diff --git a/actions/ql/lib/CHANGELOG.md b/actions/ql/lib/CHANGELOG.md index e686c4d596f4..d1943239b2d1 100644 --- a/actions/ql/lib/CHANGELOG.md +++ b/actions/ql/lib/CHANGELOG.md @@ -1,3 +1,14 @@ +## 0.6.1 + +### New Features + +* GitHub Actions databases now extract `actions.lock` files. The new `ActionsLock` class + provides access to their YAML abstract syntax trees. + +### Minor Analysis Improvements + +* Checks on author association fields read from the event payload (e.g. `github.event.pull_request.author_association`) now only count as protection for events whose payload actually populates that field. Previously, a condition such as `github.event.pull_request.author_association != 'NONE'` on a workflow triggered by `issues` events was treated as a protective check even though `github.event.pull_request` is not populated for `issues` events, which makes the condition vacuous. This change may result in more alerts for queries using the `ControlCheck` class. + ## 0.6.0 ### Breaking Changes diff --git a/actions/ql/lib/change-notes/2026-09-01-actions-lock-yaml.md b/actions/ql/lib/change-notes/2026-09-01-actions-lock-yaml.md deleted file mode 100644 index ed0a25515da0..000000000000 --- a/actions/ql/lib/change-notes/2026-09-01-actions-lock-yaml.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -category: feature ---- -* GitHub Actions databases now extract `actions.lock` files. The new `ActionsLock` class - provides access to their YAML abstract syntax trees. diff --git a/actions/ql/lib/change-notes/2026-08-19-association-if-check-event-validity.md b/actions/ql/lib/change-notes/released/0.6.1.md similarity index 73% rename from actions/ql/lib/change-notes/2026-08-19-association-if-check-event-validity.md rename to actions/ql/lib/change-notes/released/0.6.1.md index 28ef240b2394..19f7f95948ad 100644 --- a/actions/ql/lib/change-notes/2026-08-19-association-if-check-event-validity.md +++ b/actions/ql/lib/change-notes/released/0.6.1.md @@ -1,4 +1,10 @@ ---- -category: minorAnalysis ---- +## 0.6.1 + +### New Features + +* GitHub Actions databases now extract `actions.lock` files. The new `ActionsLock` class + provides access to their YAML abstract syntax trees. + +### Minor Analysis Improvements + * Checks on author association fields read from the event payload (e.g. `github.event.pull_request.author_association`) now only count as protection for events whose payload actually populates that field. Previously, a condition such as `github.event.pull_request.author_association != 'NONE'` on a workflow triggered by `issues` events was treated as a protective check even though `github.event.pull_request` is not populated for `issues` events, which makes the condition vacuous. This change may result in more alerts for queries using the `ControlCheck` class. diff --git a/actions/ql/lib/codeql-pack.release.yml b/actions/ql/lib/codeql-pack.release.yml index a3f820f884d3..80fb0899f645 100644 --- a/actions/ql/lib/codeql-pack.release.yml +++ b/actions/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.6.0 +lastReleaseVersion: 0.6.1 diff --git a/actions/ql/lib/qlpack.yml b/actions/ql/lib/qlpack.yml index b86df498d3dd..612e631c6f8b 100644 --- a/actions/ql/lib/qlpack.yml +++ b/actions/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/actions-all -version: 0.6.1-dev +version: 0.6.1 library: true warnOnImplicitThis: true dependencies: diff --git a/actions/ql/src/CHANGELOG.md b/actions/ql/src/CHANGELOG.md index 6a4f17d872be..9676c26efaff 100644 --- a/actions/ql/src/CHANGELOG.md +++ b/actions/ql/src/CHANGELOG.md @@ -1,3 +1,7 @@ +## 0.6.35 + +No user-facing changes. + ## 0.6.34 ### Minor Analysis Improvements diff --git a/actions/ql/src/change-notes/released/0.6.35.md b/actions/ql/src/change-notes/released/0.6.35.md new file mode 100644 index 000000000000..aa17e650d404 --- /dev/null +++ b/actions/ql/src/change-notes/released/0.6.35.md @@ -0,0 +1,3 @@ +## 0.6.35 + +No user-facing changes. diff --git a/actions/ql/src/codeql-pack.release.yml b/actions/ql/src/codeql-pack.release.yml index fe5075b50fbd..0a9561ad0b98 100644 --- a/actions/ql/src/codeql-pack.release.yml +++ b/actions/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.6.34 +lastReleaseVersion: 0.6.35 diff --git a/actions/ql/src/qlpack.yml b/actions/ql/src/qlpack.yml index f4323defe6e8..5e4877698e63 100644 --- a/actions/ql/src/qlpack.yml +++ b/actions/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/actions-queries -version: 0.6.35-dev +version: 0.6.35 library: false warnOnImplicitThis: true groups: [actions, queries] diff --git a/cpp/ql/lib/CHANGELOG.md b/cpp/ql/lib/CHANGELOG.md index eb81fb24c603..c42b0d3ec5d5 100644 --- a/cpp/ql/lib/CHANGELOG.md +++ b/cpp/ql/lib/CHANGELOG.md @@ -1,3 +1,14 @@ +## 12.1.0 + +### New Features + +* Sources and sinks defined using models-as-data now support access paths with fields. For example, the path `ReturnValue.Field[S::f]` makes the field `S::f` a flow source when it is returned by a call. + +### Minor Analysis Improvements + +* Added the PostgreSQL libpq (asynchronous) query-execution functions `PQexec`, `PQexecParams`, `PQprepare`, `PQsendQuery`, `PQsendQueryParams`, `PQsendPrepare` as `sql-injection` sinks. +* Initializers of compiler-generated variables are now recognized as compiler-generated. A new predicate `isCompilerGenerated` on `Initializer` has been added to reflect this. + ## 12.0.3 No user-facing changes. diff --git a/cpp/ql/lib/change-notes/2026-08-19-access-paths-for-sources-and-sinks.md b/cpp/ql/lib/change-notes/2026-08-19-access-paths-for-sources-and-sinks.md deleted file mode 100644 index 7cbe82b6f8e9..000000000000 --- a/cpp/ql/lib/change-notes/2026-08-19-access-paths-for-sources-and-sinks.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: feature ---- -* Sources and sinks defined using models-as-data now support access paths with fields. For example, the path `ReturnValue.Field[S::f]` makes the field `S::f` a flow source when it is returned by a call. \ No newline at end of file diff --git a/cpp/ql/lib/change-notes/2026-08-21-compiler-generated.md b/cpp/ql/lib/change-notes/2026-08-21-compiler-generated.md deleted file mode 100644 index eed0d6c8c389..000000000000 --- a/cpp/ql/lib/change-notes/2026-08-21-compiler-generated.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* Initializers of compiler-generated variables are now recognized as compiler-generated. A new predicate `isCompilerGenerated` on `Initializer` has been added to reflect this. \ No newline at end of file diff --git a/cpp/ql/lib/change-notes/2026-08-27-libpq-sql-sinks.md b/cpp/ql/lib/change-notes/2026-08-27-libpq-sql-sinks.md deleted file mode 100644 index 64cba8096173..000000000000 --- a/cpp/ql/lib/change-notes/2026-08-27-libpq-sql-sinks.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* Added the PostgreSQL libpq (asynchronous) query-execution functions `PQexec`, `PQexecParams`, `PQprepare`, `PQsendQuery`, `PQsendQueryParams`, `PQsendPrepare` as `sql-injection` sinks. diff --git a/cpp/ql/lib/change-notes/released/12.1.0.md b/cpp/ql/lib/change-notes/released/12.1.0.md new file mode 100644 index 000000000000..a56939e92a70 --- /dev/null +++ b/cpp/ql/lib/change-notes/released/12.1.0.md @@ -0,0 +1,10 @@ +## 12.1.0 + +### New Features + +* Sources and sinks defined using models-as-data now support access paths with fields. For example, the path `ReturnValue.Field[S::f]` makes the field `S::f` a flow source when it is returned by a call. + +### Minor Analysis Improvements + +* Added the PostgreSQL libpq (asynchronous) query-execution functions `PQexec`, `PQexecParams`, `PQprepare`, `PQsendQuery`, `PQsendQueryParams`, `PQsendPrepare` as `sql-injection` sinks. +* Initializers of compiler-generated variables are now recognized as compiler-generated. A new predicate `isCompilerGenerated` on `Initializer` has been added to reflect this. diff --git a/cpp/ql/lib/codeql-pack.release.yml b/cpp/ql/lib/codeql-pack.release.yml index 9901aa9768db..87f64222020b 100644 --- a/cpp/ql/lib/codeql-pack.release.yml +++ b/cpp/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 12.0.3 +lastReleaseVersion: 12.1.0 diff --git a/cpp/ql/lib/qlpack.yml b/cpp/ql/lib/qlpack.yml index b676012be506..c3e40cb63948 100644 --- a/cpp/ql/lib/qlpack.yml +++ b/cpp/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/cpp-all -version: 12.0.4-dev +version: 12.1.0 groups: cpp dbscheme: semmlecode.cpp.dbscheme extractor: cpp diff --git a/cpp/ql/src/CHANGELOG.md b/cpp/ql/src/CHANGELOG.md index 9a8c1243217c..de14ac42a586 100644 --- a/cpp/ql/src/CHANGELOG.md +++ b/cpp/ql/src/CHANGELOG.md @@ -1,3 +1,9 @@ +## 1.8.3 + +### Minor Analysis Improvements + +* The `cpp/leap-year/unsafe-array-for-days-of-the-year` query ("Unsafe array for days of the year") no longer reports an alert on the `__PRETTY_FUNCTION__` variable (and related variables) when the enclosing function has a signature that is exactly 364 characters. + ## 1.8.2 No user-facing changes. diff --git a/cpp/ql/src/change-notes/2026-08-28-leap-year-unsafe-array-fp.md b/cpp/ql/src/change-notes/released/1.8.3.md similarity index 83% rename from cpp/ql/src/change-notes/2026-08-28-leap-year-unsafe-array-fp.md rename to cpp/ql/src/change-notes/released/1.8.3.md index 4ba04f0de358..46bddcbc40ea 100644 --- a/cpp/ql/src/change-notes/2026-08-28-leap-year-unsafe-array-fp.md +++ b/cpp/ql/src/change-notes/released/1.8.3.md @@ -1,4 +1,5 @@ ---- -category: minorAnalysis ---- -* The `cpp/leap-year/unsafe-array-for-days-of-the-year` query ("Unsafe array for days of the year") no longer reports an alert on the `__PRETTY_FUNCTION__` variable (and related variables) when the enclosing function has a signature that is exactly 364 characters. \ No newline at end of file +## 1.8.3 + +### Minor Analysis Improvements + +* The `cpp/leap-year/unsafe-array-for-days-of-the-year` query ("Unsafe array for days of the year") no longer reports an alert on the `__PRETTY_FUNCTION__` variable (and related variables) when the enclosing function has a signature that is exactly 364 characters. diff --git a/cpp/ql/src/codeql-pack.release.yml b/cpp/ql/src/codeql-pack.release.yml index 559af8348bb0..8071ef421ab4 100644 --- a/cpp/ql/src/codeql-pack.release.yml +++ b/cpp/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.8.2 +lastReleaseVersion: 1.8.3 diff --git a/cpp/ql/src/qlpack.yml b/cpp/ql/src/qlpack.yml index b365b8a398c3..ca971b04aaad 100644 --- a/cpp/ql/src/qlpack.yml +++ b/cpp/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/cpp-queries -version: 1.8.3-dev +version: 1.8.3 groups: - cpp - queries diff --git a/csharp/ql/campaigns/Solorigate/lib/CHANGELOG.md b/csharp/ql/campaigns/Solorigate/lib/CHANGELOG.md index 1897f105e373..8d3c16f6bc95 100644 --- a/csharp/ql/campaigns/Solorigate/lib/CHANGELOG.md +++ b/csharp/ql/campaigns/Solorigate/lib/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.7.74 + +No user-facing changes. + ## 1.7.73 No user-facing changes. diff --git a/csharp/ql/campaigns/Solorigate/lib/change-notes/released/1.7.74.md b/csharp/ql/campaigns/Solorigate/lib/change-notes/released/1.7.74.md new file mode 100644 index 000000000000..3af579633adc --- /dev/null +++ b/csharp/ql/campaigns/Solorigate/lib/change-notes/released/1.7.74.md @@ -0,0 +1,3 @@ +## 1.7.74 + +No user-facing changes. diff --git a/csharp/ql/campaigns/Solorigate/lib/codeql-pack.release.yml b/csharp/ql/campaigns/Solorigate/lib/codeql-pack.release.yml index 95fecc284bee..34061dc1c22a 100644 --- a/csharp/ql/campaigns/Solorigate/lib/codeql-pack.release.yml +++ b/csharp/ql/campaigns/Solorigate/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.7.73 +lastReleaseVersion: 1.7.74 diff --git a/csharp/ql/campaigns/Solorigate/lib/qlpack.yml b/csharp/ql/campaigns/Solorigate/lib/qlpack.yml index d045c1c7224b..990c6ad4dbc8 100644 --- a/csharp/ql/campaigns/Solorigate/lib/qlpack.yml +++ b/csharp/ql/campaigns/Solorigate/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/csharp-solorigate-all -version: 1.7.74-dev +version: 1.7.74 groups: - csharp - solorigate diff --git a/csharp/ql/campaigns/Solorigate/src/CHANGELOG.md b/csharp/ql/campaigns/Solorigate/src/CHANGELOG.md index 1897f105e373..8d3c16f6bc95 100644 --- a/csharp/ql/campaigns/Solorigate/src/CHANGELOG.md +++ b/csharp/ql/campaigns/Solorigate/src/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.7.74 + +No user-facing changes. + ## 1.7.73 No user-facing changes. diff --git a/csharp/ql/campaigns/Solorigate/src/change-notes/released/1.7.74.md b/csharp/ql/campaigns/Solorigate/src/change-notes/released/1.7.74.md new file mode 100644 index 000000000000..3af579633adc --- /dev/null +++ b/csharp/ql/campaigns/Solorigate/src/change-notes/released/1.7.74.md @@ -0,0 +1,3 @@ +## 1.7.74 + +No user-facing changes. diff --git a/csharp/ql/campaigns/Solorigate/src/codeql-pack.release.yml b/csharp/ql/campaigns/Solorigate/src/codeql-pack.release.yml index 95fecc284bee..34061dc1c22a 100644 --- a/csharp/ql/campaigns/Solorigate/src/codeql-pack.release.yml +++ b/csharp/ql/campaigns/Solorigate/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.7.73 +lastReleaseVersion: 1.7.74 diff --git a/csharp/ql/campaigns/Solorigate/src/qlpack.yml b/csharp/ql/campaigns/Solorigate/src/qlpack.yml index 3b5e1b3341e3..199504aa7dd3 100644 --- a/csharp/ql/campaigns/Solorigate/src/qlpack.yml +++ b/csharp/ql/campaigns/Solorigate/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/csharp-solorigate-queries -version: 1.7.74-dev +version: 1.7.74 groups: - csharp - solorigate diff --git a/csharp/ql/lib/CHANGELOG.md b/csharp/ql/lib/CHANGELOG.md index 4df4b3da22fa..78b2f677db3e 100644 --- a/csharp/ql/lib/CHANGELOG.md +++ b/csharp/ql/lib/CHANGELOG.md @@ -1,3 +1,15 @@ +## 7.3.0 + +### New Features + +* Added taint modeling for OData action parameter binding (`Microsoft.AspNet.OData`/`Microsoft.AspNetCore.OData`). Values cast, `as`-converted, or type-tested out of `ODataActionParameters`, and entities tracked by `Delta` (via `GetInstance`, `Patch`, `Put`, `CopyChangedValues`, and `CopyUnchangedValues`), now taint the members of the target type. + +### Minor Analysis Improvements + +* In `build-mode: none`, project and solution restoration is now always attempted using the feeds available. +* C# analysis with build mode `none` now lists unreachable explicitly configured NuGet feeds in both the extraction warning and the tool status page note. This makes it easier to identify feeds that may cause dependencies to be missing from the analysis. +* Improved ASP.NET Core MVC controller and action discovery to more closely match runtime behavior, including application parts, endpoint mappings, inherited actions, and controller and action exclusions. Service-injected action parameters are no longer modeled as remote input. + ## 7.2.0 ### New Features diff --git a/csharp/ql/lib/change-notes/2026-07-31-aspnet-core-controller-discovery.md b/csharp/ql/lib/change-notes/2026-07-31-aspnet-core-controller-discovery.md deleted file mode 100644 index a55f736a1e84..000000000000 --- a/csharp/ql/lib/change-notes/2026-07-31-aspnet-core-controller-discovery.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* Improved ASP.NET Core MVC controller and action discovery to more closely match runtime behavior, including application parts, endpoint mappings, inherited actions, and controller and action exclusions. Service-injected action parameters are no longer modeled as remote input. diff --git a/csharp/ql/lib/change-notes/2026-08-18-tsp-nuget-feed-reachability.md b/csharp/ql/lib/change-notes/2026-08-18-tsp-nuget-feed-reachability.md deleted file mode 100644 index fc391ad6f804..000000000000 --- a/csharp/ql/lib/change-notes/2026-08-18-tsp-nuget-feed-reachability.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* C# analysis with build mode `none` now lists unreachable explicitly configured NuGet feeds in both the extraction warning and the tool status page note. This makes it easier to identify feeds that may cause dependencies to be missing from the analysis. diff --git a/csharp/ql/lib/change-notes/2026-08-19-odata-taint-step.md b/csharp/ql/lib/change-notes/2026-08-19-odata-taint-step.md deleted file mode 100644 index 3d0a6cbeb8ae..000000000000 --- a/csharp/ql/lib/change-notes/2026-08-19-odata-taint-step.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: feature ---- -* Added taint modeling for OData action parameter binding (`Microsoft.AspNet.OData`/`Microsoft.AspNetCore.OData`). Values cast, `as`-converted, or type-tested out of `ODataActionParameters`, and entities tracked by `Delta` (via `GetInstance`, `Patch`, `Put`, `CopyChangedValues`, and `CopyUnchangedValues`), now taint the members of the target type. diff --git a/csharp/ql/lib/change-notes/2026-08-20-dotnet-restore.md b/csharp/ql/lib/change-notes/2026-08-20-dotnet-restore.md deleted file mode 100644 index 9bd47c960e18..000000000000 --- a/csharp/ql/lib/change-notes/2026-08-20-dotnet-restore.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* In `build-mode: none`, project and solution restoration is now always attempted using the feeds available. diff --git a/csharp/ql/lib/change-notes/released/7.3.0.md b/csharp/ql/lib/change-notes/released/7.3.0.md new file mode 100644 index 000000000000..2af204c27e3d --- /dev/null +++ b/csharp/ql/lib/change-notes/released/7.3.0.md @@ -0,0 +1,11 @@ +## 7.3.0 + +### New Features + +* Added taint modeling for OData action parameter binding (`Microsoft.AspNet.OData`/`Microsoft.AspNetCore.OData`). Values cast, `as`-converted, or type-tested out of `ODataActionParameters`, and entities tracked by `Delta` (via `GetInstance`, `Patch`, `Put`, `CopyChangedValues`, and `CopyUnchangedValues`), now taint the members of the target type. + +### Minor Analysis Improvements + +* In `build-mode: none`, project and solution restoration is now always attempted using the feeds available. +* C# analysis with build mode `none` now lists unreachable explicitly configured NuGet feeds in both the extraction warning and the tool status page note. This makes it easier to identify feeds that may cause dependencies to be missing from the analysis. +* Improved ASP.NET Core MVC controller and action discovery to more closely match runtime behavior, including application parts, endpoint mappings, inherited actions, and controller and action exclusions. Service-injected action parameters are no longer modeled as remote input. diff --git a/csharp/ql/lib/codeql-pack.release.yml b/csharp/ql/lib/codeql-pack.release.yml index fda9ea165fc5..2b9b871fffa7 100644 --- a/csharp/ql/lib/codeql-pack.release.yml +++ b/csharp/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 7.2.0 +lastReleaseVersion: 7.3.0 diff --git a/csharp/ql/lib/qlpack.yml b/csharp/ql/lib/qlpack.yml index c011a9a20d0b..15fadfad8a0f 100644 --- a/csharp/ql/lib/qlpack.yml +++ b/csharp/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/csharp-all -version: 7.2.1-dev +version: 7.3.0 groups: csharp dbscheme: semmlecode.csharp.dbscheme extractor: csharp diff --git a/csharp/ql/src/CHANGELOG.md b/csharp/ql/src/CHANGELOG.md index 2e430f88a6ed..cf86d815aa53 100644 --- a/csharp/ql/src/CHANGELOG.md +++ b/csharp/ql/src/CHANGELOG.md @@ -1,3 +1,9 @@ +## 1.9.3 + +### Minor Analysis Improvements + +* The `cs/linq/missed-where` query no longer flags `foreach` loops where the matching branch terminates the method, iterator, or loop instead of continuing with filtered loop work. + ## 1.9.2 ### Minor Analysis Improvements diff --git a/csharp/ql/src/change-notes/2026-09-03-missed-where-terminal-branches.md b/csharp/ql/src/change-notes/released/1.9.3.md similarity index 80% rename from csharp/ql/src/change-notes/2026-09-03-missed-where-terminal-branches.md rename to csharp/ql/src/change-notes/released/1.9.3.md index 33515e4c90cd..675cc4b65718 100644 --- a/csharp/ql/src/change-notes/2026-09-03-missed-where-terminal-branches.md +++ b/csharp/ql/src/change-notes/released/1.9.3.md @@ -1,4 +1,5 @@ ---- -category: minorAnalysis ---- +## 1.9.3 + +### Minor Analysis Improvements + * The `cs/linq/missed-where` query no longer flags `foreach` loops where the matching branch terminates the method, iterator, or loop instead of continuing with filtered loop work. diff --git a/csharp/ql/src/codeql-pack.release.yml b/csharp/ql/src/codeql-pack.release.yml index 842136056d89..46a56c94195c 100644 --- a/csharp/ql/src/codeql-pack.release.yml +++ b/csharp/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.9.2 +lastReleaseVersion: 1.9.3 diff --git a/csharp/ql/src/qlpack.yml b/csharp/ql/src/qlpack.yml index 84048f55bc43..a2f6f0aac243 100644 --- a/csharp/ql/src/qlpack.yml +++ b/csharp/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/csharp-queries -version: 1.9.3-dev +version: 1.9.3 groups: - csharp - queries diff --git a/go/ql/consistency-queries/CHANGELOG.md b/go/ql/consistency-queries/CHANGELOG.md index 7a0754e81b29..3a71bc3b5561 100644 --- a/go/ql/consistency-queries/CHANGELOG.md +++ b/go/ql/consistency-queries/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.57 + +No user-facing changes. + ## 1.0.56 No user-facing changes. diff --git a/go/ql/consistency-queries/change-notes/released/1.0.57.md b/go/ql/consistency-queries/change-notes/released/1.0.57.md new file mode 100644 index 000000000000..18a94c4bca4a --- /dev/null +++ b/go/ql/consistency-queries/change-notes/released/1.0.57.md @@ -0,0 +1,3 @@ +## 1.0.57 + +No user-facing changes. diff --git a/go/ql/consistency-queries/codeql-pack.release.yml b/go/ql/consistency-queries/codeql-pack.release.yml index 9bb27b4fdb71..08ea3909354f 100644 --- a/go/ql/consistency-queries/codeql-pack.release.yml +++ b/go/ql/consistency-queries/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.56 +lastReleaseVersion: 1.0.57 diff --git a/go/ql/consistency-queries/qlpack.yml b/go/ql/consistency-queries/qlpack.yml index bebfec169a09..353e4dd1cdcd 100644 --- a/go/ql/consistency-queries/qlpack.yml +++ b/go/ql/consistency-queries/qlpack.yml @@ -1,5 +1,5 @@ name: codeql-go-consistency-queries -version: 1.0.57-dev +version: 1.0.57 groups: - go - queries diff --git a/go/ql/lib/CHANGELOG.md b/go/ql/lib/CHANGELOG.md index 7ccc01fbd4c4..0c60f6aed295 100644 --- a/go/ql/lib/CHANGELOG.md +++ b/go/ql/lib/CHANGELOG.md @@ -1,3 +1,7 @@ +## 7.3.1 + +No user-facing changes. + ## 7.3.0 ### Major Analysis Improvements diff --git a/go/ql/lib/change-notes/released/7.3.1.md b/go/ql/lib/change-notes/released/7.3.1.md new file mode 100644 index 000000000000..2f2fe5472266 --- /dev/null +++ b/go/ql/lib/change-notes/released/7.3.1.md @@ -0,0 +1,3 @@ +## 7.3.1 + +No user-facing changes. diff --git a/go/ql/lib/codeql-pack.release.yml b/go/ql/lib/codeql-pack.release.yml index 2b9b871fffa7..43cb026b1392 100644 --- a/go/ql/lib/codeql-pack.release.yml +++ b/go/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 7.3.0 +lastReleaseVersion: 7.3.1 diff --git a/go/ql/lib/qlpack.yml b/go/ql/lib/qlpack.yml index 12e9a5f97982..fb42dcb703ae 100644 --- a/go/ql/lib/qlpack.yml +++ b/go/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/go-all -version: 7.3.1-dev +version: 7.3.1 groups: go dbscheme: go.dbscheme extractor: go diff --git a/go/ql/src/CHANGELOG.md b/go/ql/src/CHANGELOG.md index 8b7e75f28b40..96239d742d4a 100644 --- a/go/ql/src/CHANGELOG.md +++ b/go/ql/src/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.6.10 + +No user-facing changes. + ## 1.6.9 No user-facing changes. diff --git a/go/ql/src/change-notes/released/1.6.10.md b/go/ql/src/change-notes/released/1.6.10.md new file mode 100644 index 000000000000..0c6a14492ed0 --- /dev/null +++ b/go/ql/src/change-notes/released/1.6.10.md @@ -0,0 +1,3 @@ +## 1.6.10 + +No user-facing changes. diff --git a/go/ql/src/codeql-pack.release.yml b/go/ql/src/codeql-pack.release.yml index 018779df35eb..995e7a94a564 100644 --- a/go/ql/src/codeql-pack.release.yml +++ b/go/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.6.9 +lastReleaseVersion: 1.6.10 diff --git a/go/ql/src/qlpack.yml b/go/ql/src/qlpack.yml index 64813b045694..bc9f243309af 100644 --- a/go/ql/src/qlpack.yml +++ b/go/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/go-queries -version: 1.6.10-dev +version: 1.6.10 groups: - go - queries diff --git a/java/ql/lib/CHANGELOG.md b/java/ql/lib/CHANGELOG.md index 4d0a6c8c20fd..13a7b5b7961b 100644 --- a/java/ql/lib/CHANGELOG.md +++ b/java/ql/lib/CHANGELOG.md @@ -1,3 +1,14 @@ +## 9.3.0 + +### New Features + +* Factories returned by the Apache Commons Secure XML (`org.apache.commons.xml.secure`) hardening library's `SecureDocumentBuilderFactory`, `SecureSAXParserFactory`, `SecureXMLInputFactory`, `SecureTransformerFactory` and `SecureSchemaFactory` classes are now recognized as safely configured by the XXE query. +* A new extensible class `SafeXmlFactorySource` was added to `semmle.code.java.security.XmlParsers` for modeling sources of pre-hardened JAXP factories. + +### Minor Analysis Improvements + +* Added modeling for the Micronaut framework, including HTTP controllers, WebSocket endpoints, configuration injection, data access, security annotations, and HTTP client sinks. + ## 9.2.4 ### Minor Analysis Improvements diff --git a/java/ql/lib/change-notes/2026-02-27-micronaut.md b/java/ql/lib/change-notes/2026-02-27-micronaut.md deleted file mode 100644 index 36c978c372a7..000000000000 --- a/java/ql/lib/change-notes/2026-02-27-micronaut.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* Added modeling for the Micronaut framework, including HTTP controllers, WebSocket endpoints, configuration injection, data access, security annotations, and HTTP client sinks. diff --git a/java/ql/lib/change-notes/2026-08-02-apache-commons-secure-xml.md b/java/ql/lib/change-notes/released/9.3.0.md similarity index 65% rename from java/ql/lib/change-notes/2026-08-02-apache-commons-secure-xml.md rename to java/ql/lib/change-notes/released/9.3.0.md index 898255b12458..efabbd03ca3c 100644 --- a/java/ql/lib/change-notes/2026-08-02-apache-commons-secure-xml.md +++ b/java/ql/lib/change-notes/released/9.3.0.md @@ -1,5 +1,10 @@ ---- -category: feature ---- +## 9.3.0 + +### New Features + * Factories returned by the Apache Commons Secure XML (`org.apache.commons.xml.secure`) hardening library's `SecureDocumentBuilderFactory`, `SecureSAXParserFactory`, `SecureXMLInputFactory`, `SecureTransformerFactory` and `SecureSchemaFactory` classes are now recognized as safely configured by the XXE query. * A new extensible class `SafeXmlFactorySource` was added to `semmle.code.java.security.XmlParsers` for modeling sources of pre-hardened JAXP factories. + +### Minor Analysis Improvements + +* Added modeling for the Micronaut framework, including HTTP controllers, WebSocket endpoints, configuration injection, data access, security annotations, and HTTP client sinks. diff --git a/java/ql/lib/codeql-pack.release.yml b/java/ql/lib/codeql-pack.release.yml index 19834a650c92..a806354ee450 100644 --- a/java/ql/lib/codeql-pack.release.yml +++ b/java/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 9.2.4 +lastReleaseVersion: 9.3.0 diff --git a/java/ql/lib/qlpack.yml b/java/ql/lib/qlpack.yml index 0beb3b3caa70..d97a58c5c809 100644 --- a/java/ql/lib/qlpack.yml +++ b/java/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/java-all -version: 9.2.5-dev +version: 9.3.0 groups: java dbscheme: config/semmlecode.dbscheme extractor: java diff --git a/java/ql/src/CHANGELOG.md b/java/ql/src/CHANGELOG.md index 2ff710125824..0bb36a39ed24 100644 --- a/java/ql/src/CHANGELOG.md +++ b/java/ql/src/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.11.10 + +No user-facing changes. + ## 1.11.9 No user-facing changes. diff --git a/java/ql/src/change-notes/released/1.11.10.md b/java/ql/src/change-notes/released/1.11.10.md new file mode 100644 index 000000000000..735d0b8ceb75 --- /dev/null +++ b/java/ql/src/change-notes/released/1.11.10.md @@ -0,0 +1,3 @@ +## 1.11.10 + +No user-facing changes. diff --git a/java/ql/src/codeql-pack.release.yml b/java/ql/src/codeql-pack.release.yml index ea2e740768c2..ae9cd379d8c8 100644 --- a/java/ql/src/codeql-pack.release.yml +++ b/java/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.11.9 +lastReleaseVersion: 1.11.10 diff --git a/java/ql/src/qlpack.yml b/java/ql/src/qlpack.yml index 6b312fc5dc44..9c3cffa047ca 100644 --- a/java/ql/src/qlpack.yml +++ b/java/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/java-queries -version: 1.11.10-dev +version: 1.11.10 groups: - java - queries diff --git a/javascript/ql/lib/CHANGELOG.md b/javascript/ql/lib/CHANGELOG.md index f83e33346d66..c4910f0c369c 100644 --- a/javascript/ql/lib/CHANGELOG.md +++ b/javascript/ql/lib/CHANGELOG.md @@ -1,3 +1,7 @@ +## 2.10.1 + +No user-facing changes. + ## 2.10.0 ### New Features diff --git a/javascript/ql/lib/change-notes/released/2.10.1.md b/javascript/ql/lib/change-notes/released/2.10.1.md new file mode 100644 index 000000000000..e1113832b1c6 --- /dev/null +++ b/javascript/ql/lib/change-notes/released/2.10.1.md @@ -0,0 +1,3 @@ +## 2.10.1 + +No user-facing changes. diff --git a/javascript/ql/lib/codeql-pack.release.yml b/javascript/ql/lib/codeql-pack.release.yml index ffff75a8d4c2..1366256715eb 100644 --- a/javascript/ql/lib/codeql-pack.release.yml +++ b/javascript/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 2.10.0 +lastReleaseVersion: 2.10.1 diff --git a/javascript/ql/lib/qlpack.yml b/javascript/ql/lib/qlpack.yml index 0a74e2c419ac..97f274ff58ae 100644 --- a/javascript/ql/lib/qlpack.yml +++ b/javascript/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/javascript-all -version: 2.10.1-dev +version: 2.10.1 groups: javascript dbscheme: semmlecode.javascript.dbscheme extractor: javascript diff --git a/javascript/ql/src/CHANGELOG.md b/javascript/ql/src/CHANGELOG.md index 9a958424d795..541393cea333 100644 --- a/javascript/ql/src/CHANGELOG.md +++ b/javascript/ql/src/CHANGELOG.md @@ -1,3 +1,9 @@ +## 2.4.5 + +### Minor Analysis Improvements + +* HTML files are now included in file-coverage stats, and will start showing up on the status page for CodeQL under "Scanned Files". + ## 2.4.4 ### Minor Analysis Improvements diff --git a/javascript/ql/src/change-notes/2026-09-02-html-coverage.md b/javascript/ql/src/change-notes/released/2.4.5.md similarity index 75% rename from javascript/ql/src/change-notes/2026-09-02-html-coverage.md rename to javascript/ql/src/change-notes/released/2.4.5.md index 793fd10845e1..1aa2fab3f616 100644 --- a/javascript/ql/src/change-notes/2026-09-02-html-coverage.md +++ b/javascript/ql/src/change-notes/released/2.4.5.md @@ -1,4 +1,5 @@ ---- -category: minorAnalysis ---- +## 2.4.5 + +### Minor Analysis Improvements + * HTML files are now included in file-coverage stats, and will start showing up on the status page for CodeQL under "Scanned Files". diff --git a/javascript/ql/src/codeql-pack.release.yml b/javascript/ql/src/codeql-pack.release.yml index 2facd66a43f4..4d5f66ce2c87 100644 --- a/javascript/ql/src/codeql-pack.release.yml +++ b/javascript/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 2.4.4 +lastReleaseVersion: 2.4.5 diff --git a/javascript/ql/src/qlpack.yml b/javascript/ql/src/qlpack.yml index bdefbdee61f7..83e2caff741c 100644 --- a/javascript/ql/src/qlpack.yml +++ b/javascript/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/javascript-queries -version: 2.4.5-dev +version: 2.4.5 groups: - javascript - queries diff --git a/misc/suite-helpers/CHANGELOG.md b/misc/suite-helpers/CHANGELOG.md index 097e573de503..4289e0e8c4f7 100644 --- a/misc/suite-helpers/CHANGELOG.md +++ b/misc/suite-helpers/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.57 + +No user-facing changes. + ## 1.0.56 No user-facing changes. diff --git a/misc/suite-helpers/change-notes/released/1.0.57.md b/misc/suite-helpers/change-notes/released/1.0.57.md new file mode 100644 index 000000000000..18a94c4bca4a --- /dev/null +++ b/misc/suite-helpers/change-notes/released/1.0.57.md @@ -0,0 +1,3 @@ +## 1.0.57 + +No user-facing changes. diff --git a/misc/suite-helpers/codeql-pack.release.yml b/misc/suite-helpers/codeql-pack.release.yml index 9bb27b4fdb71..08ea3909354f 100644 --- a/misc/suite-helpers/codeql-pack.release.yml +++ b/misc/suite-helpers/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.56 +lastReleaseVersion: 1.0.57 diff --git a/misc/suite-helpers/qlpack.yml b/misc/suite-helpers/qlpack.yml index be95f2ac4322..ba51f45be36f 100644 --- a/misc/suite-helpers/qlpack.yml +++ b/misc/suite-helpers/qlpack.yml @@ -1,4 +1,4 @@ name: codeql/suite-helpers -version: 1.0.57-dev +version: 1.0.57 groups: shared warnOnImplicitThis: true diff --git a/python/ql/lib/CHANGELOG.md b/python/ql/lib/CHANGELOG.md index 51d7011de576..ec64251b69d5 100644 --- a/python/ql/lib/CHANGELOG.md +++ b/python/ql/lib/CHANGELOG.md @@ -1,3 +1,10 @@ +## 7.2.5 + +### Bug Fixes + +* Fixed a bug where a Python file could be silently dropped from the analysis (with a spurious "A parse error occurred" diagnostic) when it contained a string literal, comment, or identifier with a character such as the U+FE0F emoji variation selector, a U+200D zero width joiner, or a combining accent. +* Fixed the extraction of PEP 758 `except A, B:` clauses by the default (non-tree-sitter) Python parser. Previously the second exception type was extracted as a Python 2 style alias binding, so it was recorded as a `Store` rather than a use. This caused false positives from queries that reason about whether a name is used, such as `py/unused-import`. When extracting Python 2 (`--lang=2`), `except A, e:` continues to bind `e` as an alias, since that is what the syntax means in that version. + ## 7.2.4 ### Minor Analysis Improvements diff --git a/python/ql/lib/change-notes/2026-08-27-tsg-parser-unicode-escapes.md b/python/ql/lib/change-notes/2026-08-27-tsg-parser-unicode-escapes.md deleted file mode 100644 index 56b70081d529..000000000000 --- a/python/ql/lib/change-notes/2026-08-27-tsg-parser-unicode-escapes.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: fix ---- -* Fixed a bug where a Python file could be silently dropped from the analysis (with a spurious "A parse error occurred" diagnostic) when it contained a string literal, comment, or identifier with a character such as the U+FE0F emoji variation selector, a U+200D zero width joiner, or a combining accent. diff --git a/python/ql/lib/change-notes/2026-08-19-legacy-parser-relaxed-except.md b/python/ql/lib/change-notes/released/7.2.5.md similarity index 60% rename from python/ql/lib/change-notes/2026-08-19-legacy-parser-relaxed-except.md rename to python/ql/lib/change-notes/released/7.2.5.md index 5e7681b2436f..c3e78fbb5fcc 100644 --- a/python/ql/lib/change-notes/2026-08-19-legacy-parser-relaxed-except.md +++ b/python/ql/lib/change-notes/released/7.2.5.md @@ -1,4 +1,6 @@ ---- -category: fix ---- +## 7.2.5 + +### Bug Fixes + +* Fixed a bug where a Python file could be silently dropped from the analysis (with a spurious "A parse error occurred" diagnostic) when it contained a string literal, comment, or identifier with a character such as the U+FE0F emoji variation selector, a U+200D zero width joiner, or a combining accent. * Fixed the extraction of PEP 758 `except A, B:` clauses by the default (non-tree-sitter) Python parser. Previously the second exception type was extracted as a Python 2 style alias binding, so it was recorded as a `Store` rather than a use. This caused false positives from queries that reason about whether a name is used, such as `py/unused-import`. When extracting Python 2 (`--lang=2`), `except A, e:` continues to bind `e` as an alias, since that is what the syntax means in that version. diff --git a/python/ql/lib/codeql-pack.release.yml b/python/ql/lib/codeql-pack.release.yml index 330556d11a76..c6aa7ff5b753 100644 --- a/python/ql/lib/codeql-pack.release.yml +++ b/python/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 7.2.4 +lastReleaseVersion: 7.2.5 diff --git a/python/ql/lib/qlpack.yml b/python/ql/lib/qlpack.yml index 46c4b9e2e00e..715a4f61bfc8 100644 --- a/python/ql/lib/qlpack.yml +++ b/python/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/python-all -version: 7.2.5-dev +version: 7.2.5 groups: python dbscheme: semmlecode.python.dbscheme extractor: python diff --git a/python/ql/src/CHANGELOG.md b/python/ql/src/CHANGELOG.md index da09ff7f9d50..874d180f72cc 100644 --- a/python/ql/src/CHANGELOG.md +++ b/python/ql/src/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.8.10 + +No user-facing changes. + ## 1.8.9 No user-facing changes. diff --git a/python/ql/src/change-notes/released/1.8.10.md b/python/ql/src/change-notes/released/1.8.10.md new file mode 100644 index 000000000000..7a74b9d2cc34 --- /dev/null +++ b/python/ql/src/change-notes/released/1.8.10.md @@ -0,0 +1,3 @@ +## 1.8.10 + +No user-facing changes. diff --git a/python/ql/src/codeql-pack.release.yml b/python/ql/src/codeql-pack.release.yml index 2fed7501f873..b615673a3ce0 100644 --- a/python/ql/src/codeql-pack.release.yml +++ b/python/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.8.9 +lastReleaseVersion: 1.8.10 diff --git a/python/ql/src/qlpack.yml b/python/ql/src/qlpack.yml index 9778815a4631..d48bc1e8e7cc 100644 --- a/python/ql/src/qlpack.yml +++ b/python/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/python-queries -version: 1.8.10-dev +version: 1.8.10 groups: - python - queries diff --git a/ruby/ql/lib/CHANGELOG.md b/ruby/ql/lib/CHANGELOG.md index f9916662c642..056f71cef95e 100644 --- a/ruby/ql/lib/CHANGELOG.md +++ b/ruby/ql/lib/CHANGELOG.md @@ -1,3 +1,19 @@ +## 7.0.0 + +### Breaking Changes + +* The Ruby control flow graph implementation has been completely replaced. This + affects a number of queries slightly. The CFG now includes additional nodes + to more accurately represent certain constructs. This also means that any + existing code that implicitly relies on very specific details about the CFG + may need to be updated. The CFG no longer uses splitting, which means that + AST nodes now have a unique CFG node representation. In particular, + `ControlFlowNode.getAstNode` has changed its meaning. The AST-to-CFG mapping + remains one-to-many, but now for a different reason. It used to be because of + splitting, but now it's because of additional "helper" CFG nodes. To get the + (now canonical) CFG node for a given AST node, use + `Stmt.getControlFlowNode()` instead. + ## 6.0.4 ### Minor Analysis Improvements diff --git a/ruby/ql/lib/change-notes/2026-08-24-cfg-swap.md b/ruby/ql/lib/change-notes/released/7.0.0.md similarity index 96% rename from ruby/ql/lib/change-notes/2026-08-24-cfg-swap.md rename to ruby/ql/lib/change-notes/released/7.0.0.md index a428124f0a77..48882586df42 100644 --- a/ruby/ql/lib/change-notes/2026-08-24-cfg-swap.md +++ b/ruby/ql/lib/change-notes/released/7.0.0.md @@ -1,6 +1,7 @@ ---- -category: breaking ---- +## 7.0.0 + +### Breaking Changes + * The Ruby control flow graph implementation has been completely replaced. This affects a number of queries slightly. The CFG now includes additional nodes to more accurately represent certain constructs. This also means that any diff --git a/ruby/ql/lib/codeql-pack.release.yml b/ruby/ql/lib/codeql-pack.release.yml index ae1f15cd344a..e0db21c78694 100644 --- a/ruby/ql/lib/codeql-pack.release.yml +++ b/ruby/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 6.0.4 +lastReleaseVersion: 7.0.0 diff --git a/ruby/ql/lib/qlpack.yml b/ruby/ql/lib/qlpack.yml index 8071a411828b..2c52daba2b15 100644 --- a/ruby/ql/lib/qlpack.yml +++ b/ruby/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/ruby-all -version: 6.0.5-dev +version: 7.0.0 groups: ruby extractor: ruby dbscheme: ruby.dbscheme diff --git a/ruby/ql/src/CHANGELOG.md b/ruby/ql/src/CHANGELOG.md index 312e56c3716e..c8a0fd7cbbc3 100644 --- a/ruby/ql/src/CHANGELOG.md +++ b/ruby/ql/src/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.6.10 + +No user-facing changes. + ## 1.6.9 No user-facing changes. diff --git a/ruby/ql/src/change-notes/released/1.6.10.md b/ruby/ql/src/change-notes/released/1.6.10.md new file mode 100644 index 000000000000..0c6a14492ed0 --- /dev/null +++ b/ruby/ql/src/change-notes/released/1.6.10.md @@ -0,0 +1,3 @@ +## 1.6.10 + +No user-facing changes. diff --git a/ruby/ql/src/codeql-pack.release.yml b/ruby/ql/src/codeql-pack.release.yml index 018779df35eb..995e7a94a564 100644 --- a/ruby/ql/src/codeql-pack.release.yml +++ b/ruby/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.6.9 +lastReleaseVersion: 1.6.10 diff --git a/ruby/ql/src/qlpack.yml b/ruby/ql/src/qlpack.yml index 872cf18c8e03..a215aec72b83 100644 --- a/ruby/ql/src/qlpack.yml +++ b/ruby/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/ruby-queries -version: 1.6.10-dev +version: 1.6.10 groups: - ruby - queries diff --git a/rust/ql/lib/CHANGELOG.md b/rust/ql/lib/CHANGELOG.md index 4ec33279ba1b..26e0631f2ced 100644 --- a/rust/ql/lib/CHANGELOG.md +++ b/rust/ql/lib/CHANGELOG.md @@ -1,3 +1,11 @@ +## 0.2.21 + +### Minor Analysis Improvements + +* Canonical paths for Rust trait items now use the format `::item` instead of + `crate::Trait::item`. Custom data extension models that reference trait items must be + updated to use the new format. + ## 0.2.20 ### Major Analysis Improvements diff --git a/rust/ql/lib/change-notes/2026-08-28-angle-bracket-trait-canonical-paths.md b/rust/ql/lib/change-notes/released/0.2.21.md similarity index 82% rename from rust/ql/lib/change-notes/2026-08-28-angle-bracket-trait-canonical-paths.md rename to rust/ql/lib/change-notes/released/0.2.21.md index 280f78d5555b..bf7b2c0c0178 100644 --- a/rust/ql/lib/change-notes/2026-08-28-angle-bracket-trait-canonical-paths.md +++ b/rust/ql/lib/change-notes/released/0.2.21.md @@ -1,6 +1,7 @@ ---- -category: minorAnalysis ---- +## 0.2.21 + +### Minor Analysis Improvements + * Canonical paths for Rust trait items now use the format `::item` instead of `crate::Trait::item`. Custom data extension models that reference trait items must be updated to use the new format. diff --git a/rust/ql/lib/codeql-pack.release.yml b/rust/ql/lib/codeql-pack.release.yml index 7c91e0e29ffa..8d4f094a4664 100644 --- a/rust/ql/lib/codeql-pack.release.yml +++ b/rust/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.2.20 +lastReleaseVersion: 0.2.21 diff --git a/rust/ql/lib/qlpack.yml b/rust/ql/lib/qlpack.yml index 59a2c38c8a2b..dc1059ff64c5 100644 --- a/rust/ql/lib/qlpack.yml +++ b/rust/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/rust-all -version: 0.2.21-dev +version: 0.2.21 groups: rust extractor: rust dbscheme: rust.dbscheme diff --git a/rust/ql/src/CHANGELOG.md b/rust/ql/src/CHANGELOG.md index 5a8f3ea1b9a5..91b75ac72346 100644 --- a/rust/ql/src/CHANGELOG.md +++ b/rust/ql/src/CHANGELOG.md @@ -1,3 +1,15 @@ +## 0.1.42 + +### New Queries + +* Added a new query, `rust/command-line-injection`, to detect uncontrolled command lines. + +### Minor Analysis Improvements + +* The `rust/hard-coded-cryptographic-value` query has been adjusted to produce +fewer results in certain situations where many results were being produced with very similar source locations. +* The `rust/unused-variable` query no longer reports variables in functions containing the standard `todo!()` or `unimplemented!()` macros. + ## 0.1.41 No user-facing changes. diff --git a/rust/ql/src/change-notes/2026-08-11-command-injection.md b/rust/ql/src/change-notes/2026-08-11-command-injection.md deleted file mode 100644 index 2175cc9cdf18..000000000000 --- a/rust/ql/src/change-notes/2026-08-11-command-injection.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: newQuery ---- -* Added a new query, `rust/command-line-injection`, to detect uncontrolled command lines. diff --git a/rust/ql/src/change-notes/2026-08-20-unused-variables-in-incomplete-functions.md b/rust/ql/src/change-notes/2026-08-20-unused-variables-in-incomplete-functions.md deleted file mode 100644 index 882c91178175..000000000000 --- a/rust/ql/src/change-notes/2026-08-20-unused-variables-in-incomplete-functions.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* The `rust/unused-variable` query no longer reports variables in functions containing the standard `todo!()` or `unimplemented!()` macros. \ No newline at end of file diff --git a/rust/ql/src/change-notes/2026-08-25-hardcoded-cryptographic-match-expressions.md b/rust/ql/src/change-notes/2026-08-25-hardcoded-cryptographic-match-expressions.md deleted file mode 100644 index b2c71664f87a..000000000000 --- a/rust/ql/src/change-notes/2026-08-25-hardcoded-cryptographic-match-expressions.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -category: minorAnalysis ---- -* The `rust/hard-coded-cryptographic-value` query has been adjusted to produce -fewer results in certain situations where many results were being produced with very similar source locations. diff --git a/rust/ql/src/change-notes/released/0.1.42.md b/rust/ql/src/change-notes/released/0.1.42.md new file mode 100644 index 000000000000..617d6a48de02 --- /dev/null +++ b/rust/ql/src/change-notes/released/0.1.42.md @@ -0,0 +1,11 @@ +## 0.1.42 + +### New Queries + +* Added a new query, `rust/command-line-injection`, to detect uncontrolled command lines. + +### Minor Analysis Improvements + +* The `rust/hard-coded-cryptographic-value` query has been adjusted to produce +fewer results in certain situations where many results were being produced with very similar source locations. +* The `rust/unused-variable` query no longer reports variables in functions containing the standard `todo!()` or `unimplemented!()` macros. diff --git a/rust/ql/src/codeql-pack.release.yml b/rust/ql/src/codeql-pack.release.yml index 38f91b8ed622..55593f737cc9 100644 --- a/rust/ql/src/codeql-pack.release.yml +++ b/rust/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.1.41 +lastReleaseVersion: 0.1.42 diff --git a/rust/ql/src/qlpack.yml b/rust/ql/src/qlpack.yml index b4048003f9cf..2e13de282d58 100644 --- a/rust/ql/src/qlpack.yml +++ b/rust/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/rust-queries -version: 0.1.42-dev +version: 0.1.42 groups: - rust - queries diff --git a/shared/concepts/CHANGELOG.md b/shared/concepts/CHANGELOG.md index 6a88efccf19f..e399ac467e78 100644 --- a/shared/concepts/CHANGELOG.md +++ b/shared/concepts/CHANGELOG.md @@ -1,3 +1,7 @@ +## 0.0.31 + +No user-facing changes. + ## 0.0.30 No user-facing changes. diff --git a/shared/concepts/change-notes/released/0.0.31.md b/shared/concepts/change-notes/released/0.0.31.md new file mode 100644 index 000000000000..99e11d52c92a --- /dev/null +++ b/shared/concepts/change-notes/released/0.0.31.md @@ -0,0 +1,3 @@ +## 0.0.31 + +No user-facing changes. diff --git a/shared/concepts/codeql-pack.release.yml b/shared/concepts/codeql-pack.release.yml index 0c61b463bab3..54b504d06ecb 100644 --- a/shared/concepts/codeql-pack.release.yml +++ b/shared/concepts/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.0.30 +lastReleaseVersion: 0.0.31 diff --git a/shared/concepts/qlpack.yml b/shared/concepts/qlpack.yml index 6a1db5dc8858..f5005081b57a 100644 --- a/shared/concepts/qlpack.yml +++ b/shared/concepts/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/concepts -version: 0.0.31-dev +version: 0.0.31 groups: shared library: true dependencies: diff --git a/shared/controlflow/CHANGELOG.md b/shared/controlflow/CHANGELOG.md index 76ba233c908f..5edd14954f3e 100644 --- a/shared/controlflow/CHANGELOG.md +++ b/shared/controlflow/CHANGELOG.md @@ -1,3 +1,7 @@ +## 2.0.41 + +No user-facing changes. + ## 2.0.40 No user-facing changes. diff --git a/shared/controlflow/change-notes/released/2.0.41.md b/shared/controlflow/change-notes/released/2.0.41.md new file mode 100644 index 000000000000..5b519388ce82 --- /dev/null +++ b/shared/controlflow/change-notes/released/2.0.41.md @@ -0,0 +1,3 @@ +## 2.0.41 + +No user-facing changes. diff --git a/shared/controlflow/codeql-pack.release.yml b/shared/controlflow/codeql-pack.release.yml index df31666e556c..dcd61b02de59 100644 --- a/shared/controlflow/codeql-pack.release.yml +++ b/shared/controlflow/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 2.0.40 +lastReleaseVersion: 2.0.41 diff --git a/shared/controlflow/qlpack.yml b/shared/controlflow/qlpack.yml index 9c7448a0c159..fd5bfcb78586 100644 --- a/shared/controlflow/qlpack.yml +++ b/shared/controlflow/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/controlflow -version: 2.0.41-dev +version: 2.0.41 groups: shared library: true dependencies: diff --git a/shared/dataflow/CHANGELOG.md b/shared/dataflow/CHANGELOG.md index 17b7451f2d4d..f42b3d852dc7 100644 --- a/shared/dataflow/CHANGELOG.md +++ b/shared/dataflow/CHANGELOG.md @@ -1,3 +1,7 @@ +## 2.1.13 + +No user-facing changes. + ## 2.1.12 No user-facing changes. diff --git a/shared/dataflow/change-notes/released/2.1.13.md b/shared/dataflow/change-notes/released/2.1.13.md new file mode 100644 index 000000000000..52b732297b8c --- /dev/null +++ b/shared/dataflow/change-notes/released/2.1.13.md @@ -0,0 +1,3 @@ +## 2.1.13 + +No user-facing changes. diff --git a/shared/dataflow/codeql-pack.release.yml b/shared/dataflow/codeql-pack.release.yml index 64ef0f5a22c1..77d1ddbc8f91 100644 --- a/shared/dataflow/codeql-pack.release.yml +++ b/shared/dataflow/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 2.1.12 +lastReleaseVersion: 2.1.13 diff --git a/shared/dataflow/qlpack.yml b/shared/dataflow/qlpack.yml index 133b33e834d8..09e851c73c93 100644 --- a/shared/dataflow/qlpack.yml +++ b/shared/dataflow/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/dataflow -version: 2.1.13-dev +version: 2.1.13 groups: shared library: true dependencies: diff --git a/shared/mad/CHANGELOG.md b/shared/mad/CHANGELOG.md index 1f510be02756..0aa8d83bb6fa 100644 --- a/shared/mad/CHANGELOG.md +++ b/shared/mad/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.57 + +No user-facing changes. + ## 1.0.56 No user-facing changes. diff --git a/shared/mad/change-notes/released/1.0.57.md b/shared/mad/change-notes/released/1.0.57.md new file mode 100644 index 000000000000..18a94c4bca4a --- /dev/null +++ b/shared/mad/change-notes/released/1.0.57.md @@ -0,0 +1,3 @@ +## 1.0.57 + +No user-facing changes. diff --git a/shared/mad/codeql-pack.release.yml b/shared/mad/codeql-pack.release.yml index 9bb27b4fdb71..08ea3909354f 100644 --- a/shared/mad/codeql-pack.release.yml +++ b/shared/mad/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.56 +lastReleaseVersion: 1.0.57 diff --git a/shared/mad/qlpack.yml b/shared/mad/qlpack.yml index 28a84ca5aa86..e350a3a2ddbd 100644 --- a/shared/mad/qlpack.yml +++ b/shared/mad/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/mad -version: 1.0.57-dev +version: 1.0.57 groups: shared library: true dependencies: diff --git a/shared/namebinding/CHANGELOG.md b/shared/namebinding/CHANGELOG.md index 9b269441c000..ad2e63eb4709 100644 --- a/shared/namebinding/CHANGELOG.md +++ b/shared/namebinding/CHANGELOG.md @@ -1,3 +1,7 @@ +## 0.0.6 + +No user-facing changes. + ## 0.0.5 No user-facing changes. diff --git a/shared/namebinding/change-notes/released/0.0.6.md b/shared/namebinding/change-notes/released/0.0.6.md new file mode 100644 index 000000000000..ccbce856079d --- /dev/null +++ b/shared/namebinding/change-notes/released/0.0.6.md @@ -0,0 +1,3 @@ +## 0.0.6 + +No user-facing changes. diff --git a/shared/namebinding/codeql-pack.release.yml b/shared/namebinding/codeql-pack.release.yml index bb45a1ab0182..cf398ce02aa4 100644 --- a/shared/namebinding/codeql-pack.release.yml +++ b/shared/namebinding/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.0.5 +lastReleaseVersion: 0.0.6 diff --git a/shared/namebinding/qlpack.yml b/shared/namebinding/qlpack.yml index 6ab033915b70..f18af62921c4 100644 --- a/shared/namebinding/qlpack.yml +++ b/shared/namebinding/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/namebinding -version: 0.0.6-dev +version: 0.0.6 groups: shared library: true dependencies: diff --git a/shared/quantum/CHANGELOG.md b/shared/quantum/CHANGELOG.md index fd3064b1a947..4916c26d385a 100644 --- a/shared/quantum/CHANGELOG.md +++ b/shared/quantum/CHANGELOG.md @@ -1,3 +1,7 @@ +## 0.0.35 + +No user-facing changes. + ## 0.0.34 No user-facing changes. diff --git a/shared/quantum/change-notes/released/0.0.35.md b/shared/quantum/change-notes/released/0.0.35.md new file mode 100644 index 000000000000..1ffec5217282 --- /dev/null +++ b/shared/quantum/change-notes/released/0.0.35.md @@ -0,0 +1,3 @@ +## 0.0.35 + +No user-facing changes. diff --git a/shared/quantum/codeql-pack.release.yml b/shared/quantum/codeql-pack.release.yml index 6fb3b6253bb9..143c97892032 100644 --- a/shared/quantum/codeql-pack.release.yml +++ b/shared/quantum/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.0.34 +lastReleaseVersion: 0.0.35 diff --git a/shared/quantum/qlpack.yml b/shared/quantum/qlpack.yml index 73a8ef49ee5c..83384e926bcb 100644 --- a/shared/quantum/qlpack.yml +++ b/shared/quantum/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/quantum -version: 0.0.35-dev +version: 0.0.35 groups: shared library: true dependencies: diff --git a/shared/rangeanalysis/CHANGELOG.md b/shared/rangeanalysis/CHANGELOG.md index d3e4d9e87c60..965a43bc55b1 100644 --- a/shared/rangeanalysis/CHANGELOG.md +++ b/shared/rangeanalysis/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.57 + +No user-facing changes. + ## 1.0.56 No user-facing changes. diff --git a/shared/rangeanalysis/change-notes/released/1.0.57.md b/shared/rangeanalysis/change-notes/released/1.0.57.md new file mode 100644 index 000000000000..18a94c4bca4a --- /dev/null +++ b/shared/rangeanalysis/change-notes/released/1.0.57.md @@ -0,0 +1,3 @@ +## 1.0.57 + +No user-facing changes. diff --git a/shared/rangeanalysis/codeql-pack.release.yml b/shared/rangeanalysis/codeql-pack.release.yml index 9bb27b4fdb71..08ea3909354f 100644 --- a/shared/rangeanalysis/codeql-pack.release.yml +++ b/shared/rangeanalysis/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.56 +lastReleaseVersion: 1.0.57 diff --git a/shared/rangeanalysis/qlpack.yml b/shared/rangeanalysis/qlpack.yml index c7a74dae7c26..2b0eb43866da 100644 --- a/shared/rangeanalysis/qlpack.yml +++ b/shared/rangeanalysis/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/rangeanalysis -version: 1.0.57-dev +version: 1.0.57 groups: shared library: true dependencies: diff --git a/shared/regex/CHANGELOG.md b/shared/regex/CHANGELOG.md index 327845009d11..20e772df81ad 100644 --- a/shared/regex/CHANGELOG.md +++ b/shared/regex/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.57 + +No user-facing changes. + ## 1.0.56 No user-facing changes. diff --git a/shared/regex/change-notes/released/1.0.57.md b/shared/regex/change-notes/released/1.0.57.md new file mode 100644 index 000000000000..18a94c4bca4a --- /dev/null +++ b/shared/regex/change-notes/released/1.0.57.md @@ -0,0 +1,3 @@ +## 1.0.57 + +No user-facing changes. diff --git a/shared/regex/codeql-pack.release.yml b/shared/regex/codeql-pack.release.yml index 9bb27b4fdb71..08ea3909354f 100644 --- a/shared/regex/codeql-pack.release.yml +++ b/shared/regex/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.56 +lastReleaseVersion: 1.0.57 diff --git a/shared/regex/qlpack.yml b/shared/regex/qlpack.yml index 2afdc58e3d11..d4ad24634326 100644 --- a/shared/regex/qlpack.yml +++ b/shared/regex/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/regex -version: 1.0.57-dev +version: 1.0.57 groups: shared library: true dependencies: diff --git a/shared/ssa/CHANGELOG.md b/shared/ssa/CHANGELOG.md index 1cc5dec08b82..1ed23b3a72b6 100644 --- a/shared/ssa/CHANGELOG.md +++ b/shared/ssa/CHANGELOG.md @@ -1,3 +1,7 @@ +## 2.0.33 + +No user-facing changes. + ## 2.0.32 No user-facing changes. diff --git a/shared/ssa/change-notes/released/2.0.33.md b/shared/ssa/change-notes/released/2.0.33.md new file mode 100644 index 000000000000..d33a61332cf3 --- /dev/null +++ b/shared/ssa/change-notes/released/2.0.33.md @@ -0,0 +1,3 @@ +## 2.0.33 + +No user-facing changes. diff --git a/shared/ssa/codeql-pack.release.yml b/shared/ssa/codeql-pack.release.yml index 483a0d5db8ec..92e23200b4d6 100644 --- a/shared/ssa/codeql-pack.release.yml +++ b/shared/ssa/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 2.0.32 +lastReleaseVersion: 2.0.33 diff --git a/shared/ssa/qlpack.yml b/shared/ssa/qlpack.yml index c5c7755b1755..92b8603a9d6e 100644 --- a/shared/ssa/qlpack.yml +++ b/shared/ssa/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/ssa -version: 2.0.33-dev +version: 2.0.33 groups: shared library: true dependencies: diff --git a/shared/threat-models/CHANGELOG.md b/shared/threat-models/CHANGELOG.md index 7a0754e81b29..3a71bc3b5561 100644 --- a/shared/threat-models/CHANGELOG.md +++ b/shared/threat-models/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.57 + +No user-facing changes. + ## 1.0.56 No user-facing changes. diff --git a/shared/threat-models/change-notes/released/1.0.57.md b/shared/threat-models/change-notes/released/1.0.57.md new file mode 100644 index 000000000000..18a94c4bca4a --- /dev/null +++ b/shared/threat-models/change-notes/released/1.0.57.md @@ -0,0 +1,3 @@ +## 1.0.57 + +No user-facing changes. diff --git a/shared/threat-models/codeql-pack.release.yml b/shared/threat-models/codeql-pack.release.yml index 9bb27b4fdb71..08ea3909354f 100644 --- a/shared/threat-models/codeql-pack.release.yml +++ b/shared/threat-models/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.56 +lastReleaseVersion: 1.0.57 diff --git a/shared/threat-models/qlpack.yml b/shared/threat-models/qlpack.yml index a29a2c7dc6a0..a51fdda87b7f 100644 --- a/shared/threat-models/qlpack.yml +++ b/shared/threat-models/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/threat-models -version: 1.0.57-dev +version: 1.0.57 library: true groups: shared dataExtensions: diff --git a/shared/tutorial/CHANGELOG.md b/shared/tutorial/CHANGELOG.md index df769dd96aec..b3541e1248f5 100644 --- a/shared/tutorial/CHANGELOG.md +++ b/shared/tutorial/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.57 + +No user-facing changes. + ## 1.0.56 No user-facing changes. diff --git a/shared/tutorial/change-notes/released/1.0.57.md b/shared/tutorial/change-notes/released/1.0.57.md new file mode 100644 index 000000000000..18a94c4bca4a --- /dev/null +++ b/shared/tutorial/change-notes/released/1.0.57.md @@ -0,0 +1,3 @@ +## 1.0.57 + +No user-facing changes. diff --git a/shared/tutorial/codeql-pack.release.yml b/shared/tutorial/codeql-pack.release.yml index 9bb27b4fdb71..08ea3909354f 100644 --- a/shared/tutorial/codeql-pack.release.yml +++ b/shared/tutorial/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.56 +lastReleaseVersion: 1.0.57 diff --git a/shared/tutorial/qlpack.yml b/shared/tutorial/qlpack.yml index b94e0b81dadc..2c2dde8c1793 100644 --- a/shared/tutorial/qlpack.yml +++ b/shared/tutorial/qlpack.yml @@ -1,7 +1,7 @@ name: codeql/tutorial description: Library for the CodeQL detective tutorials, helping new users learn to write CodeQL queries. -version: 1.0.57-dev +version: 1.0.57 groups: shared library: true warnOnImplicitThis: true diff --git a/shared/typeflow/CHANGELOG.md b/shared/typeflow/CHANGELOG.md index 28d0101ccf54..ad7f55dd34bd 100644 --- a/shared/typeflow/CHANGELOG.md +++ b/shared/typeflow/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.57 + +No user-facing changes. + ## 1.0.56 No user-facing changes. diff --git a/shared/typeflow/change-notes/released/1.0.57.md b/shared/typeflow/change-notes/released/1.0.57.md new file mode 100644 index 000000000000..18a94c4bca4a --- /dev/null +++ b/shared/typeflow/change-notes/released/1.0.57.md @@ -0,0 +1,3 @@ +## 1.0.57 + +No user-facing changes. diff --git a/shared/typeflow/codeql-pack.release.yml b/shared/typeflow/codeql-pack.release.yml index 9bb27b4fdb71..08ea3909354f 100644 --- a/shared/typeflow/codeql-pack.release.yml +++ b/shared/typeflow/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.56 +lastReleaseVersion: 1.0.57 diff --git a/shared/typeflow/qlpack.yml b/shared/typeflow/qlpack.yml index 0475b6bf7325..6ea63f761cdd 100644 --- a/shared/typeflow/qlpack.yml +++ b/shared/typeflow/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/typeflow -version: 1.0.57-dev +version: 1.0.57 groups: shared library: true dependencies: diff --git a/shared/typeinference/CHANGELOG.md b/shared/typeinference/CHANGELOG.md index e34fb7c21ba1..6ab8c640bc68 100644 --- a/shared/typeinference/CHANGELOG.md +++ b/shared/typeinference/CHANGELOG.md @@ -1,3 +1,7 @@ +## 0.0.38 + +No user-facing changes. + ## 0.0.37 No user-facing changes. diff --git a/shared/typeinference/change-notes/released/0.0.38.md b/shared/typeinference/change-notes/released/0.0.38.md new file mode 100644 index 000000000000..6aef3fb33021 --- /dev/null +++ b/shared/typeinference/change-notes/released/0.0.38.md @@ -0,0 +1,3 @@ +## 0.0.38 + +No user-facing changes. diff --git a/shared/typeinference/codeql-pack.release.yml b/shared/typeinference/codeql-pack.release.yml index 7982dda40f4c..078a0e3aff01 100644 --- a/shared/typeinference/codeql-pack.release.yml +++ b/shared/typeinference/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.0.37 +lastReleaseVersion: 0.0.38 diff --git a/shared/typeinference/qlpack.yml b/shared/typeinference/qlpack.yml index 3cd87a73bdc2..5cabb023ce1e 100644 --- a/shared/typeinference/qlpack.yml +++ b/shared/typeinference/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/typeinference -version: 0.0.38-dev +version: 0.0.38 groups: shared library: true dependencies: diff --git a/shared/typetracking/CHANGELOG.md b/shared/typetracking/CHANGELOG.md index 60257ae7e1e0..2c6907a4eaae 100644 --- a/shared/typetracking/CHANGELOG.md +++ b/shared/typetracking/CHANGELOG.md @@ -1,3 +1,7 @@ +## 2.0.41 + +No user-facing changes. + ## 2.0.40 No user-facing changes. diff --git a/shared/typetracking/change-notes/released/2.0.41.md b/shared/typetracking/change-notes/released/2.0.41.md new file mode 100644 index 000000000000..5b519388ce82 --- /dev/null +++ b/shared/typetracking/change-notes/released/2.0.41.md @@ -0,0 +1,3 @@ +## 2.0.41 + +No user-facing changes. diff --git a/shared/typetracking/codeql-pack.release.yml b/shared/typetracking/codeql-pack.release.yml index df31666e556c..dcd61b02de59 100644 --- a/shared/typetracking/codeql-pack.release.yml +++ b/shared/typetracking/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 2.0.40 +lastReleaseVersion: 2.0.41 diff --git a/shared/typetracking/qlpack.yml b/shared/typetracking/qlpack.yml index eff084212ba2..854d8bae6da0 100644 --- a/shared/typetracking/qlpack.yml +++ b/shared/typetracking/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/typetracking -version: 2.0.41-dev +version: 2.0.41 groups: shared library: true dependencies: diff --git a/shared/typos/CHANGELOG.md b/shared/typos/CHANGELOG.md index a43daa8503c9..503f9fa3d4f0 100644 --- a/shared/typos/CHANGELOG.md +++ b/shared/typos/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.57 + +No user-facing changes. + ## 1.0.56 No user-facing changes. diff --git a/shared/typos/change-notes/released/1.0.57.md b/shared/typos/change-notes/released/1.0.57.md new file mode 100644 index 000000000000..18a94c4bca4a --- /dev/null +++ b/shared/typos/change-notes/released/1.0.57.md @@ -0,0 +1,3 @@ +## 1.0.57 + +No user-facing changes. diff --git a/shared/typos/codeql-pack.release.yml b/shared/typos/codeql-pack.release.yml index 9bb27b4fdb71..08ea3909354f 100644 --- a/shared/typos/codeql-pack.release.yml +++ b/shared/typos/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.56 +lastReleaseVersion: 1.0.57 diff --git a/shared/typos/qlpack.yml b/shared/typos/qlpack.yml index 5933bd6862a1..712073d7668a 100644 --- a/shared/typos/qlpack.yml +++ b/shared/typos/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/typos -version: 1.0.57-dev +version: 1.0.57 groups: shared library: true warnOnImplicitThis: true diff --git a/shared/util/CHANGELOG.md b/shared/util/CHANGELOG.md index 194ea712d2ad..68a57b6e1bbc 100644 --- a/shared/util/CHANGELOG.md +++ b/shared/util/CHANGELOG.md @@ -1,3 +1,7 @@ +## 2.0.44 + +No user-facing changes. + ## 2.0.43 No user-facing changes. diff --git a/shared/util/change-notes/released/2.0.44.md b/shared/util/change-notes/released/2.0.44.md new file mode 100644 index 000000000000..47addacab148 --- /dev/null +++ b/shared/util/change-notes/released/2.0.44.md @@ -0,0 +1,3 @@ +## 2.0.44 + +No user-facing changes. diff --git a/shared/util/codeql-pack.release.yml b/shared/util/codeql-pack.release.yml index 26126cee2c6b..2032d0ef8b3f 100644 --- a/shared/util/codeql-pack.release.yml +++ b/shared/util/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 2.0.43 +lastReleaseVersion: 2.0.44 diff --git a/shared/util/qlpack.yml b/shared/util/qlpack.yml index c8f2c7a57343..76bb1b6957a2 100644 --- a/shared/util/qlpack.yml +++ b/shared/util/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/util -version: 2.0.44-dev +version: 2.0.44 groups: shared library: true dependencies: null diff --git a/shared/xml/CHANGELOG.md b/shared/xml/CHANGELOG.md index 8d1557082db1..19444d2622d1 100644 --- a/shared/xml/CHANGELOG.md +++ b/shared/xml/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.57 + +No user-facing changes. + ## 1.0.56 No user-facing changes. diff --git a/shared/xml/change-notes/released/1.0.57.md b/shared/xml/change-notes/released/1.0.57.md new file mode 100644 index 000000000000..18a94c4bca4a --- /dev/null +++ b/shared/xml/change-notes/released/1.0.57.md @@ -0,0 +1,3 @@ +## 1.0.57 + +No user-facing changes. diff --git a/shared/xml/codeql-pack.release.yml b/shared/xml/codeql-pack.release.yml index 9bb27b4fdb71..08ea3909354f 100644 --- a/shared/xml/codeql-pack.release.yml +++ b/shared/xml/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.56 +lastReleaseVersion: 1.0.57 diff --git a/shared/xml/qlpack.yml b/shared/xml/qlpack.yml index 71a98a37b522..c9251eb88c4d 100644 --- a/shared/xml/qlpack.yml +++ b/shared/xml/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/xml -version: 1.0.57-dev +version: 1.0.57 groups: shared library: true dependencies: diff --git a/shared/yaml/CHANGELOG.md b/shared/yaml/CHANGELOG.md index 5a2e1a8833b0..8835951f9c51 100644 --- a/shared/yaml/CHANGELOG.md +++ b/shared/yaml/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.57 + +No user-facing changes. + ## 1.0.56 No user-facing changes. diff --git a/shared/yaml/change-notes/released/1.0.57.md b/shared/yaml/change-notes/released/1.0.57.md new file mode 100644 index 000000000000..18a94c4bca4a --- /dev/null +++ b/shared/yaml/change-notes/released/1.0.57.md @@ -0,0 +1,3 @@ +## 1.0.57 + +No user-facing changes. diff --git a/shared/yaml/codeql-pack.release.yml b/shared/yaml/codeql-pack.release.yml index 9bb27b4fdb71..08ea3909354f 100644 --- a/shared/yaml/codeql-pack.release.yml +++ b/shared/yaml/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.56 +lastReleaseVersion: 1.0.57 diff --git a/shared/yaml/qlpack.yml b/shared/yaml/qlpack.yml index 83ede2e7653b..ccc990b27d02 100644 --- a/shared/yaml/qlpack.yml +++ b/shared/yaml/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/yaml -version: 1.0.57-dev +version: 1.0.57 groups: shared library: true warnOnImplicitThis: true diff --git a/swift/ql/lib/CHANGELOG.md b/swift/ql/lib/CHANGELOG.md index e71c0491bc0a..b907f330f976 100644 --- a/swift/ql/lib/CHANGELOG.md +++ b/swift/ql/lib/CHANGELOG.md @@ -1,3 +1,7 @@ +## 6.8.3 + +No user-facing changes. + ## 6.8.2 No user-facing changes. diff --git a/swift/ql/lib/change-notes/released/6.8.3.md b/swift/ql/lib/change-notes/released/6.8.3.md new file mode 100644 index 000000000000..d35c1fbb4ff4 --- /dev/null +++ b/swift/ql/lib/change-notes/released/6.8.3.md @@ -0,0 +1,3 @@ +## 6.8.3 + +No user-facing changes. diff --git a/swift/ql/lib/codeql-pack.release.yml b/swift/ql/lib/codeql-pack.release.yml index 42fdf5962a78..de8d19f816cf 100644 --- a/swift/ql/lib/codeql-pack.release.yml +++ b/swift/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 6.8.2 +lastReleaseVersion: 6.8.3 diff --git a/swift/ql/lib/qlpack.yml b/swift/ql/lib/qlpack.yml index f539a679b130..dd31b62e1481 100644 --- a/swift/ql/lib/qlpack.yml +++ b/swift/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/swift-all -version: 6.8.3-dev +version: 6.8.3 groups: swift extractor: swift dbscheme: swift.dbscheme diff --git a/swift/ql/src/CHANGELOG.md b/swift/ql/src/CHANGELOG.md index 25dde1dc3ab1..f828ae84a5ac 100644 --- a/swift/ql/src/CHANGELOG.md +++ b/swift/ql/src/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.3.10 + +No user-facing changes. + ## 1.3.9 No user-facing changes. diff --git a/swift/ql/src/change-notes/released/1.3.10.md b/swift/ql/src/change-notes/released/1.3.10.md new file mode 100644 index 000000000000..182c8ffe713a --- /dev/null +++ b/swift/ql/src/change-notes/released/1.3.10.md @@ -0,0 +1,3 @@ +## 1.3.10 + +No user-facing changes. diff --git a/swift/ql/src/codeql-pack.release.yml b/swift/ql/src/codeql-pack.release.yml index 5ce113f4464d..eb79ac3dca3f 100644 --- a/swift/ql/src/codeql-pack.release.yml +++ b/swift/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.3.9 +lastReleaseVersion: 1.3.10 diff --git a/swift/ql/src/qlpack.yml b/swift/ql/src/qlpack.yml index ca8bf05e942d..fd6ec0e549bc 100644 --- a/swift/ql/src/qlpack.yml +++ b/swift/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/swift-queries -version: 1.3.10-dev +version: 1.3.10 groups: - swift - queries