Release preparation for version 2.10.4

cpp/ql/lib/CHANGELOG.md

@@ -1,3 +1,20 @@
+## 0.3.4
+
+### Deprecated APIs
+
+* Many classes/predicates/modules with upper-case acronyms in their name have been renamed to follow our style-guide. 
+  The old name still exists as a deprecated alias.
+
+### New Features
+
+* Added support for getting the link targets of global and namespace variables.
+* Added a `BlockAssignExpr` class, which models a `memcpy`-like operation used in compiler generated copy/move constructors and assignment operations.
+
+### Minor Analysis Improvements
+
+* All deprecated predicates/classes/modules that have been deprecated for over a year have been 
+deleted.
+
 ## 0.3.3
 
 ### New Features

cpp/ql/lib/change-notes/2022-08-12-block-assignment-support.md

@@ -1,4 +0,0 @@
----
-category: feature
----
-* Added a `BlockAssignExpr` class, which models a `memcpy`-like operation used in compiler generated copy/move constructors and assignment operations.

cpp/ql/lib/change-notes/2022-08-17-deleted-deprecations.md

@@ -1,6 +0,0 @@
----
-category: minorAnalysis
----
-* All deprecated predicates/classes/modules that have been deprecated for over a year have been 
-deleted.
-

cpp/ql/lib/change-notes/2022-08-22-link-targets-for-variables.md

@@ -1,4 +0,0 @@
----
-category: feature
----
-* Added support for getting the link targets of global and namespace variables.

cpp/ql/lib/change-notes/2022-08-22-xml-rename.md

@@ -1,5 +0,0 @@
----
-category: deprecated
----
-* Many classes/predicates/modules with upper-case acronyms in their name have been renamed to follow our style-guide. 
-  The old name still exists as a deprecated alias.

cpp/ql/lib/change-notes/released/0.3.4.md

@@ -0,0 +1,16 @@
+## 0.3.4
+
+### Deprecated APIs
+
+* Many classes/predicates/modules with upper-case acronyms in their name have been renamed to follow our style-guide. 
+  The old name still exists as a deprecated alias.
+
+### New Features
+
+* Added support for getting the link targets of global and namespace variables.
+* Added a `BlockAssignExpr` class, which models a `memcpy`-like operation used in compiler generated copy/move constructors and assignment operations.
+
+### Minor Analysis Improvements
+
+* All deprecated predicates/classes/modules that have been deprecated for over a year have been 
+deleted.

cpp/ql/lib/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.3.3
+lastReleaseVersion: 0.3.4

cpp/ql/lib/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/cpp-all
-version: 0.3.4-dev
+version: 0.3.4
 groups: cpp
 dbscheme: semmlecode.cpp.dbscheme
 extractor: cpp

cpp/ql/src/CHANGELOG.md

@@ -1,3 +1,9 @@
+## 0.3.3
+
+### Minor Analysis Improvements
+
+* The "Cleartext storage of sensitive information in buffer" (`cpp/cleartext-storage-buffer`) query has been improved to produce fewer false positives.
+
 ## 0.3.2
 
 ### Minor Analysis Improvements

cpp/ql/src/change-notes/released/0.3.3.md

@@ -1,4 +1,5 @@
----
-category: minorAnalysis
----
+## 0.3.3
+
+### Minor Analysis Improvements
+
 * The "Cleartext storage of sensitive information in buffer" (`cpp/cleartext-storage-buffer`) query has been improved to produce fewer false positives.

cpp/ql/src/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.3.2
+lastReleaseVersion: 0.3.3

cpp/ql/src/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/cpp-queries
-version: 0.3.3-dev
+version: 0.3.3
 groups: 
   - cpp
   - queries

csharp/ql/campaigns/Solorigate/lib/CHANGELOG.md

@@ -1,3 +1,5 @@
+## 1.2.4
+
 ## 1.2.3
 
 ## 1.2.2

csharp/ql/campaigns/Solorigate/lib/change-notes/released/1.2.4.md

@@ -0,0 +1 @@
+## 1.2.4

csharp/ql/campaigns/Solorigate/lib/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 1.2.3
+lastReleaseVersion: 1.2.4

csharp/ql/campaigns/Solorigate/lib/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/csharp-solorigate-all
-version: 1.2.4-dev
+version: 1.2.4
 groups:
     - csharp
     - solorigate

csharp/ql/campaigns/Solorigate/src/CHANGELOG.md

@@ -1,3 +1,5 @@
+## 1.2.4
+
 ## 1.2.3
 
 ## 1.2.2

csharp/ql/campaigns/Solorigate/src/change-notes/released/1.2.4.md

@@ -0,0 +1 @@
+## 1.2.4

csharp/ql/campaigns/Solorigate/src/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 1.2.3
+lastReleaseVersion: 1.2.4

csharp/ql/campaigns/Solorigate/src/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/csharp-solorigate-queries
-version: 1.2.4-dev
+version: 1.2.4
 groups:
     - csharp
     - solorigate

csharp/ql/lib/CHANGELOG.md

@@ -1,3 +1,15 @@
+## 0.3.4
+
+### Deprecated APIs
+
+* Many classes/predicates/modules with upper-case acronyms in their name have been renamed to follow our style-guide. 
+  The old name still exists as a deprecated alias.
+
+### Minor Analysis Improvements
+
+* All deprecated predicates/classes/modules that have been deprecated for over a year have been 
+deleted.
+
 ## 0.3.3
 
 ## 0.3.2

csharp/ql/lib/change-notes/2022-08-17-deleted-deprecations.md

@@ -1,6 +0,0 @@
----
-category: minorAnalysis
----
-* All deprecated predicates/classes/modules that have been deprecated for over a year have been 
-deleted.
-

csharp/ql/lib/change-notes/2022-08-22-xml-rename.md

@@ -1,5 +0,0 @@
----
-category: deprecated
----
-* Many classes/predicates/modules with upper-case acronyms in their name have been renamed to follow our style-guide. 
-  The old name still exists as a deprecated alias.

csharp/ql/lib/change-notes/released/0.3.4.md

@@ -0,0 +1,11 @@
+## 0.3.4
+
+### Deprecated APIs
+
+* Many classes/predicates/modules with upper-case acronyms in their name have been renamed to follow our style-guide. 
+  The old name still exists as a deprecated alias.
+
+### Minor Analysis Improvements
+
+* All deprecated predicates/classes/modules that have been deprecated for over a year have been 
+deleted.

csharp/ql/lib/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.3.3
+lastReleaseVersion: 0.3.4

csharp/ql/lib/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/csharp-all
-version: 0.3.4-dev
+version: 0.3.4
 groups: csharp
 dbscheme: semmlecode.csharp.dbscheme
 extractor: csharp

csharp/ql/src/CHANGELOG.md

@@ -1,3 +1,12 @@
+## 0.3.3
+
+### Minor Analysis Improvements
+
+* Parameters of delegates passed to routing endpoint calls like `MapGet` in ASP.NET Core are now considered remote flow sources.
+* The query `cs/unsafe-deserialization-untrusted-input` is not reporting on all calls of `JsonConvert.DeserializeObject` any longer, it only covers cases that explicitly use unsafe serialization settings.
+* Added better support for the SQLite framework in the SQL injection query.
+* File streams are now considered stored flow sources. Eg. reading query elements from a file can lead to a Second Order SQL injection alert.
+
 ## 0.3.2
 
 ## 0.3.1

csharp/ql/src/change-notes/2022-08-10-sqlinjection-queries.md

@@ -1,5 +0,0 @@
----
-category: minorAnalysis
----
-* Added better support for the SQLite framework in the SQL injection query.
-* File streams are now considered stored flow sources. Eg. reading query elements from a file can lead to a Second Order SQL injection alert.

csharp/ql/src/change-notes/2022-08-11-unsafe-deserialization.md

@@ -1,4 +0,0 @@
----
-category: minorAnalysis
----
-* The query `cs/unsafe-deserialization-untrusted-input` is not reporting on all calls of `JsonConvert.DeserializeObject` any longer, it only covers cases that explicitly use unsafe serialization settings.

csharp/ql/src/change-notes/2022-08-16-aspnetcore-remoteflowsources.md

@@ -1,4 +0,0 @@
----
-category: minorAnalysis
----
-* Parameters of delegates passed to routing endpoint calls like `MapGet` in ASP.NET Core are now considered remote flow sources.

csharp/ql/src/change-notes/released/0.3.3.md

@@ -0,0 +1,8 @@
+## 0.3.3
+
+### Minor Analysis Improvements
+
+* Parameters of delegates passed to routing endpoint calls like `MapGet` in ASP.NET Core are now considered remote flow sources.
+* The query `cs/unsafe-deserialization-untrusted-input` is not reporting on all calls of `JsonConvert.DeserializeObject` any longer, it only covers cases that explicitly use unsafe serialization settings.
+* Added better support for the SQLite framework in the SQL injection query.
+* File streams are now considered stored flow sources. Eg. reading query elements from a file can lead to a Second Order SQL injection alert.

csharp/ql/src/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.3.2
+lastReleaseVersion: 0.3.3

csharp/ql/src/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/csharp-queries
-version: 0.3.3-dev
+version: 0.3.3
 groups: 
   - csharp
   - queries

go/ql/lib/CHANGELOG.md

@@ -1,3 +1,13 @@
+## 0.2.4
+
+### Minor Analysis Improvements
+
+* Go 1.19 is now supported, including adding new taint propagation steps for new standard-library functions introduced in this release.
+* Most deprecated predicates/classes/modules that have been deprecated for over a year have been 
+deleted.
+* Fixed data-flow to captured variable references.
+* We now assume that if a channel-typed field is only referred to twice in the user codebase, once in a send operation and once in a receive, then data flows from the send to the receive statement. This enables finding some cross-goroutine flow.
+
 ## 0.2.3
 
 ## 0.2.2

go/ql/lib/change-notes/2022-08-17-deleted-deprecations.md

@@ -1,6 +0,0 @@
----
-category: minorAnalysis
----
-* Most deprecated predicates/classes/modules that have been deprecated for over a year have been 
-deleted.
-

go/ql/lib/change-notes/2022-08-19-go-119-support.md

@@ -1,4 +0,0 @@
----
-category: minorAnalysis
----
-* Go 1.19 is now supported, including adding new taint propagation steps for new standard-library functions introduced in this release.

go/ql/lib/change-notes/released/0.2.4.md

@@ -1,5 +1,9 @@
----
-category: minorAnalysis
----
+## 0.2.4
+
+### Minor Analysis Improvements
+
+* Go 1.19 is now supported, including adding new taint propagation steps for new standard-library functions introduced in this release.
+* Most deprecated predicates/classes/modules that have been deprecated for over a year have been 
+deleted.
 * Fixed data-flow to captured variable references.
 * We now assume that if a channel-typed field is only referred to twice in the user codebase, once in a send operation and once in a receive, then data flows from the send to the receive statement. This enables finding some cross-goroutine flow.

go/ql/lib/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.2.3
+lastReleaseVersion: 0.2.4

go/ql/lib/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/go-all
-version: 0.2.4-dev
+version: 0.2.4
 groups: go
 dbscheme: go.dbscheme
 extractor: go

go/ql/src/CHANGELOG.md

@@ -1,3 +1,5 @@
+## 0.2.4
+
 ## 0.2.3
 
 ### Minor Analysis Improvements

go/ql/src/change-notes/released/0.2.4.md

@@ -0,0 +1 @@
+## 0.2.4

go/ql/src/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.2.3
+lastReleaseVersion: 0.2.4

go/ql/src/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/go-queries
-version: 0.2.4-dev
+version: 0.2.4
 groups:
   - go
   - queries

java/ql/lib/CHANGELOG.md

@@ -1,3 +1,30 @@
+## 0.3.4
+
+### Deprecated APIs
+
+* Many classes/predicates/modules with upper-case acronyms in their name have been renamed to follow our style-guide. 
+  The old name still exists as a deprecated alias.
+* The utility files previously in the `semmle.code.java.security.performance` package have been moved to the `semmle.code.java.security.regexp` package.  
+  The previous files still exist as deprecated aliases.
+
+### New Features
+
+* Added a new predicate, `requiresPermissions`, in the `AndroidComponentXmlElement` and `AndroidApplicationXmlElement` classes to detect if the element has explicitly set a value for its `android:permission` attribute.
+* Added a new predicate, `hasAnIntentFilterElement`, in the `AndroidComponentXmlElement` class to detect if a component contains an intent filter element.
+* Added a new predicate, `hasExportedAttribute`, in the `AndroidComponentXmlElement` class to detect if a component has an `android:exported` attribute.
+* Added a new class, `AndroidCategoryXmlElement`, to represent a category element in an Android manifest file.
+* Added a new predicate, `getACategoryElement`, in the `AndroidIntentFilterXmlElement` class to get a category element of an intent filter.
+* Added a new predicate, `isInBuildDirectory`, in the `AndroidManifestXmlFile` class. This predicate detects if the manifest file is located in a build directory.
+* Added a new predicate, `isDebuggable`, in the `AndroidApplicationXmlElement` class. This predicate detects if the application element has its `android:debuggable` attribute enabled.
+
+### Minor Analysis Improvements
+
+* Added new flow steps for the classes `java.io.Path` and `java.nio.Paths`.
+* The class `AndroidFragment` now also models the Android Jetpack version of the `Fragment` class (`androidx.fragment.app.Fragment`).
+* Java 19 builds can now be extracted. There are no non-preview new language features in this release, so the only user-visible change is that the CodeQL extractor will now correctly trace compilations using the JDK 19 release of `javac`.
+* Classes and methods that are seen with several different paths during the extraction process (for example, packaged into different JAR files) now report an arbitrarily selected location via their `getLocation` and `hasLocationInfo` predicates, rather than reporting all of them. This may lead to reduced alert duplication.
+* The query `java/hardcoded-credential-api-call` now recognises methods that consume usernames, passwords and keys from the JSch, Ganymed, Apache SSHD, sshj, Trilead SSH-2, Apache FTPClient and MongoDB projects. 
+
 ## 0.3.3
 
 ### Minor Analysis Improvements

java/ql/lib/change-notes/2022-05-25-redos-refac.md

@@ -1,5 +0,0 @@
----
-category: deprecated
----
-* The utility files previously in the `semmle.code.java.security.performance` package have been moved to the `semmle.code.java.security.regexp` package.  
-  The previous files still exist as deprecated aliases.

java/ql/lib/change-notes/2022-08-01-android-manifest-new-predicates.md

@@ -1,5 +0,0 @@
----
-category: feature
----
-* Added a new predicate, `isInBuildDirectory`, in the `AndroidManifestXmlFile` class. This predicate detects if the manifest file is located in a build directory.
-* Added a new predicate, `isDebuggable`, in the `AndroidApplicationXmlElement` class. This predicate detects if the application element has its `android:debuggable` attribute enabled.

java/ql/lib/change-notes/2022-08-09-android-manifest-new-class-and-predicates.md

@@ -1,8 +0,0 @@
----
-category: feature
----
-* Added a new predicate, `requiresPermissions`, in the `AndroidComponentXmlElement` and `AndroidApplicationXmlElement` classes to detect if the element has explicitly set a value for its `android:permission` attribute.
-* Added a new predicate, `hasAnIntentFilterElement`, in the `AndroidComponentXmlElement` class to detect if a component contains an intent filter element.
-* Added a new predicate, `hasExportedAttribute`, in the `AndroidComponentXmlElement` class to detect if a component has an `android:exported` attribute.
-* Added a new class, `AndroidCategoryXmlElement`, to represent a category element in an Android manifest file.
-* Added a new predicate, `getACategoryElement`, in the `AndroidIntentFilterXmlElement` class to get a category element of an intent filter.

java/ql/lib/change-notes/2022-08-13-more-hardcoded-credential-apis.md

@@ -1,4 +0,0 @@
----
-category: minorAnalysis
----
-* The query `java/hardcoded-credential-api-call` now recognises methods that consume usernames, passwords and keys from the JSch, Ganymed, Apache SSHD, sshj, Trilead SSH-2, Apache FTPClient and MongoDB projects. 

java/ql/lib/change-notes/2022-08-19-androidx-fragments.md

@@ -1,4 +0,0 @@
----
-category: minorAnalysis
----
-* The class `AndroidFragment` now also models the Android Jetpack version of the `Fragment` class (`androidx.fragment.app.Fragment`).

java/ql/lib/change-notes/2022-08-19-java-19-support.md

@@ -1,4 +0,0 @@
----
-category: minorAnalysis
----
-* Java 19 builds can now be extracted. There are no non-preview new language features in this release, so the only user-visible change is that the CodeQL extractor will now correctly trace compilations using the JDK 19 release of `javac`.

java/ql/lib/change-notes/2022-08-19-signular-locations.md

@@ -1,4 +0,0 @@
----
-category: minorAnalysis
----
-* Classes and methods that are seen with several different paths during the extraction process (for example, packaged into different JAR files) now report an arbitrarily selected location via their `getLocation` and `hasLocationInfo` predicates, rather than reporting all of them. This may lead to reduced alert duplication.

java/ql/lib/change-notes/2022-08-22-path-summaries.md

@@ -1,4 +0,0 @@
----
-category: minorAnalysis
----
-* Added new flow steps for the classes `java.io.Path` and `java.nio.Paths`.

java/ql/lib/change-notes/2022-08-22-xml-rename.md

@@ -1,5 +0,0 @@
----
-category: deprecated
----
-* Many classes/predicates/modules with upper-case acronyms in their name have been renamed to follow our style-guide. 
-  The old name still exists as a deprecated alias.

java/ql/lib/change-notes/released/0.3.4.md

@@ -0,0 +1,26 @@
+## 0.3.4
+
+### Deprecated APIs
+
+* Many classes/predicates/modules with upper-case acronyms in their name have been renamed to follow our style-guide. 
+  The old name still exists as a deprecated alias.
+* The utility files previously in the `semmle.code.java.security.performance` package have been moved to the `semmle.code.java.security.regexp` package.  
+  The previous files still exist as deprecated aliases.
+
+### New Features
+
+* Added a new predicate, `requiresPermissions`, in the `AndroidComponentXmlElement` and `AndroidApplicationXmlElement` classes to detect if the element has explicitly set a value for its `android:permission` attribute.
+* Added a new predicate, `hasAnIntentFilterElement`, in the `AndroidComponentXmlElement` class to detect if a component contains an intent filter element.
+* Added a new predicate, `hasExportedAttribute`, in the `AndroidComponentXmlElement` class to detect if a component has an `android:exported` attribute.
+* Added a new class, `AndroidCategoryXmlElement`, to represent a category element in an Android manifest file.
+* Added a new predicate, `getACategoryElement`, in the `AndroidIntentFilterXmlElement` class to get a category element of an intent filter.
+* Added a new predicate, `isInBuildDirectory`, in the `AndroidManifestXmlFile` class. This predicate detects if the manifest file is located in a build directory.
+* Added a new predicate, `isDebuggable`, in the `AndroidApplicationXmlElement` class. This predicate detects if the application element has its `android:debuggable` attribute enabled.
+
+### Minor Analysis Improvements
+
+* Added new flow steps for the classes `java.io.Path` and `java.nio.Paths`.
+* The class `AndroidFragment` now also models the Android Jetpack version of the `Fragment` class (`androidx.fragment.app.Fragment`).
+* Java 19 builds can now be extracted. There are no non-preview new language features in this release, so the only user-visible change is that the CodeQL extractor will now correctly trace compilations using the JDK 19 release of `javac`.
+* Classes and methods that are seen with several different paths during the extraction process (for example, packaged into different JAR files) now report an arbitrarily selected location via their `getLocation` and `hasLocationInfo` predicates, rather than reporting all of them. This may lead to reduced alert duplication.
+* The query `java/hardcoded-credential-api-call` now recognises methods that consume usernames, passwords and keys from the JSch, Ganymed, Apache SSHD, sshj, Trilead SSH-2, Apache FTPClient and MongoDB projects. 

java/ql/lib/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.3.3
+lastReleaseVersion: 0.3.4

java/ql/lib/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/java-all
-version: 0.3.4-dev
+version: 0.3.4
 groups: java
 dbscheme: config/semmlecode.dbscheme
 extractor: java

java/ql/src/CHANGELOG.md

@@ -1,3 +1,25 @@
+## 0.3.3
+
+### New Queries
+
+* Added a new query, `java/android/implicitly-exported-component`, to detect if components are implicitly exported in the Android manifest.
+* A new query "Use of RSA algorithm without OAEP" (`java/rsa-without-oaep`) has been added. This query finds uses of RSA encryption that don't use the OAEP scheme.
+* Added a new query, `java/android/debuggable-attribute-enabled`, to detect if the `android:debuggable` attribute is enabled in the Android manifest.
+* The query "Using a static initialization vector for encryption" (`java/static-initialization-vector`) has been promoted from experimental to the main query pack. This query was originally [submitted as an experimental query by @artem-smotrakov](https://github.com/github/codeql/pull/6357).
+* A new query `java/partial-path-traversal` finds partial path traversal vulnerabilities resulting from incorrectly using 
+`String#startsWith` to compare canonical paths. 
+* Added a new query, `java/suspicious-regexp-range`, to detect character ranges in regular expressions that seem to match 
+  too many characters.
+
+### Query Metadata Changes
+
+* The queries `java/redos` and `java/polynomial-redos` now have a tag for CWE-1333. 
+
+### Minor Analysis Improvements
+
+* The query `java/static-initialization-vector` no longer requires a `Cipher` object to be initialized with `ENCRYPT_MODE` to be considered a valid sink. Also, several new sanitizers were added.
+* Improved sanitizers for `java/sensitive-log`, which removes some false positives and improves performance a bit.
+
 ## 0.3.2
 
 ### New Queries

java/ql/src/change-notes/2022-06-24-suspicious-range.md

@@ -1,5 +0,0 @@
----
-category: newQuery
----
-* Added a new query, `java/suspicious-regexp-range`, to detect character ranges in regular expressions that seem to match 
-  too many characters.

java/ql/src/change-notes/2022-07-01-partial-path-traversal.md

@@ -1,5 +0,0 @@
----
-category: newQuery
----
-* A new query `java/partial-path-traversal` finds partial path traversal vulnerabilities resulting from incorrectly using 
-`String#startsWith` to compare canonical paths. 

java/ql/src/change-notes/2022-07-19-static-initialization-vector.md

@@ -1,4 +0,0 @@
----
-category: newQuery
----
-* The query "Using a static initialization vector for encryption" (`java/static-initialization-vector`) has been promoted from experimental to the main query pack. This query was originally [submitted as an experimental query by @artem-smotrakov](https://github.com/github/codeql/pull/6357).

java/ql/src/change-notes/2022-08-01-android-debug-query.md

@@ -1,4 +0,0 @@
----
-category: newQuery
----
-* Added a new query, `java/android/debuggable-attribute-enabled`, to detect if the `android:debuggable` attribute is enabled in the Android manifest.

java/ql/src/change-notes/2022-08-05-rsa-without-oaep.md

@@ -1,4 +0,0 @@
----
-category: newQuery
----
-* A new query "Use of RSA algorithm without OAEP" (`java/rsa-without-oaep`) has been added. This query finds uses of RSA encryption that don't use the OAEP scheme.

java/ql/src/change-notes/2022-08-09-android-implicit-export.md

@@ -1,4 +0,0 @@
----
-category: newQuery
----
-* Added a new query, `java/android/implicitly-exported-component`, to detect if components are implicitly exported in the Android manifest.

java/ql/src/change-notes/2022-08-18-sensitive-log-sanitizer.md

@@ -1,4 +0,0 @@
----
-category: minorAnalysis
----
-* Improved sanitizers for `java/sensitive-log`, which removes some false positives and improves performance a bit.

java/ql/src/change-notes/2022-08-22-static-init-vector-query-improvements.md

@@ -1,4 +0,0 @@
----
-category: minorAnalysis
----
-* The query `java/static-initialization-vector` no longer requires a `Cipher` object to be initialized with `ENCRYPT_MODE` to be considered a valid sink. Also, several new sanitizers were added.

java/ql/src/change-notes/2022-08-23-redos-cwe-1333.md

@@ -1,4 +0,0 @@
----
-category: queryMetadata
----
-* The queries `java/redos` and `java/polynomial-redos` now have a tag for CWE-1333. 

java/ql/src/change-notes/released/0.3.3.md

@@ -0,0 +1,21 @@
+## 0.3.3
+
+### New Queries
+
+* Added a new query, `java/android/implicitly-exported-component`, to detect if components are implicitly exported in the Android manifest.
+* A new query "Use of RSA algorithm without OAEP" (`java/rsa-without-oaep`) has been added. This query finds uses of RSA encryption that don't use the OAEP scheme.
+* Added a new query, `java/android/debuggable-attribute-enabled`, to detect if the `android:debuggable` attribute is enabled in the Android manifest.
+* The query "Using a static initialization vector for encryption" (`java/static-initialization-vector`) has been promoted from experimental to the main query pack. This query was originally [submitted as an experimental query by @artem-smotrakov](https://github.com/github/codeql/pull/6357).
+* A new query `java/partial-path-traversal` finds partial path traversal vulnerabilities resulting from incorrectly using 
+`String#startsWith` to compare canonical paths. 
+* Added a new query, `java/suspicious-regexp-range`, to detect character ranges in regular expressions that seem to match 
+  too many characters.
+
+### Query Metadata Changes
+
+* The queries `java/redos` and `java/polynomial-redos` now have a tag for CWE-1333. 
+
+### Minor Analysis Improvements
+
+* The query `java/static-initialization-vector` no longer requires a `Cipher` object to be initialized with `ENCRYPT_MODE` to be considered a valid sink. Also, several new sanitizers were added.
+* Improved sanitizers for `java/sensitive-log`, which removes some false positives and improves performance a bit.

java/ql/src/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.3.2
+lastReleaseVersion: 0.3.3

java/ql/src/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/java-queries
-version: 0.3.3-dev
+version: 0.3.3
 groups: 
   - java
   - queries

javascript/ql/lib/CHANGELOG.md

@@ -1,3 +1,21 @@
+## 0.2.4
+
+### Deprecated APIs
+
+* Many classes/predicates/modules with upper-case acronyms in their name have been renamed to follow our style-guide. 
+  The old name still exists as a deprecated alias.
+* The utility files previously in the `semmle.javascript.security.performance` package have been moved to the `semmle.javascript.security.regexp` package.  
+  The previous files still exist as deprecated aliases.
+
+### Minor Analysis Improvements
+
+* Most deprecated predicates/classes/modules that have been deprecated for over a year have been 
+deleted.
+
+### Bug Fixes
+
+* Fixed that top-level `for await` statements would produce a syntax error. These statements are now parsed correctly.
+
 ## 0.2.3
 
 ## 0.2.2

javascript/ql/lib/change-notes/2022-05-25-redos-refac.md

@@ -1,5 +0,0 @@
----
-category: deprecated
----
-* The utility files previously in the `semmle.javascript.security.performance` package have been moved to the `semmle.javascript.security.regexp` package.  
-  The previous files still exist as deprecated aliases.

javascript/ql/lib/change-notes/2022-08-15-for-await.md

@@ -1,4 +0,0 @@
----
-category: fix
----
-* Fixed that top-level `for await` statements would produce a syntax error. These statements are now parsed correctly.

javascript/ql/lib/change-notes/2022-08-17-deleted-deprecations.md

@@ -1,6 +0,0 @@
----
-category: minorAnalysis
----
-* Most deprecated predicates/classes/modules that have been deprecated for over a year have been 
-deleted.
-

javascript/ql/lib/change-notes/2022-08-22-xml-rename.md

@@ -1,5 +0,0 @@
----
-category: deprecated
----
-* Many classes/predicates/modules with upper-case acronyms in their name have been renamed to follow our style-guide. 
-  The old name still exists as a deprecated alias.

javascript/ql/lib/change-notes/released/0.2.4.md

@@ -0,0 +1,17 @@
+## 0.2.4
+
+### Deprecated APIs
+
+* Many classes/predicates/modules with upper-case acronyms in their name have been renamed to follow our style-guide. 
+  The old name still exists as a deprecated alias.
+* The utility files previously in the `semmle.javascript.security.performance` package have been moved to the `semmle.javascript.security.regexp` package.  
+  The previous files still exist as deprecated aliases.
+
+### Minor Analysis Improvements
+
+* Most deprecated predicates/classes/modules that have been deprecated for over a year have been 
+deleted.
+
+### Bug Fixes
+
+* Fixed that top-level `for await` statements would produce a syntax error. These statements are now parsed correctly.

javascript/ql/lib/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.2.3
+lastReleaseVersion: 0.2.4

javascript/ql/lib/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/javascript-all
-version: 0.2.4-dev
+version: 0.2.4
 groups: javascript
 dbscheme: semmlecode.javascript.dbscheme
 extractor: javascript

javascript/ql/src/CHANGELOG.md

@@ -1,3 +1,10 @@
+## 0.3.3
+
+### New Queries
+
+* Added a new query, `py/suspicious-regexp-range`, to detect character ranges in regular expressions that seem to match 
+  too many characters.
+
 ## 0.3.2
 
 ## 0.3.1

javascript/ql/src/change-notes/released/0.3.3.md

@@ -1,5 +1,6 @@
----
-category: newQuery
----
+## 0.3.3
+
+### New Queries
+
 * Added a new query, `py/suspicious-regexp-range`, to detect character ranges in regular expressions that seem to match 
   too many characters.

javascript/ql/src/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.3.2
+lastReleaseVersion: 0.3.3

javascript/ql/src/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/javascript-queries
-version: 0.3.3-dev
+version: 0.3.3
 groups: 
   - javascript
   - queries

python/ql/lib/CHANGELOG.md

@@ -1,3 +1,17 @@
+## 0.5.4
+
+### Deprecated APIs
+
+* Many classes/predicates/modules with upper-case acronyms in their name have been renamed to follow our style-guide. 
+  The old name still exists as a deprecated alias.
+* The utility files previously in the `semmle.python.security.performance` package have been moved to the `semmle.python.security.regexp` package.  
+  The previous files still exist as deprecated aliases.
+
+### Minor Analysis Improvements
+
+* Most deprecated predicates/classes/modules that have been deprecated for over a year have been 
+deleted.
+
 ## 0.5.3
 
 ### Minor Analysis Improvements

python/ql/lib/change-notes/2022-05-25-redos-refac.md

@@ -1,5 +0,0 @@
----
-category: deprecated
----
-* The utility files previously in the `semmle.python.security.performance` package have been moved to the `semmle.python.security.regexp` package.  
-  The previous files still exist as deprecated aliases.

python/ql/lib/change-notes/2022-08-17-deleted-deprecations.md

@@ -1,6 +0,0 @@
----
-category: minorAnalysis
----
-* Most deprecated predicates/classes/modules that have been deprecated for over a year have been 
-deleted.
-

python/ql/lib/change-notes/2022-08-22-xml-rename.md

@@ -1,5 +0,0 @@
----
-category: deprecated
----
-* Many classes/predicates/modules with upper-case acronyms in their name have been renamed to follow our style-guide. 
-  The old name still exists as a deprecated alias.

python/ql/lib/change-notes/released/0.5.4.md

@@ -0,0 +1,13 @@
+## 0.5.4
+
+### Deprecated APIs
+
+* Many classes/predicates/modules with upper-case acronyms in their name have been renamed to follow our style-guide. 
+  The old name still exists as a deprecated alias.
+* The utility files previously in the `semmle.python.security.performance` package have been moved to the `semmle.python.security.regexp` package.  
+  The previous files still exist as deprecated aliases.
+
+### Minor Analysis Improvements
+
+* Most deprecated predicates/classes/modules that have been deprecated for over a year have been 
+deleted.

python/ql/lib/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.5.3
+lastReleaseVersion: 0.5.4

python/ql/lib/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/python-all
-version: 0.5.4-dev
+version: 0.5.4
 groups: python
 dbscheme: semmlecode.python.dbscheme
 extractor: python

python/ql/src/CHANGELOG.md

@@ -1,3 +1,10 @@
+## 0.4.2
+
+### New Queries
+
+* Added a new query, `py/suspicious-regexp-range`, to detect character ranges in regular expressions that seem to match 
+  too many characters.
+
 ## 0.4.1
 
 ## 0.4.0

python/ql/src/change-notes/released/0.4.2.md

@@ -1,5 +1,6 @@
----
-category: newQuery
----
+## 0.4.2
+
+### New Queries
+
 * Added a new query, `py/suspicious-regexp-range`, to detect character ranges in regular expressions that seem to match 
   too many characters.

python/ql/src/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.4.1
+lastReleaseVersion: 0.4.2

python/ql/src/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/python-queries
-version: 0.4.2-dev
+version: 0.4.2
 groups: 
   - python
   - queries

ruby/ql/lib/CHANGELOG.md

@@ -1,3 +1,17 @@
+## 0.3.4
+
+### Deprecated APIs
+
+* The utility files previously in the `codeql.ruby.security.performance` package have been moved to the `codeql.ruby.security.regexp` package.  
+  The previous files still exist as deprecated aliases.
+
+### Minor Analysis Improvements
+
+* Most deprecated predicates/classes/modules that have been deprecated for over a year have been 
+deleted.
+* Calls to `render` in Rails controllers and views are now recognized as HTTP
+  response bodies.
+
 ## 0.3.3
 
 ### Minor Analysis Improvements

ruby/ql/lib/change-notes/2022-05-25-redos-refac.md

@@ -1,5 +0,0 @@
----
-category: deprecated
----
-* The utility files previously in the `codeql.ruby.security.performance` package have been moved to the `codeql.ruby.security.regexp` package.  
-  The previous files still exist as deprecated aliases.

ruby/ql/lib/change-notes/2022-08-16-action-controller-response-body.md

@@ -1,5 +0,0 @@
----
-category: minorAnalysis
----
-* Calls to `render` in Rails controllers and views are now recognized as HTTP
-  response bodies.

ruby/ql/lib/change-notes/2022-08-17-deleted-deprecations.md

@@ -1,6 +0,0 @@
----
-category: minorAnalysis
----
-* Most deprecated predicates/classes/modules that have been deprecated for over a year have been 
-deleted.
-

ruby/ql/lib/change-notes/released/0.3.4.md

@@ -0,0 +1,13 @@
+## 0.3.4
+
+### Deprecated APIs
+
+* The utility files previously in the `codeql.ruby.security.performance` package have been moved to the `codeql.ruby.security.regexp` package.  
+  The previous files still exist as deprecated aliases.
+
+### Minor Analysis Improvements
+
+* Most deprecated predicates/classes/modules that have been deprecated for over a year have been 
+deleted.
+* Calls to `render` in Rails controllers and views are now recognized as HTTP
+  response bodies.

ruby/ql/lib/codeql-pack.release.yml

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.3.3
+lastReleaseVersion: 0.3.4

ruby/ql/lib/qlpack.yml

@@ -1,5 +1,5 @@
 name: codeql/ruby-all
-version: 0.3.4-dev
+version: 0.3.4
 groups: ruby
 extractor: ruby
 dbscheme: ruby.dbscheme

ruby/ql/src/CHANGELOG.md

@@ -1,3 +1,14 @@
+## 0.3.3
+
+### New Queries
+
+* Added a new query, `rb/log-inection`, to detect cases where a malicious user may be able to forge log entries.
+* Added a new query, `rb/incomplete-multi-character-sanitization`. The query
+  finds string transformations that do not replace all occurrences of a
+  multi-character substring.
+* Added a new query, `rb/suspicious-regexp-range`, to detect character ranges in regular expressions that seem to match 
+  too many characters.
+
 ## 0.3.2
 
 ## 0.3.1