Release preparation for version 2.11.3

ruby/ql/lib/CHANGELOG.md

@@ -1,3 +1,12 @@
+## 0.4.3
+
+### Minor Analysis Improvements
+
+ * There was a bug in `TaintTracking::localTaint` and `TaintTracking::localTaintStep` such that they only tracked non-value-preserving flow steps. They have been fixed and now also include value-preserving steps.
+- Instantiations using `Faraday::Connection.new` are now recognized as part of `FaradayHttpRequest`s, meaning they will be considered as sinks for queries such as `rb/request-forgery`.
+* Taint flow is now tracked through extension methods on `Hash`, `String` and
+  `Object` provided by `ActiveSupport`.
+
 ## 0.4.2
 
 ### Minor Analysis Improvements

ruby/ql/lib/change-notes/2022-10-18-activesupport-flow.md

@@ -1,5 +0,0 @@
----
-category: minorAnalysis
----
-* Taint flow is now tracked through extension methods on `Hash`, `String` and
-  `Object` provided by `ActiveSupport`.

ruby/ql/lib/change-notes/2022-10-20-expand-faraday-model-for-ssrf-sink.md

@@ -1,5 +0,0 @@
----
-category: minorAnalysis
----
-
-- Instantiations using `Faraday::Connection.new` are now recognized as part of `FaradayHttpRequest`s, meaning they will be considered as sinks for queries such as `rb/request-forgery`.

ruby/ql/lib/change-notes/2022-10-21-local-taint-step.md

@@ -1,4 +0,0 @@
----
- category: minorAnalysis
----
- * There was a bug in `TaintTracking::localTaint` and `TaintTracking::localTaintStep` such that they only tracked non-value-preserving flow steps. They have been fixed and now also include value-preserving steps.

ruby/ql/lib/change-notes/released/0.4.3.md

@@ -0,0 +1,8 @@
+## 0.4.3
+
+### Minor Analysis Improvements
+
+ * There was a bug in `TaintTracking::localTaint` and `TaintTracking::localTaintStep` such that they only tracked non-value-preserving flow steps. They have been fixed and now also include value-preserving steps.
+- Instantiations using `Faraday::Connection.new` are now recognized as part of `FaradayHttpRequest`s, meaning they will be considered as sinks for queries such as `rb/request-forgery`.
+* Taint flow is now tracked through extension methods on `Hash`, `String` and
+  `Object` provided by `ActiveSupport`.

ruby/ql/lib/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.4.2
+lastReleaseVersion: 0.4.3

ruby/ql/lib/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/ruby-all
-version: 0.4.3-dev
+version: 0.4.3
 groups: ruby
 extractor: ruby
 dbscheme: ruby.dbscheme