Release preparation for version 2.22.4

This commit is contained in:
github-actions[bot]
2025-08-18 14:06:09 +00:00
parent f1ca0ecc3c
commit 90d29994c8
173 changed files with 416 additions and 130 deletions

View File

@@ -1,3 +1,7 @@
## 0.4.15
No user-facing changes.
## 0.4.14
No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 0.4.15
No user-facing changes.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 0.4.14
lastReleaseVersion: 0.4.15

View File

@@ -1,5 +1,5 @@
name: codeql/actions-all
version: 0.4.15-dev
version: 0.4.15
library: true
warnOnImplicitThis: true
dependencies:

View File

@@ -1,3 +1,7 @@
## 0.6.7
No user-facing changes.
## 0.6.6
No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 0.6.7
No user-facing changes.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 0.6.6
lastReleaseVersion: 0.6.7

View File

@@ -1,5 +1,5 @@
name: codeql/actions-queries
version: 0.6.7-dev
version: 0.6.7
library: false
warnOnImplicitThis: true
groups: [actions, queries]

View File

@@ -1,3 +1,11 @@
## 5.4.1
### Minor Analysis Improvements
* The guards libraries (`semmle.code.cpp.controlflow.Guards` and `semmle.code.cpp.controlflow.IRGuards`) have been improved to recognize more guards.
* Improved dataflow through global variables in the new dataflow library (`semmle.code.cpp.dataflow.new.DataFlow` and `semmle.code.cpp.dataflow.new.TaintTracking`). Queries based on these libraries will produce more results on codebases with many global variables.
* The global value numbering library (`semmle.code.cpp.valuenumbering.GlobalValueNumbering` and `semmle.code.cpp.ir.ValueNumbering`) has been improved so more expressions are assigned the same value number.
## 5.4.0
### New Features

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* The global value numbering library (`semmle.code.cpp.valuenumbering.GlobalValueNumbering` and `semmle.code.cpp.ir.ValueNumbering`) has been improved so more expressions are assigned the same value number.

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* Improved dataflow through global variables in the new dataflow library (`semmle.code.cpp.dataflow.new.DataFlow` and `semmle.code.cpp.dataflow.new.TaintTracking`). Queries based on these libraries will produce more results on codebases with many global variables.

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* The guards libraries (`semmle.code.cpp.controlflow.Guards` and `semmle.code.cpp.controlflow.IRGuards`) have been improved to recognize more guards.

View File

@@ -0,0 +1,7 @@
## 5.4.1
### Minor Analysis Improvements
* The guards libraries (`semmle.code.cpp.controlflow.Guards` and `semmle.code.cpp.controlflow.IRGuards`) have been improved to recognize more guards.
* Improved dataflow through global variables in the new dataflow library (`semmle.code.cpp.dataflow.new.DataFlow` and `semmle.code.cpp.dataflow.new.TaintTracking`). Queries based on these libraries will produce more results on codebases with many global variables.
* The global value numbering library (`semmle.code.cpp.valuenumbering.GlobalValueNumbering` and `semmle.code.cpp.ir.ValueNumbering`) has been improved so more expressions are assigned the same value number.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 5.4.0
lastReleaseVersion: 5.4.1

View File

@@ -1,5 +1,5 @@
name: codeql/cpp-all
version: 5.4.1-dev
version: 5.4.1
groups: cpp
dbscheme: semmlecode.cpp.dbscheme
extractor: cpp

View File

@@ -1,3 +1,10 @@
## 1.4.6
### Minor Analysis Improvements
* The `cpp/short-global-name` query will no longer give alerts for instantiations of template variables, only for the template itself.
* Fixed a false positive in `cpp/overflow-buffer` when the type of the destination buffer is a reference to a class/struct type.
## 1.4.5
### Minor Analysis Improvements

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* Fixed a false positive in `cpp/overflow-buffer` when the type of the destination buffer is a reference to a class/struct type.

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* The `cpp/short-global-name` query will no longer give alerts for instantiations of template variables, only for the template itself.

View File

@@ -0,0 +1,6 @@
## 1.4.6
### Minor Analysis Improvements
* The `cpp/short-global-name` query will no longer give alerts for instantiations of template variables, only for the template itself.
* Fixed a false positive in `cpp/overflow-buffer` when the type of the destination buffer is a reference to a class/struct type.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 1.4.5
lastReleaseVersion: 1.4.6

View File

@@ -1,5 +1,5 @@
name: codeql/cpp-queries
version: 1.4.6-dev
version: 1.4.6
groups:
- cpp
- queries

View File

@@ -1,3 +1,7 @@
## 1.7.46
No user-facing changes.
## 1.7.45
No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 1.7.46
No user-facing changes.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 1.7.45
lastReleaseVersion: 1.7.46

View File

@@ -1,5 +1,5 @@
name: codeql/csharp-solorigate-all
version: 1.7.46-dev
version: 1.7.46
groups:
- csharp
- solorigate

View File

@@ -1,3 +1,7 @@
## 1.7.46
No user-facing changes.
## 1.7.45
No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 1.7.46
No user-facing changes.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 1.7.45
lastReleaseVersion: 1.7.46

View File

@@ -1,5 +1,5 @@
name: codeql/csharp-solorigate-queries
version: 1.7.46-dev
version: 1.7.46
groups:
- csharp
- solorigate

View File

@@ -1,3 +1,7 @@
## 5.2.2
No user-facing changes.
## 5.2.1
No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 5.2.2
No user-facing changes.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 5.2.1
lastReleaseVersion: 5.2.2

View File

@@ -1,5 +1,5 @@
name: codeql/csharp-all
version: 5.2.2-dev
version: 5.2.2
groups: csharp
dbscheme: semmlecode.csharp.dbscheme
extractor: csharp

View File

@@ -1,3 +1,7 @@
## 1.3.3
No user-facing changes.
## 1.3.2
No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 1.3.3
No user-facing changes.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 1.3.2
lastReleaseVersion: 1.3.3

View File

@@ -1,5 +1,5 @@
name: codeql/csharp-queries
version: 1.3.3-dev
version: 1.3.3
groups:
- csharp
- queries

View File

@@ -1,3 +1,7 @@
## 1.0.29
No user-facing changes.
## 1.0.28
No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 1.0.29
No user-facing changes.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 1.0.28
lastReleaseVersion: 1.0.29

View File

@@ -1,5 +1,5 @@
name: codeql-go-consistency-queries
version: 1.0.29-dev
version: 1.0.29
groups:
- go
- queries

View File

@@ -1,3 +1,7 @@
## 4.3.2
No user-facing changes.
## 4.3.1
No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 4.3.2
No user-facing changes.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 4.3.1
lastReleaseVersion: 4.3.2

View File

@@ -1,5 +1,5 @@
name: codeql/go-all
version: 4.3.2-dev
version: 4.3.2
groups: go
dbscheme: go.dbscheme
extractor: go

View File

@@ -1,3 +1,7 @@
## 1.4.3
No user-facing changes.
## 1.4.2
No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 1.4.3
No user-facing changes.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 1.4.2
lastReleaseVersion: 1.4.3

View File

@@ -1,5 +1,5 @@
name: codeql/go-queries
version: 1.4.3-dev
version: 1.4.3
groups:
- go
- queries

View File

@@ -1,3 +1,13 @@
## 7.6.0
### Major Analysis Improvements
* Added library models for the relevant method calls under `jakarta.servlet.ServletRequest` and `jakarta.servlet.http.HttpServletRequest` as remote flow sources.
### Minor Analysis Improvements
* Guard implication logic involving wrapper methods has been improved. In particular, this means fewer false positives for `java/dereferenced-value-may-be-null`.
## 7.5.0
### New Features

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* Guard implication logic involving wrapper methods has been improved. In particular, this means fewer false positives for `java/dereferenced-value-may-be-null`.

View File

@@ -1,4 +0,0 @@
---
category: majorAnalysis
---
* Added library models for the relevant method calls under `jakarta.servlet.ServletRequest` and `jakarta.servlet.http.HttpServletRequest` as remote flow sources.

View File

@@ -0,0 +1,9 @@
## 7.6.0
### Major Analysis Improvements
* Added library models for the relevant method calls under `jakarta.servlet.ServletRequest` and `jakarta.servlet.http.HttpServletRequest` as remote flow sources.
### Minor Analysis Improvements
* Guard implication logic involving wrapper methods has been improved. In particular, this means fewer false positives for `java/dereferenced-value-may-be-null`.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 7.5.0
lastReleaseVersion: 7.6.0

View File

@@ -1,5 +1,5 @@
name: codeql/java-all
version: 7.5.1-dev
version: 7.6.0
groups: java
dbscheme: config/semmlecode.dbscheme
extractor: java

View File

@@ -1,3 +1,7 @@
## 1.6.3
No user-facing changes.
## 1.6.2
No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 1.6.3
No user-facing changes.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 1.6.2
lastReleaseVersion: 1.6.3

View File

@@ -1,5 +1,5 @@
name: codeql/java-queries
version: 1.6.3-dev
version: 1.6.3
groups:
- java
- queries

View File

@@ -1,3 +1,9 @@
## 2.6.9
### Minor Analysis Improvements
* Improved modeling of command-line argument parsing libraries [arg](https://www.npmjs.com/package/arg), [args](https://www.npmjs.com/package/args), [command-line-args](https://www.npmjs.com/package/command-line-args) and [commander](https://www.npmjs.com/package/commander)
## 2.6.8
### Minor Analysis Improvements

View File

@@ -1,4 +1,5 @@
---
category: minorAnalysis
---
## 2.6.9
### Minor Analysis Improvements
* Improved modeling of command-line argument parsing libraries [arg](https://www.npmjs.com/package/arg), [args](https://www.npmjs.com/package/args), [command-line-args](https://www.npmjs.com/package/command-line-args) and [commander](https://www.npmjs.com/package/commander)

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 2.6.8
lastReleaseVersion: 2.6.9

View File

@@ -1,5 +1,5 @@
name: codeql/javascript-all
version: 2.6.9-dev
version: 2.6.9
groups: javascript
dbscheme: semmlecode.javascript.dbscheme
extractor: javascript

View File

@@ -1,3 +1,9 @@
## 2.0.2
### Minor Analysis Improvements
* The `js/regex-injection` query no longer considers environment variables as sources by default. Environment variables can be re-enabled as sources by setting the threat model to include the "environment" category.
## 2.0.1
No user-facing changes.

View File

@@ -1,4 +1,5 @@
---
category: minorAnalysis
---
## 2.0.2
### Minor Analysis Improvements
* The `js/regex-injection` query no longer considers environment variables as sources by default. Environment variables can be re-enabled as sources by setting the threat model to include the "environment" category.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 2.0.1
lastReleaseVersion: 2.0.2

View File

@@ -1,5 +1,5 @@
name: codeql/javascript-queries
version: 2.0.2-dev
version: 2.0.2
groups:
- javascript
- queries

View File

@@ -1,3 +1,7 @@
## 1.0.29
No user-facing changes.
## 1.0.28
No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 1.0.29
No user-facing changes.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 1.0.28
lastReleaseVersion: 1.0.29

View File

@@ -1,4 +1,4 @@
name: codeql/suite-helpers
version: 1.0.29-dev
version: 1.0.29
groups: shared
warnOnImplicitThis: true

View File

@@ -1,3 +1,7 @@
## 4.0.13
No user-facing changes.
## 4.0.12
### Minor Analysis Improvements

View File

@@ -0,0 +1,3 @@
## 4.0.13
No user-facing changes.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 4.0.12
lastReleaseVersion: 4.0.13

View File

@@ -1,5 +1,5 @@
name: codeql/python-all
version: 4.0.13-dev
version: 4.0.13
groups: python
dbscheme: semmlecode.python.dbscheme
extractor: python

View File

@@ -1,3 +1,7 @@
## 1.6.3
No user-facing changes.
## 1.6.2
No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 1.6.3
No user-facing changes.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 1.6.2
lastReleaseVersion: 1.6.3

View File

@@ -1,5 +1,5 @@
name: codeql/python-queries
version: 1.6.3-dev
version: 1.6.3
groups:
- python
- queries

View File

@@ -1,3 +1,12 @@
## 5.0.2
### Bug Fixes
* Made the following changes to `NetHttpRequest`
* Adds `connectionNode`, like other Ruby HTTP clients
* Makes `requestNode` and `connectionNode` public so subclasses can use them
* Adds detection of `Net::HTTP.start`, a common way to make HTTP requests in Ruby
## 5.0.1
### Minor Analysis Improvements

View File

@@ -1,6 +1,7 @@
---
category: fix
---
## 5.0.2
### Bug Fixes
* Made the following changes to `NetHttpRequest`
* Adds `connectionNode`, like other Ruby HTTP clients
* Makes `requestNode` and `connectionNode` public so subclasses can use them

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 5.0.1
lastReleaseVersion: 5.0.2

View File

@@ -1,5 +1,5 @@
name: codeql/ruby-all
version: 5.0.2-dev
version: 5.0.2
groups: ruby
extractor: ruby
dbscheme: ruby.dbscheme

View File

@@ -1,3 +1,7 @@
## 1.4.3
No user-facing changes.
## 1.4.2
No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 1.4.3
No user-facing changes.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 1.4.2
lastReleaseVersion: 1.4.3

View File

@@ -1,5 +1,5 @@
name: codeql/ruby-queries
version: 1.4.3-dev
version: 1.4.3
groups:
- ruby
- queries

View File

@@ -1,3 +1,10 @@
## 0.1.14
### Minor Analysis Improvements
* [`let` chains in `if` and `while`](https://doc.rust-lang.org/edition-guide/rust-2024/let-chains.html) are now supported, as well as [`if let` guards in `match` expressions](https://rust-lang.github.io/rfcs/2294-if-let-guard.html).
* Added more detail to models of `postgres`, `rusqlite`, `sqlx` and `tokio-postgres`. This may improve query results, particularly for `rust/sql-injection` and `rust/cleartext-storage-database`.
## 0.1.13
### Minor Analysis Improvements

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* Added more detail to models of `postgres`, `rusqlite`, `sqlx` and `tokio-postgres`. This may improve query results, particularly for `rust/sql-injection` and `rust/cleartext-storage-database`.

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* [`let` chains in `if` and `while`](https://doc.rust-lang.org/edition-guide/rust-2024/let-chains.html) are now supported, as well as [`if let` guards in `match` expressions](https://rust-lang.github.io/rfcs/2294-if-let-guard.html).

View File

@@ -0,0 +1,6 @@
## 0.1.14
### Minor Analysis Improvements
* [`let` chains in `if` and `while`](https://doc.rust-lang.org/edition-guide/rust-2024/let-chains.html) are now supported, as well as [`if let` guards in `match` expressions](https://rust-lang.github.io/rfcs/2294-if-let-guard.html).
* Added more detail to models of `postgres`, `rusqlite`, `sqlx` and `tokio-postgres`. This may improve query results, particularly for `rust/sql-injection` and `rust/cleartext-storage-database`.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 0.1.13
lastReleaseVersion: 0.1.14

View File

@@ -1,5 +1,5 @@
name: codeql/rust-all
version: 0.1.14-dev
version: 0.1.14
groups: rust
extractor: rust
dbscheme: rust.dbscheme

View File

@@ -1,3 +1,9 @@
## 0.1.14
### New Queries
* Added a new query, `rust/cleartext-storage-database`, for detecting cases where sensitive information is stored non-encrypted in a database.
## 0.1.13
### New Queries

View File

@@ -1,4 +1,5 @@
---
category: newQuery
---
## 0.1.14
### New Queries
* Added a new query, `rust/cleartext-storage-database`, for detecting cases where sensitive information is stored non-encrypted in a database.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 0.1.13
lastReleaseVersion: 0.1.14

View File

@@ -1,5 +1,5 @@
name: codeql/rust-queries
version: 0.1.14-dev
version: 0.1.14
groups:
- rust
- queries

View File

@@ -1,3 +1,7 @@
## 0.0.3
No user-facing changes.
## 0.0.2
No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 0.0.3
No user-facing changes.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 0.0.2
lastReleaseVersion: 0.0.3

Some files were not shown because too many files have changed in this diff Show More