Release preparation for version 2.9.2

java/ql/src/CHANGELOG.md

@@ -1,3 +1,16 @@
+## 0.1.2
+
+### Query Metadata Changes
+
+* Query `java/predictable-seed` now has a tag for CWE-337. 
+
+### Minor Analysis Improvements
+
+* Query `java/insecure-cookie` now tolerates setting a cookie's secure flag to `request.isSecure()`. This means servlets that intentionally accept unencrypted connections will no longer raise an alert.
+* The query `java/non-https-urls` has been simplified
+and no longer requires its sinks to be `MethodAccess`es.
+ * The logic to detect `WebView`s with JavaScript (and optionally file access) enabled in the query `java/android/unsafe-android-webview-fetch` has been improved.
+
 ## 0.1.1
 
 ### Minor Analysis Improvements
@@ -26,7 +39,7 @@ this respect.
 
 ### Minor Analysis Improvements
 
-* Updated "Local information disclosure in a temporary directory" (`java/local-temp-file-or-directory-information-disclosure`) to remove false-positives when OS is properly used as logical guard.
+ * Updated "Local information disclosure in a temporary directory" (`java/local-temp-file-or-directory-information-disclosure`) to remove false-positives when OS is properly used as logical guard.
 
 ## 0.0.11
 

java/ql/src/change-notes/2022-03-24-unsafe-android-access-improvements.md

@@ -1,5 +0,0 @@
----
-category: minorAnalysis
----
- * The logic to detect `WebView`s with JavaScript (and optionally file access) enabled in the query `java/android/unsafe-android-webview-fetch` has been improved.
- 

java/ql/src/change-notes/2022-05-02-non-https-urls-simplified.md

@@ -1,5 +0,0 @@
----
-category: minorAnalysis
----
-* The query `java/non-https-urls` has been simplified
-and no longer requires its sinks to be `MethodAccess`es.

java/ql/src/change-notes/2022-05-03-predictable-seed-tag.md

@@ -1,4 +0,0 @@
----
-category: queryMetadata
----
-* Query `java/predictable-seed` now has a tag for CWE-337. 

java/ql/src/change-notes/2022-05-11-insecure-cookie.md

@@ -1,4 +0,0 @@
----
-category: minorAnalysis
----
-* Query `java/insecure-cookie` now tolerates setting a cookie's secure flag to `request.isSecure()`. This means servlets that intentionally accept unencrypted connections will no longer raise an alert.

java/ql/src/change-notes/released/0.1.2.md

@@ -0,0 +1,12 @@
+## 0.1.2
+
+### Query Metadata Changes
+
+* Query `java/predictable-seed` now has a tag for CWE-337. 
+
+### Minor Analysis Improvements
+
+* Query `java/insecure-cookie` now tolerates setting a cookie's secure flag to `request.isSecure()`. This means servlets that intentionally accept unencrypted connections will no longer raise an alert.
+* The query `java/non-https-urls` has been simplified
+and no longer requires its sinks to be `MethodAccess`es.
+ * The logic to detect `WebView`s with JavaScript (and optionally file access) enabled in the query `java/android/unsafe-android-webview-fetch` has been improved.

java/ql/src/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.1.1
+lastReleaseVersion: 0.1.2

java/ql/src/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/java-queries
-version: 0.1.2-dev
+version: 0.1.2
 groups: 
   - java
   - queries