Merge pull request #22229 from github/release-prep/2.26.2

Release preparation for version 2.26.2

actions/ql/lib/CHANGELOG.md

@@ -1,3 +1,9 @@
+## 0.4.40
+
+### Minor Analysis Improvements
+
+* Altered the logic of `EnvironmentCheck` to make sure it is a check that protects only for non-toctou. This change will result in more results being found by the queries: `actions/untrusted-checkout-toctou/high` and `actions/untrusted-checkout-toctou/critical`.
+
 ## 0.4.39
 
 No user-facing changes.

actions/ql/lib/change-notes/released/0.4.40.md

@@ -1,4 +1,5 @@
----
-category: minorAnalysis
----
-* Altered the logic of `EnvironmentCheck` to make sure it is a check that protects only for non-toctou. This change will result in more results being found by the queries: `actions/untrusted-checkout-toctou/high` and `actions/untrusted-checkout-toctou/critical`.
+## 0.4.40
+
+### Minor Analysis Improvements
+
+* Altered the logic of `EnvironmentCheck` to make sure it is a check that protects only for non-toctou. This change will result in more results being found by the queries: `actions/untrusted-checkout-toctou/high` and `actions/untrusted-checkout-toctou/critical`.

actions/ql/lib/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.4.39
+lastReleaseVersion: 0.4.40

actions/ql/lib/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/actions-all
-version: 0.4.40-dev
+version: 0.4.40
 library: true
 warnOnImplicitThis: true
 dependencies:

actions/ql/src/CHANGELOG.md

@@ -1,3 +1,7 @@
+## 0.6.32
+
+No user-facing changes.
+
 ## 0.6.31
 
 No user-facing changes.

actions/ql/src/change-notes/released/0.6.32.md

@@ -0,0 +1,3 @@
+## 0.6.32
+
+No user-facing changes.

actions/ql/src/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.6.31
+lastReleaseVersion: 0.6.32

actions/ql/src/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/actions-queries
-version: 0.6.32-dev
+version: 0.6.32
 library: false
 warnOnImplicitThis: true
 groups: [actions, queries]

cpp/ql/lib/CHANGELOG.md

@@ -1,3 +1,7 @@
+## 12.0.1
+
+No user-facing changes.
+
 ## 12.0.0
 
 ### Breaking Changes

cpp/ql/lib/change-notes/released/12.0.1.md

@@ -0,0 +1,3 @@
+## 12.0.1
+
+No user-facing changes.

cpp/ql/lib/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 12.0.0
+lastReleaseVersion: 12.0.1

cpp/ql/lib/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/cpp-all
-version: 12.0.1-dev
+version: 12.0.1
 groups: cpp
 dbscheme: semmlecode.cpp.dbscheme
 extractor: cpp

cpp/ql/src/CHANGELOG.md

@@ -1,3 +1,9 @@
+## 1.8.0
+
+### Query Metadata Changes
+
+* Added the tag `external/cwe/cwe-762` to `cpp/new-free-mismatch`, and removed the tag `external/cwe/cwe-401`. This better matches the behavior of the query.
+
 ## 1.7.0
 
 ### Query Metadata Changes

cpp/ql/src/change-notes/released/1.8.0.md

@@ -1,4 +1,5 @@
----
-category: queryMetadata
----
+## 1.8.0
+
+### Query Metadata Changes
+
 * Added the tag `external/cwe/cwe-762` to `cpp/new-free-mismatch`, and removed the tag `external/cwe/cwe-401`. This better matches the behavior of the query.

cpp/ql/src/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 1.7.0
+lastReleaseVersion: 1.8.0

cpp/ql/src/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/cpp-queries
-version: 1.7.1-dev
+version: 1.8.0
 groups:
   - cpp
   - queries

csharp/ql/campaigns/Solorigate/lib/CHANGELOG.md

@@ -1,3 +1,7 @@
+## 1.7.71
+
+No user-facing changes.
+
 ## 1.7.70
 
 No user-facing changes.

csharp/ql/campaigns/Solorigate/lib/change-notes/released/1.7.71.md

@@ -0,0 +1,3 @@
+## 1.7.71
+
+No user-facing changes.

csharp/ql/campaigns/Solorigate/lib/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 1.7.70
+lastReleaseVersion: 1.7.71

csharp/ql/campaigns/Solorigate/lib/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/csharp-solorigate-all
-version: 1.7.71-dev
+version: 1.7.71
 groups:
   - csharp
   - solorigate

csharp/ql/campaigns/Solorigate/src/CHANGELOG.md

@@ -1,3 +1,7 @@
+## 1.7.71
+
+No user-facing changes.
+
 ## 1.7.70
 
 No user-facing changes.

csharp/ql/campaigns/Solorigate/src/change-notes/released/1.7.71.md

@@ -0,0 +1,3 @@
+## 1.7.71
+
+No user-facing changes.

csharp/ql/campaigns/Solorigate/src/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 1.7.70
+lastReleaseVersion: 1.7.71

csharp/ql/campaigns/Solorigate/src/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/csharp-solorigate-queries
-version: 1.7.71-dev
+version: 1.7.71
 groups:
   - csharp
   - solorigate

csharp/ql/lib/CHANGELOG.md

@@ -1,3 +1,7 @@
+## 7.1.1
+
+No user-facing changes.
+
 ## 7.1.0
 
 ### Major Analysis Improvements

csharp/ql/lib/change-notes/released/7.1.1.md

@@ -0,0 +1,3 @@
+## 7.1.1
+
+No user-facing changes.

csharp/ql/lib/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 7.1.0
+lastReleaseVersion: 7.1.1

csharp/ql/lib/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/csharp-all
-version: 7.1.1-dev
+version: 7.1.1
 groups: csharp
 dbscheme: semmlecode.csharp.dbscheme
 extractor: csharp

csharp/ql/src/CHANGELOG.md

@@ -1,3 +1,13 @@
+## 1.9.0
+
+### Query Metadata Changes
+
+* The query `cs/useless-assignment-to-local` has been removed from the `code-quality` suite, but it remains in the `code-quality-extended` suite.
+
+### Minor Analysis Improvements
+
+* `System.Web.HttpRequest.RawUrl` is no longer treated as a sanitizer for `cs/web/unvalidated-url-redirection`, since it contains the un-normalized request line. This may lead to more results.
+
 ## 1.8.0
 
 ### Query Metadata Changes

csharp/ql/src/change-notes/2026-07-13-CWE-601.md

@@ -1,4 +0,0 @@
----
-category: minorAnalysis
----
-* `System.Web.HttpRequest.RawUrl` is no longer treated as a sanitizer for `cs/web/unvalidated-url-redirection`, since it contains the un-normalized request line. This may lead to more results.

csharp/ql/src/change-notes/2026-07-15-code-quality-useless-assignment.md

@@ -1,4 +0,0 @@
----
-category: queryMetadata
----
-* The query `cs/useless-assignment-to-local` has been removed from the `code-quality` suite, but it remains in the `code-quality-extended` suite.

csharp/ql/src/change-notes/released/1.9.0.md

@@ -0,0 +1,9 @@
+## 1.9.0
+
+### Query Metadata Changes
+
+* The query `cs/useless-assignment-to-local` has been removed from the `code-quality` suite, but it remains in the `code-quality-extended` suite.
+
+### Minor Analysis Improvements
+
+* `System.Web.HttpRequest.RawUrl` is no longer treated as a sanitizer for `cs/web/unvalidated-url-redirection`, since it contains the un-normalized request line. This may lead to more results.

csharp/ql/src/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 1.8.0
+lastReleaseVersion: 1.9.0

csharp/ql/src/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/csharp-queries
-version: 1.8.1-dev
+version: 1.9.0
 groups:
   - csharp
   - queries

go/ql/consistency-queries/CHANGELOG.md

@@ -1,3 +1,7 @@
+## 1.0.54
+
+No user-facing changes.
+
 ## 1.0.53
 
 No user-facing changes.

go/ql/consistency-queries/change-notes/released/1.0.54.md

@@ -0,0 +1,3 @@
+## 1.0.54
+
+No user-facing changes.

go/ql/consistency-queries/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 1.0.53
+lastReleaseVersion: 1.0.54

go/ql/consistency-queries/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql-go-consistency-queries
-version: 1.0.54-dev
+version: 1.0.54
 groups:
   - go
   - queries

go/ql/lib/CHANGELOG.md

@@ -1,3 +1,9 @@
+## 7.2.2
+
+### Minor Analysis Improvements
+
+* The function `Rel` in `path/filepath` was incorrectly considered a sanitizer for `go/path-injection` and `go/zipslip`. This has now been fixed, which may lead to more results for those queries.
+
 ## 7.2.1
 
 ### Minor Analysis Improvements

go/ql/lib/change-notes/released/7.2.2.md

@@ -1,4 +1,5 @@
----
-category: minorAnalysis
----
+## 7.2.2
+
+### Minor Analysis Improvements
+
 * The function `Rel` in `path/filepath` was incorrectly considered a sanitizer for `go/path-injection` and `go/zipslip`. This has now been fixed, which may lead to more results for those queries.

go/ql/lib/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 7.2.1
+lastReleaseVersion: 7.2.2

go/ql/lib/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/go-all
-version: 7.2.2-dev
+version: 7.2.2
 groups: go
 dbscheme: go.dbscheme
 extractor: go

go/ql/src/CHANGELOG.md

@@ -1,3 +1,7 @@
+## 1.6.7
+
+No user-facing changes.
+
 ## 1.6.6
 
 No user-facing changes.

go/ql/src/change-notes/released/1.6.7.md

@@ -0,0 +1,3 @@
+## 1.6.7
+
+No user-facing changes.

go/ql/src/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 1.6.6
+lastReleaseVersion: 1.6.7

go/ql/src/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/go-queries
-version: 1.6.7-dev
+version: 1.6.7
 groups:
   - go
   - queries

java/ql/lib/CHANGELOG.md

@@ -1,3 +1,10 @@
+## 9.2.2
+
+### Minor Analysis Improvements
+
+* Kotlin versions up to 2.4.10 are now supported.
+* `java.io.File.getName()` is no longer treated as a complete sanitizer for `java/path-injection`, since it does not remove a `..` path component (for example `new File("..").getName()` returns `".."`). It is now only recognized as a sanitizer when combined with a subsequent check for `..` components, which may result in new alerts.
+
 ## 9.2.1
 
 ### Minor Analysis Improvements

java/ql/lib/change-notes/2026-07-15-kotlin-2.4.10.md

@@ -1,4 +0,0 @@
----
-category: minorAnalysis
----
-* Kotlin versions up to 2.4.10 are now supported.

java/ql/lib/change-notes/released/9.2.2.md

@@ -1,4 +1,6 @@
----
-category: minorAnalysis
----
+## 9.2.2
+
+### Minor Analysis Improvements
+
+* Kotlin versions up to 2.4.10 are now supported.
 * `java.io.File.getName()` is no longer treated as a complete sanitizer for `java/path-injection`, since it does not remove a `..` path component (for example `new File("..").getName()` returns `".."`). It is now only recognized as a sanitizer when combined with a subsequent check for `..` components, which may result in new alerts.

java/ql/lib/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 9.2.1
+lastReleaseVersion: 9.2.2

java/ql/lib/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/java-all
-version: 9.2.2-dev
+version: 9.2.2
 groups: java
 dbscheme: config/semmlecode.dbscheme
 extractor: java

java/ql/src/CHANGELOG.md

@@ -1,3 +1,7 @@
+## 1.11.7
+
+No user-facing changes.
+
 ## 1.11.6
 
 No user-facing changes.

java/ql/src/change-notes/released/1.11.7.md

@@ -0,0 +1,3 @@
+## 1.11.7
+
+No user-facing changes.

java/ql/src/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 1.11.6
+lastReleaseVersion: 1.11.7

java/ql/src/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/java-queries
-version: 1.11.7-dev
+version: 1.11.7
 groups:
   - java
   - queries

javascript/ql/lib/CHANGELOG.md

@@ -1,3 +1,7 @@
+## 2.8.2
+
+No user-facing changes.
+
 ## 2.8.1
 
 ### Minor Analysis Improvements

javascript/ql/lib/change-notes/released/2.8.2.md

@@ -0,0 +1,3 @@
+## 2.8.2
+
+No user-facing changes.

javascript/ql/lib/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 2.8.1
+lastReleaseVersion: 2.8.2

javascript/ql/lib/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/javascript-all
-version: 2.8.2-dev
+version: 2.8.2
 groups: javascript
 dbscheme: semmlecode.javascript.dbscheme
 extractor: javascript

javascript/ql/src/CHANGELOG.md

@@ -1,3 +1,7 @@
+## 2.4.2
+
+No user-facing changes.
+
 ## 2.4.1
 
 No user-facing changes.

javascript/ql/src/change-notes/released/2.4.2.md

@@ -0,0 +1,3 @@
+## 2.4.2
+
+No user-facing changes.

javascript/ql/src/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 2.4.1
+lastReleaseVersion: 2.4.2

javascript/ql/src/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/javascript-queries
-version: 2.4.2-dev
+version: 2.4.2
 groups:
   - javascript
   - queries

misc/suite-helpers/CHANGELOG.md

@@ -1,3 +1,7 @@
+## 1.0.54
+
+No user-facing changes.
+
 ## 1.0.53
 
 No user-facing changes.

misc/suite-helpers/change-notes/released/1.0.54.md

@@ -0,0 +1,3 @@
+## 1.0.54
+
+No user-facing changes.

misc/suite-helpers/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 1.0.53
+lastReleaseVersion: 1.0.54

misc/suite-helpers/qlpack.yml

@@ -1,4 +1,4 @@
 name: codeql/suite-helpers
-version: 1.0.54-dev
+version: 1.0.54
 groups: shared
 warnOnImplicitThis: true

python/ql/lib/CHANGELOG.md

@@ -1,3 +1,7 @@
+## 7.2.2
+
+No user-facing changes.
+
 ## 7.2.1
 
 ### Minor Analysis Improvements

python/ql/lib/change-notes/released/7.2.2.md

@@ -0,0 +1,3 @@
+## 7.2.2
+
+No user-facing changes.

python/ql/lib/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 7.2.1
+lastReleaseVersion: 7.2.2

python/ql/lib/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/python-all
-version: 7.2.2-dev
+version: 7.2.2
 groups: python
 dbscheme: semmlecode.python.dbscheme
 extractor: python

python/ql/src/CHANGELOG.md

@@ -1,3 +1,7 @@
+## 1.8.7
+
+No user-facing changes.
+
 ## 1.8.6
 
 No user-facing changes.

python/ql/src/change-notes/released/1.8.7.md

@@ -0,0 +1,3 @@
+## 1.8.7
+
+No user-facing changes.

python/ql/src/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 1.8.6
+lastReleaseVersion: 1.8.7

python/ql/src/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/python-queries
-version: 1.8.7-dev
+version: 1.8.7
 groups:
   - python
   - queries

ruby/ql/lib/CHANGELOG.md

@@ -1,3 +1,7 @@
+## 6.0.2
+
+No user-facing changes.
+
 ## 6.0.1
 
 No user-facing changes.

ruby/ql/lib/change-notes/released/6.0.2.md

@@ -0,0 +1,3 @@
+## 6.0.2
+
+No user-facing changes.

ruby/ql/lib/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 6.0.1
+lastReleaseVersion: 6.0.2

ruby/ql/lib/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/ruby-all
-version: 6.0.2-dev
+version: 6.0.2
 groups: ruby
 extractor: ruby
 dbscheme: ruby.dbscheme

ruby/ql/src/CHANGELOG.md

@@ -1,3 +1,7 @@
+## 1.6.7
+
+No user-facing changes.
+
 ## 1.6.6
 
 No user-facing changes.

ruby/ql/src/change-notes/released/1.6.7.md

@@ -0,0 +1,3 @@
+## 1.6.7
+
+No user-facing changes.

ruby/ql/src/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 1.6.6
+lastReleaseVersion: 1.6.7

ruby/ql/src/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/ruby-queries
-version: 1.6.7-dev
+version: 1.6.7
 groups:
   - ruby
   - queries

rust/ql/lib/CHANGELOG.md

@@ -1,3 +1,7 @@
+## 0.2.18
+
+No user-facing changes.
+
 ## 0.2.17
 
 No user-facing changes.

rust/ql/lib/change-notes/released/0.2.18.md

@@ -0,0 +1,3 @@
+## 0.2.18
+
+No user-facing changes.

rust/ql/lib/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.2.17
+lastReleaseVersion: 0.2.18

rust/ql/lib/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/rust-all
-version: 0.2.18-dev
+version: 0.2.18
 groups: rust
 extractor: rust
 dbscheme: rust.dbscheme

rust/ql/src/CHANGELOG.md

@@ -1,3 +1,7 @@
+## 0.1.39
+
+No user-facing changes.
+
 ## 0.1.38
 
 ### Minor Analysis Improvements

rust/ql/src/change-notes/released/0.1.39.md

@@ -0,0 +1,3 @@
+## 0.1.39
+
+No user-facing changes.

rust/ql/src/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.1.38
+lastReleaseVersion: 0.1.39

rust/ql/src/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/rust-queries
-version: 0.1.39-dev
+version: 0.1.39
 groups:
   - rust
   - queries

shared/concepts/CHANGELOG.md

@@ -1,3 +1,7 @@
+## 0.0.28
+
+No user-facing changes.
+
 ## 0.0.27
 
 No user-facing changes.

shared/concepts/change-notes/released/0.0.28.md

@@ -0,0 +1,3 @@
+## 0.0.28
+
+No user-facing changes.

shared/concepts/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.27
+lastReleaseVersion: 0.0.28

shared/concepts/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/concepts
-version: 0.0.28-dev
+version: 0.0.28
 groups: shared
 library: true
 dependencies:

shared/controlflow/CHANGELOG.md

@@ -1,3 +1,7 @@
+## 2.0.38
+
+No user-facing changes.
+
 ## 2.0.37
 
 No user-facing changes.

shared/controlflow/change-notes/released/2.0.38.md

@@ -0,0 +1,3 @@
+## 2.0.38
+
+No user-facing changes.

shared/controlflow/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 2.0.37
+lastReleaseVersion: 2.0.38

shared/controlflow/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/controlflow
-version: 2.0.38-dev
+version: 2.0.38
 groups: shared
 library: true
 dependencies:

shared/dataflow/CHANGELOG.md

@@ -1,3 +1,7 @@
+## 2.1.10
+
+No user-facing changes.
+
 ## 2.1.9
 
 No user-facing changes.