codeql/python/ql/lib/change-notes/released/1.0.0.md

1.0.0

Breaking Changes

• CodeQL package management is now generally available, and all GitHub-produced CodeQL packages have had their version numbers increased to 1.0.0.

New Features

• A Python MaD (Models as Data) row may now contain a dotted path in the type column. Like in Ruby, a path to a class will refer to instances of that class. This means that the summary ["foo", "Member[MyClass].Instance.Member[instance_method]", "Argument[0]", "ReturnValue", "value"] can now be written ["foo.MS_Class", "Member[instance_method]", "Argument[0]", "ReturnValue", "value"]. To refer to an actual class, one may add a ! at the end of the path.

Minor Analysis Improvements

• The request parameter of Flask SessionInterface.open_session method is now modeled as a remote flow source.
• Additional heuristics for a new sensitive data classification for private information (e.g. credit card numbers) have been added to the shared SensitiveDataHeuristics.qll library. This may result in additional results for queries that use sensitive data such as py/clear-text-storage-sensitive-data and py/clear-text-logging-sensitive-data.