Release preparation for version 2.23.5

java/ql/lib/CHANGELOG.md

@@ -1,3 +1,7 @@
+## 7.7.3
+
+No user-facing changes.
+
 ## 7.7.2
 
 ### Minor Analysis Improvements

java/ql/lib/change-notes/released/7.7.3.md

@@ -0,0 +1,3 @@
+## 7.7.3
+
+No user-facing changes.

java/ql/lib/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 7.7.2
+lastReleaseVersion: 7.7.3

java/ql/lib/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/java-all
-version: 7.7.3-dev
+version: 7.7.3
 groups: java
 dbscheme: config/semmlecode.dbscheme
 extractor: java

java/ql/src/CHANGELOG.md

@@ -1,3 +1,16 @@
+## 1.9.0
+
+### New Queries
+
+* The `java/sensitive-cookie-not-httponly` query has been promoted from experimental to the main query pack.
+* Added a new query, `java/escaping`, to detect values escaping from classes marked as `@ThreadSafe`.
+* Added a new query, `java/not-threadsafe`, to detect data races in classes marked as `@ThreadSafe`.
+* Added a new query, `java/safe-publication`, to detect unsafe publication in classes marked as `@ThreadSafe`.
+
+### Minor Analysis Improvements
+
+* Calls to `String.matches` are now treated as sanitizers for the `java/ssrf` query.
+
 ## 1.8.2
 
 No user-facing changes.

java/ql/src/change-notes/2025-06-22-query-escaping.md

@@ -1,4 +0,0 @@
----
-category: newQuery
----
-* Added a new query, `java/escaping`, to detect values escaping from classes marked as `@ThreadSafe`.

java/ql/src/change-notes/2025-06-22-query-not-thread-safe.md

@@ -1,4 +0,0 @@
----
-category: newQuery
----
-* Added a new query, `java/not-threadsafe`, to detect data races in classes marked as `@ThreadSafe`.

java/ql/src/change-notes/2025-06-22-query-safe-publication.md

@@ -1,4 +0,0 @@
----
-category: newQuery
----
-* Added a new query, `java/safe-publication`, to detect unsafe publication in classes marked as `@ThreadSafe`.

java/ql/src/change-notes/2025-10-02-http-only-cookie-promote.md

@@ -1,4 +0,0 @@
----
-category: newQuery
----
-* The `java/sensitive-cookie-not-httponly` query has been promoted from experimental to the main query pack.

java/ql/src/change-notes/2025-10-24-request-forgery-matches-sanitizer.md

@@ -1,4 +0,0 @@
----
-category: minorAnalysis
----
-* Calls to `String.matches` are now treated as sanitizers for the `java/ssrf` query.

java/ql/src/change-notes/released/1.9.0.md

@@ -0,0 +1,12 @@
+## 1.9.0
+
+### New Queries
+
+* The `java/sensitive-cookie-not-httponly` query has been promoted from experimental to the main query pack.
+* Added a new query, `java/escaping`, to detect values escaping from classes marked as `@ThreadSafe`.
+* Added a new query, `java/not-threadsafe`, to detect data races in classes marked as `@ThreadSafe`.
+* Added a new query, `java/safe-publication`, to detect unsafe publication in classes marked as `@ThreadSafe`.
+
+### Minor Analysis Improvements
+
+* Calls to `String.matches` are now treated as sanitizers for the `java/ssrf` query.

java/ql/src/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 1.8.2
+lastReleaseVersion: 1.9.0

java/ql/src/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/java-queries
-version: 1.8.3-dev
+version: 1.9.0
 groups:
   - java
   - queries