseVersion: 0.4.3 lastReleaseVersion: 0.4.4

View File

@@ -1,5 +1,5 @@
name: codeql/go-all name: codeql/go-all
version: 0.4.4-dev version: 0.4.4
groups: go groups: go
dbscheme: go.dbscheme dbscheme: go.dbscheme
extractor: go extractor: go

View File

@@ -1,3 +1,9 @@
## 0.4.4
### Minor Analysis Improvements
* The query `go/incorrect-integer-conversion` now correctly recognises guards of the form `if val <= x` to protect a conversion `uintX(val)` when `x` is in the range `(math.MaxIntX, math.MaxUintX]`.
## 0.4.3 ## 0.4.3
### New Queries ### New Queries

View File

@@ -1,4 +1,5 @@
--- ## 0.4.4
category: minorAnalysis
--- ### Minor Analysis Improvements
* The query `go/incorrect-integer-conversion` now correctly recognises guards of the form `if val <= x` to protect a conversion `uintX(val)` when `x` is in the range `(math.MaxIntX, math.MaxUintX]`. * The query `go/incorrect-integer-conversion` now correctly recognises guards of the form `if val <= x` to protect a conversion `uintX(val)` when `x` is in the range `(math.MaxIntX, math.MaxUintX]`.

View File

@@ -1,2 +1,2 @@
--- ---
lastReleaseVersion: 0.4.3 lastReleaseVersion: 0.4.4

View File

@@ -1,5 +1,5 @@
name: codeql/go-queries name: codeql/go-queries
version: 0.4.4-dev version: 0.4.4
groups: groups:
- go - go
- queries - queries

View File

@@ -1,3 +1,11 @@
## 0.5.4
### Minor Analysis Improvements
* Added new sinks for `java/hardcoded-credential-api-call` to identify the use of hardcoded secrets in the creation and verification of JWT tokens using `com.auth0.jwt`. These sinks are from [an experimental query submitted by @luchua](https://github.com/github/codeql/pull/9036).
* The Java extractor now supports builds against JDK 20.
* The query `java/hardcoded-credential-api-call` now recognizes methods that accept user and password from the SQLServerDataSource class of the Microsoft JDBC Driver for SQL Server.
## 0.5.3 ## 0.5.3
### New Features ### New Features

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* The query `java/hardcoded-credential-api-call` now recognizes methods that accept user and password from the SQLServerDataSource class of the Microsoft JDBC Driver for SQL Server.

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* Added new sinks for `java/hardcoded-credential-api-call` to identify the use of hardcoded secrets in the creation and verification of JWT tokens using `com.auth0.jwt`. These sinks are from [an experimental query submitted by @luchua](https://github.com/github/codeql/pull/9036).

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* The Java extractor now supports builds against JDK 20.

View File

@@ -0,0 +1,7 @@
## 0.5.4
### Minor Analysis Improvements
* Added new sinks for `java/hardcoded-credential-api-call` to identify the use of hardcoded secrets in the creation and verification of JWT tokens using `com.auth0.jwt`. These sinks are from [an experimental query submitted by @luchua](https://github.com/github/codeql/pull/9036).
* The Java extractor now supports builds against JDK 20.
* The query `java/hardcoded-credential-api-call` now recognizes methods that accept user and password from the SQLServerDataSource class of the Microsoft JDBC Driver for SQL Server.

View File

@@ -1,2 +1,2 @@
--- ---
lastReleaseVersion: 0.5.3 lastReleaseVersion: 0.5.4

View File

@@ -1,5 +1,5 @@
name: codeql/java-all name: codeql/java-all
version: 0.5.4-dev version: 0.5.4
groups: java groups: java
dbscheme: config/semmlecode.dbscheme dbscheme: config/semmlecode.dbscheme
extractor: java extractor: java

View File

@@ -1,3 +1,7 @@
## 0.5.4
No user-facing changes.
## 0.5.3 ## 0.5.3
### New Queries ### New Queries

View File

@@ -0,0 +1,3 @@
## 0.5.4
No user-facing changes.

View File

@@ -1,2 +1,2 @@
--- ---
lastReleaseVersion: 0.5.3 lastReleaseVersion: 0.5.4

View File

@@ -1,5 +1,5 @@
name: codeql/java-queries name: codeql/java-queries
version: 0.5.4-dev version: 0.5.4
groups: groups:
- java - java
- queries - queries

View File

@@ -1,3 +1,16 @@
## 0.5.0
### Breaking Changes
* The `CryptographicOperation` concept has been changed to use a range pattern. This is a breaking change and existing implementations of `CryptographicOperation` will need to be updated in order to compile. These implementations can be updated by:
1. Extending `CryptographicOperation::Range` rather than `CryptographicOperation`
2. Renaming the `getInput()` member predicate as `getAnInput()`
3. Implementing the `BlockMode getBlockMode()` member predicate. The implementation for this can be `none()` if the operation is a hashing operation or an encryption operation using a stream cipher.
### Minor Analysis Improvements
* The `js/regex-injection` query now recognizes environment variables and command-line arguments as sources.
## 0.4.3 ## 0.4.3
### Minor Analysis Improvements ### Minor Analysis Improvements

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* The `js/regex-injection` query now recognizes environment variables and command-line arguments as sources.

View File

@@ -1,7 +1,12 @@
--- ## 0.5.0
category: breaking
--- ### Breaking Changes
* The `CryptographicOperation` concept has been changed to use a range pattern. This is a breaking change and existing implementations of `CryptographicOperation` will need to be updated in order to compile. These implementations can be updated by: * The `CryptographicOperation` concept has been changed to use a range pattern. This is a breaking change and existing implementations of `CryptographicOperation` will need to be updated in order to compile. These implementations can be updated by:
1. Extending `CryptographicOperation::Range` rather than `CryptographicOperation` 1. Extending `CryptographicOperation::Range` rather than `CryptographicOperation`
2. Renaming the `getInput()` member predicate as `getAnInput()` 2. Renaming the `getInput()` member predicate as `getAnInput()`
3. Implementing the `BlockMode getBlockMode()` member predicate. The implementation for this can be `none()` if the operation is a hashing operation or an encryption operation using a stream cipher. 3. Implementing the `BlockMode getBlockMode()` member predicate. The implementation for this can be `none()` if the operation is a hashing operation or an encryption operation using a stream cipher.
### Minor Analysis Improvements
* The `js/regex-injection` query now recognizes environment variables and command-line arguments as sources.

View File

@@ -1,2 +1,2 @@
--- ---
lastReleaseVersion: 0.4.3 lastReleaseVersion: 0.5.0

View File

@@ -1,5 +1,5 @@
name: codeql/javascript-all name: codeql/javascript-all
version: 0.4.4-dev version: 0.5.0
groups: javascript groups: javascript
dbscheme: semmlecode.javascript.dbscheme dbscheme: semmlecode.javascript.dbscheme
extractor: javascript extractor: javascript

View File

@@ -1,3 +1,7 @@
## 0.5.4
No user-facing changes.
## 0.5.3 ## 0.5.3
No user-facing changes. No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 0.5.4
No user-facing changes.

View File

@@ -1,2 +1,2 @@
--- ---
lastReleaseVersion: 0.5.3 lastReleaseVersion: 0.5.4

View File

@@ -1,5 +1,5 @@
name: codeql/javascript-queries name: codeql/javascript-queries
version: 0.5.4-dev version: 0.5.4
groups: groups:
- javascript - javascript
- queries - queries

View File

@@ -1,3 +1,7 @@
## 0.4.4
No user-facing changes.
## 0.4.3 ## 0.4.3
No user-facing changes. No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 0.4.4
No user-facing changes.

View File

@@ -1,2 +1,2 @@
--- ---
lastReleaseVersion: 0.4.3 lastReleaseVersion: 0.4.4

View File

@@ -1,3 +1,3 @@
name: codeql/suite-helpers name: codeql/suite-helpers
version: 0.4.4-dev version: 0.4.4
groups: shared groups: shared

View File

@@ -1,3 +1,14 @@
## 0.8.1
### Major Analysis Improvements
* We use a new analysis for the call-graph (determining which function is called). This can lead to changed results. In most cases this is much more accurate than the old call-graph that was based on points-to, but we do lose a few valid edges in the call-graph, especially around methods that are not defined inside its' class.
### Minor Analysis Improvements
* Fixed module resolution so we properly recognize definitions made within if-then-else statements.
* Added modeling of cryptographic operations in the `hmac` library.
## 0.8.0 ## 0.8.0
### Breaking Changes ### Breaking Changes

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* Added modeling of cryptographic operations in the `hmac` library.

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* Fixed module resolution so we properly recognize definitions made within if-then-else statements.

View File

@@ -1,4 +1,10 @@
--- ## 0.8.1
category: majorAnalysis
--- ### Major Analysis Improvements
* We use a new analysis for the call-graph (determining which function is called). This can lead to changed results. In most cases this is much more accurate than the old call-graph that was based on points-to, but we do lose a few valid edges in the call-graph, especially around methods that are not defined inside its' class. * We use a new analysis for the call-graph (determining which function is called). This can lead to changed results. In most cases this is much more accurate than the old call-graph that was based on points-to, but we do lose a few valid edges in the call-graph, especially around methods that are not defined inside its' class.
### Minor Analysis Improvements
* Fixed module resolution so we properly recognize definitions made within if-then-else statements.
* Added modeling of cryptographic operations in the `hmac` library.

View File

@@ -1,2 +1,2 @@
--- ---
lastReleaseVersion: 0.8.0 lastReleaseVersion: 0.8.1

View File

@@ -1,5 +1,5 @@
name: codeql/python-all name: codeql/python-all
version: 0.8.1-dev version: 0.8.1
groups: python groups: python
dbscheme: semmlecode.python.dbscheme dbscheme: semmlecode.python.dbscheme
extractor: python extractor: python

View File

@@ -1,3 +1,7 @@
## 0.6.4
No user-facing changes.
## 0.6.3 ## 0.6.3
No user-facing changes. No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 0.6.4
No user-facing changes.

View File

@@ -1,2 +1,2 @@
--- ---
lastReleaseVersion: 0.6.3 lastReleaseVersion: 0.6.4

View File

@@ -1,5 +1,5 @@
name: codeql/python-queries name: codeql/python-queries
version: 0.6.4-dev version: 0.6.4
groups: groups:
- python - python
- queries - queries

View File

@@ -1,3 +1,11 @@
## 0.5.4
### Minor Analysis Improvements
* Flow is now tracked between ActionController `before_filter` and `after_filter` callbacks and their associated action methods.
* Calls to `ApplicationController#render` and `ApplicationController::Renderer#render` are recognized as Rails rendering calls.
* Support for [Twirp framework](https://twitchtv.github.io/twirp/docs/intro.html).
## 0.5.3 ## 0.5.3
### Minor Analysis Improvements ### Minor Analysis Improvements

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* Calls to `ApplicationController#render` and `ApplicationController::Renderer#render` are recognized as Rails rendering calls.

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* Support for [Twirp framework](https://twitchtv.github.io/twirp/docs/intro.html).

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* Flow is now tracked between ActionController `before_filter` and `after_filter` callbacks and their associated action methods.

View File

@@ -0,0 +1,7 @@
## 0.5.4
### Minor Analysis Improvements
* Flow is now tracked between ActionController `before_filter` and `after_filter` callbacks and their associated action methods.
* Calls to `ApplicationController#render` and `ApplicationController::Renderer#render` are recognized as Rails rendering calls.
* Support for [Twirp framework](https://twitchtv.github.io/twirp/docs/intro.html).

View File

@@ -1,2 +1,2 @@
--- ---
lastReleaseVersion: 0.5.3 lastReleaseVersion: 0.5.4

View File

@@ -1,5 +1,5 @@
name: codeql/ruby-all name: codeql/ruby-all
version: 0.5.4-dev version: 0.5.4
groups: ruby groups: ruby
extractor: ruby extractor: ruby
dbscheme: ruby.dbscheme dbscheme: ruby.dbscheme

View File

@@ -1,3 +1,7 @@
## 0.5.4
No user-facing changes.
## 0.5.3 ## 0.5.3
### New Queries ### New Queries

View File

@@ -0,0 +1,3 @@
## 0.5.4
No user-facing changes.

View File

@@ -1,2 +1,2 @@
--- ---
lastReleaseVersion: 0.5.3 lastReleaseVersion: 0.5.4

View File

@@ -1,5 +1,5 @@
name: codeql/ruby-queries name: codeql/ruby-queries
version: 0.5.4-dev version: 0.5.4
groups: groups:
- ruby - ruby
- queries - queries

View File

@@ -1,3 +1,7 @@
## 0.0.8
No user-facing changes.
## 0.0.7 ## 0.0.7
No user-facing changes. No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 0.0.8
No user-facing changes.

View File

@@ -1,2 +1,2 @@
--- ---
lastReleaseVersion: 0.0.7 lastReleaseVersion: 0.0.8

View File

@@ -1,5 +1,5 @@
name: codeql/regex name: codeql/regex
version: 0.0.8-dev version: 0.0.8
groups: shared groups: shared
library: true library: true
dependencies: dependencies:

View File

@@ -1,3 +1,7 @@
## 0.0.12
No user-facing changes.
## 0.0.11 ## 0.0.11
No user-facing changes. No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 0.0.12
No user-facing changes.

View File

@@ -1,2 +1,2 @@
--- ---
lastReleaseVersion: 0.0.11 lastReleaseVersion: 0.0.12

View File

@@ -1,4 +1,4 @@
name: codeql/ssa name: codeql/ssa
version: 0.0.12-dev version: 0.0.12
groups: shared groups: shared
library: true library: true

View File

@@ -1,3 +1,7 @@
## 0.0.5
No user-facing changes.
## 0.0.4 ## 0.0.4
No user-facing changes. No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 0.0.5
No user-facing changes.

View File

@@ -1,2 +1,2 @@
--- ---
lastReleaseVersion: 0.0.4 lastReleaseVersion: 0.0.5

View File

@@ -1,5 +1,5 @@
name: codeql/tutorial name: codeql/tutorial
description: Library for the CodeQL detective tutorials, helping new users learn to write CodeQL queries. description: Library for the CodeQL detective tutorials, helping new users learn to write CodeQL queries.
version: 0.0.5-dev version: 0.0.5
groups: shared groups: shared
library: true library: true

View File

@@ -1,3 +1,7 @@
## 0.0.5
No user-facing changes.
## 0.0.4 ## 0.0.4
No user-facing changes. No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 0.0.5
No user-facing changes.

View File

@@ -1,2 +1,2 @@
--- ---
lastReleaseVersion: 0.0.4 lastReleaseVersion: 0.0.5

View File

@@ -1,5 +1,5 @@
name: codeql/typetracking name: codeql/typetracking
version: 0.0.5-dev version: 0.0.5
groups: shared groups: shared
library: true library: true
dependencies: dependencies:

View File

@@ -1,3 +1,7 @@
## 0.0.12
No user-facing changes.
## 0.0.11 ## 0.0.11
No user-facing changes. No user-facing changes.

Some files were not shown because too many files have changed in this diff Show More