Merge branch 'main' into amammad-python-WebAppsConstatntSecretKeys

python/ql/src/CHANGELOG.md

@@ -1,3 +1,13 @@
+## 0.8.0
+
+### Bug Fixes
+
+* The query "Arbitrary file write during archive extraction ("Zip Slip")" (`py/zipslip`) has been renamed to "Arbitrary file access during archive extraction ("Zip Slip")."
+
+## 0.7.4
+
+No user-facing changes.
+
 ## 0.7.3
 
 ### Bug Fixes

python/ql/src/change-notes/2023-07-06-aiohttp-clientsession-modeling.md

@@ -0,0 +1,4 @@
+---
+category: minorAnalysis
+---
+* Fixed modeling of `aiohttp.ClientSession` so we properly handle `async with` uses. This can impact results of server-side request forgery queries (`py/full-ssrf`, `py/partial-ssrf`).

python/ql/src/change-notes/released/0.7.4.md

@@ -0,0 +1,3 @@
+## 0.7.4
+
+No user-facing changes.

python/ql/src/change-notes/released/0.8.0.md

@@ -1,4 +1,5 @@
----
-category: fix
----
+## 0.8.0
+
+### Bug Fixes
+
 * The query "Arbitrary file write during archive extraction ("Zip Slip")" (`py/zipslip`) has been renamed to "Arbitrary file access during archive extraction ("Zip Slip")."

python/ql/src/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.7.3
+lastReleaseVersion: 0.8.0

python/ql/src/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/python-queries
-version: 0.7.4-dev
+version: 0.8.1-dev
 groups: 
   - python
   - queries