hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-28 02:05:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

Revert "Release preparation for version 2.20.1"

Browse Source
This commit is contained in:
Dave Bartolomeo
2025-01-07 13:32:23 -05:00
committed by GitHub
parent 3da6adf1e8
commit 72a53c4b23
169 changed files with 199 additions and 449 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
python/ql/lib/CHANGELOG.md
View File

@@ -1,14 +1,3 @@
## 3.1.0
### New Features
* Added support for parameter annotations in API graphs. This means that in a function definition such as `def foo(x: Bar): ...`, you can now use the `getInstanceFromAnnotation()` method to step from `Bar` to `x`. In addition to this, the `getAnInstance` method now also includes instances arising from parameter annotations.
### Minor Analysis Improvements
* Added modeling of `fastapi.Request` and `starlette.requests.Request` as sources of untrusted input,
and modeling of tainted data flow out of these request objects.
## 3.0.0
### Breaking Changes

5
python/ql/lib/change-notes/2024-11-26-parameter-annotation-api-graph-support.md Normal file
View File

@@ -0,0 +1,5 @@
---
category: feature
---
- Added support for parameter annotations in API graphs. This means that in a function definition such as `def foo(x: Bar): ...`, you can now use the `getInstanceFromAnnotation()` method to step from `Bar` to `x`. In addition to this, the `getAnInstance` method now also includes instances arising from parameter annotations.

5
python/ql/lib/change-notes/2024-12-18-fastapi-request-modeling.md Normal file
View File

@@ -0,0 +1,5 @@
---
category: minorAnalysis
---
* Added modeling of `fastapi.Request` and `starlette.requests.Request` as sources of untrusted input,
and modeling of tainted data flow out of these request objects.

10
python/ql/lib/change-notes/released/3.1.0.md
View File

@@ -1,10 +0,0 @@
## 3.1.0
### New Features
* Added support for parameter annotations in API graphs. This means that in a function definition such as `def foo(x: Bar): ...`, you can now use the `getInstanceFromAnnotation()` method to step from `Bar` to `x`. In addition to this, the `getAnInstance` method now also includes instances arising from parameter annotations.
### Minor Analysis Improvements
* Added modeling of `fastapi.Request` and `starlette.requests.Request` as sources of untrusted input,
and modeling of tainted data flow out of these request objects.

2
python/ql/lib/codeql-pack.release.yml
View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 3.1.0
lastReleaseVersion: 3.0.0

2
python/ql/lib/qlpack.yml
View File

@@ -1,5 +1,5 @@
name: codeql/python-all
version: 3.1.0
version: 3.0.1-dev
groups: python
dbscheme: semmlecode.python.dbscheme
extractor: python