Release preparation for version 2.15.2

This commit is contained in:
github-actions[bot]
2023-10-30 11:05:53 +00:00
parent c4521a30aa
commit 4641990021
151 changed files with 392 additions and 175 deletions

View File

@@ -1,3 +1,18 @@
## 0.11.0
### Breaking Changes
* The `Container` and `Folder` classes now derive from `ElementBase` instead of `Locatable`, and no longer expose the `getLocation` predicate. Use `getURL` instead.
### New Features
* Added a new class `AdditionalCallTarget` for specifying additional call targets.
### Minor Analysis Improvements
* More field accesses are identified as `ImplicitThisFieldAccess`.
* Added support for new floating-point types in C23 and C++23.
## 0.10.1
### Minor Analysis Improvements

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* Added support for new floating-point types in C23 and C++23.

View File

@@ -1,4 +0,0 @@
---
category: feature
---
* Added a new class `AdditionalCallTarget` for specifying additional call targets.

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* More field accesses are identified as `ImplicitThisFieldAccess`.

View File

@@ -1,4 +0,0 @@
---
category: breaking
---
* The `Container` and `Folder` classes now derive from `ElementBase` instead of `Locatable`, and no longer expose the `getLocation` predicate. Use `getURL` instead.

View File

@@ -0,0 +1,14 @@
## 0.11.0
### Breaking Changes
* The `Container` and `Folder` classes now derive from `ElementBase` instead of `Locatable`, and no longer expose the `getLocation` predicate. Use `getURL` instead.
### New Features
* Added a new class `AdditionalCallTarget` for specifying additional call targets.
### Minor Analysis Improvements
* More field accesses are identified as `ImplicitThisFieldAccess`.
* Added support for new floating-point types in C23 and C++23.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 0.10.1
lastReleaseVersion: 0.11.0

View File

@@ -1,5 +1,5 @@
name: codeql/cpp-all
version: 0.10.2-dev
version: 0.11.0
groups: cpp
dbscheme: semmlecode.cpp.dbscheme
extractor: cpp

View File

@@ -1,3 +1,7 @@
## 0.8.2
No user-facing changes.
## 0.8.1
### New Queries

View File

@@ -0,0 +1,3 @@
## 0.8.2
No user-facing changes.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 0.8.1
lastReleaseVersion: 0.8.2

View File

@@ -1,5 +1,5 @@
name: codeql/cpp-queries
version: 0.8.2-dev
version: 0.8.2
groups:
- cpp
- queries

View File

@@ -1,3 +1,7 @@
## 1.7.2
No user-facing changes.
## 1.7.1
No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 1.7.2
No user-facing changes.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 1.7.1
lastReleaseVersion: 1.7.2

View File

@@ -1,5 +1,5 @@
name: codeql/csharp-solorigate-all
version: 1.7.2-dev
version: 1.7.2
groups:
- csharp
- solorigate

View File

@@ -1,3 +1,7 @@
## 1.7.2
No user-facing changes.
## 1.7.1
No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 1.7.2
No user-facing changes.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 1.7.1
lastReleaseVersion: 1.7.2

View File

@@ -1,5 +1,5 @@
name: codeql/csharp-solorigate-queries
version: 1.7.2-dev
version: 1.7.2
groups:
- csharp
- solorigate

View File

@@ -1,3 +1,7 @@
## 0.8.2
No user-facing changes.
## 0.8.1
### Minor Analysis Improvements

View File

@@ -0,0 +1,3 @@
## 0.8.2
No user-facing changes.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 0.8.1
lastReleaseVersion: 0.8.2

View File

@@ -1,5 +1,5 @@
name: codeql/csharp-all
version: 0.8.2-dev
version: 0.8.2
groups: csharp
dbscheme: semmlecode.csharp.dbscheme
extractor: csharp

View File

@@ -1,3 +1,7 @@
## 0.8.2
No user-facing changes.
## 0.8.1
### Minor Analysis Improvements

View File

@@ -0,0 +1,3 @@
## 0.8.2
No user-facing changes.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 0.8.1
lastReleaseVersion: 0.8.2

View File

@@ -1,5 +1,5 @@
name: codeql/csharp-queries
version: 0.8.2-dev
version: 0.8.2
groups:
- csharp
- queries

View File

@@ -0,0 +1,3 @@
## 0.0.1
No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 0.0.1
No user-facing changes.

View File

@@ -0,0 +1,2 @@
---
lastReleaseVersion: 0.0.1

View File

@@ -1,5 +1,5 @@
name: codeql-go-consistency-queries
version: 0.0.0
version: 0.0.1
groups:
- go
- queries

View File

@@ -1,3 +1,13 @@
## 0.7.2
### Minor Analysis Improvements
* Added [Request.Cookie](https://pkg.go.dev/net/http#Request.Cookie) to reflected XSS sanitizers.
### Bug Fixes
* Fixed a bug where data flow nodes in files that are not in the project being analyzed (such as libraries) and are not contained within a function were not given an enclosing `Callable`. Note that for nodes that are not contained within a function, the enclosing callable is considered to be the file itself. This may cause some minor changes to results.
## 0.7.1
### Minor Analysis Improvements

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* Added [Request.Cookie](https://pkg.go.dev/net/http#Request.Cookie) to reflected XSS sanitizers.

View File

@@ -1,4 +1,9 @@
---
category: fix
---
## 0.7.2
### Minor Analysis Improvements
* Added [Request.Cookie](https://pkg.go.dev/net/http#Request.Cookie) to reflected XSS sanitizers.
### Bug Fixes
* Fixed a bug where data flow nodes in files that are not in the project being analyzed (such as libraries) and are not contained within a function were not given an enclosing `Callable`. Note that for nodes that are not contained within a function, the enclosing callable is considered to be the file itself. This may cause some minor changes to results.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 0.7.1
lastReleaseVersion: 0.7.2

View File

@@ -1,5 +1,5 @@
name: codeql/go-all
version: 0.7.2-dev
version: 0.7.2
groups: go
dbscheme: go.dbscheme
extractor: go

View File

@@ -1,3 +1,9 @@
## 0.7.2
### Minor Analysis Improvements
* The query `go/incorrect-integer-conversion` now correctly recognizes more guards of the form `if val <= x` to protect a conversion `uintX(val)`.
## 0.7.1
### Minor Analysis Improvements

View File

@@ -1,4 +1,5 @@
---
category: minorAnalysis
---
## 0.7.2
### Minor Analysis Improvements
* The query `go/incorrect-integer-conversion` now correctly recognizes more guards of the form `if val <= x` to protect a conversion `uintX(val)`.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 0.7.1
lastReleaseVersion: 0.7.2

View File

@@ -1,5 +1,5 @@
name: codeql/go-queries
version: 0.7.2-dev
version: 0.7.2
groups:
- go
- queries

View File

@@ -1,3 +1,7 @@
## 0.0.7
No user-facing changes.
## 0.0.6
No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 0.0.7
No user-facing changes.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 0.0.6
lastReleaseVersion: 0.0.7

View File

@@ -1,5 +1,5 @@
name: codeql/java-automodel-queries
version: 0.0.7-dev
version: 0.0.7
groups:
- java
- automodel

View File

@@ -1,3 +1,16 @@
## 0.8.2
### Minor Analysis Improvements
* Java classes `MethodAccess`, `LValue` and `RValue` were renamed to `MethodCall`, `VarWrite` and `VarRead` respectively, along with related predicates and class names. The old names remain usable for the time being but are deprecated and should be replaced.
* New class `NewClassExpr` was added to represent specifically an explicit `new ClassName(...)` invocation, in contrast to `ClassInstanceExpr` which also includes expressions that implicitly instantiate classes, such as defining a lambda or taking a method reference.
* Added up to date models related to Spring Framework 6's `org.springframework.http.ResponseEntity`.
* Added models for the following packages:
* com.alibaba.fastjson2
* javax.management
* org.apache.http.client.utils
## 0.8.1
### New Features

View File

@@ -1,8 +0,0 @@
---
category: minorAnalysis
---
* Added models for the following packages:
* com.alibaba.fastjson2
* javax.management
* org.apache.http.client.utils

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* Added up to date models related to Spring Framework 6's `org.springframework.http.ResponseEntity`.

View File

@@ -1,5 +1,12 @@
---
category: minorAnalysis
---
## 0.8.2
### Minor Analysis Improvements
* Java classes `MethodAccess`, `LValue` and `RValue` were renamed to `MethodCall`, `VarWrite` and `VarRead` respectively, along with related predicates and class names. The old names remain usable for the time being but are deprecated and should be replaced.
* New class `NewClassExpr` was added to represent specifically an explicit `new ClassName(...)` invocation, in contrast to `ClassInstanceExpr` which also includes expressions that implicitly instantiate classes, such as defining a lambda or taking a method reference.
* Added up to date models related to Spring Framework 6's `org.springframework.http.ResponseEntity`.
* Added models for the following packages:
* com.alibaba.fastjson2
* javax.management
* org.apache.http.client.utils

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 0.8.1
lastReleaseVersion: 0.8.2

View File

@@ -1,5 +1,5 @@
name: codeql/java-all
version: 0.8.2-dev
version: 0.8.2
groups: java
dbscheme: config/semmlecode.dbscheme
extractor: java

View File

@@ -1,3 +1,10 @@
## 0.8.2
### Minor Analysis Improvements
* java/summary/lines-of-code now gives the total number of lines of Java and Kotlin code, and is the only query tagged `lines-of-code`. java/summary/lines-of-code-java and java/summary/lines-of-code-kotlin give the per-language counts.
* The query `java/spring-disabled-csrf-protection` has been improved to detect more ways of disabling CSRF in Spring.
## 0.8.1
### Minor Analysis Improvements

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* The query `java/spring-disabled-csrf-protection` has been improved to detect more ways of disabling CSRF in Spring.

View File

@@ -1,4 +1,6 @@
---
category: minorAnalysis
---
## 0.8.2
### Minor Analysis Improvements
* java/summary/lines-of-code now gives the total number of lines of Java and Kotlin code, and is the only query tagged `lines-of-code`. java/summary/lines-of-code-java and java/summary/lines-of-code-kotlin give the per-language counts.
* The query `java/spring-disabled-csrf-protection` has been improved to detect more ways of disabling CSRF in Spring.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 0.8.1
lastReleaseVersion: 0.8.2

View File

@@ -1,5 +1,5 @@
name: codeql/java-queries
version: 0.8.2-dev
version: 0.8.2
groups:
- java
- queries

View File

@@ -1,3 +1,7 @@
## 0.8.2
No user-facing changes.
## 0.8.1
### Minor Analysis Improvements

View File

@@ -0,0 +1,3 @@
## 0.8.2
No user-facing changes.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 0.8.1
lastReleaseVersion: 0.8.2

View File

@@ -1,5 +1,5 @@
name: codeql/javascript-all
version: 0.8.2-dev
version: 0.8.2
groups: javascript
dbscheme: semmlecode.javascript.dbscheme
extractor: javascript

View File

@@ -1,3 +1,9 @@
## 0.8.2
### Minor Analysis Improvements
* Added modeling for importing `express-rate-limit` using a named import.
## 0.8.1
### Minor Analysis Improvements

View File

@@ -1,4 +1,5 @@
---
category: minorAnalysis
---
## 0.8.2
### Minor Analysis Improvements
* Added modeling for importing `express-rate-limit` using a named import.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 0.8.1
lastReleaseVersion: 0.8.2

View File

@@ -1,5 +1,5 @@
name: codeql/javascript-queries
version: 0.8.2-dev
version: 0.8.2
groups:
- javascript
- queries

View File

@@ -1,3 +1,7 @@
## 0.7.2
No user-facing changes.
## 0.7.1
No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 0.7.2
No user-facing changes.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 0.7.1
lastReleaseVersion: 0.7.2

View File

@@ -1,4 +1,4 @@
name: codeql/suite-helpers
version: 0.7.2-dev
version: 0.7.2
groups: shared
warnOnImplicitThis: true

View File

@@ -1,3 +1,10 @@
## 0.11.2
### Minor Analysis Improvements
* Added support for functions decorated with `contextlib.contextmanager`.
* Namespace packages in the form of regular packages with missing `__init__.py`-files are now allowed. This enables the analysis to resolve modules and functions inside such packages.
## 0.11.1
### Minor Analysis Improvements

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* Added support for functions decorated with `contextlib.contextmanager`.

View File

@@ -1,4 +1,6 @@
---
category: minorAnalysis
---
## 0.11.2
### Minor Analysis Improvements
* Added support for functions decorated with `contextlib.contextmanager`.
* Namespace packages in the form of regular packages with missing `__init__.py`-files are now allowed. This enables the analysis to resolve modules and functions inside such packages.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 0.11.1
lastReleaseVersion: 0.11.2

View File

@@ -1,5 +1,5 @@
name: codeql/python-all
version: 0.11.2-dev
version: 0.11.2
groups: python
dbscheme: semmlecode.python.dbscheme
extractor: python

View File

@@ -1,3 +1,7 @@
## 0.9.2
No user-facing changes.
## 0.9.1
No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 0.9.2
No user-facing changes.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 0.9.1
lastReleaseVersion: 0.9.2

View File

@@ -1,5 +1,5 @@
name: codeql/python-queries
version: 0.9.2-dev
version: 0.9.2
groups:
- python
- queries

View File

@@ -1,3 +1,7 @@
## 0.8.2
No user-facing changes.
## 0.8.1
### Minor Analysis Improvements

View File

@@ -0,0 +1,3 @@
## 0.8.2
No user-facing changes.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 0.8.1
lastReleaseVersion: 0.8.2

View File

@@ -1,5 +1,5 @@
name: codeql/ruby-all
version: 0.8.2-dev
version: 0.8.2
groups: ruby
extractor: ruby
dbscheme: ruby.dbscheme

View File

@@ -1,3 +1,7 @@
## 0.8.2
No user-facing changes.
## 0.8.1
### New Queries

View File

@@ -0,0 +1,3 @@
## 0.8.2
No user-facing changes.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 0.8.1
lastReleaseVersion: 0.8.2

View File

@@ -1,5 +1,5 @@
name: codeql/ruby-queries
version: 0.8.2-dev
version: 0.8.2
groups:
- ruby
- queries

View File

@@ -1,3 +1,7 @@
## 0.1.2
No user-facing changes.
## 0.1.1
No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 0.1.2
No user-facing changes.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 0.1.1
lastReleaseVersion: 0.1.2

View File

@@ -1,5 +1,5 @@
name: codeql/controlflow
version: 0.1.2-dev
version: 0.1.2
groups: shared
library: true
dependencies:

View File

@@ -1,3 +1,9 @@
## 0.1.2
### Bug Fixes
* The API for debugging flow using partial flow has changed slightly. Instead of using `module Partial = FlowExploration<limit/0>` and choosing between `Partial::partialFlow` and `Partial::partialFlowRev`, you now choose between `module Partial = FlowExplorationFwd<limit/0>` and `module Partial = FlowExplorationRev<limit/0>`, and then always use `Partial::partialFlow`.
## 0.1.1
No user-facing changes.

View File

@@ -1,4 +1,5 @@
---
category: fix
---
## 0.1.2
### Bug Fixes
* The API for debugging flow using partial flow has changed slightly. Instead of using `module Partial = FlowExploration<limit/0>` and choosing between `Partial::partialFlow` and `Partial::partialFlowRev`, you now choose between `module Partial = FlowExplorationFwd<limit/0>` and `module Partial = FlowExplorationRev<limit/0>`, and then always use `Partial::partialFlow`.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 0.1.1
lastReleaseVersion: 0.1.2

View File

@@ -1,5 +1,5 @@
name: codeql/dataflow
version: 0.1.2-dev
version: 0.1.2
groups: shared
library: true
dependencies:

View File

@@ -1,3 +1,7 @@
## 0.2.2
No user-facing changes.
## 0.2.1
No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 0.2.2
No user-facing changes.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 0.2.1
lastReleaseVersion: 0.2.2

View File

@@ -1,5 +1,5 @@
name: codeql/mad
version: 0.2.2-dev
version: 0.2.2
groups: shared
library: true
dependencies: null

View File

@@ -1,4 +1,5 @@
---
category: minorAnalysis
---
## 0.0.1
### Minor Analysis Improvements
* Initial release. Moves the range analysis library into its own qlpack.

View File

@@ -0,0 +1,5 @@
## 0.0.1
### Minor Analysis Improvements
* Initial release. Moves the range analysis library into its own qlpack.

View File

@@ -0,0 +1,2 @@
---
lastReleaseVersion: 0.0.1

Some files were not shown because too many files have changed in this diff Show More