зеркало из https://github.com/github/codeql.git
Release preparation for version 2.17.1
This commit is contained in:
Родитель
feeaef14be
Коммит
9bfe4ea90a
|
@ -1,3 +1,7 @@
|
|||
## 0.12.11
|
||||
|
||||
No user-facing changes.
|
||||
|
||||
## 0.12.10
|
||||
|
||||
### New Features
|
||||
|
|
|
@ -0,0 +1,3 @@
|
|||
## 0.12.11
|
||||
|
||||
No user-facing changes.
|
|
@ -1,2 +1,2 @@
|
|||
---
|
||||
lastReleaseVersion: 0.12.10
|
||||
lastReleaseVersion: 0.12.11
|
||||
|
|
|
@ -1,5 +1,5 @@
|
|||
name: codeql/cpp-all
|
||||
version: 0.12.11-dev
|
||||
version: 0.12.11
|
||||
groups: cpp
|
||||
dbscheme: semmlecode.cpp.dbscheme
|
||||
extractor: cpp
|
||||
|
|
|
@ -1,3 +1,7 @@
|
|||
## 0.9.10
|
||||
|
||||
No user-facing changes.
|
||||
|
||||
## 0.9.9
|
||||
|
||||
### New Queries
|
||||
|
|
|
@ -0,0 +1,3 @@
|
|||
## 0.9.10
|
||||
|
||||
No user-facing changes.
|
|
@ -1,2 +1,2 @@
|
|||
---
|
||||
lastReleaseVersion: 0.9.9
|
||||
lastReleaseVersion: 0.9.10
|
||||
|
|
|
@ -1,5 +1,5 @@
|
|||
name: codeql/cpp-queries
|
||||
version: 0.9.10-dev
|
||||
version: 0.9.10
|
||||
groups:
|
||||
- cpp
|
||||
- queries
|
||||
|
|
|
@ -1,3 +1,7 @@
|
|||
## 1.7.14
|
||||
|
||||
No user-facing changes.
|
||||
|
||||
## 1.7.13
|
||||
|
||||
No user-facing changes.
|
||||
|
|
|
@ -0,0 +1,3 @@
|
|||
## 1.7.14
|
||||
|
||||
No user-facing changes.
|
|
@ -1,2 +1,2 @@
|
|||
---
|
||||
lastReleaseVersion: 1.7.13
|
||||
lastReleaseVersion: 1.7.14
|
||||
|
|
|
@ -1,5 +1,5 @@
|
|||
name: codeql/csharp-solorigate-all
|
||||
version: 1.7.14-dev
|
||||
version: 1.7.14
|
||||
groups:
|
||||
- csharp
|
||||
- solorigate
|
||||
|
|
|
@ -1,3 +1,7 @@
|
|||
## 1.7.14
|
||||
|
||||
No user-facing changes.
|
||||
|
||||
## 1.7.13
|
||||
|
||||
No user-facing changes.
|
||||
|
|
|
@ -0,0 +1,3 @@
|
|||
## 1.7.14
|
||||
|
||||
No user-facing changes.
|
|
@ -1,2 +1,2 @@
|
|||
---
|
||||
lastReleaseVersion: 1.7.13
|
||||
lastReleaseVersion: 1.7.14
|
||||
|
|
|
@ -1,5 +1,5 @@
|
|||
name: codeql/csharp-solorigate-queries
|
||||
version: 1.7.14-dev
|
||||
version: 1.7.14
|
||||
groups:
|
||||
- csharp
|
||||
- solorigate
|
||||
|
|
|
@ -1,3 +1,9 @@
|
|||
## 0.9.1
|
||||
|
||||
### Minor Analysis Improvements
|
||||
|
||||
* Extracting suppress nullable warning expressions did not work when applied directly to a method call (like `System.Console.Readline()!`). This has been fixed.
|
||||
|
||||
## 0.9.0
|
||||
|
||||
### Breaking Changes
|
||||
|
|
|
@ -1,4 +1,5 @@
|
|||
---
|
||||
category: minorAnalysis
|
||||
---
|
||||
## 0.9.1
|
||||
|
||||
### Minor Analysis Improvements
|
||||
|
||||
* Extracting suppress nullable warning expressions did not work when applied directly to a method call (like `System.Console.Readline()!`). This has been fixed.
|
|
@ -1,2 +1,2 @@
|
|||
---
|
||||
lastReleaseVersion: 0.9.0
|
||||
lastReleaseVersion: 0.9.1
|
||||
|
|
|
@ -1,5 +1,5 @@
|
|||
name: codeql/csharp-all
|
||||
version: 0.9.1-dev
|
||||
version: 0.9.1
|
||||
groups: csharp
|
||||
dbscheme: semmlecode.csharp.dbscheme
|
||||
extractor: csharp
|
||||
|
|
|
@ -1,3 +1,7 @@
|
|||
## 0.8.14
|
||||
|
||||
No user-facing changes.
|
||||
|
||||
## 0.8.13
|
||||
|
||||
### Major Analysis Improvements
|
||||
|
|
|
@ -0,0 +1,3 @@
|
|||
## 0.8.14
|
||||
|
||||
No user-facing changes.
|
|
@ -1,2 +1,2 @@
|
|||
---
|
||||
lastReleaseVersion: 0.8.13
|
||||
lastReleaseVersion: 0.8.14
|
||||
|
|
|
@ -1,5 +1,5 @@
|
|||
name: codeql/csharp-queries
|
||||
version: 0.8.14-dev
|
||||
version: 0.8.14
|
||||
groups:
|
||||
- csharp
|
||||
- queries
|
||||
|
|
|
@ -1,3 +1,7 @@
|
|||
## 0.0.13
|
||||
|
||||
No user-facing changes.
|
||||
|
||||
## 0.0.12
|
||||
|
||||
No user-facing changes.
|
||||
|
|
|
@ -0,0 +1,3 @@
|
|||
## 0.0.13
|
||||
|
||||
No user-facing changes.
|
|
@ -1,2 +1,2 @@
|
|||
---
|
||||
lastReleaseVersion: 0.0.12
|
||||
lastReleaseVersion: 0.0.13
|
||||
|
|
|
@ -1,5 +1,5 @@
|
|||
name: codeql-go-consistency-queries
|
||||
version: 0.0.13-dev
|
||||
version: 0.0.13
|
||||
groups:
|
||||
- go
|
||||
- queries
|
||||
|
|
|
@ -1,3 +1,10 @@
|
|||
## 0.7.14
|
||||
|
||||
### Minor Analysis Improvements
|
||||
|
||||
* Data flow through variables declared in statements of the form `x := y.(type)` at the beginning of type switches has been fixed, which may result in more alerts.
|
||||
* Added strings.ReplaceAll, http.ParseMultipartForm sanitizers and remove path sanitizer.
|
||||
|
||||
## 0.7.13
|
||||
|
||||
### Minor Analysis Improvements
|
||||
|
|
|
@ -1,4 +0,0 @@
|
|||
---
|
||||
category: minorAnalysis
|
||||
---
|
||||
* Added strings.ReplaceAll, http.ParseMultipartForm sanitizers and remove path sanitizer.
|
|
@ -1,4 +1,6 @@
|
|||
---
|
||||
category: minorAnalysis
|
||||
---
|
||||
## 0.7.14
|
||||
|
||||
### Minor Analysis Improvements
|
||||
|
||||
* Data flow through variables declared in statements of the form `x := y.(type)` at the beginning of type switches has been fixed, which may result in more alerts.
|
||||
* Added strings.ReplaceAll, http.ParseMultipartForm sanitizers and remove path sanitizer.
|
|
@ -1,2 +1,2 @@
|
|||
---
|
||||
lastReleaseVersion: 0.7.13
|
||||
lastReleaseVersion: 0.7.14
|
||||
|
|
|
@ -1,5 +1,5 @@
|
|||
name: codeql/go-all
|
||||
version: 0.7.14-dev
|
||||
version: 0.7.14
|
||||
groups: go
|
||||
dbscheme: go.dbscheme
|
||||
extractor: go
|
||||
|
|
|
@ -1,3 +1,7 @@
|
|||
## 0.7.14
|
||||
|
||||
No user-facing changes.
|
||||
|
||||
## 0.7.13
|
||||
|
||||
### New Queries
|
||||
|
|
|
@ -0,0 +1,3 @@
|
|||
## 0.7.14
|
||||
|
||||
No user-facing changes.
|
|
@ -1,2 +1,2 @@
|
|||
---
|
||||
lastReleaseVersion: 0.7.13
|
||||
lastReleaseVersion: 0.7.14
|
||||
|
|
|
@ -1,5 +1,5 @@
|
|||
name: codeql/go-queries
|
||||
version: 0.7.14-dev
|
||||
version: 0.7.14
|
||||
groups:
|
||||
- go
|
||||
- queries
|
||||
|
|
|
@ -1,3 +1,7 @@
|
|||
## 0.0.21
|
||||
|
||||
No user-facing changes.
|
||||
|
||||
## 0.0.20
|
||||
|
||||
No user-facing changes.
|
||||
|
|
|
@ -0,0 +1,3 @@
|
|||
## 0.0.21
|
||||
|
||||
No user-facing changes.
|
|
@ -1,2 +1,2 @@
|
|||
---
|
||||
lastReleaseVersion: 0.0.20
|
||||
lastReleaseVersion: 0.0.21
|
||||
|
|
|
@ -1,5 +1,5 @@
|
|||
name: codeql/java-automodel-queries
|
||||
version: 0.0.21-dev
|
||||
version: 0.0.21
|
||||
groups:
|
||||
- java
|
||||
- automodel
|
||||
|
|
|
@ -1,3 +1,9 @@
|
|||
## 0.9.1
|
||||
|
||||
### Minor Analysis Improvements
|
||||
|
||||
* About 6,700 summary models and 6,800 neutral summary models for the JDK that were generated using data flow have been added. This may lead to new alerts being reported.
|
||||
|
||||
## 0.9.0
|
||||
|
||||
### Breaking Changes
|
||||
|
|
|
@ -1,4 +1,5 @@
|
|||
---
|
||||
category: minorAnalysis
|
||||
---
|
||||
## 0.9.1
|
||||
|
||||
### Minor Analysis Improvements
|
||||
|
||||
* About 6,700 summary models and 6,800 neutral summary models for the JDK that were generated using data flow have been added. This may lead to new alerts being reported.
|
|
@ -1,2 +1,2 @@
|
|||
---
|
||||
lastReleaseVersion: 0.9.0
|
||||
lastReleaseVersion: 0.9.1
|
||||
|
|
|
@ -1,5 +1,5 @@
|
|||
name: codeql/java-all
|
||||
version: 0.9.1-dev
|
||||
version: 0.9.1
|
||||
groups: java
|
||||
dbscheme: config/semmlecode.dbscheme
|
||||
extractor: java
|
||||
|
|
|
@ -1,3 +1,10 @@
|
|||
## 0.8.14
|
||||
|
||||
### Minor Analysis Improvements
|
||||
|
||||
* The `java/unknown-javadoc-parameter` now accepts `@param` tags that apply to the parameters of a
|
||||
record.
|
||||
|
||||
## 0.8.13
|
||||
|
||||
### New Queries
|
||||
|
|
|
@ -1,5 +1,6 @@
|
|||
---
|
||||
category: minorAnalysis
|
||||
---
|
||||
## 0.8.14
|
||||
|
||||
### Minor Analysis Improvements
|
||||
|
||||
* The `java/unknown-javadoc-parameter` now accepts `@param` tags that apply to the parameters of a
|
||||
record.
|
|
@ -1,2 +1,2 @@
|
|||
---
|
||||
lastReleaseVersion: 0.8.13
|
||||
lastReleaseVersion: 0.8.14
|
||||
|
|
|
@ -1,5 +1,5 @@
|
|||
name: codeql/java-queries
|
||||
version: 0.8.14-dev
|
||||
version: 0.8.14
|
||||
groups:
|
||||
- java
|
||||
- queries
|
||||
|
|
|
@ -1,3 +1,7 @@
|
|||
## 0.8.14
|
||||
|
||||
No user-facing changes.
|
||||
|
||||
## 0.8.13
|
||||
|
||||
### Major Analysis Improvements
|
||||
|
|
|
@ -0,0 +1,3 @@
|
|||
## 0.8.14
|
||||
|
||||
No user-facing changes.
|
|
@ -1,2 +1,2 @@
|
|||
---
|
||||
lastReleaseVersion: 0.8.13
|
||||
lastReleaseVersion: 0.8.14
|
||||
|
|
|
@ -1,5 +1,5 @@
|
|||
name: codeql/javascript-all
|
||||
version: 0.8.14-dev
|
||||
version: 0.8.14
|
||||
groups: javascript
|
||||
dbscheme: semmlecode.javascript.dbscheme
|
||||
extractor: javascript
|
||||
|
|
|
@ -1,3 +1,10 @@
|
|||
## 0.8.14
|
||||
|
||||
### Minor Analysis Improvements
|
||||
|
||||
* `API::Node#getInstance()` now includes instances of subclasses, include transitive subclasses.
|
||||
The same changes applies to uses of the `Instance` token in data extensions.
|
||||
|
||||
## 0.8.13
|
||||
|
||||
### Query Metadata Changes
|
||||
|
|
|
@ -1,5 +1,6 @@
|
|||
---
|
||||
category: minorAnalysis
|
||||
---
|
||||
## 0.8.14
|
||||
|
||||
### Minor Analysis Improvements
|
||||
|
||||
* `API::Node#getInstance()` now includes instances of subclasses, include transitive subclasses.
|
||||
The same changes applies to uses of the `Instance` token in data extensions.
|
|
@ -1,2 +1,2 @@
|
|||
---
|
||||
lastReleaseVersion: 0.8.13
|
||||
lastReleaseVersion: 0.8.14
|
||||
|
|
|
@ -1,5 +1,5 @@
|
|||
name: codeql/javascript-queries
|
||||
version: 0.8.14-dev
|
||||
version: 0.8.14
|
||||
groups:
|
||||
- javascript
|
||||
- queries
|
||||
|
|
|
@ -1,3 +1,7 @@
|
|||
## 0.7.14
|
||||
|
||||
No user-facing changes.
|
||||
|
||||
## 0.7.13
|
||||
|
||||
No user-facing changes.
|
||||
|
|
|
@ -0,0 +1,3 @@
|
|||
## 0.7.14
|
||||
|
||||
No user-facing changes.
|
|
@ -1,2 +1,2 @@
|
|||
---
|
||||
lastReleaseVersion: 0.7.13
|
||||
lastReleaseVersion: 0.7.14
|
||||
|
|
|
@ -1,4 +1,4 @@
|
|||
name: codeql/suite-helpers
|
||||
version: 0.7.14-dev
|
||||
version: 0.7.14
|
||||
groups: shared
|
||||
warnOnImplicitThis: true
|
||||
|
|
|
@ -1,3 +1,9 @@
|
|||
## 0.11.14
|
||||
|
||||
### Minor Analysis Improvements
|
||||
|
||||
* Improved the type-tracking capabilities (and therefore also API graphs) to allow tracking items in tuples and dictionaries.
|
||||
|
||||
## 0.11.13
|
||||
|
||||
No user-facing changes.
|
||||
|
|
|
@ -1,4 +1,5 @@
|
|||
---
|
||||
category: minorAnalysis
|
||||
---
|
||||
## 0.11.14
|
||||
|
||||
### Minor Analysis Improvements
|
||||
|
||||
* Improved the type-tracking capabilities (and therefore also API graphs) to allow tracking items in tuples and dictionaries.
|
|
@ -1,2 +1,2 @@
|
|||
---
|
||||
lastReleaseVersion: 0.11.13
|
||||
lastReleaseVersion: 0.11.14
|
||||
|
|
|
@ -1,5 +1,5 @@
|
|||
name: codeql/python-all
|
||||
version: 0.11.14-dev
|
||||
version: 0.11.14
|
||||
groups: python
|
||||
dbscheme: semmlecode.python.dbscheme
|
||||
extractor: python
|
||||
|
|
|
@ -1,3 +1,7 @@
|
|||
## 0.9.14
|
||||
|
||||
No user-facing changes.
|
||||
|
||||
## 0.9.13
|
||||
|
||||
No user-facing changes.
|
||||
|
|
|
@ -0,0 +1,3 @@
|
|||
## 0.9.14
|
||||
|
||||
No user-facing changes.
|
|
@ -1,2 +1,2 @@
|
|||
---
|
||||
lastReleaseVersion: 0.9.13
|
||||
lastReleaseVersion: 0.9.14
|
||||
|
|
|
@ -1,5 +1,5 @@
|
|||
name: codeql/python-queries
|
||||
version: 0.9.14-dev
|
||||
version: 0.9.14
|
||||
groups:
|
||||
- python
|
||||
- queries
|
||||
|
|
|
@ -1,3 +1,7 @@
|
|||
## 0.8.14
|
||||
|
||||
No user-facing changes.
|
||||
|
||||
## 0.8.13
|
||||
|
||||
### Minor Analysis Improvements
|
||||
|
|
|
@ -0,0 +1,3 @@
|
|||
## 0.8.14
|
||||
|
||||
No user-facing changes.
|
|
@ -1,2 +1,2 @@
|
|||
---
|
||||
lastReleaseVersion: 0.8.13
|
||||
lastReleaseVersion: 0.8.14
|
||||
|
|
|
@ -1,5 +1,5 @@
|
|||
name: codeql/ruby-all
|
||||
version: 0.8.14-dev
|
||||
version: 0.8.14
|
||||
groups: ruby
|
||||
extractor: ruby
|
||||
dbscheme: ruby.dbscheme
|
||||
|
|
|
@ -1,3 +1,10 @@
|
|||
## 0.8.14
|
||||
|
||||
### New Queries
|
||||
|
||||
* Added a new query, `rb/insecure-mass-assignment`, for finding instances of mass assignment operations accepting arbitrary parameters from remote user input.
|
||||
* Added a new query, `rb/csrf-protection-not-enabled`, to detect cases where Cross-Site Request Forgery protection is not enabled in Ruby on Rails controllers.
|
||||
|
||||
## 0.8.13
|
||||
|
||||
No user-facing changes.
|
||||
|
|
|
@ -1,4 +0,0 @@
|
|||
---
|
||||
category: newQuery
|
||||
---
|
||||
* Added a new query, `rb/csrf-protection-not-enabled`, to detect cases where Cross-Site Request Forgery protection is not enabled in Ruby on Rails controllers.
|
|
@ -1,4 +0,0 @@
|
|||
---
|
||||
category: newQuery
|
||||
---
|
||||
* Added a new query, `rb/insecure-mass-assignment`, for finding instances of mass assignment operations accepting arbitrary parameters from remote user input.
|
|
@ -0,0 +1,6 @@
|
|||
## 0.8.14
|
||||
|
||||
### New Queries
|
||||
|
||||
* Added a new query, `rb/insecure-mass-assignment`, for finding instances of mass assignment operations accepting arbitrary parameters from remote user input.
|
||||
* Added a new query, `rb/csrf-protection-not-enabled`, to detect cases where Cross-Site Request Forgery protection is not enabled in Ruby on Rails controllers.
|
|
@ -1,2 +1,2 @@
|
|||
---
|
||||
lastReleaseVersion: 0.8.13
|
||||
lastReleaseVersion: 0.8.14
|
||||
|
|
|
@ -1,5 +1,5 @@
|
|||
name: codeql/ruby-queries
|
||||
version: 0.8.14-dev
|
||||
version: 0.8.14
|
||||
groups:
|
||||
- ruby
|
||||
- queries
|
||||
|
|
|
@ -1,3 +1,7 @@
|
|||
## 0.1.14
|
||||
|
||||
No user-facing changes.
|
||||
|
||||
## 0.1.13
|
||||
|
||||
No user-facing changes.
|
||||
|
|
|
@ -0,0 +1,3 @@
|
|||
## 0.1.14
|
||||
|
||||
No user-facing changes.
|
|
@ -1,2 +1,2 @@
|
|||
---
|
||||
lastReleaseVersion: 0.1.13
|
||||
lastReleaseVersion: 0.1.14
|
||||
|
|
|
@ -1,5 +1,5 @@
|
|||
name: codeql/controlflow
|
||||
version: 0.1.14-dev
|
||||
version: 0.1.14
|
||||
groups: shared
|
||||
library: true
|
||||
dependencies:
|
||||
|
|
|
@ -1,3 +1,9 @@
|
|||
## 0.2.5
|
||||
|
||||
### New Features
|
||||
|
||||
* The `PathGraph` result of a data flow computation has been augmented with model provenance information for each of the flow steps. Any qltests that include the edges relation in their output (for example, `.qlref`s that reference path-problem queries) will need to be have their expected output updated accordingly.
|
||||
|
||||
## 0.2.4
|
||||
|
||||
### Minor Analysis Improvements
|
||||
|
|
|
@ -1,4 +1,5 @@
|
|||
---
|
||||
category: feature
|
||||
---
|
||||
## 0.2.5
|
||||
|
||||
### New Features
|
||||
|
||||
* The `PathGraph` result of a data flow computation has been augmented with model provenance information for each of the flow steps. Any qltests that include the edges relation in their output (for example, `.qlref`s that reference path-problem queries) will need to be have their expected output updated accordingly.
|
|
@ -1,2 +1,2 @@
|
|||
---
|
||||
lastReleaseVersion: 0.2.4
|
||||
lastReleaseVersion: 0.2.5
|
||||
|
|
|
@ -1,5 +1,5 @@
|
|||
name: codeql/dataflow
|
||||
version: 0.2.5-dev
|
||||
version: 0.2.5
|
||||
groups: shared
|
||||
library: true
|
||||
dependencies:
|
||||
|
|
|
@ -1,3 +1,7 @@
|
|||
## 0.2.14
|
||||
|
||||
No user-facing changes.
|
||||
|
||||
## 0.2.13
|
||||
|
||||
No user-facing changes.
|
||||
|
|
|
@ -0,0 +1,3 @@
|
|||
## 0.2.14
|
||||
|
||||
No user-facing changes.
|
|
@ -1,2 +1,2 @@
|
|||
---
|
||||
lastReleaseVersion: 0.2.13
|
||||
lastReleaseVersion: 0.2.14
|
||||
|
|
|
@ -1,5 +1,5 @@
|
|||
name: codeql/mad
|
||||
version: 0.2.14-dev
|
||||
version: 0.2.14
|
||||
groups: shared
|
||||
library: true
|
||||
dependencies: null
|
||||
|
|
|
@ -1,3 +1,7 @@
|
|||
## 0.0.13
|
||||
|
||||
No user-facing changes.
|
||||
|
||||
## 0.0.12
|
||||
|
||||
No user-facing changes.
|
||||
|
|
|
@ -0,0 +1,3 @@
|
|||
## 0.0.13
|
||||
|
||||
No user-facing changes.
|
|
@ -1,2 +1,2 @@
|
|||
---
|
||||
lastReleaseVersion: 0.0.12
|
||||
lastReleaseVersion: 0.0.13
|
||||
|
|
|
@ -1,5 +1,5 @@
|
|||
name: codeql/rangeanalysis
|
||||
version: 0.0.13-dev
|
||||
version: 0.0.13
|
||||
groups: shared
|
||||
library: true
|
||||
dependencies:
|
||||
|
|
|
@ -1,3 +1,7 @@
|
|||
## 0.2.14
|
||||
|
||||
No user-facing changes.
|
||||
|
||||
## 0.2.13
|
||||
|
||||
No user-facing changes.
|
||||
|
|
|
@ -0,0 +1,3 @@
|
|||
## 0.2.14
|
||||
|
||||
No user-facing changes.
|
|
@ -1,2 +1,2 @@
|
|||
---
|
||||
lastReleaseVersion: 0.2.13
|
||||
lastReleaseVersion: 0.2.14
|
||||
|
|
|
@ -1,5 +1,5 @@
|
|||
name: codeql/regex
|
||||
version: 0.2.14-dev
|
||||
version: 0.2.14
|
||||
groups: shared
|
||||
library: true
|
||||
dependencies:
|
||||
|
|
|
@ -1,3 +1,7 @@
|
|||
## 0.2.14
|
||||
|
||||
No user-facing changes.
|
||||
|
||||
## 0.2.13
|
||||
|
||||
No user-facing changes.
|
||||
|
|
Некоторые файлы не были показаны из-за слишком большого количества измененных файлов Показать больше
Загрузка…
Ссылка в новой задаче