Merge remote-tracking branch 'upstream/rc/3.12' into mb12

python/ql/lib/change-notes/2023-11-08-re-modeling.md

@@ -1,4 +0,0 @@
----
-category: minorAnalysis
----
-* Added taint-flow modeling for regular expressions with `re` module from the standard library.

python/ql/lib/change-notes/2023-11-16-python-3.12-type-syntax.md

@@ -1,5 +0,0 @@
----
-category: minorAnalysis
----
-
-- Added support for type parameters in function and class definitions, as well as the new Python 3.12 type alias statement.

python/ql/lib/change-notes/2023-11-21-request-handler-args-kwargs.md

@@ -1,4 +0,0 @@
----
-category: minorAnalysis
----
-* Added modeling of `*args` and `**kwargs` as routed-parameters in request handlers for django/flask/FastAPI/tornado.

python/ql/lib/change-notes/2023-11-27-tarfile-extraction-filters.md

@@ -1,5 +0,0 @@
----
-category: minorAnalysis
----
-
-- Added support for tarfile extraction filters as defined in [PEP-706](https://peps.python.org/pep-0706). In particular, calls to `TarFile.extract`, and `TarFile.extractall` are no longer considered to be sinks for the `py/tarslip` query if a sufficiently safe filter is provided.

python/ql/lib/change-notes/released/0.11.4.md

@@ -0,0 +1,8 @@
+## 0.11.4
+
+### Minor Analysis Improvements
+
+- Added support for tarfile extraction filters as defined in [PEP-706](https://peps.python.org/pep-0706). In particular, calls to `TarFile.extract`, and `TarFile.extractall` are no longer considered to be sinks for the `py/tarslip` query if a sufficiently safe filter is provided.
+* Added modeling of `*args` and `**kwargs` as routed-parameters in request handlers for django/flask/FastAPI/tornado.
+- Added support for type parameters in function and class definitions, as well as the new Python 3.12 type alias statement.
+* Added taint-flow modeling for regular expressions with `re` module from the standard library.