Release preparation for version 2.20.1

This commit is contained in:
github-actions[bot]
2025-01-06 18:20:22 +00:00
parent 0c2e05717f
commit a121c5a5d0
168 changed files with 447 additions and 197 deletions

View File

@@ -1,3 +1,7 @@
## 1.7.31
No user-facing changes.
## 1.7.30
No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 1.7.31
No user-facing changes.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 1.7.30
lastReleaseVersion: 1.7.31

View File

@@ -1,5 +1,5 @@
name: codeql/csharp-solorigate-all
version: 1.7.31-dev
version: 1.7.31
groups:
- csharp
- solorigate

View File

@@ -1,3 +1,7 @@
## 1.7.31
No user-facing changes.
## 1.7.30
No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 1.7.31
No user-facing changes.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 1.7.30
lastReleaseVersion: 1.7.31

View File

@@ -1,5 +1,5 @@
name: codeql/csharp-solorigate-queries
version: 1.7.31-dev
version: 1.7.31
groups:
- csharp
- solorigate

View File

@@ -1,3 +1,16 @@
## 4.0.1
### Minor Analysis Improvements
* C# 13: Added QL library support for *collection* like type `params` parameters.
* Added `remote` flow source models for properties of Blazor components annotated with any of the following attributes from `Microsoft.AspNetCore.Components`:
- `[SupplyParameterFromForm]`
- `[SupplyParameterFromQuery]`
* Added the constructor and explicit cast operator of `Microsoft.AspNetCore.Components.MarkupString` as an `html-injection` sink. This will help catch cross-site scripting resulting from using `MarkupString`.
* Added flow summaries for the `Microsoft.AspNetCore.Mvc.Controller::View` method.
* The data flow library has been updated to track types in a slightly different way: The type of the tainted data (which may be stored into fields, etc.) is tracked more precisely, while the types of intermediate containers for nested contents is tracked less precisely. This may have a slight effect on false positives for complex flow paths.
* The C# extractor now supports *basic* extraction of .NET 9 projects. There might be limited support for extraction of code using the new C# 13 language features.
## 4.0.0
### Breaking Changes

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* The data flow library has been updated to track types in a slightly different way: The type of the tainted data (which may be stored into fields, etc.) is tracked more precisely, while the types of intermediate containers for nested contents is tracked less precisely. This may have a slight effect on false positives for complex flow paths.

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* The C# extractor now supports *basic* extraction of .NET 9 projects. There might be limited support for extraction of code using the new C# 13 language features.

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* Added flow summaries for the `Microsoft.AspNetCore.Mvc.Controller::View` method.

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* Added the constructor and explicit cast operator of `Microsoft.AspNetCore.Components.MarkupString` as an `html-injection` sink. This will help catch cross-site scripting resulting from using `MarkupString`.

View File

@@ -1,6 +0,0 @@
---
category: minorAnalysis
---
* Added `remote` flow source models for properties of Blazor components annotated with any of the following attributes from `Microsoft.AspNetCore.Components`:
- `[SupplyParameterFromForm]`
- `[SupplyParameterFromQuery]`

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* C# 13: Added QL library support for *collection* like type `params` parameters.

View File

@@ -0,0 +1,12 @@
## 4.0.1
### Minor Analysis Improvements
* C# 13: Added QL library support for *collection* like type `params` parameters.
* Added `remote` flow source models for properties of Blazor components annotated with any of the following attributes from `Microsoft.AspNetCore.Components`:
- `[SupplyParameterFromForm]`
- `[SupplyParameterFromQuery]`
* Added the constructor and explicit cast operator of `Microsoft.AspNetCore.Components.MarkupString` as an `html-injection` sink. This will help catch cross-site scripting resulting from using `MarkupString`.
* Added flow summaries for the `Microsoft.AspNetCore.Mvc.Controller::View` method.
* The data flow library has been updated to track types in a slightly different way: The type of the tainted data (which may be stored into fields, etc.) is tracked more precisely, while the types of intermediate containers for nested contents is tracked less precisely. This may have a slight effect on false positives for complex flow paths.
* The C# extractor now supports *basic* extraction of .NET 9 projects. There might be limited support for extraction of code using the new C# 13 language features.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 4.0.0
lastReleaseVersion: 4.0.1

View File

@@ -1,5 +1,5 @@
name: codeql/csharp-all
version: 4.0.1-dev
version: 4.0.1
groups: csharp
dbscheme: semmlecode.csharp.dbscheme
extractor: csharp

View File

@@ -1,3 +1,9 @@
## 1.0.14
### Minor Analysis Improvements
* The `ExternalApi` and `TestLibrary` modules have been moved to the library pack.
## 1.0.13
### Minor Analysis Improvements

View File

@@ -1,4 +1,5 @@
---
category: minorAnalysis
---
## 1.0.14
### Minor Analysis Improvements
* The `ExternalApi` and `TestLibrary` modules have been moved to the library pack.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 1.0.13
lastReleaseVersion: 1.0.14

View File

@@ -1,5 +1,5 @@
name: codeql/csharp-queries
version: 1.0.14-dev
version: 1.0.14
groups:
- csharp
- queries