Merge pull request #12987 from github/post-release-prep/codeql-cli-2.13.1

Post-release preparation for codeql-cli-2.13.1
This commit is contained in:
Ian Lynagh
2023-05-03 13:12:10 +01:00
committed by GitHub
106 changed files with 276 additions and 106 deletions

View File

@@ -1,3 +1,18 @@
## 0.6.1
### Deprecated APIs
* The `sensitiveResultReceiver` predicate in `SensitiveResultReceiverQuery.qll` has been deprecated and replaced with `isSensitiveResultReceiver` in order to use the new dataflow API.
### Minor Analysis Improvements
* Changed some models of Spring's `FileCopyUtils.copy` to be path injection sinks instead of summaries.
* Added models for the following packages:
* java.nio.file
* Added models for [Apache HttpComponents](https://hc.apache.org/) versions 4 and 5.
* Added sanitizers that recognize line breaks to the query `java/log-injection`.
* Added new flow steps for `java.util.StringJoiner`.
## 0.6.0
### Deprecated APIs

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* Added new flow steps for `java.util.StringJoiner`.

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* Added sanitizers that recognize line breaks to the query `java/log-injection`.

View File

@@ -1,4 +0,0 @@
---
category: deprecated
---
* The `sensitiveResultReceiver` predicate in `SensitiveResultReceiverQuery.qll` has been deprecated and replaced with `isSensitiveResultReceiver` in order to use the new dataflow API.

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* Added models for [Apache HttpComponents](https://hc.apache.org/) versions 4 and 5.

View File

@@ -1,5 +0,0 @@
---
category: minorAnalysis
---
* Added models for the following packages:
* java.nio.file

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* Changed some models of Spring's `FileCopyUtils.copy` to be path injection sinks instead of summaries.

View File

@@ -0,0 +1,14 @@
## 0.6.1
### Deprecated APIs
* The `sensitiveResultReceiver` predicate in `SensitiveResultReceiverQuery.qll` has been deprecated and replaced with `isSensitiveResultReceiver` in order to use the new dataflow API.
### Minor Analysis Improvements
* Changed some models of Spring's `FileCopyUtils.copy` to be path injection sinks instead of summaries.
* Added models for the following packages:
* java.nio.file
* Added models for [Apache HttpComponents](https://hc.apache.org/) versions 4 and 5.
* Added sanitizers that recognize line breaks to the query `java/log-injection`.
* Added new flow steps for `java.util.StringJoiner`.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 0.6.0
lastReleaseVersion: 0.6.1

View File

@@ -1,5 +1,5 @@
name: codeql/java-all
version: 0.6.1-dev
version: 0.6.2-dev
groups: java
dbscheme: config/semmlecode.dbscheme
extractor: java