diff --git a/actions/ql/lib/CHANGELOG.md b/actions/ql/lib/CHANGELOG.md index 9547b4d46096..a3bde634d393 100644 --- a/actions/ql/lib/CHANGELOG.md +++ b/actions/ql/lib/CHANGELOG.md @@ -1,3 +1,9 @@ +## 0.4.13 + +### Bug Fixes + +* The `actions/artifact-poisoning/critical` and `actions/artifact-poisoning/medium` queries now exclude artifacts downloaded to `$[{ runner.temp }}` in addition to `/tmp`. + ## 0.4.12 ### Minor Analysis Improvements diff --git a/actions/ql/lib/change-notes/2025-07-11-artifact-poisoning.md b/actions/ql/lib/change-notes/2025-07-11-artifact-poisoning.md deleted file mode 100644 index 893a695a22c6..000000000000 --- a/actions/ql/lib/change-notes/2025-07-11-artifact-poisoning.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: fix ---- -* The `actions/artifact-poisoning/critical` and `actions/artifact-poisoning/medium` queries now exclude artifacts downloaded to `$[{ runner.temp }}` in addition to `/tmp`. diff --git a/actions/ql/lib/change-notes/released/0.4.13.md b/actions/ql/lib/change-notes/released/0.4.13.md new file mode 100644 index 000000000000..1c7fa59a3568 --- /dev/null +++ b/actions/ql/lib/change-notes/released/0.4.13.md @@ -0,0 +1,5 @@ +## 0.4.13 + +### Bug Fixes + +* The `actions/artifact-poisoning/critical` and `actions/artifact-poisoning/medium` queries now exclude artifacts downloaded to `$[{ runner.temp }}` in addition to `/tmp`. diff --git a/actions/ql/lib/codeql-pack.release.yml b/actions/ql/lib/codeql-pack.release.yml index 530dc320490d..88ad5ab8f224 100644 --- a/actions/ql/lib/codeql-pack.release.yml +++ b/actions/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.4.12 +lastReleaseVersion: 0.4.13 diff --git a/actions/ql/lib/qlpack.yml b/actions/ql/lib/qlpack.yml index c6a0df46cfc1..f67a9ff9142f 100644 --- a/actions/ql/lib/qlpack.yml +++ b/actions/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/actions-all -version: 0.4.13-dev +version: 0.4.13 library: true warnOnImplicitThis: true dependencies: diff --git a/actions/ql/src/CHANGELOG.md b/actions/ql/src/CHANGELOG.md index b2846cd81fc0..d0db2aff304d 100644 --- a/actions/ql/src/CHANGELOG.md +++ b/actions/ql/src/CHANGELOG.md @@ -1,3 +1,7 @@ +## 0.6.5 + +No user-facing changes. + ## 0.6.4 No user-facing changes. diff --git a/actions/ql/src/change-notes/released/0.6.5.md b/actions/ql/src/change-notes/released/0.6.5.md new file mode 100644 index 000000000000..b2bc387588d8 --- /dev/null +++ b/actions/ql/src/change-notes/released/0.6.5.md @@ -0,0 +1,3 @@ +## 0.6.5 + +No user-facing changes. diff --git a/actions/ql/src/codeql-pack.release.yml b/actions/ql/src/codeql-pack.release.yml index ced8cf94614b..86780fb61480 100644 --- a/actions/ql/src/codeql-pack.release.yml +++ b/actions/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.6.4 +lastReleaseVersion: 0.6.5 diff --git a/actions/ql/src/qlpack.yml b/actions/ql/src/qlpack.yml index 4a4bdde8147c..7addbb8de912 100644 --- a/actions/ql/src/qlpack.yml +++ b/actions/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/actions-queries -version: 0.6.5-dev +version: 0.6.5 library: false warnOnImplicitThis: true groups: [actions, queries] diff --git a/cpp/ql/lib/CHANGELOG.md b/cpp/ql/lib/CHANGELOG.md index 392305a64890..1b9acfd9e539 100644 --- a/cpp/ql/lib/CHANGELOG.md +++ b/cpp/ql/lib/CHANGELOG.md @@ -1,3 +1,20 @@ +## 5.3.0 + +### Deprecated APIs + +* The `UnknownDefaultLocation`, `UnknownExprLocation`, and `UnknownStmtLocation` classes have been deprecated. Use `UnknownLocation` instead. + +### New Features + +* Added a `isFinalValueOfParameter` predicate to `DataFlow::Node` which holds when a dataflow node represents the final value of an output parameter of a function. + +### Minor Analysis Improvements + +* The `FunctionWithWrappers` library (`semmle.code.cpp.security.FunctionWithWrappers`) no longer considers calls through function pointers as wrapper functions. +* The analysis of C/C++ code targeting 64-bit Arm platforms has been improved. This includes support for the Arm-specific builtin functions, support for the `arm_neon.h` header and Neon vector types, and support for the `fp8` scalar type. The `arm_sve.h` header and scalable vectors are only partially supported at this point. +* Added support for `__fp16 _Complex` and `__bf16 _Complex` types +* Added `sql-injection` sink models for the Oracle Call Interface (OCI) database library functions `OCIStmtPrepare` and `OCIStmtPrepare2`. + ## 5.2.0 ### Deprecated APIs diff --git a/cpp/ql/lib/change-notes/2025-06-20-oracle-oci-models.md b/cpp/ql/lib/change-notes/2025-06-20-oracle-oci-models.md deleted file mode 100644 index 09661e619385..000000000000 --- a/cpp/ql/lib/change-notes/2025-06-20-oracle-oci-models.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* Added `sql-injection` sink models for the Oracle Call Interface (OCI) database library functions `OCIStmtPrepare` and `OCIStmtPrepare2`. diff --git a/cpp/ql/lib/change-notes/2025-06-24-arm64.md b/cpp/ql/lib/change-notes/2025-06-24-arm64.md deleted file mode 100644 index 0e88694e1169..000000000000 --- a/cpp/ql/lib/change-notes/2025-06-24-arm64.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* The analysis of C/C++ code targeting 64-bit Arm platforms has been improved. This includes support for the Arm-specific builtin functions, support for the `arm_neon.h` header and Neon vector types, and support for the `fp8` scalar type. The `arm_sve.h` header and scalable vectors are only partially supported at this point. diff --git a/cpp/ql/lib/change-notes/2025-06-24-float16.md b/cpp/ql/lib/change-notes/2025-06-24-float16.md deleted file mode 100644 index 24737d2b4065..000000000000 --- a/cpp/ql/lib/change-notes/2025-06-24-float16.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* Added support for `__fp16 _Complex` and `__bf16 _Complex` types diff --git a/cpp/ql/lib/change-notes/2025-06-27-locations.md b/cpp/ql/lib/change-notes/2025-06-27-locations.md deleted file mode 100644 index 55acf55ee87e..000000000000 --- a/cpp/ql/lib/change-notes/2025-06-27-locations.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: deprecated ---- -* The `UnknownDefaultLocation`, `UnknownExprLocation`, and `UnknownStmtLocation` classes have been deprecated. Use `UnknownLocation` instead. diff --git a/cpp/ql/lib/change-notes/2025-07-10-final.md b/cpp/ql/lib/change-notes/2025-07-10-final.md deleted file mode 100644 index 8e6b3dba2662..000000000000 --- a/cpp/ql/lib/change-notes/2025-07-10-final.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: feature ---- -* Added a `isFinalValueOfParameter` predicate to DataFlow::Node which holds when a dataflow node represents the final value of an output parameter of a function. diff --git a/cpp/ql/lib/change-notes/2025-07-16-FunctionWithWrappers.md b/cpp/ql/lib/change-notes/2025-07-16-FunctionWithWrappers.md deleted file mode 100644 index 80b70a8c80fa..000000000000 --- a/cpp/ql/lib/change-notes/2025-07-16-FunctionWithWrappers.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* The `FunctionWithWrappers` library (`semmle.code.cpp.security.FunctionWithWrappers`) no longer considers calls through function pointers as wrapper functions. \ No newline at end of file diff --git a/cpp/ql/lib/change-notes/released/5.3.0.md b/cpp/ql/lib/change-notes/released/5.3.0.md new file mode 100644 index 000000000000..a7ea151fcf33 --- /dev/null +++ b/cpp/ql/lib/change-notes/released/5.3.0.md @@ -0,0 +1,16 @@ +## 5.3.0 + +### Deprecated APIs + +* The `UnknownDefaultLocation`, `UnknownExprLocation`, and `UnknownStmtLocation` classes have been deprecated. Use `UnknownLocation` instead. + +### New Features + +* Added a `isFinalValueOfParameter` predicate to `DataFlow::Node` which holds when a dataflow node represents the final value of an output parameter of a function. + +### Minor Analysis Improvements + +* The `FunctionWithWrappers` library (`semmle.code.cpp.security.FunctionWithWrappers`) no longer considers calls through function pointers as wrapper functions. +* The analysis of C/C++ code targeting 64-bit Arm platforms has been improved. This includes support for the Arm-specific builtin functions, support for the `arm_neon.h` header and Neon vector types, and support for the `fp8` scalar type. The `arm_sve.h` header and scalable vectors are only partially supported at this point. +* Added support for `__fp16 _Complex` and `__bf16 _Complex` types +* Added `sql-injection` sink models for the Oracle Call Interface (OCI) database library functions `OCIStmtPrepare` and `OCIStmtPrepare2`. diff --git a/cpp/ql/lib/codeql-pack.release.yml b/cpp/ql/lib/codeql-pack.release.yml index 9e57a36a7dce..b0a1c83e5bc9 100644 --- a/cpp/ql/lib/codeql-pack.release.yml +++ b/cpp/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 5.2.0 +lastReleaseVersion: 5.3.0 diff --git a/cpp/ql/lib/qlpack.yml b/cpp/ql/lib/qlpack.yml index e826864ae644..3d9c75672cb8 100644 --- a/cpp/ql/lib/qlpack.yml +++ b/cpp/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/cpp-all -version: 5.2.1-dev +version: 5.3.0 groups: cpp dbscheme: semmlecode.cpp.dbscheme extractor: cpp diff --git a/cpp/ql/src/CHANGELOG.md b/cpp/ql/src/CHANGELOG.md index 82bfa75c55d1..7750db55e66e 100644 --- a/cpp/ql/src/CHANGELOG.md +++ b/cpp/ql/src/CHANGELOG.md @@ -1,3 +1,16 @@ +## 1.4.4 + +### Minor Analysis Improvements + +* Due to changes in the `FunctionWithWrappers` library (`semmle.code.cpp.security.FunctionWithWrappers`) the primary alert location generated by the queries `cpp/path-injection`, `cpp/sql-injection`, `cpp/tainted-format-string`, and `cpp/command-line-injection` may have changed. +* Added flow models for the Win32 API functions `CreateThread`, `CreateRemoteThread`, and `CreateRemoteThreadEx`. +* Improved support for dataflow through function objects and lambda expressions. +* Added flow models for `pthread_create` and `std::thread`. +* The `cpp/incorrect-string-type-conversion` query no longer alerts on incorrect type conversions that occur in unreachable code. +* Added flow models for the GNU C Library. +* Fixed a number of false positives and false negatives in `cpp/global-use-before-init`. Note that this query is not part of any of the default query suites. +* The query `cpp/sql-injection` now can be extended using the `sql-injection` Models as Data (MaD) sink kind. + ## 1.4.3 ### Minor Analysis Improvements diff --git a/cpp/ql/src/change-notes/2025-06-20-sql-injection-models.md b/cpp/ql/src/change-notes/2025-06-20-sql-injection-models.md deleted file mode 100644 index ebb517d0a395..000000000000 --- a/cpp/ql/src/change-notes/2025-06-20-sql-injection-models.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* The query `cpp/sql-injection` now can be extended using the `sql-injection` Models as Data (MaD) sink kind. \ No newline at end of file diff --git a/cpp/ql/src/change-notes/2025-07-01-global-vars-ubi-query-fixes.md.md b/cpp/ql/src/change-notes/2025-07-01-global-vars-ubi-query-fixes.md.md deleted file mode 100644 index b5ab2362bf43..000000000000 --- a/cpp/ql/src/change-notes/2025-07-01-global-vars-ubi-query-fixes.md.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* Fixed a number of false positives and false negatives in `cpp/global-use-before-init`. Note that this query is not part of any of the default query suites. diff --git a/cpp/ql/src/change-notes/2025-07-04-create-thread.md b/cpp/ql/src/change-notes/2025-07-04-create-thread.md deleted file mode 100644 index c7664b8e31ea..000000000000 --- a/cpp/ql/src/change-notes/2025-07-04-create-thread.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* Added flow models for the GNU C Library. diff --git a/cpp/ql/src/change-notes/2025-07-10-pthread-and-std-thread.md b/cpp/ql/src/change-notes/2025-07-10-pthread-and-std-thread.md deleted file mode 100644 index 8e8d0659fa62..000000000000 --- a/cpp/ql/src/change-notes/2025-07-10-pthread-and-std-thread.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* Added flow models for `pthread_create` and `std::thread`. \ No newline at end of file diff --git a/cpp/ql/src/change-notes/2025-07-10-wchar-fp.md b/cpp/ql/src/change-notes/2025-07-10-wchar-fp.md deleted file mode 100644 index db940f182861..000000000000 --- a/cpp/ql/src/change-notes/2025-07-10-wchar-fp.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* The `cpp/incorrect-string-type-conversion` query no longer alerts on incorrect type conversions that occur in unreachable code. diff --git a/cpp/ql/src/change-notes/2025-07-11-function-objects.md b/cpp/ql/src/change-notes/2025-07-11-function-objects.md deleted file mode 100644 index 48bc71f27ca8..000000000000 --- a/cpp/ql/src/change-notes/2025-07-11-function-objects.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* Improved support for dataflow through function objects and lambda expressions. \ No newline at end of file diff --git a/cpp/ql/src/change-notes/2025-07-12-create-thread.md b/cpp/ql/src/change-notes/2025-07-12-create-thread.md deleted file mode 100644 index f95b046fef95..000000000000 --- a/cpp/ql/src/change-notes/2025-07-12-create-thread.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* Added flow models for the Win32 API functions `CreateThread`, `CreateRemoteThread`, and `CreateRemoteThreadEx`. diff --git a/cpp/ql/src/change-notes/2025-07-16-FunctionWithWrappers.md b/cpp/ql/src/change-notes/2025-07-16-FunctionWithWrappers.md deleted file mode 100644 index 0c3db774fa41..000000000000 --- a/cpp/ql/src/change-notes/2025-07-16-FunctionWithWrappers.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* Due to changes in the `FunctionWithWrappers` library (`semmle.code.cpp.security.FunctionWithWrappers`) the primary alert location generated by the queries `cpp/path-injection`, `cpp/sql-injection`, `cpp/tainted-format-string`, and `cpp/command-line-injection` may have changed. \ No newline at end of file diff --git a/cpp/ql/src/change-notes/released/1.4.4.md b/cpp/ql/src/change-notes/released/1.4.4.md new file mode 100644 index 000000000000..87e1b909fbb9 --- /dev/null +++ b/cpp/ql/src/change-notes/released/1.4.4.md @@ -0,0 +1,12 @@ +## 1.4.4 + +### Minor Analysis Improvements + +* Due to changes in the `FunctionWithWrappers` library (`semmle.code.cpp.security.FunctionWithWrappers`) the primary alert location generated by the queries `cpp/path-injection`, `cpp/sql-injection`, `cpp/tainted-format-string`, and `cpp/command-line-injection` may have changed. +* Added flow models for the Win32 API functions `CreateThread`, `CreateRemoteThread`, and `CreateRemoteThreadEx`. +* Improved support for dataflow through function objects and lambda expressions. +* Added flow models for `pthread_create` and `std::thread`. +* The `cpp/incorrect-string-type-conversion` query no longer alerts on incorrect type conversions that occur in unreachable code. +* Added flow models for the GNU C Library. +* Fixed a number of false positives and false negatives in `cpp/global-use-before-init`. Note that this query is not part of any of the default query suites. +* The query `cpp/sql-injection` now can be extended using the `sql-injection` Models as Data (MaD) sink kind. diff --git a/cpp/ql/src/codeql-pack.release.yml b/cpp/ql/src/codeql-pack.release.yml index 08f88b689fb6..1dfca6daa3b1 100644 --- a/cpp/ql/src/codeql-pack.release.yml +++ b/cpp/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.4.3 +lastReleaseVersion: 1.4.4 diff --git a/cpp/ql/src/qlpack.yml b/cpp/ql/src/qlpack.yml index ade2daeb369a..c77f630faad6 100644 --- a/cpp/ql/src/qlpack.yml +++ b/cpp/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/cpp-queries -version: 1.4.4-dev +version: 1.4.4 groups: - cpp - queries diff --git a/csharp/ql/campaigns/Solorigate/lib/CHANGELOG.md b/csharp/ql/campaigns/Solorigate/lib/CHANGELOG.md index 99267b32a407..f46a19790d63 100644 --- a/csharp/ql/campaigns/Solorigate/lib/CHANGELOG.md +++ b/csharp/ql/campaigns/Solorigate/lib/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.7.44 + +No user-facing changes. + ## 1.7.43 No user-facing changes. diff --git a/csharp/ql/campaigns/Solorigate/lib/change-notes/released/1.7.44.md b/csharp/ql/campaigns/Solorigate/lib/change-notes/released/1.7.44.md new file mode 100644 index 000000000000..f25e48c07200 --- /dev/null +++ b/csharp/ql/campaigns/Solorigate/lib/change-notes/released/1.7.44.md @@ -0,0 +1,3 @@ +## 1.7.44 + +No user-facing changes. diff --git a/csharp/ql/campaigns/Solorigate/lib/codeql-pack.release.yml b/csharp/ql/campaigns/Solorigate/lib/codeql-pack.release.yml index 9b37539bf65f..a392bdc2592e 100644 --- a/csharp/ql/campaigns/Solorigate/lib/codeql-pack.release.yml +++ b/csharp/ql/campaigns/Solorigate/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.7.43 +lastReleaseVersion: 1.7.44 diff --git a/csharp/ql/campaigns/Solorigate/lib/qlpack.yml b/csharp/ql/campaigns/Solorigate/lib/qlpack.yml index b9e0c245b855..4da11e525e6c 100644 --- a/csharp/ql/campaigns/Solorigate/lib/qlpack.yml +++ b/csharp/ql/campaigns/Solorigate/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/csharp-solorigate-all -version: 1.7.44-dev +version: 1.7.44 groups: - csharp - solorigate diff --git a/csharp/ql/campaigns/Solorigate/src/CHANGELOG.md b/csharp/ql/campaigns/Solorigate/src/CHANGELOG.md index 99267b32a407..f46a19790d63 100644 --- a/csharp/ql/campaigns/Solorigate/src/CHANGELOG.md +++ b/csharp/ql/campaigns/Solorigate/src/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.7.44 + +No user-facing changes. + ## 1.7.43 No user-facing changes. diff --git a/csharp/ql/campaigns/Solorigate/src/change-notes/released/1.7.44.md b/csharp/ql/campaigns/Solorigate/src/change-notes/released/1.7.44.md new file mode 100644 index 000000000000..f25e48c07200 --- /dev/null +++ b/csharp/ql/campaigns/Solorigate/src/change-notes/released/1.7.44.md @@ -0,0 +1,3 @@ +## 1.7.44 + +No user-facing changes. diff --git a/csharp/ql/campaigns/Solorigate/src/codeql-pack.release.yml b/csharp/ql/campaigns/Solorigate/src/codeql-pack.release.yml index 9b37539bf65f..a392bdc2592e 100644 --- a/csharp/ql/campaigns/Solorigate/src/codeql-pack.release.yml +++ b/csharp/ql/campaigns/Solorigate/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.7.43 +lastReleaseVersion: 1.7.44 diff --git a/csharp/ql/campaigns/Solorigate/src/qlpack.yml b/csharp/ql/campaigns/Solorigate/src/qlpack.yml index 7cf7f04a63ad..b59805aa902f 100644 --- a/csharp/ql/campaigns/Solorigate/src/qlpack.yml +++ b/csharp/ql/campaigns/Solorigate/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/csharp-solorigate-queries -version: 1.7.44-dev +version: 1.7.44 groups: - csharp - solorigate diff --git a/csharp/ql/lib/CHANGELOG.md b/csharp/ql/lib/CHANGELOG.md index 3124c68b6ab1..e8540d22ba84 100644 --- a/csharp/ql/lib/CHANGELOG.md +++ b/csharp/ql/lib/CHANGELOG.md @@ -1,3 +1,9 @@ +## 5.2.0 + +### New Features + +* Added a new predicate, `getASuperType()`, to get a direct supertype of this type. + ## 5.1.9 No user-facing changes. diff --git a/csharp/ql/lib/change-notes/2025-06-10-getasupertype.md b/csharp/ql/lib/change-notes/released/5.2.0.md similarity index 75% rename from csharp/ql/lib/change-notes/2025-06-10-getasupertype.md rename to csharp/ql/lib/change-notes/released/5.2.0.md index 14b086a94093..5408c0d44bde 100644 --- a/csharp/ql/lib/change-notes/2025-06-10-getasupertype.md +++ b/csharp/ql/lib/change-notes/released/5.2.0.md @@ -1,4 +1,5 @@ ---- -category: feature ---- +## 5.2.0 + +### New Features + * Added a new predicate, `getASuperType()`, to get a direct supertype of this type. diff --git a/csharp/ql/lib/codeql-pack.release.yml b/csharp/ql/lib/codeql-pack.release.yml index f9bf26052618..9e57a36a7dce 100644 --- a/csharp/ql/lib/codeql-pack.release.yml +++ b/csharp/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 5.1.9 +lastReleaseVersion: 5.2.0 diff --git a/csharp/ql/lib/qlpack.yml b/csharp/ql/lib/qlpack.yml index faa7e5e71989..d425970a3141 100644 --- a/csharp/ql/lib/qlpack.yml +++ b/csharp/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/csharp-all -version: 5.1.10-dev +version: 5.2.0 groups: csharp dbscheme: semmlecode.csharp.dbscheme extractor: csharp diff --git a/csharp/ql/src/CHANGELOG.md b/csharp/ql/src/CHANGELOG.md index da76eab521c1..888800c5021d 100644 --- a/csharp/ql/src/CHANGELOG.md +++ b/csharp/ql/src/CHANGELOG.md @@ -1,3 +1,14 @@ +## 1.3.1 + +### Minor Analysis Improvements + +* Explicitly added summary models for all overloads of `System.Xml.XmlDictionaryReader.CreateBinaryReader`. Added models for some of the methods and properties in `System.Runtime.Serialization.SerializationInfo` and `System.Runtime.Serialization.SerializationInfoEnumerator`. Updated models for `System.Text.Encoding.GetBytes`, `System.Text.Encoding.GetChars` and the constructor for `System.IO.MemoryStream`. This generally improves the library modelling and thus reduces the number of false negatives. +* Added explicit SQL injection Models as Data models for `Microsoft.Data.SqlClient.SqlCommand` and `Microsoft.Data.SqlClient.SqlDataAdapter`. This reduces false negatives for the query `cs/sql-injection`. + +### Bug Fixes + +* `web.config` and `web.release.config` files are now recognized regardless of case. This means queries `cs/web/debug-binary` and `cs/web/missing-x-frame-options` may produce more results than before. + ## 1.3.0 ### Query Metadata Changes diff --git a/csharp/ql/src/change-notes/2025-06-25-sqlcommand-models.md b/csharp/ql/src/change-notes/2025-06-25-sqlcommand-models.md deleted file mode 100644 index 8d800aa75801..000000000000 --- a/csharp/ql/src/change-notes/2025-06-25-sqlcommand-models.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* Added explicit SQL injection Models as Data models for `Microsoft.Data.SqlClient.SqlCommand` and `Microsoft.Data.SqlClient.SqlDataAdapter`. This reduces false negatives for the query `cs/sql-injection`. diff --git a/csharp/ql/src/change-notes/2025-07-16-web-config.md b/csharp/ql/src/change-notes/2025-07-16-web-config.md deleted file mode 100644 index 238f64386633..000000000000 --- a/csharp/ql/src/change-notes/2025-07-16-web-config.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: fix ---- -* `web.config` and `web.release.config` files are now recognised regardless of case. This means queries `cs/web/debug-binary` and `cs/web/missing-x-frame-options` may produce more results than before. diff --git a/csharp/ql/src/change-notes/2025-07-01-improve-summary-models.md b/csharp/ql/src/change-notes/released/1.3.1.md similarity index 52% rename from csharp/ql/src/change-notes/2025-07-01-improve-summary-models.md rename to csharp/ql/src/change-notes/released/1.3.1.md index f2c8fd82bae2..4576c8116873 100644 --- a/csharp/ql/src/change-notes/2025-07-01-improve-summary-models.md +++ b/csharp/ql/src/change-notes/released/1.3.1.md @@ -1,4 +1,10 @@ ---- -category: minorAnalysis ---- +## 1.3.1 + +### Minor Analysis Improvements + * Explicitly added summary models for all overloads of `System.Xml.XmlDictionaryReader.CreateBinaryReader`. Added models for some of the methods and properties in `System.Runtime.Serialization.SerializationInfo` and `System.Runtime.Serialization.SerializationInfoEnumerator`. Updated models for `System.Text.Encoding.GetBytes`, `System.Text.Encoding.GetChars` and the constructor for `System.IO.MemoryStream`. This generally improves the library modelling and thus reduces the number of false negatives. +* Added explicit SQL injection Models as Data models for `Microsoft.Data.SqlClient.SqlCommand` and `Microsoft.Data.SqlClient.SqlDataAdapter`. This reduces false negatives for the query `cs/sql-injection`. + +### Bug Fixes + +* `web.config` and `web.release.config` files are now recognized regardless of case. This means queries `cs/web/debug-binary` and `cs/web/missing-x-frame-options` may produce more results than before. diff --git a/csharp/ql/src/codeql-pack.release.yml b/csharp/ql/src/codeql-pack.release.yml index ec16350ed6fd..e71b6d081f15 100644 --- a/csharp/ql/src/codeql-pack.release.yml +++ b/csharp/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.3.0 +lastReleaseVersion: 1.3.1 diff --git a/csharp/ql/src/qlpack.yml b/csharp/ql/src/qlpack.yml index b6307e4210a8..c3963f711e69 100644 --- a/csharp/ql/src/qlpack.yml +++ b/csharp/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/csharp-queries -version: 1.3.1-dev +version: 1.3.1 groups: - csharp - queries diff --git a/go/ql/consistency-queries/CHANGELOG.md b/go/ql/consistency-queries/CHANGELOG.md index 0d814dec385b..7b90353d01a8 100644 --- a/go/ql/consistency-queries/CHANGELOG.md +++ b/go/ql/consistency-queries/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.27 + +No user-facing changes. + ## 1.0.26 No user-facing changes. diff --git a/go/ql/consistency-queries/change-notes/released/1.0.27.md b/go/ql/consistency-queries/change-notes/released/1.0.27.md new file mode 100644 index 000000000000..a16f9fe5eebb --- /dev/null +++ b/go/ql/consistency-queries/change-notes/released/1.0.27.md @@ -0,0 +1,3 @@ +## 1.0.27 + +No user-facing changes. diff --git a/go/ql/consistency-queries/codeql-pack.release.yml b/go/ql/consistency-queries/codeql-pack.release.yml index 125d169e44f8..1d6c59bacdbf 100644 --- a/go/ql/consistency-queries/codeql-pack.release.yml +++ b/go/ql/consistency-queries/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.26 +lastReleaseVersion: 1.0.27 diff --git a/go/ql/consistency-queries/qlpack.yml b/go/ql/consistency-queries/qlpack.yml index e964007a13da..fd4932f54ad6 100644 --- a/go/ql/consistency-queries/qlpack.yml +++ b/go/ql/consistency-queries/qlpack.yml @@ -1,5 +1,5 @@ name: codeql-go-consistency-queries -version: 1.0.27-dev +version: 1.0.27 groups: - go - queries diff --git a/go/ql/lib/CHANGELOG.md b/go/ql/lib/CHANGELOG.md index c5fac252869a..3181c613e094 100644 --- a/go/ql/lib/CHANGELOG.md +++ b/go/ql/lib/CHANGELOG.md @@ -1,3 +1,15 @@ +## 4.3.0 + +### Deprecated APIs + +* The class `BuiltinType` is now deprecated. Use the new replacement `BuiltinTypeEntity` instead. +* The class `DeclaredType` is now deprecated. Use the new replacement `DeclaredTypeEntity` instead. + +### Minor Analysis Improvements + +* Added models for the `Head` function and the `Client.Head` method, from the `net/http` package, to the `Http::ClientRequest` class. This means that they will be recognized as sinks for the query `go/request-forgery` and the experimental query `go/ssrf`. +* Previously, `DefinedType.getBaseType` gave the underlying type. It now gives the right hand side of the type declaration, as the documentation indicated that it should. + ## 4.2.8 No user-facing changes. diff --git a/go/ql/lib/change-notes/2025-06-03-fix-definedtype-getbasetype.md b/go/ql/lib/change-notes/2025-06-03-fix-definedtype-getbasetype.md deleted file mode 100644 index b58ebf64f09a..000000000000 --- a/go/ql/lib/change-notes/2025-06-03-fix-definedtype-getbasetype.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* Previously, `DefinedType.getBaseType` gave the underlying type. It now gives the right hand side of the type declaration, as the documentation indicated that it should. diff --git a/go/ql/lib/change-notes/2025-06-05-deprecate-DeclaredType-BuiltinType.md b/go/ql/lib/change-notes/2025-06-05-deprecate-DeclaredType-BuiltinType.md deleted file mode 100644 index 6744743ea27a..000000000000 --- a/go/ql/lib/change-notes/2025-06-05-deprecate-DeclaredType-BuiltinType.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -category: deprecated ---- -* The class `BuiltinType` is now deprecated. Use the new replacement `BuiltinTypeEntity` instead. -* The class `DeclaredType` is now deprecated. Use the new replacement `DeclaredTypeEntity` instead. diff --git a/go/ql/lib/change-notes/2025-07-08-request-forgery-sinks.md b/go/ql/lib/change-notes/2025-07-08-request-forgery-sinks.md deleted file mode 100644 index 6204749d9d62..000000000000 --- a/go/ql/lib/change-notes/2025-07-08-request-forgery-sinks.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* Added models for the `Head` function and the `Client.Head` method, from the `net/http` package, to the `Http::ClientRequest` class. This means that they will be recognized as sinks for the query `go/request-forgery` and the experimental query `go/ssrf`. diff --git a/go/ql/lib/change-notes/released/4.3.0.md b/go/ql/lib/change-notes/released/4.3.0.md new file mode 100644 index 000000000000..2b2369b2d690 --- /dev/null +++ b/go/ql/lib/change-notes/released/4.3.0.md @@ -0,0 +1,11 @@ +## 4.3.0 + +### Deprecated APIs + +* The class `BuiltinType` is now deprecated. Use the new replacement `BuiltinTypeEntity` instead. +* The class `DeclaredType` is now deprecated. Use the new replacement `DeclaredTypeEntity` instead. + +### Minor Analysis Improvements + +* Added models for the `Head` function and the `Client.Head` method, from the `net/http` package, to the `Http::ClientRequest` class. This means that they will be recognized as sinks for the query `go/request-forgery` and the experimental query `go/ssrf`. +* Previously, `DefinedType.getBaseType` gave the underlying type. It now gives the right hand side of the type declaration, as the documentation indicated that it should. diff --git a/go/ql/lib/codeql-pack.release.yml b/go/ql/lib/codeql-pack.release.yml index 9b51fbc5ce54..c46c103a0bd7 100644 --- a/go/ql/lib/codeql-pack.release.yml +++ b/go/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 4.2.8 +lastReleaseVersion: 4.3.0 diff --git a/go/ql/lib/qlpack.yml b/go/ql/lib/qlpack.yml index 44d63e64e3b3..61e78a5eb558 100644 --- a/go/ql/lib/qlpack.yml +++ b/go/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/go-all -version: 4.2.9-dev +version: 4.3.0 groups: go dbscheme: go.dbscheme extractor: go diff --git a/go/ql/src/CHANGELOG.md b/go/ql/src/CHANGELOG.md index 521c13208390..288315dedc67 100644 --- a/go/ql/src/CHANGELOG.md +++ b/go/ql/src/CHANGELOG.md @@ -1,3 +1,9 @@ +## 1.4.1 + +### Minor Analysis Improvements + +* `filepath.IsLocal` is now recognized as a sanitizer against path-traversal and related vulnerabilities. + ## 1.4.0 ### Query Metadata Changes diff --git a/go/ql/src/change-notes/2025-07-15-islocal-sanitizer.md b/go/ql/src/change-notes/2025-07-15-islocal-sanitizer.md deleted file mode 100644 index 35f04aacb582..000000000000 --- a/go/ql/src/change-notes/2025-07-15-islocal-sanitizer.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* `filepath.IsLocal` is now recognised as a sanitizer against path-traversal and related vulnerabilities. diff --git a/go/ql/src/change-notes/released/1.4.1.md b/go/ql/src/change-notes/released/1.4.1.md new file mode 100644 index 000000000000..8d054d1eb688 --- /dev/null +++ b/go/ql/src/change-notes/released/1.4.1.md @@ -0,0 +1,5 @@ +## 1.4.1 + +### Minor Analysis Improvements + +* `filepath.IsLocal` is now recognized as a sanitizer against path-traversal and related vulnerabilities. diff --git a/go/ql/src/codeql-pack.release.yml b/go/ql/src/codeql-pack.release.yml index b8b2e97d5086..43ccf4467bed 100644 --- a/go/ql/src/codeql-pack.release.yml +++ b/go/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.4.0 +lastReleaseVersion: 1.4.1 diff --git a/go/ql/src/qlpack.yml b/go/ql/src/qlpack.yml index ad2712943a3c..67b9ff12d462 100644 --- a/go/ql/src/qlpack.yml +++ b/go/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/go-queries -version: 1.4.1-dev +version: 1.4.1 groups: - go - queries diff --git a/java/ql/lib/CHANGELOG.md b/java/ql/lib/CHANGELOG.md index 320552a8f140..d48e225f5a0d 100644 --- a/java/ql/lib/CHANGELOG.md +++ b/java/ql/lib/CHANGELOG.md @@ -1,3 +1,21 @@ +## 7.4.0 + +### Deprecated APIs + +* The module `semmle.code.java.frameworks.Castor` has been deprecated and will be removed in a future release. +* The module `semmle.code.java.frameworks.JYaml` has been deprecated and will be removed in a future release. +* The classes `UnsafeHessianInputReadObjectMethod` and `BurlapInputReadObjectMethod` in the module `semmle.code.java.frameworks.HessianBurlap` have been deprecated and will be removed in a future release. +* The class `YamlBeansReaderReadMethod` in the module `semmle.code.java.frameworks.YamlBeans` has been deprecated and will be removed in a future release. +* The class `MethodApacheSerializationUtilsDeserialize` in the module `semmle.code.java.frameworks.apache.Lang` has been deprecated and will be removed in a future release. + +### New Features + +* You can now add sinks for the query "Deserialization of user-controlled data" (`java/unsafe-deserialization`) using [data extensions](https://codeql.github.com/docs/codeql-language-guides/customizing-library-models-for-java-and-kotlin/#extensible-predicates-used-to-create-custom-models-in-java-and-kotlin) by extending `sinkModel` and using the kind "unsafe-deserialization". The existing sinks which do not require extra logic to determine if they are unsafe are now defined in this way. + +### Minor Analysis Improvements + +* The qualifiers of a calls to `readObject` on any classes that implement `java.io.ObjectInput` are now recognised as sinks for `java/unsafe-deserialization`. Previously this was only the case for classes which extend `java.io.ObjectInputStream`. + ## 7.3.2 ### Minor Analysis Improvements diff --git a/java/ql/lib/change-notes/2025-07-11-unsafe-deserialization-extra-sink.md b/java/ql/lib/change-notes/2025-07-11-unsafe-deserialization-extra-sink.md deleted file mode 100644 index 26f745a2bb72..000000000000 --- a/java/ql/lib/change-notes/2025-07-11-unsafe-deserialization-extra-sink.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* The qualifiers of a calls to `readObject` on any classes that implement `java.io.ObjectInput` are now recognised as sinks for `java/unsafe-deserialization`. Previously this was only the case for classes which extend `java.io.ObjectInputStream`. diff --git a/java/ql/lib/change-notes/2025-07-16-models-as-data-unsafe-deserialization-sinks.md b/java/ql/lib/change-notes/2025-07-16-models-as-data-unsafe-deserialization-sinks.md deleted file mode 100644 index 914856159620..000000000000 --- a/java/ql/lib/change-notes/2025-07-16-models-as-data-unsafe-deserialization-sinks.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: feature ---- -* You can now add sinks for the query "Deserialization of user-controlled data" (`java/unsafe-deserialization`) using [data extensions](https://codeql.github.com/docs/codeql-language-guides/customizing-library-models-for-java-and-kotlin/#extensible-predicates-used-to-create-custom-models-in-java-and-kotlin) by extending `sinkModel` and using the kind "unsafe-deserialization". The existing sinks which do not require extra logic to determine if they are unsafe are now defined in this way. diff --git a/java/ql/lib/change-notes/2025-07-16-unsafe-deserialization-sinks-deprecation.md b/java/ql/lib/change-notes/2025-07-16-unsafe-deserialization-sinks-deprecation.md deleted file mode 100644 index 7e7e607c18bb..000000000000 --- a/java/ql/lib/change-notes/2025-07-16-unsafe-deserialization-sinks-deprecation.md +++ /dev/null @@ -1,8 +0,0 @@ ---- -category: deprecated ---- -* The module `semmle.code.java.frameworks.Castor` has been deprecated and will be removed in a future release. -* The module `semmle.code.java.frameworks.JYaml` has been deprecated and will be removed in a future release. -* The classes `UnsafeHessianInputReadObjectMethod` and `BurlapInputReadObjectMethod` in the module `semmle.code.java.frameworks.HessianBurlap` have been deprecated and will be removed in a future release. -* The class `YamlBeansReaderReadMethod` in the module `semmle.code.java.frameworks.YamlBeans` has been deprecated and will be removed in a future release. -* The class `MethodApacheSerializationUtilsDeserialize` in the module `semmle.code.java.frameworks.apache.Lang` has been deprecated and will be removed in a future release. diff --git a/java/ql/lib/change-notes/released/7.4.0.md b/java/ql/lib/change-notes/released/7.4.0.md new file mode 100644 index 000000000000..103b19767a04 --- /dev/null +++ b/java/ql/lib/change-notes/released/7.4.0.md @@ -0,0 +1,17 @@ +## 7.4.0 + +### Deprecated APIs + +* The module `semmle.code.java.frameworks.Castor` has been deprecated and will be removed in a future release. +* The module `semmle.code.java.frameworks.JYaml` has been deprecated and will be removed in a future release. +* The classes `UnsafeHessianInputReadObjectMethod` and `BurlapInputReadObjectMethod` in the module `semmle.code.java.frameworks.HessianBurlap` have been deprecated and will be removed in a future release. +* The class `YamlBeansReaderReadMethod` in the module `semmle.code.java.frameworks.YamlBeans` has been deprecated and will be removed in a future release. +* The class `MethodApacheSerializationUtilsDeserialize` in the module `semmle.code.java.frameworks.apache.Lang` has been deprecated and will be removed in a future release. + +### New Features + +* You can now add sinks for the query "Deserialization of user-controlled data" (`java/unsafe-deserialization`) using [data extensions](https://codeql.github.com/docs/codeql-language-guides/customizing-library-models-for-java-and-kotlin/#extensible-predicates-used-to-create-custom-models-in-java-and-kotlin) by extending `sinkModel` and using the kind "unsafe-deserialization". The existing sinks that do not require extra logic to determine if they are unsafe are now defined in this way. + +### Minor Analysis Improvements + +* The qualifiers of a calls to `readObject` on any classes that implement `java.io.ObjectInput` are now recognised as sinks for `java/unsafe-deserialization`. Previously this was only the case for classes which extend `java.io.ObjectInputStream`. diff --git a/java/ql/lib/codeql-pack.release.yml b/java/ql/lib/codeql-pack.release.yml index cf3deb9367da..be55351642c4 100644 --- a/java/ql/lib/codeql-pack.release.yml +++ b/java/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 7.3.2 +lastReleaseVersion: 7.4.0 diff --git a/java/ql/lib/qlpack.yml b/java/ql/lib/qlpack.yml index f29904e14c56..6bbd17fda1d6 100644 --- a/java/ql/lib/qlpack.yml +++ b/java/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/java-all -version: 7.3.3-dev +version: 7.4.0 groups: java dbscheme: config/semmlecode.dbscheme extractor: java diff --git a/java/ql/src/CHANGELOG.md b/java/ql/src/CHANGELOG.md index fe2be06be35d..50afa2ea9bfb 100644 --- a/java/ql/src/CHANGELOG.md +++ b/java/ql/src/CHANGELOG.md @@ -1,3 +1,9 @@ +## 1.6.1 + +### Minor Analysis Improvements + +* Java analysis of guards has been switched to use the new and improved shared guards library. This improves precision of a number of queries, in particular `java/dereferenced-value-may-be-null`, which now has fewer false positives, and `java/useless-null-check` and `java/constant-comparison`, which gain additional true positives. + ## 1.6.0 ### Query Metadata Changes diff --git a/java/ql/src/change-notes/2025-06-17-improved-guards.md b/java/ql/src/change-notes/released/1.6.1.md similarity index 88% rename from java/ql/src/change-notes/2025-06-17-improved-guards.md rename to java/ql/src/change-notes/released/1.6.1.md index b49710460f1f..0add62e535b6 100644 --- a/java/ql/src/change-notes/2025-06-17-improved-guards.md +++ b/java/ql/src/change-notes/released/1.6.1.md @@ -1,4 +1,5 @@ ---- -category: minorAnalysis ---- +## 1.6.1 + +### Minor Analysis Improvements + * Java analysis of guards has been switched to use the new and improved shared guards library. This improves precision of a number of queries, in particular `java/dereferenced-value-may-be-null`, which now has fewer false positives, and `java/useless-null-check` and `java/constant-comparison`, which gain additional true positives. diff --git a/java/ql/src/codeql-pack.release.yml b/java/ql/src/codeql-pack.release.yml index c4f0b07d5336..ef7a789e0cf1 100644 --- a/java/ql/src/codeql-pack.release.yml +++ b/java/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.6.0 +lastReleaseVersion: 1.6.1 diff --git a/java/ql/src/qlpack.yml b/java/ql/src/qlpack.yml index aaeb2c86ac1f..5e5e73ab721a 100644 --- a/java/ql/src/qlpack.yml +++ b/java/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/java-queries -version: 1.6.1-dev +version: 1.6.1 groups: - java - queries diff --git a/javascript/ql/lib/CHANGELOG.md b/javascript/ql/lib/CHANGELOG.md index e2d82cba8359..ab12beb56981 100644 --- a/javascript/ql/lib/CHANGELOG.md +++ b/javascript/ql/lib/CHANGELOG.md @@ -1,3 +1,13 @@ +## 2.6.7 + +### Minor Analysis Improvements + +* Enhanced modeling for the `execa` library, adding support for command execution methods `execaCommand`, `execaCommandSync`, `$`, and `$.sync`, as well as file system operations through `inputFile`, `pipeStdout`, `pipeAll`, and `pipeStderr`. + +### Bug Fixes + +* The JavaScript extractor no longer ignores source files specified in the `tsconfig.json` compiler options `outDir` if doing so would result in excluding all source code. + ## 2.6.6 ### Minor Analysis Improvements diff --git a/javascript/ql/lib/change-notes/2025-07-11-ignore-outdirs-that-would-exclude-everything.md b/javascript/ql/lib/change-notes/2025-07-11-ignore-outdirs-that-would-exclude-everything.md deleted file mode 100644 index aeffaebb477d..000000000000 --- a/javascript/ql/lib/change-notes/2025-07-11-ignore-outdirs-that-would-exclude-everything.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: fix ---- -* The JavaScript extractor no longer ignores source files specified in the `tsconfig.json` compiler options `outDir` if doing so would result in excluding all source code. diff --git a/javascript/ql/lib/change-notes/2025-06-20-execa.md b/javascript/ql/lib/change-notes/released/2.6.7.md similarity index 51% rename from javascript/ql/lib/change-notes/2025-06-20-execa.md rename to javascript/ql/lib/change-notes/released/2.6.7.md index b22afe593f8f..530da25c5dc4 100644 --- a/javascript/ql/lib/change-notes/2025-06-20-execa.md +++ b/javascript/ql/lib/change-notes/released/2.6.7.md @@ -1,4 +1,9 @@ ---- -category: minorAnalysis ---- +## 2.6.7 + +### Minor Analysis Improvements + * Enhanced modeling for the `execa` library, adding support for command execution methods `execaCommand`, `execaCommandSync`, `$`, and `$.sync`, as well as file system operations through `inputFile`, `pipeStdout`, `pipeAll`, and `pipeStderr`. + +### Bug Fixes + +* The JavaScript extractor no longer ignores source files specified in the `tsconfig.json` compiler options `outDir` if doing so would result in excluding all source code. diff --git a/javascript/ql/lib/codeql-pack.release.yml b/javascript/ql/lib/codeql-pack.release.yml index 305ff8cbbf2e..7be0a0fdb3c6 100644 --- a/javascript/ql/lib/codeql-pack.release.yml +++ b/javascript/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 2.6.6 +lastReleaseVersion: 2.6.7 diff --git a/javascript/ql/lib/qlpack.yml b/javascript/ql/lib/qlpack.yml index 482612a821d2..03a691f02f53 100644 --- a/javascript/ql/lib/qlpack.yml +++ b/javascript/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/javascript-all -version: 2.6.7-dev +version: 2.6.7 groups: javascript dbscheme: semmlecode.javascript.dbscheme extractor: javascript diff --git a/javascript/ql/src/CHANGELOG.md b/javascript/ql/src/CHANGELOG.md index 11615030c502..e2d35e74bb93 100644 --- a/javascript/ql/src/CHANGELOG.md +++ b/javascript/ql/src/CHANGELOG.md @@ -1,3 +1,29 @@ +## 2.0.0 + +### Breaking Changes + +* The `Type` and `Symbol` classes have been deprecated and will be empty in newly extracted databases, since the TypeScript extractor no longer populates them. + This is a breaking change for custom queries that explicitly relied on these classes. + Such queries will still compile, but with deprecation warnings, and may have different query results due to type information no longer being available. + We expect most custom queries will not be affected, however. If a custom query has no deprecation warnings, it should not be affected by this change. + Uses of `getType()` should be rewritten to use the new `getTypeBinding()` or `getNameBinding()` APIs instead. + If the new API is not sufficient, please consider opening an issue in `github/codeql` describing your use-case. + +### Major Analysis Improvements + +* The TypeScript extractor no longer relies on the TypeScript compiler for extracting type information. + Instead, the information we need from types is now derived by an algorithm written in QL. + This results in more robust extraction with faster extraction times, in some cases significantly faster. +* Taint is now tracked through the React `use` function. +* Parameters of React server functions, marked with the `"use server"` directive, are now seen as taint sources. + +### Minor Analysis Improvements + +* Removed three queries from the JS qlpack, which have been superseded by newer queries that are part of the Actions qlpack: + * `js/actions/pull-request-target` has been superseded by `actions/untrusted-checkout/{medium,high,critical}` + * `js/actions/actions-artifact-leak` has been superseded by `actions/secrets-in-artifacts` + * `js/actions/command-injection` has been superseded by `actions/command-injection/{medium,critical}` + ## 1.7.0 ### Query Metadata Changes diff --git a/javascript/ql/src/change-notes/2025-06-23-react-use-server.md b/javascript/ql/src/change-notes/2025-06-23-react-use-server.md deleted file mode 100644 index b3d3088b640e..000000000000 --- a/javascript/ql/src/change-notes/2025-06-23-react-use-server.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -category: majorAnalysis ---- -* Taint is now tracked through the React `use` function. -* Parameters of React server functions, marked with the `"use server"` directive, are now seen as taint sources. diff --git a/javascript/ql/src/change-notes/2025-06-23-remove-legacy-actions-queries.md b/javascript/ql/src/change-notes/2025-06-23-remove-legacy-actions-queries.md deleted file mode 100644 index 628ad8b083b4..000000000000 --- a/javascript/ql/src/change-notes/2025-06-23-remove-legacy-actions-queries.md +++ /dev/null @@ -1,7 +0,0 @@ ---- -category: minorAnalysis ---- -* Removed three queries from the JS qlpack, which have been superseded by newer queries that are part of the Actions qlpack: - * `js/actions/pull-request-target` has been superseded by `actions/untrusted-checkout/{medium,high,critical}` - * `js/actions/actions-artifact-leak` has been superseded by `actions/secrets-in-artifacts` - * `js/actions/command-injection` has been superseded by `actions/command-injection/{medium,critical}` diff --git a/javascript/ql/src/change-notes/2025-06-24-no-type-extraction-breaking.md b/javascript/ql/src/change-notes/2025-06-24-no-type-extraction-breaking.md deleted file mode 100644 index 313b06bc366d..000000000000 --- a/javascript/ql/src/change-notes/2025-06-24-no-type-extraction-breaking.md +++ /dev/null @@ -1,9 +0,0 @@ ---- -category: breaking ---- -* The `Type` and `Symbol` classes have been deprecated and will be empty in newly extracted databases, since the TypeScript extractor no longer populates them. - This is a breaking change for custom queries that explicitly relied on these classes. - Such queries will still compile, but with deprecation warnings, and may have different query results due to type information no longer being available. - We expect most custom queries will not be affected, however. If a custom query has no deprecation warnings, it should not be affected by this change. - Uses of `getType()` should be rewritten to use the new `getTypeBinding()` or `getNameBinding()` APIs instead. - If the new API is not sufficient, please consider opening an issue in `github/codeql` describing your use-case. diff --git a/javascript/ql/src/change-notes/2025-06-24-no-type-extraction.md b/javascript/ql/src/change-notes/2025-06-24-no-type-extraction.md deleted file mode 100644 index 516e167636a6..000000000000 --- a/javascript/ql/src/change-notes/2025-06-24-no-type-extraction.md +++ /dev/null @@ -1,6 +0,0 @@ ---- -category: majorAnalysis ---- -* The TypeScript extractor no longer relies on the TypeScript compiler for extracting type information. - Instead, the information we need from types is now derived by an algorithm written in QL. - This results in more robust extraction with faster extraction times, in some cases significantly faster. diff --git a/javascript/ql/src/change-notes/released/2.0.0.md b/javascript/ql/src/change-notes/released/2.0.0.md new file mode 100644 index 000000000000..a0f57f06db1c --- /dev/null +++ b/javascript/ql/src/change-notes/released/2.0.0.md @@ -0,0 +1,25 @@ +## 2.0.0 + +### Breaking Changes + +* The `Type` and `Symbol` classes have been deprecated and will be empty in newly extracted databases, since the TypeScript extractor no longer populates them. + This is a breaking change for custom queries that explicitly relied on these classes. + Such queries will still compile, but with deprecation warnings, and may have different query results due to type information no longer being available. + We expect most custom queries will not be affected, however. If a custom query has no deprecation warnings, it should not be affected by this change. + Uses of `getType()` should be rewritten to use the new `getTypeBinding()` or `getNameBinding()` APIs instead. + If the new API is not sufficient, please consider opening an issue in `github/codeql` describing your use-case. + +### Major Analysis Improvements + +* The TypeScript extractor no longer relies on the TypeScript compiler for extracting type information. + Instead, the information we need from types is now derived by an algorithm written in QL. + This results in more robust extraction with faster extraction times, in some cases significantly faster. +* Taint is now tracked through the React `use` function. +* Parameters of React server functions, marked with the `"use server"` directive, are now seen as taint sources. + +### Minor Analysis Improvements + +* Removed three queries from the JS qlpack, which have been superseded by newer queries that are part of the Actions qlpack: + * `js/actions/pull-request-target` has been superseded by `actions/untrusted-checkout/{medium,high,critical}` + * `js/actions/actions-artifact-leak` has been superseded by `actions/secrets-in-artifacts` + * `js/actions/command-injection` has been superseded by `actions/command-injection/{medium,critical}` diff --git a/javascript/ql/src/codeql-pack.release.yml b/javascript/ql/src/codeql-pack.release.yml index d1184cc67507..0abe6ccede0f 100644 --- a/javascript/ql/src/codeql-pack.release.yml +++ b/javascript/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.7.0 +lastReleaseVersion: 2.0.0 diff --git a/javascript/ql/src/qlpack.yml b/javascript/ql/src/qlpack.yml index 59f83e85aeff..55256002d7c9 100644 --- a/javascript/ql/src/qlpack.yml +++ b/javascript/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/javascript-queries -version: 1.7.1-dev +version: 2.0.0 groups: - javascript - queries diff --git a/misc/suite-helpers/CHANGELOG.md b/misc/suite-helpers/CHANGELOG.md index c7c1d20c6423..c772b9266a77 100644 --- a/misc/suite-helpers/CHANGELOG.md +++ b/misc/suite-helpers/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.27 + +No user-facing changes. + ## 1.0.26 No user-facing changes. diff --git a/misc/suite-helpers/change-notes/released/1.0.27.md b/misc/suite-helpers/change-notes/released/1.0.27.md new file mode 100644 index 000000000000..a16f9fe5eebb --- /dev/null +++ b/misc/suite-helpers/change-notes/released/1.0.27.md @@ -0,0 +1,3 @@ +## 1.0.27 + +No user-facing changes. diff --git a/misc/suite-helpers/codeql-pack.release.yml b/misc/suite-helpers/codeql-pack.release.yml index 125d169e44f8..1d6c59bacdbf 100644 --- a/misc/suite-helpers/codeql-pack.release.yml +++ b/misc/suite-helpers/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.26 +lastReleaseVersion: 1.0.27 diff --git a/misc/suite-helpers/qlpack.yml b/misc/suite-helpers/qlpack.yml index 77f627a19009..a3c75c970cba 100644 --- a/misc/suite-helpers/qlpack.yml +++ b/misc/suite-helpers/qlpack.yml @@ -1,4 +1,4 @@ name: codeql/suite-helpers -version: 1.0.27-dev +version: 1.0.27 groups: shared warnOnImplicitThis: true diff --git a/python/ql/lib/CHANGELOG.md b/python/ql/lib/CHANGELOG.md index 9f915e24edcf..774058d3556d 100644 --- a/python/ql/lib/CHANGELOG.md +++ b/python/ql/lib/CHANGELOG.md @@ -1,3 +1,13 @@ +## 4.0.11 + +### Minor Analysis Improvements + +* Type annotations such as `foo : Bar` are now treated by the call graph as an indication that `foo` may be an instance of `Bar`. + +### Bug Fixes + +- The Python parser is now able to correctly parse expressions such as `match[1]` and `match()` where `match` is not used as a keyword. + ## 4.0.10 No user-facing changes. diff --git a/python/ql/lib/change-notes/2025-06-04-call-graph-type-annotations.md b/python/ql/lib/change-notes/2025-06-04-call-graph-type-annotations.md deleted file mode 100644 index 2aa17e576326..000000000000 --- a/python/ql/lib/change-notes/2025-06-04-call-graph-type-annotations.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* Type annotations such as `foo : Bar` are now treated by the call graph as an indication that `foo` may be an instance of `Bar`. diff --git a/python/ql/lib/change-notes/2025-06-26-fix-match-as-identifier.md b/python/ql/lib/change-notes/2025-06-26-fix-match-as-identifier.md deleted file mode 100644 index 47d18a533d56..000000000000 --- a/python/ql/lib/change-notes/2025-06-26-fix-match-as-identifier.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -category: fix ---- - -- The Python parser is now able to correctly parse expressions such as `match[1]` and `match()` where `match` is not used as a keyword. diff --git a/python/ql/lib/change-notes/released/4.0.11.md b/python/ql/lib/change-notes/released/4.0.11.md new file mode 100644 index 000000000000..3fc572c00f92 --- /dev/null +++ b/python/ql/lib/change-notes/released/4.0.11.md @@ -0,0 +1,9 @@ +## 4.0.11 + +### Minor Analysis Improvements + +* Type annotations such as `foo : Bar` are now treated by the call graph as an indication that `foo` may be an instance of `Bar`. + +### Bug Fixes + +- The Python parser is now able to correctly parse expressions such as `match[1]` and `match()` where `match` is not used as a keyword. diff --git a/python/ql/lib/codeql-pack.release.yml b/python/ql/lib/codeql-pack.release.yml index df9695089cae..8b957dfd68f9 100644 --- a/python/ql/lib/codeql-pack.release.yml +++ b/python/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 4.0.10 +lastReleaseVersion: 4.0.11 diff --git a/python/ql/lib/qlpack.yml b/python/ql/lib/qlpack.yml index dbf5d1cddbdb..b05393b63eb1 100644 --- a/python/ql/lib/qlpack.yml +++ b/python/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/python-all -version: 4.0.11-dev +version: 4.0.11 groups: python dbscheme: semmlecode.python.dbscheme extractor: python diff --git a/python/ql/src/CHANGELOG.md b/python/ql/src/CHANGELOG.md index 4a77f1a1d6d4..b5107c506b5a 100644 --- a/python/ql/src/CHANGELOG.md +++ b/python/ql/src/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.6.1 + +No user-facing changes. + ## 1.6.0 ### Query Metadata Changes diff --git a/python/ql/src/change-notes/released/1.6.1.md b/python/ql/src/change-notes/released/1.6.1.md new file mode 100644 index 000000000000..898f6201ed73 --- /dev/null +++ b/python/ql/src/change-notes/released/1.6.1.md @@ -0,0 +1,3 @@ +## 1.6.1 + +No user-facing changes. diff --git a/python/ql/src/codeql-pack.release.yml b/python/ql/src/codeql-pack.release.yml index c4f0b07d5336..ef7a789e0cf1 100644 --- a/python/ql/src/codeql-pack.release.yml +++ b/python/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.6.0 +lastReleaseVersion: 1.6.1 diff --git a/python/ql/src/qlpack.yml b/python/ql/src/qlpack.yml index ff38476458fb..6c42ff814878 100644 --- a/python/ql/src/qlpack.yml +++ b/python/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/python-queries -version: 1.6.1-dev +version: 1.6.1 groups: - python - queries diff --git a/ruby/ql/lib/CHANGELOG.md b/ruby/ql/lib/CHANGELOG.md index 2a4d6f213757..d5af247f4768 100644 --- a/ruby/ql/lib/CHANGELOG.md +++ b/ruby/ql/lib/CHANGELOG.md @@ -1,3 +1,9 @@ +## 5.0.0 + +### Breaking Changes + +* Most classes and predicates in the AST, SSA, and control-flow-graph libraries are now annotated with `overlay[local]`, in preparation for incremental analysis. This could result in compiler errors for custom queries if they extend these classes. To mitigate such errors, look for ways to restructure custom QL code so it doesn't depend on changing the behavior of standard-library classes. + ## 4.1.9 No user-facing changes. diff --git a/ruby/ql/lib/change-notes/2025-07-09-overlay-local.md b/ruby/ql/lib/change-notes/released/5.0.0.md similarity index 92% rename from ruby/ql/lib/change-notes/2025-07-09-overlay-local.md rename to ruby/ql/lib/change-notes/released/5.0.0.md index f1c7fe83a262..9f54450e95a2 100644 --- a/ruby/ql/lib/change-notes/2025-07-09-overlay-local.md +++ b/ruby/ql/lib/change-notes/released/5.0.0.md @@ -1,4 +1,5 @@ ---- -category: breaking ---- +## 5.0.0 + +### Breaking Changes + * Most classes and predicates in the AST, SSA, and control-flow-graph libraries are now annotated with `overlay[local]`, in preparation for incremental analysis. This could result in compiler errors for custom queries if they extend these classes. To mitigate such errors, look for ways to restructure custom QL code so it doesn't depend on changing the behavior of standard-library classes. diff --git a/ruby/ql/lib/codeql-pack.release.yml b/ruby/ql/lib/codeql-pack.release.yml index 4a8b97062776..c9e54136ca5c 100644 --- a/ruby/ql/lib/codeql-pack.release.yml +++ b/ruby/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 4.1.9 +lastReleaseVersion: 5.0.0 diff --git a/ruby/ql/lib/qlpack.yml b/ruby/ql/lib/qlpack.yml index 2ecf065d4948..374453b8bc2b 100644 --- a/ruby/ql/lib/qlpack.yml +++ b/ruby/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/ruby-all -version: 4.1.10-dev +version: 5.0.0 groups: ruby extractor: ruby dbscheme: ruby.dbscheme diff --git a/ruby/ql/src/CHANGELOG.md b/ruby/ql/src/CHANGELOG.md index ef903e8d144c..133810657ff9 100644 --- a/ruby/ql/src/CHANGELOG.md +++ b/ruby/ql/src/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.4.1 + +No user-facing changes. + ## 1.4.0 ### Query Metadata Changes diff --git a/ruby/ql/src/change-notes/released/1.4.1.md b/ruby/ql/src/change-notes/released/1.4.1.md new file mode 100644 index 000000000000..38987aa49cd0 --- /dev/null +++ b/ruby/ql/src/change-notes/released/1.4.1.md @@ -0,0 +1,3 @@ +## 1.4.1 + +No user-facing changes. diff --git a/ruby/ql/src/codeql-pack.release.yml b/ruby/ql/src/codeql-pack.release.yml index b8b2e97d5086..43ccf4467bed 100644 --- a/ruby/ql/src/codeql-pack.release.yml +++ b/ruby/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.4.0 +lastReleaseVersion: 1.4.1 diff --git a/ruby/ql/src/qlpack.yml b/ruby/ql/src/qlpack.yml index f5e2a6997b6f..56ea51fdc467 100644 --- a/ruby/ql/src/qlpack.yml +++ b/ruby/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/ruby-queries -version: 1.4.1-dev +version: 1.4.1 groups: - ruby - queries diff --git a/rust/ql/lib/CHANGELOG.md b/rust/ql/lib/CHANGELOG.md index aaaa73ae07ef..4a7a2f34655e 100644 --- a/rust/ql/lib/CHANGELOG.md +++ b/rust/ql/lib/CHANGELOG.md @@ -1,3 +1,14 @@ +## 0.1.12 + +### Minor Analysis Improvements + +* Type inference has been extended to support pattern matching. +* Call resolution for calls to associated functions has been improved, so it now disambiguates the targets based on type information at the call sites (either type information about the arguments or about the expected return types). +* Type inference has been improved for `for` loops and range expressions, which improves call resolution and may ultimately lead to more query results. +* Implemented support for data flow through trait functions. For the purpose of data flow, calls to trait functions dispatch to all possible implementations. +* `AssocItem` and `ExternItem` are now proper subclasses of `Item`. +* Added type inference for `for` loops and array expressions. + ## 0.1.11 ### New Features diff --git a/rust/ql/lib/change-notes/2025-06-24-type-inference.md b/rust/ql/lib/change-notes/2025-06-24-type-inference.md deleted file mode 100644 index 5e3fd6fc53d9..000000000000 --- a/rust/ql/lib/change-notes/2025-06-24-type-inference.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* Added type inference for `for` loops and array expressions. diff --git a/rust/ql/lib/change-notes/2025-06-25-item-reorg.md.md b/rust/ql/lib/change-notes/2025-06-25-item-reorg.md.md deleted file mode 100644 index 842dc3b1e318..000000000000 --- a/rust/ql/lib/change-notes/2025-06-25-item-reorg.md.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* `AssocItem` and `ExternItem` are now proper subclasses of `Item`. diff --git a/rust/ql/lib/change-notes/2025-06-26-dataflow-traits.md b/rust/ql/lib/change-notes/2025-06-26-dataflow-traits.md deleted file mode 100644 index c3513958ccd1..000000000000 --- a/rust/ql/lib/change-notes/2025-06-26-dataflow-traits.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* Implemented support for data flow through trait functions. For the purpose of data flow, calls to trait functions dispatch to all possible implementations. diff --git a/rust/ql/lib/change-notes/2025-07-07-type-inference-for-loops.md b/rust/ql/lib/change-notes/2025-07-07-type-inference-for-loops.md deleted file mode 100644 index eb65df0b9c50..000000000000 --- a/rust/ql/lib/change-notes/2025-07-07-type-inference-for-loops.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* Type inference has been improved for `for` loops and range expressions, which improves call resolution and may ultimately lead to more query results. diff --git a/rust/ql/lib/change-notes/2025-07-10-assoc-func-disambiguation.md b/rust/ql/lib/change-notes/2025-07-10-assoc-func-disambiguation.md deleted file mode 100644 index af3587612e8c..000000000000 --- a/rust/ql/lib/change-notes/2025-07-10-assoc-func-disambiguation.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* Call resolution for calls to associated functions has been improved, so it now disambiguates the targets based on type information at the call sites (either type information about the arguments or about the expected return types). \ No newline at end of file diff --git a/rust/ql/lib/change-notes/2025-07-11-type-inference-patterns.md b/rust/ql/lib/change-notes/2025-07-11-type-inference-patterns.md deleted file mode 100644 index d1d586fc71ac..000000000000 --- a/rust/ql/lib/change-notes/2025-07-11-type-inference-patterns.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* Type inference has been extended to support pattern matching. \ No newline at end of file diff --git a/rust/ql/lib/change-notes/released/0.1.12.md b/rust/ql/lib/change-notes/released/0.1.12.md new file mode 100644 index 000000000000..c168c7408922 --- /dev/null +++ b/rust/ql/lib/change-notes/released/0.1.12.md @@ -0,0 +1,10 @@ +## 0.1.12 + +### Minor Analysis Improvements + +* Type inference has been extended to support pattern matching. +* Call resolution for calls to associated functions has been improved, so it now disambiguates the targets based on type information at the call sites (either type information about the arguments or about the expected return types). +* Type inference has been improved for `for` loops and range expressions, which improves call resolution and may ultimately lead to more query results. +* Implemented support for data flow through trait functions. For the purpose of data flow, calls to trait functions dispatch to all possible implementations. +* `AssocItem` and `ExternItem` are now proper subclasses of `Item`. +* Added type inference for `for` loops and array expressions. diff --git a/rust/ql/lib/codeql-pack.release.yml b/rust/ql/lib/codeql-pack.release.yml index 1d1688e8d612..bfd6e9036419 100644 --- a/rust/ql/lib/codeql-pack.release.yml +++ b/rust/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.1.11 +lastReleaseVersion: 0.1.12 diff --git a/rust/ql/lib/qlpack.yml b/rust/ql/lib/qlpack.yml index 9b9398839ba5..59a9e86f27e0 100644 --- a/rust/ql/lib/qlpack.yml +++ b/rust/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/rust-all -version: 0.1.12-dev +version: 0.1.12 groups: rust extractor: rust dbscheme: rust.dbscheme diff --git a/rust/ql/src/CHANGELOG.md b/rust/ql/src/CHANGELOG.md index ad73b7174f9a..7865b480cca3 100644 --- a/rust/ql/src/CHANGELOG.md +++ b/rust/ql/src/CHANGELOG.md @@ -1,3 +1,9 @@ +## 0.1.12 + +### New Queries + +* Added a new query, `rust/access-after-lifetime-ended`, for detecting pointer dereferences after the lifetime of the pointed-to object has ended. + ## 0.1.11 ### New Queries diff --git a/rust/ql/src/change-notes/2025-06-24-access-after-lifetime-ended.md b/rust/ql/src/change-notes/released/0.1.12.md similarity index 84% rename from rust/ql/src/change-notes/2025-06-24-access-after-lifetime-ended.md rename to rust/ql/src/change-notes/released/0.1.12.md index 7b92a3de78b7..4b28a684e7dc 100644 --- a/rust/ql/src/change-notes/2025-06-24-access-after-lifetime-ended.md +++ b/rust/ql/src/change-notes/released/0.1.12.md @@ -1,4 +1,5 @@ ---- -category: newQuery ---- +## 0.1.12 + +### New Queries + * Added a new query, `rust/access-after-lifetime-ended`, for detecting pointer dereferences after the lifetime of the pointed-to object has ended. diff --git a/rust/ql/src/codeql-pack.release.yml b/rust/ql/src/codeql-pack.release.yml index 1d1688e8d612..bfd6e9036419 100644 --- a/rust/ql/src/codeql-pack.release.yml +++ b/rust/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.1.11 +lastReleaseVersion: 0.1.12 diff --git a/rust/ql/src/qlpack.yml b/rust/ql/src/qlpack.yml index 478c7139d5a7..fe091c5f2491 100644 --- a/rust/ql/src/qlpack.yml +++ b/rust/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/rust-queries -version: 0.1.12-dev +version: 0.1.12 groups: - rust - queries diff --git a/shared/concepts/change-notes/2025-07-16-initial-shared-concepts.md b/shared/concepts/CHANGELOG.md similarity index 63% rename from shared/concepts/change-notes/2025-07-16-initial-shared-concepts.md rename to shared/concepts/CHANGELOG.md index bc80c6d6a0d3..f0aa669c6709 100644 --- a/shared/concepts/change-notes/2025-07-16-initial-shared-concepts.md +++ b/shared/concepts/CHANGELOG.md @@ -1,4 +1,5 @@ ---- -category: minorAnalysis ---- +## 0.0.1 + +### Minor Analysis Improvements + * Initial release. Moves the shared concepts library into its own qlpack. diff --git a/shared/concepts/change-notes/released/0.0.1.md b/shared/concepts/change-notes/released/0.0.1.md new file mode 100644 index 000000000000..f0aa669c6709 --- /dev/null +++ b/shared/concepts/change-notes/released/0.0.1.md @@ -0,0 +1,5 @@ +## 0.0.1 + +### Minor Analysis Improvements + +* Initial release. Moves the shared concepts library into its own qlpack. diff --git a/shared/concepts/codeql-pack.release.yml b/shared/concepts/codeql-pack.release.yml new file mode 100644 index 000000000000..c6933410b71c --- /dev/null +++ b/shared/concepts/codeql-pack.release.yml @@ -0,0 +1,2 @@ +--- +lastReleaseVersion: 0.0.1 diff --git a/shared/concepts/qlpack.yml b/shared/concepts/qlpack.yml index 2b8a40fc79a0..bafa51fc16b7 100644 --- a/shared/concepts/qlpack.yml +++ b/shared/concepts/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/concepts -version: 0.0.0-dev +version: 0.0.1 groups: shared library: true dependencies: diff --git a/shared/controlflow/CHANGELOG.md b/shared/controlflow/CHANGELOG.md index 0109a7bd5a7b..a12994285319 100644 --- a/shared/controlflow/CHANGELOG.md +++ b/shared/controlflow/CHANGELOG.md @@ -1,3 +1,7 @@ +## 2.0.11 + +No user-facing changes. + ## 2.0.10 No user-facing changes. diff --git a/shared/controlflow/change-notes/released/2.0.11.md b/shared/controlflow/change-notes/released/2.0.11.md new file mode 100644 index 000000000000..b3d110bcba50 --- /dev/null +++ b/shared/controlflow/change-notes/released/2.0.11.md @@ -0,0 +1,3 @@ +## 2.0.11 + +No user-facing changes. diff --git a/shared/controlflow/codeql-pack.release.yml b/shared/controlflow/codeql-pack.release.yml index 96ea0220a690..3cbe73b4cadc 100644 --- a/shared/controlflow/codeql-pack.release.yml +++ b/shared/controlflow/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 2.0.10 +lastReleaseVersion: 2.0.11 diff --git a/shared/controlflow/qlpack.yml b/shared/controlflow/qlpack.yml index a1020700a1a3..fcb5d94146c0 100644 --- a/shared/controlflow/qlpack.yml +++ b/shared/controlflow/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/controlflow -version: 2.0.11-dev +version: 2.0.11 groups: shared library: true dependencies: diff --git a/shared/dataflow/CHANGELOG.md b/shared/dataflow/CHANGELOG.md index 128d8ccd0d42..ef723958db5a 100644 --- a/shared/dataflow/CHANGELOG.md +++ b/shared/dataflow/CHANGELOG.md @@ -1,3 +1,7 @@ +## 2.0.11 + +No user-facing changes. + ## 2.0.10 No user-facing changes. diff --git a/shared/dataflow/change-notes/released/2.0.11.md b/shared/dataflow/change-notes/released/2.0.11.md new file mode 100644 index 000000000000..b3d110bcba50 --- /dev/null +++ b/shared/dataflow/change-notes/released/2.0.11.md @@ -0,0 +1,3 @@ +## 2.0.11 + +No user-facing changes. diff --git a/shared/dataflow/codeql-pack.release.yml b/shared/dataflow/codeql-pack.release.yml index 96ea0220a690..3cbe73b4cadc 100644 --- a/shared/dataflow/codeql-pack.release.yml +++ b/shared/dataflow/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 2.0.10 +lastReleaseVersion: 2.0.11 diff --git a/shared/dataflow/qlpack.yml b/shared/dataflow/qlpack.yml index 2064efe3b6b5..e7c5f56daca9 100644 --- a/shared/dataflow/qlpack.yml +++ b/shared/dataflow/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/dataflow -version: 2.0.11-dev +version: 2.0.11 groups: shared library: true dependencies: diff --git a/shared/mad/CHANGELOG.md b/shared/mad/CHANGELOG.md index 01f4051da30d..7d61f9eb4c96 100644 --- a/shared/mad/CHANGELOG.md +++ b/shared/mad/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.27 + +No user-facing changes. + ## 1.0.26 No user-facing changes. diff --git a/shared/mad/change-notes/released/1.0.27.md b/shared/mad/change-notes/released/1.0.27.md new file mode 100644 index 000000000000..a16f9fe5eebb --- /dev/null +++ b/shared/mad/change-notes/released/1.0.27.md @@ -0,0 +1,3 @@ +## 1.0.27 + +No user-facing changes. diff --git a/shared/mad/codeql-pack.release.yml b/shared/mad/codeql-pack.release.yml index 125d169e44f8..1d6c59bacdbf 100644 --- a/shared/mad/codeql-pack.release.yml +++ b/shared/mad/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.26 +lastReleaseVersion: 1.0.27 diff --git a/shared/mad/qlpack.yml b/shared/mad/qlpack.yml index 6a57f272569e..e2634ea47f67 100644 --- a/shared/mad/qlpack.yml +++ b/shared/mad/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/mad -version: 1.0.27-dev +version: 1.0.27 groups: shared library: true dependencies: diff --git a/shared/quantum/CHANGELOG.md b/shared/quantum/CHANGELOG.md index 4ffbff1e0c4e..9b269441c000 100644 --- a/shared/quantum/CHANGELOG.md +++ b/shared/quantum/CHANGELOG.md @@ -1,3 +1,7 @@ +## 0.0.5 + +No user-facing changes. + ## 0.0.4 No user-facing changes. diff --git a/shared/quantum/change-notes/released/0.0.5.md b/shared/quantum/change-notes/released/0.0.5.md new file mode 100644 index 000000000000..766ec2723b56 --- /dev/null +++ b/shared/quantum/change-notes/released/0.0.5.md @@ -0,0 +1,3 @@ +## 0.0.5 + +No user-facing changes. diff --git a/shared/quantum/codeql-pack.release.yml b/shared/quantum/codeql-pack.release.yml index ec411a674bcd..bb45a1ab0182 100644 --- a/shared/quantum/codeql-pack.release.yml +++ b/shared/quantum/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.0.4 +lastReleaseVersion: 0.0.5 diff --git a/shared/quantum/qlpack.yml b/shared/quantum/qlpack.yml index f95d9c773b1e..38c9dea58a1d 100644 --- a/shared/quantum/qlpack.yml +++ b/shared/quantum/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/quantum -version: 0.0.5-dev +version: 0.0.5 groups: shared library: true dependencies: diff --git a/shared/rangeanalysis/CHANGELOG.md b/shared/rangeanalysis/CHANGELOG.md index e0f22e5bc3a1..4dbae4dbdad0 100644 --- a/shared/rangeanalysis/CHANGELOG.md +++ b/shared/rangeanalysis/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.27 + +No user-facing changes. + ## 1.0.26 No user-facing changes. diff --git a/shared/rangeanalysis/change-notes/released/1.0.27.md b/shared/rangeanalysis/change-notes/released/1.0.27.md new file mode 100644 index 000000000000..a16f9fe5eebb --- /dev/null +++ b/shared/rangeanalysis/change-notes/released/1.0.27.md @@ -0,0 +1,3 @@ +## 1.0.27 + +No user-facing changes. diff --git a/shared/rangeanalysis/codeql-pack.release.yml b/shared/rangeanalysis/codeql-pack.release.yml index 125d169e44f8..1d6c59bacdbf 100644 --- a/shared/rangeanalysis/codeql-pack.release.yml +++ b/shared/rangeanalysis/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.26 +lastReleaseVersion: 1.0.27 diff --git a/shared/rangeanalysis/qlpack.yml b/shared/rangeanalysis/qlpack.yml index b2b9dabb75ae..50e266b707f9 100644 --- a/shared/rangeanalysis/qlpack.yml +++ b/shared/rangeanalysis/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/rangeanalysis -version: 1.0.27-dev +version: 1.0.27 groups: shared library: true dependencies: diff --git a/shared/regex/CHANGELOG.md b/shared/regex/CHANGELOG.md index aced064cc7a0..1220229c9d4e 100644 --- a/shared/regex/CHANGELOG.md +++ b/shared/regex/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.27 + +No user-facing changes. + ## 1.0.26 No user-facing changes. diff --git a/shared/regex/change-notes/released/1.0.27.md b/shared/regex/change-notes/released/1.0.27.md new file mode 100644 index 000000000000..a16f9fe5eebb --- /dev/null +++ b/shared/regex/change-notes/released/1.0.27.md @@ -0,0 +1,3 @@ +## 1.0.27 + +No user-facing changes. diff --git a/shared/regex/codeql-pack.release.yml b/shared/regex/codeql-pack.release.yml index 125d169e44f8..1d6c59bacdbf 100644 --- a/shared/regex/codeql-pack.release.yml +++ b/shared/regex/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.26 +lastReleaseVersion: 1.0.27 diff --git a/shared/regex/qlpack.yml b/shared/regex/qlpack.yml index 3c478e25f9dc..29d0dc736a93 100644 --- a/shared/regex/qlpack.yml +++ b/shared/regex/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/regex -version: 1.0.27-dev +version: 1.0.27 groups: shared library: true dependencies: diff --git a/shared/ssa/CHANGELOG.md b/shared/ssa/CHANGELOG.md index 2359940bf9ab..742b8645ac88 100644 --- a/shared/ssa/CHANGELOG.md +++ b/shared/ssa/CHANGELOG.md @@ -1,3 +1,7 @@ +## 2.0.3 + +No user-facing changes. + ## 2.0.2 No user-facing changes. diff --git a/shared/ssa/change-notes/released/2.0.3.md b/shared/ssa/change-notes/released/2.0.3.md new file mode 100644 index 000000000000..7bd669821d5f --- /dev/null +++ b/shared/ssa/change-notes/released/2.0.3.md @@ -0,0 +1,3 @@ +## 2.0.3 + +No user-facing changes. diff --git a/shared/ssa/codeql-pack.release.yml b/shared/ssa/codeql-pack.release.yml index 81c7f1dbc13c..fabf1e865966 100644 --- a/shared/ssa/codeql-pack.release.yml +++ b/shared/ssa/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 2.0.2 +lastReleaseVersion: 2.0.3 diff --git a/shared/ssa/qlpack.yml b/shared/ssa/qlpack.yml index 9a9f8759539d..c6081b2778de 100644 --- a/shared/ssa/qlpack.yml +++ b/shared/ssa/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/ssa -version: 2.0.3-dev +version: 2.0.3 groups: shared library: true dependencies: diff --git a/shared/threat-models/CHANGELOG.md b/shared/threat-models/CHANGELOG.md index 0d814dec385b..7b90353d01a8 100644 --- a/shared/threat-models/CHANGELOG.md +++ b/shared/threat-models/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.27 + +No user-facing changes. + ## 1.0.26 No user-facing changes. diff --git a/shared/threat-models/change-notes/released/1.0.27.md b/shared/threat-models/change-notes/released/1.0.27.md new file mode 100644 index 000000000000..a16f9fe5eebb --- /dev/null +++ b/shared/threat-models/change-notes/released/1.0.27.md @@ -0,0 +1,3 @@ +## 1.0.27 + +No user-facing changes. diff --git a/shared/threat-models/codeql-pack.release.yml b/shared/threat-models/codeql-pack.release.yml index 125d169e44f8..1d6c59bacdbf 100644 --- a/shared/threat-models/codeql-pack.release.yml +++ b/shared/threat-models/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.26 +lastReleaseVersion: 1.0.27 diff --git a/shared/threat-models/qlpack.yml b/shared/threat-models/qlpack.yml index b514f75bb947..e3a221390365 100644 --- a/shared/threat-models/qlpack.yml +++ b/shared/threat-models/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/threat-models -version: 1.0.27-dev +version: 1.0.27 library: true groups: shared dataExtensions: diff --git a/shared/tutorial/CHANGELOG.md b/shared/tutorial/CHANGELOG.md index 92ac100d5c8d..e15c2f135c39 100644 --- a/shared/tutorial/CHANGELOG.md +++ b/shared/tutorial/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.27 + +No user-facing changes. + ## 1.0.26 No user-facing changes. diff --git a/shared/tutorial/change-notes/released/1.0.27.md b/shared/tutorial/change-notes/released/1.0.27.md new file mode 100644 index 000000000000..a16f9fe5eebb --- /dev/null +++ b/shared/tutorial/change-notes/released/1.0.27.md @@ -0,0 +1,3 @@ +## 1.0.27 + +No user-facing changes. diff --git a/shared/tutorial/codeql-pack.release.yml b/shared/tutorial/codeql-pack.release.yml index 125d169e44f8..1d6c59bacdbf 100644 --- a/shared/tutorial/codeql-pack.release.yml +++ b/shared/tutorial/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.26 +lastReleaseVersion: 1.0.27 diff --git a/shared/tutorial/qlpack.yml b/shared/tutorial/qlpack.yml index 017db79a8233..c255232db8c8 100644 --- a/shared/tutorial/qlpack.yml +++ b/shared/tutorial/qlpack.yml @@ -1,7 +1,7 @@ name: codeql/tutorial description: Library for the CodeQL detective tutorials, helping new users learn to write CodeQL queries. -version: 1.0.27-dev +version: 1.0.27 groups: shared library: true warnOnImplicitThis: true diff --git a/shared/typeflow/CHANGELOG.md b/shared/typeflow/CHANGELOG.md index 7fa72fbd343a..a7b0ce51066a 100644 --- a/shared/typeflow/CHANGELOG.md +++ b/shared/typeflow/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.27 + +No user-facing changes. + ## 1.0.26 No user-facing changes. diff --git a/shared/typeflow/change-notes/released/1.0.27.md b/shared/typeflow/change-notes/released/1.0.27.md new file mode 100644 index 000000000000..a16f9fe5eebb --- /dev/null +++ b/shared/typeflow/change-notes/released/1.0.27.md @@ -0,0 +1,3 @@ +## 1.0.27 + +No user-facing changes. diff --git a/shared/typeflow/codeql-pack.release.yml b/shared/typeflow/codeql-pack.release.yml index 125d169e44f8..1d6c59bacdbf 100644 --- a/shared/typeflow/codeql-pack.release.yml +++ b/shared/typeflow/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.26 +lastReleaseVersion: 1.0.27 diff --git a/shared/typeflow/qlpack.yml b/shared/typeflow/qlpack.yml index 74b59ee1f745..bf29738975a1 100644 --- a/shared/typeflow/qlpack.yml +++ b/shared/typeflow/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/typeflow -version: 1.0.27-dev +version: 1.0.27 groups: shared library: true dependencies: diff --git a/shared/typeinference/CHANGELOG.md b/shared/typeinference/CHANGELOG.md index 8f58f5145db5..fba2a8703562 100644 --- a/shared/typeinference/CHANGELOG.md +++ b/shared/typeinference/CHANGELOG.md @@ -1,3 +1,7 @@ +## 0.0.8 + +No user-facing changes. + ## 0.0.7 No user-facing changes. diff --git a/shared/typeinference/change-notes/released/0.0.8.md b/shared/typeinference/change-notes/released/0.0.8.md new file mode 100644 index 000000000000..6af2d954c099 --- /dev/null +++ b/shared/typeinference/change-notes/released/0.0.8.md @@ -0,0 +1,3 @@ +## 0.0.8 + +No user-facing changes. diff --git a/shared/typeinference/codeql-pack.release.yml b/shared/typeinference/codeql-pack.release.yml index a2a5484910bc..58fdc6b45deb 100644 --- a/shared/typeinference/codeql-pack.release.yml +++ b/shared/typeinference/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.0.7 +lastReleaseVersion: 0.0.8 diff --git a/shared/typeinference/qlpack.yml b/shared/typeinference/qlpack.yml index 2b9a8d3ee2d3..2d79f4ac9fdc 100644 --- a/shared/typeinference/qlpack.yml +++ b/shared/typeinference/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/typeinference -version: 0.0.8-dev +version: 0.0.8 groups: shared library: true dependencies: diff --git a/shared/typetracking/CHANGELOG.md b/shared/typetracking/CHANGELOG.md index 58e9c8119af7..cab09405aed5 100644 --- a/shared/typetracking/CHANGELOG.md +++ b/shared/typetracking/CHANGELOG.md @@ -1,3 +1,7 @@ +## 2.0.11 + +No user-facing changes. + ## 2.0.10 No user-facing changes. diff --git a/shared/typetracking/change-notes/released/2.0.11.md b/shared/typetracking/change-notes/released/2.0.11.md new file mode 100644 index 000000000000..b3d110bcba50 --- /dev/null +++ b/shared/typetracking/change-notes/released/2.0.11.md @@ -0,0 +1,3 @@ +## 2.0.11 + +No user-facing changes. diff --git a/shared/typetracking/codeql-pack.release.yml b/shared/typetracking/codeql-pack.release.yml index 96ea0220a690..3cbe73b4cadc 100644 --- a/shared/typetracking/codeql-pack.release.yml +++ b/shared/typetracking/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 2.0.10 +lastReleaseVersion: 2.0.11 diff --git a/shared/typetracking/qlpack.yml b/shared/typetracking/qlpack.yml index a0fbd70f8932..c1c1b77a43fb 100644 --- a/shared/typetracking/qlpack.yml +++ b/shared/typetracking/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/typetracking -version: 2.0.11-dev +version: 2.0.11 groups: shared library: true dependencies: diff --git a/shared/typos/CHANGELOG.md b/shared/typos/CHANGELOG.md index 47359494704d..f41328bb4a9f 100644 --- a/shared/typos/CHANGELOG.md +++ b/shared/typos/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.27 + +No user-facing changes. + ## 1.0.26 No user-facing changes. diff --git a/shared/typos/change-notes/released/1.0.27.md b/shared/typos/change-notes/released/1.0.27.md new file mode 100644 index 000000000000..a16f9fe5eebb --- /dev/null +++ b/shared/typos/change-notes/released/1.0.27.md @@ -0,0 +1,3 @@ +## 1.0.27 + +No user-facing changes. diff --git a/shared/typos/codeql-pack.release.yml b/shared/typos/codeql-pack.release.yml index 125d169e44f8..1d6c59bacdbf 100644 --- a/shared/typos/codeql-pack.release.yml +++ b/shared/typos/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.26 +lastReleaseVersion: 1.0.27 diff --git a/shared/typos/qlpack.yml b/shared/typos/qlpack.yml index 2abd19685629..c75852372a10 100644 --- a/shared/typos/qlpack.yml +++ b/shared/typos/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/typos -version: 1.0.27-dev +version: 1.0.27 groups: shared library: true warnOnImplicitThis: true diff --git a/shared/util/CHANGELOG.md b/shared/util/CHANGELOG.md index c8832ace0220..e3b58791ecb3 100644 --- a/shared/util/CHANGELOG.md +++ b/shared/util/CHANGELOG.md @@ -1,3 +1,7 @@ +## 2.0.14 + +No user-facing changes. + ## 2.0.13 No user-facing changes. diff --git a/shared/util/change-notes/released/2.0.14.md b/shared/util/change-notes/released/2.0.14.md new file mode 100644 index 000000000000..13190ad53e34 --- /dev/null +++ b/shared/util/change-notes/released/2.0.14.md @@ -0,0 +1,3 @@ +## 2.0.14 + +No user-facing changes. diff --git a/shared/util/codeql-pack.release.yml b/shared/util/codeql-pack.release.yml index 30d169d6eb84..23aa0864b298 100644 --- a/shared/util/codeql-pack.release.yml +++ b/shared/util/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 2.0.13 +lastReleaseVersion: 2.0.14 diff --git a/shared/util/qlpack.yml b/shared/util/qlpack.yml index 6bebbd01336a..a1c7402743a7 100644 --- a/shared/util/qlpack.yml +++ b/shared/util/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/util -version: 2.0.14-dev +version: 2.0.14 groups: shared library: true dependencies: null diff --git a/shared/xml/CHANGELOG.md b/shared/xml/CHANGELOG.md index a201e0d013f5..431918d41a20 100644 --- a/shared/xml/CHANGELOG.md +++ b/shared/xml/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.27 + +No user-facing changes. + ## 1.0.26 No user-facing changes. diff --git a/shared/xml/change-notes/released/1.0.27.md b/shared/xml/change-notes/released/1.0.27.md new file mode 100644 index 000000000000..a16f9fe5eebb --- /dev/null +++ b/shared/xml/change-notes/released/1.0.27.md @@ -0,0 +1,3 @@ +## 1.0.27 + +No user-facing changes. diff --git a/shared/xml/codeql-pack.release.yml b/shared/xml/codeql-pack.release.yml index 125d169e44f8..1d6c59bacdbf 100644 --- a/shared/xml/codeql-pack.release.yml +++ b/shared/xml/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.26 +lastReleaseVersion: 1.0.27 diff --git a/shared/xml/qlpack.yml b/shared/xml/qlpack.yml index d0e1fc1af1f3..38fb409547cf 100644 --- a/shared/xml/qlpack.yml +++ b/shared/xml/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/xml -version: 1.0.27-dev +version: 1.0.27 groups: shared library: true dependencies: diff --git a/shared/yaml/CHANGELOG.md b/shared/yaml/CHANGELOG.md index 74fcb889c9cc..91e1186bfc3d 100644 --- a/shared/yaml/CHANGELOG.md +++ b/shared/yaml/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.27 + +No user-facing changes. + ## 1.0.26 No user-facing changes. diff --git a/shared/yaml/change-notes/released/1.0.27.md b/shared/yaml/change-notes/released/1.0.27.md new file mode 100644 index 000000000000..a16f9fe5eebb --- /dev/null +++ b/shared/yaml/change-notes/released/1.0.27.md @@ -0,0 +1,3 @@ +## 1.0.27 + +No user-facing changes. diff --git a/shared/yaml/codeql-pack.release.yml b/shared/yaml/codeql-pack.release.yml index 125d169e44f8..1d6c59bacdbf 100644 --- a/shared/yaml/codeql-pack.release.yml +++ b/shared/yaml/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.26 +lastReleaseVersion: 1.0.27 diff --git a/shared/yaml/qlpack.yml b/shared/yaml/qlpack.yml index 258719e31932..3d582f626bd5 100644 --- a/shared/yaml/qlpack.yml +++ b/shared/yaml/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/yaml -version: 1.0.27-dev +version: 1.0.27 groups: shared library: true warnOnImplicitThis: true diff --git a/swift/ql/lib/CHANGELOG.md b/swift/ql/lib/CHANGELOG.md index 627463a2cac6..c859d8670385 100644 --- a/swift/ql/lib/CHANGELOG.md +++ b/swift/ql/lib/CHANGELOG.md @@ -1,3 +1,7 @@ +## 5.0.3 + +No user-facing changes. + ## 5.0.2 No user-facing changes. diff --git a/swift/ql/lib/change-notes/released/5.0.3.md b/swift/ql/lib/change-notes/released/5.0.3.md new file mode 100644 index 000000000000..57074925279e --- /dev/null +++ b/swift/ql/lib/change-notes/released/5.0.3.md @@ -0,0 +1,3 @@ +## 5.0.3 + +No user-facing changes. diff --git a/swift/ql/lib/codeql-pack.release.yml b/swift/ql/lib/codeql-pack.release.yml index 3940dee0f32d..6997554f6ddd 100644 --- a/swift/ql/lib/codeql-pack.release.yml +++ b/swift/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 5.0.2 +lastReleaseVersion: 5.0.3 diff --git a/swift/ql/lib/qlpack.yml b/swift/ql/lib/qlpack.yml index ea03d8d389d1..cac8368f24fe 100644 --- a/swift/ql/lib/qlpack.yml +++ b/swift/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/swift-all -version: 5.0.3-dev +version: 5.0.3 groups: swift extractor: swift dbscheme: swift.dbscheme diff --git a/swift/ql/src/CHANGELOG.md b/swift/ql/src/CHANGELOG.md index 5f5f43bafae4..766d279a217a 100644 --- a/swift/ql/src/CHANGELOG.md +++ b/swift/ql/src/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.2.1 + +No user-facing changes. + ## 1.2.0 ### Query Metadata Changes diff --git a/swift/ql/src/change-notes/released/1.2.1.md b/swift/ql/src/change-notes/released/1.2.1.md new file mode 100644 index 000000000000..67aaa1465fd7 --- /dev/null +++ b/swift/ql/src/change-notes/released/1.2.1.md @@ -0,0 +1,3 @@ +## 1.2.1 + +No user-facing changes. diff --git a/swift/ql/src/codeql-pack.release.yml b/swift/ql/src/codeql-pack.release.yml index 75430e73d1c4..73dd403938c9 100644 --- a/swift/ql/src/codeql-pack.release.yml +++ b/swift/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.2.0 +lastReleaseVersion: 1.2.1 diff --git a/swift/ql/src/qlpack.yml b/swift/ql/src/qlpack.yml index b24d4fbd5a77..52a1a84984c4 100644 --- a/swift/ql/src/qlpack.yml +++ b/swift/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/swift-queries -version: 1.2.1-dev +version: 1.2.1 groups: - swift - queries pFad - Phonifier reborn

Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.

Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.


Alternative Proxies:

Alternative Proxy

pFad Proxy

pFad v3 Proxy

pFad v4 Proxy