Release preparation for version 2.12.3

This commit is contained in:
github-actions[bot]
2023-02-16 11:49:06 +00:00
parent 180246b99c
commit b0315119c6
103 changed files with 294 additions and 106 deletions

View File

@@ -1,3 +1,7 @@
## 0.5.3
No user-facing changes.
## 0.5.2 ## 0.5.2
No user-facing changes. No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 0.5.3
No user-facing changes.

View File

@@ -1,2 +1,2 @@
--- ---
lastReleaseVersion: 0.5.2 lastReleaseVersion: 0.5.3

View File

@@ -1,5 +1,5 @@
name: codeql/cpp-all name: codeql/cpp-all
version: 0.5.3-dev version: 0.5.3
groups: cpp groups: cpp
dbscheme: semmlecode.cpp.dbscheme dbscheme: semmlecode.cpp.dbscheme
extractor: cpp extractor: cpp

View File

@@ -1,3 +1,7 @@
## 0.5.3
No user-facing changes.
## 0.5.2 ## 0.5.2
No user-facing changes. No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 0.5.3
No user-facing changes.

View File

@@ -1,2 +1,2 @@
--- ---
lastReleaseVersion: 0.5.2 lastReleaseVersion: 0.5.3

View File

@@ -1,5 +1,5 @@
name: codeql/cpp-queries name: codeql/cpp-queries
version: 0.5.3-dev version: 0.5.3
groups: groups:
- cpp - cpp
- queries - queries

View File

@@ -1,3 +1,7 @@
## 1.4.3
No user-facing changes.
## 1.4.2 ## 1.4.2
No user-facing changes. No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 1.4.3
No user-facing changes.

View File

@@ -1,2 +1,2 @@
--- ---
lastReleaseVersion: 1.4.2 lastReleaseVersion: 1.4.3

View File

@@ -1,5 +1,5 @@
name: codeql/csharp-solorigate-all name: codeql/csharp-solorigate-all
version: 1.4.3-dev version: 1.4.3
groups: groups:
- csharp - csharp
- solorigate - solorigate

View File

@@ -1,3 +1,7 @@
## 1.4.3
No user-facing changes.
## 1.4.2 ## 1.4.2
No user-facing changes. No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 1.4.3
No user-facing changes.

View File

@@ -1,2 +1,2 @@
--- ---
lastReleaseVersion: 1.4.2 lastReleaseVersion: 1.4.3

View File

@@ -1,5 +1,5 @@
name: codeql/csharp-solorigate-queries name: codeql/csharp-solorigate-queries
version: 1.4.3-dev version: 1.4.3
groups: groups:
- csharp - csharp
- solorigate - solorigate

View File

@@ -1,3 +1,9 @@
## 0.5.3
### Minor Analysis Improvements
* C# 11: Added extractor support for the `scoped` modifier annotation on parameters and local variables.
## 0.5.2 ## 0.5.2
### Major Analysis Improvements ### Major Analysis Improvements

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* C# 11: Added extractor support for the `scoped` modifier annotation on parameters and local variables.

View File

@@ -0,0 +1,5 @@
## 0.5.3
### Minor Analysis Improvements
* C# 11: Added extractor support for the `scoped` modifier annotation on parameters and local variables.

View File

@@ -1,2 +1,2 @@
--- ---
lastReleaseVersion: 0.5.2 lastReleaseVersion: 0.5.3

View File

@@ -1,5 +1,5 @@
name: codeql/csharp-all name: codeql/csharp-all
version: 0.5.3-dev version: 0.5.3
groups: csharp groups: csharp
dbscheme: semmlecode.csharp.dbscheme dbscheme: semmlecode.csharp.dbscheme
extractor: csharp extractor: csharp

View File

@@ -1,3 +1,7 @@
## 0.5.3
No user-facing changes.
## 0.5.2 ## 0.5.2
No user-facing changes. No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 0.5.3
No user-facing changes.

View File

@@ -1,2 +1,2 @@
--- ---
lastReleaseVersion: 0.5.2 lastReleaseVersion: 0.5.3

View File

@@ -1,5 +1,5 @@
name: codeql/csharp-queries name: codeql/csharp-queries
version: 0.5.3-dev version: 0.5.3
groups: groups:
- csharp - csharp
- queries - queries

View File

@@ -1,3 +1,13 @@
## 0.4.3
### New Features
* Go 1.20 is now supported. The extractor now functions as expected when Go 1.20 is installed, the definitions of `implementsComparable` has been updated according to Go 1.20's new, more-liberal rules, and taint flow models have been added for relevant new standard library functions.
### Minor Analysis Improvements
* Support for the Twirp framework has been added.
## 0.4.2 ## 0.4.2
No user-facing changes. No user-facing changes.

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* Support for the Twirp framework has been added.

View File

@@ -1,4 +1,9 @@
--- ## 0.4.3
category: feature
--- ### New Features
* Go 1.20 is now supported. The extractor now functions as expected when Go 1.20 is installed, the definitions of `implementsComparable` has been updated according to Go 1.20's new, more-liberal rules, and taint flow models have been added for relevant new standard library functions. * Go 1.20 is now supported. The extractor now functions as expected when Go 1.20 is installed, the definitions of `implementsComparable` has been updated according to Go 1.20's new, more-liberal rules, and taint flow models have been added for relevant new standard library functions.
### Minor Analysis Improvements
* Support for the Twirp framework has been added.

View File

@@ -1,2 +1,2 @@
--- ---
lastReleaseVersion: 0.4.2 lastReleaseVersion: 0.4.3

View File

@@ -1,5 +1,5 @@
name: codeql/go-all name: codeql/go-all
version: 0.4.3-dev version: 0.4.3
groups: go groups: go
dbscheme: go.dbscheme dbscheme: go.dbscheme
extractor: go extractor: go

View File

@@ -1,3 +1,13 @@
## 0.4.3
### New Queries
* Added a new query, `go/unhandled-writable-file-close`, to detect instances where writable file handles are closed without appropriate checks for errors.
### Query Metadata Changes
* The precision of the `go/log-injection` query was decreased from `high` to `medium`, since it may not be able to identify every way in which log data may be sanitized. This also aligns it with the precision of comparable queries for other languages.
## 0.4.2 ## 0.4.2
No user-facing changes. No user-facing changes.

View File

@@ -1,4 +0,0 @@
---
category: newQuery
---
* Added a new query, `go/unhandled-writable-file-close`, to detect instances where writable file handles are closed without appropriate checks for errors.

View File

@@ -1,4 +1,9 @@
--- ## 0.4.3
category: queryMetadata
--- ### New Queries
* Added a new query, `go/unhandled-writable-file-close`, to detect instances where writable file handles are closed without appropriate checks for errors.
### Query Metadata Changes
* The precision of the `go/log-injection` query was decreased from `high` to `medium`, since it may not be able to identify every way in which log data may be sanitized. This also aligns it with the precision of comparable queries for other languages. * The precision of the `go/log-injection` query was decreased from `high` to `medium`, since it may not be able to identify every way in which log data may be sanitized. This also aligns it with the precision of comparable queries for other languages.

View File

@@ -1,2 +1,2 @@
--- ---
lastReleaseVersion: 0.4.2 lastReleaseVersion: 0.4.3

View File

@@ -1,5 +1,5 @@
name: codeql/go-queries name: codeql/go-queries
version: 0.4.3-dev version: 0.4.3
groups: groups:
- go - go
- queries - queries

View File

@@ -1,3 +1,15 @@
## 0.5.3
### New Features
* Kotlin versions up to 1.8.20 are now supported.
### Minor Analysis Improvements
* Removed the first argument of `java.nio.file.Files#createTempDirectory(String,FileAttribute[])` as a "create-file" sink.
* Added the first argument of `java.nio.file.Files#copy` as a "read-file" sink for the `java/path-injection` query.
* The data flow library now disregards flow through code that is dead based on some basic constant propagation, for example, guards like `if (1+1>3)`.
## 0.5.2 ## 0.5.2
### Minor Analysis Improvements ### Minor Analysis Improvements

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* The data flow library now disregards flow through code that is dead based on some basic constant propagation, for example, guards like `if (1+1>3)`.

View File

@@ -1,4 +0,0 @@
---
category: feature
---
* Kotlin versions up to 1.8.20 are now supported.

View File

@@ -1,5 +0,0 @@
---
category: minorAnalysis
---
* Removed the first argument of `java.nio.file.Files#createTempDirectory(String,FileAttribute[])` as a "create-file" sink.
* Added the first argument of `java.nio.file.Files#copy` as a "read-file" sink for the `java/path-injection` query.

View File

@@ -0,0 +1,11 @@
## 0.5.3
### New Features
* Kotlin versions up to 1.8.20 are now supported.
### Minor Analysis Improvements
* Removed the first argument of `java.nio.file.Files#createTempDirectory(String,FileAttribute[])` as a "create-file" sink.
* Added the first argument of `java.nio.file.Files#copy` as a "read-file" sink for the `java/path-injection` query.
* The data flow library now disregards flow through code that is dead based on some basic constant propagation, for example, guards like `if (1+1>3)`.

View File

@@ -1,2 +1,2 @@
--- ---
lastReleaseVersion: 0.5.2 lastReleaseVersion: 0.5.3

View File

@@ -1,5 +1,5 @@
name: codeql/java-all name: codeql/java-all
version: 0.5.3-dev version: 0.5.3
groups: java groups: java
dbscheme: config/semmlecode.dbscheme dbscheme: config/semmlecode.dbscheme
extractor: java extractor: java

View File

@@ -1,3 +1,13 @@
## 0.5.3
### New Queries
* Added a new query, `java/xxe-local`, which is a version of the XXE query that uses local sources (for example, reads from a local file).
### Minor Analysis Improvements
* The `java/index-out-of-bounds` query has improved its handling of arrays of constant length, and may report additional results in those cases.
## 0.5.2 ## 0.5.2
### New Queries ### New Queries

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* The `java/index-out-of-bounds` query has improved its handling of arrays of constant length, and may report additional results in those cases.

View File

@@ -1,4 +0,0 @@
---
category: newQuery
---
* Added a new query, `java/xxe-local`, which is a version of the XXE query that uses local sources (for example, reads from a local file).

View File

@@ -0,0 +1,9 @@
## 0.5.3
### New Queries
* Added a new query, `java/xxe-local`, which is a version of the XXE query that uses local sources (for example, reads from a local file).
### Minor Analysis Improvements
* The `java/index-out-of-bounds` query has improved its handling of arrays of constant length, and may report additional results in those cases.

View File

@@ -1,2 +1,2 @@
--- ---
lastReleaseVersion: 0.5.2 lastReleaseVersion: 0.5.3

View File

@@ -1,5 +1,5 @@
name: codeql/java-queries name: codeql/java-queries
version: 0.5.3-dev version: 0.5.3
groups: groups:
- java - java
- queries - queries

View File

@@ -1,3 +1,9 @@
## 0.4.3
### Minor Analysis Improvements
* Added dataflow sources for the [express-ws](https://www.npmjs.com/package/express-ws) library.
## 0.4.2 ## 0.4.2
### Minor Analysis Improvements ### Minor Analysis Improvements

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* Added dataflow sources for the [express-ws](https://www.npmjs.com/package/express-ws) library.

View File

@@ -0,0 +1,5 @@
## 0.4.3
### Minor Analysis Improvements
* Added dataflow sources for the [express-ws](https://www.npmjs.com/package/express-ws) library.

View File

@@ -1,2 +1,2 @@
--- ---
lastReleaseVersion: 0.4.2 lastReleaseVersion: 0.4.3

View File

@@ -1,5 +1,5 @@
name: codeql/javascript-all name: codeql/javascript-all
version: 0.4.3-dev version: 0.4.3
groups: javascript groups: javascript
dbscheme: semmlecode.javascript.dbscheme dbscheme: semmlecode.javascript.dbscheme
extractor: javascript extractor: javascript

View File

@@ -1,3 +1,7 @@
## 0.5.3
No user-facing changes.
## 0.5.2 ## 0.5.2
No user-facing changes. No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 0.5.3
No user-facing changes.

View File

@@ -1,2 +1,2 @@
--- ---
lastReleaseVersion: 0.5.2 lastReleaseVersion: 0.5.3

View File

@@ -1,5 +1,5 @@
name: codeql/javascript-queries name: codeql/javascript-queries
version: 0.5.3-dev version: 0.5.3
groups: groups:
- javascript - javascript
- queries - queries

View File

@@ -1,3 +1,7 @@
## 0.4.3
No user-facing changes.
## 0.4.2 ## 0.4.2
No user-facing changes. No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 0.4.3
No user-facing changes.

View File

@@ -1,2 +1,2 @@
--- ---
lastReleaseVersion: 0.4.2 lastReleaseVersion: 0.4.3

View File

@@ -1,3 +1,3 @@
name: codeql/suite-helpers name: codeql/suite-helpers
version: 0.4.3-dev version: 0.4.3
groups: shared groups: shared

View File

@@ -1,3 +1,16 @@
## 0.8.0
### Breaking Changes
- Python 2 is no longer supported for extracting databases using the CodeQL CLI. As a consequence,
the previously deprecated support for `pyxl` and `spitfire` templates has also been removed. When
extracting Python 2 code, having Python 2 installed is still recommended, as this ensures the
correct version of the Python standard library is extracted.
### Minor Analysis Improvements
* Fixed module resolution so we properly recognize that in `from <pkg> import *`, where `<pkg>` is a package, the actual imports are made from the `<pkg>/__init__.py` file.
## 0.7.2 ## 0.7.2
No user-facing changes. No user-facing changes.

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* Fixed module resolution so we properly recognize that in `from <pkg> import *`, where `<pkg>` is a package, the actual imports are made from the `<pkg>/__init__.py` file.

View File

@@ -1,7 +1,12 @@
--- ## 0.8.0
category: breaking
--- ### Breaking Changes
- Python 2 is no longer supported for extracting databases using the CodeQL CLI. As a consequence, - Python 2 is no longer supported for extracting databases using the CodeQL CLI. As a consequence,
the previously deprecated support for `pyxl` and `spitfire` templates has also been removed. When the previously deprecated support for `pyxl` and `spitfire` templates has also been removed. When
extracting Python 2 code, having Python 2 installed is still recommended, as this ensures the extracting Python 2 code, having Python 2 installed is still recommended, as this ensures the
correct version of the Python standard library is extracted. correct version of the Python standard library is extracted.
### Minor Analysis Improvements
* Fixed module resolution so we properly recognize that in `from <pkg> import *`, where `<pkg>` is a package, the actual imports are made from the `<pkg>/__init__.py` file.

View File

@@ -1,2 +1,2 @@
--- ---
lastReleaseVersion: 0.7.2 lastReleaseVersion: 0.8.0

View File

@@ -1,5 +1,5 @@
name: codeql/python-all name: codeql/python-all
version: 0.7.3-dev version: 0.8.0
groups: python groups: python
dbscheme: semmlecode.python.dbscheme dbscheme: semmlecode.python.dbscheme
extractor: python extractor: python

View File

@@ -1,3 +1,7 @@
## 0.6.3
No user-facing changes.
## 0.6.2 ## 0.6.2
No user-facing changes. No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 0.6.3
No user-facing changes.

View File

@@ -1,2 +1,2 @@
--- ---
lastReleaseVersion: 0.6.2 lastReleaseVersion: 0.6.3

View File

@@ -1,5 +1,5 @@
name: codeql/python-queries name: codeql/python-queries
version: 0.6.3-dev version: 0.6.3
groups: groups:
- python - python
- queries - queries

View File

@@ -1,3 +1,9 @@
## 0.5.3
### Minor Analysis Improvements
* Ruby 3.1: one-line pattern matches are now supported. The AST nodes are named `TestPattern` (`expr in pattern`) and `MatchPattern` (`expr => pattern`).
## 0.5.2 ## 0.5.2
### Minor Analysis Improvements ### Minor Analysis Improvements

View File

@@ -1,4 +1,5 @@
--- ## 0.5.3
category: minorAnalysis
--- ### Minor Analysis Improvements
* Ruby 3.1: one-line pattern matches are now supported. The AST nodes are named `TestPattern` (`expr in pattern`) and `MatchPattern` (`expr => pattern`). * Ruby 3.1: one-line pattern matches are now supported. The AST nodes are named `TestPattern` (`expr in pattern`) and `MatchPattern` (`expr => pattern`).

View File

@@ -1,2 +1,2 @@
--- ---
lastReleaseVersion: 0.5.2 lastReleaseVersion: 0.5.3

View File

@@ -1,5 +1,5 @@
name: codeql/ruby-all name: codeql/ruby-all
version: 0.5.3-dev version: 0.5.3
groups: ruby groups: ruby
extractor: ruby extractor: ruby
dbscheme: ruby.dbscheme dbscheme: ruby.dbscheme

View File

@@ -1,3 +1,14 @@
## 0.5.3
### New Queries
* Added a new query, `rb/regex/badly-anchored-regexp`, to detect regular expression validators that use `^` and `$`
as anchors and therefore might match only a single line of a multi-line string.
### Minor Analysis Improvements
* The `rb/polynomial-redos` query now considers the entrypoints of the API of a gem as sources.
## 0.5.2 ## 0.5.2
### New Queries ### New Queries

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* The `rb/polynomial-redos` query now considers the entrypoints of the API of a gem as sources.

View File

@@ -1,5 +1,10 @@
--- ## 0.5.3
category: newQuery
--- ### New Queries
* Added a new query, `rb/regex/badly-anchored-regexp`, to detect regular expression validators that use `^` and `$` * Added a new query, `rb/regex/badly-anchored-regexp`, to detect regular expression validators that use `^` and `$`
as anchors and therefore might match only a single line of a multi-line string. as anchors and therefore might match only a single line of a multi-line string.
### Minor Analysis Improvements
* The `rb/polynomial-redos` query now considers the entrypoints of the API of a gem as sources.

View File

@@ -1,2 +1,2 @@
--- ---
lastReleaseVersion: 0.5.2 lastReleaseVersion: 0.5.3

View File

@@ -1,5 +1,5 @@
name: codeql/ruby-queries name: codeql/ruby-queries
version: 0.5.3-dev version: 0.5.3
groups: groups:
- ruby - ruby
- queries - queries

View File

@@ -1,3 +1,7 @@
## 0.0.7
No user-facing changes.
## 0.0.6 ## 0.0.6
No user-facing changes. No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 0.0.7
No user-facing changes.

View File

@@ -1,2 +1,2 @@
--- ---
lastReleaseVersion: 0.0.6 lastReleaseVersion: 0.0.7

View File

@@ -1,5 +1,5 @@
name: codeql/regex name: codeql/regex
version: 0.0.7-dev version: 0.0.7
groups: shared groups: shared
library: true library: true
dependencies: dependencies:

View File

@@ -1,3 +1,7 @@
## 0.0.11
No user-facing changes.
## 0.0.10 ## 0.0.10
No user-facing changes. No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 0.0.11
No user-facing changes.

View File

@@ -1,2 +1,2 @@
--- ---
lastReleaseVersion: 0.0.10 lastReleaseVersion: 0.0.11

View File

@@ -1,4 +1,4 @@
name: codeql/ssa name: codeql/ssa
version: 0.0.11-dev version: 0.0.11
groups: shared groups: shared
library: true library: true

View File

@@ -1,3 +1,7 @@
## 0.0.4
No user-facing changes.
## 0.0.3 ## 0.0.3
No user-facing changes. No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 0.0.4
No user-facing changes.

View File

@@ -1,2 +1,2 @@
--- ---
lastReleaseVersion: 0.0.3 lastReleaseVersion: 0.0.4

View File

@@ -1,5 +1,5 @@
name: codeql/tutorial name: codeql/tutorial
description: Library for the CodeQL detective tutorials, helping new users learn to write CodeQL queries. description: Library for the CodeQL detective tutorials, helping new users learn to write CodeQL queries.
version: 0.0.4-dev version: 0.0.4
groups: shared groups: shared
library: true library: true

View File

@@ -1,3 +1,7 @@
## 0.0.4
No user-facing changes.
## 0.0.3 ## 0.0.3
No user-facing changes. No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 0.0.4
No user-facing changes.

View File

@@ -1,2 +1,2 @@
--- ---
lastReleaseVersion: 0.0.3 lastReleaseVersion: 0.0.4

View File

@@ -1,5 +1,5 @@
name: codeql/typetracking name: codeql/typetracking
version: 0.0.4-dev version: 0.0.4
groups: shared groups: shared
library: true library: true
dependencies: dependencies:

View File

@@ -1,3 +1,7 @@
## 0.0.11
No user-facing changes.
## 0.0.10 ## 0.0.10
No user-facing changes. No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 0.0.11
No user-facing changes.

View File

@@ -1,2 +1,2 @@
--- ---
lastReleaseVersion: 0.0.10 lastReleaseVersion: 0.0.11

View File

@@ -1,4 +1,4 @@
name: codeql/typos name: codeql/typos
version: 0.0.11-dev version: 0.0.11
groups: shared groups: shared
library: true library: true

View File

@@ -1,3 +1,7 @@
## 0.0.4
No user-facing changes.
## 0.0.3 ## 0.0.3
No user-facing changes. No user-facing changes.

Some files were not shown because too many files have changed in this diff Show More