Merge pull request #17768 from github/post-release-prep/codeql-cli-2.19.2

Post-release preparation for codeql-cli-2.19.2
This commit is contained in:
Arthur Baars 2024-10-15 15:33:42 +02:00 коммит произвёл GitHub
Родитель 1d9767a163 079ab77a38
Коммит bdec751527
Не найден ключ, соответствующий данной подписи
Идентификатор ключа GPG: B5690EEEBB952194
151 изменённых файлов: 358 добавлений и 124 удалений

Просмотреть файл

@ -1,3 +1,10 @@
## 2.0.2
### Minor Analysis Improvements
* Added taint flow model for `fopen` and related functions.
* The `SimpleRangeAnalysis` library (`semmle.code.cpp.rangeanalysis.SimpleRangeAnalysis`) now generates more precise ranges for calls to `fgetc` and `getc`.
## 2.0.1
No user-facing changes.

Просмотреть файл

@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* The `SimpleRangeAnalysis` library (`semmle.code.cpp.rangeanalysis.SimpleRangeAnalysis`) now generates more precise ranges for calls to `fgetc` and `getc`.

Просмотреть файл

@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* Added taint flow model for `fopen` and related functions.

Просмотреть файл

@ -0,0 +1,6 @@
## 2.0.2
### Minor Analysis Improvements
* Added taint flow model for `fopen` and related functions.
* The `SimpleRangeAnalysis` library (`semmle.code.cpp.rangeanalysis.SimpleRangeAnalysis`) now generates more precise ranges for calls to `fgetc` and `getc`.

Просмотреть файл

@ -1,2 +1,2 @@
---
lastReleaseVersion: 2.0.1
lastReleaseVersion: 2.0.2

Просмотреть файл

@ -1,5 +1,5 @@
name: codeql/cpp-all
version: 2.0.2-dev
version: 2.0.3-dev
groups: cpp
dbscheme: semmlecode.cpp.dbscheme
extractor: cpp

Просмотреть файл

@ -1,3 +1,12 @@
## 1.2.5
### Minor Analysis Improvements
* The `cpp/unclear-array-index-validation` ("Unclear validation of array index") query has been improved to reduce false positives and increase true positives.
* Fixed false positives in the `cpp/uninitialized-local` ("Potentially uninitialized local variable") query if there are extraction errors in the function.
* The `cpp/incorrect-string-type-conversion` query now produces fewer false positives caused by failure to detect byte arrays.
* The `cpp/incorrect-string-type-conversion` query now produces fewer false positives caused by failure to recognize dynamic checks prior to possible dangerous widening.
## 1.2.4
### Minor Analysis Improvements

Просмотреть файл

@ -1,5 +0,0 @@
---
category: minorAnalysis
---
* The `cpp/incorrect-string-type-conversion` query now produces fewer false positives caused by failure to detect byte arrays.
* The `cpp/incorrect-string-type-conversion` query now produces fewer false positives caused by failure to recognize dynamic checks prior to possible dangerous widening.

Просмотреть файл

@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* Fixed false positives in the `cpp/uninitialized-local` ("Potentially uninitialized local variable") query if there are extraction errors in the function.

Просмотреть файл

@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* The `cpp/unclear-array-index-validation` ("Unclear validation of array index") query has been improved to reduce false positives increase true positives.

Просмотреть файл

@ -0,0 +1,8 @@
## 1.2.5
### Minor Analysis Improvements
* The `cpp/unclear-array-index-validation` ("Unclear validation of array index") query has been improved to reduce false positives and increase true positives.
* Fixed false positives in the `cpp/uninitialized-local` ("Potentially uninitialized local variable") query if there are extraction errors in the function.
* The `cpp/incorrect-string-type-conversion` query now produces fewer false positives caused by failure to detect byte arrays.
* The `cpp/incorrect-string-type-conversion` query now produces fewer false positives caused by failure to recognize dynamic checks prior to possible dangerous widening.

Просмотреть файл

@ -1,2 +1,2 @@
---
lastReleaseVersion: 1.2.4
lastReleaseVersion: 1.2.5

Просмотреть файл

@ -1,5 +1,5 @@
name: codeql/cpp-queries
version: 1.2.5-dev
version: 1.2.6-dev
groups:
- cpp
- queries

Просмотреть файл

@ -1,3 +1,7 @@
## 1.7.27
No user-facing changes.
## 1.7.26
No user-facing changes.

Просмотреть файл

@ -0,0 +1,3 @@
## 1.7.27
No user-facing changes.

Просмотреть файл

@ -1,2 +1,2 @@
---
lastReleaseVersion: 1.7.26
lastReleaseVersion: 1.7.27

Просмотреть файл

@ -1,5 +1,5 @@
name: codeql/csharp-solorigate-all
version: 1.7.27-dev
version: 1.7.28-dev
groups:
- csharp
- solorigate

Просмотреть файл

@ -1,3 +1,7 @@
## 1.7.27
No user-facing changes.
## 1.7.26
No user-facing changes.

Просмотреть файл

@ -0,0 +1,3 @@
## 1.7.27
No user-facing changes.

Просмотреть файл

@ -1,2 +1,2 @@
---
lastReleaseVersion: 1.7.26
lastReleaseVersion: 1.7.27

Просмотреть файл

@ -1,5 +1,5 @@
name: codeql/csharp-solorigate-queries
version: 1.7.27-dev
version: 1.7.28-dev
groups:
- csharp
- solorigate

Просмотреть файл

@ -1,3 +1,7 @@
## 3.0.1
No user-facing changes.
## 3.0.0
### Breaking Changes

Просмотреть файл

@ -0,0 +1,3 @@
## 3.0.1
No user-facing changes.

Просмотреть файл

@ -1,2 +1,2 @@
---
lastReleaseVersion: 3.0.0
lastReleaseVersion: 3.0.1

Просмотреть файл

@ -1,5 +1,5 @@
name: codeql/csharp-all
version: 3.0.1-dev
version: 3.0.2-dev
groups: csharp
dbscheme: semmlecode.csharp.dbscheme
extractor: csharp

Просмотреть файл

@ -1,3 +1,7 @@
## 1.0.10
No user-facing changes.
## 1.0.9
### Minor Analysis Improvements

Просмотреть файл

@ -0,0 +1,3 @@
## 1.0.10
No user-facing changes.

Просмотреть файл

@ -1,2 +1,2 @@
---
lastReleaseVersion: 1.0.9
lastReleaseVersion: 1.0.10

Просмотреть файл

@ -1,5 +1,5 @@
name: codeql/csharp-queries
version: 1.0.10-dev
version: 1.0.11-dev
groups:
- csharp
- queries

Просмотреть файл

@ -101,7 +101,7 @@
latest version of CodeQL...</div>
</div>
<div class="Subhead border-0">
<a href="query-help/codeql-cwe-coverage/">
<a href="../codeql-query-help/codeql-cwe-coverage/">
<div class="Subhead-heading f4 text-center">CodeQL coverage of CWEs</div>
</a>
<div class="Subhead-description">Detailed information on the coverage of Common Weakness Enumerations (CWEs) in the latest release...</div>

Просмотреть файл

@ -1,3 +1,7 @@
## 1.0.10
No user-facing changes.
## 1.0.9
No user-facing changes.

Просмотреть файл

@ -0,0 +1,3 @@
## 1.0.10
No user-facing changes.

Просмотреть файл

@ -1,2 +1,2 @@
---
lastReleaseVersion: 1.0.9
lastReleaseVersion: 1.0.10

Просмотреть файл

@ -1,5 +1,5 @@
name: codeql-go-consistency-queries
version: 1.0.10-dev
version: 1.0.11-dev
groups:
- go
- queries

Просмотреть файл

@ -1,3 +1,11 @@
## 2.1.1
### Minor Analysis Improvements
* Added member predicates `StructTag.hasOwnFieldWithTag` and `Field.getTag`, which enable CodeQL queries to examine struct field tags.
* Added member predicate `InterfaceType.hasPrivateMethodWithQualifiedName`, which enables CodeQL queries to distinguish interfaces with matching non-exported method names that are declared in different packages, and are therefore incompatible.
* Local source models with the `stdin` source kind have been added for the variable `os.Stdin` and the functions `fmt.Scan`, `fmt.Scanf` and `fmt.Scanln`. You can optionally include threat models as appropriate when using the CodeQL CLI and in GitHub code scanning. For more information, see [Analyzing your code with CodeQL queries](https://docs.github.com/code-security/codeql-cli/getting-started-with-the-codeql-cli/analyzing-your-code-with-codeql-queries#including-model-packs-to-add-potential-sources-of-tainted-data>) and [Customizing your advanced setup for code scanning](https://docs.github.com/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/customizing-your-advanced-setup-for-code-scanning#extending-codeql-coverage-with-threat-models).
## 2.1.0
### Deprecated APIs

Просмотреть файл

@ -1,5 +0,0 @@
---
category: minorAnalysis
---
* Added member predicates `StructTag.hasOwnFieldWithTag` and `Field.getTag`, which enable CodeQL queries to examine struct field tags.
* Added member predicate `InterfaceType.hasPrivateMethodWithQualifiedName`, which enables CodeQL queries to distinguish interfaces with matching non-exported method names that are declared in different packages, and are therefore incompatible.

Просмотреть файл

@ -1,4 +1,7 @@
---
category: minorAnalysis
---
## 2.1.1
### Minor Analysis Improvements
* Added member predicates `StructTag.hasOwnFieldWithTag` and `Field.getTag`, which enable CodeQL queries to examine struct field tags.
* Added member predicate `InterfaceType.hasPrivateMethodWithQualifiedName`, which enables CodeQL queries to distinguish interfaces with matching non-exported method names that are declared in different packages, and are therefore incompatible.
* Local source models with the `stdin` source kind have been added for the variable `os.Stdin` and the functions `fmt.Scan`, `fmt.Scanf` and `fmt.Scanln`. You can optionally include threat models as appropriate when using the CodeQL CLI and in GitHub code scanning. For more information, see [Analyzing your code with CodeQL queries](https://docs.github.com/code-security/codeql-cli/getting-started-with-the-codeql-cli/analyzing-your-code-with-codeql-queries#including-model-packs-to-add-potential-sources-of-tainted-data>) and [Customizing your advanced setup for code scanning](https://docs.github.com/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/customizing-your-advanced-setup-for-code-scanning#extending-codeql-coverage-with-threat-models).

Просмотреть файл

@ -1,2 +1,2 @@
---
lastReleaseVersion: 2.1.0
lastReleaseVersion: 2.1.1

Просмотреть файл

@ -1,5 +1,5 @@
name: codeql/go-all
version: 2.1.1-dev
version: 2.1.2-dev
groups: go
dbscheme: go.dbscheme
extractor: go

Просмотреть файл

@ -1,3 +1,7 @@
## 1.1.1
No user-facing changes.
## 1.1.0
### Query Metadata Changes

Просмотреть файл

@ -0,0 +1,3 @@
## 1.1.1
No user-facing changes.

Просмотреть файл

@ -1,2 +1,2 @@
---
lastReleaseVersion: 1.1.0
lastReleaseVersion: 1.1.1

Просмотреть файл

@ -1,5 +1,5 @@
name: codeql/go-queries
version: 1.1.1-dev
version: 1.1.2-dev
groups:
- go
- queries

Просмотреть файл

@ -1,3 +1,7 @@
## 1.0.10
No user-facing changes.
## 1.0.9
No user-facing changes.

Просмотреть файл

@ -0,0 +1,3 @@
## 1.0.10
No user-facing changes.

Просмотреть файл

@ -1,2 +1,2 @@
---
lastReleaseVersion: 1.0.9
lastReleaseVersion: 1.0.10

Просмотреть файл

@ -1,5 +1,5 @@
name: codeql/java-automodel-queries
version: 1.0.10-dev
version: 1.0.11-dev
groups:
- java
- automodel

Просмотреть файл

@ -1,3 +1,7 @@
## 4.1.1
No user-facing changes.
## 4.1.0
### Deprecated APIs

Просмотреть файл

@ -0,0 +1,3 @@
## 4.1.1
No user-facing changes.

Просмотреть файл

@ -1,2 +1,2 @@
---
lastReleaseVersion: 4.1.0
lastReleaseVersion: 4.1.1

Просмотреть файл

@ -1,5 +1,5 @@
name: codeql/java-all
version: 4.1.1-dev
version: 4.1.2-dev
groups: java
dbscheme: config/semmlecode.dbscheme
extractor: java

Просмотреть файл

@ -1,3 +1,7 @@
## 1.1.7
No user-facing changes.
## 1.1.6
### Minor Analysis Improvements

Просмотреть файл

@ -0,0 +1,3 @@
## 1.1.7
No user-facing changes.

Просмотреть файл

@ -1,2 +1,2 @@
---
lastReleaseVersion: 1.1.6
lastReleaseVersion: 1.1.7

Просмотреть файл

@ -1,5 +1,5 @@
name: codeql/java-queries
version: 1.1.7-dev
version: 1.1.8-dev
groups:
- java
- queries

Просмотреть файл

@ -1,3 +1,7 @@
## 2.0.2
No user-facing changes.
## 2.0.1
No user-facing changes.

Просмотреть файл

@ -0,0 +1,3 @@
## 2.0.2
No user-facing changes.

Просмотреть файл

@ -1,2 +1,2 @@
---
lastReleaseVersion: 2.0.1
lastReleaseVersion: 2.0.2

Просмотреть файл

@ -1,5 +1,5 @@
name: codeql/javascript-all
version: 2.0.2-dev
version: 2.0.3-dev
groups: javascript
dbscheme: semmlecode.javascript.dbscheme
extractor: javascript

Просмотреть файл

@ -1,3 +1,7 @@
## 1.2.2
No user-facing changes.
## 1.2.1
No user-facing changes.

Просмотреть файл

@ -0,0 +1,3 @@
## 1.2.2
No user-facing changes.

Просмотреть файл

@ -1,2 +1,2 @@
---
lastReleaseVersion: 1.2.1
lastReleaseVersion: 1.2.2

Просмотреть файл

@ -1,5 +1,5 @@
name: codeql/javascript-queries
version: 1.2.2-dev
version: 1.2.3-dev
groups:
- javascript
- queries

Просмотреть файл

@ -1,3 +1,7 @@
## 1.0.10
No user-facing changes.
## 1.0.9
No user-facing changes.

Просмотреть файл

@ -0,0 +1,3 @@
## 1.0.10
No user-facing changes.

Просмотреть файл

@ -1,2 +1,2 @@
---
lastReleaseVersion: 1.0.9
lastReleaseVersion: 1.0.10

Просмотреть файл

@ -1,4 +1,4 @@
name: codeql/suite-helpers
version: 1.0.10-dev
version: 1.0.11-dev
groups: shared
warnOnImplicitThis: true

Просмотреть файл

@ -1,3 +1,13 @@
## 2.1.1
### Minor Analysis Improvements
* Modelled that `re.finditer` returns an iterable of `re.Match` objects. This is now understood by the API graph in many cases.
* Type tracking, and hence the API graph, is now able to correctly trace through comprehensions.
* More precise modelling of the dataflow through comprehensions. In particular, captured variables are now handled correctly.
* Dataflow out of yield is added, allowing proper tracing through generators.
* Added several models of standard library functions and classes, in anticipation of no longer extracting the standard library in a future release.
## 2.1.0
### New Features

Просмотреть файл

@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* Added several models of standard library functions and classes, in anticipation of no longer extracting the standard library in a future release.

Просмотреть файл

@ -1,5 +0,0 @@
---
category: minorAnalysis
---
* More precise modelling of the dataflow through comprehensions. In particular, captured variables are now handled correctly.
* Dataflow out of yield is added, allowing proper tracing through generators.

Просмотреть файл

@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* Type tracking, and hence the API graph, is now able to correctly trace trough comprehensions.

Просмотреть файл

@ -1,4 +0,0 @@
---
category: minorAnalysis
---
* Modelled that `re.finditer` returns an iterable of `re.Match` objects. This is now understood by the API graph in many cases.

Просмотреть файл

@ -0,0 +1,9 @@
## 2.1.1
### Minor Analysis Improvements
* Modelled that `re.finditer` returns an iterable of `re.Match` objects. This is now understood by the API graph in many cases.
* Type tracking, and hence the API graph, is now able to correctly trace through comprehensions.
* More precise modelling of the dataflow through comprehensions. In particular, captured variables are now handled correctly.
* Dataflow out of yield is added, allowing proper tracing through generators.
* Added several models of standard library functions and classes, in anticipation of no longer extracting the standard library in a future release.

Просмотреть файл

@ -1,2 +1,2 @@
---
lastReleaseVersion: 2.1.0
lastReleaseVersion: 2.1.1

Просмотреть файл

@ -1,5 +1,5 @@
name: codeql/python-all
version: 2.1.1-dev
version: 2.1.2-dev
groups: python
dbscheme: semmlecode.python.dbscheme
extractor: python

Просмотреть файл

@ -1,8 +1,12 @@
## 1.3.1
No user-facing changes.
## 1.3.0
### New Queries
* The `py/cors-misconfiguration-with-credentials` query, which finds insecure CORS middleware configurations.
* The experimental `py/cors-misconfiguration-with-credentials` query, which finds insecure CORS middleware configurations.
## 1.2.2

Просмотреть файл

@ -0,0 +1,3 @@
## 1.3.1
No user-facing changes.

Просмотреть файл

@ -1,2 +1,2 @@
---
lastReleaseVersion: 1.3.0
lastReleaseVersion: 1.3.1

Просмотреть файл

@ -1,5 +1,5 @@
name: codeql/python-queries
version: 1.3.1-dev
version: 1.3.2-dev
groups:
- python
- queries

Просмотреть файл

@ -1,3 +1,9 @@
## 2.0.2
### Minor Analysis Improvements
* The `ExtractionError` class has been split into `ExtractionError` and `ExtractionWarning`, reporting extraction errors and warnings respectively.
## 2.0.1
No user-facing changes.

Просмотреть файл

@ -1,4 +1,5 @@
---
category: minorAnalysis
---
## 2.0.2
### Minor Analysis Improvements
* The `ExtractionError` class has been split into `ExtractionError` and `ExtractionWarning`, reporting extraction errors and warnings respectively.

Просмотреть файл

@ -1,2 +1,2 @@
---
lastReleaseVersion: 2.0.1
lastReleaseVersion: 2.0.2

Просмотреть файл

@ -1,5 +1,5 @@
name: codeql/ruby-all
version: 2.0.2-dev
version: 2.0.3-dev
groups: ruby
extractor: ruby
dbscheme: ruby.dbscheme

Просмотреть файл

@ -1,3 +1,9 @@
## 1.1.5
### Minor Analysis Improvements
* The `rb/diagnostics/extraction-errors` diagnostic query has been split into `rb/diagnostics/extraction-errors` and `rb/diagnostics/extraction-warnings`, counting extraction errors and warnings respectively.
## 1.1.4
No user-facing changes.

Просмотреть файл

@ -1,4 +1,5 @@
---
category: minorAnalysis
---
## 1.1.5
### Minor Analysis Improvements
* The `rb/diagnostics/extraction-errors` diagnostic query has been split into `rb/diagnostics/extraction-errors` and `rb/diagnostics/extraction-warnings`, counting extraction errors and warnings respectively.

Просмотреть файл

@ -1,2 +1,2 @@
---
lastReleaseVersion: 1.1.4
lastReleaseVersion: 1.1.5

Просмотреть файл

@ -1,5 +1,5 @@
name: codeql/ruby-queries
version: 1.1.5-dev
version: 1.1.6-dev
groups:
- ruby
- queries

Просмотреть файл

@ -1,3 +1,7 @@
## 1.0.10
No user-facing changes.
## 1.0.9
No user-facing changes.

Просмотреть файл

@ -0,0 +1,3 @@
## 1.0.10
No user-facing changes.

Просмотреть файл

@ -1,2 +1,2 @@
---
lastReleaseVersion: 1.0.9
lastReleaseVersion: 1.0.10

Просмотреть файл

@ -1,5 +1,5 @@
name: codeql/controlflow
version: 1.0.10-dev
version: 1.0.11-dev
groups: shared
library: true
dependencies:

Просмотреть файл

@ -1,3 +1,7 @@
## 1.1.4
No user-facing changes.
## 1.1.3
No user-facing changes.

Просмотреть файл

@ -0,0 +1,3 @@
## 1.1.4
No user-facing changes.

Просмотреть файл

@ -1,2 +1,2 @@
---
lastReleaseVersion: 1.1.3
lastReleaseVersion: 1.1.4

Просмотреть файл

@ -1,5 +1,5 @@
name: codeql/dataflow
version: 1.1.4-dev
version: 1.1.5-dev
groups: shared
library: true
dependencies:

Просмотреть файл

@ -1,3 +1,7 @@
## 1.0.10
No user-facing changes.
## 1.0.9
No user-facing changes.

Просмотреть файл

@ -0,0 +1,3 @@
## 1.0.10
No user-facing changes.

Просмотреть файл

@ -1,2 +1,2 @@
---
lastReleaseVersion: 1.0.9
lastReleaseVersion: 1.0.10

Просмотреть файл

@ -1,5 +1,5 @@
name: codeql/mad
version: 1.0.10-dev
version: 1.0.11-dev
groups: shared
library: true
dependencies:

Просмотреть файл

@ -1,3 +1,7 @@
## 1.0.10
No user-facing changes.
## 1.0.9
No user-facing changes.

Некоторые файлы не были показаны из-за слишком большого количества измененных файлов Показать больше