Merge pull request #20812 from github/release-prep/2.23.5

Release preparation for version 2.23.5
This commit is contained in:
Michael B. Gale
2025-11-11 11:46:37 +00:00
committed by GitHub
181 changed files with 490 additions and 193 deletions

View File

@@ -1,3 +1,7 @@
## 0.4.20
No user-facing changes.
## 0.4.19
No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 0.4.20
No user-facing changes.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 0.4.19
lastReleaseVersion: 0.4.20

View File

@@ -1,5 +1,5 @@
name: codeql/actions-all
version: 0.4.20-dev
version: 0.4.20
library: true
warnOnImplicitThis: true
dependencies:

View File

@@ -1,3 +1,7 @@
## 0.6.12
No user-facing changes.
## 0.6.11
No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 0.6.12
No user-facing changes.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 0.6.11
lastReleaseVersion: 0.6.12

View File

@@ -1,5 +1,5 @@
name: codeql/actions-queries
version: 0.6.12-dev
version: 0.6.12
library: false
warnOnImplicitThis: true
groups: [actions, queries]

View File

@@ -1,3 +1,7 @@
## 6.0.1
No user-facing changes.
## 6.0.0
### Breaking Changes

View File

@@ -1,4 +0,0 @@
---
category: fix
---
* Improve performance of the range analysis in cases where it would otherwise take an exorbitant amount of time.

View File

@@ -0,0 +1,3 @@
## 6.0.1
No user-facing changes.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 6.0.0
lastReleaseVersion: 6.0.1

View File

@@ -1,5 +1,5 @@
name: codeql/cpp-all
version: 6.0.1-dev
version: 6.0.1
groups: cpp
dbscheme: semmlecode.cpp.dbscheme
extractor: cpp

View File

@@ -1,3 +1,7 @@
## 1.5.3
No user-facing changes.
## 1.5.2
No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 1.5.3
No user-facing changes.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 1.5.2
lastReleaseVersion: 1.5.3

View File

@@ -1,5 +1,5 @@
name: codeql/cpp-queries
version: 1.5.3-dev
version: 1.5.3
groups:
- cpp
- queries

View File

@@ -1,3 +1,7 @@
## 1.7.51
No user-facing changes.
## 1.7.50
No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 1.7.51
No user-facing changes.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 1.7.50
lastReleaseVersion: 1.7.51

View File

@@ -1,5 +1,5 @@
name: codeql/csharp-solorigate-all
version: 1.7.51-dev
version: 1.7.51
groups:
- csharp
- solorigate

View File

@@ -1,3 +1,7 @@
## 1.7.51
No user-facing changes.
## 1.7.50
No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 1.7.51
No user-facing changes.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 1.7.50
lastReleaseVersion: 1.7.51

View File

@@ -1,5 +1,5 @@
name: codeql/csharp-solorigate-queries
version: 1.7.51-dev
version: 1.7.51
groups:
- csharp
- solorigate

View File

@@ -1,3 +1,18 @@
## 5.3.0
### Deprecated APIs
* The class `AbstractValue` in the `Guards` library has been deprecated and replaced with the class `GuardValue`.
### Major Analysis Improvements
* The representation of the C# control-flow graph has been significantly changed. This has minor effects on a wide range of queries including both minor improvements and minor regressions. For example, improved precision has been observed for `cs/inefficient-containskey` and `cs/stringbuilder-creation-in-loop`. Two queries stand out as being significantly affected with great improvements: `cs/dereferenced-value-may-be-null` has been completely rewritten which removes a very significant number of false positives. Furthermore, `cs/constant-condition` has been updated to report many new results - these new results are primarily expected to be true positives, but a few new false positives are expected as well. As part of these changes, `cs/dereferenced-value-may-be-null` has been changed from a `path-problem` query to a `problem` query, so paths are no longer reported for this query.
### Minor Analysis Improvements
* Added tracer support for macOS and Linux when the .NET CLI (`dotnet`) directly invokes the C# compiler (`csc`). This enhancement provides basic tracing and extraction capabilities for .NET 10 RC2 on these platforms.
* The extraction of location information for source code entities has been updated to use star IDs (`*` IDs). This change should be transparent to end-users but may improve extraction performance in some cases by reducing TRAP file size and eliminating overhead from location de-duplication.
## 5.2.6
### Minor Analysis Improvements

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* The extraction of location information for source code entities has been updated to use star IDs (`*` IDs). This change should be transparent to end-users but may improve extraction performance in some cases by reducing TRAP file size and eliminating overhead from location de-duplication.

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* Added tracer support for macOS and Linux when the .NET CLI (`dotnet`) directly invokes the C# compiler (`csc`). This enhancement provides basic tracing and extraction capabilities for .NET 10 RC2 on these platforms.

View File

@@ -1,4 +0,0 @@
---
category: deprecated
---
* The class `AbstractValue` in the `Guards` library has been deprecated and replaced with the class `GuardValue`.

View File

@@ -1,4 +1,14 @@
---
category: majorAnalysis
---
## 5.3.0
### Deprecated APIs
* The class `AbstractValue` in the `Guards` library has been deprecated and replaced with the class `GuardValue`.
### Major Analysis Improvements
* The representation of the C# control-flow graph has been significantly changed. This has minor effects on a wide range of queries including both minor improvements and minor regressions, for example, improved precision has been observed for `cs/inefficient-containskey` and `cs/stringbuilder-creation-in-loop`. Two queries stand out as being significantly affected with great improvements: `cs/dereferenced-value-may-be-null` has been completely rewritten which removes a very significant number of false positives. Furthermore, `cs/constant-condition` has been updated to report many new results - these new results are primarily expected to be true positives, but a few new false positives are expected as well. As part of these changes, `cs/dereferenced-value-may-be-null` has been changed from a `path-problem` query to a `problem` query, so paths are no longer reported for this query.
### Minor Analysis Improvements
* Added tracer support for macOS and Linux when the .NET CLI (`dotnet`) directly invokes the C# compiler (`csc`). This enhancement provides basic tracing and extraction capabilities for .NET 10 RC2 on these platforms.
* The extraction of location information for source code entities has been updated to use star IDs (`*` IDs). This change should be transparent to end-users but may improve extraction performance in some cases by reducing TRAP file size and eliminating overhead from location de-duplication.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 5.2.6
lastReleaseVersion: 5.3.0

View File

@@ -1,5 +1,5 @@
name: codeql/csharp-all
version: 5.2.7-dev
version: 5.3.0
groups: csharp
dbscheme: semmlecode.csharp.dbscheme
extractor: csharp

View File

@@ -1,3 +1,9 @@
## 1.4.3
### Minor Analysis Improvements
* The `cs/web/missing-x-frame-options` query now correctly handles configuration nested in root `<location>` elements.
## 1.4.2
No user-facing changes.

View File

@@ -1,4 +1,5 @@
---
category: minorAnalysis
---
## 1.4.3
### Minor Analysis Improvements
* the `cs/web/missing-x-frame-options` query now correctly handles configuration nested in root `<location>` elements.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 1.4.2
lastReleaseVersion: 1.4.3

View File

@@ -1,5 +1,5 @@
name: codeql/csharp-queries
version: 1.4.3-dev
version: 1.4.3
groups:
- csharp
- queries

View File

@@ -1,3 +1,7 @@
## 1.0.34
No user-facing changes.
## 1.0.33
No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 1.0.34
No user-facing changes.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 1.0.33
lastReleaseVersion: 1.0.34

View File

@@ -1,5 +1,5 @@
name: codeql-go-consistency-queries
version: 1.0.34-dev
version: 1.0.34
groups:
- go
- queries

View File

@@ -1,3 +1,7 @@
## 5.0.1
No user-facing changes.
## 5.0.0
### Breaking Changes

View File

@@ -0,0 +1,3 @@
## 5.0.1
No user-facing changes.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 5.0.0
lastReleaseVersion: 5.0.1

View File

@@ -1,5 +1,5 @@
name: codeql/go-all
version: 5.0.1-dev
version: 5.0.1
groups: go
dbscheme: go.dbscheme
extractor: go

View File

@@ -1,3 +1,7 @@
## 1.4.8
No user-facing changes.
## 1.4.7
No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 1.4.8
No user-facing changes.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 1.4.7
lastReleaseVersion: 1.4.8

View File

@@ -1,5 +1,5 @@
name: codeql/go-queries
version: 1.4.8-dev
version: 1.4.8
groups:
- go
- queries

View File

@@ -1,3 +1,7 @@
## 7.7.3
No user-facing changes.
## 7.7.2
### Minor Analysis Improvements

View File

@@ -0,0 +1,3 @@
## 7.7.3
No user-facing changes.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 7.7.2
lastReleaseVersion: 7.7.3

View File

@@ -1,5 +1,5 @@
name: codeql/java-all
version: 7.7.3-dev
version: 7.7.3
groups: java
dbscheme: config/semmlecode.dbscheme
extractor: java

View File

@@ -1,3 +1,16 @@
## 1.9.0
### New Queries
* The `java/sensitive-cookie-not-httponly` query has been promoted from experimental to the main query pack.
* Added a new query, `java/escaping`, to detect values escaping from classes marked as `@ThreadSafe`.
* Added a new query, `java/not-threadsafe`, to detect data races in classes marked as `@ThreadSafe`.
* Added a new query, `java/safe-publication`, to detect unsafe publication in classes marked as `@ThreadSafe`.
### Minor Analysis Improvements
* Calls to `String.matches` are now treated as sanitizers for the `java/ssrf` query.
## 1.8.2
No user-facing changes.

View File

@@ -1,4 +0,0 @@
---
category: newQuery
---
* Added a new query, `java/escaping`, to detect values escaping from classes marked as `@ThreadSafe`.

View File

@@ -1,4 +0,0 @@
---
category: newQuery
---
* Added a new query, `java/not-threadsafe`, to detect data races in classes marked as `@ThreadSafe`.

View File

@@ -1,4 +0,0 @@
---
category: newQuery
---
* Added a new query, `java/safe-publication`, to detect unsafe publication in classes marked as `@ThreadSafe`.

View File

@@ -1,4 +0,0 @@
---
category: newQuery
---
* The `java/sensitive-cookie-not-httponly` query has been promoted from experimental to the main query pack.

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* Calls to `String.matches` are now treated as sanitizers for the `java/ssrf` query.

View File

@@ -0,0 +1,12 @@
## 1.9.0
### New Queries
* The `java/sensitive-cookie-not-httponly` query has been promoted from experimental to the main query pack.
* Added a new query, `java/escaping`, to detect values escaping from classes marked as `@ThreadSafe`.
* Added a new query, `java/not-threadsafe`, to detect data races in classes marked as `@ThreadSafe`.
* Added a new query, `java/safe-publication`, to detect unsafe publication in classes marked as `@ThreadSafe`.
### Minor Analysis Improvements
* Calls to `String.matches` are now treated as sanitizers for the `java/ssrf` query.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 1.8.2
lastReleaseVersion: 1.9.0

View File

@@ -1,5 +1,5 @@
name: codeql/java-queries
version: 1.8.3-dev
version: 1.9.0
groups:
- java
- queries

View File

@@ -1,3 +1,7 @@
## 2.6.14
No user-facing changes.
## 2.6.13
No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 2.6.14
No user-facing changes.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 2.6.13
lastReleaseVersion: 2.6.14

View File

@@ -1,5 +1,5 @@
name: codeql/javascript-all
version: 2.6.14-dev
version: 2.6.14
groups: javascript
dbscheme: semmlecode.javascript.dbscheme
extractor: javascript

View File

@@ -1,3 +1,7 @@
## 2.1.3
No user-facing changes.
## 2.1.2
No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 2.1.3
No user-facing changes.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 2.1.2
lastReleaseVersion: 2.1.3

View File

@@ -1,5 +1,5 @@
name: codeql/javascript-queries
version: 2.1.3-dev
version: 2.1.3
groups:
- javascript
- queries

View File

@@ -1,3 +1,7 @@
## 1.0.34
No user-facing changes.
## 1.0.33
No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 1.0.34
No user-facing changes.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 1.0.33
lastReleaseVersion: 1.0.34

View File

@@ -1,4 +1,4 @@
name: codeql/suite-helpers
version: 1.0.34-dev
version: 1.0.34
groups: shared
warnOnImplicitThis: true

View File

@@ -1,3 +1,9 @@
## 4.1.0
### New Features
* Initial support for incremental Python databases via `codeql database create --overlay-base`/`--overlay-changes`.
## 4.0.17
### Bug Fixes

View File

@@ -1,5 +1,5 @@
---
category: feature
---
## 4.1.0
### New Features
* Initial support for incremental Python databases via `codeql database create --overlay-base`/`--overlay-changes`.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 4.0.17
lastReleaseVersion: 4.1.0

View File

@@ -1,5 +1,5 @@
name: codeql/python-all
version: 4.0.18-dev
version: 4.1.0
groups: python
dbscheme: semmlecode.python.dbscheme
extractor: python

View File

@@ -1,3 +1,9 @@
## 1.6.8
### Minor Analysis Improvements
* The `py/insecure-cookie` query has been split into multiple queries; with `py/insecure-cookie` checking for cases in which `Secure` flag is not set, `py/client-exposed-cookie` checking for cases in which the `HttpOnly` flag is not set, and the `py/samesite-none` query checking for cases in which the `SameSite` attribute is set to `None`. These queries also now only alert for cases in which the cookie is detected to contain sensitive data.
## 1.6.7
No user-facing changes.

View File

@@ -1,4 +1,5 @@
---
category: minorAnalysis
---
## 1.6.8
### Minor Analysis Improvements
* The `py/insecure-cookie` query has been split into multiple queries; with `py/insecure-cookie` checking for cases in which `Secure` flag is not set, `py/client-exposed-cookie` checking for cases in which the `HttpOnly` flag is not set, and the `py/samesite-none` query checking for cases in which the `SameSite` attribute is set to `None`. These queries also now only alert for cases in which the cookie is detected to contain sensitive data.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 1.6.7
lastReleaseVersion: 1.6.8

View File

@@ -1,5 +1,5 @@
name: codeql/python-queries
version: 1.6.8-dev
version: 1.6.8
groups:
- python
- queries

View File

@@ -1,3 +1,7 @@
## 5.1.2
No user-facing changes.
## 5.1.1
No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 5.1.2
No user-facing changes.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 5.1.1
lastReleaseVersion: 5.1.2

View File

@@ -1,5 +1,5 @@
name: codeql/ruby-all
version: 5.1.2-dev
version: 5.1.2
groups: ruby
extractor: ruby
dbscheme: ruby.dbscheme

View File

@@ -1,3 +1,7 @@
## 1.4.8
No user-facing changes.
## 1.4.7
No user-facing changes.

View File

@@ -0,0 +1,3 @@
## 1.4.8
No user-facing changes.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 1.4.7
lastReleaseVersion: 1.4.8

View File

@@ -1,5 +1,5 @@
name: codeql/ruby-queries
version: 1.4.8-dev
version: 1.4.8
groups:
- ruby
- queries

View File

@@ -1,3 +1,16 @@
## 0.1.19
### Major Analysis Improvements
* Resolution of calls to functions has been improved in a number of ways, to make it more aligned with the behavior of the Rust compiler. This may impact queries that rely on call resolution, such as data flow queries.
* Added basic models for the `actix-web` web framework.
### Minor Analysis Improvements
* Added `ExtractedFile::hasSemantics` and `ExtractedFile::isSkippedByCompilation` predicates.
* Generalized some existing models to improve data flow.
* Added models for the `mysql` and `mysql_async` libraries.
## 0.1.18
### New Features

View File

@@ -1,4 +0,0 @@
---
category: majorAnalysis
---
* Added basic models for the `actix-web` web framework.

View File

@@ -1,4 +0,0 @@
---
category: majorAnalysis
---
* Resolution of calls to functions has been improved in a number of ways, to make it more aligned with the behavior of the Rust compiler. This may impact queries that rely on call resolution, such as data flow queries.

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* Added models for the `mysql` and `mysql_async` libraries.

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* Generalized some existing models to improve data flow.

View File

@@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* Added `ExtractedFile::hasSemantics` and `ExtractedFile::isSkippedByCompilation` predicates.

View File

@@ -0,0 +1,12 @@
## 0.1.19
### Major Analysis Improvements
* Resolution of calls to functions has been improved in a number of ways, to make it more aligned with the behavior of the Rust compiler. This may impact queries that rely on call resolution, such as data flow queries.
* Added basic models for the `actix-web` web framework.
### Minor Analysis Improvements
* Added `ExtractedFile::hasSemantics` and `ExtractedFile::isSkippedByCompilation` predicates.
* Generalized some existing models to improve data flow.
* Added models for the `mysql` and `mysql_async` libraries.

View File

@@ -1,2 +1,2 @@
---
lastReleaseVersion: 0.1.18
lastReleaseVersion: 0.1.19

View File

@@ -1,5 +1,5 @@
name: codeql/rust-all
version: 0.1.19-dev
version: 0.1.19
groups: rust
extractor: rust
dbscheme: rust.dbscheme

View File

@@ -1,3 +1,9 @@
## 0.1.19
### Minor Analysis Improvements
* The "Low Rust analysis quality" query (`rust/diagnostic/database-quality`), used by the tool status page, has been extended with a measure of successful type inference.
## 0.1.18
### New Queries

View File

@@ -1,4 +1,5 @@
---
category: minorAnalysis
---
## 0.1.19
### Minor Analysis Improvements
* The "Low Rust analysis quality" query (`rust/diagnostic/database-quality`), used by the tool status page, has been extended with a measure of successful type inference.

Some files were not shown because too many files have changed in this diff Show More