From 9acbbb80493c04391ce06c9ecc2bc1b645602208 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" Date: Thu, 9 Jul 2026 16:48:01 +0000 Subject: [PATCH] Release preparation for version 2.26.1 --- actions/ql/lib/CHANGELOG.md | 4 +++ .../ql/lib/change-notes/released/0.4.39.md | 3 ++ actions/ql/lib/codeql-pack.release.yml | 2 +- actions/ql/lib/qlpack.yml | 2 +- actions/ql/src/CHANGELOG.md | 4 +++ .../ql/src/change-notes/released/0.6.31.md | 3 ++ actions/ql/src/codeql-pack.release.yml | 2 +- actions/ql/src/qlpack.yml | 2 +- cpp/ql/lib/CHANGELOG.md | 10 +++++++ ...6-30-variables-as-mad-sources-and-sinks.md | 4 --- .../12.0.0.md} | 13 ++++++--- cpp/ql/lib/codeql-pack.release.yml | 2 +- cpp/ql/lib/qlpack.yml | 2 +- cpp/ql/src/CHANGELOG.md | 6 ++++ .../1.7.0.md} | 7 +++-- cpp/ql/src/codeql-pack.release.yml | 2 +- cpp/ql/src/qlpack.yml | 2 +- .../ql/campaigns/Solorigate/lib/CHANGELOG.md | 4 +++ .../lib/change-notes/released/1.7.70.md | 3 ++ .../Solorigate/lib/codeql-pack.release.yml | 2 +- csharp/ql/campaigns/Solorigate/lib/qlpack.yml | 2 +- .../ql/campaigns/Solorigate/src/CHANGELOG.md | 4 +++ .../src/change-notes/released/1.7.70.md | 3 ++ .../Solorigate/src/codeql-pack.release.yml | 2 +- csharp/ql/campaigns/Solorigate/src/qlpack.yml | 2 +- csharp/ql/lib/CHANGELOG.md | 6 ++++ .../7.1.0.md} | 7 +++-- csharp/ql/lib/codeql-pack.release.yml | 2 +- csharp/ql/lib/qlpack.yml | 2 +- csharp/ql/src/CHANGELOG.md | 6 ++++ .../1.8.0.md} | 7 +++-- csharp/ql/src/codeql-pack.release.yml | 2 +- csharp/ql/src/qlpack.yml | 2 +- go/ql/consistency-queries/CHANGELOG.md | 4 +++ .../change-notes/released/1.0.53.md | 3 ++ .../codeql-pack.release.yml | 2 +- go/ql/consistency-queries/qlpack.yml | 2 +- go/ql/lib/CHANGELOG.md | 6 ++++ .../7.2.1.md} | 7 +++-- go/ql/lib/codeql-pack.release.yml | 2 +- go/ql/lib/qlpack.yml | 2 +- go/ql/src/CHANGELOG.md | 4 +++ go/ql/src/change-notes/released/1.6.6.md | 3 ++ go/ql/src/codeql-pack.release.yml | 2 +- go/ql/src/qlpack.yml | 2 +- java/ql/lib/CHANGELOG.md | 8 ++++++ .../2026-07-01-org.apache.poi-mads.md | 4 --- ...7-03-fix-pattern-sanitizer-tainted-path.md | 4 --- .../9.2.1.md} | 9 ++++-- java/ql/lib/codeql-pack.release.yml | 2 +- java/ql/lib/qlpack.yml | 2 +- java/ql/src/CHANGELOG.md | 4 +++ java/ql/src/change-notes/released/1.11.6.md | 3 ++ java/ql/src/codeql-pack.release.yml | 2 +- java/ql/src/qlpack.yml | 2 +- javascript/ql/lib/CHANGELOG.md | 6 ++++ .../2.8.1.md} | 7 +++-- javascript/ql/lib/codeql-pack.release.yml | 2 +- javascript/ql/lib/qlpack.yml | 2 +- javascript/ql/src/CHANGELOG.md | 4 +++ .../ql/src/change-notes/released/2.4.1.md | 3 ++ javascript/ql/src/codeql-pack.release.yml | 2 +- javascript/ql/src/qlpack.yml | 2 +- misc/suite-helpers/CHANGELOG.md | 4 +++ .../change-notes/released/1.0.53.md | 3 ++ misc/suite-helpers/codeql-pack.release.yml | 2 +- misc/suite-helpers/qlpack.yml | 2 +- python/ql/lib/CHANGELOG.md | 28 +++++++++++-------- .../7.2.1.md} | 9 +++--- python/ql/lib/codeql-pack.release.yml | 2 +- python/ql/lib/qlpack.yml | 2 +- python/ql/src/CHANGELOG.md | 4 +++ python/ql/src/change-notes/released/1.8.6.md | 3 ++ python/ql/src/codeql-pack.release.yml | 2 +- python/ql/src/qlpack.yml | 2 +- ruby/ql/lib/CHANGELOG.md | 4 +++ ruby/ql/lib/change-notes/released/6.0.1.md | 3 ++ ruby/ql/lib/codeql-pack.release.yml | 2 +- ruby/ql/lib/qlpack.yml | 2 +- ruby/ql/src/CHANGELOG.md | 4 +++ ruby/ql/src/change-notes/released/1.6.6.md | 3 ++ ruby/ql/src/codeql-pack.release.yml | 2 +- ruby/ql/src/qlpack.yml | 2 +- rust/ql/lib/CHANGELOG.md | 4 +++ rust/ql/lib/change-notes/released/0.2.17.md | 3 ++ rust/ql/lib/codeql-pack.release.yml | 2 +- rust/ql/lib/qlpack.yml | 2 +- rust/ql/src/CHANGELOG.md | 6 ++++ .../0.1.38.md} | 7 +++-- rust/ql/src/codeql-pack.release.yml | 2 +- rust/ql/src/qlpack.yml | 2 +- shared/concepts/CHANGELOG.md | 4 +++ .../concepts/change-notes/released/0.0.27.md | 3 ++ shared/concepts/codeql-pack.release.yml | 2 +- shared/concepts/qlpack.yml | 2 +- shared/controlflow/CHANGELOG.md | 4 +++ .../change-notes/released/2.0.37.md | 3 ++ shared/controlflow/codeql-pack.release.yml | 2 +- shared/controlflow/qlpack.yml | 2 +- shared/dataflow/CHANGELOG.md | 4 +++ .../dataflow/change-notes/released/2.1.9.md | 3 ++ shared/dataflow/codeql-pack.release.yml | 2 +- shared/dataflow/qlpack.yml | 2 +- shared/mad/CHANGELOG.md | 4 +++ shared/mad/change-notes/released/1.0.53.md | 3 ++ shared/mad/codeql-pack.release.yml | 2 +- shared/mad/qlpack.yml | 2 +- shared/namebinding/CHANGELOG.md | 4 +++ .../change-notes/released/0.0.2.md | 3 ++ shared/namebinding/codeql-pack.release.yml | 2 +- shared/namebinding/qlpack.yml | 2 +- shared/quantum/CHANGELOG.md | 4 +++ .../quantum/change-notes/released/0.0.31.md | 3 ++ shared/quantum/codeql-pack.release.yml | 2 +- shared/quantum/qlpack.yml | 2 +- shared/rangeanalysis/CHANGELOG.md | 4 +++ .../change-notes/released/1.0.53.md | 3 ++ shared/rangeanalysis/codeql-pack.release.yml | 2 +- shared/rangeanalysis/qlpack.yml | 2 +- shared/regex/CHANGELOG.md | 4 +++ shared/regex/change-notes/released/1.0.53.md | 3 ++ shared/regex/codeql-pack.release.yml | 2 +- shared/regex/qlpack.yml | 2 +- shared/ssa/CHANGELOG.md | 4 +++ shared/ssa/change-notes/released/2.0.29.md | 3 ++ shared/ssa/codeql-pack.release.yml | 2 +- shared/ssa/qlpack.yml | 2 +- shared/threat-models/CHANGELOG.md | 4 +++ .../change-notes/released/1.0.53.md | 3 ++ shared/threat-models/codeql-pack.release.yml | 2 +- shared/threat-models/qlpack.yml | 2 +- shared/tutorial/CHANGELOG.md | 4 +++ .../tutorial/change-notes/released/1.0.53.md | 3 ++ shared/tutorial/codeql-pack.release.yml | 2 +- shared/tutorial/qlpack.yml | 2 +- shared/typeflow/CHANGELOG.md | 4 +++ .../typeflow/change-notes/released/1.0.53.md | 3 ++ shared/typeflow/codeql-pack.release.yml | 2 +- shared/typeflow/qlpack.yml | 2 +- shared/typeinference/CHANGELOG.md | 4 +++ .../change-notes/released/0.0.34.md | 3 ++ shared/typeinference/codeql-pack.release.yml | 2 +- shared/typeinference/qlpack.yml | 2 +- shared/typetracking/CHANGELOG.md | 4 +++ .../change-notes/released/2.0.37.md | 3 ++ shared/typetracking/codeql-pack.release.yml | 2 +- shared/typetracking/qlpack.yml | 2 +- shared/typos/CHANGELOG.md | 4 +++ shared/typos/change-notes/released/1.0.53.md | 3 ++ shared/typos/codeql-pack.release.yml | 2 +- shared/typos/qlpack.yml | 2 +- shared/util/CHANGELOG.md | 4 +++ shared/util/change-notes/released/2.0.40.md | 3 ++ shared/util/codeql-pack.release.yml | 2 +- shared/util/qlpack.yml | 2 +- shared/xml/CHANGELOG.md | 4 +++ shared/xml/change-notes/released/1.0.53.md | 3 ++ shared/xml/codeql-pack.release.yml | 2 +- shared/xml/qlpack.yml | 2 +- shared/yaml/CHANGELOG.md | 4 +++ shared/yaml/change-notes/released/1.0.53.md | 3 ++ shared/yaml/codeql-pack.release.yml | 2 +- shared/yaml/qlpack.yml | 2 +- swift/ql/lib/CHANGELOG.md | 4 +++ swift/ql/lib/change-notes/released/6.7.2.md | 3 ++ swift/ql/lib/codeql-pack.release.yml | 2 +- swift/ql/lib/qlpack.yml | 2 +- swift/ql/src/CHANGELOG.md | 4 +++ swift/ql/src/change-notes/released/1.3.6.md | 3 ++ swift/ql/src/codeql-pack.release.yml | 2 +- swift/ql/src/qlpack.yml | 2 +- 171 files changed, 430 insertions(+), 136 deletions(-) create mode 100644 actions/ql/lib/change-notes/released/0.4.39.md create mode 100644 actions/ql/src/change-notes/released/0.6.31.md delete mode 100644 cpp/ql/lib/change-notes/2026-06-30-variables-as-mad-sources-and-sinks.md rename cpp/ql/lib/change-notes/{2026-06-30-mad-qualified-field-names.md => released/12.0.0.md} (54%) rename cpp/ql/src/change-notes/{2026-07-09-CWE-114.md => released/1.7.0.md} (73%) create mode 100644 csharp/ql/campaigns/Solorigate/lib/change-notes/released/1.7.70.md create mode 100644 csharp/ql/campaigns/Solorigate/src/change-notes/released/1.7.70.md rename csharp/ql/lib/change-notes/{2026-06-24-nuget-packages-config.md => released/7.1.0.md} (90%) rename csharp/ql/src/change-notes/{2026-07-09-CWE-114.md => released/1.8.0.md} (65%) create mode 100644 go/ql/consistency-queries/change-notes/released/1.0.53.md rename go/ql/lib/change-notes/{2026-06-30-model-log-slog.md => released/7.2.1.md} (83%) create mode 100644 go/ql/src/change-notes/released/1.6.6.md delete mode 100644 java/ql/lib/change-notes/2026-07-01-org.apache.poi-mads.md delete mode 100644 java/ql/lib/change-notes/2026-07-03-fix-pattern-sanitizer-tainted-path.md rename java/ql/lib/change-notes/{2026-06-30-spring-webclient-uri-ssrf.md => released/9.2.1.md} (57%) create mode 100644 java/ql/src/change-notes/released/1.11.6.md rename javascript/ql/lib/change-notes/{2026-06-22-angular-hostlistener-postmessage.md => released/2.8.1.md} (87%) create mode 100644 javascript/ql/src/change-notes/released/2.4.1.md create mode 100644 misc/suite-helpers/change-notes/released/1.0.53.md rename python/ql/lib/change-notes/{2026-05-19-flask-subclasses.md => released/7.2.1.md} (79%) create mode 100644 python/ql/src/change-notes/released/1.8.6.md create mode 100644 ruby/ql/lib/change-notes/released/6.0.1.md create mode 100644 ruby/ql/src/change-notes/released/1.6.6.md create mode 100644 rust/ql/lib/change-notes/released/0.2.17.md rename rust/ql/src/change-notes/{2026-06-25-hard-coded-cryptographic-value-arithmetic-barrier.md => released/0.1.38.md} (88%) create mode 100644 shared/concepts/change-notes/released/0.0.27.md create mode 100644 shared/controlflow/change-notes/released/2.0.37.md create mode 100644 shared/dataflow/change-notes/released/2.1.9.md create mode 100644 shared/mad/change-notes/released/1.0.53.md create mode 100644 shared/namebinding/change-notes/released/0.0.2.md create mode 100644 shared/quantum/change-notes/released/0.0.31.md create mode 100644 shared/rangeanalysis/change-notes/released/1.0.53.md create mode 100644 shared/regex/change-notes/released/1.0.53.md create mode 100644 shared/ssa/change-notes/released/2.0.29.md create mode 100644 shared/threat-models/change-notes/released/1.0.53.md create mode 100644 shared/tutorial/change-notes/released/1.0.53.md create mode 100644 shared/typeflow/change-notes/released/1.0.53.md create mode 100644 shared/typeinference/change-notes/released/0.0.34.md create mode 100644 shared/typetracking/change-notes/released/2.0.37.md create mode 100644 shared/typos/change-notes/released/1.0.53.md create mode 100644 shared/util/change-notes/released/2.0.40.md create mode 100644 shared/xml/change-notes/released/1.0.53.md create mode 100644 shared/yaml/change-notes/released/1.0.53.md create mode 100644 swift/ql/lib/change-notes/released/6.7.2.md create mode 100644 swift/ql/src/change-notes/released/1.3.6.md diff --git a/actions/ql/lib/CHANGELOG.md b/actions/ql/lib/CHANGELOG.md index f677e631b4b9..c00be74a85e7 100644 --- a/actions/ql/lib/CHANGELOG.md +++ b/actions/ql/lib/CHANGELOG.md @@ -1,3 +1,7 @@ +## 0.4.39 + +No user-facing changes. + ## 0.4.38 ### Bug Fixes diff --git a/actions/ql/lib/change-notes/released/0.4.39.md b/actions/ql/lib/change-notes/released/0.4.39.md new file mode 100644 index 000000000000..12a9766b4a8a --- /dev/null +++ b/actions/ql/lib/change-notes/released/0.4.39.md @@ -0,0 +1,3 @@ +## 0.4.39 + +No user-facing changes. diff --git a/actions/ql/lib/codeql-pack.release.yml b/actions/ql/lib/codeql-pack.release.yml index 5b7b7bb1f334..6c1c9d9a7396 100644 --- a/actions/ql/lib/codeql-pack.release.yml +++ b/actions/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.4.38 +lastReleaseVersion: 0.4.39 diff --git a/actions/ql/lib/qlpack.yml b/actions/ql/lib/qlpack.yml index 33b0c790dd6f..77ecbfaa8f17 100644 --- a/actions/ql/lib/qlpack.yml +++ b/actions/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/actions-all -version: 0.4.39-dev +version: 0.4.39 library: true warnOnImplicitThis: true dependencies: diff --git a/actions/ql/src/CHANGELOG.md b/actions/ql/src/CHANGELOG.md index d05f3336c097..502c9aefe9d4 100644 --- a/actions/ql/src/CHANGELOG.md +++ b/actions/ql/src/CHANGELOG.md @@ -1,3 +1,7 @@ +## 0.6.31 + +No user-facing changes. + ## 0.6.30 ### Query Metadata Changes diff --git a/actions/ql/src/change-notes/released/0.6.31.md b/actions/ql/src/change-notes/released/0.6.31.md new file mode 100644 index 000000000000..f408f5c2241c --- /dev/null +++ b/actions/ql/src/change-notes/released/0.6.31.md @@ -0,0 +1,3 @@ +## 0.6.31 + +No user-facing changes. diff --git a/actions/ql/src/codeql-pack.release.yml b/actions/ql/src/codeql-pack.release.yml index 14436232c24a..565446e48f21 100644 --- a/actions/ql/src/codeql-pack.release.yml +++ b/actions/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.6.30 +lastReleaseVersion: 0.6.31 diff --git a/actions/ql/src/qlpack.yml b/actions/ql/src/qlpack.yml index fb617417c3c2..b623ff9b903b 100644 --- a/actions/ql/src/qlpack.yml +++ b/actions/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/actions-queries -version: 0.6.31-dev +version: 0.6.31 library: false warnOnImplicitThis: true groups: [actions, queries] diff --git a/cpp/ql/lib/CHANGELOG.md b/cpp/ql/lib/CHANGELOG.md index fd08c4404b0b..daaa1e03fcb4 100644 --- a/cpp/ql/lib/CHANGELOG.md +++ b/cpp/ql/lib/CHANGELOG.md @@ -1,3 +1,13 @@ +## 12.0.0 + +### Breaking Changes + +* Removed support for using variables as sources and sinks in models-as-data. Users of this feature should convert such sources and sinks to models defined using the QL language. + +### Deprecated APIs + +* Models-as-data flow summaries now use fully qualified field names (for example, `MyNamespace::MyStruct::myField`) instead of unqualified field names such as `myField`. We recommend updating existing flow summaries to use fully qualified field names. Unqualified field names are still supported, but that support will be removed in a future release. + ## 11.0.0 ### Breaking Changes diff --git a/cpp/ql/lib/change-notes/2026-06-30-variables-as-mad-sources-and-sinks.md b/cpp/ql/lib/change-notes/2026-06-30-variables-as-mad-sources-and-sinks.md deleted file mode 100644 index fc93dbf303ed..000000000000 --- a/cpp/ql/lib/change-notes/2026-06-30-variables-as-mad-sources-and-sinks.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: breaking ---- -* Removed support for using variables as sources and sinks in models-as-data. Users of this feature should convert such sources and sinks to models defined using the QL language. \ No newline at end of file diff --git a/cpp/ql/lib/change-notes/2026-06-30-mad-qualified-field-names.md b/cpp/ql/lib/change-notes/released/12.0.0.md similarity index 54% rename from cpp/ql/lib/change-notes/2026-06-30-mad-qualified-field-names.md rename to cpp/ql/lib/change-notes/released/12.0.0.md index f31fcd6490ce..69f3fd9220fc 100644 --- a/cpp/ql/lib/change-notes/2026-06-30-mad-qualified-field-names.md +++ b/cpp/ql/lib/change-notes/released/12.0.0.md @@ -1,4 +1,9 @@ ---- -category: deprecated ---- -* Models-as-data flow summaries now use fully qualified field names (for example, `MyNamespace::MyStruct::myField`) instead of unqualified field names such as `myField`. We recommend updating existing flow summaries to use fully qualified field names. Unqualified field names are still supported, but that support will be removed in a future release. \ No newline at end of file +## 12.0.0 + +### Breaking Changes + +* Removed support for using variables as sources and sinks in models-as-data. Users of this feature should convert such sources and sinks to models defined using the QL language. + +### Deprecated APIs + +* Models-as-data flow summaries now use fully qualified field names (for example, `MyNamespace::MyStruct::myField`) instead of unqualified field names such as `myField`. We recommend updating existing flow summaries to use fully qualified field names. Unqualified field names are still supported, but that support will be removed in a future release. diff --git a/cpp/ql/lib/codeql-pack.release.yml b/cpp/ql/lib/codeql-pack.release.yml index e9866a9ab38c..5bc9fd40be3c 100644 --- a/cpp/ql/lib/codeql-pack.release.yml +++ b/cpp/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 11.0.0 +lastReleaseVersion: 12.0.0 diff --git a/cpp/ql/lib/qlpack.yml b/cpp/ql/lib/qlpack.yml index 04f66548112b..5f4b92a191fc 100644 --- a/cpp/ql/lib/qlpack.yml +++ b/cpp/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/cpp-all -version: 11.0.1-dev +version: 12.0.0 groups: cpp dbscheme: semmlecode.cpp.dbscheme extractor: cpp diff --git a/cpp/ql/src/CHANGELOG.md b/cpp/ql/src/CHANGELOG.md index 9d8877f21816..2fe576d89c78 100644 --- a/cpp/ql/src/CHANGELOG.md +++ b/cpp/ql/src/CHANGELOG.md @@ -1,3 +1,9 @@ +## 1.7.0 + +### Query Metadata Changes + +* Added the tags `external/cwe/cwe-073` and `external/cwe/cwe-078` to `cpp/uncontrolled-process-operation`. + ## 1.6.5 No user-facing changes. diff --git a/cpp/ql/src/change-notes/2026-07-09-CWE-114.md b/cpp/ql/src/change-notes/released/1.7.0.md similarity index 73% rename from cpp/ql/src/change-notes/2026-07-09-CWE-114.md rename to cpp/ql/src/change-notes/released/1.7.0.md index f766678232ef..4b53916571ba 100644 --- a/cpp/ql/src/change-notes/2026-07-09-CWE-114.md +++ b/cpp/ql/src/change-notes/released/1.7.0.md @@ -1,4 +1,5 @@ ---- -category: queryMetadata ---- +## 1.7.0 + +### Query Metadata Changes + * Added the tags `external/cwe/cwe-073` and `external/cwe/cwe-078` to `cpp/uncontrolled-process-operation`. diff --git a/cpp/ql/src/codeql-pack.release.yml b/cpp/ql/src/codeql-pack.release.yml index 031532705578..d1184cc67507 100644 --- a/cpp/ql/src/codeql-pack.release.yml +++ b/cpp/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.6.5 +lastReleaseVersion: 1.7.0 diff --git a/cpp/ql/src/qlpack.yml b/cpp/ql/src/qlpack.yml index 3b6365f29c64..1d1a9206a28e 100644 --- a/cpp/ql/src/qlpack.yml +++ b/cpp/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/cpp-queries -version: 1.6.6-dev +version: 1.7.0 groups: - cpp - queries diff --git a/csharp/ql/campaigns/Solorigate/lib/CHANGELOG.md b/csharp/ql/campaigns/Solorigate/lib/CHANGELOG.md index e1fbde4a626f..69004620f598 100644 --- a/csharp/ql/campaigns/Solorigate/lib/CHANGELOG.md +++ b/csharp/ql/campaigns/Solorigate/lib/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.7.70 + +No user-facing changes. + ## 1.7.69 No user-facing changes. diff --git a/csharp/ql/campaigns/Solorigate/lib/change-notes/released/1.7.70.md b/csharp/ql/campaigns/Solorigate/lib/change-notes/released/1.7.70.md new file mode 100644 index 000000000000..8b0555eb6b07 --- /dev/null +++ b/csharp/ql/campaigns/Solorigate/lib/change-notes/released/1.7.70.md @@ -0,0 +1,3 @@ +## 1.7.70 + +No user-facing changes. diff --git a/csharp/ql/campaigns/Solorigate/lib/codeql-pack.release.yml b/csharp/ql/campaigns/Solorigate/lib/codeql-pack.release.yml index 711f9a5b58f2..af6d36d80968 100644 --- a/csharp/ql/campaigns/Solorigate/lib/codeql-pack.release.yml +++ b/csharp/ql/campaigns/Solorigate/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.7.69 +lastReleaseVersion: 1.7.70 diff --git a/csharp/ql/campaigns/Solorigate/lib/qlpack.yml b/csharp/ql/campaigns/Solorigate/lib/qlpack.yml index 88080d5df9ae..9fb3427e685c 100644 --- a/csharp/ql/campaigns/Solorigate/lib/qlpack.yml +++ b/csharp/ql/campaigns/Solorigate/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/csharp-solorigate-all -version: 1.7.70-dev +version: 1.7.70 groups: - csharp - solorigate diff --git a/csharp/ql/campaigns/Solorigate/src/CHANGELOG.md b/csharp/ql/campaigns/Solorigate/src/CHANGELOG.md index e1fbde4a626f..69004620f598 100644 --- a/csharp/ql/campaigns/Solorigate/src/CHANGELOG.md +++ b/csharp/ql/campaigns/Solorigate/src/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.7.70 + +No user-facing changes. + ## 1.7.69 No user-facing changes. diff --git a/csharp/ql/campaigns/Solorigate/src/change-notes/released/1.7.70.md b/csharp/ql/campaigns/Solorigate/src/change-notes/released/1.7.70.md new file mode 100644 index 000000000000..8b0555eb6b07 --- /dev/null +++ b/csharp/ql/campaigns/Solorigate/src/change-notes/released/1.7.70.md @@ -0,0 +1,3 @@ +## 1.7.70 + +No user-facing changes. diff --git a/csharp/ql/campaigns/Solorigate/src/codeql-pack.release.yml b/csharp/ql/campaigns/Solorigate/src/codeql-pack.release.yml index 711f9a5b58f2..af6d36d80968 100644 --- a/csharp/ql/campaigns/Solorigate/src/codeql-pack.release.yml +++ b/csharp/ql/campaigns/Solorigate/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.7.69 +lastReleaseVersion: 1.7.70 diff --git a/csharp/ql/campaigns/Solorigate/src/qlpack.yml b/csharp/ql/campaigns/Solorigate/src/qlpack.yml index effa1c940c0b..4b55c9412078 100644 --- a/csharp/ql/campaigns/Solorigate/src/qlpack.yml +++ b/csharp/ql/campaigns/Solorigate/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/csharp-solorigate-queries -version: 1.7.70-dev +version: 1.7.70 groups: - csharp - solorigate diff --git a/csharp/ql/lib/CHANGELOG.md b/csharp/ql/lib/CHANGELOG.md index 7987a729ec6c..3f8f2d91d174 100644 --- a/csharp/ql/lib/CHANGELOG.md +++ b/csharp/ql/lib/CHANGELOG.md @@ -1,3 +1,9 @@ +## 7.1.0 + +### Major Analysis Improvements + +* Simplified and streamlined the use of NuGet sources when downloading dependencies via `[mono] nuget.exe` in `build-mode: none`: NuGet sources are now supplied via the `-Source` flag instead of moving or creating `nuget.config` files in the checked-out repository, private registries are used if configured, and only reachable feeds are used when NuGet feed checking is enabled (the default). + ## 7.0.0 ### Breaking Changes diff --git a/csharp/ql/lib/change-notes/2026-06-24-nuget-packages-config.md b/csharp/ql/lib/change-notes/released/7.1.0.md similarity index 90% rename from csharp/ql/lib/change-notes/2026-06-24-nuget-packages-config.md rename to csharp/ql/lib/change-notes/released/7.1.0.md index 5b236a118da7..6a164c9ebb4e 100644 --- a/csharp/ql/lib/change-notes/2026-06-24-nuget-packages-config.md +++ b/csharp/ql/lib/change-notes/released/7.1.0.md @@ -1,4 +1,5 @@ ---- -category: majorAnalysis ---- +## 7.1.0 + +### Major Analysis Improvements + * Simplified and streamlined the use of NuGet sources when downloading dependencies via `[mono] nuget.exe` in `build-mode: none`: NuGet sources are now supplied via the `-Source` flag instead of moving or creating `nuget.config` files in the checked-out repository, private registries are used if configured, and only reachable feeds are used when NuGet feed checking is enabled (the default). diff --git a/csharp/ql/lib/codeql-pack.release.yml b/csharp/ql/lib/codeql-pack.release.yml index e0db21c78694..dcaaa76112a6 100644 --- a/csharp/ql/lib/codeql-pack.release.yml +++ b/csharp/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 7.0.0 +lastReleaseVersion: 7.1.0 diff --git a/csharp/ql/lib/qlpack.yml b/csharp/ql/lib/qlpack.yml index 0749eea574d3..336a7c6be731 100644 --- a/csharp/ql/lib/qlpack.yml +++ b/csharp/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/csharp-all -version: 7.0.1-dev +version: 7.1.0 groups: csharp dbscheme: semmlecode.csharp.dbscheme extractor: csharp diff --git a/csharp/ql/src/CHANGELOG.md b/csharp/ql/src/CHANGELOG.md index 2e316088da56..931690b863e1 100644 --- a/csharp/ql/src/CHANGELOG.md +++ b/csharp/ql/src/CHANGELOG.md @@ -1,3 +1,9 @@ +## 1.8.0 + +### Query Metadata Changes + +* Added the tag `external/cwe/cwe-073` to `cs/assembly-path-injection`. + ## 1.7.5 No user-facing changes. diff --git a/csharp/ql/src/change-notes/2026-07-09-CWE-114.md b/csharp/ql/src/change-notes/released/1.8.0.md similarity index 65% rename from csharp/ql/src/change-notes/2026-07-09-CWE-114.md rename to csharp/ql/src/change-notes/released/1.8.0.md index 928a4cc497aa..b7c4ca4cf221 100644 --- a/csharp/ql/src/change-notes/2026-07-09-CWE-114.md +++ b/csharp/ql/src/change-notes/released/1.8.0.md @@ -1,4 +1,5 @@ ---- -category: queryMetadata ---- +## 1.8.0 + +### Query Metadata Changes + * Added the tag `external/cwe/cwe-073` to `cs/assembly-path-injection`. diff --git a/csharp/ql/src/codeql-pack.release.yml b/csharp/ql/src/codeql-pack.release.yml index 83aebd7c12a0..dc8a37cc443d 100644 --- a/csharp/ql/src/codeql-pack.release.yml +++ b/csharp/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.7.5 +lastReleaseVersion: 1.8.0 diff --git a/csharp/ql/src/qlpack.yml b/csharp/ql/src/qlpack.yml index 9110c334a2e5..b243e8fb928d 100644 --- a/csharp/ql/src/qlpack.yml +++ b/csharp/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/csharp-queries -version: 1.7.6-dev +version: 1.8.0 groups: - csharp - queries diff --git a/go/ql/consistency-queries/CHANGELOG.md b/go/ql/consistency-queries/CHANGELOG.md index 1b79dbf69e26..676a2dc0189c 100644 --- a/go/ql/consistency-queries/CHANGELOG.md +++ b/go/ql/consistency-queries/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.53 + +No user-facing changes. + ## 1.0.52 No user-facing changes. diff --git a/go/ql/consistency-queries/change-notes/released/1.0.53.md b/go/ql/consistency-queries/change-notes/released/1.0.53.md new file mode 100644 index 000000000000..0421d6f4cada --- /dev/null +++ b/go/ql/consistency-queries/change-notes/released/1.0.53.md @@ -0,0 +1,3 @@ +## 1.0.53 + +No user-facing changes. diff --git a/go/ql/consistency-queries/codeql-pack.release.yml b/go/ql/consistency-queries/codeql-pack.release.yml index ea1d2eed4d21..fb44bfeae137 100644 --- a/go/ql/consistency-queries/codeql-pack.release.yml +++ b/go/ql/consistency-queries/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.52 +lastReleaseVersion: 1.0.53 diff --git a/go/ql/consistency-queries/qlpack.yml b/go/ql/consistency-queries/qlpack.yml index 486dcf5c9f8f..d7752bb1bf64 100644 --- a/go/ql/consistency-queries/qlpack.yml +++ b/go/ql/consistency-queries/qlpack.yml @@ -1,5 +1,5 @@ name: codeql-go-consistency-queries -version: 1.0.53-dev +version: 1.0.53 groups: - go - queries diff --git a/go/ql/lib/CHANGELOG.md b/go/ql/lib/CHANGELOG.md index 29a5bfbf1789..72566ce22c09 100644 --- a/go/ql/lib/CHANGELOG.md +++ b/go/ql/lib/CHANGELOG.md @@ -1,3 +1,9 @@ +## 7.2.1 + +### Minor Analysis Improvements + + * Improved models for the `log/slog` package (Go 1.21+), including `*slog.Logger` methods, `With`/`WithGroup`, and `Attr`/`Value` helpers, improving coverage for the `go/log-injection` and `go/clear-text-logging` queries. + ## 7.2.0 ### Deprecated APIs diff --git a/go/ql/lib/change-notes/2026-06-30-model-log-slog.md b/go/ql/lib/change-notes/released/7.2.1.md similarity index 83% rename from go/ql/lib/change-notes/2026-06-30-model-log-slog.md rename to go/ql/lib/change-notes/released/7.2.1.md index 836678f1ac93..20e73beaddce 100644 --- a/go/ql/lib/change-notes/2026-06-30-model-log-slog.md +++ b/go/ql/lib/change-notes/released/7.2.1.md @@ -1,4 +1,5 @@ ---- -category: minorAnalysis ---- +## 7.2.1 + +### Minor Analysis Improvements + * Improved models for the `log/slog` package (Go 1.21+), including `*slog.Logger` methods, `With`/`WithGroup`, and `Attr`/`Value` helpers, improving coverage for the `go/log-injection` and `go/clear-text-logging` queries. diff --git a/go/ql/lib/codeql-pack.release.yml b/go/ql/lib/codeql-pack.release.yml index fda9ea165fc5..09f680074c43 100644 --- a/go/ql/lib/codeql-pack.release.yml +++ b/go/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 7.2.0 +lastReleaseVersion: 7.2.1 diff --git a/go/ql/lib/qlpack.yml b/go/ql/lib/qlpack.yml index f65b3855cf77..1573f5b2ad8f 100644 --- a/go/ql/lib/qlpack.yml +++ b/go/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/go-all -version: 7.2.1-dev +version: 7.2.1 groups: go dbscheme: go.dbscheme extractor: go diff --git a/go/ql/src/CHANGELOG.md b/go/ql/src/CHANGELOG.md index b74b08295b24..85425d0c2238 100644 --- a/go/ql/src/CHANGELOG.md +++ b/go/ql/src/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.6.6 + +No user-facing changes. + ## 1.6.5 ### Minor Analysis Improvements diff --git a/go/ql/src/change-notes/released/1.6.6.md b/go/ql/src/change-notes/released/1.6.6.md new file mode 100644 index 000000000000..14281d9101b9 --- /dev/null +++ b/go/ql/src/change-notes/released/1.6.6.md @@ -0,0 +1,3 @@ +## 1.6.6 + +No user-facing changes. diff --git a/go/ql/src/codeql-pack.release.yml b/go/ql/src/codeql-pack.release.yml index 031532705578..f8e54f30a672 100644 --- a/go/ql/src/codeql-pack.release.yml +++ b/go/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.6.5 +lastReleaseVersion: 1.6.6 diff --git a/go/ql/src/qlpack.yml b/go/ql/src/qlpack.yml index 2db1c639026b..98b0c2cf12c0 100644 --- a/go/ql/src/qlpack.yml +++ b/go/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/go-queries -version: 1.6.6-dev +version: 1.6.6 groups: - go - queries diff --git a/java/ql/lib/CHANGELOG.md b/java/ql/lib/CHANGELOG.md index 9a60d9f070e7..cb3200a4ef46 100644 --- a/java/ql/lib/CHANGELOG.md +++ b/java/ql/lib/CHANGELOG.md @@ -1,3 +1,11 @@ +## 9.2.1 + +### Minor Analysis Improvements + +* Regular expression checks via annotation with `@javax.validation.constraints.Pattern` are now recognized as sanitizers for `java/path-injection`. +* Added summary and LLM-generated source and sink models for `org.apache.poi`. +* The first argument of the `uri` method of `WebClient$UriSpec` in `org.springframework.web.reactive.function.client` is now considered a request forgery sink. Previously only the first arguments of the `WebClient.create` and `WebClient$Builder.baseUrl` methods were considered. This may lead to more alerts for the query `java/ssrf` (Server-side request forgery). + ## 9.2.0 ### New Features diff --git a/java/ql/lib/change-notes/2026-07-01-org.apache.poi-mads.md b/java/ql/lib/change-notes/2026-07-01-org.apache.poi-mads.md deleted file mode 100644 index 741372b8e59a..000000000000 --- a/java/ql/lib/change-notes/2026-07-01-org.apache.poi-mads.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* Added summary and LLM-generated source and sink models for `org.apache.poi`. diff --git a/java/ql/lib/change-notes/2026-07-03-fix-pattern-sanitizer-tainted-path.md b/java/ql/lib/change-notes/2026-07-03-fix-pattern-sanitizer-tainted-path.md deleted file mode 100644 index b04c65944459..000000000000 --- a/java/ql/lib/change-notes/2026-07-03-fix-pattern-sanitizer-tainted-path.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* Regular expression checks via annotation with `@javax.validation.constraints.Pattern` are now recognized as sanitizers for `java/path-injection`. diff --git a/java/ql/lib/change-notes/2026-06-30-spring-webclient-uri-ssrf.md b/java/ql/lib/change-notes/released/9.2.1.md similarity index 57% rename from java/ql/lib/change-notes/2026-06-30-spring-webclient-uri-ssrf.md rename to java/ql/lib/change-notes/released/9.2.1.md index d0474959b9cd..8292ca72b1ee 100644 --- a/java/ql/lib/change-notes/2026-06-30-spring-webclient-uri-ssrf.md +++ b/java/ql/lib/change-notes/released/9.2.1.md @@ -1,4 +1,7 @@ ---- -category: minorAnalysis ---- +## 9.2.1 + +### Minor Analysis Improvements + +* Regular expression checks via annotation with `@javax.validation.constraints.Pattern` are now recognized as sanitizers for `java/path-injection`. +* Added summary and LLM-generated source and sink models for `org.apache.poi`. * The first argument of the `uri` method of `WebClient$UriSpec` in `org.springframework.web.reactive.function.client` is now considered a request forgery sink. Previously only the first arguments of the `WebClient.create` and `WebClient$Builder.baseUrl` methods were considered. This may lead to more alerts for the query `java/ssrf` (Server-side request forgery). diff --git a/java/ql/lib/codeql-pack.release.yml b/java/ql/lib/codeql-pack.release.yml index 8bc32f3e62a1..336f8a5aa5b7 100644 --- a/java/ql/lib/codeql-pack.release.yml +++ b/java/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 9.2.0 +lastReleaseVersion: 9.2.1 diff --git a/java/ql/lib/qlpack.yml b/java/ql/lib/qlpack.yml index a847cb88c639..a3664696b9da 100644 --- a/java/ql/lib/qlpack.yml +++ b/java/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/java-all -version: 9.2.1-dev +version: 9.2.1 groups: java dbscheme: config/semmlecode.dbscheme extractor: java diff --git a/java/ql/src/CHANGELOG.md b/java/ql/src/CHANGELOG.md index 4e7c1a329c2c..234038218cb3 100644 --- a/java/ql/src/CHANGELOG.md +++ b/java/ql/src/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.11.6 + +No user-facing changes. + ## 1.11.5 No user-facing changes. diff --git a/java/ql/src/change-notes/released/1.11.6.md b/java/ql/src/change-notes/released/1.11.6.md new file mode 100644 index 000000000000..8d55b7757a21 --- /dev/null +++ b/java/ql/src/change-notes/released/1.11.6.md @@ -0,0 +1,3 @@ +## 1.11.6 + +No user-facing changes. diff --git a/java/ql/src/codeql-pack.release.yml b/java/ql/src/codeql-pack.release.yml index d3dd29373b1b..b30a039ff433 100644 --- a/java/ql/src/codeql-pack.release.yml +++ b/java/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.11.5 +lastReleaseVersion: 1.11.6 diff --git a/java/ql/src/qlpack.yml b/java/ql/src/qlpack.yml index 6f9c819f1098..2c49d49c6172 100644 --- a/java/ql/src/qlpack.yml +++ b/java/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/java-queries -version: 1.11.6-dev +version: 1.11.6 groups: - java - queries diff --git a/javascript/ql/lib/CHANGELOG.md b/javascript/ql/lib/CHANGELOG.md index e3802a7686ec..3d89e1bca7eb 100644 --- a/javascript/ql/lib/CHANGELOG.md +++ b/javascript/ql/lib/CHANGELOG.md @@ -1,3 +1,9 @@ +## 2.8.1 + +### Minor Analysis Improvements + +* Added support for Angular's `@HostListener('window:message', ...)` and `@HostListener('document:message', ...)` decorators as `postMessage` event handlers. The decorated method's event parameter is now recognized as a client-side remote flow source, and is considered by the `js/missing-origin-check` query. + ## 2.8.0 ### New Features diff --git a/javascript/ql/lib/change-notes/2026-06-22-angular-hostlistener-postmessage.md b/javascript/ql/lib/change-notes/released/2.8.1.md similarity index 87% rename from javascript/ql/lib/change-notes/2026-06-22-angular-hostlistener-postmessage.md rename to javascript/ql/lib/change-notes/released/2.8.1.md index 686e8ae96da5..983d8b8e0099 100644 --- a/javascript/ql/lib/change-notes/2026-06-22-angular-hostlistener-postmessage.md +++ b/javascript/ql/lib/change-notes/released/2.8.1.md @@ -1,4 +1,5 @@ ---- -category: minorAnalysis ---- +## 2.8.1 + +### Minor Analysis Improvements + * Added support for Angular's `@HostListener('window:message', ...)` and `@HostListener('document:message', ...)` decorators as `postMessage` event handlers. The decorated method's event parameter is now recognized as a client-side remote flow source, and is considered by the `js/missing-origin-check` query. diff --git a/javascript/ql/lib/codeql-pack.release.yml b/javascript/ql/lib/codeql-pack.release.yml index 8e0a6e07a086..ff1368057c6f 100644 --- a/javascript/ql/lib/codeql-pack.release.yml +++ b/javascript/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 2.8.0 +lastReleaseVersion: 2.8.1 diff --git a/javascript/ql/lib/qlpack.yml b/javascript/ql/lib/qlpack.yml index 584f2e135f77..3ffde4f1d31a 100644 --- a/javascript/ql/lib/qlpack.yml +++ b/javascript/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/javascript-all -version: 2.8.1-dev +version: 2.8.1 groups: javascript dbscheme: semmlecode.javascript.dbscheme extractor: javascript diff --git a/javascript/ql/src/CHANGELOG.md b/javascript/ql/src/CHANGELOG.md index 3da6a12390e7..32c71e4bd810 100644 --- a/javascript/ql/src/CHANGELOG.md +++ b/javascript/ql/src/CHANGELOG.md @@ -1,3 +1,7 @@ +## 2.4.1 + +No user-facing changes. + ## 2.4.0 ### New Queries diff --git a/javascript/ql/src/change-notes/released/2.4.1.md b/javascript/ql/src/change-notes/released/2.4.1.md new file mode 100644 index 000000000000..bd5722209574 --- /dev/null +++ b/javascript/ql/src/change-notes/released/2.4.1.md @@ -0,0 +1,3 @@ +## 2.4.1 + +No user-facing changes. diff --git a/javascript/ql/src/codeql-pack.release.yml b/javascript/ql/src/codeql-pack.release.yml index cb0ea3a249a6..eead7b212dae 100644 --- a/javascript/ql/src/codeql-pack.release.yml +++ b/javascript/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 2.4.0 +lastReleaseVersion: 2.4.1 diff --git a/javascript/ql/src/qlpack.yml b/javascript/ql/src/qlpack.yml index b608077e3e0b..3a88e0c6b139 100644 --- a/javascript/ql/src/qlpack.yml +++ b/javascript/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/javascript-queries -version: 2.4.1-dev +version: 2.4.1 groups: - javascript - queries diff --git a/misc/suite-helpers/CHANGELOG.md b/misc/suite-helpers/CHANGELOG.md index b73e8234a5b2..af850b3d5afa 100644 --- a/misc/suite-helpers/CHANGELOG.md +++ b/misc/suite-helpers/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.53 + +No user-facing changes. + ## 1.0.52 No user-facing changes. diff --git a/misc/suite-helpers/change-notes/released/1.0.53.md b/misc/suite-helpers/change-notes/released/1.0.53.md new file mode 100644 index 000000000000..0421d6f4cada --- /dev/null +++ b/misc/suite-helpers/change-notes/released/1.0.53.md @@ -0,0 +1,3 @@ +## 1.0.53 + +No user-facing changes. diff --git a/misc/suite-helpers/codeql-pack.release.yml b/misc/suite-helpers/codeql-pack.release.yml index ea1d2eed4d21..fb44bfeae137 100644 --- a/misc/suite-helpers/codeql-pack.release.yml +++ b/misc/suite-helpers/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.52 +lastReleaseVersion: 1.0.53 diff --git a/misc/suite-helpers/qlpack.yml b/misc/suite-helpers/qlpack.yml index 0dafb086b741..248b9c7207cf 100644 --- a/misc/suite-helpers/qlpack.yml +++ b/misc/suite-helpers/qlpack.yml @@ -1,4 +1,4 @@ name: codeql/suite-helpers -version: 1.0.53-dev +version: 1.0.53 groups: shared warnOnImplicitThis: true diff --git a/python/ql/lib/CHANGELOG.md b/python/ql/lib/CHANGELOG.md index a8122f03eb18..1fd5cec625d0 100644 --- a/python/ql/lib/CHANGELOG.md +++ b/python/ql/lib/CHANGELOG.md @@ -1,3 +1,9 @@ +## 7.2.1 + +### Minor Analysis Improvements + +* `Flask::FlaskApp::instance()` will now also return instances of subclasses defined in the source tree. Previously, these were filtered out. `Flask::FlaskApp::classRef()` has been deprecated in favor of `Flask::FlaskApp::subclassRef()` since it already returned some subclasses. + ## 7.2.0 ### Deprecated APIs @@ -70,7 +76,7 @@ No user-facing changes. ### Minor Analysis Improvements -* Added new full SSRF sanitization barrier from the new AntiSSRF library. +* Added new full SSRF sanitization barrier from the new AntiSSRF library. * When a guard such as `isSafe(x)` is defined, we now also automatically handle `isSafe(x) == true` and `isSafe(x) != false`. ## 6.1.1 @@ -169,7 +175,7 @@ No user-facing changes. ### Minor Analysis Improvements - The modelling of Psycopg2 now supports the use of `psycopg2.pool` connection pools for handling database connections. -* Removed `lxml` as an XML bomb sink. The underlying libxml2 library now includes [entity reference loop detection](https://github.com/lxml/lxml/blob/f33ac2c2f5f9c4c4c1fc47f363be96db308f2fa6/doc/FAQ.txt#L1077) that prevents XML bomb attacks. +* Removed `lxml` as an XML bomb sink. The underlying libxml2 library now includes [entity reference loop detection](https://github.com/lxml/lxml/blob/f33ac2c2f5f9c4c4c1fc47f363be96db308f2fa6/doc/FAQ.txt#L1077) that prevents XML bomb attacks. ## 4.0.13 @@ -262,7 +268,7 @@ No user-facing changes. ### Minor Analysis Improvements * The sensitive data library has been improved so that `snake_case` style variable names are recognized more reliably. This may result in more sensitive data being identified, and more results from queries that use the sensitive data library. -- Additional taint steps through methods of `lxml.etree.Element` and `lxml.etree.ElementTree` objects from the `lxml` PyPI package have been modeled. +- Additional taint steps through methods of `lxml.etree.Element` and `lxml.etree.ElementTree` objects from the `lxml` PyPI package have been modeled. ## 3.1.0 @@ -316,7 +322,7 @@ No user-facing changes. ### Minor Analysis Improvements -* The common sanitizer guard `StringConstCompareBarrier` has been renamed to `ConstCompareBarrier` and expanded to cover comparisons with other constant values such as `None`. This may result in fewer false positive results for several queries. +* The common sanitizer guard `StringConstCompareBarrier` has been renamed to `ConstCompareBarrier` and expanded to cover comparisons with other constant values such as `None`. This may result in fewer false positive results for several queries. ## 2.0.0 @@ -545,7 +551,7 @@ No user-facing changes. ### New Features -* The `DataFlow::StateConfigSig` signature module has gained default implementations for `isBarrier/2` and `isAdditionalFlowStep/4`. +* The `DataFlow::StateConfigSig` signature module has gained default implementations for `isBarrier/2` and `isAdditionalFlowStep/4`. Hence it is no longer needed to provide `none()` implementations of these predicates if they are not needed. ### Minor Analysis Improvements @@ -572,7 +578,7 @@ No user-facing changes. * Deleted many deprecated predicates and classes with uppercase `API`, `HTTP`, `XSS`, `SQL`, etc. in their names. Use the PascalCased versions instead. * Deleted the deprecated `getName()` predicate from the `Container` class, use `getAbsolutePath()` instead. * Deleted many deprecated module names that started with a lowercase letter, use the versions that start with an uppercase letter instead. -* Deleted many deprecated predicates in `PointsTo.qll`. +* Deleted many deprecated predicates in `PointsTo.qll`. * Deleted many deprecated files from the `semmle.python.security` package. * Deleted the deprecated `BottleRoutePointToExtension` class from `Extensions.qll`. * Type tracking is now aware of flow summaries. This leads to a richer API graph, and may lead to more results in some queries. @@ -729,7 +735,7 @@ No user-facing changes. ### Deprecated APIs * Some unused predicates in `SsaDefinitions.qll`, `TObject.qll`, `protocols.qll`, and the `pointsto/` folder have been deprecated. -* Some classes/modules with upper-case acronyms in their name have been renamed to follow our style-guide. +* Some classes/modules with upper-case acronyms in their name have been renamed to follow our style-guide. The old name still exists as a deprecated alias. ### Minor Analysis Improvements @@ -748,9 +754,9 @@ No user-facing changes. ### Deprecated APIs -* Many classes/predicates/modules with upper-case acronyms in their name have been renamed to follow our style-guide. +* Many classes/predicates/modules with upper-case acronyms in their name have been renamed to follow our style-guide. The old name still exists as a deprecated alias. -* The utility files previously in the `semmle.python.security.performance` package have been moved to the `semmle.python.security.regexp` package. +* The utility files previously in the `semmle.python.security.performance` package have been moved to the `semmle.python.security.regexp` package. The previous files still exist as deprecated aliases. ### Minor Analysis Improvements @@ -843,9 +849,9 @@ No user-facing changes. ### Deprecated APIs -* Many classes/predicates/modules that had upper-case acronyms have been renamed to follow our style-guide. +* Many classes/predicates/modules that had upper-case acronyms have been renamed to follow our style-guide. The old name still exists as a deprecated alias. -* Some modules that started with a lowercase letter have been renamed to follow our style-guide. +* Some modules that started with a lowercase letter have been renamed to follow our style-guide. The old name still exists as a deprecated alias. ### New Features diff --git a/python/ql/lib/change-notes/2026-05-19-flask-subclasses.md b/python/ql/lib/change-notes/released/7.2.1.md similarity index 79% rename from python/ql/lib/change-notes/2026-05-19-flask-subclasses.md rename to python/ql/lib/change-notes/released/7.2.1.md index e0288351ddc3..7f90ffa118c1 100644 --- a/python/ql/lib/change-notes/2026-05-19-flask-subclasses.md +++ b/python/ql/lib/change-notes/released/7.2.1.md @@ -1,4 +1,5 @@ ---- -category: minorAnalysis ---- -* `Flask::FlaskApp::instance()` will now also return instances of subclasses defined in the source tree. Previously, these were filtered out. `Flask::FlaskApp::classRef()` has been deprecated in favor of `Flask::FlaskApp::subclassRef()` since it already returned some subclasses. \ No newline at end of file +## 7.2.1 + +### Minor Analysis Improvements + +* `Flask::FlaskApp::instance()` will now also return instances of subclasses defined in the source tree. Previously, these were filtered out. `Flask::FlaskApp::classRef()` has been deprecated in favor of `Flask::FlaskApp::subclassRef()` since it already returned some subclasses. diff --git a/python/ql/lib/codeql-pack.release.yml b/python/ql/lib/codeql-pack.release.yml index fda9ea165fc5..09f680074c43 100644 --- a/python/ql/lib/codeql-pack.release.yml +++ b/python/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 7.2.0 +lastReleaseVersion: 7.2.1 diff --git a/python/ql/lib/qlpack.yml b/python/ql/lib/qlpack.yml index 506fd493c790..837f6c437dd5 100644 --- a/python/ql/lib/qlpack.yml +++ b/python/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/python-all -version: 7.2.1-dev +version: 7.2.1 groups: python dbscheme: semmlecode.python.dbscheme extractor: python diff --git a/python/ql/src/CHANGELOG.md b/python/ql/src/CHANGELOG.md index 0c9c972e5fa0..f5681e699582 100644 --- a/python/ql/src/CHANGELOG.md +++ b/python/ql/src/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.8.6 + +No user-facing changes. + ## 1.8.5 ### Minor Analysis Improvements diff --git a/python/ql/src/change-notes/released/1.8.6.md b/python/ql/src/change-notes/released/1.8.6.md new file mode 100644 index 000000000000..ae534ff65388 --- /dev/null +++ b/python/ql/src/change-notes/released/1.8.6.md @@ -0,0 +1,3 @@ +## 1.8.6 + +No user-facing changes. diff --git a/python/ql/src/codeql-pack.release.yml b/python/ql/src/codeql-pack.release.yml index 75869ad94ec8..c0101bd25c9b 100644 --- a/python/ql/src/codeql-pack.release.yml +++ b/python/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.8.5 +lastReleaseVersion: 1.8.6 diff --git a/python/ql/src/qlpack.yml b/python/ql/src/qlpack.yml index a4a2db0e6603..5e0040f834fb 100644 --- a/python/ql/src/qlpack.yml +++ b/python/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/python-queries -version: 1.8.6-dev +version: 1.8.6 groups: - python - queries diff --git a/ruby/ql/lib/CHANGELOG.md b/ruby/ql/lib/CHANGELOG.md index 3e1ebc8c7126..d05b5a3b36a8 100644 --- a/ruby/ql/lib/CHANGELOG.md +++ b/ruby/ql/lib/CHANGELOG.md @@ -1,3 +1,7 @@ +## 6.0.1 + +No user-facing changes. + ## 6.0.0 ### Breaking Changes diff --git a/ruby/ql/lib/change-notes/released/6.0.1.md b/ruby/ql/lib/change-notes/released/6.0.1.md new file mode 100644 index 000000000000..35b17912c81a --- /dev/null +++ b/ruby/ql/lib/change-notes/released/6.0.1.md @@ -0,0 +1,3 @@ +## 6.0.1 + +No user-facing changes. diff --git a/ruby/ql/lib/codeql-pack.release.yml b/ruby/ql/lib/codeql-pack.release.yml index f8c4fa43ccb7..d1f3c68c8120 100644 --- a/ruby/ql/lib/codeql-pack.release.yml +++ b/ruby/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 6.0.0 +lastReleaseVersion: 6.0.1 diff --git a/ruby/ql/lib/qlpack.yml b/ruby/ql/lib/qlpack.yml index 6957217db6d1..ed80e6ead32c 100644 --- a/ruby/ql/lib/qlpack.yml +++ b/ruby/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/ruby-all -version: 6.0.1-dev +version: 6.0.1 groups: ruby extractor: ruby dbscheme: ruby.dbscheme diff --git a/ruby/ql/src/CHANGELOG.md b/ruby/ql/src/CHANGELOG.md index 1df5dad19b52..3b31341bbe0f 100644 --- a/ruby/ql/src/CHANGELOG.md +++ b/ruby/ql/src/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.6.6 + +No user-facing changes. + ## 1.6.5 No user-facing changes. diff --git a/ruby/ql/src/change-notes/released/1.6.6.md b/ruby/ql/src/change-notes/released/1.6.6.md new file mode 100644 index 000000000000..14281d9101b9 --- /dev/null +++ b/ruby/ql/src/change-notes/released/1.6.6.md @@ -0,0 +1,3 @@ +## 1.6.6 + +No user-facing changes. diff --git a/ruby/ql/src/codeql-pack.release.yml b/ruby/ql/src/codeql-pack.release.yml index 031532705578..f8e54f30a672 100644 --- a/ruby/ql/src/codeql-pack.release.yml +++ b/ruby/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.6.5 +lastReleaseVersion: 1.6.6 diff --git a/ruby/ql/src/qlpack.yml b/ruby/ql/src/qlpack.yml index c34506fd2878..1016e0294afc 100644 --- a/ruby/ql/src/qlpack.yml +++ b/ruby/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/ruby-queries -version: 1.6.6-dev +version: 1.6.6 groups: - ruby - queries diff --git a/rust/ql/lib/CHANGELOG.md b/rust/ql/lib/CHANGELOG.md index d0ffbecc5040..f6d806129b1b 100644 --- a/rust/ql/lib/CHANGELOG.md +++ b/rust/ql/lib/CHANGELOG.md @@ -1,3 +1,7 @@ +## 0.2.17 + +No user-facing changes. + ## 0.2.16 No user-facing changes. diff --git a/rust/ql/lib/change-notes/released/0.2.17.md b/rust/ql/lib/change-notes/released/0.2.17.md new file mode 100644 index 000000000000..669582f3978e --- /dev/null +++ b/rust/ql/lib/change-notes/released/0.2.17.md @@ -0,0 +1,3 @@ +## 0.2.17 + +No user-facing changes. diff --git a/rust/ql/lib/codeql-pack.release.yml b/rust/ql/lib/codeql-pack.release.yml index 2aa64d9ed07e..ba24dcb5a000 100644 --- a/rust/ql/lib/codeql-pack.release.yml +++ b/rust/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.2.16 +lastReleaseVersion: 0.2.17 diff --git a/rust/ql/lib/qlpack.yml b/rust/ql/lib/qlpack.yml index 7750d2a6a3d4..74edd9e3549d 100644 --- a/rust/ql/lib/qlpack.yml +++ b/rust/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/rust-all -version: 0.2.17-dev +version: 0.2.17 groups: rust extractor: rust dbscheme: rust.dbscheme diff --git a/rust/ql/src/CHANGELOG.md b/rust/ql/src/CHANGELOG.md index 5b50934a5fc2..c29782a5cf4f 100644 --- a/rust/ql/src/CHANGELOG.md +++ b/rust/ql/src/CHANGELOG.md @@ -1,3 +1,9 @@ +## 0.1.38 + +### Minor Analysis Improvements + +* The `rust/hard-coded-cryptographic-value` query now treats arithmetic and bitwise operations, including string append operations, as barriers. This addresses false positive results where hard-coded constants are combined with non-constant data, such as incrementing a nonce or appending variable data to a constant prefix. + ## 0.1.37 No user-facing changes. diff --git a/rust/ql/src/change-notes/2026-06-25-hard-coded-cryptographic-value-arithmetic-barrier.md b/rust/ql/src/change-notes/released/0.1.38.md similarity index 88% rename from rust/ql/src/change-notes/2026-06-25-hard-coded-cryptographic-value-arithmetic-barrier.md rename to rust/ql/src/change-notes/released/0.1.38.md index bee0af58314c..42bc8be5db5e 100644 --- a/rust/ql/src/change-notes/2026-06-25-hard-coded-cryptographic-value-arithmetic-barrier.md +++ b/rust/ql/src/change-notes/released/0.1.38.md @@ -1,4 +1,5 @@ ---- -category: minorAnalysis ---- +## 0.1.38 + +### Minor Analysis Improvements + * The `rust/hard-coded-cryptographic-value` query now treats arithmetic and bitwise operations, including string append operations, as barriers. This addresses false positive results where hard-coded constants are combined with non-constant data, such as incrementing a nonce or appending variable data to a constant prefix. diff --git a/rust/ql/src/codeql-pack.release.yml b/rust/ql/src/codeql-pack.release.yml index 38d6184e74c3..107bf68ce693 100644 --- a/rust/ql/src/codeql-pack.release.yml +++ b/rust/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.1.37 +lastReleaseVersion: 0.1.38 diff --git a/rust/ql/src/qlpack.yml b/rust/ql/src/qlpack.yml index 591c913eb690..ecc76c64f3bb 100644 --- a/rust/ql/src/qlpack.yml +++ b/rust/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/rust-queries -version: 0.1.38-dev +version: 0.1.38 groups: - rust - queries diff --git a/shared/concepts/CHANGELOG.md b/shared/concepts/CHANGELOG.md index 5e5a0889e5d9..b4fff81bb367 100644 --- a/shared/concepts/CHANGELOG.md +++ b/shared/concepts/CHANGELOG.md @@ -1,3 +1,7 @@ +## 0.0.27 + +No user-facing changes. + ## 0.0.26 No user-facing changes. diff --git a/shared/concepts/change-notes/released/0.0.27.md b/shared/concepts/change-notes/released/0.0.27.md new file mode 100644 index 000000000000..ff6e274427b7 --- /dev/null +++ b/shared/concepts/change-notes/released/0.0.27.md @@ -0,0 +1,3 @@ +## 0.0.27 + +No user-facing changes. diff --git a/shared/concepts/codeql-pack.release.yml b/shared/concepts/codeql-pack.release.yml index c576d2d7db2a..dbab90d69898 100644 --- a/shared/concepts/codeql-pack.release.yml +++ b/shared/concepts/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.0.26 +lastReleaseVersion: 0.0.27 diff --git a/shared/concepts/qlpack.yml b/shared/concepts/qlpack.yml index d8b7fb5b5542..b7f9407b10b0 100644 --- a/shared/concepts/qlpack.yml +++ b/shared/concepts/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/concepts -version: 0.0.27-dev +version: 0.0.27 groups: shared library: true dependencies: diff --git a/shared/controlflow/CHANGELOG.md b/shared/controlflow/CHANGELOG.md index 80735c7276d3..4d26392ac020 100644 --- a/shared/controlflow/CHANGELOG.md +++ b/shared/controlflow/CHANGELOG.md @@ -1,3 +1,7 @@ +## 2.0.37 + +No user-facing changes. + ## 2.0.36 No user-facing changes. diff --git a/shared/controlflow/change-notes/released/2.0.37.md b/shared/controlflow/change-notes/released/2.0.37.md new file mode 100644 index 000000000000..7d0b67a34af0 --- /dev/null +++ b/shared/controlflow/change-notes/released/2.0.37.md @@ -0,0 +1,3 @@ +## 2.0.37 + +No user-facing changes. diff --git a/shared/controlflow/codeql-pack.release.yml b/shared/controlflow/codeql-pack.release.yml index 7e4aaa0dd676..108259a74002 100644 --- a/shared/controlflow/codeql-pack.release.yml +++ b/shared/controlflow/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 2.0.36 +lastReleaseVersion: 2.0.37 diff --git a/shared/controlflow/qlpack.yml b/shared/controlflow/qlpack.yml index d14ee7d34d79..4fdac9e19299 100644 --- a/shared/controlflow/qlpack.yml +++ b/shared/controlflow/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/controlflow -version: 2.0.37-dev +version: 2.0.37 groups: shared library: true dependencies: diff --git a/shared/dataflow/CHANGELOG.md b/shared/dataflow/CHANGELOG.md index a1074cfcebb0..3ebddaaf3643 100644 --- a/shared/dataflow/CHANGELOG.md +++ b/shared/dataflow/CHANGELOG.md @@ -1,3 +1,7 @@ +## 2.1.9 + +No user-facing changes. + ## 2.1.8 No user-facing changes. diff --git a/shared/dataflow/change-notes/released/2.1.9.md b/shared/dataflow/change-notes/released/2.1.9.md new file mode 100644 index 000000000000..28c98cd9d95d --- /dev/null +++ b/shared/dataflow/change-notes/released/2.1.9.md @@ -0,0 +1,3 @@ +## 2.1.9 + +No user-facing changes. diff --git a/shared/dataflow/codeql-pack.release.yml b/shared/dataflow/codeql-pack.release.yml index 93b985f46e17..545d5dc7658c 100644 --- a/shared/dataflow/codeql-pack.release.yml +++ b/shared/dataflow/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 2.1.8 +lastReleaseVersion: 2.1.9 diff --git a/shared/dataflow/qlpack.yml b/shared/dataflow/qlpack.yml index ae047432fc55..24de3405f909 100644 --- a/shared/dataflow/qlpack.yml +++ b/shared/dataflow/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/dataflow -version: 2.1.9-dev +version: 2.1.9 groups: shared library: true dependencies: diff --git a/shared/mad/CHANGELOG.md b/shared/mad/CHANGELOG.md index 084948801526..76889f7ca3c8 100644 --- a/shared/mad/CHANGELOG.md +++ b/shared/mad/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.53 + +No user-facing changes. + ## 1.0.52 No user-facing changes. diff --git a/shared/mad/change-notes/released/1.0.53.md b/shared/mad/change-notes/released/1.0.53.md new file mode 100644 index 000000000000..0421d6f4cada --- /dev/null +++ b/shared/mad/change-notes/released/1.0.53.md @@ -0,0 +1,3 @@ +## 1.0.53 + +No user-facing changes. diff --git a/shared/mad/codeql-pack.release.yml b/shared/mad/codeql-pack.release.yml index ea1d2eed4d21..fb44bfeae137 100644 --- a/shared/mad/codeql-pack.release.yml +++ b/shared/mad/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.52 +lastReleaseVersion: 1.0.53 diff --git a/shared/mad/qlpack.yml b/shared/mad/qlpack.yml index 066ccfdf771e..44bf6c5c6a6d 100644 --- a/shared/mad/qlpack.yml +++ b/shared/mad/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/mad -version: 1.0.53-dev +version: 1.0.53 groups: shared library: true dependencies: diff --git a/shared/namebinding/CHANGELOG.md b/shared/namebinding/CHANGELOG.md index 59b60bad0f37..7668a5ba39d5 100644 --- a/shared/namebinding/CHANGELOG.md +++ b/shared/namebinding/CHANGELOG.md @@ -1,3 +1,7 @@ +## 0.0.2 + +No user-facing changes. + ## 0.0.1 No user-facing changes. diff --git a/shared/namebinding/change-notes/released/0.0.2.md b/shared/namebinding/change-notes/released/0.0.2.md new file mode 100644 index 000000000000..5ab250998ed4 --- /dev/null +++ b/shared/namebinding/change-notes/released/0.0.2.md @@ -0,0 +1,3 @@ +## 0.0.2 + +No user-facing changes. diff --git a/shared/namebinding/codeql-pack.release.yml b/shared/namebinding/codeql-pack.release.yml index c6933410b71c..55dc06fbd76a 100644 --- a/shared/namebinding/codeql-pack.release.yml +++ b/shared/namebinding/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.0.1 +lastReleaseVersion: 0.0.2 diff --git a/shared/namebinding/qlpack.yml b/shared/namebinding/qlpack.yml index 15876b502082..9bd12561910a 100644 --- a/shared/namebinding/qlpack.yml +++ b/shared/namebinding/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/namebinding -version: 0.0.2-dev +version: 0.0.2 groups: shared library: true dependencies: diff --git a/shared/quantum/CHANGELOG.md b/shared/quantum/CHANGELOG.md index 1652285654aa..3bbb96e59a9a 100644 --- a/shared/quantum/CHANGELOG.md +++ b/shared/quantum/CHANGELOG.md @@ -1,3 +1,7 @@ +## 0.0.31 + +No user-facing changes. + ## 0.0.30 No user-facing changes. diff --git a/shared/quantum/change-notes/released/0.0.31.md b/shared/quantum/change-notes/released/0.0.31.md new file mode 100644 index 000000000000..99e11d52c92a --- /dev/null +++ b/shared/quantum/change-notes/released/0.0.31.md @@ -0,0 +1,3 @@ +## 0.0.31 + +No user-facing changes. diff --git a/shared/quantum/codeql-pack.release.yml b/shared/quantum/codeql-pack.release.yml index 0c61b463bab3..54b504d06ecb 100644 --- a/shared/quantum/codeql-pack.release.yml +++ b/shared/quantum/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.0.30 +lastReleaseVersion: 0.0.31 diff --git a/shared/quantum/qlpack.yml b/shared/quantum/qlpack.yml index 546491e07687..9f8995a2ca64 100644 --- a/shared/quantum/qlpack.yml +++ b/shared/quantum/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/quantum -version: 0.0.31-dev +version: 0.0.31 groups: shared library: true dependencies: diff --git a/shared/rangeanalysis/CHANGELOG.md b/shared/rangeanalysis/CHANGELOG.md index cc127126c929..fd36e1fd7b51 100644 --- a/shared/rangeanalysis/CHANGELOG.md +++ b/shared/rangeanalysis/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.53 + +No user-facing changes. + ## 1.0.52 No user-facing changes. diff --git a/shared/rangeanalysis/change-notes/released/1.0.53.md b/shared/rangeanalysis/change-notes/released/1.0.53.md new file mode 100644 index 000000000000..0421d6f4cada --- /dev/null +++ b/shared/rangeanalysis/change-notes/released/1.0.53.md @@ -0,0 +1,3 @@ +## 1.0.53 + +No user-facing changes. diff --git a/shared/rangeanalysis/codeql-pack.release.yml b/shared/rangeanalysis/codeql-pack.release.yml index ea1d2eed4d21..fb44bfeae137 100644 --- a/shared/rangeanalysis/codeql-pack.release.yml +++ b/shared/rangeanalysis/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.52 +lastReleaseVersion: 1.0.53 diff --git a/shared/rangeanalysis/qlpack.yml b/shared/rangeanalysis/qlpack.yml index cda17399a57b..b934c84900c1 100644 --- a/shared/rangeanalysis/qlpack.yml +++ b/shared/rangeanalysis/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/rangeanalysis -version: 1.0.53-dev +version: 1.0.53 groups: shared library: true dependencies: diff --git a/shared/regex/CHANGELOG.md b/shared/regex/CHANGELOG.md index 488896015d67..a6d4cc0a69b0 100644 --- a/shared/regex/CHANGELOG.md +++ b/shared/regex/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.53 + +No user-facing changes. + ## 1.0.52 No user-facing changes. diff --git a/shared/regex/change-notes/released/1.0.53.md b/shared/regex/change-notes/released/1.0.53.md new file mode 100644 index 000000000000..0421d6f4cada --- /dev/null +++ b/shared/regex/change-notes/released/1.0.53.md @@ -0,0 +1,3 @@ +## 1.0.53 + +No user-facing changes. diff --git a/shared/regex/codeql-pack.release.yml b/shared/regex/codeql-pack.release.yml index ea1d2eed4d21..fb44bfeae137 100644 --- a/shared/regex/codeql-pack.release.yml +++ b/shared/regex/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.52 +lastReleaseVersion: 1.0.53 diff --git a/shared/regex/qlpack.yml b/shared/regex/qlpack.yml index de6b49e84839..c64f4833d95f 100644 --- a/shared/regex/qlpack.yml +++ b/shared/regex/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/regex -version: 1.0.53-dev +version: 1.0.53 groups: shared library: true dependencies: diff --git a/shared/ssa/CHANGELOG.md b/shared/ssa/CHANGELOG.md index 2348e9a484fb..94914d7b0247 100644 --- a/shared/ssa/CHANGELOG.md +++ b/shared/ssa/CHANGELOG.md @@ -1,3 +1,7 @@ +## 2.0.29 + +No user-facing changes. + ## 2.0.28 No user-facing changes. diff --git a/shared/ssa/change-notes/released/2.0.29.md b/shared/ssa/change-notes/released/2.0.29.md new file mode 100644 index 000000000000..c8e5d5c3d050 --- /dev/null +++ b/shared/ssa/change-notes/released/2.0.29.md @@ -0,0 +1,3 @@ +## 2.0.29 + +No user-facing changes. diff --git a/shared/ssa/codeql-pack.release.yml b/shared/ssa/codeql-pack.release.yml index ec5bd6ba3691..1425cb159e43 100644 --- a/shared/ssa/codeql-pack.release.yml +++ b/shared/ssa/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 2.0.28 +lastReleaseVersion: 2.0.29 diff --git a/shared/ssa/qlpack.yml b/shared/ssa/qlpack.yml index 67bed21c679e..d92b095c581f 100644 --- a/shared/ssa/qlpack.yml +++ b/shared/ssa/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/ssa -version: 2.0.29-dev +version: 2.0.29 groups: shared library: true dependencies: diff --git a/shared/threat-models/CHANGELOG.md b/shared/threat-models/CHANGELOG.md index 1b79dbf69e26..676a2dc0189c 100644 --- a/shared/threat-models/CHANGELOG.md +++ b/shared/threat-models/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.53 + +No user-facing changes. + ## 1.0.52 No user-facing changes. diff --git a/shared/threat-models/change-notes/released/1.0.53.md b/shared/threat-models/change-notes/released/1.0.53.md new file mode 100644 index 000000000000..0421d6f4cada --- /dev/null +++ b/shared/threat-models/change-notes/released/1.0.53.md @@ -0,0 +1,3 @@ +## 1.0.53 + +No user-facing changes. diff --git a/shared/threat-models/codeql-pack.release.yml b/shared/threat-models/codeql-pack.release.yml index ea1d2eed4d21..fb44bfeae137 100644 --- a/shared/threat-models/codeql-pack.release.yml +++ b/shared/threat-models/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.52 +lastReleaseVersion: 1.0.53 diff --git a/shared/threat-models/qlpack.yml b/shared/threat-models/qlpack.yml index 9dd6aaa670a7..782bde4ee5cc 100644 --- a/shared/threat-models/qlpack.yml +++ b/shared/threat-models/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/threat-models -version: 1.0.53-dev +version: 1.0.53 library: true groups: shared dataExtensions: diff --git a/shared/tutorial/CHANGELOG.md b/shared/tutorial/CHANGELOG.md index cb1a4642f731..ebf4a35d7c29 100644 --- a/shared/tutorial/CHANGELOG.md +++ b/shared/tutorial/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.53 + +No user-facing changes. + ## 1.0.52 No user-facing changes. diff --git a/shared/tutorial/change-notes/released/1.0.53.md b/shared/tutorial/change-notes/released/1.0.53.md new file mode 100644 index 000000000000..0421d6f4cada --- /dev/null +++ b/shared/tutorial/change-notes/released/1.0.53.md @@ -0,0 +1,3 @@ +## 1.0.53 + +No user-facing changes. diff --git a/shared/tutorial/codeql-pack.release.yml b/shared/tutorial/codeql-pack.release.yml index ea1d2eed4d21..fb44bfeae137 100644 --- a/shared/tutorial/codeql-pack.release.yml +++ b/shared/tutorial/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.52 +lastReleaseVersion: 1.0.53 diff --git a/shared/tutorial/qlpack.yml b/shared/tutorial/qlpack.yml index db557278bd87..44f487b4b396 100644 --- a/shared/tutorial/qlpack.yml +++ b/shared/tutorial/qlpack.yml @@ -1,7 +1,7 @@ name: codeql/tutorial description: Library for the CodeQL detective tutorials, helping new users learn to write CodeQL queries. -version: 1.0.53-dev +version: 1.0.53 groups: shared library: true warnOnImplicitThis: true diff --git a/shared/typeflow/CHANGELOG.md b/shared/typeflow/CHANGELOG.md index 6e1c15f6a2a4..c48ddc3d6c76 100644 --- a/shared/typeflow/CHANGELOG.md +++ b/shared/typeflow/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.53 + +No user-facing changes. + ## 1.0.52 No user-facing changes. diff --git a/shared/typeflow/change-notes/released/1.0.53.md b/shared/typeflow/change-notes/released/1.0.53.md new file mode 100644 index 000000000000..0421d6f4cada --- /dev/null +++ b/shared/typeflow/change-notes/released/1.0.53.md @@ -0,0 +1,3 @@ +## 1.0.53 + +No user-facing changes. diff --git a/shared/typeflow/codeql-pack.release.yml b/shared/typeflow/codeql-pack.release.yml index ea1d2eed4d21..fb44bfeae137 100644 --- a/shared/typeflow/codeql-pack.release.yml +++ b/shared/typeflow/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.52 +lastReleaseVersion: 1.0.53 diff --git a/shared/typeflow/qlpack.yml b/shared/typeflow/qlpack.yml index 3e904af63e3a..5545bfb44220 100644 --- a/shared/typeflow/qlpack.yml +++ b/shared/typeflow/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/typeflow -version: 1.0.53-dev +version: 1.0.53 groups: shared library: true dependencies: diff --git a/shared/typeinference/CHANGELOG.md b/shared/typeinference/CHANGELOG.md index 66b8fa3444bb..fd3064b1a947 100644 --- a/shared/typeinference/CHANGELOG.md +++ b/shared/typeinference/CHANGELOG.md @@ -1,3 +1,7 @@ +## 0.0.34 + +No user-facing changes. + ## 0.0.33 No user-facing changes. diff --git a/shared/typeinference/change-notes/released/0.0.34.md b/shared/typeinference/change-notes/released/0.0.34.md new file mode 100644 index 000000000000..d58affae3891 --- /dev/null +++ b/shared/typeinference/change-notes/released/0.0.34.md @@ -0,0 +1,3 @@ +## 0.0.34 + +No user-facing changes. diff --git a/shared/typeinference/codeql-pack.release.yml b/shared/typeinference/codeql-pack.release.yml index dff9e7f6ea97..6fb3b6253bb9 100644 --- a/shared/typeinference/codeql-pack.release.yml +++ b/shared/typeinference/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.0.33 +lastReleaseVersion: 0.0.34 diff --git a/shared/typeinference/qlpack.yml b/shared/typeinference/qlpack.yml index f25557f4f136..b9625bdbc6da 100644 --- a/shared/typeinference/qlpack.yml +++ b/shared/typeinference/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/typeinference -version: 0.0.34-dev +version: 0.0.34 groups: shared library: true dependencies: diff --git a/shared/typetracking/CHANGELOG.md b/shared/typetracking/CHANGELOG.md index 8a7f7ab70140..8f0a97e4a405 100644 --- a/shared/typetracking/CHANGELOG.md +++ b/shared/typetracking/CHANGELOG.md @@ -1,3 +1,7 @@ +## 2.0.37 + +No user-facing changes. + ## 2.0.36 No user-facing changes. diff --git a/shared/typetracking/change-notes/released/2.0.37.md b/shared/typetracking/change-notes/released/2.0.37.md new file mode 100644 index 000000000000..7d0b67a34af0 --- /dev/null +++ b/shared/typetracking/change-notes/released/2.0.37.md @@ -0,0 +1,3 @@ +## 2.0.37 + +No user-facing changes. diff --git a/shared/typetracking/codeql-pack.release.yml b/shared/typetracking/codeql-pack.release.yml index 7e4aaa0dd676..108259a74002 100644 --- a/shared/typetracking/codeql-pack.release.yml +++ b/shared/typetracking/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 2.0.36 +lastReleaseVersion: 2.0.37 diff --git a/shared/typetracking/qlpack.yml b/shared/typetracking/qlpack.yml index fd9fa8ec813c..2f007b6795d2 100644 --- a/shared/typetracking/qlpack.yml +++ b/shared/typetracking/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/typetracking -version: 2.0.37-dev +version: 2.0.37 groups: shared library: true dependencies: diff --git a/shared/typos/CHANGELOG.md b/shared/typos/CHANGELOG.md index 738e64b021c6..72bc8c938a9c 100644 --- a/shared/typos/CHANGELOG.md +++ b/shared/typos/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.53 + +No user-facing changes. + ## 1.0.52 No user-facing changes. diff --git a/shared/typos/change-notes/released/1.0.53.md b/shared/typos/change-notes/released/1.0.53.md new file mode 100644 index 000000000000..0421d6f4cada --- /dev/null +++ b/shared/typos/change-notes/released/1.0.53.md @@ -0,0 +1,3 @@ +## 1.0.53 + +No user-facing changes. diff --git a/shared/typos/codeql-pack.release.yml b/shared/typos/codeql-pack.release.yml index ea1d2eed4d21..fb44bfeae137 100644 --- a/shared/typos/codeql-pack.release.yml +++ b/shared/typos/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.52 +lastReleaseVersion: 1.0.53 diff --git a/shared/typos/qlpack.yml b/shared/typos/qlpack.yml index 9e8d3b21c015..3b6940512a64 100644 --- a/shared/typos/qlpack.yml +++ b/shared/typos/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/typos -version: 1.0.53-dev +version: 1.0.53 groups: shared library: true warnOnImplicitThis: true diff --git a/shared/util/CHANGELOG.md b/shared/util/CHANGELOG.md index 10b02218c5fd..f079131d61ff 100644 --- a/shared/util/CHANGELOG.md +++ b/shared/util/CHANGELOG.md @@ -1,3 +1,7 @@ +## 2.0.40 + +No user-facing changes. + ## 2.0.39 No user-facing changes. diff --git a/shared/util/change-notes/released/2.0.40.md b/shared/util/change-notes/released/2.0.40.md new file mode 100644 index 000000000000..889c7f385592 --- /dev/null +++ b/shared/util/change-notes/released/2.0.40.md @@ -0,0 +1,3 @@ +## 2.0.40 + +No user-facing changes. diff --git a/shared/util/codeql-pack.release.yml b/shared/util/codeql-pack.release.yml index 063a268e5f9f..df31666e556c 100644 --- a/shared/util/codeql-pack.release.yml +++ b/shared/util/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 2.0.39 +lastReleaseVersion: 2.0.40 diff --git a/shared/util/qlpack.yml b/shared/util/qlpack.yml index 2ab432b4e47e..44ea768668f8 100644 --- a/shared/util/qlpack.yml +++ b/shared/util/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/util -version: 2.0.40-dev +version: 2.0.40 groups: shared library: true dependencies: null diff --git a/shared/xml/CHANGELOG.md b/shared/xml/CHANGELOG.md index 4a639c1f50f9..f857db7bb805 100644 --- a/shared/xml/CHANGELOG.md +++ b/shared/xml/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.53 + +No user-facing changes. + ## 1.0.52 No user-facing changes. diff --git a/shared/xml/change-notes/released/1.0.53.md b/shared/xml/change-notes/released/1.0.53.md new file mode 100644 index 000000000000..0421d6f4cada --- /dev/null +++ b/shared/xml/change-notes/released/1.0.53.md @@ -0,0 +1,3 @@ +## 1.0.53 + +No user-facing changes. diff --git a/shared/xml/codeql-pack.release.yml b/shared/xml/codeql-pack.release.yml index ea1d2eed4d21..fb44bfeae137 100644 --- a/shared/xml/codeql-pack.release.yml +++ b/shared/xml/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.52 +lastReleaseVersion: 1.0.53 diff --git a/shared/xml/qlpack.yml b/shared/xml/qlpack.yml index 375658357125..6c506e429871 100644 --- a/shared/xml/qlpack.yml +++ b/shared/xml/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/xml -version: 1.0.53-dev +version: 1.0.53 groups: shared library: true dependencies: diff --git a/shared/yaml/CHANGELOG.md b/shared/yaml/CHANGELOG.md index 69f699d7847f..a674b0b998bf 100644 --- a/shared/yaml/CHANGELOG.md +++ b/shared/yaml/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.53 + +No user-facing changes. + ## 1.0.52 No user-facing changes. diff --git a/shared/yaml/change-notes/released/1.0.53.md b/shared/yaml/change-notes/released/1.0.53.md new file mode 100644 index 000000000000..0421d6f4cada --- /dev/null +++ b/shared/yaml/change-notes/released/1.0.53.md @@ -0,0 +1,3 @@ +## 1.0.53 + +No user-facing changes. diff --git a/shared/yaml/codeql-pack.release.yml b/shared/yaml/codeql-pack.release.yml index ea1d2eed4d21..fb44bfeae137 100644 --- a/shared/yaml/codeql-pack.release.yml +++ b/shared/yaml/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.52 +lastReleaseVersion: 1.0.53 diff --git a/shared/yaml/qlpack.yml b/shared/yaml/qlpack.yml index 795bbb1b1a74..a9b004ad8ff0 100644 --- a/shared/yaml/qlpack.yml +++ b/shared/yaml/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/yaml -version: 1.0.53-dev +version: 1.0.53 groups: shared library: true warnOnImplicitThis: true diff --git a/swift/ql/lib/CHANGELOG.md b/swift/ql/lib/CHANGELOG.md index 1d75e0d4eb1c..a590169625d3 100644 --- a/swift/ql/lib/CHANGELOG.md +++ b/swift/ql/lib/CHANGELOG.md @@ -1,3 +1,7 @@ +## 6.7.2 + +No user-facing changes. + ## 6.7.1 No user-facing changes. diff --git a/swift/ql/lib/change-notes/released/6.7.2.md b/swift/ql/lib/change-notes/released/6.7.2.md new file mode 100644 index 000000000000..0f421a7c8fd0 --- /dev/null +++ b/swift/ql/lib/change-notes/released/6.7.2.md @@ -0,0 +1,3 @@ +## 6.7.2 + +No user-facing changes. diff --git a/swift/ql/lib/codeql-pack.release.yml b/swift/ql/lib/codeql-pack.release.yml index 9512a723a329..c29ce0744161 100644 --- a/swift/ql/lib/codeql-pack.release.yml +++ b/swift/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 6.7.1 +lastReleaseVersion: 6.7.2 diff --git a/swift/ql/lib/qlpack.yml b/swift/ql/lib/qlpack.yml index 1000e5b25b90..f4160734f511 100644 --- a/swift/ql/lib/qlpack.yml +++ b/swift/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/swift-all -version: 6.7.2-dev +version: 6.7.2 groups: swift extractor: swift dbscheme: swift.dbscheme diff --git a/swift/ql/src/CHANGELOG.md b/swift/ql/src/CHANGELOG.md index d185e3d54286..8457bde2f420 100644 --- a/swift/ql/src/CHANGELOG.md +++ b/swift/ql/src/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.3.6 + +No user-facing changes. + ## 1.3.5 ### Minor Analysis Improvements diff --git a/swift/ql/src/change-notes/released/1.3.6.md b/swift/ql/src/change-notes/released/1.3.6.md new file mode 100644 index 000000000000..ce7baecf2109 --- /dev/null +++ b/swift/ql/src/change-notes/released/1.3.6.md @@ -0,0 +1,3 @@ +## 1.3.6 + +No user-facing changes. diff --git a/swift/ql/src/codeql-pack.release.yml b/swift/ql/src/codeql-pack.release.yml index 1e1845ea66d3..0a0b09863112 100644 --- a/swift/ql/src/codeql-pack.release.yml +++ b/swift/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.3.5 +lastReleaseVersion: 1.3.6 diff --git a/swift/ql/src/qlpack.yml b/swift/ql/src/qlpack.yml index de366deabb73..b1fd127caaa4 100644 --- a/swift/ql/src/qlpack.yml +++ b/swift/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/swift-queries -version: 1.3.6-dev +version: 1.3.6 groups: - swift - queries