Release preparation for version 2.26.2

java/ql/lib/CHANGELOG.md

@@ -1,3 +1,10 @@
+## 9.2.2
+
+### Minor Analysis Improvements
+
+* Kotlin versions up to 2.4.10 are now supported.
+* `java.io.File.getName()` is no longer treated as a complete sanitizer for `java/path-injection`, since it does not remove a `..` path component (for example `new File("..").getName()` returns `".."`). It is now only recognized as a sanitizer when combined with a subsequent check for `..` components, which may result in new alerts.
+
 ## 9.2.1
 
 ### Minor Analysis Improvements

java/ql/lib/change-notes/2026-07-15-kotlin-2.4.10.md

@@ -1,4 +0,0 @@
----
-category: minorAnalysis
----
-* Kotlin versions up to 2.4.10 are now supported.

java/ql/lib/change-notes/released/9.2.2.md

@@ -1,4 +1,6 @@
----
-category: minorAnalysis
----
+## 9.2.2
+
+### Minor Analysis Improvements
+
+* Kotlin versions up to 2.4.10 are now supported.
 * `java.io.File.getName()` is no longer treated as a complete sanitizer for `java/path-injection`, since it does not remove a `..` path component (for example `new File("..").getName()` returns `".."`). It is now only recognized as a sanitizer when combined with a subsequent check for `..` components, which may result in new alerts.

java/ql/lib/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 9.2.1
+lastReleaseVersion: 9.2.2

java/ql/lib/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/java-all
-version: 9.2.2-dev
+version: 9.2.2
 groups: java
 dbscheme: config/semmlecode.dbscheme
 extractor: java

java/ql/src/CHANGELOG.md

@@ -1,3 +1,7 @@
+## 1.11.7
+
+No user-facing changes.
+
 ## 1.11.6
 
 No user-facing changes.

java/ql/src/change-notes/released/1.11.7.md

@@ -0,0 +1,3 @@
+## 1.11.7
+
+No user-facing changes.

java/ql/src/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 1.11.6
+lastReleaseVersion: 1.11.7

java/ql/src/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/java-queries
-version: 1.11.7-dev
+version: 1.11.7
 groups:
   - java
   - queries