Merge pull request #16228 from github/post-release-prep/codeql-cli-2.17.1

Post-release preparation for codeql-cli-2.17.1

cpp/ql/lib/CHANGELOG.md

@@ -1,3 +1,7 @@
+## 0.12.11
+
+No user-facing changes.
+
 ## 0.12.10
 
 ### New Features

cpp/ql/lib/change-notes/released/0.12.11.md

@@ -0,0 +1,3 @@
+## 0.12.11
+
+No user-facing changes.

cpp/ql/lib/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.12.10
+lastReleaseVersion: 0.12.11

cpp/ql/lib/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/cpp-all
-version: 0.12.11-dev
+version: 0.12.12-dev
 groups: cpp
 dbscheme: semmlecode.cpp.dbscheme
 extractor: cpp

cpp/ql/src/CHANGELOG.md

@@ -1,3 +1,7 @@
+## 0.9.10
+
+No user-facing changes.
+
 ## 0.9.9
 
 ### New Queries

cpp/ql/src/change-notes/released/0.9.10.md

@@ -0,0 +1,3 @@
+## 0.9.10
+
+No user-facing changes.

cpp/ql/src/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.9.9
+lastReleaseVersion: 0.9.10

cpp/ql/src/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/cpp-queries
-version: 0.9.10-dev
+version: 0.9.11-dev
 groups:
   - cpp
   - queries

csharp/ql/campaigns/Solorigate/lib/CHANGELOG.md

@@ -1,3 +1,7 @@
+## 1.7.14
+
+No user-facing changes.
+
 ## 1.7.13
 
 No user-facing changes.

csharp/ql/campaigns/Solorigate/lib/change-notes/released/1.7.14.md

@@ -0,0 +1,3 @@
+## 1.7.14
+
+No user-facing changes.

csharp/ql/campaigns/Solorigate/lib/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 1.7.13
+lastReleaseVersion: 1.7.14

csharp/ql/campaigns/Solorigate/lib/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/csharp-solorigate-all
-version: 1.7.14-dev
+version: 1.7.15-dev
 groups:
   - csharp
   - solorigate

csharp/ql/campaigns/Solorigate/src/CHANGELOG.md

@@ -1,3 +1,7 @@
+## 1.7.14
+
+No user-facing changes.
+
 ## 1.7.13
 
 No user-facing changes.

csharp/ql/campaigns/Solorigate/src/change-notes/released/1.7.14.md

@@ -0,0 +1,3 @@
+## 1.7.14
+
+No user-facing changes.

csharp/ql/campaigns/Solorigate/src/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 1.7.13
+lastReleaseVersion: 1.7.14

csharp/ql/campaigns/Solorigate/src/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/csharp-solorigate-queries
-version: 1.7.14-dev
+version: 1.7.15-dev
 groups:
   - csharp
   - solorigate

csharp/ql/lib/CHANGELOG.md

@@ -1,3 +1,9 @@
+## 0.9.1
+
+### Minor Analysis Improvements
+
+* Extracting suppress nullable warning expressions did not work when applied directly to a method call (like `System.Console.Readline()!`). This has been fixed.
+
 ## 0.9.0
 
 ### Breaking Changes

csharp/ql/lib/change-notes/released/0.9.1.md

@@ -1,4 +1,5 @@
----
-category: minorAnalysis
----
+## 0.9.1
+
+### Minor Analysis Improvements
+
 * Extracting suppress nullable warning expressions did not work when applied directly to a method call (like `System.Console.Readline()!`). This has been fixed.

csharp/ql/lib/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.9.0
+lastReleaseVersion: 0.9.1

csharp/ql/lib/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/csharp-all
-version: 0.9.1-dev
+version: 0.9.2-dev
 groups: csharp
 dbscheme: semmlecode.csharp.dbscheme
 extractor: csharp

csharp/ql/src/CHANGELOG.md

@@ -1,3 +1,7 @@
+## 0.8.14
+
+No user-facing changes.
+
 ## 0.8.13
 
 ### Major Analysis Improvements

csharp/ql/src/change-notes/released/0.8.14.md

@@ -0,0 +1,3 @@
+## 0.8.14
+
+No user-facing changes.

csharp/ql/src/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.8.13
+lastReleaseVersion: 0.8.14

csharp/ql/src/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/csharp-queries
-version: 0.8.14-dev
+version: 0.8.15-dev
 groups:
   - csharp
   - queries

go/ql/consistency-queries/CHANGELOG.md

@@ -1,3 +1,7 @@
+## 0.0.13
+
+No user-facing changes.
+
 ## 0.0.12
 
 No user-facing changes.

go/ql/consistency-queries/change-notes/released/0.0.13.md

@@ -0,0 +1,3 @@
+## 0.0.13
+
+No user-facing changes.

go/ql/consistency-queries/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.12
+lastReleaseVersion: 0.0.13

go/ql/consistency-queries/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql-go-consistency-queries
-version: 0.0.13-dev
+version: 0.0.14-dev
 groups:
   - go
   - queries

go/ql/lib/CHANGELOG.md

@@ -1,3 +1,10 @@
+## 0.7.14
+
+### Minor Analysis Improvements
+
+* Data flow through variables declared in statements of the form `x := y.(type)` at the beginning of type switches has been fixed, which may result in more alerts.
+* Added strings.ReplaceAll, http.ParseMultipartForm sanitizers and remove path sanitizer.
+
 ## 0.7.13
 
 ### Minor Analysis Improvements

go/ql/lib/change-notes/2024-03-11-addional-gopath-sanitizers.md

@@ -1,4 +0,0 @@
----
-category: minorAnalysis
----
-* Added strings.ReplaceAll, http.ParseMultipartForm sanitizers and remove path sanitizer.

go/ql/lib/change-notes/released/0.7.14.md

@@ -1,4 +1,6 @@
----
-category: minorAnalysis
----
+## 0.7.14
+
+### Minor Analysis Improvements
+
 * Data flow through variables declared in statements of the form `x := y.(type)` at the beginning of type switches has been fixed, which may result in more alerts.
+* Added strings.ReplaceAll, http.ParseMultipartForm sanitizers and remove path sanitizer.

go/ql/lib/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.7.13
+lastReleaseVersion: 0.7.14

go/ql/lib/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/go-all
-version: 0.7.14-dev
+version: 0.7.15-dev
 groups: go
 dbscheme: go.dbscheme
 extractor: go

go/ql/src/CHANGELOG.md

@@ -1,3 +1,7 @@
+## 0.7.14
+
+No user-facing changes.
+
 ## 0.7.13
 
 ### New Queries

go/ql/src/change-notes/released/0.7.14.md

@@ -0,0 +1,3 @@
+## 0.7.14
+
+No user-facing changes.

go/ql/src/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.7.13
+lastReleaseVersion: 0.7.14

go/ql/src/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/go-queries
-version: 0.7.14-dev
+version: 0.7.15-dev
 groups:
   - go
   - queries

java/ql/automodel/src/CHANGELOG.md

@@ -1,3 +1,7 @@
+## 0.0.21
+
+No user-facing changes.
+
 ## 0.0.20
 
 No user-facing changes.

java/ql/automodel/src/change-notes/released/0.0.21.md

@@ -0,0 +1,3 @@
+## 0.0.21
+
+No user-facing changes.

java/ql/automodel/src/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.20
+lastReleaseVersion: 0.0.21

java/ql/automodel/src/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/java-automodel-queries
-version: 0.0.21-dev
+version: 0.0.22-dev
 groups:
     - java
     - automodel

java/ql/lib/CHANGELOG.md

@@ -1,3 +1,9 @@
+## 0.9.1
+
+### Minor Analysis Improvements
+
+* About 6,700 summary models and 6,800 neutral summary models for the JDK that were generated using data flow have been added. This may lead to new alerts being reported.
+
 ## 0.9.0
 
 ### Breaking Changes

java/ql/lib/change-notes/released/0.9.1.md

@@ -1,4 +1,5 @@
----
-category: minorAnalysis
----
+## 0.9.1
+
+### Minor Analysis Improvements
+
 * About 6,700 summary models and 6,800 neutral summary models for the JDK that were generated using data flow have been added. This may lead to new alerts being reported.

java/ql/lib/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.9.0
+lastReleaseVersion: 0.9.1

java/ql/lib/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/java-all
-version: 0.9.1-dev
+version: 0.9.2-dev
 groups: java
 dbscheme: config/semmlecode.dbscheme
 extractor: java

java/ql/src/CHANGELOG.md

@@ -1,3 +1,10 @@
+## 0.8.14
+
+### Minor Analysis Improvements
+
+* The `java/unknown-javadoc-parameter` now accepts `@param` tags that apply to the parameters of a
+  record.
+
 ## 0.8.13
 
 ### New Queries

java/ql/src/change-notes/released/0.8.14.md

@@ -1,5 +1,6 @@
----
-category: minorAnalysis
----
+## 0.8.14
+
+### Minor Analysis Improvements
+
 * The `java/unknown-javadoc-parameter` now accepts `@param` tags that apply to the parameters of a
   record.

java/ql/src/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.8.13
+lastReleaseVersion: 0.8.14

java/ql/src/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/java-queries
-version: 0.8.14-dev
+version: 0.8.15-dev
 groups:
   - java
   - queries

javascript/ql/lib/CHANGELOG.md

@@ -1,3 +1,7 @@
+## 0.8.14
+
+No user-facing changes.
+
 ## 0.8.13
 
 ### Major Analysis Improvements

javascript/ql/lib/change-notes/released/0.8.14.md

@@ -0,0 +1,3 @@
+## 0.8.14
+
+No user-facing changes.

javascript/ql/lib/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.8.13
+lastReleaseVersion: 0.8.14

javascript/ql/lib/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/javascript-all
-version: 0.8.14-dev
+version: 0.8.15-dev
 groups: javascript
 dbscheme: semmlecode.javascript.dbscheme
 extractor: javascript

javascript/ql/src/CHANGELOG.md

@@ -1,3 +1,10 @@
+## 0.8.14
+
+### Minor Analysis Improvements
+
+* `API::Node#getInstance()` now includes instances of subclasses, include transitive subclasses.
+  The same changes applies to uses of the `Instance` token in data extensions.
+
 ## 0.8.13
 
 ### Query Metadata Changes

javascript/ql/src/change-notes/released/0.8.14.md

@@ -1,5 +1,6 @@
----
-category: minorAnalysis
----
+## 0.8.14
+
+### Minor Analysis Improvements
+
 * `API::Node#getInstance()` now includes instances of subclasses, include transitive subclasses.
   The same changes applies to uses of the `Instance` token in data extensions.

javascript/ql/src/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.8.13
+lastReleaseVersion: 0.8.14

javascript/ql/src/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/javascript-queries
-version: 0.8.14-dev
+version: 0.8.15-dev
 groups:
   - javascript
   - queries

misc/suite-helpers/CHANGELOG.md

@@ -1,3 +1,7 @@
+## 0.7.14
+
+No user-facing changes.
+
 ## 0.7.13
 
 No user-facing changes.

misc/suite-helpers/change-notes/released/0.7.14.md

@@ -0,0 +1,3 @@
+## 0.7.14
+
+No user-facing changes.

misc/suite-helpers/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.7.13
+lastReleaseVersion: 0.7.14

misc/suite-helpers/qlpack.yml

@@ -1,4 +1,4 @@
 name: codeql/suite-helpers
-version: 0.7.14-dev
+version: 0.7.15-dev
 groups: shared
 warnOnImplicitThis: true

python/ql/lib/CHANGELOG.md

@@ -1,3 +1,9 @@
+## 0.11.14
+
+### Minor Analysis Improvements
+
+* Improved the type-tracking capabilities (and therefore also API graphs) to allow tracking items in tuples and dictionaries.
+
 ## 0.11.13
 
 No user-facing changes.

python/ql/lib/change-notes/released/0.11.14.md

@@ -1,4 +1,5 @@
----
-category: minorAnalysis
----
+## 0.11.14
+
+### Minor Analysis Improvements
+
 * Improved the type-tracking capabilities (and therefore also API graphs) to allow tracking items in tuples and dictionaries.

python/ql/lib/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.11.13
+lastReleaseVersion: 0.11.14

python/ql/lib/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/python-all
-version: 0.11.14-dev
+version: 0.11.15-dev
 groups: python
 dbscheme: semmlecode.python.dbscheme
 extractor: python

python/ql/src/CHANGELOG.md

@@ -1,3 +1,7 @@
+## 0.9.14
+
+No user-facing changes.
+
 ## 0.9.13
 
 No user-facing changes.

python/ql/src/change-notes/released/0.9.14.md

@@ -0,0 +1,3 @@
+## 0.9.14
+
+No user-facing changes.

python/ql/src/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.9.13
+lastReleaseVersion: 0.9.14

python/ql/src/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/python-queries
-version: 0.9.14-dev
+version: 0.9.15-dev
 groups:
   - python
   - queries

ruby/ql/lib/CHANGELOG.md

@@ -1,3 +1,7 @@
+## 0.8.14
+
+No user-facing changes.
+
 ## 0.8.13
 
 ### Minor Analysis Improvements

ruby/ql/lib/change-notes/released/0.8.14.md

@@ -0,0 +1,3 @@
+## 0.8.14
+
+No user-facing changes.

ruby/ql/lib/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.8.13
+lastReleaseVersion: 0.8.14

ruby/ql/lib/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/ruby-all
-version: 0.8.14-dev
+version: 0.8.15-dev
 groups: ruby
 extractor: ruby
 dbscheme: ruby.dbscheme

ruby/ql/src/CHANGELOG.md

@@ -1,3 +1,10 @@
+## 0.8.14
+
+### New Queries
+
+* Added a new query, `rb/insecure-mass-assignment`, for finding instances of mass assignment operations accepting arbitrary parameters from remote user input.
+* Added a new query, `rb/csrf-protection-not-enabled`, to detect cases where Cross-Site Request Forgery protection is not enabled in Ruby on Rails controllers.
+
 ## 0.8.13
 
 No user-facing changes.

ruby/ql/src/change-notes/2023-09-25-csrf-protection-not-enabled.md

@@ -1,4 +0,0 @@
----
-category: newQuery
----
-* Added a new query, `rb/csrf-protection-not-enabled`, to detect cases where Cross-Site Request Forgery protection is not enabled in Ruby on Rails controllers.

ruby/ql/src/change-notes/2024-03-22-mass-assignment.md

@@ -1,4 +0,0 @@
----
-category: newQuery
----
-* Added a new query, `rb/insecure-mass-assignment`, for finding instances of mass assignment operations accepting arbitrary parameters from remote user input.

ruby/ql/src/change-notes/released/0.8.14.md

@@ -0,0 +1,6 @@
+## 0.8.14
+
+### New Queries
+
+* Added a new query, `rb/insecure-mass-assignment`, for finding instances of mass assignment operations accepting arbitrary parameters from remote user input.
+* Added a new query, `rb/csrf-protection-not-enabled`, to detect cases where Cross-Site Request Forgery protection is not enabled in Ruby on Rails controllers.

ruby/ql/src/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.8.13
+lastReleaseVersion: 0.8.14

ruby/ql/src/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/ruby-queries
-version: 0.8.14-dev
+version: 0.8.15-dev
 groups:
   - ruby
   - queries

shared/controlflow/CHANGELOG.md

@@ -1,3 +1,7 @@
+## 0.1.14
+
+No user-facing changes.
+
 ## 0.1.13
 
 No user-facing changes.

shared/controlflow/change-notes/released/0.1.14.md

@@ -0,0 +1,3 @@
+## 0.1.14
+
+No user-facing changes.

shared/controlflow/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.1.13
+lastReleaseVersion: 0.1.14

shared/controlflow/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/controlflow
-version: 0.1.14-dev
+version: 0.1.15-dev
 groups: shared
 library: true
 dependencies:

shared/dataflow/CHANGELOG.md

@@ -1,3 +1,9 @@
+## 0.2.5
+
+### New Features
+
+* The `PathGraph` result of a data flow computation has been augmented with model provenance information for each of the flow steps. Any qltests that include the edges relation in their output (for example, `.qlref`s that reference path-problem queries) will need to be have their expected output updated accordingly.
+
 ## 0.2.4
 
 ### Minor Analysis Improvements

shared/dataflow/change-notes/released/0.2.5.md

@@ -1,4 +1,5 @@
----
-category: feature
----
+## 0.2.5
+
+### New Features
+
 * The `PathGraph` result of a data flow computation has been augmented with model provenance information for each of the flow steps. Any qltests that include the edges relation in their output (for example, `.qlref`s that reference path-problem queries) will need to be have their expected output updated accordingly.

shared/dataflow/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.2.4
+lastReleaseVersion: 0.2.5

shared/dataflow/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/dataflow
-version: 0.2.5-dev
+version: 0.2.6-dev
 groups: shared
 library: true
 dependencies:

shared/mad/CHANGELOG.md

@@ -1,3 +1,7 @@
+## 0.2.14
+
+No user-facing changes.
+
 ## 0.2.13
 
 No user-facing changes.

shared/mad/change-notes/released/0.2.14.md

@@ -0,0 +1,3 @@
+## 0.2.14
+
+No user-facing changes.

shared/mad/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.2.13
+lastReleaseVersion: 0.2.14

shared/mad/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/mad
-version: 0.2.14-dev
+version: 0.2.15-dev
 groups: shared
 library: true
 dependencies: null

shared/rangeanalysis/CHANGELOG.md

@@ -1,3 +1,7 @@
+## 0.0.13
+
+No user-facing changes.
+
 ## 0.0.12
 
 No user-facing changes.

shared/rangeanalysis/change-notes/released/0.0.13.md

@@ -0,0 +1,3 @@
+## 0.0.13
+
+No user-facing changes.

shared/rangeanalysis/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.12
+lastReleaseVersion: 0.0.13

shared/rangeanalysis/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/rangeanalysis
-version: 0.0.13-dev
+version: 0.0.14-dev
 groups: shared
 library: true
 dependencies:

shared/regex/CHANGELOG.md

@@ -1,3 +1,7 @@
+## 0.2.14
+
+No user-facing changes.
+
 ## 0.2.13
 
 No user-facing changes.

shared/regex/change-notes/released/0.2.14.md

@@ -0,0 +1,3 @@
+## 0.2.14
+
+No user-facing changes.

shared/regex/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.2.13
+lastReleaseVersion: 0.2.14

shared/regex/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/regex
-version: 0.2.14-dev
+version: 0.2.15-dev
 groups: shared
 library: true
 dependencies:

shared/ssa/CHANGELOG.md

@@ -1,3 +1,7 @@
+## 0.2.14
+
+No user-facing changes.
+
 ## 0.2.13
 
 No user-facing changes.