diff --git a/actions/ql/lib/CHANGELOG.md b/actions/ql/lib/CHANGELOG.md index e686c4d596f4..d1943239b2d1 100644 --- a/actions/ql/lib/CHANGELOG.md +++ b/actions/ql/lib/CHANGELOG.md @@ -1,3 +1,14 @@ +## 0.6.1 + +### New Features + +* GitHub Actions databases now extract `actions.lock` files. The new `ActionsLock` class + provides access to their YAML abstract syntax trees. + +### Minor Analysis Improvements + +* Checks on author association fields read from the event payload (e.g. `github.event.pull_request.author_association`) now only count as protection for events whose payload actually populates that field. Previously, a condition such as `github.event.pull_request.author_association != 'NONE'` on a workflow triggered by `issues` events was treated as a protective check even though `github.event.pull_request` is not populated for `issues` events, which makes the condition vacuous. This change may result in more alerts for queries using the `ControlCheck` class. + ## 0.6.0 ### Breaking Changes diff --git a/actions/ql/lib/change-notes/2026-09-01-actions-lock-yaml.md b/actions/ql/lib/change-notes/2026-09-01-actions-lock-yaml.md deleted file mode 100644 index ed0a25515da0..000000000000 --- a/actions/ql/lib/change-notes/2026-09-01-actions-lock-yaml.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -category: feature ---- -* GitHub Actions databases now extract `actions.lock` files. The new `ActionsLock` class - provides access to their YAML abstract syntax trees. diff --git a/actions/ql/lib/change-notes/2026-08-19-association-if-check-event-validity.md b/actions/ql/lib/change-notes/released/0.6.1.md similarity index 73% rename from actions/ql/lib/change-notes/2026-08-19-association-if-check-event-validity.md rename to actions/ql/lib/change-notes/released/0.6.1.md index 28ef240b2394..19f7f95948ad 100644 --- a/actions/ql/lib/change-notes/2026-08-19-association-if-check-event-validity.md +++ b/actions/ql/lib/change-notes/released/0.6.1.md @@ -1,4 +1,10 @@ ---- -category: minorAnalysis ---- +## 0.6.1 + +### New Features + +* GitHub Actions databases now extract `actions.lock` files. The new `ActionsLock` class + provides access to their YAML abstract syntax trees. + +### Minor Analysis Improvements + * Checks on author association fields read from the event payload (e.g. `github.event.pull_request.author_association`) now only count as protection for events whose payload actually populates that field. Previously, a condition such as `github.event.pull_request.author_association != 'NONE'` on a workflow triggered by `issues` events was treated as a protective check even though `github.event.pull_request` is not populated for `issues` events, which makes the condition vacuous. This change may result in more alerts for queries using the `ControlCheck` class. diff --git a/actions/ql/lib/codeql-pack.release.yml b/actions/ql/lib/codeql-pack.release.yml index a3f820f884d3..80fb0899f645 100644 --- a/actions/ql/lib/codeql-pack.release.yml +++ b/actions/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.6.0 +lastReleaseVersion: 0.6.1 diff --git a/actions/ql/lib/qlpack.yml b/actions/ql/lib/qlpack.yml index b86df498d3dd..268018a37415 100644 --- a/actions/ql/lib/qlpack.yml +++ b/actions/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/actions-all -version: 0.6.1-dev +version: 0.6.2-dev library: true warnOnImplicitThis: true dependencies: diff --git a/actions/ql/src/CHANGELOG.md b/actions/ql/src/CHANGELOG.md index 6a4f17d872be..9676c26efaff 100644 --- a/actions/ql/src/CHANGELOG.md +++ b/actions/ql/src/CHANGELOG.md @@ -1,3 +1,7 @@ +## 0.6.35 + +No user-facing changes. + ## 0.6.34 ### Minor Analysis Improvements diff --git a/actions/ql/src/change-notes/released/0.6.35.md b/actions/ql/src/change-notes/released/0.6.35.md new file mode 100644 index 000000000000..aa17e650d404 --- /dev/null +++ b/actions/ql/src/change-notes/released/0.6.35.md @@ -0,0 +1,3 @@ +## 0.6.35 + +No user-facing changes. diff --git a/actions/ql/src/codeql-pack.release.yml b/actions/ql/src/codeql-pack.release.yml index fe5075b50fbd..0a9561ad0b98 100644 --- a/actions/ql/src/codeql-pack.release.yml +++ b/actions/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.6.34 +lastReleaseVersion: 0.6.35 diff --git a/actions/ql/src/qlpack.yml b/actions/ql/src/qlpack.yml index f4323defe6e8..5feedb52c8ce 100644 --- a/actions/ql/src/qlpack.yml +++ b/actions/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/actions-queries -version: 0.6.35-dev +version: 0.6.36-dev library: false warnOnImplicitThis: true groups: [actions, queries] diff --git a/cpp/ql/lib/CHANGELOG.md b/cpp/ql/lib/CHANGELOG.md index eb81fb24c603..c42b0d3ec5d5 100644 --- a/cpp/ql/lib/CHANGELOG.md +++ b/cpp/ql/lib/CHANGELOG.md @@ -1,3 +1,14 @@ +## 12.1.0 + +### New Features + +* Sources and sinks defined using models-as-data now support access paths with fields. For example, the path `ReturnValue.Field[S::f]` makes the field `S::f` a flow source when it is returned by a call. + +### Minor Analysis Improvements + +* Added the PostgreSQL libpq (asynchronous) query-execution functions `PQexec`, `PQexecParams`, `PQprepare`, `PQsendQuery`, `PQsendQueryParams`, `PQsendPrepare` as `sql-injection` sinks. +* Initializers of compiler-generated variables are now recognized as compiler-generated. A new predicate `isCompilerGenerated` on `Initializer` has been added to reflect this. + ## 12.0.3 No user-facing changes. diff --git a/cpp/ql/lib/change-notes/2026-08-19-access-paths-for-sources-and-sinks.md b/cpp/ql/lib/change-notes/2026-08-19-access-paths-for-sources-and-sinks.md deleted file mode 100644 index 7cbe82b6f8e9..000000000000 --- a/cpp/ql/lib/change-notes/2026-08-19-access-paths-for-sources-and-sinks.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: feature ---- -* Sources and sinks defined using models-as-data now support access paths with fields. For example, the path `ReturnValue.Field[S::f]` makes the field `S::f` a flow source when it is returned by a call. \ No newline at end of file diff --git a/cpp/ql/lib/change-notes/2026-08-21-compiler-generated.md b/cpp/ql/lib/change-notes/2026-08-21-compiler-generated.md deleted file mode 100644 index eed0d6c8c389..000000000000 --- a/cpp/ql/lib/change-notes/2026-08-21-compiler-generated.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* Initializers of compiler-generated variables are now recognized as compiler-generated. A new predicate `isCompilerGenerated` on `Initializer` has been added to reflect this. \ No newline at end of file diff --git a/cpp/ql/lib/change-notes/2026-08-27-libpq-sql-sinks.md b/cpp/ql/lib/change-notes/2026-08-27-libpq-sql-sinks.md deleted file mode 100644 index 64cba8096173..000000000000 --- a/cpp/ql/lib/change-notes/2026-08-27-libpq-sql-sinks.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* Added the PostgreSQL libpq (asynchronous) query-execution functions `PQexec`, `PQexecParams`, `PQprepare`, `PQsendQuery`, `PQsendQueryParams`, `PQsendPrepare` as `sql-injection` sinks. diff --git a/cpp/ql/lib/change-notes/released/12.1.0.md b/cpp/ql/lib/change-notes/released/12.1.0.md new file mode 100644 index 000000000000..a56939e92a70 --- /dev/null +++ b/cpp/ql/lib/change-notes/released/12.1.0.md @@ -0,0 +1,10 @@ +## 12.1.0 + +### New Features + +* Sources and sinks defined using models-as-data now support access paths with fields. For example, the path `ReturnValue.Field[S::f]` makes the field `S::f` a flow source when it is returned by a call. + +### Minor Analysis Improvements + +* Added the PostgreSQL libpq (asynchronous) query-execution functions `PQexec`, `PQexecParams`, `PQprepare`, `PQsendQuery`, `PQsendQueryParams`, `PQsendPrepare` as `sql-injection` sinks. +* Initializers of compiler-generated variables are now recognized as compiler-generated. A new predicate `isCompilerGenerated` on `Initializer` has been added to reflect this. diff --git a/cpp/ql/lib/codeql-pack.release.yml b/cpp/ql/lib/codeql-pack.release.yml index 9901aa9768db..87f64222020b 100644 --- a/cpp/ql/lib/codeql-pack.release.yml +++ b/cpp/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 12.0.3 +lastReleaseVersion: 12.1.0 diff --git a/cpp/ql/lib/qlpack.yml b/cpp/ql/lib/qlpack.yml index b676012be506..5114bf861a36 100644 --- a/cpp/ql/lib/qlpack.yml +++ b/cpp/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/cpp-all -version: 12.0.4-dev +version: 12.1.1-dev groups: cpp dbscheme: semmlecode.cpp.dbscheme extractor: cpp diff --git a/cpp/ql/src/CHANGELOG.md b/cpp/ql/src/CHANGELOG.md index 9a8c1243217c..de14ac42a586 100644 --- a/cpp/ql/src/CHANGELOG.md +++ b/cpp/ql/src/CHANGELOG.md @@ -1,3 +1,9 @@ +## 1.8.3 + +### Minor Analysis Improvements + +* The `cpp/leap-year/unsafe-array-for-days-of-the-year` query ("Unsafe array for days of the year") no longer reports an alert on the `__PRETTY_FUNCTION__` variable (and related variables) when the enclosing function has a signature that is exactly 364 characters. + ## 1.8.2 No user-facing changes. diff --git a/cpp/ql/src/change-notes/2026-08-28-leap-year-unsafe-array-fp.md b/cpp/ql/src/change-notes/released/1.8.3.md similarity index 83% rename from cpp/ql/src/change-notes/2026-08-28-leap-year-unsafe-array-fp.md rename to cpp/ql/src/change-notes/released/1.8.3.md index 4ba04f0de358..46bddcbc40ea 100644 --- a/cpp/ql/src/change-notes/2026-08-28-leap-year-unsafe-array-fp.md +++ b/cpp/ql/src/change-notes/released/1.8.3.md @@ -1,4 +1,5 @@ ---- -category: minorAnalysis ---- -* The `cpp/leap-year/unsafe-array-for-days-of-the-year` query ("Unsafe array for days of the year") no longer reports an alert on the `__PRETTY_FUNCTION__` variable (and related variables) when the enclosing function has a signature that is exactly 364 characters. \ No newline at end of file +## 1.8.3 + +### Minor Analysis Improvements + +* The `cpp/leap-year/unsafe-array-for-days-of-the-year` query ("Unsafe array for days of the year") no longer reports an alert on the `__PRETTY_FUNCTION__` variable (and related variables) when the enclosing function has a signature that is exactly 364 characters. diff --git a/cpp/ql/src/codeql-pack.release.yml b/cpp/ql/src/codeql-pack.release.yml index 559af8348bb0..8071ef421ab4 100644 --- a/cpp/ql/src/codeql-pack.release.yml +++ b/cpp/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.8.2 +lastReleaseVersion: 1.8.3 diff --git a/cpp/ql/src/qlpack.yml b/cpp/ql/src/qlpack.yml index b365b8a398c3..034523449c24 100644 --- a/cpp/ql/src/qlpack.yml +++ b/cpp/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/cpp-queries -version: 1.8.3-dev +version: 1.8.4-dev groups: - cpp - queries diff --git a/csharp/ql/campaigns/Solorigate/lib/CHANGELOG.md b/csharp/ql/campaigns/Solorigate/lib/CHANGELOG.md index 1897f105e373..8d3c16f6bc95 100644 --- a/csharp/ql/campaigns/Solorigate/lib/CHANGELOG.md +++ b/csharp/ql/campaigns/Solorigate/lib/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.7.74 + +No user-facing changes. + ## 1.7.73 No user-facing changes. diff --git a/csharp/ql/campaigns/Solorigate/lib/change-notes/released/1.7.74.md b/csharp/ql/campaigns/Solorigate/lib/change-notes/released/1.7.74.md new file mode 100644 index 000000000000..3af579633adc --- /dev/null +++ b/csharp/ql/campaigns/Solorigate/lib/change-notes/released/1.7.74.md @@ -0,0 +1,3 @@ +## 1.7.74 + +No user-facing changes. diff --git a/csharp/ql/campaigns/Solorigate/lib/codeql-pack.release.yml b/csharp/ql/campaigns/Solorigate/lib/codeql-pack.release.yml index 95fecc284bee..34061dc1c22a 100644 --- a/csharp/ql/campaigns/Solorigate/lib/codeql-pack.release.yml +++ b/csharp/ql/campaigns/Solorigate/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.7.73 +lastReleaseVersion: 1.7.74 diff --git a/csharp/ql/campaigns/Solorigate/lib/qlpack.yml b/csharp/ql/campaigns/Solorigate/lib/qlpack.yml index d045c1c7224b..07c306a65a9d 100644 --- a/csharp/ql/campaigns/Solorigate/lib/qlpack.yml +++ b/csharp/ql/campaigns/Solorigate/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/csharp-solorigate-all -version: 1.7.74-dev +version: 1.7.75-dev groups: - csharp - solorigate diff --git a/csharp/ql/campaigns/Solorigate/src/CHANGELOG.md b/csharp/ql/campaigns/Solorigate/src/CHANGELOG.md index 1897f105e373..8d3c16f6bc95 100644 --- a/csharp/ql/campaigns/Solorigate/src/CHANGELOG.md +++ b/csharp/ql/campaigns/Solorigate/src/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.7.74 + +No user-facing changes. + ## 1.7.73 No user-facing changes. diff --git a/csharp/ql/campaigns/Solorigate/src/change-notes/released/1.7.74.md b/csharp/ql/campaigns/Solorigate/src/change-notes/released/1.7.74.md new file mode 100644 index 000000000000..3af579633adc --- /dev/null +++ b/csharp/ql/campaigns/Solorigate/src/change-notes/released/1.7.74.md @@ -0,0 +1,3 @@ +## 1.7.74 + +No user-facing changes. diff --git a/csharp/ql/campaigns/Solorigate/src/codeql-pack.release.yml b/csharp/ql/campaigns/Solorigate/src/codeql-pack.release.yml index 95fecc284bee..34061dc1c22a 100644 --- a/csharp/ql/campaigns/Solorigate/src/codeql-pack.release.yml +++ b/csharp/ql/campaigns/Solorigate/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.7.73 +lastReleaseVersion: 1.7.74 diff --git a/csharp/ql/campaigns/Solorigate/src/qlpack.yml b/csharp/ql/campaigns/Solorigate/src/qlpack.yml index 3b5e1b3341e3..94bf9c0f7db3 100644 --- a/csharp/ql/campaigns/Solorigate/src/qlpack.yml +++ b/csharp/ql/campaigns/Solorigate/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/csharp-solorigate-queries -version: 1.7.74-dev +version: 1.7.75-dev groups: - csharp - solorigate diff --git a/csharp/ql/lib/CHANGELOG.md b/csharp/ql/lib/CHANGELOG.md index 4df4b3da22fa..78b2f677db3e 100644 --- a/csharp/ql/lib/CHANGELOG.md +++ b/csharp/ql/lib/CHANGELOG.md @@ -1,3 +1,15 @@ +## 7.3.0 + +### New Features + +* Added taint modeling for OData action parameter binding (`Microsoft.AspNet.OData`/`Microsoft.AspNetCore.OData`). Values cast, `as`-converted, or type-tested out of `ODataActionParameters`, and entities tracked by `Delta` (via `GetInstance`, `Patch`, `Put`, `CopyChangedValues`, and `CopyUnchangedValues`), now taint the members of the target type. + +### Minor Analysis Improvements + +* In `build-mode: none`, project and solution restoration is now always attempted using the feeds available. +* C# analysis with build mode `none` now lists unreachable explicitly configured NuGet feeds in both the extraction warning and the tool status page note. This makes it easier to identify feeds that may cause dependencies to be missing from the analysis. +* Improved ASP.NET Core MVC controller and action discovery to more closely match runtime behavior, including application parts, endpoint mappings, inherited actions, and controller and action exclusions. Service-injected action parameters are no longer modeled as remote input. + ## 7.2.0 ### New Features diff --git a/csharp/ql/lib/change-notes/2026-07-31-aspnet-core-controller-discovery.md b/csharp/ql/lib/change-notes/2026-07-31-aspnet-core-controller-discovery.md deleted file mode 100644 index a55f736a1e84..000000000000 --- a/csharp/ql/lib/change-notes/2026-07-31-aspnet-core-controller-discovery.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* Improved ASP.NET Core MVC controller and action discovery to more closely match runtime behavior, including application parts, endpoint mappings, inherited actions, and controller and action exclusions. Service-injected action parameters are no longer modeled as remote input. diff --git a/csharp/ql/lib/change-notes/2026-08-18-tsp-nuget-feed-reachability.md b/csharp/ql/lib/change-notes/2026-08-18-tsp-nuget-feed-reachability.md deleted file mode 100644 index fc391ad6f804..000000000000 --- a/csharp/ql/lib/change-notes/2026-08-18-tsp-nuget-feed-reachability.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* C# analysis with build mode `none` now lists unreachable explicitly configured NuGet feeds in both the extraction warning and the tool status page note. This makes it easier to identify feeds that may cause dependencies to be missing from the analysis. diff --git a/csharp/ql/lib/change-notes/2026-08-19-odata-taint-step.md b/csharp/ql/lib/change-notes/2026-08-19-odata-taint-step.md deleted file mode 100644 index 3d0a6cbeb8ae..000000000000 --- a/csharp/ql/lib/change-notes/2026-08-19-odata-taint-step.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: feature ---- -* Added taint modeling for OData action parameter binding (`Microsoft.AspNet.OData`/`Microsoft.AspNetCore.OData`). Values cast, `as`-converted, or type-tested out of `ODataActionParameters`, and entities tracked by `Delta` (via `GetInstance`, `Patch`, `Put`, `CopyChangedValues`, and `CopyUnchangedValues`), now taint the members of the target type. diff --git a/csharp/ql/lib/change-notes/2026-08-20-dotnet-restore.md b/csharp/ql/lib/change-notes/2026-08-20-dotnet-restore.md deleted file mode 100644 index 9bd47c960e18..000000000000 --- a/csharp/ql/lib/change-notes/2026-08-20-dotnet-restore.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* In `build-mode: none`, project and solution restoration is now always attempted using the feeds available. diff --git a/csharp/ql/lib/change-notes/released/7.3.0.md b/csharp/ql/lib/change-notes/released/7.3.0.md new file mode 100644 index 000000000000..2af204c27e3d --- /dev/null +++ b/csharp/ql/lib/change-notes/released/7.3.0.md @@ -0,0 +1,11 @@ +## 7.3.0 + +### New Features + +* Added taint modeling for OData action parameter binding (`Microsoft.AspNet.OData`/`Microsoft.AspNetCore.OData`). Values cast, `as`-converted, or type-tested out of `ODataActionParameters`, and entities tracked by `Delta` (via `GetInstance`, `Patch`, `Put`, `CopyChangedValues`, and `CopyUnchangedValues`), now taint the members of the target type. + +### Minor Analysis Improvements + +* In `build-mode: none`, project and solution restoration is now always attempted using the feeds available. +* C# analysis with build mode `none` now lists unreachable explicitly configured NuGet feeds in both the extraction warning and the tool status page note. This makes it easier to identify feeds that may cause dependencies to be missing from the analysis. +* Improved ASP.NET Core MVC controller and action discovery to more closely match runtime behavior, including application parts, endpoint mappings, inherited actions, and controller and action exclusions. Service-injected action parameters are no longer modeled as remote input. diff --git a/csharp/ql/lib/codeql-pack.release.yml b/csharp/ql/lib/codeql-pack.release.yml index fda9ea165fc5..2b9b871fffa7 100644 --- a/csharp/ql/lib/codeql-pack.release.yml +++ b/csharp/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 7.2.0 +lastReleaseVersion: 7.3.0 diff --git a/csharp/ql/lib/qlpack.yml b/csharp/ql/lib/qlpack.yml index c011a9a20d0b..18ee2c149098 100644 --- a/csharp/ql/lib/qlpack.yml +++ b/csharp/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/csharp-all -version: 7.2.1-dev +version: 7.3.1-dev groups: csharp dbscheme: semmlecode.csharp.dbscheme extractor: csharp diff --git a/csharp/ql/src/CHANGELOG.md b/csharp/ql/src/CHANGELOG.md index 2e430f88a6ed..cf86d815aa53 100644 --- a/csharp/ql/src/CHANGELOG.md +++ b/csharp/ql/src/CHANGELOG.md @@ -1,3 +1,9 @@ +## 1.9.3 + +### Minor Analysis Improvements + +* The `cs/linq/missed-where` query no longer flags `foreach` loops where the matching branch terminates the method, iterator, or loop instead of continuing with filtered loop work. + ## 1.9.2 ### Minor Analysis Improvements diff --git a/csharp/ql/src/change-notes/2026-09-03-missed-where-terminal-branches.md b/csharp/ql/src/change-notes/released/1.9.3.md similarity index 80% rename from csharp/ql/src/change-notes/2026-09-03-missed-where-terminal-branches.md rename to csharp/ql/src/change-notes/released/1.9.3.md index 33515e4c90cd..675cc4b65718 100644 --- a/csharp/ql/src/change-notes/2026-09-03-missed-where-terminal-branches.md +++ b/csharp/ql/src/change-notes/released/1.9.3.md @@ -1,4 +1,5 @@ ---- -category: minorAnalysis ---- +## 1.9.3 + +### Minor Analysis Improvements + * The `cs/linq/missed-where` query no longer flags `foreach` loops where the matching branch terminates the method, iterator, or loop instead of continuing with filtered loop work. diff --git a/csharp/ql/src/codeql-pack.release.yml b/csharp/ql/src/codeql-pack.release.yml index 842136056d89..46a56c94195c 100644 --- a/csharp/ql/src/codeql-pack.release.yml +++ b/csharp/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.9.2 +lastReleaseVersion: 1.9.3 diff --git a/csharp/ql/src/qlpack.yml b/csharp/ql/src/qlpack.yml index 84048f55bc43..c90064a3b913 100644 --- a/csharp/ql/src/qlpack.yml +++ b/csharp/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/csharp-queries -version: 1.9.3-dev +version: 1.9.4-dev groups: - csharp - queries diff --git a/go/ql/consistency-queries/CHANGELOG.md b/go/ql/consistency-queries/CHANGELOG.md index 7a0754e81b29..3a71bc3b5561 100644 --- a/go/ql/consistency-queries/CHANGELOG.md +++ b/go/ql/consistency-queries/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.57 + +No user-facing changes. + ## 1.0.56 No user-facing changes. diff --git a/go/ql/consistency-queries/change-notes/released/1.0.57.md b/go/ql/consistency-queries/change-notes/released/1.0.57.md new file mode 100644 index 000000000000..18a94c4bca4a --- /dev/null +++ b/go/ql/consistency-queries/change-notes/released/1.0.57.md @@ -0,0 +1,3 @@ +## 1.0.57 + +No user-facing changes. diff --git a/go/ql/consistency-queries/codeql-pack.release.yml b/go/ql/consistency-queries/codeql-pack.release.yml index 9bb27b4fdb71..08ea3909354f 100644 --- a/go/ql/consistency-queries/codeql-pack.release.yml +++ b/go/ql/consistency-queries/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.56 +lastReleaseVersion: 1.0.57 diff --git a/go/ql/consistency-queries/qlpack.yml b/go/ql/consistency-queries/qlpack.yml index bebfec169a09..c9c318de2fa2 100644 --- a/go/ql/consistency-queries/qlpack.yml +++ b/go/ql/consistency-queries/qlpack.yml @@ -1,5 +1,5 @@ name: codeql-go-consistency-queries -version: 1.0.57-dev +version: 1.0.58-dev groups: - go - queries diff --git a/go/ql/lib/CHANGELOG.md b/go/ql/lib/CHANGELOG.md index 7ccc01fbd4c4..0c60f6aed295 100644 --- a/go/ql/lib/CHANGELOG.md +++ b/go/ql/lib/CHANGELOG.md @@ -1,3 +1,7 @@ +## 7.3.1 + +No user-facing changes. + ## 7.3.0 ### Major Analysis Improvements diff --git a/go/ql/lib/change-notes/released/7.3.1.md b/go/ql/lib/change-notes/released/7.3.1.md new file mode 100644 index 000000000000..2f2fe5472266 --- /dev/null +++ b/go/ql/lib/change-notes/released/7.3.1.md @@ -0,0 +1,3 @@ +## 7.3.1 + +No user-facing changes. diff --git a/go/ql/lib/codeql-pack.release.yml b/go/ql/lib/codeql-pack.release.yml index 2b9b871fffa7..43cb026b1392 100644 --- a/go/ql/lib/codeql-pack.release.yml +++ b/go/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 7.3.0 +lastReleaseVersion: 7.3.1 diff --git a/go/ql/lib/qlpack.yml b/go/ql/lib/qlpack.yml index 12e9a5f97982..4dc828abeffe 100644 --- a/go/ql/lib/qlpack.yml +++ b/go/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/go-all -version: 7.3.1-dev +version: 7.3.2-dev groups: go dbscheme: go.dbscheme extractor: go diff --git a/go/ql/src/CHANGELOG.md b/go/ql/src/CHANGELOG.md index 8b7e75f28b40..96239d742d4a 100644 --- a/go/ql/src/CHANGELOG.md +++ b/go/ql/src/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.6.10 + +No user-facing changes. + ## 1.6.9 No user-facing changes. diff --git a/go/ql/src/change-notes/released/1.6.10.md b/go/ql/src/change-notes/released/1.6.10.md new file mode 100644 index 000000000000..0c6a14492ed0 --- /dev/null +++ b/go/ql/src/change-notes/released/1.6.10.md @@ -0,0 +1,3 @@ +## 1.6.10 + +No user-facing changes. diff --git a/go/ql/src/codeql-pack.release.yml b/go/ql/src/codeql-pack.release.yml index 018779df35eb..995e7a94a564 100644 --- a/go/ql/src/codeql-pack.release.yml +++ b/go/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.6.9 +lastReleaseVersion: 1.6.10 diff --git a/go/ql/src/qlpack.yml b/go/ql/src/qlpack.yml index 64813b045694..fdfdd1f67432 100644 --- a/go/ql/src/qlpack.yml +++ b/go/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/go-queries -version: 1.6.10-dev +version: 1.6.11-dev groups: - go - queries diff --git a/java/ql/lib/CHANGELOG.md b/java/ql/lib/CHANGELOG.md index 4d0a6c8c20fd..13a7b5b7961b 100644 --- a/java/ql/lib/CHANGELOG.md +++ b/java/ql/lib/CHANGELOG.md @@ -1,3 +1,14 @@ +## 9.3.0 + +### New Features + +* Factories returned by the Apache Commons Secure XML (`org.apache.commons.xml.secure`) hardening library's `SecureDocumentBuilderFactory`, `SecureSAXParserFactory`, `SecureXMLInputFactory`, `SecureTransformerFactory` and `SecureSchemaFactory` classes are now recognized as safely configured by the XXE query. +* A new extensible class `SafeXmlFactorySource` was added to `semmle.code.java.security.XmlParsers` for modeling sources of pre-hardened JAXP factories. + +### Minor Analysis Improvements + +* Added modeling for the Micronaut framework, including HTTP controllers, WebSocket endpoints, configuration injection, data access, security annotations, and HTTP client sinks. + ## 9.2.4 ### Minor Analysis Improvements diff --git a/java/ql/lib/change-notes/2026-02-27-micronaut.md b/java/ql/lib/change-notes/2026-02-27-micronaut.md deleted file mode 100644 index 36c978c372a7..000000000000 --- a/java/ql/lib/change-notes/2026-02-27-micronaut.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* Added modeling for the Micronaut framework, including HTTP controllers, WebSocket endpoints, configuration injection, data access, security annotations, and HTTP client sinks. diff --git a/java/ql/lib/change-notes/2026-08-02-apache-commons-secure-xml.md b/java/ql/lib/change-notes/released/9.3.0.md similarity index 65% rename from java/ql/lib/change-notes/2026-08-02-apache-commons-secure-xml.md rename to java/ql/lib/change-notes/released/9.3.0.md index 898255b12458..efabbd03ca3c 100644 --- a/java/ql/lib/change-notes/2026-08-02-apache-commons-secure-xml.md +++ b/java/ql/lib/change-notes/released/9.3.0.md @@ -1,5 +1,10 @@ ---- -category: feature ---- +## 9.3.0 + +### New Features + * Factories returned by the Apache Commons Secure XML (`org.apache.commons.xml.secure`) hardening library's `SecureDocumentBuilderFactory`, `SecureSAXParserFactory`, `SecureXMLInputFactory`, `SecureTransformerFactory` and `SecureSchemaFactory` classes are now recognized as safely configured by the XXE query. * A new extensible class `SafeXmlFactorySource` was added to `semmle.code.java.security.XmlParsers` for modeling sources of pre-hardened JAXP factories. + +### Minor Analysis Improvements + +* Added modeling for the Micronaut framework, including HTTP controllers, WebSocket endpoints, configuration injection, data access, security annotations, and HTTP client sinks. diff --git a/java/ql/lib/codeql-pack.release.yml b/java/ql/lib/codeql-pack.release.yml index 19834a650c92..a806354ee450 100644 --- a/java/ql/lib/codeql-pack.release.yml +++ b/java/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 9.2.4 +lastReleaseVersion: 9.3.0 diff --git a/java/ql/lib/qlpack.yml b/java/ql/lib/qlpack.yml index 0beb3b3caa70..d6aefad45233 100644 --- a/java/ql/lib/qlpack.yml +++ b/java/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/java-all -version: 9.2.5-dev +version: 9.3.1-dev groups: java dbscheme: config/semmlecode.dbscheme extractor: java diff --git a/java/ql/src/CHANGELOG.md b/java/ql/src/CHANGELOG.md index 2ff710125824..0bb36a39ed24 100644 --- a/java/ql/src/CHANGELOG.md +++ b/java/ql/src/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.11.10 + +No user-facing changes. + ## 1.11.9 No user-facing changes. diff --git a/java/ql/src/change-notes/released/1.11.10.md b/java/ql/src/change-notes/released/1.11.10.md new file mode 100644 index 000000000000..735d0b8ceb75 --- /dev/null +++ b/java/ql/src/change-notes/released/1.11.10.md @@ -0,0 +1,3 @@ +## 1.11.10 + +No user-facing changes. diff --git a/java/ql/src/codeql-pack.release.yml b/java/ql/src/codeql-pack.release.yml index ea2e740768c2..ae9cd379d8c8 100644 --- a/java/ql/src/codeql-pack.release.yml +++ b/java/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.11.9 +lastReleaseVersion: 1.11.10 diff --git a/java/ql/src/qlpack.yml b/java/ql/src/qlpack.yml index 6b312fc5dc44..1bb0cdc16c09 100644 --- a/java/ql/src/qlpack.yml +++ b/java/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/java-queries -version: 1.11.10-dev +version: 1.11.11-dev groups: - java - queries diff --git a/javascript/ql/lib/CHANGELOG.md b/javascript/ql/lib/CHANGELOG.md index f83e33346d66..c4910f0c369c 100644 --- a/javascript/ql/lib/CHANGELOG.md +++ b/javascript/ql/lib/CHANGELOG.md @@ -1,3 +1,7 @@ +## 2.10.1 + +No user-facing changes. + ## 2.10.0 ### New Features diff --git a/javascript/ql/lib/change-notes/released/2.10.1.md b/javascript/ql/lib/change-notes/released/2.10.1.md new file mode 100644 index 000000000000..e1113832b1c6 --- /dev/null +++ b/javascript/ql/lib/change-notes/released/2.10.1.md @@ -0,0 +1,3 @@ +## 2.10.1 + +No user-facing changes. diff --git a/javascript/ql/lib/codeql-pack.release.yml b/javascript/ql/lib/codeql-pack.release.yml index ffff75a8d4c2..1366256715eb 100644 --- a/javascript/ql/lib/codeql-pack.release.yml +++ b/javascript/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 2.10.0 +lastReleaseVersion: 2.10.1 diff --git a/javascript/ql/lib/qlpack.yml b/javascript/ql/lib/qlpack.yml index 0a74e2c419ac..93c4370aab6d 100644 --- a/javascript/ql/lib/qlpack.yml +++ b/javascript/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/javascript-all -version: 2.10.1-dev +version: 2.10.2-dev groups: javascript dbscheme: semmlecode.javascript.dbscheme extractor: javascript diff --git a/javascript/ql/src/CHANGELOG.md b/javascript/ql/src/CHANGELOG.md index 9a958424d795..541393cea333 100644 --- a/javascript/ql/src/CHANGELOG.md +++ b/javascript/ql/src/CHANGELOG.md @@ -1,3 +1,9 @@ +## 2.4.5 + +### Minor Analysis Improvements + +* HTML files are now included in file-coverage stats, and will start showing up on the status page for CodeQL under "Scanned Files". + ## 2.4.4 ### Minor Analysis Improvements diff --git a/javascript/ql/src/change-notes/2026-09-02-html-coverage.md b/javascript/ql/src/change-notes/released/2.4.5.md similarity index 75% rename from javascript/ql/src/change-notes/2026-09-02-html-coverage.md rename to javascript/ql/src/change-notes/released/2.4.5.md index 793fd10845e1..1aa2fab3f616 100644 --- a/javascript/ql/src/change-notes/2026-09-02-html-coverage.md +++ b/javascript/ql/src/change-notes/released/2.4.5.md @@ -1,4 +1,5 @@ ---- -category: minorAnalysis ---- +## 2.4.5 + +### Minor Analysis Improvements + * HTML files are now included in file-coverage stats, and will start showing up on the status page for CodeQL under "Scanned Files". diff --git a/javascript/ql/src/codeql-pack.release.yml b/javascript/ql/src/codeql-pack.release.yml index 2facd66a43f4..4d5f66ce2c87 100644 --- a/javascript/ql/src/codeql-pack.release.yml +++ b/javascript/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 2.4.4 +lastReleaseVersion: 2.4.5 diff --git a/javascript/ql/src/qlpack.yml b/javascript/ql/src/qlpack.yml index bdefbdee61f7..456c7f4ca7b5 100644 --- a/javascript/ql/src/qlpack.yml +++ b/javascript/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/javascript-queries -version: 2.4.5-dev +version: 2.4.6-dev groups: - javascript - queries diff --git a/misc/suite-helpers/CHANGELOG.md b/misc/suite-helpers/CHANGELOG.md index 097e573de503..4289e0e8c4f7 100644 --- a/misc/suite-helpers/CHANGELOG.md +++ b/misc/suite-helpers/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.57 + +No user-facing changes. + ## 1.0.56 No user-facing changes. diff --git a/misc/suite-helpers/change-notes/released/1.0.57.md b/misc/suite-helpers/change-notes/released/1.0.57.md new file mode 100644 index 000000000000..18a94c4bca4a --- /dev/null +++ b/misc/suite-helpers/change-notes/released/1.0.57.md @@ -0,0 +1,3 @@ +## 1.0.57 + +No user-facing changes. diff --git a/misc/suite-helpers/codeql-pack.release.yml b/misc/suite-helpers/codeql-pack.release.yml index 9bb27b4fdb71..08ea3909354f 100644 --- a/misc/suite-helpers/codeql-pack.release.yml +++ b/misc/suite-helpers/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.56 +lastReleaseVersion: 1.0.57 diff --git a/misc/suite-helpers/qlpack.yml b/misc/suite-helpers/qlpack.yml index be95f2ac4322..1c27d6177555 100644 --- a/misc/suite-helpers/qlpack.yml +++ b/misc/suite-helpers/qlpack.yml @@ -1,4 +1,4 @@ name: codeql/suite-helpers -version: 1.0.57-dev +version: 1.0.58-dev groups: shared warnOnImplicitThis: true diff --git a/python/ql/lib/CHANGELOG.md b/python/ql/lib/CHANGELOG.md index 51d7011de576..ec64251b69d5 100644 --- a/python/ql/lib/CHANGELOG.md +++ b/python/ql/lib/CHANGELOG.md @@ -1,3 +1,10 @@ +## 7.2.5 + +### Bug Fixes + +* Fixed a bug where a Python file could be silently dropped from the analysis (with a spurious "A parse error occurred" diagnostic) when it contained a string literal, comment, or identifier with a character such as the U+FE0F emoji variation selector, a U+200D zero width joiner, or a combining accent. +* Fixed the extraction of PEP 758 `except A, B:` clauses by the default (non-tree-sitter) Python parser. Previously the second exception type was extracted as a Python 2 style alias binding, so it was recorded as a `Store` rather than a use. This caused false positives from queries that reason about whether a name is used, such as `py/unused-import`. When extracting Python 2 (`--lang=2`), `except A, e:` continues to bind `e` as an alias, since that is what the syntax means in that version. + ## 7.2.4 ### Minor Analysis Improvements diff --git a/python/ql/lib/change-notes/2026-08-27-tsg-parser-unicode-escapes.md b/python/ql/lib/change-notes/2026-08-27-tsg-parser-unicode-escapes.md deleted file mode 100644 index 56b70081d529..000000000000 --- a/python/ql/lib/change-notes/2026-08-27-tsg-parser-unicode-escapes.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: fix ---- -* Fixed a bug where a Python file could be silently dropped from the analysis (with a spurious "A parse error occurred" diagnostic) when it contained a string literal, comment, or identifier with a character such as the U+FE0F emoji variation selector, a U+200D zero width joiner, or a combining accent. diff --git a/python/ql/lib/change-notes/2026-08-19-legacy-parser-relaxed-except.md b/python/ql/lib/change-notes/released/7.2.5.md similarity index 60% rename from python/ql/lib/change-notes/2026-08-19-legacy-parser-relaxed-except.md rename to python/ql/lib/change-notes/released/7.2.5.md index 5e7681b2436f..c3e78fbb5fcc 100644 --- a/python/ql/lib/change-notes/2026-08-19-legacy-parser-relaxed-except.md +++ b/python/ql/lib/change-notes/released/7.2.5.md @@ -1,4 +1,6 @@ ---- -category: fix ---- +## 7.2.5 + +### Bug Fixes + +* Fixed a bug where a Python file could be silently dropped from the analysis (with a spurious "A parse error occurred" diagnostic) when it contained a string literal, comment, or identifier with a character such as the U+FE0F emoji variation selector, a U+200D zero width joiner, or a combining accent. * Fixed the extraction of PEP 758 `except A, B:` clauses by the default (non-tree-sitter) Python parser. Previously the second exception type was extracted as a Python 2 style alias binding, so it was recorded as a `Store` rather than a use. This caused false positives from queries that reason about whether a name is used, such as `py/unused-import`. When extracting Python 2 (`--lang=2`), `except A, e:` continues to bind `e` as an alias, since that is what the syntax means in that version. diff --git a/python/ql/lib/codeql-pack.release.yml b/python/ql/lib/codeql-pack.release.yml index 330556d11a76..c6aa7ff5b753 100644 --- a/python/ql/lib/codeql-pack.release.yml +++ b/python/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 7.2.4 +lastReleaseVersion: 7.2.5 diff --git a/python/ql/lib/qlpack.yml b/python/ql/lib/qlpack.yml index 46c4b9e2e00e..ad9d7605202a 100644 --- a/python/ql/lib/qlpack.yml +++ b/python/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/python-all -version: 7.2.5-dev +version: 7.2.6-dev groups: python dbscheme: semmlecode.python.dbscheme extractor: python diff --git a/python/ql/src/CHANGELOG.md b/python/ql/src/CHANGELOG.md index da09ff7f9d50..874d180f72cc 100644 --- a/python/ql/src/CHANGELOG.md +++ b/python/ql/src/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.8.10 + +No user-facing changes. + ## 1.8.9 No user-facing changes. diff --git a/python/ql/src/change-notes/released/1.8.10.md b/python/ql/src/change-notes/released/1.8.10.md new file mode 100644 index 000000000000..7a74b9d2cc34 --- /dev/null +++ b/python/ql/src/change-notes/released/1.8.10.md @@ -0,0 +1,3 @@ +## 1.8.10 + +No user-facing changes. diff --git a/python/ql/src/codeql-pack.release.yml b/python/ql/src/codeql-pack.release.yml index 2fed7501f873..b615673a3ce0 100644 --- a/python/ql/src/codeql-pack.release.yml +++ b/python/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.8.9 +lastReleaseVersion: 1.8.10 diff --git a/python/ql/src/qlpack.yml b/python/ql/src/qlpack.yml index 9778815a4631..70ce9eeef942 100644 --- a/python/ql/src/qlpack.yml +++ b/python/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/python-queries -version: 1.8.10-dev +version: 1.8.11-dev groups: - python - queries diff --git a/ruby/ql/lib/CHANGELOG.md b/ruby/ql/lib/CHANGELOG.md index f9916662c642..056f71cef95e 100644 --- a/ruby/ql/lib/CHANGELOG.md +++ b/ruby/ql/lib/CHANGELOG.md @@ -1,3 +1,19 @@ +## 7.0.0 + +### Breaking Changes + +* The Ruby control flow graph implementation has been completely replaced. This + affects a number of queries slightly. The CFG now includes additional nodes + to more accurately represent certain constructs. This also means that any + existing code that implicitly relies on very specific details about the CFG + may need to be updated. The CFG no longer uses splitting, which means that + AST nodes now have a unique CFG node representation. In particular, + `ControlFlowNode.getAstNode` has changed its meaning. The AST-to-CFG mapping + remains one-to-many, but now for a different reason. It used to be because of + splitting, but now it's because of additional "helper" CFG nodes. To get the + (now canonical) CFG node for a given AST node, use + `Stmt.getControlFlowNode()` instead. + ## 6.0.4 ### Minor Analysis Improvements diff --git a/ruby/ql/lib/change-notes/2026-08-24-cfg-swap.md b/ruby/ql/lib/change-notes/released/7.0.0.md similarity index 96% rename from ruby/ql/lib/change-notes/2026-08-24-cfg-swap.md rename to ruby/ql/lib/change-notes/released/7.0.0.md index a428124f0a77..48882586df42 100644 --- a/ruby/ql/lib/change-notes/2026-08-24-cfg-swap.md +++ b/ruby/ql/lib/change-notes/released/7.0.0.md @@ -1,6 +1,7 @@ ---- -category: breaking ---- +## 7.0.0 + +### Breaking Changes + * The Ruby control flow graph implementation has been completely replaced. This affects a number of queries slightly. The CFG now includes additional nodes to more accurately represent certain constructs. This also means that any diff --git a/ruby/ql/lib/codeql-pack.release.yml b/ruby/ql/lib/codeql-pack.release.yml index ae1f15cd344a..e0db21c78694 100644 --- a/ruby/ql/lib/codeql-pack.release.yml +++ b/ruby/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 6.0.4 +lastReleaseVersion: 7.0.0 diff --git a/ruby/ql/lib/qlpack.yml b/ruby/ql/lib/qlpack.yml index 8071a411828b..f38a7120a31f 100644 --- a/ruby/ql/lib/qlpack.yml +++ b/ruby/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/ruby-all -version: 6.0.5-dev +version: 7.0.1-dev groups: ruby extractor: ruby dbscheme: ruby.dbscheme diff --git a/ruby/ql/src/CHANGELOG.md b/ruby/ql/src/CHANGELOG.md index 312e56c3716e..c8a0fd7cbbc3 100644 --- a/ruby/ql/src/CHANGELOG.md +++ b/ruby/ql/src/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.6.10 + +No user-facing changes. + ## 1.6.9 No user-facing changes. diff --git a/ruby/ql/src/change-notes/released/1.6.10.md b/ruby/ql/src/change-notes/released/1.6.10.md new file mode 100644 index 000000000000..0c6a14492ed0 --- /dev/null +++ b/ruby/ql/src/change-notes/released/1.6.10.md @@ -0,0 +1,3 @@ +## 1.6.10 + +No user-facing changes. diff --git a/ruby/ql/src/codeql-pack.release.yml b/ruby/ql/src/codeql-pack.release.yml index 018779df35eb..995e7a94a564 100644 --- a/ruby/ql/src/codeql-pack.release.yml +++ b/ruby/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.6.9 +lastReleaseVersion: 1.6.10 diff --git a/ruby/ql/src/qlpack.yml b/ruby/ql/src/qlpack.yml index 872cf18c8e03..d532c03248a0 100644 --- a/ruby/ql/src/qlpack.yml +++ b/ruby/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/ruby-queries -version: 1.6.10-dev +version: 1.6.11-dev groups: - ruby - queries diff --git a/rust/ql/lib/CHANGELOG.md b/rust/ql/lib/CHANGELOG.md index 4ec33279ba1b..26e0631f2ced 100644 --- a/rust/ql/lib/CHANGELOG.md +++ b/rust/ql/lib/CHANGELOG.md @@ -1,3 +1,11 @@ +## 0.2.21 + +### Minor Analysis Improvements + +* Canonical paths for Rust trait items now use the format `::item` instead of + `crate::Trait::item`. Custom data extension models that reference trait items must be + updated to use the new format. + ## 0.2.20 ### Major Analysis Improvements diff --git a/rust/ql/lib/change-notes/2026-08-28-angle-bracket-trait-canonical-paths.md b/rust/ql/lib/change-notes/released/0.2.21.md similarity index 82% rename from rust/ql/lib/change-notes/2026-08-28-angle-bracket-trait-canonical-paths.md rename to rust/ql/lib/change-notes/released/0.2.21.md index 280f78d5555b..bf7b2c0c0178 100644 --- a/rust/ql/lib/change-notes/2026-08-28-angle-bracket-trait-canonical-paths.md +++ b/rust/ql/lib/change-notes/released/0.2.21.md @@ -1,6 +1,7 @@ ---- -category: minorAnalysis ---- +## 0.2.21 + +### Minor Analysis Improvements + * Canonical paths for Rust trait items now use the format `::item` instead of `crate::Trait::item`. Custom data extension models that reference trait items must be updated to use the new format. diff --git a/rust/ql/lib/codeql-pack.release.yml b/rust/ql/lib/codeql-pack.release.yml index 7c91e0e29ffa..8d4f094a4664 100644 --- a/rust/ql/lib/codeql-pack.release.yml +++ b/rust/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.2.20 +lastReleaseVersion: 0.2.21 diff --git a/rust/ql/lib/qlpack.yml b/rust/ql/lib/qlpack.yml index 59a2c38c8a2b..bb31a181ec16 100644 --- a/rust/ql/lib/qlpack.yml +++ b/rust/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/rust-all -version: 0.2.21-dev +version: 0.2.22-dev groups: rust extractor: rust dbscheme: rust.dbscheme diff --git a/rust/ql/src/CHANGELOG.md b/rust/ql/src/CHANGELOG.md index 5a8f3ea1b9a5..91b75ac72346 100644 --- a/rust/ql/src/CHANGELOG.md +++ b/rust/ql/src/CHANGELOG.md @@ -1,3 +1,15 @@ +## 0.1.42 + +### New Queries + +* Added a new query, `rust/command-line-injection`, to detect uncontrolled command lines. + +### Minor Analysis Improvements + +* The `rust/hard-coded-cryptographic-value` query has been adjusted to produce +fewer results in certain situations where many results were being produced with very similar source locations. +* The `rust/unused-variable` query no longer reports variables in functions containing the standard `todo!()` or `unimplemented!()` macros. + ## 0.1.41 No user-facing changes. diff --git a/rust/ql/src/change-notes/2026-08-11-command-injection.md b/rust/ql/src/change-notes/2026-08-11-command-injection.md deleted file mode 100644 index 2175cc9cdf18..000000000000 --- a/rust/ql/src/change-notes/2026-08-11-command-injection.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: newQuery ---- -* Added a new query, `rust/command-line-injection`, to detect uncontrolled command lines. diff --git a/rust/ql/src/change-notes/2026-08-20-unused-variables-in-incomplete-functions.md b/rust/ql/src/change-notes/2026-08-20-unused-variables-in-incomplete-functions.md deleted file mode 100644 index 882c91178175..000000000000 --- a/rust/ql/src/change-notes/2026-08-20-unused-variables-in-incomplete-functions.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* The `rust/unused-variable` query no longer reports variables in functions containing the standard `todo!()` or `unimplemented!()` macros. \ No newline at end of file diff --git a/rust/ql/src/change-notes/2026-08-25-hardcoded-cryptographic-match-expressions.md b/rust/ql/src/change-notes/2026-08-25-hardcoded-cryptographic-match-expressions.md deleted file mode 100644 index b2c71664f87a..000000000000 --- a/rust/ql/src/change-notes/2026-08-25-hardcoded-cryptographic-match-expressions.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -category: minorAnalysis ---- -* The `rust/hard-coded-cryptographic-value` query has been adjusted to produce -fewer results in certain situations where many results were being produced with very similar source locations. diff --git a/rust/ql/src/change-notes/released/0.1.42.md b/rust/ql/src/change-notes/released/0.1.42.md new file mode 100644 index 000000000000..617d6a48de02 --- /dev/null +++ b/rust/ql/src/change-notes/released/0.1.42.md @@ -0,0 +1,11 @@ +## 0.1.42 + +### New Queries + +* Added a new query, `rust/command-line-injection`, to detect uncontrolled command lines. + +### Minor Analysis Improvements + +* The `rust/hard-coded-cryptographic-value` query has been adjusted to produce +fewer results in certain situations where many results were being produced with very similar source locations. +* The `rust/unused-variable` query no longer reports variables in functions containing the standard `todo!()` or `unimplemented!()` macros. diff --git a/rust/ql/src/codeql-pack.release.yml b/rust/ql/src/codeql-pack.release.yml index 38f91b8ed622..55593f737cc9 100644 --- a/rust/ql/src/codeql-pack.release.yml +++ b/rust/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.1.41 +lastReleaseVersion: 0.1.42 diff --git a/rust/ql/src/qlpack.yml b/rust/ql/src/qlpack.yml index b4048003f9cf..dc4e53aeaf81 100644 --- a/rust/ql/src/qlpack.yml +++ b/rust/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/rust-queries -version: 0.1.42-dev +version: 0.1.43-dev groups: - rust - queries diff --git a/shared/concepts/CHANGELOG.md b/shared/concepts/CHANGELOG.md index 6a88efccf19f..e399ac467e78 100644 --- a/shared/concepts/CHANGELOG.md +++ b/shared/concepts/CHANGELOG.md @@ -1,3 +1,7 @@ +## 0.0.31 + +No user-facing changes. + ## 0.0.30 No user-facing changes. diff --git a/shared/concepts/change-notes/released/0.0.31.md b/shared/concepts/change-notes/released/0.0.31.md new file mode 100644 index 000000000000..99e11d52c92a --- /dev/null +++ b/shared/concepts/change-notes/released/0.0.31.md @@ -0,0 +1,3 @@ +## 0.0.31 + +No user-facing changes. diff --git a/shared/concepts/codeql-pack.release.yml b/shared/concepts/codeql-pack.release.yml index 0c61b463bab3..54b504d06ecb 100644 --- a/shared/concepts/codeql-pack.release.yml +++ b/shared/concepts/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.0.30 +lastReleaseVersion: 0.0.31 diff --git a/shared/concepts/qlpack.yml b/shared/concepts/qlpack.yml index 6a1db5dc8858..677235474b91 100644 --- a/shared/concepts/qlpack.yml +++ b/shared/concepts/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/concepts -version: 0.0.31-dev +version: 0.0.32-dev groups: shared library: true dependencies: diff --git a/shared/controlflow/CHANGELOG.md b/shared/controlflow/CHANGELOG.md index 76ba233c908f..5edd14954f3e 100644 --- a/shared/controlflow/CHANGELOG.md +++ b/shared/controlflow/CHANGELOG.md @@ -1,3 +1,7 @@ +## 2.0.41 + +No user-facing changes. + ## 2.0.40 No user-facing changes. diff --git a/shared/controlflow/change-notes/released/2.0.41.md b/shared/controlflow/change-notes/released/2.0.41.md new file mode 100644 index 000000000000..5b519388ce82 --- /dev/null +++ b/shared/controlflow/change-notes/released/2.0.41.md @@ -0,0 +1,3 @@ +## 2.0.41 + +No user-facing changes. diff --git a/shared/controlflow/codeql-pack.release.yml b/shared/controlflow/codeql-pack.release.yml index df31666e556c..dcd61b02de59 100644 --- a/shared/controlflow/codeql-pack.release.yml +++ b/shared/controlflow/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 2.0.40 +lastReleaseVersion: 2.0.41 diff --git a/shared/controlflow/qlpack.yml b/shared/controlflow/qlpack.yml index 9c7448a0c159..66ae31f61364 100644 --- a/shared/controlflow/qlpack.yml +++ b/shared/controlflow/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/controlflow -version: 2.0.41-dev +version: 2.0.42-dev groups: shared library: true dependencies: diff --git a/shared/dataflow/CHANGELOG.md b/shared/dataflow/CHANGELOG.md index 17b7451f2d4d..f42b3d852dc7 100644 --- a/shared/dataflow/CHANGELOG.md +++ b/shared/dataflow/CHANGELOG.md @@ -1,3 +1,7 @@ +## 2.1.13 + +No user-facing changes. + ## 2.1.12 No user-facing changes. diff --git a/shared/dataflow/change-notes/released/2.1.13.md b/shared/dataflow/change-notes/released/2.1.13.md new file mode 100644 index 000000000000..52b732297b8c --- /dev/null +++ b/shared/dataflow/change-notes/released/2.1.13.md @@ -0,0 +1,3 @@ +## 2.1.13 + +No user-facing changes. diff --git a/shared/dataflow/codeql-pack.release.yml b/shared/dataflow/codeql-pack.release.yml index 64ef0f5a22c1..77d1ddbc8f91 100644 --- a/shared/dataflow/codeql-pack.release.yml +++ b/shared/dataflow/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 2.1.12 +lastReleaseVersion: 2.1.13 diff --git a/shared/dataflow/qlpack.yml b/shared/dataflow/qlpack.yml index 133b33e834d8..134205735fe7 100644 --- a/shared/dataflow/qlpack.yml +++ b/shared/dataflow/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/dataflow -version: 2.1.13-dev +version: 2.1.14-dev groups: shared library: true dependencies: diff --git a/shared/mad/CHANGELOG.md b/shared/mad/CHANGELOG.md index 1f510be02756..0aa8d83bb6fa 100644 --- a/shared/mad/CHANGELOG.md +++ b/shared/mad/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.57 + +No user-facing changes. + ## 1.0.56 No user-facing changes. diff --git a/shared/mad/change-notes/released/1.0.57.md b/shared/mad/change-notes/released/1.0.57.md new file mode 100644 index 000000000000..18a94c4bca4a --- /dev/null +++ b/shared/mad/change-notes/released/1.0.57.md @@ -0,0 +1,3 @@ +## 1.0.57 + +No user-facing changes. diff --git a/shared/mad/codeql-pack.release.yml b/shared/mad/codeql-pack.release.yml index 9bb27b4fdb71..08ea3909354f 100644 --- a/shared/mad/codeql-pack.release.yml +++ b/shared/mad/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.56 +lastReleaseVersion: 1.0.57 diff --git a/shared/mad/qlpack.yml b/shared/mad/qlpack.yml index 28a84ca5aa86..783f372bc478 100644 --- a/shared/mad/qlpack.yml +++ b/shared/mad/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/mad -version: 1.0.57-dev +version: 1.0.58-dev groups: shared library: true dependencies: diff --git a/shared/namebinding/CHANGELOG.md b/shared/namebinding/CHANGELOG.md index 9b269441c000..ad2e63eb4709 100644 --- a/shared/namebinding/CHANGELOG.md +++ b/shared/namebinding/CHANGELOG.md @@ -1,3 +1,7 @@ +## 0.0.6 + +No user-facing changes. + ## 0.0.5 No user-facing changes. diff --git a/shared/namebinding/change-notes/released/0.0.6.md b/shared/namebinding/change-notes/released/0.0.6.md new file mode 100644 index 000000000000..ccbce856079d --- /dev/null +++ b/shared/namebinding/change-notes/released/0.0.6.md @@ -0,0 +1,3 @@ +## 0.0.6 + +No user-facing changes. diff --git a/shared/namebinding/codeql-pack.release.yml b/shared/namebinding/codeql-pack.release.yml index bb45a1ab0182..cf398ce02aa4 100644 --- a/shared/namebinding/codeql-pack.release.yml +++ b/shared/namebinding/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.0.5 +lastReleaseVersion: 0.0.6 diff --git a/shared/namebinding/qlpack.yml b/shared/namebinding/qlpack.yml index 6ab033915b70..af4358254944 100644 --- a/shared/namebinding/qlpack.yml +++ b/shared/namebinding/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/namebinding -version: 0.0.6-dev +version: 0.0.7-dev groups: shared library: true dependencies: diff --git a/shared/quantum/CHANGELOG.md b/shared/quantum/CHANGELOG.md index fd3064b1a947..4916c26d385a 100644 --- a/shared/quantum/CHANGELOG.md +++ b/shared/quantum/CHANGELOG.md @@ -1,3 +1,7 @@ +## 0.0.35 + +No user-facing changes. + ## 0.0.34 No user-facing changes. diff --git a/shared/quantum/change-notes/released/0.0.35.md b/shared/quantum/change-notes/released/0.0.35.md new file mode 100644 index 000000000000..1ffec5217282 --- /dev/null +++ b/shared/quantum/change-notes/released/0.0.35.md @@ -0,0 +1,3 @@ +## 0.0.35 + +No user-facing changes. diff --git a/shared/quantum/codeql-pack.release.yml b/shared/quantum/codeql-pack.release.yml index 6fb3b6253bb9..143c97892032 100644 --- a/shared/quantum/codeql-pack.release.yml +++ b/shared/quantum/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.0.34 +lastReleaseVersion: 0.0.35 diff --git a/shared/quantum/qlpack.yml b/shared/quantum/qlpack.yml index 73a8ef49ee5c..044e243531fd 100644 --- a/shared/quantum/qlpack.yml +++ b/shared/quantum/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/quantum -version: 0.0.35-dev +version: 0.0.36-dev groups: shared library: true dependencies: diff --git a/shared/rangeanalysis/CHANGELOG.md b/shared/rangeanalysis/CHANGELOG.md index d3e4d9e87c60..965a43bc55b1 100644 --- a/shared/rangeanalysis/CHANGELOG.md +++ b/shared/rangeanalysis/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.57 + +No user-facing changes. + ## 1.0.56 No user-facing changes. diff --git a/shared/rangeanalysis/change-notes/released/1.0.57.md b/shared/rangeanalysis/change-notes/released/1.0.57.md new file mode 100644 index 000000000000..18a94c4bca4a --- /dev/null +++ b/shared/rangeanalysis/change-notes/released/1.0.57.md @@ -0,0 +1,3 @@ +## 1.0.57 + +No user-facing changes. diff --git a/shared/rangeanalysis/codeql-pack.release.yml b/shared/rangeanalysis/codeql-pack.release.yml index 9bb27b4fdb71..08ea3909354f 100644 --- a/shared/rangeanalysis/codeql-pack.release.yml +++ b/shared/rangeanalysis/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.56 +lastReleaseVersion: 1.0.57 diff --git a/shared/rangeanalysis/qlpack.yml b/shared/rangeanalysis/qlpack.yml index c7a74dae7c26..6b4e8a5adede 100644 --- a/shared/rangeanalysis/qlpack.yml +++ b/shared/rangeanalysis/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/rangeanalysis -version: 1.0.57-dev +version: 1.0.58-dev groups: shared library: true dependencies: diff --git a/shared/regex/CHANGELOG.md b/shared/regex/CHANGELOG.md index 327845009d11..20e772df81ad 100644 --- a/shared/regex/CHANGELOG.md +++ b/shared/regex/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.57 + +No user-facing changes. + ## 1.0.56 No user-facing changes. diff --git a/shared/regex/change-notes/released/1.0.57.md b/shared/regex/change-notes/released/1.0.57.md new file mode 100644 index 000000000000..18a94c4bca4a --- /dev/null +++ b/shared/regex/change-notes/released/1.0.57.md @@ -0,0 +1,3 @@ +## 1.0.57 + +No user-facing changes. diff --git a/shared/regex/codeql-pack.release.yml b/shared/regex/codeql-pack.release.yml index 9bb27b4fdb71..08ea3909354f 100644 --- a/shared/regex/codeql-pack.release.yml +++ b/shared/regex/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.56 +lastReleaseVersion: 1.0.57 diff --git a/shared/regex/qlpack.yml b/shared/regex/qlpack.yml index 2afdc58e3d11..ad414ca86d3d 100644 --- a/shared/regex/qlpack.yml +++ b/shared/regex/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/regex -version: 1.0.57-dev +version: 1.0.58-dev groups: shared library: true dependencies: diff --git a/shared/ssa/CHANGELOG.md b/shared/ssa/CHANGELOG.md index 1cc5dec08b82..1ed23b3a72b6 100644 --- a/shared/ssa/CHANGELOG.md +++ b/shared/ssa/CHANGELOG.md @@ -1,3 +1,7 @@ +## 2.0.33 + +No user-facing changes. + ## 2.0.32 No user-facing changes. diff --git a/shared/ssa/change-notes/released/2.0.33.md b/shared/ssa/change-notes/released/2.0.33.md new file mode 100644 index 000000000000..d33a61332cf3 --- /dev/null +++ b/shared/ssa/change-notes/released/2.0.33.md @@ -0,0 +1,3 @@ +## 2.0.33 + +No user-facing changes. diff --git a/shared/ssa/codeql-pack.release.yml b/shared/ssa/codeql-pack.release.yml index 483a0d5db8ec..92e23200b4d6 100644 --- a/shared/ssa/codeql-pack.release.yml +++ b/shared/ssa/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 2.0.32 +lastReleaseVersion: 2.0.33 diff --git a/shared/ssa/qlpack.yml b/shared/ssa/qlpack.yml index c5c7755b1755..07e6041a5142 100644 --- a/shared/ssa/qlpack.yml +++ b/shared/ssa/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/ssa -version: 2.0.33-dev +version: 2.0.34-dev groups: shared library: true dependencies: diff --git a/shared/threat-models/CHANGELOG.md b/shared/threat-models/CHANGELOG.md index 7a0754e81b29..3a71bc3b5561 100644 --- a/shared/threat-models/CHANGELOG.md +++ b/shared/threat-models/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.57 + +No user-facing changes. + ## 1.0.56 No user-facing changes. diff --git a/shared/threat-models/change-notes/released/1.0.57.md b/shared/threat-models/change-notes/released/1.0.57.md new file mode 100644 index 000000000000..18a94c4bca4a --- /dev/null +++ b/shared/threat-models/change-notes/released/1.0.57.md @@ -0,0 +1,3 @@ +## 1.0.57 + +No user-facing changes. diff --git a/shared/threat-models/codeql-pack.release.yml b/shared/threat-models/codeql-pack.release.yml index 9bb27b4fdb71..08ea3909354f 100644 --- a/shared/threat-models/codeql-pack.release.yml +++ b/shared/threat-models/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.56 +lastReleaseVersion: 1.0.57 diff --git a/shared/threat-models/qlpack.yml b/shared/threat-models/qlpack.yml index a29a2c7dc6a0..84c172ce3f25 100644 --- a/shared/threat-models/qlpack.yml +++ b/shared/threat-models/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/threat-models -version: 1.0.57-dev +version: 1.0.58-dev library: true groups: shared dataExtensions: diff --git a/shared/tutorial/CHANGELOG.md b/shared/tutorial/CHANGELOG.md index df769dd96aec..b3541e1248f5 100644 --- a/shared/tutorial/CHANGELOG.md +++ b/shared/tutorial/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.57 + +No user-facing changes. + ## 1.0.56 No user-facing changes. diff --git a/shared/tutorial/change-notes/released/1.0.57.md b/shared/tutorial/change-notes/released/1.0.57.md new file mode 100644 index 000000000000..18a94c4bca4a --- /dev/null +++ b/shared/tutorial/change-notes/released/1.0.57.md @@ -0,0 +1,3 @@ +## 1.0.57 + +No user-facing changes. diff --git a/shared/tutorial/codeql-pack.release.yml b/shared/tutorial/codeql-pack.release.yml index 9bb27b4fdb71..08ea3909354f 100644 --- a/shared/tutorial/codeql-pack.release.yml +++ b/shared/tutorial/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.56 +lastReleaseVersion: 1.0.57 diff --git a/shared/tutorial/qlpack.yml b/shared/tutorial/qlpack.yml index b94e0b81dadc..fa374cda8f72 100644 --- a/shared/tutorial/qlpack.yml +++ b/shared/tutorial/qlpack.yml @@ -1,7 +1,7 @@ name: codeql/tutorial description: Library for the CodeQL detective tutorials, helping new users learn to write CodeQL queries. -version: 1.0.57-dev +version: 1.0.58-dev groups: shared library: true warnOnImplicitThis: true diff --git a/shared/typeflow/CHANGELOG.md b/shared/typeflow/CHANGELOG.md index 28d0101ccf54..ad7f55dd34bd 100644 --- a/shared/typeflow/CHANGELOG.md +++ b/shared/typeflow/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.57 + +No user-facing changes. + ## 1.0.56 No user-facing changes. diff --git a/shared/typeflow/change-notes/released/1.0.57.md b/shared/typeflow/change-notes/released/1.0.57.md new file mode 100644 index 000000000000..18a94c4bca4a --- /dev/null +++ b/shared/typeflow/change-notes/released/1.0.57.md @@ -0,0 +1,3 @@ +## 1.0.57 + +No user-facing changes. diff --git a/shared/typeflow/codeql-pack.release.yml b/shared/typeflow/codeql-pack.release.yml index 9bb27b4fdb71..08ea3909354f 100644 --- a/shared/typeflow/codeql-pack.release.yml +++ b/shared/typeflow/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.56 +lastReleaseVersion: 1.0.57 diff --git a/shared/typeflow/qlpack.yml b/shared/typeflow/qlpack.yml index 0475b6bf7325..4dd13d3aad94 100644 --- a/shared/typeflow/qlpack.yml +++ b/shared/typeflow/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/typeflow -version: 1.0.57-dev +version: 1.0.58-dev groups: shared library: true dependencies: diff --git a/shared/typeinference/CHANGELOG.md b/shared/typeinference/CHANGELOG.md index e34fb7c21ba1..6ab8c640bc68 100644 --- a/shared/typeinference/CHANGELOG.md +++ b/shared/typeinference/CHANGELOG.md @@ -1,3 +1,7 @@ +## 0.0.38 + +No user-facing changes. + ## 0.0.37 No user-facing changes. diff --git a/shared/typeinference/change-notes/released/0.0.38.md b/shared/typeinference/change-notes/released/0.0.38.md new file mode 100644 index 000000000000..6aef3fb33021 --- /dev/null +++ b/shared/typeinference/change-notes/released/0.0.38.md @@ -0,0 +1,3 @@ +## 0.0.38 + +No user-facing changes. diff --git a/shared/typeinference/codeql-pack.release.yml b/shared/typeinference/codeql-pack.release.yml index 7982dda40f4c..078a0e3aff01 100644 --- a/shared/typeinference/codeql-pack.release.yml +++ b/shared/typeinference/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.0.37 +lastReleaseVersion: 0.0.38 diff --git a/shared/typeinference/qlpack.yml b/shared/typeinference/qlpack.yml index 3cd87a73bdc2..68db81a4851b 100644 --- a/shared/typeinference/qlpack.yml +++ b/shared/typeinference/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/typeinference -version: 0.0.38-dev +version: 0.0.39-dev groups: shared library: true dependencies: diff --git a/shared/typetracking/CHANGELOG.md b/shared/typetracking/CHANGELOG.md index 60257ae7e1e0..2c6907a4eaae 100644 --- a/shared/typetracking/CHANGELOG.md +++ b/shared/typetracking/CHANGELOG.md @@ -1,3 +1,7 @@ +## 2.0.41 + +No user-facing changes. + ## 2.0.40 No user-facing changes. diff --git a/shared/typetracking/change-notes/released/2.0.41.md b/shared/typetracking/change-notes/released/2.0.41.md new file mode 100644 index 000000000000..5b519388ce82 --- /dev/null +++ b/shared/typetracking/change-notes/released/2.0.41.md @@ -0,0 +1,3 @@ +## 2.0.41 + +No user-facing changes. diff --git a/shared/typetracking/codeql-pack.release.yml b/shared/typetracking/codeql-pack.release.yml index df31666e556c..dcd61b02de59 100644 --- a/shared/typetracking/codeql-pack.release.yml +++ b/shared/typetracking/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 2.0.40 +lastReleaseVersion: 2.0.41 diff --git a/shared/typetracking/qlpack.yml b/shared/typetracking/qlpack.yml index eff084212ba2..9b52023e6343 100644 --- a/shared/typetracking/qlpack.yml +++ b/shared/typetracking/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/typetracking -version: 2.0.41-dev +version: 2.0.42-dev groups: shared library: true dependencies: diff --git a/shared/typos/CHANGELOG.md b/shared/typos/CHANGELOG.md index a43daa8503c9..503f9fa3d4f0 100644 --- a/shared/typos/CHANGELOG.md +++ b/shared/typos/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.57 + +No user-facing changes. + ## 1.0.56 No user-facing changes. diff --git a/shared/typos/change-notes/released/1.0.57.md b/shared/typos/change-notes/released/1.0.57.md new file mode 100644 index 000000000000..18a94c4bca4a --- /dev/null +++ b/shared/typos/change-notes/released/1.0.57.md @@ -0,0 +1,3 @@ +## 1.0.57 + +No user-facing changes. diff --git a/shared/typos/codeql-pack.release.yml b/shared/typos/codeql-pack.release.yml index 9bb27b4fdb71..08ea3909354f 100644 --- a/shared/typos/codeql-pack.release.yml +++ b/shared/typos/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.56 +lastReleaseVersion: 1.0.57 diff --git a/shared/typos/qlpack.yml b/shared/typos/qlpack.yml index 5933bd6862a1..ade80e7678f0 100644 --- a/shared/typos/qlpack.yml +++ b/shared/typos/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/typos -version: 1.0.57-dev +version: 1.0.58-dev groups: shared library: true warnOnImplicitThis: true diff --git a/shared/util/CHANGELOG.md b/shared/util/CHANGELOG.md index 194ea712d2ad..68a57b6e1bbc 100644 --- a/shared/util/CHANGELOG.md +++ b/shared/util/CHANGELOG.md @@ -1,3 +1,7 @@ +## 2.0.44 + +No user-facing changes. + ## 2.0.43 No user-facing changes. diff --git a/shared/util/change-notes/released/2.0.44.md b/shared/util/change-notes/released/2.0.44.md new file mode 100644 index 000000000000..47addacab148 --- /dev/null +++ b/shared/util/change-notes/released/2.0.44.md @@ -0,0 +1,3 @@ +## 2.0.44 + +No user-facing changes. diff --git a/shared/util/codeql-pack.release.yml b/shared/util/codeql-pack.release.yml index 26126cee2c6b..2032d0ef8b3f 100644 --- a/shared/util/codeql-pack.release.yml +++ b/shared/util/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 2.0.43 +lastReleaseVersion: 2.0.44 diff --git a/shared/util/qlpack.yml b/shared/util/qlpack.yml index c8f2c7a57343..0a61f3903159 100644 --- a/shared/util/qlpack.yml +++ b/shared/util/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/util -version: 2.0.44-dev +version: 2.0.45-dev groups: shared library: true dependencies: null diff --git a/shared/xml/CHANGELOG.md b/shared/xml/CHANGELOG.md index 8d1557082db1..19444d2622d1 100644 --- a/shared/xml/CHANGELOG.md +++ b/shared/xml/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.57 + +No user-facing changes. + ## 1.0.56 No user-facing changes. diff --git a/shared/xml/change-notes/released/1.0.57.md b/shared/xml/change-notes/released/1.0.57.md new file mode 100644 index 000000000000..18a94c4bca4a --- /dev/null +++ b/shared/xml/change-notes/released/1.0.57.md @@ -0,0 +1,3 @@ +## 1.0.57 + +No user-facing changes. diff --git a/shared/xml/codeql-pack.release.yml b/shared/xml/codeql-pack.release.yml index 9bb27b4fdb71..08ea3909354f 100644 --- a/shared/xml/codeql-pack.release.yml +++ b/shared/xml/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.56 +lastReleaseVersion: 1.0.57 diff --git a/shared/xml/qlpack.yml b/shared/xml/qlpack.yml index 71a98a37b522..133a3b9dac86 100644 --- a/shared/xml/qlpack.yml +++ b/shared/xml/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/xml -version: 1.0.57-dev +version: 1.0.58-dev groups: shared library: true dependencies: diff --git a/shared/yaml/CHANGELOG.md b/shared/yaml/CHANGELOG.md index 5a2e1a8833b0..8835951f9c51 100644 --- a/shared/yaml/CHANGELOG.md +++ b/shared/yaml/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.57 + +No user-facing changes. + ## 1.0.56 No user-facing changes. diff --git a/shared/yaml/change-notes/released/1.0.57.md b/shared/yaml/change-notes/released/1.0.57.md new file mode 100644 index 000000000000..18a94c4bca4a --- /dev/null +++ b/shared/yaml/change-notes/released/1.0.57.md @@ -0,0 +1,3 @@ +## 1.0.57 + +No user-facing changes. diff --git a/shared/yaml/codeql-pack.release.yml b/shared/yaml/codeql-pack.release.yml index 9bb27b4fdb71..08ea3909354f 100644 --- a/shared/yaml/codeql-pack.release.yml +++ b/shared/yaml/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.56 +lastReleaseVersion: 1.0.57 diff --git a/shared/yaml/qlpack.yml b/shared/yaml/qlpack.yml index 83ede2e7653b..14b67df2f8d1 100644 --- a/shared/yaml/qlpack.yml +++ b/shared/yaml/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/yaml -version: 1.0.57-dev +version: 1.0.58-dev groups: shared library: true warnOnImplicitThis: true diff --git a/swift/ql/lib/CHANGELOG.md b/swift/ql/lib/CHANGELOG.md index e71c0491bc0a..b907f330f976 100644 --- a/swift/ql/lib/CHANGELOG.md +++ b/swift/ql/lib/CHANGELOG.md @@ -1,3 +1,7 @@ +## 6.8.3 + +No user-facing changes. + ## 6.8.2 No user-facing changes. diff --git a/swift/ql/lib/change-notes/released/6.8.3.md b/swift/ql/lib/change-notes/released/6.8.3.md new file mode 100644 index 000000000000..d35c1fbb4ff4 --- /dev/null +++ b/swift/ql/lib/change-notes/released/6.8.3.md @@ -0,0 +1,3 @@ +## 6.8.3 + +No user-facing changes. diff --git a/swift/ql/lib/codeql-pack.release.yml b/swift/ql/lib/codeql-pack.release.yml index 42fdf5962a78..de8d19f816cf 100644 --- a/swift/ql/lib/codeql-pack.release.yml +++ b/swift/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 6.8.2 +lastReleaseVersion: 6.8.3 diff --git a/swift/ql/lib/qlpack.yml b/swift/ql/lib/qlpack.yml index f539a679b130..9806fded2032 100644 --- a/swift/ql/lib/qlpack.yml +++ b/swift/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/swift-all -version: 6.8.3-dev +version: 6.8.4-dev groups: swift extractor: swift dbscheme: swift.dbscheme diff --git a/swift/ql/src/CHANGELOG.md b/swift/ql/src/CHANGELOG.md index 25dde1dc3ab1..f828ae84a5ac 100644 --- a/swift/ql/src/CHANGELOG.md +++ b/swift/ql/src/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.3.10 + +No user-facing changes. + ## 1.3.9 No user-facing changes. diff --git a/swift/ql/src/change-notes/released/1.3.10.md b/swift/ql/src/change-notes/released/1.3.10.md new file mode 100644 index 000000000000..182c8ffe713a --- /dev/null +++ b/swift/ql/src/change-notes/released/1.3.10.md @@ -0,0 +1,3 @@ +## 1.3.10 + +No user-facing changes. diff --git a/swift/ql/src/codeql-pack.release.yml b/swift/ql/src/codeql-pack.release.yml index 5ce113f4464d..eb79ac3dca3f 100644 --- a/swift/ql/src/codeql-pack.release.yml +++ b/swift/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.3.9 +lastReleaseVersion: 1.3.10 diff --git a/swift/ql/src/qlpack.yml b/swift/ql/src/qlpack.yml index ca8bf05e942d..aa419cb33887 100644 --- a/swift/ql/src/qlpack.yml +++ b/swift/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/swift-queries -version: 1.3.10-dev +version: 1.3.11-dev groups: - swift - queries