From 95c2cb19cf98d4073c682ab7398ca23015c17a46 Mon Sep 17 00:00:00 2001 From: Max Schaefer Date: Wed, 15 Apr 2020 07:57:47 +0100 Subject: [PATCH] Add two missing change notes. --- change-notes/1.24/analysis-go.md | 2 +- change-notes/1.24/extractor-go.md | 1 + 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/change-notes/1.24/analysis-go.md b/change-notes/1.24/analysis-go.md index 627330bda5c..26ea820c8d2 100644 --- a/change-notes/1.24/analysis-go.md +++ b/change-notes/1.24/analysis-go.md @@ -3,7 +3,7 @@ ## General improvements * Alert suppression can now be done with single-line block comments (`/* ... */`) as well as line comments (`// ...`). -* Analysis of flow through fields has been improved. +* Analysis of flow through fields and elements of arrays and slices has been improved, which may lead to more results from the security queries. * Detection of test code has been improved. LGTM will not show alerts in test code by default. * Go 1.14 library changes have been modeled. * More sources of untrusted input as well as vulnerable sinks are modelled, which may lead to more results from the security queries. diff --git a/change-notes/1.24/extractor-go.md b/change-notes/1.24/extractor-go.md index 7dae6360f8f..a50ff228f30 100644 --- a/change-notes/1.24/extractor-go.md +++ b/change-notes/1.24/extractor-go.md @@ -10,5 +10,6 @@ * The autobuilder now runs Makefiles or custom build scripts present in the codebase to install dependencies. The build command to invoke can be configured via `lgtm.yml`, or by setting the environment variable `CODEQL_EXTRACTOR_GO_BUILD_COMMAND`. * The autobuilder now attempts to automatically detect when dependencies have been vendored and use `-mod=vendor` appropriately. +* The extractor now compresses intermediate files used for constructing databases, which reduces the amount of disk space it requires. * The extractor now supports extracting go.mod files, enabling queries on dependencies and their versions. * The extractor now supports Go 1.14.