diff --git a/actions/ql/lib/CHANGELOG.md b/actions/ql/lib/CHANGELOG.md index ea32d9c07193..e686c4d596f4 100644 --- a/actions/ql/lib/CHANGELOG.md +++ b/actions/ql/lib/CHANGELOG.md @@ -1,3 +1,14 @@ +## 0.6.0 + +### Breaking Changes + +* Checks on actor fields read from the event payload (e.g. `github.event.pull_request.user.login`) were split out of `ActorIfCheck` into a new class `EventActorIfCheck`. The `ActorIfCheck` class now only covers `github.actor` and `github.triggering_actor`. + +### Minor Analysis Improvements + +* Checks on actor fields read from the event payload (e.g. `github.event.pull_request.user.login`) now only count as protection for events whose payload actually populates that field. Previously, a condition such as `github.event.pull_request.user.login != 'name'` on a workflow triggered by `issues` events was treated as a protective check even though `github.event.pull_request` is not populated for `issues` events, which makes the condition vacuous. This change may result in more alerts for queries using the `ControlCheck` class. +* Added an option to `EnvironmentCheck` to become specified by a MaD model, otherwise it will continue as the default it previously was. Without adding models to `actions/ql/lib/ext/config/deployment_environment.yml` the behavior of every query will be unchanged. When models are added queries using `ControlCheck` may find more results in cases where an environment is no longer a sufficient sanitizer. + ## 0.5.0 ### Breaking Changes diff --git a/actions/ql/lib/change-notes/2026-07-22-environment-check-sanitizer-mad.md b/actions/ql/lib/change-notes/2026-07-22-environment-check-sanitizer-mad.md deleted file mode 100644 index 0af62ba426de..000000000000 --- a/actions/ql/lib/change-notes/2026-07-22-environment-check-sanitizer-mad.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* Added an option to `EnvironmentCheck` to become specified by a MaD model, otherwise it will continue as the default it previously was. Without adding models to `actions/ql/lib/ext/config/deployment_environment.yml` the behavior of every query will be unchanged. When models are added queries using `ControlCheck` may find more results in cases where an environment is no longer a sufficient sanitizer. \ No newline at end of file diff --git a/actions/ql/lib/change-notes/2026-08-17-actor-if-check-event-validity.md b/actions/ql/lib/change-notes/2026-08-17-actor-if-check-event-validity.md deleted file mode 100644 index 72f3c3fd4ece..000000000000 --- a/actions/ql/lib/change-notes/2026-08-17-actor-if-check-event-validity.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* Checks on actor fields read from the event payload (e.g. `github.event.pull_request.user.login`) now only count as protection for events whose payload actually populates that field. Previously, a condition such as `github.event.pull_request.user.login != 'name'` on a workflow triggered by `issues` events was treated as a protective check even though `github.event.pull_request` is not populated for `issues` events, which makes the condition vacuous. This change may result in more alerts for queries using the `ControlCheck` class. diff --git a/actions/ql/lib/change-notes/2026-08-18-split-event-actor-if-check.md b/actions/ql/lib/change-notes/2026-08-18-split-event-actor-if-check.md deleted file mode 100644 index 6b6d94df337c..000000000000 --- a/actions/ql/lib/change-notes/2026-08-18-split-event-actor-if-check.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: breaking ---- -* Checks on actor fields read from the event payload (e.g. `github.event.pull_request.user.login`) were split out of `ActorIfCheck` into a new class `EventActorIfCheck`. The `ActorIfCheck` class now only covers `github.actor` and `github.triggering_actor`. diff --git a/actions/ql/lib/change-notes/released/0.6.0.md b/actions/ql/lib/change-notes/released/0.6.0.md new file mode 100644 index 000000000000..3fd465a31cf3 --- /dev/null +++ b/actions/ql/lib/change-notes/released/0.6.0.md @@ -0,0 +1,10 @@ +## 0.6.0 + +### Breaking Changes + +* Checks on actor fields read from the event payload (e.g. `github.event.pull_request.user.login`) were split out of `ActorIfCheck` into a new class `EventActorIfCheck`. The `ActorIfCheck` class now only covers `github.actor` and `github.triggering_actor`. + +### Minor Analysis Improvements + +* Checks on actor fields read from the event payload (e.g. `github.event.pull_request.user.login`) now only count as protection for events whose payload actually populates that field. Previously, a condition such as `github.event.pull_request.user.login != 'name'` on a workflow triggered by `issues` events was treated as a protective check even though `github.event.pull_request` is not populated for `issues` events, which makes the condition vacuous. This change may result in more alerts for queries using the `ControlCheck` class. +* Added an option to `EnvironmentCheck` to become specified by a MaD model, otherwise it will continue as the default it previously was. Without adding models to `actions/ql/lib/ext/config/deployment_environment.yml` the behavior of every query will be unchanged. When models are added queries using `ControlCheck` may find more results in cases where an environment is no longer a sufficient sanitizer. diff --git a/actions/ql/lib/codeql-pack.release.yml b/actions/ql/lib/codeql-pack.release.yml index 30e271c5361c..a3f820f884d3 100644 --- a/actions/ql/lib/codeql-pack.release.yml +++ b/actions/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.5.0 +lastReleaseVersion: 0.6.0 diff --git a/actions/ql/lib/qlpack.yml b/actions/ql/lib/qlpack.yml index d34e010773d5..b86df498d3dd 100644 --- a/actions/ql/lib/qlpack.yml +++ b/actions/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/actions-all -version: 0.5.1-dev +version: 0.6.1-dev library: true warnOnImplicitThis: true dependencies: diff --git a/actions/ql/src/CHANGELOG.md b/actions/ql/src/CHANGELOG.md index 84f8321799d8..6a4f17d872be 100644 --- a/actions/ql/src/CHANGELOG.md +++ b/actions/ql/src/CHANGELOG.md @@ -1,3 +1,9 @@ +## 0.6.34 + +### Minor Analysis Improvements + +* The `actions/unpinned-tag` query now detects mutable references to reusable workflows. + ## 0.6.33 ### Query Metadata Changes diff --git a/actions/ql/src/change-notes/2026-08-05-unpinned-reusable-workflows.md b/actions/ql/src/change-notes/released/0.6.34.md similarity index 66% rename from actions/ql/src/change-notes/2026-08-05-unpinned-reusable-workflows.md rename to actions/ql/src/change-notes/released/0.6.34.md index 6269fdec14e6..cfb871641149 100644 --- a/actions/ql/src/change-notes/2026-08-05-unpinned-reusable-workflows.md +++ b/actions/ql/src/change-notes/released/0.6.34.md @@ -1,4 +1,5 @@ ---- -category: minorAnalysis ---- +## 0.6.34 + +### Minor Analysis Improvements + * The `actions/unpinned-tag` query now detects mutable references to reusable workflows. diff --git a/actions/ql/src/codeql-pack.release.yml b/actions/ql/src/codeql-pack.release.yml index ce257a8193e6..fe5075b50fbd 100644 --- a/actions/ql/src/codeql-pack.release.yml +++ b/actions/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.6.33 +lastReleaseVersion: 0.6.34 diff --git a/actions/ql/src/qlpack.yml b/actions/ql/src/qlpack.yml index 7fd1cb7e8d76..f4323defe6e8 100644 --- a/actions/ql/src/qlpack.yml +++ b/actions/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/actions-queries -version: 0.6.34-dev +version: 0.6.35-dev library: false warnOnImplicitThis: true groups: [actions, queries] diff --git a/cpp/ql/lib/CHANGELOG.md b/cpp/ql/lib/CHANGELOG.md index 04ad4bba646b..eb81fb24c603 100644 --- a/cpp/ql/lib/CHANGELOG.md +++ b/cpp/ql/lib/CHANGELOG.md @@ -1,3 +1,7 @@ +## 12.0.3 + +No user-facing changes. + ## 12.0.2 ### Minor Analysis Improvements diff --git a/cpp/ql/lib/change-notes/released/12.0.3.md b/cpp/ql/lib/change-notes/released/12.0.3.md new file mode 100644 index 000000000000..b86eecea8b6d --- /dev/null +++ b/cpp/ql/lib/change-notes/released/12.0.3.md @@ -0,0 +1,3 @@ +## 12.0.3 + +No user-facing changes. diff --git a/cpp/ql/lib/codeql-pack.release.yml b/cpp/ql/lib/codeql-pack.release.yml index 500fb3b8051e..9901aa9768db 100644 --- a/cpp/ql/lib/codeql-pack.release.yml +++ b/cpp/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 12.0.2 +lastReleaseVersion: 12.0.3 diff --git a/cpp/ql/lib/qlpack.yml b/cpp/ql/lib/qlpack.yml index 0d952a0c1bf9..b676012be506 100644 --- a/cpp/ql/lib/qlpack.yml +++ b/cpp/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/cpp-all -version: 12.0.3-dev +version: 12.0.4-dev groups: cpp dbscheme: semmlecode.cpp.dbscheme extractor: cpp diff --git a/cpp/ql/src/CHANGELOG.md b/cpp/ql/src/CHANGELOG.md index bc3adffadcdc..9a8c1243217c 100644 --- a/cpp/ql/src/CHANGELOG.md +++ b/cpp/ql/src/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.8.2 + +No user-facing changes. + ## 1.8.1 No user-facing changes. diff --git a/cpp/ql/src/change-notes/released/1.8.2.md b/cpp/ql/src/change-notes/released/1.8.2.md new file mode 100644 index 000000000000..12e641fd7205 --- /dev/null +++ b/cpp/ql/src/change-notes/released/1.8.2.md @@ -0,0 +1,3 @@ +## 1.8.2 + +No user-facing changes. diff --git a/cpp/ql/src/codeql-pack.release.yml b/cpp/ql/src/codeql-pack.release.yml index 28a7c123ae84..559af8348bb0 100644 --- a/cpp/ql/src/codeql-pack.release.yml +++ b/cpp/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.8.1 +lastReleaseVersion: 1.8.2 diff --git a/cpp/ql/src/qlpack.yml b/cpp/ql/src/qlpack.yml index 278570c799c1..b365b8a398c3 100644 --- a/cpp/ql/src/qlpack.yml +++ b/cpp/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/cpp-queries -version: 1.8.2-dev +version: 1.8.3-dev groups: - cpp - queries diff --git a/csharp/ql/campaigns/Solorigate/lib/CHANGELOG.md b/csharp/ql/campaigns/Solorigate/lib/CHANGELOG.md index f1ee51f9d945..1897f105e373 100644 --- a/csharp/ql/campaigns/Solorigate/lib/CHANGELOG.md +++ b/csharp/ql/campaigns/Solorigate/lib/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.7.73 + +No user-facing changes. + ## 1.7.72 No user-facing changes. diff --git a/csharp/ql/campaigns/Solorigate/lib/change-notes/released/1.7.73.md b/csharp/ql/campaigns/Solorigate/lib/change-notes/released/1.7.73.md new file mode 100644 index 000000000000..9670f3f83e28 --- /dev/null +++ b/csharp/ql/campaigns/Solorigate/lib/change-notes/released/1.7.73.md @@ -0,0 +1,3 @@ +## 1.7.73 + +No user-facing changes. diff --git a/csharp/ql/campaigns/Solorigate/lib/codeql-pack.release.yml b/csharp/ql/campaigns/Solorigate/lib/codeql-pack.release.yml index 33d595a3ea10..95fecc284bee 100644 --- a/csharp/ql/campaigns/Solorigate/lib/codeql-pack.release.yml +++ b/csharp/ql/campaigns/Solorigate/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.7.72 +lastReleaseVersion: 1.7.73 diff --git a/csharp/ql/campaigns/Solorigate/lib/qlpack.yml b/csharp/ql/campaigns/Solorigate/lib/qlpack.yml index 0cfb3ff63b60..d045c1c7224b 100644 --- a/csharp/ql/campaigns/Solorigate/lib/qlpack.yml +++ b/csharp/ql/campaigns/Solorigate/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/csharp-solorigate-all -version: 1.7.73-dev +version: 1.7.74-dev groups: - csharp - solorigate diff --git a/csharp/ql/campaigns/Solorigate/src/CHANGELOG.md b/csharp/ql/campaigns/Solorigate/src/CHANGELOG.md index f1ee51f9d945..1897f105e373 100644 --- a/csharp/ql/campaigns/Solorigate/src/CHANGELOG.md +++ b/csharp/ql/campaigns/Solorigate/src/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.7.73 + +No user-facing changes. + ## 1.7.72 No user-facing changes. diff --git a/csharp/ql/campaigns/Solorigate/src/change-notes/released/1.7.73.md b/csharp/ql/campaigns/Solorigate/src/change-notes/released/1.7.73.md new file mode 100644 index 000000000000..9670f3f83e28 --- /dev/null +++ b/csharp/ql/campaigns/Solorigate/src/change-notes/released/1.7.73.md @@ -0,0 +1,3 @@ +## 1.7.73 + +No user-facing changes. diff --git a/csharp/ql/campaigns/Solorigate/src/codeql-pack.release.yml b/csharp/ql/campaigns/Solorigate/src/codeql-pack.release.yml index 33d595a3ea10..95fecc284bee 100644 --- a/csharp/ql/campaigns/Solorigate/src/codeql-pack.release.yml +++ b/csharp/ql/campaigns/Solorigate/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.7.72 +lastReleaseVersion: 1.7.73 diff --git a/csharp/ql/campaigns/Solorigate/src/qlpack.yml b/csharp/ql/campaigns/Solorigate/src/qlpack.yml index 6b8fec930b4c..3b5e1b3341e3 100644 --- a/csharp/ql/campaigns/Solorigate/src/qlpack.yml +++ b/csharp/ql/campaigns/Solorigate/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/csharp-solorigate-queries -version: 1.7.73-dev +version: 1.7.74-dev groups: - csharp - solorigate diff --git a/csharp/ql/lib/CHANGELOG.md b/csharp/ql/lib/CHANGELOG.md index ccfde0f7f8fb..4df4b3da22fa 100644 --- a/csharp/ql/lib/CHANGELOG.md +++ b/csharp/ql/lib/CHANGELOG.md @@ -1,3 +1,13 @@ +## 7.2.0 + +### New Features + +* Added the `AdditionalTaintStep` extension point (`semmle.code.csharp.dataflow.FlowSteps`). Extend this class to add additional taint steps that apply to all taint-tracking configurations. + +### Major Analysis Improvements + +* Simplified and streamlined the use of NuGet sources when downloading dependencies. In fallback scenarios and specialized package downloads, NuGet sources are now passed directly to `dotnet restore` via the CLI. Furthermore, no `nuget.config` files are created for fallback scenarios, and private registries are used when attempting to download missing packages that were not restored as part of the normal `dotnet restore` process. + ## 7.1.2 No user-facing changes. diff --git a/csharp/ql/lib/change-notes/2026-08-15-additional-taint-step.md b/csharp/ql/lib/change-notes/2026-08-15-additional-taint-step.md deleted file mode 100644 index 6b87eef63b3a..000000000000 --- a/csharp/ql/lib/change-notes/2026-08-15-additional-taint-step.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: feature ---- -* Added the `AdditionalTaintStep` extension point (`semmle.code.csharp.dataflow.FlowSteps`). Extend this class to add additional taint steps that apply to all taint-tracking configurations. diff --git a/csharp/ql/lib/change-notes/2026-07-17-nuget-package-restore.md b/csharp/ql/lib/change-notes/released/7.2.0.md similarity index 63% rename from csharp/ql/lib/change-notes/2026-07-17-nuget-package-restore.md rename to csharp/ql/lib/change-notes/released/7.2.0.md index 5dd7388d04fe..871f5519ab31 100644 --- a/csharp/ql/lib/change-notes/2026-07-17-nuget-package-restore.md +++ b/csharp/ql/lib/change-notes/released/7.2.0.md @@ -1,4 +1,9 @@ ---- -category: majorAnalysis ---- +## 7.2.0 + +### New Features + +* Added the `AdditionalTaintStep` extension point (`semmle.code.csharp.dataflow.FlowSteps`). Extend this class to add additional taint steps that apply to all taint-tracking configurations. + +### Major Analysis Improvements + * Simplified and streamlined the use of NuGet sources when downloading dependencies. In fallback scenarios and specialized package downloads, NuGet sources are now passed directly to `dotnet restore` via the CLI. Furthermore, no `nuget.config` files are created for fallback scenarios, and private registries are used when attempting to download missing packages that were not restored as part of the normal `dotnet restore` process. diff --git a/csharp/ql/lib/codeql-pack.release.yml b/csharp/ql/lib/codeql-pack.release.yml index 547681cc4408..fda9ea165fc5 100644 --- a/csharp/ql/lib/codeql-pack.release.yml +++ b/csharp/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 7.1.2 +lastReleaseVersion: 7.2.0 diff --git a/csharp/ql/lib/qlpack.yml b/csharp/ql/lib/qlpack.yml index 508cf13c8ff8..c011a9a20d0b 100644 --- a/csharp/ql/lib/qlpack.yml +++ b/csharp/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/csharp-all -version: 7.1.3-dev +version: 7.2.1-dev groups: csharp dbscheme: semmlecode.csharp.dbscheme extractor: csharp diff --git a/csharp/ql/src/CHANGELOG.md b/csharp/ql/src/CHANGELOG.md index 6fab89a5cac1..2e430f88a6ed 100644 --- a/csharp/ql/src/CHANGELOG.md +++ b/csharp/ql/src/CHANGELOG.md @@ -1,3 +1,16 @@ +## 1.9.2 + +### Minor Analysis Improvements + +* The `cs/simplifiable-boolean-expression` query no longer suggests replacing a negated comparison when the replacement could recursively call an enclosing user-defined operator in `build-mode: none` databases. +* The `cs/web/missing-token-validation` query now recognizes enabled ASP.NET Core `RequireAntiforgeryToken` attributes when antiforgery middleware is used. +* The query `cs/virtual-call-in-constructor` has been improved. Uses of virtual members in `nameof` expressions are no longer reported, since they are not calls. +* Static constructors are now used as the enclosing callable for static member initializer expressions. This improves the precision of a range of queries, including `cs/useless-assignment-to-local` and `cs/dereferenced-value-may-be-null`. + +### Bug Fixes + +* The query `cs/useless-cast-to-self` no longer reports casts when both the expression type and the cast target type are unknown, which can occur in `build-mode: none` databases. + ## 1.9.1 No user-facing changes. diff --git a/csharp/ql/src/change-notes/2026-07-15-static-member-enclosing-callable.md b/csharp/ql/src/change-notes/2026-07-15-static-member-enclosing-callable.md deleted file mode 100644 index 267f212a991e..000000000000 --- a/csharp/ql/src/change-notes/2026-07-15-static-member-enclosing-callable.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* Static constructors are now used as the enclosing callable for static member initializer expressions. This improves the precision of a range of queries, including `cs/useless-assignment-to-local` and `cs/dereferenced-value-may-be-null`. diff --git a/csharp/ql/src/change-notes/2026-07-16-virtual-call-in-constructor.md b/csharp/ql/src/change-notes/2026-07-16-virtual-call-in-constructor.md deleted file mode 100644 index bd1f5f99a4f5..000000000000 --- a/csharp/ql/src/change-notes/2026-07-16-virtual-call-in-constructor.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* The query `cs/virtual-call-in-constructor` has been improved. Uses of virtual members in `nameof` expressions are no longer reported, since they are not calls. diff --git a/csharp/ql/src/change-notes/2026-08-09-require-antiforgery-token.md b/csharp/ql/src/change-notes/2026-08-09-require-antiforgery-token.md deleted file mode 100644 index ce1b6e9418fe..000000000000 --- a/csharp/ql/src/change-notes/2026-08-09-require-antiforgery-token.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* The `cs/web/missing-token-validation` query now recognizes enabled ASP.NET Core `RequireAntiforgeryToken` attributes when antiforgery middleware is used. diff --git a/csharp/ql/src/change-notes/2026-08-13-simplifiable-operator-recursion.md b/csharp/ql/src/change-notes/2026-08-13-simplifiable-operator-recursion.md deleted file mode 100644 index 177df03a1b55..000000000000 --- a/csharp/ql/src/change-notes/2026-08-13-simplifiable-operator-recursion.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* The `cs/simplifiable-boolean-expression` query no longer suggests replacing a negated comparison when the replacement could recursively call an enclosing user-defined operator in `build-mode: none` databases. diff --git a/csharp/ql/src/change-notes/2026-08-20-harden-useless-cast-to-self.md b/csharp/ql/src/change-notes/2026-08-20-harden-useless-cast-to-self.md deleted file mode 100644 index bb5bb85b86e7..000000000000 --- a/csharp/ql/src/change-notes/2026-08-20-harden-useless-cast-to-self.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: fix ---- -* The query `cs/useless-cast-to-self` no longer reports casts when both the expression type and the cast target type are unknown, which can occur in `build-mode: none` databases. diff --git a/csharp/ql/src/change-notes/released/1.9.2.md b/csharp/ql/src/change-notes/released/1.9.2.md new file mode 100644 index 000000000000..1beedc8ed107 --- /dev/null +++ b/csharp/ql/src/change-notes/released/1.9.2.md @@ -0,0 +1,12 @@ +## 1.9.2 + +### Minor Analysis Improvements + +* The `cs/simplifiable-boolean-expression` query no longer suggests replacing a negated comparison when the replacement could recursively call an enclosing user-defined operator in `build-mode: none` databases. +* The `cs/web/missing-token-validation` query now recognizes enabled ASP.NET Core `RequireAntiforgeryToken` attributes when antiforgery middleware is used. +* The query `cs/virtual-call-in-constructor` has been improved. Uses of virtual members in `nameof` expressions are no longer reported, since they are not calls. +* Static constructors are now used as the enclosing callable for static member initializer expressions. This improves the precision of a range of queries, including `cs/useless-assignment-to-local` and `cs/dereferenced-value-may-be-null`. + +### Bug Fixes + +* The query `cs/useless-cast-to-self` no longer reports casts when both the expression type and the cast target type are unknown, which can occur in `build-mode: none` databases. diff --git a/csharp/ql/src/codeql-pack.release.yml b/csharp/ql/src/codeql-pack.release.yml index 29c886b15136..842136056d89 100644 --- a/csharp/ql/src/codeql-pack.release.yml +++ b/csharp/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.9.1 +lastReleaseVersion: 1.9.2 diff --git a/csharp/ql/src/qlpack.yml b/csharp/ql/src/qlpack.yml index 4ef09838698b..84048f55bc43 100644 --- a/csharp/ql/src/qlpack.yml +++ b/csharp/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/csharp-queries -version: 1.9.2-dev +version: 1.9.3-dev groups: - csharp - queries diff --git a/go/ql/consistency-queries/CHANGELOG.md b/go/ql/consistency-queries/CHANGELOG.md index 3a3948e7bf27..7a0754e81b29 100644 --- a/go/ql/consistency-queries/CHANGELOG.md +++ b/go/ql/consistency-queries/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.56 + +No user-facing changes. + ## 1.0.55 No user-facing changes. diff --git a/go/ql/consistency-queries/change-notes/released/1.0.56.md b/go/ql/consistency-queries/change-notes/released/1.0.56.md new file mode 100644 index 000000000000..3b784cb7d975 --- /dev/null +++ b/go/ql/consistency-queries/change-notes/released/1.0.56.md @@ -0,0 +1,3 @@ +## 1.0.56 + +No user-facing changes. diff --git a/go/ql/consistency-queries/codeql-pack.release.yml b/go/ql/consistency-queries/codeql-pack.release.yml index 3c942a6b4ea3..9bb27b4fdb71 100644 --- a/go/ql/consistency-queries/codeql-pack.release.yml +++ b/go/ql/consistency-queries/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.55 +lastReleaseVersion: 1.0.56 diff --git a/go/ql/consistency-queries/qlpack.yml b/go/ql/consistency-queries/qlpack.yml index 60858d6a6abe..bebfec169a09 100644 --- a/go/ql/consistency-queries/qlpack.yml +++ b/go/ql/consistency-queries/qlpack.yml @@ -1,5 +1,5 @@ name: codeql-go-consistency-queries -version: 1.0.56-dev +version: 1.0.57-dev groups: - go - queries diff --git a/go/ql/lib/CHANGELOG.md b/go/ql/lib/CHANGELOG.md index 14c075851e29..7ccc01fbd4c4 100644 --- a/go/ql/lib/CHANGELOG.md +++ b/go/ql/lib/CHANGELOG.md @@ -1,3 +1,9 @@ +## 7.3.0 + +### Major Analysis Improvements + +* Go 1.27 is now supported. + ## 7.2.3 No user-facing changes. diff --git a/go/ql/lib/change-notes/2026-06-25-go-1.27.md b/go/ql/lib/change-notes/2026-06-25-go-1.27.md deleted file mode 100644 index b1998aee7f54..000000000000 --- a/go/ql/lib/change-notes/2026-06-25-go-1.27.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: majorAnalysis ---- -* Go 1.27 is now supported. diff --git a/go/ql/lib/change-notes/released/7.3.0.md b/go/ql/lib/change-notes/released/7.3.0.md new file mode 100644 index 000000000000..0088cfeb9f50 --- /dev/null +++ b/go/ql/lib/change-notes/released/7.3.0.md @@ -0,0 +1,5 @@ +## 7.3.0 + +### Major Analysis Improvements + +* Go 1.27 is now supported. diff --git a/go/ql/lib/codeql-pack.release.yml b/go/ql/lib/codeql-pack.release.yml index 7d0dee6395ee..2b9b871fffa7 100644 --- a/go/ql/lib/codeql-pack.release.yml +++ b/go/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 7.2.3 +lastReleaseVersion: 7.3.0 diff --git a/go/ql/lib/qlpack.yml b/go/ql/lib/qlpack.yml index f9e43b1c5c5f..12e9a5f97982 100644 --- a/go/ql/lib/qlpack.yml +++ b/go/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/go-all -version: 7.2.4-dev +version: 7.3.1-dev groups: go dbscheme: go.dbscheme extractor: go diff --git a/go/ql/src/CHANGELOG.md b/go/ql/src/CHANGELOG.md index 9dfd046bec53..8b7e75f28b40 100644 --- a/go/ql/src/CHANGELOG.md +++ b/go/ql/src/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.6.9 + +No user-facing changes. + ## 1.6.8 No user-facing changes. diff --git a/go/ql/src/change-notes/released/1.6.9.md b/go/ql/src/change-notes/released/1.6.9.md new file mode 100644 index 000000000000..65abde2f749b --- /dev/null +++ b/go/ql/src/change-notes/released/1.6.9.md @@ -0,0 +1,3 @@ +## 1.6.9 + +No user-facing changes. diff --git a/go/ql/src/codeql-pack.release.yml b/go/ql/src/codeql-pack.release.yml index fbc11aa62b75..018779df35eb 100644 --- a/go/ql/src/codeql-pack.release.yml +++ b/go/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.6.8 +lastReleaseVersion: 1.6.9 diff --git a/go/ql/src/qlpack.yml b/go/ql/src/qlpack.yml index 85593d15c062..64813b045694 100644 --- a/go/ql/src/qlpack.yml +++ b/go/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/go-queries -version: 1.6.9-dev +version: 1.6.10-dev groups: - go - queries diff --git a/java/ql/lib/CHANGELOG.md b/java/ql/lib/CHANGELOG.md index 2fd58088dab6..4d0a6c8c20fd 100644 --- a/java/ql/lib/CHANGELOG.md +++ b/java/ql/lib/CHANGELOG.md @@ -1,3 +1,10 @@ +## 9.2.4 + +### Minor Analysis Improvements + +* Removed the summary model for `String.valueOf(CharSequence)`, which does not exist. Instead, taint is now propagated through calls to `String.valueOf(Object)` when the argument is a `CharSequence`, for example a `String` or a `StringBuilder`. +* Added SQL injection sink models for Spring R2DBC `DatabaseClient` and the R2DBC SPI. + ## 9.2.3 No user-facing changes. diff --git a/java/ql/lib/change-notes/2026-08-04-spring-r2dbc-sql-injection.md b/java/ql/lib/change-notes/2026-08-04-spring-r2dbc-sql-injection.md deleted file mode 100644 index a8d4de85e4cb..000000000000 --- a/java/ql/lib/change-notes/2026-08-04-spring-r2dbc-sql-injection.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* Added SQL injection sink models for Spring R2DBC `DatabaseClient` and the R2DBC SPI. diff --git a/java/ql/lib/change-notes/2026-08-11-string-valueof-charsequence.md b/java/ql/lib/change-notes/released/9.2.4.md similarity index 65% rename from java/ql/lib/change-notes/2026-08-11-string-valueof-charsequence.md rename to java/ql/lib/change-notes/released/9.2.4.md index 51331eb08372..8b1f87145a79 100644 --- a/java/ql/lib/change-notes/2026-08-11-string-valueof-charsequence.md +++ b/java/ql/lib/change-notes/released/9.2.4.md @@ -1,4 +1,6 @@ ---- -category: minorAnalysis ---- +## 9.2.4 + +### Minor Analysis Improvements + * Removed the summary model for `String.valueOf(CharSequence)`, which does not exist. Instead, taint is now propagated through calls to `String.valueOf(Object)` when the argument is a `CharSequence`, for example a `String` or a `StringBuilder`. +* Added SQL injection sink models for Spring R2DBC `DatabaseClient` and the R2DBC SPI. diff --git a/java/ql/lib/codeql-pack.release.yml b/java/ql/lib/codeql-pack.release.yml index 39a6208d44d2..19834a650c92 100644 --- a/java/ql/lib/codeql-pack.release.yml +++ b/java/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 9.2.3 +lastReleaseVersion: 9.2.4 diff --git a/java/ql/lib/qlpack.yml b/java/ql/lib/qlpack.yml index 1dd82feca5c3..0beb3b3caa70 100644 --- a/java/ql/lib/qlpack.yml +++ b/java/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/java-all -version: 9.2.4-dev +version: 9.2.5-dev groups: java dbscheme: config/semmlecode.dbscheme extractor: java diff --git a/java/ql/src/CHANGELOG.md b/java/ql/src/CHANGELOG.md index b31db924d53d..2ff710125824 100644 --- a/java/ql/src/CHANGELOG.md +++ b/java/ql/src/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.11.9 + +No user-facing changes. + ## 1.11.8 No user-facing changes. diff --git a/java/ql/src/change-notes/released/1.11.9.md b/java/ql/src/change-notes/released/1.11.9.md new file mode 100644 index 000000000000..d502923c39f5 --- /dev/null +++ b/java/ql/src/change-notes/released/1.11.9.md @@ -0,0 +1,3 @@ +## 1.11.9 + +No user-facing changes. diff --git a/java/ql/src/codeql-pack.release.yml b/java/ql/src/codeql-pack.release.yml index 1235b98cb049..ea2e740768c2 100644 --- a/java/ql/src/codeql-pack.release.yml +++ b/java/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.11.8 +lastReleaseVersion: 1.11.9 diff --git a/java/ql/src/qlpack.yml b/java/ql/src/qlpack.yml index 058109d0e15f..6b312fc5dc44 100644 --- a/java/ql/src/qlpack.yml +++ b/java/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/java-queries -version: 1.11.9-dev +version: 1.11.10-dev groups: - java - queries diff --git a/javascript/ql/lib/CHANGELOG.md b/javascript/ql/lib/CHANGELOG.md index 6ac06fe87b99..f83e33346d66 100644 --- a/javascript/ql/lib/CHANGELOG.md +++ b/javascript/ql/lib/CHANGELOG.md @@ -1,15 +1,25 @@ +## 2.10.0 + +### New Features + +- Added support for recognizing the React Native Worklets `"worklet"` directive as a known directive. + +### Minor Analysis Improvements + +* Added support for regular expressions using the `d` flag. + ## 2.9.0 ### Major Analysis Improvements -* It is now possible for custom models to refer to specific files in the codebase, using a package name of the form `file:`. The model should describe the public exports +* It is now possible for custom models to refer to specific files in the codebase, using a package name of form `file:`. The model should describe the public exports of that file. This can be used to derive sources and sinks in code that imports the file, but note that sources and sinks will not generally be placed within the file itself. For example, a source model `['file:lib/service.js', 'Member[getData].ReturnValue', 'remote']` could identify `require('../lib/service').getData()` as a source. ### Minor Analysis Improvements * JavaScript security queries using the `response` threat model now track promise-wrapped client response data into promise fulfillment values. This may improve results for queries such as `js/xss` when response data is consumed through `.then(...)` chains. -* The route object returned by Vue Router's `useRoute()` Composition API is now recognized as a client-side remote flow source, covering its `query`, `params`, `path`, `fullPath`, and `hash` members. These members are additionally reported under the `browser-url-query`, `browser-url-path`, and `browser-url-fragment` threat models. +* The route object returned by Vue Router's `useRoute()` Composition API is now recognized as a client-side remote flow source, covering its `query`, `params`, `path`, `fullPath`, and `hash` members. These members are additionally reported under the corresponding `browser-url-query`, `browser-url-path`, and `browser-url-fragment` threat models. * Added flow models for Vue's `ref`, `shallowRef`, `toRef`, `reactive`, and `computed` Composition API helpers. * Added support for treating declared `inputs` properties in Sails Action2 controller files as remote flow sources. This may improve results for security queries such as `js/path-injection`. diff --git a/javascript/ql/lib/change-notes/2026-08-10-d-regex-flag.md b/javascript/ql/lib/change-notes/2026-08-10-d-regex-flag.md deleted file mode 100644 index 8552c7bf7925..000000000000 --- a/javascript/ql/lib/change-notes/2026-08-10-d-regex-flag.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* Added support for regular expressions using the `d` flag. diff --git a/javascript/ql/lib/change-notes/2026-08-10-worklet-directive.md b/javascript/ql/lib/change-notes/2026-08-10-worklet-directive.md deleted file mode 100644 index c596f14e9abe..000000000000 --- a/javascript/ql/lib/change-notes/2026-08-10-worklet-directive.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -category: feature ---- - -- Added support for recognizing the React Native Worklets `"worklet"` directive as a known directive. diff --git a/javascript/ql/lib/change-notes/released/2.10.0.md b/javascript/ql/lib/change-notes/released/2.10.0.md new file mode 100644 index 000000000000..341f9813e3fb --- /dev/null +++ b/javascript/ql/lib/change-notes/released/2.10.0.md @@ -0,0 +1,9 @@ +## 2.10.0 + +### New Features + +- Added support for recognizing the React Native Worklets `"worklet"` directive as a known directive. + +### Minor Analysis Improvements + +* Added support for regular expressions using the `d` flag. diff --git a/javascript/ql/lib/codeql-pack.release.yml b/javascript/ql/lib/codeql-pack.release.yml index d6329a574932..ffff75a8d4c2 100644 --- a/javascript/ql/lib/codeql-pack.release.yml +++ b/javascript/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 2.9.0 +lastReleaseVersion: 2.10.0 diff --git a/javascript/ql/lib/qlpack.yml b/javascript/ql/lib/qlpack.yml index ede19f219f4a..0a74e2c419ac 100644 --- a/javascript/ql/lib/qlpack.yml +++ b/javascript/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/javascript-all -version: 2.9.1-dev +version: 2.10.1-dev groups: javascript dbscheme: semmlecode.javascript.dbscheme extractor: javascript diff --git a/javascript/ql/src/CHANGELOG.md b/javascript/ql/src/CHANGELOG.md index 87b01cbc4afa..9a958424d795 100644 --- a/javascript/ql/src/CHANGELOG.md +++ b/javascript/ql/src/CHANGELOG.md @@ -1,3 +1,9 @@ +## 2.4.4 + +### Minor Analysis Improvements + +* The `js/superfluous-trailing-arguments` query no longer reports valid arguments passed to the `TransformStream` constructor. + ## 2.4.3 ### Minor Analysis Improvements diff --git a/javascript/ql/src/change-notes/2026-08-14-transformstream-constructor-arity.md b/javascript/ql/src/change-notes/released/2.4.4.md similarity index 74% rename from javascript/ql/src/change-notes/2026-08-14-transformstream-constructor-arity.md rename to javascript/ql/src/change-notes/released/2.4.4.md index a8b66c4c612b..3d5e2f6a593e 100644 --- a/javascript/ql/src/change-notes/2026-08-14-transformstream-constructor-arity.md +++ b/javascript/ql/src/change-notes/released/2.4.4.md @@ -1,4 +1,5 @@ ---- -category: minorAnalysis ---- +## 2.4.4 + +### Minor Analysis Improvements + * The `js/superfluous-trailing-arguments` query no longer reports valid arguments passed to the `TransformStream` constructor. diff --git a/javascript/ql/src/codeql-pack.release.yml b/javascript/ql/src/codeql-pack.release.yml index 2520785bcc40..2facd66a43f4 100644 --- a/javascript/ql/src/codeql-pack.release.yml +++ b/javascript/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 2.4.3 +lastReleaseVersion: 2.4.4 diff --git a/javascript/ql/src/qlpack.yml b/javascript/ql/src/qlpack.yml index 0637027f116e..bdefbdee61f7 100644 --- a/javascript/ql/src/qlpack.yml +++ b/javascript/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/javascript-queries -version: 2.4.4-dev +version: 2.4.5-dev groups: - javascript - queries diff --git a/misc/suite-helpers/CHANGELOG.md b/misc/suite-helpers/CHANGELOG.md index dd22444f54fe..097e573de503 100644 --- a/misc/suite-helpers/CHANGELOG.md +++ b/misc/suite-helpers/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.56 + +No user-facing changes. + ## 1.0.55 No user-facing changes. diff --git a/misc/suite-helpers/change-notes/released/1.0.56.md b/misc/suite-helpers/change-notes/released/1.0.56.md new file mode 100644 index 000000000000..3b784cb7d975 --- /dev/null +++ b/misc/suite-helpers/change-notes/released/1.0.56.md @@ -0,0 +1,3 @@ +## 1.0.56 + +No user-facing changes. diff --git a/misc/suite-helpers/codeql-pack.release.yml b/misc/suite-helpers/codeql-pack.release.yml index 3c942a6b4ea3..9bb27b4fdb71 100644 --- a/misc/suite-helpers/codeql-pack.release.yml +++ b/misc/suite-helpers/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.55 +lastReleaseVersion: 1.0.56 diff --git a/misc/suite-helpers/qlpack.yml b/misc/suite-helpers/qlpack.yml index 7ced46ab5f70..be95f2ac4322 100644 --- a/misc/suite-helpers/qlpack.yml +++ b/misc/suite-helpers/qlpack.yml @@ -1,4 +1,4 @@ name: codeql/suite-helpers -version: 1.0.56-dev +version: 1.0.57-dev groups: shared warnOnImplicitThis: true diff --git a/python/ql/lib/CHANGELOG.md b/python/ql/lib/CHANGELOG.md index 2a6de92ecbce..51d7011de576 100644 --- a/python/ql/lib/CHANGELOG.md +++ b/python/ql/lib/CHANGELOG.md @@ -1,3 +1,9 @@ +## 7.2.4 + +### Minor Analysis Improvements + +* Added taint flow through `list.extend` and `list.insert`, matching the existing taint flow through `list.append`. + ## 7.2.3 No user-facing changes. diff --git a/python/ql/lib/change-notes/2026-08-10-list-extend-insert-taint.md b/python/ql/lib/change-notes/released/7.2.4.md similarity index 72% rename from python/ql/lib/change-notes/2026-08-10-list-extend-insert-taint.md rename to python/ql/lib/change-notes/released/7.2.4.md index db362bde20f6..564a01ee27cc 100644 --- a/python/ql/lib/change-notes/2026-08-10-list-extend-insert-taint.md +++ b/python/ql/lib/change-notes/released/7.2.4.md @@ -1,4 +1,5 @@ ---- -category: minorAnalysis ---- +## 7.2.4 + +### Minor Analysis Improvements + * Added taint flow through `list.extend` and `list.insert`, matching the existing taint flow through `list.append`. diff --git a/python/ql/lib/codeql-pack.release.yml b/python/ql/lib/codeql-pack.release.yml index 7d0dee6395ee..330556d11a76 100644 --- a/python/ql/lib/codeql-pack.release.yml +++ b/python/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 7.2.3 +lastReleaseVersion: 7.2.4 diff --git a/python/ql/lib/qlpack.yml b/python/ql/lib/qlpack.yml index 03adb1ffdb0d..46c4b9e2e00e 100644 --- a/python/ql/lib/qlpack.yml +++ b/python/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/python-all -version: 7.2.4-dev +version: 7.2.5-dev groups: python dbscheme: semmlecode.python.dbscheme extractor: python diff --git a/python/ql/src/CHANGELOG.md b/python/ql/src/CHANGELOG.md index 97904c1bd7af..da09ff7f9d50 100644 --- a/python/ql/src/CHANGELOG.md +++ b/python/ql/src/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.8.9 + +No user-facing changes. + ## 1.8.8 No user-facing changes. diff --git a/python/ql/src/change-notes/released/1.8.9.md b/python/ql/src/change-notes/released/1.8.9.md new file mode 100644 index 000000000000..2d48c5ca3da0 --- /dev/null +++ b/python/ql/src/change-notes/released/1.8.9.md @@ -0,0 +1,3 @@ +## 1.8.9 + +No user-facing changes. diff --git a/python/ql/src/codeql-pack.release.yml b/python/ql/src/codeql-pack.release.yml index d224b6ac3595..2fed7501f873 100644 --- a/python/ql/src/codeql-pack.release.yml +++ b/python/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.8.8 +lastReleaseVersion: 1.8.9 diff --git a/python/ql/src/qlpack.yml b/python/ql/src/qlpack.yml index fbc81c7cc67f..9778815a4631 100644 --- a/python/ql/src/qlpack.yml +++ b/python/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/python-queries -version: 1.8.9-dev +version: 1.8.10-dev groups: - python - queries diff --git a/ruby/ql/lib/CHANGELOG.md b/ruby/ql/lib/CHANGELOG.md index 55c64cb527cb..f9916662c642 100644 --- a/ruby/ql/lib/CHANGELOG.md +++ b/ruby/ql/lib/CHANGELOG.md @@ -1,8 +1,14 @@ +## 6.0.4 + +### Minor Analysis Improvements + +* The algorithm for tracking regexes has been replaced. This can cause result changes in related queries, for example, `rb/polynomial-redos`. + ## 6.0.3 ### Minor Analysis Improvements -* Parameters of methods exported by vendored gems are no longer treated as flow sources, since such methods are only called from within the codebase. This should reduce false positives for `rb/polynomial-redos`, `rb/regex/badly-anchored-regexp`, `rb/unsafe-code-construction`, `rb/html-constructed-from-input`, and `rb/shell-command-constructed-from-input` in codebases that vendor their dependencies. +* Removed library input to vendored gems from the set of taint sources. This should reduce false positives for `rb/polynomial-redos`, `rb/regex/badly-anchored-regexp`, `rb/unsafe-code-construction`, `rb/html-constructed-from-input`, and `rb/shell-command-constructed-from-input` whenever vendoring is used. ## 6.0.2 diff --git a/ruby/ql/lib/change-notes/2026-08-11-regex-tracking.md b/ruby/ql/lib/change-notes/released/6.0.4.md similarity index 76% rename from ruby/ql/lib/change-notes/2026-08-11-regex-tracking.md rename to ruby/ql/lib/change-notes/released/6.0.4.md index f0310bdf3775..abc6e2ae08f1 100644 --- a/ruby/ql/lib/change-notes/2026-08-11-regex-tracking.md +++ b/ruby/ql/lib/change-notes/released/6.0.4.md @@ -1,4 +1,5 @@ ---- -category: minorAnalysis ---- +## 6.0.4 + +### Minor Analysis Improvements + * The algorithm for tracking regexes has been replaced. This can cause result changes in related queries, for example, `rb/polynomial-redos`. diff --git a/ruby/ql/lib/codeql-pack.release.yml b/ruby/ql/lib/codeql-pack.release.yml index 304c17ad4092..ae1f15cd344a 100644 --- a/ruby/ql/lib/codeql-pack.release.yml +++ b/ruby/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 6.0.3 +lastReleaseVersion: 6.0.4 diff --git a/ruby/ql/lib/qlpack.yml b/ruby/ql/lib/qlpack.yml index 06d3ec94a09b..8071a411828b 100644 --- a/ruby/ql/lib/qlpack.yml +++ b/ruby/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/ruby-all -version: 6.0.4-dev +version: 6.0.5-dev groups: ruby extractor: ruby dbscheme: ruby.dbscheme diff --git a/ruby/ql/src/CHANGELOG.md b/ruby/ql/src/CHANGELOG.md index a8502538032b..312e56c3716e 100644 --- a/ruby/ql/src/CHANGELOG.md +++ b/ruby/ql/src/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.6.9 + +No user-facing changes. + ## 1.6.8 No user-facing changes. diff --git a/ruby/ql/src/change-notes/released/1.6.9.md b/ruby/ql/src/change-notes/released/1.6.9.md new file mode 100644 index 000000000000..65abde2f749b --- /dev/null +++ b/ruby/ql/src/change-notes/released/1.6.9.md @@ -0,0 +1,3 @@ +## 1.6.9 + +No user-facing changes. diff --git a/ruby/ql/src/codeql-pack.release.yml b/ruby/ql/src/codeql-pack.release.yml index fbc11aa62b75..018779df35eb 100644 --- a/ruby/ql/src/codeql-pack.release.yml +++ b/ruby/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.6.8 +lastReleaseVersion: 1.6.9 diff --git a/ruby/ql/src/qlpack.yml b/ruby/ql/src/qlpack.yml index 5254397baeea..872cf18c8e03 100644 --- a/ruby/ql/src/qlpack.yml +++ b/ruby/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/ruby-queries -version: 1.6.9-dev +version: 1.6.10-dev groups: - ruby - queries diff --git a/rust/ql/lib/CHANGELOG.md b/rust/ql/lib/CHANGELOG.md index 6e7ca1f1f10a..4ec33279ba1b 100644 --- a/rust/ql/lib/CHANGELOG.md +++ b/rust/ql/lib/CHANGELOG.md @@ -1,3 +1,24 @@ +## 0.2.20 + +### Major Analysis Improvements + +* The alert locations for data flow queries have been improved. The new locations are more precise and are based on the actual source and sink nodes. Example: +```rust +let _ = conn.query( +// ^^^^ old alert location + unsafe_query.as_str(), +// ^^^^^^^^^^^^^^^^^^^^^ new alert location +)?; +``` +This means that some alerts will have their locations changed, and hence appear as new alerts (while the old alerts will disappear). + +### Minor Analysis Improvements + +* Canonical paths for Rust trait items now use the format `crate::Trait::item` instead of + `<_ as crate::Trait>::item`. Custom data extension models that reference trait items + must be updated to use the new format. +* The Rust extractor has been upgraded to use `rust-analyzer` version 0.0.328. As a result, the AST exposed by the Rust libraries has changed: the `TraitAlias` class has been removed, `cfg` attributes are now modeled by the new `CfgMeta`, `CfgAtom`, `CfgComposite`, `CfgPredicate`, and `CfgAttrMeta` classes, and the `Meta` class has been refined into the `KeyValueMeta`, `PathMeta`, `TokenTreeMeta`, and `UnsafeMeta` subclasses. New `TryBlockModifier` and `FormatArgsArgName` classes have also been added. + ## 0.2.19 No user-facing changes. diff --git a/rust/ql/lib/change-notes/2026-08-03-rust-analyzer-0.0.328.md b/rust/ql/lib/change-notes/2026-08-03-rust-analyzer-0.0.328.md deleted file mode 100644 index d9403a8b62aa..000000000000 --- a/rust/ql/lib/change-notes/2026-08-03-rust-analyzer-0.0.328.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* The Rust extractor has been upgraded to use `rust-analyzer` version 0.0.328. As a result, the AST exposed by the Rust libraries has changed: the `TraitAlias` class has been removed, `cfg` attributes are now modeled by the new `CfgMeta`, `CfgAtom`, `CfgComposite`, `CfgPredicate`, and `CfgAttrMeta` classes, and the `Meta` class has been refined into the `KeyValueMeta`, `PathMeta`, `TokenTreeMeta`, and `UnsafeMeta` subclasses. New `TryBlockModifier` and `FormatArgsArgName` classes have also been added. diff --git a/rust/ql/lib/change-notes/2026-08-05-data-flow-alert-locations.md b/rust/ql/lib/change-notes/2026-08-05-data-flow-alert-locations.md deleted file mode 100644 index d5691b49750b..000000000000 --- a/rust/ql/lib/change-notes/2026-08-05-data-flow-alert-locations.md +++ /dev/null @@ -1,12 +0,0 @@ ---- -category: majorAnalysis ---- -* The alert locations for data flow queries have been improved. The new locations are more precise and are based on the actual source and sink nodes. Example: -```rust -let _ = conn.query( -// ^^^^ old alert location - unsafe_query.as_str(), -// ^^^^^^^^^^^^^^^^^^^^^ new alert location -)?; -``` -This means that some alerts will have their locations changed, and hence appear as new alerts (while the old alerts will disappear). \ No newline at end of file diff --git a/rust/ql/lib/change-notes/2026-08-19-trait-canonical-paths.md b/rust/ql/lib/change-notes/2026-08-19-trait-canonical-paths.md deleted file mode 100644 index 9398a7c187fe..000000000000 --- a/rust/ql/lib/change-notes/2026-08-19-trait-canonical-paths.md +++ /dev/null @@ -1,6 +0,0 @@ ---- -category: minorAnalysis ---- -* Canonical paths for Rust trait items now use the format `crate::Trait::item` instead of - `<_ as crate::Trait>::item`. Custom data extension models that reference trait items - must be updated to use the new format. \ No newline at end of file diff --git a/rust/ql/lib/change-notes/released/0.2.20.md b/rust/ql/lib/change-notes/released/0.2.20.md new file mode 100644 index 000000000000..e165ed9153e8 --- /dev/null +++ b/rust/ql/lib/change-notes/released/0.2.20.md @@ -0,0 +1,20 @@ +## 0.2.20 + +### Major Analysis Improvements + +* The alert locations for data flow queries have been improved. The new locations are more precise and are based on the actual source and sink nodes. Example: +```rust +let _ = conn.query( +// ^^^^ old alert location + unsafe_query.as_str(), +// ^^^^^^^^^^^^^^^^^^^^^ new alert location +)?; +``` +This means that some alerts will have their locations changed, and hence appear as new alerts (while the old alerts will disappear). + +### Minor Analysis Improvements + +* Canonical paths for Rust trait items now use the format `crate::Trait::item` instead of + `<_ as crate::Trait>::item`. Custom data extension models that reference trait items + must be updated to use the new format. +* The Rust extractor has been upgraded to use `rust-analyzer` version 0.0.328. As a result, the AST exposed by the Rust libraries has changed: the `TraitAlias` class has been removed, `cfg` attributes are now modeled by the new `CfgMeta`, `CfgAtom`, `CfgComposite`, `CfgPredicate`, and `CfgAttrMeta` classes, and the `Meta` class has been refined into the `KeyValueMeta`, `PathMeta`, `TokenTreeMeta`, and `UnsafeMeta` subclasses. New `TryBlockModifier` and `FormatArgsArgName` classes have also been added. diff --git a/rust/ql/lib/codeql-pack.release.yml b/rust/ql/lib/codeql-pack.release.yml index b37d10786472..7c91e0e29ffa 100644 --- a/rust/ql/lib/codeql-pack.release.yml +++ b/rust/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.2.19 +lastReleaseVersion: 0.2.20 diff --git a/rust/ql/lib/qlpack.yml b/rust/ql/lib/qlpack.yml index 540d610d6973..59a2c38c8a2b 100644 --- a/rust/ql/lib/qlpack.yml +++ b/rust/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/rust-all -version: 0.2.20-dev +version: 0.2.21-dev groups: rust extractor: rust dbscheme: rust.dbscheme diff --git a/rust/ql/src/CHANGELOG.md b/rust/ql/src/CHANGELOG.md index e6a2f67fac00..5a8f3ea1b9a5 100644 --- a/rust/ql/src/CHANGELOG.md +++ b/rust/ql/src/CHANGELOG.md @@ -1,3 +1,7 @@ +## 0.1.41 + +No user-facing changes. + ## 0.1.40 No user-facing changes. diff --git a/rust/ql/src/change-notes/released/0.1.41.md b/rust/ql/src/change-notes/released/0.1.41.md new file mode 100644 index 000000000000..023c4889f070 --- /dev/null +++ b/rust/ql/src/change-notes/released/0.1.41.md @@ -0,0 +1,3 @@ +## 0.1.41 + +No user-facing changes. diff --git a/rust/ql/src/codeql-pack.release.yml b/rust/ql/src/codeql-pack.release.yml index 676d88550b91..38f91b8ed622 100644 --- a/rust/ql/src/codeql-pack.release.yml +++ b/rust/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.1.40 +lastReleaseVersion: 0.1.41 diff --git a/rust/ql/src/qlpack.yml b/rust/ql/src/qlpack.yml index 81689b84b84c..b4048003f9cf 100644 --- a/rust/ql/src/qlpack.yml +++ b/rust/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/rust-queries -version: 0.1.41-dev +version: 0.1.42-dev groups: - rust - queries diff --git a/shared/concepts/CHANGELOG.md b/shared/concepts/CHANGELOG.md index 9acabbed4e46..6a88efccf19f 100644 --- a/shared/concepts/CHANGELOG.md +++ b/shared/concepts/CHANGELOG.md @@ -1,3 +1,7 @@ +## 0.0.30 + +No user-facing changes. + ## 0.0.29 No user-facing changes. diff --git a/shared/concepts/change-notes/released/0.0.30.md b/shared/concepts/change-notes/released/0.0.30.md new file mode 100644 index 000000000000..10c7a0c5c131 --- /dev/null +++ b/shared/concepts/change-notes/released/0.0.30.md @@ -0,0 +1,3 @@ +## 0.0.30 + +No user-facing changes. diff --git a/shared/concepts/codeql-pack.release.yml b/shared/concepts/codeql-pack.release.yml index c81f18131208..0c61b463bab3 100644 --- a/shared/concepts/codeql-pack.release.yml +++ b/shared/concepts/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.0.29 +lastReleaseVersion: 0.0.30 diff --git a/shared/concepts/qlpack.yml b/shared/concepts/qlpack.yml index 396702b47ac7..6a1db5dc8858 100644 --- a/shared/concepts/qlpack.yml +++ b/shared/concepts/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/concepts -version: 0.0.30-dev +version: 0.0.31-dev groups: shared library: true dependencies: diff --git a/shared/controlflow/CHANGELOG.md b/shared/controlflow/CHANGELOG.md index 9abcc742814f..76ba233c908f 100644 --- a/shared/controlflow/CHANGELOG.md +++ b/shared/controlflow/CHANGELOG.md @@ -1,3 +1,7 @@ +## 2.0.40 + +No user-facing changes. + ## 2.0.39 No user-facing changes. diff --git a/shared/controlflow/change-notes/released/2.0.40.md b/shared/controlflow/change-notes/released/2.0.40.md new file mode 100644 index 000000000000..889c7f385592 --- /dev/null +++ b/shared/controlflow/change-notes/released/2.0.40.md @@ -0,0 +1,3 @@ +## 2.0.40 + +No user-facing changes. diff --git a/shared/controlflow/codeql-pack.release.yml b/shared/controlflow/codeql-pack.release.yml index 063a268e5f9f..df31666e556c 100644 --- a/shared/controlflow/codeql-pack.release.yml +++ b/shared/controlflow/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 2.0.39 +lastReleaseVersion: 2.0.40 diff --git a/shared/controlflow/qlpack.yml b/shared/controlflow/qlpack.yml index d8cef947cef8..9c7448a0c159 100644 --- a/shared/controlflow/qlpack.yml +++ b/shared/controlflow/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/controlflow -version: 2.0.40-dev +version: 2.0.41-dev groups: shared library: true dependencies: diff --git a/shared/dataflow/CHANGELOG.md b/shared/dataflow/CHANGELOG.md index 8b981f92142e..17b7451f2d4d 100644 --- a/shared/dataflow/CHANGELOG.md +++ b/shared/dataflow/CHANGELOG.md @@ -1,3 +1,7 @@ +## 2.1.12 + +No user-facing changes. + ## 2.1.11 No user-facing changes. diff --git a/shared/dataflow/change-notes/released/2.1.12.md b/shared/dataflow/change-notes/released/2.1.12.md new file mode 100644 index 000000000000..f3a0960a2f39 --- /dev/null +++ b/shared/dataflow/change-notes/released/2.1.12.md @@ -0,0 +1,3 @@ +## 2.1.12 + +No user-facing changes. diff --git a/shared/dataflow/codeql-pack.release.yml b/shared/dataflow/codeql-pack.release.yml index 768e745f3b43..64ef0f5a22c1 100644 --- a/shared/dataflow/codeql-pack.release.yml +++ b/shared/dataflow/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 2.1.11 +lastReleaseVersion: 2.1.12 diff --git a/shared/dataflow/qlpack.yml b/shared/dataflow/qlpack.yml index 3d006f14f1e9..133b33e834d8 100644 --- a/shared/dataflow/qlpack.yml +++ b/shared/dataflow/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/dataflow -version: 2.1.12-dev +version: 2.1.13-dev groups: shared library: true dependencies: diff --git a/shared/mad/CHANGELOG.md b/shared/mad/CHANGELOG.md index 3a981e317c75..1f510be02756 100644 --- a/shared/mad/CHANGELOG.md +++ b/shared/mad/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.56 + +No user-facing changes. + ## 1.0.55 No user-facing changes. diff --git a/shared/mad/change-notes/released/1.0.56.md b/shared/mad/change-notes/released/1.0.56.md new file mode 100644 index 000000000000..3b784cb7d975 --- /dev/null +++ b/shared/mad/change-notes/released/1.0.56.md @@ -0,0 +1,3 @@ +## 1.0.56 + +No user-facing changes. diff --git a/shared/mad/codeql-pack.release.yml b/shared/mad/codeql-pack.release.yml index 3c942a6b4ea3..9bb27b4fdb71 100644 --- a/shared/mad/codeql-pack.release.yml +++ b/shared/mad/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.55 +lastReleaseVersion: 1.0.56 diff --git a/shared/mad/qlpack.yml b/shared/mad/qlpack.yml index 512f38311c1c..28a84ca5aa86 100644 --- a/shared/mad/qlpack.yml +++ b/shared/mad/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/mad -version: 1.0.56-dev +version: 1.0.57-dev groups: shared library: true dependencies: diff --git a/shared/namebinding/CHANGELOG.md b/shared/namebinding/CHANGELOG.md index 4ffbff1e0c4e..9b269441c000 100644 --- a/shared/namebinding/CHANGELOG.md +++ b/shared/namebinding/CHANGELOG.md @@ -1,3 +1,7 @@ +## 0.0.5 + +No user-facing changes. + ## 0.0.4 No user-facing changes. diff --git a/shared/namebinding/change-notes/released/0.0.5.md b/shared/namebinding/change-notes/released/0.0.5.md new file mode 100644 index 000000000000..766ec2723b56 --- /dev/null +++ b/shared/namebinding/change-notes/released/0.0.5.md @@ -0,0 +1,3 @@ +## 0.0.5 + +No user-facing changes. diff --git a/shared/namebinding/codeql-pack.release.yml b/shared/namebinding/codeql-pack.release.yml index ec411a674bcd..bb45a1ab0182 100644 --- a/shared/namebinding/codeql-pack.release.yml +++ b/shared/namebinding/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.0.4 +lastReleaseVersion: 0.0.5 diff --git a/shared/namebinding/qlpack.yml b/shared/namebinding/qlpack.yml index f7148fda4b99..6ab033915b70 100644 --- a/shared/namebinding/qlpack.yml +++ b/shared/namebinding/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/namebinding -version: 0.0.5-dev +version: 0.0.6-dev groups: shared library: true dependencies: diff --git a/shared/quantum/CHANGELOG.md b/shared/quantum/CHANGELOG.md index 66b8fa3444bb..fd3064b1a947 100644 --- a/shared/quantum/CHANGELOG.md +++ b/shared/quantum/CHANGELOG.md @@ -1,3 +1,7 @@ +## 0.0.34 + +No user-facing changes. + ## 0.0.33 No user-facing changes. diff --git a/shared/quantum/change-notes/released/0.0.34.md b/shared/quantum/change-notes/released/0.0.34.md new file mode 100644 index 000000000000..d58affae3891 --- /dev/null +++ b/shared/quantum/change-notes/released/0.0.34.md @@ -0,0 +1,3 @@ +## 0.0.34 + +No user-facing changes. diff --git a/shared/quantum/codeql-pack.release.yml b/shared/quantum/codeql-pack.release.yml index dff9e7f6ea97..6fb3b6253bb9 100644 --- a/shared/quantum/codeql-pack.release.yml +++ b/shared/quantum/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.0.33 +lastReleaseVersion: 0.0.34 diff --git a/shared/quantum/qlpack.yml b/shared/quantum/qlpack.yml index e6d49cdd37fb..73a8ef49ee5c 100644 --- a/shared/quantum/qlpack.yml +++ b/shared/quantum/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/quantum -version: 0.0.34-dev +version: 0.0.35-dev groups: shared library: true dependencies: diff --git a/shared/rangeanalysis/CHANGELOG.md b/shared/rangeanalysis/CHANGELOG.md index 3a874c765ab7..d3e4d9e87c60 100644 --- a/shared/rangeanalysis/CHANGELOG.md +++ b/shared/rangeanalysis/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.56 + +No user-facing changes. + ## 1.0.55 No user-facing changes. diff --git a/shared/rangeanalysis/change-notes/released/1.0.56.md b/shared/rangeanalysis/change-notes/released/1.0.56.md new file mode 100644 index 000000000000..3b784cb7d975 --- /dev/null +++ b/shared/rangeanalysis/change-notes/released/1.0.56.md @@ -0,0 +1,3 @@ +## 1.0.56 + +No user-facing changes. diff --git a/shared/rangeanalysis/codeql-pack.release.yml b/shared/rangeanalysis/codeql-pack.release.yml index 3c942a6b4ea3..9bb27b4fdb71 100644 --- a/shared/rangeanalysis/codeql-pack.release.yml +++ b/shared/rangeanalysis/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.55 +lastReleaseVersion: 1.0.56 diff --git a/shared/rangeanalysis/qlpack.yml b/shared/rangeanalysis/qlpack.yml index 1a2c8789b3c0..c7a74dae7c26 100644 --- a/shared/rangeanalysis/qlpack.yml +++ b/shared/rangeanalysis/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/rangeanalysis -version: 1.0.56-dev +version: 1.0.57-dev groups: shared library: true dependencies: diff --git a/shared/regex/CHANGELOG.md b/shared/regex/CHANGELOG.md index bbfe25191a71..327845009d11 100644 --- a/shared/regex/CHANGELOG.md +++ b/shared/regex/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.56 + +No user-facing changes. + ## 1.0.55 No user-facing changes. diff --git a/shared/regex/change-notes/released/1.0.56.md b/shared/regex/change-notes/released/1.0.56.md new file mode 100644 index 000000000000..3b784cb7d975 --- /dev/null +++ b/shared/regex/change-notes/released/1.0.56.md @@ -0,0 +1,3 @@ +## 1.0.56 + +No user-facing changes. diff --git a/shared/regex/codeql-pack.release.yml b/shared/regex/codeql-pack.release.yml index 3c942a6b4ea3..9bb27b4fdb71 100644 --- a/shared/regex/codeql-pack.release.yml +++ b/shared/regex/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.55 +lastReleaseVersion: 1.0.56 diff --git a/shared/regex/qlpack.yml b/shared/regex/qlpack.yml index 93d5bd2a5b9e..2afdc58e3d11 100644 --- a/shared/regex/qlpack.yml +++ b/shared/regex/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/regex -version: 1.0.56-dev +version: 1.0.57-dev groups: shared library: true dependencies: diff --git a/shared/ssa/CHANGELOG.md b/shared/ssa/CHANGELOG.md index b742fb0a2601..1cc5dec08b82 100644 --- a/shared/ssa/CHANGELOG.md +++ b/shared/ssa/CHANGELOG.md @@ -1,3 +1,7 @@ +## 2.0.32 + +No user-facing changes. + ## 2.0.31 No user-facing changes. diff --git a/shared/ssa/change-notes/released/2.0.32.md b/shared/ssa/change-notes/released/2.0.32.md new file mode 100644 index 000000000000..0930bb07f8c4 --- /dev/null +++ b/shared/ssa/change-notes/released/2.0.32.md @@ -0,0 +1,3 @@ +## 2.0.32 + +No user-facing changes. diff --git a/shared/ssa/codeql-pack.release.yml b/shared/ssa/codeql-pack.release.yml index 783d47207cda..483a0d5db8ec 100644 --- a/shared/ssa/codeql-pack.release.yml +++ b/shared/ssa/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 2.0.31 +lastReleaseVersion: 2.0.32 diff --git a/shared/ssa/qlpack.yml b/shared/ssa/qlpack.yml index fae71bc1f950..c5c7755b1755 100644 --- a/shared/ssa/qlpack.yml +++ b/shared/ssa/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/ssa -version: 2.0.32-dev +version: 2.0.33-dev groups: shared library: true dependencies: diff --git a/shared/threat-models/CHANGELOG.md b/shared/threat-models/CHANGELOG.md index 3a3948e7bf27..7a0754e81b29 100644 --- a/shared/threat-models/CHANGELOG.md +++ b/shared/threat-models/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.56 + +No user-facing changes. + ## 1.0.55 No user-facing changes. diff --git a/shared/threat-models/change-notes/released/1.0.56.md b/shared/threat-models/change-notes/released/1.0.56.md new file mode 100644 index 000000000000..3b784cb7d975 --- /dev/null +++ b/shared/threat-models/change-notes/released/1.0.56.md @@ -0,0 +1,3 @@ +## 1.0.56 + +No user-facing changes. diff --git a/shared/threat-models/codeql-pack.release.yml b/shared/threat-models/codeql-pack.release.yml index 3c942a6b4ea3..9bb27b4fdb71 100644 --- a/shared/threat-models/codeql-pack.release.yml +++ b/shared/threat-models/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.55 +lastReleaseVersion: 1.0.56 diff --git a/shared/threat-models/qlpack.yml b/shared/threat-models/qlpack.yml index 6717a88aa990..a29a2c7dc6a0 100644 --- a/shared/threat-models/qlpack.yml +++ b/shared/threat-models/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/threat-models -version: 1.0.56-dev +version: 1.0.57-dev library: true groups: shared dataExtensions: diff --git a/shared/tutorial/CHANGELOG.md b/shared/tutorial/CHANGELOG.md index 267dbfeb562f..df769dd96aec 100644 --- a/shared/tutorial/CHANGELOG.md +++ b/shared/tutorial/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.56 + +No user-facing changes. + ## 1.0.55 No user-facing changes. diff --git a/shared/tutorial/change-notes/released/1.0.56.md b/shared/tutorial/change-notes/released/1.0.56.md new file mode 100644 index 000000000000..3b784cb7d975 --- /dev/null +++ b/shared/tutorial/change-notes/released/1.0.56.md @@ -0,0 +1,3 @@ +## 1.0.56 + +No user-facing changes. diff --git a/shared/tutorial/codeql-pack.release.yml b/shared/tutorial/codeql-pack.release.yml index 3c942a6b4ea3..9bb27b4fdb71 100644 --- a/shared/tutorial/codeql-pack.release.yml +++ b/shared/tutorial/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.55 +lastReleaseVersion: 1.0.56 diff --git a/shared/tutorial/qlpack.yml b/shared/tutorial/qlpack.yml index 2f41f25c2f2a..b94e0b81dadc 100644 --- a/shared/tutorial/qlpack.yml +++ b/shared/tutorial/qlpack.yml @@ -1,7 +1,7 @@ name: codeql/tutorial description: Library for the CodeQL detective tutorials, helping new users learn to write CodeQL queries. -version: 1.0.56-dev +version: 1.0.57-dev groups: shared library: true warnOnImplicitThis: true diff --git a/shared/typeflow/CHANGELOG.md b/shared/typeflow/CHANGELOG.md index 90dc2603d772..28d0101ccf54 100644 --- a/shared/typeflow/CHANGELOG.md +++ b/shared/typeflow/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.56 + +No user-facing changes. + ## 1.0.55 No user-facing changes. diff --git a/shared/typeflow/change-notes/released/1.0.56.md b/shared/typeflow/change-notes/released/1.0.56.md new file mode 100644 index 000000000000..3b784cb7d975 --- /dev/null +++ b/shared/typeflow/change-notes/released/1.0.56.md @@ -0,0 +1,3 @@ +## 1.0.56 + +No user-facing changes. diff --git a/shared/typeflow/codeql-pack.release.yml b/shared/typeflow/codeql-pack.release.yml index 3c942a6b4ea3..9bb27b4fdb71 100644 --- a/shared/typeflow/codeql-pack.release.yml +++ b/shared/typeflow/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.55 +lastReleaseVersion: 1.0.56 diff --git a/shared/typeflow/qlpack.yml b/shared/typeflow/qlpack.yml index 2f25d00ba810..0475b6bf7325 100644 --- a/shared/typeflow/qlpack.yml +++ b/shared/typeflow/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/typeflow -version: 1.0.56-dev +version: 1.0.57-dev groups: shared library: true dependencies: diff --git a/shared/typeinference/CHANGELOG.md b/shared/typeinference/CHANGELOG.md index cd72576290a7..e34fb7c21ba1 100644 --- a/shared/typeinference/CHANGELOG.md +++ b/shared/typeinference/CHANGELOG.md @@ -1,3 +1,7 @@ +## 0.0.37 + +No user-facing changes. + ## 0.0.36 No user-facing changes. diff --git a/shared/typeinference/change-notes/released/0.0.37.md b/shared/typeinference/change-notes/released/0.0.37.md new file mode 100644 index 000000000000..322aa16628ff --- /dev/null +++ b/shared/typeinference/change-notes/released/0.0.37.md @@ -0,0 +1,3 @@ +## 0.0.37 + +No user-facing changes. diff --git a/shared/typeinference/codeql-pack.release.yml b/shared/typeinference/codeql-pack.release.yml index b6df3a024ee6..7982dda40f4c 100644 --- a/shared/typeinference/codeql-pack.release.yml +++ b/shared/typeinference/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.0.36 +lastReleaseVersion: 0.0.37 diff --git a/shared/typeinference/qlpack.yml b/shared/typeinference/qlpack.yml index 8f5e25ee40f5..3cd87a73bdc2 100644 --- a/shared/typeinference/qlpack.yml +++ b/shared/typeinference/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/typeinference -version: 0.0.37-dev +version: 0.0.38-dev groups: shared library: true dependencies: diff --git a/shared/typetracking/CHANGELOG.md b/shared/typetracking/CHANGELOG.md index 8226f0232aff..60257ae7e1e0 100644 --- a/shared/typetracking/CHANGELOG.md +++ b/shared/typetracking/CHANGELOG.md @@ -1,3 +1,7 @@ +## 2.0.40 + +No user-facing changes. + ## 2.0.39 No user-facing changes. diff --git a/shared/typetracking/change-notes/released/2.0.40.md b/shared/typetracking/change-notes/released/2.0.40.md new file mode 100644 index 000000000000..889c7f385592 --- /dev/null +++ b/shared/typetracking/change-notes/released/2.0.40.md @@ -0,0 +1,3 @@ +## 2.0.40 + +No user-facing changes. diff --git a/shared/typetracking/codeql-pack.release.yml b/shared/typetracking/codeql-pack.release.yml index 063a268e5f9f..df31666e556c 100644 --- a/shared/typetracking/codeql-pack.release.yml +++ b/shared/typetracking/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 2.0.39 +lastReleaseVersion: 2.0.40 diff --git a/shared/typetracking/qlpack.yml b/shared/typetracking/qlpack.yml index 546ade1b9009..eff084212ba2 100644 --- a/shared/typetracking/qlpack.yml +++ b/shared/typetracking/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/typetracking -version: 2.0.40-dev +version: 2.0.41-dev groups: shared library: true dependencies: diff --git a/shared/typos/CHANGELOG.md b/shared/typos/CHANGELOG.md index 2cad9992afb8..a43daa8503c9 100644 --- a/shared/typos/CHANGELOG.md +++ b/shared/typos/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.56 + +No user-facing changes. + ## 1.0.55 No user-facing changes. diff --git a/shared/typos/change-notes/released/1.0.56.md b/shared/typos/change-notes/released/1.0.56.md new file mode 100644 index 000000000000..3b784cb7d975 --- /dev/null +++ b/shared/typos/change-notes/released/1.0.56.md @@ -0,0 +1,3 @@ +## 1.0.56 + +No user-facing changes. diff --git a/shared/typos/codeql-pack.release.yml b/shared/typos/codeql-pack.release.yml index 3c942a6b4ea3..9bb27b4fdb71 100644 --- a/shared/typos/codeql-pack.release.yml +++ b/shared/typos/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.55 +lastReleaseVersion: 1.0.56 diff --git a/shared/typos/qlpack.yml b/shared/typos/qlpack.yml index 8ab53a9e282c..5933bd6862a1 100644 --- a/shared/typos/qlpack.yml +++ b/shared/typos/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/typos -version: 1.0.56-dev +version: 1.0.57-dev groups: shared library: true warnOnImplicitThis: true diff --git a/shared/util/CHANGELOG.md b/shared/util/CHANGELOG.md index 55fa9e7730b5..194ea712d2ad 100644 --- a/shared/util/CHANGELOG.md +++ b/shared/util/CHANGELOG.md @@ -1,3 +1,7 @@ +## 2.0.43 + +No user-facing changes. + ## 2.0.42 No user-facing changes. diff --git a/shared/util/change-notes/released/2.0.43.md b/shared/util/change-notes/released/2.0.43.md new file mode 100644 index 000000000000..69732e6e3060 --- /dev/null +++ b/shared/util/change-notes/released/2.0.43.md @@ -0,0 +1,3 @@ +## 2.0.43 + +No user-facing changes. diff --git a/shared/util/codeql-pack.release.yml b/shared/util/codeql-pack.release.yml index 000a2d0de2d1..26126cee2c6b 100644 --- a/shared/util/codeql-pack.release.yml +++ b/shared/util/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 2.0.42 +lastReleaseVersion: 2.0.43 diff --git a/shared/util/qlpack.yml b/shared/util/qlpack.yml index f24d0b264364..c8f2c7a57343 100644 --- a/shared/util/qlpack.yml +++ b/shared/util/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/util -version: 2.0.43-dev +version: 2.0.44-dev groups: shared library: true dependencies: null diff --git a/shared/xml/CHANGELOG.md b/shared/xml/CHANGELOG.md index 0901e77ebb22..8d1557082db1 100644 --- a/shared/xml/CHANGELOG.md +++ b/shared/xml/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.56 + +No user-facing changes. + ## 1.0.55 No user-facing changes. diff --git a/shared/xml/change-notes/released/1.0.56.md b/shared/xml/change-notes/released/1.0.56.md new file mode 100644 index 000000000000..3b784cb7d975 --- /dev/null +++ b/shared/xml/change-notes/released/1.0.56.md @@ -0,0 +1,3 @@ +## 1.0.56 + +No user-facing changes. diff --git a/shared/xml/codeql-pack.release.yml b/shared/xml/codeql-pack.release.yml index 3c942a6b4ea3..9bb27b4fdb71 100644 --- a/shared/xml/codeql-pack.release.yml +++ b/shared/xml/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.55 +lastReleaseVersion: 1.0.56 diff --git a/shared/xml/qlpack.yml b/shared/xml/qlpack.yml index 99d7e6f74a93..71a98a37b522 100644 --- a/shared/xml/qlpack.yml +++ b/shared/xml/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/xml -version: 1.0.56-dev +version: 1.0.57-dev groups: shared library: true dependencies: diff --git a/shared/yaml/CHANGELOG.md b/shared/yaml/CHANGELOG.md index 9ff01d7f1b17..5a2e1a8833b0 100644 --- a/shared/yaml/CHANGELOG.md +++ b/shared/yaml/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.56 + +No user-facing changes. + ## 1.0.55 No user-facing changes. diff --git a/shared/yaml/change-notes/released/1.0.56.md b/shared/yaml/change-notes/released/1.0.56.md new file mode 100644 index 000000000000..3b784cb7d975 --- /dev/null +++ b/shared/yaml/change-notes/released/1.0.56.md @@ -0,0 +1,3 @@ +## 1.0.56 + +No user-facing changes. diff --git a/shared/yaml/codeql-pack.release.yml b/shared/yaml/codeql-pack.release.yml index 3c942a6b4ea3..9bb27b4fdb71 100644 --- a/shared/yaml/codeql-pack.release.yml +++ b/shared/yaml/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.55 +lastReleaseVersion: 1.0.56 diff --git a/shared/yaml/qlpack.yml b/shared/yaml/qlpack.yml index 530e0c8452e1..83ede2e7653b 100644 --- a/shared/yaml/qlpack.yml +++ b/shared/yaml/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/yaml -version: 1.0.56-dev +version: 1.0.57-dev groups: shared library: true warnOnImplicitThis: true diff --git a/swift/ql/lib/CHANGELOG.md b/swift/ql/lib/CHANGELOG.md index ffad5ee2398a..e71c0491bc0a 100644 --- a/swift/ql/lib/CHANGELOG.md +++ b/swift/ql/lib/CHANGELOG.md @@ -1,3 +1,7 @@ +## 6.8.2 + +No user-facing changes. + ## 6.8.1 No user-facing changes. diff --git a/swift/ql/lib/change-notes/released/6.8.2.md b/swift/ql/lib/change-notes/released/6.8.2.md new file mode 100644 index 000000000000..89c48d9b6048 --- /dev/null +++ b/swift/ql/lib/change-notes/released/6.8.2.md @@ -0,0 +1,3 @@ +## 6.8.2 + +No user-facing changes. diff --git a/swift/ql/lib/codeql-pack.release.yml b/swift/ql/lib/codeql-pack.release.yml index 49874c2924ed..42fdf5962a78 100644 --- a/swift/ql/lib/codeql-pack.release.yml +++ b/swift/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 6.8.1 +lastReleaseVersion: 6.8.2 diff --git a/swift/ql/lib/qlpack.yml b/swift/ql/lib/qlpack.yml index 78f6f1947d9f..f539a679b130 100644 --- a/swift/ql/lib/qlpack.yml +++ b/swift/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/swift-all -version: 6.8.2-dev +version: 6.8.3-dev groups: swift extractor: swift dbscheme: swift.dbscheme diff --git a/swift/ql/src/CHANGELOG.md b/swift/ql/src/CHANGELOG.md index 826ee7e9d4e9..25dde1dc3ab1 100644 --- a/swift/ql/src/CHANGELOG.md +++ b/swift/ql/src/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.3.9 + +No user-facing changes. + ## 1.3.8 No user-facing changes. diff --git a/swift/ql/src/change-notes/released/1.3.9.md b/swift/ql/src/change-notes/released/1.3.9.md new file mode 100644 index 000000000000..7c49d60db954 --- /dev/null +++ b/swift/ql/src/change-notes/released/1.3.9.md @@ -0,0 +1,3 @@ +## 1.3.9 + +No user-facing changes. diff --git a/swift/ql/src/codeql-pack.release.yml b/swift/ql/src/codeql-pack.release.yml index 898725a6deb4..5ce113f4464d 100644 --- a/swift/ql/src/codeql-pack.release.yml +++ b/swift/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.3.8 +lastReleaseVersion: 1.3.9 diff --git a/swift/ql/src/qlpack.yml b/swift/ql/src/qlpack.yml index 26e142611198..ca8bf05e942d 100644 --- a/swift/ql/src/qlpack.yml +++ b/swift/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/swift-queries -version: 1.3.9-dev +version: 1.3.10-dev groups: - swift - queries