Files
codeql/java/ql/lib/change-notes/released/3.0.1.md
2024-08-21 17:13:52 +00:00

12 lines
857 B
Markdown

## 3.0.1
### Minor Analysis Improvements
* Threat-model for `System.in` changed from `commandargs` to newly created `stdin` (both subgroups of `local`).
### Bug Fixes
* Fixed an issue where analysis in `build-mode: none` may very occasionally throw a `CoderMalfunctionError` while resolving dependencies provided by a build system (Maven or Gradle), which could cause some dependency resolution and consequently alerts to vary unpredictably from one run to another.
* Fixed an issue where Java analysis in `build-mode: none` would fail to resolve dependencies using the `executable-war` Maven artifact type.
* Fixed an issue where analysis in `build-mode: none` may fail to resolve dependencies of Gradle projects where the dependency uses a non-empty artifact classifier -- for example, `someproject-1.2.3-tests.jar`, which has the classifier `tests`.