Release preparation for version 2.12.0

java/ql/lib/CHANGELOG.md

@@ -1,3 +1,22 @@
+## 0.5.0
+
+### Minor Analysis Improvements
+
+* Added more dataflow models for frequently-used JDK APIs.
+* The extraction of Kotlin extension methods has been improved when default parameter values are present. The dispatch and extension receiver parameters are extracted in the correct order. The `ExtensionMethod::getExtensionReceiverParameterIndex` predicate has been introduced to facilitate getting the correct extension parameter index.
+* The query `java/insecure-cookie` now uses global dataflow to track secure cookies being set to the HTTP response object.
+* The library `PathSanitizer.qll` has been improved to detect more path validation patterns in Kotlin.
+* Models as Data models for Java are defined as data extensions instead of being inlined in the code. New models should be added in the `lib/ext` folder.
+* Added a taint model for the method `java.nio.file.Path.getParent`.
+* Fixed a problem in the taint model for the method `java.nio.file.Paths.get`.
+* Deleted the deprecated `LocalClassDeclStmtNode` and `LocalClassDeclStmt` classes from `PrintAst.qll` and `Statement.qll` respectively.
+* Deleted the deprecated `getLocalClass` predicate from `LocalTypeDeclStmt`, and the deprecated `getLocalClassDeclStmt` predicate from `LocalClassOrInterface`.
+* Added support for Android Manifest `<activity-aliases>` elements in data flow sources. 
+
+### Bug Fixes
+
+* We now correctly handle empty block comments, like `/**/`. Previously these could be mistaken for Javadoc comments and led to attribution of Javadoc tags to the wrong declaration.
+
 ## 0.4.6
 
 No user-facing changes.

java/ql/lib/change-notes/2022-10-17-android-activity-alias.md

@@ -1,4 +0,0 @@
----
-category: minorAnalysis
----
-* Added support for Android Manifest `<activity-aliases>` elements in data flow sources. 

java/ql/lib/change-notes/2022-11-17-deleted-deps.md

@@ -1,5 +0,0 @@
----
-category: minorAnalysis
----
-* Deleted the deprecated `LocalClassDeclStmtNode` and `LocalClassDeclStmt` classes from `PrintAst.qll` and `Statement.qll` respectively.
-* Deleted the deprecated `getLocalClass` predicate from `LocalTypeDeclStmt`, and the deprecated `getLocalClassDeclStmt` predicate from `LocalClassOrInterface`.

java/ql/lib/change-notes/2022-11-21-paths-get-fix.md

@@ -1,5 +0,0 @@
----
-category: minorAnalysis
----
-* Added a taint model for the method `java.nio.file.Path.getParent`.
-* Fixed a problem in the taint model for the method `java.nio.file.Paths.get`.

java/ql/lib/change-notes/2022-11-23-mad-data-extensions.md

@@ -1,4 +0,0 @@
----
-category: minorAnalysis
----
-* Models as Data models for Java are defined as data extensions instead of being inlined in the code. New models should be added in the `lib/ext` folder.

java/ql/lib/change-notes/2022-12-05-insecure-cookie-global-flow.md

@@ -1,4 +0,0 @@
----
-category: minorAnalysis
----
-* The query `java/insecure-cookie` now uses global dataflow to track secure cookies being set to the HTTP response object.

java/ql/lib/change-notes/2022-12-05-kotlin-path-sanitizer.md

@@ -1,4 +0,0 @@
----
-category: minorAnalysis
----
-* The library `PathSanitizer.qll` has been improved to detect more path validation patterns in Kotlin.

java/ql/lib/change-notes/2022-12-09-default-extension-methods.md

@@ -1,4 +0,0 @@
----
-category: minorAnalysis
----
-* The extraction of Kotlin extension methods has been improved when default parameter values are present. The dispatch and extension receiver parameters are extracted in the correct order. The `ExtensionMethod::getExtensionReceiverParameterIndex` predicate has been introduced to facilitate getting the correct extension parameter index.

java/ql/lib/change-notes/2022-12-15-empty-multiline-comments.md

@@ -1,4 +0,0 @@
----
-category: fix
----
-* We now correctly handle empty block comments, like `/**/`. Previously these could be mistaken for Javadoc comments and led to attribution of Javadoc tags to the wrong declaration.

java/ql/lib/change-notes/2022-12-16-add-top-jdk-models.md

@@ -1,4 +0,0 @@
----
-category: minorAnalysis
----
-* Added more dataflow models for frequently-used JDK APIs.

java/ql/lib/change-notes/released/0.5.0.md

@@ -0,0 +1,18 @@
+## 0.5.0
+
+### Minor Analysis Improvements
+
+* Added more dataflow models for frequently-used JDK APIs.
+* The extraction of Kotlin extension methods has been improved when default parameter values are present. The dispatch and extension receiver parameters are extracted in the correct order. The `ExtensionMethod::getExtensionReceiverParameterIndex` predicate has been introduced to facilitate getting the correct extension parameter index.
+* The query `java/insecure-cookie` now uses global dataflow to track secure cookies being set to the HTTP response object.
+* The library `PathSanitizer.qll` has been improved to detect more path validation patterns in Kotlin.
+* Models as Data models for Java are defined as data extensions instead of being inlined in the code. New models should be added in the `lib/ext` folder.
+* Added a taint model for the method `java.nio.file.Path.getParent`.
+* Fixed a problem in the taint model for the method `java.nio.file.Paths.get`.
+* Deleted the deprecated `LocalClassDeclStmtNode` and `LocalClassDeclStmt` classes from `PrintAst.qll` and `Statement.qll` respectively.
+* Deleted the deprecated `getLocalClass` predicate from `LocalTypeDeclStmt`, and the deprecated `getLocalClassDeclStmt` predicate from `LocalClassOrInterface`.
+* Added support for Android Manifest `<activity-aliases>` elements in data flow sources. 
+
+### Bug Fixes
+
+* We now correctly handle empty block comments, like `/**/`. Previously these could be mistaken for Javadoc comments and led to attribution of Javadoc tags to the wrong declaration.

java/ql/lib/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.4.6
+lastReleaseVersion: 0.5.0

java/ql/lib/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/java-all
-version: 0.5.0-dev
+version: 0.5.0
 groups: java
 dbscheme: config/semmlecode.dbscheme
 extractor: java