Release preparation for version 2.14.0

java/ql/lib/CHANGELOG.md

@@ -1,3 +1,25 @@
+## 0.7.0
+
+### Deprecated APIs
+
+* The `ExecCallable` class in `ExternalProcess.qll` has been deprecated.
+
+### Major Analysis Improvements
+
+* The data flow library now performs type strengthening. This increases precision for all data flow queries by excluding paths that can be inferred to be impossible due to incompatible types.
+
+### Minor Analysis Improvements
+
+* Added automatically-generated dataflow models for `javax.portlet`.
+* Added a missing summary model for the method `java.net.URL.toString`.
+* Added automatically-generated dataflow models for the following frameworks and libraries:
+  * `hudson`
+  * `jenkins`
+  * `net.sf.json`
+  * `stapler`
+* Added more models for the Hudson framework.
+* Added more models for the Stapler framework.
+
 ## 0.6.4
 
 No user-facing changes.

java/ql/lib/change-notes/2023-04-19-deprecated-execcallable.md

@@ -1,4 +0,0 @@
----
-category: deprecated
----
-* The `ExecCallable` class in `ExternalProcess.qll` has been deprecated.

java/ql/lib/change-notes/2023-05-22-hudson-models.md

@@ -1,4 +0,0 @@
----
-category: minorAnalysis
----
-* Added more models for the Hudson framework.

java/ql/lib/change-notes/2023-05-22-stapler-models.md

@@ -1,4 +0,0 @@
----
-category: minorAnalysis
----
-* Added more models for the Stapler framework.

java/ql/lib/change-notes/2023-06-08-type-strengthening.md

@@ -1,4 +0,0 @@
----
-category: majorAnalysis
----
-* The data flow library now performs type strengthening. This increases precision for all data flow queries by excluding paths that can be inferred to be impossible due to incompatible types.

java/ql/lib/change-notes/2023-06-14-jenkins-autogenerated-models.md

@@ -1,8 +0,0 @@
----
-category: minorAnalysis
----
-* Added automatically-generated dataflow models for the following frameworks and libraries:
-  * `hudson`
-  * `jenkins`
-  * `net.sf.json`
-  * `stapler`

java/ql/lib/change-notes/2023-06-22-url-tostring-model.md

@@ -1,4 +0,0 @@
----
-category: minorAnalysis
----
-* Added a missing summary model for the method `java.net.URL.toString`.

java/ql/lib/change-notes/2023-06-28-javax-portlet-autogenerated-models.md

@@ -1,4 +0,0 @@
----
-category: minorAnalysis
----
-* Added automatically-generated dataflow models for `javax.portlet`.

java/ql/lib/change-notes/released/0.7.0.md

@@ -0,0 +1,21 @@
+## 0.7.0
+
+### Deprecated APIs
+
+* The `ExecCallable` class in `ExternalProcess.qll` has been deprecated.
+
+### Major Analysis Improvements
+
+* The data flow library now performs type strengthening. This increases precision for all data flow queries by excluding paths that can be inferred to be impossible due to incompatible types.
+
+### Minor Analysis Improvements
+
+* Added automatically-generated dataflow models for `javax.portlet`.
+* Added a missing summary model for the method `java.net.URL.toString`.
+* Added automatically-generated dataflow models for the following frameworks and libraries:
+  * `hudson`
+  * `jenkins`
+  * `net.sf.json`
+  * `stapler`
+* Added more models for the Hudson framework.
+* Added more models for the Stapler framework.

java/ql/lib/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.6.4
+lastReleaseVersion: 0.7.0

java/ql/lib/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/java-all
-version: 0.7.0-dev
+version: 0.7.0
 groups: java
 dbscheme: config/semmlecode.dbscheme
 extractor: java

java/ql/src/CHANGELOG.md

@@ -1,3 +1,14 @@
+## 0.7.0
+
+### Minor Analysis Improvements
+
+* New models have been added for `org.apache.commons.lang`.
+* The query `java/unsafe-deserialization` has been updated to take into account `SerialKiller`, a library used to prevent deserialization of arbitrary classes.
+
+### Bug Fixes
+
+* The query "Arbitrary file write during archive extraction ("Zip Slip")" (`java/zipslip`) has been renamed to "Arbitrary file access during archive extraction ("Zip Slip")."
+
 ## 0.6.4
 
 No user-facing changes.

java/ql/src/change-notes/2023-06-02-unsafe-deserialization-serialkiller.md

@@ -1,4 +0,0 @@
----
-category: minorAnalysis
----
-* The query `java/unsafe-deserialization` has been updated to take into account `SerialKiller`, a library used to prevent deserialization of arbitrary classes.

java/ql/src/change-notes/2023-06-16-zipslip-rename.md

@@ -1,4 +0,0 @@
----
-category: fix
----
-* The query "Arbitrary file write during archive extraction ("Zip Slip")" (`java/zipslip`) has been renamed to "Arbitrary file access during archive extraction ("Zip Slip")."

java/ql/src/change-notes/2023-06-23-apache-commons-lang.md

@@ -1,4 +0,0 @@
----
-category: minorAnalysis
----
-* New models have been added for `org.apache.commons.lang`.

java/ql/src/change-notes/released/0.7.0.md

@@ -0,0 +1,10 @@
+## 0.7.0
+
+### Minor Analysis Improvements
+
+* New models have been added for `org.apache.commons.lang`.
+* The query `java/unsafe-deserialization` has been updated to take into account `SerialKiller`, a library used to prevent deserialization of arbitrary classes.
+
+### Bug Fixes
+
+* The query "Arbitrary file write during archive extraction ("Zip Slip")" (`java/zipslip`) has been renamed to "Arbitrary file access during archive extraction ("Zip Slip")."

java/ql/src/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.6.4
+lastReleaseVersion: 0.7.0

java/ql/src/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/java-queries
-version: 0.7.0-dev
+version: 0.7.0
 groups: 
   - java
   - queries