Release preparation for version 2.25.2

python/ql/lib/CHANGELOG.md

@@ -1,3 +1,9 @@
+## 7.0.4
+
+### Bug Fixes
+
+- Fixed the resolution of relative imports such as `from . import helper` inside namespace packages (directories without an `__init__.py` file), which previously did not work correctly, leading to missing flow.
+
 ## 7.0.3
 
 No user-facing changes.

python/ql/lib/change-notes/released/7.0.4.md

@@ -1,5 +1,5 @@
----
-category: fix
----
+## 7.0.4
+
+### Bug Fixes
 
 - Fixed the resolution of relative imports such as `from . import helper` inside namespace packages (directories without an `__init__.py` file), which previously did not work correctly, leading to missing flow.

python/ql/lib/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 7.0.3
+lastReleaseVersion: 7.0.4

python/ql/lib/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/python-all
-version: 7.0.4-dev
+version: 7.0.4
 groups: python
 dbscheme: semmlecode.python.dbscheme
 extractor: python

python/ql/src/CHANGELOG.md

@@ -1,3 +1,14 @@
+## 1.8.0
+
+### Query Metadata Changes
+
+* The `@security-severity` metadata of `py/log-injection` has been reduced from 7.8 (high) to 6.1 (medium).
+* The `@security-severity` metadata of `py/jinja2/autoescape-false` and `py/reflective-xss` has been increased from 6.1 (medium) to 7.8 (high).
+
+### Major Analysis Improvements
+
+- Several quality queries have been ported away from using the legacy points-to library. This may lead to changes in alerts.
+
 ## 1.7.11
 
 No user-facing changes.

python/ql/src/change-notes/2026-03-13-port-simple-points-to-queries.md

@@ -1,5 +0,0 @@
----
-category: majorAnalysis
----
-
-- Several quality queries have been ported away from using the legacy points-to library. This may lead to changes in alerts.

python/ql/src/change-notes/released/1.8.0.md

@@ -1,5 +1,10 @@
----
-category: queryMetadata
----
+## 1.8.0
+
+### Query Metadata Changes
+
 * The `@security-severity` metadata of `py/log-injection` has been reduced from 7.8 (high) to 6.1 (medium).
 * The `@security-severity` metadata of `py/jinja2/autoescape-false` and `py/reflective-xss` has been increased from 6.1 (medium) to 7.8 (high).
+
+### Major Analysis Improvements
+
+- Several quality queries have been ported away from using the legacy points-to library. This may lead to changes in alerts.

python/ql/src/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 1.7.11
+lastReleaseVersion: 1.8.0

python/ql/src/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/python-queries
-version: 1.7.12-dev
+version: 1.8.0
 groups:
   - python
   - queries