Release preparation for version 2.14.1

ruby/ql/lib/CHANGELOG.md

@@ -1,3 +1,28 @@
+## 0.7.1
+
+### New Features
+
+* The `DataFlow::StateConfigSig` signature module has gained default implementations for `isBarrier/2` and `isAdditionalFlowStep/4`. 
+  Hence it is no longer needed to provide `none()` implementations of these predicates if they are not needed.
+
+### Major Analysis Improvements
+
+* The API graph library (`codeql.ruby.ApiGraphs`) has been significantly improved, with better support for inheritance,
+  and data-flow nodes can now be converted to API nodes by calling `.track()` or `.backtrack()` on the node.
+  API graphs allow for efficient modelling of how a given value is used by the code base, or how values produced by the code base
+  are consumed by a library. See the documentation for `API::Node` for details and examples.
+
+### Minor Analysis Improvements
+
+* Data flow configurations can now include a predicate `neverSkip(Node node)`
+  in order to ensure inclusion of certain nodes in the path explanations. The
+  predicate defaults to the end-points of the additional flow steps provided in
+  the configuration, which means that such steps now always are visible by
+  default in path explanations.
+* The `'QUERY_STRING'` field of a Rack `env` parameter is now recognized as a source of remote user input.
+* Query parameters and cookies from `Rack::Response` objects are recognized as potential sources of remote flow input.
+* Calls to `Rack::Utils.parse_query` now propagate taint.
+
 ## 0.7.0
 
 ### Deprecated APIs

ruby/ql/lib/change-notes/2023-06-28-tracking-on-demand.md

@@ -1,7 +0,0 @@
----
-category: majorAnalysis
----
-* The API graph library (`codeql.ruby.ApiGraphs`) has been significantly improved, with better support for inheritance,
-  and data-flow nodes can now be converted to API nodes by calling `.track()` or `.backtrack()` on the node.
-  API graphs allow for efficient modelling of how a given value is used by the code base, or how values produced by the code base
-  are consumed by a library. See the documentation for `API::Node` for details and examples.

ruby/ql/lib/change-notes/2023-07-05-rack-env-query-params.md

@@ -1,4 +0,0 @@
----
-category: minorAnalysis
----
-* The `'QUERY_STRING'` field of a Rack `env` parameter is now recognized as a source of remote user input.

ruby/ql/lib/change-notes/2023-07-05-rack-response.md

@@ -1,5 +0,0 @@
----
-category: minorAnalysis
----
-* Query parameters and cookies from `Rack::Response` objects are recognized as potential sources of remote flow input.
-* Calls to `Rack::Utils.parse_query` now propagate taint.

ruby/ql/lib/change-notes/2023-07-12-default-stateconfigsig-predicates.md

@@ -1,6 +0,0 @@
----
-category: feature
----
-* The `DataFlow::StateConfigSig` signature module has gained default implementations for `isBarrier/2` and `isAdditionalFlowStep/4`. 
-  Hence it is no longer needed to provide `none()` implementations of these predicates if they are not needed.
-  

ruby/ql/lib/change-notes/2023-07-19-neverskip-additionalstep.md

@@ -1,8 +0,0 @@
----
-category: minorAnalysis
----
-* Data flow configurations can now include a predicate `neverSkip(Node node)`
-  in order to ensure inclusion of certain nodes in the path explanations. The
-  predicate defaults to the end-points of the additional flow steps provided in
-  the configuration, which means that such steps now always are visible by
-  default in path explanations.

ruby/ql/lib/change-notes/released/0.7.1.md

@@ -0,0 +1,24 @@
+## 0.7.1
+
+### New Features
+
+* The `DataFlow::StateConfigSig` signature module has gained default implementations for `isBarrier/2` and `isAdditionalFlowStep/4`. 
+  Hence it is no longer needed to provide `none()` implementations of these predicates if they are not needed.
+
+### Major Analysis Improvements
+
+* The API graph library (`codeql.ruby.ApiGraphs`) has been significantly improved, with better support for inheritance,
+  and data-flow nodes can now be converted to API nodes by calling `.track()` or `.backtrack()` on the node.
+  API graphs allow for efficient modelling of how a given value is used by the code base, or how values produced by the code base
+  are consumed by a library. See the documentation for `API::Node` for details and examples.
+
+### Minor Analysis Improvements
+
+* Data flow configurations can now include a predicate `neverSkip(Node node)`
+  in order to ensure inclusion of certain nodes in the path explanations. The
+  predicate defaults to the end-points of the additional flow steps provided in
+  the configuration, which means that such steps now always are visible by
+  default in path explanations.
+* The `'QUERY_STRING'` field of a Rack `env` parameter is now recognized as a source of remote user input.
+* Query parameters and cookies from `Rack::Response` objects are recognized as potential sources of remote flow input.
+* Calls to `Rack::Utils.parse_query` now propagate taint.

ruby/ql/lib/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.7.0
+lastReleaseVersion: 0.7.1

ruby/ql/lib/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/ruby-all
-version: 0.7.1-dev
+version: 0.7.1
 groups: ruby
 extractor: ruby
 dbscheme: ruby.dbscheme

ruby/ql/src/CHANGELOG.md

@@ -1,3 +1,13 @@
+## 0.7.1
+
+### New Queries
+
+* Added a new experimental query, `rb/xpath-injection`, to detect cases where XPath statements are constructed from user input in an unsafe manner.
+
+### Minor Analysis Improvements
+
+* Improved resolution of calls performed on an object created with `Proc.new`.
+
 ## 0.7.0
 
 ### Minor Analysis Improvements

ruby/ql/src/change-notes/2023-06-29-api-graph-explicit-proc-lambda.md

@@ -1,4 +0,0 @@
----
-category: minorAnalysis
----
-* Improved resolution of calls performed on an object created with `Proc.new`.

ruby/ql/src/change-notes/released/0.7.1.md

@@ -1,4 +1,9 @@
----
-category: newQuery
----
+## 0.7.1
+
+### New Queries
+
 * Added a new experimental query, `rb/xpath-injection`, to detect cases where XPath statements are constructed from user input in an unsafe manner.
+
+### Minor Analysis Improvements
+
+* Improved resolution of calls performed on an object created with `Proc.new`.

ruby/ql/src/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.7.0
+lastReleaseVersion: 0.7.1

ruby/ql/src/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/ruby-queries
-version: 0.7.1-dev
+version: 0.7.1
 groups: 
   - ruby
   - queries