Release preparation for version 2.7.4

2025-12-16 16:53:25 +01:00 · 2021-12-14 21:35:09 +00:00
parent 6664a3814a
commit 59da2cdf69
83 changed files with 167 additions and 121 deletions
--- a/cpp/ql/lib/CHANGELOG.md
+++ b/cpp/ql/lib/CHANGELOG.md
@@ -1,3 +1,5 @@
+## 0.0.5
+
 ## 0.0.4

 ### New Features
--- a/cpp/ql/lib/change-notes/released/0.0.5.md
+++ b/cpp/ql/lib/change-notes/released/0.0.5.md
@@ -0,0 +1 @@
+## 0.0.5
--- a/cpp/ql/lib/codeql-pack.release.yml
+++ b/cpp/ql/lib/codeql-pack.release.yml
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.4
+lastReleaseVersion: 0.0.5
--- a/cpp/ql/lib/qlpack.yml
+++ b/cpp/ql/lib/qlpack.yml
@@ -1,5 +1,5 @@
 name: codeql/cpp-all
-version: 0.0.5-dev
+version: 0.0.5
 groups: cpp
 dbscheme: semmlecode.cpp.dbscheme
 extractor: cpp
--- a/cpp/ql/src/CHANGELOG.md
+++ b/cpp/ql/src/CHANGELOG.md
@@ -1,3 +1,10 @@
+## 0.0.5
+
+### New Queries
+
+* A new query `cpp/certificate-not-checked` has been added for C/C++. The query flags unsafe use of OpenSSL and similar libraries.
+* A new query `cpp/certificate-result-conflation` has been added for C/C++. The query flags unsafe use of OpenSSL and similar libraries.
+
 ## 0.0.4

 ### New Queries
--- a/cpp/ql/src/change-notes/2021-11-25-certificate-not-checked.md
+++ b/cpp/ql/src/change-notes/2021-11-25-certificate-not-checked.md
@@ -1,5 +0,0 @@
---
-category: newQuery
-tags: [lgtm,codescanning]
---
-* A new query `cpp/certificate-not-checked` has been added for C/C++. The query flags unsafe use of OpenSSL and similar libraries.
--- a/cpp/ql/src/change-notes/2021-11-25-certificate-result-conflation.md
+++ b/cpp/ql/src/change-notes/2021-11-25-certificate-result-conflation.md
@@ -1,5 +0,0 @@
---
-category: newQuery
-tags: [lgtm,codescanning]
---
-* A new query `cpp/certificate-result-conflation` has been added for C/C++. The query flags unsafe use of OpenSSL and similar libraries.
--- a/cpp/ql/src/change-notes/released/0.0.5.md
+++ b/cpp/ql/src/change-notes/released/0.0.5.md
@@ -0,0 +1,6 @@
+## 0.0.5
+
+### New Queries
+
+* A new query `cpp/certificate-not-checked` has been added for C/C++. The query flags unsafe use of OpenSSL and similar libraries.
+* A new query `cpp/certificate-result-conflation` has been added for C/C++. The query flags unsafe use of OpenSSL and similar libraries.
--- a/cpp/ql/src/codeql-pack.release.yml
+++ b/cpp/ql/src/codeql-pack.release.yml
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.4
+lastReleaseVersion: 0.0.5
--- a/cpp/ql/src/qlpack.yml
+++ b/cpp/ql/src/qlpack.yml
@@ -1,5 +1,5 @@
 name: codeql/cpp-queries
-version: 0.0.5-dev
+version: 0.0.5
 groups: cpp
 dependencies:
    codeql/cpp-all: "*"
--- a/cpp/upgrades/CHANGELOG.md
+++ b/cpp/upgrades/CHANGELOG.md
@@ -1 +1,3 @@
+## 0.0.5
+
 ## 0.0.4
--- a/cpp/upgrades/change-notes/released/0.0.5.md
+++ b/cpp/upgrades/change-notes/released/0.0.5.md
@@ -0,0 +1 @@
+## 0.0.5
--- a/cpp/upgrades/codeql-pack.release.yml
+++ b/cpp/upgrades/codeql-pack.release.yml
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.4
+lastReleaseVersion: 0.0.5
--- a/cpp/upgrades/qlpack.yml
+++ b/cpp/upgrades/qlpack.yml
@@ -1,5 +1,5 @@
 name: codeql/cpp-upgrades
 groups: cpp
 upgrades: .
-version: 0.0.5-dev
+version: 0.0.5
 library: true
--- a/csharp/ql/lib/CHANGELOG.md
+++ b/csharp/ql/lib/CHANGELOG.md
@@ -1 +1,3 @@
+## 0.0.5
+
 ## 0.0.4
--- a/csharp/ql/lib/change-notes/released/0.0.5.md
+++ b/csharp/ql/lib/change-notes/released/0.0.5.md
@@ -0,0 +1 @@
+## 0.0.5
--- a/csharp/ql/lib/codeql-pack.release.yml
+++ b/csharp/ql/lib/codeql-pack.release.yml
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.4
+lastReleaseVersion: 0.0.5
--- a/csharp/ql/lib/qlpack.yml
+++ b/csharp/ql/lib/qlpack.yml
@@ -1,5 +1,5 @@
 name: codeql/csharp-all
-version: 0.0.5-dev
+version: 0.0.5
 groups: csharp
 dbscheme: semmlecode.csharp.dbscheme
 extractor: csharp
--- a/csharp/ql/src/CHANGELOG.md
+++ b/csharp/ql/src/CHANGELOG.md
@@ -1 +1,3 @@
+## 0.0.5
+
 ## 0.0.4
--- a/csharp/ql/src/change-notes/released/0.0.5.md
+++ b/csharp/ql/src/change-notes/released/0.0.5.md
@@ -0,0 +1 @@
+## 0.0.5
--- a/csharp/ql/src/codeql-pack.release.yml
+++ b/csharp/ql/src/codeql-pack.release.yml
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.4
+lastReleaseVersion: 0.0.5
--- a/csharp/ql/src/qlpack.yml
+++ b/csharp/ql/src/qlpack.yml
@@ -1,5 +1,5 @@
 name: codeql/csharp-queries
-version: 0.0.5-dev
+version: 0.0.5
 groups: csharp
 suites: codeql-suites
 extractor: csharp
--- a/csharp/upgrades/CHANGELOG.md
+++ b/csharp/upgrades/CHANGELOG.md
@@ -1 +1,3 @@
+## 0.0.5
+
 ## 0.0.4
--- a/csharp/upgrades/change-notes/released/0.0.5.md
+++ b/csharp/upgrades/change-notes/released/0.0.5.md
@@ -0,0 +1 @@
+## 0.0.5
--- a/csharp/upgrades/codeql-pack.release.yml
+++ b/csharp/upgrades/codeql-pack.release.yml
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.4
+lastReleaseVersion: 0.0.5
--- a/csharp/upgrades/qlpack.yml
+++ b/csharp/upgrades/qlpack.yml
@@ -1,5 +1,5 @@
 name: codeql/csharp-upgrades
 groups: csharp
-version: 0.0.5-dev
+version: 0.0.5
 upgrades: .
 library: true
--- a/java/ql/lib/CHANGELOG.md
+++ b/java/ql/lib/CHANGELOG.md
@@ -1,3 +1,10 @@
+## 0.0.5
+
+### Bug Fixes
+
+* `CharacterLiteral`'s `getCodePointValue` predicate now returns the correct value for UTF-16 surrogates.
+* The `RangeAnalysis` module now properly handles comparisons with Unicode surrogate character literals.
+
 ## 0.0.4

 ### Bug Fixes
--- a/java/ql/lib/change-notes/2021-11-25-surrogate-char-literals.md
+++ b/java/ql/lib/change-notes/2021-11-25-surrogate-char-literals.md
@@ -1,6 +1,6 @@
---
-category: fix
-tags: [lgtm,codescanning]
---
+## 0.0.5
+
+### Bug Fixes
+
 * `CharacterLiteral`'s `getCodePointValue` predicate now returns the correct value for UTF-16 surrogates.
 * The `RangeAnalysis` module now properly handles comparisons with Unicode surrogate character literals.
--- a/java/ql/lib/codeql-pack.release.yml
+++ b/java/ql/lib/codeql-pack.release.yml
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.4
+lastReleaseVersion: 0.0.5
--- a/java/ql/lib/qlpack.yml
+++ b/java/ql/lib/qlpack.yml
@@ -1,5 +1,5 @@
 name: codeql/java-all
-version: 0.0.5-dev
+version: 0.0.5
 groups: java
 dbscheme: config/semmlecode.dbscheme
 extractor: java
--- a/java/ql/src/CHANGELOG.md
+++ b/java/ql/src/CHANGELOG.md
@@ -1 +1,7 @@
+## 0.0.5
+
+### Minor Analysis Improvements
+
+* The `java/constant-comparison` query no longer raises false alerts regarding comparisons with Unicode surrogate character literals.
+
 ## 0.0.4
--- a/java/ql/src/change-notes/2021-11-25-surrogate-char-literals.md
+++ b/java/ql/src/change-notes/2021-11-25-surrogate-char-literals.md
@@ -1,5 +1,5 @@
---
-category: minorAnalysis
-tags: [lgtm,codescanning]
---
+## 0.0.5
+
+### Minor Analysis Improvements
+
 * The `java/constant-comparison` query no longer raises false alerts regarding comparisons with Unicode surrogate character literals.
--- a/java/ql/src/codeql-pack.release.yml
+++ b/java/ql/src/codeql-pack.release.yml
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.4
+lastReleaseVersion: 0.0.5
--- a/java/ql/src/qlpack.yml
+++ b/java/ql/src/qlpack.yml
@@ -1,5 +1,5 @@
 name: codeql/java-queries
-version: 0.0.5-dev
+version: 0.0.5
 groups: java
 suites: codeql-suites
 extractor: java
--- a/java/upgrades/CHANGELOG.md
+++ b/java/upgrades/CHANGELOG.md
@@ -1 +1,3 @@
+## 0.0.5
+
 ## 0.0.4
--- a/java/upgrades/change-notes/released/0.0.5.md
+++ b/java/upgrades/change-notes/released/0.0.5.md
@@ -0,0 +1 @@
+## 0.0.5
--- a/java/upgrades/codeql-pack.release.yml
+++ b/java/upgrades/codeql-pack.release.yml
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.4
+lastReleaseVersion: 0.0.5
--- a/java/upgrades/qlpack.yml
+++ b/java/upgrades/qlpack.yml
@@ -2,4 +2,4 @@ name: codeql/java-upgrades
 groups: java
 upgrades: .
 library: true
-version: 0.0.5-dev
+version: 0.0.5
--- a/javascript/ql/lib/CHANGELOG.md
+++ b/javascript/ql/lib/CHANGELOG.md
@@ -1 +1,7 @@
+## 0.0.6
+
+### New Features
+
+* TypeScript 4.5 is now supported.
+
 ## 0.0.5
--- a/javascript/ql/lib/change-notes/2021-11-23-typescript-4.5.md
+++ b/javascript/ql/lib/change-notes/2021-11-23-typescript-4.5.md
@@ -1,5 +0,0 @@
---
-category: feature
-tags: [lgtm,codescanning]
---
-* TypeScript 4.5 is now supported.
--- a/javascript/ql/lib/change-notes/released/0.0.6.md
+++ b/javascript/ql/lib/change-notes/released/0.0.6.md
@@ -0,0 +1,5 @@
+## 0.0.6
+
+### New Features
+
+* TypeScript 4.5 is now supported.
--- a/javascript/ql/lib/codeql-pack.release.yml
+++ b/javascript/ql/lib/codeql-pack.release.yml
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.5
+lastReleaseVersion: 0.0.6
--- a/javascript/ql/lib/qlpack.yml
+++ b/javascript/ql/lib/qlpack.yml
@@ -1,5 +1,5 @@
 name: codeql/javascript-all
-version: 0.0.5
+version: 0.0.6
 groups: javascript
 dbscheme: semmlecode.javascript.dbscheme
 extractor: javascript
--- a/javascript/ql/src/CHANGELOG.md
+++ b/javascript/ql/src/CHANGELOG.md
@@ -1,3 +1,9 @@
+## 0.0.6
+
+### Major Analysis Improvements
+
+* TypeScript 4.5 is now supported.
+
 ## 0.0.5

 ### New Queries
--- a/javascript/ql/src/change-notes/2021-11-23-typescript-4.5.md
+++ b/javascript/ql/src/change-notes/2021-11-23-typescript-4.5.md
@@ -1,5 +0,0 @@
---
-category: majorAnalysis
-tags: [lgtm,codescanning]
---
-* TypeScript 4.5 is now supported.
--- a/javascript/ql/src/change-notes/released/0.0.6.md
+++ b/javascript/ql/src/change-notes/released/0.0.6.md
@@ -0,0 +1,5 @@
+## 0.0.6
+
+### Major Analysis Improvements
+
+* TypeScript 4.5 is now supported.
--- a/javascript/ql/src/codeql-pack.release.yml
+++ b/javascript/ql/src/codeql-pack.release.yml
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.5
+lastReleaseVersion: 0.0.6
--- a/javascript/ql/src/qlpack.yml
+++ b/javascript/ql/src/qlpack.yml
@@ -1,5 +1,5 @@
 name: codeql/javascript-queries
-version: 0.0.5
+version: 0.0.6
 groups: javascript
 suites: codeql-suites
 extractor: javascript
--- a/javascript/upgrades/CHANGELOG.md
+++ b/javascript/upgrades/CHANGELOG.md
@@ -1 +1,3 @@
+## 0.0.6
+
 ## 0.0.5
--- a/javascript/upgrades/change-notes/released/0.0.6.md
+++ b/javascript/upgrades/change-notes/released/0.0.6.md
@@ -0,0 +1 @@
+## 0.0.6
--- a/javascript/upgrades/codeql-pack.release.yml
+++ b/javascript/upgrades/codeql-pack.release.yml
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.5
+lastReleaseVersion: 0.0.6
--- a/javascript/upgrades/qlpack.yml
+++ b/javascript/upgrades/qlpack.yml
@@ -2,4 +2,4 @@ name: codeql/javascript-upgrades
 groups: javascript
 upgrades: .
 library: true
-version: 0.0.5
+version: 0.0.6
--- a/python/ql/lib/CHANGELOG.md
+++ b/python/ql/lib/CHANGELOG.md
@@ -1,3 +1,14 @@
+## 0.0.5
+
+### Minor Analysis Improvements
+
+* Added modeling of many functions from the `os` module that uses file system paths, such as `os.stat`, `os.chdir`, `os.mkdir`, and so on.
+* Added modeling of the `tempfile` module for creating temporary files and directories, such as the functions `tempfile.NamedTemporaryFile` and `tempfile.TemporaryDirectory`.
+* Extended the modeling of FastAPI such that custom subclasses of `fastapi.APIRouter` are recognized.
+* Extended the modeling of FastAPI such that `fastapi.responses.FileResponse` are considered `FileSystemAccess`.
+* Added modeling of the `posixpath`, `ntpath`, and `genericpath` modules for path operations (although these are not supposed to be used), resulting in new sinks.
+* Added modeling of `wsgiref.simple_server` applications, leading to new remote flow sources.
+
 ## 0.0.4

 ### Major Analysis Improvements
--- a/python/ql/lib/change-notes/2021-11-15-model-wsgiref-simple-server-app.md
+++ b/python/ql/lib/change-notes/2021-11-15-model-wsgiref-simple-server-app.md
@@ -1,5 +0,0 @@
---
-category: minorAnalysis
-tags: [lgtm,codescanning]
---
-* Added modeling of `wsgiref.simple_server` applications, leading to new remote flow sources.
--- a/python/ql/lib/change-notes/2021-11-16-posixpath.md
+++ b/python/ql/lib/change-notes/2021-11-16-posixpath.md
@@ -1,5 +0,0 @@
---
-category: minorAnalysis
-tags: [lgtm,codescanning]
---
-* Added modeling of the `posixpath`, `ntpath`, and `genericpath` modules for path operations (although these are not supposed to be used), resulting in new sinks.
--- a/python/ql/lib/change-notes/2021-11-24-FastAPI-Custom-APIRouter-Subclass.md
+++ b/python/ql/lib/change-notes/2021-11-24-FastAPI-Custom-APIRouter-Subclass.md
@@ -1,5 +0,0 @@
---
-category: minorAnalysis
-tags: [lgtm,codescanning]
---
-* Extended the modeling of FastAPI such that custom subclasses of `fastapi.APIRouter` are recognized.
--- a/python/ql/lib/change-notes/2021-11-24-FastAPI-FileResponse-FileSystemAccess.md
+++ b/python/ql/lib/change-notes/2021-11-24-FastAPI-FileResponse-FileSystemAccess.md
@@ -1,5 +0,0 @@
---
-category: minorAnalysis
-tags: [lgtm,codescanning]
---
-* Extended the modeling of FastAPI such that `fastapi.responses.FileResponse` are considered `FileSystemAccess`.
--- a/python/ql/lib/change-notes/2021-11-26-os-file-access.md
+++ b/python/ql/lib/change-notes/2021-11-26-os-file-access.md
@@ -1,5 +0,0 @@
---
-category: minorAnalysis
-tags: [lgtm,codescanning]
---
-* Added modeling of many functions from the `os` module that uses file system paths, such as `os.stat`, `os.chdir`, `os.mkdir`, and so on.
--- a/python/ql/lib/change-notes/2021-11-26-tempfile-file-access.md
+++ b/python/ql/lib/change-notes/2021-11-26-tempfile-file-access.md
@@ -1,5 +0,0 @@
---
-category: minorAnalysis
-tags: [lgtm,codescanning]
---
-* Added modeling of the `tempfile` module for creating temporary files and directories, such as the functions `tempfile.NamedTemporaryFile` and `tempfile.TemporaryDirectory`.
--- a/python/ql/lib/change-notes/released/0.0.5.md
+++ b/python/ql/lib/change-notes/released/0.0.5.md
@@ -0,0 +1,10 @@
+## 0.0.5
+
+### Minor Analysis Improvements
+
+* Added modeling of many functions from the `os` module that uses file system paths, such as `os.stat`, `os.chdir`, `os.mkdir`, and so on.
+* Added modeling of the `tempfile` module for creating temporary files and directories, such as the functions `tempfile.NamedTemporaryFile` and `tempfile.TemporaryDirectory`.
+* Extended the modeling of FastAPI such that custom subclasses of `fastapi.APIRouter` are recognized.
+* Extended the modeling of FastAPI such that `fastapi.responses.FileResponse` are considered `FileSystemAccess`.
+* Added modeling of the `posixpath`, `ntpath`, and `genericpath` modules for path operations (although these are not supposed to be used), resulting in new sinks.
+* Added modeling of `wsgiref.simple_server` applications, leading to new remote flow sources.
--- a/python/ql/lib/codeql-pack.release.yml
+++ b/python/ql/lib/codeql-pack.release.yml
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.4
+lastReleaseVersion: 0.0.5
--- a/python/ql/lib/qlpack.yml
+++ b/python/ql/lib/qlpack.yml
@@ -1,5 +1,5 @@
 name: codeql/python-all
-version: 0.0.5-dev
+version: 0.0.5
 groups: python
 dbscheme: semmlecode.python.dbscheme
 extractor: python
--- a/python/ql/src/CHANGELOG.md
+++ b/python/ql/src/CHANGELOG.md
@@ -1,3 +1,13 @@
+## 0.0.5
+
+### Minor Analysis Improvements
+
+* Added modeling of many functions from the `os` module that uses file system paths, such as `os.stat`, `os.chdir`, `os.mkdir`, and so on. All of these are new sinks for the _Uncontrolled data used in path expression_ (`py/path-injection`) query.
+* Added modeling of the `tempfile` module for creating temporary files and directories, such as the functions `tempfile.NamedTemporaryFile` and `tempfile.TemporaryDirectory`. The `suffix`, `prefix`, and `dir` arguments are all vulnerable to path-injection, and these are new sinks for the _Uncontrolled data used in path expression_ (`py/path-injection`) query.
+* Extended the modeling of FastAPI such that `fastapi.responses.FileResponse` are considered `FileSystemAccess`, making them sinks for the _Uncontrolled data used in path expression_ (`py/path-injection`) query.
+* Added modeling of the `posixpath`, `ntpath`, and `genericpath` modules for path operations (although these are not supposed to be used), resulting in new sinks for the _Uncontrolled data used in path expression_ (`py/path-injection`) query.
+* Added modeling of `wsgiref.simple_server` applications, leading to new remote flow sources.
+
 ## 0.0.4

 ### Query Metadata Changes
--- a/python/ql/src/change-notes/2021-11-15-model-wsgiref-simple-server-app.md
+++ b/python/ql/src/change-notes/2021-11-15-model-wsgiref-simple-server-app.md
@@ -1,5 +0,0 @@
---
-category: minorAnalysis
-tags: [lgtm,codescanning]
---
-* Added modeling of `wsgiref.simple_server` applications, leading to new remote flow sources.
--- a/python/ql/src/change-notes/2021-11-16-posixpath.md
+++ b/python/ql/src/change-notes/2021-11-16-posixpath.md
@@ -1,5 +0,0 @@
---
-category: minorAnalysis
-tags: [lgtm,codescanning]
---
-* Added modeling of the `posixpath`, `ntpath`, and `genericpath` modules for path operations (although these are not supposed to be used), resulting in new sinks for the _Uncontrolled data used in path expression_ (`py/path-injection`) query.
--- a/python/ql/src/change-notes/2021-11-24-FastAPI-FileResponse-FileSystemAccess.md
+++ b/python/ql/src/change-notes/2021-11-24-FastAPI-FileResponse-FileSystemAccess.md
@@ -1,5 +0,0 @@
---
-category: minorAnalysis
-tags: [lgtm,codescanning]
---
-* Extended the modeling of FastAPI such that `fastapi.responses.FileResponse` are considered `FileSystemAccess`, making them sinks for the _Uncontrolled data used in path expression_ (`py/path-injection`) query.
--- a/python/ql/src/change-notes/2021-11-26-os-file-access.md
+++ b/python/ql/src/change-notes/2021-11-26-os-file-access.md
@@ -1,5 +0,0 @@
---
-category: minorAnalysis
-tags: [lgtm,codescanning]
---
-* Added modeling of many functions from the `os` module that uses file system paths, such as `os.stat`, `os.chdir`, `os.mkdir`, and so on. All of these are new sinks for the _Uncontrolled data used in path expression_ (`py/path-injection`) query.
--- a/python/ql/src/change-notes/2021-11-26-tempfile-file-access.md
+++ b/python/ql/src/change-notes/2021-11-26-tempfile-file-access.md
@@ -1,5 +0,0 @@
---
-category: minorAnalysis
-tags: [lgtm,codescanning]
---
-* Added modeling of the `tempfile` module for creating temporary files and directories, such as the functions `tempfile.NamedTemporaryFile` and `tempfile.TemporaryDirectory`. The `suffix`, `prefix`, and `dir` arguments are all vulnerable to path-injection, and these are new sinks for the _Uncontrolled data used in path expression_ (`py/path-injection`) query.
--- a/python/ql/src/change-notes/released/0.0.5.md
+++ b/python/ql/src/change-notes/released/0.0.5.md
@@ -0,0 +1,9 @@
+## 0.0.5
+
+### Minor Analysis Improvements
+
+* Added modeling of many functions from the `os` module that uses file system paths, such as `os.stat`, `os.chdir`, `os.mkdir`, and so on. All of these are new sinks for the _Uncontrolled data used in path expression_ (`py/path-injection`) query.
+* Added modeling of the `tempfile` module for creating temporary files and directories, such as the functions `tempfile.NamedTemporaryFile` and `tempfile.TemporaryDirectory`. The `suffix`, `prefix`, and `dir` arguments are all vulnerable to path-injection, and these are new sinks for the _Uncontrolled data used in path expression_ (`py/path-injection`) query.
+* Extended the modeling of FastAPI such that `fastapi.responses.FileResponse` are considered `FileSystemAccess`, making them sinks for the _Uncontrolled data used in path expression_ (`py/path-injection`) query.
+* Added modeling of the `posixpath`, `ntpath`, and `genericpath` modules for path operations (although these are not supposed to be used), resulting in new sinks for the _Uncontrolled data used in path expression_ (`py/path-injection`) query.
+* Added modeling of `wsgiref.simple_server` applications, leading to new remote flow sources.
--- a/python/ql/src/codeql-pack.release.yml
+++ b/python/ql/src/codeql-pack.release.yml
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.4
+lastReleaseVersion: 0.0.5
--- a/python/ql/src/qlpack.yml
+++ b/python/ql/src/qlpack.yml
@@ -1,5 +1,5 @@
 name: codeql/python-queries
-version: 0.0.5-dev
+version: 0.0.5
 groups: python
 dependencies:
    codeql/python-all: "*"
--- a/python/upgrades/CHANGELOG.md
+++ b/python/upgrades/CHANGELOG.md
@@ -1 +1,3 @@
+## 0.0.5
+
 ## 0.0.4
--- a/python/upgrades/change-notes/released/0.0.5.md
+++ b/python/upgrades/change-notes/released/0.0.5.md
@@ -0,0 +1 @@
+## 0.0.5
--- a/python/upgrades/codeql-pack.release.yml
+++ b/python/upgrades/codeql-pack.release.yml
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.4
+lastReleaseVersion: 0.0.5
--- a/python/upgrades/qlpack.yml
+++ b/python/upgrades/qlpack.yml
@@ -2,4 +2,4 @@ name: codeql/python-upgrades
 groups: python
 upgrades: .
 library: true
-version: 0.0.5-dev
+version: 0.0.5
--- a/ruby/ql/lib/CHANGELOG.md
+++ b/ruby/ql/lib/CHANGELOG.md
@@ -1 +1,7 @@
+## 0.0.5
+
+### New Features
+
+* A new library, `Customizations.qll`, has been added, which allows for global customizations that affect all queries.
+
 ## 0.0.4
--- a/ruby/ql/lib/change-notes/2021-12-07-customizations.md
+++ b/ruby/ql/lib/change-notes/2021-12-07-customizations.md
@@ -1,5 +1,5 @@
---
-category: feature
-tags: [lgtm,codescanning]
---
+## 0.0.5
+
+### New Features
+
 * A new library, `Customizations.qll`, has been added, which allows for global customizations that affect all queries.
--- a/ruby/ql/lib/codeql-pack.release.yml
+++ b/ruby/ql/lib/codeql-pack.release.yml
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.4
+lastReleaseVersion: 0.0.5
--- a/ruby/ql/lib/qlpack.yml
+++ b/ruby/ql/lib/qlpack.yml
@@ -1,5 +1,5 @@
 name: codeql/ruby-all
-version: 0.0.5-dev
+version: 0.0.5
 groups: ruby
 extractor: ruby
 dbscheme: ruby.dbscheme
--- a/ruby/ql/src/CHANGELOG.md
+++ b/ruby/ql/src/CHANGELOG.md
@@ -1,3 +1,5 @@
+## 0.0.5
+
 ## 0.0.4

 ### New Queries
--- a/ruby/ql/src/change-notes/released/0.0.5.md
+++ b/ruby/ql/src/change-notes/released/0.0.5.md
@@ -0,0 +1 @@
+## 0.0.5
--- a/ruby/ql/src/codeql-pack.release.yml
+++ b/ruby/ql/src/codeql-pack.release.yml
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.4
+lastReleaseVersion: 0.0.5
--- a/ruby/ql/src/qlpack.yml
+++ b/ruby/ql/src/qlpack.yml
@@ -1,5 +1,5 @@
 name: codeql/ruby-queries
-version: 0.0.5-dev
+version: 0.0.5
 groups: ruby
 suites: codeql-suites
 defaultSuiteFile: codeql-suites/ruby-code-scanning.qls