Release preparation for version 2.19.2

This commit is contained in:
github-actions[bot] 2024-10-15 10:29:25 +00:00
Родитель 1626af0ae1
Коммит 255f55cf1a
150 изменённых файлов: 357 добавлений и 123 удалений

Просмотреть файл

@ -1,3 +1,10 @@
## 2.0.2
### Minor Analysis Improvements
* Added taint flow model for `fopen` and related functions.
* The `SimpleRangeAnalysis` library (`semmle.code.cpp.rangeanalysis.SimpleRangeAnalysis`) now generates more precise ranges for calls to `fgetc` and `getc`.
## 2.0.1
No user-facing changes.

Просмотреть файл

@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* The `SimpleRangeAnalysis` library (`semmle.code.cpp.rangeanalysis.SimpleRangeAnalysis`) now generates more precise ranges for calls to `fgetc` and `getc`.

Просмотреть файл

@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* Added taint flow model for `fopen` and related functions.

Просмотреть файл

@ -0,0 +1,6 @@
## 2.0.2
### Minor Analysis Improvements
* Added taint flow model for `fopen` and related functions.
* The `SimpleRangeAnalysis` library (`semmle.code.cpp.rangeanalysis.SimpleRangeAnalysis`) now generates more precise ranges for calls to `fgetc` and `getc`.

Просмотреть файл

@ -1,2 +1,2 @@
---
lastReleaseVersion: 2.0.1
lastReleaseVersion: 2.0.2

Просмотреть файл

@ -1,5 +1,5 @@
name: codeql/cpp-all
version: 2.0.2-dev
version: 2.0.2
groups: cpp
dbscheme: semmlecode.cpp.dbscheme
extractor: cpp

Просмотреть файл

@ -1,3 +1,12 @@
## 1.2.5
### Minor Analysis Improvements
* The `cpp/unclear-array-index-validation` ("Unclear validation of array index") query has been improved to reduce false positives increase true positives.
* Fixed false positives in the `cpp/uninitialized-local` ("Potentially uninitialized local variable") query if there are extraction errors in the function.
* The `cpp/incorrect-string-type-conversion` query now produces fewer false positives caused by failure to detect byte arrays.
* The `cpp/incorrect-string-type-conversion` query now produces fewer false positives caused by failure to recognize dynamic checks prior to possible dangerous widening.
## 1.2.4
### Minor Analysis Improvements

Просмотреть файл

@ -1,5 +0,0 @@
---
category: minorAnalysis
---
* The `cpp/incorrect-string-type-conversion` query now produces fewer false positives caused by failure to detect byte arrays.
* The `cpp/incorrect-string-type-conversion` query now produces fewer false positives caused by failure to recognize dynamic checks prior to possible dangerous widening.

Просмотреть файл

@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* Fixed false positives in the `cpp/uninitialized-local` ("Potentially uninitialized local variable") query if there are extraction errors in the function.

Просмотреть файл

@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* The `cpp/unclear-array-index-validation` ("Unclear validation of array index") query has been improved to reduce false positives increase true positives.

Просмотреть файл

@ -0,0 +1,8 @@
## 1.2.5
### Minor Analysis Improvements
* The `cpp/unclear-array-index-validation` ("Unclear validation of array index") query has been improved to reduce false positives increase true positives.
* Fixed false positives in the `cpp/uninitialized-local` ("Potentially uninitialized local variable") query if there are extraction errors in the function.
* The `cpp/incorrect-string-type-conversion` query now produces fewer false positives caused by failure to detect byte arrays.
* The `cpp/incorrect-string-type-conversion` query now produces fewer false positives caused by failure to recognize dynamic checks prior to possible dangerous widening.

Просмотреть файл

@ -1,2 +1,2 @@
---
lastReleaseVersion: 1.2.4
lastReleaseVersion: 1.2.5

Просмотреть файл

@ -1,5 +1,5 @@
name: codeql/cpp-queries
version: 1.2.5-dev
version: 1.2.5
groups:
- cpp
- queries

Просмотреть файл

@ -1,3 +1,7 @@
## 1.7.27
No user-facing changes.
## 1.7.26
No user-facing changes.

Просмотреть файл

@ -0,0 +1,3 @@
## 1.7.27
No user-facing changes.

Просмотреть файл

@ -1,2 +1,2 @@
---
lastReleaseVersion: 1.7.26
lastReleaseVersion: 1.7.27

Просмотреть файл

@ -1,5 +1,5 @@
name: codeql/csharp-solorigate-all
version: 1.7.27-dev
version: 1.7.27
groups:
- csharp
- solorigate

Просмотреть файл

@ -1,3 +1,7 @@
## 1.7.27
No user-facing changes.
## 1.7.26
No user-facing changes.

Просмотреть файл

@ -0,0 +1,3 @@
## 1.7.27
No user-facing changes.

Просмотреть файл

@ -1,2 +1,2 @@
---
lastReleaseVersion: 1.7.26
lastReleaseVersion: 1.7.27

Просмотреть файл

@ -1,5 +1,5 @@
name: codeql/csharp-solorigate-queries
version: 1.7.27-dev
version: 1.7.27
groups:
- csharp
- solorigate

Просмотреть файл

@ -1,3 +1,7 @@
## 3.0.1
No user-facing changes.
## 3.0.0
### Breaking Changes

Просмотреть файл

@ -0,0 +1,3 @@
## 3.0.1
No user-facing changes.

Просмотреть файл

@ -1,2 +1,2 @@
---
lastReleaseVersion: 3.0.0
lastReleaseVersion: 3.0.1

Просмотреть файл

@ -1,5 +1,5 @@
name: codeql/csharp-all
version: 3.0.1-dev
version: 3.0.1
groups: csharp
dbscheme: semmlecode.csharp.dbscheme
extractor: csharp

Просмотреть файл

@ -1,3 +1,7 @@
## 1.0.10
No user-facing changes.
## 1.0.9
### Minor Analysis Improvements

Просмотреть файл

@ -0,0 +1,3 @@
## 1.0.10
No user-facing changes.

Просмотреть файл

@ -1,2 +1,2 @@
---
lastReleaseVersion: 1.0.9
lastReleaseVersion: 1.0.10

Просмотреть файл

@ -1,5 +1,5 @@
name: codeql/csharp-queries
version: 1.0.10-dev
version: 1.0.10
groups:
- csharp
- queries

Просмотреть файл

@ -1,3 +1,7 @@
## 1.0.10
No user-facing changes.
## 1.0.9
No user-facing changes.

Просмотреть файл

@ -0,0 +1,3 @@
## 1.0.10
No user-facing changes.

Просмотреть файл

@ -1,2 +1,2 @@
---
lastReleaseVersion: 1.0.9
lastReleaseVersion: 1.0.10

Просмотреть файл

@ -1,5 +1,5 @@
name: codeql-go-consistency-queries
version: 1.0.10-dev
version: 1.0.10
groups:
- go
- queries

Просмотреть файл

@ -1,3 +1,11 @@
## 2.1.1
### Minor Analysis Improvements
* Added member predicates `StructTag.hasOwnFieldWithTag` and `Field.getTag`, which enable CodeQL queries to examine struct field tags.
* Added member predicate `InterfaceType.hasPrivateMethodWithQualifiedName`, which enables CodeQL queries to distinguish interfaces with matching non-exported method names that are declared in different packages, and are therefore incompatible.
* Local source models with the `stdin` source kind have been added for the variable `os.Stdin` and the functions `fmt.Scan`, `fmt.Scanf` and `fmt.Scanln`. You can optionally include threat models as appropriate when using the CodeQL CLI and in GitHub code scanning. For more information, see [Analyzing your code with CodeQL queries](https://docs.github.com/code-security/codeql-cli/getting-started-with-the-codeql-cli/analyzing-your-code-with-codeql-queries#including-model-packs-to-add-potential-sources-of-tainted-data>) and [Customizing your advanced setup for code scanning](https://docs.github.com/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/customizing-your-advanced-setup-for-code-scanning#extending-codeql-coverage-with-threat-models).
## 2.1.0
### Deprecated APIs

Просмотреть файл

@ -1,5 +0,0 @@
---
category: minorAnalysis
---
* Added member predicates `StructTag.hasOwnFieldWithTag` and `Field.getTag`, which enable CodeQL queries to examine struct field tags.
* Added member predicate `InterfaceType.hasPrivateMethodWithQualifiedName`, which enables CodeQL queries to distinguish interfaces with matching non-exported method names that are declared in different packages, and are therefore incompatible.

Просмотреть файл

@ -1,4 +1,7 @@
---
category: minorAnalysis
---
## 2.1.1
### Minor Analysis Improvements
* Added member predicates `StructTag.hasOwnFieldWithTag` and `Field.getTag`, which enable CodeQL queries to examine struct field tags.
* Added member predicate `InterfaceType.hasPrivateMethodWithQualifiedName`, which enables CodeQL queries to distinguish interfaces with matching non-exported method names that are declared in different packages, and are therefore incompatible.
* Local source models with the `stdin` source kind have been added for the variable `os.Stdin` and the functions `fmt.Scan`, `fmt.Scanf` and `fmt.Scanln`. You can optionally include threat models as appropriate when using the CodeQL CLI and in GitHub code scanning. For more information, see [Analyzing your code with CodeQL queries](https://docs.github.com/code-security/codeql-cli/getting-started-with-the-codeql-cli/analyzing-your-code-with-codeql-queries#including-model-packs-to-add-potential-sources-of-tainted-data>) and [Customizing your advanced setup for code scanning](https://docs.github.com/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/customizing-your-advanced-setup-for-code-scanning#extending-codeql-coverage-with-threat-models).

Просмотреть файл

@ -1,2 +1,2 @@
---
lastReleaseVersion: 2.1.0
lastReleaseVersion: 2.1.1

Просмотреть файл

@ -1,5 +1,5 @@
name: codeql/go-all
version: 2.1.1-dev
version: 2.1.1
groups: go
dbscheme: go.dbscheme
extractor: go

Просмотреть файл

@ -1,3 +1,7 @@
## 1.1.1
No user-facing changes.
## 1.1.0
### Query Metadata Changes

Просмотреть файл

@ -0,0 +1,3 @@
## 1.1.1
No user-facing changes.

Просмотреть файл

@ -1,2 +1,2 @@
---
lastReleaseVersion: 1.1.0
lastReleaseVersion: 1.1.1

Просмотреть файл

@ -1,5 +1,5 @@
name: codeql/go-queries
version: 1.1.1-dev
version: 1.1.1
groups:
- go
- queries

Просмотреть файл

@ -1,3 +1,7 @@
## 1.0.10
No user-facing changes.
## 1.0.9
No user-facing changes.

Просмотреть файл

@ -0,0 +1,3 @@
## 1.0.10
No user-facing changes.

Просмотреть файл

@ -1,2 +1,2 @@
---
lastReleaseVersion: 1.0.9
lastReleaseVersion: 1.0.10

Просмотреть файл

@ -1,5 +1,5 @@
name: codeql/java-automodel-queries
version: 1.0.10-dev
version: 1.0.10
groups:
- java
- automodel

Просмотреть файл

@ -1,3 +1,7 @@
## 4.1.1
No user-facing changes.
## 4.1.0
### Deprecated APIs

Просмотреть файл

@ -0,0 +1,3 @@
## 4.1.1
No user-facing changes.

Просмотреть файл

@ -1,2 +1,2 @@
---
lastReleaseVersion: 4.1.0
lastReleaseVersion: 4.1.1

Просмотреть файл

@ -1,5 +1,5 @@
name: codeql/java-all
version: 4.1.1-dev
version: 4.1.1
groups: java
dbscheme: config/semmlecode.dbscheme
extractor: java

Просмотреть файл

@ -1,3 +1,7 @@
## 1.1.7
No user-facing changes.
## 1.1.6
### Minor Analysis Improvements

Просмотреть файл

@ -0,0 +1,3 @@
## 1.1.7
No user-facing changes.

Просмотреть файл

@ -1,2 +1,2 @@
---
lastReleaseVersion: 1.1.6
lastReleaseVersion: 1.1.7

Просмотреть файл

@ -1,5 +1,5 @@
name: codeql/java-queries
version: 1.1.7-dev
version: 1.1.7
groups:
- java
- queries

Просмотреть файл

@ -1,3 +1,7 @@
## 2.0.2
No user-facing changes.
## 2.0.1
No user-facing changes.

Просмотреть файл

@ -0,0 +1,3 @@
## 2.0.2
No user-facing changes.

Просмотреть файл

@ -1,2 +1,2 @@
---
lastReleaseVersion: 2.0.1
lastReleaseVersion: 2.0.2

Просмотреть файл

@ -1,5 +1,5 @@
name: codeql/javascript-all
version: 2.0.2-dev
version: 2.0.2
groups: javascript
dbscheme: semmlecode.javascript.dbscheme
extractor: javascript

Просмотреть файл

@ -1,3 +1,7 @@
## 1.2.2
No user-facing changes.
## 1.2.1
No user-facing changes.

Просмотреть файл

@ -0,0 +1,3 @@
## 1.2.2
No user-facing changes.

Просмотреть файл

@ -1,2 +1,2 @@
---
lastReleaseVersion: 1.2.1
lastReleaseVersion: 1.2.2

Просмотреть файл

@ -1,5 +1,5 @@
name: codeql/javascript-queries
version: 1.2.2-dev
version: 1.2.2
groups:
- javascript
- queries

Просмотреть файл

@ -1,3 +1,7 @@
## 1.0.10
No user-facing changes.
## 1.0.9
No user-facing changes.

Просмотреть файл

@ -0,0 +1,3 @@
## 1.0.10
No user-facing changes.

Просмотреть файл

@ -1,2 +1,2 @@
---
lastReleaseVersion: 1.0.9
lastReleaseVersion: 1.0.10

Просмотреть файл

@ -1,4 +1,4 @@
name: codeql/suite-helpers
version: 1.0.10-dev
version: 1.0.10
groups: shared
warnOnImplicitThis: true

Просмотреть файл

@ -1,3 +1,13 @@
## 2.1.1
### Minor Analysis Improvements
* Modelled that `re.finditer` returns an iterable of `re.Match` objects. This is now understood by the API graph in many cases.
* Type tracking, and hence the API graph, is now able to correctly trace trough comprehensions.
* More precise modelling of the dataflow through comprehensions. In particular, captured variables are now handled correctly.
* Dataflow out of yield is added, allowing proper tracing through generators.
* Added several models of standard library functions and classes, in anticipation of no longer extracting the standard library in a future release.
## 2.1.0
### New Features

Просмотреть файл

@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* Added several models of standard library functions and classes, in anticipation of no longer extracting the standard library in a future release.

Просмотреть файл

@ -1,5 +0,0 @@
---
category: minorAnalysis
---
* More precise modelling of the dataflow through comprehensions. In particular, captured variables are now handled correctly.
* Dataflow out of yield is added, allowing proper tracing through generators.

Просмотреть файл

@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* Type tracking, and hence the API graph, is now able to correctly trace trough comprehensions.

Просмотреть файл

@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* Modelled that `re.finditer` returns an iterable of `re.Match` objects. This is now understood by the API graph in many cases.

Просмотреть файл

@ -0,0 +1,9 @@
## 2.1.1
### Minor Analysis Improvements
* Modelled that `re.finditer` returns an iterable of `re.Match` objects. This is now understood by the API graph in many cases.
* Type tracking, and hence the API graph, is now able to correctly trace trough comprehensions.
* More precise modelling of the dataflow through comprehensions. In particular, captured variables are now handled correctly.
* Dataflow out of yield is added, allowing proper tracing through generators.
* Added several models of standard library functions and classes, in anticipation of no longer extracting the standard library in a future release.

Просмотреть файл

@ -1,2 +1,2 @@
---
lastReleaseVersion: 2.1.0
lastReleaseVersion: 2.1.1

Просмотреть файл

@ -1,5 +1,5 @@
name: codeql/python-all
version: 2.1.1-dev
version: 2.1.1
groups: python
dbscheme: semmlecode.python.dbscheme
extractor: python

Просмотреть файл

@ -1,8 +1,12 @@
## 1.3.1
No user-facing changes.
## 1.3.0
### New Queries
* The `py/cors-misconfiguration-with-credentials` query, which finds insecure CORS middleware configurations.
* The experimental `py/cors-misconfiguration-with-credentials` query, which finds insecure CORS middleware configurations.
## 1.2.2

Просмотреть файл

@ -0,0 +1,3 @@
## 1.3.1
No user-facing changes.

Просмотреть файл

@ -1,2 +1,2 @@
---
lastReleaseVersion: 1.3.0
lastReleaseVersion: 1.3.1

Просмотреть файл

@ -1,5 +1,5 @@
name: codeql/python-queries
version: 1.3.1-dev
version: 1.3.1
groups:
- python
- queries

Просмотреть файл

@ -1,3 +1,9 @@
## 2.0.2
### Minor Analysis Improvements
* The `ExtractionError` class has been split into `ExtractionError` and `ExtractionWarning`, reporting extraction errors and warnings respectively.
## 2.0.1
No user-facing changes.

Просмотреть файл

@ -1,4 +1,5 @@
---
category: minorAnalysis
---
## 2.0.2
### Minor Analysis Improvements
* The `ExtractionError` class has been split into `ExtractionError` and `ExtractionWarning`, reporting extraction errors and warnings respectively.

Просмотреть файл

@ -1,2 +1,2 @@
---
lastReleaseVersion: 2.0.1
lastReleaseVersion: 2.0.2

Просмотреть файл

@ -1,5 +1,5 @@
name: codeql/ruby-all
version: 2.0.2-dev
version: 2.0.2
groups: ruby
extractor: ruby
dbscheme: ruby.dbscheme

Просмотреть файл

@ -1,3 +1,9 @@
## 1.1.5
### Minor Analysis Improvements
* The `rb/diagnostics/extraction-errors` diagnostic query has been split into `rb/diagnostics/extraction-errors` and `rb/diagnostics/extraction-warnings`, counting extraction errors and warnings respectively.
## 1.1.4
No user-facing changes.

Просмотреть файл

@ -1,4 +1,5 @@
---
category: minorAnalysis
---
## 1.1.5
### Minor Analysis Improvements
* The `rb/diagnostics/extraction-errors` diagnostic query has been split into `rb/diagnostics/extraction-errors` and `rb/diagnostics/extraction-warnings`, counting extraction errors and warnings respectively.

Просмотреть файл

@ -1,2 +1,2 @@
---
lastReleaseVersion: 1.1.4
lastReleaseVersion: 1.1.5

Просмотреть файл

@ -1,5 +1,5 @@
name: codeql/ruby-queries
version: 1.1.5-dev
version: 1.1.5
groups:
- ruby
- queries

Просмотреть файл

@ -1,3 +1,7 @@
## 1.0.10
No user-facing changes.
## 1.0.9
No user-facing changes.

Просмотреть файл

@ -0,0 +1,3 @@
## 1.0.10
No user-facing changes.

Просмотреть файл

@ -1,2 +1,2 @@
---
lastReleaseVersion: 1.0.9
lastReleaseVersion: 1.0.10

Просмотреть файл

@ -1,5 +1,5 @@
name: codeql/controlflow
version: 1.0.10-dev
version: 1.0.10
groups: shared
library: true
dependencies:

Просмотреть файл

@ -1,3 +1,7 @@
## 1.1.4
No user-facing changes.
## 1.1.3
No user-facing changes.

Просмотреть файл

@ -0,0 +1,3 @@
## 1.1.4
No user-facing changes.

Просмотреть файл

@ -1,2 +1,2 @@
---
lastReleaseVersion: 1.1.3
lastReleaseVersion: 1.1.4

Просмотреть файл

@ -1,5 +1,5 @@
name: codeql/dataflow
version: 1.1.4-dev
version: 1.1.4
groups: shared
library: true
dependencies:

Просмотреть файл

@ -1,3 +1,7 @@
## 1.0.10
No user-facing changes.
## 1.0.9
No user-facing changes.

Просмотреть файл

@ -0,0 +1,3 @@
## 1.0.10
No user-facing changes.

Просмотреть файл

@ -1,2 +1,2 @@
---
lastReleaseVersion: 1.0.9
lastReleaseVersion: 1.0.10

Просмотреть файл

@ -1,5 +1,5 @@
name: codeql/mad
version: 1.0.10-dev
version: 1.0.10
groups: shared
library: true
dependencies:

Просмотреть файл

@ -1,3 +1,7 @@
## 1.0.10
No user-facing changes.
## 1.0.9
No user-facing changes.

Просмотреть файл

@ -0,0 +1,3 @@
## 1.0.10
No user-facing changes.

Некоторые файлы не были показаны из-за слишком большого количества измененных файлов Показать больше