Release preparation for version 2.15.4

This commit is contained in:
github-actions[bot]
2023-12-06 21:11:50 +00:00
parent 4a7e816a30
commit c04457e9e7
146 changed files with 365 additions and 150 deletions

View File

@@ -1,3 +1,9 @@
## 0.12.1
### New Features
* Added an `isPrototyped` predicate to `Function` that holds when the function has a prototype.
## 0.12.0
### Breaking Changes

View File

@@ -1,4 +1,5 @@
---
category: feature
---
## 0.12.1
### New Features
* Added an `isPrototyped` predicate to `Function` that holds when the function has a prototype.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 0.12.0
lastReleaseVersion: 0.12.1

View File

@@ -1,5 +1,5 @@
name: codeql/cpp-all
version: 0.12.1-dev
version: 0.12.1
groups: cpp
dbscheme: semmlecode.cpp.dbscheme
extractor: cpp

View File

@@ -1,3 +1,13 @@
## 0.9.0
### Breaking Changes
* The `cpp/tainted-format-string-through-global` query has been deleted. This does not lead to a loss of relevant alerts, as the query duplicated a subset of the alerts from `cpp/tainted-format-string`.
### New Queries
* Added a new query, `cpp/use-of-string-after-lifetime-ends`, to detect calls to `c_str` on strings that will be destroyed immediately.
## 0.8.3
### Minor Analysis Improvements

View File

@@ -1,4 +0,0 @@
---
category: newQuery
---
* Added a new query, `cpp/use-of-string-after-lifetime-ends`, to detect calls to `c_str` on strings that will be destroyed immediately.

View File

@@ -1,4 +1,9 @@
---
category: breaking
---
## 0.9.0
### Breaking Changes
* The `cpp/tainted-format-string-through-global` query has been deleted. This does not lead to a loss of relevant alerts, as the query duplicated a subset of the alerts from `cpp/tainted-format-string`.
### New Queries
* Added a new query, `cpp/use-of-string-after-lifetime-ends`, to detect calls to `c_str` on strings that will be destroyed immediately.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 0.8.3
lastReleaseVersion: 0.9.0

View File

@@ -1,5 +1,5 @@
name: codeql/cpp-queries
version: 0.8.4-dev
version: 0.9.0
groups:
- cpp
- queries

View File

@@ -1,3 +1,7 @@
## 1.7.4
No user-facing changes.
## 1.7.3
No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 1.7.4
No user-facing changes.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 1.7.3
lastReleaseVersion: 1.7.4

View File

@@ -1,5 +1,5 @@
name: codeql/csharp-solorigate-all
version: 1.7.4-dev
version: 1.7.4
groups:
- csharp
- solorigate

View File

@@ -1,3 +1,7 @@
## 1.7.4
No user-facing changes.
## 1.7.3
No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 1.7.4
No user-facing changes.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 1.7.3
lastReleaseVersion: 1.7.4

View File

@@ -1,5 +1,5 @@
name: codeql/csharp-solorigate-queries
version: 1.7.4-dev
version: 1.7.4
groups:
- csharp
- solorigate

View File

@@ -1,3 +1,7 @@
## 0.8.4
No user-facing changes.
## 0.8.3
### Minor Analysis Improvements

View File

@@ -0,0 +1,3 @@
## 0.8.4
No user-facing changes.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 0.8.3
lastReleaseVersion: 0.8.4

View File

@@ -1,5 +1,5 @@
name: codeql/csharp-all
version: 0.8.4-dev
version: 0.8.4
groups: csharp
dbscheme: semmlecode.csharp.dbscheme
extractor: csharp

View File

@@ -1,3 +1,9 @@
## 0.8.4
### Minor Analysis Improvements
* Modelled additional flow steps to track flow from a `View` call in an MVC controller to the corresponding Razor View (`.cshtml`) file, which may result in additional results for queries such as `cs/web/xss`.
## 0.8.3
### Minor Analysis Improvements

View File

@@ -1,4 +1,5 @@
---
category: minorAnalysis
---
* Modelled additional flow steps to track flow from a `View` call in an MVC controller to the corresponding Razor View (`.cshtml`) file, which may result in additional results for queries such as `cs/web/xss`.
## 0.8.4
### Minor Analysis Improvements
* Modelled additional flow steps to track flow from a `View` call in an MVC controller to the corresponding Razor View (`.cshtml`) file, which may result in additional results for queries such as `cs/web/xss`.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 0.8.3
lastReleaseVersion: 0.8.4

View File

@@ -1,5 +1,5 @@
name: codeql/csharp-queries
version: 0.8.4-dev
version: 0.8.4
groups:
- csharp
- queries

View File

@@ -1,3 +1,7 @@
## 0.0.3
No user-facing changes.
## 0.0.2
No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 0.0.3
No user-facing changes.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 0.0.2
lastReleaseVersion: 0.0.3

View File

@@ -1,5 +1,5 @@
name: codeql-go-consistency-queries
version: 0.0.3-dev
version: 0.0.3
groups:
- go
- queries

View File

@@ -1,8 +1,14 @@
## 0.7.4
### Bug Fixes
* A bug has been fixed that meant that value flow through a slice expression was not tracked correctly. Taint flow was tracked correctly.
## 0.7.3
### Minor Analysis Improvements
* Added the [gin cors](https://github.com/gin-contrib/cors) library to the CorsMisconfiguration.ql query
* Added the [gin-contrib/cors](https://github.com/gin-contrib/cors) library to the experimental query "CORS misconfiguration" (`go/cors-misconfiguration`).
### Bug Fixes

View File

@@ -1,4 +1,5 @@
---
category: fix
---
## 0.7.4
### Bug Fixes
* A bug has been fixed that meant that value flow through a slice expression was not tracked correctly. Taint flow was tracked correctly.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 0.7.3
lastReleaseVersion: 0.7.4

View File

@@ -1,5 +1,5 @@
name: codeql/go-all
version: 0.7.4-dev
version: 0.7.4
groups: go
dbscheme: go.dbscheme
extractor: go

View File

@@ -1,3 +1,7 @@
## 0.7.4
No user-facing changes.
## 0.7.3
No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 0.7.4
No user-facing changes.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 0.7.3
lastReleaseVersion: 0.7.4

View File

@@ -1,5 +1,5 @@
name: codeql/go-queries
version: 0.7.4-dev
version: 0.7.4
groups:
- go
- queries

View File

@@ -1,3 +1,7 @@
## 0.0.9
No user-facing changes.
## 0.0.8
No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 0.0.9
No user-facing changes.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 0.0.8
lastReleaseVersion: 0.0.9

View File

@@ -1,5 +1,5 @@
name: codeql/java-automodel-queries
version: 0.0.9-dev
version: 0.0.9
groups:
- java
- automodel

View File

@@ -1,3 +1,12 @@
## 0.8.4
### Minor Analysis Improvements
* The diagnostic query `java/diagnostics/successfully-extracted-files`, and therefore the Code Scanning UI measure of scanned Java files, now considers any Java file seen during extraction, even one with some errors, to be extracted / scanned.
* Switch cases using binding patterns and `case null[, default]` are now supported. Classes `PatternCase` and `NullDefaultCase` are introduced to represent new kinds of case statement.
* Both switch cases and instanceof expressions using record patterns are now supported. The new class `RecordPatternExpr` is introduced to represent record patterns, and `InstanceOfExpr` gains `getPattern` to replace `getLocalVariableDeclExpr`.
* The control-flow graph and therefore dominance information regarding switch blocks in statement context but with an expression rule (e.g. `switch(...) { case 1 -> System.out.println("Hello world!") }`) has been fixed. This reduces false positives and negatives from various queries relating to functions featuring such statements.
## 0.8.3
### Deprecated APIs

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* The diagnostic query `java/diagnostics/successfully-extracted-files`, and therefore the Code Scanning UI measure of scanned Java files, now considers any Java file seen during extraction, even one with some errors, to be extracted / scanned.

View File

@@ -1,6 +1,8 @@
---
category: minorAnalysis
---
## 0.8.4
### Minor Analysis Improvements
* The diagnostic query `java/diagnostics/successfully-extracted-files`, and therefore the Code Scanning UI measure of scanned Java files, now considers any Java file seen during extraction, even one with some errors, to be extracted / scanned.
* Switch cases using binding patterns and `case null[, default]` are now supported. Classes `PatternCase` and `NullDefaultCase` are introduced to represent new kinds of case statement.
* Both switch cases and instanceof expressions using record patterns are now supported. The new class `RecordPatternExpr` is introduced to represent record patterns, and `InstanceOfExpr` gains `getPattern` to replace `getLocalVariableDeclExpr`.
* The control-flow graph and therefore dominance information regarding switch blocks in statement context but with an expression rule (e.g. `switch(...) { case 1 -> System.out.println("Hello world!") }`) has been fixed. This reduces false positives and negatives from various queries relating to functions featuring such statements.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 0.8.3
lastReleaseVersion: 0.8.4

View File

@@ -1,5 +1,5 @@
name: codeql/java-all
version: 0.8.4-dev
version: 0.8.4
groups: java
dbscheme: config/semmlecode.dbscheme
extractor: java

View File

@@ -1,3 +1,7 @@
## 0.8.4
No user-facing changes.
## 0.8.3
### Minor Analysis Improvements

View File

@@ -0,0 +1,3 @@
## 0.8.4
No user-facing changes.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 0.8.3
lastReleaseVersion: 0.8.4

View File

@@ -1,5 +1,5 @@
name: codeql/java-queries
version: 0.8.4-dev
version: 0.8.4
groups:
- java
- queries

View File

@@ -1,3 +1,10 @@
## 0.8.4
### Minor Analysis Improvements
* Added models for the `sqlite` and `better-sqlite3` npm packages.
* TypeScript 5.3 is now supported.
## 0.8.3
No user-facing changes.

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* TypeScript 5.3 is now supported.

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* Added models for the `sqlite` and `better-sqlite3` npm packages.

View File

@@ -0,0 +1,6 @@
## 0.8.4
### Minor Analysis Improvements
* Added models for the `sqlite` and `better-sqlite3` npm packages.
* TypeScript 5.3 is now supported.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 0.8.3
lastReleaseVersion: 0.8.4

View File

@@ -1,5 +1,5 @@
name: codeql/javascript-all
version: 0.8.4-dev
version: 0.8.4
groups: javascript
dbscheme: semmlecode.javascript.dbscheme
extractor: javascript

View File

@@ -1,3 +1,9 @@
## 0.8.4
### Minor Analysis Improvements
* Added django URLs to detected "safe" URL patterns in `js/unsafe-external-link`.
## 0.8.3
### Query Metadata Changes

View File

@@ -1,4 +1,5 @@
---
category: minorAnalysis
---
## 0.8.4
### Minor Analysis Improvements
* Added django URLs to detected "safe" URL patterns in `js/unsafe-external-link`.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 0.8.3
lastReleaseVersion: 0.8.4

View File

@@ -1,5 +1,5 @@
name: codeql/javascript-queries
version: 0.8.4-dev
version: 0.8.4
groups:
- javascript
- queries

View File

@@ -1,3 +1,7 @@
## 0.7.4
No user-facing changes.
## 0.7.3
No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 0.7.4
No user-facing changes.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 0.7.3
lastReleaseVersion: 0.7.4

View File

@@ -1,4 +1,4 @@
name: codeql/suite-helpers
version: 0.7.4-dev
version: 0.7.4
groups: shared
warnOnImplicitThis: true

View File

@@ -1,3 +1,12 @@
## 0.11.4
### Minor Analysis Improvements
- Added support for tarfile extraction filters as defined in [PEP-706](https://peps.python.org/pep-0706). In particular, calls to `TarFile.extract`, and `TarFile.extractall` are no longer considered to be sinks for the `py/tarslip` query if a sufficiently safe filter is provided.
* Added modeling of `*args` and `**kwargs` as routed-parameters in request handlers for django/flask/FastAPI/tornado.
- Added support for type parameters in function and class definitions, as well as the new Python 3.12 type alias statement.
* Added taint-flow modeling for regular expressions with `re` module from the standard library.
## 0.11.3
### Minor Analysis Improvements

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* Added taint-flow modeling for regular expressions with `re` module from the standard library.

View File

@@ -1,5 +0,0 @@
---
category: minorAnalysis
---
- Added support for type parameters in function and class definitions, as well as the new Python 3.12 type alias statement.

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* Added modeling of `*args` and `**kwargs` as routed-parameters in request handlers for django/flask/FastAPI/tornado.

View File

@@ -1,5 +0,0 @@
---
category: minorAnalysis
---
- Added support for tarfile extraction filters as defined in [PEP-706](https://peps.python.org/pep-0706). In particular, calls to `TarFile.extract`, and `TarFile.extractall` are no longer considered to be sinks for the `py/tarslip` query if a sufficiently safe filter is provided.

View File

@@ -0,0 +1,8 @@
## 0.11.4
### Minor Analysis Improvements
- Added support for tarfile extraction filters as defined in [PEP-706](https://peps.python.org/pep-0706). In particular, calls to `TarFile.extract`, and `TarFile.extractall` are no longer considered to be sinks for the `py/tarslip` query if a sufficiently safe filter is provided.
* Added modeling of `*args` and `**kwargs` as routed-parameters in request handlers for django/flask/FastAPI/tornado.
- Added support for type parameters in function and class definitions, as well as the new Python 3.12 type alias statement.
* Added taint-flow modeling for regular expressions with `re` module from the standard library.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 0.11.3
lastReleaseVersion: 0.11.4

View File

@@ -1,5 +1,5 @@
name: codeql/python-all
version: 0.11.4-dev
version: 0.11.4
groups: python
dbscheme: semmlecode.python.dbscheme
extractor: python

View File

@@ -1,3 +1,7 @@
## 0.9.4
No user-facing changes.
## 0.9.3
### Minor Analysis Improvements

View File

@@ -0,0 +1,3 @@
## 0.9.4
No user-facing changes.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 0.9.3
lastReleaseVersion: 0.9.4

View File

@@ -1,5 +1,5 @@
name: codeql/python-queries
version: 0.9.4-dev
version: 0.9.4
groups:
- python
- queries

View File

@@ -1,3 +1,9 @@
## 0.8.4
### Minor Analysis Improvements
* Improved modeling for `ActiveRecord`s `update_all` method
## 0.8.3
No user-facing changes.

View File

@@ -1,4 +1,5 @@
---
category: minorAnalysis
---
## 0.8.4
### Minor Analysis Improvements
* Improved modeling for `ActiveRecord`s `update_all` method

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 0.8.3
lastReleaseVersion: 0.8.4

View File

@@ -1,5 +1,5 @@
name: codeql/ruby-all
version: 0.8.4-dev
version: 0.8.4
groups: ruby
extractor: ruby
dbscheme: ruby.dbscheme

View File

@@ -1,3 +1,7 @@
## 0.8.4
No user-facing changes.
## 0.8.3
No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 0.8.4
No user-facing changes.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 0.8.3
lastReleaseVersion: 0.8.4

View File

@@ -1,5 +1,5 @@
name: codeql/ruby-queries
version: 0.8.4-dev
version: 0.8.4
groups:
- ruby
- queries

View File

@@ -1,3 +1,7 @@
## 0.1.4
No user-facing changes.
## 0.1.3
No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 0.1.4
No user-facing changes.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 0.1.3
lastReleaseVersion: 0.1.4

View File

@@ -1,5 +1,5 @@
name: codeql/controlflow
version: 0.1.4-dev
version: 0.1.4
groups: shared
library: true
dependencies:

View File

@@ -1,3 +1,7 @@
## 0.1.4
No user-facing changes.
## 0.1.3
No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 0.1.4
No user-facing changes.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 0.1.3
lastReleaseVersion: 0.1.4

View File

@@ -1,5 +1,5 @@
name: codeql/dataflow
version: 0.1.4-dev
version: 0.1.4
groups: shared
library: true
dependencies:

View File

@@ -1,3 +1,7 @@
## 0.2.4
No user-facing changes.
## 0.2.3
No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 0.2.4
No user-facing changes.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 0.2.3
lastReleaseVersion: 0.2.4

View File

@@ -1,5 +1,5 @@
name: codeql/mad
version: 0.2.4-dev
version: 0.2.4
groups: shared
library: true
dependencies: null

View File

@@ -1,3 +1,7 @@
## 0.0.3
No user-facing changes.
## 0.0.2
No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 0.0.3
No user-facing changes.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 0.0.2
lastReleaseVersion: 0.0.3

View File

@@ -1,5 +1,5 @@
name: codeql/rangeanalysis
version: 0.0.3-dev
version: 0.0.3
groups: shared
library: true
dependencies:

Some files were not shown because too many files have changed in this diff Show More