Merge pull request #15254 from github/post-release-prep/codeql-cli-2.16.0

Post-release preparation for codeql-cli-2.16.0
2026-04-28 02:05:14 +02:00 · 2024-01-16 14:50:40 +00:00
parent e18ee790f2 57df8b92df
commit 934474681d
171 changed files with 496 additions and 333 deletions
--- a/java/ql/lib/CHANGELOG.md
+++ b/java/ql/lib/CHANGELOG.md
@@ -1,3 +1,38 @@
+## 0.8.6
+
+### Deprecated APIs
+
+* Imports of the old dataflow libraries (e.g. `semmle.code.java.dataflow.DataFlow2`) have been deprecated in the libraries under the `semmle.code.java.security` namespace.
+
+### Minor Analysis Improvements
+
+* Added the `Map#replace` and `Map#replaceAll` methods to the `MapMutator` class in `semmle.code.java.Maps`.
+* Taint tracking now understands Kotlin's `Array.get` and `Array.set` methods.
+* Added a sink model for the `createRelative` method of the `org.springframework.core.io.Resource` interface.
+* Added source models for methods of the `org.springframework.web.util.UrlPathHelper` class and removed their taint flow models.
+* Added models for the following packages:
+
+  * com.google.common.io
+  * hudson
+  * hudson.console
+  * java.lang
+  * java.net
+  * java.util.logging
+  * javax.imageio.stream
+  * org.apache.commons.io
+  * org.apache.hadoop.hive.ql.exec
+  * org.apache.hadoop.hive.ql.metadata
+  * org.apache.tools.ant.taskdefs
+* Added models for the following packages:
+
+  * com.alibaba.druid.sql.repository
+  * jakarta.persistence
+  * jakarta.persistence.criteria
+  * liquibase.database.jvm
+  * liquibase.statement.core
+  * org.apache.ibatis.mapping
+  * org.keycloak.models.map.storage
+
 ## 0.8.5

 No user-facing changes.
--- a/java/ql/lib/change-notes/2023-10-24-new-models.md
+++ b/java/ql/lib/change-notes/2023-10-24-new-models.md
@@ -1,12 +0,0 @@
---
-category: minorAnalysis
---
-* Added models for the following packages:
-
-  * com.alibaba.druid.sql.repository
-  * jakarta.persistence
-  * jakarta.persistence.criteria
-  * liquibase.database.jvm
-  * liquibase.statement.core
-  * org.apache.ibatis.mapping
-  * org.keycloak.models.map.storage
--- a/java/ql/lib/change-notes/2023-10-31-new-models.md
+++ b/java/ql/lib/change-notes/2023-10-31-new-models.md
@@ -1,16 +0,0 @@
---
-category: minorAnalysis
---
-* Added models for the following packages:
-
-  * com.google.common.io
-  * hudson
-  * hudson.console
-  * java.lang
-  * java.net
-  * java.util.logging
-  * javax.imageio.stream
-  * org.apache.commons.io
-  * org.apache.hadoop.hive.ql.exec
-  * org.apache.hadoop.hive.ql.metadata
-  * org.apache.tools.ant.taskdefs
--- a/java/ql/lib/change-notes/2023-11-29-new-spring-models.md
+++ b/java/ql/lib/change-notes/2023-11-29-new-spring-models.md
@@ -1,5 +0,0 @@
---
-category: minorAnalysis
---
-* Added a sink model for the `createRelative` method of the `org.springframework.core.io.Resource` interface.
-* Added source models for methods of the `org.springframework.web.util.UrlPathHelper` class and removed their taint flow models.
--- a/java/ql/lib/change-notes/2023-12-05-kotlin-array-get-set.md
+++ b/java/ql/lib/change-notes/2023-12-05-kotlin-array-get-set.md
@@ -1,4 +0,0 @@
---
-category: minorAnalysis
---
-* Taint tracking now understands Kotlin's `Array.get` and `Array.set` methods.
--- a/java/ql/lib/change-notes/2023-12-08-deprecate-reexport-of-old-dataflow-libraries.md
+++ b/java/ql/lib/change-notes/2023-12-08-deprecate-reexport-of-old-dataflow-libraries.md
@@ -1,4 +0,0 @@
---
-category: deprecated
---
-* Imports of the old dataflow libraries (e.g. `semmle.code.java.dataflow.DataFlow2`) have been deprecated in the libraries under the `semmle.code.java.security` namespace.
--- a/java/ql/lib/change-notes/2023-12-19-add-replace-methods-to-mapmutator.md
+++ b/java/ql/lib/change-notes/2023-12-19-add-replace-methods-to-mapmutator.md
@@ -1,4 +0,0 @@
---
-category: minorAnalysis
---
-* Added the `Map#replace` and `Map#replaceAll` methods to the `MapMutator` class in `semmle.code.java.Maps`.
--- a/java/ql/lib/change-notes/released/0.8.6.md
+++ b/java/ql/lib/change-notes/released/0.8.6.md
@@ -0,0 +1,34 @@
+## 0.8.6
+
+### Deprecated APIs
+
+* Imports of the old dataflow libraries (e.g. `semmle.code.java.dataflow.DataFlow2`) have been deprecated in the libraries under the `semmle.code.java.security` namespace.
+
+### Minor Analysis Improvements
+
+* Added the `Map#replace` and `Map#replaceAll` methods to the `MapMutator` class in `semmle.code.java.Maps`.
+* Taint tracking now understands Kotlin's `Array.get` and `Array.set` methods.
+* Added a sink model for the `createRelative` method of the `org.springframework.core.io.Resource` interface.
+* Added source models for methods of the `org.springframework.web.util.UrlPathHelper` class and removed their taint flow models.
+* Added models for the following packages:
+
+  * com.google.common.io
+  * hudson
+  * hudson.console
+  * java.lang
+  * java.net
+  * java.util.logging
+  * javax.imageio.stream
+  * org.apache.commons.io
+  * org.apache.hadoop.hive.ql.exec
+  * org.apache.hadoop.hive.ql.metadata
+  * org.apache.tools.ant.taskdefs
+* Added models for the following packages:
+
+  * com.alibaba.druid.sql.repository
+  * jakarta.persistence
+  * jakarta.persistence.criteria
+  * liquibase.database.jvm
+  * liquibase.statement.core
+  * org.apache.ibatis.mapping
+  * org.keycloak.models.map.storage
--- a/java/ql/lib/codeql-pack.release.yml
+++ b/java/ql/lib/codeql-pack.release.yml
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.8.5
+lastReleaseVersion: 0.8.6
--- a/java/ql/lib/qlpack.yml
+++ b/java/ql/lib/qlpack.yml
@@ -1,5 +1,5 @@
 name: codeql/java-all
-version: 0.8.6-dev
+version: 0.8.7-dev
 groups: java
 dbscheme: config/semmlecode.dbscheme
 extractor: java