From 59dbd68a5e49de10d04ac040d50f3145f639d751 Mon Sep 17 00:00:00 2001 From: Geoffrey White <40627776+geoffw0@users.noreply.github.com> Date: Thu, 14 May 2026 14:46:05 +0100 Subject: [PATCH] Add change notes. --- javascript/ql/lib/change-notes/2026-05-14-sensitive-data.md | 4 ++++ python/ql/lib/change-notes/2026-05-14-sensitive-data.md | 4 ++++ rust/ql/lib/change-notes/2026-05-14-sensitive-data.md | 4 ++++ swift/ql/lib/change-notes/2026-05-14-sensitive-data.md | 4 ++++ 4 files changed, 16 insertions(+) create mode 100644 javascript/ql/lib/change-notes/2026-05-14-sensitive-data.md create mode 100644 python/ql/lib/change-notes/2026-05-14-sensitive-data.md create mode 100644 rust/ql/lib/change-notes/2026-05-14-sensitive-data.md create mode 100644 swift/ql/lib/change-notes/2026-05-14-sensitive-data.md diff --git a/javascript/ql/lib/change-notes/2026-05-14-sensitive-data.md b/javascript/ql/lib/change-notes/2026-05-14-sensitive-data.md new file mode 100644 index 00000000000..341f7babd70 --- /dev/null +++ b/javascript/ql/lib/change-notes/2026-05-14-sensitive-data.md @@ -0,0 +1,4 @@ +--- +category: minorAnalysis +--- +* The sensitive data heuristics used to identify code that handles passwords and private data have been improved. Most of the changes permit more variations of established patterns, thereby finding more sensitive data. Queries that use the sensitive data library (for example `js/clear-text-logging`) may find more correct results and less false positive results after these changes. diff --git a/python/ql/lib/change-notes/2026-05-14-sensitive-data.md b/python/ql/lib/change-notes/2026-05-14-sensitive-data.md new file mode 100644 index 00000000000..d40c7cbba88 --- /dev/null +++ b/python/ql/lib/change-notes/2026-05-14-sensitive-data.md @@ -0,0 +1,4 @@ +--- +category: minorAnalysis +--- +* The sensitive data heuristics used to identify code that handles passwords and private data have been improved. Most of the changes permit more variations of established patterns, thereby finding more sensitive data. Queries that use the sensitive data library (for example `py/clear-text-logging-sensitive-data`) may find more correct results and less false positive results after these changes. diff --git a/rust/ql/lib/change-notes/2026-05-14-sensitive-data.md b/rust/ql/lib/change-notes/2026-05-14-sensitive-data.md new file mode 100644 index 00000000000..478cfea8cbf --- /dev/null +++ b/rust/ql/lib/change-notes/2026-05-14-sensitive-data.md @@ -0,0 +1,4 @@ +--- +category: minorAnalysis +--- +* The sensitive data heuristics used to identify code that handles passwords and private data have been improved. Most of the changes permit more variations of established patterns, thereby finding more sensitive data. Queries that use the sensitive data library (for example `rust/cleartext-logging`) may find more correct results and less false positive results after these changes. diff --git a/swift/ql/lib/change-notes/2026-05-14-sensitive-data.md b/swift/ql/lib/change-notes/2026-05-14-sensitive-data.md new file mode 100644 index 00000000000..64f6ff3ce76 --- /dev/null +++ b/swift/ql/lib/change-notes/2026-05-14-sensitive-data.md @@ -0,0 +1,4 @@ +--- +category: minorAnalysis +--- +* The sensitive data heuristics used to identify code that handles passwords and private data have been improved. Most of the changes permit more variations of established patterns, thereby finding more sensitive data. Queries that use the sensitive data library (for example `swift/cleartext-logging`) may find more correct results and less false positive results after these changes.