codeql/ruby/ql/lib/change-notes/released/3.0.2.md

3.0.2

Minor Analysis Improvements

• The sensitive data library has been improved so that snake_case style variable names are recognized more reliably. This may result in more sensitive data being identified, and more results from queries that use the sensitive data library.
• Types are now being tracked in data flow, but only when the type of an object is obvious from the context. For example, C.new has guaranteed type C, while in def add(x, y) { x + y } we cannot assign a type to x + y (it could, for instance, be both String and Integer). Tracking types allows us to remove false-positive results when type incompatibility can be established.